joyce8/EMBER2024-capa huggingface dataset:
Function at 0x3f3ad9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d94], 1
jne 0x3f3b0e
or dword [0x498d94], 1
mov dword [0x492ce0], 0x2f3e3517
mov dword [0x492ce4], 0x7a603f36
mov dword [0x492ce8], 0x5057297f
mov byte [0x492cec], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492ce0]
xor cl, 0x5a
mov byte [eax + 0x49338c], cl
inc eax
cmp eax, 0xd
jb 0x3f3b10
mov eax, 0x49338c
ret

Function at 0x3f3b2b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d90], 1
jne 0x3f3b6a
or dword [0x498d90], 1
mov dword [0x492cf0], 0x3f28320e
mov dword [0x492cf4], 0x7a603e3b
mov dword [0x492cf8], 0x227f226a
mov dword [0x492cfc], 0x50575057
mov byte [0x492d00], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492cf0]
xor cl, 0x5a
mov byte [eax + 0x49339c], cl
inc eax
cmp eax, 0x11
jb 0x3f3b6c
mov eax, 0x49339c
ret

Function at 0x3f3b87
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d8c], 1
jne 0x3f3bc5
or dword [0x498d8c], 1
mov dword [0x492d04], 0x3f39221f
mov dword [0x492d08], 0x35332e2a
mov dword [0x492d0c], 0x3e7f7a34
mov word [0x492d10], 0x5057
mov byte [0x492d12], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492d04]
xor cl, 0x5a
mov byte [eax + 0x4933b0], cl
inc eax
cmp eax, 0xf
jb 0x3f3bc7
mov eax, 0x4933b0
ret

Function at 0x3f3be2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d88], 1
jne 0x3f3c20
or dword [0x498d88], 1
mov dword [0x492d14], 0x3b393516
mov dword [0x492d18], 0x3435332e
mov dword [0x492d1c], 0x2a7f7a60
mov word [0x492d20], 0x5057
mov byte [0x492d22], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492d14]
xor cl, 0x5a
mov byte [eax + 0x4933c0], cl
inc eax
cmp eax, 0xf
jb 0x3f3c22
mov eax, 0x4933c0
ret

Function at 0x3f3c3d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d84], 1
jne 0x3f3c7e
or dword [0x498d84], 1
mov dword [0x492d24], 0x3f2a230e
mov dword [0x492d28], 0x297f7a60
mov dword [0x492d2c], 0x226a727a
mov dword [0x492d30], 0x5773227f
mov word [0x492d34], 0x5a50
xor eax, eax
mov cl, byte [eax + 0x492d24]
xor cl, 0x5a
mov byte [eax + 0x4933d0], cl
inc eax
cmp eax, 0x12
jb 0x3f3c80
mov eax, 0x4933d0
ret

Function at 0x3f3c9b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d80], 1
jne 0x3f3d23
or dword [0x498d80], 1
mov dword [0x492d38], 0x3b2e3f1e
mov dword [0x492d3c], 0x60293633
mov dword [0x492d40], 0x33280e7a
mov dword [0x492d44], 0x2e7a3e3f
mov dword [0x492d48], 0x3f287a35
mov dword [0x492d4c], 0x3c7a3e3b
mov dword [0x492d50], 0x7a373528
mov dword [0x492d54], 0x35373f37
mov dword [0x492d58], 0x3b7a2328
mov dword [0x492d5c], 0x3f283e3e
mov dword [0x492d60], 0x7f7a2929
mov dword [0x492d64], 0x5a50572a
xor eax, eax
mov cl, byte [eax + 0x492d38]
xor cl, 0x5a
mov byte [eax + 0x4933e4], cl
inc eax
cmp eax, 0x30
jb 0x3f3d25
mov eax, 0x4933e4
ret
Function at 0x3f3d40
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d7c], 1
jne 0x3f3dd2
or dword [0x498d7c], 1
mov dword [0x492d68], 0x3b2e3f1e
mov dword [0x492d6c], 0x60293633
mov dword [0x492d70], 0x33280e7a
mov dword [0x492d74], 0x2e7a3e3f
mov dword [0x492d78], 0x282d7a35
mov dword [0x492d7c], 0x7a3f2e33
mov dword [0x492d80], 0x377a352e
mov dword [0x492d84], 0x2835373f
mov dword [0x492d88], 0x3e3b7a23
mov dword [0x492d8c], 0x293f283e
mov dword [0x492d90], 0x2a7f7a29
mov word [0x492d94], 0x5057
mov byte [0x492d96], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492d68]
xor cl, 0x5a
mov byte [eax + 0x493414], cl
inc eax
cmp eax, 0x2f
jb 0x3f3dd4
mov eax, 0x493414
ret

