joyce8/EMBER2024-capa huggingface dataset:
Function at 0x42cda7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d5c], 1
jne 0x42ce2c
or dword [0x4c7d5c], 1
mov dword [0x4c6b0c], 0x7d787057
mov dword [0x4c6b10], 0x65317574
mov dword [0x4c6b14], 0x6372317e
mov dword [0x4c6b18], 0x74657074
mov dword [0x4c6b1c], 0x70647d31
mov dword [0x4c6b20], 0x70656231
mov dword [0x4c6b24], 0x39317465
mov dword [0x4c6b28], 0x7a637e66
mov dword [0x4c6b2c], 0x65316374
mov dword [0x4c6b30], 0x70746379
mov dword [0x4c6b34], 0x312b3875
mov byte [0x4c6b38], 0x11
xor eax, eax
mov cl, byte [eax + 0x4c6b0c]
xor cl, 0x11
mov byte [eax + 0x4c6bd4], cl
inc eax
cmp eax, 0x2d
jb 0x42ce2e
mov eax, 0x4c6bd4
ret

Function at 0x42ce49
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d4c], 1
jne 0x42ceb0
or dword [0x4c7d4c], 1
mov dword [0x4c6b48], 0x74317e5f
mov dword [0x4c6b4c], 0x637e6363
mov dword [0x4c6b50], 0x62747c31
mov dword [0x4c6b54], 0x74767062
mov dword [0x4c6b58], 0x65746331
mov dword [0x4c6b5c], 0x747f6364
mov dword [0x4c6b60], 0x68733175
mov dword [0x4c6b64], 0x737e7b31
mov byte [0x4c6b68], 0x11
xor eax, eax
mov cl, byte [eax + 0x4c6b48]
xor cl, 0x11
mov byte [eax + 0x4c6c10], cl
inc eax
cmp eax, 0x21
jb 0x42ceb2
mov eax, 0x4c6c10
ret

Function at 0x42cecd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d40], 1
jne 0x42cf36
or dword [0x4c7d40], 1
mov dword [0x4c6b94], 0x3170645d
mov dword [0x4c6b98], 0x7e636374
mov dword [0x4c6b9c], 0x64633163
mov dword [0x4c6ba0], 0x7f787f7f
mov dword [0x4c6ba4], 0x63743176
mov dword [0x4c6ba8], 0x31637e63
mov dword [0x4c6bac], 0x757f7079
mov dword [0x4c6bb0], 0x2b63747d
mov word [0x4c6bb4], 0x1131
xor eax, eax
mov cl, byte [eax + 0x4c6b94]
xor cl, 0x11
mov byte [eax + 0x4c6c5c], cl
inc eax
cmp eax, 0x22
jb 0x42cf38
mov eax, 0x4c6c5c
ret

