joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40c9e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4f4b4b78
mov bl, 0x2e
mov dword [ebp - 0x10], 0x415c6c43
mov ecx, dword [eax]
mov eax, dword [0x49f978]
mov dword [ebp - 0xc], 0x7d5c4b45
mov word [ebp - 8], 0x4d58
cmp eax, dword [ecx + 4]
jle 0x40ca75
push 0x49f978
call fcn.00437568
add esp, 4
cmp dword [0x49f978], 0xffffffff
jne 0x40ca75
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a07d0], eax
mov ax, word [ebp - 8]
push 0x477020
movq qword [0x4a07c8], xmm0
mov word [0x4a07d4], ax
mov byte [0x4a07d6], bl
call fcn.0043798f
push 0x49f978
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a07c8
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40caf0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x4f4b4b78
mov dword [ebp - 0x10], 0x41426d43
mov dword [ebp - 0xc], 0x587d4a5b
mov ecx, dword [eax]
mov eax, dword [0x49e3ac]
mov word [ebp - 8], 0x2e4d
cmp eax, dword [ecx + 4]
jle 0x40cb7c
push 0x49e3ac
call fcn.00437568
add esp, 4
cmp dword [0x49e3ac], 0xffffffff
jne 0x40cb7c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a0544], eax
mov ax, word [ebp - 8]
push 0x476ff0
movq qword [0x4a053c], xmm0
mov word [0x4a0548], ax
call fcn.0043798f
push 0x49e3ac
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a053c
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40cc20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4f4b4b78
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5e4b6a43
mov ecx, dword [eax]
mov eax, dword [0x49e50c]
mov dword [ebp - 0xc], 0x7d574142
mov word [ebp - 8], 0x4d58
cmp eax, dword [ecx + 4]
jle 0x40ccb5
push 0x49e50c
call fcn.00437568
add esp, 4
cmp dword [0x49e50c], 0xffffffff
jne 0x40ccb5
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49f800], eax
mov ax, word [ebp - 8]
push 0x476f90
movq qword [0x49f7f8], xmm0
mov word [0x49f804], ax
mov byte [0x49f806], bl
call fcn.0043798f
push 0x49e50c
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f7f8
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret
Function at 0x40ccd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x494f404f
mov dword [ebp - 0xc], 0x587d5c4b
mov word [ebp - 8], 0x2e4d
mov ecx, dword [eax]
mov eax, dword [0x49e760]
cmp eax, dword [ecx + 4]
jle 0x40cd5b
push 0x49e760
call fcn.00437568
add esp, 4
cmp dword [0x49e760], 0xffffffff
jne 0x40cd5b
movaps xmm0, xmmword [0x489570]
mov ax, word [ebp - 8]
movups xmmword [0x4a0264], xmm0
push 0x476f70
movq xmm0, qword [ebp - 0x10]
movq qword [0x4a0274], xmm0
mov word [0x4a027c], ax
call fcn.0043798f
push 0x49e760
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0264
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40cd70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x4f4b4b78
mov dword [ebp - 0x10], 0x5b416343
mov dword [ebp - 0xc], 0x587d5a40
mov ecx, dword [eax]
mov eax, dword [0x4a05f0]
mov word [ebp - 8], 0x2e4d
cmp eax, dword [ecx + 4]
jle 0x40cdfc
push 0x4a05f0
call fcn.00437568
add esp, 4
cmp dword [0x4a05f0], 0xffffffff
jne 0x40cdfc
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49f928], eax
mov ax, word [ebp - 8]
push 0x476f50
movq qword [0x49f920], xmm0
mov word [0x49f92c], ax
call fcn.0043798f
push 0x4a05f0
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f920
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40ce10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x4f4b4b78
mov dword [ebp - 0xc], 0x7d686043
mov dword [ebp - 8], 0x2e4d587d
mov ecx, dword [eax]
mov eax, dword [0x49e398]
cmp eax, dword [ecx + 4]
jle 0x40ce8c
push 0x49e398
call fcn.00437568
add esp, 4
cmp dword [0x49e398], 0xffffffff
jne 0x40ce8c
movq xmm0, qword [ebp - 0x10]
mov eax, dword [ebp - 8]
push 0x476f30
movq qword [0x4a06e0], xmm0
mov dword [0x4a06e8], eax
call fcn.0043798f
push 0x49e398
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a06e0
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret
Function at 0x40cea0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4f4b4b78
mov bl, 0x2e
mov dword [ebp - 0x10], 0x7d6b7c43
mov ecx, dword [eax]
mov eax, dword [0x4a05ec]
mov dword [ebp - 0xc], 0x4d587d7a
cmp eax, dword [ecx + 4]
jle 0x40cf25
push 0x4a05ec
call fcn.00437568
add esp, 4
cmp dword [0x4a05ec], 0xffffffff
jne 0x40cf25
movq xmm0, qword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push 0x476f10
movq qword [0x4a06d0], xmm0
mov dword [0x4a06d8], eax
mov byte [0x4a06dc], bl
call fcn.0043798f
push 0x4a05ec
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a06d0
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40d340
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x10], 0x7147595d
mov bl, 0x2e
mov dword [ebp - 0xc], 0x4f4a5e5b
mov ecx, dword [eax]
mov eax, dword [0x4a0004]
mov word [ebp - 8], 0x4b5a
cmp eax, dword [ecx + 4]
jle 0x40d3c6
push 0x4a0004
call fcn.00437568
add esp, 4
cmp dword [0x4a0004], 0xffffffff
jne 0x40d3c6
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x476e30
movq qword [0x49fb48], xmm0
mov word [0x49fb50], ax
mov byte [0x49fb52], bl
call fcn.0043798f
push 0x4a0004
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49fb48
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40d3e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x6f627f7d
mov dword [ebp - 0x10], 0x5a404b49
mov dword [ebp - 0xc], 0x6a766d0a
mov ecx, dword [eax]
mov eax, dword [0x4a0528]
mov word [ebp - 8], 0x2e6c
cmp eax, dword [ecx + 4]
jle 0x40d46c
push 0x4a0528
call fcn.00437568
add esp, 4
cmp dword [0x4a0528], 0xffffffff
jne 0x40d46c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49e7d0], eax
mov ax, word [ebp - 8]
push 0x476e10
movq qword [0x49e7c8], xmm0
mov word [0x49e7d4], ax
call fcn.0043798f
push 0x4a0528
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e7c8
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret
Function at 0x40d480
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x6f7a6b63
mov dword [ebp - 0xc], 0x636f7c68
mov word [ebp - 8], 0x2e6b
mov ecx, dword [eax]
mov eax, dword [0x4a0778]
cmp eax, dword [ecx + 4]
jle 0x40d50b
push 0x4a0778
call fcn.00437568
add esp, 4
cmp dword [0x4a0778], 0xffffffff
jne 0x40d50b
movaps xmm0, xmmword [0x4896c0]
mov ax, word [ebp - 8]
movups xmmword [0x4a0550], xmm0
push 0x476df0
movq xmm0, qword [ebp - 0x10]
movq qword [0x4a0560], xmm0
mov word [0x4a0568], ax
call fcn.0043798f
push 0x4a0778
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0550
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40d740
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x6f627f7d
mov dword [ebp - 0x10], 0x5a404b49
mov dword [ebp - 0xc], 0x617c7e0a
mov ecx, dword [eax]
mov eax, dword [0x4a0538]
mov word [ebp - 8], 0x2e6a
cmp eax, dword [ecx + 4]
jle 0x40d7cc
push 0x4a0538
call fcn.00437568
add esp, 4
cmp dword [0x4a0538], 0xffffffff
jne 0x40d7cc
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49e634], eax
mov ax, word [ebp - 8]
push 0x476d60
movq qword [0x49e62c], xmm0
mov word [0x49e638], ax
call fcn.0043798f
push 0x4a0538
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e62c
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40d7e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x5a485d43
mov dword [ebp - 0x10], 0x425f5d4b
mov dword [ebp - 0xc], 0x617c7e0a
mov ecx, dword [eax]
mov eax, dword [0x4a04fc]
mov word [ebp - 8], 0x2e6a
cmp eax, dword [ecx + 4]
jle 0x40d86c
push 0x4a04fc
call fcn.00437568
add esp, 4
cmp dword [0x4a04fc], 0xffffffff
jne 0x40d86c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49e564], eax
mov ax, word [ebp - 8]
push 0x476d40
movq qword [0x49e55c], xmm0
mov word [0x49e568], ax
call fcn.0043798f
push 0x4a04fc
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e55c
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret
Function at 0x40e340
Capabilities:
Reference processor manufacturer constants

