joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40abd3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8284], 1
jne 0x40ac29
or dword [0x4c8284], 1
mov dword [0x4c3218], 0x86c3cae9
mov dword [0x4c321c], 0xd2cfc8cf
mov dword [0x4c3220], 0xcfcac7cf
mov dword [0x4c3224], 0xcfd2c7dc
mov dword [0x4c3228], 0xc086c8c9
mov dword [0x4c322c], 0xc3cacfc7
mov dword [0x4c3230], 0xa6869cc2
xor eax, eax
mov cl, byte [eax + 0x4c3218]
xor cl, 0xa6
mov byte [eax + 0x4c3948], cl
inc eax
cmp eax, 0x1c
jb 0x40ac2b
mov eax, 0x4c3948
ret

Function at 0x40ac46
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8280], 1
jne 0x40ac71
or dword [0x4c8280], 1
mov dword [0x4c3234], 0xc8d4c3cd
mov dword [0x4c3238], 0x9495cac3
mov byte [0x4c323c], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c3234]
xor cl, 0xa6
mov byte [eax + 0x4c3964], cl
inc eax
cmp eax, 9
jb 0x40ac73
mov eax, 0x4c3964
ret

Function at 0x40ac8e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c827c], 1
jne 0x40acf7
or dword [0x4c827c], 1
mov dword [0x4c3240], 0xf6d2c3f5
mov dword [0x4c3244], 0xc3c5c9d4
mov dword [0x4c3248], 0xd5f3d5d5
mov dword [0x4c324c], 0xc9ebd4c3
mov dword [0x4c3250], 0xdee3c3c2
mov dword [0x4c3254], 0xd2d6c3c5
mov dword [0x4c3258], 0xf6c8c9cf
mov dword [0x4c325c], 0xc5cfcac9
mov word [0x4c3260], 0xa6df
xor eax, eax
mov cl, byte [eax + 0x4c3240]
xor cl, 0xa6
mov byte [eax + 0x4c3970], cl
inc eax
cmp eax, 0x22
jb 0x40acf9
mov eax, 0x4c3970
ret

Function at 0x40ad14
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8278], 1
jne 0x40ad7d
or dword [0x4c8278], 1
mov dword [0x4c3264], 0xf6d2c3e1
mov dword [0x4c3268], 0xc3c5c9d4
mov dword [0x4c326c], 0xd5f3d5d5
mov dword [0x4c3270], 0xc9ebd4c3
mov dword [0x4c3274], 0xdee3c3c2
mov dword [0x4c3278], 0xd2d6c3c5
mov dword [0x4c327c], 0xf6c8c9cf
mov dword [0x4c3280], 0xc5cfcac9
mov word [0x4c3284], 0xa6df
xor eax, eax
mov cl, byte [eax + 0x4c3264]
xor cl, 0xa6
mov byte [eax + 0x4c3994], cl
inc eax
cmp eax, 0x22
jb 0x40ad7f
mov eax, 0x4c3994
ret

Function at 0x40ad9a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8274], 1
mov ecx, 0xdca6
jne 0x40adc9
or dword [0x4c8274], 1
lea eax, [ecx + 0x21]
mov word [0x4c3288], ax
add eax, 0xffffffcd
mov word [0x4c328a], ax
mov eax, ecx
mov word [0x4c328c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c3288]
add eax, 2
mov word [eax + 0x4c39b6], dx
cmp eax, 6
jb 0x40adcb
mov eax, 0x4c39b8
ret

