joyce8/EMBER2024-capa huggingface dataset:
Function at 0x403fc1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3cb0], 1
jne 0x404009
or dword [0x4c3cb0], 1
mov dword [0x4bde94], 0x828aa7e1
mov dword [0x4bde98], 0xc89c8b8d
mov dword [0x4bde9c], 0x8d98919c
mov dword [0x4bdea0], 0x9bcdc8d2
mov word [0x4bdea4], 0xe2e5
mov byte [0x4bdea6], 0xe8
xor eax, eax
mov cl, byte [eax + 0x4bde94]
xor cl, 0xe8
mov byte [eax + 0x4be540], cl
inc eax
cmp eax, 0x13
jb 0x40400b
mov eax, 0x4be540
ret

Function at 0x404026
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3cac], 1
jne 0x40408f
or dword [0x4c3cac], 1
mov dword [0x4bdea8], 0x8189aee1
mov dword [0x4bdeac], 0xc88c8d84
mov dword [0x4bdeb0], 0x8ec8879c
mov dword [0x4bdeb4], 0x87848487
mov dword [0x4bdeb8], 0x8798c89f
mov dword [0x4bdebc], 0x8d9c8681
mov dword [0x4bdec0], 0x808bc89a
mov dword [0x4bdec4], 0xe5868189
mov word [0x4bdec8], 0xe8e2
xor eax, eax
mov cl, byte [eax + 0x4bdea8]
xor cl, 0xe8
mov byte [eax + 0x4be554], cl
inc eax
cmp eax, 0x22
jb 0x404091
mov eax, 0x4be554
ret

Function at 0x4040ac
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3ca8], 1
jne 0x4040cf
or dword [0x4c3ca8], 1
mov dword [0x4bdecc], 0x8c9c9ba8
mov word [0x4bded0], 0xe8a8
xor eax, eax
mov cl, byte [eax + 0x4bdecc]
xor cl, 0xe8
mov byte [eax + 0x4be578], cl
inc eax
cmp eax, 6
jb 0x4040d1
mov eax, 0x4be578
ret

Function at 0x4040ec
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3ca4], 1
jne 0x404123
or dword [0x4c3ca4], 1
mov dword [0x4bded4], 0x9c869d9a
mov dword [0x4bded8], 0xb78d8581
mov dword [0x4bdedc], 0x879a9a8d
mov word [0x4bdee0], 0xe89a
xor eax, eax
mov cl, byte [eax + 0x4bded4]
xor cl, 0xe8
mov byte [eax + 0x4be580], cl
inc eax
cmp eax, 0xe
jb 0x404125
mov eax, 0x4be580
ret

Function at 0x404140
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3ca0], 1
jne 0x40416e
or dword [0x4c3ca0], 1
mov dword [0x4bdee4], 0x8f86899a
mov dword [0x4bdee8], 0x9a8db78d
mov dword [0x4bdeec], 0xe89a879a
xor eax, eax
mov cl, byte [eax + 0x4bdee4]
xor cl, 0xe8
mov byte [eax + 0x4be590], cl
inc eax
cmp eax, 0xc
jb 0x404170
mov eax, 0x4be590
ret

Function at 0x40418b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c9c], 1
jne 0x4041c9
or dword [0x4c3c9c], 1
mov dword [0x4bdef0], 0x9a8d9e87
mov dword [0x4bdef4], 0x9f87848e
mov dword [0x4bdef8], 0x9a9a8db7
mov word [0x4bdefc], 0x9a87
mov byte [0x4bdefe], 0xe8
xor eax, eax
mov cl, byte [eax + 0x4bdef0]
xor cl, 0xe8
mov byte [eax + 0x4be59c], cl
inc eax
cmp eax, 0xf
jb 0x4041cb
mov eax, 0x4be59c
ret

