joyce8/EMBER2024-capa huggingface dataset:
Function at 0x7c864d
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a4
mov edx, dword [ebp + 8]
xor ecx, ecx
mov eax, 0x7d2388
cmp edx, dword [eax]
je 0x7c866f
add eax, 8
inc ecx
cmp eax, 0x7d2418
jl 0x7c8660
push esi
mov esi, ecx
shl esi, 3
cmp edx, dword [esi + 0x7d2388]
jne 0x7c879d
mov eax, dword [0xbd7ca0]
cmp eax, 1
je 0x7c8777
test eax, eax
jne 0x7c86a0
cmp dword [0x7d22b4], 1
je 0x7c8777
cmp edx, 0xfc
je 0x7c879d
lea eax, [ebp - 0x1a4]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x7c86d7
lea eax, [ebp - 0x1a4]
push str._program_name_unknown_
push eax
call fcn.007c9030
pop ecx
pop ecx
lea eax, [ebp - 0x1a4]
push edi
push eax
lea edi, [ebp - 0x1a4]
call fcn.007c94c0
inc eax
pop ecx
cmp eax, 0x3c
jbe 0x7c871a
lea eax, [ebp - 0x1a4]
push eax
call fcn.007c94c0
mov edi, eax
lea eax, [ebp - 0x1a4]
sub eax, 0x3b
push 3
add edi, eax
push 0x7cdde4
push edi
call fcn.007cb390
add esp, 0x10
lea eax, [ebp - 0xa0]
push str.Runtime_Error__n_nProgram:
push eax
call fcn.007c9030
lea eax, [ebp - 0xa0]
push edi
push eax
call fcn.007c9040
lea eax, [ebp - 0xa0]
push 0x7cddc4
push eax
call fcn.007c9040
push dword [esi + 0x7d238c]
lea eax, [ebp - 0xa0]
push eax
call fcn.007c9040
push 0x12010
lea eax, [ebp - 0xa0]
push str.Microsoft_Visual_C_Runtime_Library
push eax
call fcn.007cb304
add esp, 0x2c
pop edi
jmp 0x7c879d
lea eax, [ebp + 8]
lea esi, [esi + 0x7d238c]
push 0
push eax
push dword [esi]
call fcn.007c94c0
pop ecx
push eax
push dword [esi]
push 0xfffffffffffffff4
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
pop esi
leave
ret

Function at 0x431000
Capabilities:
Encode data using xor
Packed with generic packer

Disassembly:
pushal
nop
nop
nop
nop
nop
nop
mov eax, section..idata
push 4
nop
nop
nop
nop
nop
nop
nop
nop
pop edi
nop
nop
nop
nop
cmp eax, 0
nop
nop
nop
je 0x431072
nop
nop
mov ebx, 0x40915c
nop
mov ecx, ebx
nop
nop
nop
nop
nop
sub ecx, eax
nop
nop
nop
nop
xor edx, edx
nop
nop
push eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
nop
nop
nop
div edi
nop
nop
nop
nop
nop
nop
xchg ecx, eax
nop
nop
nop
pop eax
nop
nop
mov esi, 0x53e75ec
nop
nop
nop
nop
xor dword [eax], esi
nop
nop
add eax, edi
nop
nop
nop
nop
nop
nop
nop
loop 0x431060
nop
mov eax, section..data
nop
nop
nop
cmp eax, 0
nop
nop
nop
je 0x4310d2
nop
mov ebx, 0x42f3f8
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
sub ecx, eax
nop
nop
nop
nop
nop
nop
xor edx, edx
nop
nop
nop
nop
push eax
nop
nop
nop
mov eax, ecx
nop
nop
nop
nop
nop
nop
div edi
nop
nop
xchg ecx, eax
nop
nop
nop
pop eax
nop
nop
nop
nop
nop
nop
mov esi, 0x76e43039
nop
xor dword [eax], esi
nop
nop
nop
add eax, edi
nop
nop
nop
nop
nop
loop 0x4310c0
nop
nop
nop
nop
nop
nop
nop
popal
nop
jmp 0x401219
Function at 0x432001
Capabilities:
Encode data using xor
Packed with generic packer

