joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4077e6
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c7370], 1
jne 0x407a6e
or dword [0x4c7370], 1
mov dword [0x4c1ca0], 0x1e430204
mov dword [0x4c1ca4], 0x18020919
mov dword [0x4c1ca8], 0x81e5719
mov dword [0x4c1cac], 0x180f1b19
mov dword [0x4c1cb0], 0x34a450b
mov dword [0x4c1cb4], 0x67444a02
mov dword [0x4c1cb8], 0x60e0c1d
mov dword [0x4c1cbc], 0x43080a0c
mov dword [0x4c1cc0], 0x5190c1d
mov dword [0x4c1cc4], 0x674a4a50
mov dword [0x4c1cc8], 0x181c081f
mov dword [0x4c1ccc], 0x45081f04
mov dword [0x4c1cd0], 0x1f191e4a
mov dword [0x4c1cd4], 0x4a190e04
mov dword [0x4c1cd8], 0x2016744
mov dword [0x4c1cdc], 0x4d010c0e
mov dword [0x4c1ce0], 0x504d0100
mov dword [0x4c1ce4], 0x1c081f4d
mov dword [0x4c1ce8], 0x81f0418
mov dword [0x4c1cec], 0x1004a45
mov dword [0x4c1cf0], 0x167444a
mov dword [0x4c1cf4], 0x10c0e02
mov dword [0x4c1cf8], 0x1f411e4d
mov dword [0x4c1cfc], 0x504d0841
mov dword [0x4c1d00], 0xe1d154d
mov dword [0x4c1d04], 0x4501010c
mov dword [0x4c1d08], 0xe03180b
mov dword [0x4c1d0c], 0x3020419
mov dword [0x4c1d10], 0x1f4d4445
mov dword [0x4c1d14], 0x1f181908
mov dword [0x4c1d18], 0x81f4d03
mov dword [0x4c1d1c], 0x1f04181c
mov dword [0x4c1d20], 0x484a4508
mov dword [0x4c1d24], 0x43444a20
mov dword [0x4c1d28], 0x48452b48
mov dword [0x4c1d2c], 0x84d442c
mov dword [0x4c1d30], 0x4d410903
mov dword [0x4c1d34], 0x180f0809
mov dword [0x4c1d38], 0x1f19430a
mov dword [0x4c1d3c], 0xf080e0c
mov dword [0x4c1d40], 0x44060e0c
mov dword [0x4c1d44], 0x4d0b0467
mov dword [0x4c1d48], 0x4d190203
mov dword [0x4c1d4c], 0x5194d1e
mov dword [0x4c1d50], 0x1f4d0308
mov dword [0x4c1d54], 0x1f181908
mov dword [0x4c1d58], 0x4034d03
mov dword [0x4c1d5c], 0x1f4d4101
mov dword [0x4c1d60], 0x903084d
mov dword [0x4c1d64], 0x4d0b0467
mov dword [0x4c1d68], 0x50134d1f
mov dword [0x4c1d6c], 0x104034d
mov dword [0x4c1d70], 0x805194d
mov dword [0x4c1d74], 0x4d1f4d03
mov dword [0x4c1d78], 0x1004d50
mov dword [0x4c1d7c], 0x191e1943
mov dword [0x4c1d80], 0xa03041f
mov dword [0x4c1d84], 0x4d441f45
mov dword [0x4c1d88], 0x67090308
mov dword [0x4c1d8c], 0x1819081f
mov dword [0x4c1d90], 0x1f4d031f
mov word [0x4c1d94], 0x841
mov byte [0x4c1d96], 0x6d
mov cl, byte [eax + 0x4c1ca0]
xor cl, 0x6d
mov byte [eax + 0x4c23d0], cl
inc eax
cmp eax, 0xf7
jb 0x407a6e
mov eax, 0x4c23d0
ret
Function at 0x407a8b
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
test byte [0x4c7330], 1
jne 0x407ab2
or dword [0x4c7330], 1
mov dword [0x4c1e8c], 0x60e0c1d
mov dword [0x4c1e90], 0x6d080a0c
xor eax, eax
mov cl, byte [eax + 0x4c1e8c]
xor cl, 0x6d
mov byte [eax + 0x4c25bc], cl
inc eax
cmp eax, 8
jb 0x407ab4
push 0x4c25bc
push dword [ebp + 8]
call fcn.00453a35
test byte [0x4c732c], 1
pop ecx
pop ecx
jne 0x407afc
or dword [0x4c732c], 1
mov dword [0x4c1e94], 0x1081f1d
mov dword [0x4c1e98], 0x6d090c02
xor eax, eax
mov cl, byte [eax + 0x4c1e94]
xor cl, 0x6d
mov byte [eax + 0x4c25c4], cl
inc eax
cmp eax, 8
jb 0x407afe
push esi
push 0x4c25c4
push 0xffffffffffffffff
push dword [ebp + 8]
call fcn.00453aa9
add esp, 0xc
cmp dword [0x4bcc20], 0
mov esi, 0x4bcc20
je 0x407b5e
push edi
mov edi, esi
push 0
push dword [esi + 4]
push dword [ebp + 8]
call fcn.00453955
push dword [esi]
push 0xfffffffffffffffe
push dword [ebp + 8]
call fcn.00453cd6
add edi, 8
add esp, 0x18
cmp dword [edi], 0
mov esi, edi
jne 0x407b37
pop edi
push 0xfffffffffffffffd