Function at 0x4041e6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c98], 1
jne 0x40421e
or dword [0x4c3c98], 1
mov dword [0x4bdf00], 0x8d8c869d
mov dword [0x4bdf04], 0x87848e9a
mov dword [0x4bdf08], 0x9a8db79f
mov dword [0x4bdf0c], 0xe89a879a
xor eax, eax
mov cl, byte [eax + 0x4bdf00]
xor cl, 0xe8
mov byte [eax + 0x4be5ac], cl
inc eax
cmp eax, 0x10
jb 0x404220
mov eax, 0x4be5ac
ret
Function at 0x40423b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c94], 1
jne 0x404269
or dword [0x4c3c94], 1
mov dword [0x4bdf10], 0x818f8784
mov dword [0x4bdf14], 0x9a8db78b
mov dword [0x4bdf18], 0xe89a879a
xor eax, eax
mov cl, byte [eax + 0x4bdf10]
xor cl, 0xe8
mov byte [eax + 0x4be5bc], cl
inc eax
cmp eax, 0xc
jb 0x40426b
mov eax, 0x4be5bc
ret

Function at 0x404286
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c90], 1
jne 0x4042bb
or dword [0x4c3c90], 1
mov dword [0x4bdf1c], 0x8985878c
mov dword [0x4bdf20], 0x8db78681
mov dword [0x4bdf24], 0x9a879a9a
mov byte [0x4bdf28], 0xe8
xor eax, eax
mov cl, byte [eax + 0x4bdf1c]
xor cl, 0xe8
mov byte [eax + 0x4be5c8], cl
inc eax
cmp eax, 0xd
jb 0x4042bd
mov eax, 0x4be5c8
ret

Function at 0x4042d8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c8c], 1
jne 0x404317
or dword [0x4c3c8c], 1
mov dword [0x4bdf2c], 0x899e8681
mov dword [0x4bdf30], 0xb78c8184
mov dword [0x4bdf34], 0x9d8f9a89
mov dword [0x4bdf38], 0x9c868d85
mov byte [0x4bdf3c], 0xe8
xor eax, eax
mov cl, byte [eax + 0x4bdf2c]
xor cl, 0xe8
mov byte [eax + 0x4be5d8], cl
inc eax
cmp eax, 0x11
jb 0x404319
mov eax, 0x4be5d8
ret

Function at 0x404334
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c88], 1
jne 0x404369
or dword [0x4c3c88], 1
mov dword [0x4bdf40], 0x8f868d84
mov dword [0x4bdf44], 0x8db7809c
mov dword [0x4bdf48], 0x9a879a9a
mov byte [0x4bdf4c], 0xe8
xor eax, eax
mov cl, byte [eax + 0x4bdf40]
xor cl, 0xe8
mov byte [eax + 0x4be5ec], cl
inc eax
cmp eax, 0xd
jb 0x40436b
mov eax, 0x4be5ec
ret

Function at 0x404386
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c84], 1
jne 0x4043bb
or dword [0x4c3c84], 1
mov dword [0x4bdf50], 0xb79c9d87
mov dword [0x4bdf54], 0x9ab78e87
mov dword [0x4bdf58], 0x8d8f8689
mov byte [0x4bdf5c], 0xe8
xor eax, eax
mov cl, byte [eax + 0x4bdf50]
xor cl, 0xe8
mov byte [eax + 0x4be5fc], cl
inc eax
cmp eax, 0xd
jb 0x4043bd
mov eax, 0x4be5fc
ret

Function at 0x4043d8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c80], 1
jne 0x404405
or dword [0x4c3c80], 1
mov dword [0x4bdf60], 0x8d8b908d
mov dword [0x4bdf64], 0x87819c98
mov word [0x4bdf68], 0xe886
xor eax, eax
mov cl, byte [eax + 0x4bdf60]
xor cl, 0xe8
mov byte [eax + 0x4be60c], cl
inc eax
cmp eax, 0xa
jb 0x404407
mov eax, 0x4be60c
ret

