joyce8/EMBER2024-capa huggingface dataset:
Function at 0x407d00
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4a14], 1
jne 0x407d49
or dword [0x4a4a14], 1
mov dword [0x49fed0], 0x4c5a486b
mov dword [0x49fed4], 0x4d091d1f
mov dword [0x49fed8], 0x4d464a4c
mov dword [0x49fedc], 0x484f094c
mov dword [0x49fee0], 0x4d4c4540
mov byte [0x49fee4], 0x29
xor eax, eax
mov cl, byte [eax + 0x49fed0]
xor cl, 0x29
mov byte [eax + 0x4a04a0], cl
inc eax
cmp eax, 0x15
jb 0x407d4b
mov eax, 0x4a04a0
ret

Function at 0x407d66
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4a10], 1
jne 0x407daf
or dword [0x4a4a10], 1
mov dword [0x49fee8], 0x4c5a486b
mov dword [0x49feec], 0x4d091d1f
mov dword [0x49fef0], 0x4d464a4c
mov dword [0x49fef4], 0x484f094c
mov dword [0x49fef8], 0x4d4c4540
mov byte [0x49fefc], 0x29
xor eax, eax
mov cl, byte [eax + 0x49fee8]
xor cl, 0x29
mov byte [eax + 0x4a04b8], cl
inc eax
cmp eax, 0x15
jb 0x407db1
mov eax, 0x4a04b8
ret

Function at 0x407e64
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49f4], 1
jne 0x407eec
or dword [0x4a49f4], 1
mov dword [0x49ff50], 0x5d47466a
mov dword [0x49ff54], 0x45d474c
mov dword [0x49ff58], 0x4c59507d
mov dword [0x49ff5c], 0x59480913
mov dword [0x49ff60], 0x4a404559
mov dword [0x49ff64], 0x46405d48
mov dword [0x49ff68], 0x4510647
mov dword [0x49ff6c], 0x45e5e5e
mov dword [0x49ff70], 0x445b464f
mov dword [0x49ff74], 0x455b5c04
mov dword [0x49ff78], 0x464a474c
mov dword [0x49ff7c], 0x294d4c4d
xor eax, eax
mov cl, byte [eax + 0x49ff50]
xor cl, 0x29
mov byte [eax + 0x4a0520], cl
inc eax
cmp eax, 0x30
jb 0x407eee
mov eax, 0x4a0520
ret

Function at 0x407f09
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49f0], 1
jne 0x407f34
or dword [0x4a49f0], 1
mov dword [0x49ff80], 0x7d7a6679
mov dword [0x49ff84], 0x9465d09
mov byte [0x49ff88], 0x29
xor eax, eax
mov cl, byte [eax + 0x49ff80]
xor cl, 0x29
mov byte [eax + 0x4a0550], cl
inc eax
cmp eax, 9
jb 0x407f36
mov eax, 0x4a0550
ret

