joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10d3d82
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d90], 1
jne 0x10d3e14
or dword [0x1192d90], 1
mov dword [0x118cd68], 0xcadfceef
mov dword [0x118cd6c], 0x91d8c7c2
mov dword [0x118cd70], 0xc2d9ff8b
mov dword [0x118cd74], 0xdf8bcfce
mov dword [0x118cd78], 0xd9dc8bc4
mov dword [0x118cd7c], 0x8bcedfc2
mov dword [0x118cd80], 0xc68bc4df
mov dword [0x118cd84], 0xd9c4c6ce
mov dword [0x118cd88], 0xcfca8bd2
mov dword [0x118cd8c], 0xd8ced9cf
mov dword [0x118cd90], 0xdb8e8bd8
mov word [0x118cd94], 0xa1a6
mov byte [0x118cd96], 0xab
xor eax, eax
mov cl, byte [eax + 0x118cd68]
xor cl, 0xab
mov byte [eax + 0x118d414], cl
inc eax
cmp eax, 0x2f
jb 0x10d3e16
mov eax, 0x118d414
ret

Function at 0x10d3e31
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d8c], 1
jne 0x10d3ec4
or dword [0x1192d8c], 1
mov dword [0x118cd98], 0xcadfceef
mov dword [0x118cd9c], 0x91d8c7c2
mov dword [0x118cda0], 0xc2d9ff8b
mov dword [0x118cda4], 0xdf8bcfce
mov dword [0x118cda8], 0xd3ce8bc4
mov dword [0x118cdac], 0xdfdec8ce
mov dword [0x118cdb0], 0xcec68bce
mov dword [0x118cdb4], 0xd2d9c4c6
mov dword [0x118cdb8], 0x8bdfca8b
mov dword [0x118cdbc], 0xd9cfcfca
mov dword [0x118cdc0], 0x8bd8d8ce
mov dword [0x118cdc4], 0xa1a6db8e
mov byte [0x118cdc8], 0xab
xor eax, eax
mov cl, byte [eax + 0x118cd98]
xor cl, 0xab
mov byte [eax + 0x118d444], cl
inc eax
cmp eax, 0x31
jb 0x10d3ec6
mov eax, 0x118d444
ret

Function at 0x10d3ee1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d88], 1
jne 0x10d3f18
or dword [0x1192d88], 1
mov dword [0x118cdcc], 0xcccac7ed
mov dword [0x118cdd0], 0x9b8b91d8
mov dword [0x118cdd4], 0xa6d38ed3
mov word [0x118cdd8], 0xaba1
xor eax, eax
mov cl, byte [eax + 0x118cdcc]
xor cl, 0xab
mov byte [eax + 0x118d478], cl
inc eax
cmp eax, 0xe
jb 0x10d3f1a
mov eax, 0x118d478
ret

Function at 0x10d3f35
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d84], 1
jne 0x10d3f6c
or dword [0x1192d84], 1
mov dword [0x118cddc], 0xcad9cafb
mov dword [0x118cde0], 0xcedfcec6
mov dword [0x118cde4], 0xa691d8d9
mov word [0x118cde8], 0xaba1
xor eax, eax
mov cl, byte [eax + 0x118cddc]
xor cl, 0xab
mov byte [eax + 0x118d488], cl
inc eax
cmp eax, 0xe
jb 0x10d3f6e
mov eax, 0x118d488
ret

Function at 0x10d3f89
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d80], 1
jne 0x10d3fd2
or dword [0x1192d80], 1
mov dword [0x118cdec], 0xd9cafba2
mov dword [0x118cdf0], 0xdfcec6ca
mov dword [0x118cdf4], 0x8ef0d9ce
mov dword [0x118cdf8], 0x8b91f6cf
mov dword [0x118cdfc], 0xa1a6db8e
mov byte [0x118ce00], 0xab
xor eax, eax
mov cl, byte [eax + 0x118cdec]
xor cl, 0xab
mov byte [eax + 0x118d498], cl
inc eax
cmp eax, 0x15
jb 0x10d3fd4
mov eax, 0x118d498
ret