Function at 0x404422
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c7c], 1
jne 0x404481
or dword [0x4c3c7c], 1
mov dword [0x4bdf6c], 0x8c9c9be1
mov dword [0x4bdf70], 0x908dd2d2
mov dword [0x4bdf74], 0x9c988d8b
mov dword [0x4bdf78], 0xd2868781
mov dword [0x4bdf7c], 0x89809fd2
mov dword [0x4bdf80], 0xd2c1c09c
mov dword [0x4bdf84], 0xe59bcdc8
mov word [0x4bdf88], 0xe8e2
xor eax, eax
mov cl, byte [eax + 0x4bdf6c]
xor cl, 0xe8
mov byte [eax + 0x4be618], cl
inc eax
cmp eax, 0x1e
jb 0x404483
mov eax, 0x4be618
ret
Function at 0x40449e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c78], 1
jne 0x404512
or dword [0x4c3c78], 1
mov dword [0x4bdf8c], 0x8189aee1
mov dword [0x4bdf90], 0xc88c8d84
mov dword [0x4bdf94], 0x8fc8879c
mov dword [0x4bdf98], 0x9bc89c8d
mov dword [0x4bdf9c], 0xd2d28c9c
mov dword [0x4bdfa0], 0x8d8b908d
mov dword [0x4bdfa4], 0x87819c98
mov dword [0x4bdfa8], 0x9fd2d286
mov dword [0x4bdfac], 0xc09c8980
mov dword [0x4bdfb0], 0xe8e2e5c1
xor eax, eax
mov cl, byte [eax + 0x4bdf8c]
xor cl, 0xe8
mov byte [eax + 0x4be638], cl
inc eax
cmp eax, 0x28
jb 0x404514
mov eax, 0x4be638
ret

Function at 0x40452f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c74], 1
jne 0x404563
or dword [0x4c3c74], 1
mov dword [0x4bdfb4], 0x85878bb7
mov dword [0x4bdfb8], 0x9a9a8db7
mov word [0x4bdfbc], 0x9a87
mov byte [0x4bdfbe], 0xe8
xor eax, eax
mov cl, byte [eax + 0x4bdfb4]
xor cl, 0xe8
mov byte [eax + 0x4be660], cl
inc eax
cmp eax, 0xb
jb 0x404565
mov eax, 0x4be660
ret

Function at 0x404580
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c70], 1
jne 0x4045e9
or dword [0x4c3c70], 1
mov dword [0x4bdfc0], 0x878bb7e1
mov dword [0x4bdfc4], 0x9a8db785
mov dword [0x4bdfc8], 0xd29a879a
mov dword [0x4bdfcc], 0x9a9aadd2
mov dword [0x4bdfd0], 0x8da59a87
mov dword [0x4bdfd4], 0x8f899b9b
mov dword [0x4bdfd8], 0xd2c1c08d
mov dword [0x4bdfdc], 0xe59bcdc8
mov word [0x4bdfe0], 0xe8e2
xor eax, eax
mov cl, byte [eax + 0x4bdfc0]
xor cl, 0xe8
mov byte [eax + 0x4be66c], cl
inc eax
cmp eax, 0x22
jb 0x4045eb
mov eax, 0x4be66c
ret

Function at 0x404606
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c6c], 1
jne 0x404684
or dword [0x4c3c6c], 1
mov dword [0x4bdfe4], 0x8189aee1
mov dword [0x4bdfe8], 0xc88c8d84
mov dword [0x4bdfec], 0x8fc8879c
mov dword [0x4bdff0], 0xb7c89c8d
mov dword [0x4bdff4], 0xb785878b
mov dword [0x4bdff8], 0x879a9a8d
mov dword [0x4bdffc], 0xadd2d29a
mov dword [0x4be000], 0x9a879a9a
mov dword [0x4be004], 0x9b9b8da5
mov dword [0x4be008], 0xc08d8f89
mov dword [0x4be00c], 0xe8e2e5c1
xor eax, eax
mov cl, byte [eax + 0x4bdfe4]
xor cl, 0xe8
mov byte [eax + 0x4be690], cl
inc eax
cmp eax, 0x2c
jb 0x404686
mov eax, 0x4be690
ret