Function at 0x40ade9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c826c], 1
jne 0x40ae59
or dword [0x4c826c], 1
mov dword [0x4c3298], 0xcacfc7e0
mov dword [0x4c329c], 0xd286c2c3
mov dword [0x4c32a0], 0xc8cf86c9
mov dword [0x4c32a4], 0xc7cfd2cf
mov dword [0x4c32a8], 0xc3dccfca
mov dword [0x4c32ac], 0xd0c8c386
mov dword [0x4c32b0], 0xc8c9d4cf
mov dword [0x4c32b4], 0xd2c8c3cb
mov word [0x4c32b8], 0x869c
mov byte [0x4c32ba], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c3298]
xor cl, 0xa6
mov byte [eax + 0x4c39c8], cl
inc eax
cmp eax, 0x23
jb 0x40ae5b
mov eax, 0x4c39c8
ret
Function at 0x40ae76
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8264], 1
mov ecx, 0xdca6
jne 0x40aec0
or dword [0x4c8264], 1
lea eax, [ecx + 0x1d]
mov word [0x4c32c4], ax
add eax, 5
mov word [0x4c32c6], ax
lea eax, [ecx + 0x2c]
mov word [0x4c32c8], ax
add eax, 2
mov word [0x4c32ca], ax
lea eax, [ecx + 0x39]
mov word [0x4c32cc], ax
mov eax, ecx
mov word [0x4c32ce], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c32c4]
add eax, 2
mov word [eax + 0x4c39f2], dx
cmp eax, 0xc
jb 0x40aec2
mov eax, 0x4c39f4
ret

Function at 0x40aee0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8260], 1
jne 0x40af2b
or dword [0x4c8260], 1
mov dword [0x4c32d0], 0xc7cec8f3
mov dword [0x4c32d4], 0xc3cac2c8
mov dword [0x4c32d8], 0xdec386c2
mov dword [0x4c32dc], 0xd2d6c3c5
mov dword [0x4c32e0], 0x9cc8c9cf
mov word [0x4c32e4], 0xa686
xor eax, eax
mov cl, byte [eax + 0x4c32d0]
xor cl, 0xa6
mov byte [eax + 0x4c3a00], cl
inc eax
cmp eax, 0x16
jb 0x40af2d
mov eax, 0x4c3a00
ret

Function at 0x40af48
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c825c], 1
jne 0x40af9b
or dword [0x4c825c], 1
mov dword [0x4c32e8], 0xc7cec8f3
mov dword [0x4c32ec], 0xc3cac2c8
mov dword [0x4c32f0], 0xdec386c2
mov dword [0x4c32f4], 0xd2d6c3c5
mov dword [0x4c32f8], 0x9cc8c9cf
mov dword [0x4c32fc], 0xacd58386
mov byte [0x4c3300], 0xa6
xor eax, eax
mov cl, byte [eax + 0x4c32e8]
xor cl, 0xa6
mov byte [eax + 0x4c3a18], cl
inc eax
cmp eax, 0x19
jb 0x40af9d
mov eax, 0x4c3a18
ret

Function at 0x40afbb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8258], 1
jne 0x40aff3
or dword [0x4c8258], 1
mov dword [0x4c3304], 0xc4d3d2f5
mov dword [0x4c3308], 0xcfdec386
mov dword [0x4c330c], 0x838e86d2
mov dword [0x4c3310], 0xa6ac8fc2
xor eax, eax
mov cl, byte [eax + 0x4c3304]
xor cl, 0xa6
mov byte [eax + 0x4c3a34], cl
inc eax
cmp eax, 0x10
jb 0x40aff5
mov eax, 0x4c3a34
ret
Function at 0x40cf42
Capabilities:
Write file on windows

