joyce8/EMBER2024-capa huggingface dataset:
Function at 0x410528
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2bc4], 1
jne 0x410588
or dword [0x4c2bc4], 1
mov dword [0x4be770], 0xdfc2e0ba
mov dword [0x4be774], 0xdcd2d1d2
mov dword [0x4be778], 0xc5d490c9
mov dword [0x4be77c], 0xdfc490d5
mov dword [0x4be780], 0xc2d3c390
mov dword [0x4be784], 0x90c4c0d9
mov dword [0x4be788], 0xdfc2c2d5
mov dword [0x4be78c], 0xb0908ac2
xor eax, eax
mov cl, byte [eax + 0x4be770]
xor cl, 0xb0
mov byte [eax + 0x4be8b4], cl
inc eax
cmp eax, 0x20
jb 0x41058a
mov eax, 0x4be8b4
ret

Function at 0x410b65
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
and dword [ebp - 4], 0
cmp dword [ebp + 0xc], 0
push ebx
push esi
push edi
mov edi, eax
jbe 0x410caa
mov ebx, dword [ebp + 8]
push 4
sub ebx, edi
pop esi
test byte [0x4c2bc0], 1
jne 0x410bc7
or dword [0x4c2bc0], 1
mov eax, 0xddc3
mov word [0x4be790], ax
add eax, 0x12
mov word [0x4be792], ax
mov eax, 0xddde
mov word [0x4be794], ax
add eax, 0xfffffff6
mov word [0x4be796], ax
mov eax, 0xddb0
mov word [0x4be798], ax
xor eax, eax
mov ecx, 0xddb0
xor cx, word [eax + 0x4be790]
add eax, 2
mov word [eax + 0x4be8d2], cx
cmp eax, 0xa
jb 0x410bc9
mov eax, dword [ebx + edi]
mov ecx, 0x4be8d4
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x410c10
test dx, dx
je 0x410c0c
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x410c10
add eax, esi
add ecx, esi
test dx, dx
jne 0x410bec
xor eax, eax
jmp 0x410c15
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x410c21
mov dword [edi], 0x385
jmp 0x410c99
call fcn.00410cba
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x410c4d
test dx, dx
je 0x410c49
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x410c4d
add ecx, esi
add eax, esi
test dx, dx
jne 0x410c29
xor eax, eax
jmp 0x410c52
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x410c5e
mov dword [edi], 0x386
jmp 0x410c99
call fcn.00410d8d
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x410c8a
test dx, dx
je 0x410c86
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x410c8a
add ecx, esi
add eax, esi
test dx, dx
jne 0x410c66
xor eax, eax
jmp 0x410c8f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x410cb3
mov dword [edi], 0x387
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
add edi, esi
cmp eax, dword [ebp + 0xc]
jb 0x410b84
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 8
mov eax, 0x80020006
jmp 0x410cac
Function at 0x410cba
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2bbc], 1
jne 0x410d6a
or dword [0x4c2bbc], 1
mov eax, 0xddd1
mov word [0x4be79c], ax
add eax, 3
mov ecx, eax
mov word [0x4be7a0], ax
mov eax, 0xddf5
mov word [0x4be7a2], ax
add eax, 0xffffffd1
mov word [0x4be7a4], ax
mov eax, 0xddd5
mov word [0x4be79e], cx
mov ecx, eax
lea edx, [eax + 9]
mov word [0x4be7a6], cx
mov ecx, edx
push edi
mov word [0x4be7a8], cx
add ecx, 0xffffffe6
mov edi, ecx
mov word [0x4be7aa], di
lea edi, [eax + 0x27]
mov word [0x4be7ac], di
add edi, 0xffffffdd
mov ecx, eax
add eax, 0xffffffed
mov word [0x4be7ba], ax
lea eax, [ecx - 0x25]
mov word [0x4be7ae], di
mov dword [0x4be7b0], 0xddc4ddc3
mov word [0x4be7b4], cx
mov dword [0x4be7b6], 0xddd5ddde
mov word [0x4be7bc], ax
pop edi
xor eax, eax
mov ecx, 0xddb0
xor cx, word [eax + 0x4be79c]
add eax, 2
mov word [eax + 0x4be8de], cx
cmp eax, 0x22
jb 0x410d6c
mov eax, 0x4be8e0
ret

