joyce8/EMBER2024-capa huggingface dataset:
Function at 0x430289
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cd8], 1
jne 0x43033a
mov eax, 0xdc80
mov word [0x4c7018], ax
add eax, 3
mov word [0x4c701a], ax
or dword [0x4c7cd8], 1
mov edx, 0xdc8d
mov eax, edx
mov word [0x4c701c], ax
add eax, 4
mov word [0x4c701e], ax
lea ecx, [edx + 0xa]
mov eax, ecx
mov word [0x4c7020], ax
add eax, 0xfffffff4
mov word [0x4c7022], ax
lea eax, [edx - 9]
mov word [0x4c7024], ax
add eax, 5
mov word [0x4c7026], ax
lea eax, [edx + 0xe]
push edi
mov edi, eax
add eax, 0xffffffec
mov ecx, eax
mov word [0x4c7036], ax
lea eax, [edx + 0xf]
mov word [0x4c7038], ax
add eax, 0x2c
mov word [0x4c7028], di
mov word [0x4c702a], di
mov dword [0x4c702c], 0xdc9bdc8d
mov dword [0x4c7030], 0xdc9adc97
mov word [0x4c7034], cx
mov word [0x4c703a], ax
pop edi
xor eax, eax
mov ecx, 0xdcc8
xor cx, word [eax + 0x4c7018]
add eax, 2
mov word [eax + 0x4c774e], cx
cmp eax, 0x24
jb 0x43033c
mov eax, 0x4c7750
ret

Function at 0x430708
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cc0], 1
jne 0x43075d
or dword [0x4c7cc0], 1
mov dword [0x4c70c8], 0x8bafad9a
mov dword [0x4c70cc], 0xbca9adba
mov dword [0x4c70d0], 0xb1ad83ad
mov dword [0x4c70d4], 0xe1e0b08d
mov dword [0x4c70d8], 0xa1a9aee8
mov dword [0x4c70dc], 0xf2acada4
mov word [0x4c70e0], 0xc8e8
xor eax, eax
mov cl, byte [eax + 0x4c70c8]
xor cl, 0xc8
mov byte [eax + 0x4c77ac], cl
inc eax
cmp eax, 0x1a
jb 0x43075f
mov eax, 0x4c77ac
ret

Function at 0x43083f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cbc], 1
jne 0x4308a5
or dword [0x4c7cbc], 1
mov dword [0x4c70e4], 0xa5bda68d
mov dword [0x4c70e8], 0xbca9baad
mov dword [0x4c70ec], 0xe8a6a7a1
mov dword [0x4c70f0], 0xadaca6a1
mov dword [0x4c70f4], 0xbda7e8b0
mov dword [0x4c70f8], 0xaea7e8bc
mov dword [0x4c70fc], 0xa6a9bae8
mov word [0x4c7100], 0xadaf
mov byte [0x4c7102], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c70e4]
xor cl, 0xc8
mov byte [eax + 0x4c77c8], cl
inc eax
cmp eax, 0x1f
jb 0x4308a7
mov eax, 0x4c77c8
ret

Function at 0x4308c2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cb8], 1
jne 0x43090e
or dword [0x4c7cb8], 1
mov dword [0x4c7104], 0x8dafad9a
mov dword [0x4c7108], 0x83a5bda6
mov dword [0x4c710c], 0xb08db1ad
mov dword [0x4c7110], 0xaee8e1e0
mov dword [0x4c7114], 0xada4a1a9
mov dword [0x4c7118], 0xc8e8f2ac
xor eax, eax
mov cl, byte [eax + 0x4c7104]
xor cl, 0xc8
mov byte [eax + 0x4c77e8], cl
inc eax
cmp eax, 0x18
jb 0x430910
mov eax, 0x4c77e8
ret

Function at 0x430a73
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cb4], 1
jne 0x430aa8
or dword [0x4c7cb4], 1
mov dword [0x4c711c], 0xa4a4bd86
mov dword [0x4c7120], 0xa6a7abe8
mov dword [0x4c7124], 0xbcb0adbc
mov byte [0x4c7128], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c711c]
xor cl, 0xc8
mov byte [eax + 0x4c7800], cl
inc eax
cmp eax, 0xd
jb 0x430aaa
mov eax, 0x4c7800
ret
Function at 0x430ac5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cb0], 1
jne 0x430b11
or dword [0x4c7cb0], 1
mov dword [0x4c712c], 0x87afad9a
mov dword [0x4c7130], 0x83a6adb8
mov dword [0x4c7134], 0xb08db1ad
mov dword [0x4c7138], 0xaee8e1e0
mov dword [0x4c713c], 0xada4a1a9
mov dword [0x4c7140], 0xc8e8f2ac
xor eax, eax
mov cl, byte [eax + 0x4c712c]
xor cl, 0xc8
mov byte [eax + 0x4c7810], cl
inc eax
cmp eax, 0x18
jb 0x430b13
mov eax, 0x4c7810
ret

