joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4116b3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3b38], 1
jne 0x411714
or dword [0x4c3b38], 1
mov edx, 0x8995
mov eax, edx
mov word [0x4bf480], ax
add eax, 0xffffffed
mov ecx, eax
mov word [0x4bf482], cx
mov word [0x4bf484], cx
push edi
lea ecx, [edx + 0xa]
mov edi, ecx
mov word [0x4bf488], ax
lea eax, [edx + 0x5b]
mov word [0x4bf486], di
mov dword [0x4bf48a], 0x899f89b3
mov dword [0x4bf48e], 0x89958994
mov word [0x4bf492], ax
pop edi
xor eax, eax
mov ecx, 0x89f0
xor cx, word [eax + 0x4bf480]
add eax, 2
mov word [eax + 0x4bf5c2], cx
cmp eax, 0x14
jb 0x411716
mov eax, 0x4bf5c4
ret

Function at 0x411737
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3b34], 1
mov edx, 0x89f0
jne 0x4117b4
or dword [0x4c3b34], 1
lea ecx, [edx - 0x5b]
mov eax, ecx
mov word [0x4bf494], ax
add eax, 0xffffffed
push esi
mov esi, eax
lea eax, [edx - 0x33]
mov word [0x4bf49e], ax
mov eax, ecx
mov word [0x4bf4a0], ax
add eax, 0xffffffee
mov word [0x4bf496], si
mov word [0x4bf498], si
mov esi, eax
mov word [0x4bf4a4], ax
lea eax, [edx - 0x5f]
mov word [0x4bf4a6], ax
mov eax, edx
mov word [0x4bf4a2], si
mov dword [0x4bf49a], 0x8982899f
mov dword [0x4bf4a8], 0x89958997
mov word [0x4bf4ac], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4bf494]
add eax, 2
mov word [eax + 0x4bf5d6], cx
cmp eax, 0x1a
jb 0x4117b6
mov eax, 0x4bf5d8
ret

Function at 0x4117d4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3b30], 1
mov ecx, 0x89f0
jne 0x411833
or dword [0x4c3b30], 1
lea eax, [ecx - 0x5b]
mov word [0x4bf4b0], ax
add eax, 0xffffffed
mov edx, eax
mov word [0x4bf4b2], dx
mov word [0x4bf4b4], dx
lea edx, [ecx - 0x51]
mov word [0x4bf4b6], dx
mov edx, eax
lea eax, [ecx - 0x54]
mov word [0x4bf4be], ax
mov eax, ecx
mov word [0x4bf4b8], dx
mov dword [0x4bf4ba], 0x898289a5
mov word [0x4bf4c0], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4bf4b0]
add eax, 2
mov word [eax + 0x4bf5f2], dx
cmp eax, 0x12
jb 0x411835
mov eax, 0x4bf5f4
ret

Function at 0x411f6a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3b2c], 1
jne 0x411f94
or dword [0x4c3b2c], 1
mov dword [0x4bf4c4], 0x9c859ecc
mov word [0x4bf4c8], 0xce9c
mov byte [0x4bf4ca], 0xf0
xor eax, eax
mov cl, byte [eax + 0x4bf4c4]
xor cl, 0xf0
mov byte [eax + 0x4bf608], cl
inc eax
cmp eax, 7
jb 0x411f96
mov eax, 0x4bf608
ret

Function at 0x411fb1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3b28], 1
jne 0x411fdb
or dword [0x4c3b28], 1
mov dword [0x4bf4cc], 0x9c859ecc
mov word [0x4bf4d0], 0xce9c
mov byte [0x4bf4d2], 0xf0
xor eax, eax
mov cl, byte [eax + 0x4bf4cc]
xor cl, 0xf0
mov byte [eax + 0x4bf610], cl
inc eax
cmp eax, 7
jb 0x411fdd
mov eax, 0x4bf610
ret

