joyce8/EMBER2024-capa huggingface dataset:
Function at 0x403ad6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2da8], 1
jne 0x403b0b
or dword [0x4c2da8], 1
mov dword [0x4bcce0], 0x60717a58
mov dword [0x4bcce4], 0x352f7079
mov dword [0x4bcce8], 0x1f186630
mov byte [0x4bccec], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bcce0]
xor cl, 0x15
mov byte [eax + 0x4bd38c], cl
inc eax
cmp eax, 0xd
jb 0x403b0d
mov eax, 0x4bd38c
ret

Function at 0x403b28
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2da4], 1
jne 0x403b67
or dword [0x4c2da4], 1
mov dword [0x4bccf0], 0x70677d41
mov dword [0x4bccf4], 0x352f7174
mov dword [0x4bccf8], 0x6d306d25
mov dword [0x4bccfc], 0x1f181f18
mov byte [0x4bcd00], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bccf0]
xor cl, 0x15
mov byte [eax + 0x4bd39c], cl
inc eax
cmp eax, 0x11
jb 0x403b69
mov eax, 0x4bd39c
ret

Function at 0x403b84
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2da0], 1
jne 0x403bc2
or dword [0x4c2da0], 1
mov dword [0x4bcd04], 0x70766d50
mov dword [0x4bcd08], 0x7a7c6165
mov dword [0x4bcd0c], 0x7130357b
mov word [0x4bcd10], 0x1f18
mov byte [0x4bcd12], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bcd04]
xor cl, 0x15
mov byte [eax + 0x4bd3b0], cl
inc eax
cmp eax, 0xf
jb 0x403bc4
mov eax, 0x4bd3b0
ret

Function at 0x403bdf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d9c], 1
jne 0x403c1d
or dword [0x4c2d9c], 1
mov dword [0x4bcd14], 0x74767a59
mov dword [0x4bcd18], 0x7b7a7c61
mov dword [0x4bcd1c], 0x6530352f
mov word [0x4bcd20], 0x1f18
mov byte [0x4bcd22], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bcd14]
xor cl, 0x15
mov byte [eax + 0x4bd3c0], cl
inc eax
cmp eax, 0xf
jb 0x403c1f
mov eax, 0x4bd3c0
ret

Function at 0x403c3a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d98], 1
jne 0x403c7b
or dword [0x4c2d98], 1
mov dword [0x4bcd24], 0x70656c41
mov dword [0x4bcd28], 0x6630352f
mov dword [0x4bcd2c], 0x6d253d35
mov dword [0x4bcd30], 0x183c6d30
mov word [0x4bcd34], 0x151f
xor eax, eax
mov cl, byte [eax + 0x4bcd24]
xor cl, 0x15
mov byte [eax + 0x4bd3d0], cl
inc eax
cmp eax, 0x12
jb 0x403c7d
mov eax, 0x4bd3d0
ret

Function at 0x403c98
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d94], 1
jne 0x403d20
or dword [0x4c2d94], 1
mov dword [0x4bcd38], 0x74617051
mov dword [0x4bcd3c], 0x2f66797c
mov dword [0x4bcd40], 0x7c674135
mov dword [0x4bcd44], 0x61357170
mov dword [0x4bcd48], 0x7067357a
mov dword [0x4bcd4c], 0x73357174
mov dword [0x4bcd50], 0x35787a67
mov dword [0x4bcd54], 0x7a787078
mov dword [0x4bcd58], 0x74356c67
mov dword [0x4bcd5c], 0x70677171
mov dword [0x4bcd60], 0x30356666
mov dword [0x4bcd64], 0x151f1865
xor eax, eax
mov cl, byte [eax + 0x4bcd38]
xor cl, 0x15
mov byte [eax + 0x4bd3e4], cl
inc eax
cmp eax, 0x30
jb 0x403d22
mov eax, 0x4bd3e4
ret
Function at 0x403d3d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d90], 1
jne 0x403dcf
or dword [0x4c2d90], 1
mov dword [0x4bcd68], 0x74617051
mov dword [0x4bcd6c], 0x2f66797c
mov dword [0x4bcd70], 0x7c674135
mov dword [0x4bcd74], 0x61357170
mov dword [0x4bcd78], 0x6762357a
mov dword [0x4bcd7c], 0x3570617c
mov dword [0x4bcd80], 0x78357a61
mov dword [0x4bcd84], 0x677a7870
mov dword [0x4bcd88], 0x7174356c
mov dword [0x4bcd8c], 0x66706771
mov dword [0x4bcd90], 0x65303566
mov word [0x4bcd94], 0x1f18
mov byte [0x4bcd96], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bcd68]
xor cl, 0x15
mov byte [eax + 0x4bd414], cl
inc eax
cmp eax, 0x2f
jb 0x403dd1
mov eax, 0x4bd414
ret