Function at 0x430b2e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cac], 1
jne 0x430b8a
or dword [0x4c7cac], 1
mov dword [0x4c7144], 0x99afad9a
mov dword [0x4c7148], 0xb1baadbd
mov dword [0x4c714c], 0xa7aea681
mov dword [0x4c7150], 0xe0b1ad83
mov dword [0x4c7154], 0xa9aee8e1
mov dword [0x4c7158], 0xacada4a1
mov word [0x4c715c], 0xe8f2
mov byte [0x4c715e], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c7144]
xor cl, 0xc8
mov byte [eax + 0x4c7828], cl
inc eax
cmp eax, 0x1b
jb 0x430b8c
mov eax, 0x4c7828
ret

Function at 0x430c7d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7ca8], 1
jne 0x430ce3
or dword [0x4c7ca8], 1
mov dword [0x4c7160], 0xa5bda68d
mov dword [0x4c7164], 0xbca9baad
mov dword [0x4c7168], 0xe8a6a7a1
mov dword [0x4c716c], 0xadaca6a1
mov dword [0x4c7170], 0xbda7e8b0
mov dword [0x4c7174], 0xaea7e8bc
mov dword [0x4c7178], 0xa6a9bae8
mov word [0x4c717c], 0xadaf
mov byte [0x4c717e], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c7160]
xor cl, 0xc8
mov byte [eax + 0x4c7844], cl
inc eax
cmp eax, 0x1f
jb 0x430ce5
mov eax, 0x4c7844
ret

Function at 0x430d00
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7ca4], 1
jne 0x430d5c
or dword [0x4c7ca4], 1
mov dword [0x4c7180], 0x99afad9a
mov dword [0x4c7184], 0xb1baadbd
mov dword [0x4c7188], 0xa7aea681
mov dword [0x4c718c], 0xe0b1ad83
mov dword [0x4c7190], 0xa9aee8e1
mov dword [0x4c7194], 0xacada4a1
mov word [0x4c7198], 0xe8f2
mov byte [0x4c719a], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c7180]
xor cl, 0xc8
mov byte [eax + 0x4c7864], cl
inc eax
cmp eax, 0x1b
jb 0x430d5e
mov eax, 0x4c7864
ret

Function at 0x430ebe
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7ca0], 1
jne 0x430ef3
or dword [0x4c7ca0], 1
mov dword [0x4c719c], 0xa4a4bd86
mov dword [0x4c71a0], 0xa6a7abe8
mov dword [0x4c71a4], 0xbcb0adbc
mov byte [0x4c71a8], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c719c]
xor cl, 0xc8
mov byte [eax + 0x4c7880], cl
inc eax
cmp eax, 0xd
jb 0x430ef5
mov eax, 0x4c7880
ret

Function at 0x430f10
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c9c], 1
jne 0x430f5c
or dword [0x4c7c9c], 1
mov dword [0x4c71ac], 0x87afad9a
mov dword [0x4c71b0], 0x83a6adb8
mov dword [0x4c71b4], 0xb08db1ad
mov dword [0x4c71b8], 0xaee8e1e0
mov dword [0x4c71bc], 0xada4a1a9
mov dword [0x4c71c0], 0xc8e8f2ac
xor eax, eax
mov cl, byte [eax + 0x4c71ac]
xor cl, 0xc8
mov byte [eax + 0x4c7890], cl
inc eax
cmp eax, 0x18
jb 0x430f5e
mov eax, 0x4c7890
ret
Function at 0x430f79
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c98], 1
jne 0x430fd5
or dword [0x4c7c98], 1
mov dword [0x4c71c4], 0x99afad9a
mov dword [0x4c71c8], 0xb1baadbd
mov dword [0x4c71cc], 0xa7aea681
mov dword [0x4c71d0], 0xe0b1ad83
mov dword [0x4c71d4], 0xa9aee8e1
mov dword [0x4c71d8], 0xacada4a1
mov word [0x4c71dc], 0xe8f2
mov byte [0x4c71de], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c71c4]
xor cl, 0xc8
mov byte [eax + 0x4c78a8], cl
inc eax
cmp eax, 0x1b
jb 0x430fd7
mov eax, 0x4c78a8
ret