Function at 0x42cf53
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d3c], 1
jne 0x42cfa5
or dword [0x4c7d3c], 1
mov dword [0x4c6bb8], 0x5d70647d
mov dword [0x4c6bbc], 0x707e7d4e
mov dword [0x4c6bc0], 0x63656275
mov dword [0x4c6bc4], 0x31767f78
mov dword [0x4c6bc8], 0x7d787077
mov word [0x4c6bcc], 0x7574
mov byte [0x4c6bce], 0x11
xor eax, eax
mov cl, byte [eax + 0x4c6bb8]
xor cl, 0x11
mov byte [eax + 0x4c6c80], cl
inc eax
cmp eax, 0x17
jb 0x42cfa7
mov eax, 0x4c6c80
ret
Function at 0x42dd34
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x48dc2b
call fcn.0048cc68
sub esp, 0xb0
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
lea eax, [ebp - 0x10]
push eax
push ebx
push dword [ebp + 0xc]
mov dword [ebp - 0x10], ebx
push ebx
push 0x1300
call dword [0x496134]
test eax, eax
jne 0x42dd7c
call fcn.0042ded5
mov ecx, dword [ebp + 8]
push eax
call fcn.00406c13
mov eax, dword [ebp + 8]
jmp 0x42dec6
test byte [0x4c7d30], 1
jne 0x42dd9d
or dword [0x4c7d30], 1
mov dword [0x4c6cbc], 0x33191e1a
mov byte [0x4c6cc0], 0x13
xor eax, eax
mov cl, byte [eax + 0x4c6cbc]
xor cl, 0x13
mov byte [eax + 0x4c73fc], cl
inc eax
cmp eax, 5
jb 0x42dd9f
push 0xf
mov esi, 0x4c73fc
pop edi
mov eax, esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x42ddca
sub eax, ecx
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.00404fb2
mov dword [ebp - 4], ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00404dcd
lea eax, [ebp - 0x2c]
push eax
lea edi, [ebp - 0x48]
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.00432422
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00404dee
push ebx
push 1
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.00404dee
push dword [ebp - 0x10]
call dword [0x4960e8]
push ebx
push dword [ebp + 0xc]
lea esi, [ebp - 0xb8]
call fcn.0042e223
pop ecx
pop ecx
push eax
mov byte [ebp - 4], 5
call fcn.0042df3e
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00406c50
add esp, 0xc
push 0x4b13a0
push eax
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 6
call fcn.0040f0ed
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 7
call fcn.0040cab5
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.00404dee
push ebx
push 1
lea ecx, [ebp - 0x80]
call fcn.00404dee
push ebx
push 1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 4
call fcn.00404dee
mov edi, dword [ebp + 8]
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ebx
mov byte [edi], bl
call fcn.00404d83
push ebx
push 1
mov ecx, esi
call fcn.00404dee
mov eax, edi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret

Function at 0x42ded5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d34], 1
jne 0x42df21
or dword [0x4c7d34], 1
mov dword [0x4c6ca4], 0x76617d46
mov dword [0x4c6ca8], 0x7d747c70
mov dword [0x4c6cac], 0x7776697a
mov dword [0x4c6cb0], 0x61617633
mov dword [0x4c6cb4], 0x7033617c
mov dword [0x4c6cb8], 0x1376777c
xor eax, eax
mov cl, byte [eax + 0x4c6ca4]
xor cl, 0x13
mov byte [eax + 0x4c73e4], cl
inc eax
cmp eax, 0x18
jb 0x42df23
mov eax, 0x4c73e4
ret

Function at 0x42df3e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d2c], 1
jne 0x42df7c
or dword [0x4c7d2c], 1
mov dword [0x4c6cc4], 0x61763b33
mov dword [0x4c6cc8], 0x33617c61
mov dword [0x4c6ccc], 0x76777c70
mov word [0x4c6cd0], 0x3329
mov byte [0x4c6cd2], 0x13
xor eax, eax
mov cl, byte [eax + 0x4c6cc4]
xor cl, 0x13
mov byte [eax + 0x4c7404], cl
inc eax
cmp eax, 0xf
jb 0x42df7e
mov eax, 0x4c7404
ret
Function at 0x42e223
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
and dword [ebp - 4], 0
test byte [0x4c7d28], 1
jne 0x42e24e
or dword [0x4c7d28], 1
mov dword [0x4c6cd4], 0x777f7f36
mov byte [0x4c6cd8], 0x13
xor eax, eax
mov cl, byte [eax + 0x4c6cd4]
xor cl, 0x13
mov byte [eax + 0x4c7414], cl
inc eax
cmp eax, 5
jb 0x42e250
push dword [ebp + 0xc]
lea eax, [ebp - 0x48]
push dword [ebp + 8]
push 0x4c7414
push eax
call fcn.0043247b
and dword [esi + 0x10], 0
add esp, 0x10
lea eax, [ebp - 0x48]
mov dword [esi + 0x14], 0xf
push eax
mov ecx, esi
mov byte [esi], 0
call fcn.00404dcd
mov eax, esi
leave
ret

