joyce8/EMBER2024-capa huggingface dataset:
Function at 0x403dad
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c844c], 1
jne 0x403e6c
or dword [0x4c844c], 1
or al, 0xff
mov dword [0x4c1e2c], 0xbeabba9b
mov dword [0x4c1e30], 0xe5acb3b6
mov byte [0x4c1e34], al
mov dword [0x4c1e35], 0xbab6ad8b
mov byte [0x4c1e39], 0xbb
mov byte [0x4c1e3a], al
mov word [0x4c1e3b], 0xb0ab
mov byte [0x4c1e3d], al
mov dword [0x4c1e3e], 0xabb6ada8
mov byte [0x4c1e42], 0xba
mov byte [0x4c1e43], al
mov word [0x4c1e44], 0xb0ab
mov byte [0x4c1e46], al
mov dword [0x4c1e47], 0xb0b2bab2
mov word [0x4c1e4b], 0xa6ad
mov byte [0x4c1e4d], al
mov dword [0x4c1e4e], 0xadbbbbbe
mov word [0x4c1e52], 0xacba
mov byte [0x4c1e54], 0xac
mov byte [0x4c1e55], al
mov dword [0x4c1e56], 0xd5d2affa
mov byte [0x4c1e5a], 0xdf
xor eax, eax
mov cl, byte [eax + 0x4c1e2c]
xor cl, 0xdf
mov byte [eax + 0x4c24d8], cl
inc eax
cmp eax, 0x2f
jb 0x403e6e
mov eax, 0x4c24d8
ret

Function at 0x403e89
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8448], 1
jne 0x403f51
or dword [0x4c8448], 1
or al, 0xff
mov dword [0x4c1e5c], 0xbeabba9b
mov dword [0x4c1e60], 0xe5acb3b6
mov byte [0x4c1e64], al
mov dword [0x4c1e65], 0xbab6ad8b
mov byte [0x4c1e69], 0xbb
mov byte [0x4c1e6a], al
mov word [0x4c1e6b], 0xb0ab
mov byte [0x4c1e6d], al
mov dword [0x4c1e6e], 0xbcbaa7ba
mov word [0x4c1e72], 0xabaa
mov byte [0x4c1e74], 0xba
mov byte [0x4c1e75], al
mov dword [0x4c1e76], 0xb0b2bab2
mov word [0x4c1e7a], 0xa6ad
mov byte [0x4c1e7c], al
mov word [0x4c1e7d], 0xabbe
mov byte [0x4c1e7f], al
mov dword [0x4c1e80], 0xadbbbbbe
mov word [0x4c1e84], 0xacba
mov byte [0x4c1e86], 0xac
mov byte [0x4c1e87], al
mov dword [0x4c1e88], 0xd5d2affa
mov byte [0x4c1e8c], 0xdf
xor eax, eax
mov cl, byte [eax + 0x4c1e5c]
xor cl, 0xdf
mov byte [eax + 0x4c2508], cl
inc eax
cmp eax, 0x31
jb 0x403f53
mov eax, 0x4c2508
ret

Function at 0x403f6e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8444], 1
jne 0x403fa5
or dword [0x4c8444], 1
mov dword [0x4c1e90], 0xb8beb399
mov dword [0x4c1e94], 0xefffe5ac
mov dword [0x4c1e98], 0xd2a7faa7
mov word [0x4c1e9c], 0xdfd5
xor eax, eax
mov cl, byte [eax + 0x4c1e90]
xor cl, 0xdf
mov byte [eax + 0x4c253c], cl
inc eax
cmp eax, 0xe
jb 0x403fa7
mov eax, 0x4c253c
ret

Function at 0x403fc5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8440], 1
jne 0x403ffc
or dword [0x4c8440], 1
mov dword [0x4c1ea0], 0xbeadbe8f
mov dword [0x4c1ea4], 0xbaabbab2
mov dword [0x4c1ea8], 0xd2e5acad
mov word [0x4c1eac], 0xdfd5
xor eax, eax
mov cl, byte [eax + 0x4c1ea0]
xor cl, 0xdf
mov byte [eax + 0x4c254c], cl
inc eax
cmp eax, 0xe
jb 0x403ffe
mov eax, 0x4c254c
ret