push dword [ebp + 8]
call fcn.004531aa
pop ecx
pop ecx
pop esi
pop ebp
ret
Function at 0x407dd8
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x48d9ee
call fcn.0048cac8
sub esp, 0x64
test byte [0x4c7318], 1
jne 0x407e05
or dword [0x4c7318], 1
mov word [0x4c1ec4], 0x2048
mov byte [0x4c1ec6], 0x6d
push ebx
push esi
xor ebx, ebx
push edi
xor eax, eax
mov cl, byte [eax + 0x4c1ec4]
xor cl, 0x6d
mov byte [eax + 0x4c25f4], cl
inc eax
cmp eax, 3
jb 0x407e0c
mov esi, 0x4c25f4
mov eax, esi
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x54], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x407e38
sub eax, edi
push eax
push esi
lea ecx, [ebp - 0x54]
call fcn.00404de4
push dword [ebp + 0x10]
lea eax, [ebp - 0x54]
push eax
push dword [ebp + 0xc]
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 4], ebx
call fcn.0040e8f3
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.00404c20
cmp dword [ebp - 0x5c], 0x10
mov eax, dword [ebp - 0x70]
jae 0x407e7f
lea eax, [ebp - 0x70]
mov esi, dword [ebp + 8]
push eax
push esi
call fcn.004525a8
pop ecx
pop ecx
cmp eax, ebx
je 0x407ed0
cmp eax, 3
jne 0x407ebd
call fcn.00407fd7
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004667e5
mov dword [ebp - 0x1c], vtable.std::runtime_error.0
push 0x4b1d18
lea eax, [ebp - 0x1c]
push eax
call fcn.004706f5
cmp eax, 4
jne 0x407ec9
call fcn.0040808a
jmp 0x407e99
call fcn.0040813d
jmp 0x407e99
push ebx
push ebx
push ebx
push 1
push ebx
push esi
call fcn.00453fde
mov edi, eax
add esp, 0x18
cmp edi, ebx
je 0x407f87
push ebx
call fcn.004081c1
push eax
push 0xffffffffffffffff
push esi
call fcn.00452d3f
add esp, 0x10
push eax
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0xf
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
call fcn.00404bff
mov byte [ebp - 4], 3
cmp edi, 2
jne 0x407f3f
call fcn.00408208
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.0040e964
pop ecx
pop ecx
mov byte [ebp - 4], 4
lea esi, [ebp - 0x1c]
call fcn.00405b6b
jmp 0x407eaf
cmp edi, 4
jne 0x407f5e
call fcn.00408267
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.0040e964
pop ecx
pop ecx
mov byte [ebp - 4], 5
jmp 0x407f32
cmp edi, 6
jne 0x407f7d
call fcn.004082cc
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.0040e964
pop ecx
pop ecx
mov byte [ebp - 4], 6
jmp 0x407f32
call fcn.00408350
jmp 0x407e99
or edi, 0xffffffff
push edi
push esi
mov dword [ebp - 0x10], edi
call fcn.0045339a
pop ecx
pop ecx
test eax, eax
je 0x407fa8
push ebx
push edi
push esi
call fcn.0045355e
add esp, 0xc
mov dword [ebp - 0x10], eax
push esi
call fcn.00453194
sub edi, eax
push edi
push esi
call fcn.004531aa
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.00404c20
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
Function at 0x407fd7
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c7314], 1
jne 0x40806f
or dword [0x4c7314], 1
mov dword [0x4c1ec8], 0x1040c2b
mov dword [0x4c1ecc], 0x194d0908
mov dword [0x4c1ed0], 0x1b084d02
mov dword [0x4c1ed4], 0xc18010c
mov dword [0x4c1ed8], 0xf4d0819
mov dword [0x4c1edc], 0x1e190202
mov dword [0x4c1ee0], 0x1d0c1f19
mov dword [0x4c1ee4], 0xc1f0b4d
mov dword [0x4c1ee8], 0x308000a
mov dword [0x4c1eec], 0x1e4d4119
mov dword [0x4c1ef0], 0xc190314
mov dword [0x4c1ef4], 0x1f084d15
mov dword [0x4c1ef8], 0x6d1f021f
mov cl, byte [eax + 0x4c1ec8]
xor cl, 0x6d
mov byte [eax + 0x4c25f8], cl
inc eax
cmp eax, 0x34
jb 0x40806f
mov eax, 0x4c25f8
ret