Function at 0x403dec
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d8c], 1
jne 0x403e7f
or dword [0x4c2d8c], 1
mov dword [0x4bcd98], 0x74617051
mov dword [0x4bcd9c], 0x2f66797c
mov dword [0x4bcda0], 0x7c674135
mov dword [0x4bcda4], 0x61357170
mov dword [0x4bcda8], 0x6d70357a
mov dword [0x4bcdac], 0x61607670
mov dword [0x4bcdb0], 0x70783570
mov dword [0x4bcdb4], 0x6c677a78
mov dword [0x4bcdb8], 0x35617435
mov dword [0x4bcdbc], 0x67717174
mov dword [0x4bcdc0], 0x35666670
mov dword [0x4bcdc4], 0x1f186530
mov byte [0x4bcdc8], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bcd98]
xor cl, 0x15
mov byte [eax + 0x4bd444], cl
inc eax
cmp eax, 0x31
jb 0x403e81
mov eax, 0x4bd444
ret

Function at 0x403e9c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d88], 1
jne 0x403ed3
or dword [0x4c2d88], 1
mov dword [0x4bcdcc], 0x72747953
mov dword [0x4bcdd0], 0x25352f66
mov dword [0x4bcdd4], 0x186d306d
mov word [0x4bcdd8], 0x151f
xor eax, eax
mov cl, byte [eax + 0x4bcdcc]
xor cl, 0x15
mov byte [eax + 0x4bd478], cl
inc eax
cmp eax, 0xe
jb 0x403ed5
mov eax, 0x4bd478
ret

Function at 0x403ef0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d84], 1
jne 0x403f27
or dword [0x4c2d84], 1
mov dword [0x4bcddc], 0x74677445
mov dword [0x4bcde0], 0x70617078
mov dword [0x4bcde4], 0x182f6667
mov word [0x4bcde8], 0x151f
xor eax, eax
mov cl, byte [eax + 0x4bcddc]
xor cl, 0x15
mov byte [eax + 0x4bd488], cl
inc eax
cmp eax, 0xe
jb 0x403f29
mov eax, 0x4bd488
ret

Function at 0x403f44
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d80], 1
jne 0x403f8d
or dword [0x4c2d80], 1
mov dword [0x4bcdec], 0x6774451c
mov dword [0x4bcdf0], 0x61707874
mov dword [0x4bcdf4], 0x304e6770
mov dword [0x4bcdf8], 0x352f4871
mov dword [0x4bcdfc], 0x1f186530
mov byte [0x4bce00], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bcdec]
xor cl, 0x15
mov byte [eax + 0x4bd498], cl
inc eax
cmp eax, 0x15
jb 0x403f8f
mov eax, 0x4bd498
ret

Function at 0x403faa
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d7c], 1
jne 0x403fe2
or dword [0x4c2d7c], 1
mov dword [0x4bce04], 0x355d5046
mov dword [0x4bce08], 0x79747b54
mov dword [0x4bce0c], 0x667c666c
mov dword [0x4bce10], 0x151f182f
xor eax, eax
mov cl, byte [eax + 0x4bce04]
xor cl, 0x15
mov byte [eax + 0x4bd4b0], cl
inc eax
cmp eax, 0x10
jb 0x403fe4
mov eax, 0x4bd4b0
ret
Function at 0x403fff
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d78], 1
jne 0x404047
or dword [0x4c2d78], 1
mov dword [0x4bce14], 0x7f775a1c
mov dword [0x4bce18], 0x35617670
mov dword [0x4bce1c], 0x70656c61
mov dword [0x4bce20], 0x6630352f
mov word [0x4bce24], 0x1f18
mov byte [0x4bce26], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bce14]
xor cl, 0x15
mov byte [eax + 0x4bd4c0], cl
inc eax
cmp eax, 0x13
jb 0x404049
mov eax, 0x4bd4c0
ret