Function at 0x411ff8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3b20], 1
jne 0x41201c
or dword [0x4c3b20], 1
mov dword [0x4bf4d8], 0x9f93abd0
mov dword [0x4bf4dc], 0xf0cd9594
xor eax, eax
mov cl, byte [eax + 0x4bf4d8]
xor cl, 0xf0
mov byte [eax + 0x4bf61c], cl
inc eax
cmp eax, 8
jb 0x41201e
mov eax, 0x4bf61c
ret
Function at 0x412cf0
Capabilities:
Encode data using xor

Disassembly:
push esi
push edi
push 0x31
pop ecx
mov esi, 0x493b08
mov edi, 0x4c3e80
push 0x493bcc
rep movsd dword es:[edi], dword [esi]
call fcn.0044b090
pop ecx
pop edi
pop esi
cmp eax, 0xffffffff
jne 0x412d16
xor al, al
ret
push 0x493c38
call fcn.0044afe0
pop ecx
cmp eax, 0xffffffff
je 0x412d13
push 0x493d40
call fcn.00449a50
pop ecx
cmp eax, 0xffffffff
je 0x412d13
test byte [0x4c3b14], 1
jne 0x412d57
or dword [0x4c3b14], 1
mov dword [0x4bf63c], 0xebbbb2a9
mov byte [0x4bf640], 0xda
xor eax, eax
mov cl, byte [eax + 0x4bf63c]
xor cl, 0xda
mov byte [eax + 0x4bf708], cl
inc eax
cmp eax, 5
jb 0x412d59
push 0x4bf708
call fcn.0044b100
pop ecx
mov dword [0x4b9928], eax
test eax, eax
js 0x412d13
call fcn.00412de2
push eax
call fcn.00449ac0
pop ecx
mov dword [0x4b992c], eax
test eax, eax
js 0x412d13
test byte [0x4c3b0c], 1
jne 0x412db5
or dword [0x4c3b0c], 1
mov dword [0x4bf64c], 0xdaa9bfbb
xor eax, eax
mov cl, byte [eax + 0x4bf64c]
xor cl, 0xda
mov byte [eax + 0x4bf718], cl
inc eax
cmp eax, 4
jb 0x412db7
push 0x4bf718
call fcn.0044b050
test eax, eax
mov dword [0x4b9930], eax
pop ecx
setns al
ret

Function at 0x412de2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3b10], 1
jne 0x412e06
or dword [0x4c3b10], 1
mov dword [0x4bf644], 0xaea8b5bc
mov dword [0x4bf648], 0xdabbb4af
xor eax, eax
mov cl, byte [eax + 0x4bf644]
xor cl, 0xda
mov byte [eax + 0x4bf710], cl
inc eax
cmp eax, 8
jb 0x412e08
mov eax, 0x4bf710
ret

Function at 0x41307f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3b08], 1
jne 0x4130bd
or dword [0x4c3b08], 1
mov dword [0x4bf650], 0xb3faaab7
mov dword [0x4bf654], 0xfaaeb3b4
mov dword [0x4bf658], 0xb6b3bbbc
mov word [0x4bf65c], 0xbebf
mov byte [0x4bf65e], 0xda
xor eax, eax
mov cl, byte [eax + 0x4bf650]
xor cl, 0xda
mov byte [eax + 0x4bf71c], cl
inc eax
cmp eax, 0xf
jb 0x4130bf
mov eax, 0x4bf71c
ret

Function at 0x4130da
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3b04], 1
jne 0x413118
or dword [0x4c3b04], 1
mov dword [0x4bf660], 0xb3faaab7
mov dword [0x4bf664], 0xfaaeb3b4
mov dword [0x4bf668], 0xb6b3bbbc
mov word [0x4bf66c], 0xbebf
mov byte [0x4bf66e], 0xda
xor eax, eax
mov cl, byte [eax + 0x4bf660]
xor cl, 0xda
mov byte [eax + 0x4bf72c], cl
inc eax
cmp eax, 0xf
jb 0x41311a
mov eax, 0x4bf72c
ret