Function at 0x40808a
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c7310], 1
jne 0x408122
or dword [0x4c7310], 1
mov dword [0x4c1efc], 0x1040c2b
mov dword [0x4c1f00], 0x194d0908
mov dword [0x4c1f04], 0x1b084d02
mov dword [0x4c1f08], 0xc18010c
mov dword [0x4c1f0c], 0xf4d0819
mov dword [0x4c1f10], 0x1e190202
mov dword [0x4c1f14], 0x1d0c1f19
mov dword [0x4c1f18], 0xc1f0b4d
mov dword [0x4c1f1c], 0x308000a
mov dword [0x4c1f20], 0x4d4119
mov dword [0x4c1f24], 0x1f020008
mov dword [0x4c1f28], 0x1f084d14
mov dword [0x4c1f2c], 0x6d1f021f
mov cl, byte [eax + 0x4c1efc]
xor cl, 0x6d
mov byte [eax + 0x4c262c], cl
inc eax
cmp eax, 0x34
jb 0x408122
mov eax, 0x4c262c
ret

Function at 0x40813d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c730c], 1
jne 0x4081a4
or dword [0x4c730c], 1
mov dword [0x4c1f30], 0x3060338
mov dword [0x4c1f34], 0x4d031a02
mov dword [0x4c1f38], 0x21f1f08
mov dword [0x4c1f3c], 0x3044d1f
mov dword [0x4c1f40], 0xc18014d
mov dword [0x4c1f44], 0x2013221
mov dword [0x4c1f48], 0x191e090c
mov dword [0x4c1f4c], 0xa03041f
mov byte [0x4c1f50], 0x6d
xor eax, eax
mov cl, byte [eax + 0x4c1f30]
xor cl, 0x6d
mov byte [eax + 0x4c2660], cl
inc eax
cmp eax, 0x21
jb 0x4081a6
mov eax, 0x4c2660
ret