Function at 0x407f51
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49ec], 1
jne 0x407f9a
or dword [0x4a49ec], 1
mov dword [0x49ff8c], 0x40484f09
mov dword [0x49ff90], 0x94d4c45
mov dword [0x49ff94], 0x415d405e
mov dword [0x49ff98], 0x485d5a09
mov dword [0x49ff9c], 0x95a5c5d
mov byte [0x49ffa0], 0x29
xor eax, eax
mov cl, byte [eax + 0x49ff8c]
xor cl, 0x29
mov byte [eax + 0x4a055c], cl
inc eax
cmp eax, 0x15
jb 0x407f9c
mov eax, 0x4a055c
ret
Function at 0x407fd1
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x470fd4
call fcn.0046f99c
sub esp, 0xa8
push ebx
xor ebx, ebx
push esi
mov dword [ebp - 0x10], ebx
push edi
cmp dword [ebp + 0xc], ebx
je 0x408182
cmp dword [ebp + 0x10], ebx
je 0x408182
push dword [ebp + 0x14]
lea esi, [ebp - 0x7c]
call fcn.00409331
push eax
push 0x48fc28
lea eax, [ebp - 0x98]
mov dword [ebp - 4], ebx
call fcn.004043f7
push 0x48fc24
push eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.00404434
add esp, 0x10
push 1
xor edi, edi
lea esi, [ebp - 0x98]
call fcn.00403da6
push 1
lea esi, [ebp - 0x7c]
mov byte [ebp - 4], 4
call fcn.00403da6
mov dword [ebp - 0x10], ebx
cmp dword [ebp + 0x10], ebx
jle 0x4080dd
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x10]
push dword [eax + ecx*4]
lea esi, [ebp - 0x60]
call fcn.00409331
mov byte [ebp - 4], 5
push dword [ebp - 0x1c]
mov eax, esi
push ebx
push eax
lea esi, [ebp - 0xb4]
call fcn.00409353
mov ecx, eax
mov byte [ebp - 4], 6
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x408091
lea eax, [ebp - 0x2c]
mov edi, dword [ebp - 0x1c]
push eax
mov eax, dword [ecx + 0x10]
call fcn.0040ce08
mov ebx, eax
neg ebx
sbb bl, bl
push 1
xor edi, edi
lea esi, [ebp - 0xb4]
mov byte [ebp - 4], 5
call fcn.00403da6
inc bl
jne 0x408149
push 1
lea esi, [ebp - 0x60]
mov byte [ebp - 4], 4
call fcn.00403da6
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
xor ebx, ebx
cmp eax, dword [ebp + 0x10]
jl 0x408058
test byte [0x4a49e4], 1
jne 0x40810a
or dword [0x4a49e4], 1
mov dword [0x49ffb0], 0x95d4667
mov dword [0x49ffb4], 0x475c464f
mov word [0x49ffb8], 0x294d
xor eax, eax
mov cl, byte [eax + 0x49ffb0]
xor cl, 0x29
mov byte [eax + 0x4a0580], cl
inc eax
cmp eax, 0xa
jb 0x40810c
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp + 0xc], 0x4a0580
call fcn.00449745
mov dword [ebp - 0x44], vtable.std::runtime_error.0
push 0x4914a0
lea eax, [ebp - 0x44]
push eax
call fcn.004535e6
mov esi, dword [ebp + 8]
push 0xffffffffffffffff
push dword [ebp - 0x1c]
lea eax, [ebp - 0x60]
push eax
call fcn.00409353
push 1
xor edi, edi
lea esi, [ebp - 0x60]
call fcn.00403da6
push 1
lea esi, [ebp - 0x2c]
call fcn.00403da6
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
call fcn.004081a7
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x38]
call fcn.00449745
mov dword [ebp - 0x38], vtable.std::runtime_error.0
push 0x4914a0
lea eax, [ebp - 0x38]
jmp 0x408143

Function at 0x4081a7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49e8], 1
jne 0x4081d4
or dword [0x4a49e8], 1
mov dword [0x49ffa4], 0x95d4667
mov dword [0x49ffa8], 0x475c464f
mov word [0x49ffac], 0x294d
xor eax, eax
mov cl, byte [eax + 0x49ffa4]
xor cl, 0x29
mov byte [eax + 0x4a0574], cl
inc eax
cmp eax, 0xa
jb 0x4081d6
mov eax, 0x4a0574
ret
Function at 0x408942
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49e0], 1
mov ecx, 0x8329
jne 0x4089cc
or dword [0x4a49e0], 1
lea eax, [ecx + 0x21]
mov word [0x49ffbc], ax
add eax, 0x11
mov edx, eax
mov word [0x49ffbe], dx
lea edx, [ecx + 0x1f]
mov word [0x49ffc0], dx
add edx, 0x12
mov word [0x49ffc2], dx
lea edx, [ecx + 0x18]
mov word [0x49ffc4], dx
add edx, 0x35
mov word [0x49ffc6], dx
mov edx, eax
mov word [0x49ffc8], dx
lea edx, [ecx + 0x23]
lea eax, [ecx + 0x34]
mov word [0x49ffca], dx
mov word [0x49ffd2], ax
add edx, 0xd
mov eax, ecx
mov word [0x49ffcc], dx
mov dword [0x49ffce], 0x835b8346
mov word [0x49ffd4], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x49ffbc]
add eax, 2
mov word [eax + 0x4a058a], dx
cmp eax, 0x1a
jb 0x4089ce
mov eax, 0x4a058c
ret

