joyce8/EMBER2024-capa huggingface dataset:
Function at 0x41632c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81dc], 1
jne 0x416374
or dword [0x4c81dc], 1
mov dword [0x4c3e74], 0xddd4dfce
mov dword [0x4c3e78], 0xc48dc2d9
mov dword [0x4c3e7c], 0x8dd9c4c3
mov dword [0x4c3e80], 0xc1c4cccb
mov word [0x4c3e84], 0xc9c8
mov byte [0x4c3e86], 0xad
xor eax, eax
mov cl, byte [eax + 0x4c3e74]
xor cl, 0xad
mov byte [eax + 0x4c3f88], cl
inc eax
cmp eax, 0x13
jb 0x416376
mov eax, 0x4c3f88
ret

Function at 0x416391
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81d8], 1
jne 0x4163d9
or dword [0x4c81d8], 1
mov dword [0x4c3e88], 0xddd4dfce
mov dword [0x4c3e8c], 0xc48dc2d9
mov dword [0x4c3e90], 0x8dd9c4c3
mov dword [0x4c3e94], 0xc1c4cccb
mov word [0x4c3e98], 0xc9c8
mov byte [0x4c3e9a], 0xad
xor eax, eax
mov cl, byte [eax + 0x4c3e88]
xor cl, 0xad
mov byte [eax + 0x4c3f9c], cl
inc eax
cmp eax, 0x13
jb 0x4163db
mov eax, 0x4c3f9c
ret

Function at 0x4163f6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81d0], 1
jne 0x41643e
or dword [0x4c81d0], 1
mov dword [0x4c3ea4], 0xddd4dfce
mov dword [0x4c3ea8], 0xc48dc2d9
mov dword [0x4c3eac], 0x8dd9c4c3
mov dword [0x4c3eb0], 0xc1c4cccb
mov word [0x4c3eb4], 0xc9c8
mov byte [0x4c3eb6], 0xad
xor eax, eax
mov cl, byte [eax + 0x4c3ea4]
xor cl, 0xad
mov byte [eax + 0x4c3fb8], cl
inc eax
cmp eax, 0x13
jb 0x416440
mov eax, 0x4c3fb8
ret

Function at 0x41645b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81c8], 1
jne 0x4164a3
or dword [0x4c81c8], 1
mov dword [0x4c3ebc], 0xddd4dfce
mov dword [0x4c3ec0], 0xc48dc2d9
mov dword [0x4c3ec4], 0x8dd9c4c3
mov dword [0x4c3ec8], 0xc1c4cccb
mov word [0x4c3ecc], 0xc9c8
mov byte [0x4c3ece], 0xad
xor eax, eax
mov cl, byte [eax + 0x4c3ebc]
xor cl, 0xad
mov byte [eax + 0x4c3fd0], cl
inc eax
cmp eax, 0x13
jb 0x4164a5
mov eax, 0x4c3fd0
ret

Function at 0x4164c0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81c4], 1
jne 0x4164f7
or dword [0x4c81c4], 1
mov dword [0x4c3ed0], 0xddd4dfce
mov dword [0x4c3ed4], 0xcb8dc2d9
mov dword [0x4c3ed8], 0xc8c1c4cc
mov word [0x4c3edc], 0xadc9
xor eax, eax
mov cl, byte [eax + 0x4c3ed0]
xor cl, 0xad
mov byte [eax + 0x4c3fe4], cl
inc eax
cmp eax, 0xe
jb 0x4164f9
mov eax, 0x4c3fe4
ret

Function at 0x416514
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81c0], 1
jne 0x41654b
or dword [0x4c81c0], 1
mov dword [0x4c3ee0], 0xddd4dfce
mov dword [0x4c3ee4], 0xcb8dc2d9
mov dword [0x4c3ee8], 0xc8c1c4cc
mov word [0x4c3eec], 0xadc9
xor eax, eax
mov cl, byte [eax + 0x4c3ee0]
xor cl, 0xad
mov byte [eax + 0x4c3ff4], cl
inc eax
cmp eax, 0xe
jb 0x41654d
mov eax, 0x4c3ff4
ret