Function at 0x10d3fef
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d7c], 1
jne 0x10d4027
or dword [0x1192d7c], 1
mov dword [0x118ce04], 0x8be3eef8
mov dword [0x118ce08], 0xc7cac5ea
mov dword [0x118ce0c], 0xd8c2d8d2
mov dword [0x118ce10], 0xaba1a691
xor eax, eax
mov cl, byte [eax + 0x118ce04]
xor cl, 0xab
mov byte [eax + 0x118d4b0], cl
inc eax
cmp eax, 0x10
jb 0x10d4029
mov eax, 0x118d4b0
ret
Function at 0x10d4044
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d78], 1
jne 0x10d408c
or dword [0x1192d78], 1
mov dword [0x118ce14], 0xc1c9e4a2
mov dword [0x118ce18], 0x8bdfc8ce
mov dword [0x118ce1c], 0xcedbd2df
mov dword [0x118ce20], 0xd88e8b91
mov word [0x118ce24], 0xa1a6
mov byte [0x118ce26], 0xab
xor eax, eax
mov cl, byte [eax + 0x118ce14]
xor cl, 0xab
mov byte [eax + 0x118d4c0], cl
inc eax
cmp eax, 0x13
jb 0x10d408e
mov eax, 0x118d4c0
ret

Function at 0x10d40a9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d74], 1
jne 0x10d4112
or dword [0x1192d74], 1
mov dword [0x118ce28], 0xc2caeda2
mov dword [0x118ce2c], 0x8bcfcec7
mov dword [0x118ce30], 0xcd8bc4df
mov dword [0x118ce34], 0xc4c7c7c4
mov dword [0x118ce38], 0xc4db8bdc
mov dword [0x118ce3c], 0xcedfc5c2
mov dword [0x118ce40], 0xc3c88bd9
mov dword [0x118ce44], 0xa6c5c2ca
mov word [0x118ce48], 0xaba1
xor eax, eax
mov cl, byte [eax + 0x118ce28]
xor cl, 0xab
mov byte [eax + 0x118d4d4], cl
inc eax
cmp eax, 0x22
jb 0x10d4114
mov eax, 0x118d4d4
ret

Function at 0x10d412f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d70], 1
jne 0x10d4152
or dword [0x1192d70], 1
mov dword [0x118ce4c], 0xcfdfd8eb
mov word [0x118ce50], 0xabeb
xor eax, eax
mov cl, byte [eax + 0x118ce4c]
xor cl, 0xab
mov byte [eax + 0x118d4f8], cl
inc eax
cmp eax, 6
jb 0x10d4154
mov eax, 0x118d4f8
ret

Function at 0x10d416f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d6c], 1
jne 0x10d41a6
or dword [0x1192d6c], 1
mov dword [0x118ce54], 0xdfc5ded9
mov dword [0x118ce58], 0xf4cec6c2
mov dword [0x118ce5c], 0xc4d9d9ce
mov word [0x118ce60], 0xabd9
xor eax, eax
mov cl, byte [eax + 0x118ce54]
xor cl, 0xab
mov byte [eax + 0x118d500], cl
inc eax
cmp eax, 0xe
jb 0x10d41a8
mov eax, 0x118d500
ret

Function at 0x10d41c3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d68], 1
jne 0x10d41f1
or dword [0x1192d68], 1
mov dword [0x118ce64], 0xccc5cad9
mov dword [0x118ce68], 0xd9cef4ce
mov dword [0x118ce6c], 0xabd9c4d9
xor eax, eax
mov cl, byte [eax + 0x118ce64]
xor cl, 0xab
mov byte [eax + 0x118d510], cl
inc eax
cmp eax, 0xc
jb 0x10d41f3
mov eax, 0x118d510
ret