Function at 0x4081c1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7308], 1
jne 0x4081eb
or dword [0x4c7308], 1
mov dword [0x4c1f54], 0x3020351
mov word [0x4c1f58], 0x5308
mov byte [0x4c1f5a], 0x6d
xor eax, eax
mov cl, byte [eax + 0x4c1f54]
xor cl, 0x6d
mov byte [eax + 0x4c2684], cl
inc eax
cmp eax, 7
jb 0x4081ed
mov eax, 0x4c2684
ret

Function at 0x408208
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c7304], 1
jne 0x40824c
or dword [0x4c7304], 1
mov dword [0x4c1f5c], 0x4d0c1821
mov dword [0x4c1f60], 0x1903181f
mov dword [0x4c1f64], 0x4d080004
mov dword [0x4c1f68], 0x21f1f08
mov dword [0x4c1f6c], 0x6d4d571f
mov cl, byte [eax + 0x4c1f5c]
xor cl, 0x6d
mov byte [eax + 0x4c268c], cl
inc eax
cmp eax, 0x14
jb 0x40824c
mov eax, 0x4c268c
ret
Function at 0x408267
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c7300], 1
jne 0x4082b1
or dword [0x4c7300], 1
mov dword [0x4c1f70], 0x4d0c1821
mov dword [0x4c1f74], 0x2000800
mov dword [0x4c1f78], 0x84d141f
mov dword [0x4c1f7c], 0x1f021f1f
mov word [0x4c1f80], 0x4d57
mov byte [0x4c1f82], 0x6d
mov cl, byte [eax + 0x4c1f70]
xor cl, 0x6d
mov byte [eax + 0x4c26a0], cl
inc eax
cmp eax, 0x13
jb 0x4082b1
mov eax, 0x4c26a0
ret

Function at 0x4082cc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c72fc], 1
jne 0x408333
or dword [0x4c72fc], 1
mov dword [0x4c1f84], 0x4d0c1821
mov dword [0x4c1f88], 0x21f1f08
mov dword [0x4c1f8c], 0x3044d1f
mov dword [0x4c1f90], 0x809041e
mov dword [0x4c1f94], 0x1f1f084d
mov dword [0x4c1f98], 0x54d1f02
mov dword [0x4c1f9c], 0x109030c
mov dword [0x4c1fa0], 0x4d571f08
mov byte [0x4c1fa4], 0x6d
xor eax, eax
mov cl, byte [eax + 0x4c1f84]
xor cl, 0x6d
mov byte [eax + 0x4c26b4], cl
inc eax
cmp eax, 0x21
jb 0x408335
mov eax, 0x4c26b4
ret

Function at 0x408350
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c72f8], 1
jne 0x4083ac
or dword [0x4c72f8], 1
mov dword [0x4c1fa8], 0x3060338
mov dword [0x4c1fac], 0x4d031a02
mov dword [0x4c1fb0], 0x21f1f08
mov dword [0x4c1fb4], 0x3044d1f
mov dword [0x4c1fb8], 0xc18014d
mov dword [0x4c1fbc], 0xc0e1d32
mov word [0x4c1fc0], 0x101
mov byte [0x4c1fc2], 0x6d
xor eax, eax
mov cl, byte [eax + 0x4c1fa8]
xor cl, 0x6d
mov byte [eax + 0x4c26d8], cl
inc eax
cmp eax, 0x1b
jb 0x4083ae
mov eax, 0x4c26d8
ret

Function at 0x4085ea
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c72f4], 1
jne 0x408633
or dword [0x4c72f4], 1
mov dword [0x4c1fc4], 0x81e0c2f
mov dword [0x4c1fc8], 0x94d595b
mov dword [0x4c1fcc], 0x9020e08
mov dword [0x4c1fd0], 0xc0b4d08
mov dword [0x4c1fd4], 0x9080104
mov byte [0x4c1fd8], 0x6d
xor eax, eax
mov cl, byte [eax + 0x4c1fc4]
xor cl, 0x6d
mov byte [eax + 0x4c26f4], cl
inc eax
cmp eax, 0x15
jb 0x408635
mov eax, 0x4c26f4
ret
Function at 0x408650
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x48f111
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50
push ebx
push esi
push edi
push dword [ebp + 0xc]
lea eax, [esp + 0x24]
xor ebx, ebx
push eax
mov dword [esp + 0x18], ebx
call fcn.0042fa3e
lea ecx, [esp + 0x44]
push ecx
mov ecx, eax
mov dword [esp + 0x70], ebx
call fcn.0042de3d
add esp, 0xc
push 1
xor edi, edi
lea esi, [esp + 0x24]
call fcn.00404d5e
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x64], 3
mov esi, dword [esp + 0x4c]
lea eax, [esp + 0x20]
call fcn.0040bca8
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x20]
cmp dword [esp + 0x50], 0x10
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
jae 0x4086dd
lea eax, [esp + 0x3c]
lea ecx, [esp + 0xc]
push ecx
push dword [esp + 0x24]
push esi
push eax
call fcn.0043201b
add esp, 0x10
test al, al
jne 0x408722
call fcn.00408799
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x18]
call fcn.004667e5
push 0x4b1d18
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], vtable.std::runtime_error.0
call fcn.004706f5
mov esi, dword [esp + 0xc]
lea eax, [esp + 0x20]
call fcn.0040bca8
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
xor esi, esi
sub ecx, eax
mov dword [esp + 0xc], ecx
je 0x408762
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov edi, dword [eax + 4]
sub edi, ecx
xor edx, edx
mov eax, esi
div edi
mov eax, dword [esp + 0x20]
mov cl, byte [edx + ecx]
xor byte [eax + esi], cl
inc esi
cmp esi, dword [esp + 0xc]
jb 0x408741
push dword [esp + 0xc]
mov esi, dword [ebp + 8]
push eax
call fcn.0040afd1
lea esi, [esp + 0x20]
call fcn.0040bc8f
push ebx
push 1
lea ecx, [esp + 0x44]
call fcn.00404c20
mov ecx, dword [esp + 0x5c]
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x408799
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c72f0], 1
jne 0x4087e2
or dword [0x4c72f0], 1
mov dword [0x4c1fdc], 0x81e0c2f
mov dword [0x4c1fe0], 0x94d595b
mov dword [0x4c1fe4], 0x9020e08
mov dword [0x4c1fe8], 0xc0b4d08
mov dword [0x4c1fec], 0x9080104
mov byte [0x4c1ff0], 0x6d
xor eax, eax
mov cl, byte [eax + 0x4c1fdc]
xor cl, 0x6d
mov byte [eax + 0x4c270c], cl
inc eax
cmp eax, 0x15
jb 0x4087e4
mov eax, 0x4c270c
ret

Function at 0x408ea5
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c72ec], 1
jne 0x408efc
or dword [0x4c72ec], 1
mov dword [0x4c1ff4], 0x118022e
mov dword [0x4c1ff8], 0x2034d09
mov dword [0x4c1ffc], 0x1d024d19
mov dword [0x4c2000], 0xe4d0308
mov dword [0x4c2004], 0x51e0c1f
mov dword [0x4c2008], 0x18094d
mov word [0x4c200c], 0x6d1d
mov cl, byte [eax + 0x4c1ff4]
xor cl, 0x6d
mov byte [eax + 0x4c2724], cl
inc eax
cmp eax, 0x1a
jb 0x408efc
mov eax, 0x4c2724
ret
Function at 0x408f17
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c72e4], 1
jne 0x408f3a
or dword [0x4c72e4], 1
mov dword [0x4c2014], 0xa020142
mov word [0x4c2018], 0x6d42
xor eax, eax
mov cl, byte [eax + 0x4c2014]
xor cl, 0x6d
mov byte [eax + 0x4c2744], cl
inc eax
cmp eax, 6
jb 0x408f3c
mov eax, 0x4c2744
ret

