joyce8/EMBER2024-capa huggingface dataset:
Function at 0x42eadd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6d0c], 1
jne 0x42eb43
or dword [0x4c6d0c], 1
mov dword [0x4c5dc0], 0xc1d6cee9
mov dword [0x4c5dc4], 0x80c4c9cc
mov dword [0x4c5dc8], 0xd3d2c5d6
mov dword [0x4c5dcc], 0x80cecfc9
mov dword [0x4c5dd0], 0xcfc6cec9
mov dword [0x4c5dd4], 0xc7c9d380
mov dword [0x4c5dd8], 0xd5d4c1ce
mov word [0x4c5ddc], 0xc5d2
mov byte [0x4c5dde], 0xa0
xor eax, eax
mov cl, byte [eax + 0x4c5dc0]
xor cl, 0xa0
mov byte [eax + 0x4c6500], cl
inc eax
cmp eax, 0x1f
jb 0x42eb45
mov eax, 0x4c6500
ret

Function at 0x42ee4a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6d08], 1
jne 0x42eeb0
or dword [0x4c6d08], 1
mov dword [0x4c5de0], 0xccc9c1e6
mov dword [0x4c5de4], 0xd480c4c5
mov dword [0x4c5de8], 0xc5c780cf
mov dword [0x4c5dec], 0xc5d480d4
mov dword [0x4c5df0], 0xc680d0cd
mov dword [0x4c5df4], 0xc5c4cccf
mov dword [0x4c5df8], 0xc1d080d2
mov word [0x4c5dfc], 0xc8d4
mov byte [0x4c5dfe], 0xa0
xor eax, eax
mov cl, byte [eax + 0x4c5de0]
xor cl, 0xa0
mov byte [eax + 0x4c6520], cl
inc eax
cmp eax, 0x1f
jb 0x42eeb2
mov eax, 0x4c6520
ret

Function at 0x42f022
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6d04], 1
jne 0x42f074
or dword [0x4c6d04], 1
mov dword [0x4c5e00], 0xe6d4c5e7
mov dword [0x4c5e04], 0xc5c4cccf
mov dword [0x4c5e08], 0xd4c1f0d2
mov dword [0x4c5e0c], 0xc1c680c8
mov dword [0x4c5e10], 0xc4c5ccc9
mov word [0x4c5e14], 0x809a
mov byte [0x4c5e16], 0xa0
xor eax, eax
mov cl, byte [eax + 0x4c5e00]
xor cl, 0xa0
mov byte [eax + 0x4c6540], cl
inc eax
cmp eax, 0x17
jb 0x42f076
mov eax, 0x4c6540
ret

Function at 0x42f33e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6d00], 1
mov edx, 0x85a0
jne 0x42f3d5
or dword [0x4c6d00], 1
lea ecx, [edx - 0x1b]
mov eax, ecx
mov word [0x4c5e18], ax
add eax, 0x6b
mov word [0x4c5e1a], ax
push esi
lea eax, [edx + 0x32]
mov esi, eax
add eax, 0xffffffef
mov word [0x4c5e24], ax
lea eax, [edx + 0x2d]
mov word [0x4c5e26], ax
add eax, 0x2a
mov word [0x4c5e28], ax
lea eax, [edx - 0xa]
mov word [0x4c5e1c], si
add esi, 0xfffffffd
mov word [0x4c5e2a], ax
add eax, 0xfffffffe
mov word [0x4c5e2c], ax
lea eax, [edx - 0xd]
mov word [0x4c5e2e], ax
mov eax, edx
mov word [0x4c5e1e], si
mov dword [0x4c5e20], 0x85d285c7
mov dword [0x4c5e30], 0x85858592
mov word [0x4c5e34], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4c5e18]
add eax, 2
mov word [eax + 0x4c6556], cx
cmp eax, 0x1e
jb 0x42f3d7
mov eax, 0x4c6558
ret