Function at 0x10d420e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d64], 1
jne 0x10d424c
or dword [0x1192d64], 1
mov dword [0x118ce70], 0xd9ceddc4
mov dword [0x118ce74], 0xdcc4c7cd
mov dword [0x118ce78], 0xd9d9cef4
mov word [0x118ce7c], 0xd9c4
mov byte [0x118ce7e], 0xab
xor eax, eax
mov cl, byte [eax + 0x118ce70]
xor cl, 0xab
mov byte [eax + 0x118d51c], cl
inc eax
cmp eax, 0xf
jb 0x10d424e
mov eax, 0x118d51c
ret

Function at 0x10d4269
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d60], 1
jne 0x10d42a1
or dword [0x1192d60], 1
mov dword [0x118ce80], 0xcecfc5de
mov dword [0x118ce84], 0xc4c7cdd9
mov dword [0x118ce88], 0xd9cef4dc
mov dword [0x118ce8c], 0xabd9c4d9
xor eax, eax
mov cl, byte [eax + 0x118ce80]
xor cl, 0xab
mov byte [eax + 0x118d52c], cl
inc eax
cmp eax, 0x10
jb 0x10d42a3
mov eax, 0x118d52c
ret
Function at 0x10d42be
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d5c], 1
jne 0x10d42ec
or dword [0x1192d5c], 1
mov dword [0x118ce90], 0xc2ccc4c7
mov dword [0x118ce94], 0xd9cef4c8
mov dword [0x118ce98], 0xabd9c4d9
xor eax, eax
mov cl, byte [eax + 0x118ce90]
xor cl, 0xab
mov byte [eax + 0x118d53c], cl
inc eax
cmp eax, 0xc
jb 0x10d42ee
mov eax, 0x118d53c
ret

Function at 0x10d4309
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d58], 1
jne 0x10d433e
or dword [0x1192d58], 1
mov dword [0x118ce9c], 0xcac6c4cf
mov dword [0x118cea0], 0xcef4c5c2
mov dword [0x118cea4], 0xd9c4d9d9
mov byte [0x118cea8], 0xab
xor eax, eax
mov cl, byte [eax + 0x118ce9c]
xor cl, 0xab
mov byte [eax + 0x118d548], cl
inc eax
cmp eax, 0xd
jb 0x10d4340
mov eax, 0x118d548
ret

Function at 0x10d435b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d54], 1
jne 0x10d439a
or dword [0x1192d54], 1
mov dword [0x118ceac], 0xcaddc5c2
mov dword [0x118ceb0], 0xf4cfc2c7
mov dword [0x118ceb4], 0xdeccd9ca
mov dword [0x118ceb8], 0xdfc5cec6
mov byte [0x118cebc], 0xab
xor eax, eax
mov cl, byte [eax + 0x118ceac]
xor cl, 0xab
mov byte [eax + 0x118d558], cl
inc eax
cmp eax, 0x11
jb 0x10d439c
mov eax, 0x118d558
ret

Function at 0x10d43b7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d50], 1
jne 0x10d43ec
or dword [0x1192d50], 1
mov dword [0x118cec0], 0xccc5cec7
mov dword [0x118cec4], 0xcef4c3df
mov dword [0x118cec8], 0xd9c4d9d9
mov byte [0x118cecc], 0xab
xor eax, eax
mov cl, byte [eax + 0x118cec0]
xor cl, 0xab
mov byte [eax + 0x118d56c], cl
inc eax
cmp eax, 0xd
jb 0x10d43ee
mov eax, 0x118d56c
ret

Function at 0x10d4409
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d4c], 1
jne 0x10d443e
or dword [0x1192d4c], 1
mov dword [0x118ced0], 0xf4dfdec4
mov dword [0x118ced4], 0xd9f4cdc4
mov dword [0x118ced8], 0xceccc5ca
mov byte [0x118cedc], 0xab
xor eax, eax
mov cl, byte [eax + 0x118ced0]
xor cl, 0xab
mov byte [eax + 0x118d57c], cl
inc eax
cmp eax, 0xd
jb 0x10d4440
mov eax, 0x118d57c
ret

