joyce8/EMBER2024-capa huggingface dataset:
Function at 0x418517
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4244], 1
jne 0x41853b
or dword [0x4a4244], 1
mov dword [0x4a1350], 0xffffe9e1
mov dword [0x4a1354], 0x8ce9ebed
xor eax, eax
mov cl, byte [eax + 0x4a1350]
xor cl, 0x8c
mov byte [eax + 0x4a1640], cl
inc eax
cmp eax, 8
jb 0x41853d
mov eax, 0x4a1640
ret

Function at 0x4190ed
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a423c], 1
mov ecx, 0x9f8c
jne 0x41912e
or dword [0x4a423c], 1
lea eax, [ecx + 0x16]
mov word [0x4a1360], ax
add eax, 0x3e
mov word [0x4a1362], ax
lea eax, [ecx + 0x56]
mov word [0x4a1364], ax
add eax, 5
mov word [0x4a1366], ax
mov eax, ecx
mov word [0x4a1368], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4a1360]
add eax, 2
mov word [eax + 0x4a164e], dx
cmp eax, 0xa
jb 0x419130
mov eax, 0x4a1650
ret

Function at 0x41914e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4238], 1
mov ecx, 0x9f8c
jne 0x41918f
or dword [0x4a4238], 1
lea eax, [ecx + 0x16]
mov word [0x4a136c], ax
add eax, 0x3e
mov word [0x4a136e], ax
lea eax, [ecx + 0x56]
mov word [0x4a1370], ax
add eax, 5
mov word [0x4a1372], ax
mov eax, ecx
mov word [0x4a1374], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4a136c]
add eax, 2
mov word [eax + 0x4a165a], dx
cmp eax, 0xa
jb 0x419191
mov eax, 0x4a165c
ret

Function at 0x419750
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4234], 1
jne 0x4197a3
or dword [0x4a4234], 1
mov dword [0x4a1378], 0xc0f8e9cb
mov dword [0x4a137c], 0xe0edefe3
mov dword [0x4a1380], 0xeae2c5e9
mov dword [0x4a1384], 0xaca5a4e3
mov dword [0x4a1388], 0xe0e5edea
mov dword [0x4a138c], 0xacb6e8e9
mov byte [0x4a1390], 0x8c
xor eax, eax
mov cl, byte [eax + 0x4a1378]
xor cl, 0x8c
mov byte [eax + 0x4a1668], cl
inc eax
cmp eax, 0x19
jb 0x4197a5
mov eax, 0x4a1668
ret

Function at 0x4199bd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4230], 1
jne 0x419a5a
or dword [0x4a4230], 1
mov dword [0x4a1394], 0xfecfc0c5
mov dword [0x4a1398], 0xe9f8ede9
mov dword [0x4a139c], 0xe1e3feca
mov dword [0x4a13a0], 0xe4f8eddc
mov dword [0x4a13a4], 0xe5edeaac
mov dword [0x4a13a8], 0xb6e8e9e0
mov dword [0x4a13ac], 0xf8e9feac
mov dword [0x4a13b0], 0xe9e2fef9
mov dword [0x4a13b4], 0xe2edace8
mov dword [0x4a13b8], 0xfce1e9ac
mov dword [0x4a13bc], 0xe5acf5f8
mov dword [0x4a13c0], 0xace1e9f8
mov dword [0x4a13c4], 0xf8ffe5e0
mov byte [0x4a13c8], 0x8c
xor eax, eax
mov cl, byte [eax + 0x4a1394]
xor cl, 0x8c
mov byte [eax + 0x4a1684], cl
inc eax
cmp eax, 0x35
jb 0x419a5c
mov eax, 0x4a1684
ret