Function at 0x404019
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c843c], 1
jne 0x404062
or dword [0x4c843c], 1
mov dword [0x4c1eb0], 0xadbe8fd6
mov dword [0x4c1eb4], 0xabbab2be
mov dword [0x4c1eb8], 0xfa84adba
mov dword [0x4c1ebc], 0xffe582bb
mov dword [0x4c1ec0], 0xd5d2affa
mov byte [0x4c1ec4], 0xdf
xor eax, eax
mov cl, byte [eax + 0x4c1eb0]
xor cl, 0xdf
mov byte [eax + 0x4c255c], cl
inc eax
cmp eax, 0x15
jb 0x404064
mov eax, 0x4c255c
ret
Function at 0x40407f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8438], 1
jne 0x4040b7
or dword [0x4c8438], 1
mov dword [0x4c1ec8], 0xff979a8c
mov dword [0x4c1ecc], 0xb3beb19e
mov dword [0x4c1ed0], 0xacb6aca6
mov dword [0x4c1ed4], 0xdfd5d2e5
xor eax, eax
mov cl, byte [eax + 0x4c1ec8]
xor cl, 0xdf
mov byte [eax + 0x4c2574], cl
inc eax
cmp eax, 0x10
jb 0x4040b9
mov eax, 0x4c2574
ret

Function at 0x4040d4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8434], 1
jne 0x40411c
or dword [0x4c8434], 1
mov dword [0x4c1ed8], 0xb5bd90d6
mov dword [0x4c1edc], 0xffabbcba
mov dword [0x4c1ee0], 0xbaafa6ab
mov dword [0x4c1ee4], 0xacfaffe5
mov word [0x4c1ee8], 0xd5d2
mov byte [0x4c1eea], 0xdf
xor eax, eax
mov cl, byte [eax + 0x4c1ed8]
xor cl, 0xdf
mov byte [eax + 0x4c2584], cl
inc eax
cmp eax, 0x13
jb 0x40411e
mov eax, 0x4c2584
ret

Function at 0x404139
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8430], 1
jne 0x4041c7
or dword [0x4c8430], 1
or al, 0xff
mov dword [0x4c1eec], 0xb6be99d6
mov word [0x4c1ef0], 0xbab3
mov byte [0x4c1ef2], 0xbb
mov byte [0x4c1ef3], al
mov word [0x4c1ef4], 0xb0ab
mov byte [0x4c1ef6], al
mov dword [0x4c1ef7], 0xb3b3b0b9
mov word [0x4c1efb], 0xa8b0
mov byte [0x4c1efd], al
mov dword [0x4c1efe], 0xb1b6b0af
mov word [0x4c1f02], 0xbaab
mov byte [0x4c1f04], 0xad
mov byte [0x4c1f05], al
mov dword [0x4c1f06], 0xb6beb7bc
mov dword [0x4c1f0a], 0xdfd5d2b1
xor eax, eax
mov cl, byte [eax + 0x4c1eec]
xor cl, 0xdf
mov byte [eax + 0x4c2598], cl
inc eax
cmp eax, 0x22
jb 0x4041c9
mov eax, 0x4c2598
ret

Function at 0x4041e4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c842c], 1
jne 0x404207
or dword [0x4c842c], 1
mov dword [0x4c1f10], 0xbbabac9f
mov word [0x4c1f14], 0xdf9f
xor eax, eax
mov cl, byte [eax + 0x4c1f10]
xor cl, 0xdf
mov byte [eax + 0x4c25bc], cl
inc eax
cmp eax, 6
jb 0x404209
mov eax, 0x4c25bc
ret

Function at 0x404224
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8428], 1
jne 0x40425b
or dword [0x4c8428], 1
mov dword [0x4c1f18], 0xabb1aaad
mov dword [0x4c1f1c], 0x80bab2b6
mov dword [0x4c1f20], 0xb0adadba
mov word [0x4c1f24], 0xdfad
xor eax, eax
mov cl, byte [eax + 0x4c1f18]
xor cl, 0xdf
mov byte [eax + 0x4c25c4], cl
inc eax
cmp eax, 0xe
jb 0x40425d
mov eax, 0x4c25c4
ret