Disassembly:
pushal
nop
nop
nop
nop
call 0x43200c
nop
nop
pop eax
nop
nop
nop
add eax, 0x40729f
nop
nop
sub eax, 0x407245
nop
mov ebx, dword [eax]
nop
nop
nop
nop
nop
mov ecx, dword [eax + 4]
nop
nop
nop
nop
mov edx, dword [eax + 8]
nop
xor dword [ebx], edx
nop
nop
nop
add ebx, 4
nop
nop
nop
nop
cmp ebx, ecx
nop
nop
nop
jl 0x432030
nop
nop
nop
nop
nop
add eax, 0xc
nop
nop
nop
nop
nop
cmp dword [eax], 0
nop
nop
nop
jne 0x43201e
nop
nop
popal
nop
nop
nop
nop
jmp 0x431219
Function at 0x402577
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2e20], 1
mov ecx, 0xddab
jne 0x4025fe
or dword [0x4c2e20], 1
lea eax, [ecx - 0x1d]
mov edx, eax
add eax, 0x69
mov word [0x4bc9d4], ax
mov word [0x4bc9c8], dx
add edx, 0x71
lea eax, [ecx + 0x24]
mov word [0x4bc9d6], ax
add eax, 0xf
mov word [0x4bc9d8], ax
mov word [0x4bc9ca], dx
lea edx, [ecx + 0x43]
lea eax, [ecx + 0x1b]
mov word [0x4bc9da], ax
mov word [0x4bc9cc], dx
add edx, 0xfffffff8
add eax, 0x15
mov word [0x4bc9dc], ax
lea eax, [ecx + 0x49]
mov word [0x4bc9de], ax
mov eax, ecx
mov word [0x4bc9ce], dx
mov dword [0x4bc9d0], 0xdd8eddfb
mov word [0x4bc9e0], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4bc9c8]
add eax, 2
mov word [eax + 0x4bd072], dx
cmp eax, 0x1a
jb 0x402600
mov eax, 0x4bd074
ret

Function at 0x40261e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2e18], 1
jne 0x40264c
or dword [0x4c2e18], 1
mov dword [0x4bc9f0], 0xcfc4c697
mov dword [0x4bc9f4], 0x94cec7de
mov dword [0x4bc9f8], 0xab959494
xor eax, eax
mov cl, byte [eax + 0x4bc9f0]
xor cl, 0xab
mov byte [eax + 0x4bd09c], cl
inc eax
cmp eax, 0xc
jb 0x40264e
mov eax, 0x4bd09c
ret