Function at 0x42e3f2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d24], 1
jne 0x42e44e
or dword [0x4c7d24], 1
mov dword [0x4c6cdc], 0x5e677654
mov dword [0x4c6ce0], 0x7f66777c
mov dword [0x4c6ce4], 0x7f7a5576
mov dword [0x4c6ce8], 0x7e725d76
mov dword [0x4c6cec], 0x72753376
mov dword [0x4c6cf0], 0x77767f7a
mov word [0x4c6cf4], 0x3329
mov byte [0x4c6cf6], 0x13
xor eax, eax
mov cl, byte [eax + 0x4c6cdc]
xor cl, 0x13
mov byte [eax + 0x4c741c], cl
inc eax
cmp eax, 0x1b
jb 0x42e450
mov eax, 0x4c741c
ret

Function at 0x42e46b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d20], 1
jne 0x42e4c8
or dword [0x4c7d20], 1
mov dword [0x4c6cf8], 0x50677640
mov dword [0x4c6cfc], 0x76616166
mov dword [0x4c6d00], 0x7a57677d
mov dword [0x4c6d04], 0x67707661
mov dword [0x4c6d08], 0x336a617c
mov dword [0x4c6d0c], 0x7f7a7275
mov dword [0x4c6d10], 0x33297776
mov byte [0x4c6d14], 0x13
xor eax, eax
mov cl, byte [eax + 0x4c6cf8]
xor cl, 0x13
mov byte [eax + 0x4c7438], cl
inc eax
cmp eax, 0x1d
jb 0x42e4ca
mov eax, 0x4c7438
ret

Function at 0x42e5dc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d1c], 1
jne 0x42e639
or dword [0x4c7d1c], 1
mov dword [0x4c6d18], 0x50677654
mov dword [0x4c6d1c], 0x76616166
mov dword [0x4c6d20], 0x7a57677d
mov dword [0x4c6d24], 0x67707661
mov dword [0x4c6d28], 0x336a617c
mov dword [0x4c6d2c], 0x7f7a7275
mov dword [0x4c6d30], 0x33297776
mov byte [0x4c6d34], 0x13
xor eax, eax
mov cl, byte [eax + 0x4c6d18]
xor cl, 0x13
mov byte [eax + 0x4c7458], cl
inc eax
cmp eax, 0x1d
jb 0x42e63b
mov eax, 0x4c7458
ret
Function at 0x42e7f4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d18], 1
jne 0x42e963
mov eax, 0xd24f
mov ecx, eax
mov word [0x4c6d38], cx
mov word [0x4c6d3a], cx
add ecx, 0xfffffff1
mov word [0x4c6d3c], cx
lea ecx, [eax + 0x18]
mov word [0x4c6d3e], cx
add ecx, 0xfffffffa
lea edx, [eax + 0x2b]
mov word [0x4c6d40], cx
push ebx
mov ecx, edx
mov word [0x4c6d42], cx
add ecx, 3
push esi
mov esi, ecx
lea ecx, [eax + 0x26]
mov word [0x4c6d44], si
lea esi, [eax + 0x25]
mov word [0x4c6d46], si
mov word [0x4c6d54], cx
add esi, 8
add edx, 5
mov ecx, esi
push edi
lea edi, [eax + 0x27]
mov word [0x4c6d56], cx
mov ecx, eax
mov word [0x4c6d4c], dx
mov edx, edi
mov word [0x4c6d58], cx
mov word [0x4c6d5a], cx
add ecx, 0xffffffd4
mov word [0x4c6d4e], dx
mov edx, ecx
or dword [0x4c7d18], 1
mov word [0x4c6d5c], dx
lea edx, [eax - 0x28]
mov ebx, edx
mov word [0x4c6d5e], bx
mov ebx, ecx
mov word [0x4c6d60], bx
lea ebx, [eax - 0x25]
mov word [0x4c6d6e], ax
mov word [0x4c6d62], bx
mov ebx, ecx
mov ecx, eax
add eax, 0xfffffff4
mov word [0x4c6d70], ax
lea eax, [ecx + 0x28]
mov word [0x4c6d76], ax
add eax, 0xffffffef
mov word [0x4c6d78], ax
lea eax, [ecx + 0x21]
mov word [0x4c6d7a], ax
add eax, 0xfffffff7
mov word [0x4c6d7c], ax
lea eax, [ecx + 0xe]
mov word [0x4c6d7e], ax
add eax, 0x15
pop edi
mov word [0x4c6d80], ax
lea eax, [ecx - 0x3c]
pop esi
mov word [0x4c6d64], bx
mov dword [0x4c6d48], 0xd27ad255
mov dword [0x4c6d50], 0xd27dd25a
mov word [0x4c6d66], dx
mov dword [0x4c6d68], 0xd223d251
mov word [0x4c6d6c], cx
mov dword [0x4c6d72], 0xd27cd261
mov dword [0x4c6d82], 0xd276d27e
mov word [0x4c6d86], ax
pop ebx
xor eax, eax
mov ecx, 0xd213
xor cx, word [eax + 0x4c6d38]
add eax, 2
mov word [eax + 0x4c7476], cx
cmp eax, 0x50
jb 0x42e965
mov eax, 0x4c7478
ret