Function at 0x404064
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d74], 1
jne 0x4040cd
or dword [0x4c2d74], 1
mov dword [0x4bce28], 0x7c74531c
mov dword [0x4bce2c], 0x35717079
mov dword [0x4bce30], 0x73357a61
mov dword [0x4bce34], 0x7a79797a
mov dword [0x4bce38], 0x7a653562
mov dword [0x4bce3c], 0x70617b7c
mov dword [0x4bce40], 0x7d763567
mov dword [0x4bce44], 0x187b7c74
mov word [0x4bce48], 0x151f
xor eax, eax
mov cl, byte [eax + 0x4bce28]
xor cl, 0x15
mov byte [eax + 0x4bd4d4], cl
inc eax
cmp eax, 0x22
jb 0x4040cf
mov eax, 0x4bd4d4
ret

Function at 0x4040ea
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d70], 1
jne 0x40410d
or dword [0x4c2d70], 1
mov dword [0x4bce4c], 0x71616655
mov word [0x4bce50], 0x1555
xor eax, eax
mov cl, byte [eax + 0x4bce4c]
xor cl, 0x15
mov byte [eax + 0x4bd4f8], cl
inc eax
cmp eax, 6
jb 0x40410f
mov eax, 0x4bd4f8
ret

Function at 0x40412a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d6c], 1
jne 0x404161
or dword [0x4c2d6c], 1
mov dword [0x4bce54], 0x617b6067
mov dword [0x4bce58], 0x4a70787c
mov dword [0x4bce5c], 0x7a676770
mov word [0x4bce60], 0x1567
xor eax, eax
mov cl, byte [eax + 0x4bce54]
xor cl, 0x15
mov byte [eax + 0x4bd500], cl
inc eax
cmp eax, 0xe
jb 0x404163
mov eax, 0x4bd500
ret

Function at 0x40417e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d68], 1
jne 0x4041ac
or dword [0x4c2d68], 1
mov dword [0x4bce64], 0x727b7467
mov dword [0x4bce68], 0x67704a70
mov dword [0x4bce6c], 0x15677a67
xor eax, eax
mov cl, byte [eax + 0x4bce64]
xor cl, 0x15
mov byte [eax + 0x4bd510], cl
inc eax
cmp eax, 0xc
jb 0x4041ae
mov eax, 0x4bd510
ret

Function at 0x4041c9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d64], 1
jne 0x404207
or dword [0x4c2d64], 1
mov dword [0x4bce70], 0x6770637a
mov dword [0x4bce74], 0x627a7973
mov dword [0x4bce78], 0x6767704a
mov word [0x4bce7c], 0x677a
mov byte [0x4bce7e], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bce70]
xor cl, 0x15
mov byte [eax + 0x4bd51c], cl
inc eax
cmp eax, 0xf
jb 0x404209
mov eax, 0x4bd51c
ret

Function at 0x404224
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d60], 1
jne 0x40425c
or dword [0x4c2d60], 1
mov dword [0x4bce80], 0x70717b60
mov dword [0x4bce84], 0x7a797367
mov dword [0x4bce88], 0x67704a62
mov dword [0x4bce8c], 0x15677a67
xor eax, eax
mov cl, byte [eax + 0x4bce80]
xor cl, 0x15
mov byte [eax + 0x4bd52c], cl
inc eax
cmp eax, 0x10
jb 0x40425e
mov eax, 0x4bd52c
ret
Function at 0x404279
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d5c], 1
jne 0x4042a7
or dword [0x4c2d5c], 1
mov dword [0x4bce90], 0x7c727a79
mov dword [0x4bce94], 0x67704a76
mov dword [0x4bce98], 0x15677a67
xor eax, eax
mov cl, byte [eax + 0x4bce90]
xor cl, 0x15
mov byte [eax + 0x4bd53c], cl
inc eax
cmp eax, 0xc
jb 0x4042a9
mov eax, 0x4bd53c
ret

