joyce8/EMBER2024-capa huggingface dataset:
Function at 0x42a8dc
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x48ada5
call fcn.00489c38
sub esp, 0xb0
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
lea eax, [ebp - 0x10]
push eax
push ebx
push dword [ebp + 0xc]
mov dword [ebp - 0x10], ebx
push ebx
push 0x1300
call dword [0x49212c]
test eax, eax
jne 0x42a924
call fcn.0042aa7d
mov ecx, dword [ebp + 8]
push eax
call fcn.00406aa9
mov eax, dword [ebp + 8]
jmp 0x42aa6e
test byte [0x4c26f0], 1
jne 0x42a945
or dword [0x4c26f0], 1
mov dword [0x4c16c8], 0x62c2b2f
mov byte [0x4c16cc], 0x26
xor eax, eax
mov cl, byte [eax + 0x4c16c8]
xor cl, 0x26
mov byte [eax + 0x4c1e9c], cl
inc eax
cmp eax, 5
jb 0x42a947
push 0xf
mov esi, 0x4c1e9c
pop edi
mov eax, esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x42a972
sub eax, ecx
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.00404c54
mov dword [ebp - 4], ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00404cc9
lea eax, [ebp - 0x2c]
push eax
lea edi, [ebp - 0x48]
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.0042fd99
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00404cea
push ebx
push 1
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.00404cea
push dword [ebp - 0x10]
call dword [0x4920e0]
push ebx
push dword [ebp + 0xc]
lea esi, [ebp - 0xb8]
call fcn.0042adc8
pop ecx
pop ecx
push eax
mov byte [ebp - 4], 5
call fcn.0042aae6
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00406ae6
add esp, 0xc
push 0x4ad294
push eax
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 6
call fcn.0040d66d
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 7
call fcn.0040b592
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.00404cea
push ebx
push 1
lea ecx, [ebp - 0x80]
call fcn.00404cea
push ebx
push 1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 4
call fcn.00404cea
mov edi, dword [ebp + 8]
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ebx
mov byte [edi], bl
call fcn.00404c0a
push ebx
push 1
mov ecx, esi
call fcn.00404cea
mov eax, edi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret

Function at 0x42aa7d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26f4], 1
jne 0x42aac9
or dword [0x4c26f4], 1
mov dword [0x4c16b0], 0x43544873
mov dword [0x4c16b4], 0x48414945
mov dword [0x4c16b8], 0x42435c4f
mov dword [0x4c16bc], 0x54544306
mov dword [0x4c16c0], 0x45065449
mov dword [0x4c16c4], 0x26434249
xor eax, eax
mov cl, byte [eax + 0x4c16b0]
xor cl, 0x26
mov byte [eax + 0x4c1e84], cl
inc eax
cmp eax, 0x18
jb 0x42aacb
mov eax, 0x4c1e84
ret

Function at 0x42aae6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26ec], 1
jne 0x42ab24
or dword [0x4c26ec], 1
mov dword [0x4c16d0], 0x54430e06
mov dword [0x4c16d4], 0x6544954
mov dword [0x4c16d8], 0x43424945
mov word [0x4c16dc], 0x61c
mov byte [0x4c16de], 0x26
xor eax, eax
mov cl, byte [eax + 0x4c16d0]
xor cl, 0x26
mov byte [eax + 0x4c1ea4], cl
inc eax
cmp eax, 0xf
jb 0x42ab26
mov eax, 0x4c1ea4
ret
Function at 0x42adc8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
and dword [ebp - 4], 0
test byte [0x4c26e8], 1
jne 0x42adf3
or dword [0x4c26e8], 1
mov dword [0x4c16e0], 0x424a4a03
mov byte [0x4c16e4], 0x26
xor eax, eax
mov cl, byte [eax + 0x4c16e0]
xor cl, 0x26
mov byte [eax + 0x4c1eb4], cl
inc eax
cmp eax, 5
jb 0x42adf5
push dword [ebp + 0xc]
lea eax, [ebp - 0x48]
push dword [ebp + 8]
push 0x4c1eb4
push eax
call fcn.0042fdf2
and dword [esi + 0x10], 0
add esp, 0x10
lea eax, [ebp - 0x48]
mov dword [esi + 0x14], 0xf
push eax
mov ecx, esi
mov byte [esi], 0
call fcn.00404cc9
mov eax, esi
leave
ret