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x10], 0x4b4d564b
mov dword [ebp - 0xc], 0x564b0042
mov word [ebp - 8], 0x2e4b
mov ecx, dword [eax]
mov eax, dword [0x49e438]
cmp eax, dword [ecx + 4]
jle 0x40e3bd
push 0x49e438
call fcn.00437568
add esp, 4
cmp dword [0x49e438], 0xffffffff
jne 0x40e3bd
movq xmm0, qword [ebp - 0x10]
mov ax, word [ebp - 8]
push 0x476b00
movq qword [0x49fa00], xmm0
mov word [0x49fa08], ax
call fcn.0043798f
push 0x49e438
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49fa00
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40ea10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x5b4f4d41
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5e5b415a
mov ecx, dword [eax]
mov eax, dword [0x49e6f8]
mov dword [ebp - 0xc], 0x4b005d4a
mov word [ebp - 8], 0x4b56
cmp eax, dword [ecx + 4]
jle 0x40eaa5
push 0x49e6f8
call fcn.00437568
add esp, 4
cmp dword [0x49e6f8], 0xffffffff
jne 0x40eaa5
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a065c], eax
mov ax, word [ebp - 8]
push 0x476970
movq qword [0x4a0654], xmm0
mov word [0x4a0660], ax
mov byte [0x4a0662], bl
call fcn.0043798f
push 0x49e6f8
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0654
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40ef70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
push ebx
mov dword [ebp - 0x14], 0x4c425f5d
mov bl, 0x2e
mov dword [ebp - 0x10], 0x5d59415c
mov ecx, dword [eax]
mov eax, dword [0x49e3b0]
mov dword [ebp - 0xc], 0x4b005c4b
mov word [ebp - 8], 0x4b56
cmp eax, dword [ecx + 4]
jle 0x40f005
push 0x49e3b0
call fcn.00437568
add esp, 4
cmp dword [0x49e3b0], 0xffffffff
jne 0x40f005
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49e3a4], eax
mov ax, word [ebp - 8]
push 0x476840
movq qword [0x49e39c], xmm0
mov word [0x49e3a8], ax
mov byte [0x49e3aa], bl
call fcn.0043798f
push 0x49e3b0
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49e39c
xor ecx, ebp
pop ebx
call fcn.004373d4
mov esp, ebp
pop ebp
ret
Function at 0x40f0c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x59425f5d
mov dword [ebp - 0x10], 0x4b5a475c
mov dword [ebp - 0xc], 0x564b005c
mov ecx, dword [eax]
mov eax, dword [0x49e89c]
mov word [ebp - 8], 0x2e4b
cmp eax, dword [ecx + 4]
jle 0x40f14c
push 0x49e89c
call fcn.00437568
add esp, 4
cmp dword [0x49e89c], 0xffffffff
jne 0x40f14c
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x4a0438], eax
mov ax, word [ebp - 8]
push 0x476800
movq qword [0x4a0430], xmm0
mov word [0x4a043c], ax
call fcn.0043798f
push 0x49e89c
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x4a0430
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40f640
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x5d5d4856
mov dword [ebp - 0x10], 0x414d4d58
mov dword [ebp - 0xc], 0x564b0040
mov ecx, dword [eax]
mov eax, dword [0x49fe34]
mov word [ebp - 8], 0x2e4b
cmp eax, dword [ecx + 4]
jle 0x40f6cc
push 0x49fe34
call fcn.00437568
add esp, 4
cmp dword [0x49fe34], 0xffffffff
jne 0x40f6cc
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49fd64], eax
mov ax, word [ebp - 8]
push 0x4766e0
movq qword [0x49fd5c], xmm0
mov word [0x49fd68], ax
call fcn.0043798f
push 0x49fe34
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49fd5c
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret

Function at 0x40f820
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x493018]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x14], 0x6f7a606d
mov dword [ebp - 0x10], 0x49637d41
mov dword [ebp - 0xc], 0x564b005c
mov ecx, dword [eax]
mov eax, dword [0x4a0718]
mov word [ebp - 8], 0x2e4b
cmp eax, dword [ecx + 4]
jle 0x40f8ac
push 0x4a0718
call fcn.00437568
add esp, 4
cmp dword [0x4a0718], 0xffffffff
jne 0x40f8ac
mov eax, dword [ebp - 0xc]
movq xmm0, qword [ebp - 0x14]
mov dword [0x49f8f8], eax
mov ax, word [ebp - 8]
push 0x476680
movq qword [0x49f8f0], xmm0
mov word [0x49f8fc], ax
call fcn.0043798f
push 0x4a0718
call fcn.0043751e
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 0x49f8f0
xor ecx, ebp
call fcn.004373d4
mov esp, ebp
pop ebp
ret
Function at 0x4166a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x17], 0
je 0x4166ca
movups xmm0, xmmword [ecx]
mov eax, 0x10
movaps xmm1, xmmword [0x489130]
pxor xmm1, xmm0
movups xmmword [ecx], xmm1
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x18
jb 0x4166c0
mov eax, ecx
ret

