joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40ae80
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c724c], 1
jne 0x40aecb
or dword [0x4c724c], 1
mov dword [0x4c22d0], 0xc050338
mov dword [0x4c22d4], 0x8010903
mov dword [0x4c22d8], 0x15084d09
mov dword [0x4c22dc], 0x191d080e
mov dword [0x4c22e0], 0x57030204
mov word [0x4c22e4], 0x6d4d
xor eax, eax
mov cl, byte [eax + 0x4c22d0]
xor cl, 0x6d
mov byte [eax + 0x4c2a00], cl
inc eax
cmp eax, 0x16
jb 0x40aecd
mov eax, 0x4c2a00
ret

Function at 0x40aee8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7248], 1
jne 0x40af3b
or dword [0x4c7248], 1
mov dword [0x4c22e8], 0xc050338
mov dword [0x4c22ec], 0x8010903
mov dword [0x4c22f0], 0x15084d09
mov dword [0x4c22f4], 0x191d080e
mov dword [0x4c22f8], 0x57030204
mov dword [0x4c22fc], 0x671e484d
mov byte [0x4c2300], 0x6d
xor eax, eax
mov cl, byte [eax + 0x4c22e8]
xor cl, 0x6d
mov byte [eax + 0x4c2a18], cl
inc eax
cmp eax, 0x19
jb 0x40af3d
mov eax, 0x4c2a18
ret

Function at 0x40af58
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7244], 1
jne 0x40af90
or dword [0x4c7244], 1
mov dword [0x4c2304], 0xf18193e
mov dword [0x4c2308], 0x415084d
mov dword [0x4c230c], 0x48454d19
mov dword [0x4c2310], 0x6d674409
xor eax, eax
mov cl, byte [eax + 0x4c2304]
xor cl, 0x6d
mov byte [eax + 0x4c2a34], cl
inc eax
cmp eax, 0x10
jb 0x40af92
mov eax, 0x4c2a34
ret

Function at 0x40cf06
Capabilities:
Write file on windows

Disassembly:
mov eax, 0x48dc02
call fcn.0048cac8
sub esp, 0x20
push ebx
xor ebx, ebx
cmp dword [edi + 0x44], ebx
je 0x40cfea
cmp byte [edi + 0x49], bl
je 0x40cfea
mov eax, dword [edi]
push 0xffffffffffffffff
mov ecx, edi
call dword [eax + 0xc]
cmp eax, 0xffffffff
jne 0x40cf3d
xor al, al
jmp 0x40cfec
push esi
lea esi, [ebp - 0x2c]
call fcn.0040c8ab
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x40cf8d
lea eax, [ebp - 0x2c]
mov edx, eax
mov ecx, dword [edi + 0x44]
mov esi, dword [ecx]
lea ebx, [ebp - 0x10]
push ebx
mov ebx, dword [ebp - 0x1c]
add eax, ebx
push eax
push edx
lea eax, [edi + 0x4c]
push eax
call dword [esi + 0x18]
sub eax, 0
je 0x40cf92
dec eax
je 0x40cf96
dec eax
dec eax
je 0x40cfe6
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00404c20
mov al, bl
pop esi
jmp 0x40cfec
mov edx, dword [ebp - 0x2c]
jmp 0x40cf57
mov byte [edi + 0x49], 0
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x40cfa2
lea eax, [ebp - 0x2c]
mov esi, dword [ebp - 0x10]
sub esi, eax
je 0x40cfc8
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x40cfb5
lea eax, [ebp - 0x2c]
push dword [edi + 0x54]
push esi
push 1
push eax
call fcn.004686ff
add esp, 0x10
cmp esi, eax
jne 0x40cf7a
cmp byte [edi + 0x49], 0
je 0x40cfe6
test esi, esi
jne 0x40cf49
push esi
push 8
lea esi, [ebp - 0x2c]
call fcn.0040c984
jmp 0x40cf49
mov bl, 1
jmp 0x40cf7c
mov al, 1
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
leave
ret
Function at 0x412781
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c7240], 1
jne 0x4127f7
or dword [0x4c7240], 1
mov dword [0x4c2a54], 0x1c051f33
mov dword [0x4c2a58], 0x1f1e5014
mov dword [0x4c2a5c], 0x15175004
mov dword [0x4c2a60], 0x19145004
mov dword [0x4c2a64], 0x14190003
mov dword [0x4c2a68], 0x50161f50
mov dword [0x4c2a6c], 0x1804151d
mov dword [0x4c2a70], 0x5750141f
mov dword [0x4c2a74], 0x1c1c1113
mov dword [0x4c2a78], 0x70504a57
mov cl, byte [eax + 0x4c2a54]
xor cl, 0x70
mov byte [eax + 0x4c2b98], cl
inc eax
cmp eax, 0x28
jb 0x4127f7
mov eax, 0x4c2b98
ret