Function at 0x42f3f5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6cfc], 1
mov ecx, 0x85a0
jne 0x42f436
or dword [0x4c6cfc], 1
lea eax, [ecx + 0x3b]
mov word [0x4c5e38], ax
add eax, 0xfffffff5
mov word [0x4c5e3a], ax
lea eax, [ecx + 0x26]
mov word [0x4c5e3c], ax
add eax, 0x17
mov word [0x4c5e3e], ax
mov eax, ecx
mov word [0x4c5e40], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c5e38]
add eax, 2
mov word [eax + 0x4c6576], dx
cmp eax, 0xa
jb 0x42f438
mov eax, 0x4c6578
ret
Function at 0x42f456
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6cf8], 1
mov ecx, 0x85a0
jne 0x42f4a9
or dword [0x4c6cf8], 1
lea eax, [ecx + 0x3b]
mov word [0x4c5e44], ax
add eax, 0xfffffff5
mov word [0x4c5e46], ax
lea eax, [ecx + 0x26]
mov word [0x4c5e48], ax
add eax, 0xffffffcd
mov word [0x4c5e4a], ax
lea eax, [ecx - 0xe]
mov word [0x4c5e4c], ax
add eax, 0x4b
mov word [0x4c5e4e], ax
mov eax, ecx
mov word [0x4c5e50], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c5e44]
add eax, 2
mov word [eax + 0x4c6582], dx
cmp eax, 0xe
jb 0x42f4ab
mov eax, 0x4c6584
ret

Function at 0x42f4c9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6cf4], 1
mov ecx, 0x85a0
jne 0x42f51c
or dword [0x4c6cf4], 1
lea eax, [ecx + 0x3b]
mov word [0x4c5e54], ax
add eax, 0xfffffff5
mov word [0x4c5e56], ax
lea eax, [ecx + 0x26]
mov word [0x4c5e58], ax
add eax, 0xffffffd0
mov word [0x4c5e5a], ax
lea eax, [ecx - 0xc]
mov word [0x4c5e5c], ax
add eax, 0x49
mov word [0x4c5e5e], ax
mov eax, ecx
mov word [0x4c5e60], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c5e54]
add eax, 2
mov word [eax + 0x4c6592], dx
cmp eax, 0xe
jb 0x42f51e
mov eax, 0x4c6594
ret

Function at 0x42f53c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6cf0], 1
mov ecx, 0x85a0
jne 0x42f57d
or dword [0x4c6cf0], 1
lea eax, [ecx + 0x3b]
mov word [0x4c5e64], ax
add eax, 0xfffffff5
mov word [0x4c5e66], ax
lea eax, [ecx + 0x26]
mov word [0x4c5e68], ax
add eax, 0x17
mov word [0x4c5e6a], ax
mov eax, ecx
mov word [0x4c5e6c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c5e64]
add eax, 2
mov word [eax + 0x4c65a2], dx
cmp eax, 0xa
jb 0x42f57f
mov eax, 0x4c65a4
ret