Disassembly:
mov eax, 0x48dd9c
call fcn.0048cc58
sub esp, 0x20
push ebx
xor ebx, ebx
cmp dword [edi + 0x44], ebx
je 0x40d026
cmp byte [edi + 0x49], bl
je 0x40d026
mov eax, dword [edi]
push 0xffffffffffffffff
mov ecx, edi
call dword [eax + 0xc]
cmp eax, 0xffffffff
jne 0x40cf79
xor al, al
jmp 0x40d028
push esi
lea esi, [ebp - 0x2c]
call fcn.0040c8e7
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x40cfc9
lea eax, [ebp - 0x2c]
mov edx, eax
mov ecx, dword [edi + 0x44]
mov esi, dword [ecx]
lea ebx, [ebp - 0x10]
push ebx
mov ebx, dword [ebp - 0x1c]
add eax, ebx
push eax
push edx
lea eax, [edi + 0x4c]
push eax
call dword [esi + 0x18]
sub eax, 0
je 0x40cfce
dec eax
je 0x40cfd2
dec eax
dec eax
je 0x40d022
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00404c70
mov al, bl
pop esi
jmp 0x40d028
mov edx, dword [ebp - 0x2c]
jmp 0x40cf93
mov byte [edi + 0x49], 0
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x40cfde
lea eax, [ebp - 0x2c]
mov esi, dword [ebp - 0x10]
sub esi, eax
je 0x40d004
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x40cff1
lea eax, [ebp - 0x2c]
push dword [edi + 0x54]
push esi
push 1
push eax
call fcn.0046889f
add esp, 0x10
cmp esi, eax
jne 0x40cfb6
cmp byte [edi + 0x49], 0
je 0x40d022
test esi, esi
jne 0x40cf85
push esi
push 8
lea esi, [ebp - 0x2c]
call fcn.0040c9c0
jmp 0x40cf85
mov bl, 1
jmp 0x40cfb8
mov al, 1
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
leave
ret

Function at 0x41285c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8254], 1
jne 0x4128d0
or dword [0x4c8254], 1
mov dword [0x4c3a54], 0xc5dcc6ea
mov dword [0x4c3a58], 0xc6c789cd
mov dword [0x4c3a5c], 0xccce89dd
mov dword [0x4c3a60], 0xc0cd89dd
mov dword [0x4c3a64], 0xcdc0d9da
mov dword [0x4c3a68], 0x89cfc689
mov dword [0x4c3a6c], 0xc1ddccc4
mov dword [0x4c3a70], 0x8e89cdc6
mov dword [0x4c3a74], 0xc5c5c8ca
mov dword [0x4c3a78], 0xa989938e
xor eax, eax
mov cl, byte [eax + 0x4c3a54]
xor cl, 0xa9
mov byte [eax + 0x4c3b98], cl
inc eax
cmp eax, 0x28
jb 0x4128d2
mov eax, 0x4c3b98
ret

Function at 0x4128ed
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8250], 1
jne 0x412954
or dword [0x4c8250], 1
mov dword [0x4c3a7c], 0xc5c0c8ef
mov dword [0x4c3a80], 0xdd89cdcc
mov dword [0x4c3a84], 0xc7c089c6
mov dword [0x4c3a88], 0xccc2c6df
mov dword [0x4c3a8c], 0xddccc489
mov dword [0x4c3a90], 0x89cdc6c1
mov dword [0x4c3a94], 0xc5c8ca8e
mov dword [0x4c3a98], 0x89938ec5
mov byte [0x4c3a9c], 0xa9
xor eax, eax
mov cl, byte [eax + 0x4c3a7c]
xor cl, 0xa9
mov byte [eax + 0x4c3bc0], cl
inc eax
cmp eax, 0x21
jb 0x412956
mov eax, 0x4c3bc0
ret
Function at 0x412971
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c824c], 1
jne 0x4129d1
or dword [0x4c824c], 1
mov dword [0x4c3aa0], 0xc6dbf9a3
mov dword [0x4c3aa4], 0xc5cbc8cb
mov dword [0x4c3aa8], 0xdccd89d0
mov dword [0x4c3aac], 0xc6dd89cc
mov dword [0x4c3ab0], 0xdbcada89
mov dword [0x4c3ab4], 0x89ddd9c0
mov dword [0x4c3ab8], 0xc6dbdbcc
mov dword [0x4c3abc], 0xa98993db
xor eax, eax
mov cl, byte [eax + 0x4c3aa0]
xor cl, 0xa9
mov byte [eax + 0x4c3be4], cl
inc eax
cmp eax, 0x20
jb 0x4129d3
mov eax, 0x4c3be4
ret