Function at 0x4046a1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c68], 1
jne 0x40471c
or dword [0x4c3c68], 1
mov dword [0x4be010], 0x8b899cbb
mov dword [0x4be014], 0x9d8cc883
mov dword [0x4be018], 0x8dc89885
mov dword [0x4be01c], 0x9a879a9a
mov dword [0x4be020], 0x87abc8d2
mov dword [0x4be024], 0x908d9c86
mov dword [0x4be028], 0x8b8dba9c
mov dword [0x4be02c], 0xc88c9a87
mov dword [0x4be030], 0xc89b899f
mov dword [0x4be034], 0x84849d86
mov byte [0x4be038], 0xe8
xor eax, eax
mov cl, byte [eax + 0x4be010]
xor cl, 0xe8
mov byte [eax + 0x4be6bc], cl
inc eax
cmp eax, 0x29
jb 0x40471e
mov eax, 0x4be6bc
ret
Function at 0x404739
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c64], 1
jne 0x4047b3
or dword [0x4c3c64], 1
mov dword [0x4be03c], 0x8b899cbb
mov dword [0x4be040], 0x9d8cc883
mov dword [0x4be044], 0x8dc89885
mov dword [0x4be048], 0x9a879a9a
mov dword [0x4be04c], 0x91bbc8d2
mov dword [0x4be050], 0x8186a185
mov dword [0x4be054], 0x8489819c
mov dword [0x4be058], 0xc88d9281
mov dword [0x4be05c], 0x8481898e
mov word [0x4be060], 0x8c8d
mov byte [0x4be062], 0xe8
xor eax, eax
mov cl, byte [eax + 0x4be03c]
xor cl, 0xe8
mov byte [eax + 0x4be6e8], cl
inc eax
cmp eax, 0x27
jb 0x4047b5
mov eax, 0x4be6e8
ret

Function at 0x4047d0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c60], 1
jne 0x404836
or dword [0x4c3c60], 1
mov dword [0x4be064], 0x81839bd4
mov dword [0x4be068], 0x8c8d9898
mov dword [0x4be06c], 0x899a8ec8
mov dword [0x4be070], 0xc8c48d85
mov dword [0x4be074], 0x9fc8abb8
mov dword [0x4be078], 0x86c89b89
mov dword [0x4be07c], 0xd684849d
mov word [0x4be080], 0xe2e5
mov byte [0x4be082], 0xe8
xor eax, eax
mov cl, byte [eax + 0x4be064]
xor cl, 0xe8
mov byte [eax + 0x4be710], cl
inc eax
cmp eax, 0x1f
jb 0x404838
mov eax, 0x4be710
ret

