joyce8/EMBER2024-capa huggingface dataset:
Function at 0x42dc19
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x48dbed
call fcn.0048cc58
sub esp, 0xb0
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
lea eax, [ebp - 0x10]
push eax
push ebx
push dword [ebp + 0xc]
mov dword [ebp - 0x10], ebx
push ebx
push 0x1300
call dword [0x496134]
test eax, eax
jne 0x42dc61
call fcn.0042ddba
mov ecx, dword [ebp + 8]
push eax
call fcn.00406aa2
mov eax, dword [ebp + 8]
jmp 0x42ddab
test byte [0x4c7d44], 1
jne 0x42dc82
or dword [0x4c7d44], 1
mov dword [0x4c6cbc], 0xe8c2c5c1
mov byte [0x4c6cc0], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c6cbc]
xor cl, 0xc8
mov byte [eax + 0x4c73fc], cl
inc eax
cmp eax, 5
jb 0x42dc84
push 0xf
mov esi, 0x4c73fc
pop edi
mov eax, esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x42dcaf
sub eax, ecx
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.00404e34
mov dword [ebp - 4], ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00404c4f
lea eax, [ebp - 0x2c]
push eax
lea edi, [ebp - 0x48]
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.004322f7
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00404c70
push ebx
push 1
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.00404c70
push dword [ebp - 0x10]
call dword [0x4960e8]
push ebx
push dword [ebp + 0xc]
lea esi, [ebp - 0xb8]
call fcn.0042e105
pop ecx
pop ecx
push eax
mov byte [ebp - 4], 5
call fcn.0042de23
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00406adf
add esp, 0xc
push 0x4b13b4
push eax
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 6
call fcn.0040ef9c
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 7
call fcn.0040c92a
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.00404c70
push ebx
push 1
lea ecx, [ebp - 0x80]
call fcn.00404c70
push ebx
push 1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 4
call fcn.00404c70
mov edi, dword [ebp + 8]
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ebx
mov byte [edi], bl
call fcn.00404c05
push ebx
push 1
mov ecx, esi
call fcn.00404c70
mov eax, edi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret

Function at 0x42ddba
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d48], 1
jne 0x42de06
or dword [0x4c7d48], 1
mov dword [0x4c6ca4], 0xadbaa69d
mov dword [0x4c6ca8], 0xa6afa7ab
mov dword [0x4c6cac], 0xacadb2a1
mov dword [0x4c6cb0], 0xbabaade8
mov dword [0x4c6cb4], 0xabe8baa7
mov dword [0x4c6cb8], 0xc8adaca7
xor eax, eax
mov cl, byte [eax + 0x4c6ca4]
xor cl, 0xc8
mov byte [eax + 0x4c73e4], cl
inc eax
cmp eax, 0x18
jb 0x42de08
mov eax, 0x4c73e4
ret

Function at 0x42de23
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d40], 1
jne 0x42de61
or dword [0x4c7d40], 1
mov dword [0x4c6cc4], 0xbaade0e8
mov dword [0x4c6cc8], 0xe8baa7ba
mov dword [0x4c6ccc], 0xadaca7ab
mov word [0x4c6cd0], 0xe8f2
mov byte [0x4c6cd2], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c6cc4]
xor cl, 0xc8
mov byte [eax + 0x4c7404], cl
inc eax
cmp eax, 0xf
jb 0x42de63
mov eax, 0x4c7404
ret
Function at 0x42e105
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
and dword [ebp - 4], 0
test byte [0x4c7d3c], 1
jne 0x42e130
or dword [0x4c7d3c], 1
mov dword [0x4c6cd4], 0xaca4a4ed
mov byte [0x4c6cd8], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c6cd4]
xor cl, 0xc8
mov byte [eax + 0x4c7414], cl
inc eax
cmp eax, 5
jb 0x42e132
push dword [ebp + 0xc]
lea eax, [ebp - 0x48]
push dword [ebp + 8]
push 0x4c7414
push eax
call fcn.00432350
and dword [esi + 0x10], 0
add esp, 0x10
lea eax, [ebp - 0x48]
mov dword [esi + 0x14], 0xf
push eax
mov ecx, esi
mov byte [esi], 0
call fcn.00404c4f
mov eax, esi
leave
ret