Function at 0x402669
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2e14], 1
mov edx, 0xddab
jne 0x402729
push esi
lea ecx, [edx - 0x22]
mov eax, ecx
mov word [0x4bc9fc], ax
add eax, 2
or dword [0x4c2e14], 1
mov word [0x4bc9fe], ax
lea eax, [edx - 0x25]
mov esi, eax
mov word [0x4bca00], si
mov word [0x4bca02], ax
add eax, 0x42
mov word [0x4bca04], ax
lea eax, [edx + 0x2e]
mov esi, eax
mov word [0x4bca06], si
add esi, 0xfffffff1
mov word [0x4bca08], si
lea esi, [edx + 0x2d]
mov word [0x4bca0a], si
add esi, 0xffffffeb
mov word [0x4bca0c], si
lea esi, [edx + 0x49]
mov word [0x4bca0e], si
mov esi, eax
mov word [0x4bca10], si
add esi, 0xfffffff5
add eax, 6
mov word [0x4bca12], si
lea esi, [edx + 0x30]
mov word [0x4bca1a], ax
mov eax, edx
mov word [0x4bca14], si
mov dword [0x4bca16], 0xddd9ddc4
mov dword [0x4bca1c], 0xdd89dd96
mov word [0x4bca20], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4bc9fc]
add eax, 2
mov word [eax + 0x4bd0a6], cx
cmp eax, 0x26
jb 0x40272b
mov eax, 0x4bd0a8
ret
Function at 0x40280c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x7c
test byte [0x4c2e10], 1
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov ecx, 0xddab
jne 0x40284a
or dword [0x4c2e10], 1
lea eax, [ecx + 0x31]
mov word [0x4bca24], ax
add eax, 0xffffffed
mov word [0x4bca26], ax
mov eax, ecx
mov word [0x4bca28], ax
xor esi, esi
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4bca24]
add eax, 2
mov word [eax + 0x4bd0ce], dx
cmp eax, 6
jb 0x40284e
lea eax, [ebx + 0xc]
cmp dword [eax + 0x14], 8
jb 0x402871
mov eax, dword [eax]
push 0x4bd0d0
push eax
lea eax, [esp + 0x18]
push eax
call fcn.00463897
add esp, 0xc
test eax, eax
jne 0x40293c
push dword [esp + 0x10]
push dword [ebp + 0xc]
push ebx
call fcn.004035e6
push dword [esp + 0x10]
call fcn.00402945
push eax
call fcn.00463df1
push dword [esp + 0x18]
call fcn.0046437c
add esp, 0xc
push 0x44
pop edi
push edi
lea eax, [esp + 0x44]
push esi
push eax
call fcn.00466f50
add esp, 0xc
mov dword [esp + 0x40], edi
xor eax, eax
lea ecx, [esp + 0x14]
push ecx
lea edi, [esp + 0x18]
stosd dword es:[edi], eax
lea ecx, [esp + 0x44]
push ecx
push esi
push esi
stosd dword es:[edi], eax
push esi
push esi
stosd dword es:[edi], eax
push esi
stosd dword es:[edi], eax
mov eax, dword [ebx + 0x28]
push esi
push eax
push esi
call dword [0x49208c]
test eax, eax
jne 0x40292a
call dword [0x4920a8]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.0042a914
cmp dword [eax + 0x14], 0x10
pop ecx
pop ecx
jb 0x40290e
mov eax, dword [eax]
push eax
call fcn.00402985
push eax
call fcn.004640c0
pop ecx
pop ecx
push esi
push 1
lea ecx, [esp + 0x2c]
call fcn.00404d81
jmp 0x40293c
push dword [esp + 0x18]
mov esi, dword [0x4920bc]
call esi
push dword [esp + 0x14]
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0x402945
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2e0c], 1
jne 0x402968
or dword [0x4c2e0c], 1
mov dword [0x4bca2c], 0xe5eea1a6
mov word [0x4bca30], 0xabef
xor eax, eax
mov cl, byte [eax + 0x4bca2c]
xor cl, 0xab
mov byte [eax + 0x4bd0d8], cl
inc eax
cmp eax, 6
jb 0x40296a
mov eax, 0x4bd0d8
ret

Function at 0x402985
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2e08], 1
jne 0x402a0a
or dword [0x4c2e08], 1
mov dword [0x4bca34], 0xc7c2caed
mov dword [0x4bca38], 0xdf8bcfce
mov dword [0x4bca3c], 0xd9c88bc4
mov dword [0x4bca40], 0xcedfcace
mov dword [0x4bca44], 0xcad9c88b
mov dword [0x4bca48], 0xd98bc3d8
mov dword [0x4bca4c], 0xd9c4dbce
mov dword [0x4bca50], 0x8bd9cedf
mov dword [0x4bca54], 0xc8c4d9db
mov dword [0x4bca58], 0x91d8d8ce
mov dword [0x4bca5c], 0xa1d88e8b
mov byte [0x4bca60], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bca34]
xor cl, 0xab
mov byte [eax + 0x4bd0e0], cl
inc eax
cmp eax, 0x2d
jb 0x402a0c
mov eax, 0x4bd0e0
ret
Function at 0x403b1b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2da8], 1
jne 0x403b50
or dword [0x4c2da8], 1
mov dword [0x4bcce0], 0xdecfc4e6
mov dword [0x4bcce4], 0x8b91cec7
mov dword [0x4bcce8], 0xa1a6d88e
mov byte [0x4bccec], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bcce0]
xor cl, 0xab
mov byte [eax + 0x4bd38c], cl
inc eax
cmp eax, 0xd
jb 0x403b52
mov eax, 0x4bd38c
ret