Function at 0x42e986
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d14], 1
jne 0x42e9db
or dword [0x4c7d14], 1
mov dword [0x4c6d88], 0x65337c5d
mov dword [0x4c6d8c], 0x7a606176
mov dword [0x4c6d90], 0x7a337d7c
mov dword [0x4c6d94], 0x337c757d
mov dword [0x4c6d98], 0x7a726572
mov dword [0x4c6d9c], 0x7f71727f
mov word [0x4c6da0], 0x1376
xor eax, eax
mov cl, byte [eax + 0x4c6d88]
xor cl, 0x13
mov byte [eax + 0x4c74c8], cl
inc eax
cmp eax, 0x1a
jb 0x42e9dd
mov eax, 0x4c74c8
ret

Function at 0x42ebca
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d10], 1
jne 0x42ec1f
or dword [0x4c7d10], 1
mov dword [0x4c6da4], 0x65337c5d
mov dword [0x4c6da8], 0x7a606176
mov dword [0x4c6dac], 0x7a337d7c
mov dword [0x4c6db0], 0x337c757d
mov dword [0x4c6db4], 0x7a726572
mov dword [0x4c6db8], 0x7f71727f
mov word [0x4c6dbc], 0x1376
xor eax, eax
mov cl, byte [eax + 0x4c6da4]
xor cl, 0x13
mov byte [eax + 0x4c74e4], cl
inc eax
cmp eax, 0x1a
jb 0x42ec21
mov eax, 0x4c74e4
ret
Function at 0x42ec3c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d0c], 1
jne 0x42eca2
or dword [0x4c7d0c], 1
mov dword [0x4c6dc0], 0x72657d5a
mov dword [0x4c6dc4], 0x33777a7f
mov dword [0x4c6dc8], 0x60617665
mov dword [0x4c6dcc], 0x337d7c7a
mov dword [0x4c6dd0], 0x7c757d7a
mov dword [0x4c6dd4], 0x747a6033
mov dword [0x4c6dd8], 0x6667727d
mov word [0x4c6ddc], 0x7661
mov byte [0x4c6dde], 0x13
xor eax, eax
mov cl, byte [eax + 0x4c6dc0]
xor cl, 0x13
mov byte [eax + 0x4c7500], cl
inc eax
cmp eax, 0x1f
jb 0x42eca4
mov eax, 0x4c7500
ret