Function at 0x3f3def
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d78], 1
jne 0x3f3e82
or dword [0x498d78], 1
mov dword [0x492d98], 0x3b2e3f1e
mov dword [0x492d9c], 0x60293633
mov dword [0x492da0], 0x33280e7a
mov dword [0x492da4], 0x2e7a3e3f
mov dword [0x492da8], 0x223f7a35
mov dword [0x492dac], 0x2e2f393f
mov dword [0x492db0], 0x3f377a3f
mov dword [0x492db4], 0x23283537
mov dword [0x492db8], 0x7a2e3b7a
mov dword [0x492dbc], 0x283e3e3b
mov dword [0x492dc0], 0x7a29293f
mov dword [0x492dc4], 0x50572a7f
mov byte [0x492dc8], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492d98]
xor cl, 0x5a
mov byte [eax + 0x493444], cl
inc eax
cmp eax, 0x31
jb 0x3f3e84
mov eax, 0x493444
ret

Function at 0x3f3e9f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d74], 1
jne 0x3f3ed6
or dword [0x498d74], 1
mov dword [0x492dcc], 0x3d3b361c
mov dword [0x492dd0], 0x6a7a6029
mov dword [0x492dd4], 0x57227f22
mov word [0x492dd8], 0x5a50
xor eax, eax
mov cl, byte [eax + 0x492dcc]
xor cl, 0x5a
mov byte [eax + 0x493478], cl
inc eax
cmp eax, 0xe
jb 0x3f3ed8
mov eax, 0x493478
ret

Function at 0x3f3ef3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d70], 1
jne 0x3f3f2a
or dword [0x498d70], 1
mov dword [0x492ddc], 0x3b283b0a
mov dword [0x492de0], 0x3f2e3f37
mov dword [0x492de4], 0x57602928
mov word [0x492de8], 0x5a50
xor eax, eax
mov cl, byte [eax + 0x492ddc]
xor cl, 0x5a
mov byte [eax + 0x493488], cl
inc eax
cmp eax, 0xe
jb 0x3f3f2c
mov eax, 0x493488
ret

Function at 0x3f3f47
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d6c], 1
jne 0x3f3f90
or dword [0x498d6c], 1
mov dword [0x492dec], 0x283b0a53
mov dword [0x492df0], 0x2e3f373b
mov dword [0x492df4], 0x7f01283f
mov dword [0x492df8], 0x7a60073e
mov dword [0x492dfc], 0x50572a7f
mov byte [0x492e00], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492dec]
xor cl, 0x5a
mov byte [eax + 0x493498], cl
inc eax
cmp eax, 0x15
jb 0x3f3f92
mov eax, 0x493498
ret

Function at 0x3f3fb0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d68], 1
jne 0x3f3fe8
or dword [0x498d68], 1
mov dword [0x492e04], 0x7a121f09
mov dword [0x492e08], 0x363b341b
mov dword [0x492e0c], 0x29332923
mov dword [0x492e10], 0x5a505760
xor eax, eax
mov cl, byte [eax + 0x492e04]
xor cl, 0x5a
mov byte [eax + 0x4934b0], cl
inc eax
cmp eax, 0x10
jb 0x3f3fea
mov eax, 0x4934b0
ret
Function at 0x3f4005
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d64], 1
jne 0x3f404d
or dword [0x498d64], 1
mov dword [0x492e14], 0x30381553
mov dword [0x492e18], 0x7a2e393f
mov dword [0x492e1c], 0x3f2a232e
mov dword [0x492e20], 0x297f7a60
mov word [0x492e24], 0x5057
mov byte [0x492e26], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492e14]
xor cl, 0x5a
mov byte [eax + 0x4934c0], cl
inc eax
cmp eax, 0x13
jb 0x3f404f
mov eax, 0x4934c0
ret