Function at 0x10d445b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d48], 1
jne 0x10d4488
or dword [0x1192d48], 1
mov dword [0x118cee0], 0xcec8d3ce
mov dword [0x118cee4], 0xc4c2dfdb
mov word [0x118cee8], 0xabc5
xor eax, eax
mov cl, byte [eax + 0x118cee0]
xor cl, 0xab
mov byte [eax + 0x118d58c], cl
inc eax
cmp eax, 0xa
jb 0x10d448a
mov eax, 0x118d58c
ret

Function at 0x10d44a5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d44], 1
jne 0x10d4504
or dword [0x1192d44], 1
mov dword [0x118ceec], 0xcfdfd8a2
mov dword [0x118cef0], 0xd3ce9191
mov dword [0x118cef4], 0xdfdbcec8
mov dword [0x118cef8], 0x91c5c4c2
mov dword [0x118cefc], 0xcac3dc91
mov dword [0x118cf00], 0x918283df
mov dword [0x118cf04], 0xa6d88e8b
mov word [0x118cf08], 0xaba1
xor eax, eax
mov cl, byte [eax + 0x118ceec]
xor cl, 0xab
mov byte [eax + 0x118d598], cl
inc eax
cmp eax, 0x1e
jb 0x10d4506
mov eax, 0x118d598
ret
Function at 0x10d4521
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d40], 1
jne 0x10d4595
or dword [0x1192d40], 1
mov dword [0x118cf0c], 0xc2caeda2
mov dword [0x118cf10], 0x8bcfcec7
mov dword [0x118cf14], 0xcc8bc4df
mov dword [0x118cf18], 0xd88bdfce
mov dword [0x118cf1c], 0x9191cfdf
mov dword [0x118cf20], 0xcec8d3ce
mov dword [0x118cf24], 0xc4c2dfdb
mov dword [0x118cf28], 0xdc9191c5
mov dword [0x118cf2c], 0x83dfcac3
mov dword [0x118cf30], 0xaba1a682
xor eax, eax
mov cl, byte [eax + 0x118cf0c]
xor cl, 0xab
mov byte [eax + 0x118d5b8], cl
inc eax
cmp eax, 0x28
jb 0x10d4597
mov eax, 0x118d5b8
ret

Function at 0x10d45b2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d3c], 1
jne 0x10d45e6
or dword [0x1192d3c], 1
mov dword [0x118cf34], 0xc6c4c8f4
mov dword [0x118cf38], 0xd9d9cef4
mov word [0x118cf3c], 0xd9c4
mov byte [0x118cf3e], 0xab
xor eax, eax
mov cl, byte [eax + 0x118cf34]
xor cl, 0xab
mov byte [eax + 0x118d5e0], cl
inc eax
cmp eax, 0xb
jb 0x10d45e8
mov eax, 0x118d5e0
ret

Function at 0x10d4603
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d38], 1
jne 0x10d466c
or dword [0x1192d38], 1
mov dword [0x118cf40], 0xc4c8f4a2
mov dword [0x118cf44], 0xd9cef4c6
mov dword [0x118cf48], 0x91d9c4d9
mov dword [0x118cf4c], 0xd9d9ee91
mov dword [0x118cf50], 0xcee6d9c4
mov dword [0x118cf54], 0xcccad8d8
mov dword [0x118cf58], 0x918283ce
mov dword [0x118cf5c], 0xa6d88e8b
mov word [0x118cf60], 0xaba1
xor eax, eax
mov cl, byte [eax + 0x118cf40]
xor cl, 0xab
mov byte [eax + 0x118d5ec], cl
inc eax
cmp eax, 0x22
jb 0x10d466e
mov eax, 0x118d5ec
ret