Function at 0x42efa9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d08], 1
jne 0x42f00f
or dword [0x4c7d08], 1
mov dword [0x4c6de0], 0x7f7a7255
mov dword [0x4c6de4], 0x67337776
mov dword [0x4c6de8], 0x7674337c
mov dword [0x4c6dec], 0x76673367
mov dword [0x4c6df0], 0x7533637e
mov dword [0x4c6df4], 0x76777f7c
mov dword [0x4c6df8], 0x72633361
mov word [0x4c6dfc], 0x7b67
mov byte [0x4c6dfe], 0x13
xor eax, eax
mov cl, byte [eax + 0x4c6de0]
xor cl, 0x13
mov byte [eax + 0x4c7520], cl
inc eax
cmp eax, 0x1f
jb 0x42f011
mov eax, 0x4c7520
ret

Function at 0x42f181
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d04], 1
jne 0x42f1d3
or dword [0x4c7d04], 1
mov dword [0x4c6e00], 0x55677654
mov dword [0x4c6e04], 0x76777f7c
mov dword [0x4c6e08], 0x67724361
mov dword [0x4c6e0c], 0x7275337b
mov dword [0x4c6e10], 0x77767f7a
mov word [0x4c6e14], 0x3329
mov byte [0x4c6e16], 0x13
xor eax, eax
mov cl, byte [eax + 0x4c6e00]
xor cl, 0x13
mov byte [eax + 0x4c7540], cl
inc eax
cmp eax, 0x17
jb 0x42f1d5
mov eax, 0x4c7540
ret

Function at 0x42f49d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7d00], 1
mov edx, 0xd213
jne 0x42f534
or dword [0x4c7d00], 1
lea ecx, [edx + 0x23]
mov eax, ecx
mov word [0x4c6e18], ax
add eax, 0xd
mov word [0x4c6e1a], ax
push esi
lea eax, [edx + 0x4e]
mov esi, eax
add eax, 0x11
mov word [0x4c6e24], ax
lea eax, [edx + 0x6b]
mov word [0x4c6e26], ax
add eax, 0xffffffc6
mov word [0x4c6e28], ax
lea eax, [edx + 0x12]
mov word [0x4c6e1c], si
add esi, 0x1b
mov word [0x4c6e2a], ax
add eax, 2
mov word [0x4c6e2c], ax
lea eax, [edx + 0xd]
mov word [0x4c6e2e], ax
mov eax, edx
mov word [0x4c6e1e], si
mov dword [0x4c6e20], 0xd261d274
mov dword [0x4c6e30], 0xd236d221
mov word [0x4c6e34], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4c6e18]
add eax, 2
mov word [eax + 0x4c7556], cx
cmp eax, 0x1e
jb 0x42f536
mov eax, 0x4c7558
ret

Function at 0x42f554
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cfc], 1
mov ecx, 0xd213
jne 0x42f595
or dword [0x4c7cfc], 1
lea eax, [ecx + 0x55]
mov word [0x4c6e38], ax
add eax, 0xfffffffb
mov word [0x4c6e3a], ax
lea eax, [ecx + 0x62]
mov word [0x4c6e3c], ax
add eax, 0xfffffff9
mov word [0x4c6e3e], ax
mov eax, ecx
mov word [0x4c6e40], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c6e38]
add eax, 2
mov word [eax + 0x4c7576], dx
cmp eax, 0xa
jb 0x42f597
mov eax, 0x4c7578
ret
Function at 0x42f5b5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cf8], 1
mov ecx, 0xd213
jne 0x42f608
or dword [0x4c7cf8], 1
lea eax, [ecx + 0x55]
mov word [0x4c6e44], ax
add eax, 0xfffffffb
mov word [0x4c6e46], ax
lea eax, [ecx + 0x62]
mov word [0x4c6e48], ax
add eax, 0xffffffab
mov word [0x4c6e4a], ax
lea eax, [ecx + 0xe]
mov word [0x4c6e4c], ax
add eax, 0x4d
mov word [0x4c6e4e], ax
mov eax, ecx
mov word [0x4c6e50], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c6e44]
add eax, 2
mov word [eax + 0x4c7582], dx
cmp eax, 0xe
jb 0x42f60a
mov eax, 0x4c7584
ret