Function at 0x4166d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x12], 0
je 0x4166fa
movups xmm0, xmmword [ecx]
mov eax, 0x10
movaps xmm1, xmmword [0x489130]
pxor xmm1, xmm0
movups xmmword [ecx], xmm1
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x13
jb 0x4166f0
mov eax, ecx
ret

Function at 0x416750
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0xd], 0
je 0x416762
xor eax, eax
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0xe
jb 0x416758
mov eax, ecx
ret

Function at 0x4167a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0xb], 0
je 0x4167b2
xor eax, eax
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0xc
jb 0x4167a8
mov eax, ecx
ret

Function at 0x4167c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0xe], 0
je 0x4167d2
xor eax, eax
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0xf
jb 0x4167c8
mov eax, ecx
ret

Function at 0x416840
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x13], 0
je 0x41686a
movups xmm0, xmmword [ecx]
mov eax, 0x10
movaps xmm1, xmmword [0x489130]
pxor xmm1, xmm0
movups xmmword [ecx], xmm1
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x14
jb 0x416860
mov eax, ecx
ret

Function at 0x4168b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0xa], 0
je 0x4168c2
xor eax, eax
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0xb
jb 0x4168b8
mov eax, ecx
ret

Function at 0x4168d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x16], 0
je 0x4168fa
movups xmm0, xmmword [ecx]
mov eax, 0x10
movaps xmm1, xmmword [0x489130]
pxor xmm1, xmm0
movups xmmword [ecx], xmm1
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x17
jb 0x4168f0
mov eax, ecx
ret

Function at 0x4169c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x18], 0
je 0x4169ea
movups xmm0, xmmword [ecx]
mov eax, 0x10
movaps xmm1, xmmword [0x489130]
pxor xmm1, xmm0
movups xmmword [ecx], xmm1
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x19
jb 0x4169e0
mov eax, ecx
ret

Function at 0x4169f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x11], 0
je 0x416a1a
movups xmm0, xmmword [ecx]
mov eax, 0x10
movaps xmm1, xmmword [0x489130]
pxor xmm1, xmm0
movups xmmword [ecx], xmm1
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x12
jb 0x416a10
mov eax, ecx
ret