Function at 0x410d8d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2bb8], 1
mov ecx, 0xddb0
jne 0x410de7
or dword [0x4c2bb8], 1
lea eax, [ecx + 0x16]
mov word [0x4be7c0], ax
add eax, 0xf
mov word [0x4be7c2], ax
lea eax, [ecx + 0x12]
mov word [0x4be7c4], ax
inc eax
mov word [0x4be7c6], ax
lea eax, [ecx + 0x29]
mov word [0x4be7c8], ax
add eax, 6
mov word [0x4be7ca], ax
lea eax, [ecx + 0x2e]
mov word [0x4be7cc], ax
mov eax, ecx
mov word [0x4be7ce], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4be7c0]
add eax, 2
mov word [eax + 0x4be902], dx
cmp eax, 0x10
jb 0x410de9
mov eax, 0x4be904
ret

Function at 0x4117a6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2bb4], 1
mov edx, 0xddb0
jne 0x411809
or dword [0x4c2bb4], 1
lea ecx, [edx + 0x25]
mov eax, ecx
mov word [0x4be7d0], ax
add eax, 0xffffffed
push esi
mov esi, eax
lea eax, [edx + 0x4c]
mov word [0x4be7da], ax
add eax, 0xffffffdd
mov word [0x4be7dc], ax
mov eax, edx
mov word [0x4be7d2], si
mov word [0x4be7d4], si
mov dword [0x4be7d6], 0xddc2dddf
mov dword [0x4be7de], 0xddd5ddde
mov word [0x4be7e2], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4be7d0]
add eax, 2
mov word [eax + 0x4be912], cx
cmp eax, 0x14
jb 0x41180b
mov eax, 0x4be914
ret

Function at 0x411829
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2bb0], 1
jne 0x4118c5
or dword [0x4c2bb0], 1
mov edx, 0xddd5
mov eax, edx
mov word [0x4be7e4], ax
add eax, 0xffffffed
mov ecx, eax
mov word [0x4be7e6], cx
mov word [0x4be7e8], cx
lea ecx, [edx + 0xa]
mov word [0x4be7ea], cx
mov ecx, eax
mov word [0x4be7ec], cx
lea ecx, [edx + 0x1e]
mov word [0x4be7ee], cx
add ecx, 0xffffffe5
mov word [0x4be7f0], cx
lea ecx, [edx - 4]
push edi
mov edi, ecx
mov word [0x4be7f2], di
mov edi, eax
mov word [0x4be7f6], cx
mov word [0x4be7fe], ax
add ecx, 2
lea eax, [edx - 0x25]
mov word [0x4be7f4], di
mov word [0x4be7f8], cx
mov dword [0x4be7fa], 0xddd5ddc4
mov word [0x4be800], ax
pop edi
xor eax, eax
mov ecx, 0xddb0
xor cx, word [eax + 0x4be7e4]
add eax, 2
mov word [eax + 0x4be926], cx
cmp eax, 0x1e
jb 0x4118c7
mov eax, 0x4be928
ret
Function at 0x4118e8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2bac], 1
jne 0x411949
or dword [0x4c2bac], 1
mov edx, 0xddd5
mov eax, edx
mov word [0x4be804], ax
add eax, 0xffffffed
mov ecx, eax
mov word [0x4be806], cx
mov word [0x4be808], cx
push edi
lea ecx, [edx + 0xa]
mov edi, ecx
mov word [0x4be80c], ax
lea eax, [edx - 0x25]
mov word [0x4be80a], di
mov dword [0x4be80e], 0xdddfddf3
mov dword [0x4be812], 0xddd5ddd4
mov word [0x4be816], ax
pop edi
xor eax, eax
mov ecx, 0xddb0
xor cx, word [eax + 0x4be804]
add eax, 2
mov word [eax + 0x4be946], cx
cmp eax, 0x14
jb 0x41194b
mov eax, 0x4be948
ret