Function at 0x403b6d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2da4], 1
jne 0x403bac
or dword [0x4c2da4], 1
mov dword [0x4bccf0], 0xced9c3ff
mov dword [0x4bccf4], 0x8b91cfca
mov dword [0x4bccf8], 0xd38ed39b
mov dword [0x4bccfc], 0xa1a6a1a6
mov byte [0x4bcd00], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bccf0]
xor cl, 0xab
mov byte [eax + 0x4bd39c], cl
inc eax
cmp eax, 0x11
jb 0x403bae
mov eax, 0x4bd39c
ret

Function at 0x403bc9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2da0], 1
jne 0x403c07
or dword [0x4c2da0], 1
mov dword [0x4bcd04], 0xcec8d3ee
mov dword [0x4bcd08], 0xc4c2dfdb
mov dword [0x4bcd0c], 0xcf8e8bc5
mov word [0x4bcd10], 0xa1a6
mov byte [0x4bcd12], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bcd04]
xor cl, 0xab
mov byte [eax + 0x4bd3b0], cl
inc eax
cmp eax, 0xf
jb 0x403c09
mov eax, 0x4bd3b0
ret

Function at 0x403c24
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d9c], 1
jne 0x403c62
or dword [0x4c2d9c], 1
mov dword [0x4bcd14], 0xcac8c4e7
mov dword [0x4bcd18], 0xc5c4c2df
mov dword [0x4bcd1c], 0xdb8e8b91
mov word [0x4bcd20], 0xa1a6
mov byte [0x4bcd22], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bcd14]
xor cl, 0xab
mov byte [eax + 0x4bd3c0], cl
inc eax
cmp eax, 0xf
jb 0x403c64
mov eax, 0x4bd3c0
ret

Function at 0x403c7f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d98], 1
jne 0x403cc0
or dword [0x4c2d98], 1
mov dword [0x4bcd24], 0xcedbd2ff
mov dword [0x4bcd28], 0xd88e8b91
mov dword [0x4bcd2c], 0xd39b838b
mov dword [0x4bcd30], 0xa682d38e
mov word [0x4bcd34], 0xaba1
xor eax, eax
mov cl, byte [eax + 0x4bcd24]
xor cl, 0xab
mov byte [eax + 0x4bd3d0], cl
inc eax
cmp eax, 0x12
jb 0x403cc2
mov eax, 0x4bd3d0
ret

Function at 0x403cdd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d94], 1
jne 0x403d65
or dword [0x4c2d94], 1
mov dword [0x4bcd38], 0xcadfceef
mov dword [0x4bcd3c], 0x91d8c7c2
mov dword [0x4bcd40], 0xc2d9ff8b
mov dword [0x4bcd44], 0xdf8bcfce
mov dword [0x4bcd48], 0xced98bc4
mov dword [0x4bcd4c], 0xcd8bcfca
mov dword [0x4bcd50], 0x8bc6c4d9
mov dword [0x4bcd54], 0xc4c6cec6
mov dword [0x4bcd58], 0xca8bd2d9
mov dword [0x4bcd5c], 0xced9cfcf
mov dword [0x4bcd60], 0x8e8bd8d8
mov dword [0x4bcd64], 0xaba1a6db
xor eax, eax
mov cl, byte [eax + 0x4bcd38]
xor cl, 0xab
mov byte [eax + 0x4bd3e4], cl
inc eax
cmp eax, 0x30
jb 0x403d67
mov eax, 0x4bd3e4
ret
Function at 0x403d82
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d90], 1
jne 0x403e14
or dword [0x4c2d90], 1
mov dword [0x4bcd68], 0xcadfceef
mov dword [0x4bcd6c], 0x91d8c7c2
mov dword [0x4bcd70], 0xc2d9ff8b
mov dword [0x4bcd74], 0xdf8bcfce
mov dword [0x4bcd78], 0xd9dc8bc4
mov dword [0x4bcd7c], 0x8bcedfc2
mov dword [0x4bcd80], 0xc68bc4df
mov dword [0x4bcd84], 0xd9c4c6ce
mov dword [0x4bcd88], 0xcfca8bd2
mov dword [0x4bcd8c], 0xd8ced9cf
mov dword [0x4bcd90], 0xdb8e8bd8
mov word [0x4bcd94], 0xa1a6
mov byte [0x4bcd96], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bcd68]
xor cl, 0xab
mov byte [eax + 0x4bd414], cl
inc eax
cmp eax, 0x2f
jb 0x403e16
mov eax, 0x4bd414
ret