Function at 0x42af97
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26e4], 1
jne 0x42aff3
or dword [0x4c26e4], 1
mov dword [0x4c16e8], 0x6b524361
mov dword [0x4c16ec], 0x4a534249
mov dword [0x4c16f0], 0x4a4f6043
mov dword [0x4c16f4], 0x4b476843
mov dword [0x4c16f8], 0x47400643
mov dword [0x4c16fc], 0x42434a4f
mov word [0x4c1700], 0x61c
mov byte [0x4c1702], 0x26
xor eax, eax
mov cl, byte [eax + 0x4c16e8]
xor cl, 0x26
mov byte [eax + 0x4c1ebc], cl
inc eax
cmp eax, 0x1b
jb 0x42aff5
mov eax, 0x4c1ebc
ret

Function at 0x42b010
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26e0], 1
jne 0x42b06d
or dword [0x4c26e0], 1
mov dword [0x4c1704], 0x65524375
mov dword [0x4c1708], 0x43545453
mov dword [0x4c170c], 0x4f625248
mov dword [0x4c1710], 0x52454354
mov dword [0x4c1714], 0x65f5449
mov dword [0x4c1718], 0x4a4f4740
mov dword [0x4c171c], 0x61c4243
mov byte [0x4c1720], 0x26
xor eax, eax
mov cl, byte [eax + 0x4c1704]
xor cl, 0x26
mov byte [eax + 0x4c1ed8], cl
inc eax
cmp eax, 0x1d
jb 0x42b06f
mov eax, 0x4c1ed8
ret

Function at 0x42b181
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26dc], 1
jne 0x42b1de
or dword [0x4c26dc], 1
mov dword [0x4c1724], 0x65524361
mov dword [0x4c1728], 0x43545453
mov dword [0x4c172c], 0x4f625248
mov dword [0x4c1730], 0x52454354
mov dword [0x4c1734], 0x65f5449
mov dword [0x4c1738], 0x4a4f4740
mov dword [0x4c173c], 0x61c4243
mov byte [0x4c1740], 0x26
xor eax, eax
mov cl, byte [eax + 0x4c1724]
xor cl, 0x26
mov byte [eax + 0x4c1ef8], cl
inc eax
cmp eax, 0x1d
jb 0x42b1e0
mov eax, 0x4c1ef8
ret
Function at 0x42b399
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26d8], 1
jne 0x42b508
mov eax, 0x837a
mov ecx, eax
mov word [0x4c1748], cx
mov word [0x4c174a], cx
add ecx, 0xfffffffb
mov word [0x4c174c], cx
lea ecx, [eax - 0x28]
mov word [0x4c174e], cx
add ecx, 2
lea edx, [eax - 0x2b]
mov word [0x4c1750], cx
push ebx
mov ecx, edx
mov word [0x4c1752], cx
add ecx, 0xfffffff9
push esi
mov esi, ecx
lea ecx, [eax - 0x3a]
mov word [0x4c1754], si
lea esi, [eax - 0x39]
mov word [0x4c1756], si
mov word [0x4c1764], cx
add esi, 8
add edx, 0xfffffffb
mov ecx, esi
push edi
lea edi, [eax - 0x37]
mov word [0x4c1766], cx
mov ecx, eax
mov word [0x4c175c], dx
mov edx, edi
mov word [0x4c1768], cx
mov word [0x4c176a], cx
add ecx, 0xffffff9c
mov word [0x4c175e], dx
mov edx, ecx
or dword [0x4c26d8], 1
mov word [0x4c176c], dx
lea edx, [eax - 0x68]
mov ebx, edx
mov word [0x4c176e], bx
mov ebx, ecx
mov word [0x4c1770], bx
lea ebx, [eax - 0x5b]
mov word [0x4c177e], ax
mov word [0x4c1772], bx
mov ebx, ecx
mov ecx, eax
add eax, 0xfffffffc
mov word [0x4c1780], ax
lea eax, [ecx - 0x38]
mov word [0x4c1786], ax
add eax, 0x11
mov word [0x4c1788], ax
lea eax, [ecx - 0x35]
mov word [0x4c178a], ax
add eax, 0xd
mov word [0x4c178c], ax
lea eax, [ecx - 0x12]
mov word [0x4c178e], ax
add eax, 0xffffffdf
pop edi
mov word [0x4c1790], ax
lea eax, [ecx - 0x54]
pop esi
mov word [0x4c1774], bx
mov dword [0x4c1758], 0x834f8360
mov dword [0x4c1760], 0x8348836f
mov word [0x4c1776], dx
mov dword [0x4c1778], 0x83168364
mov word [0x4c177c], cx
mov dword [0x4c1782], 0x83498354
mov dword [0x4c1792], 0x8343834b
mov word [0x4c1796], ax
pop ebx
xor eax, eax
mov ecx, 0x8326
xor cx, word [eax + 0x4c1748]
add eax, 2
mov word [eax + 0x4c1f16], cx
cmp eax, 0x50
jb 0x42b50a
mov eax, 0x4c1f18
ret