Function at 0x413135
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3b00], 1
jne 0x413173
or dword [0x4c3b00], 1
mov dword [0x4bf670], 0x85aebfa9
mov dword [0x4bf674], 0xfaaeb4b3
mov dword [0x4bf678], 0xb6b3bbbc
mov word [0x4bf67c], 0xbebf
mov byte [0x4bf67e], 0xda
xor eax, eax
mov cl, byte [eax + 0x4bf670]
xor cl, 0xda
mov byte [eax + 0x4bf73c], cl
inc eax
cmp eax, 0xf
jb 0x413175
mov eax, 0x4bf73c
ret
Function at 0x413190
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3afc], 1
jne 0x4131d9
or dword [0x4c3afc], 1
mov dword [0x4bf680], 0xb3a9b4af
mov dword [0x4bf684], 0xbebfb4bd
mov dword [0x4bf688], 0xbbbfa885
mov dword [0x4bf68c], 0xbbbcfabe
mov dword [0x4bf690], 0xbebfb6b3
mov byte [0x4bf694], 0xda
xor eax, eax
mov cl, byte [eax + 0x4bf680]
xor cl, 0xda
mov byte [eax + 0x4bf74c], cl
inc eax
cmp eax, 0x15
jb 0x4131db
mov eax, 0x4bf74c
ret

Function at 0x4131f6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3af8], 1
jne 0x413235
or dword [0x4c3af8], 1
mov dword [0x4bf698], 0xbdb4a8aa
mov dword [0x4bf69c], 0xb1bbb7fa
mov dword [0x4bf6a0], 0xbbbcfabf
mov dword [0x4bf6a4], 0xbebfb6b3
mov byte [0x4bf6a8], 0xda
xor eax, eax
mov cl, byte [eax + 0x4bf698]
xor cl, 0xda
mov byte [eax + 0x4bf764], cl
inc eax
cmp eax, 0x11
jb 0x413237
mov eax, 0x4bf764
ret

Function at 0x413252
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3af4], 1
jne 0x413294
or dword [0x4c3af4], 1
mov dword [0x4bf6ac], 0xaea8b5bc
mov dword [0x4bf6b0], 0x85bbb4af
mov dword [0x4bf6b4], 0xbebbbfa8
mov dword [0x4bf6b8], 0xb3bbbcfa
mov dword [0x4bf6bc], 0xdabebfb6
xor eax, eax
mov cl, byte [eax + 0x4bf6ac]
xor cl, 0xda
mov byte [eax + 0x4bf778], cl
inc eax
cmp eax, 0x14
jb 0x413296
mov eax, 0x4bf778
ret

Function at 0x4132b1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3af0], 1
jne 0x4132f9
or dword [0x4c3af0], 1
mov dword [0x4bf6c0], 0xaaa3a8b9
mov dword [0x4bf6c4], 0xb3fab5ae
mov dword [0x4bf6c8], 0xfaaeb3b4
mov dword [0x4bf6cc], 0xb6b3bbbc
mov word [0x4bf6d0], 0xbebf
mov byte [0x4bf6d2], 0xda
xor eax, eax
mov cl, byte [eax + 0x4bf6c0]
xor cl, 0xda
mov byte [eax + 0x4bf78c], cl
inc eax
cmp eax, 0x13
jb 0x4132fb
mov eax, 0x4bf78c
ret

Function at 0x41350d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3aec], 1
jne 0x413530
or dword [0x4c3aec], 1
mov dword [0x4bf6d4], 0xbea9a9b3
mov word [0x4bf6d8], 0xdab1
xor eax, eax
mov cl, byte [eax + 0x4bf6d4]
xor cl, 0xda
mov byte [eax + 0x4bf7a0], cl
inc eax
cmp eax, 6
jb 0x413532
mov eax, 0x4bf7a0
ret

Function at 0x41354d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3ae8], 1
jne 0x41357a
or dword [0x4c3ae8], 1
mov dword [0x4bf6dc], 0xb8a8afb2
mov dword [0x4bf6e0], 0xa8afbebb
mov word [0x4bf6e4], 0xdaa8
xor eax, eax
mov cl, byte [eax + 0x4bf6dc]
xor cl, 0xda
mov byte [eax + 0x4bf7a8], cl
inc eax
cmp eax, 0xa
jb 0x41357c
mov eax, 0x4bf7a8
ret