Function at 0x4089ec
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49dc], 1
jne 0x408a17
or dword [0x4a49dc], 1
mov dword [0x49ffd8], 0x475b4c42
mov dword [0x49ffdc], 0x1b1a454c
mov byte [0x49ffe0], 0x29
xor eax, eax
mov cl, byte [eax + 0x49ffd8]
xor cl, 0x29
mov byte [eax + 0x4a05a8], cl
inc eax
cmp eax, 9
jb 0x408a19
mov eax, 0x4a05a8
ret

Function at 0x408a34
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49d8], 1
jne 0x408a9d
or dword [0x4a49d8], 1
mov dword [0x49ffe4], 0x795d4c7a
mov dword [0x49ffe8], 0x4c4a465b
mov dword [0x49ffec], 0x5a7c5a5a
mov dword [0x49fff0], 0x46645b4c
mov dword [0x49fff4], 0x516c4c4d
mov dword [0x49fff8], 0x5d594c4a
mov dword [0x49fffc], 0x79474640
mov dword [0x4a0000], 0x4a404546
mov word [0x4a0004], 0x2950
xor eax, eax
mov cl, byte [eax + 0x49ffe4]
xor cl, 0x29
mov byte [eax + 0x4a05b4], cl
inc eax
cmp eax, 0x22
jb 0x408a9f
mov eax, 0x4a05b4
ret

Function at 0x408aba
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49d4], 1
jne 0x408b23
or dword [0x4a49d4], 1
mov dword [0x4a0008], 0x795d4c6e
mov dword [0x4a000c], 0x4c4a465b
mov dword [0x4a0010], 0x5a7c5a5a
mov dword [0x4a0014], 0x46645b4c
mov dword [0x4a0018], 0x516c4c4d
mov dword [0x4a001c], 0x5d594c4a
mov dword [0x4a0020], 0x79474640
mov dword [0x4a0024], 0x4a404546
mov word [0x4a0028], 0x2950
xor eax, eax
mov cl, byte [eax + 0x4a0008]
xor cl, 0x29
mov byte [eax + 0x4a05d8], cl
inc eax
cmp eax, 0x22
jb 0x408b25
mov eax, 0x4a05d8
ret

Function at 0x408b40
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49d0], 1
jne 0x408b96
or dword [0x4a49d0], 1
mov dword [0x4a002c], 0x94c4566
mov dword [0x4a0030], 0x5d404740
mov dword [0x4a0034], 0x40454840
mov dword [0x4a0038], 0x405d4853
mov dword [0x4a003c], 0x4f094746
mov dword [0x4a0040], 0x4c454048
mov dword [0x4a0044], 0x2909134d
xor eax, eax
mov cl, byte [eax + 0x4a002c]
xor cl, 0x29
mov byte [eax + 0x4a05fc], cl
inc eax
cmp eax, 0x1c
jb 0x408b98
mov eax, 0x4a05fc
ret
Function at 0x408bb3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49cc], 1
mov ecx, 0x8329
jne 0x408be2
or dword [0x4a49cc], 1
lea eax, [ecx + 0x1f]
mov word [0x4a0048], ax
add eax, 0xffffffd3
mov word [0x4a004a], ax
mov eax, ecx
mov word [0x4a004c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4a0048]
add eax, 2
mov word [eax + 0x4a0616], dx
cmp eax, 6
jb 0x408be4
mov eax, 0x4a0618
ret