Function at 0x412fae
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
and dword [ebp - 4], 0
cmp dword [ebp + 0xc], 0
push ebx
push esi
push edi
mov edi, eax
jbe 0x4130f3
mov ebx, dword [ebp + 8]
push 4
sub ebx, edi
pop esi
test byte [0x4c8248], 1
jne 0x413010
or dword [0x4c8248], 1
mov eax, 0xdcda
mov word [0x4c3ac0], ax
add eax, 0xfffffff2
mov word [0x4c3ac2], ax
mov eax, 0xdcc7
mov word [0x4c3ac4], ax
add eax, 6
mov word [0x4c3ac6], ax
mov eax, 0xdca9
mov word [0x4c3ac8], ax
xor eax, eax
mov ecx, 0xdca9
xor cx, word [eax + 0x4c3ac0]
add eax, 2
mov word [eax + 0x4c3c02], cx
cmp eax, 0xa
jb 0x413012
mov eax, dword [ebx + edi]
mov ecx, 0x4c3c04
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x413059
test dx, dx
je 0x413055
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x413059
add eax, esi
add ecx, esi
test dx, dx
jne 0x413035
xor eax, eax
jmp 0x41305e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x41306a
mov dword [edi], 0x385
jmp 0x4130e2
call fcn.00413103
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x413096
test dx, dx
je 0x413092
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x413096
add ecx, esi
add eax, esi
test dx, dx
jne 0x413072
xor eax, eax
jmp 0x41309b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4130a7
mov dword [edi], 0x386
jmp 0x4130e2
call fcn.004131d6
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x4130d3
test dx, dx
je 0x4130cf
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x4130d3
add ecx, esi
add eax, esi
test dx, dx
jne 0x4130af
xor eax, eax
jmp 0x4130d8
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4130fc
mov dword [edi], 0x387
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
add edi, esi
cmp eax, dword [ebp + 0xc]
jb 0x412fcd
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 8
mov eax, 0x80020006
jmp 0x4130f5
Function at 0x413103
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8244], 1
jne 0x4131b3
or dword [0x4c8244], 1
mov eax, 0xdcc8
mov word [0x4c3acc], ax
add eax, 5
mov ecx, eax
mov word [0x4c3ad0], ax
mov eax, 0xdcec
mov word [0x4c3ad2], ax
add eax, 0xfffffff3
mov word [0x4c3ad4], ax
mov eax, 0xdccc
mov word [0x4c3ace], cx
mov ecx, eax
lea edx, [eax - 5]
mov word [0x4c3ad6], cx
mov ecx, edx
push edi
mov word [0x4c3ad8], cx
add ecx, 0x16
mov edi, ecx
mov word [0x4c3ada], di
lea edi, [eax + 0x19]
mov word [0x4c3adc], di
add edi, 0xffffffdb
mov ecx, eax
add eax, 0xf
mov word [0x4c3aea], ax
lea eax, [ecx - 0x23]
mov word [0x4c3ade], di
mov dword [0x4c3ae0], 0xdcdddcda
mov word [0x4c3ae4], cx
mov dword [0x4c3ae6], 0xdcccdcc7
mov word [0x4c3aec], ax
pop edi
xor eax, eax
mov ecx, 0xdca9
xor cx, word [eax + 0x4c3acc]
add eax, 2
mov word [eax + 0x4c3c0e], cx
cmp eax, 0x22
jb 0x4131b5
mov eax, 0x4c3c10
ret