Function at 0x416568
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81bc], 1
jne 0x416595
or dword [0x4c81bc], 1
mov dword [0x4c3ef0], 0xdddfc8c5
mov dword [0x4c3ef4], 0xdfc8c986
mov word [0x4c3ef8], 0xaddd
xor eax, eax
mov cl, byte [eax + 0x4c3ef0]
xor cl, 0xad
mov byte [eax + 0x4c4004], cl
inc eax
cmp eax, 0xa
jb 0x416597
mov eax, 0x4c4004
ret
Function at 0x4165b2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81b8], 1
jne 0x4165e9
or dword [0x4c81b8], 1
mov dword [0x4c3efc], 0xddd4dfce
mov dword [0x4c3f00], 0xcb8dc2d9
mov dword [0x4c3f04], 0xc8c1c4cc
mov word [0x4c3f08], 0xadc9
xor eax, eax
mov cl, byte [eax + 0x4c3efc]
xor cl, 0xad
mov byte [eax + 0x4c4010], cl
inc eax
cmp eax, 0xe
jb 0x4165eb
mov eax, 0x4c4010
ret

Function at 0x416606
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81b4], 1
jne 0x41663d
or dword [0x4c81b4], 1
mov dword [0x4c3f0c], 0xddd4dfce
mov dword [0x4c3f10], 0xcb8dc2d9
mov dword [0x4c3f14], 0xc8c1c4cc
mov word [0x4c3f18], 0xadc9
xor eax, eax
mov cl, byte [eax + 0x4c3f0c]
xor cl, 0xad
mov byte [eax + 0x4c4020], cl
inc eax
cmp eax, 0xe
jb 0x41663f
mov eax, 0x4c4020
ret

Function at 0x41670b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81b0], 1
jne 0x416742
or dword [0x4c81b0], 1
mov dword [0x4c3f1c], 0xddd4dfce
mov dword [0x4c3f20], 0xcb8dc2d9
mov dword [0x4c3f24], 0xc8c1c4cc
mov word [0x4c3f28], 0xadc9
xor eax, eax
mov cl, byte [eax + 0x4c3f1c]
xor cl, 0xad
mov byte [eax + 0x4c4030], cl
inc eax
cmp eax, 0xe
jb 0x416744
mov eax, 0x4c4030
ret

Function at 0x4168f1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81ac], 1
jne 0x416928
or dword [0x4c81ac], 1
mov dword [0x4c3f2c], 0xddd4dfce
mov dword [0x4c3f30], 0xcb8dc2d9
mov dword [0x4c3f34], 0xc8c1c4cc
mov word [0x4c3f38], 0xadc9
xor eax, eax
mov cl, byte [eax + 0x4c3f2c]
xor cl, 0xad
mov byte [eax + 0x4c4040], cl
inc eax
cmp eax, 0xe
jb 0x41692a
mov eax, 0x4c4040
ret

Function at 0x416945
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81a8], 1
jne 0x41697c
or dword [0x4c81a8], 1
mov dword [0x4c3f3c], 0xddd4dfce
mov dword [0x4c3f40], 0xcb8dc2d9
mov dword [0x4c3f44], 0xc8c1c4cc
mov word [0x4c3f48], 0xadc9
xor eax, eax
mov cl, byte [eax + 0x4c3f3c]
xor cl, 0xad
mov byte [eax + 0x4c4050], cl
inc eax
cmp eax, 0xe
jb 0x41697e
mov eax, 0x4c4050
ret
Function at 0x416999
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x48d469
call fcn.0048cc58
sub esp, 0x10
push ebx
push esi
mov esi, 0x110
push esi
call fcn.004673e1
mov ebx, eax
pop ecx
test ebx, ebx
je 0x4169ca
push esi
push 0
push ebx
call fcn.0046b890
add esp, 0xc
mov esi, ebx
jmp 0x4169cc
xor esi, esi
mov dword [ebp - 0x10], esi
and dword [ebp - 4], 0
mov eax, dword [edi + 4]
mov dword [esi + 0x100], eax
mov eax, dword [edi + 8]
sub eax, 0x14
test byte [0x4c81a0], 1
mov dword [esi + 0x104], eax
mov eax, dword [edi + 0xc]
mov dword [esi + 0x108], eax
mov eax, dword [ebp + 8]
mov dword [esi + 0x10c], eax
jne 0x416a1b
or dword [0x4c81a0], 1
mov dword [0x4c3f60], 0xcfc2c1cf
mov byte [0x4c3f64], 0xad
xor eax, eax
mov cl, byte [eax + 0x4c3f60]
xor cl, 0xad
mov byte [eax + 0x4c4060], cl
inc eax
cmp eax, 5
jb 0x416a1d
push 0
push 0x4c4060
push esi
push 0x41665a
push dword [edi]
call fcn.00454228
add esp, 0x14
test eax, eax
je 0x416a85
push 0
call fcn.00416b75
push eax
push 0xffffffffffffffff
push dword [edi]
call fcn.00452ed0
mov dword [ebp + 8], eax
add esp, 0x10
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00466985
push 0x4b2d30
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], vtable.std::runtime_error.0
call fcn.00470895
push esi
call fcn.004672a4
pop ecx
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4

