joyce8/EMBER2024-capa huggingface dataset:
Function at 0x412e8e
Capabilities:
Encode data using xor

Disassembly:
push esi
push edi
push 0x31
pop ecx
mov esi, 0x492ac8
mov edi, 0x4c2f40
push 0x492b8c
rep movsd dword es:[edi], dword [esi]
call fcn.0044a5e0
pop ecx
pop edi
pop esi
cmp eax, 0xffffffff
jne 0x412eb4
xor al, al
ret
push 0x492bf8
call fcn.0044a530
pop ecx
cmp eax, 0xffffffff
je 0x412eb1
push 0x492d00
call fcn.00448fa0
pop ecx
cmp eax, 0xffffffff
je 0x412eb1
test byte [0x4c2b88], 1
jne 0x412ef5
or dword [0x4c2b88], 1
mov dword [0x4be9c0], 0x2878716a
mov byte [0x4be9c4], 0x19
xor eax, eax
mov cl, byte [eax + 0x4be9c0]
xor cl, 0x19
mov byte [eax + 0x4bea8c], cl
inc eax
cmp eax, 5
jb 0x412ef7
push 0x4bea8c
call fcn.0044a650
pop ecx
mov dword [0x4b8928], eax
test eax, eax
js 0x412eb1
call fcn.00412f80
push eax
call fcn.00449010
pop ecx
mov dword [0x4b892c], eax
test eax, eax
js 0x412eb1
test byte [0x4c2b80], 1
jne 0x412f53
or dword [0x4c2b80], 1
mov dword [0x4be9d0], 0x196a7c78
xor eax, eax
mov cl, byte [eax + 0x4be9d0]
xor cl, 0x19
mov byte [eax + 0x4bea9c], cl
inc eax
cmp eax, 4
jb 0x412f55
push 0x4bea9c
call fcn.0044a5a0
test eax, eax
mov dword [0x4b8930], eax
pop ecx
setns al
ret

Function at 0x412f80
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b84], 1
jne 0x412fa4
or dword [0x4c2b84], 1
mov dword [0x4be9c8], 0x6d6b767f
mov dword [0x4be9cc], 0x1978776c
xor eax, eax
mov cl, byte [eax + 0x4be9c8]
xor cl, 0x19
mov byte [eax + 0x4bea94], cl
inc eax
cmp eax, 8
jb 0x412fa6
mov eax, 0x4bea94
ret

Function at 0x413224
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b7c], 1
jne 0x413262
or dword [0x4c2b7c], 1
mov dword [0x4be9d4], 0x70396974
mov dword [0x4be9d8], 0x396d7077
mov dword [0x4be9dc], 0x7570787f
mov word [0x4be9e0], 0x7d7c
mov byte [0x4be9e2], 0x19
xor eax, eax
mov cl, byte [eax + 0x4be9d4]
xor cl, 0x19
mov byte [eax + 0x4beaa0], cl
inc eax
cmp eax, 0xf
jb 0x413264
mov eax, 0x4beaa0
ret

Function at 0x41327f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b78], 1
jne 0x4132bd
or dword [0x4c2b78], 1
mov dword [0x4be9e4], 0x70396974
mov dword [0x4be9e8], 0x396d7077
mov dword [0x4be9ec], 0x7570787f
mov word [0x4be9f0], 0x7d7c
mov byte [0x4be9f2], 0x19
xor eax, eax
mov cl, byte [eax + 0x4be9e4]
xor cl, 0x19
mov byte [eax + 0x4beab0], cl
inc eax
cmp eax, 0xf
jb 0x4132bf
mov eax, 0x4beab0
ret