Function at 0x412812
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c723c], 1
jne 0x412879
or dword [0x4c723c], 1
mov dword [0x4c2a7c], 0x1c191136
mov dword [0x4c2a80], 0x4501415
mov dword [0x4c2a84], 0x1e19501f
mov dword [0x4c2a88], 0x151b1f06
mov dword [0x4c2a8c], 0x4151d50
mov dword [0x4c2a90], 0x50141f18
mov dword [0x4c2a94], 0x1c111357
mov dword [0x4c2a98], 0x504a571c
mov byte [0x4c2a9c], 0x70
xor eax, eax
mov cl, byte [eax + 0x4c2a7c]
xor cl, 0x70
mov byte [eax + 0x4c2bc0], cl
inc eax
cmp eax, 0x21
jb 0x41287b
mov eax, 0x4c2bc0
ret

Function at 0x412896
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c7238], 1
jne 0x4128f8
or dword [0x4c7238], 1
mov dword [0x4c2aa0], 0x1f02207a
mov dword [0x4c2aa4], 0x1c121112
mov dword [0x4c2aa8], 0x5145009
mov dword [0x4c2aac], 0x1f045015
mov dword [0x4c2ab0], 0x2130350
mov dword [0x4c2ab4], 0x50040019
mov dword [0x4c2ab8], 0x1f020215
mov dword [0x4c2abc], 0x70504a02
mov cl, byte [eax + 0x4c2aa0]
xor cl, 0x70
mov byte [eax + 0x4c2be4], cl
inc eax
cmp eax, 0x20
jb 0x4128f8
mov eax, 0x4c2be4
ret
Function at 0x412ed3
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
and dword [ebp - 4], 0
cmp dword [ebp + 0xc], 0
push ebx
push esi
push edi
mov edi, eax
jbe 0x413018
mov ebx, dword [ebp + 8]
push 4
sub ebx, edi
pop esi
test byte [0x4c7234], 1
jne 0x412f35
or dword [0x4c7234], 1
mov eax, 0x8503
mov word [0x4c2ac0], ax
add eax, 0x12
mov word [0x4c2ac2], ax
mov eax, 0x851e
mov word [0x4c2ac4], ax
add eax, 0xfffffff6
mov word [0x4c2ac6], ax
mov eax, 0x8570
mov word [0x4c2ac8], ax
xor eax, eax
mov ecx, 0x8570
xor cx, word [eax + 0x4c2ac0]
add eax, 2
mov word [eax + 0x4c2c02], cx
cmp eax, 0xa
jb 0x412f37
mov eax, dword [ebx + edi]
mov ecx, 0x4c2c04
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x412f7e
test dx, dx
je 0x412f7a
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x412f7e
add eax, esi
add ecx, esi
test dx, dx
jne 0x412f5a
xor eax, eax
jmp 0x412f83
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x412f8f
mov dword [edi], 0x385
jmp 0x413007
call fcn.00413028
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x412fbb
test dx, dx
je 0x412fb7
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x412fbb
add ecx, esi
add eax, esi
test dx, dx
jne 0x412f97
xor eax, eax
jmp 0x412fc0
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x412fcc
mov dword [edi], 0x386
jmp 0x413007
call fcn.004130fb
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x412ff8
test dx, dx
je 0x412ff4
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x412ff8
add ecx, esi
add eax, esi
test dx, dx
jne 0x412fd4
xor eax, eax
jmp 0x412ffd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x413021
mov dword [edi], 0x387
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
add edi, esi
cmp eax, dword [ebp + 0xc]
jb 0x412ef2
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 8
mov eax, 0x80020006
jmp 0x41301a