Function at 0x416a9c
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
test byte [0x4c8198], 1
jne 0x416ad9
or dword [0x4c8198], 1
mov dword [0x4c3f78], 0xddd4dfce
mov dword [0x4c3f7c], 0xcb8dc2d9
mov dword [0x4c3f80], 0xc8c1c4cc
mov word [0x4c3f84], 0xadc9
xor eax, eax
mov cl, byte [eax + 0x4c3f78]
xor cl, 0xad
mov byte [eax + 0x4c4078], cl
inc eax
cmp eax, 0xe
jb 0x416adb
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0x4c4078
call fcn.00466985
push 0x4b2d30
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x10], vtable.std::runtime_error.0
call fcn.00470895
int3

Function at 0x416b19
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c81a4], 1
jne 0x416b58
or dword [0x4c81a4], 1
mov dword [0x4c3f4c], 0xf2ccd8c1
mov dword [0x4c3f50], 0xc1cccedd
mov dword [0x4c3f54], 0xcccb8dc1
mov dword [0x4c3f58], 0xc9c8c1c4
mov byte [0x4c3f5c], 0xad
xor eax, eax
mov cl, byte [eax + 0x4c3f4c]
xor cl, 0xad
mov byte [eax + 0x4c4088], cl
inc eax
cmp eax, 0x11
jb 0x416b5a
mov eax, 0x4c4088
ret

Function at 0x416b75
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c819c], 1
jne 0x416bad
or dword [0x4c819c], 1
mov dword [0x4c3f68], 0xf2ccd8c1
mov dword [0x4c3f6c], 0xc9ccc2c1
mov dword [0x4c3f70], 0xc4cccb8d
mov dword [0x4c3f74], 0xadc9c8c1
xor eax, eax
mov cl, byte [eax + 0x4c3f68]
xor cl, 0xad
mov byte [eax + 0x4c4068], cl
inc eax
cmp eax, 0x10
jb 0x416baf
mov eax, 0x4c4068
ret
Function at 0x41730c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8180], 1
jne 0x417355
or dword [0x4c8180], 1
mov dword [0x4c412c], 0xcadccecd
mov dword [0x4c4130], 0xca8f9b99
mov dword [0x4c4134], 0xcbc0ccc1
mov dword [0x4c4138], 0xcec98fca
mov dword [0x4c413c], 0xcbcac3c6
mov byte [0x4c4140], 0xaf
xor eax, eax
mov cl, byte [eax + 0x4c412c]
xor cl, 0xaf
mov byte [eax + 0x4c4190], cl
inc eax
cmp eax, 0x15
jb 0x417357
mov eax, 0x4c4190
ret

Function at 0x41749d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c817c], 1
jne 0x4174e6
or dword [0x4c817c], 1
mov dword [0x4c4144], 0xcadccecd
mov dword [0x4c4148], 0xcb8f9b99
mov dword [0x4c414c], 0xcbc0ccca
mov dword [0x4c4150], 0xcec98fca
mov dword [0x4c4154], 0xcbcac3c6
mov byte [0x4c4158], 0xaf
xor eax, eax
mov cl, byte [eax + 0x4c4144]
xor cl, 0xaf
mov byte [eax + 0x4c41a8], cl
inc eax
cmp eax, 0x15
jb 0x4174e8
mov eax, 0x4c41a8
ret

