joyce8/EMBER2024-capa huggingface dataset:
Function at 0x407846
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8384], 1
jne 0x407acc
or dword [0x4c8384], 1
mov dword [0x4c2ca0], 0xd588c9cf
mov dword [0x4c2ca4], 0xd3c9c2d2
mov dword [0x4c2ca8], 0xc3d59cd2
mov dword [0x4c2cac], 0xd3c4d0d2
mov dword [0x4c2cb0], 0xc8818ec0
mov dword [0x4c2cb4], 0xac8f81c9
mov dword [0x4c2cb8], 0xcdc5c7d6
mov dword [0x4c2cbc], 0x88c3c1c7
mov dword [0x4c2cc0], 0xced2c7d6
mov dword [0x4c2cc4], 0xac81819b
mov dword [0x4c2cc8], 0xd3d7c3d4
mov dword [0x4c2ccc], 0x8ec3d4cf
mov dword [0x4c2cd0], 0xd4d2d581
mov dword [0x4c2cd4], 0x81d2c5cf
mov dword [0x4c2cd8], 0xc9caac8f
mov dword [0x4c2cdc], 0x86cac7c5
mov dword [0x4c2ce0], 0x9b86cacb
mov dword [0x4c2ce4], 0xd7c3d486
mov dword [0x4c2ce8], 0xc3d4cfd3
mov dword [0x4c2cec], 0xcacb818e
mov dword [0x4c2cf0], 0xcaac8f81
mov dword [0x4c2cf4], 0xcac7c5c9
mov dword [0x4c2cf8], 0xd48ad586
mov dword [0x4c2cfc], 0x9b86c38a
mov dword [0x4c2d00], 0xc5d6de86
mov dword [0x4c2d04], 0x8ecacac7
mov dword [0x4c2d08], 0xc5c8d3c0
mov dword [0x4c2d0c], 0xc8c9cfd2
mov dword [0x4c2d10], 0xd4868f8e
mov dword [0x4c2d14], 0xd4d3d2c3
mov dword [0x4c2d18], 0xc3d486c8
mov dword [0x4c2d1c], 0xd4cfd3d7
mov dword [0x4c2d20], 0x83818ec3
mov dword [0x4c2d24], 0x888f81eb
mov dword [0x4c2d28], 0x838ee083
mov dword [0x4c2d2c], 0xc3868fe7
mov dword [0x4c2d30], 0x868ac2c8
mov dword [0x4c2d34], 0xd3c4c3c2
mov dword [0x4c2d38], 0xd4d288c1
mov dword [0x4c2d3c], 0xc4c3c5c7
mov dword [0x4c2d40], 0x8fcdc5c7
mov dword [0x4c2d44], 0x86c0cfac
mov dword [0x4c2d48], 0x86d2c9c8
mov dword [0x4c2d4c], 0xced286d5
mov dword [0x4c2d50], 0xd486c8c3
mov dword [0x4c2d54], 0xd4d3d2c3
mov dword [0x4c2d58], 0xcfc886c8
mov dword [0x4c2d5c], 0xd4868aca
mov dword [0x4c2d60], 0xc2c8c386
mov dword [0x4c2d64], 0x86c0cfac
mov dword [0x4c2d68], 0x9bd886d4
mov dword [0x4c2d6c], 0xcacfc886
mov dword [0x4c2d70], 0xc3ced286
mov dword [0x4c2d74], 0x86d486c8
mov dword [0x4c2d78], 0xcacb869b
mov dword [0x4c2d7c], 0xd2d5d288
mov dword [0x4c2d80], 0xc1c8cfd4
mov dword [0x4c2d84], 0x868fd48e
mov dword [0x4c2d88], 0xacc2c8c3
mov dword [0x4c2d8c], 0xd3d2c3d4
mov dword [0x4c2d90], 0xd486c8d4
mov word [0x4c2d94], 0xc38a
mov byte [0x4c2d96], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c2ca0]
xor cl, 0xa6
mov byte [eax + 0x4c33d0], cl
inc eax
cmp eax, 0xf7
jb 0x407ace
mov eax, 0x4c33d0
ret
Function at 0x407aeb
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
test byte [0x4c8344], 1
jne 0x407b12
or dword [0x4c8344], 1
mov dword [0x4c2e8c], 0xcdc5c7d6
mov dword [0x4c2e90], 0xa6c3c1c7
xor eax, eax
mov cl, byte [eax + 0x4c2e8c]
xor cl, 0xa6
mov byte [eax + 0x4c35bc], cl
inc eax
cmp eax, 8
jb 0x407b14
push 0x4c35bc
push dword [ebp + 8]
call fcn.00453bc6
test byte [0x4c8340], 1
pop ecx
pop ecx
jne 0x407b5c
or dword [0x4c8340], 1
mov dword [0x4c2e94], 0xcac3d4d6
mov dword [0x4c2e98], 0xa6c2c7c9
xor eax, eax
mov cl, byte [eax + 0x4c2e94]
xor cl, 0xa6
mov byte [eax + 0x4c35c4], cl
inc eax
cmp eax, 8
jb 0x407b5e
push esi
push 0x4c35c4
push 0xffffffffffffffff
push dword [ebp + 8]
call fcn.00453c3a
add esp, 0xc
cmp dword [0x4bdc20], 0
mov esi, 0x4bdc20
je 0x407bbe
push edi
mov edi, esi
push 0
push dword [esi + 4]
push dword [ebp + 8]
call fcn.00453ae6
push dword [esi]
push 0xfffffffffffffffe
push dword [ebp + 8]
call fcn.00453e67
add edi, 8
add esp, 0x18
cmp dword [edi], 0
mov esi, edi
jne 0x407b97
pop edi
push 0xfffffffffffffffd