Function at 0x408cf7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49b8], 1
jne 0x408d4a
or dword [0x4a49b8], 1
mov dword [0x4a009c], 0x4841477c
mov dword [0x4a00a0], 0x4c454d47
mov dword [0x4a00a4], 0x514c094d
mov dword [0x4a00a8], 0x5d594c4a
mov dword [0x4a00ac], 0x13474640
mov dword [0x4a00b0], 0x235a0c09
mov byte [0x4a00b4], 0x29
xor eax, eax
mov cl, byte [eax + 0x4a009c]
xor cl, 0x29
mov byte [eax + 0x4a066c], cl
inc eax
cmp eax, 0x19
jb 0x408d4c
mov eax, 0x4a066c
ret

Function at 0x408d67
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4a49b4], 1
jne 0x408da1
or dword [0x4a49b4], 1
mov dword [0x4a00b8], 0x4b5c5d7a
mov dword [0x4a00bc], 0x40514c09
mov dword [0x4a00c0], 0xc01095d
mov dword [0x4a00c4], 0x2923004d
mov cl, byte [eax + 0x4a00b8]
xor cl, 0x29
mov byte [eax + 0x4a0688], cl
inc eax
cmp eax, 0x10
jb 0x408da1
mov eax, 0x4a0688
ret

Function at 0x40a7de
Capabilities:
Write file on windows

Disassembly:
mov eax, 0x470808
call fcn.0046f99c
sub esp, 0x20
push ebx
xor ebx, ebx
cmp dword [edi + 0x44], ebx
je 0x40a8c3
cmp byte [edi + 0x49], bl
je 0x40a8c3
mov eax, dword [edi]
push 0xffffffffffffffff
mov ecx, edi
call dword [eax + 0xc]
cmp eax, 0xffffffff
jne 0x40a815
xor al, al
jmp 0x40a8c5
push esi
lea esi, [ebp - 0x2c]
call fcn.0040a307
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x40a865
lea eax, [ebp - 0x2c]
mov edx, eax
mov ecx, dword [edi + 0x44]
mov esi, dword [ecx]
lea ebx, [ebp - 0x10]
push ebx
mov ebx, dword [ebp - 0x1c]
add eax, ebx
push eax
push edx
lea eax, [edi + 0x4c]
push eax
call dword [esi + 0x18]
sub eax, 0
je 0x40a86a
dec eax
je 0x40a86e
dec eax
dec eax
je 0x40a8bf
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00403c75
mov al, bl
pop esi
jmp 0x40a8c5
mov edx, dword [ebp - 0x2c]
jmp 0x40a82f
mov byte [edi + 0x49], 0
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x40a87a
lea eax, [ebp - 0x2c]
mov esi, dword [ebp - 0x10]
sub esi, eax
je 0x40a8a0
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x40a88d
lea eax, [ebp - 0x2c]
push dword [edi + 0x54]
push esi
push 1
push eax
call fcn.0044b51e
add esp, 0x10
cmp esi, eax
jne 0x40a852
cmp byte [edi + 0x49], 0
je 0x40a8bf
test esi, esi
jne 0x40a821
push esi
push 8
pop ebx
lea esi, [ebp - 0x2c]
call fcn.0040a3e0
jmp 0x40a821
mov bl, 1
jmp 0x40a854
mov al, 1
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
leave
ret
Function at 0x40ee4b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49b0], 1
jne 0x40eebe
or dword [0x4a49b0], 1
mov dword [0x4a06a8], 0x465f4569
mov dword [0x4a06ac], 0x45440a4e
mov dword [0x4a06b0], 0x4f4d0a5e
mov dword [0x4a06b4], 0x434e0a5e
mov dword [0x4a06b8], 0x4e435a59
mov dword [0x4a06bc], 0xa4c450a
mov dword [0x4a06c0], 0x425e4f47
mov dword [0x4a06c4], 0xd0a4e45
mov dword [0x4a06c8], 0x46464b49
mov word [0x4a06cc], 0x2a0d
xor eax, eax
mov cl, byte [eax + 0x4a06a8]
xor cl, 0x2a
mov byte [eax + 0x4a07b8], cl
inc eax
cmp eax, 0x26
jb 0x40eec0
mov eax, 0x4a07b8
ret