Function at 0x3f406a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d60], 1
jne 0x3f40d3
or dword [0x498d60], 1
mov dword [0x492e28], 0x333b1c53
mov dword [0x492e2c], 0x7a3e3f36
mov dword [0x492e30], 0x3c7a352e
mov dword [0x492e34], 0x35363635
mov dword [0x492e38], 0x352a7a2d
mov dword [0x492e3c], 0x3f2e3433
mov dword [0x492e40], 0x32397a28
mov dword [0x492e44], 0x5734333b
mov word [0x492e48], 0x5a50
xor eax, eax
mov cl, byte [eax + 0x492e28]
xor cl, 0x5a
mov byte [eax + 0x4934d4], cl
inc eax
cmp eax, 0x22
jb 0x3f40d5
mov eax, 0x4934d4
ret

Function at 0x3f40f0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d5c], 1
jne 0x3f4113
or dword [0x498d5c], 1
mov dword [0x492e4c], 0x3e2e291a
mov word [0x492e50], 0x5a1a
xor eax, eax
mov cl, byte [eax + 0x492e4c]
xor cl, 0x5a
mov byte [eax + 0x4934f8], cl
inc eax
cmp eax, 6
jb 0x3f4115
mov eax, 0x4934f8
ret

Function at 0x3f4130
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d58], 1
jne 0x3f4167
or dword [0x498d58], 1
mov dword [0x492e54], 0x2e342f28
mov dword [0x492e58], 0x53f3733
mov dword [0x492e5c], 0x3528283f
mov word [0x492e60], 0x5a28
xor eax, eax
mov cl, byte [eax + 0x492e54]
xor cl, 0x5a
mov byte [eax + 0x493500], cl
inc eax
cmp eax, 0xe
jb 0x3f4169
mov eax, 0x493500
ret

Function at 0x3f4184
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d54], 1
jne 0x3f41b2
or dword [0x498d54], 1
mov dword [0x492e64], 0x3d343b28
mov dword [0x492e68], 0x283f053f
mov dword [0x492e6c], 0x5a283528
xor eax, eax
mov cl, byte [eax + 0x492e64]
xor cl, 0x5a
mov byte [eax + 0x493510], cl
inc eax
cmp eax, 0xc
jb 0x3f41b4
mov eax, 0x493510
ret

Function at 0x3f41cf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d50], 1
jne 0x3f420d
or dword [0x498d50], 1
mov dword [0x492e70], 0x283f2c35
mov dword [0x492e74], 0x2d35363c
mov dword [0x492e78], 0x28283f05
mov word [0x492e7c], 0x2835
mov byte [0x492e7e], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492e70]
xor cl, 0x5a
mov byte [eax + 0x49351c], cl
inc eax
cmp eax, 0xf
jb 0x3f420f
mov eax, 0x49351c
ret

Function at 0x3f422a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d4c], 1
jne 0x3f4262
or dword [0x498d4c], 1
mov dword [0x492e80], 0x3f3e342f
mov dword [0x492e84], 0x35363c28
mov dword [0x492e88], 0x283f052d
mov dword [0x492e8c], 0x5a283528
xor eax, eax
mov cl, byte [eax + 0x492e80]
xor cl, 0x5a
mov byte [eax + 0x49352c], cl
inc eax
cmp eax, 0x10
jb 0x3f4264
mov eax, 0x49352c
ret
Function at 0x3f427f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d48], 1
jne 0x3f42ad
or dword [0x498d48], 1
mov dword [0x492e90], 0x333d3536
mov dword [0x492e94], 0x283f0539
mov dword [0x492e98], 0x5a283528
xor eax, eax
mov cl, byte [eax + 0x492e90]
xor cl, 0x5a
mov byte [eax + 0x49353c], cl
inc eax
cmp eax, 0xc
jb 0x3f42af
mov eax, 0x49353c
ret