Function at 0x419a77
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a422c], 1
jne 0x419ae1
or dword [0x4a422c], 1
mov dword [0x4a13cc], 0xfcc3c4df
mov dword [0x4a13d0], 0xe3cae2e9
mov dword [0x4a13d4], 0xfee9e8e0
mov dword [0x4a13d8], 0xdfe8e2cd
mov dword [0x4a13dc], 0xefe9e0e9
mov dword [0x4a13e0], 0xe9f8c5f8
mov dword [0x4a13e4], 0xeaacffe1
mov dword [0x4a13e8], 0xe9e0e5ed
mov dword [0x4a13ec], 0x8cacb6e8
xor eax, eax
mov cl, byte [eax + 0x4a13cc]
xor cl, 0x8c
mov byte [eax + 0x4a16bc], cl
inc eax
cmp eax, 0x24
jb 0x419ae3
mov eax, 0x4a16bc
ret
Function at 0x419dbf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4220], 1
jne 0x419e1e
or dword [0x4a4220], 1
mov dword [0x4a1400], 0xdcf8e9cb
mov dword [0x4a1404], 0xedcffefb
mov dword [0x4a1408], 0xe5eeedfc
mov dword [0x4a140c], 0xe5f8e5e0
mov dword [0x4a1410], 0xa5a4ffe9
mov dword [0x4a1414], 0xe5edeaac
mov dword [0x4a1418], 0xb6e8e9e0
mov word [0x4a141c], 0x8cac
xor eax, eax
mov cl, byte [eax + 0x4a1400]
xor cl, 0x8c
mov byte [eax + 0x4a16f0], cl
inc eax
cmp eax, 0x1e
jb 0x419e20
mov eax, 0x4a16f0
ret

Function at 0x419e3b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4214], 1
jne 0x419eb2
or dword [0x4a4214], 1
or al, 0xff
mov byte [0x4a1434], 0xe5
mov byte [0x4a1435], al
mov dword [0x4a1436], 0xe3fefcd3
mov word [0x4a143a], 0xe9ef
mov byte [0x4a143c], al
mov byte [0x4a143d], al
mov dword [0x4a143e], 0xe2f9fed3
mov dword [0x4a1442], 0xebe2e5e2
mov word [0x4a1446], 0xedd3
mov byte [0x4a1448], al
mov dword [0x4a1449], 0xe1e8edd3
mov word [0x4a144d], 0xe2e5
mov byte [0x4a144f], 0x8c
xor eax, eax
mov cl, byte [eax + 0x4a1434]
xor cl, 0x8c
mov byte [eax + 0x4a1724], cl
inc eax
cmp eax, 0x1c
jb 0x419eb4
mov eax, 0x4a1724
ret

Function at 0x419ecf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4210], 1
jne 0x419f25
or dword [0x4a4210], 1
mov dword [0x4a1450], 0xefd3ffe5
mov dword [0x4a1454], 0xe9fefef9
mov dword [0x4a1458], 0xf9d3f8e2
mov dword [0x4a145c], 0xd3fee9ff
mov dword [0x4a1460], 0xedefe3e0
mov dword [0x4a1464], 0xe8edd3e0
mov dword [0x4a1468], 0x8ce2e5e1
xor eax, eax
mov cl, byte [eax + 0x4a1450]
xor cl, 0x8c
mov byte [eax + 0x4a1740], cl
inc eax
cmp eax, 0x1c
jb 0x419f27
mov eax, 0x4a1740
ret

Function at 0x419f42
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a41fc], 1
jne 0x419f94
or dword [0x4a41fc], 1
mov dword [0x4a14b4], 0xf8e5edfb
mov dword [0x4a14b8], 0xfee3ead3
mov dword [0x4a14bc], 0xe2e5ffd3
mov dword [0x4a14c0], 0xd3e9e0eb
mov dword [0x4a14c4], 0xe9e6eee3
mov word [0x4a14c8], 0xf8ef
mov byte [0x4a14ca], 0x8c
xor eax, eax
mov cl, byte [eax + 0x4a14b4]
xor cl, 0x8c
mov byte [eax + 0x4a17a4], cl
inc eax
cmp eax, 0x17
jb 0x419f96
mov eax, 0x4a17a4
ret

Function at 0x419fb3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a41c0], 1
jne 0x41a005
or dword [0x4a41c0], 1
mov dword [0x4a15a4], 0xd3f8e9eb
mov dword [0x4a15a8], 0xfefef9ef
mov dword [0x4a15ac], 0xd3f8e2e9
mov dword [0x4a15b0], 0xefe3fefc
mov dword [0x4a15b4], 0xd3ffffe9
mov word [0x4a15b8], 0xe8e5
mov byte [0x4a15ba], 0x8c
xor eax, eax
mov cl, byte [eax + 0x4a15a4]
xor cl, 0x8c
mov byte [eax + 0x4a1894], cl
inc eax
cmp eax, 0x17
jb 0x41a007
mov eax, 0x4a1894
ret
Function at 0x41a906
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a41b0], 1
mov ecx, 0x9f8d
jne 0x41a97b
or dword [0x4a41b0], 1
lea eax, [ecx + 0x54]
mov word [0x4a18e4], ax
add eax, 0x17
mov word [0x4a18e6], ax
lea eax, [ecx + 0x5f]
mov word [0x4a18e8], ax
add eax, 0xffffffe6
mov word [0x4a18ea], ax
lea eax, [ecx + 0x6d]
mov edx, eax
mov word [0x4a18ec], dx
add edx, 0xffffffea
mov word [0x4a18ee], dx
lea edx, [ecx + 0x56]
mov word [0x4a18f0], dx
add edx, 6
mov eax, ecx
mov word [0x4a18f2], dx
mov dword [0x4a18f4], 0x9ffa9fe2
mov word [0x4a18f8], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4a18e4]
add eax, 2
mov word [eax + 0x4a1b46], dx
cmp eax, 0x16
jb 0x41a97d
mov eax, 0x4a1b48
ret