Function at 0x40eedb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49ac], 1
jne 0x40ef41
or dword [0x4a49ac], 1
mov dword [0x4a06d0], 0x46434b6c
mov dword [0x4a06d4], 0x5e0a4e4f
mov dword [0x4a06d8], 0x44430a45
mov dword [0x4a06dc], 0x4f41455c
mov dword [0x4a06e0], 0x5e4f470a
mov dword [0x4a06e4], 0xa4e4542
mov dword [0x4a06e8], 0x464b490d
mov word [0x4a06ec], 0xd46
mov byte [0x4a06ee], 0x2a
xor eax, eax
mov cl, byte [eax + 0x4a06d0]
xor cl, 0x2a
mov byte [eax + 0x4a07e0], cl
inc eax
cmp eax, 0x1f
jb 0x40ef43
mov eax, 0x4a07e0
ret

Function at 0x40f4c3
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
and dword [ebp - 4], 0
cmp dword [ebp + 8], 0
push ebx
push esi
push edi
mov edi, eax
jbe 0x40f607
mov ebx, ecx
push 4
sub ebx, edi
pop esi
test byte [0x4a49a8], 1
jne 0x40f524
or dword [0x4a49a8], 1
mov eax, 0x8359
mov word [0x4a06f0], ax
add eax, 0xfffffff6
mov word [0x4a06f2], ax
mov eax, 0x8344
mov word [0x4a06f4], ax
add eax, 0xa
mov word [0x4a06f6], ax
mov eax, 0x832a
mov word [0x4a06f8], ax
xor eax, eax
mov ecx, 0x832a
xor cx, word [eax + 0x4a06f0]
add eax, 2
mov word [eax + 0x4a07fe], cx
cmp eax, 0xa
jb 0x40f526
mov eax, dword [ebx + edi]
mov ecx, 0x4a0800
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40f56d
test dx, dx
je 0x40f569
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40f56d
add eax, esi
add ecx, esi
test dx, dx
jne 0x40f549
xor eax, eax
jmp 0x40f572
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x40f57e
mov dword [edi], 0x385
jmp 0x40f5f6
call fcn.0040f617
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x40f5aa
test dx, dx
je 0x40f5a6
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x40f5aa
add ecx, esi
add eax, esi
test dx, dx
jne 0x40f586
xor eax, eax
jmp 0x40f5af
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x40f5bb
mov dword [edi], 0x386
jmp 0x40f5f6
call fcn.0040f6ea
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x40f5e7
test dx, dx
je 0x40f5e3
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x40f5e7
add ecx, esi
add eax, esi
test dx, dx
jne 0x40f5c3
xor eax, eax
jmp 0x40f5ec
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x40f610
mov dword [edi], 0x387
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
add edi, esi
cmp eax, dword [ebp + 8]
jb 0x40f4e1
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 4
mov eax, 0x80020006
jmp 0x40f609
Function at 0x40f617
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49a4], 1
jne 0x40f6c7
or dword [0x4a49a4], 1
mov eax, 0x834b
mov word [0x4a06fc], ax
add eax, 3
mov ecx, eax
mov word [0x4a0700], ax
mov eax, 0x836f
mov word [0x4a0702], ax
add eax, 0xffffffed
mov word [0x4a0704], ax
mov eax, 0x834f
mov word [0x4a06fe], cx
mov ecx, eax
lea edx, [eax - 0xb]
mov word [0x4a0706], cx
mov ecx, edx
push edi
mov word [0x4a0708], cx
add ecx, 0x1a
mov edi, ecx
mov word [0x4a070a], di
lea edi, [eax + 0x17]
mov word [0x4a070c], di
add edi, 0xffffffdd
mov ecx, eax
add eax, 9
mov word [0x4a071a], ax
lea eax, [ecx - 0x25]
mov word [0x4a070e], di
mov dword [0x4a0710], 0x835e8359
mov word [0x4a0714], cx
mov dword [0x4a0716], 0x834f8344
mov word [0x4a071c], ax
pop edi
xor eax, eax
mov ecx, 0x832a
xor cx, word [eax + 0x4a06fc]
add eax, 2
mov word [eax + 0x4a080a], cx
cmp eax, 0x22
jb 0x40f6c9
mov eax, 0x4a080c
ret