Function at 0x404278
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8424], 1
jne 0x4042a6
or dword [0x4c8424], 1
mov dword [0x4c1f28], 0xb8b1bead
mov dword [0x4c1f2c], 0xadba80ba
mov dword [0x4c1f30], 0xdfadb0ad
xor eax, eax
mov cl, byte [eax + 0x4c1f28]
xor cl, 0xdf
mov byte [eax + 0x4c25d4], cl
inc eax
cmp eax, 0xc
jb 0x4042a8
mov eax, 0x4c25d4
ret

Function at 0x4042c3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8420], 1
jne 0x404301
or dword [0x4c8420], 1
mov dword [0x4c1f34], 0xadbaa9b0
mov dword [0x4c1f38], 0xa8b0b3b9
mov dword [0x4c1f3c], 0xadadba80
mov word [0x4c1f40], 0xadb0
mov byte [0x4c1f42], 0xdf
xor eax, eax
mov cl, byte [eax + 0x4c1f34]
xor cl, 0xdf
mov byte [eax + 0x4c25e0], cl
inc eax
cmp eax, 0xf
jb 0x404303
mov eax, 0x4c25e0
ret
Function at 0x40431e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c841c], 1
jne 0x404356
or dword [0x4c841c], 1
mov dword [0x4c1f44], 0xbabbb1aa
mov dword [0x4c1f48], 0xb0b3b9ad
mov dword [0x4c1f4c], 0xadba80a8
mov dword [0x4c1f50], 0xdfadb0ad
xor eax, eax
mov cl, byte [eax + 0x4c1f44]
xor cl, 0xdf
mov byte [eax + 0x4c25f0], cl
inc eax
cmp eax, 0x10
jb 0x404358
mov eax, 0x4c25f0
ret

Function at 0x404373
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8418], 1
jne 0x4043a1
or dword [0x4c8418], 1
mov dword [0x4c1f54], 0xb6b8b0b3
mov dword [0x4c1f58], 0xadba80bc
mov dword [0x4c1f5c], 0xdfadb0ad
xor eax, eax
mov cl, byte [eax + 0x4c1f54]
xor cl, 0xdf
mov byte [eax + 0x4c2600], cl
inc eax
cmp eax, 0xc
jb 0x4043a3
mov eax, 0x4c2600
ret

Function at 0x4043be
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8414], 1
jne 0x4043f3
or dword [0x4c8414], 1
mov dword [0x4c1f60], 0xbeb2b0bb
mov dword [0x4c1f64], 0xba80b1b6
mov dword [0x4c1f68], 0xadb0adad
mov byte [0x4c1f6c], 0xdf
xor eax, eax
mov cl, byte [eax + 0x4c1f60]
xor cl, 0xdf
mov byte [eax + 0x4c260c], cl
inc eax
cmp eax, 0xd
jb 0x4043f5
mov eax, 0x4c260c
ret

Function at 0x404410
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8410], 1
jne 0x40444f
or dword [0x4c8410], 1
mov dword [0x4c1f70], 0xbea9b1b6
mov dword [0x4c1f74], 0x80bbb6b3
mov dword [0x4c1f78], 0xaab8adbe
mov dword [0x4c1f7c], 0xabb1bab2
mov byte [0x4c1f80], 0xdf
xor eax, eax
mov cl, byte [eax + 0x4c1f70]
xor cl, 0xdf
mov byte [eax + 0x4c261c], cl
inc eax
cmp eax, 0x11
jb 0x404451
mov eax, 0x4c261c
ret

Function at 0x40446c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c840c], 1
jne 0x4044a1
or dword [0x4c840c], 1
mov dword [0x4c1f84], 0xb8b1bab3
mov dword [0x4c1f88], 0xba80b7ab
mov dword [0x4c1f8c], 0xadb0adad
mov byte [0x4c1f90], 0xdf
xor eax, eax
mov cl, byte [eax + 0x4c1f84]
xor cl, 0xdf
mov byte [eax + 0x4c2630], cl
inc eax
cmp eax, 0xd
jb 0x4044a3
mov eax, 0x4c2630
ret