Function at 0x42f59d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6cec], 1
mov ecx, 0x85a0
jne 0x42f5f0
or dword [0x4c6cec], 1
lea eax, [ecx + 0x3b]
mov word [0x4c5e70], ax
add eax, 0xfffffff5
mov word [0x4c5e72], ax
lea eax, [ecx + 0x26]
mov word [0x4c5e74], ax
add eax, 0xffffffcd
mov word [0x4c5e76], ax
lea eax, [ecx - 0xe]
mov word [0x4c5e78], ax
add eax, 0x4b
mov word [0x4c5e7a], ax
mov eax, ecx
mov word [0x4c5e7c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c5e70]
add eax, 2
mov word [eax + 0x4c65ae], dx
cmp eax, 0xe
jb 0x42f5f2
mov eax, 0x4c65b0
ret
Function at 0x42f6ea
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6ce8], 1
mov ecx, 0x85a0
jne 0x42f8fb
or dword [0x4c6ce8], 1
lea eax, [ecx - 0x10]
mov word [0x4c5e88], ax
inc eax
mov word [0x4c5e8a], ax
lea eax, [ecx - 0xe]
mov word [0x4c5e8c], ax
inc eax
mov word [0x4c5e8e], ax
lea eax, [ecx - 0xc]
mov word [0x4c5e90], ax
inc eax
mov word [0x4c5e92], ax
lea eax, [ecx - 0xa]
mov word [0x4c5e94], ax
inc eax
mov word [0x4c5e96], ax
lea eax, [ecx - 8]
mov word [0x4c5e98], ax
inc eax
mov word [0x4c5e9a], ax
lea eax, [ecx + 0x41]
mov word [0x4c5e9c], ax
inc eax
mov word [0x4c5e9e], ax
lea eax, [ecx + 0x43]
mov word [0x4c5ea0], ax
inc eax
mov word [0x4c5ea2], ax
lea eax, [ecx + 0x45]
mov word [0x4c5ea4], ax
inc eax
mov word [0x4c5ea6], ax
lea eax, [ecx + 0x47]
mov word [0x4c5ea8], ax
inc eax
mov word [0x4c5eaa], ax
lea eax, [ecx + 0x49]
mov word [0x4c5eac], ax
inc eax
mov word [0x4c5eae], ax
lea eax, [ecx + 0x4b]
mov word [0x4c5eb0], ax
inc eax
mov word [0x4c5eb2], ax
lea eax, [ecx + 0x4d]
mov word [0x4c5eb4], ax
inc eax
mov word [0x4c5eb6], ax
lea eax, [ecx + 0x4f]
mov word [0x4c5eb8], ax
inc eax
mov word [0x4c5eba], ax
lea eax, [ecx + 0x51]
mov word [0x4c5ebc], ax
inc eax
mov word [0x4c5ebe], ax
lea eax, [ecx + 0x53]
mov word [0x4c5ec0], ax
inc eax
mov word [0x4c5ec2], ax
lea eax, [ecx + 0x55]
mov word [0x4c5ec4], ax
inc eax
mov word [0x4c5ec6], ax
lea eax, [ecx + 0x57]
mov word [0x4c5ec8], ax
inc eax
mov word [0x4c5eca], ax
lea eax, [ecx + 0x59]
mov word [0x4c5ecc], ax
inc eax
mov word [0x4c5ece], ax
lea eax, [ecx + 0x21]
mov word [0x4c5ed0], ax
inc eax
mov word [0x4c5ed2], ax
lea eax, [ecx + 0x23]
mov word [0x4c5ed4], ax
inc eax
mov word [0x4c5ed6], ax
lea eax, [ecx + 0x25]
mov word [0x4c5ed8], ax
inc eax
mov word [0x4c5eda], ax
lea eax, [ecx + 0x27]
mov word [0x4c5edc], ax
inc eax
mov word [0x4c5ede], ax
lea eax, [ecx + 0x29]
mov word [0x4c5ee0], ax
inc eax
mov word [0x4c5ee2], ax
lea eax, [ecx + 0x2b]
mov word [0x4c5ee4], ax
inc eax
mov word [0x4c5ee6], ax
lea eax, [ecx + 0x2d]
mov word [0x4c5ee8], ax
inc eax
mov word [0x4c5eea], ax
lea eax, [ecx + 0x2f]
mov word [0x4c5eec], ax
inc eax
mov word [0x4c5eee], ax
lea eax, [ecx + 0x31]
mov word [0x4c5ef0], ax
inc eax
mov word [0x4c5ef2], ax
lea eax, [ecx + 0x33]
mov word [0x4c5ef4], ax
inc eax
mov word [0x4c5ef6], ax
lea eax, [ecx + 0x35]
mov word [0x4c5ef8], ax
inc eax
mov word [0x4c5efa], ax
lea eax, [ecx + 0x37]
mov word [0x4c5efc], ax
inc eax
mov word [0x4c5efe], ax
lea eax, [ecx + 0x39]
mov word [0x4c5f00], ax
inc eax
mov word [0x4c5f02], ax
mov eax, ecx
mov word [0x4c5f04], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c5e88]
add eax, 2
mov word [eax + 0x4c65be], dx
cmp eax, 0x7e
jb 0x42f8fd
mov eax, 0x4c65c0
ret