Function at 0x4132da
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b74], 1
jne 0x413318
or dword [0x4c2b74], 1
mov dword [0x4be9f4], 0x466d7c6a
mov dword [0x4be9f8], 0x396d7770
mov dword [0x4be9fc], 0x7570787f
mov word [0x4bea00], 0x7d7c
mov byte [0x4bea02], 0x19
xor eax, eax
mov cl, byte [eax + 0x4be9f4]
xor cl, 0x19
mov byte [eax + 0x4beac0], cl
inc eax
cmp eax, 0xf
jb 0x41331a
mov eax, 0x4beac0
ret
Function at 0x413335
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b70], 1
jne 0x41337e
or dword [0x4c2b70], 1
mov dword [0x4bea04], 0x706a776c
mov dword [0x4bea08], 0x7d7c777e
mov dword [0x4bea0c], 0x787c6b46
mov dword [0x4bea10], 0x787f397d
mov dword [0x4bea14], 0x7d7c7570
mov byte [0x4bea18], 0x19
xor eax, eax
mov cl, byte [eax + 0x4bea04]
xor cl, 0x19
mov byte [eax + 0x4bead0], cl
inc eax
cmp eax, 0x15
jb 0x413380
mov eax, 0x4bead0
ret

Function at 0x41339b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b6c], 1
jne 0x4133da
or dword [0x4c2b6c], 1
mov dword [0x4bea1c], 0x7e776b69
mov dword [0x4bea20], 0x72787439
mov dword [0x4bea24], 0x787f397c
mov dword [0x4bea28], 0x7d7c7570
mov byte [0x4bea2c], 0x19
xor eax, eax
mov cl, byte [eax + 0x4bea1c]
xor cl, 0x19
mov byte [eax + 0x4beae8], cl
inc eax
cmp eax, 0x11
jb 0x4133dc
mov eax, 0x4beae8
ret

Function at 0x4133f7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b68], 1
jne 0x413439
or dword [0x4c2b68], 1
mov dword [0x4bea30], 0x6d6b767f
mov dword [0x4bea34], 0x4678776c
mov dword [0x4bea38], 0x7d787c6b
mov dword [0x4bea3c], 0x70787f39
mov dword [0x4bea40], 0x197d7c75
xor eax, eax
mov cl, byte [eax + 0x4bea30]
xor cl, 0x19
mov byte [eax + 0x4beafc], cl
inc eax
cmp eax, 0x14
jb 0x41343b
mov eax, 0x4beafc
ret

Function at 0x413456
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b64], 1
jne 0x41349e
or dword [0x4c2b64], 1
mov dword [0x4bea44], 0x69606b7a
mov dword [0x4bea48], 0x7039766d
mov dword [0x4bea4c], 0x396d7077
mov dword [0x4bea50], 0x7570787f
mov word [0x4bea54], 0x7d7c
mov byte [0x4bea56], 0x19
xor eax, eax
mov cl, byte [eax + 0x4bea44]
xor cl, 0x19
mov byte [eax + 0x4beb10], cl
inc eax
cmp eax, 0x13
jb 0x4134a0
mov eax, 0x4beb10
ret

Function at 0x4136b3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b60], 1
jne 0x4136d6
or dword [0x4c2b60], 1
mov dword [0x4bea58], 0x7d6a6a70
mov word [0x4bea5c], 0x1972
xor eax, eax
mov cl, byte [eax + 0x4bea58]
xor cl, 0x19
mov byte [eax + 0x4beb24], cl
inc eax
cmp eax, 6
jb 0x4136d8
mov eax, 0x4beb24
ret

Function at 0x4136f3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b5c], 1
jne 0x413720
or dword [0x4c2b5c], 1
mov dword [0x4bea60], 0x7b6b6c71
mov dword [0x4bea64], 0x6b6c7d78
mov word [0x4bea68], 0x196b
xor eax, eax
mov cl, byte [eax + 0x4bea60]
xor cl, 0x19
mov byte [eax + 0x4beb2c], cl
inc eax
cmp eax, 0xa
jb 0x413722
mov eax, 0x4beb2c
ret