Function at 0x4042c4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d58], 1
jne 0x4042f9
or dword [0x4c2d58], 1
mov dword [0x4bce9c], 0x74787a71
mov dword [0x4bcea0], 0x704a7b7c
mov dword [0x4bcea4], 0x677a6767
mov byte [0x4bcea8], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bce9c]
xor cl, 0x15
mov byte [eax + 0x4bd548], cl
inc eax
cmp eax, 0xd
jb 0x4042fb
mov eax, 0x4bd548
ret

Function at 0x404316
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d54], 1
jne 0x404355
or dword [0x4c2d54], 1
mov dword [0x4bceac], 0x74637b7c
mov dword [0x4bceb0], 0x4a717c79
mov dword [0x4bceb4], 0x60726774
mov dword [0x4bceb8], 0x617b7078
mov byte [0x4bcebc], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bceac]
xor cl, 0x15
mov byte [eax + 0x4bd558], cl
inc eax
cmp eax, 0x11
jb 0x404357
mov eax, 0x4bd558
ret

Function at 0x404372
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d50], 1
jne 0x4043a7
or dword [0x4c2d50], 1
mov dword [0x4bcec0], 0x727b7079
mov dword [0x4bcec4], 0x704a7d61
mov dword [0x4bcec8], 0x677a6767
mov byte [0x4bcecc], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bcec0]
xor cl, 0x15
mov byte [eax + 0x4bd56c], cl
inc eax
cmp eax, 0xd
jb 0x4043a9
mov eax, 0x4bd56c
ret

Function at 0x4043c4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d4c], 1
jne 0x4043f9
or dword [0x4c2d4c], 1
mov dword [0x4bced0], 0x4a61607a
mov dword [0x4bced4], 0x674a737a
mov dword [0x4bced8], 0x70727b74
mov byte [0x4bcedc], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bced0]
xor cl, 0x15
mov byte [eax + 0x4bd57c], cl
inc eax
cmp eax, 0xd
jb 0x4043fb
mov eax, 0x4bd57c
ret

Function at 0x404416
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d48], 1
jne 0x404443
or dword [0x4c2d48], 1
mov dword [0x4bcee0], 0x70766d70
mov dword [0x4bcee4], 0x7a7c6165
mov word [0x4bcee8], 0x157b
xor eax, eax
mov cl, byte [eax + 0x4bcee0]
xor cl, 0x15
mov byte [eax + 0x4bd58c], cl
inc eax
cmp eax, 0xa
jb 0x404445
mov eax, 0x4bd58c
ret

Function at 0x404460
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d44], 1
jne 0x4044bf
or dword [0x4c2d44], 1
mov dword [0x4bceec], 0x7161661c
mov dword [0x4bcef0], 0x6d702f2f
mov dword [0x4bcef4], 0x61657076
mov dword [0x4bcef8], 0x2f7b7a7c
mov dword [0x4bcefc], 0x747d622f
mov dword [0x4bcf00], 0x2f3c3d61
mov dword [0x4bcf04], 0x18663035
mov word [0x4bcf08], 0x151f
xor eax, eax
mov cl, byte [eax + 0x4bceec]
xor cl, 0x15
mov byte [eax + 0x4bd598], cl
inc eax
cmp eax, 0x1e
jb 0x4044c1
mov eax, 0x4bd598
ret
Function at 0x4044dc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d40], 1
jne 0x404550
or dword [0x4c2d40], 1
mov dword [0x4bcf0c], 0x7c74531c
mov dword [0x4bcf10], 0x35717079
mov dword [0x4bcf14], 0x72357a61
mov dword [0x4bcf18], 0x66356170
mov dword [0x4bcf1c], 0x2f2f7161
mov dword [0x4bcf20], 0x70766d70
mov dword [0x4bcf24], 0x7a7c6165
mov dword [0x4bcf28], 0x622f2f7b
mov dword [0x4bcf2c], 0x3d61747d
mov dword [0x4bcf30], 0x151f183c
xor eax, eax
mov cl, byte [eax + 0x4bcf0c]
xor cl, 0x15
mov byte [eax + 0x4bd5b8], cl
inc eax
cmp eax, 0x28
jb 0x404552
mov eax, 0x4bd5b8
ret