Function at 0x413028
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7230], 1
jne 0x4130d8
or dword [0x4c7230], 1
mov eax, 0x8511
mov word [0x4c2acc], ax
add eax, 3
mov ecx, eax
mov word [0x4c2ad0], ax
mov eax, 0x8535
mov word [0x4c2ad2], ax
add eax, 0xffffffd1
mov word [0x4c2ad4], ax
mov eax, 0x8515
mov word [0x4c2ace], cx
mov ecx, eax
lea edx, [eax + 9]
mov word [0x4c2ad6], cx
mov ecx, edx
push edi
mov word [0x4c2ad8], cx
add ecx, 0xffffffe6
mov edi, ecx
mov word [0x4c2ada], di
lea edi, [eax + 0x27]
mov word [0x4c2adc], di
add edi, 0xffffffdd
mov ecx, eax
add eax, 0xffffffed
mov word [0x4c2aea], ax
lea eax, [ecx + 0x5b]
mov word [0x4c2ade], di
mov dword [0x4c2ae0], 0x85048503
mov word [0x4c2ae4], cx
mov dword [0x4c2ae6], 0x8515851e
mov word [0x4c2aec], ax
pop edi
xor eax, eax
mov ecx, 0x8570
xor cx, word [eax + 0x4c2acc]
add eax, 2
mov word [eax + 0x4c2c0e], cx
cmp eax, 0x22
jb 0x4130da
mov eax, 0x4c2c10
ret
Function at 0x4130fb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c722c], 1
mov ecx, 0x8570
jne 0x413155
or dword [0x4c722c], 1
lea eax, [ecx - 0x6a]
mov word [0x4c2af0], ax
add eax, 0xf
mov word [0x4c2af2], ax
lea eax, [ecx - 0x6e]
mov word [0x4c2af4], ax
inc eax
mov word [0x4c2af6], ax
lea eax, [ecx - 0x57]
mov word [0x4c2af8], ax
add eax, 6
mov word [0x4c2afa], ax
lea eax, [ecx - 0x52]
mov word [0x4c2afc], ax
mov eax, ecx
mov word [0x4c2afe], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c2af0]
add eax, 2
mov word [eax + 0x4c2c32], dx
cmp eax, 0x10
jb 0x413157
mov eax, 0x4c2c34
ret

Function at 0x413ac8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7228], 1
mov edx, 0x8570
jne 0x413b2b
or dword [0x4c7228], 1
lea ecx, [edx - 0x5b]
mov eax, ecx
mov word [0x4c2b00], ax
add eax, 0xffffffed
push esi
mov esi, eax
lea eax, [edx - 0x34]
mov word [0x4c2b0a], ax
add eax, 0xffffffdd
mov word [0x4c2b0c], ax
mov eax, edx
mov word [0x4c2b02], si
mov word [0x4c2b04], si
mov dword [0x4c2b06], 0x8502851f
mov dword [0x4c2b0e], 0x8515851e
mov word [0x4c2b12], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4c2b00]
add eax, 2
mov word [eax + 0x4c2c42], cx
cmp eax, 0x14
jb 0x413b2d
mov eax, 0x4c2c44
ret