Function at 0x413800
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b58], 1
jne 0x41382d
or dword [0x4c2b58], 1
mov dword [0x4bea6c], 0x7b6b6c71
mov dword [0x4bea70], 0x6b6c7d78
mov word [0x4bea74], 0x196b
xor eax, eax
mov cl, byte [eax + 0x4bea6c]
xor cl, 0x19
mov byte [eax + 0x4beb38], cl
inc eax
cmp eax, 0xa
jb 0x41382f
mov eax, 0x4beb38
ret
Function at 0x413f19
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b54], 1
jne 0x413f61
or dword [0x4c2b54], 1
mov dword [0x4beb44], 0x6a636879
mov dword [0x4beb48], 0x733a756e
mov dword [0x4beb4c], 0x3a6e7374
mov dword [0x4beb50], 0x76737b7c
mov word [0x4beb54], 0x7e7f
mov byte [0x4beb56], 0x1a
xor eax, eax
mov cl, byte [eax + 0x4beb44]
xor cl, 0x1a
mov byte [eax + 0x4bec58], cl
inc eax
cmp eax, 0x13
jb 0x413f63
mov eax, 0x4bec58
ret

Function at 0x413f7e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b50], 1
jne 0x413fc6
or dword [0x4c2b50], 1
mov dword [0x4beb58], 0x6a636879
mov dword [0x4beb5c], 0x733a756e
mov dword [0x4beb60], 0x3a6e7374
mov dword [0x4beb64], 0x76737b7c
mov word [0x4beb68], 0x7e7f
mov byte [0x4beb6a], 0x1a
xor eax, eax
mov cl, byte [eax + 0x4beb58]
xor cl, 0x1a
mov byte [eax + 0x4bec6c], cl
inc eax
cmp eax, 0x13
jb 0x413fc8
mov eax, 0x4bec6c
ret

Function at 0x413fe4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b48], 1
jne 0x41402c
or dword [0x4c2b48], 1
mov dword [0x4beb74], 0x6a636879
mov dword [0x4beb78], 0x733a756e
mov dword [0x4beb7c], 0x3a6e7374
mov dword [0x4beb80], 0x76737b7c
mov word [0x4beb84], 0x7e7f
mov byte [0x4beb86], 0x1a
xor eax, eax
mov cl, byte [eax + 0x4beb74]
xor cl, 0x1a
mov byte [eax + 0x4bec88], cl
inc eax
cmp eax, 0x13
jb 0x41402e
mov eax, 0x4bec88
ret

Function at 0x414049
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b40], 1
jne 0x414091
or dword [0x4c2b40], 1
mov dword [0x4beb8c], 0x6a636879
mov dword [0x4beb90], 0x733a756e
mov dword [0x4beb94], 0x3a6e7374
mov dword [0x4beb98], 0x76737b7c
mov word [0x4beb9c], 0x7e7f
mov byte [0x4beb9e], 0x1a
xor eax, eax
mov cl, byte [eax + 0x4beb8c]
xor cl, 0x1a
mov byte [eax + 0x4beca0], cl
inc eax
cmp eax, 0x13
jb 0x414093
mov eax, 0x4beca0
ret

Function at 0x4140ae
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b3c], 1
jne 0x4140e5
or dword [0x4c2b3c], 1
mov dword [0x4beba0], 0x6a636879
mov dword [0x4beba4], 0x7c3a756e
mov dword [0x4beba8], 0x7f76737b
mov word [0x4bebac], 0x1a7e
xor eax, eax
mov cl, byte [eax + 0x4beba0]
xor cl, 0x1a
mov byte [eax + 0x4becb4], cl
inc eax
cmp eax, 0xe
jb 0x4140e7
mov eax, 0x4becb4
ret

Function at 0x414102
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b38], 1
jne 0x414139
or dword [0x4c2b38], 1
mov dword [0x4bebb0], 0x6a636879
mov dword [0x4bebb4], 0x7c3a756e
mov dword [0x4bebb8], 0x7f76737b
mov word [0x4bebbc], 0x1a7e
xor eax, eax
mov cl, byte [eax + 0x4bebb0]
xor cl, 0x1a
mov byte [eax + 0x4becc4], cl
inc eax
cmp eax, 0xe
jb 0x41413b
mov eax, 0x4becc4
ret