Function at 0x4044be
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8408], 1
jne 0x4044f3
or dword [0x4c8408], 1
mov dword [0x4c1f94], 0x80abaab0
mov dword [0x4c1f98], 0xad80b9b0
mov dword [0x4c1f9c], 0xbab8b1be
mov byte [0x4c1fa0], 0xdf
xor eax, eax
mov cl, byte [eax + 0x4c1f94]
xor cl, 0xdf
mov byte [eax + 0x4c2640], cl
inc eax
cmp eax, 0xd
jb 0x4044f5
mov eax, 0x4c2640
ret

Function at 0x404510
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8404], 1
jne 0x40453d
or dword [0x4c8404], 1
mov dword [0x4c1fa4], 0xbabca7ba
mov dword [0x4c1fa8], 0xb0b6abaf
mov word [0x4c1fac], 0xdfb1
xor eax, eax
mov cl, byte [eax + 0x4c1fa4]
xor cl, 0xdf
mov byte [eax + 0x4c2650], cl
inc eax
cmp eax, 0xa
jb 0x40453f
mov eax, 0x4c2650
ret
Function at 0x40455a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8400], 1
jne 0x4045b9
or dword [0x4c8400], 1
mov dword [0x4c1fb0], 0xbbabacd6
mov dword [0x4c1fb4], 0xa7bae5e5
mov dword [0x4c1fb8], 0xabafbabc
mov dword [0x4c1fbc], 0xe5b1b0b6
mov dword [0x4c1fc0], 0xbeb7a8e5
mov dword [0x4c1fc4], 0xe5f6f7ab
mov dword [0x4c1fc8], 0xd2acfaff
mov word [0x4c1fcc], 0xdfd5
xor eax, eax
mov cl, byte [eax + 0x4c1fb0]
xor cl, 0xdf
mov byte [eax + 0x4c265c], cl
inc eax
cmp eax, 0x1e
jb 0x4045bb
mov eax, 0x4c265c
ret

Function at 0x4045d6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83fc], 1
jne 0x40464a
or dword [0x4c83fc], 1
mov dword [0x4c1fd0], 0xb6be99d6
mov dword [0x4c1fd4], 0xffbbbab3
mov dword [0x4c1fd8], 0xb8ffb0ab
mov dword [0x4c1fdc], 0xacffabba
mov dword [0x4c1fe0], 0xe5e5bbab
mov dword [0x4c1fe4], 0xbabca7ba
mov dword [0x4c1fe8], 0xb0b6abaf
mov dword [0x4c1fec], 0xa8e5e5b1
mov dword [0x4c1ff0], 0xf7abbeb7
mov dword [0x4c1ff4], 0xdfd5d2f6
xor eax, eax
mov cl, byte [eax + 0x4c1fd0]
xor cl, 0xdf
mov byte [eax + 0x4c267c], cl
inc eax
cmp eax, 0x28
jb 0x40464c
mov eax, 0x4c267c
ret

Function at 0x404667
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83f8], 1
jne 0x40469b
or dword [0x4c83f8], 1
mov dword [0x4c1ff8], 0xb2b0bc80
mov dword [0x4c1ffc], 0xadadba80
mov word [0x4c2000], 0xadb0
mov byte [0x4c2002], 0xdf
xor eax, eax
mov cl, byte [eax + 0x4c1ff8]
xor cl, 0xdf
mov byte [eax + 0x4c26a4], cl
inc eax
cmp eax, 0xb
jb 0x40469d
mov eax, 0x4c26a4
ret

Function at 0x4046b8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83f4], 1
jne 0x404721
or dword [0x4c83f4], 1
mov dword [0x4c2004], 0xb0bc80d6
mov dword [0x4c2008], 0xadba80b2
mov dword [0x4c200c], 0xe5adb0ad
mov dword [0x4c2010], 0xadad9ae5
mov dword [0x4c2014], 0xba92adb0
mov dword [0x4c2018], 0xb8beacac
mov dword [0x4c201c], 0xe5f6f7ba
mov dword [0x4c2020], 0xd2acfaff
mov word [0x4c2024], 0xdfd5
xor eax, eax
mov cl, byte [eax + 0x4c2004]
xor cl, 0xdf
mov byte [eax + 0x4c26b0], cl
inc eax
cmp eax, 0x22
jb 0x404723
mov eax, 0x4c26b0
ret