Function at 0x40f6ea
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a49a0], 1
mov ecx, 0x832a
jne 0x40f744
or dword [0x4a49a0], 1
lea eax, [ecx + 0x32]
mov word [0x4a0720], ax
add eax, 0xfffffff3
mov word [0x4a0722], ax
lea eax, [ecx + 0x2e]
mov word [0x4a0724], ax
inc eax
mov word [0x4a0726], ax
lea eax, [ecx + 0x19]
mov word [0x4a0728], ax
add eax, 2
mov word [0x4a072a], ax
lea eax, [ecx + 0x1a]
mov word [0x4a072c], ax
mov eax, ecx
mov word [0x4a072e], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4a0720]
add eax, 2
mov word [eax + 0x4a082e], dx
cmp eax, 0x10
jb 0x40f746
mov eax, 0x4a0830
ret

Function at 0x410316
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4984], 1
jne 0x41033a
or dword [0x4a4984], 1
mov dword [0x4a07ac], 0x4549710a
mov dword [0x4a07b0], 0x2a174f4e
xor eax, eax
mov cl, byte [eax + 0x4a07ac]
xor cl, 0x2a
mov byte [eax + 0x4a08bc], cl
inc eax
cmp eax, 8
jb 0x41033c
mov eax, 0x4a08bc
ret

Function at 0x411330
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a496c], 1
jne 0x41136e
or dword [0x4a496c], 1
mov dword [0x4a08f0], 0x420b5b46
mov dword [0x4a08f4], 0xb5f4245
mov dword [0x4a08f8], 0x47424a4d
mov word [0x4a08fc], 0x4f4e
mov byte [0x4a08fe], 0x2b
xor eax, eax
mov cl, byte [eax + 0x4a08f0]
xor cl, 0x2b
mov byte [eax + 0x4a09bc], cl
inc eax
cmp eax, 0xf
jb 0x411370
mov eax, 0x4a09bc
ret

Function at 0x41138b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4968], 1
jne 0x4113c9
or dword [0x4a4968], 1
mov dword [0x4a0900], 0x420b5b46
mov dword [0x4a0904], 0xb5f4245
mov dword [0x4a0908], 0x47424a4d
mov word [0x4a090c], 0x4f4e
mov byte [0x4a090e], 0x2b
xor eax, eax
mov cl, byte [eax + 0x4a0900]
xor cl, 0x2b
mov byte [eax + 0x4a09cc], cl
inc eax
cmp eax, 0xf
jb 0x4113cb
mov eax, 0x4a09cc
ret

Function at 0x4113e6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4964], 1
jne 0x411424
or dword [0x4a4964], 1
mov dword [0x4a0910], 0x745f4e58
mov dword [0x4a0914], 0xb5f4542
mov dword [0x4a0918], 0x47424a4d
mov word [0x4a091c], 0x4f4e
mov byte [0x4a091e], 0x2b
xor eax, eax
mov cl, byte [eax + 0x4a0910]
xor cl, 0x2b
mov byte [eax + 0x4a09dc], cl
inc eax
cmp eax, 0xf
jb 0x411426
mov eax, 0x4a09dc
ret
Function at 0x411441
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4960], 1
jne 0x41148a
or dword [0x4a4960], 1
mov dword [0x4a0920], 0x4258455e
mov dword [0x4a0924], 0x4f4e454c
mov dword [0x4a0928], 0x4a4e5974
mov dword [0x4a092c], 0x4a4d0b4f
mov dword [0x4a0930], 0x4f4e4742
mov byte [0x4a0934], 0x2b
xor eax, eax
mov cl, byte [eax + 0x4a0920]
xor cl, 0x2b
mov byte [eax + 0x4a09ec], cl
inc eax
cmp eax, 0x15
jb 0x41148c
mov eax, 0x4a09ec
ret