Function at 0x404853
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c5c], 1
jne 0x4048e6
or dword [0x4c3c5c], 1
mov dword [0x4be084], 0x81839bd4
mov dword [0x4be088], 0x8c8d9898
mov dword [0x4be08c], 0x899a8ec8
mov dword [0x4be090], 0xc8c48d85
mov dword [0x4be094], 0x9fc8abb8
mov dword [0x4be098], 0x9bc89b89
mov dword [0x4be09c], 0xc88d8589
mov dword [0x4be0a0], 0x9ac89b89
mov dword [0x4be0a4], 0x9a9d9c8d
mov dword [0x4be0a8], 0x8c89c886
mov dword [0x4be0ac], 0x9b8d9a8c
mov dword [0x4be0b0], 0xe2e5d69b
mov byte [0x4be0b4], 0xe8
xor eax, eax
mov cl, byte [eax + 0x4be084]
xor cl, 0xe8
mov byte [eax + 0x4be730], cl
inc eax
cmp eax, 0x31
jb 0x4048e8
mov eax, 0x4be730
ret
Function at 0x404903
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16c4
call fcn.00477520
push ebx
push esi
push edi
call dword [0x493094]
test byte [0x4c3c58], 1
mov dword [ebp - 4], eax
jne 0x40494a
or dword [0x4c3c58], 1
mov dword [0x4be0b8], 0x8c8785d4
mov dword [0x4be0bc], 0xd78d849d
mov dword [0x4be0c0], 0xe8d6d7d7
xor edi, edi
xor eax, eax
mov cl, byte [eax + 0x4be0b8]
xor cl, 0xe8
mov byte [eax + 0x4be764], cl
inc eax
cmp eax, 0xc
jb 0x40494e
test byte [0x4c3c54], 1
mov dword [ebp - 8], 0x4be764
jne 0x404998
or dword [0x4c3c54], 1
mov dword [0x4be0c4], 0x85919bd4
mov dword [0x4be0c8], 0xd784878a
mov dword [0x4be0cc], 0xe8d6d7d7
xor eax, eax
mov cl, byte [eax + 0x4be0c4]
xor cl, 0xe8
mov byte [eax + 0x4be770], cl
inc eax
cmp eax, 0xc
jb 0x40499a
mov esi, 0x688
push esi
lea eax, [ebp - 0x6c0]
push edi
push eax
mov dword [ebp - 0x1c], 0x4be770
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
call fcn.004679d0
mov eax, dword [ebp + 8]
cdq
add esp, 0xc
mov dword [ebp - 0x6c0], esi
mov esi, eax
lea eax, [ebp - 0x6c0]
push eax
mov ebx, edx
push ebx
push esi
push dword [ebp - 4]
call dword [0x4933b0]
test eax, eax
je 0x4049ff
lea eax, [ebp - 0x69c]
mov dword [ebp - 8], eax
push 0xffa
lea eax, [ebp - 0x16c0]
push edi
push eax
call fcn.004679d0
add esp, 0xc
lea eax, [ebp - 0x16c0]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x16c0], 0x58
mov dword [ebp - 0x1670], 0x7d0
call dword [0x4933bc]
lea ecx, [ebp - 0x166c]
test eax, eax
jne 0x404a4b
mov ecx, dword [ebp - 0x1c]
test byte [0x4c3c50], 1
jne 0x404a82
or dword [0x4c3c50], 1
mov dword [0x4be0d0], 0xcdc898cd
mov dword [0x4be0d4], 0x9bcdc99b
mov dword [0x4be0d8], 0xcd90d8c3
mov word [0x4be0dc], 0xe890
xor eax, eax
mov dl, byte [eax + 0x4be0d0]
xor dl, 0xe8
mov byte [eax + 0x4be77c], dl
inc eax
cmp eax, 0xe
jb 0x404a84
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push ecx
push dword [ebp - 8]
push dword [ebp + 8]
push 0x4be77c
push dword [ebp + 0xc]
call fcn.00464bfd
add esp, 0x1c
push 6
pop ecx
mov dword [ebp - 0xc], edi
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x18
call dword [0x4933a4]
test eax, eax
je 0x404afb
push dword [ebp - 0xc]
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
call fcn.00404b48
push eax
push dword [ebp + 0xc]
call fcn.00464bfd
add esp, 0x14
test byte [0x4c3c48], 1
jne 0x404b1b
or dword [0x4c3c48], 1
mov word [0x4be0f0], 0xe2e5
mov byte [0x4be0f2], 0xe8
xor eax, eax
mov cl, byte [eax + 0x4be0f0]
xor cl, 0xe8
mov byte [eax + 0x4be79c], cl
inc eax
cmp eax, 3
jb 0x404b1d
push dword [ebp + 0xc]
push 0x4be79c
call fcn.00464871
pop ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 8
Function at 0x404b48
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c4c], 1
jne 0x404b80
or dword [0x4c3c4c], 1
mov dword [0x4be0e0], 0x9bcdc0c8
mov dword [0x4be0e4], 0xc88ccdd2
mov dword [0x4be0e8], 0x90d8c8c3
mov dword [0x4be0ec], 0xe8c190cd
xor eax, eax
mov cl, byte [eax + 0x4be0e0]
xor cl, 0xe8
mov byte [eax + 0x4be78c], cl
inc eax
cmp eax, 0x10
jb 0x404b82
mov eax, 0x4be78c
ret