Function at 0x41a99b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a41ac], 1
mov edx, 0x9f8d
jne 0x41aa3f
or dword [0x4a41ac], 1
lea ecx, [edx + 0x54]
mov eax, ecx
mov word [0x4a18fc], ax
add eax, 0x17
mov word [0x4a18fe], ax
lea eax, [edx + 0x5f]
mov word [0x4a1900], ax
add eax, 0xffffffe6
push esi
mov esi, eax
mov word [0x4a190c], ax
lea eax, [edx + 0x6d]
mov ecx, eax
mov word [0x4a190e], cx
add ecx, 0xffffffea
mov word [0x4a1902], si
lea esi, [edx + 0x58]
mov word [0x4a1910], cx
lea ecx, [edx + 0x56]
mov word [0x4a1904], si
add esi, 0x14
mov word [0x4a1912], cx
add ecx, 6
mov eax, edx
mov word [0x4a1906], si
mov dword [0x4a1908], 0x9fe19fe0
mov word [0x4a1914], cx
mov dword [0x4a1916], 0x9ffa9fe2
mov word [0x4a191a], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4a18fc]
add eax, 2
mov word [eax + 0x4a1b5e], cx
cmp eax, 0x20
jb 0x41aa41
mov eax, 0x4a1b60
ret

Function at 0x41abf3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a41a8], 1
jne 0x41ac55
or dword [0x4a41a8], 1
or al, 0xff
mov dword [0x4a191c], 0xadecf8c1
mov byte [0x4a1920], 0xe8
mov byte [0x4a1921], al
mov byte [0x4a1922], al
mov byte [0x4a1923], 0xe2
mov byte [0x4a1924], al
mov dword [0x4a1925], 0xade3e4ad
mov dword [0x4a1929], 0xfde9e3fa
mov byte [0x4a192d], al
mov word [0x4a192e], 0xeee2
mov byte [0x4a1930], 0x8d
xor eax, eax
mov cl, byte [eax + 0x4a191c]
xor cl, 0x8d
mov byte [eax + 0x4a1b80], cl
inc eax
cmp eax, 0x15
jb 0x41ac57
mov eax, 0x4a1b80
ret

Function at 0x41ce79
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4120], 1
jne 0x41ceba
or dword [0x4a4120], 1
mov dword [0x4a1dac], 0xf9aee1c0
mov dword [0x4a1db0], 0xe1eae0e7
mov dword [0x4a1db4], 0xe1edaef9
mov dword [0x4a1db8], 0xf6ebfae0
mov word [0x4a1dbc], 0x8efa
xor eax, eax
mov cl, byte [eax + 0x4a1dac]
xor cl, 0x8e
mov byte [eax + 0x4a2038], cl
inc eax
cmp eax, 0x12
jb 0x41cebc
mov eax, 0x4a2038
ret

Function at 0x41ced7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a411c], 1
jne 0x41cf18
or dword [0x4a411c], 1
mov dword [0x4a1dc0], 0xf9aee1c0
mov dword [0x4a1dc4], 0xe1eae0e7
mov dword [0x4a1dc8], 0xe1edaef9
mov dword [0x4a1dcc], 0xf6ebfae0
mov word [0x4a1dd0], 0x8efa
xor eax, eax
mov cl, byte [eax + 0x4a1dc0]
xor cl, 0x8e
mov byte [eax + 0x4a204c], cl
inc eax
cmp eax, 0x12
jb 0x41cf1a
mov eax, 0x4a204c
ret
Function at 0x41cf35
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4118], 1
jne 0x41cf7d
or dword [0x4a4118], 1
mov dword [0x4a1dd4], 0xecaee1c0
mov dword [0x4a1dd8], 0xfdf9e1fc
mov dword [0x4a1ddc], 0xedaefceb
mov dword [0x4a1de0], 0xebfae0e1
mov word [0x4a1de4], 0xfaf6
mov byte [0x4a1de6], 0x8e
xor eax, eax
mov cl, byte [eax + 0x4a1dd4]
xor cl, 0x8e
mov byte [eax + 0x4a2060], cl
inc eax
cmp eax, 0x13
jb 0x41cf7f
mov eax, 0x4a2060
ret