Function at 0x3f42ca
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d44], 1
jne 0x3f42ff
or dword [0x498d44], 1
mov dword [0x492e9c], 0x3b37353e
mov dword [0x492ea0], 0x3f053433
mov dword [0x492ea4], 0x28352828
mov byte [0x492ea8], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492e9c]
xor cl, 0x5a
mov byte [eax + 0x493548], cl
inc eax
cmp eax, 0xd
jb 0x3f4301
mov eax, 0x493548
ret

Function at 0x3f431c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d40], 1
jne 0x3f435b
or dword [0x498d40], 1
mov dword [0x492eac], 0x3b2c3433
mov dword [0x492eb0], 0x53e3336
mov dword [0x492eb4], 0x2f3d283b
mov dword [0x492eb8], 0x2e343f37
mov byte [0x492ebc], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492eac]
xor cl, 0x5a
mov byte [eax + 0x493558], cl
inc eax
cmp eax, 0x11
jb 0x3f435d
mov eax, 0x493558
ret

Function at 0x3f4378
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d3c], 1
jne 0x3f43ad
or dword [0x498d3c], 1
mov dword [0x492ec0], 0x3d343f36
mov dword [0x492ec4], 0x3f05322e
mov dword [0x492ec8], 0x28352828
mov byte [0x492ecc], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492ec0]
xor cl, 0x5a
mov byte [eax + 0x49356c], cl
inc eax
cmp eax, 0xd
jb 0x3f43af
mov eax, 0x49356c
ret

Function at 0x3f43ca
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d38], 1
jne 0x3f43ff
or dword [0x498d38], 1
mov dword [0x492ed0], 0x52e2f35
mov dword [0x492ed4], 0x28053c35
mov dword [0x492ed8], 0x3f3d343b
mov byte [0x492edc], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492ed0]
xor cl, 0x5a
mov byte [eax + 0x49357c], cl
inc eax
cmp eax, 0xd
jb 0x3f4401
mov eax, 0x49357c
ret

Function at 0x3f441c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d34], 1
jne 0x3f4449
or dword [0x498d34], 1
mov dword [0x492ee0], 0x3f39223f
mov dword [0x492ee4], 0x35332e2a
mov word [0x492ee8], 0x5a34
xor eax, eax
mov cl, byte [eax + 0x492ee0]
xor cl, 0x5a
mov byte [eax + 0x49358c], cl
inc eax
cmp eax, 0xa
jb 0x3f444b
mov eax, 0x49358c
ret

Function at 0x3f4466
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d30], 1
jne 0x3f44c5
or dword [0x498d30], 1
mov dword [0x492eec], 0x3e2e2953
mov dword [0x492ef0], 0x223f6060
mov dword [0x492ef4], 0x2e2a3f39
mov dword [0x492ef8], 0x60343533
mov dword [0x492efc], 0x3b322d60
mov dword [0x492f00], 0x6073722e
mov dword [0x492f04], 0x57297f7a
mov word [0x492f08], 0x5a50
xor eax, eax
mov cl, byte [eax + 0x492eec]
xor cl, 0x5a
mov byte [eax + 0x493598], cl
inc eax
cmp eax, 0x1e
jb 0x3f44c7
mov eax, 0x493598
ret
Function at 0x3f44e2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d2c], 1
jne 0x3f4556
or dword [0x498d2c], 1
mov dword [0x492f0c], 0x333b1c53
mov dword [0x492f10], 0x7a3e3f36
mov dword [0x492f14], 0x3d7a352e
mov dword [0x492f18], 0x297a2e3f
mov dword [0x492f1c], 0x60603e2e
mov dword [0x492f20], 0x3f39223f
mov dword [0x492f24], 0x35332e2a
mov dword [0x492f28], 0x2d606034
mov dword [0x492f2c], 0x722e3b32
mov dword [0x492f30], 0x5a505773
xor eax, eax
mov cl, byte [eax + 0x492f0c]
xor cl, 0x5a
mov byte [eax + 0x4935b8], cl
inc eax
cmp eax, 0x28
jb 0x3f4558
mov eax, 0x4935b8
ret

Function at 0x3f4573
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d28], 1
jne 0x3f45a7
or dword [0x498d28], 1
mov dword [0x492f34], 0x37353905
mov dword [0x492f38], 0x28283f05
mov word [0x492f3c], 0x2835
mov byte [0x492f3e], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492f34]
xor cl, 0x5a
mov byte [eax + 0x4935e0], cl
inc eax
cmp eax, 0xb
jb 0x3f45a9
mov eax, 0x4935e0
ret

Function at 0x3f45c4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d24], 1
jne 0x3f462d
or dword [0x498d24], 1
mov dword [0x492f40], 0x35390553
mov dword [0x492f44], 0x283f0537
mov dword [0x492f48], 0x60283528
mov dword [0x492f4c], 0x28281f60
mov dword [0x492f50], 0x3f172835
mov dword [0x492f54], 0x3d3b2929
mov dword [0x492f58], 0x6073723f
mov dword [0x492f5c], 0x57297f7a
mov word [0x492f60], 0x5a50
xor eax, eax
mov cl, byte [eax + 0x492f40]
xor cl, 0x5a
mov byte [eax + 0x4935ec], cl
inc eax
cmp eax, 0x22
jb 0x3f462f
mov eax, 0x4935ec
ret

Function at 0x3f464a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d20], 1
jne 0x3f46c8
or dword [0x498d20], 1
mov dword [0x492f64], 0x333b1c53
mov dword [0x492f68], 0x7a3e3f36
mov dword [0x492f6c], 0x3d7a352e
mov dword [0x492f70], 0x57a2e3f
mov dword [0x492f74], 0x5373539
mov dword [0x492f78], 0x3528283f
mov dword [0x492f7c], 0x1f606028
mov dword [0x492f80], 0x28352828
mov dword [0x492f84], 0x29293f17
mov dword [0x492f88], 0x723f3d3b
mov dword [0x492f8c], 0x5a505773
xor eax, eax
mov cl, byte [eax + 0x492f64]
xor cl, 0x5a
mov byte [eax + 0x493610], cl
inc eax
cmp eax, 0x2c
jb 0x3f46ca
mov eax, 0x493610
ret

Function at 0x3f46e5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d1c], 1
jne 0x3f4760
or dword [0x498d1c], 1
mov dword [0x492f90], 0x393b2e09
mov dword [0x492f94], 0x2f3e7a31
mov dword [0x492f98], 0x3f7a2a37
mov dword [0x492f9c], 0x28352828
mov dword [0x492fa0], 0x35197a60
mov dword [0x492fa4], 0x223f2e34
mov dword [0x492fa8], 0x393f082e
mov dword [0x492fac], 0x7a3e2835
mov dword [0x492fb0], 0x7a293b2d
mov dword [0x492fb4], 0x36362f34
mov byte [0x492fb8], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492f90]
xor cl, 0x5a
mov byte [eax + 0x49363c], cl
inc eax
cmp eax, 0x29
jb 0x3f4762
mov eax, 0x49363c
ret
Function at 0x3f477d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d18], 1
jne 0x3f47f7
or dword [0x498d18], 1
mov dword [0x492fbc], 0x393b2e09
mov dword [0x492fc0], 0x2f3e7a31
mov dword [0x492fc4], 0x3f7a2a37
mov dword [0x492fc8], 0x28352828
mov dword [0x492fcc], 0x23097a60
mov dword [0x492fd0], 0x33341337
mov dword [0x492fd4], 0x363b332e
mov dword [0x492fd8], 0x7a3f2033
mov dword [0x492fdc], 0x36333b3c
mov word [0x492fe0], 0x3e3f
mov byte [0x492fe2], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492fbc]
xor cl, 0x5a
mov byte [eax + 0x493668], cl
inc eax
cmp eax, 0x27
jb 0x3f47f9
mov eax, 0x493668
ret

Function at 0x3f4814
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d14], 1
jne 0x3f487a
or dword [0x498d14], 1
mov dword [0x492fe4], 0x33312966
mov dword [0x492fe8], 0x3e3f2a2a
mov dword [0x492fec], 0x3b283c7a
mov dword [0x492ff0], 0x7a763f37
mov dword [0x492ff4], 0x2d7a190a
mov dword [0x492ff8], 0x347a293b
mov dword [0x492ffc], 0x6436362f
mov word [0x493000], 0x5057
mov byte [0x493002], 0x5a
xor eax, eax
mov cl, byte [eax + 0x492fe4]
xor cl, 0x5a
mov byte [eax + 0x493690], cl
inc eax
cmp eax, 0x1f
jb 0x3f487c
mov eax, 0x493690
ret

Function at 0x3f4897
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d10], 1
jne 0x3f492a
or dword [0x498d10], 1
mov dword [0x493004], 0x33312966
mov dword [0x493008], 0x3e3f2a2a
mov dword [0x49300c], 0x3b283c7a
mov dword [0x493010], 0x7a763f37
mov dword [0x493014], 0x2d7a190a
mov dword [0x493018], 0x297a293b
mov dword [0x49301c], 0x7a3f373b
mov dword [0x493020], 0x287a293b
mov dword [0x493024], 0x282f2e3f
mov dword [0x493028], 0x3e3b7a34
mov dword [0x49302c], 0x293f283e
mov dword [0x493030], 0x50576429
mov byte [0x493034], 0x5a
xor eax, eax
mov cl, byte [eax + 0x493004]
xor cl, 0x5a
mov byte [eax + 0x4936b0], cl
inc eax
cmp eax, 0x31
jb 0x3f492c
mov eax, 0x4936b0
ret
Function at 0x3f4947
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16c4
call fcn.0044eb50
push ebx
push esi
push edi
call dword [0x46a094]
test byte [0x498d0c], 1
mov dword [ebp - 4], eax
jne 0x3f498e
or dword [0x498d0c], 1
mov dword [0x493038], 0x3e353766
mov dword [0x49303c], 0x653f362f
mov dword [0x493040], 0x5a646565
xor edi, edi
xor eax, eax
mov cl, byte [eax + 0x493038]
xor cl, 0x5a
mov byte [eax + 0x4936e4], cl
inc eax
cmp eax, 0xc
jb 0x3f4992
test byte [0x498d08], 1
mov dword [ebp - 8], 0x4936e4
jne 0x3f49dc
or dword [0x498d08], 1
mov dword [0x493044], 0x37232966
mov dword [0x493048], 0x65363538
mov dword [0x49304c], 0x5a646565
xor eax, eax
mov cl, byte [eax + 0x493044]
xor cl, 0x5a
mov byte [eax + 0x4936f0], cl
inc eax
cmp eax, 0xc
jb 0x3f49de
mov esi, 0x688
push esi
lea eax, [ebp - 0x6c0]
push edi
push eax
mov dword [ebp - 0x1c], 0x4936f0
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
call fcn.0043f010
mov eax, dword [ebp + 8]
cdq
add esp, 0xc
mov dword [ebp - 0x6c0], esi
mov esi, eax
lea eax, [ebp - 0x6c0]
push eax
mov ebx, edx
push ebx
push esi
push dword [ebp - 4]
call dword [0x46a3b0]
test eax, eax
je 0x3f4a43
lea eax, [ebp - 0x69c]
mov dword [ebp - 8], eax
push 0xffa
lea eax, [ebp - 0x16c0]
push edi
push eax
call fcn.0043f010
add esp, 0xc
lea eax, [ebp - 0x16c0]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x16c0], 0x58
mov dword [ebp - 0x1670], 0x7d0
call dword [0x46a3bc]
lea ecx, [ebp - 0x166c]
test eax, eax
jne 0x3f4a8f
mov ecx, dword [ebp - 0x1c]
test byte [0x498d04], 1
jne 0x3f4ac6
or dword [0x498d04], 1
mov dword [0x493050], 0x7f7a2a7f
mov dword [0x493054], 0x297f7b29
mov dword [0x493058], 0x7f226a71
mov word [0x49305c], 0x5a22
xor eax, eax
mov dl, byte [eax + 0x493050]
xor dl, 0x5a
mov byte [eax + 0x4936fc], dl
inc eax
cmp eax, 0xe
jb 0x3f4ac8
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push ecx
push dword [ebp - 8]
push dword [ebp + 8]
push 0x4936fc
push dword [ebp + 0xc]
call fcn.0043c23d
add esp, 0x1c
push 6
pop ecx
mov dword [ebp - 0xc], edi
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x18
call dword [0x46a3a4]
test eax, eax
je 0x3f4b3f
push dword [ebp - 0xc]
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
call fcn.003f4b8c
push eax
push dword [ebp + 0xc]
call fcn.0043c23d
add esp, 0x14
test byte [0x498cfc], 1
jne 0x3f4b5f
or dword [0x498cfc], 1
mov word [0x493070], 0x5057
mov byte [0x493072], 0x5a
xor eax, eax
mov cl, byte [eax + 0x493070]
xor cl, 0x5a
mov byte [eax + 0x49371c], cl
inc eax
cmp eax, 3
jb 0x3f4b61
push dword [ebp + 0xc]
push 0x49371c
call fcn.0043beb1
pop ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 8
Function at 0x3f4b8c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498d00], 1
jne 0x3f4bc4
or dword [0x498d00], 1
mov dword [0x493060], 0x297f727a
mov dword [0x493064], 0x7a3e7f60
mov dword [0x493068], 0x226a7a71
mov dword [0x49306c], 0x5a73227f
xor eax, eax
mov cl, byte [eax + 0x493060]
xor cl, 0x5a
mov byte [eax + 0x49370c], cl
inc eax
cmp eax, 0x10
jb 0x3f4bc6
mov eax, 0x49370c
ret

Function at 0x3f5e6e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498cf0], 1
jne 0x3f5ec3
or dword [0x498cf0], 1
mov dword [0x493740], 0x1f091a13
mov dword [0x493744], 0x1e091a0c
mov dword [0x493748], 0xb181a07
mov dword [0x49374c], 0x81f0712
mov dword [0x493750], 0xd070f1f
mov dword [0x493754], 0x4031419
mov word [0x493758], 0x5b04
xor eax, eax
mov cl, byte [eax + 0x493740]
xor cl, 0x5b
mov byte [eax + 0x493940], cl
inc eax
cmp eax, 0x1a
jb 0x3f5ec5
mov eax, 0x493940
ret

Function at 0x3f5fd4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498cec], 1
jne 0x3f5ffe
or dword [0x498cec], 1
mov dword [0x49375c], 0x3a0c160d
mov word [0x493760], 0x3e29
mov byte [0x493762], 0x5b
xor eax, eax
mov cl, byte [eax + 0x49375c]
xor cl, 0x5b
mov byte [eax + 0x49395c], cl
inc eax
cmp eax, 7
jb 0x3f6000
mov eax, 0x49395c
ret

Function at 0x3f601b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498ce8], 1
jne 0x3f6048
or dword [0x498ce8], 1
mov dword [0x493764], 0x2f29320d
mov dword [0x493768], 0xb373a2e
mov word [0x49376c], 0x5b18
xor eax, eax
mov cl, byte [eax + 0x493764]
xor cl, 0x5b
mov byte [eax + 0x493964], cl
inc eax
cmp eax, 0xa
jb 0x3f604a
mov eax, 0x493964
ret

Function at 0x3f6065
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498ce4], 1
jne 0x3f6099
or dword [0x498ce4], 1
mov dword [0x493770], 0x2f29320d
mov dword [0x493774], 0x19373a2e
mov word [0x493778], 0x2334
mov byte [0x49377a], 0x5b
xor eax, eax
mov cl, byte [eax + 0x493770]
xor cl, 0x5b
mov byte [eax + 0x493970], cl
inc eax
cmp eax, 0xb
jb 0x3f609b
mov eax, 0x493970
ret