Function at 0x431283
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c94], 1
mov ecx, 0xdcc8
jne 0x4312ef
or dword [0x4c7c94], 1
lea eax, [ecx + 0x18]
mov word [0x4c71e0], ax
add eax, 0xffffffac
mov word [0x4c71e2], ax
lea eax, [ecx - 0x1b]
mov word [0x4c71e4], ax
inc eax
mov word [0x4c71e6], ax
lea eax, [ecx - 0x1f]
mov word [0x4c71e8], ax
add eax, 0x14
mov word [0x4c71ea], ax
lea eax, [ecx - 0x24]
mov word [0x4c71ec], ax
add eax, 0x18
mov word [0x4c71ee], ax
lea eax, [ecx + 0x19]
mov word [0x4c71f0], ax
mov eax, ecx
mov word [0x4c71f2], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c71e0]
add eax, 2
mov word [eax + 0x4c78c2], dx
cmp eax, 0x14
jb 0x4312f1
mov eax, 0x4c78c4
ret

Function at 0x43130f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c90], 1
mov ecx, 0xdcc8
jne 0x43137b
or dword [0x4c7c90], 1
lea eax, [ecx + 0x18]
mov word [0x4c71f4], ax
add eax, 0xffffffcc
mov word [0x4c71f6], ax
lea eax, [ecx - 0x1b]
mov word [0x4c71f8], ax
inc eax
mov word [0x4c71fa], ax
lea eax, [ecx - 0x1f]
mov word [0x4c71fc], ax
add eax, 0x14
mov word [0x4c71fe], ax
lea eax, [ecx - 0x24]
mov word [0x4c7200], ax
add eax, 0x18
mov word [0x4c7202], ax
lea eax, [ecx + 0x19]
mov word [0x4c7204], ax
mov eax, ecx
mov word [0x4c7206], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c71f4]
add eax, 2
mov word [eax + 0x4c78d6], dx
cmp eax, 0x14
jb 0x43137d
mov eax, 0x4c78d8
ret

Function at 0x43139b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c8c], 1
jne 0x4313e7
or dword [0x4c7c8c], 1
mov dword [0x4c7208], 0x87afad9a
mov dword [0x4c720c], 0x83a6adb8
mov dword [0x4c7210], 0xb08db1ad
mov dword [0x4c7214], 0xaee8e1e0
mov dword [0x4c7218], 0xada4a1a9
mov dword [0x4c721c], 0xc8e8f2ac
xor eax, eax
mov cl, byte [eax + 0x4c7208]
xor cl, 0xc8
mov byte [eax + 0x4c78ec], cl
inc eax
cmp eax, 0x18
jb 0x4313e9
mov eax, 0x4c78ec
ret

Function at 0x431404
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c88], 1
jne 0x431460
or dword [0x4c7c88], 1
mov dword [0x4c7220], 0x99afad9a
mov dword [0x4c7224], 0xb1baadbd
mov dword [0x4c7228], 0xbda4a99e
mov dword [0x4c722c], 0xe0b08dad
mov dword [0x4c7230], 0xa9aee8e1
mov dword [0x4c7234], 0xacada4a1
mov word [0x4c7238], 0xe8f2
mov byte [0x4c723a], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c7220]
xor cl, 0xc8
mov byte [eax + 0x4c7904], cl
inc eax
cmp eax, 0x1b
jb 0x431462
mov eax, 0x4c7904
ret
Function at 0x43147d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c84], 1
jne 0x4314d9
or dword [0x4c7c84], 1
mov dword [0x4c723c], 0x99afad9a
mov dword [0x4c7240], 0xb1baadbd
mov dword [0x4c7244], 0xbda4a99e
mov dword [0x4c7248], 0xe0b08dad
mov dword [0x4c724c], 0xa9aee8e1
mov dword [0x4c7250], 0xacada4a1
mov word [0x4c7254], 0xe8f2
mov byte [0x4c7256], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c723c]
xor cl, 0xc8
mov byte [eax + 0x4c7920], cl
inc eax
cmp eax, 0x1b
jb 0x4314db
mov eax, 0x4c7920
ret