Function at 0x408f57
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c72e0], 1
jne 0x408fd4
or dword [0x4c72e0], 1
mov dword [0x4c201c], 0x1d191905
mov dword [0x4c2020], 0xc424257
mov dword [0x4c2024], 0x14010c03
mov dword [0x4c2028], 0x1e0e0419
mov dword [0x4c202c], 0x19080a43
mov dword [0x4c2030], 0x31a0209
mov dword [0x4c2034], 0x191e0819
mov dword [0x4c2038], 0x20e43
mov dword [0x4c203c], 0x425f1b42
mov dword [0x4c2040], 0x420a0201
mov byte [0x4c2044], 0x6d
mov cl, byte [eax + 0x4c201c]
xor cl, 0x6d
mov byte [eax + 0x4c274c], cl
inc eax
cmp eax, 0x29
jb 0x408fd4
mov eax, 0x4c274c
ret

Function at 0x408fef
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c72dc], 1
jne 0x40901a
or dword [0x4c72dc], 1
mov dword [0x4c2048], 0x1e4b500e
mov dword [0x4c204c], 0x50194b50
mov byte [0x4c2050], 0x6d
xor eax, eax
mov cl, byte [eax + 0x4c2048]
xor cl, 0x6d
mov byte [eax + 0x4c2778], cl
inc eax
cmp eax, 9
jb 0x40901c
mov eax, 0x4c2778
ret

Function at 0x409037
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c72cc], 1
jne 0x4090c1
or dword [0x4c72cc], 1
mov dword [0x4c2064], 0x1903022e
mov dword [0x4c2068], 0x40190308
mov dword [0x4c206c], 0x81d1439
mov dword [0x4c2070], 0x1d0c4d57
mov dword [0x4c2074], 0xe04011d
mov dword [0x4c2078], 0x204190c
mov dword [0x4c207c], 0x40154203
mov dword [0x4c2080], 0x401a1a1a
mov dword [0x4c2084], 0x1f020b
mov dword [0x4c2088], 0x11f1840
mov dword [0x4c208c], 0x20e0308
mov dword [0x4c2090], 0x6d090809
mov cl, byte [eax + 0x4c2064]
xor cl, 0x6d
mov byte [eax + 0x4c2794], cl
inc eax
cmp eax, 0x30
jb 0x4090c1
mov eax, 0x4c2794
ret

Function at 0x4090dc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c72c8], 1
jne 0x409107
or dword [0x4c72c8], 1
mov dword [0x4c2094], 0x393e223d
mov dword [0x4c2098], 0x4d02194d
mov byte [0x4c209c], 0x6d
xor eax, eax
mov cl, byte [eax + 0x4c2094]
xor cl, 0x6d
mov byte [eax + 0x4c27c4], cl
inc eax
cmp eax, 9
jb 0x409109
mov eax, 0x4c27c4
ret

Function at 0x409124
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c72c4], 1
jne 0x40916d
or dword [0x4c72c4], 1
mov dword [0x4c20a0], 0x40c0b4d
mov dword [0x4c20a4], 0x4d090801
mov dword [0x4c20a8], 0x519041a
mov dword [0x4c20ac], 0xc191e4d
mov dword [0x4c20b0], 0x4d1e1819
mov byte [0x4c20b4], 0x6d
xor eax, eax
mov cl, byte [eax + 0x4c20a0]
xor cl, 0x6d
mov byte [eax + 0x4c27d0], cl
inc eax
cmp eax, 0x15
jb 0x40916f
mov eax, 0x4c27d0
ret
Function at 0x409ab1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c729c], 1
jne 0x409b0d
or dword [0x4c729c], 1
mov dword [0x4c2120], 0x1040c2b
mov dword [0x4c2124], 0x194d0908
mov dword [0x4c2128], 0x81f4d02
mov dword [0x4c212c], 0x24d090c
mov dword [0x4c2130], 0x24d1f18
mov dword [0x4c2134], 0x84d031a
mov word [0x4c2138], 0x815
mov byte [0x4c213a], 0x6d
xor eax, eax
mov cl, byte [eax + 0x4c2120]
xor cl, 0x6d
mov byte [eax + 0x4c2850], cl
inc eax
cmp eax, 0x1b
jb 0x409b0f
mov eax, 0x4c2850
ret