Function at 0x42b52b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26d4], 1
jne 0x42b580
or dword [0x4c26d4], 1
mov dword [0x4c1798], 0x50064968
mov dword [0x4c179c], 0x4f555443
mov dword [0x4c17a0], 0x4f064849
mov dword [0x4c17a4], 0x6494048
mov dword [0x4c17a8], 0x4f475047
mov dword [0x4c17ac], 0x4a44474a
mov word [0x4c17b0], 0x2643
xor eax, eax
mov cl, byte [eax + 0x4c1798]
xor cl, 0x26
mov byte [eax + 0x4c1f68], cl
inc eax
cmp eax, 0x1a
jb 0x42b582
mov eax, 0x4c1f68
ret

Function at 0x42b76f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26d0], 1
jne 0x42b7c4
or dword [0x4c26d0], 1
mov dword [0x4c17b4], 0x50064968
mov dword [0x4c17b8], 0x4f555443
mov dword [0x4c17bc], 0x4f064849
mov dword [0x4c17c0], 0x6494048
mov dword [0x4c17c4], 0x4f475047
mov dword [0x4c17c8], 0x4a44474a
mov word [0x4c17cc], 0x2643
xor eax, eax
mov cl, byte [eax + 0x4c17b4]
xor cl, 0x26
mov byte [eax + 0x4c1f84], cl
inc eax
cmp eax, 0x1a
jb 0x42b7c6
mov eax, 0x4c1f84
ret
Function at 0x42b7e1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26cc], 1
jne 0x42b847
or dword [0x4c26cc], 1
mov dword [0x4c17d0], 0x4750486f
mov dword [0x4c17d4], 0x6424f4a
mov dword [0x4c17d8], 0x55544350
mov dword [0x4c17dc], 0x648494f
mov dword [0x4c17e0], 0x4940484f
mov dword [0x4c17e4], 0x414f5506
mov dword [0x4c17e8], 0x53524748
mov word [0x4c17ec], 0x4354
mov byte [0x4c17ee], 0x26
xor eax, eax
mov cl, byte [eax + 0x4c17d0]
xor cl, 0x26
mov byte [eax + 0x4c1fa0], cl
inc eax
cmp eax, 0x1f
jb 0x42b849
mov eax, 0x4c1fa0
ret