Function at 0x419d00
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80dc], 1
jne 0x419daa
or dword [0x4c80dc], 1
mov dword [0x4c4580], 0xc1d0ddf6
mov dword [0x4c4584], 0xdac7c3ca
mov dword [0x4c4588], 0xc193dddc
mov dword [0x4c458c], 0xd6c6c2d6
mov dword [0x4c4590], 0xd7d6c7c0
mov dword [0x4c4594], 0xc7c6d193
mov dword [0x4c4598], 0xdadbc793
mov dword [0x4c459c], 0xdbc793c0
mov dword [0x4c45a0], 0xd7d2d6c1
mov dword [0x4c45a4], 0xc0d2db93
mov dword [0x4c45a8], 0x93dcdd93
mov dword [0x4c45ac], 0xc3cac1d0
mov dword [0x4c45b0], 0xda93dcc7
mov dword [0x4c45b4], 0xd2c7c0dd
mov dword [0x4c45b8], 0xb3d6d0dd
xor eax, eax
mov cl, byte [eax + 0x4c4580]
xor cl, 0xb3
mov byte [eax + 0x4c46a4], cl
inc eax
cmp eax, 0x3c
jb 0x419dac
mov eax, 0x4c46a4
ret

Function at 0x419dc7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80d8], 1
jne 0x419e1d
or dword [0x4c80d8], 1
mov dword [0x4c45bc], 0xdfdad2f5
mov dword [0x4c45c0], 0xc793d7d6
mov dword [0x4c45c4], 0xddd693dc
mov dword [0x4c45c8], 0xc3cac1d0
mov dword [0x4c45cc], 0xdcc393c7
mov dword [0x4c45d0], 0xd193c7c0
mov dword [0x4c45d4], 0xb3cad7dc
xor eax, eax
mov cl, byte [eax + 0x4c45bc]
xor cl, 0xb3
mov byte [eax + 0x4c46e0], cl
inc eax
cmp eax, 0x1c
jb 0x419e1f
mov eax, 0x4c46e0
ret

Function at 0x419ec1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80d4], 1
jne 0x419f2a
or dword [0x4c80d4], 1
mov dword [0x4c45d8], 0xdfdad2f5
mov dword [0x4c45dc], 0xc793d7d6
mov dword [0x4c45e0], 0xd6d793dc
mov dword [0x4c45e4], 0xc3cac1d0
mov dword [0x4c45e8], 0xd6c093c7
mov dword [0x4c45ec], 0xc1d6c5c1
mov dword [0x4c45f0], 0xc0d6c193
mov dword [0x4c45f4], 0xc0dddcc3
mov word [0x4c45f8], 0xb3d6
xor eax, eax
mov cl, byte [eax + 0x4c45d8]
xor cl, 0xb3
mov byte [eax + 0x4c46fc], cl
inc eax
cmp eax, 0x22
jb 0x419f2c
mov eax, 0x4c46fc
ret
Function at 0x41a2a0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80d0], 1
jne 0x41a2ff
or dword [0x4c80d0], 1
mov dword [0x4c45fc], 0xf7ffe1e6
mov dword [0x4c4600], 0xdfddc4dc
mov dword [0x4c4604], 0xe7d7d2dc
mov dword [0x4c4608], 0xdfdaf5dc
mov dword [0x4c460c], 0xd2d593d6
mov dword [0x4c4610], 0xd7d6dfda
mov dword [0x4c4614], 0xc1db9389
mov word [0x4c4618], 0xb38e
xor eax, eax
mov cl, byte [eax + 0x4c45fc]
xor cl, 0xb3
mov byte [eax + 0x4c4720], cl
inc eax
cmp eax, 0x1e
jb 0x41a301
mov eax, 0x4c4720
ret