Function at 0x40456d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d3c], 1
jne 0x4045a1
or dword [0x4c2d3c], 1
mov dword [0x4bcf34], 0x787a764a
mov dword [0x4bcf38], 0x6767704a
mov word [0x4bcf3c], 0x677a
mov byte [0x4bcf3e], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bcf34]
xor cl, 0x15
mov byte [eax + 0x4bd5e0], cl
inc eax
cmp eax, 0xb
jb 0x4045a3
mov eax, 0x4bd5e0
ret

Function at 0x4045be
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d38], 1
jne 0x404627
or dword [0x4c2d38], 1
mov dword [0x4bcf40], 0x7a764a1c
mov dword [0x4bcf44], 0x67704a78
mov dword [0x4bcf48], 0x2f677a67
mov dword [0x4bcf4c], 0x6767502f
mov dword [0x4bcf50], 0x7058677a
mov dword [0x4bcf54], 0x72746666
mov dword [0x4bcf58], 0x2f3c3d70
mov dword [0x4bcf5c], 0x18663035
mov word [0x4bcf60], 0x151f
xor eax, eax
mov cl, byte [eax + 0x4bcf40]
xor cl, 0x15
mov byte [eax + 0x4bd5ec], cl
inc eax
cmp eax, 0x22
jb 0x404629
mov eax, 0x4bd5ec
ret

Function at 0x404644
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d34], 1
jne 0x4046c2
or dword [0x4c2d34], 1
mov dword [0x4bcf64], 0x7c74531c
mov dword [0x4bcf68], 0x35717079
mov dword [0x4bcf6c], 0x72357a61
mov dword [0x4bcf70], 0x4a356170
mov dword [0x4bcf74], 0x4a787a76
mov dword [0x4bcf78], 0x7a676770
mov dword [0x4bcf7c], 0x502f2f67
mov dword [0x4bcf80], 0x677a6767
mov dword [0x4bcf84], 0x66667058
mov dword [0x4bcf88], 0x3d707274
mov dword [0x4bcf8c], 0x151f183c
xor eax, eax
mov cl, byte [eax + 0x4bcf64]
xor cl, 0x15
mov byte [eax + 0x4bd610], cl
inc eax
cmp eax, 0x2c
jb 0x4046c4
mov eax, 0x4bd610
ret

Function at 0x4046df
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d30], 1
jne 0x40475a
or dword [0x4c2d30], 1
mov dword [0x4bcf90], 0x76746146
mov dword [0x4bcf94], 0x6071357e
mov dword [0x4bcf98], 0x70356578
mov dword [0x4bcf9c], 0x677a6767
mov dword [0x4bcfa0], 0x7a56352f
mov dword [0x4bcfa4], 0x6d70617b
mov dword [0x4bcfa8], 0x76704761
mov dword [0x4bcfac], 0x3571677a
mov dword [0x4bcfb0], 0x35667462
mov dword [0x4bcfb4], 0x7979607b
mov byte [0x4bcfb8], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bcf90]
xor cl, 0x15
mov byte [eax + 0x4bd63c], cl
inc eax
cmp eax, 0x29
jb 0x40475c
mov eax, 0x4bd63c
ret
Function at 0x404777
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d2c], 1
jne 0x4047f1
or dword [0x4c2d2c], 1
mov dword [0x4bcfbc], 0x76746146
mov dword [0x4bcfc0], 0x6071357e
mov dword [0x4bcfc4], 0x70356578
mov dword [0x4bcfc8], 0x677a6767
mov dword [0x4bcfcc], 0x6c46352f
mov dword [0x4bcfd0], 0x7c7b5c78
mov dword [0x4bcfd4], 0x79747c61
mov dword [0x4bcfd8], 0x35706f7c
mov dword [0x4bcfdc], 0x797c7473
mov word [0x4bcfe0], 0x7170
mov byte [0x4bcfe2], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bcfbc]
xor cl, 0x15
mov byte [eax + 0x4bd668], cl
inc eax
cmp eax, 0x27
jb 0x4047f3
mov eax, 0x4bd668
ret