Function at 0x42bb4e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26c8], 1
jne 0x42bbb4
or dword [0x4c26c8], 1
mov dword [0x4c17f0], 0x4a4f4760
mov dword [0x4c17f4], 0x52064243
mov dword [0x4c17f8], 0x43410649
mov dword [0x4c17fc], 0x43520652
mov dword [0x4c1800], 0x4006564b
mov dword [0x4c1804], 0x43424a49
mov dword [0x4c1808], 0x47560654
mov word [0x4c180c], 0x4e52
mov byte [0x4c180e], 0x26
xor eax, eax
mov cl, byte [eax + 0x4c17f0]
xor cl, 0x26
mov byte [eax + 0x4c1fc0], cl
inc eax
cmp eax, 0x1f
jb 0x42bbb6
mov eax, 0x4c1fc0
ret

Function at 0x42bd26
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26c4], 1
jne 0x42bd78
or dword [0x4c26c4], 1
mov dword [0x4c1810], 0x60524361
mov dword [0x4c1814], 0x43424a49
mov dword [0x4c1818], 0x52477654
mov dword [0x4c181c], 0x4740064e
mov dword [0x4c1820], 0x42434a4f
mov word [0x4c1824], 0x61c
mov byte [0x4c1826], 0x26
xor eax, eax
mov cl, byte [eax + 0x4c1810]
xor cl, 0x26
mov byte [eax + 0x4c1fe0], cl
inc eax
cmp eax, 0x17
jb 0x42bd7a
mov eax, 0x4c1fe0
ret

Function at 0x42c042
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26c0], 1
mov edx, 0x8326
jne 0x42c0d9
or dword [0x4c26c0], 1
lea ecx, [edx - 0x23]
mov eax, ecx
mov word [0x4c1828], ax
add eax, 0x73
mov word [0x4c182a], ax
push esi
lea eax, [edx + 0x2e]
mov esi, eax
add eax, 0xfffffff3
mov word [0x4c1834], ax
lea eax, [edx + 0x25]
mov word [0x4c1836], ax
add eax, 0x26
mov word [0x4c1838], ax
lea eax, [edx - 0x16]
mov word [0x4c182c], si
add esi, 0xfffffff5
mov word [0x4c183a], ax
add eax, 2
mov word [0x4c183c], ax
lea eax, [edx - 0x11]
mov word [0x4c183e], ax
mov eax, edx
mov word [0x4c182e], si
mov dword [0x4c1830], 0x83548341
mov dword [0x4c1840], 0x83038314
mov word [0x4c1844], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x4c1828]
add eax, 2
mov word [eax + 0x4c1ff6], cx
cmp eax, 0x1e
jb 0x42c0db
mov eax, 0x4c1ff8
ret

Function at 0x42c0f9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26bc], 1
mov ecx, 0x8326
jne 0x42c13a
or dword [0x4c26bc], 1
lea eax, [ecx + 0x37]
mov word [0x4c1848], ax
add eax, 0xfffffff9
mov word [0x4c184a], ax
lea eax, [ecx + 0x1a]
mov word [0x4c184c], ax
add eax, 0x1b
mov word [0x4c184e], ax
mov eax, ecx
mov word [0x4c1850], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c1848]
add eax, 2
mov word [eax + 0x4c2016], dx
cmp eax, 0xa
jb 0x42c13c
mov eax, 0x4c2018
ret
Function at 0x42c15a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26b8], 1
mov ecx, 0x8326
jne 0x42c1ad
or dword [0x4c26b8], 1
lea eax, [ecx + 0x37]
mov word [0x4c1854], ax
add eax, 0xfffffff9
mov word [0x4c1856], ax
lea eax, [ecx + 0x1a]
mov word [0x4c1858], ax
add eax, 0xffffffd5
mov word [0x4c185a], ax
lea eax, [ecx - 0x12]
mov word [0x4c185c], ax
add eax, 0x47
mov word [0x4c185e], ax
mov eax, ecx
mov word [0x4c1860], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c1854]
add eax, 2
mov word [eax + 0x4c2022], dx
cmp eax, 0xe
jb 0x42c1af
mov eax, 0x4c2024
ret