Function at 0x403e31
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d8c], 1
jne 0x403ec4
or dword [0x4c2d8c], 1
mov dword [0x4bcd98], 0xcadfceef
mov dword [0x4bcd9c], 0x91d8c7c2
mov dword [0x4bcda0], 0xc2d9ff8b
mov dword [0x4bcda4], 0xdf8bcfce
mov dword [0x4bcda8], 0xd3ce8bc4
mov dword [0x4bcdac], 0xdfdec8ce
mov dword [0x4bcdb0], 0xcec68bce
mov dword [0x4bcdb4], 0xd2d9c4c6
mov dword [0x4bcdb8], 0x8bdfca8b
mov dword [0x4bcdbc], 0xd9cfcfca
mov dword [0x4bcdc0], 0x8bd8d8ce
mov dword [0x4bcdc4], 0xa1a6db8e
mov byte [0x4bcdc8], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bcd98]
xor cl, 0xab
mov byte [eax + 0x4bd444], cl
inc eax
cmp eax, 0x31
jb 0x403ec6
mov eax, 0x4bd444
ret

Function at 0x403ee1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d88], 1
jne 0x403f18
or dword [0x4c2d88], 1
mov dword [0x4bcdcc], 0xcccac7ed
mov dword [0x4bcdd0], 0x9b8b91d8
mov dword [0x4bcdd4], 0xa6d38ed3
mov word [0x4bcdd8], 0xaba1
xor eax, eax
mov cl, byte [eax + 0x4bcdcc]
xor cl, 0xab
mov byte [eax + 0x4bd478], cl
inc eax
cmp eax, 0xe
jb 0x403f1a
mov eax, 0x4bd478
ret

Function at 0x403f35
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d84], 1
jne 0x403f6c
or dword [0x4c2d84], 1
mov dword [0x4bcddc], 0xcad9cafb
mov dword [0x4bcde0], 0xcedfcec6
mov dword [0x4bcde4], 0xa691d8d9
mov word [0x4bcde8], 0xaba1
xor eax, eax
mov cl, byte [eax + 0x4bcddc]
xor cl, 0xab
mov byte [eax + 0x4bd488], cl
inc eax
cmp eax, 0xe
jb 0x403f6e
mov eax, 0x4bd488
ret

Function at 0x403f89
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d80], 1
jne 0x403fd2
or dword [0x4c2d80], 1
mov dword [0x4bcdec], 0xd9cafba2
mov dword [0x4bcdf0], 0xdfcec6ca
mov dword [0x4bcdf4], 0x8ef0d9ce
mov dword [0x4bcdf8], 0x8b91f6cf
mov dword [0x4bcdfc], 0xa1a6db8e
mov byte [0x4bce00], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bcdec]
xor cl, 0xab
mov byte [eax + 0x4bd498], cl
inc eax
cmp eax, 0x15
jb 0x403fd4
mov eax, 0x4bd498
ret

Function at 0x403fef
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d7c], 1
jne 0x404027
or dword [0x4c2d7c], 1
mov dword [0x4bce04], 0x8be3eef8
mov dword [0x4bce08], 0xc7cac5ea
mov dword [0x4bce0c], 0xd8c2d8d2
mov dword [0x4bce10], 0xaba1a691
xor eax, eax
mov cl, byte [eax + 0x4bce04]
xor cl, 0xab
mov byte [eax + 0x4bd4b0], cl
inc eax
cmp eax, 0x10
jb 0x404029
mov eax, 0x4bd4b0
ret
Function at 0x404044
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d78], 1
jne 0x40408c
or dword [0x4c2d78], 1
mov dword [0x4bce14], 0xc1c9e4a2
mov dword [0x4bce18], 0x8bdfc8ce
mov dword [0x4bce1c], 0xcedbd2df
mov dword [0x4bce20], 0xd88e8b91
mov word [0x4bce24], 0xa1a6
mov byte [0x4bce26], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bce14]
xor cl, 0xab
mov byte [eax + 0x4bd4c0], cl
inc eax
cmp eax, 0x13
jb 0x40408e
mov eax, 0x4bd4c0
ret