push dword [ebp + 8]
call fcn.0045333b
pop ecx
pop ecx
pop esi
pop ebp
ret
Function at 0x407e38
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x48db62
call fcn.0048cc58
sub esp, 0x64
test byte [0x4c832c], 1
jne 0x407e65
or dword [0x4c832c], 1
mov word [0x4c2ec4], 0xeb83
mov byte [0x4c2ec6], 0xa6
push ebx
push esi
xor ebx, ebx
push edi
xor eax, eax
mov cl, byte [eax + 0x4c2ec4]
xor cl, 0xa6
mov byte [eax + 0x4c35f4], cl
inc eax
cmp eax, 3
jb 0x407e6c
mov esi, 0x4c35f4
mov eax, esi
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x54], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x407e98
sub eax, edi
push eax
push esi
lea ecx, [ebp - 0x54]
call fcn.00404e34
push dword [ebp + 0x10]
lea eax, [ebp - 0x54]
push eax
push dword [ebp + 0xc]
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 4], ebx
call fcn.0040e969
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.00404c70
cmp dword [ebp - 0x5c], 0x10
mov eax, dword [ebp - 0x70]
jae 0x407edf
lea eax, [ebp - 0x70]
mov esi, dword [ebp + 8]
push eax
push esi
call fcn.00452739
pop ecx
pop ecx
cmp eax, ebx
je 0x407f30
cmp eax, 3
jne 0x407f1d
call fcn.00408037
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00466985
mov dword [ebp - 0x1c], vtable.std::runtime_error.0
push 0x4b2d30
lea eax, [ebp - 0x1c]
push eax
call fcn.00470895
cmp eax, 4
jne 0x407f29
call fcn.004080ea
jmp 0x407ef9
call fcn.0040819d
jmp 0x407ef9
push ebx
push ebx
push ebx
push 1
push ebx
push esi
call fcn.0045416f
mov edi, eax
add esp, 0x18
cmp edi, ebx
je 0x407fe7
push ebx
call fcn.00408221
push eax
push 0xffffffffffffffff
push esi
call fcn.00452ed0
add esp, 0x10
push eax
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0xf
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
call fcn.00404c4f
mov byte [ebp - 4], 3
cmp edi, 2
jne 0x407f9f
call fcn.00408268
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.0040e9da
pop ecx
pop ecx
mov byte [ebp - 4], 4
lea esi, [ebp - 0x1c]
call fcn.00405bc7
jmp 0x407f0f
cmp edi, 4
jne 0x407fbe
call fcn.004082c7
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.0040e9da
pop ecx
pop ecx
mov byte [ebp - 4], 5
jmp 0x407f92
cmp edi, 6
jne 0x407fdd
call fcn.0040832c
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.0040e9da
pop ecx
pop ecx
mov byte [ebp - 4], 6
jmp 0x407f92
call fcn.004083b0
jmp 0x407ef9
or edi, 0xffffffff
push edi
push esi
mov dword [ebp - 0x10], edi
call fcn.0045352b
pop ecx
pop ecx
test eax, eax
je 0x408008
push ebx
push edi
push esi
call fcn.004536ef
add esp, 0xc
mov dword [ebp - 0x10], eax
push esi
call fcn.00453325
sub edi, eax
push edi
push esi
call fcn.0045333b
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.00404c70
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
Function at 0x408037
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8328], 1
jne 0x4080cd
or dword [0x4c8328], 1
mov dword [0x4c2ec8], 0xcacfc7e0
mov dword [0x4c2ecc], 0xd286c2c3
mov dword [0x4c2ed0], 0xd0c386c9
mov dword [0x4c2ed4], 0xc7d3cac7
mov dword [0x4c2ed8], 0xc486c3d2
mov dword [0x4c2edc], 0xd5d2c9c9
mov dword [0x4c2ee0], 0xd6c7d4d2
mov dword [0x4c2ee4], 0xc7d4c086
mov dword [0x4c2ee8], 0xc8c3cbc1
mov dword [0x4c2eec], 0xd5868ad2
mov dword [0x4c2ef0], 0xc7d2c8df
mov dword [0x4c2ef4], 0xd4c386de
mov dword [0x4c2ef8], 0xa6d4c9d4
xor eax, eax
mov cl, byte [eax + 0x4c2ec8]
xor cl, 0xa6
mov byte [eax + 0x4c35f8], cl
inc eax
cmp eax, 0x34
jb 0x4080cf
mov eax, 0x4c35f8
ret