Function at 0x4067d6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c40], 1
jne 0x4069bc
or dword [0x4c3c40], 1
mov dword [0x4be7c0], 0x2e733234
mov dword [0x4be7c4], 0x28323929
mov dword [0x4be7c8], 0x382e6729
mov dword [0x4be7cc], 0x283f2b29
mov dword [0x4be7d0], 0x337a753b
mov dword [0x4be7d4], 0x57747a32
mov dword [0x4be7d8], 0x363e3c2d
mov dword [0x4be7dc], 0x73383a3c
mov dword [0x4be7e0], 0x35293c2d
mov dword [0x4be7e4], 0x7a7d607d
mov dword [0x4be7e8], 0x382f577a
mov dword [0x4be7ec], 0x2f34282c
mov dword [0x4be7f0], 0x2e7a7538
mov dword [0x4be7f4], 0x3e342f29
mov dword [0x4be7f8], 0x57747a29
mov dword [0x4be7fc], 0x3c3e3231
mov dword [0x4be800], 0x712e7d31
mov dword [0x4be804], 0x607d2f7d
mov dword [0x4be808], 0x3e2d257d
mov dword [0x4be80c], 0x7531313c
mov dword [0x4be810], 0x3e33283b
mov dword [0x4be814], 0x33323429
mov dword [0x4be818], 0x2f7d7475
mov dword [0x4be81c], 0x2f282938
mov dword [0x4be820], 0x382f7d33
mov dword [0x4be824], 0x2f34282c
mov dword [0x4be828], 0x787a7538
mov dword [0x4be82c], 0x73747a10
mov dword [0x4be830], 0x33343c30
mov dword [0x4be834], 0x3c020275
mov dword [0x4be838], 0x742e3a2f
mov dword [0x4be83c], 0x3933387d
mov dword [0x4be840], 0x38397d71
mov dword [0x4be844], 0x733a283f
mov dword [0x4be848], 0x3e3c2f29
mov dword [0x4be84c], 0x3e3c3f38
mov dword [0x4be850], 0x34577436
mov dword [0x4be854], 0x32337d3b
mov dword [0x4be858], 0x7d2e7d29
mov dword [0x4be85c], 0x33383529
mov dword [0x4be860], 0x2f2f387d
mov dword [0x4be864], 0x2f752f32
mov dword [0x4be868], 0x33387d74
mov dword [0x4be86c], 0x382f5739
mov dword [0x4be870], 0x332f2829
mov word [0x4be874], 0x2f7d
mov byte [0x4be876], 0x5d
xor eax, eax
mov cl, byte [eax + 0x4be7c0]
xor cl, 0x5d
mov byte [eax + 0x4beda8], cl
inc eax
cmp eax, 0xb7
jb 0x4069be
mov eax, 0x4beda8
ret
Function at 0x4069db
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c3c3c], 1
jne 0x406c61
or dword [0x4c3c3c], 1
mov dword [0x4be878], 0x2e733234
mov dword [0x4be87c], 0x28323929
mov dword [0x4be880], 0x382e6729
mov dword [0x4be884], 0x283f2b29
mov dword [0x4be888], 0x337a753b
mov dword [0x4be88c], 0x57747a32
mov dword [0x4be890], 0x363e3c2d
mov dword [0x4be894], 0x73383a3c
mov dword [0x4be898], 0x35293c2d
mov dword [0x4be89c], 0x577a7a60
mov dword [0x4be8a0], 0x282c382f
mov dword [0x4be8a4], 0x75382f34
mov dword [0x4be8a8], 0x2f292e7a
mov dword [0x4be8ac], 0x7a293e34
mov dword [0x4be8b0], 0x32315774
mov dword [0x4be8b4], 0x7d313c3e
mov dword [0x4be8b8], 0x607d3130
mov dword [0x4be8bc], 0x2c382f7d
mov dword [0x4be8c0], 0x382f3428
mov dword [0x4be8c4], 0x31307a75
mov dword [0x4be8c8], 0x3157747a
mov dword [0x4be8cc], 0x313c3e32