Function at 0x413655
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3ae4], 1
jne 0x413682
or dword [0x4c3ae4], 1
mov dword [0x4bf6e8], 0xb8a8afb2
mov dword [0x4bf6ec], 0xa8afbebb
mov word [0x4bf6f0], 0xdaa8
xor eax, eax
mov cl, byte [eax + 0x4bf6e8]
xor cl, 0xda
mov byte [eax + 0x4bf7b4], cl
inc eax
cmp eax, 0xa
jb 0x413684
mov eax, 0x4bf7b4
ret
Function at 0x413d62
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3ae0], 1
jne 0x413daa
or dword [0x4c3ae0], 1
mov dword [0x4bf7c0], 0x848d8697
mov dword [0x4bf7c4], 0x9dd49b80
mov dword [0x4bf7c8], 0xd4809d9a
mov dword [0x4bf7cc], 0x989d9592
mov word [0x4bf7d0], 0x9091
mov byte [0x4bf7d2], 0xf4
xor eax, eax
mov cl, byte [eax + 0x4bf7c0]
xor cl, 0xf4
mov byte [eax + 0x4bf8d4], cl
inc eax
cmp eax, 0x13
jb 0x413dac
mov eax, 0x4bf8d4
ret

Function at 0x413dc7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3adc], 1
jne 0x413e0f
or dword [0x4c3adc], 1
mov dword [0x4bf7d4], 0x848d8697
mov dword [0x4bf7d8], 0x9dd49b80
mov dword [0x4bf7dc], 0xd4809d9a
mov dword [0x4bf7e0], 0x989d9592
mov word [0x4bf7e4], 0x9091
mov byte [0x4bf7e6], 0xf4
xor eax, eax
mov cl, byte [eax + 0x4bf7d4]
xor cl, 0xf4
mov byte [eax + 0x4bf8e8], cl
inc eax
cmp eax, 0x13
jb 0x413e11
mov eax, 0x4bf8e8
ret

Function at 0x413e2c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3ad4], 1
jne 0x413e74
or dword [0x4c3ad4], 1
mov dword [0x4bf7f0], 0x848d8697
mov dword [0x4bf7f4], 0x9dd49b80
mov dword [0x4bf7f8], 0xd4809d9a
mov dword [0x4bf7fc], 0x989d9592
mov word [0x4bf800], 0x9091
mov byte [0x4bf802], 0xf4
xor eax, eax
mov cl, byte [eax + 0x4bf7f0]
xor cl, 0xf4
mov byte [eax + 0x4bf904], cl
inc eax
cmp eax, 0x13
jb 0x413e76
mov eax, 0x4bf904
ret

Function at 0x413e91
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3acc], 1
jne 0x413ed9
or dword [0x4c3acc], 1
mov dword [0x4bf808], 0x848d8697
mov dword [0x4bf80c], 0x9dd49b80
mov dword [0x4bf810], 0xd4809d9a
mov dword [0x4bf814], 0x989d9592
mov word [0x4bf818], 0x9091
mov byte [0x4bf81a], 0xf4
xor eax, eax
mov cl, byte [eax + 0x4bf808]
xor cl, 0xf4
mov byte [eax + 0x4bf91c], cl
inc eax
cmp eax, 0x13
jb 0x413edb
mov eax, 0x4bf91c
ret

Function at 0x413ef6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3ac8], 1
jne 0x413f2d
or dword [0x4c3ac8], 1
mov dword [0x4bf81c], 0x848d8697
mov dword [0x4bf820], 0x92d49b80
mov dword [0x4bf824], 0x91989d95
mov word [0x4bf828], 0xf490
xor eax, eax
mov cl, byte [eax + 0x4bf81c]
xor cl, 0xf4
mov byte [eax + 0x4bf930], cl
inc eax
cmp eax, 0xe
jb 0x413f2f
mov eax, 0x4bf930
ret