Function at 0x10d4689
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d34], 1
jne 0x10d4707
or dword [0x1192d34], 1
mov dword [0x118cf64], 0xc2caeda2
mov dword [0x118cf68], 0x8bcfcec7
mov dword [0x118cf6c], 0xcc8bc4df
mov dword [0x118cf70], 0xf48bdfce
mov dword [0x118cf74], 0xf4c6c4c8
mov dword [0x118cf78], 0xc4d9d9ce
mov dword [0x118cf7c], 0xee9191d9
mov dword [0x118cf80], 0xd9c4d9d9
mov dword [0x118cf84], 0xd8d8cee6
mov dword [0x118cf88], 0x83ceccca
mov dword [0x118cf8c], 0xaba1a682
xor eax, eax
mov cl, byte [eax + 0x118cf64]
xor cl, 0xab
mov byte [eax + 0x118d610], cl
inc eax
cmp eax, 0x2c
jb 0x10d4709
mov eax, 0x118d610
ret

Function at 0x10d4724
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d30], 1
jne 0x10d479f
or dword [0x1192d30], 1
mov dword [0x118cf90], 0xc8cadff8
mov dword [0x118cf94], 0xdecf8bc0
mov dword [0x118cf98], 0xce8bdbc6
mov dword [0x118cf9c], 0xd9c4d9d9
mov dword [0x118cfa0], 0xc4e88b91
mov dword [0x118cfa4], 0xd3cedfc5
mov dword [0x118cfa8], 0xc8cef9df
mov dword [0x118cfac], 0x8bcfd9c4
mov dword [0x118cfb0], 0x8bd8cadc
mov dword [0x118cfb4], 0xc7c7dec5
mov byte [0x118cfb8], 0xab
xor eax, eax
mov cl, byte [eax + 0x118cf90]
xor cl, 0xab
mov byte [eax + 0x118d63c], cl
inc eax
cmp eax, 0x29
jb 0x10d47a1
mov eax, 0x118d63c
ret
Function at 0x10d47bc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d2c], 1
jne 0x10d4836
or dword [0x1192d2c], 1
mov dword [0x118cfbc], 0xc8cadff8
mov dword [0x118cfc0], 0xdecf8bc0
mov dword [0x118cfc4], 0xce8bdbc6
mov dword [0x118cfc8], 0xd9c4d9d9
mov dword [0x118cfcc], 0xd2f88b91
mov dword [0x118cfd0], 0xc2c5e2c6
mov dword [0x118cfd4], 0xc7cac2df
mov dword [0x118cfd8], 0x8bced1c2
mov dword [0x118cfdc], 0xc7c2cacd
mov word [0x118cfe0], 0xcfce
mov byte [0x118cfe2], 0xab
xor eax, eax
mov cl, byte [eax + 0x118cfbc]
xor cl, 0xab
mov byte [eax + 0x118d668], cl
inc eax
cmp eax, 0x27
jb 0x10d4838
mov eax, 0x118d668
ret

Function at 0x10d4853
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d28], 1
jne 0x10d48b9
or dword [0x1192d28], 1
mov dword [0x118cfe4], 0xc2c0d897
mov dword [0x118cfe8], 0xcfcedbdb
mov dword [0x118cfec], 0xcad9cd8b
mov dword [0x118cff0], 0x8b87cec6
mov dword [0x118cff4], 0xdc8be8fb
mov dword [0x118cff8], 0xc58bd8ca
mov dword [0x118cffc], 0x95c7c7de
mov word [0x118d000], 0xa1a6
mov byte [0x118d002], 0xab
xor eax, eax
mov cl, byte [eax + 0x118cfe4]
xor cl, 0xab
mov byte [eax + 0x118d690], cl
inc eax
cmp eax, 0x1f
jb 0x10d48bb
mov eax, 0x118d690
ret