Function at 0x413b4b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7224], 1
jne 0x413be7
or dword [0x4c7224], 1
mov edx, 0x8515
mov eax, edx
mov word [0x4c2b14], ax
add eax, 0xffffffed
mov ecx, eax
mov word [0x4c2b16], cx
mov word [0x4c2b18], cx
lea ecx, [edx + 0xa]
mov word [0x4c2b1a], cx
mov ecx, eax
mov word [0x4c2b1c], cx
lea ecx, [edx + 0x1e]
mov word [0x4c2b1e], cx
add ecx, 0xffffffe5
mov word [0x4c2b20], cx
lea ecx, [edx - 4]
push edi
mov edi, ecx
mov word [0x4c2b22], di
mov edi, eax
mov word [0x4c2b26], cx
mov word [0x4c2b2e], ax
add ecx, 2
lea eax, [edx + 0x5b]
mov word [0x4c2b24], di
mov word [0x4c2b28], cx
mov dword [0x4c2b2a], 0x85158504
mov word [0x4c2b30], ax
pop edi
xor eax, eax
mov ecx, 0x8570
xor cx, word [eax + 0x4c2b14]
add eax, 2
mov word [eax + 0x4c2c56], cx
cmp eax, 0x1e
jb 0x413be9
mov eax, 0x4c2c58
ret

Function at 0x413c0a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7220], 1
jne 0x413c6b
or dword [0x4c7220], 1
mov edx, 0x8515
mov eax, edx
mov word [0x4c2b34], ax
add eax, 0xffffffed
mov ecx, eax
mov word [0x4c2b36], cx
mov word [0x4c2b38], cx
push edi
lea ecx, [edx + 0xa]
mov edi, ecx
mov word [0x4c2b3c], ax
lea eax, [edx + 0x5b]
mov word [0x4c2b3a], di
mov dword [0x4c2b3e], 0x851f8533
mov dword [0x4c2b42], 0x85158514
mov word [0x4c2b46], ax
pop edi
xor eax, eax
mov ecx, 0x8570
xor cx, word [eax + 0x4c2b34]
add eax, 2
mov word [eax + 0x4c2c76], cx
cmp eax, 0x14
jb 0x413c6d
mov eax, 0x4c2c78
ret
Function at 0x413c8e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c721c], 1
mov edx, 0x8570
jne 0x413d0b
or dword [0x4c721c], 1
lea ecx, [edx - 0x5b]
mov eax, ecx
mov word [0x4c2b48], ax
add eax, 0xffffffed
push esi
mov esi, eax
lea eax, [edx - 0x33]
mov word [0x4c2b52], ax
mov eax, ecx
mov word [0x4c2b54], ax
add eax, 0xffffffee
mov word [0x4c2b4a], si
mov word [0x4c2b4c], si
mov esi, eax
mov word [0x4c2b58], ax
lea eax, [edx - 0x5f]
mov word [0x4c2b5a], ax
mov eax, edx
mov word [0x4c2b56], si
mov dword [0x4c2b4e], 0x8502851f
mov dword [0x4c2b5c], 0x85158517
mov word [0x4c2b60], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4c2b48]
add eax, 2
mov word [eax + 0x4c2c8a], cx
cmp eax, 0x1a
jb 0x413d0d
mov eax, 0x4c2c8c
ret

Function at 0x413d2b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7218], 1
mov ecx, 0x8570
jne 0x413d8a
or dword [0x4c7218], 1
lea eax, [ecx - 0x5b]
mov word [0x4c2b64], ax
add eax, 0xffffffed
mov edx, eax
mov word [0x4c2b66], dx
mov word [0x4c2b68], dx
lea edx, [ecx - 0x51]
mov word [0x4c2b6a], dx
mov edx, eax
lea eax, [ecx - 0x54]
mov word [0x4c2b72], ax
mov eax, ecx
mov word [0x4c2b6c], dx
mov dword [0x4c2b6e], 0x85028525
mov word [0x4c2b74], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c2b64]
add eax, 2
mov word [eax + 0x4c2ca6], dx
cmp eax, 0x12
jb 0x413d8c
mov eax, 0x4c2ca8
ret

Function at 0x41442f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7214], 1
jne 0x414459
or dword [0x4c7214], 1
mov dword [0x4c2b78], 0x1c051e4c
mov word [0x4c2b7c], 0x4e1c
mov byte [0x4c2b7e], 0x70
xor eax, eax
mov cl, byte [eax + 0x4c2b78]
xor cl, 0x70
mov byte [eax + 0x4c2cbc], cl
inc eax
cmp eax, 7
jb 0x41445b
mov eax, 0x4c2cbc
ret