Function at 0x43155b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c80], 1
jne 0x4315a6
or dword [0x4c7c80], 1
mov dword [0x4c7258], 0xadb8b19c
mov dword [0x4c725c], 0xbba9bfe8
mov dword [0x4c7260], 0xbca7a6e8
mov dword [0x4c7264], 0xbbe8a9e8
mov dword [0x4c7268], 0xa6a1babc
mov word [0x4c726c], 0xc8af
xor eax, eax
mov cl, byte [eax + 0x4c7258]
xor cl, 0xc8
mov byte [eax + 0x4c793c], cl
inc eax
cmp eax, 0x16
jb 0x4315a8
mov eax, 0x4c793c
ret

Function at 0x4315c3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c7c], 1
jne 0x43162c
or dword [0x4c7c7c], 1
mov dword [0x4c7270], 0xa9bea681
mov dword [0x4c7274], 0xe8aca1a4
mov dword [0x4c7278], 0xa9bca9ac
mov dword [0x4c727c], 0xb2a1bbe8
mov dword [0x4c7280], 0xa7aee8ad
mov dword [0x4c7284], 0xa1bfe8ba
mov dword [0x4c7288], 0x9ae8adac
mov dword [0x4c728c], 0x9b978f8d
mov word [0x4c7290], 0xc892
xor eax, eax
mov cl, byte [eax + 0x4c7270]
xor cl, 0xc8
mov byte [eax + 0x4c7954], cl
inc eax
cmp eax, 0x22
jb 0x43162e
mov eax, 0x4c7954
ret

Function at 0x4317a8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c78], 1
jne 0x4317f4
or dword [0x4c7c78], 1
mov dword [0x4c7294], 0x87afad9a
mov dword [0x4c7298], 0x83a6adb8
mov dword [0x4c729c], 0xb08db1ad
mov dword [0x4c72a0], 0xaee8e1e0
mov dword [0x4c72a4], 0xada4a1a9
mov dword [0x4c72a8], 0xc8e8f2ac
xor eax, eax
mov cl, byte [eax + 0x4c7294]
xor cl, 0xc8
mov byte [eax + 0x4c7978], cl
inc eax
cmp eax, 0x18
jb 0x4317f6
mov eax, 0x4c7978
ret

Function at 0x431811
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c74], 1
jne 0x431877
or dword [0x4c7c74], 1
mov dword [0x4c72ac], 0x9bafad9a
mov dword [0x4c72b0], 0xa99ebcad
mov dword [0x4c72b4], 0x8dadbda4
mov dword [0x4c72b8], 0xbcbbe0b0
mov dword [0x4c72bc], 0xafa6a1ba
mov dword [0x4c72c0], 0xa9aee8e1
mov dword [0x4c72c4], 0xacada4a1
mov word [0x4c72c8], 0xe8f2
mov byte [0x4c72ca], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c72ac]
xor cl, 0xc8
mov byte [eax + 0x4c7990], cl
inc eax
cmp eax, 0x1f
jb 0x431879
mov eax, 0x4c7990
ret

Function at 0x4319e3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c70], 1
jne 0x431a2f
or dword [0x4c7c70], 1
mov dword [0x4c72cc], 0x87afad9a
mov dword [0x4c72d0], 0x83a6adb8
mov dword [0x4c72d4], 0xb08db1ad
mov dword [0x4c72d8], 0xaee8e1e0
mov dword [0x4c72dc], 0xada4a1a9
mov dword [0x4c72e0], 0xc8e8f2ac
xor eax, eax
mov cl, byte [eax + 0x4c72cc]
xor cl, 0xc8
mov byte [eax + 0x4c79b0], cl
inc eax
cmp eax, 0x18
jb 0x431a31
mov eax, 0x4c79b0
ret
Function at 0x431a4c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c6c], 1
jne 0x431aab
or dword [0x4c7c6c], 1
mov dword [0x4c72e4], 0x9bafad9a
mov dword [0x4c72e8], 0xa99ebcad
mov dword [0x4c72ec], 0x8dadbda4
mov dword [0x4c72f0], 0xbface0b0
mov dword [0x4c72f4], 0xe1acbaa7
mov dword [0x4c72f8], 0xa1a9aee8
mov dword [0x4c72fc], 0xf2acada4
mov word [0x4c7300], 0xc8e8
xor eax, eax
mov cl, byte [eax + 0x4c72e4]
xor cl, 0xc8
mov byte [eax + 0x4c79c8], cl
inc eax
cmp eax, 0x1e
jb 0x431aad
mov eax, 0x4c79c8
ret