Function at 0x40473e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83f0], 1
jne 0x4047bc
or dword [0x4c83f0], 1
mov dword [0x4c2028], 0xb6be99d6
mov dword [0x4c202c], 0xffbbbab3
mov dword [0x4c2030], 0xb8ffb0ab
mov dword [0x4c2034], 0x80ffabba
mov dword [0x4c2038], 0x80b2b0bc
mov dword [0x4c203c], 0xb0adadba
mov dword [0x4c2040], 0x9ae5e5ad
mov dword [0x4c2044], 0xadb0adad
mov dword [0x4c2048], 0xacacba92
mov dword [0x4c204c], 0xf7bab8be
mov dword [0x4c2050], 0xdfd5d2f6
xor eax, eax
mov cl, byte [eax + 0x4c2028]
xor cl, 0xdf
mov byte [eax + 0x4c26d4], cl
inc eax
cmp eax, 0x2c
jb 0x4047be
mov eax, 0x4c26d4
ret
Function at 0x4047d9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83ec], 1
jne 0x40487c
or dword [0x4c83ec], 1
or al, 0xff
mov dword [0x4c2054], 0xbcbeab8c
mov byte [0x4c2058], 0xb4
mov byte [0x4c2059], al
mov dword [0x4c205a], 0xafb2aabb
mov byte [0x4c205e], al
mov dword [0x4c205f], 0xb0adadba
mov word [0x4c2063], 0xe5ad
mov byte [0x4c2065], al
mov dword [0x4c2066], 0xabb1b09c
mov dword [0x4c206a], 0x8daba7ba
mov dword [0x4c206e], 0xadb0bcba
mov byte [0x4c2072], 0xbb
mov byte [0x4c2073], al
mov word [0x4c2074], 0xbea8
mov byte [0x4c2076], 0xac
mov byte [0x4c2077], al
mov dword [0x4c2078], 0xb3b3aab1
mov byte [0x4c207c], 0xdf
xor eax, eax
mov cl, byte [eax + 0x4c2054]
xor cl, 0xdf
mov byte [eax + 0x4c2700], cl
inc eax
cmp eax, 0x29
jb 0x40487e
mov eax, 0x4c2700
ret

Function at 0x404899
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83e8], 1
jne 0x404930
or dword [0x4c83e8], 1
or al, 0xff
mov dword [0x4c2080], 0xbcbeab8c
mov byte [0x4c2084], 0xb4
mov byte [0x4c2085], al
mov dword [0x4c2086], 0xafb2aabb
mov byte [0x4c208a], al
mov dword [0x4c208b], 0xb0adadba
mov word [0x4c208f], 0xe5ad
mov byte [0x4c2091], al
mov dword [0x4c2092], 0x96b2a68c
mov dword [0x4c2096], 0xb6abb6b1
mov dword [0x4c209a], 0xa5b6b3be
mov byte [0x4c209e], 0xba
mov byte [0x4c209f], al
mov dword [0x4c20a0], 0xb3b6beb9
mov word [0x4c20a4], 0xbbba
mov byte [0x4c20a6], 0xdf
xor eax, eax
mov cl, byte [eax + 0x4c2080]
xor cl, 0xdf
mov byte [eax + 0x4c272c], cl
inc eax
cmp eax, 0x27
jb 0x404932
mov eax, 0x4c272c
ret

Function at 0x40494d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83e4], 1
jne 0x4049c7
or dword [0x4c83e4], 1
or al, 0xff
mov dword [0x4c20a8], 0xb6b4ace3
mov dword [0x4c20ac], 0xbbbaafaf
mov byte [0x4c20b0], al
mov dword [0x4c20b1], 0xb2beadb9
mov word [0x4c20b5], 0xf3ba
mov byte [0x4c20b7], al
mov word [0x4c20b8], 0x9c8f
mov byte [0x4c20ba], al
mov word [0x4c20bb], 0xbea8
mov byte [0x4c20bd], 0xac
mov byte [0x4c20be], al
mov dword [0x4c20bf], 0xb3b3aab1
mov dword [0x4c20c3], 0xdfd5d2e1
xor eax, eax
mov cl, byte [eax + 0x4c20a8]
xor cl, 0xdf
mov byte [eax + 0x4c2754], cl
inc eax
cmp eax, 0x1f
jb 0x4049c9
mov eax, 0x4c2754
ret

Function at 0x4049e4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83e0], 1
jne 0x404aa7
or dword [0x4c83e0], 1
or al, 0xff
mov dword [0x4c20c8], 0xb6b4ace3
mov dword [0x4c20cc], 0xbbbaafaf
mov byte [0x4c20d0], al
mov dword [0x4c20d1], 0xb2beadb9
mov word [0x4c20d5], 0xf3ba
mov byte [0x4c20d7], al
mov word [0x4c20d8], 0x9c8f
mov byte [0x4c20da], al
mov word [0x4c20db], 0xbea8
mov byte [0x4c20dd], 0xac
mov byte [0x4c20de], al
mov dword [0x4c20df], 0xbab2beac
mov byte [0x4c20e3], al
mov word [0x4c20e4], 0xacbe
mov byte [0x4c20e6], al
mov dword [0x4c20e7], 0xaaabbaad
mov word [0x4c20eb], 0xb1ad
mov byte [0x4c20ed], al
mov dword [0x4c20ee], 0xadbbbbbe
mov dword [0x4c20f2], 0xe1acacba
mov word [0x4c20f6], 0xd5d2
mov byte [0x4c20f8], 0xdf
xor eax, eax
mov cl, byte [eax + 0x4c20c8]
xor cl, 0xdf
mov byte [eax + 0x4c2774], cl
inc eax
cmp eax, 0x31
jb 0x404aa9
mov eax, 0x4c2774
ret
Function at 0x404ac4
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16c4
call fcn.00479a70
push ebx
push esi
push edi
call dword [0x496094]
test byte [0x4c83dc], 1
mov dword [ebp - 4], eax
jne 0x404b0b
or dword [0x4c83dc], 1
mov dword [0x4c20fc], 0xbbb0b2e3
mov dword [0x4c2100], 0xe0bab3aa
mov dword [0x4c2104], 0xdfe1e0e0
xor edi, edi
xor eax, eax
mov cl, byte [eax + 0x4c20fc]
xor cl, 0xdf
mov byte [eax + 0x4c27a8], cl
inc eax
cmp eax, 0xc
jb 0x404b0f
test byte [0x4c83d8], 1
mov dword [ebp - 8], 0x4c27a8
jne 0x404b59
or dword [0x4c83d8], 1
mov dword [0x4c2108], 0xb2a6ace3
mov dword [0x4c210c], 0xe0b3b0bd
mov dword [0x4c2110], 0xdfe1e0e0
xor eax, eax
mov cl, byte [eax + 0x4c2108]
xor cl, 0xdf
mov byte [eax + 0x4c27b4], cl
inc eax
cmp eax, 0xc
jb 0x404b5b
mov esi, 0x688
push esi
lea eax, [ebp - 0x6c0]
push edi
push eax
mov dword [ebp - 0x1c], 0x4c27b4
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
call fcn.0046b880
mov eax, dword [ebp + 8]
cdq
add esp, 0xc
mov dword [ebp - 0x6c0], esi
mov esi, eax
lea eax, [ebp - 0x6c0]
push eax
mov ebx, edx
push ebx
push esi
push dword [ebp - 4]
call dword [0x4963bc]
test eax, eax
je 0x404bc0
lea eax, [ebp - 0x69c]
mov dword [ebp - 8], eax
push 0xffa
lea eax, [ebp - 0x16c0]
push edi
push eax
call fcn.0046b880
add esp, 0xc
lea eax, [ebp - 0x16c0]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x16c0], 0x58
mov dword [ebp - 0x1670], 0x7d0
call dword [0x4963c4]
lea ecx, [ebp - 0x166c]
test eax, eax
jne 0x404c0c
mov ecx, dword [ebp - 0x1c]
test byte [0x4c83d4], 1
jne 0x404c43
or dword [0x4c83d4], 1
mov dword [0x4c2114], 0xfaffaffa
mov dword [0x4c2118], 0xacfafeac
mov dword [0x4c211c], 0xfaa7eff4
mov word [0x4c2120], 0xdfa7
xor eax, eax
mov dl, byte [eax + 0x4c2114]
xor dl, 0xdf
mov byte [eax + 0x4c27c0], dl
inc eax
cmp eax, 0xe
jb 0x404c45
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push ecx
push dword [ebp - 8]
push dword [ebp + 8]
push 0x4c27c0
push dword [ebp + 0xc]
call fcn.0046714d
add esp, 0x1c
push 6
pop ecx
mov dword [ebp - 0xc], edi
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x18
call dword [0x4963c8]
test eax, eax
je 0x404cbc
push dword [ebp - 0xc]
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
call fcn.00404d09
push eax
push dword [ebp + 0xc]
call fcn.0046714d
add esp, 0x14
test byte [0x4c83cc], 1
jne 0x404cdc
or dword [0x4c83cc], 1
mov word [0x4c2134], 0xd5d2
mov byte [0x4c2136], 0xdf
xor eax, eax
mov cl, byte [eax + 0x4c2134]
xor cl, 0xdf
mov byte [eax + 0x4c27e0], cl
inc eax
cmp eax, 3
jb 0x404cde
push dword [ebp + 0xc]
push 0x4c27e0
call fcn.00466dc1
pop ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 8
Function at 0x404d09
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83d0], 1
jne 0x404d41
or dword [0x4c83d0], 1
mov dword [0x4c2124], 0xacfaf7ff
mov dword [0x4c2128], 0xffbbfae5
mov dword [0x4c212c], 0xa7effff4
mov dword [0x4c2130], 0xdff6a7fa
xor eax, eax
mov cl, byte [eax + 0x4c2124]
xor cl, 0xdf
mov byte [eax + 0x4c27d0], cl
inc eax
cmp eax, 0x10
jb 0x404d43
mov eax, 0x4c27d0
ret