Function at 0x414476
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7210], 1
jne 0x4144a0
or dword [0x4c7210], 1
mov dword [0x4c2b80], 0x1c051e4c
mov word [0x4c2b84], 0x4e1c
mov byte [0x4c2b86], 0x70
xor eax, eax
mov cl, byte [eax + 0x4c2b80]
xor cl, 0x70
mov byte [eax + 0x4c2cc4], cl
inc eax
cmp eax, 7
jb 0x4144a2
mov eax, 0x4c2cc4
ret

Function at 0x4144bd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7208], 1
jne 0x4144e1
or dword [0x4c7208], 1
mov dword [0x4c2b8c], 0x1f132b50
mov dword [0x4c2b90], 0x704d1514
xor eax, eax
mov cl, byte [eax + 0x4c2b8c]
xor cl, 0x70
mov byte [eax + 0x4c2cd0], cl
inc eax
cmp eax, 8
jb 0x4144e3
mov eax, 0x4c2cd0
ret
Function at 0x4151be
Capabilities:
Encode data using xor

Disassembly:
push esi
push edi
push 0x31
pop ecx
mov esi, 0x495d48
mov edi, 0x4c7600
push 0x495e0c
rep movsd dword es:[edi], dword [esi]
call fcn.0044f250
pop ecx
pop edi
pop esi
cmp eax, 0xffffffff
jne 0x4151e4
xor al, al
ret
push 0x495bd0
call fcn.0044f1a0
pop ecx
cmp eax, 0xffffffff
je 0x4151e1
push 0x495ea0
call fcn.0044e3f0
pop ecx
cmp eax, 0xffffffff
je 0x4151e1
test byte [0x4c71fc], 1
jne 0x415225
or dword [0x4c71fc], 1
mov dword [0x4c2cf0], 0x45151c07
mov byte [0x4c2cf4], 0x74
xor eax, eax
mov cl, byte [eax + 0x4c2cf0]
xor cl, 0x74
mov byte [eax + 0x4c2dbc], cl
inc eax
cmp eax, 5
jb 0x415227
push 0x4c2dbc
call fcn.0044f2c0
pop ecx
mov dword [0x4bc928], eax
test eax, eax
js 0x4151e1
call fcn.004152b0
push eax
call fcn.0044e460
pop ecx
mov dword [0x4bc92c], eax
test eax, eax
js 0x4151e1
test byte [0x4c71f4], 1
jne 0x415283
or dword [0x4c71f4], 1
mov dword [0x4c2d00], 0x74071115
xor eax, eax
mov cl, byte [eax + 0x4c2d00]
xor cl, 0x74
mov byte [eax + 0x4c2dcc], cl
inc eax
cmp eax, 4
jb 0x415285
push 0x4c2dcc
call fcn.0044f210
test eax, eax
mov dword [0x4bc930], eax
pop ecx
setns al
ret

Function at 0x4152b0
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c71f8], 1
jne 0x4152d6
or dword [0x4c71f8], 1
mov dword [0x4c2cf8], 0x61b12
mov dword [0x4c2cfc], 0x74151a01
mov cl, byte [eax + 0x4c2cf8]
xor cl, 0x74
mov byte [eax + 0x4c2dc4], cl
inc eax
cmp eax, 8
jb 0x4152d6
mov eax, 0x4c2dc4
ret

Function at 0x415554
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c71f0], 1
jne 0x415594
or dword [0x4c71f0], 1
mov dword [0x4c2d04], 0x1d540419
mov dword [0x4c2d08], 0x54001d1a
mov dword [0x4c2d0c], 0x181d1512
mov word [0x4c2d10], 0x1011
mov byte [0x4c2d12], 0x74
mov cl, byte [eax + 0x4c2d04]
xor cl, 0x74
mov byte [eax + 0x4c2dd0], cl
inc eax
cmp eax, 0xf
jb 0x415594
mov eax, 0x4c2dd0
ret