Function at 0x414156
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b34], 1
jne 0x414183
or dword [0x4c2b34], 1
mov dword [0x4bebc0], 0x6a687f72
mov dword [0x4bebc4], 0x687f7e31
mov word [0x4bebc8], 0x1a6a
xor eax, eax
mov cl, byte [eax + 0x4bebc0]
xor cl, 0x1a
mov byte [eax + 0x4becd4], cl
inc eax
cmp eax, 0xa
jb 0x414185
mov eax, 0x4becd4
ret
Function at 0x4141a0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b30], 1
jne 0x4141d7
or dword [0x4c2b30], 1
mov dword [0x4bebcc], 0x6a636879
mov dword [0x4bebd0], 0x7c3a756e
mov dword [0x4bebd4], 0x7f76737b
mov word [0x4bebd8], 0x1a7e
xor eax, eax
mov cl, byte [eax + 0x4bebcc]
xor cl, 0x1a
mov byte [eax + 0x4bece0], cl
inc eax
cmp eax, 0xe
jb 0x4141d9
mov eax, 0x4bece0
ret

Function at 0x4141f4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b2c], 1
jne 0x41422b
or dword [0x4c2b2c], 1
mov dword [0x4bebdc], 0x6a636879
mov dword [0x4bebe0], 0x7c3a756e
mov dword [0x4bebe4], 0x7f76737b
mov word [0x4bebe8], 0x1a7e
xor eax, eax
mov cl, byte [eax + 0x4bebdc]
xor cl, 0x1a
mov byte [eax + 0x4becf0], cl
inc eax
cmp eax, 0xe
jb 0x41422d
mov eax, 0x4becf0
ret

Function at 0x4142f9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b28], 1
jne 0x414330
or dword [0x4c2b28], 1
mov dword [0x4bebec], 0x6a636879
mov dword [0x4bebf0], 0x7c3a756e
mov dword [0x4bebf4], 0x7f76737b
mov word [0x4bebf8], 0x1a7e
xor eax, eax
mov cl, byte [eax + 0x4bebec]
xor cl, 0x1a
mov byte [eax + 0x4bed00], cl
inc eax
cmp eax, 0xe
jb 0x414332
mov eax, 0x4bed00
ret

Function at 0x4144df
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b24], 1
jne 0x414516
or dword [0x4c2b24], 1
mov dword [0x4bebfc], 0x6a636879
mov dword [0x4bec00], 0x7c3a756e
mov dword [0x4bec04], 0x7f76737b
mov word [0x4bec08], 0x1a7e
xor eax, eax
mov cl, byte [eax + 0x4bebfc]
xor cl, 0x1a
mov byte [eax + 0x4bed10], cl
inc eax
cmp eax, 0xe
jb 0x414518
mov eax, 0x4bed10
ret