Function at 0x409b8b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7298], 1
jne 0x409bd7
or dword [0x4c7298], 1
mov dword [0x4c213c], 0x2119082a
mov dword [0x4c2140], 0x24191e0c
mov dword [0x4c2144], 0x19181d03
mov dword [0x4c2148], 0x20b0324
mov dword [0x4c214c], 0x40c0b4d
mov dword [0x4c2150], 0x6d090801
xor eax, eax
mov cl, byte [eax + 0x4c213c]
xor cl, 0x6d
mov byte [eax + 0x4c286c], cl
inc eax
cmp eax, 0x18
jb 0x409bd9
mov eax, 0x4c286c
ret

Function at 0x409eeb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7294], 1
mov ecx, 0x856d
jne 0x409f4e
or dword [0x4c7294], 1
lea eax, [ecx - 0x68]
mov word [0x4c2154], ax
add eax, 0x14
mov edx, eax
mov word [0x4c2158], ax
lea eax, [ecx - 0x50]
mov word [0x4c215a], ax
inc eax
mov word [0x4c215c], ax
lea eax, [ecx - 0x16]
mov word [0x4c215e], ax
add eax, 0xffffffeb
mov word [0x4c2156], dx
mov edx, eax
mov word [0x4c2162], ax
mov eax, ecx
mov word [0x4c2160], dx
mov word [0x4c2164], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c2154]
add eax, 2
mov word [eax + 0x4c2882], dx
cmp eax, 0x12
jb 0x409f50
mov eax, 0x4c2884
ret

Function at 0x409f6e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7290], 1
mov ecx, 0x856d
jne 0x409fca
or dword [0x4c7290], 1
lea eax, [ecx - 0x68]
mov word [0x4c2168], ax
add eax, 0x14
mov edx, eax
mov word [0x4c216c], ax
lea eax, [ecx - 0x50]
mov word [0x4c216e], ax
add eax, 0x3a
mov word [0x4c2170], ax
lea eax, [ecx - 0x2b]
mov word [0x4c216a], dx
mov edx, eax
mov word [0x4c2174], ax
mov eax, ecx
mov word [0x4c2172], dx
mov word [0x4c2176], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c2168]
add eax, 2
mov word [eax + 0x4c2896], dx
cmp eax, 0x10
jb 0x409fcc
mov eax, 0x4c2898
ret

Function at 0x409fea
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7288], 1
jne 0x40a033
or dword [0x4c7288], 1
mov dword [0x4c2184], 0x2a1e0329
mov dword [0x4c2188], 0xc2e1908
mov dword [0x4c218c], 0x2908050e
mov dword [0x4c2190], 0x390c190c
mov dword [0x4c2194], 0x8010f0c
mov byte [0x4c2198], 0x6d
xor eax, eax
mov cl, byte [eax + 0x4c2184]
xor cl, 0x6d
mov byte [eax + 0x4c28b4], cl
inc eax
cmp eax, 0x15
jb 0x40a035
mov eax, 0x4c28b4
ret
Function at 0x40abe6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c726c], 1
jne 0x40ac11
or dword [0x4c726c], 1
mov dword [0x4c2234], 0x31f0806
mov dword [0x4c2238], 0x5f5e0108
mov byte [0x4c223c], 0x6d
xor eax, eax
mov cl, byte [eax + 0x4c2234]
xor cl, 0x6d
mov byte [eax + 0x4c2964], cl
inc eax
cmp eax, 9
jb 0x40ac13
mov eax, 0x4c2964
ret