Function at 0x4131d6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8240], 1
mov ecx, 0xdca9
jne 0x413230
or dword [0x4c8240], 1
lea eax, [ecx + 0x36]
mov word [0x4c3af0], ax
add eax, 0xffffffed
mov word [0x4c3af2], ax
lea eax, [ecx + 0x32]
mov word [0x4c3af4], ax
dec eax
mov word [0x4c3af6], ax
lea eax, [ecx + 0x17]
mov word [0x4c3af8], ax
add eax, 6
mov word [0x4c3afa], ax
lea eax, [ecx + 0x1e]
mov word [0x4c3afc], ax
mov eax, ecx
mov word [0x4c3afe], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c3af0]
add eax, 2
mov word [eax + 0x4c3c32], dx
cmp eax, 0x10
jb 0x413232
mov eax, 0x4c3c34
ret

Function at 0x413ba3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c823c], 1
mov edx, 0xdca9
jne 0x413c06
or dword [0x4c823c], 1
lea ecx, [edx + 0x23]
mov eax, ecx
mov word [0x4c3b00], ax
add eax, 0xf
push esi
mov esi, eax
lea eax, [edx + 0x3c]
mov word [0x4c3b0a], ax
add eax, 0xffffffdb
mov word [0x4c3b0c], ax
mov eax, edx
mov word [0x4c3b02], si
mov word [0x4c3b04], si
mov dword [0x4c3b06], 0xdcdbdcc6
mov dword [0x4c3b0e], 0xdcccdcc7
mov word [0x4c3b12], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4c3b00]
add eax, 2
mov word [eax + 0x4c3c42], cx
cmp eax, 0x14
jb 0x413c08
mov eax, 0x4c3c44
ret

Function at 0x413c26
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8238], 1
jne 0x413cc2
or dword [0x4c8238], 1
mov edx, 0xdccc
mov eax, edx
mov word [0x4c3b14], ax
add eax, 0xf
mov ecx, eax
mov word [0x4c3b16], cx
mov word [0x4c3b18], cx
lea ecx, [edx - 6]
mov word [0x4c3b1a], cx
mov ecx, eax
mov word [0x4c3b1c], cx
lea ecx, [edx + 0x1e]
mov word [0x4c3b1e], cx
add ecx, 0xffffffd7
mov word [0x4c3b20], cx
lea ecx, [edx - 4]
push edi
mov edi, ecx
mov word [0x4c3b22], di
mov edi, eax
mov word [0x4c3b26], cx
mov word [0x4c3b2e], ax
add ecx, 2
lea eax, [edx - 0x23]
mov word [0x4c3b24], di
mov word [0x4c3b28], cx
mov dword [0x4c3b2a], 0xdcccdcdd
mov word [0x4c3b30], ax
pop edi
xor eax, eax
mov ecx, 0xdca9
xor cx, word [eax + 0x4c3b14]
add eax, 2
mov word [eax + 0x4c3c56], cx
cmp eax, 0x1e
jb 0x413cc4
mov eax, 0x4c3c58
ret
Function at 0x413ce5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8234], 1
jne 0x413d46
or dword [0x4c8234], 1
mov edx, 0xdccc
mov eax, edx
mov word [0x4c3b34], ax
add eax, 0xf
mov ecx, eax
mov word [0x4c3b36], cx
mov word [0x4c3b38], cx
push edi
lea ecx, [edx - 6]
mov edi, ecx
mov word [0x4c3b3c], ax
lea eax, [edx - 0x23]
mov word [0x4c3b3a], di
mov dword [0x4c3b3e], 0xdcc6dcea
mov dword [0x4c3b42], 0xdcccdccd
mov word [0x4c3b46], ax
pop edi
xor eax, eax
mov ecx, 0xdca9
xor cx, word [eax + 0x4c3b34]
add eax, 2
mov word [eax + 0x4c3c76], cx
cmp eax, 0x14
jb 0x413d48
mov eax, 0x4c3c78
ret