Function at 0x41cffe
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4114], 1
jne 0x41d03f
or dword [0x4a4114], 1
mov dword [0x4a1de8], 0xebaee1c0
mov dword [0x4a1dec], 0xebe3ebe2
mov dword [0x4a1df0], 0xe6aefae0
mov dword [0x4a1df4], 0xe2eae0ef
mov word [0x4a1df8], 0x8eeb
xor eax, eax
mov cl, byte [eax + 0x4a1de8]
xor cl, 0x8e
mov byte [eax + 0x4a2074], cl
inc eax
cmp eax, 0x12
jb 0x41d041
mov eax, 0x4a2074
ret

Function at 0x41d05c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4110], 1
jne 0x41d09d
or dword [0x4a4110], 1
mov dword [0x4a1dfc], 0xebaee1c0
mov dword [0x4a1e00], 0xebe3ebe2
mov dword [0x4a1e04], 0xe6aefae0
mov dword [0x4a1e08], 0xe2eae0ef
mov word [0x4a1e0c], 0x8eeb
xor eax, eax
mov cl, byte [eax + 0x4a1dfc]
xor cl, 0x8e
mov byte [eax + 0x4a2088], cl
inc eax
cmp eax, 0x12
jb 0x41d09f
mov eax, 0x4a2088
ret

Function at 0x41d1d7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a410c], 1
jne 0x41d20f
or dword [0x4a410c], 1
mov dword [0x4a1e10], 0xe7f8efc0
mov dword [0x4a1e14], 0xebfaefe9
mov dword [0x4a1e18], 0xe7efe8ae
mov dword [0x4a1e1c], 0x8eeaebe2
xor eax, eax
mov cl, byte [eax + 0x4a1e10]
xor cl, 0x8e
mov byte [eax + 0x4a209c], cl
inc eax
cmp eax, 0x10
jb 0x41d211
mov eax, 0x4a209c
ret

Function at 0x41d777
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4108], 1
jne 0x41d7c0
or dword [0x4a4108], 1
mov dword [0x4a1e20], 0xebaee1c0
mov dword [0x4a1e24], 0xebe3ebe2
mov dword [0x4a1e28], 0xf9aefae0
mov dword [0x4a1e2c], 0xaee6fae7
mov dword [0x4a1e30], 0xaeb4eae7
mov byte [0x4a1e34], 0x8e
xor eax, eax
mov cl, byte [eax + 0x4a1e20]
xor cl, 0x8e
mov byte [eax + 0x4a20ac], cl
inc eax
cmp eax, 0x15
jb 0x41d7c2
mov eax, 0x4a20ac
ret

Function at 0x41d8fc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4104], 1
jne 0x41d945
or dword [0x4a4104], 1
mov dword [0x4a1e38], 0xd1faebe9
mov dword [0x4a1e3c], 0xebe0e0e7
mov dword [0x4a1e40], 0xc3dac6fc
mov dword [0x4a1e44], 0xefe8aec2
mov dword [0x4a1e48], 0xeaebe2e7
mov byte [0x4a1e4c], 0x8e
xor eax, eax
mov cl, byte [eax + 0x4a1e38]
xor cl, 0x8e
mov byte [eax + 0x4a20c4], cl
inc eax
cmp eax, 0x15
jb 0x41d947
mov eax, 0x4a20c4
ret

Function at 0x41da81
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4100], 1
jne 0x41daca
or dword [0x4a4100], 1
mov dword [0x4a1e50], 0xd1faebe9
mov dword [0x4a1e54], 0xebfafbe1
mov dword [0x4a1e58], 0xc3dac6fc
mov dword [0x4a1e5c], 0xefe8aec2
mov dword [0x4a1e60], 0xeaebe2e7
mov byte [0x4a1e64], 0x8e
xor eax, eax
mov cl, byte [eax + 0x4a1e50]
xor cl, 0x8e
mov byte [eax + 0x4a20dc], cl
inc eax
cmp eax, 0x15
jb 0x41dacc
mov eax, 0x4a20dc
ret
Function at 0x41dc18
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a40fc], 1
jne 0x41dc61
or dword [0x4a40fc], 1
mov dword [0x4a1e68], 0xd1fafbfe
mov dword [0x4a1e6c], 0xebe0e0e7
mov dword [0x4a1e70], 0xc3dac6fc
mov dword [0x4a1e74], 0xefe8aec2
mov dword [0x4a1e78], 0xeaebe2e7
mov byte [0x4a1e7c], 0x8e
xor eax, eax
mov cl, byte [eax + 0x4a1e68]
xor cl, 0x8e
mov byte [eax + 0x4a20f4], cl
inc eax
cmp eax, 0x15
jb 0x41dc63
mov eax, 0x4a20f4
ret