Function at 0x4040a9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d74], 1
jne 0x404112
or dword [0x4c2d74], 1
mov dword [0x4bce28], 0xc2caeda2
mov dword [0x4bce2c], 0x8bcfcec7
mov dword [0x4bce30], 0xcd8bc4df
mov dword [0x4bce34], 0xc4c7c7c4
mov dword [0x4bce38], 0xc4db8bdc
mov dword [0x4bce3c], 0xcedfc5c2
mov dword [0x4bce40], 0xc3c88bd9
mov dword [0x4bce44], 0xa6c5c2ca
mov word [0x4bce48], 0xaba1
xor eax, eax
mov cl, byte [eax + 0x4bce28]
xor cl, 0xab
mov byte [eax + 0x4bd4d4], cl
inc eax
cmp eax, 0x22
jb 0x404114
mov eax, 0x4bd4d4
ret

Function at 0x40412f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d70], 1
jne 0x404152
or dword [0x4c2d70], 1
mov dword [0x4bce4c], 0xcfdfd8eb
mov word [0x4bce50], 0xabeb
xor eax, eax
mov cl, byte [eax + 0x4bce4c]
xor cl, 0xab
mov byte [eax + 0x4bd4f8], cl
inc eax
cmp eax, 6
jb 0x404154
mov eax, 0x4bd4f8
ret

Function at 0x40416f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d6c], 1
jne 0x4041a6
or dword [0x4c2d6c], 1
mov dword [0x4bce54], 0xdfc5ded9
mov dword [0x4bce58], 0xf4cec6c2
mov dword [0x4bce5c], 0xc4d9d9ce
mov word [0x4bce60], 0xabd9
xor eax, eax
mov cl, byte [eax + 0x4bce54]
xor cl, 0xab
mov byte [eax + 0x4bd500], cl
inc eax
cmp eax, 0xe
jb 0x4041a8
mov eax, 0x4bd500
ret

Function at 0x4041c3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d68], 1
jne 0x4041f1
or dword [0x4c2d68], 1
mov dword [0x4bce64], 0xccc5cad9
mov dword [0x4bce68], 0xd9cef4ce
mov dword [0x4bce6c], 0xabd9c4d9
xor eax, eax
mov cl, byte [eax + 0x4bce64]
xor cl, 0xab
mov byte [eax + 0x4bd510], cl
inc eax
cmp eax, 0xc
jb 0x4041f3
mov eax, 0x4bd510
ret

Function at 0x40420e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d64], 1
jne 0x40424c
or dword [0x4c2d64], 1
mov dword [0x4bce70], 0xd9ceddc4
mov dword [0x4bce74], 0xdcc4c7cd
mov dword [0x4bce78], 0xd9d9cef4
mov word [0x4bce7c], 0xd9c4
mov byte [0x4bce7e], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bce70]
xor cl, 0xab
mov byte [eax + 0x4bd51c], cl
inc eax
cmp eax, 0xf
jb 0x40424e
mov eax, 0x4bd51c
ret

Function at 0x404269
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d60], 1
jne 0x4042a1
or dword [0x4c2d60], 1
mov dword [0x4bce80], 0xcecfc5de
mov dword [0x4bce84], 0xc4c7cdd9
mov dword [0x4bce88], 0xd9cef4dc
mov dword [0x4bce8c], 0xabd9c4d9
xor eax, eax
mov cl, byte [eax + 0x4bce80]
xor cl, 0xab
mov byte [eax + 0x4bd52c], cl
inc eax
cmp eax, 0x10
jb 0x4042a3
mov eax, 0x4bd52c
ret
Function at 0x4042be
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d5c], 1
jne 0x4042ec
or dword [0x4c2d5c], 1
mov dword [0x4bce90], 0xc2ccc4c7
mov dword [0x4bce94], 0xd9cef4c8
mov dword [0x4bce98], 0xabd9c4d9
xor eax, eax
mov cl, byte [eax + 0x4bce90]
xor cl, 0xab
mov byte [eax + 0x4bd53c], cl
inc eax
cmp eax, 0xc
jb 0x4042ee
mov eax, 0x4bd53c
ret