Function at 0x431c18
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c68], 1
jne 0x431c92
or dword [0x4c7c68], 1
mov dword [0x4c7304], 0xbcbbbd85
mov dword [0x4c7308], 0xadb8bbe8
mov dword [0x4c730c], 0xb1aea1ab
mov dword [0x4c7310], 0xa6e8a9e8
mov dword [0x4c7314], 0xade5a6a7
mov dword [0x4c7318], 0xb1bcb8a5
mov dword [0x4c731c], 0xaabdbbe8
mov dword [0x4c7320], 0xe8b1ada3
mov dword [0x4c7324], 0xa1babcbb
mov word [0x4c7328], 0xafa6
mov byte [0x4c732a], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c7304]
xor cl, 0xc8
mov byte [eax + 0x4c79e8], cl
inc eax
cmp eax, 0x27
jb 0x431c94
mov eax, 0x4c79e8
ret

Function at 0x431caf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c64], 1
jne 0x431cfb
or dword [0x4c7c64], 1
mov dword [0x4c732c], 0x87afad9a
mov dword [0x4c7330], 0x83a6adb8
mov dword [0x4c7334], 0xb08db1ad
mov dword [0x4c7338], 0xaee8e1e0
mov dword [0x4c733c], 0xada4a1a9
mov dword [0x4c7340], 0xc8e8f2ac
xor eax, eax
mov cl, byte [eax + 0x4c732c]
xor cl, 0xc8
mov byte [eax + 0x4c7a10], cl
inc eax
cmp eax, 0x18
jb 0x431cfd
mov eax, 0x4c7a10
ret

Function at 0x431d18
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c60], 1
jne 0x431d6a
or dword [0x4c7c60], 1
mov dword [0x4c7344], 0xad8c809b
mov dword [0x4c7348], 0xadbcada4
mov dword [0x4c734c], 0xe0b1ad83
mov dword [0x4c7350], 0xa9aee8e1
mov dword [0x4c7354], 0xacada4a1
mov word [0x4c7358], 0xe8f2
mov byte [0x4c735a], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c7344]
xor cl, 0xc8
mov byte [eax + 0x4c7a28], cl
inc eax
cmp eax, 0x17
jb 0x431d6c
mov eax, 0x4c7a28
ret

Function at 0x431eb9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c5c], 1
jne 0x431f05
or dword [0x4c7c5c], 1
mov dword [0x4c735c], 0x87afad9a
mov dword [0x4c7360], 0x83a6adb8
mov dword [0x4c7364], 0xb08db1ad
mov dword [0x4c7368], 0xaee8e1e0
mov dword [0x4c736c], 0xada4a1a9
mov dword [0x4c7370], 0xc8e8f2ac
xor eax, eax
mov cl, byte [eax + 0x4c735c]
xor cl, 0xc8
mov byte [eax + 0x4c7a40], cl
inc eax
cmp eax, 0x18
jb 0x431f07
mov eax, 0x4c7a40
ret

Function at 0x431f22
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c58], 1
jne 0x431f75
or dword [0x4c7c58], 1
mov dword [0x4c7374], 0xad8c809b
mov dword [0x4c7378], 0xadbcada4
mov dword [0x4c737c], 0xbda4a99e
mov dword [0x4c7380], 0xe8e1e0ad
mov dword [0x4c7384], 0xa4a1a9ae
mov dword [0x4c7388], 0xe8f2acad
mov byte [0x4c738c], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c7374]
xor cl, 0xc8
mov byte [eax + 0x4c7a58], cl
inc eax
cmp eax, 0x19
jb 0x431f77
mov eax, 0x4c7a58
ret
Function at 0x431f92
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c54], 1
jne 0x43204d
or dword [0x4c7c54], 1
mov dword [0x4c7390], 0x8c8b8a89
mov dword [0x4c7394], 0x808f8e8d
mov dword [0x4c7398], 0x84838281
mov dword [0x4c739c], 0x98878685
mov dword [0x4c73a0], 0x9c9b9a99
mov dword [0x4c73a4], 0x909f9e9d
mov dword [0x4c73a8], 0xaaa99291
mov dword [0x4c73ac], 0xaeadacab
mov dword [0x4c73b0], 0xa2a1a0af
mov dword [0x4c73b4], 0xa6a5a4a3
mov dword [0x4c73b8], 0xbab9b8a7
mov dword [0x4c73bc], 0xbebdbcbb
mov dword [0x4c73c0], 0xb2b1b0bf
mov dword [0x4c73c4], 0xfbfaf9f8
mov dword [0x4c73c8], 0xfffefdfc
mov dword [0x4c73cc], 0xe7e3f1f0
mov byte [0x4c73d0], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c7390]
xor cl, 0xc8
mov byte [eax + 0x4c7a78], cl
inc eax
cmp eax, 0x41
jb 0x43204f
mov eax, 0x4c7a78
ret