Function at 0x41ddaf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a40f8], 1
jne 0x41ddf8
or dword [0x4a40f8], 1
mov dword [0x4a1e80], 0xd1fafbfe
mov dword [0x4a1e84], 0xebfafbe1
mov dword [0x4a1e88], 0xc3dac6fc
mov dword [0x4a1e8c], 0xefe8aec2
mov dword [0x4a1e90], 0xeaebe2e7
mov byte [0x4a1e94], 0x8e
xor eax, eax
mov cl, byte [eax + 0x4a1e80]
xor cl, 0x8e
mov byte [eax + 0x4a210c], cl
inc eax
cmp eax, 0x15
jb 0x41ddfa
mov eax, 0x4a210c
ret

Function at 0x41e0d5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a40f0], 1
jne 0x41e11e
or dword [0x4a40f0], 1
mov dword [0x4a1ea4], 0xd1faebe9
mov dword [0x4a1ea8], 0xfdefe2ed
mov dword [0x4a1eac], 0xe3efc0fd
mov dword [0x4a1eb0], 0xefe8aeeb
mov dword [0x4a1eb4], 0xeaebe2e7
mov byte [0x4a1eb8], 0x8e
xor eax, eax
mov cl, byte [eax + 0x4a1ea4]
xor cl, 0x8e
mov byte [eax + 0x4a2130], cl
inc eax
cmp eax, 0x15
jb 0x41e120
mov eax, 0x4a2130
ret

Function at 0x41e13b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a40ec], 1
jne 0x41e17d
or dword [0x4a40ec], 1
mov dword [0x4a1ebc], 0xcffaebe9
mov dword [0x4a1ec0], 0xe7fcfafa
mov dword [0x4a1ec4], 0xebfafbec
mov dword [0x4a1ec8], 0xe7efe8ae
mov dword [0x4a1ecc], 0x8eeaebe2
xor eax, eax
mov cl, byte [eax + 0x4a1ebc]
xor cl, 0x8e
mov byte [eax + 0x4a2148], cl
inc eax
cmp eax, 0x14
jb 0x41e17f
mov eax, 0x4a2148
ret

Function at 0x41e462
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a40e4], 1
jne 0x41e4ab
or dword [0x4a40e4], 1
mov dword [0x4a1edc], 0xd1fafbfe
mov dword [0x4a1ee0], 0xfdefe2ed
mov dword [0x4a1ee4], 0xe3efc0fd
mov dword [0x4a1ee8], 0xefe8aeeb
mov dword [0x4a1eec], 0xeaebe2e7
mov byte [0x4a1ef0], 0x8e
xor eax, eax
mov cl, byte [eax + 0x4a1edc]
xor cl, 0x8e
mov byte [eax + 0x4a2168], cl
inc eax
cmp eax, 0x15
jb 0x41e4ad
mov eax, 0x4a2168
ret

Function at 0x41e4c8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a40e0], 1
jne 0x41e50a
or dword [0x4a40e0], 1
mov dword [0x4a1ef4], 0xcffaebfd
mov dword [0x4a1ef8], 0xe7fcfafa
mov dword [0x4a1efc], 0xebfafbec
mov dword [0x4a1f00], 0xe7efe8ae
mov dword [0x4a1f04], 0x8eeaebe2
xor eax, eax
mov cl, byte [eax + 0x4a1ef4]
xor cl, 0x8e
mov byte [eax + 0x4a2180], cl
inc eax
cmp eax, 0x14
jb 0x41e50c
mov eax, 0x4a2180
ret