Function at 0x42f628
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cf4], 1
mov ecx, 0xd213
jne 0x42f67b
or dword [0x4c7cf4], 1
lea eax, [ecx + 0x55]
mov word [0x4c6e54], ax
add eax, 0xfffffffb
mov word [0x4c6e56], ax
lea eax, [ecx + 0x62]
mov word [0x4c6e58], ax
add eax, 0xffffffb0
mov word [0x4c6e5a], ax
lea eax, [ecx + 0x14]
mov word [0x4c6e5c], ax
add eax, 0x47
mov word [0x4c6e5e], ax
mov eax, ecx
mov word [0x4c6e60], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c6e54]
add eax, 2
mov word [eax + 0x4c7592], dx
cmp eax, 0xe
jb 0x42f67d
mov eax, 0x4c7594
ret

Function at 0x42f69b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cf0], 1
mov ecx, 0xd213
jne 0x42f6dc
or dword [0x4c7cf0], 1
lea eax, [ecx + 0x55]
mov word [0x4c6e64], ax
add eax, 0xfffffffb
mov word [0x4c6e66], ax
lea eax, [ecx + 0x62]
mov word [0x4c6e68], ax
add eax, 0xfffffff9
mov word [0x4c6e6a], ax
mov eax, ecx
mov word [0x4c6e6c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c6e64]
add eax, 2
mov word [eax + 0x4c75a2], dx
cmp eax, 0xa
jb 0x42f6de
mov eax, 0x4c75a4
ret