Function at 0x4320fa
Capabilities:
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, eax
xor edx, edx
push 3
lea eax, [ecx + 2]
pop ebx
div ebx
mov esi, dword [ebp + 0x10]
shl eax, 2
inc eax
cmp dword [esi], eax
jae 0x432124
mov dword [esi], eax
xor al, al
jmp 0x4321fc
mov eax, ecx
xor edx, edx
push 3
pop ecx
div ecx
mov esi, dword [ebp + 0xc]
mov ecx, dword [0x4c1a7c]
xor edx, edx
imul eax, eax, 3
test eax, eax
je 0x4321a0
dec eax
push 3
pop ebx
div ebx
inc eax
mov edx, eax
mov dword [ebp - 4], eax
imul edx, edx, 3
movzx eax, byte [edi]
shr eax, 2
mov al, byte [eax + ecx]
mov byte [esi], al
movzx eax, byte [edi + 1]
movzx ebx, byte [edi]
shr eax, 4
shl ebx, 4
add eax, ebx
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 1], al
movzx eax, byte [edi + 2]
movzx ebx, byte [edi + 1]
shr eax, 6
lea eax, [eax + ebx*4]
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 2], al
movzx eax, byte [edi + 2]
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 3], al
add esi, 4
add edi, 3
dec dword [ebp - 4]
jne 0x43214e
cmp edx, dword [ebp + 8]
jae 0x4321ef
movzx eax, byte [edi]
inc edx
cmp edx, dword [ebp + 8]
jae 0x4321b4
movzx edi, byte [edi + 1]
jmp 0x4321b6
xor edi, edi
mov ebx, eax
shr ebx, 2
and ebx, 0x3f
mov bl, byte [ebx + ecx]
mov byte [esi], bl
mov ebx, edi
shr ebx, 4
shl eax, 4
add ebx, eax
and ebx, 0x3f
mov al, byte [ebx + ecx]
mov byte [esi + 1], al
cmp edx, dword [ebp + 8]
jae 0x4321e3
and edi, 0xf
mov cl, byte [ecx + edi*4]
jmp 0x4321e5
mov cl, 0x3d
mov byte [esi + 2], cl
mov byte [esi + 3], 0x3d
add esi, 4
mov eax, dword [ebp + 0x10]
mov byte [esi], 0
sub esi, dword [ebp + 0xc]
mov dword [eax], esi
mov al, 1
pop edi
pop esi
pop ebx
leave
ret

Function at 0x432e58
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c50], 1
jne 0x432ebf
or dword [0x4c7c50], 1
mov dword [0x4c7abc], 0xb194b1a6
mov dword [0x4c7ac0], 0xb994bba2
mov dword [0x4c7ac4], 0xaeafaaae
mov dword [0x4c7ac8], 0xa5a294b9
mov dword [0x4c7acc], 0xad94bfa2
mov dword [0x4c7ad0], 0xe3aea7a2
mov dword [0x4c7ad4], 0xaaadebe2
mov dword [0x4c7ad8], 0xafaea7a2
mov byte [0x4c7adc], 0xcb
xor eax, eax
mov cl, byte [eax + 0x4c7abc]
xor cl, 0xcb
mov byte [eax + 0x4c7b7c], cl
inc eax
cmp eax, 0x21
jb 0x432ec1
mov eax, 0x4c7b7c
ret
Function at 0x432edc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c4c], 1
jne 0x432f43
or dword [0x4c7c4c], 1
mov dword [0x4c7ae0], 0xb194b1a6
mov dword [0x4c7ae4], 0xb994bba2
mov dword [0x4c7ae8], 0xaeafaaae
mov dword [0x4c7aec], 0xa2ad94b9
mov dword [0x4c7af0], 0xb894aea7
mov dword [0x4c7af4], 0xe3bfaabf
mov dword [0x4c7af8], 0xaaadebe2
mov dword [0x4c7afc], 0xafaea7a2
mov byte [0x4c7b00], 0xcb
xor eax, eax
mov cl, byte [eax + 0x4c7ae0]
xor cl, 0xcb
mov byte [eax + 0x4c7ba0], cl
inc eax
cmp eax, 0x21
jb 0x432f45
mov eax, 0x4c7ba0
ret