Function at 0x40480e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d28], 1
jne 0x404874
or dword [0x4c2d28], 1
mov dword [0x4bcfe4], 0x7c7e6629
mov dword [0x4bcfe8], 0x71706565
mov dword [0x4bcfec], 0x74677335
mov dword [0x4bcff0], 0x35397078
mov dword [0x4bcff4], 0x62355645
mov dword [0x4bcff8], 0x7b356674
mov dword [0x4bcffc], 0x2b797960
mov word [0x4bd000], 0x1f18
mov byte [0x4bd002], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bcfe4]
xor cl, 0x15
mov byte [eax + 0x4bd690], cl
inc eax
cmp eax, 0x1f
jb 0x404876
mov eax, 0x4bd690
ret

Function at 0x404891
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d24], 1
jne 0x404924
or dword [0x4c2d24], 1
mov dword [0x4bd004], 0x7c7e6629
mov dword [0x4bd008], 0x71706565
mov dword [0x4bd00c], 0x74677335
mov dword [0x4bd010], 0x35397078
mov dword [0x4bd014], 0x62355645
mov dword [0x4bd018], 0x66356674
mov dword [0x4bd01c], 0x35707874
mov dword [0x4bd020], 0x67356674
mov dword [0x4bd024], 0x67606170
mov dword [0x4bd028], 0x7174357b
mov dword [0x4bd02c], 0x66706771
mov dword [0x4bd030], 0x1f182b66
mov byte [0x4bd034], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bd004]
xor cl, 0x15
mov byte [eax + 0x4bd6b0], cl
inc eax
cmp eax, 0x31
jb 0x404926
mov eax, 0x4bd6b0
ret
Function at 0x404941
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16c4
call fcn.00476a60
push ebx
push esi
push edi
call dword [0x492094]
test byte [0x4c2d20], 1
mov dword [ebp - 4], eax
jne 0x404988
or dword [0x4c2d20], 1
mov dword [0x4bd038], 0x717a7829
mov dword [0x4bd03c], 0x2a707960
mov dword [0x4bd040], 0x152b2a2a
xor edi, edi
xor eax, eax
mov cl, byte [eax + 0x4bd038]
xor cl, 0x15
mov byte [eax + 0x4bd6e4], cl
inc eax
cmp eax, 0xc
jb 0x40498c
test byte [0x4c2d1c], 1
mov dword [ebp - 8], 0x4bd6e4
jne 0x4049d6
or dword [0x4c2d1c], 1
mov dword [0x4bd044], 0x786c6629
mov dword [0x4bd048], 0x2a797a77
mov dword [0x4bd04c], 0x152b2a2a
xor eax, eax
mov cl, byte [eax + 0x4bd044]
xor cl, 0x15
mov byte [eax + 0x4bd6f0], cl
inc eax
cmp eax, 0xc
jb 0x4049d8
mov esi, 0x688
push esi
lea eax, [ebp - 0x6c0]
push edi
push eax
mov dword [ebp - 0x1c], 0x4bd6f0
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
call fcn.00466f20
mov eax, dword [ebp + 8]
cdq
add esp, 0xc
mov dword [ebp - 0x6c0], esi
mov esi, eax
lea eax, [ebp - 0x6c0]
push eax
mov ebx, edx
push ebx
push esi
push dword [ebp - 4]
call dword [0x4923b0]
test eax, eax
je 0x404a3d
lea eax, [ebp - 0x69c]
mov dword [ebp - 8], eax
push 0xffa
lea eax, [ebp - 0x16c0]
push edi
push eax
call fcn.00466f20
add esp, 0xc
lea eax, [ebp - 0x16c0]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x16c0], 0x58
mov dword [ebp - 0x1670], 0x7d0
call dword [0x4923bc]
lea ecx, [ebp - 0x166c]
test eax, eax
jne 0x404a89
mov ecx, dword [ebp - 0x1c]
test byte [0x4c2d18], 1
jne 0x404ac0
or dword [0x4c2d18], 1
mov dword [0x4bd050], 0x30356530
mov dword [0x4bd054], 0x66303466
mov dword [0x4bd058], 0x306d253e
mov word [0x4bd05c], 0x156d
xor eax, eax
mov dl, byte [eax + 0x4bd050]
xor dl, 0x15
mov byte [eax + 0x4bd6fc], dl
inc eax
cmp eax, 0xe
jb 0x404ac2
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push ecx
push dword [ebp - 8]
push dword [ebp + 8]
push 0x4bd6fc
push dword [ebp + 0xc]
call fcn.0046414d
add esp, 0x1c
push 6
pop ecx
mov dword [ebp - 0xc], edi
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x18
call dword [0x4923a4]
test eax, eax
je 0x404b39
push dword [ebp - 0xc]
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
call fcn.00404b86
push eax
push dword [ebp + 0xc]
call fcn.0046414d
add esp, 0x14
test byte [0x4c2d10], 1
jne 0x404b59
or dword [0x4c2d10], 1
mov word [0x4bd070], 0x1f18
mov byte [0x4bd072], 0x15
xor eax, eax
mov cl, byte [eax + 0x4bd070]
xor cl, 0x15
mov byte [eax + 0x4bd71c], cl
inc eax
cmp eax, 3
jb 0x404b5b
push dword [ebp + 0xc]
push 0x4bd71c
call fcn.00463dc1
pop ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 8
Function at 0x404b86
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d14], 1
jne 0x404bbe
or dword [0x4c2d14], 1
mov dword [0x4bd060], 0x66303d35
mov dword [0x4bd064], 0x3571302f
mov dword [0x4bd068], 0x6d25353e
mov dword [0x4bd06c], 0x153c6d30
xor eax, eax
mov cl, byte [eax + 0x4bd060]
xor cl, 0x15
mov byte [eax + 0x4bd70c], cl
inc eax
cmp eax, 0x10
jb 0x404bc0
mov eax, 0x4bd70c
ret