Function at 0x413f4a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3ac4], 1
jne 0x413f81
or dword [0x4c3ac4], 1
mov dword [0x4bf82c], 0x848d8697
mov dword [0x4bf830], 0x92d49b80
mov dword [0x4bf834], 0x91989d95
mov word [0x4bf838], 0xf490
xor eax, eax
mov cl, byte [eax + 0x4bf82c]
xor cl, 0xf4
mov byte [eax + 0x4bf940], cl
inc eax
cmp eax, 0xe
jb 0x413f83
mov eax, 0x4bf940
ret

Function at 0x413f9e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3ac0], 1
jne 0x413fcb
or dword [0x4c3ac0], 1
mov dword [0x4bf83c], 0x8486919c
mov dword [0x4bf840], 0x869190df
mov word [0x4bf844], 0xf484
xor eax, eax
mov cl, byte [eax + 0x4bf83c]
xor cl, 0xf4
mov byte [eax + 0x4bf950], cl
inc eax
cmp eax, 0xa
jb 0x413fcd
mov eax, 0x4bf950
ret
Function at 0x413fe8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3abc], 1
jne 0x41401f
or dword [0x4c3abc], 1
mov dword [0x4bf848], 0x848d8697
mov dword [0x4bf84c], 0x92d49b80
mov dword [0x4bf850], 0x91989d95
mov word [0x4bf854], 0xf490
xor eax, eax
mov cl, byte [eax + 0x4bf848]
xor cl, 0xf4
mov byte [eax + 0x4bf95c], cl
inc eax
cmp eax, 0xe
jb 0x414021
mov eax, 0x4bf95c
ret

Function at 0x41403c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3ab8], 1
jne 0x414073
or dword [0x4c3ab8], 1
mov dword [0x4bf858], 0x848d8697
mov dword [0x4bf85c], 0x92d49b80
mov dword [0x4bf860], 0x91989d95
mov word [0x4bf864], 0xf490
xor eax, eax
mov cl, byte [eax + 0x4bf858]
xor cl, 0xf4
mov byte [eax + 0x4bf96c], cl
inc eax
cmp eax, 0xe
jb 0x414075
mov eax, 0x4bf96c
ret

Function at 0x414141
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3ab4], 1
jne 0x414178
or dword [0x4c3ab4], 1
mov dword [0x4bf868], 0x848d8697
mov dword [0x4bf86c], 0x92d49b80
mov dword [0x4bf870], 0x91989d95
mov word [0x4bf874], 0xf490
xor eax, eax
mov cl, byte [eax + 0x4bf868]
xor cl, 0xf4
mov byte [eax + 0x4bf97c], cl
inc eax
cmp eax, 0xe
jb 0x41417a
mov eax, 0x4bf97c
ret

Function at 0x414322
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3ab0], 1
jne 0x414359
or dword [0x4c3ab0], 1
mov dword [0x4bf878], 0x848d8697
mov dword [0x4bf87c], 0x92d49b80
mov dword [0x4bf880], 0x91989d95
mov word [0x4bf884], 0xf490
xor eax, eax
mov cl, byte [eax + 0x4bf878]
xor cl, 0xf4
mov byte [eax + 0x4bf98c], cl
inc eax
cmp eax, 0xe
jb 0x41435b
mov eax, 0x4bf98c
ret