Function at 0x4114a7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a495c], 1
jne 0x4114e6
or dword [0x4a495c], 1
mov dword [0x4a0938], 0x4c45595b
mov dword [0x4a093c], 0x404a460b
mov dword [0x4a0940], 0x4a4d0b4e
mov dword [0x4a0944], 0x4f4e4742
mov byte [0x4a0948], 0x2b
xor eax, eax
mov cl, byte [eax + 0x4a0938]
xor cl, 0x2b
mov byte [eax + 0x4a0a04], cl
inc eax
cmp eax, 0x11
jb 0x4114e8
mov eax, 0x4a0a04
ret

Function at 0x411503
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4958], 1
jne 0x411545
or dword [0x4a4958], 1
mov dword [0x4a094c], 0x5f59444d
mov dword [0x4a0950], 0x744a455e
mov dword [0x4a0954], 0x4f4a4e59
mov dword [0x4a0958], 0x424a4d0b
mov dword [0x4a095c], 0x2b4f4e47
xor eax, eax
mov cl, byte [eax + 0x4a094c]
xor cl, 0x2b
mov byte [eax + 0x4a0a18], cl
inc eax
cmp eax, 0x14
jb 0x411547
mov eax, 0x4a0a18
ret

Function at 0x411562
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4954], 1
jne 0x4115aa
or dword [0x4a4954], 1
mov dword [0x4a0960], 0x5b525948
mov dword [0x4a0964], 0x420b445f
mov dword [0x4a0968], 0xb5f4245
mov dword [0x4a096c], 0x47424a4d
mov word [0x4a0970], 0x4f4e
mov byte [0x4a0972], 0x2b
xor eax, eax
mov cl, byte [eax + 0x4a0960]
xor cl, 0x2b
mov byte [eax + 0x4a0a2c], cl
inc eax
cmp eax, 0x13
jb 0x4115ac
mov eax, 0x4a0a2c
ret

Function at 0x4117be
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4950], 1
jne 0x4117e1
or dword [0x4a4950], 1
mov dword [0x4a0974], 0x4f585842
mov word [0x4a0978], 0x2b40
xor eax, eax
mov cl, byte [eax + 0x4a0974]
xor cl, 0x2b
mov byte [eax + 0x4a0a40], cl
inc eax
cmp eax, 6
jb 0x4117e3
mov eax, 0x4a0a40
ret

Function at 0x4117fe
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a494c], 1
jne 0x41182b
or dword [0x4a494c], 1
mov dword [0x4a097c], 0x49595e43
mov dword [0x4a0980], 0x595e4f4a
mov word [0x4a0984], 0x2b59
xor eax, eax
mov cl, byte [eax + 0x4a097c]
xor cl, 0x2b
mov byte [eax + 0x4a0a48], cl
inc eax
cmp eax, 0xa
jb 0x41182d
mov eax, 0x4a0a48
ret

Function at 0x411906
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4948], 1
jne 0x411933
or dword [0x4a4948], 1
mov dword [0x4a0988], 0x49595e43
mov dword [0x4a098c], 0x595e4f4a
mov word [0x4a0990], 0x2b59
xor eax, eax
mov cl, byte [eax + 0x4a0988]
xor cl, 0x2b
mov byte [eax + 0x4a0a54], cl
inc eax
cmp eax, 0xa
jb 0x411935
mov eax, 0x4a0a54
ret
Function at 0x412013
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4944], 1
jne 0x41205b
or dword [0x4a4944], 1
mov dword [0x4a0a60], 0x5c555e4f
mov dword [0x4a0a64], 0x450c4358
mov dword [0x4a0a68], 0xc584542
mov dword [0x4a0a6c], 0x40454d4a
mov word [0x4a0a70], 0x4849
mov byte [0x4a0a72], 0x2c
xor eax, eax
mov cl, byte [eax + 0x4a0a60]
xor cl, 0x2c
mov byte [eax + 0x4a0b74], cl
inc eax
cmp eax, 0x13
jb 0x41205d
mov eax, 0x4a0b74
ret