Function at 0x414533
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b20], 1
jne 0x41456a
or dword [0x4c2b20], 1
mov dword [0x4bec0c], 0x6a636879
mov dword [0x4bec10], 0x7c3a756e
mov dword [0x4bec14], 0x7f76737b
mov word [0x4bec18], 0x1a7e
xor eax, eax
mov cl, byte [eax + 0x4bec0c]
xor cl, 0x1a
mov byte [eax + 0x4bed20], cl
inc eax
cmp eax, 0xe
jb 0x41456c
mov eax, 0x4bed20
ret
Function at 0x414587
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x48a45b
call fcn.00489c38
sub esp, 0x10
push ebx
push esi
mov esi, 0x110
push esi
call fcn.004643c0
mov ebx, eax
pop ecx
test ebx, ebx
je 0x4145b8
push esi
push 0
push ebx
call fcn.00466f20
add esp, 0xc
mov esi, ebx
jmp 0x4145ba
xor esi, esi
mov dword [ebp - 0x10], esi
and dword [ebp - 4], 0
mov eax, dword [edi + 4]
mov dword [esi + 0x100], eax
mov eax, dword [edi + 8]
sub eax, 0x14
test byte [0x4c2b18], 1
mov dword [esi + 0x104], eax
mov eax, dword [edi + 0xc]
mov dword [esi + 0x108], eax
mov eax, dword [ebp + 8]
mov dword [esi + 0x10c], eax
jne 0x414609
or dword [0x4c2b18], 1
mov dword [0x4bec30], 0x78757678
mov byte [0x4bec34], 0x1a
xor eax, eax
mov cl, byte [eax + 0x4bec30]
xor cl, 0x1a
mov byte [eax + 0x4bed30], cl
inc eax
cmp eax, 5
jb 0x41460b
push 0
push 0x4bed30
push esi
push 0x414248
push dword [edi]
call fcn.00451217
add esp, 0x14
test eax, eax
je 0x414673
push 0
call fcn.00414763
push eax
push 0xffffffffffffffff
push dword [edi]
call fcn.0044febf
mov dword [ebp + 8], eax
add esp, 0x10
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00463965
push 0x4aec28
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], vtable.std::runtime_error.0
call fcn.0046d875
push esi
call fcn.00464283
pop ecx
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4

Function at 0x41468a
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
test byte [0x4c2b10], 1
jne 0x4146c7
or dword [0x4c2b10], 1
mov dword [0x4bec48], 0x6a636879
mov dword [0x4bec4c], 0x7c3a756e
mov dword [0x4bec50], 0x7f76737b
mov word [0x4bec54], 0x1a7e
xor eax, eax
mov cl, byte [eax + 0x4bec48]
xor cl, 0x1a
mov byte [eax + 0x4bed48], cl
inc eax
cmp eax, 0xe
jb 0x4146c9
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0x4bed48
call fcn.00463965
push 0x4aec28
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x10], vtable.std::runtime_error.0
call fcn.0046d875
int3

Function at 0x414707
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b1c], 1
jne 0x414746
or dword [0x4c2b1c], 1
mov dword [0x4bec1c], 0x457b6f76
mov dword [0x4bec20], 0x767b796a
mov dword [0x4bec24], 0x7b7c3a76
mov dword [0x4bec28], 0x7e7f7673
mov byte [0x4bec2c], 0x1a
xor eax, eax
mov cl, byte [eax + 0x4bec1c]
xor cl, 0x1a
mov byte [eax + 0x4bed58], cl
inc eax
cmp eax, 0x11
jb 0x414748
mov eax, 0x4bed58
ret

Function at 0x414763
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2b14], 1
jne 0x41479b
or dword [0x4c2b14], 1
mov dword [0x4bec38], 0x457b6f76
mov dword [0x4bec3c], 0x7e7b7576
mov dword [0x4bec40], 0x737b7c3a
mov dword [0x4bec44], 0x1a7e7f76
xor eax, eax
mov cl, byte [eax + 0x4bec38]
xor cl, 0x1a
mov byte [eax + 0x4bed38], cl
inc eax
cmp eax, 0x10
jb 0x41479d
mov eax, 0x4bed38
ret
Function at 0x414ec2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2af8], 1
jne 0x414f0b
or dword [0x4c2af8], 1
mov dword [0x4bedfc], 0x796f7d7e
mov dword [0x4bee00], 0x793c282a
mov dword [0x4bee04], 0x78737f72
mov dword [0x4bee08], 0x7d7a3c79
mov dword [0x4bee0c], 0x78797075
mov byte [0x4bee10], 0x1c
xor eax, eax
mov cl, byte [eax + 0x4bedfc]
xor cl, 0x1c
mov byte [eax + 0x4bee60], cl
inc eax
cmp eax, 0x15
jb 0x414f0d
mov eax, 0x4bee60
ret