Function at 0x41e5f5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a40dc], 1
jne 0x41e62a
or dword [0x4a40dc], 1
mov dword [0x4a1f08], 0xede7e2ed
mov dword [0x4a1f0c], 0xefe8aee5
mov dword [0x4a1f10], 0xeaebe2e7
mov byte [0x4a1f14], 0x8e
xor eax, eax
mov cl, byte [eax + 0x4a1f08]
xor cl, 0x8e
mov byte [eax + 0x4a2194], cl
inc eax
cmp eax, 0xd
jb 0x41e62c
mov eax, 0x4a2194
ret
Function at 0x41e6e0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a40c4], 1
jne 0x41e732
or dword [0x4a40c4], 1
mov dword [0x4a1f78], 0xe3ebe2eb
mov dword [0x4a1f7c], 0xd1fae0eb
mov dword [0x4a1f80], 0xd1faebe9
mov dword [0x4a1f84], 0xebe0e0e7
mov dword [0x4a1f88], 0xfae6d1fc
mov word [0x4a1f8c], 0xe2e3
mov byte [0x4a1f8e], 0x8e
xor eax, eax
mov cl, byte [eax + 0x4a1f78]
xor cl, 0x8e
mov byte [eax + 0x4a2204], cl
inc eax
cmp eax, 0x17
jb 0x41e734
mov eax, 0x4a2204
ret

Function at 0x41e74f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a40c0], 1
jne 0x41e7a1
or dword [0x4a40c0], 1
mov dword [0x4a1f90], 0xe3ebe2eb
mov dword [0x4a1f94], 0xd1fae0eb
mov dword [0x4a1f98], 0xd1faebe9
mov dword [0x4a1f9c], 0xebfafbe1
mov dword [0x4a1fa0], 0xfae6d1fc
mov word [0x4a1fa4], 0xe2e3
mov byte [0x4a1fa6], 0x8e
xor eax, eax
mov cl, byte [eax + 0x4a1f90]
xor cl, 0x8e
mov byte [eax + 0x4a221c], cl
inc eax
cmp eax, 0x17
jb 0x41e7a3
mov eax, 0x4a221c
ret

Function at 0x41e7be
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a40bc], 1
jne 0x41e810
or dword [0x4a40bc], 1
mov dword [0x4a1fa8], 0xe3ebe2eb
mov dword [0x4a1fac], 0xd1fae0eb
mov dword [0x4a1fb0], 0xd1faebfd
mov dword [0x4a1fb4], 0xebe0e0e7
mov dword [0x4a1fb8], 0xfae6d1fc
mov word [0x4a1fbc], 0xe2e3
mov byte [0x4a1fbe], 0x8e
xor eax, eax
mov cl, byte [eax + 0x4a1fa8]
xor cl, 0x8e
mov byte [eax + 0x4a2234], cl
inc eax
cmp eax, 0x17
jb 0x41e812
mov eax, 0x4a2234
ret

Function at 0x41e82d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a40b8], 1
jne 0x41e87f
or dword [0x4a40b8], 1
mov dword [0x4a1fc0], 0xe3ebe2eb
mov dword [0x4a1fc4], 0xd1fae0eb
mov dword [0x4a1fc8], 0xd1faebfd
mov dword [0x4a1fcc], 0xebfafbe1
mov dword [0x4a1fd0], 0xfae6d1fc
mov word [0x4a1fd4], 0xe2e3
mov byte [0x4a1fd6], 0x8e
xor eax, eax
mov cl, byte [eax + 0x4a1fc0]
xor cl, 0x8e
mov byte [eax + 0x4a224c], cl
inc eax
cmp eax, 0x17
jb 0x41e881
mov eax, 0x4a224c
ret

Function at 0x41ed4d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a40a0], 1
jne 0x41ed95
or dword [0x4a40a0], 1
mov dword [0x4a22c4], 0xe3e3fac1
mov dword [0x4a22c8], 0xe8e6e3af
mov dword [0x4a22cc], 0xfcfafbe7
mov dword [0x4a22d0], 0xeeebfdea
mov word [0x4a22d4], 0xeefb
mov byte [0x4a22d6], 0x8f
xor eax, eax
mov cl, byte [eax + 0x4a22c4]
xor cl, 0x8f
mov byte [eax + 0x4a23dc], cl
inc eax
cmp eax, 0x13
jb 0x41ed97
mov eax, 0x4a23dc
ret