Function at 0x405dfd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d04], 1
jne 0x405e52
or dword [0x4c2d04], 1
mov dword [0x4bd740], 0x5244575e
mov dword [0x4bd744], 0x53445741
mov dword [0x4bd748], 0x4655574a
mov dword [0x4bd74c], 0x45524a5f
mov dword [0x4bd750], 0x404a4252
mov dword [0x4bd754], 0x494e5954
mov word [0x4bd758], 0x1649
xor eax, eax
mov cl, byte [eax + 0x4bd740]
xor cl, 0x16
mov byte [eax + 0x4bd940], cl
inc eax
cmp eax, 0x1a
jb 0x405e54
mov eax, 0x4bd940
ret

Function at 0x405f63
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2d00], 1
jne 0x405f8d
or dword [0x4c2d00], 1
mov dword [0x4bd75c], 0x77415b40
mov word [0x4bd760], 0x7364
mov byte [0x4bd762], 0x16
xor eax, eax
mov cl, byte [eax + 0x4bd75c]
xor cl, 0x16
mov byte [eax + 0x4bd95c], cl
inc eax
cmp eax, 7
jb 0x405f8f
mov eax, 0x4bd95c
ret

Function at 0x405faa
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2cfc], 1
jne 0x405fd7
or dword [0x4c2cfc], 1
mov dword [0x4bd764], 0x62647f40
mov dword [0x4bd768], 0x467a7763
mov word [0x4bd76c], 0x1655
xor eax, eax
mov cl, byte [eax + 0x4bd764]
xor cl, 0x16
mov byte [eax + 0x4bd964], cl
inc eax
cmp eax, 0xa
jb 0x405fd9
mov eax, 0x4bd964
ret