Function at 0x4155af
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c71ec], 1
jne 0x4155ef
or dword [0x4c71ec], 1
mov dword [0x4c2d14], 0x1d540419
mov dword [0x4c2d18], 0x54001d1a
mov dword [0x4c2d1c], 0x181d1512
mov word [0x4c2d20], 0x1011
mov byte [0x4c2d22], 0x74
mov cl, byte [eax + 0x4c2d14]
xor cl, 0x74
mov byte [eax + 0x4c2de0], cl
inc eax
cmp eax, 0xf
jb 0x4155ef
mov eax, 0x4c2de0
ret

Function at 0x41560a
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c71e8], 1
jne 0x41564a
or dword [0x4c71e8], 1
mov dword [0x4c2d24], 0x2b001107
mov dword [0x4c2d28], 0x54001a1d
mov dword [0x4c2d2c], 0x181d1512
mov word [0x4c2d30], 0x1011
mov byte [0x4c2d32], 0x74
mov cl, byte [eax + 0x4c2d24]
xor cl, 0x74
mov byte [eax + 0x4c2df0], cl
inc eax
cmp eax, 0xf
jb 0x41564a
mov eax, 0x4c2df0
ret
Function at 0x415665
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c71e4], 1
jne 0x4156ae
or dword [0x4c71e4], 1
mov dword [0x4c2d34], 0x1d071a01
mov dword [0x4c2d38], 0x10111a13
mov dword [0x4c2d3c], 0x1511062b
mov dword [0x4c2d40], 0x15125410
mov dword [0x4c2d44], 0x1011181d
mov byte [0x4c2d48], 0x74
xor eax, eax
mov cl, byte [eax + 0x4c2d34]
xor cl, 0x74
mov byte [eax + 0x4c2e00], cl
inc eax
cmp eax, 0x15
jb 0x4156b0
mov eax, 0x4c2e00
ret

Function at 0x4156cb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c71e0], 1
jne 0x41570a
or dword [0x4c71e0], 1
mov dword [0x4c2d4c], 0x131a0604
mov dword [0x4c2d50], 0x1f151954
mov dword [0x4c2d54], 0x15125411
mov dword [0x4c2d58], 0x1011181d
mov byte [0x4c2d5c], 0x74
xor eax, eax
mov cl, byte [eax + 0x4c2d4c]
xor cl, 0x74
mov byte [eax + 0x4c2e18], cl
inc eax
cmp eax, 0x11
jb 0x41570c
mov eax, 0x4c2e18
ret

Function at 0x415727
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c71dc], 1
jne 0x41576b
or dword [0x4c71dc], 1
mov dword [0x4c2d60], 0x61b12
mov dword [0x4c2d64], 0x2b151a01
mov dword [0x4c2d68], 0x10151106
mov dword [0x4c2d6c], 0x1d151254
mov dword [0x4c2d70], 0x74101118
mov cl, byte [eax + 0x4c2d60]
xor cl, 0x74
mov byte [eax + 0x4c2e2c], cl
inc eax
cmp eax, 0x14
jb 0x41576b
mov eax, 0x4c2e2c
ret

Function at 0x415786
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c71d8], 1
jne 0x4157d0
or dword [0x4c71d8], 1
mov dword [0x4c2d74], 0x40d0617
mov dword [0x4c2d78], 0x1d541b00
mov dword [0x4c2d7c], 0x54001d1a
mov dword [0x4c2d80], 0x181d1512
mov word [0x4c2d84], 0x1011
mov byte [0x4c2d86], 0x74
mov cl, byte [eax + 0x4c2d74]
xor cl, 0x74
mov byte [eax + 0x4c2e40], cl
inc eax
cmp eax, 0x13
jb 0x4157d0
mov eax, 0x4c2e40
ret

Function at 0x4159e3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c71d4], 1
jne 0x415a06
or dword [0x4c71d4], 1
mov dword [0x4c2d88], 0x1007071d
mov word [0x4c2d8c], 0x741f
xor eax, eax
mov cl, byte [eax + 0x4c2d88]
xor cl, 0x74
mov byte [eax + 0x4c2e54], cl
inc eax
cmp eax, 6
jb 0x415a08
mov eax, 0x4c2e54
ret