Function at 0x41f067
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4094], 1
jne 0x41f0cd
or dword [0x4a4094], 1
mov dword [0x4a2308], 0xfbe1e6fa
mov dword [0x4a230c], 0xe3d0bdbc
mov dword [0x4a2310], 0xfbe7e8e6
mov dword [0x4a2314], 0xfdeafcfa
mov dword [0x4a2318], 0xeefbeeeb
mov dword [0x4a231c], 0xd0e0fbd0
mov dword [0x4a2320], 0xede2fae1
mov word [0x4a2324], 0xfdea
mov byte [0x4a2326], 0x8f
xor eax, eax
mov cl, byte [eax + 0x4a2308]
xor cl, 0x8f
mov byte [eax + 0x4a2420], cl
inc eax
cmp eax, 0x1f
jb 0x41f0cf
mov eax, 0x4a2420
ret
Function at 0x41f0ea
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4090], 1
jne 0x41f149
or dword [0x4a4090], 1
mov dword [0x4a2328], 0xbcfbe1e6
mov dword [0x4a232c], 0xe6e3d0bd
mov dword [0x4a2330], 0xfafbe7e8
mov dword [0x4a2334], 0xebfdeafc
mov dword [0x4a2338], 0xd0eefbee
mov dword [0x4a233c], 0xe1d0e0fb
mov dword [0x4a2340], 0xeaede2fa
mov word [0x4a2344], 0x8ffd
xor eax, eax
mov cl, byte [eax + 0x4a2328]
xor cl, 0x8f
mov byte [eax + 0x4a2440], cl
inc eax
cmp eax, 0x1e
jb 0x41f14b
mov eax, 0x4a2440
ret

Function at 0x41f166
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a408c], 1
jne 0x41f1c5
or dword [0x4a408c], 1
mov dword [0x4a2348], 0xeee7ecff
mov dword [0x4a234c], 0xe6e3d0fd
mov dword [0x4a2350], 0xfafbe7e8
mov dword [0x4a2354], 0xebfdeafc
mov dword [0x4a2358], 0xd0eefbee
mov dword [0x4a235c], 0xfcd0e0fb
mov dword [0x4a2360], 0xe1e6fdfb
mov word [0x4a2364], 0x8fe8
xor eax, eax
mov cl, byte [eax + 0x4a2348]
xor cl, 0x8f
mov byte [eax + 0x4a2460], cl
inc eax
cmp eax, 0x1e
jb 0x41f1c7
mov eax, 0x4a2460
ret

Function at 0x41f1e2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4088], 1
jne 0x41f248
or dword [0x4a4088], 1
mov dword [0x4a2368], 0xe7ecf8ff
mov dword [0x4a236c], 0xe3d0fdee
mov dword [0x4a2370], 0xfbe7e8e6
mov dword [0x4a2374], 0xfdeafcfa
mov dword [0x4a2378], 0xeefbeeeb
mov dword [0x4a237c], 0xd0e0fbd0
mov dword [0x4a2380], 0xe6fdfbfc
mov word [0x4a2384], 0xe8e1
mov byte [0x4a2386], 0x8f
xor eax, eax
mov cl, byte [eax + 0x4a2368]
xor cl, 0x8f
mov byte [eax + 0x4a2480], cl
inc eax
cmp eax, 0x1f
jb 0x41f24a
mov eax, 0x4a2480
ret

Function at 0x41f265
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4084], 1
jne 0x41f2cc
or dword [0x4a4084], 1
mov dword [0x4a2388], 0xe7e8e6e3
mov dword [0x4a238c], 0xeafcfafb
mov dword [0x4a2390], 0xfbeeebfd
mov dword [0x4a2394], 0xeafcd0ee
mov dword [0x4a2398], 0xeef9d0fb
mov dword [0x4a239c], 0xe1eee6fd
mov dword [0x4a23a0], 0xfbfcd0fb
mov dword [0x4a23a4], 0xe8e1e6fd
mov byte [0x4a23a8], 0x8f
xor eax, eax
mov cl, byte [eax + 0x4a2388]
xor cl, 0x8f
mov byte [eax + 0x4a24a0], cl
inc eax
cmp eax, 0x21
jb 0x41f2ce
mov eax, 0x4a24a0
ret
Function at 0x41f5db
Capabilities:
Encode data using xor