Function at 0x4080ea
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8324], 1
jne 0x408180
or dword [0x4c8324], 1
mov dword [0x4c2efc], 0xcacfc7e0
mov dword [0x4c2f00], 0xd286c2c3
mov dword [0x4c2f04], 0xd0c386c9
mov dword [0x4c2f08], 0xc7d3cac7
mov dword [0x4c2f0c], 0xc486c3d2
mov dword [0x4c2f10], 0xd5d2c9c9
mov dword [0x4c2f14], 0xd6c7d4d2
mov dword [0x4c2f18], 0xc7d4c086
mov dword [0x4c2f1c], 0xc8c3cbc1
mov dword [0x4c2f20], 0xcb868ad2
mov dword [0x4c2f24], 0xd4c9cbc3
mov dword [0x4c2f28], 0xd4c386df
mov dword [0x4c2f2c], 0xa6d4c9d4
xor eax, eax
mov cl, byte [eax + 0x4c2efc]
xor cl, 0xa6
mov byte [eax + 0x4c362c], cl
inc eax
cmp eax, 0x34
jb 0x408182
mov eax, 0x4c362c
ret

Function at 0x40819d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8320], 1
jne 0x408204
or dword [0x4c8320], 1
mov dword [0x4c2f30], 0xc8cdc8f3
mov dword [0x4c2f34], 0x86c8d1c9
mov dword [0x4c2f38], 0xc9d4d4c3
mov dword [0x4c2f3c], 0xc8cf86d4
mov dword [0x4c2f40], 0xc7d3ca86
mov dword [0x4c2f44], 0xc9caf9ea
mov dword [0x4c2f48], 0xd2d5c2c7
mov dword [0x4c2f4c], 0xc1c8cfd4
mov byte [0x4c2f50], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c2f30]
xor cl, 0xa6
mov byte [eax + 0x4c3660], cl
inc eax
cmp eax, 0x21
jb 0x408206
mov eax, 0x4c3660
ret