Function at 0x41196c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2ba8], 1
mov edx, 0xddb0
jne 0x4119e9
or dword [0x4c2ba8], 1
lea ecx, [edx + 0x25]
mov eax, ecx
mov word [0x4be818], ax
add eax, 0xffffffed
push esi
mov esi, eax
lea eax, [edx + 0x4d]
mov word [0x4be822], ax
mov eax, ecx
mov word [0x4be824], ax
add eax, 0xffffffee
mov word [0x4be81a], si
mov word [0x4be81c], si
mov esi, eax
mov word [0x4be828], ax
lea eax, [edx + 0x21]
mov word [0x4be82a], ax
mov eax, edx
mov word [0x4be826], si
mov dword [0x4be81e], 0xddc2dddf
mov dword [0x4be82c], 0xddd5ddd7
mov word [0x4be830], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4be818]
add eax, 2
mov word [eax + 0x4be95a], cx
cmp eax, 0x1a
jb 0x4119eb
mov eax, 0x4be95c
ret

Function at 0x411a09
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2ba4], 1
mov ecx, 0xddb0
jne 0x411a68
or dword [0x4c2ba4], 1
lea eax, [ecx + 0x25]
mov word [0x4be834], ax
add eax, 0xffffffed
mov edx, eax
mov word [0x4be836], dx
mov word [0x4be838], dx
lea edx, [ecx + 0x2f]
mov word [0x4be83a], dx
mov edx, eax
lea eax, [ecx + 0x2c]
mov word [0x4be842], ax
mov eax, ecx
mov word [0x4be83c], dx
mov dword [0x4be83e], 0xddc2dde5
mov word [0x4be844], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4be834]
add eax, 2
mov word [eax + 0x4be976], dx
cmp eax, 0x12
jb 0x411a6a
mov eax, 0x4be978
ret

Function at 0x41210d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2ba0], 1
jne 0x412137
or dword [0x4c2ba0], 1
mov dword [0x4be848], 0xdcc5de8c
mov word [0x4be84c], 0x8edc
mov byte [0x4be84e], 0xb0
xor eax, eax
mov cl, byte [eax + 0x4be848]
xor cl, 0xb0
mov byte [eax + 0x4be98c], cl
inc eax
cmp eax, 7
jb 0x412139
mov eax, 0x4be98c
ret

Function at 0x412154
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b9c], 1
jne 0x41217e
or dword [0x4c2b9c], 1
mov dword [0x4be850], 0xdcc5de8c
mov word [0x4be854], 0x8edc
mov byte [0x4be856], 0xb0
xor eax, eax
mov cl, byte [eax + 0x4be850]
xor cl, 0xb0
mov byte [eax + 0x4be994], cl
inc eax
cmp eax, 7
jb 0x412180
mov eax, 0x4be994
ret

Function at 0x41219b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b94], 1
jne 0x4121bf
or dword [0x4c2b94], 1
mov dword [0x4be85c], 0xdfd3eb90
mov dword [0x4be860], 0xb08dd5d4
xor eax, eax
mov cl, byte [eax + 0x4be85c]
xor cl, 0xb0
mov byte [eax + 0x4be9a0], cl
inc eax
cmp eax, 8
jb 0x4121c1
mov eax, 0x4be9a0
ret
Function at 0x412f00
Capabilities:
Encode data using xor

Disassembly:
push esi
push edi
push 0x31
pop ecx
mov esi, 0x492ad8
mov edi, 0x4c2f40
push 0x492b9c
rep movsd dword es:[edi], dword [esi]
call fcn.0044a600
pop ecx
pop edi
pop esi
cmp eax, 0xffffffff
jne 0x412f26
xor al, al
ret
push 0x492c08
call fcn.0044a550
pop ecx
cmp eax, 0xffffffff
je 0x412f23
push 0x492d10
call fcn.00448fc0
pop ecx
cmp eax, 0xffffffff
je 0x412f23
test byte [0x4c2b88], 1
jne 0x412f67
or dword [0x4c2b88], 1
mov dword [0x4be9c0], 0x83d3dac1
mov byte [0x4be9c4], 0xb2
xor eax, eax
mov cl, byte [eax + 0x4be9c0]
xor cl, 0xb2
mov byte [eax + 0x4bea8c], cl
inc eax
cmp eax, 5
jb 0x412f69
push 0x4bea8c
call fcn.0044a670
pop ecx
mov dword [0x4b8928], eax
test eax, eax
js 0x412f23
call fcn.00412ff5
push eax
call fcn.00449030
pop ecx
mov dword [0x4b892c], eax
test eax, eax
js 0x412f23
test byte [0x4c2b80], 1
jne 0x412fc5
or dword [0x4c2b80], 1
mov dword [0x4be9d0], 0xb2c1d7d3
xor eax, eax
mov cl, byte [eax + 0x4be9d0]
xor cl, 0xb2
mov byte [eax + 0x4bea9c], cl
inc eax
cmp eax, 4
jb 0x412fc7
push 0x4bea9c
call fcn.0044a5c0
test eax, eax
mov dword [0x4b8930], eax
pop ecx
setns al
ret

Function at 0x412ff5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b84], 1
jne 0x413019
or dword [0x4c2b84], 1
mov dword [0x4be9c8], 0xc6c0ddd4
mov dword [0x4be9cc], 0xb2d3dcc7
xor eax, eax
mov cl, byte [eax + 0x4be9c8]
xor cl, 0xb2
mov byte [eax + 0x4bea94], cl
inc eax
cmp eax, 8
jb 0x41301b
mov eax, 0x4bea94
ret

Function at 0x413299
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b7c], 1
jne 0x4132d7
or dword [0x4c2b7c], 1
mov dword [0x4be9d4], 0xdb92c2df
mov dword [0x4be9d8], 0x92c6dbdc
mov dword [0x4be9dc], 0xdedbd3d4
mov word [0x4be9e0], 0xd6d7
mov byte [0x4be9e2], 0xb2
xor eax, eax
mov cl, byte [eax + 0x4be9d4]
xor cl, 0xb2
mov byte [eax + 0x4beaa0], cl
inc eax
cmp eax, 0xf
jb 0x4132d9
mov eax, 0x4beaa0
ret

Function at 0x4132f4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b78], 1
jne 0x413332
or dword [0x4c2b78], 1
mov dword [0x4be9e4], 0xdb92c2df
mov dword [0x4be9e8], 0x92c6dbdc
mov dword [0x4be9ec], 0xdedbd3d4
mov word [0x4be9f0], 0xd6d7
mov byte [0x4be9f2], 0xb2
xor eax, eax
mov cl, byte [eax + 0x4be9e4]
xor cl, 0xb2
mov byte [eax + 0x4beab0], cl
inc eax
cmp eax, 0xf
jb 0x413334
mov eax, 0x4beab0
ret

Function at 0x41334f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b74], 1
jne 0x41338d
or dword [0x4c2b74], 1
mov dword [0x4be9f4], 0xedc6d7c1
mov dword [0x4be9f8], 0x92c6dcdb
mov dword [0x4be9fc], 0xdedbd3d4
mov word [0x4bea00], 0xd6d7
mov byte [0x4bea02], 0xb2
xor eax, eax
mov cl, byte [eax + 0x4be9f4]
xor cl, 0xb2
mov byte [eax + 0x4beac0], cl
inc eax
cmp eax, 0xf
jb 0x41338f
mov eax, 0x4beac0
ret
Function at 0x4133aa
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b70], 1
jne 0x4133f3
or dword [0x4c2b70], 1
mov dword [0x4bea04], 0xdbc1dcc7
mov dword [0x4bea08], 0xd6d7dcd5
mov dword [0x4bea0c], 0xd3d7c0ed
mov dword [0x4bea10], 0xd3d492d6
mov dword [0x4bea14], 0xd6d7dedb
mov byte [0x4bea18], 0xb2
xor eax, eax
mov cl, byte [eax + 0x4bea04]
xor cl, 0xb2
mov byte [eax + 0x4bead0], cl
inc eax
cmp eax, 0x15
jb 0x4133f5
mov eax, 0x4bead0
ret

Function at 0x413410
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b6c], 1
jne 0x41344f
or dword [0x4c2b6c], 1
mov dword [0x4bea1c], 0xd5dcc0c2
mov dword [0x4bea20], 0xd9d3df92
mov dword [0x4bea24], 0xd3d492d7
mov dword [0x4bea28], 0xd6d7dedb
mov byte [0x4bea2c], 0xb2
xor eax, eax
mov cl, byte [eax + 0x4bea1c]
xor cl, 0xb2
mov byte [eax + 0x4beae8], cl
inc eax
cmp eax, 0x11
jb 0x413451
mov eax, 0x4beae8
ret

Function at 0x41346c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b68], 1
jne 0x4134ae
or dword [0x4c2b68], 1
mov dword [0x4bea30], 0xc6c0ddd4
mov dword [0x4bea34], 0xedd3dcc7
mov dword [0x4bea38], 0xd6d3d7c0
mov dword [0x4bea3c], 0xdbd3d492
mov dword [0x4bea40], 0xb2d6d7de
xor eax, eax
mov cl, byte [eax + 0x4bea30]
xor cl, 0xb2
mov byte [eax + 0x4beafc], cl
inc eax
cmp eax, 0x14
jb 0x4134b0
mov eax, 0x4beafc
ret

Function at 0x4134cb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b64], 1
jne 0x413513
or dword [0x4c2b64], 1
mov dword [0x4bea44], 0xc2cbc0d1
mov dword [0x4bea48], 0xdb92ddc6
mov dword [0x4bea4c], 0x92c6dbdc
mov dword [0x4bea50], 0xdedbd3d4
mov word [0x4bea54], 0xd6d7
mov byte [0x4bea56], 0xb2
xor eax, eax
mov cl, byte [eax + 0x4bea44]
xor cl, 0xb2
mov byte [eax + 0x4beb10], cl
inc eax
cmp eax, 0x13
jb 0x413515
mov eax, 0x4beb10
ret

Function at 0x413728
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b60], 1
jne 0x41374b
or dword [0x4c2b60], 1
mov dword [0x4bea58], 0xd6c1c1db
mov word [0x4bea5c], 0xb2d9
xor eax, eax
mov cl, byte [eax + 0x4bea58]
xor cl, 0xb2
mov byte [eax + 0x4beb24], cl
inc eax
cmp eax, 6
jb 0x41374d
mov eax, 0x4beb24
ret

Function at 0x413768
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b5c], 1
jne 0x413795
or dword [0x4c2b5c], 1
mov dword [0x4bea60], 0xd0c0c7da
mov dword [0x4bea64], 0xc0c7d6d3
mov word [0x4bea68], 0xb2c0
xor eax, eax
mov cl, byte [eax + 0x4bea60]
xor cl, 0xb2
mov byte [eax + 0x4beb2c], cl
inc eax
cmp eax, 0xa
jb 0x413797
mov eax, 0x4beb2c
ret

Function at 0x413875
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b58], 1
jne 0x4138a2
or dword [0x4c2b58], 1
mov dword [0x4bea6c], 0xd0c0c7da
mov dword [0x4bea70], 0xc0c7d6d3
mov word [0x4bea74], 0xb2c0
xor eax, eax
mov cl, byte [eax + 0x4bea6c]
xor cl, 0xb2
mov byte [eax + 0x4beb38], cl
inc eax
cmp eax, 0xa
jb 0x4138a4
mov eax, 0x4beb38
ret
Function at 0x413f8e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b54], 1
jne 0x413fd6
or dword [0x4c2b54], 1
mov dword [0x4beb44], 0xc4cdc6d7
mov dword [0x4beb48], 0xdd94dbc0
mov dword [0x4beb4c], 0x94c0ddda
mov dword [0x4beb50], 0xd8ddd5d2
mov word [0x4beb54], 0xd0d1
mov byte [0x4beb56], 0xb4
xor eax, eax
mov cl, byte [eax + 0x4beb44]
xor cl, 0xb4
mov byte [eax + 0x4bec58], cl
inc eax
cmp eax, 0x13
jb 0x413fd8
mov eax, 0x4bec58
ret

Function at 0x413ff5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b50], 1
jne 0x41403d
or dword [0x4c2b50], 1
mov dword [0x4beb58], 0xc4cdc6d7
mov dword [0x4beb5c], 0xdd94dbc0
mov dword [0x4beb60], 0x94c0ddda
mov dword [0x4beb64], 0xd8ddd5d2
mov word [0x4beb68], 0xd0d1
mov byte [0x4beb6a], 0xb4
xor eax, eax
mov cl, byte [eax + 0x4beb58]
xor cl, 0xb4
mov byte [eax + 0x4bec6c], cl
inc eax
cmp eax, 0x13
jb 0x41403f
mov eax, 0x4bec6c
ret

Function at 0x41405a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b48], 1
jne 0x4140a2
or dword [0x4c2b48], 1
mov dword [0x4beb74], 0xc4cdc6d7
mov dword [0x4beb78], 0xdd94dbc0
mov dword [0x4beb7c], 0x94c0ddda
mov dword [0x4beb80], 0xd8ddd5d2
mov word [0x4beb84], 0xd0d1
mov byte [0x4beb86], 0xb4
xor eax, eax
mov cl, byte [eax + 0x4beb74]
xor cl, 0xb4
mov byte [eax + 0x4bec88], cl
inc eax
cmp eax, 0x13
jb 0x4140a4
mov eax, 0x4bec88
ret

Function at 0x4140bf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b40], 1
jne 0x414107
or dword [0x4c2b40], 1
mov dword [0x4beb8c], 0xc4cdc6d7
mov dword [0x4beb90], 0xdd94dbc0
mov dword [0x4beb94], 0x94c0ddda
mov dword [0x4beb98], 0xd8ddd5d2
mov word [0x4beb9c], 0xd0d1
mov byte [0x4beb9e], 0xb4
xor eax, eax
mov cl, byte [eax + 0x4beb8c]
xor cl, 0xb4
mov byte [eax + 0x4beca0], cl
inc eax
cmp eax, 0x13
jb 0x414109
mov eax, 0x4beca0
ret

Function at 0x414124
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b3c], 1
jne 0x41415b
or dword [0x4c2b3c], 1
mov dword [0x4beba0], 0xc4cdc6d7
mov dword [0x4beba4], 0xd294dbc0
mov dword [0x4beba8], 0xd1d8ddd5
mov word [0x4bebac], 0xb4d0
xor eax, eax
mov cl, byte [eax + 0x4beba0]
xor cl, 0xb4
mov byte [eax + 0x4becb4], cl
inc eax
cmp eax, 0xe
jb 0x41415d
mov eax, 0x4becb4
ret

Function at 0x414178
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b38], 1
jne 0x4141af
or dword [0x4c2b38], 1
mov dword [0x4bebb0], 0xc4cdc6d7
mov dword [0x4bebb4], 0xd294dbc0
mov dword [0x4bebb8], 0xd1d8ddd5
mov word [0x4bebbc], 0xb4d0
xor eax, eax
mov cl, byte [eax + 0x4bebb0]
xor cl, 0xb4
mov byte [eax + 0x4becc4], cl
inc eax
cmp eax, 0xe
jb 0x4141b1
mov eax, 0x4becc4
ret

Function at 0x4141cc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b34], 1
jne 0x4141f9
or dword [0x4c2b34], 1
mov dword [0x4bebc0], 0xc4c6d1dc
mov dword [0x4bebc4], 0xc6d1d09f
mov word [0x4bebc8], 0xb4c4
xor eax, eax
mov cl, byte [eax + 0x4bebc0]
xor cl, 0xb4
mov byte [eax + 0x4becd4], cl
inc eax
cmp eax, 0xa
jb 0x4141fb
mov eax, 0x4becd4
ret
Function at 0x414216
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b30], 1
jne 0x41424d
or dword [0x4c2b30], 1
mov dword [0x4bebcc], 0xc4cdc6d7
mov dword [0x4bebd0], 0xd294dbc0
mov dword [0x4bebd4], 0xd1d8ddd5
mov word [0x4bebd8], 0xb4d0
xor eax, eax
mov cl, byte [eax + 0x4bebcc]
xor cl, 0xb4
mov byte [eax + 0x4bece0], cl
inc eax
cmp eax, 0xe
jb 0x41424f
mov eax, 0x4bece0
ret

Function at 0x41426a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b2c], 1
jne 0x4142a1
or dword [0x4c2b2c], 1
mov dword [0x4bebdc], 0xc4cdc6d7
mov dword [0x4bebe0], 0xd294dbc0
mov dword [0x4bebe4], 0xd1d8ddd5
mov word [0x4bebe8], 0xb4d0
xor eax, eax
mov cl, byte [eax + 0x4bebdc]
xor cl, 0xb4
mov byte [eax + 0x4becf0], cl
inc eax
cmp eax, 0xe
jb 0x4142a3
mov eax, 0x4becf0
ret

Function at 0x41436f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b28], 1
jne 0x4143a6
or dword [0x4c2b28], 1
mov dword [0x4bebec], 0xc4cdc6d7
mov dword [0x4bebf0], 0xd294dbc0
mov dword [0x4bebf4], 0xd1d8ddd5
mov word [0x4bebf8], 0xb4d0
xor eax, eax
mov cl, byte [eax + 0x4bebec]
xor cl, 0xb4
mov byte [eax + 0x4bed00], cl
inc eax
cmp eax, 0xe
jb 0x4143a8
mov eax, 0x4bed00
ret

Function at 0x414555
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b24], 1
jne 0x41458c
or dword [0x4c2b24], 1
mov dword [0x4bebfc], 0xc4cdc6d7
mov dword [0x4bec00], 0xd294dbc0
mov dword [0x4bec04], 0xd1d8ddd5
mov word [0x4bec08], 0xb4d0
xor eax, eax
mov cl, byte [eax + 0x4bebfc]
xor cl, 0xb4
mov byte [eax + 0x4bed10], cl
inc eax
cmp eax, 0xe
jb 0x41458e
mov eax, 0x4bed10
ret

Function at 0x4145a9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b20], 1
jne 0x4145e0
or dword [0x4c2b20], 1
mov dword [0x4bec0c], 0xc4cdc6d7
mov dword [0x4bec10], 0xd294dbc0
mov dword [0x4bec14], 0xd1d8ddd5
mov word [0x4bec18], 0xb4d0
xor eax, eax
mov cl, byte [eax + 0x4bec0c]
xor cl, 0xb4
mov byte [eax + 0x4bed20], cl
inc eax
cmp eax, 0xe
jb 0x4145e2
mov eax, 0x4bed20
ret
Function at 0x4145fd
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x48a49b
call fcn.00489c78
sub esp, 0x10
push ebx
push esi
mov esi, 0x110
push esi
call fcn.004643f0
mov ebx, eax
pop ecx
test ebx, ebx
je 0x41462e
push esi
push 0
push ebx
call fcn.00466f50
add esp, 0xc
mov esi, ebx
jmp 0x414630
xor esi, esi
mov dword [ebp - 0x10], esi
and dword [ebp - 4], 0
mov eax, dword [edi + 4]
mov dword [esi + 0x100], eax
mov eax, dword [edi + 8]
sub eax, 0x14
test byte [0x4c2b18], 1
mov dword [esi + 0x104], eax
mov eax, dword [edi + 0xc]
mov dword [esi + 0x108], eax
mov eax, dword [ebp + 8]
mov dword [esi + 0x10c], eax
jne 0x41467f
or dword [0x4c2b18], 1
mov dword [0x4bec30], 0xd6dbd8d6
mov byte [0x4bec34], 0xb4
xor eax, eax
mov cl, byte [eax + 0x4bec30]
xor cl, 0xb4
mov byte [eax + 0x4bed30], cl
inc eax
cmp eax, 5
jb 0x414681
push 0
push 0x4bed30
push esi
push 0x4142be
push dword [edi]
call fcn.0045123a
add esp, 0x14
test eax, eax
je 0x4146e9
push 0
call fcn.004147d9
push eax
push 0xffffffffffffffff
push dword [edi]
call fcn.0044fee2
mov dword [ebp + 8], eax
add esp, 0x10
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00463995
push 0x4aec28
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], vtable.std::runtime_error.0
call fcn.0046d8b5
push esi
call fcn.004642b3
pop ecx
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4

Function at 0x414700
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
test byte [0x4c2b10], 1
jne 0x41473d
or dword [0x4c2b10], 1
mov dword [0x4bec48], 0xc4cdc6d7
mov dword [0x4bec4c], 0xd294dbc0
mov dword [0x4bec50], 0xd1d8ddd5
mov word [0x4bec54], 0xb4d0
xor eax, eax
mov cl, byte [eax + 0x4bec48]
xor cl, 0xb4
mov byte [eax + 0x4bed48], cl
inc eax
cmp eax, 0xe
jb 0x41473f
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0x4bed48
call fcn.00463995
push 0x4aec28
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x10], vtable.std::runtime_error.0
call fcn.0046d8b5
int3

Function at 0x41477d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b1c], 1
jne 0x4147bc
or dword [0x4c2b1c], 1
mov dword [0x4bec1c], 0xebd5c1d8
mov dword [0x4bec20], 0xd8d5d7c4
mov dword [0x4bec24], 0xd5d294d8
mov dword [0x4bec28], 0xd0d1d8dd
mov byte [0x4bec2c], 0xb4
xor eax, eax
mov cl, byte [eax + 0x4bec1c]
xor cl, 0xb4
mov byte [eax + 0x4bed58], cl
inc eax
cmp eax, 0x11
jb 0x4147be
mov eax, 0x4bed58
ret

Function at 0x4147d9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b14], 1
jne 0x414811
or dword [0x4c2b14], 1
mov dword [0x4bec38], 0xebd5c1d8
mov dword [0x4bec3c], 0xd0d5dbd8
mov dword [0x4bec40], 0xddd5d294
mov dword [0x4bec44], 0xb4d0d1d8
xor eax, eax
mov cl, byte [eax + 0x4bec38]
xor cl, 0xb4
mov byte [eax + 0x4bed38], cl
inc eax
cmp eax, 0x10
jb 0x414813
mov eax, 0x4bed38
ret