Function at 0x42e2d4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d38], 1
jne 0x42e330
or dword [0x4c7d38], 1
mov dword [0x4c6cdc], 0x85bcad8f
mov dword [0x4c6ce0], 0xa4bdaca7
mov dword [0x4c6ce4], 0xa4a18ead
mov dword [0x4c6ce8], 0xa5a986ad
mov dword [0x4c6cec], 0xa9aee8ad
mov dword [0x4c6cf0], 0xacada4a1
mov word [0x4c6cf4], 0xe8f2
mov byte [0x4c6cf6], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c6cdc]
xor cl, 0xc8
mov byte [eax + 0x4c741c], cl
inc eax
cmp eax, 0x1b
jb 0x42e332
mov eax, 0x4c741c
ret

Function at 0x42e34d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d34], 1
jne 0x42e3aa
or dword [0x4c7d34], 1
mov dword [0x4c6cf8], 0x8bbcad9b
mov dword [0x4c6cfc], 0xadbababd
mov dword [0x4c6d00], 0xa18cbca6
mov dword [0x4c6d04], 0xbcabadba
mov dword [0x4c6d08], 0xe8b1baa7
mov dword [0x4c6d0c], 0xa4a1a9ae
mov dword [0x4c6d10], 0xe8f2acad
mov byte [0x4c6d14], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c6cf8]
xor cl, 0xc8
mov byte [eax + 0x4c7438], cl
inc eax
cmp eax, 0x1d
jb 0x42e3ac
mov eax, 0x4c7438
ret

Function at 0x42e4be
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d30], 1
jne 0x42e51b
or dword [0x4c7d30], 1
mov dword [0x4c6d18], 0x8bbcad8f
mov dword [0x4c6d1c], 0xadbababd
mov dword [0x4c6d20], 0xa18cbca6
mov dword [0x4c6d24], 0xbcabadba
mov dword [0x4c6d28], 0xe8b1baa7
mov dword [0x4c6d2c], 0xa4a1a9ae
mov dword [0x4c6d30], 0xe8f2acad
mov byte [0x4c6d34], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c6d18]
xor cl, 0xc8
mov byte [eax + 0x4c7458], cl
inc eax
cmp eax, 0x1d
jb 0x42e51d
mov eax, 0x4c7458
ret
Function at 0x42e6d6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d2c], 1
jne 0x42e845
mov eax, 0xdc94
mov ecx, eax
mov word [0x4c6d38], cx
mov word [0x4c6d3a], cx
add ecx, 7
mov word [0x4c6d3c], cx
lea ecx, [eax + 0x28]
mov word [0x4c6d3e], cx
add ecx, 0xfffffffe
lea edx, [eax + 0xd]
mov word [0x4c6d40], cx
push ebx
mov ecx, edx
mov word [0x4c6d42], cx
add ecx, 5
push esi
mov esi, ecx
lea ecx, [eax + 0x1a]
mov word [0x4c6d44], si
lea esi, [eax + 0x1b]
mov word [0x4c6d46], si
mov word [0x4c6d54], cx
add esi, 0xfffffff8
add edx, 3
mov ecx, esi
push edi
lea edi, [eax + 0x19]
mov word [0x4c6d56], cx
mov ecx, eax
mov word [0x4c6d4c], dx
mov edx, edi
mov word [0x4c6d58], cx
mov word [0x4c6d5a], cx
add ecx, 0x64
mov word [0x4c6d4e], dx
mov edx, ecx
or dword [0x4c7d2c], 1
mov word [0x4c6d5c], dx
lea edx, [eax + 0x68]
mov ebx, edx
mov word [0x4c6d5e], bx
mov ebx, ecx
mov word [0x4c6d60], bx
lea ebx, [eax + 0x5d]
mov word [0x4c6d6e], ax
mov word [0x4c6d62], bx
mov ebx, ecx
mov ecx, eax
add eax, 4
mov word [0x4c6d70], ax
lea eax, [ecx + 0x18]
mov word [0x4c6d76], ax
add eax, 0x11
mov word [0x4c6d78], ax
lea eax, [ecx + 0x17]
mov word [0x4c6d7a], ax
add eax, 0x11
mov word [0x4c6d7c], ax
lea eax, [ecx - 0xe]
mov word [0x4c6d7e], ax
add eax, 0x23
pop edi
mov word [0x4c6d80], ax
lea eax, [ecx + 0x34]
pop esi
mov word [0x4c6d64], bx
mov dword [0x4c6d48], 0xdca1dc8e
mov dword [0x4c6d50], 0xdca6dc81
mov word [0x4c6d66], dx
mov dword [0x4c6d68], 0xdcf8dc8a
mov word [0x4c6d6c], cx
mov dword [0x4c6d72], 0xdca7dcba
mov dword [0x4c6d82], 0xdcaddca5
mov word [0x4c6d86], ax
pop ebx
xor eax, eax
mov ecx, 0xdcc8
xor cx, word [eax + 0x4c6d38]
add eax, 2
mov word [eax + 0x4c7476], cx
cmp eax, 0x50
jb 0x42e847
mov eax, 0x4c7478
ret