Function at 0x408221
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c831c], 1
jne 0x40824b
or dword [0x4c831c], 1
mov dword [0x4c2f54], 0xc8c9c89a
mov word [0x4c2f58], 0x98c3
mov byte [0x4c2f5a], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c2f54]
xor cl, 0xa6
mov byte [eax + 0x4c3684], cl
inc eax
cmp eax, 7
jb 0x40824d
mov eax, 0x4c3684
ret

Function at 0x408268
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8318], 1
jne 0x4082aa
or dword [0x4c8318], 1
mov dword [0x4c2f5c], 0x86c7d3ea
mov dword [0x4c2f60], 0xd2c8d3d4
mov dword [0x4c2f64], 0x86c3cbcf
mov dword [0x4c2f68], 0xc9d4d4c3
mov dword [0x4c2f6c], 0xa6869cd4
xor eax, eax
mov cl, byte [eax + 0x4c2f5c]
xor cl, 0xa6
mov byte [eax + 0x4c368c], cl
inc eax
cmp eax, 0x14
jb 0x4082ac
mov eax, 0x4c368c
ret
Function at 0x4082c7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8314], 1
jne 0x40830f
or dword [0x4c8314], 1
mov dword [0x4c2f70], 0x86c7d3ea
mov dword [0x4c2f74], 0xc9cbc3cb
mov dword [0x4c2f78], 0xc386dfd4
mov dword [0x4c2f7c], 0xd4c9d4d4
mov word [0x4c2f80], 0x869c
mov byte [0x4c2f82], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c2f70]
xor cl, 0xa6
mov byte [eax + 0x4c36a0], cl
inc eax
cmp eax, 0x13
jb 0x408311
mov eax, 0x4c36a0
ret

Function at 0x40832c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8310], 1
jne 0x408393
or dword [0x4c8310], 1
mov dword [0x4c2f84], 0x86c7d3ea
mov dword [0x4c2f88], 0xc9d4d4c3
mov dword [0x4c2f8c], 0xc8cf86d4
mov dword [0x4c2f90], 0xc3c2cfd5
mov dword [0x4c2f94], 0xd4d4c386
mov dword [0x4c2f98], 0xce86d4c9
mov dword [0x4c2f9c], 0xcac2c8c7
mov dword [0x4c2fa0], 0x869cd4c3
mov byte [0x4c2fa4], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c2f84]
xor cl, 0xa6
mov byte [eax + 0x4c36b4], cl
inc eax
cmp eax, 0x21
jb 0x408395
mov eax, 0x4c36b4
ret

Function at 0x4083b0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c830c], 1
jne 0x40840c
or dword [0x4c830c], 1
mov dword [0x4c2fa8], 0xc8cdc8f3
mov dword [0x4c2fac], 0x86c8d1c9
mov dword [0x4c2fb0], 0xc9d4d4c3
mov dword [0x4c2fb4], 0xc8cf86d4
mov dword [0x4c2fb8], 0xc7d3ca86
mov dword [0x4c2fbc], 0xc7c5d6f9
mov word [0x4c2fc0], 0xcaca
mov byte [0x4c2fc2], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c2fa8]
xor cl, 0xa6
mov byte [eax + 0x4c36d8], cl
inc eax
cmp eax, 0x1b
jb 0x40840e
mov eax, 0x4c36d8
ret