Function at 0x405f68
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83c0], 1
jne 0x405fbd
or dword [0x4c83c0], 1
mov dword [0x4c2804], 0xa6b0a3aa
mov dword [0x4c2808], 0xa7b0a3b5
mov dword [0x4c280c], 0xb2a1a3be
mov dword [0x4c2810], 0xb1a6beab
mov dword [0x4c2814], 0xb4beb6a6
mov dword [0x4c2818], 0xbdbaada0
mov word [0x4c281c], 0xe2bd
xor eax, eax
mov cl, byte [eax + 0x4c2804]
xor cl, 0xe2
mov byte [eax + 0x4c2a04], cl
inc eax
cmp eax, 0x1a
jb 0x405fbf
mov eax, 0x4c2a04
ret

Function at 0x4060ce
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83bc], 1
jne 0x4060f8
or dword [0x4c83bc], 1
mov dword [0x4c2820], 0x83b5afb4
mov word [0x4c2824], 0x8790
mov byte [0x4c2826], 0xe2
xor eax, eax
mov cl, byte [eax + 0x4c2820]
xor cl, 0xe2
mov byte [eax + 0x4c2a20], cl
inc eax
cmp eax, 7
jb 0x4060fa
mov eax, 0x4c2a20
ret

Function at 0x406115
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83b8], 1
jne 0x406142
or dword [0x4c83b8], 1
mov dword [0x4c2828], 0x96908bb4
mov dword [0x4c282c], 0xb28e8397
mov word [0x4c2830], 0xe2a1
xor eax, eax
mov cl, byte [eax + 0x4c2828]
xor cl, 0xe2
mov byte [eax + 0x4c2a28], cl
inc eax
cmp eax, 0xa
jb 0x406144
mov eax, 0x4c2a28
ret