Function at 0x404309
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d58], 1
jne 0x40433e
or dword [0x4c2d58], 1
mov dword [0x4bce9c], 0xcac6c4cf
mov dword [0x4bcea0], 0xcef4c5c2
mov dword [0x4bcea4], 0xd9c4d9d9
mov byte [0x4bcea8], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bce9c]
xor cl, 0xab
mov byte [eax + 0x4bd548], cl
inc eax
cmp eax, 0xd
jb 0x404340
mov eax, 0x4bd548
ret

Function at 0x40435b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d54], 1
jne 0x40439a
or dword [0x4c2d54], 1
mov dword [0x4bceac], 0xcaddc5c2
mov dword [0x4bceb0], 0xf4cfc2c7
mov dword [0x4bceb4], 0xdeccd9ca
mov dword [0x4bceb8], 0xdfc5cec6
mov byte [0x4bcebc], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bceac]
xor cl, 0xab
mov byte [eax + 0x4bd558], cl
inc eax
cmp eax, 0x11
jb 0x40439c
mov eax, 0x4bd558
ret

Function at 0x4043b7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d50], 1
jne 0x4043ec
or dword [0x4c2d50], 1
mov dword [0x4bcec0], 0xccc5cec7
mov dword [0x4bcec4], 0xcef4c3df
mov dword [0x4bcec8], 0xd9c4d9d9
mov byte [0x4bcecc], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bcec0]
xor cl, 0xab
mov byte [eax + 0x4bd56c], cl
inc eax
cmp eax, 0xd
jb 0x4043ee
mov eax, 0x4bd56c
ret

Function at 0x404409
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d4c], 1
jne 0x40443e
or dword [0x4c2d4c], 1
mov dword [0x4bced0], 0xf4dfdec4
mov dword [0x4bced4], 0xd9f4cdc4
mov dword [0x4bced8], 0xceccc5ca
mov byte [0x4bcedc], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bced0]
xor cl, 0xab
mov byte [eax + 0x4bd57c], cl
inc eax
cmp eax, 0xd
jb 0x404440
mov eax, 0x4bd57c
ret

Function at 0x40445b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d48], 1
jne 0x404488
or dword [0x4c2d48], 1
mov dword [0x4bcee0], 0xcec8d3ce
mov dword [0x4bcee4], 0xc4c2dfdb
mov word [0x4bcee8], 0xabc5
xor eax, eax
mov cl, byte [eax + 0x4bcee0]
xor cl, 0xab
mov byte [eax + 0x4bd58c], cl
inc eax
cmp eax, 0xa
jb 0x40448a
mov eax, 0x4bd58c
ret

Function at 0x4044a5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d44], 1
jne 0x404504
or dword [0x4c2d44], 1
mov dword [0x4bceec], 0xcfdfd8a2
mov dword [0x4bcef0], 0xd3ce9191
mov dword [0x4bcef4], 0xdfdbcec8
mov dword [0x4bcef8], 0x91c5c4c2
mov dword [0x4bcefc], 0xcac3dc91
mov dword [0x4bcf00], 0x918283df
mov dword [0x4bcf04], 0xa6d88e8b
mov word [0x4bcf08], 0xaba1
xor eax, eax
mov cl, byte [eax + 0x4bceec]
xor cl, 0xab
mov byte [eax + 0x4bd598], cl
inc eax
cmp eax, 0x1e
jb 0x404506
mov eax, 0x4bd598
ret
Function at 0x404521
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d40], 1
jne 0x404595
or dword [0x4c2d40], 1
mov dword [0x4bcf0c], 0xc2caeda2
mov dword [0x4bcf10], 0x8bcfcec7
mov dword [0x4bcf14], 0xcc8bc4df
mov dword [0x4bcf18], 0xd88bdfce
mov dword [0x4bcf1c], 0x9191cfdf
mov dword [0x4bcf20], 0xcec8d3ce
mov dword [0x4bcf24], 0xc4c2dfdb
mov dword [0x4bcf28], 0xdc9191c5
mov dword [0x4bcf2c], 0x83dfcac3
mov dword [0x4bcf30], 0xaba1a682
xor eax, eax
mov cl, byte [eax + 0x4bcf0c]
xor cl, 0xab
mov byte [eax + 0x4bd5b8], cl
inc eax
cmp eax, 0x28
jb 0x404597
mov eax, 0x4bd5b8
ret