Function at 0x42fa9f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6ce4], 1
jne 0x42fadd
or dword [0x4c6ce4], 1
mov dword [0x4c5f08], 0xcff7d3e9
mov dword [0x4c5f0c], 0xf09496d7
mov dword [0x4c5f10], 0xc5c3cfd2
mov word [0x4c5f14], 0xd3d3
mov byte [0x4c5f16], 0xa0
xor eax, eax
mov cl, byte [eax + 0x4c5f08]
xor cl, 0xa0
mov byte [eax + 0x4c6640], cl
inc eax
cmp eax, 0xf
jb 0x42fadf
mov eax, 0x4c6640
ret
Function at 0x42fbf5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6ce0], 1
jne 0x42fc5e
or dword [0x4c6ce0], 1
mov dword [0x4c5f18], 0xcfcccce1
mov dword [0x4c5f1c], 0xc5d4c1c3
mov dword [0x4c5f20], 0xe9c4cee1
mov dword [0x4c5f24], 0xc9d4c9ce
mov dword [0x4c5f28], 0xdac9ccc1
mov dword [0x4c5f2c], 0xc4c9f3c5
mov dword [0x4c5f30], 0xc9c1c680
mov dword [0x4c5f34], 0x9ac4c5cc
mov word [0x4c5f38], 0xa080
xor eax, eax
mov cl, byte [eax + 0x4c5f18]
xor cl, 0xa0
mov byte [eax + 0x4c6650], cl
inc eax
cmp eax, 0x22
jb 0x42fc60
mov eax, 0x4c6650
ret

Function at 0x42fc7b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6cdc], 1
jne 0x42fcda
or dword [0x4c6cdc], 1
mov dword [0x4c5f3c], 0xc3c5c8e3
mov dword [0x4c5f40], 0xcbcff4cb
mov dword [0x4c5f44], 0xc5edcec5
mov dword [0x4c5f48], 0xd2c5c2cd
mov dword [0x4c5f4c], 0xd0c9c8d3
mov dword [0x4c5f50], 0xc9c1c680
mov dword [0x4c5f54], 0x9ac4c5cc
mov word [0x4c5f58], 0xa080
xor eax, eax
mov cl, byte [eax + 0x4c5f3c]
xor cl, 0xa0
mov byte [eax + 0x4c6674], cl
inc eax
cmp eax, 0x1e
jb 0x42fcdc
mov eax, 0x4c6674
ret

Function at 0x42fe74
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6cd8], 1
jne 0x42fef9
or dword [0x4c6cd8], 1
mov dword [0x4c5f5c], 0xcecec1e3
mov dword [0x4c5f60], 0xd180d4cf
mov dword [0x4c5f64], 0xd9d2c5d5
mov dword [0x4c5f68], 0x9680c180
mov dword [0x4c5f6c], 0xc9c28094
mov dword [0x4c5f70], 0xc9d680d4
mov dword [0x4c5f74], 0xcf80d7c5
mov dword [0x4c5f78], 0x929380ce
mov dword [0x4c5f7c], 0xd4c9c280
mov dword [0x4c5f80], 0xcec9d780
mov dword [0x4c5f84], 0xd3d7cfc4
mov byte [0x4c5f88], 0xa0
xor eax, eax
mov cl, byte [eax + 0x4c5f5c]
xor cl, 0xa0
mov byte [eax + 0x4c6694], cl
inc eax
cmp eax, 0x2d
jb 0x42fefb
mov eax, 0x4c6694
ret

Function at 0x42ff16
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6cd4], 1
jne 0x42ffca
push ebx
push esi
or dword [0x4c6cd4], 1
mov eax, 0x85e8
mov word [0x4c5f8c], ax
add eax, 3
mov word [0x4c5f8e], ax
push edi
mov edi, 0x85e5
mov eax, edi
mov word [0x4c5f90], ax
add eax, 0x14
mov word [0x4c5f92], ax
lea esi, [edi + 0x1a]
mov eax, esi
mov word [0x4c5f94], ax
lea edx, [edi + 7]
mov eax, edx
mov word [0x4c5f96], ax
add eax, 3
mov word [0x4c5f98], ax
lea ecx, [edi - 2]
mov eax, ecx
mov word [0x4c5f9a], ax
add eax, 0xfffffffe
mov ebx, eax
lea eax, [edi + 4]
pop edi
mov word [0x4c5faa], ax
add eax, 0xffffffb7
pop esi
mov word [0x4c5f9c], bx
mov dword [0x4c5f9e], 0x85ff85ec
mov dword [0x4c5fa2], 0x85e185ed
mov dword [0x4c5fa6], 0x85e885e3
mov dword [0x4c5fac], 0x85e585ee
mov word [0x4c5fb0], ax
pop ebx
xor eax, eax
mov ecx, 0x85a0
xor cx, word [eax + 0x4c5f8c]
add eax, 2
mov word [eax + 0x4c66c2], cx
cmp eax, 0x26
jb 0x42ffcc
mov eax, 0x4c66c4
ret
Function at 0x42ffed
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6cd0], 1
jne 0x43009e
or dword [0x4c6cd0], 1
mov eax, 0x85e8
mov word [0x4c5fb4], ax
add eax, 3
mov word [0x4c5fb6], ax
mov ecx, 0x85e5
push ebx
mov eax, ecx
mov word [0x4c5fb8], ax
add eax, 0x14
push esi
mov word [0x4c5fba], ax
lea esi, [ecx + 0x1a]
mov eax, esi
mov word [0x4c5fbc], ax
add eax, 0xffffffe4
mov word [0x4c5fbe], ax
lea edx, [ecx + 0x10]
mov eax, edx
mov word [0x4c5fc0], ax
add eax, 0xfffffffd
mov ebx, eax
mov word [0x4c5fc2], bx
mov word [0x4c5fc4], bx
mov ebx, ecx
mov word [0x4c5fc6], bx
add ebx, 9
mov word [0x4c5fd4], ax
lea eax, [ecx - 0x45]
pop esi
mov word [0x4c5fc8], bx
mov dword [0x4c5fca], 0x85ff85f4
mov word [0x4c5fce], dx
mov dword [0x4c5fd0], 0x85e585f3
mov word [0x4c5fd6], ax
pop ebx
xor eax, eax
mov ecx, 0x85a0
xor cx, word [eax + 0x4c5fb4]
add eax, 2
mov word [eax + 0x4c66ea], cx
cmp eax, 0x24
jb 0x4300a0
mov eax, 0x4c66ec
ret