Function at 0x42c1cd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26b4], 1
mov ecx, 0x8326
jne 0x42c220
or dword [0x4c26b4], 1
lea eax, [ecx + 0x37]
mov word [0x4c1864], ax
add eax, 0xfffffff9
mov word [0x4c1866], ax
lea eax, [ecx + 0x1a]
mov word [0x4c1868], ax
add eax, 0xffffffd0
mov word [0x4c186a], ax
lea eax, [ecx - 0x14]
mov word [0x4c186c], ax
add eax, 0x49
mov word [0x4c186e], ax
mov eax, ecx
mov word [0x4c1870], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c1864]
add eax, 2
mov word [eax + 0x4c2032], dx
cmp eax, 0xe
jb 0x42c222
mov eax, 0x4c2034
ret

Function at 0x42c240
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26b0], 1
mov ecx, 0x8326
jne 0x42c281
or dword [0x4c26b0], 1
lea eax, [ecx + 0x37]
mov word [0x4c1874], ax
add eax, 0xfffffff9
mov word [0x4c1876], ax
lea eax, [ecx + 0x1a]
mov word [0x4c1878], ax
add eax, 0x1b
mov word [0x4c187a], ax
mov eax, ecx
mov word [0x4c187c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c1874]
add eax, 2
mov word [eax + 0x4c2042], dx
cmp eax, 0xa
jb 0x42c283
mov eax, 0x4c2044
ret