Function at 0x413d69
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8230], 1
mov edx, 0xdca9
jne 0x413de6
or dword [0x4c8230], 1
lea ecx, [edx + 0x23]
mov eax, ecx
mov word [0x4c3b48], ax
add eax, 0xf
push esi
mov esi, eax
lea eax, [edx + 0x3b]
mov word [0x4c3b52], ax
mov eax, ecx
mov word [0x4c3b54], ax
add eax, 0xe
mov word [0x4c3b4a], si
mov word [0x4c3b4c], si
mov esi, eax
mov word [0x4c3b58], ax
lea eax, [edx + 0x1f]
mov word [0x4c3b5a], ax
mov eax, edx
mov word [0x4c3b56], si
mov dword [0x4c3b4e], 0xdcdbdcc6
mov dword [0x4c3b5c], 0xdcccdcce
mov word [0x4c3b60], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4c3b48]
add eax, 2
mov word [eax + 0x4c3c8a], cx
cmp eax, 0x1a
jb 0x413de8
mov eax, 0x4c3c8c
ret

Function at 0x413e06
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c822c], 1
mov ecx, 0xdca9
jne 0x413e65
or dword [0x4c822c], 1
lea eax, [ecx + 0x23]
mov word [0x4c3b64], ax
add eax, 0xf
mov edx, eax
mov word [0x4c3b66], dx
mov word [0x4c3b68], dx
lea edx, [ecx + 0x1d]
mov word [0x4c3b6a], dx
mov edx, eax
lea eax, [ecx + 0x1c]
mov word [0x4c3b72], ax
mov eax, ecx
mov word [0x4c3b6c], dx
mov dword [0x4c3b6e], 0xdcdbdcfc
mov word [0x4c3b74], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c3b64]
add eax, 2
mov word [eax + 0x4c3ca6], dx
cmp eax, 0x12
jb 0x413e67
mov eax, 0x4c3ca8
ret

Function at 0x41450a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8228], 1
jne 0x414534
or dword [0x4c8228], 1
mov dword [0x4c3b78], 0xc5dcc795
mov word [0x4c3b7c], 0x97c5
mov byte [0x4c3b7e], 0xa9
xor eax, eax
mov cl, byte [eax + 0x4c3b78]
xor cl, 0xa9
mov byte [eax + 0x4c3cbc], cl
inc eax
cmp eax, 7
jb 0x414536
mov eax, 0x4c3cbc
ret

Function at 0x414551
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8224], 1
jne 0x41457b
or dword [0x4c8224], 1
mov dword [0x4c3b80], 0xc5dcc795
mov word [0x4c3b84], 0x97c5
mov byte [0x4c3b86], 0xa9
xor eax, eax
mov cl, byte [eax + 0x4c3b80]
xor cl, 0xa9
mov byte [eax + 0x4c3cc4], cl
inc eax
cmp eax, 7
jb 0x41457d
mov eax, 0x4c3cc4
ret

Function at 0x414598
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c821c], 1
jne 0x4145bc
or dword [0x4c821c], 1
mov dword [0x4c3b8c], 0xc6caf289
mov dword [0x4c3b90], 0xa994cccd
xor eax, eax
mov cl, byte [eax + 0x4c3b8c]
xor cl, 0xa9
mov byte [eax + 0x4c3cd0], cl
inc eax
cmp eax, 8
jb 0x4145be
mov eax, 0x4c3cd0
ret
Function at 0x4152a9
Capabilities:
Encode data using xor