Function at 0x4300c1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6ccc], 1
mov edx, 0x85a0
jne 0x430135
or dword [0x4c6ccc], 1
lea eax, [edx + 0x48]
mov word [0x4c5fd8], ax
add eax, 3
mov word [0x4c5fda], ax
lea ecx, [edx + 0x45]
mov eax, ecx
mov word [0x4c5fdc], ax
add eax, 0x14
mov word [0x4c5fde], ax
lea eax, [edx + 0x5f]
mov word [0x4c5fe0], ax
add eax, 0xfffffff6
mov word [0x4c5fe2], ax
lea eax, [edx + 0x53]
push esi
mov esi, eax
mov eax, edx
mov word [0x4c5fe4], si
mov word [0x4c5fe6], cx
mov dword [0x4c5fe8], 0x85f385f2
mov word [0x4c5fec], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4c5fd8]
add eax, 2
mov word [eax + 0x4c670e], cx
cmp eax, 0x16
jb 0x430137
mov eax, 0x4c6710
ret

Function at 0x430155
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6cc8], 1
jne 0x430217
push ebx
mov eax, 0x85e8
mov word [0x4c5ff0], ax
add eax, 3
mov word [0x4c5ff2], ax
push esi
mov esi, 0x85e5
or dword [0x4c6cc8], 1
mov eax, esi
mov word [0x4c5ff4], ax
add eax, 0x14
mov word [0x4c5ff6], ax
lea edx, [esi + 0x1a]
lea ecx, [esi - 2]
mov eax, edx
mov word [0x4c5ff8], ax
mov eax, ecx
mov word [0x4c5ffa], ax
add eax, 0x12
mov word [0x4c5ffc], ax
lea eax, [esi + 0xd]
mov ebx, eax
add eax, 0xfffffffc
mov esi, eax
lea eax, [edx - 0x19]
mov word [0x4c6010], ax
add eax, 3
mov word [0x4c6012], ax
lea eax, [edx - 0x18]
mov word [0x4c6004], si
mov word [0x4c6014], ax
add eax, 0xffffffb9
pop esi
mov word [0x4c5ffe], bx
mov dword [0x4c6000], 0x85e585f2
mov dword [0x4c6006], 0x85ff85f4
mov word [0x4c600a], cx
mov dword [0x4c600c], 0x85ee85ef
mov word [0x4c6016], ax
pop ebx
xor eax, eax
mov ecx, 0x85a0
xor cx, word [eax + 0x4c5ff0]
add eax, 2
mov word [eax + 0x4c6726], cx
cmp eax, 0x28
jb 0x430219
mov eax, 0x4c6728
ret
Function at 0x43023a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6cc4], 1
jne 0x4302eb
mov eax, 0x85e8
mov word [0x4c6018], ax
add eax, 3
mov word [0x4c601a], ax
or dword [0x4c6cc4], 1
mov edx, 0x85e5
mov eax, edx
mov word [0x4c601c], ax
add eax, 0x14
mov word [0x4c601e], ax
lea ecx, [edx + 0x1a]
mov eax, ecx
mov word [0x4c6020], ax
add eax, 0xffffffe4
mov word [0x4c6022], ax
lea eax, [edx + 7]
mov word [0x4c6024], ax
add eax, 0xfffffff5
mov word [0x4c6026], ax
lea eax, [edx + 0xe]
push edi
mov edi, eax
add eax, 0xfffffffc
mov ecx, eax
mov word [0x4c6036], ax
lea eax, [edx + 0xf]
mov word [0x4c6038], ax
add eax, 0xffffffac
mov word [0x4c6028], di
mov word [0x4c602a], di
mov dword [0x4c602c], 0x85f385e5
mov dword [0x4c6030], 0x85f285ff
mov word [0x4c6034], cx
mov word [0x4c603a], ax
pop edi
xor eax, eax
mov ecx, 0x85a0
xor cx, word [eax + 0x4c6018]
add eax, 2
mov word [eax + 0x4c674e], cx
cmp eax, 0x24
jb 0x4302ed
mov eax, 0x4c6750
ret