Function at 0x42c2a1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26ac], 1
mov ecx, 0x8326
jne 0x42c2f4
or dword [0x4c26ac], 1
lea eax, [ecx + 0x37]
mov word [0x4c1880], ax
add eax, 0xfffffff9
mov word [0x4c1882], ax
lea eax, [ecx + 0x1a]
mov word [0x4c1884], ax
add eax, 0xffffffd5
mov word [0x4c1886], ax
lea eax, [ecx - 0x12]
mov word [0x4c1888], ax
add eax, 0x47
mov word [0x4c188a], ax
mov eax, ecx
mov word [0x4c188c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c1880]
add eax, 2
mov word [eax + 0x4c204e], dx
cmp eax, 0xe
jb 0x42c2f6
mov eax, 0x4c2050
ret
Function at 0x42c3ee
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26a8], 1
mov ecx, 0x8326
jne 0x42c633
or dword [0x4c26a8], 1
lea eax, [ecx - 0x10]
mov word [0x4c1898], ax
inc eax
mov word [0x4c189a], ax
lea eax, [ecx - 0x12]
mov word [0x4c189c], ax
inc eax
mov word [0x4c189e], ax
lea eax, [ecx - 0x14]
mov word [0x4c18a0], ax
inc eax
mov word [0x4c18a2], ax
lea eax, [ecx - 0x16]
mov word [0x4c18a4], ax
inc eax
mov word [0x4c18a6], ax
lea eax, [ecx - 8]
mov word [0x4c18a8], ax
inc eax
mov word [0x4c18aa], ax
lea eax, [ecx + 0x41]
mov word [0x4c18ac], ax
add eax, 0xfffffffd
mov word [0x4c18ae], ax
lea eax, [ecx + 0x3f]
mov word [0x4c18b0], ax
add eax, 0xfffffffd
mov word [0x4c18b2], ax
lea eax, [ecx + 0x3d]
mov word [0x4c18b4], ax
add eax, 0xfffffffd
mov word [0x4c18b6], ax
lea eax, [ecx + 0x3b]
mov word [0x4c18b8], ax
add eax, 0xd
mov word [0x4c18ba], ax
lea eax, [ecx + 0x49]
mov word [0x4c18bc], ax
add eax, 0xfffffffd
mov word [0x4c18be], ax
lea eax, [ecx + 0x47]
mov word [0x4c18c0], ax
add eax, 0xfffffffd
mov word [0x4c18c2], ax
lea eax, [ecx + 0x45]
mov word [0x4c18c4], ax
add eax, 0xfffffffd
mov word [0x4c18c6], ax
lea eax, [ecx + 0x43]
mov word [0x4c18c8], ax
add eax, 0xd
mov word [0x4c18ca], ax
lea eax, [ecx + 0x51]
mov word [0x4c18cc], ax
add eax, 0xfffffffd
mov word [0x4c18ce], ax
lea eax, [ecx + 0x4f]
mov word [0x4c18d0], ax
add eax, 0xfffffffd
mov word [0x4c18d2], ax
lea eax, [ecx + 0x4d]
mov word [0x4c18d4], ax
add eax, 0xfffffffd
mov word [0x4c18d6], ax
lea eax, [ecx + 0x4b]
mov word [0x4c18d8], ax
add eax, 0xd
mov word [0x4c18da], ax
lea eax, [ecx + 0x59]
mov word [0x4c18dc], ax
add eax, 0xfffffffd
mov word [0x4c18de], ax
lea eax, [ecx + 0x21]
mov word [0x4c18e0], ax
add eax, 0xfffffffd
mov word [0x4c18e2], ax
lea eax, [ecx + 0x1f]
mov word [0x4c18e4], ax
add eax, 0xfffffffd
mov word [0x4c18e6], ax
lea eax, [ecx + 0x1d]
mov word [0x4c18e8], ax
add eax, 0xfffffffd
mov word [0x4c18ea], ax
lea eax, [ecx + 0x1b]
mov word [0x4c18ec], ax
add eax, 0xd
mov word [0x4c18ee], ax
lea eax, [ecx + 0x29]
mov word [0x4c18f0], ax
add eax, 0xfffffffd
mov word [0x4c18f2], ax
lea eax, [ecx + 0x27]
mov word [0x4c18f4], ax
add eax, 0xfffffffd
mov word [0x4c18f6], ax
lea eax, [ecx + 0x25]
mov word [0x4c18f8], ax
add eax, 0xfffffffd
mov word [0x4c18fa], ax
lea eax, [ecx + 0x23]
mov word [0x4c18fc], ax
add eax, 0xd
mov word [0x4c18fe], ax
lea eax, [ecx + 0x31]
mov word [0x4c1900], ax
add eax, 0xfffffffd
mov word [0x4c1902], ax
lea eax, [ecx + 0x2f]
mov word [0x4c1904], ax
add eax, 0xfffffffd
mov word [0x4c1906], ax
lea eax, [ecx + 0x2d]
mov word [0x4c1908], ax
add eax, 0xfffffffd
mov word [0x4c190a], ax
lea eax, [ecx + 0x2b]
mov word [0x4c190c], ax
add eax, 0xd
mov word [0x4c190e], ax
lea eax, [ecx + 0x39]
mov word [0x4c1910], ax
add eax, 0xfffffffd
mov word [0x4c1912], ax
mov eax, ecx
mov word [0x4c1914], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c1898]
add eax, 2
mov word [eax + 0x4c205e], dx
cmp eax, 0x7e
jb 0x42c635
mov eax, 0x4c2060
ret
Function at 0x42cd05
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26a4], 1
jne 0x42cd6c
or dword [0x4c26a4], 1
mov dword [0x4c1918], 0x5c795c4b
mov dword [0x4c191c], 0x5479564f
mov dword [0x4c1920], 0x43424743
mov dword [0x4c1924], 0x484f7954
mov dword [0x4c1928], 0x4079524f
mov dword [0x4c192c], 0xe434a4f
mov dword [0x4c1930], 0x4740060f
mov dword [0x4c1934], 0x42434a4f
mov byte [0x4c1938], 0x26
xor eax, eax
mov cl, byte [eax + 0x4c1918]
xor cl, 0x26
mov byte [eax + 0x4c20e0], cl
inc eax
cmp eax, 0x21
jb 0x42cd6e
mov eax, 0x4c20e0
ret