Function at 0x415053
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2af4], 1
jne 0x41509c
or dword [0x4c2af4], 1
mov dword [0x4bee14], 0x796f7d7e
mov dword [0x4bee18], 0x783c282a
mov dword [0x4bee1c], 0x78737f79
mov dword [0x4bee20], 0x7d7a3c79
mov dword [0x4bee24], 0x78797075
mov byte [0x4bee28], 0x1c
xor eax, eax
mov cl, byte [eax + 0x4bee14]
xor cl, 0x1c
mov byte [eax + 0x4bee78], cl
inc eax
cmp eax, 0x15
jb 0x41509e
mov eax, 0x4bee78
ret

Function at 0x417b9c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2a54], 1
jne 0x417c46
or dword [0x4c2a54], 1
mov dword [0x4bf250], 0x6f7e7358
mov dword [0x4bf254], 0x74696d64
mov dword [0x4bf258], 0x6f3d7372
mov dword [0x4bf25c], 0x78686c78
mov dword [0x4bf260], 0x7978696e
mov dword [0x4bf264], 0x69687f3d
mov dword [0x4bf268], 0x7475693d
mov dword [0x4bf26c], 0x75693d6e
mov dword [0x4bf270], 0x797c786f
mov dword [0x4bf274], 0x6e7c753d
mov dword [0x4bf278], 0x3d72733d
mov dword [0x4bf27c], 0x6d646f7e
mov dword [0x4bf280], 0x743d7269
mov dword [0x4bf284], 0x7c696e73
mov dword [0x4bf288], 0x1d787e73
xor eax, eax
mov cl, byte [eax + 0x4bf250]
xor cl, 0x1d
mov byte [eax + 0x4bf374], cl
inc eax
cmp eax, 0x3c
jb 0x417c48
mov eax, 0x4bf374
ret

Function at 0x417c63
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2a50], 1
jne 0x417cb9
or dword [0x4c2a50], 1
mov dword [0x4bf28c], 0x71747c5b
mov dword [0x4bf290], 0x693d7978
mov dword [0x4bf294], 0x73783d72
mov dword [0x4bf298], 0x6d646f7e
mov dword [0x4bf29c], 0x726d3d69
mov dword [0x4bf2a0], 0x7f3d696e
mov dword [0x4bf2a4], 0x1d647972
xor eax, eax
mov cl, byte [eax + 0x4bf28c]
xor cl, 0x1d
mov byte [eax + 0x4bf3b0], cl
inc eax
cmp eax, 0x1c
jb 0x417cbb
mov eax, 0x4bf3b0
ret

Function at 0x417cd6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2a4c], 1
jne 0x417d3f
or dword [0x4c2a4c], 1
mov dword [0x4bf2a8], 0x71747c5b
mov dword [0x4bf2ac], 0x693d7978
mov dword [0x4bf2b0], 0x78793d72
mov dword [0x4bf2b4], 0x6d646f7e
mov dword [0x4bf2b8], 0x786e3d69
mov dword [0x4bf2bc], 0x6f786b6f
mov dword [0x4bf2c0], 0x6e786f3d
mov dword [0x4bf2c4], 0x6e73726d
mov word [0x4bf2c8], 0x1d78
xor eax, eax
mov cl, byte [eax + 0x4bf2a8]
xor cl, 0x1d
mov byte [eax + 0x4bf3cc], cl
inc eax
cmp eax, 0x22
jb 0x417d41
mov eax, 0x4bf3cc
ret
Function at 0x4180ad
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2a48], 1
jne 0x41810c
or dword [0x4c2a48], 1
mov dword [0x4bf2cc], 0x59514f48
mov dword [0x4bf2d0], 0x71736a72
mov dword [0x4bf2d4], 0x49797c72
mov dword [0x4bf2d8], 0x71745b72
mov dword [0x4bf2dc], 0x7c7b3d78
mov dword [0x4bf2e0], 0x79787174
mov dword [0x4bf2e4], 0x6f753d27
mov word [0x4bf2e8], 0x1d20
xor eax, eax
mov cl, byte [eax + 0x4bf2cc]
xor cl, 0x1d
mov byte [eax + 0x4bf3f0], cl
inc eax
cmp eax, 0x1e
jb 0x41810e
mov eax, 0x4bf3f0
ret