Function at 0x42e868
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d28], 1
jne 0x42e8bd
or dword [0x4c7d28], 1
mov dword [0x4c6d88], 0xbee8a786
mov dword [0x4c6d8c], 0xa1bbbaad
mov dword [0x4c6d90], 0xa1e8a6a7
mov dword [0x4c6d94], 0xe8a7aea6
mov dword [0x4c6d98], 0xa1a9bea9
mov dword [0x4c6d9c], 0xa4aaa9a4
mov word [0x4c6da0], 0xc8ad
xor eax, eax
mov cl, byte [eax + 0x4c6d88]
xor cl, 0xc8
mov byte [eax + 0x4c74c8], cl
inc eax
cmp eax, 0x1a
jb 0x42e8bf
mov eax, 0x4c74c8
ret

Function at 0x42eaac
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d24], 1
jne 0x42eb01
or dword [0x4c7d24], 1
mov dword [0x4c6da4], 0xbee8a786
mov dword [0x4c6da8], 0xa1bbbaad
mov dword [0x4c6dac], 0xa1e8a6a7
mov dword [0x4c6db0], 0xe8a7aea6
mov dword [0x4c6db4], 0xa1a9bea9
mov dword [0x4c6db8], 0xa4aaa9a4
mov word [0x4c6dbc], 0xc8ad
xor eax, eax
mov cl, byte [eax + 0x4c6da4]
xor cl, 0xc8
mov byte [eax + 0x4c74e4], cl
inc eax
cmp eax, 0x1a
jb 0x42eb03
mov eax, 0x4c74e4
ret
Function at 0x42eb1e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d20], 1
jne 0x42eb84
or dword [0x4c7d20], 1
mov dword [0x4c6dc0], 0xa9bea681
mov dword [0x4c6dc4], 0xe8aca1a4
mov dword [0x4c6dc8], 0xbbbaadbe
mov dword [0x4c6dcc], 0xe8a6a7a1
mov dword [0x4c6dd0], 0xa7aea6a1
mov dword [0x4c6dd4], 0xafa1bbe8
mov dword [0x4c6dd8], 0xbdbca9a6
mov word [0x4c6ddc], 0xadba
mov byte [0x4c6dde], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c6dc0]
xor cl, 0xc8
mov byte [eax + 0x4c7500], cl
inc eax
cmp eax, 0x1f
jb 0x42eb86
mov eax, 0x4c7500
ret