Disassembly:
push esi
push edi
push 0x31
pop ecx
mov esi, 0x496d38
mov edi, 0x4c8620
push 0x496dfc
rep movsd dword es:[edi], dword [esi]
call fcn.0044f3e0
pop ecx
pop edi
pop esi
cmp eax, 0xffffffff
jne 0x4152cf
xor al, al
ret
push 0x496bc0
call fcn.0044f330
pop ecx
cmp eax, 0xffffffff
je 0x4152cc
push 0x496e90
call fcn.0044e580
pop ecx
cmp eax, 0xffffffff
je 0x4152cc
test byte [0x4c8210], 1
jne 0x415310
or dword [0x4c8210], 1
mov dword [0x4c3cf0], 0x9acac3d8
mov byte [0x4c3cf4], 0xab
xor eax, eax
mov cl, byte [eax + 0x4c3cf0]
xor cl, 0xab
mov byte [eax + 0x4c3dbc], cl
inc eax
cmp eax, 5
jb 0x415312
push 0x4c3dbc
call fcn.0044f450
pop ecx
mov dword [0x4bd928], eax
test eax, eax
js 0x4152cc
call fcn.0041539b
push eax
call fcn.0044e5f0
pop ecx
mov dword [0x4bd92c], eax
test eax, eax
js 0x4152cc
test byte [0x4c8208], 1
jne 0x41536e
or dword [0x4c8208], 1
mov dword [0x4c3d00], 0xabd8ceca
xor eax, eax
mov cl, byte [eax + 0x4c3d00]
xor cl, 0xab
mov byte [eax + 0x4c3dcc], cl
inc eax
cmp eax, 4
jb 0x415370
push 0x4c3dcc
call fcn.0044f3a0
test eax, eax
mov dword [0x4bd930], eax
pop ecx
setns al
ret

Function at 0x41539b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c820c], 1
jne 0x4153bf
or dword [0x4c820c], 1
mov dword [0x4c3cf8], 0xdfd9c4cd
mov dword [0x4c3cfc], 0xabcac5de
xor eax, eax
mov cl, byte [eax + 0x4c3cf8]
xor cl, 0xab
mov byte [eax + 0x4c3dc4], cl
inc eax
cmp eax, 8
jb 0x4153c1
mov eax, 0x4c3dc4
ret

Function at 0x41563f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8204], 1
jne 0x41567d
or dword [0x4c8204], 1
mov dword [0x4c3d04], 0xc28bdbc6
mov dword [0x4c3d08], 0x8bdfc2c5
mov dword [0x4c3d0c], 0xc7c2cacd
mov word [0x4c3d10], 0xcfce
mov byte [0x4c3d12], 0xab
xor eax, eax
mov cl, byte [eax + 0x4c3d04]
xor cl, 0xab
mov byte [eax + 0x4c3dd0], cl
inc eax
cmp eax, 0xf
jb 0x41567f
mov eax, 0x4c3dd0
ret

Function at 0x41569a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8200], 1
jne 0x4156d8
or dword [0x4c8200], 1
mov dword [0x4c3d14], 0xc28bdbc6
mov dword [0x4c3d18], 0x8bdfc2c5
mov dword [0x4c3d1c], 0xc7c2cacd
mov word [0x4c3d20], 0xcfce
mov byte [0x4c3d22], 0xab
xor eax, eax
mov cl, byte [eax + 0x4c3d14]
xor cl, 0xab
mov byte [eax + 0x4c3de0], cl
inc eax
cmp eax, 0xf
jb 0x4156da
mov eax, 0x4c3de0
ret

Function at 0x4156f5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81fc], 1
jne 0x415733
or dword [0x4c81fc], 1
mov dword [0x4c3d24], 0xf4dfced8
mov dword [0x4c3d28], 0x8bdfc5c2
mov dword [0x4c3d2c], 0xc7c2cacd
mov word [0x4c3d30], 0xcfce
mov byte [0x4c3d32], 0xab
xor eax, eax
mov cl, byte [eax + 0x4c3d24]
xor cl, 0xab
mov byte [eax + 0x4c3df0], cl
inc eax
cmp eax, 0xf
jb 0x415735
mov eax, 0x4c3df0
ret
Function at 0x415750
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81f8], 1
jne 0x415799
or dword [0x4c81f8], 1
mov dword [0x4c3d34], 0xc2d8c5de
mov dword [0x4c3d38], 0xcfcec5cc
mov dword [0x4c3d3c], 0xcaced9f4
mov dword [0x4c3d40], 0xcacd8bcf
mov dword [0x4c3d44], 0xcfcec7c2
mov byte [0x4c3d48], 0xab
xor eax, eax
mov cl, byte [eax + 0x4c3d34]
xor cl, 0xab
mov byte [eax + 0x4c3e00], cl
inc eax
cmp eax, 0x15
jb 0x41579b
mov eax, 0x4c3e00
ret