Function at 0x4306b9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6cac], 1
jne 0x43070e
or dword [0x4c6cac], 1
mov dword [0x4c60c8], 0xe3c7c5f2
mov dword [0x4c60cc], 0xd4c1c5d2
mov dword [0x4c60d0], 0xd9c5ebc5
mov dword [0x4c60d4], 0x8988d8e5
mov dword [0x4c60d8], 0xc9c1c680
mov dword [0x4c60dc], 0x9ac4c5cc
mov word [0x4c60e0], 0xa080
xor eax, eax
mov cl, byte [eax + 0x4c60c8]
xor cl, 0xa0
mov byte [eax + 0x4c67ac], cl
inc eax
cmp eax, 0x1a
jb 0x430710
mov eax, 0x4c67ac
ret

Function at 0x4307f0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6ca8], 1
jne 0x430856
or dword [0x4c6ca8], 1
mov dword [0x4c60e4], 0xcdd5cee5
mov dword [0x4c60e8], 0xd4c1d2c5
mov dword [0x4c60ec], 0x80cecfc9
mov dword [0x4c60f0], 0xc5c4cec9
mov dword [0x4c60f4], 0xd5cf80d8
mov dword [0x4c60f8], 0xc6cf80d4
mov dword [0x4c60fc], 0xcec1d280
mov word [0x4c6100], 0xc5c7
mov byte [0x4c6102], 0xa0
xor eax, eax
mov cl, byte [eax + 0x4c60e4]
xor cl, 0xa0
mov byte [eax + 0x4c67c8], cl
inc eax
cmp eax, 0x1f
jb 0x430858
mov eax, 0x4c67c8
ret

Function at 0x430873
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6ca4], 1
jne 0x4308bf
or dword [0x4c6ca4], 1
mov dword [0x4c6104], 0xe5c7c5f2
mov dword [0x4c6108], 0xebcdd5ce
mov dword [0x4c610c], 0xd8e5d9c5
mov dword [0x4c6110], 0xc6808988
mov dword [0x4c6114], 0xc5ccc9c1
mov dword [0x4c6118], 0xa0809ac4
xor eax, eax
mov cl, byte [eax + 0x4c6104]
xor cl, 0xa0
mov byte [eax + 0x4c67e8], cl
inc eax
cmp eax, 0x18
jb 0x4308c1
mov eax, 0x4c67e8
ret

Function at 0x430a24
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6ca0], 1
jne 0x430a59
or dword [0x4c6ca0], 1
mov dword [0x4c611c], 0xccccd5ee
mov dword [0x4c6120], 0xcecfc380
mov dword [0x4c6124], 0xd4d8c5d4
mov byte [0x4c6128], 0xa0
xor eax, eax
mov cl, byte [eax + 0x4c611c]
xor cl, 0xa0
mov byte [eax + 0x4c6800], cl
inc eax
cmp eax, 0xd
jb 0x430a5b
mov eax, 0x4c6800
ret
Function at 0x430a76
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6c9c], 1
jne 0x430ac2
or dword [0x4c6c9c], 1
mov dword [0x4c612c], 0xefc7c5f2
mov dword [0x4c6130], 0xebcec5d0
mov dword [0x4c6134], 0xd8e5d9c5
mov dword [0x4c6138], 0xc6808988
mov dword [0x4c613c], 0xc5ccc9c1
mov dword [0x4c6140], 0xa0809ac4
xor eax, eax
mov cl, byte [eax + 0x4c612c]
xor cl, 0xa0
mov byte [eax + 0x4c6810], cl
inc eax
cmp eax, 0x18
jb 0x430ac4
mov eax, 0x4c6810
ret

Function at 0x430adf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6c98], 1
jne 0x430b3b
or dword [0x4c6c98], 1
mov dword [0x4c6144], 0xf1c7c5f2
mov dword [0x4c6148], 0xd9d2c5d5
mov dword [0x4c614c], 0xcfc6cee9
mov dword [0x4c6150], 0x88d9c5eb
mov dword [0x4c6154], 0xc1c68089
mov dword [0x4c6158], 0xc4c5ccc9
mov word [0x4c615c], 0x809a
mov byte [0x4c615e], 0xa0
xor eax, eax
mov cl, byte [eax + 0x4c6144]
xor cl, 0xa0
mov byte [eax + 0x4c6828], cl
inc eax
cmp eax, 0x1b
jb 0x430b3d
mov eax, 0x4c6828
ret

Function at 0x430c2e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6c94], 1
jne 0x430c94
or dword [0x4c6c94], 1
mov dword [0x4c6160], 0xcdd5cee5
mov dword [0x4c6164], 0xd4c1d2c5
mov dword [0x4c6168], 0x80cecfc9
mov dword [0x4c616c], 0xc5c4cec9
mov dword [0x4c6170], 0xd5cf80d8
mov dword [0x4c6174], 0xc6cf80d4
mov dword [0x4c6178], 0xcec1d280
mov word [0x4c617c], 0xc5c7
mov byte [0x4c617e], 0xa0
xor eax, eax
mov cl, byte [eax + 0x4c6160]
xor cl, 0xa0
mov byte [eax + 0x4c6844], cl
inc eax
cmp eax, 0x1f
jb 0x430c96
mov eax, 0x4c6844
ret

Function at 0x430cb1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6c90], 1
jne 0x430d0d
or dword [0x4c6c90], 1
mov dword [0x4c6180], 0xf1c7c5f2
mov dword [0x4c6184], 0xd9d2c5d5
mov dword [0x4c6188], 0xcfc6cee9
mov dword [0x4c618c], 0x88d9c5eb
mov dword [0x4c6190], 0xc1c68089
mov dword [0x4c6194], 0xc4c5ccc9
mov word [0x4c6198], 0x809a
mov byte [0x4c619a], 0xa0
xor eax, eax
mov cl, byte [eax + 0x4c6180]
xor cl, 0xa0
mov byte [eax + 0x4c6864], cl
inc eax
cmp eax, 0x1b
jb 0x430d0f
mov eax, 0x4c6864
ret

Function at 0x430e6f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6c8c], 1
jne 0x430ea4
or dword [0x4c6c8c], 1
mov dword [0x4c619c], 0xccccd5ee
mov dword [0x4c61a0], 0xcecfc380
mov dword [0x4c61a4], 0xd4d8c5d4
mov byte [0x4c61a8], 0xa0
xor eax, eax
mov cl, byte [eax + 0x4c619c]
xor cl, 0xa0
mov byte [eax + 0x4c6880], cl
inc eax
cmp eax, 0xd
jb 0x430ea6
mov eax, 0x4c6880
ret

Function at 0x430ec1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6c88], 1
jne 0x430f0d
or dword [0x4c6c88], 1
mov dword [0x4c61ac], 0xefc7c5f2
mov dword [0x4c61b0], 0xebcec5d0
mov dword [0x4c61b4], 0xd8e5d9c5
mov dword [0x4c61b8], 0xc6808988
mov dword [0x4c61bc], 0xc5ccc9c1
mov dword [0x4c61c0], 0xa0809ac4
xor eax, eax
mov cl, byte [eax + 0x4c61ac]
xor cl, 0xa0
mov byte [eax + 0x4c6890], cl
inc eax
cmp eax, 0x18
jb 0x430f0f
mov eax, 0x4c6890
ret
Function at 0x430f2a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6c84], 1
jne 0x430f86
or dword [0x4c6c84], 1
mov dword [0x4c61c4], 0xf1c7c5f2
mov dword [0x4c61c8], 0xd9d2c5d5
mov dword [0x4c61cc], 0xcfc6cee9
mov dword [0x4c61d0], 0x88d9c5eb
mov dword [0x4c61d4], 0xc1c68089
mov dword [0x4c61d8], 0xc4c5ccc9
mov word [0x4c61dc], 0x809a
mov byte [0x4c61de], 0xa0
xor eax, eax
mov cl, byte [eax + 0x4c61c4]
xor cl, 0xa0
mov byte [eax + 0x4c68a8], cl
inc eax
cmp eax, 0x1b
jb 0x430f88
mov eax, 0x4c68a8
ret

Function at 0x431234
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6c80], 1
mov ecx, 0x85a0
jne 0x4312a0
or dword [0x4c6c80], 1
lea eax, [ecx - 0x18]
mov word [0x4c61e0], ax
add eax, 0x5c
mov word [0x4c61e2], ax
lea eax, [ecx + 0x25]
mov word [0x4c61e4], ax
inc eax
mov word [0x4c61e6], ax
lea eax, [ecx + 0x21]
mov word [0x4c61e8], ax
add eax, 0x14
mov word [0x4c61ea], ax
lea eax, [ecx + 0x2c]
mov word [0x4c61ec], ax
add eax, 8
mov word [0x4c61ee], ax
lea eax, [ecx - 0x17]
mov word [0x4c61f0], ax
mov eax, ecx
mov word [0x4c61f2], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c61e0]
add eax, 2
mov word [eax + 0x4c68c2], dx
cmp eax, 0x14
jb 0x4312a2
mov eax, 0x4c68c4
ret

Function at 0x4312c0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6c7c], 1
mov ecx, 0x85a0
jne 0x43132c
or dword [0x4c6c7c], 1
lea eax, [ecx - 0x18]
mov word [0x4c61f4], ax
add eax, 0x3c
mov word [0x4c61f6], ax
lea eax, [ecx + 0x25]
mov word [0x4c61f8], ax
inc eax
mov word [0x4c61fa], ax
lea eax, [ecx + 0x21]
mov word [0x4c61fc], ax
add eax, 0x14
mov word [0x4c61fe], ax
lea eax, [ecx + 0x2c]
mov word [0x4c6200], ax
add eax, 8
mov word [0x4c6202], ax
lea eax, [ecx - 0x17]
mov word [0x4c6204], ax
mov eax, ecx
mov word [0x4c6206], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c61f4]
add eax, 2
mov word [eax + 0x4c68d6], dx
cmp eax, 0x14
jb 0x43132e
mov eax, 0x4c68d8
ret

Function at 0x43134c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6c78], 1
jne 0x431398
or dword [0x4c6c78], 1
mov dword [0x4c6208], 0xefc7c5f2
mov dword [0x4c620c], 0xebcec5d0
mov dword [0x4c6210], 0xd8e5d9c5
mov dword [0x4c6214], 0xc6808988
mov dword [0x4c6218], 0xc5ccc9c1
mov dword [0x4c621c], 0xa0809ac4
xor eax, eax
mov cl, byte [eax + 0x4c6208]
xor cl, 0xa0
mov byte [eax + 0x4c68ec], cl
inc eax
cmp eax, 0x18
jb 0x43139a
mov eax, 0x4c68ec
ret

Function at 0x4313b5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c6c74], 1
jne 0x431411
or dword [0x4c6c74], 1
mov dword [0x4c6220], 0xf1c7c5f2
mov dword [0x4c6224], 0xd9d2c5d5
mov dword [0x4c6228], 0xd5ccc1f6
mov dword [0x4c622c], 0x88d8e5c5
mov dword [0x4c6230], 0xc1c68089
mov dword [0x4c6234], 0xc4c5ccc9
mov word [0x4c6238], 0x809a
mov byte [0x4c623a], 0xa0
xor eax, eax
mov cl, byte [eax + 0x4c6220]
xor cl, 0xa0
mov byte [eax + 0x4c6904], cl
inc eax
cmp eax, 0x1b
jb 0x431413
mov eax, 0x4c6904
ret