Function at 0x40864a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8308], 1
jne 0x408693
or dword [0x4c8308], 1
mov dword [0x4c2fc4], 0xc3d5c7e4
mov dword [0x4c2fc8], 0xc2869290
mov dword [0x4c2fcc], 0xc2c9c5c3
mov dword [0x4c2fd0], 0xc7c086c3
mov dword [0x4c2fd4], 0xc2c3cacf
mov byte [0x4c2fd8], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c2fc4]
xor cl, 0xa6
mov byte [eax + 0x4c36f4], cl
inc eax
cmp eax, 0x15
jb 0x408695
mov eax, 0x4c36f4
ret
Function at 0x4086b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x48f2cc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50
push ebx
push esi
push edi
push dword [ebp + 0xc]
lea eax, [esp + 0x24]
xor ebx, ebx
push eax
mov dword [esp + 0x18], ebx
call fcn.0042fa8b
lea ecx, [esp + 0x44]
push ecx
mov ecx, eax
mov dword [esp + 0x70], ebx
call fcn.0042de7e
add esp, 0xc
push 1
xor edi, edi
lea esi, [esp + 0x24]
call fcn.00404dae
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x64], 3
mov esi, dword [esp + 0x4c]
lea eax, [esp + 0x20]
call fcn.0040bd0b
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x20]
cmp dword [esp + 0x50], 0x10
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
jae 0x40873d
lea eax, [esp + 0x3c]
lea ecx, [esp + 0xc]
push ecx
push dword [esp + 0x24]
push esi
push eax
call fcn.0043206a
add esp, 0x10
test al, al
jne 0x408782
call fcn.004087f9
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x18]
call fcn.00466985
push 0x4b2d30
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], vtable.std::runtime_error.0
call fcn.00470895
mov esi, dword [esp + 0xc]
lea eax, [esp + 0x20]
call fcn.0040bd0b
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
xor esi, esi
sub ecx, eax
mov dword [esp + 0xc], ecx
je 0x4087c2
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov edi, dword [eax + 4]
sub edi, ecx
xor edx, edx
mov eax, esi
div edi
mov eax, dword [esp + 0x20]
mov cl, byte [edx + ecx]
xor byte [eax + esi], cl
inc esi
cmp esi, dword [esp + 0xc]
jb 0x4087a1
push dword [esp + 0xc]
mov esi, dword [ebp + 8]
push eax
call fcn.0040b034
lea esi, [esp + 0x20]
call fcn.0040bcf2
push ebx
push 1
lea ecx, [esp + 0x44]
call fcn.00404c70
mov ecx, dword [esp + 0x5c]
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x4087f9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8304], 1
jne 0x408842
or dword [0x4c8304], 1
mov dword [0x4c2fdc], 0xc3d5c7e4
mov dword [0x4c2fe0], 0xc2869290
mov dword [0x4c2fe4], 0xc2c9c5c3
mov dword [0x4c2fe8], 0xc7c086c3
mov dword [0x4c2fec], 0xc2c3cacf
mov byte [0x4c2ff0], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c2fdc]
xor cl, 0xa6
mov byte [eax + 0x4c370c], cl
inc eax
cmp eax, 0x15
jb 0x408844
mov eax, 0x4c370c
ret

Function at 0x408f05
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8300], 1
jne 0x408f5a
or dword [0x4c8300], 1
mov dword [0x4c2ff4], 0xcad3c9e5
mov dword [0x4c2ff8], 0xc9c886c2
mov dword [0x4c2ffc], 0xd6c986d2
mov dword [0x4c3000], 0xc586c8c3
mov dword [0x4c3004], 0xced5c7d4
mov dword [0x4c3008], 0xcbd3c286
mov word [0x4c300c], 0xa6d6
xor eax, eax
mov cl, byte [eax + 0x4c2ff4]
xor cl, 0xa6
mov byte [eax + 0x4c3724], cl
inc eax
cmp eax, 0x1a
jb 0x408f5c
mov eax, 0x4c3724
ret
Function at 0x408f77
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c82f8], 1
jne 0x408f9a
or dword [0x4c82f8], 1
mov dword [0x4c3014], 0xc1c9ca89
mov word [0x4c3018], 0xa689
xor eax, eax
mov cl, byte [eax + 0x4c3014]
xor cl, 0xa6
mov byte [eax + 0x4c3744], cl
inc eax
cmp eax, 6
jb 0x408f9c
mov eax, 0x4c3744
ret