Function at 0x41ae44
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80b8], 1
jne 0x41ae90
or dword [0x4c80b8], 1
mov dword [0x4c479c], 0xf9c1d0f2
mov dword [0x4c47a0], 0xfcc1c6d4
mov dword [0x4c47a4], 0xc1c0c5db
mov dword [0x4c47a8], 0xdad3dbfc
mov dword [0x4c47ac], 0xdcd4d395
mov dword [0x4c47b0], 0xb5d1d0d9
xor eax, eax
mov cl, byte [eax + 0x4c479c]
xor cl, 0xb5
mov byte [eax + 0x4c4828], cl
inc eax
cmp eax, 0x18
jb 0x41ae92
mov eax, 0x4c4828
ret

Function at 0x41b025
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80b4], 1
jne 0x41b084
or dword [0x4c80b4], 1
mov dword [0x4c47b4], 0xc0d6d0e7
mov dword [0x4c47b8], 0xdadcc6c7
mov dword [0x4c47bc], 0xd895c6db
mov dword [0x4c47c0], 0x95c1c6c0
mov dword [0x4c47c4], 0xd495d0d7
mov dword [0x4c47c8], 0xd0d995c1
mov dword [0x4c47cc], 0x95c1c6d4
mov word [0x4c47d0], 0xb584
xor eax, eax
mov cl, byte [eax + 0x4c47b4]
xor cl, 0xb5
mov byte [eax + 0x4c4840], cl
inc eax
cmp eax, 0x1e
jb 0x41b086
mov eax, 0x4c4840
ret

Function at 0x41b0a1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80ac], 1
jne 0x41b0f6
or dword [0x4c80ac], 1
mov dword [0x4c47e0], 0xeac1d0d2
mov dword [0x4c47e4], 0xd0d8dcc1
mov dword [0x4c47e8], 0xdbdcc6ea
mov dword [0x4c47ec], 0xd9ead0d6
mov dword [0x4c47f0], 0xeac1c6d4
mov dword [0x4c47f4], 0xc0c5dbdc
mov word [0x4c47f8], 0xb5c1
xor eax, eax
mov cl, byte [eax + 0x4c47e0]
xor cl, 0xb5
mov byte [eax + 0x4c486c], cl
inc eax
cmp eax, 0x1a
jb 0x41b0f8
mov eax, 0x4c486c
ret

Function at 0x41b113
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80a8], 1
jne 0x41b166
or dword [0x4c80a8], 1
mov dword [0x4c47fc], 0xeac1d0d2
mov dword [0x4c4800], 0xd0d6dbd4
mov dword [0x4c4804], 0xc7dac1c6
mov dword [0x4c4808], 0xd1dad8ea
mov dword [0x4c480c], 0xead0d9c0
mov dword [0x4c4810], 0xddc1d4c5
mov byte [0x4c4814], 0xb5
xor eax, eax
mov cl, byte [eax + 0x4c47fc]
xor cl, 0xb5
mov byte [eax + 0x4c4888], cl
inc eax
cmp eax, 0x19
jb 0x41b168
mov eax, 0x4c4888
ret

Function at 0x41b3e9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c80a0], 1
jne 0x41b44f
or dword [0x4c80a0], 1
mov dword [0x4c48b4], 0xd7d8cce6
mov dword [0x4c48b8], 0xd695d9da
mov dword [0x4c48bc], 0xd1d9c0da
mov dword [0x4c48c0], 0xc1dadb95
mov dword [0x4c48c4], 0x95d0d795
mov dword [0x4c48c8], 0xdac6d0c7
mov dword [0x4c48cc], 0xd1d0c3d9
mov word [0x4c48d0], 0x958f
mov byte [0x4c48d2], 0xb5
xor eax, eax
mov cl, byte [eax + 0x4c48b4]
xor cl, 0xb5
mov byte [eax + 0x4c48f4], cl
inc eax
cmp eax, 0x1f
jb 0x41b451
mov eax, 0x4c48f4
ret
Function at 0x41b9d4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8094], 1
jne 0x41ba30
or dword [0x4c8094], 1
mov dword [0x4c4934], 0xd7c0d8ff
mov dword [0x4c4938], 0x96d2dfda
mov dword [0x4c493c], 0xdbc3d8d3
mov dword [0x4c4940], 0xc2d7c4d3
mov dword [0x4c4944], 0x96d8d9df
mov dword [0x4c4948], 0xd2d8d7de
mov word [0x4c494c], 0xd3da
mov byte [0x4c494e], 0xb6
xor eax, eax
mov cl, byte [eax + 0x4c4934]
xor cl, 0xb6
mov byte [eax + 0x4c4ae4], cl
inc eax
cmp eax, 0x1b
jb 0x41ba32
mov eax, 0x4c4ae4
ret