Function at 0x10d48d6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d24], 1
jne 0x10d4969
or dword [0x1192d24], 1
mov dword [0x118d004], 0xc2c0d897
mov dword [0x118d008], 0xcfcedbdb
mov dword [0x118d00c], 0xcad9cd8b
mov dword [0x118d010], 0x8b87cec6
mov dword [0x118d014], 0xdc8be8fb
mov dword [0x118d018], 0xd88bd8ca
mov dword [0x118d01c], 0x8bcec6ca
mov dword [0x118d020], 0xd98bd8ca
mov dword [0x118d024], 0xd9dedfce
mov dword [0x118d028], 0xcfca8bc5
mov dword [0x118d02c], 0xd8ced9cf
mov dword [0x118d030], 0xa1a695d8
mov byte [0x118d034], 0xab
xor eax, eax
mov cl, byte [eax + 0x118d004]
xor cl, 0xab
mov byte [eax + 0x118d6b0], cl
inc eax
cmp eax, 0x31
jb 0x10d496b
mov eax, 0x118d6b0
ret
Function at 0x10d4986
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16c4
call fcn.01146aa0
push ebx
push esi
push edi
call dword [0x1162094]
test byte [0x1192d20], 1
mov dword [ebp - 4], eax
jne 0x10d49cd
or dword [0x1192d20], 1
mov dword [0x118d038], 0xcfc4c697
mov dword [0x118d03c], 0x94cec7de
mov dword [0x118d040], 0xab959494
xor edi, edi
xor eax, eax
mov cl, byte [eax + 0x118d038]
xor cl, 0xab
mov byte [eax + 0x118d6e4], cl
inc eax
cmp eax, 0xc
jb 0x10d49d1
test byte [0x1192d1c], 1
mov dword [ebp - 8], 0x118d6e4
jne 0x10d4a1b
or dword [0x1192d1c], 1
mov dword [0x118d044], 0xc6d2d897
mov dword [0x118d048], 0x94c7c4c9
mov dword [0x118d04c], 0xab959494
xor eax, eax
mov cl, byte [eax + 0x118d044]
xor cl, 0xab
mov byte [eax + 0x118d6f0], cl
inc eax
cmp eax, 0xc
jb 0x10d4a1d
mov esi, 0x688
push esi
lea eax, [ebp - 0x6c0]
push edi
push eax
mov dword [ebp - 0x1c], 0x118d6f0
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
call fcn.01136f50
mov eax, dword [ebp + 8]
cdq
add esp, 0xc
mov dword [ebp - 0x6c0], esi
mov esi, eax
lea eax, [ebp - 0x6c0]
push eax
mov ebx, edx
push ebx
push esi
push dword [ebp - 4]
call dword [0x11623b0]
test eax, eax
je 0x10d4a82
lea eax, [ebp - 0x69c]
mov dword [ebp - 8], eax
push 0xffa
lea eax, [ebp - 0x16c0]
push edi
push eax
call fcn.01136f50
add esp, 0xc
lea eax, [ebp - 0x16c0]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x16c0], 0x58
mov dword [ebp - 0x1670], 0x7d0
call dword [0x11623bc]
lea ecx, [ebp - 0x166c]
test eax, eax
jne 0x10d4ace
mov ecx, dword [ebp - 0x1c]
test byte [0x1192d18], 1
jne 0x10d4b05
or dword [0x1192d18], 1
mov dword [0x118d050], 0x8e8bdb8e
mov dword [0x118d054], 0xd88e8ad8
mov dword [0x118d058], 0x8ed39b80
mov word [0x118d05c], 0xabd3
xor eax, eax
mov dl, byte [eax + 0x118d050]
xor dl, 0xab
mov byte [eax + 0x118d6fc], dl
inc eax
cmp eax, 0xe
jb 0x10d4b07
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push ecx
push dword [ebp - 8]
push dword [ebp + 8]
push 0x118d6fc
push dword [ebp + 0xc]
call fcn.0113417d
add esp, 0x1c
push 6
pop ecx
mov dword [ebp - 0xc], edi
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x18
call dword [0x11623a4]
test eax, eax
je 0x10d4b7e
push dword [ebp - 0xc]
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
call fcn.010d4bcb
push eax
push dword [ebp + 0xc]
call fcn.0113417d
add esp, 0x14
test byte [0x1192d10], 1
jne 0x10d4b9e
or dword [0x1192d10], 1
mov word [0x118d070], 0xa1a6
mov byte [0x118d072], 0xab
xor eax, eax
mov cl, byte [eax + 0x118d070]
xor cl, 0xab
mov byte [eax + 0x118d71c], cl
inc eax
cmp eax, 3
jb 0x10d4ba0
push dword [ebp + 0xc]
push 0x118d71c
call fcn.01133df1
pop ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 8
Function at 0x10d4bcb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d14], 1
jne 0x10d4c03
or dword [0x1192d14], 1
mov dword [0x118d060], 0xd88e838b
mov dword [0x118d064], 0x8bcf8e91
mov dword [0x118d068], 0xd39b8b80
mov dword [0x118d06c], 0xab82d38e
xor eax, eax
mov cl, byte [eax + 0x118d060]
xor cl, 0xab
mov byte [eax + 0x118d70c], cl
inc eax
cmp eax, 0x10
jb 0x10d4c05
mov eax, 0x118d70c
ret