Function at 0x414376
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3aac], 1
jne 0x4143ad
or dword [0x4c3aac], 1
mov dword [0x4bf888], 0x848d8697
mov dword [0x4bf88c], 0x92d49b80
mov dword [0x4bf890], 0x91989d95
mov word [0x4bf894], 0xf490
xor eax, eax
mov cl, byte [eax + 0x4bf888]
xor cl, 0xf4
mov byte [eax + 0x4bf99c], cl
inc eax
cmp eax, 0xe
jb 0x4143af
mov eax, 0x4bf99c
ret
Function at 0x4143ca
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x48af33
call fcn.0048a6f8
sub esp, 0x10
push ebx
push esi
mov esi, 0x110
push esi
call fcn.00464e70
mov ebx, eax
pop ecx
test ebx, ebx
je 0x4143fb
push esi
push 0
push ebx
call fcn.004679d0
add esp, 0xc
mov esi, ebx
jmp 0x4143fd
xor esi, esi
mov dword [ebp - 0x10], esi
and dword [ebp - 4], 0
mov eax, dword [edi + 4]
mov dword [esi + 0x100], eax
mov eax, dword [edi + 8]
sub eax, 0x14
test byte [0x4c3aa4], 1
mov dword [esi + 0x104], eax
mov eax, dword [edi + 0xc]
mov dword [esi + 0x108], eax
mov eax, dword [ebp + 8]
mov dword [esi + 0x10c], eax
jne 0x41444c
or dword [0x4c3aa4], 1
mov dword [0x4bf8ac], 0x969b9896
mov byte [0x4bf8b0], 0xf4
xor eax, eax
mov cl, byte [eax + 0x4bf8ac]
xor cl, 0xf4
mov byte [eax + 0x4bf9ac], cl
inc eax
cmp eax, 5
jb 0x41444e
push 0
push 0x4bf9ac
push esi
push 0x414090
push dword [edi]
call fcn.00451cc7
add esp, 0x14
test eax, eax
je 0x4144b6
push 0
call fcn.004145a6
push eax
push 0xffffffffffffffff
push dword [edi]
call fcn.0045096f
mov dword [ebp + 8], eax
add esp, 0x10
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00464415
push 0x4afcc0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], vtable.std::runtime_error.0
call fcn.0046e335
push esi
call fcn.00464d33
pop ecx
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4

Function at 0x4144cd
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
test byte [0x4c3a9c], 1
jne 0x41450a
or dword [0x4c3a9c], 1
mov dword [0x4bf8c4], 0x848d8697
mov dword [0x4bf8c8], 0x92d49b80
mov dword [0x4bf8cc], 0x91989d95
mov word [0x4bf8d0], 0xf490
xor eax, eax
mov cl, byte [eax + 0x4bf8c4]
xor cl, 0xf4
mov byte [eax + 0x4bf9c4], cl
inc eax
cmp eax, 0xe
jb 0x41450c
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0x4bf9c4
call fcn.00464415
push 0x4afcc0
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x10], vtable.std::runtime_error.0
call fcn.0046e335
int3

Function at 0x41454a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3aa8], 1
jne 0x414589
or dword [0x4c3aa8], 1
mov dword [0x4bf898], 0xab958198
mov dword [0x4bf89c], 0x98959784
mov dword [0x4bf8a0], 0x9592d498
mov dword [0x4bf8a4], 0x9091989d
mov byte [0x4bf8a8], 0xf4
xor eax, eax
mov cl, byte [eax + 0x4bf898]
xor cl, 0xf4
mov byte [eax + 0x4bf9d4], cl
inc eax
cmp eax, 0x11
jb 0x41458b
mov eax, 0x4bf9d4
ret

Function at 0x4145a6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3aa0], 1
jne 0x4145de
or dword [0x4c3aa0], 1
mov dword [0x4bf8b4], 0xab958198
mov dword [0x4bf8b8], 0x90959b98
mov dword [0x4bf8bc], 0x9d9592d4
mov dword [0x4bf8c0], 0xf4909198
xor eax, eax
mov cl, byte [eax + 0x4bf8b4]
xor cl, 0xf4
mov byte [eax + 0x4bf9b4], cl
inc eax
cmp eax, 0x10
jb 0x4145e0
mov eax, 0x4bf9b4
ret
Function at 0x414d3c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3a84], 1
jne 0x414d85
or dword [0x4c3a84], 1
mov dword [0x4bfa78], 0x92849695
mov dword [0x4bfa7c], 0x92d7c3c1
mov dword [0x4bfa80], 0x93989499
mov dword [0x4bfa84], 0x9691d792
mov dword [0x4bfa88], 0x93929b9e
mov byte [0x4bfa8c], 0xf7
xor eax, eax
mov cl, byte [eax + 0x4bfa78]
xor cl, 0xf7
mov byte [eax + 0x4bfadc], cl
inc eax
cmp eax, 0x15
jb 0x414d87
mov eax, 0x4bfadc
ret

Function at 0x414ecd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3a80], 1
jne 0x414f16
or dword [0x4c3a80], 1
mov dword [0x4bfa90], 0x92849695
mov dword [0x4bfa94], 0x93d7c3c1
mov dword [0x4bfa98], 0x93989492
mov dword [0x4bfa9c], 0x9691d792
mov dword [0x4bfaa0], 0x93929b9e
mov byte [0x4bfaa4], 0xf7
xor eax, eax
mov cl, byte [eax + 0x4bfa90]
xor cl, 0xf7
mov byte [eax + 0x4bfaf4], cl
inc eax
cmp eax, 0x15
jb 0x414f18
mov eax, 0x4bfaf4
ret

Function at 0x417857
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c39e0], 1
jne 0x417901
or dword [0x4c39e0], 1
mov dword [0x4bfecc], 0x8f9e93b8
mov dword [0x4bfed0], 0x94898d84
mov dword [0x4bfed4], 0x8fdd9392
mov dword [0x4bfed8], 0x98888c98
mov dword [0x4bfedc], 0x9998898e
mov dword [0x4bfee0], 0x89889fdd
mov dword [0x4bfee4], 0x949589dd
mov dword [0x4bfee8], 0x9589dd8e
mov dword [0x4bfeec], 0x999c988f
mov dword [0x4bfef0], 0x8e9c95dd
mov dword [0x4bfef4], 0xdd9293dd
mov dword [0x4bfef8], 0x8d848f9e
mov dword [0x4bfefc], 0x94dd9289
mov dword [0x4bff00], 0x9c898e93
mov dword [0x4bff04], 0xfd989e93
xor eax, eax
mov cl, byte [eax + 0x4bfecc]
xor cl, 0xfd
mov byte [eax + 0x4bfff0], cl
inc eax
cmp eax, 0x3c
jb 0x417903
mov eax, 0x4bfff0
ret

Function at 0x41791e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c39dc], 1
jne 0x417974
or dword [0x4c39dc], 1
mov dword [0x4bff08], 0x91949cbb
mov dword [0x4bff0c], 0x89dd9998
mov dword [0x4bff10], 0x9398dd92
mov dword [0x4bff14], 0x8d848f9e
mov dword [0x4bff18], 0x928ddd89
mov dword [0x4bff1c], 0x9fdd898e
mov dword [0x4bff20], 0xfd849992
xor eax, eax
mov cl, byte [eax + 0x4bff08]
xor cl, 0xfd
mov byte [eax + 0x4c002c], cl
inc eax
cmp eax, 0x1c
jb 0x417976
mov eax, 0x4c002c
ret

Function at 0x417a18
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c39d8], 1
jne 0x417a81
or dword [0x4c39d8], 1
mov dword [0x4bff24], 0x91949cbb
mov dword [0x4bff28], 0x89dd9998
mov dword [0x4bff2c], 0x9899dd92
mov dword [0x4bff30], 0x8d848f9e
mov dword [0x4bff34], 0x988edd89
mov dword [0x4bff38], 0x8f988b8f
mov dword [0x4bff3c], 0x8e988fdd
mov dword [0x4bff40], 0x8e93928d
mov word [0x4bff44], 0xfd98
xor eax, eax
mov cl, byte [eax + 0x4bff24]
xor cl, 0xfd
mov byte [eax + 0x4c0048], cl
inc eax
cmp eax, 0x22
jb 0x417a83
mov eax, 0x4c0048
ret
Function at 0x417df5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c39d4], 1
jne 0x417e54
or dword [0x4c39d4], 1
mov dword [0x4bff48], 0xb9b1afa8
mov dword [0x4bff4c], 0x91938a92
mov dword [0x4bff50], 0xa9999c92
mov dword [0x4bff54], 0x9194bb92
mov dword [0x4bff58], 0x9c9bdd98
mov dword [0x4bff5c], 0x99989194
mov dword [0x4bff60], 0x8f95ddc7
mov word [0x4bff64], 0xfdc0
xor eax, eax
mov cl, byte [eax + 0x4bff48]
xor cl, 0xfd
mov byte [eax + 0x4c006c], cl
inc eax
cmp eax, 0x1e
jb 0x417e56
mov eax, 0x4c006c
ret