Function at 0x418db7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2a30], 1
jne 0x418e03
or dword [0x4c2a30], 1
mov dword [0x4bf46c], 0x526a7b59
mov dword [0x4bf470], 0x576a6d7f
mov dword [0x4bf474], 0x6a6b6e70
mov dword [0x4bf478], 0x71787057
mov dword [0x4bf47c], 0x777f783e
mov dword [0x4bf480], 0x1e7a7b72
xor eax, eax
mov cl, byte [eax + 0x4bf46c]
xor cl, 0x1e
mov byte [eax + 0x4bf4f8], cl
inc eax
cmp eax, 0x18
jb 0x418e05
mov eax, 0x4bf4f8
ret

Function at 0x418f98
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2a2c], 1
jne 0x418ff7
or dword [0x4c2a2c], 1
mov dword [0x4bf484], 0x6b7d7b4c
mov dword [0x4bf488], 0x71776d6c
mov dword [0x4bf48c], 0x733e6d70
mov dword [0x4bf490], 0x3e6a6d6b
mov dword [0x4bf494], 0x7f3e7b7c
mov dword [0x4bf498], 0x7b723e6a
mov dword [0x4bf49c], 0x3e6a6d7f
mov word [0x4bf4a0], 0x1e2f
xor eax, eax
mov cl, byte [eax + 0x4bf484]
xor cl, 0x1e
mov byte [eax + 0x4bf510], cl
inc eax
cmp eax, 0x1e
jb 0x418ff9
mov eax, 0x4bf510
ret

Function at 0x419014
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2a24], 1
jne 0x419069
or dword [0x4c2a24], 1
mov dword [0x4bf4b0], 0x416a7b79
mov dword [0x4bf4b4], 0x7b73776a
mov dword [0x4bf4b8], 0x70776d41
mov dword [0x4bf4bc], 0x72417b7d
mov dword [0x4bf4c0], 0x416a6d7f
mov dword [0x4bf4c4], 0x6b6e7077
mov word [0x4bf4c8], 0x1e6a
xor eax, eax
mov cl, byte [eax + 0x4bf4b0]
xor cl, 0x1e
mov byte [eax + 0x4bf53c], cl
inc eax
cmp eax, 0x1a
jb 0x41906b
mov eax, 0x4bf53c
ret

Function at 0x419086
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2a20], 1
jne 0x4190d9
or dword [0x4c2a20], 1
mov dword [0x4bf4cc], 0x416a7b79
mov dword [0x4bf4d0], 0x7b7d707f
mov dword [0x4bf4d4], 0x6c716a6d
mov dword [0x4bf4d8], 0x7a717341
mov dword [0x4bf4dc], 0x417b726b
mov dword [0x4bf4e0], 0x766a7f6e
mov byte [0x4bf4e4], 0x1e
xor eax, eax
mov cl, byte [eax + 0x4bf4cc]
xor cl, 0x1e
mov byte [eax + 0x4bf558], cl
inc eax
cmp eax, 0x19
jb 0x4190db
mov eax, 0x4bf558
ret

Function at 0x41935c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2a18], 1
jne 0x4193c2
or dword [0x4c2a18], 1
mov dword [0x4bf584], 0x7d72664c
mov dword [0x4bf588], 0x7c3f7370
mov dword [0x4bf58c], 0x7b736a70
mov dword [0x4bf590], 0x6b70713f
mov dword [0x4bf594], 0x3f7a7d3f
mov dword [0x4bf598], 0x706c7a6d
mov dword [0x4bf59c], 0x7b7a6973
mov word [0x4bf5a0], 0x3f25
mov byte [0x4bf5a2], 0x1f
xor eax, eax
mov cl, byte [eax + 0x4bf584]
xor cl, 0x1f
mov byte [eax + 0x4bf5c4], cl
inc eax
cmp eax, 0x1f
jb 0x4193c4
mov eax, 0x4bf5c4
ret
Function at 0x41996b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2a0c], 1
jne 0x4199c7
or dword [0x4c2a0c], 1
mov dword [0x4bf604], 0x7e697156
mov dword [0x4bf608], 0x3f7b7673
mov dword [0x4bf60c], 0x726a717a
mov dword [0x4bf610], 0x6b7e6d7a
mov dword [0x4bf614], 0x3f717076
mov dword [0x4bf618], 0x7b717e77
mov word [0x4bf61c], 0x7a73
mov byte [0x4bf61e], 0x1f
xor eax, eax
mov cl, byte [eax + 0x4bf604]
xor cl, 0x1f
mov byte [eax + 0x4bf7b4], cl
inc eax
cmp eax, 0x1b
jb 0x4199c9
mov eax, 0x4bf7b4
ret