mov dword [0x4be8d0], 0x2f712e7d
mov dword [0x4be8d4], 0x607d3871
mov dword [0x4be8d8], 0x3e2d257d
mov dword [0x4be8dc], 0x7531313c
mov dword [0x4be8e0], 0x3e33283b
mov dword [0x4be8e4], 0x33323429
mov dword [0x4be8e8], 0x2f7d7475
mov dword [0x4be8ec], 0x2f282938
mov dword [0x4be8f0], 0x382f7d33
mov dword [0x4be8f4], 0x2f34282c
mov dword [0x4be8f8], 0x787a7538
mov dword [0x4be8fc], 0x73747a10
mov dword [0x4be900], 0x78751b78
mov dword [0x4be904], 0x387d741c
mov dword [0x4be908], 0x7d713933
mov dword [0x4be90c], 0x283f3839
mov dword [0x4be910], 0x2f29733a
mov dword [0x4be914], 0x3f383e3c
mov dword [0x4be918], 0x74363e3c
mov dword [0x4be91c], 0x7d3b3457
mov dword [0x4be920], 0x7d293233
mov dword [0x4be924], 0x35297d2e
mov dword [0x4be928], 0x2f7d3338
mov dword [0x4be92c], 0x2f282938
mov dword [0x4be930], 0x34337d33
mov dword [0x4be934], 0x2f7d7131
mov dword [0x4be938], 0x3933387d
mov dword [0x4be93c], 0x7d3b3457
mov dword [0x4be940], 0x60237d2f
mov dword [0x4be944], 0x3134337d
mov dword [0x4be948], 0x3835297d
mov dword [0x4be94c], 0x7d2f7d33
mov dword [0x4be950], 0x31307d60
mov dword [0x4be954], 0x292e2973
mov dword [0x4be958], 0x3a33342f
mov dword [0x4be95c], 0x7d742f75
mov dword [0x4be960], 0x57393338
mov dword [0x4be964], 0x2829382f
mov dword [0x4be968], 0x2f7d332f
mov word [0x4be96c], 0x3871
mov byte [0x4be96e], 0x5d
xor eax, eax
mov cl, byte [eax + 0x4be878]
xor cl, 0x5d
mov byte [eax + 0x4bee60], cl
inc eax
cmp eax, 0xf7
jb 0x406c63
mov eax, 0x4bee60
ret
Function at 0x406c80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
test byte [0x4c3bfc], 1
jne 0x406ca7
or dword [0x4c3bfc], 1
mov dword [0x4bea64], 0x363e3c2d
mov dword [0x4bea68], 0x5d383a3c
xor eax, eax
mov cl, byte [eax + 0x4bea64]
xor cl, 0x5d
mov byte [eax + 0x4bf04c], cl
inc eax
cmp eax, 8
jb 0x406ca9
push 0x4bf04c
push dword [ebp + 8]
call fcn.00451665
test byte [0x4c3bf8], 1
pop ecx
pop ecx
jne 0x406cf1
or dword [0x4c3bf8], 1
mov dword [0x4bea6c], 0x31382f2d
mov dword [0x4bea70], 0x5d393c32
xor eax, eax
mov cl, byte [eax + 0x4bea6c]
xor cl, 0x5d
mov byte [eax + 0x4bf054], cl
inc eax
cmp eax, 8
jb 0x406cf3
push esi
push 0x4bf054
push 0xffffffffffffffff
push dword [ebp + 8]
call fcn.004516d9
add esp, 0xc
cmp dword [0x4b9bf8], 0
mov esi, 0x4b9bf8
je 0x406d53
push edi
mov edi, esi
push 0
push dword [esi + 4]
push dword [ebp + 8]
call fcn.00451585
push dword [esi]
push 0xfffffffffffffffe
push dword [ebp + 8]
call fcn.00451906
add edi, 8
add esp, 0x18
cmp dword [edi], 0
mov esi, edi
jne 0x406d2c
pop edi
push 0xfffffffffffffffd
push dword [ebp + 8]
call fcn.00450dda
pop ecx
pop ecx
pop esi
pop ebp
ret
Function at 0x406fce