Function at 0x408fb7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c82f4], 1
jne 0x409032
or dword [0x4c82f4], 1
mov dword [0x4c301c], 0xd6d2d2ce
mov dword [0x4c3020], 0xc789899c
mov dword [0x4c3024], 0xdfcac7c8
mov dword [0x4c3028], 0xd5c5cfd2
mov dword [0x4c302c], 0xd2c3c188
mov dword [0x4c3030], 0xc8d1c9c2
mov dword [0x4c3034], 0xd2d5c3d2
mov dword [0x4c3038], 0xcbc9c588
mov dword [0x4c303c], 0x8994d089
mov dword [0x4c3040], 0x89c1c9ca
mov byte [0x4c3044], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c301c]
xor cl, 0xa6
mov byte [eax + 0x4c374c], cl
inc eax
cmp eax, 0x29
jb 0x409034
mov eax, 0x4c374c
ret

Function at 0x40904f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c82f0], 1
jne 0x40907a
or dword [0x4c82f0], 1
mov dword [0x4c3048], 0xd5809bc5
mov dword [0x4c304c], 0x9bd2809b
mov byte [0x4c3050], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c3048]
xor cl, 0xa6
mov byte [eax + 0x4c3778], cl
inc eax
cmp eax, 9
jb 0x40907c
mov eax, 0x4c3778
ret

Function at 0x409097
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c82e0], 1
jne 0x40911f
or dword [0x4c82e0], 1
mov dword [0x4c3064], 0xd2c8c9e5
mov dword [0x4c3068], 0x8bd2c8c3
mov dword [0x4c306c], 0xc3d6dff2
mov dword [0x4c3070], 0xd6c7869c
mov dword [0x4c3074], 0xc5cfcad6
mov dword [0x4c3078], 0xc9cfd2c7
mov dword [0x4c307c], 0x8bde89c8
mov dword [0x4c3080], 0x8bd1d1d1
mov dword [0x4c3084], 0xcbd4c9c0
mov dword [0x4c3088], 0xcad4d38b
mov dword [0x4c308c], 0xc9c5c8c3
mov dword [0x4c3090], 0xa6c2c3c2
xor eax, eax
mov cl, byte [eax + 0x4c3064]
xor cl, 0xa6
mov byte [eax + 0x4c3794], cl
inc eax
cmp eax, 0x30
jb 0x409121
mov eax, 0x4c3794
ret

Function at 0x40913c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c82dc], 1
jne 0x409167
or dword [0x4c82dc], 1
mov dword [0x4c3094], 0xf2f5e9f6
mov dword [0x4c3098], 0x86c9d286
mov byte [0x4c309c], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c3094]
xor cl, 0xa6
mov byte [eax + 0x4c37c4], cl
inc eax
cmp eax, 9
jb 0x409169
mov eax, 0x4c37c4
ret

Function at 0x409184
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c82d8], 1
jne 0x4091cd
or dword [0x4c82d8], 1
mov dword [0x4c30a0], 0xcfc7c086
mov dword [0x4c30a4], 0x86c2c3ca
mov dword [0x4c30a8], 0xced2cfd1
mov dword [0x4c30ac], 0xc7d2d586
mov dword [0x4c30b0], 0x86d5d3d2
mov byte [0x4c30b4], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c30a0]
xor cl, 0xa6
mov byte [eax + 0x4c37d0], cl
inc eax
cmp eax, 0x15
jb 0x4091cf
mov eax, 0x4c37d0
ret
Function at 0x409b11
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c82b0], 1
jne 0x409b6d
or dword [0x4c82b0], 1
mov dword [0x4c3120], 0xcacfc7e0
mov dword [0x4c3124], 0xd286c2c3
mov dword [0x4c3128], 0xc3d486c9
mov dword [0x4c312c], 0xc986c2c7
mov dword [0x4c3130], 0xc986d4d3
mov dword [0x4c3134], 0xc386c8d1
mov word [0x4c3138], 0xc3de
mov byte [0x4c313a], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c3120]
xor cl, 0xa6
mov byte [eax + 0x4c3850], cl
inc eax
cmp eax, 0x1b
jb 0x409b6f
mov eax, 0x4c3850
ret

Function at 0x409beb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c82ac], 1
jne 0x409c37
or dword [0x4c82ac], 1
mov dword [0x4c313c], 0xead2c3e1
mov dword [0x4c3140], 0xefd2d5c7
mov dword [0x4c3144], 0xd2d3d6c8
mov dword [0x4c3148], 0xc9c0c8ef
mov dword [0x4c314c], 0xcfc7c086
mov dword [0x4c3150], 0xa6c2c3ca
xor eax, eax
mov cl, byte [eax + 0x4c313c]
xor cl, 0xa6
mov byte [eax + 0x4c386c], cl
inc eax
cmp eax, 0x18
jb 0x409c39
mov eax, 0x4c386c
ret

Function at 0x409f4b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c82a8], 1
mov ecx, 0xdca6
jne 0x409fae
or dword [0x4c82a8], 1
lea eax, [ecx + 0x28]
mov word [0x4c3154], ax
add eax, 4
mov edx, eax
mov word [0x4c3158], ax
lea eax, [ecx + 0x30]
mov word [0x4c315a], ax
dec eax
mov word [0x4c315c], ax
lea eax, [ecx - 0xa]
mov word [0x4c315e], ax
add eax, 0xffffffed
mov word [0x4c3156], dx
mov edx, eax
mov word [0x4c3162], ax
mov eax, ecx
mov word [0x4c3160], dx
mov word [0x4c3164], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c3154]
add eax, 2
mov word [eax + 0x4c3882], dx
cmp eax, 0x12
jb 0x409fb0
mov eax, 0x4c3884
ret

Function at 0x409fce
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c82a4], 1
mov ecx, 0xdca6
jne 0x40a02a
or dword [0x4c82a4], 1
lea eax, [ecx + 0x28]
mov word [0x4c3168], ax
add eax, 4
mov edx, eax
mov word [0x4c316c], ax
lea eax, [ecx + 0x30]
mov word [0x4c316e], ax
add eax, 0xffffffc6
mov word [0x4c3170], ax
lea eax, [ecx - 0x1d]
mov word [0x4c316a], dx
mov edx, eax
mov word [0x4c3174], ax
mov eax, ecx
mov word [0x4c3172], dx
mov word [0x4c3176], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c3168]
add eax, 2
mov word [eax + 0x4c3896], dx
cmp eax, 0x10
jb 0x40a02c
mov eax, 0x4c3898
ret