Function at 0x432f60
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c48], 1
jne 0x432fde
or dword [0x4c7c48], 1
mov dword [0x4c7b04], 0xb194b1a6
mov dword [0x4c7b08], 0xb994bba2
mov dword [0x4c7b0c], 0xaeafaaae
mov dword [0x4c7b10], 0xb3ae94b9
mov dword [0x4c7b14], 0xa8aab9bf
mov dword [0x4c7b18], 0xa2ad94bf
mov dword [0x4c7b1c], 0xbf94aea7
mov dword [0x4c7b20], 0xaea394a4
mov dword [0x4c7b24], 0xe2e3bbaa
mov dword [0x4c7b28], 0xa2aaadeb
mov dword [0x4c7b2c], 0xcbafaea7
xor eax, eax
mov cl, byte [eax + 0x4c7b04]
xor cl, 0xcb
mov byte [eax + 0x4c7bc4], cl
inc eax
cmp eax, 0x2c
jb 0x432fe0
mov eax, 0x4c7bc4
ret

Function at 0x432ffe
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c44], 1
jne 0x433068
or dword [0x4c7c44], 1
mov dword [0x4c7b30], 0xa7a2aa8d
mov dword [0x4c7b34], 0xbfebafae
mov dword [0x4c7b38], 0xb9a8eba4
mov dword [0x4c7b3c], 0xaebfaaae
mov dword [0x4c7b40], 0xb8aeafeb
mov dword [0x4c7b44], 0xaaa5a2bf
mov dword [0x4c7b48], 0xa5a4a2bf
mov dword [0x4c7b4c], 0xbfaabbeb
mov dword [0x4c7b50], 0xcbebf1a3
xor eax, eax
mov cl, byte [eax + 0x4c7b30]
xor cl, 0xcb
mov byte [eax + 0x4c7bf0], cl
inc eax
cmp eax, 0x24
jb 0x43306a
mov eax, 0x4c7bf0
ret

Function at 0x433085
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c40], 1
jne 0x4330a9
or dword [0x4c7c40], 1
mov dword [0x4c7b54], 0xbfaabbeb
mov dword [0x4c7b58], 0xcbebf1a3
xor eax, eax
mov cl, byte [eax + 0x4c7b54]
xor cl, 0xcb
mov byte [eax + 0x4c7c14], cl
inc eax
cmp eax, 8
jb 0x4330ab
mov eax, 0x4c7c14
ret

Function at 0x4330c6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7c3c], 1
jne 0x43312c
or dword [0x4c7c3c], 1
mov dword [0x4c7b5c], 0xa7a2aa8d
mov dword [0x4c7b60], 0xbfebafae
mov dword [0x4c7b64], 0xb9a8eba4
mov dword [0x4c7b68], 0xaebfaaae
mov dword [0x4c7b6c], 0xbfbea4eb
mov dword [0x4c7b70], 0xebbfbebb
mov dword [0x4c7b74], 0xaea7a2ad
mov word [0x4c7b78], 0xebf1
mov byte [0x4c7b7a], 0xcb
xor eax, eax
mov cl, byte [eax + 0x4c7b5c]
xor cl, 0xcb
mov byte [eax + 0x4c7c1c], cl
inc eax
cmp eax, 0x1f
jb 0x43312e
mov eax, 0x4c7c1c
ret
Function at 0x43bbc0
Capabilities:
Encode data using xor

Disassembly:
mov cl, byte [edx]
mov eax, dword [eax + 0x1f0]
test cl, cl
je 0x43bbe2
lea esp, [esp]
imul eax, eax, 0xf4243
movzx ecx, cl
inc edx
xor eax, ecx
mov cl, byte [edx]
test cl, cl
jne 0x43bbd0
ret
Function at 0x44b810
Capabilities:
Hash data using sha1

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [eax + 8], 0x67452301
mov dword [eax + 0xc], 0xefcdab89
mov dword [eax + 0x10], 0x98badcfe
mov dword [eax + 0x14], 0x10325476
mov dword [eax + 0x18], 0xc3d2e1f0
mov dword [eax + 0x1c], ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
xor eax, eax
pop ebp
ret

Function at 0x44b900
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x1c]
mov edx, 0x40
cmp eax, edx
jb 0x44b919
lea eax, [edx - 0x30]
pop esi
pop ebp
ret
lea ecx, [eax*8]
add dword [esi], ecx
push ebx
mov ebx, 0
adc dword [esi + 4], ebx
push edi
mov byte [eax + esi + 0x20], 0x80
mov edi, 1
add dword [esi + 0x1c], edi
mov eax, dword [esi + 0x1c]
mov ecx, 0x38
cmp eax, ecx
jbe 0x44b972
cmp eax, edx
jae 0x44b95e
lea esp, [esp]
mov byte [eax + esi + 0x20], bl
add dword [esi + 0x1c], edi
mov eax, dword [esi + 0x1c]
cmp eax, edx
jb 0x44b950
lea edx, [esi + 0x20]
push esi
call fcn.0044b310
add esp, 4
mov dword [esi + 0x1c], ebx
mov ecx, 0x38
cmp dword [esi + 0x1c], ecx
jae 0x44b98f
jmp 0x44b980
mov edx, dword [esi + 0x1c]
mov byte [esi + edx + 0x20], bl
add dword [esi + 0x1c], edi
cmp dword [esi + 0x1c], ecx
jb 0x44b980
movzx eax, byte [esi + 7]
movzx ecx, byte [esi + 6]
movzx edx, byte [esi + 5]
mov byte [esi + 0x58], al
movzx eax, byte [esi + 4]
mov byte [esi + 0x59], cl
movzx ecx, byte [esi + 3]
mov byte [esi + 0x5a], dl
movzx edx, byte [esi + 2]
mov byte [esi + 0x5b], al
movzx eax, byte [esi + 1]
mov byte [esi + 0x5c], cl
movzx ecx, byte [esi]
mov byte [esi + 0x5d], dl
lea edx, [esi + 0x20]
push esi
mov byte [esi + 0x5e], al
mov byte [esi + 0x5f], cl
call fcn.0044b310
movzx edx, byte [esi + 0xb]
mov eax, dword [ebp + 0xc]
mov byte [eax], dl
movzx ecx, byte [esi + 0xa]
mov byte [eax + 1], cl
movzx edx, byte [esi + 9]
mov byte [eax + 2], dl
movzx ecx, byte [esi + 8]
mov byte [eax + 3], cl
movzx edx, byte [esi + 0xf]
mov byte [eax + 4], dl
movzx ecx, byte [esi + 0xe]
mov byte [eax + 5], cl
movzx edx, byte [esi + 0xd]
mov byte [eax + 6], dl
movzx ecx, byte [esi + 0xc]
mov byte [eax + 7], cl
movzx edx, byte [esi + 0x13]
mov byte [eax + 8], dl
movzx ecx, byte [esi + 0x12]
mov byte [eax + 9], cl
movzx edx, byte [esi + 0x11]
mov byte [eax + 0xa], dl
movzx ecx, byte [esi + 0x10]
mov byte [eax + 0xb], cl
movzx edx, byte [esi + 0x17]
mov byte [eax + 0xc], dl
movzx ecx, byte [esi + 0x16]
mov byte [eax + 0xd], cl
movzx edx, byte [esi + 0x15]
mov byte [eax + 0xe], dl
movzx ecx, byte [esi + 0x14]
mov byte [eax + 0xf], cl
movzx edx, byte [esi + 0x1b]
mov byte [eax + 0x10], dl
movzx ecx, byte [esi + 0x1a]
mov byte [eax + 0x11], cl
movzx edx, byte [esi + 0x19]
add esp, 4
mov byte [eax + 0x12], dl
movzx ecx, byte [esi + 0x18]
pop edi
pop ebx
mov byte [eax + 0x13], cl
xor eax, eax
pop esi
pop ebp
ret
Function at 0x44d5a0
Capabilities:
Hash data using sha256

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [eax + 0x28], ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], 0x6a09e667
mov dword [eax + 0xc], 0xbb67ae85
mov dword [eax + 0x10], 0x3c6ef372
mov dword [eax + 0x14], 0xa54ff53a
mov dword [eax + 0x18], 0x510e527f
mov dword [eax + 0x1c], 0x9b05688c
mov dword [eax + 0x20], 0x1f83d9ab
mov dword [eax + 0x24], 0x5be0cd19
xor eax, eax
pop ebp
ret