Function at 0x42cd89
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c26a0], 1
jne 0x42cdf0
or dword [0x4c26a0], 1
mov dword [0x4c193c], 0x5c795c4b
mov dword [0x4c1940], 0x5479564f
mov dword [0x4c1944], 0x43424743
mov dword [0x4c1948], 0x4f407954
mov dword [0x4c194c], 0x5579434a
mov dword [0x4c1950], 0xe524752
mov dword [0x4c1954], 0x4740060f
mov dword [0x4c1958], 0x42434a4f
mov byte [0x4c195c], 0x26
xor eax, eax
mov cl, byte [eax + 0x4c193c]
xor cl, 0x26
mov byte [eax + 0x4c2104], cl
inc eax
cmp eax, 0x21
jb 0x42cdf2
mov eax, 0x4c2104
ret

Function at 0x42ce0d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c269c], 1
jne 0x42ce8b
or dword [0x4c269c], 1
mov dword [0x4c1960], 0x5c795c4b
mov dword [0x4c1964], 0x5479564f
mov dword [0x4c1968], 0x43424743
mov dword [0x4c196c], 0x5e437954
mov dword [0x4c1970], 0x45475452
mov dword [0x4c1974], 0x4f407952
mov dword [0x4c1978], 0x5279434a
mov dword [0x4c197c], 0x434e7949
mov dword [0x4c1980], 0xf0e5647
mov dword [0x4c1984], 0x4f474006
mov dword [0x4c1988], 0x2642434a
xor eax, eax
mov cl, byte [eax + 0x4c1960]
xor cl, 0x26
mov byte [eax + 0x4c2128], cl
inc eax
cmp eax, 0x2c
jb 0x42ce8d
mov eax, 0x4c2128
ret

Function at 0x42cea8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2698], 1
jne 0x42cf12
or dword [0x4c2698], 1
mov dword [0x4c198c], 0x4a4f4760
mov dword [0x4c1990], 0x52064243
mov dword [0x4c1994], 0x54450649
mov dword [0x4c1998], 0x43524743
mov dword [0x4c199c], 0x55434206
mov dword [0x4c19a0], 0x47484f52
mov dword [0x4c19a4], 0x48494f52
mov dword [0x4c19a8], 0x52475606
mov dword [0x4c19ac], 0x26061c4e
xor eax, eax
mov cl, byte [eax + 0x4c198c]
xor cl, 0x26
mov byte [eax + 0x4c2154], cl
inc eax
cmp eax, 0x24
jb 0x42cf14
mov eax, 0x4c2154
ret

Function at 0x42cf2f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2694], 1
jne 0x42cf95
or dword [0x4c2694], 1
mov dword [0x4c19b0], 0x4a4f4760
mov dword [0x4c19b4], 0x52064243
mov dword [0x4c19b8], 0x54450649
mov dword [0x4c19bc], 0x43524743
mov dword [0x4c19c0], 0x52534906
mov dword [0x4c19c4], 0x6525356
mov dword [0x4c19c8], 0x434a4f40
mov word [0x4c19cc], 0x61c
mov byte [0x4c19ce], 0x26
xor eax, eax
mov cl, byte [eax + 0x4c19b0]
xor cl, 0x26
mov byte [eax + 0x4c2178], cl
inc eax
cmp eax, 0x1f
jb 0x42cf97
mov eax, 0x4c2178
ret
Function at 0x42cfcf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2690], 1
jne 0x42d00d
or dword [0x4c2690], 1
mov dword [0x4c19d0], 0x4971556f
mov dword [0x4c19d4], 0x76121051
mov dword [0x4c19d8], 0x43454954
mov word [0x4c19dc], 0x5555
mov byte [0x4c19de], 0x26
xor eax, eax
mov cl, byte [eax + 0x4c19d0]
xor cl, 0x26
mov byte [eax + 0x4c2198], cl
inc eax
cmp eax, 0xf
jb 0x42d00f
mov eax, 0x4c2198
ret

Function at 0x42d125
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c268c], 1
jne 0x42d18e
or dword [0x4c268c], 1
mov dword [0x4c19e0], 0x494a4a67
mov dword [0x4c19e4], 0x43524745
mov dword [0x4c19e8], 0x6f424867
mov dword [0x4c19ec], 0x4f524f48
mov dword [0x4c19f0], 0x5c4f4a47
mov dword [0x4c19f4], 0x424f7543
mov dword [0x4c19f8], 0x4f474006
mov dword [0x4c19fc], 0x1c42434a
mov word [0x4c1a00], 0x2606
xor eax, eax
mov cl, byte [eax + 0x4c19e0]
xor cl, 0x26
mov byte [eax + 0x4c21a8], cl
inc eax
cmp eax, 0x22
jb 0x42d190
mov eax, 0x4c21a8
ret

Function at 0x42d1ab
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2688], 1
jne 0x42d20a
or dword [0x4c2688], 1
mov dword [0x4c1a04], 0x45434e65
mov dword [0x4c1a08], 0x4d49724d
mov dword [0x4c1a0c], 0x436b4843
mov dword [0x4c1a10], 0x5443444b
mov dword [0x4c1a14], 0x564f4e55
mov dword [0x4c1a18], 0x4f474006
mov dword [0x4c1a1c], 0x1c42434a
mov word [0x4c1a20], 0x2606
xor eax, eax
mov cl, byte [eax + 0x4c1a04]
xor cl, 0x26
mov byte [eax + 0x4c21cc], cl
inc eax
cmp eax, 0x1e
jb 0x42d20c
mov eax, 0x4c21cc
ret

Function at 0x42d470
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c267c], 1
jne 0x42d4f5
or dword [0x4c267c], 1
mov dword [0x4c1a38], 0x48484765
mov dword [0x4c1a3c], 0x57065249
mov dword [0x4c1a40], 0x5f544353
mov dword [0x4c1a44], 0x10064706
mov dword [0x4c1a48], 0x4f440612
mov dword [0x4c1a4c], 0x4f500652
mov dword [0x4c1a50], 0x49065143
mov dword [0x4c1a54], 0x14150648
mov dword [0x4c1a58], 0x524f4406
mov dword [0x4c1a5c], 0x484f5106
mov dword [0x4c1a60], 0x55514942
mov byte [0x4c1a64], 0x26
xor eax, eax
mov cl, byte [eax + 0x4c1a38]
xor cl, 0x26
mov byte [eax + 0x4c2200], cl
inc eax
cmp eax, 0x2d
jb 0x42d4f7
mov eax, 0x4c2200
ret

Function at 0x42d512
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2678], 1
jne 0x42d5c2
or dword [0x4c2678], 1
push ebx
push esi
mov eax, 0x836e
mov word [0x4c1a68], ax
dec eax
mov word [0x4c1a6a], ax
push edi
mov edi, 0x8363
mov eax, edi
mov word [0x4c1a6c], ax
add eax, 0x1c
mov word [0x4c1a6e], ax
lea esi, [edi + 0x16]
mov eax, esi
mov word [0x4c1a70], ax
lea edx, [edi + 7]
mov eax, edx
mov word [0x4c1a72], ax
dec eax
mov word [0x4c1a74], ax
lea ecx, [edi + 2]
mov eax, ecx
mov word [0x4c1a76], ax
add eax, 2
mov ebx, eax
lea eax, [edi + 0xc]
pop edi
mov word [0x4c1a86], ax
add eax, 0xffffffb7
pop esi
mov word [0x4c1a78], bx
mov dword [0x4c1a7a], 0x8379836a
mov dword [0x4c1a7e], 0x8367836b
mov dword [0x4c1a82], 0x836e8365
mov dword [0x4c1a88], 0x83638368
mov word [0x4c1a8c], ax
pop ebx
xor eax, eax
mov ecx, 0x8326
xor cx, word [eax + 0x4c1a68]
add eax, 2
mov word [eax + 0x4c222e], cx
cmp eax, 0x26
jb 0x42d5c4
mov eax, 0x4c2230
ret