Function at 0x41bb32
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8090], 1
jne 0x41bb8e
or dword [0x4c8090], 1
mov dword [0x4c4950], 0xd7c0d8ff
mov dword [0x4c4954], 0x96d2dfda
mov dword [0x4c4958], 0xdbc3d8d3
mov dword [0x4c495c], 0xc2d7c4d3
mov dword [0x4c4960], 0x96d8d9df
mov dword [0x4c4964], 0xd2d8d7de
mov word [0x4c4968], 0xd3da
mov byte [0x4c496a], 0xb6
xor eax, eax
mov cl, byte [eax + 0x4c4950]
xor cl, 0xb6
mov byte [eax + 0x4c4b00], cl
inc eax
cmp eax, 0x1b
jb 0x41bb90
mov eax, 0x4c4b00
ret

Function at 0x41bde2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c808c], 1
jne 0x41be3e
or dword [0x4c808c], 1
mov dword [0x4c496c], 0xd7c0d8ff
mov dword [0x4c4970], 0x96d2dfda
mov dword [0x4c4974], 0xdbc3d8d3
mov dword [0x4c4978], 0xc2d7c4d3
mov dword [0x4c497c], 0x96d8d9df
mov dword [0x4c4980], 0xd2d8d7de
mov word [0x4c4984], 0xd3da
mov byte [0x4c4986], 0xb6
xor eax, eax
mov cl, byte [eax + 0x4c496c]
xor cl, 0xb6
mov byte [eax + 0x4c4b1c], cl
inc eax
cmp eax, 0x1b
jb 0x41be40
mov eax, 0x4c4b1c
ret

Function at 0x41bf40
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8088], 1
jne 0x41bf9c
or dword [0x4c8088], 1
mov dword [0x4c4988], 0xd7c0d8ff
mov dword [0x4c498c], 0x96d2dfda
mov dword [0x4c4990], 0xdbc3d8d3
mov dword [0x4c4994], 0xc2d7c4d3
mov dword [0x4c4998], 0x96d8d9df
mov dword [0x4c499c], 0xd2d8d7de
mov word [0x4c49a0], 0xd3da
mov byte [0x4c49a2], 0xb6
xor eax, eax
mov cl, byte [eax + 0x4c4988]
xor cl, 0xb6
mov byte [eax + 0x4c4b38], cl
inc eax
cmp eax, 0x1b
jb 0x41bf9e
mov eax, 0x4c4b38
ret

Function at 0x41c18d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8084], 1
jne 0x41c1f6
or dword [0x4c8084], 1
mov dword [0x4c49a4], 0xd7c0d8ff
mov dword [0x4c49a8], 0x96d2dfda
mov dword [0x4c49ac], 0xd7c2d7d2
mov dword [0x4c49b0], 0xccdfc596
mov dword [0x4c49b4], 0xd9d096d3
mov dword [0x4c49b8], 0xdfc196c4
mov dword [0x4c49bc], 0xe496d3d2
mov dword [0x4c49c0], 0xe5e9f1f3
mov word [0x4c49c4], 0xb6ec
xor eax, eax
mov cl, byte [eax + 0x4c49a4]
xor cl, 0xb6
mov byte [eax + 0x4c4b54], cl
inc eax
cmp eax, 0x22
jb 0x41c1f8
mov eax, 0x4c4b54
ret
Function at 0x41c213
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8080], 1
jne 0x41c273
or dword [0x4c8080], 1
mov dword [0x4c49c8], 0xd7c0d8ff
mov dword [0x4c49cc], 0x96d2dfda
mov dword [0x4c49d0], 0xd7c2d7d2
mov dword [0x4c49d4], 0xccdfc596
mov dword [0x4c49d8], 0xd9d096d3
mov dword [0x4c49dc], 0xf3e496c4
mov dword [0x4c49e0], 0xe1f2e9f1
mov dword [0x4c49e4], 0xb6f2e4f9
xor eax, eax
mov cl, byte [eax + 0x4c49c8]
xor cl, 0xb6
mov byte [eax + 0x4c4b78], cl
inc eax
cmp eax, 0x20
jb 0x41c275
mov eax, 0x4c4b78
ret