Function at 0x419ac9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2a08], 1
jne 0x419b25
or dword [0x4c2a08], 1
mov dword [0x4bf620], 0x7e697156
mov dword [0x4bf624], 0x3f7b7673
mov dword [0x4bf628], 0x726a717a
mov dword [0x4bf62c], 0x6b7e6d7a
mov dword [0x4bf630], 0x3f717076
mov dword [0x4bf634], 0x7b717e77
mov word [0x4bf638], 0x7a73
mov byte [0x4bf63a], 0x1f
xor eax, eax
mov cl, byte [eax + 0x4bf620]
xor cl, 0x1f
mov byte [eax + 0x4bf7d0], cl
inc eax
cmp eax, 0x1b
jb 0x419b27
mov eax, 0x4bf7d0
ret

Function at 0x419d79
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2a04], 1
jne 0x419dd5
or dword [0x4c2a04], 1
mov dword [0x4bf63c], 0x7e697156
mov dword [0x4bf640], 0x3f7b7673
mov dword [0x4bf644], 0x726a717a
mov dword [0x4bf648], 0x6b7e6d7a
mov dword [0x4bf64c], 0x3f717076
mov dword [0x4bf650], 0x7b717e77
mov word [0x4bf654], 0x7a73
mov byte [0x4bf656], 0x1f
xor eax, eax
mov cl, byte [eax + 0x4bf63c]
xor cl, 0x1f
mov byte [eax + 0x4bf7ec], cl
inc eax
cmp eax, 0x1b
jb 0x419dd7
mov eax, 0x4bf7ec
ret

Function at 0x419ed7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c2a00], 1
jne 0x419f33
or dword [0x4c2a00], 1
mov dword [0x4bf658], 0x7e697156
mov dword [0x4bf65c], 0x3f7b7673
mov dword [0x4bf660], 0x726a717a
mov dword [0x4bf664], 0x6b7e6d7a
mov dword [0x4bf668], 0x3f717076
mov dword [0x4bf66c], 0x7b717e77
mov word [0x4bf670], 0x7a73
mov byte [0x4bf672], 0x1f
xor eax, eax
mov cl, byte [eax + 0x4bf658]
xor cl, 0x1f
mov byte [eax + 0x4bf808], cl
inc eax
cmp eax, 0x1b
jb 0x419f35
mov eax, 0x4bf808
ret

Function at 0x41a124
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c29fc], 1
jne 0x41a18d
or dword [0x4c29fc], 1
mov dword [0x4bf674], 0x7e697156
mov dword [0x4bf678], 0x3f7b7673
mov dword [0x4bf67c], 0x7e6b7e7b
mov dword [0x4bf680], 0x65766c3f
mov dword [0x4bf684], 0x70793f7a
mov dword [0x4bf688], 0x76683f6d
mov dword [0x4bf68c], 0x4d3f7a7b
mov dword [0x4bf690], 0x4c40585a
mov word [0x4bf694], 0x1f45
xor eax, eax
mov cl, byte [eax + 0x4bf674]
xor cl, 0x1f
mov byte [eax + 0x4bf824], cl
inc eax
cmp eax, 0x22
jb 0x41a18f
mov eax, 0x4bf824
ret