Function at 0x3f60b6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498ce0], 1
jne 0x3f60da
or dword [0x498ce0], 1
mov dword [0x49377c], 0x3e353e1c
mov dword [0x493780], 0x5b383229
xor eax, eax
mov cl, byte [eax + 0x49377c]
xor cl, 0x5b
mov byte [eax + 0x49397c], cl
inc eax
cmp eax, 8
jb 0x3f60dc
mov eax, 0x49397c
ret
Function at 0x3f60f7
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x46337f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa8
and dword [esp], 0
test byte [0x498cdc], 1
push esi
jne 0x3f614a
or dword [0x498cdc], 1
mov dword [0x493784], 0x373f2f35
mov dword [0x493788], 0x373f7537
mov word [0x49378c], 0x5b37
xor eax, eax
mov cl, byte [eax + 0x493784]
xor cl, 0x5b
mov byte [eax + 0x493984], cl
inc eax
cmp eax, 0xa
jb 0x3f614c
push 0x493984
call dword [0x46a0cc]
mov esi, eax
test esi, esi
jne 0x3f61be
call dword [0x46a0a8]
push eax
lea eax, [esp + 0x40]
push eax
call fcn.0041a8c0
pop ecx
pop ecx
and dword [esp + 0xb4], esi
push eax
call fcn.003f6305
push eax
lea eax, [esp + 0x28]
push eax
call fcn.003f6b56
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 1
call fcn.003f5c3f
push 0x4844a8
mov eax, esi
push eax
call fcn.00445956
call fcn.003f636b
push eax
push esi
call dword [0x46a0c8]
test eax, eax
jne 0x3f621b
call dword [0x46a0a8]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0041a8c0
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 2
call fcn.003f63dd
push eax
lea eax, [esp + 0x44]
push eax
call fcn.003f6b56
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 3
call fcn.003f5c3f
push 0x4844a8
mov eax, esi
jmp 0x3f61b8
lea ecx, [esp + 4]
push ecx
push 0x18
lea ecx, [esp + 0x60]
push ecx
push 0
push dword [ebp + 8]
call eax
test eax, eax
jne 0x3f62a3
cmp dword [esp + 4], 0x18
jne 0x3f62a3
push dword [esp + 0x6c]
push eax
push 0x410
call dword [0x46a0c4]
test eax, eax
jne 0x3f62f2
call dword [0x46a0a8]
push eax
lea eax, [esp + 0x74]
push eax
call fcn.0041a8c0
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 6
call fcn.003f651d
push eax
lea eax, [esp + 0x94]
push eax
call fcn.003f6b56
add esp, 0xc
lea esi, [esp + 0x14]
mov byte [esp + 0xb4], 7
call fcn.003f5c3f
push 0x4844a8
mov eax, esi
jmp 0x3f61b8
call dword [0x46a0a8]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0041a8c0
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 4
call fcn.003f6490
push eax
lea eax, [esp + 0x44]
push eax
call fcn.003f6b56
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 5
call fcn.003f5c3f
push 0x4844a8
mov eax, esi
jmp 0x3f61b8
mov ecx, dword [esp + 0xac]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x3f6305
Capabilities:
Encode data using xor

Disassembly:
test byte [0x498cd8], 1
jne 0x3f634e
or dword [0x498cd8], 1
mov dword [0x493790], 0x3f3a3417
mov dword [0x493794], 0x29393217
mov dword [0x493798], 0x7b22293a
mov dword [0x49379c], 0x37323a3d
mov dword [0x4937a0], 0x7b613f3e
mov byte [0x4937a4], 0x5b
xor eax, eax
mov cl, byte [eax + 0x493790]
xor cl, 0x5b
mov byte [eax + 0x493990], cl
inc eax
cmp eax, 0x15
jb 0x3f6350
mov eax, 0x493990
ret