Function at 0x40ac2e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7268], 1
jne 0x40ac97
or dword [0x4c7268], 1
mov dword [0x4c2240], 0x3d19083e
mov dword [0x4c2244], 0x80e021f
mov dword [0x4c2248], 0x1e381e1e
mov dword [0x4c224c], 0x2201f08
mov dword [0x4c2250], 0x15280809
mov dword [0x4c2254], 0x191d080e
mov dword [0x4c2258], 0x3d030204
mov dword [0x4c225c], 0xe040102
mov word [0x4c2260], 0x6d14
xor eax, eax
mov cl, byte [eax + 0x4c2240]
xor cl, 0x6d
mov byte [eax + 0x4c2970], cl
inc eax
cmp eax, 0x22
jb 0x40ac99
mov eax, 0x4c2970
ret

Function at 0x40acb4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7264], 1
jne 0x40ad1d
or dword [0x4c7264], 1
mov dword [0x4c2264], 0x3d19082a
mov dword [0x4c2268], 0x80e021f
mov dword [0x4c226c], 0x1e381e1e
mov dword [0x4c2270], 0x2201f08
mov dword [0x4c2274], 0x15280809
mov dword [0x4c2278], 0x191d080e
mov dword [0x4c227c], 0x3d030204
mov dword [0x4c2280], 0xe040102
mov word [0x4c2284], 0x6d14
xor eax, eax
mov cl, byte [eax + 0x4c2264]
xor cl, 0x6d
mov byte [eax + 0x4c2994], cl
inc eax
cmp eax, 0x22
jb 0x40ad1f
mov eax, 0x4c2994
ret

Function at 0x40ad3a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7260], 1
mov ecx, 0x856d
jne 0x40ad69
or dword [0x4c7260], 1
lea eax, [ecx - 0x61]
mov word [0x4c2288], ax
add eax, 0x53
mov word [0x4c228a], ax
mov eax, ecx
mov word [0x4c228c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c2288]
add eax, 2
mov word [eax + 0x4c29b6], dx
cmp eax, 6
jb 0x40ad6b
mov eax, 0x4c29b8
ret

Function at 0x40ad89
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0x4c7258], 1
jne 0x40adfb
or dword [0x4c7258], 1
mov dword [0x4c2298], 0x1040c2b
mov dword [0x4c229c], 0x194d0908
mov dword [0x4c22a0], 0x3044d02
mov dword [0x4c22a4], 0xc041904
mov dword [0x4c22a8], 0x8170401
mov dword [0x4c22ac], 0x1b03084d
mov dword [0x4c22b0], 0x3021f04
mov dword [0x4c22b4], 0x19030800
mov word [0x4c22b8], 0x4d57
mov byte [0x4c22ba], 0x6d
mov cl, byte [eax + 0x4c2298]
xor cl, 0x6d
mov byte [eax + 0x4c29c8], cl
inc eax
cmp eax, 0x23
jb 0x40adfb
mov eax, 0x4c29c8
ret

Function at 0x40ae16
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c7250], 1
mov ecx, 0x856d
jne 0x40ae60
or dword [0x4c7250], 1
lea eax, [ecx - 0x65]
mov word [0x4c22c4], ax
add eax, 0xfffffffb
mov word [0x4c22c6], ax
lea eax, [ecx - 0x54]
mov word [0x4c22c8], ax
add eax, 6
mov word [0x4c22ca], ax
lea eax, [ecx - 0x59]
mov word [0x4c22cc], ax
mov eax, ecx
mov word [0x4c22ce], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c22c4]
add eax, 2
mov word [eax + 0x4c29f2], dx
cmp eax, 0xc
jb 0x40ae62
mov eax, 0x4c29f4
ret