Function at 0x42f6fc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cec], 1
mov ecx, 0xd213
jne 0x42f74f
or dword [0x4c7cec], 1
lea eax, [ecx + 0x55]
mov word [0x4c6e70], ax
add eax, 0xfffffffb
mov word [0x4c6e72], ax
lea eax, [ecx + 0x62]
mov word [0x4c6e74], ax
add eax, 0xffffffab
mov word [0x4c6e76], ax
lea eax, [ecx + 0xe]
mov word [0x4c6e78], ax
add eax, 0x4d
mov word [0x4c6e7a], ax
mov eax, ecx
mov word [0x4c6e7c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c6e70]
add eax, 2
mov word [eax + 0x4c75ae], dx
cmp eax, 0xe
jb 0x42f751
mov eax, 0x4c75b0
ret
Function at 0x42f849
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7ce8], 1
mov ecx, 0xd213
jne 0x42fa72
or dword [0x4c7ce8], 1
lea eax, [ecx + 0x10]
mov word [0x4c6e88], ax
dec eax
mov word [0x4c6e8a], ax
lea eax, [ecx + 0xe]
mov word [0x4c6e8c], ax
dec eax
mov word [0x4c6e8e], ax
lea eax, [ecx + 0x14]
mov word [0x4c6e90], ax
dec eax
mov word [0x4c6e92], ax
lea eax, [ecx + 0x12]
mov word [0x4c6e94], ax
dec eax
mov word [0x4c6e96], ax
lea eax, [ecx + 0x18]
mov word [0x4c6e98], ax
dec eax
mov word [0x4c6e9a], ax
lea eax, [ecx + 0x3f]
mov word [0x4c6e9c], ax
dec eax
mov word [0x4c6e9e], ax
lea eax, [ecx + 0x3d]
mov word [0x4c6ea0], ax
add eax, 7
mov word [0x4c6ea2], ax
lea eax, [ecx + 0x43]
mov word [0x4c6ea4], ax
dec eax
mov word [0x4c6ea6], ax
lea eax, [ecx + 0x41]
mov word [0x4c6ea8], ax
add eax, 7
mov word [0x4c6eaa], ax
lea eax, [ecx + 0x47]
mov word [0x4c6eac], ax
dec eax
mov word [0x4c6eae], ax
lea eax, [ecx + 0x45]
mov word [0x4c6eb0], ax
add eax, 7
mov word [0x4c6eb2], ax
lea eax, [ecx + 0x4b]
mov word [0x4c6eb4], ax
dec eax
mov word [0x4c6eb6], ax
lea eax, [ecx + 0x49]
mov word [0x4c6eb8], ax
add eax, 0xffffffe7
mov word [0x4c6eba], ax
lea eax, [ecx + 0x2f]
mov word [0x4c6ebc], ax
dec eax
mov word [0x4c6ebe], ax
lea eax, [ecx + 0x2d]
mov word [0x4c6ec0], ax
add eax, 7
mov word [0x4c6ec2], ax
lea eax, [ecx + 0x33]
mov word [0x4c6ec4], ax
dec eax
mov word [0x4c6ec6], ax
lea eax, [ecx + 0x31]
mov word [0x4c6ec8], ax
add eax, 7
mov word [0x4c6eca], ax
lea eax, [ecx + 0x37]
mov word [0x4c6ecc], ax
dec eax
mov word [0x4c6ece], ax
lea eax, [ecx + 0x5f]
mov word [0x4c6ed0], ax
dec eax
mov word [0x4c6ed2], ax
lea eax, [ecx + 0x5d]
mov word [0x4c6ed4], ax
add eax, 7
mov word [0x4c6ed6], ax
lea eax, [ecx + 0x63]
mov word [0x4c6ed8], ax
dec eax
mov word [0x4c6eda], ax
lea eax, [ecx + 0x61]
mov word [0x4c6edc], ax
add eax, 7
mov word [0x4c6ede], ax
lea eax, [ecx + 0x67]
mov word [0x4c6ee0], ax
dec eax
mov word [0x4c6ee2], ax
lea eax, [ecx + 0x65]
mov word [0x4c6ee4], ax
add eax, 7
mov word [0x4c6ee6], ax
lea eax, [ecx + 0x6b]
mov word [0x4c6ee8], ax
dec eax
mov word [0x4c6eea], ax
lea eax, [ecx + 0x69]
mov word [0x4c6eec], ax
add eax, 0xffffffe7
mov word [0x4c6eee], ax
lea eax, [ecx + 0x4f]
mov word [0x4c6ef0], ax
dec eax
mov word [0x4c6ef2], ax
lea eax, [ecx + 0x4d]
mov word [0x4c6ef4], ax
add eax, 7
mov word [0x4c6ef6], ax
lea eax, [ecx + 0x53]
mov word [0x4c6ef8], ax
dec eax
mov word [0x4c6efa], ax
lea eax, [ecx + 0x51]
mov word [0x4c6efc], ax
add eax, 7
mov word [0x4c6efe], ax
lea eax, [ecx + 0x57]
mov word [0x4c6f00], ax
dec eax
mov word [0x4c6f02], ax
mov eax, ecx
mov word [0x4c6f04], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c6e88]
add eax, 2
mov word [eax + 0x4c75be], dx
cmp eax, 0x7e
jb 0x42fa74
mov eax, 0x4c75c0
ret
Function at 0x42fc16
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7ce4], 1
jne 0x42fc54
or dword [0x4c7ce4], 1
mov dword [0x4c6f08], 0x7c44605a
mov dword [0x4c6f0c], 0x43272564
mov dword [0x4c6f10], 0x76707c61
mov word [0x4c6f14], 0x6060
mov byte [0x4c6f16], 0x13
xor eax, eax
mov cl, byte [eax + 0x4c6f08]
xor cl, 0x13
mov byte [eax + 0x4c7640], cl
inc eax
cmp eax, 0xf
jb 0x42fc56
mov eax, 0x4c7640
ret