Function at 0x416a40
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x15], 0
je 0x416a6a
movups xmm0, xmmword [ecx]
mov eax, 0x10
movaps xmm1, xmmword [0x489130]
pxor xmm1, xmm0
movups xmmword [ecx], xmm1
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x16
jb 0x416a60
mov eax, ecx
ret
Function at 0x416ad0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0xc], 0
je 0x416ae2
xor eax, eax
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0xd
jb 0x416ad8
mov eax, ecx
ret

Function at 0x416af0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x19], 0
je 0x416b1a
movups xmm0, xmmword [ecx]
mov eax, 0x10
movaps xmm1, xmmword [0x489130]
pxor xmm1, xmm0
movups xmmword [ecx], xmm1
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x1a
jb 0x416b10
mov eax, ecx
ret

Function at 0x416b20
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x14], 0
je 0x416b4a
movups xmm0, xmmword [ecx]
mov eax, 0x10
movaps xmm1, xmmword [0x489130]
pxor xmm1, xmm0
movups xmmword [ecx], xmm1
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x15
jb 0x416b40
mov eax, ecx
ret
Function at 0x418980
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x1f], 0
je 0x4189a4
movaps xmm1, xmmword [0x489130]
xor eax, eax
nop
movups xmm0, xmmword [eax + ecx]
pxor xmm0, xmm1
movups xmmword [eax + ecx], xmm0
add eax, 0x10
cmp eax, 0x20
jb 0x418990
ret

Function at 0x4189b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x12], 0
je 0x4189da
movups xmm0, xmmword [ecx]
mov eax, 0x10
movaps xmm1, xmmword [0x489130]
pxor xmm1, xmm0
movups xmmword [ecx], xmm1
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x13
jb 0x4189d0
ret

Function at 0x418a30
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0xd], 0
je 0x418a42
xor eax, eax
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0xe
jb 0x418a38
ret

Function at 0x418a50
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x1e], 0
je 0x418a7a
movups xmm0, xmmword [ecx]
mov eax, 0x10
movaps xmm1, xmmword [0x489130]
pxor xmm1, xmm0
movups xmmword [ecx], xmm1
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x1f
jb 0x418a70
ret

Function at 0x418ab0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0xb], 0
je 0x418ac2
xor eax, eax
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0xc
jb 0x418ab8
ret

Function at 0x418ad0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0xe], 0
je 0x418ae2
xor eax, eax
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0xf
jb 0x418ad8
ret

Function at 0x418b30
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x13], 0
je 0x418b5a
movups xmm0, xmmword [ecx]
mov eax, 0x10
movaps xmm1, xmmword [0x489130]
pxor xmm1, xmm0
movups xmmword [ecx], xmm1
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x14
jb 0x418b50
ret

Function at 0x418b60
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x1c], 0
je 0x418b8a
movups xmm0, xmmword [ecx]
mov eax, 0x10
movaps xmm1, xmmword [0x489130]
pxor xmm1, xmm0
movups xmmword [ecx], xmm1
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x1d
jb 0x418b80
ret

Function at 0x418bc0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0xa], 0
je 0x418bd2
xor eax, eax
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0xb
jb 0x418bc8
ret

Function at 0x418be0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x21], 0
je 0x418c1a
movaps xmm1, xmmword [0x489130]
xor eax, eax
nop
movups xmm0, xmmword [eax + ecx]
pxor xmm0, xmm1
movups xmmword [eax + ecx], xmm0
add eax, 0x10
cmp eax, 0x20
jb 0x418bf0
cmp eax, 0x22
jae 0x418c1a
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x22
jb 0x418c10
ret

Function at 0x418c20
Capabilities:
Encode data using xor

Disassembly:
cmp byte [ecx + 0x16], 0
je 0x418c4a
movups xmm0, xmmword [ecx]
mov eax, 0x10
movaps xmm1, xmmword [0x489130]
pxor xmm1, xmm0
movups xmmword [ecx], xmm1
nop dword [eax]
xor byte [eax + ecx], 0x2e
inc eax
cmp eax, 0x17
jb 0x418c40
ret