Function at 0x405ff5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2cf8], 1
jne 0x406029
or dword [0x4c2cf8], 1
mov dword [0x4bd770], 0x62647f40
mov dword [0x4bd774], 0x547a7763
mov word [0x4bd778], 0x6e79
mov byte [0x4bd77a], 0x16
xor eax, eax
mov cl, byte [eax + 0x4bd770]
xor cl, 0x16
mov byte [eax + 0x4bd970], cl
inc eax
cmp eax, 0xb
jb 0x40602b
mov eax, 0x4bd970
ret

Function at 0x406046
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2cf4], 1
jne 0x40606a
or dword [0x4c2cf4], 1
mov dword [0x4bd77c], 0x73787351
mov dword [0x4bd780], 0x16757f64
xor eax, eax
mov cl, byte [eax + 0x4bd77c]
xor cl, 0x16
mov byte [eax + 0x4bd97c], cl
inc eax
cmp eax, 8
jb 0x40606c
mov eax, 0x4bd97c
ret
Function at 0x406087
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x48b28f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa8
and dword [esp], 0
test byte [0x4c2cf0], 1
push esi
jne 0x4060da
or dword [0x4c2cf0], 1
mov dword [0x4bd784], 0x7a726278
mov dword [0x4bd788], 0x7a72387a
mov word [0x4bd78c], 0x167a
xor eax, eax
mov cl, byte [eax + 0x4bd784]
xor cl, 0x16
mov byte [eax + 0x4bd984], cl
inc eax
cmp eax, 0xa
jb 0x4060dc
push 0x4bd984
call dword [0x4920cc]
mov esi, eax
test esi, esi
jne 0x40614e
call dword [0x4920a8]
push eax
lea eax, [esp + 0x40]
push eax
call fcn.0042a8dc
pop ecx
pop ecx
and dword [esp + 0xb4], esi
push eax
call fcn.00406295
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00406ae6
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 1
call fcn.00405bce
push 0x4aec28
mov eax, esi
push eax
call fcn.0046d875
call fcn.004062fb
push eax
push esi
call dword [0x4920c8]
test eax, eax
jne 0x4061ab
call dword [0x4920a8]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0042a8dc
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 2
call fcn.0040636d
push eax
lea eax, [esp + 0x44]
push eax
call fcn.00406ae6
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 3
call fcn.00405bce
push 0x4aec28
mov eax, esi
jmp 0x406148
lea ecx, [esp + 4]
push ecx
push 0x18
lea ecx, [esp + 0x60]
push ecx
push 0
push dword [ebp + 8]
call eax
test eax, eax
jne 0x406233
cmp dword [esp + 4], 0x18
jne 0x406233
push dword [esp + 0x6c]
push eax
push 0x410
call dword [0x4920c4]
test eax, eax
jne 0x406282
call dword [0x4920a8]
push eax
lea eax, [esp + 0x74]
push eax
call fcn.0042a8dc
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 6
call fcn.004064ad
push eax
lea eax, [esp + 0x94]
push eax
call fcn.00406ae6
add esp, 0xc
lea esi, [esp + 0x14]
mov byte [esp + 0xb4], 7
call fcn.00405bce
push 0x4aec28
mov eax, esi
jmp 0x406148
call dword [0x4920a8]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0042a8dc
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 4
call fcn.00406420
push eax
lea eax, [esp + 0x44]
push eax
call fcn.00406ae6
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 5
call fcn.00405bce
push 0x4aec28
mov eax, esi
jmp 0x406148
mov ecx, dword [esp + 0xac]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x406295
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2cec], 1
jne 0x4062de
or dword [0x4c2cec], 1
mov dword [0x4bd790], 0x7277795a
mov dword [0x4bd794], 0x64747f5a
mov dword [0x4bd798], 0x366f6477
mov dword [0x4bd79c], 0x7a7f7770
mov dword [0x4bd7a0], 0x362c7273
mov byte [0x4bd7a4], 0x16
xor eax, eax
mov cl, byte [eax + 0x4bd790]
xor cl, 0x16
mov byte [eax + 0x4bd990], cl
inc eax
cmp eax, 0x15
jb 0x4062e0
mov eax, 0x4bd990
ret