Function at 0x412078
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4940], 1
jne 0x4120c0
or dword [0x4a4940], 1
mov dword [0x4a0a74], 0x5c555e4f
mov dword [0x4a0a78], 0x450c4358
mov dword [0x4a0a7c], 0xc584542
mov dword [0x4a0a80], 0x40454d4a
mov word [0x4a0a84], 0x4849
mov byte [0x4a0a86], 0x2c
xor eax, eax
mov cl, byte [eax + 0x4a0a74]
xor cl, 0x2c
mov byte [eax + 0x4a0b88], cl
inc eax
cmp eax, 0x13
jb 0x4120c2
mov eax, 0x4a0b88
ret

Function at 0x4120dd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4938], 1
jne 0x412125
or dword [0x4a4938], 1
mov dword [0x4a0a90], 0x5c555e4f
mov dword [0x4a0a94], 0x450c4358
mov dword [0x4a0a98], 0xc584542
mov dword [0x4a0a9c], 0x40454d4a
mov word [0x4a0aa0], 0x4849
mov byte [0x4a0aa2], 0x2c
xor eax, eax
mov cl, byte [eax + 0x4a0a90]
xor cl, 0x2c
mov byte [eax + 0x4a0ba4], cl
inc eax
cmp eax, 0x13
jb 0x412127
mov eax, 0x4a0ba4
ret

Function at 0x412142
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4930], 1
jne 0x41218a
or dword [0x4a4930], 1
mov dword [0x4a0aa8], 0x5c555e4f
mov dword [0x4a0aac], 0x450c4358
mov dword [0x4a0ab0], 0xc584542
mov dword [0x4a0ab4], 0x40454d4a
mov word [0x4a0ab8], 0x4849
mov byte [0x4a0aba], 0x2c
xor eax, eax
mov cl, byte [eax + 0x4a0aa8]
xor cl, 0x2c
mov byte [eax + 0x4a0bbc], cl
inc eax
cmp eax, 0x13
jb 0x41218c
mov eax, 0x4a0bbc
ret

Function at 0x4121a7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a492c], 1
jne 0x4121de
or dword [0x4a492c], 1
mov dword [0x4a0abc], 0x5c555e4f
mov dword [0x4a0ac0], 0x4a0c4358
mov dword [0x4a0ac4], 0x4940454d
mov word [0x4a0ac8], 0x2c48
xor eax, eax
mov cl, byte [eax + 0x4a0abc]
xor cl, 0x2c
mov byte [eax + 0x4a0bd0], cl
inc eax
cmp eax, 0xe
jb 0x4121e0
mov eax, 0x4a0bd0
ret

Function at 0x4121fb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4928], 1
jne 0x412232
or dword [0x4a4928], 1
mov dword [0x4a0acc], 0x5c555e4f
mov dword [0x4a0ad0], 0x4a0c4358
mov dword [0x4a0ad4], 0x4940454d
mov word [0x4a0ad8], 0x2c48
xor eax, eax
mov cl, byte [eax + 0x4a0acc]
xor cl, 0x2c
mov byte [eax + 0x4a0be0], cl
inc eax
cmp eax, 0xe
jb 0x412234
mov eax, 0x4a0be0
ret

Function at 0x41224f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4a4924], 1
jne 0x41227c
or dword [0x4a4924], 1
mov dword [0x4a0adc], 0x5c5e4944
mov dword [0x4a0ae0], 0x5e494807
mov word [0x4a0ae4], 0x2c5c
xor eax, eax
mov cl, byte [eax + 0x4a0adc]
xor cl, 0x2c
mov byte [eax + 0x4a0bf0], cl
inc eax
cmp eax, 0xa
jb 0x41227e
mov eax, 0x4a0bf0
ret