Function at 0x41c417
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c807c], 1
jne 0x41c462
or dword [0x4c807c], 1
mov dword [0x4c49e8], 0xc3c5d8e3
mov dword [0x4c49ec], 0xc4d9c6c6
mov dword [0x4c49f0], 0x96d2d3c2
mov dword [0x4c49f4], 0xd7c2d7d2
mov dword [0x4c49f8], 0xc6cfc296
mov word [0x4c49fc], 0xb6d3
xor eax, eax
mov cl, byte [eax + 0x4c49e8]
xor cl, 0xb6
mov byte [eax + 0x4c4b98], cl
inc eax
cmp eax, 0x16
jb 0x41c464
mov eax, 0x4c4b98
ret

Function at 0x41c61d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c806c], 1
jne 0x41c66f
or dword [0x4c806c], 1
mov dword [0x4c4a2c], 0xdbc3d8d3
mov dword [0x4c4a30], 0xc2d7c4d3
mov dword [0x4c4a34], 0xc3c5e9d3
mov dword [0x4c4a38], 0xcfd3ddd4
mov dword [0x4c4a3c], 0xd3d8e9c5
mov word [0x4c4a40], 0xc2ce
mov byte [0x4c4a42], 0xb6
xor eax, eax
mov cl, byte [eax + 0x4c4a2c]
xor cl, 0xb6
mov byte [eax + 0x4c4bdc], cl
inc eax
cmp eax, 0x17
jb 0x41c671
mov eax, 0x4c4bdc
ret

Function at 0x41c68c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c805c], 1
jne 0x41c6de
or dword [0x4c805c], 1
mov dword [0x4c4a88], 0xdbc3d8d3
mov dword [0x4c4a8c], 0xc2d7c4d3
mov dword [0x4c4a90], 0xd7c0e9d3
mov dword [0x4c4a94], 0xc5d3c3da
mov dword [0x4c4a98], 0xd9dad5e9
mov word [0x4c4a9c], 0xd3c5
mov byte [0x4c4a9e], 0xb6
xor eax, eax
mov cl, byte [eax + 0x4c4a88]
xor cl, 0xb6
mov byte [eax + 0x4c4c38], cl
inc eax
cmp eax, 0x17
jb 0x41c6e0
mov eax, 0x4c4c38
ret

Function at 0x41cf86
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8028], 1
jne 0x41cfaa
or dword [0x4c8028], 1
mov dword [0x4c4cd8], 0xcbcbddd5
mov dword [0x4c4cdc], 0xb8dddfd9
xor eax, eax
mov cl, byte [eax + 0x4c4cd8]
xor cl, 0xb8
mov byte [eax + 0x4c5038], cl
inc eax
cmp eax, 8
jb 0x41cfac
mov eax, 0x4c5038
ret

Function at 0x41cfc7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8024], 1
jne 0x41cfeb
or dword [0x4c8024], 1
mov dword [0x4c4ce0], 0xcbcbddd5
mov dword [0x4c4ce4], 0xb8dddfd9
xor eax, eax
mov cl, byte [eax + 0x4c4ce0]
xor cl, 0xb8
mov byte [eax + 0x4c5040], cl
inc eax
cmp eax, 8
jb 0x41cfed
mov eax, 0x4c5040
ret

Function at 0x41db39
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c801c], 1
mov ecx, 0xdcb8
jne 0x41db7a
or dword [0x4c801c], 1
lea eax, [ecx - 0x22]
mov word [0x4c4cf0], ax
add eax, 0x3e
mov word [0x4c4cf2], ax
lea eax, [ecx + 0x1e]
mov word [0x4c4cf4], ax
add eax, 0xfffffffd
mov word [0x4c4cf6], ax
mov eax, ecx
mov word [0x4c4cf8], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c4cf0]
add eax, 2
mov word [eax + 0x4c504e], dx
cmp eax, 0xa
jb 0x41db7c
mov eax, 0x4c5050
ret
Function at 0x41db9a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8018], 1
mov ecx, 0xdcb8
jne 0x41dbdb
or dword [0x4c8018], 1
lea eax, [ecx - 0x22]
mov word [0x4c4cfc], ax
add eax, 0x3e
mov word [0x4c4cfe], ax
lea eax, [ecx + 0x1e]
mov word [0x4c4d00], ax
add eax, 0xfffffffd
mov word [0x4c4d02], ax
mov eax, ecx
mov word [0x4c4d04], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x4c4cfc]
add eax, 2
mov word [eax + 0x4c505a], dx
cmp eax, 0xa
jb 0x41dbdd
mov eax, 0x4c505c
ret