Function at 0x415a23
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c71d0], 1
jne 0x415a50
or dword [0x4c71d0], 1
mov dword [0x4c2d90], 0x1606011c
mov dword [0x4c2d94], 0x6011015
mov word [0x4c2d98], 0x7406
xor eax, eax
mov cl, byte [eax + 0x4c2d90]
xor cl, 0x74
mov byte [eax + 0x4c2e5c], cl
inc eax
cmp eax, 0xa
jb 0x415a52
mov eax, 0x4c2e5c
ret

Function at 0x415b30
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c71cc], 1
jne 0x415b5d
or dword [0x4c71cc], 1
mov dword [0x4c2d9c], 0x1606011c
mov dword [0x4c2da0], 0x6011015
mov word [0x4c2da4], 0x7406
xor eax, eax
mov cl, byte [eax + 0x4c2d9c]
xor cl, 0x74
mov byte [eax + 0x4c2e68], cl
inc eax
cmp eax, 0xa
jb 0x415b5f
mov eax, 0x4c2e68
ret
Function at 0x416247
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c71c8], 1
jne 0x41628f
or dword [0x4c71c8], 1
mov dword [0x4c2e74], 0x60f0415
mov dword [0x4c2e78], 0x1f561902
mov dword [0x4c2e7c], 0x56021f18
mov dword [0x4c2e80], 0x1a1f1710
mov word [0x4c2e84], 0x1213
mov byte [0x4c2e86], 0x76
xor eax, eax
mov cl, byte [eax + 0x4c2e74]
xor cl, 0x76
mov byte [eax + 0x4c2f88], cl
inc eax
cmp eax, 0x13
jb 0x416291
mov eax, 0x4c2f88
ret

Function at 0x4162ac
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c71c4], 1
jne 0x4162f4
or dword [0x4c71c4], 1
mov dword [0x4c2e88], 0x60f0415
mov dword [0x4c2e8c], 0x1f561902
mov dword [0x4c2e90], 0x56021f18
mov dword [0x4c2e94], 0x1a1f1710
mov word [0x4c2e98], 0x1213
mov byte [0x4c2e9a], 0x76
xor eax, eax
mov cl, byte [eax + 0x4c2e88]
xor cl, 0x76
mov byte [eax + 0x4c2f9c], cl
inc eax
cmp eax, 0x13
jb 0x4162f6
mov eax, 0x4c2f9c
ret

Function at 0x416311
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c71bc], 1
jne 0x416359
or dword [0x4c71bc], 1
mov dword [0x4c2ea4], 0x60f0415
mov dword [0x4c2ea8], 0x1f561902
mov dword [0x4c2eac], 0x56021f18
mov dword [0x4c2eb0], 0x1a1f1710
mov word [0x4c2eb4], 0x1213
mov byte [0x4c2eb6], 0x76
xor eax, eax
mov cl, byte [eax + 0x4c2ea4]
xor cl, 0x76
mov byte [eax + 0x4c2fb8], cl
inc eax
cmp eax, 0x13
jb 0x41635b
mov eax, 0x4c2fb8
ret

Function at 0x416376
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c71b4], 1
jne 0x4163be
or dword [0x4c71b4], 1
mov dword [0x4c2ebc], 0x60f0415
mov dword [0x4c2ec0], 0x1f561902
mov dword [0x4c2ec4], 0x56021f18
mov dword [0x4c2ec8], 0x1a1f1710
mov word [0x4c2ecc], 0x1213
mov byte [0x4c2ece], 0x76
xor eax, eax
mov cl, byte [eax + 0x4c2ebc]
xor cl, 0x76
mov byte [eax + 0x4c2fd0], cl
inc eax
cmp eax, 0x13
jb 0x4163c0
mov eax, 0x4c2fd0
ret

Function at 0x4163db
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c71b0], 1
jne 0x416412
or dword [0x4c71b0], 1
mov dword [0x4c2ed0], 0x60f0415
mov dword [0x4c2ed4], 0x10561902
mov dword [0x4c2ed8], 0x131a1f17
mov word [0x4c2edc], 0x7612
xor eax, eax
mov cl, byte [eax + 0x4c2ed0]
xor cl, 0x76
mov byte [eax + 0x4c2fe4], cl
inc eax
cmp eax, 0xe
jb 0x416414
mov eax, 0x4c2fe4
ret