Function at 0x40615f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83b4], 1
jne 0x406193
or dword [0x4c83b4], 1
mov dword [0x4c2834], 0x96908bb4
mov dword [0x4c2838], 0xa08e8397
mov word [0x4c283c], 0x9a8d
mov byte [0x4c283e], 0xe2
xor eax, eax
mov cl, byte [eax + 0x4c2834]
xor cl, 0xe2
mov byte [eax + 0x4c2a34], cl
inc eax
cmp eax, 0xb
jb 0x406195
mov eax, 0x4c2a34
ret

Function at 0x4061b0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83b0], 1
jne 0x4061d4
or dword [0x4c83b0], 1
mov dword [0x4c2840], 0x878c87a5
mov dword [0x4c2844], 0xe2818b90
xor eax, eax
mov cl, byte [eax + 0x4c2840]
xor cl, 0xe2
mov byte [eax + 0x4c2a40], cl
inc eax
cmp eax, 8
jb 0x4061d6
mov eax, 0x4c2a40
ret
Function at 0x4061f1
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x48e0f7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa8
and dword [esp], 0
test byte [0x4c83ac], 1
push esi
jne 0x406244
or dword [0x4c83ac], 1
mov dword [0x4c2848], 0x8e86968c
mov dword [0x4c284c], 0x8e86cc8e
mov word [0x4c2850], 0xe28e
xor eax, eax
mov cl, byte [eax + 0x4c2848]
xor cl, 0xe2
mov byte [eax + 0x4c2a48], cl
inc eax
cmp eax, 0xa
jb 0x406246
push 0x4c2a48
call dword [0x4960cc]
mov esi, eax
test esi, esi
jne 0x4062b8
call dword [0x4960a8]
push eax
lea eax, [esp + 0x40]
push eax
call fcn.0042dd34
pop ecx
pop ecx
and dword [esp + 0xb4], esi
push eax
call fcn.004063ff
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00406c50
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 1
call fcn.00405d39
push 0x4b2d20
mov eax, esi
push eax
call fcn.00470885
call fcn.00406465
push eax
push esi
call dword [0x4960c8]
test eax, eax
jne 0x406315
call dword [0x4960a8]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0042dd34
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 2
call fcn.004064d7
push eax
lea eax, [esp + 0x44]
push eax
call fcn.00406c50
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 3
call fcn.00405d39
push 0x4b2d20
mov eax, esi
jmp 0x4062b2
lea ecx, [esp + 4]
push ecx
push 0x18
lea ecx, [esp + 0x60]
push ecx
push 0
push dword [ebp + 8]
call eax
test eax, eax
jne 0x40639d
cmp dword [esp + 4], 0x18
jne 0x40639d
push dword [esp + 0x6c]
push eax
push 0x410
call dword [0x4960c4]
test eax, eax
jne 0x4063ec
call dword [0x4960a8]
push eax
lea eax, [esp + 0x74]
push eax
call fcn.0042dd34
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 6
call fcn.00406617
push eax
lea eax, [esp + 0x94]
push eax
call fcn.00406c50
add esp, 0xc
lea esi, [esp + 0x14]
mov byte [esp + 0xb4], 7
call fcn.00405d39
push 0x4b2d20
mov eax, esi
jmp 0x4062b2
call dword [0x4960a8]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0042dd34
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 4
call fcn.0040658a
push eax
lea eax, [esp + 0x44]
push eax
call fcn.00406c50
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 5
call fcn.00405d39
push 0x4b2d20
mov eax, esi
jmp 0x4062b2
mov ecx, dword [esp + 0xac]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x4063ff
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c83a8], 1
jne 0x406448
or dword [0x4c83a8], 1
mov dword [0x4c2854], 0x86838dae
mov dword [0x4c2858], 0x90808bae
mov dword [0x4c285c], 0xc29b9083
mov dword [0x4c2860], 0x8e8b8384
mov dword [0x4c2864], 0xc2d88687
mov byte [0x4c2868], 0xe2
xor eax, eax
mov cl, byte [eax + 0x4c2854]
xor cl, 0xe2
mov byte [eax + 0x4c2a54], cl
inc eax
cmp eax, 0x15
jb 0x40644a
mov eax, 0x4c2a54
ret