Function at 0x10d5e94
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d04], 1
jne 0x10d5ee9
or dword [0x1192d04], 1
mov dword [0x118d740], 0xe9ffece5
mov dword [0x118d744], 0xe8ffecfa
mov dword [0x118d748], 0xfdeeecf1
mov dword [0x118d74c], 0xfee9f1e4
mov dword [0x118d750], 0xfbf1f9e9
mov dword [0x118d754], 0xf2f5e2ef
mov word [0x118d758], 0xadf2
xor eax, eax
mov cl, byte [eax + 0x118d740]
xor cl, 0xad
mov byte [eax + 0x118d940], cl
inc eax
cmp eax, 0x1a
jb 0x10d5eeb
mov eax, 0x118d940
ret

Function at 0x10d5ffa
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192d00], 1
jne 0x10d6024
or dword [0x1192d00], 1
mov dword [0x118d75c], 0xccfae0fb
mov word [0x118d760], 0xc8df
mov byte [0x118d762], 0xad
xor eax, eax
mov cl, byte [eax + 0x118d75c]
xor cl, 0xad
mov byte [eax + 0x118d95c], cl
inc eax
cmp eax, 7
jb 0x10d6026
mov eax, 0x118d95c
ret

Function at 0x10d6041
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192cfc], 1
jne 0x10d606e
or dword [0x1192cfc], 1
mov dword [0x118d764], 0xd9dfc4fb
mov dword [0x118d768], 0xfdc1ccd8
mov word [0x118d76c], 0xadee
xor eax, eax
mov cl, byte [eax + 0x118d764]
xor cl, 0xad
mov byte [eax + 0x118d964], cl
inc eax
cmp eax, 0xa
jb 0x10d6070
mov eax, 0x118d964
ret

Function at 0x10d608b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192cf8], 1
jne 0x10d60bf
or dword [0x1192cf8], 1
mov dword [0x118d770], 0xd9dfc4fb
mov dword [0x118d774], 0xefc1ccd8
mov word [0x118d778], 0xd5c2
mov byte [0x118d77a], 0xad
xor eax, eax
mov cl, byte [eax + 0x118d770]
xor cl, 0xad
mov byte [eax + 0x118d970], cl
inc eax
cmp eax, 0xb
jb 0x10d60c1
mov eax, 0x118d970
ret