Function at 0x41642f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c71ac], 1
jne 0x416466
or dword [0x4c71ac], 1
mov dword [0x4c2ee0], 0x60f0415
mov dword [0x4c2ee4], 0x10561902
mov dword [0x4c2ee8], 0x131a1f17
mov word [0x4c2eec], 0x7612
xor eax, eax
mov cl, byte [eax + 0x4c2ee0]
xor cl, 0x76
mov byte [eax + 0x4c2ff4], cl
inc eax
cmp eax, 0xe
jb 0x416468
mov eax, 0x4c2ff4
ret

Function at 0x416483
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c71a8], 1
jne 0x4164b0
or dword [0x4c71a8], 1
mov dword [0x4c2ef0], 0x604131e
mov dword [0x4c2ef4], 0x413125d
mov word [0x4c2ef8], 0x7606
xor eax, eax
mov cl, byte [eax + 0x4c2ef0]
xor cl, 0x76
mov byte [eax + 0x4c3004], cl
inc eax
cmp eax, 0xa
jb 0x4164b2
mov eax, 0x4c3004
ret
Function at 0x4164cd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c71a4], 1
jne 0x416504
or dword [0x4c71a4], 1
mov dword [0x4c2efc], 0x60f0415
mov dword [0x4c2f00], 0x10561902
mov dword [0x4c2f04], 0x131a1f17
mov word [0x4c2f08], 0x7612
xor eax, eax
mov cl, byte [eax + 0x4c2efc]
xor cl, 0x76
mov byte [eax + 0x4c3010], cl
inc eax
cmp eax, 0xe
jb 0x416506
mov eax, 0x4c3010
ret

Function at 0x416521
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c71a0], 1
jne 0x416558
or dword [0x4c71a0], 1
mov dword [0x4c2f0c], 0x60f0415
mov dword [0x4c2f10], 0x10561902
mov dword [0x4c2f14], 0x131a1f17
mov word [0x4c2f18], 0x7612
xor eax, eax
mov cl, byte [eax + 0x4c2f0c]
xor cl, 0x76
mov byte [eax + 0x4c3020], cl
inc eax
cmp eax, 0xe
jb 0x41655a
mov eax, 0x4c3020
ret

Function at 0x416626
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c719c], 1
jne 0x41665d
or dword [0x4c719c], 1
mov dword [0x4c2f1c], 0x60f0415
mov dword [0x4c2f20], 0x10561902
mov dword [0x4c2f24], 0x131a1f17
mov word [0x4c2f28], 0x7612
xor eax, eax
mov cl, byte [eax + 0x4c2f1c]
xor cl, 0x76
mov byte [eax + 0x4c3030], cl
inc eax
cmp eax, 0xe
jb 0x41665f
mov eax, 0x4c3030
ret

Function at 0x41680c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7198], 1
jne 0x416843
or dword [0x4c7198], 1
mov dword [0x4c2f2c], 0x60f0415
mov dword [0x4c2f30], 0x10561902
mov dword [0x4c2f34], 0x131a1f17
mov word [0x4c2f38], 0x7612
xor eax, eax
mov cl, byte [eax + 0x4c2f2c]
xor cl, 0x76
mov byte [eax + 0x4c3040], cl
inc eax
cmp eax, 0xe
jb 0x416845
mov eax, 0x4c3040
ret

Function at 0x416860
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7194], 1
jne 0x416897
or dword [0x4c7194], 1
mov dword [0x4c2f3c], 0x60f0415
mov dword [0x4c2f40], 0x10561902
mov dword [0x4c2f44], 0x131a1f17
mov word [0x4c2f48], 0x7612
xor eax, eax
mov cl, byte [eax + 0x4c2f3c]
xor cl, 0x76
mov byte [eax + 0x4c3050], cl
inc eax
cmp eax, 0xe
jb 0x416899
mov eax, 0x4c3050
ret