Function at 0x42fd6c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7ce0], 1
jne 0x42fdd5
or dword [0x4c7ce0], 1
mov dword [0x4c6f18], 0x7c7f7f52
mov dword [0x4c6f1c], 0x76677270
mov dword [0x4c6f20], 0x5a777d52
mov dword [0x4c6f24], 0x7a677a7d
mov dword [0x4c6f28], 0x697a7f72
mov dword [0x4c6f2c], 0x777a4076
mov dword [0x4c6f30], 0x7a727533
mov dword [0x4c6f34], 0x2977767f
mov word [0x4c6f38], 0x1333
xor eax, eax
mov cl, byte [eax + 0x4c6f18]
xor cl, 0x13
mov byte [eax + 0x4c7650], cl
inc eax
cmp eax, 0x22
jb 0x42fdd7
mov eax, 0x4c7650
ret

Function at 0x42fdf2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cdc], 1
jne 0x42fe51
or dword [0x4c7cdc], 1
mov dword [0x4c6f3c], 0x70767b50
mov dword [0x4c6f40], 0x787c4778
mov dword [0x4c6f44], 0x765e7d76
mov dword [0x4c6f48], 0x6176717e
mov dword [0x4c6f4c], 0x637a7b60
mov dword [0x4c6f50], 0x7a727533
mov dword [0x4c6f54], 0x2977767f
mov word [0x4c6f58], 0x1333
xor eax, eax
mov cl, byte [eax + 0x4c6f3c]
xor cl, 0x13
mov byte [eax + 0x4c7674], cl
inc eax
cmp eax, 0x1e
jb 0x42fe53
mov eax, 0x4c7674
ret

Function at 0x42ffee
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cd8], 1
jne 0x430073
or dword [0x4c7cd8], 1
mov dword [0x4c6f5c], 0x7d7d7250
mov dword [0x4c6f60], 0x6233677c
mov dword [0x4c6f64], 0x6a617666
mov dword [0x4c6f68], 0x25337233
mov dword [0x4c6f6c], 0x7a713327
mov dword [0x4c6f70], 0x7a653367
mov dword [0x4c6f74], 0x7c336476
mov dword [0x4c6f78], 0x2120337d
mov dword [0x4c6f7c], 0x677a7133
mov dword [0x4c6f80], 0x7d7a6433
mov dword [0x4c6f84], 0x60647c77
mov byte [0x4c6f88], 0x13
xor eax, eax
mov cl, byte [eax + 0x4c6f5c]
xor cl, 0x13
mov byte [eax + 0x4c7694], cl
inc eax
cmp eax, 0x2d
jb 0x430075
mov eax, 0x4c7694
ret

Function at 0x430090
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7cd4], 1
jne 0x430144
push ebx
push esi
or dword [0x4c7cd4], 1
mov eax, 0xd25b
mov word [0x4c6f8c], ax
add eax, 0xfffffffd
mov word [0x4c6f8e], ax
push edi
mov edi, 0xd256
mov eax, edi
mov word [0x4c6f90], ax
add eax, 0xfffffff4
mov word [0x4c6f92], ax
lea esi, [edi - 0xa]
mov eax, esi
mov word [0x4c6f94], ax
lea edx, [edi + 9]
mov eax, edx
mov word [0x4c6f96], ax
add eax, 0xfffffffd
mov word [0x4c6f98], ax
lea ecx, [edi - 6]
mov eax, ecx
mov word [0x4c6f9a], ax
add eax, 2
mov ebx, eax
lea eax, [edi + 4]
pop edi
mov word [0x4c6faa], ax
add eax, 0xffffffb9
pop esi
mov word [0x4c6f9c], bx
mov dword [0x4c6f9e], 0xd24cd25f
mov dword [0x4c6fa2], 0xd252d25e
mov dword [0x4c6fa6], 0xd25bd250
mov dword [0x4c6fac], 0xd256d25d
mov word [0x4c6fb0], ax
pop ebx
xor eax, eax
mov ecx, 0xd213
xor cx, word [eax + 0x4c6f8c]
add eax, 2
mov word [eax + 0x4c76c2], cx
cmp eax, 0x26
jb 0x430146
mov eax, 0x4c76c4
ret