Function at 0x10d60dc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192cf4], 1
jne 0x10d6100
or dword [0x1192cf4], 1
mov dword [0x118d77c], 0xc8c3c8ea
mov dword [0x118d780], 0xadcec4df
xor eax, eax
mov cl, byte [eax + 0x118d77c]
xor cl, 0xad
mov byte [eax + 0x118d97c], cl
inc eax
cmp eax, 8
jb 0x10d6102
mov eax, 0x118d97c
ret
Function at 0x10d611d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x115b2bd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa8
and dword [esp], 0
test byte [0x1192cf0], 1
push esi
jne 0x10d6170
or dword [0x1192cf0], 1
mov dword [0x118d784], 0xc1c9d9c3
mov dword [0x118d788], 0xc1c983c1
mov word [0x118d78c], 0xadc1
xor eax, eax
mov cl, byte [eax + 0x118d784]
xor cl, 0xad
mov byte [eax + 0x118d984], cl
inc eax
cmp eax, 0xa
jb 0x10d6172
push 0x118d984
call dword [0x11620cc]
mov esi, eax
test esi, esi
jne 0x10d61e4
call dword [0x11620a8]
push eax
lea eax, [esp + 0x40]
push eax
call fcn.010fa914
pop ecx
pop ecx
and dword [esp + 0xb4], esi
push eax
call fcn.010d632b
push eax
lea eax, [esp + 0x28]
push eax
call fcn.010d6b7c
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 1
call fcn.010d5c65
push 0x117ec28
mov eax, esi
push eax
call fcn.0113d8b5
call fcn.010d6391
push eax
push esi
call dword [0x11620c8]
test eax, eax
jne 0x10d6241
call dword [0x11620a8]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.010fa914
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 2
call fcn.010d6403
push eax
lea eax, [esp + 0x44]
push eax
call fcn.010d6b7c
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 3
call fcn.010d5c65
push 0x117ec28
mov eax, esi
jmp 0x10d61de
lea ecx, [esp + 4]
push ecx
push 0x18
lea ecx, [esp + 0x60]
push ecx
push 0
push dword [ebp + 8]
call eax
test eax, eax
jne 0x10d62c9
cmp dword [esp + 4], 0x18
jne 0x10d62c9
push dword [esp + 0x6c]
push eax
push 0x410
call dword [0x11620c4]
test eax, eax
jne 0x10d6318
call dword [0x11620a8]
push eax
lea eax, [esp + 0x74]
push eax
call fcn.010fa914
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 6
call fcn.010d6543
push eax
lea eax, [esp + 0x94]
push eax
call fcn.010d6b7c
add esp, 0xc
lea esi, [esp + 0x14]
mov byte [esp + 0xb4], 7
call fcn.010d5c65
push 0x117ec28
mov eax, esi
jmp 0x10d61de
call dword [0x11620a8]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.010fa914
pop ecx
pop ecx
push eax
mov dword [esp + 0xb8], 4
call fcn.010d64b6
push eax
lea eax, [esp + 0x44]
push eax
call fcn.010d6b7c
add esp, 0xc
lea esi, [esp + 8]
mov byte [esp + 0xb4], 5
call fcn.010d5c65
push 0x117ec28
mov eax, esi
jmp 0x10d61de
mov ecx, dword [esp + 0xac]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x10d632b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192cec], 1
jne 0x10d6374
or dword [0x1192cec], 1
mov dword [0x118d790], 0xc9ccc2e1
mov dword [0x118d794], 0xdfcfc4e1
mov dword [0x118d798], 0x8dd4dfcc
mov dword [0x118d79c], 0xc1c4cccb
mov dword [0x118d7a0], 0x8d97c9c8
mov byte [0x118d7a4], 0xad
xor eax, eax
mov cl, byte [eax + 0x118d790]
xor cl, 0xad
mov byte [eax + 0x118d990], cl
inc eax
cmp eax, 0x15
jb 0x10d6376
mov eax, 0x118d990
ret