Function at 0x4045b2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d3c], 1
jne 0x4045e6
or dword [0x4c2d3c], 1
mov dword [0x4bcf34], 0xc6c4c8f4
mov dword [0x4bcf38], 0xd9d9cef4
mov word [0x4bcf3c], 0xd9c4
mov byte [0x4bcf3e], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bcf34]
xor cl, 0xab
mov byte [eax + 0x4bd5e0], cl
inc eax
cmp eax, 0xb
jb 0x4045e8
mov eax, 0x4bd5e0
ret

Function at 0x404603
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d38], 1
jne 0x40466c
or dword [0x4c2d38], 1
mov dword [0x4bcf40], 0xc4c8f4a2
mov dword [0x4bcf44], 0xd9cef4c6
mov dword [0x4bcf48], 0x91d9c4d9
mov dword [0x4bcf4c], 0xd9d9ee91
mov dword [0x4bcf50], 0xcee6d9c4
mov dword [0x4bcf54], 0xcccad8d8
mov dword [0x4bcf58], 0x918283ce
mov dword [0x4bcf5c], 0xa6d88e8b
mov word [0x4bcf60], 0xaba1
xor eax, eax
mov cl, byte [eax + 0x4bcf40]
xor cl, 0xab
mov byte [eax + 0x4bd5ec], cl
inc eax
cmp eax, 0x22
jb 0x40466e
mov eax, 0x4bd5ec
ret

Function at 0x404689
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d34], 1
jne 0x404707
or dword [0x4c2d34], 1
mov dword [0x4bcf64], 0xc2caeda2
mov dword [0x4bcf68], 0x8bcfcec7
mov dword [0x4bcf6c], 0xcc8bc4df
mov dword [0x4bcf70], 0xf48bdfce
mov dword [0x4bcf74], 0xf4c6c4c8
mov dword [0x4bcf78], 0xc4d9d9ce
mov dword [0x4bcf7c], 0xee9191d9
mov dword [0x4bcf80], 0xd9c4d9d9
mov dword [0x4bcf84], 0xd8d8cee6
mov dword [0x4bcf88], 0x83ceccca
mov dword [0x4bcf8c], 0xaba1a682
xor eax, eax
mov cl, byte [eax + 0x4bcf64]
xor cl, 0xab
mov byte [eax + 0x4bd610], cl
inc eax
cmp eax, 0x2c
jb 0x404709
mov eax, 0x4bd610
ret

Function at 0x404724
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d30], 1
jne 0x40479f
or dword [0x4c2d30], 1
mov dword [0x4bcf90], 0xc8cadff8
mov dword [0x4bcf94], 0xdecf8bc0
mov dword [0x4bcf98], 0xce8bdbc6
mov dword [0x4bcf9c], 0xd9c4d9d9
mov dword [0x4bcfa0], 0xc4e88b91
mov dword [0x4bcfa4], 0xd3cedfc5
mov dword [0x4bcfa8], 0xc8cef9df
mov dword [0x4bcfac], 0x8bcfd9c4
mov dword [0x4bcfb0], 0x8bd8cadc
mov dword [0x4bcfb4], 0xc7c7dec5
mov byte [0x4bcfb8], 0xab
xor eax, eax
mov cl, byte [eax + 0x4bcf90]
xor cl, 0xab
mov byte [eax + 0x4bd63c], cl
inc eax
cmp eax, 0x29
jb 0x4047a1
mov eax, 0x4bd63c
ret