Function at 0x40a04a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c829c], 1
jne 0x40a093
or dword [0x4c829c], 1
mov dword [0x4c3184], 0xe1d5c8e2
mov dword [0x4c3188], 0xc7e5d2c3
mov dword [0x4c318c], 0xe2c3cec5
mov dword [0x4c3190], 0xf2c7d2c7
mov dword [0x4c3194], 0xc3cac4c7
mov byte [0x4c3198], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c3184]
xor cl, 0xa6
mov byte [eax + 0x4c38b4], cl
inc eax
cmp eax, 0x15
jb 0x40a095
mov eax, 0x4c38b4
ret
Function at 0x40a97b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8298], 1
mov ecx, 0xdca6
jne 0x40aa05
or dword [0x4c8298], 1
lea eax, [ecx + 0x1f]
mov word [0x4c319c], ax
add eax, 0xf
mov edx, eax
mov word [0x4c319e], dx
lea edx, [ecx + 0x21]
mov word [0x4c31a0], dx
add edx, 0xe
mov word [0x4c31a2], dx
lea edx, [ecx + 0x28]
mov word [0x4c31a4], dx
add edx, 0x2b
mov word [0x4c31a6], dx
mov edx, eax
mov word [0x4c31a8], dx
lea edx, [ecx + 0x1d]
lea eax, [ecx + 0x2c]
mov word [0x4c31aa], dx
mov word [0x4c31b2], ax
add edx, 0x13
mov eax, ecx
mov word [0x4c31ac], dx
mov dword [0x4c31ae], 0xdcd4dcc9
mov word [0x4c31b4], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c319c]
add eax, 2
mov word [eax + 0x4c38ca], dx
cmp eax, 0x1a
jb 0x40aa07
mov eax, 0x4c38cc
ret

Function at 0x40aa25
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8294], 1
jne 0x40aa9f
or dword [0x4c8294], 1
mov dword [0x4c31b8], 0xd4d4c9f5
mov dword [0x4c31bc], 0xd2868adf
mov dword [0x4c31c0], 0x86d5cfce
mov dword [0x4c31c4], 0xd2c0c9d5
mov dword [0x4c31c8], 0xc3d4c7d1
mov dword [0x4c31cc], 0x86d5cf86
mov dword [0x4c31d0], 0x86d2c9c8
mov dword [0x4c31d4], 0xcfc7d0c7
mov dword [0x4c31d8], 0xcac4c7ca
mov word [0x4c31dc], 0x88c3
mov byte [0x4c31de], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c31b8]
xor cl, 0xa6
mov byte [eax + 0x4c38e8], cl
inc eax
cmp eax, 0x27
jb 0x40aaa1
mov eax, 0x4c38e8
ret

Function at 0x40aabc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8290], 1
jne 0x40aadf
or dword [0x4c8290], 1
mov dword [0x4c31e0], 0xc9d4d4e3
mov word [0x4c31e4], 0xa6d4
xor eax, eax
mov cl, byte [eax + 0x4c31e0]
xor cl, 0xa6
mov byte [eax + 0x4c3910], cl
inc eax
cmp eax, 6
jb 0x40aae1
mov eax, 0x4c3910
ret

Function at 0x40aafc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c828c], 1
jne 0x40ab76
or dword [0x4c828c], 1
mov dword [0x4c31e8], 0xd4d4c9f5
mov dword [0x4c31ec], 0xd2868adf
mov dword [0x4c31f0], 0x86d5cfce
mov dword [0x4c31f4], 0xd2c0c9d5
mov dword [0x4c31f8], 0xc3d4c7d1
mov dword [0x4c31fc], 0x86d5cf86
mov dword [0x4c3200], 0x86d2c9c8
mov dword [0x4c3204], 0xcfc7d0c7
mov dword [0x4c3208], 0xcac4c7ca
mov word [0x4c320c], 0x88c3
mov byte [0x4c320e], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c31e8]
xor cl, 0xa6
mov byte [eax + 0x4c3918], cl
inc eax
cmp eax, 0x27
jb 0x40ab78
mov eax, 0x4c3918
ret

Function at 0x40ab93
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8288], 1
jne 0x40abb6
or dword [0x4c8288], 1
mov dword [0x4c3210], 0xc9d4d4e3
mov word [0x4c3214], 0xa6d4
xor eax, eax
mov cl, byte [eax + 0x4c3210]
xor cl, 0xa6
mov byte [eax + 0x4c3940], cl
inc eax
cmp eax, 6
jb 0x40abb8
mov eax, 0x4c3940
ret