Function at 0x41e16b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8014], 1
jne 0x41e1be
or dword [0x4c8014], 1
mov dword [0x4c4d08], 0xf4ccddff
mov dword [0x4c4d0c], 0xd4d9dbd7
mov dword [0x4c4d10], 0xded6f1dd
mov dword [0x4c4d14], 0x989190d7
mov dword [0x4c4d18], 0xd4d1d9de
mov dword [0x4c4d1c], 0x9882dcdd
mov byte [0x4c4d20], 0xb8
xor eax, eax
mov cl, byte [eax + 0x4c4d08]
xor cl, 0xb8
mov byte [eax + 0x4c5068], cl
inc eax
cmp eax, 0x19
jb 0x41e1c0
mov eax, 0x4c5068
ret

Function at 0x41e301
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8010], 1
jne 0x41e354
or dword [0x4c8010], 1
mov dword [0x4c4d24], 0xf4ccddff
mov dword [0x4c4d28], 0xd4d9dbd7
mov dword [0x4c4d2c], 0xded6f1dd
mov dword [0x4c4d30], 0x989190d7
mov dword [0x4c4d34], 0xd4d1d9de
mov dword [0x4c4d38], 0x9882dcdd
mov byte [0x4c4d3c], 0xb8
xor eax, eax
mov cl, byte [eax + 0x4c4d24]
xor cl, 0xb8
mov byte [eax + 0x4c5084], cl
inc eax
cmp eax, 0x19
jb 0x41e356
mov eax, 0x4c5084
ret

Function at 0x41e4a3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c800c], 1
jne 0x41e4f6
or dword [0x4c800c], 1
mov dword [0x4c4d40], 0xf4ccddff
mov dword [0x4c4d44], 0xd4d9dbd7
mov dword [0x4c4d48], 0xded6f1dd
mov dword [0x4c4d4c], 0x989190d7
mov dword [0x4c4d50], 0xd4d1d9de
mov dword [0x4c4d54], 0x9882dcdd
mov byte [0x4c4d58], 0xb8
xor eax, eax
mov cl, byte [eax + 0x4c4d40]
xor cl, 0xb8
mov byte [eax + 0x4c50a0], cl
inc eax
cmp eax, 0x19
jb 0x41e4f8
mov eax, 0x4c50a0
ret

Function at 0x41e7db
Capabilities:
Encode data using xor

Disassembly:
test byte [0x4c8008], 1
jne 0x41e878
or dword [0x4c8008], 1
mov dword [0x4c4d5c], 0xcafbf4f1
mov dword [0x4c4d60], 0xddccd9dd
mov dword [0x4c4d64], 0xd5d7cafe
mov dword [0x4c4d68], 0xd0ccd9e8
mov dword [0x4c4d6c], 0xd1d9de98
mov dword [0x4c4d70], 0x82dcddd4
mov dword [0x4c4d74], 0xccddca98
mov dword [0x4c4d78], 0xddd6cacd
mov dword [0x4c4d7c], 0xd6d998dc
mov dword [0x4c4d80], 0xc8d5dd98
mov dword [0x4c4d84], 0xd198c1cc
mov dword [0x4c4d88], 0x98d5ddcc
mov dword [0x4c4d8c], 0xcccbd1d4
mov byte [0x4c4d90], 0xb8
xor eax, eax
mov cl, byte [eax + 0x4c4d5c]
xor cl, 0xb8
mov byte [eax + 0x4c50bc], cl
inc eax
cmp eax, 0x35
jb 0x41e87a
mov eax, 0x4c50bc
ret