Function at 0x42ee8b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d1c], 1
jne 0x42eef1
or dword [0x4c7d1c], 1
mov dword [0x4c6de0], 0xa4a1a98e
mov dword [0x4c6de4], 0xbce8acad
mov dword [0x4c6de8], 0xadafe8a7
mov dword [0x4c6dec], 0xadbce8bc
mov dword [0x4c6df0], 0xaee8b8a5
mov dword [0x4c6df4], 0xadaca4a7
mov dword [0x4c6df8], 0xa9b8e8ba
mov word [0x4c6dfc], 0xa0bc
mov byte [0x4c6dfe], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c6de0]
xor cl, 0xc8
mov byte [eax + 0x4c7520], cl
inc eax
cmp eax, 0x1f
jb 0x42eef3
mov eax, 0x4c7520
ret

Function at 0x42f063
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d18], 1
jne 0x42f0b5
or dword [0x4c7d18], 1
mov dword [0x4c6e00], 0x8ebcad8f
mov dword [0x4c6e04], 0xadaca4a7
mov dword [0x4c6e08], 0xbca998ba
mov dword [0x4c6e0c], 0xa9aee8a0
mov dword [0x4c6e10], 0xacada4a1
mov word [0x4c6e14], 0xe8f2
mov byte [0x4c6e16], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c6e00]
xor cl, 0xc8
mov byte [eax + 0x4c7540], cl
inc eax
cmp eax, 0x17
jb 0x42f0b7
mov eax, 0x4c7540
ret

Function at 0x42f37f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d14], 1
mov edx, 0xdcc8
jne 0x42f416
or dword [0x4c7d14], 1
lea ecx, [edx + 0x25]
mov eax, ecx
mov word [0x4c6e18], ax
add eax, 0xffffffab
mov word [0x4c6e1a], ax
push esi
lea eax, [edx - 0xe]
mov esi, eax
add eax, 0xffffffef
mov word [0x4c6e24], ax
lea eax, [edx - 0x23]
mov word [0x4c6e26], ax
add eax, 0xfffffffa
mov word [0x4c6e28], ax
lea eax, [edx + 0x36]
mov word [0x4c6e1c], si
add esi, 0xffffffed
mov word [0x4c6e2a], ax
add eax, 0xfffffffe
mov word [0x4c6e2c], ax
lea eax, [edx + 0x33]
mov word [0x4c6e2e], ax
mov eax, edx
mov word [0x4c6e1e], si
mov dword [0x4c6e20], 0xdcbadcaf
mov dword [0x4c6e30], 0xdceddcfa
mov word [0x4c6e34], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4c6e18]
add eax, 2
mov word [eax + 0x4c7556], cx
cmp eax, 0x1e
jb 0x42f418
mov eax, 0x4c7558
ret

Function at 0x42f436
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d10], 1
mov ecx, 0xdcc8
jne 0x42f477
or dword [0x4c7d10], 1
lea eax, [ecx - 0x15]
mov word [0x4c6e38], ax
add eax, 5
mov word [0x4c6e3a], ax
lea eax, [ecx - 0x1a]
mov word [0x4c6e3c], ax
add eax, 7
mov word [0x4c6e3e], ax
mov eax, ecx
mov word [0x4c6e40], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c6e38]
add eax, 2
mov word [eax + 0x4c7576], dx
cmp eax, 0xa
jb 0x42f479
mov eax, 0x4c7578
ret
Function at 0x42f497
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d0c], 1
mov ecx, 0xdcc8
jne 0x42f4ea
or dword [0x4c7d0c], 1
lea eax, [ecx - 0x15]
mov word [0x4c6e44], ax
add eax, 5
mov word [0x4c6e46], ax
lea eax, [ecx - 0x1a]
mov word [0x4c6e48], ax
add eax, 0x4d
mov word [0x4c6e4a], ax
lea eax, [ecx + 0x32]
mov word [0x4c6e4c], ax
add eax, 0xffffffbb
mov word [0x4c6e4e], ax
mov eax, ecx
mov word [0x4c6e50], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c6e44]
add eax, 2
mov word [eax + 0x4c7582], dx
cmp eax, 0xe
jb 0x42f4ec
mov eax, 0x4c7584
ret

Function at 0x42f50a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d08], 1
mov ecx, 0xdcc8
jne 0x42f55d
or dword [0x4c7d08], 1
lea eax, [ecx - 0x15]
mov word [0x4c6e54], ax
add eax, 5
mov word [0x4c6e56], ax
lea eax, [ecx - 0x1a]
mov word [0x4c6e58], ax
add eax, 0x50
mov word [0x4c6e5a], ax
lea eax, [ecx + 0x34]
mov word [0x4c6e5c], ax
add eax, 0xffffffb9
mov word [0x4c6e5e], ax
mov eax, ecx
mov word [0x4c6e60], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c6e54]
add eax, 2
mov word [eax + 0x4c7592], dx
cmp eax, 0xe
jb 0x42f55f
mov eax, 0x4c7594
ret

Function at 0x42f57d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d04], 1
mov ecx, 0xdcc8
jne 0x42f5be
or dword [0x4c7d04], 1
lea eax, [ecx - 0x15]
mov word [0x4c6e64], ax
add eax, 5
mov word [0x4c6e66], ax
lea eax, [ecx - 0x1a]
mov word [0x4c6e68], ax
add eax, 7
mov word [0x4c6e6a], ax
mov eax, ecx
mov word [0x4c6e6c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c6e64]
add eax, 2
mov word [eax + 0x4c75a2], dx
cmp eax, 0xa
jb 0x42f5c0
mov eax, 0x4c75a4
ret

Function at 0x42f5de
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d00], 1
mov ecx, 0xdcc8
jne 0x42f631
or dword [0x4c7d00], 1
lea eax, [ecx - 0x15]
mov word [0x4c6e70], ax
add eax, 5
mov word [0x4c6e72], ax
lea eax, [ecx - 0x1a]
mov word [0x4c6e74], ax
add eax, 0x4d
mov word [0x4c6e76], ax
lea eax, [ecx + 0x32]
mov word [0x4c6e78], ax
add eax, 0xffffffbb
mov word [0x4c6e7a], ax
mov eax, ecx
mov word [0x4c6e7c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c6e70]
add eax, 2
mov word [eax + 0x4c75ae], dx
cmp eax, 0xe
jb 0x42f633
mov eax, 0x4c75b0
ret
Function at 0x42f72b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cfc], 1
mov ecx, 0xdcc8
jne 0x42f948
or dword [0x4c7cfc], 1
lea eax, [ecx + 0x30]
mov word [0x4c6e88], ax
inc eax
mov word [0x4c6e8a], ax
lea eax, [ecx + 0x32]
mov word [0x4c6e8c], ax
inc eax
mov word [0x4c6e8e], ax
lea eax, [ecx + 0x34]
mov word [0x4c6e90], ax
inc eax
mov word [0x4c6e92], ax
lea eax, [ecx + 0x36]
mov word [0x4c6e94], ax
inc eax
mov word [0x4c6e96], ax
lea eax, [ecx + 0x28]
mov word [0x4c6e98], ax
inc eax
mov word [0x4c6e9a], ax
lea eax, [ecx - 0x3f]
mov word [0x4c6e9c], ax
inc eax
mov word [0x4c6e9e], ax
lea eax, [ecx - 0x3d]
mov word [0x4c6ea0], ax
inc eax
mov word [0x4c6ea2], ax
lea eax, [ecx - 0x3b]
mov word [0x4c6ea4], ax
inc eax
mov word [0x4c6ea6], ax
lea eax, [ecx - 0x39]
mov word [0x4c6ea8], ax
add eax, 0xfffffff1
mov word [0x4c6eaa], ax
lea eax, [ecx - 0x47]
mov word [0x4c6eac], ax
inc eax
mov word [0x4c6eae], ax
lea eax, [ecx - 0x45]
mov word [0x4c6eb0], ax
inc eax
mov word [0x4c6eb2], ax
lea eax, [ecx - 0x43]
mov word [0x4c6eb4], ax
inc eax
mov word [0x4c6eb6], ax
lea eax, [ecx - 0x41]
mov word [0x4c6eb8], ax
add eax, 0x11
mov word [0x4c6eba], ax
lea eax, [ecx - 0x2f]
mov word [0x4c6ebc], ax
inc eax
mov word [0x4c6ebe], ax
lea eax, [ecx - 0x2d]
mov word [0x4c6ec0], ax
inc eax
mov word [0x4c6ec2], ax
lea eax, [ecx - 0x2b]
mov word [0x4c6ec4], ax
inc eax
mov word [0x4c6ec6], ax
lea eax, [ecx - 0x29]
mov word [0x4c6ec8], ax
add eax, 0xfffffff1
mov word [0x4c6eca], ax
lea eax, [ecx - 0x37]
mov word [0x4c6ecc], ax
inc eax
mov word [0x4c6ece], ax
lea eax, [ecx - 0x1f]
mov word [0x4c6ed0], ax
inc eax
mov word [0x4c6ed2], ax
lea eax, [ecx - 0x1d]
mov word [0x4c6ed4], ax
inc eax
mov word [0x4c6ed6], ax
lea eax, [ecx - 0x1b]
mov word [0x4c6ed8], ax
inc eax
mov word [0x4c6eda], ax
lea eax, [ecx - 0x19]
mov word [0x4c6edc], ax
add eax, 0xfffffff1
mov word [0x4c6ede], ax
lea eax, [ecx - 0x27]
mov word [0x4c6ee0], ax
inc eax
mov word [0x4c6ee2], ax
lea eax, [ecx - 0x25]
mov word [0x4c6ee4], ax
inc eax
mov word [0x4c6ee6], ax
lea eax, [ecx - 0x23]
mov word [0x4c6ee8], ax
inc eax
mov word [0x4c6eea], ax
lea eax, [ecx - 0x21]
mov word [0x4c6eec], ax
add eax, 0x11
mov word [0x4c6eee], ax
lea eax, [ecx - 0xf]
mov word [0x4c6ef0], ax
inc eax
mov word [0x4c6ef2], ax
lea eax, [ecx - 0xd]
mov word [0x4c6ef4], ax
inc eax
mov word [0x4c6ef6], ax
lea eax, [ecx - 0xb]
mov word [0x4c6ef8], ax
inc eax
mov word [0x4c6efa], ax
lea eax, [ecx - 9]
mov word [0x4c6efc], ax
add eax, 0xfffffff1
mov word [0x4c6efe], ax
lea eax, [ecx - 0x17]
mov word [0x4c6f00], ax
inc eax
mov word [0x4c6f02], ax
mov eax, ecx
mov word [0x4c6f04], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c6e88]
add eax, 2
mov word [eax + 0x4c75be], dx
cmp eax, 0x7e
jb 0x42f94a
mov eax, 0x4c75c0
ret
Function at 0x42faec
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cf8], 1
jne 0x42fb2a
or dword [0x4c7cf8], 1
mov dword [0x4c6f08], 0xa79fbb81
mov dword [0x4c6f0c], 0x98fcfebf
mov dword [0x4c6f10], 0xadaba7ba
mov word [0x4c6f14], 0xbbbb
mov byte [0x4c6f16], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c6f08]
xor cl, 0xc8
mov byte [eax + 0x4c7640], cl
inc eax
cmp eax, 0xf
jb 0x42fb2c
mov eax, 0x4c7640
ret

Function at 0x42fc42
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cf4], 1
jne 0x42fcab
or dword [0x4c7cf4], 1
mov dword [0x4c6f18], 0xa7a4a489
mov dword [0x4c6f1c], 0xadbca9ab
mov dword [0x4c6f20], 0x81aca689
mov dword [0x4c6f24], 0xa1bca1a6
mov dword [0x4c6f28], 0xb2a1a4a9
mov dword [0x4c6f2c], 0xaca19bad
mov dword [0x4c6f30], 0xa1a9aee8
mov dword [0x4c6f34], 0xf2acada4
mov word [0x4c6f38], 0xc8e8
xor eax, eax
mov cl, byte [eax + 0x4c6f18]
xor cl, 0xc8
mov byte [eax + 0x4c7650], cl
inc eax
cmp eax, 0x22
jb 0x42fcad
mov eax, 0x4c7650
ret

Function at 0x42fcc8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cf0], 1
jne 0x42fd27
or dword [0x4c7cf0], 1
mov dword [0x4c6f3c], 0xabada08b
mov dword [0x4c6f40], 0xa3a79ca3
mov dword [0x4c6f44], 0xad85a6ad
mov dword [0x4c6f48], 0xbaadaaa5
mov dword [0x4c6f4c], 0xb8a1a0bb
mov dword [0x4c6f50], 0xa1a9aee8
mov dword [0x4c6f54], 0xf2acada4
mov word [0x4c6f58], 0xc8e8
xor eax, eax
mov cl, byte [eax + 0x4c6f3c]
xor cl, 0xc8
mov byte [eax + 0x4c7674], cl
inc eax
cmp eax, 0x1e
jb 0x42fd29
mov eax, 0x4c7674
ret

Function at 0x42fec1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cec], 1
jne 0x42ff46
or dword [0x4c7cec], 1
mov dword [0x4c6f5c], 0xa6a6a98b
mov dword [0x4c6f60], 0xb9e8bca7
mov dword [0x4c6f64], 0xb1baadbd
mov dword [0x4c6f68], 0xfee8a9e8
mov dword [0x4c6f6c], 0xa1aae8fc
mov dword [0x4c6f70], 0xa1bee8bc
mov dword [0x4c6f74], 0xa7e8bfad
mov dword [0x4c6f78], 0xfafbe8a6
mov dword [0x4c6f7c], 0xbca1aae8
mov dword [0x4c6f80], 0xa6a1bfe8
mov dword [0x4c6f84], 0xbbbfa7ac
mov byte [0x4c6f88], 0xc8
xor eax, eax
mov cl, byte [eax + 0x4c6f5c]
xor cl, 0xc8
mov byte [eax + 0x4c7694], cl
inc eax
cmp eax, 0x2d
jb 0x42ff48
mov eax, 0x4c7694
ret

Function at 0x42ff65
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7ce8], 1
jne 0x430019
push ebx
push esi
or dword [0x4c7ce8], 1
mov eax, 0xdc80
mov word [0x4c6f8c], ax
add eax, 3
mov word [0x4c6f8e], ax
push edi
mov edi, 0xdc8d
mov eax, edi
mov word [0x4c6f90], ax
add eax, 4
mov word [0x4c6f92], ax
lea esi, [edi + 0xa]
mov eax, esi
mov word [0x4c6f94], ax
lea edx, [edi - 9]
mov eax, edx
mov word [0x4c6f96], ax
add eax, 3
mov word [0x4c6f98], ax
lea ecx, [edi - 2]
mov eax, ecx
mov word [0x4c6f9a], ax
add eax, 0xfffffffe
mov ebx, eax
lea eax, [edi - 0xc]
pop edi
mov word [0x4c6faa], ax
add eax, 0x47
pop esi
mov word [0x4c6f9c], bx
mov dword [0x4c6f9e], 0xdc97dc84
mov dword [0x4c6fa2], 0xdc89dc85
mov dword [0x4c6fa6], 0xdc80dc8b
mov dword [0x4c6fac], 0xdc8ddc86
mov word [0x4c6fb0], ax
pop ebx
xor eax, eax
mov ecx, 0xdcc8
xor cx, word [eax + 0x4c6f8c]
add eax, 2
mov word [eax + 0x4c76c2], cx
cmp eax, 0x26
jb 0x43001b
mov eax, 0x4c76c4
ret
Function at 0x43003c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7ce4], 1
jne 0x4300ed
or dword [0x4c7ce4], 1
mov eax, 0xdc80
mov word [0x4c6fb4], ax
add eax, 3
mov word [0x4c6fb6], ax
mov ecx, 0xdc8d
push ebx
mov eax, ecx
mov word [0x4c6fb8], ax
add eax, 4
push esi
mov word [0x4c6fba], ax
lea esi, [ecx + 0xa]
mov eax, esi
mov word [0x4c6fbc], ax
add eax, 0xfffffff4
mov word [0x4c6fbe], ax
lea edx, [ecx + 0x10]
mov eax, edx
mov word [0x4c6fc0], ax
add eax, 0xfffffffd
mov ebx, eax
mov word [0x4c6fc2], bx
mov word [0x4c6fc4], bx
mov ebx, ecx
mov word [0x4c6fc6], bx
add ebx, 0xfffffff9
mov word [0x4c6fd4], ax
lea eax, [ecx + 0x3b]
pop esi
mov word [0x4c6fc8], bx
mov dword [0x4c6fca], 0xdc97dc9c
mov word [0x4c6fce], dx
mov dword [0x4c6fd0], 0xdc8ddc9b
mov word [0x4c6fd6], ax
pop ebx
xor eax, eax
mov ecx, 0xdcc8
xor cx, word [eax + 0x4c6fb4]
add eax, 2
mov word [eax + 0x4c76ea], cx
cmp eax, 0x24
jb 0x4300ef
mov eax, 0x4c76ec
ret

Function at 0x430110
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7ce0], 1
mov edx, 0xdcc8
jne 0x430184
or dword [0x4c7ce0], 1
lea eax, [edx - 0x48]
mov word [0x4c6fd8], ax
add eax, 3
mov word [0x4c6fda], ax
lea ecx, [edx - 0x3b]
mov eax, ecx
mov word [0x4c6fdc], ax
add eax, 4
mov word [0x4c6fde], ax
lea eax, [edx - 0x31]
mov word [0x4c6fe0], ax
add eax, 6
mov word [0x4c6fe2], ax
lea eax, [edx - 0x2d]
push esi
mov esi, eax
mov eax, edx
mov word [0x4c6fe4], si
mov word [0x4c6fe6], cx
mov dword [0x4c6fe8], 0xdc9bdc9a
mov word [0x4c6fec], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4c6fd8]
add eax, 2
mov word [eax + 0x4c770e], cx
cmp eax, 0x16
jb 0x430186
mov eax, 0x4c7710
ret

Function at 0x4301a4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cdc], 1
jne 0x430266
push ebx
mov eax, 0xdc80
mov word [0x4c6ff0], ax
add eax, 3
mov word [0x4c6ff2], ax
push esi
mov esi, 0xdc8d
or dword [0x4c7cdc], 1
mov eax, esi
mov word [0x4c6ff4], ax
add eax, 4
mov word [0x4c6ff6], ax
lea edx, [esi + 0xa]
lea ecx, [esi - 2]
mov eax, edx
mov word [0x4c6ff8], ax
mov eax, ecx
mov word [0x4c6ffa], ax
add eax, 0x12
mov word [0x4c6ffc], ax
lea eax, [esi + 0xd]
mov ebx, eax
add eax, 0xffffffec
mov esi, eax
lea eax, [edx - 9]
mov word [0x4c7010], ax
add eax, 0xfffffff3
mov word [0x4c7012], ax
lea eax, [edx - 8]
mov word [0x4c7004], si
mov word [0x4c7014], ax
add eax, 0x39
pop esi
mov word [0x4c6ffe], bx
mov dword [0x4c7000], 0xdc8ddc9a
mov dword [0x4c7006], 0xdc97dc9c
mov word [0x4c700a], cx
mov dword [0x4c700c], 0xdc86dc87
mov word [0x4c7016], ax
pop ebx
xor eax, eax
mov ecx, 0xdcc8
xor cx, word [eax + 0x4c6ff0]
add eax, 2
mov word [eax + 0x4c7726], cx
cmp eax, 0x28
jb 0x430268
mov eax, 0x4c7728
ret