Disassembly:
push 0x2c
mov eax, 0x46ff0c
call fcn.00455d47
mov eax, dword [ebp + 8]
xor esi, esi
mov edi, ecx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
test byte [0x4a406c], 1
jne 0x41f62e
or dword [0x4a406c], 1
mov dword [0x4a2524], 0x5d5a5d43
mov dword [0x4a2528], 0x1a40515a
mov dword [0x4a252c], 0x34585850
xor ecx, ecx
mov dl, byte [ecx + 0x4a2524]
xor dl, 0x34
mov byte [ecx + 0x4a27d8], dl
inc ecx
cmp ecx, 0xc
jb 0x41f630
push esi
push esi
lea ecx, [ebp - 0x34]
push ecx
push esi
push eax
push 0x4a27d8
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
push 0x1b00
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
test eax, eax
jne 0x41f67b
call fcn.0041f6e9
push eax
push edi
mov edi, dword [ebp - 0x38]
call fcn.0042104b
pop ecx
pop ecx
jmp 0x41f6e0
test byte [0x4a4064], 1
jne 0x41f69b
or dword [0x4a4064], 1
mov word [0x4a254c], 0x140e
mov byte [0x4a254e], 0x34
xor eax, eax
mov cl, byte [eax + 0x4a254c]
xor cl, 0x34
mov byte [eax + 0x4a2800], cl
inc eax
cmp eax, 3
jb 0x41f69d
mov edi, dword [ebp - 0x38]
lea eax, [ebp - 0x2c]
push 0x4a2800
push eax
call fcn.0042104b
mov dword [ebp - 4], esi
push dword [ebp - 0x34]
push eax
push dword [ebp - 0x30]
call fcn.0040c19d
add esp, 0x14
push esi
push 1
lea ecx, [ebp - 0x2c]
call fcn.00403b18
mov eax, dword [ebp - 0x30]
call fcn.00455dca
ret

Function at 0x41f6e9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4068], 1
jne 0x41f73e
or dword [0x4a4068], 1
mov dword [0x4a2530], 0x55721c14
mov dword [0x4a2534], 0x5051585d
mov dword [0x4a2538], 0x145b4014
mov dword [0x4a253c], 0x59465b52
mov dword [0x4a2540], 0x51144055
mov dword [0x4a2544], 0x465b4646
mov word [0x4a2548], 0x341d
xor eax, eax
mov cl, byte [eax + 0x4a2530]
xor cl, 0x34
mov byte [eax + 0x4a27e4], cl
inc eax
cmp eax, 0x1a
jb 0x41f740
mov eax, 0x4a27e4
ret
Function at 0x41f770
Capabilities:
Create http request

Disassembly:
push 0x3c
mov eax, 0x470648
call fcn.00455d47
mov eax, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x48], ebx
mov dword [ebx + 4], edi
mov dword [ebp - 4], edi
mov dword [ebx + 8], 0x481f78
mov byte [ebx + 0xc], 1
mov dword [ebx + 0x24], 0xf
mov dword [ebx + 0x20], edi
mov byte [ebx + 0x10], 0
mov byte [ebp - 4], 1
mov dword [ebx], 0x481f7c
mov dword [ebx + 8], 0x481f80
mov edx, dword [eax + 0x14]
cmp edx, 0x10
jb 0x41f7c0
mov esi, dword [eax]
jmp 0x41f7c2
mov esi, eax
mov ecx, dword [eax + 0x10]
add ecx, esi
cmp edx, 0x10
jb 0x41f7ce
mov eax, dword [eax]
push ecx
push eax
lea esi, [ebp - 0x2c]
call fcn.004210af
mov byte [ebp - 4], 2
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x41f7e7
mov eax, esi
push edi
push edi
push edi
push edi
push eax
call dword [sym.imp.WININET.dll_InternetOpenW]
mov dword [ebx + 4], eax
cmp eax, edi
jne 0x41f841
call fcn.0041f857
push eax
lea ecx, [ebp - 0x38]
call fcn.0041f4f6
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 3
call fcn.0044c610
push eax
lea ecx, [ebx + 0x10]
call fcn.00403af7
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x44]
mov byte [ebx + 0xc], 0
call fcn.0044c700
push 0x4916e4
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x44], 0x481b80
call fcn.004554bb
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
call fcn.00403c49
mov eax, ebx
call fcn.00455dca
ret 4

Function at 0x41f857
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4060], 1
jne 0x41f8a0
or dword [0x4a4060], 1
mov dword [0x4a2550], 0x7c5a5d63
mov dword [0x4a2554], 0x7b444040
mov dword [0x4a2558], 0x1c5a5144
mov dword [0x4a255c], 0x5552141d
mov dword [0x4a2560], 0x5051585d
mov byte [0x4a2564], 0x34
xor eax, eax
mov cl, byte [eax + 0x4a2550]
xor cl, 0x34
mov byte [eax + 0x4a2804], cl
inc eax
cmp eax, 0x15
jb 0x41f8a2
mov eax, 0x4a2804
ret