Function at 0x4157b6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81f4], 1
jne 0x4157f5
or dword [0x4c81f4], 1
mov dword [0x4c3d4c], 0xccc5d9db
mov dword [0x4c3d50], 0xc0cac68b
mov dword [0x4c3d54], 0xcacd8bce
mov dword [0x4c3d58], 0xcfcec7c2
mov byte [0x4c3d5c], 0xab
xor eax, eax
mov cl, byte [eax + 0x4c3d4c]
xor cl, 0xab
mov byte [eax + 0x4c3e18], cl
inc eax
cmp eax, 0x11
jb 0x4157f7
mov eax, 0x4c3e18
ret

Function at 0x415812
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81f0], 1
jne 0x415854
or dword [0x4c81f0], 1
mov dword [0x4c3d60], 0xdfd9c4cd
mov dword [0x4c3d64], 0xf4cac5de
mov dword [0x4c3d68], 0xcfcaced9
mov dword [0x4c3d6c], 0xc2cacd8b
mov dword [0x4c3d70], 0xabcfcec7
xor eax, eax
mov cl, byte [eax + 0x4c3d60]
xor cl, 0xab
mov byte [eax + 0x4c3e2c], cl
inc eax
cmp eax, 0x14
jb 0x415856
mov eax, 0x4c3e2c
ret

Function at 0x415871
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81ec], 1
jne 0x4158b9
or dword [0x4c81ec], 1
mov dword [0x4c3d74], 0xdbd2d9c8
mov dword [0x4c3d78], 0xc28bc4df
mov dword [0x4c3d7c], 0x8bdfc2c5
mov dword [0x4c3d80], 0xc7c2cacd
mov word [0x4c3d84], 0xcfce
mov byte [0x4c3d86], 0xab
xor eax, eax
mov cl, byte [eax + 0x4c3d74]
xor cl, 0xab
mov byte [eax + 0x4c3e40], cl
inc eax
cmp eax, 0x13
jb 0x4158bb
mov eax, 0x4c3e40
ret

Function at 0x415ace
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81e8], 1
jne 0x415af1
or dword [0x4c81e8], 1
mov dword [0x4c3d88], 0xcfd8d8c2
mov word [0x4c3d8c], 0xabc0
xor eax, eax
mov cl, byte [eax + 0x4c3d88]
xor cl, 0xab
mov byte [eax + 0x4c3e54], cl
inc eax
cmp eax, 6
jb 0x415af3
mov eax, 0x4c3e54
ret

Function at 0x415b0e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81e4], 1
jne 0x415b3b
or dword [0x4c81e4], 1
mov dword [0x4c3d90], 0xc9d9dec3
mov dword [0x4c3d94], 0xd9decfca
mov word [0x4c3d98], 0xabd9
xor eax, eax
mov cl, byte [eax + 0x4c3d90]
xor cl, 0xab
mov byte [eax + 0x4c3e5c], cl
inc eax
cmp eax, 0xa
jb 0x415b3d
mov eax, 0x4c3e5c
ret

Function at 0x415c1b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81e0], 1
jne 0x415c48
or dword [0x4c81e0], 1
mov dword [0x4c3d9c], 0xc9d9dec3
mov dword [0x4c3da0], 0xd9decfca
mov word [0x4c3da4], 0xabd9
xor eax, eax
mov cl, byte [eax + 0x4c3d9c]
xor cl, 0xab
mov byte [eax + 0x4c3e68], cl
inc eax
cmp eax, 0xa
jb 0x415c4a
mov eax, 0x4c3e68
ret