Function at 0x418a1e
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c39bc], 1
jne 0x418a6c
or dword [0x4c39bc], 1
mov dword [0x4c00e8], 0x2d150426
mov dword [0x4c00ec], 0x28151200
mov dword [0x4c00f0], 0x1514110f
mov dword [0x4c00f4], 0xe070f28
mov dword [0x4c00f8], 0x8000741
mov dword [0x4c00fc], 0x6105040d
mov cl, byte [eax + 0x4c00e8]
xor cl, 0x61
mov byte [eax + 0x4c0154], cl
inc eax
cmp eax, 0x18
jb 0x418a6c
mov eax, 0x4c0154
ret

Function at 0x418a9e
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c39b4], 1
jne 0x418af5
or dword [0x4c39b4], 1
mov dword [0x4c010c], 0x3e150406
mov dword [0x4c0110], 0x40c0815
mov dword [0x4c0114], 0xf08123e
mov dword [0x4c0118], 0xd3e0402
mov dword [0x4c011c], 0x3e151200
mov dword [0x4c0120], 0x14110f08
mov word [0x4c0124], 0x6115
mov cl, byte [eax + 0x4c010c]
xor cl, 0x61
mov byte [eax + 0x4c0178], cl
inc eax
cmp eax, 0x1a
jb 0x418af5
mov eax, 0x4c0178
ret

Function at 0x418b10
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c39b0], 1
jne 0x418b65
or dword [0x4c39b0], 1
mov dword [0x4c0128], 0x3e150406
mov dword [0x4c012c], 0x4020f00
mov dword [0x4c0130], 0x130e1512
mov dword [0x4c0134], 0x50e0c3e
mov dword [0x4c0138], 0x3e040d14
mov dword [0x4c013c], 0x9150011
mov byte [0x4c0140], 0x61
mov cl, byte [eax + 0x4c0128]
xor cl, 0x61
mov byte [eax + 0x4c0194], cl
inc eax
cmp eax, 0x19
jb 0x418b65
mov eax, 0x4c0194
ret

Function at 0x4193e6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c399c], 1
jne 0x419442
or dword [0x4c399c], 1
mov dword [0x4c0240], 0x63746c4b
mov dword [0x4c0244], 0x22666b6e
mov dword [0x4c0248], 0x6f776c67
mov dword [0x4c024c], 0x76637067
mov dword [0x4c0250], 0x226c6d6b
mov dword [0x4c0254], 0x666c636a
mov word [0x4c0258], 0x676e
mov byte [0x4c025a], 2
xor eax, eax
mov cl, byte [eax + 0x4c0240]
xor cl, 2
mov byte [eax + 0x4c03f0], cl
inc eax
cmp eax, 0x1b
jb 0x419444
mov eax, 0x4c03f0
ret

Function at 0x419544
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3998], 1
jne 0x4195a0
or dword [0x4c3998], 1
mov dword [0x4c025c], 0x63746c4b
mov dword [0x4c0260], 0x22666b6e
mov dword [0x4c0264], 0x6f776c67
mov dword [0x4c0268], 0x76637067
mov dword [0x4c026c], 0x226c6d6b
mov dword [0x4c0270], 0x666c636a
mov word [0x4c0274], 0x676e
mov byte [0x4c0276], 2
xor eax, eax
mov cl, byte [eax + 0x4c025c]
xor cl, 2
mov byte [eax + 0x4c040c], cl
inc eax
cmp eax, 0x1b
jb 0x4195a2
mov eax, 0x4c040c
ret