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x48b625
call fcn.0048a6f8
sub esp, 0x64
test byte [0x4c3be4], 1
jne 0x406ffb
or dword [0x4c3be4], 1
mov word [0x4bea9c], 0x1078
mov byte [0x4bea9e], 0x5d
push ebx
push esi
xor ebx, ebx
push edi
xor eax, eax
mov cl, byte [eax + 0x4bea9c]
xor cl, 0x5d
mov byte [eax + 0x4bf084], cl
inc eax
cmp eax, 3
jb 0x407002
push 0xf
mov ecx, 0x4bf084
pop edi
mov eax, ecx
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x54], bl
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x40702d
sub eax, esi
push eax
push ecx
lea ecx, [ebp - 0x54]
call fcn.00404dd5
push dword [ebp + 0x10]
lea eax, [ebp - 0x70]
push dword [ebp + 0xc]
mov dword [ebp - 4], ebx
push eax
lea ebx, [ebp - 0x54]
call fcn.0040c716
add esp, 0xc
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.00404c1e
cmp dword [ebp - 0x5c], 0x10
mov eax, dword [ebp - 0x70]
jae 0x407075
lea eax, [ebp - 0x70]
push eax
push dword [ebp + 8]
call fcn.004501d8
pop ecx
pop ecx
cmp eax, ebx
je 0x4070c5
cmp eax, 3
jne 0x4070b2
call fcn.004071cf
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00464415
mov dword [ebp - 0x1c], vtable.std::runtime_error.0
push 0x4afcc0
lea eax, [ebp - 0x1c]
push eax
call fcn.0046e335
cmp eax, 4
jne 0x4070be
call fcn.00407282
jmp 0x40708e
call fcn.00407335
jmp 0x40708e
push ebx
push ebx
push ebx
push 1
push ebx
push dword [ebp + 8]
call fcn.00451c0e
mov esi, eax
add esp, 0x18
cmp esi, ebx
je 0x40717c
push ebx
call fcn.004073b9
push eax
push 0xffffffffffffffff
push dword [ebp + 8]
call fcn.0045096f
add esp, 0x10
push eax
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
call fcn.00404bfd
mov byte [ebp - 4], 3
cmp esi, 2
jne 0x407134
call fcn.00407400
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.0040c783
pop ecx
pop ecx
mov byte [ebp - 4], 4
lea esi, [ebp - 0x1c]
call fcn.00405b5e
jmp 0x4070a4
cmp esi, 4
jne 0x407153
call fcn.0040745f
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.0040c783
pop ecx
pop ecx
mov byte [ebp - 4], 5
jmp 0x407127
cmp esi, 6
jne 0x407172
call fcn.004074c4
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.0040c783
pop ecx
pop ecx
mov byte [ebp - 4], 6
jmp 0x407127
call fcn.00407548
jmp 0x40708e
mov edi, dword [ebp + 8]
or esi, 0xffffffff
push esi
push edi
mov dword [ebp - 0x10], esi
call fcn.00450fca
pop ecx
pop ecx
test eax, eax
je 0x4071a0
push ebx
push esi
push edi
call fcn.0045118e
add esp, 0xc
mov dword [ebp - 0x10], eax
push edi
call fcn.00450dc4
sub esi, eax
push esi
push edi
call fcn.00450dda
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.00404c1e
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret