Function at 0x11ab694
Capabilities:
Encode data using xor

Disassembly:
sar byte [ecx - 0x47c49de1], 1
jmp 0x11ab69e
pushal
call 0x11ab6a4
pop ebp
sub ebp, 0x10
add byte [eax], al
sub ebp, 0xdab694
jmp 0x11ab6ba
mov eax, 0xdab694
add eax, ebp
add eax, 0x4c
mov dh, 0xda
add byte [ebx], al
lds eax, [ecx + 0x4cc0]
add byte [ecx + 0x5ad], bh
mov ecx, 0x5ad
mov edx, 0x2934a578
xor byte [eax], dl
inc eax
dec ecx
jne 0x11ab6d1
jmp 0x11ab6e4
mov ch, 0xf3
int1
int1
inc esp
js 0x11ab763
js 0x11ab6e6
mov ecx, 0x78787880
jnp 0x11ab6a9
sar byte [esi + 0x78], 0x78
js 0x11ab6bc
push eax
js 0x11ab775
js 0x11ab68e
lcall 0x7874, 0xf9f3b07b
stc
je 0x11ab77e
js 0x11ab780
jnp 0x11ab6c7
sub ch, dh
sbb al, 0x5c
test cl, dh
jl 0x11ab76e
adc al, bh
imul ebx, dword [edx + 0x78], 0xc0dd6c10
js 0x11ab796
push esp
pop esp
adc byte [eax], dl
dec esp
add eax, 0xffffff90
jge 0x11ab79f
js 0x11ab7a1
xchg ecx, eax
push eax
js 0x11ab7a5
js 0x11ab75c
xchg esp, eax
std
jo 0x11ab7ad
js 0x11ab7af
in eax, dx
je 0x11ab7b3
js 0x11ab7b5
cmc
push 0xb9787878
xchg ecx, eax
jp 0x11ab790
jp 0x11ab744
mov edx, 0xfd77317c
mov word [edi - 0x45da7879], es
je 0x11ab7ce
hlt
js 0x11ab76e
clc
imul ebx, dword [edx + 0x78], 0xc0dd6c10
insb byte es:[edi], dx
ffree st(0)
js 0x11ab7e1
push esp
pop esp
sub dword [eax + 0x7878787d], edx
js 0x11ab7e8
xchg ecx, eax
cmp eax, 0x2d78787a
xchg esp, eax
sub eax, 0xd8794f3
je 0x11ab703
xchg esp, eax
xchg dword [0x700d8774], ecx
or eax, 0x78009070
js 0x11ab7fb
nop
add byte [eax + 0x78], bh
js 0x11ab7fa
js 0x11ab777
lds esi, [eax + 0x78]
lds esi, [eax + 0x78]
js 0x11ab801
dec ebx
mov cl, 0xf9
mov ah, byte [ebx]
nop
cmp cl, 0x8a
cmp cl, 0x8a
and edx, dword [eax - 0x55b47f9c]
sti
or byte fs:[ebx - 0x56], 0xfb
or byte [ebx - 0x56], 0xfb
nop
jge 0x11ab7cd
ja 0x11ab79b
js 0x11ab81a
js 0x11ab81b
js 0x11ab81b
ja 0x11ab795
lock xor byte [eax + 0x78], bh
xor byte [eax + 0x78], bh
js 0x11ab7c8
inc ecx
clc
adc dword [eax + 0x7862fc77], 0x78
nop
ja 0x11ab7ae
bound edi, qword [eax + 0x78]
js 0x11ab82d
js 0x11ab7af
adc dword [ecx + 0x7869fc77], 0x78
js 0x11ab7de
stc
add dword [edi + 0x6dfc775d], 0x78
js 0x11ab842
cmp dword [ecx - 0x7878784c], edx
xchg ecx, eax
mov ah, 0x87
xchg dword [edi + 0x41345187], eax
xchg dword [edi + 0x79413451], eax
sti
push ecx
xor al, 0x41
jns 0x11ab7d0
mov ecx, 0x7c90fb7d
xchg ecx, eax
lds eax, [edi + 0x2c518787]
xchg dword [ecx + 0x2c], edx
push ecx
sub al, 0x41
inc ecx
jp 0x11ab7df
mov ecx, 0x7c92fb7e
sti
jle 0x11ab7e2
xchg edx, eax
jl 0x11ab7e5
nop
jge 0x11ab77e
rol dword [edi + 0x54f38787], cl
pop esp
cmc
sbb al, 0x5c
jl 0x11ab7b3
je 0x11ab873
js 0x11ab829
sub eax, 0x2f2e94f3
xchg esp, eax
das
sub eax, 0xf3740df3
add eax, 0xf8ca8470
or eax, 0x7005f374
test dl, cl
clc
jo 0x11ab78c
retf 0xf2f8
bnd jle 0x11ab806
mov esi, 0x78787879
invalid
ret
jp 0x11ab895
js 0x11ab897
jp 0x11ab7cb
stosb byte es:[edi], al
ja 0x11ab820
jge 0x11ab89d
js 0x11ab89f
repne outsb dx, byte [esi]
push 0xffffffffffffffaa
ja 0x11ab829
sti
mov al, byte [0x7a878787]
stosb byte es:[edi], al
ja 0x11ab833
jge 0x11ab8b0
js 0x11ab8b2
repne outsb dx, byte [esi]
push 0xffffffffffffffaa
ja 0x11ab83c
adc bh, byte [eax + 0x78]
js 0x11ab8bc
js 0x11ab891
mov eax, 0xfd77aa7a
jge 0x11ab8c5
js 0x11ab8c7
repne outsb dx, byte [esi]
push 0xffffffffffffffaa
ja 0x11ab851
push edx
jns 0x11ab8d1
js 0x11ab8d5
stosb byte es:[edi], al
ja 0x11ab85b
jge 0x11ab8d8
js 0x11ab8da
repne outsb dx, byte [esi]
push 0xffffffffffffffaa
imul edi, dword [eax - 0x2885586], 0x7d
js 0x11ab8e8
js 0x11ab864
outsb dx, byte [esi]
push 0xffffffffffffffaa
imul edi, dword [eax - 0x2885586], 0x7d
js 0x11ab8f7
js 0x11ab873
outsb dx, byte [esi]
push 0xffffffffffffffaa
imul edi, dword [eax - 0x2885586], 0x7d
js 0x11ab906
js 0x11ab882
outsb dx, byte [esi]
push 0xffffffffffffffaa
imul edi, dword [eax + 0x787efc77], 0x78
js 0x11ab890
mov eax, 0x787efc77
cld
jle 0x11ab912
js 0x11ab914
repe cmpsd dword [esi], dword es:[edi]
cmpsd dword [esi], dword es:[edi]
push ebx
mov al, byte [0x7ff07bf2]
aas
jg 0x11ab8e4
ret
jns 0x11ab92a
js 0x11ab92c
jp 0x11ab860
stosb byte es:[edi], al
ja 0x11ab8b5
jge 0x11ab932
js 0x11ab934
repne outsb dx, byte [esi]
push 0xffffffffffffffaa
imul edi, dword [eax - 0x2885586], 0x7d
js 0x11ab942
stosb byte es:[edi], al
ja 0x11ab8c4
jge 0x11ab941
js 0x11ab943
js 0x11ab8be
repne outsb dx, byte [esi]
outsb dx, byte [esi]
push 0xffffffffffffffaa
ja 0x11ab8cc
cli
cmpsb byte [esi], byte es:[edi]
xchg dword [edi - 0x3c44ac79], eax
jns 0x11ab953
xchg dword [ebx - 0x45], edx
ret
js 0x11ab954
js 0x11ab955
js 0x11ab955
ja 0x11ab8dc
std
dec esp
js 0x11ab95a
js 0x11ab8a5
jns 0x11ab95e
js 0x11ab960
jp 0x11ab894
stosb byte es:[edi], al
ja 0x11ab8e9
jge 0x11ab966
js 0x11ab968
repne outsb dx, byte [esi]
push 0xffffffffffffffaa
imul esi, dword [ecx - 0x2885586], 0x7d
js 0x11ab976
jp 0x11ab8a3
stosb byte es:[edi], al
ja 0x11ab8f8
jge 0x11ab975
js 0x11ab977
js 0x11ab8f2
repne outsb dx, byte [esi]
outsb dx, byte [esi]
push 0xffffffffffffffaa
ja 0x11ab900
cmpsb byte [esi], byte es:[edi]
xchg dword [edi - 0x700cd179], eax
push ebx
lea ecx, [ebx + 0x709126dc]
xchg ecx, eax
jo 0x11ab89c
xchg dword [edi - 0x6746cf79], eax
jo 0x11ab90e
xchg dword [edi + 0x7098b930], eax
bnd jle 0x11ab95c
jle 0x11ab95c
pause
sar dword [ecx + 0x78], 0x78
js 0x11ab9a0
stosb byte es:[edi], al
ja 0x11ab926
jge 0x11ab9a3
js 0x11ab9a4
js 0x11ab9a5
js 0x11ab920
repne outsb dx, byte [esi]
outsb dx, byte [esi]
push 0xffffffffffffffaa
imul esi, dword [ecx - 0x2885586], 0x7d
jp 0x11ab8e0
stosb byte es:[edi], al
ja 0x11ab935
jge 0x11ab9b2
js 0x11ab9b3
js 0x11ab9b4
js 0x11ab92f
repne outsb dx, byte [esi]
outsb dx, byte [esi]
push 0xffffffffffffffaa
ja 0x11ab93d
cli
cmpsb byte [esi], byte es:[edi]
xchg dword [edi + 0x7880f987], eax
add eax, 0xa1f97878
xchg dword [edi - 0x7f067879], eax
stc
cmp byte [eax + 0x7d], 0x78
js 0x11ab953
js 0x11ab9d4
js 0x11ab9d1
stc
mov eax, dword [0x87878787]
xchg dword [edi - 0x77f0679], eax
js 0x11ab9dc
xchg ecx, edi
stc
cmp al, 0x78
js 0x11ab9dd
js 0x11ab95f
stc
test eax, 0x78787878
stc
js 0x11ab9e2
js 0x11ab965
cmp al, 0x78
js 0x11ab9e9
stc
test eax, 0x78787878
js 0x11ab9ef
js 0x11ab9a6
invalid
invalid
fsub qword [esi]
ret
jns 0x11aba1d
js 0x11aba1e
js 0x11aba1f
js 0x11ab939
xchg ecx, eax
or eax, dword [esi + 0x53258787]
push ebx
add eax, 0x27bff370
daa
popfd
popfd
popfd
and eax, 0xf37870ba
inc esp
pop esp
cmc
sbb al, 0x5c
jl 0x11ab9b5
dec esp
pop esp
cmc
sbb al, 0x5c
jl 0x11ab95a
jl 0x11aba43
js 0x11aba45
inc ebx
mov gs, word [ebp + 0x5c]
shr ah, 0xce
mov byte [0xf9bd7b78], al
mov eax, 0x78787b1b
js 0x11aba56
js 0x11ab9a0
shr esi, 0x7a
js 0x11aba5b
out dx, al
jp 0x11aba5a
js 0x11ab9a6
ret 0x9799
cdq
xchg edi, eax
sub ch, byte [edx + 0x31386848]
ja 0x11ab9eb
push 0xfd773138
xor dword [edi - 3], esi
mov es, word [edi + 0x7c918787]
js 0x11aba6e
xchg dword [edi + 0x787c9187], eax
js 0x11aba6f
js 0x11ab9ad
mov ch, 0x26
fld qword [eax]
fld qword es:[eax]
push ds
adc ah, bh
movsd dword es:[edi], dword [esi]
adc ah, byte [0x999939ae]
cdq
lcall 0xa5df, 0x12471267
adc bl, byte [0x9999ada9]
cdq
cdq
cdq
mov dl, 0x41
push ds
arpl word [edx], dx
jecxz 0x11ab9b5
push ds
arpl word [edx], dx
adc dl, dh
salc
popfd
sbb byte [ebx - 0x67], ah
cdq
cdq
cdq
xchg esi, eax
sbb eax, 0x999999df
lcall 0x9999, 0x915e184f
cdq
sbb byte [eax - 0x6f], dh
cdq
cdq
cdq
sbb byte [eax - 0x67], ah
pushal
cdq
cdq
cdq
cdq
xchg esi, eax
sbb eax, 0x66666649
call dword [edx]
dec ecx
call word [edx]
call word [edx]
sahf
pop eax
jno 0x11ab9e2
sbb bh, byte [ecx - 0x6a]
sbb byte [ecx - 0x66], ah
cdq
cdq
cdq
xchg esi, eax
sbb al, 0x94
cdq
cdq
cdq
call dword [edx]
sahf
sbb byte [ecx + 0x66], bh
xchg esi, eax
cdq
cdq
lcall 0x1ad0, 0xd081985b
pop esi
wait
jo 0x11abac1
push ecx
jo 0x11aba12
cdq
cdq
cdq
mov ecx, 0x21743e3f
or eax, 0x9a99432f
pop esp
sbb byte [ecx - 0x69], bl
popfd
cdq
cdq
and byte [edx - 0x68], dh
cdq
cdq
and esp, dword [edi - 0x56280784]
mov ecx, ebx
rcl byte [esi + 0x66666f1c]
jo 0x11aba3c
cdq
cdq
cdq
add ah, ch
push eax
jmp 0xd1470aca
sub al, 0xdf
stosd dword es:[edi], eax
xor byte [ecx - 0x40cda709], ah
js 0x11abadd
cmpsd dword [esi], dword es:[edi]
pop edi
cmpsd dword [esi], dword es:[edi]
cmpsd dword [esi], dword es:[edi]
cmpsd dword [esi], dword es:[edi]
cmpsd dword [esi], dword es:[edi]
test al, 0x22
test eax, 0x30a7a7a7
sub al, 0xdf
stosd dword es:[edi], eax
xor byte [ecx - 0x7ccda709], ah
js 0x11abaf7
cmpsd dword [esi], dword es:[edi]
and al, 0xd8
stosd dword es:[edi], eax
cmpsd dword [esi], dword es:[edi]
test al, 0x23
fsub qword [edi - 0x27db5859]
cmpsd dword [esi], dword es:[edi]
cmpsd dword [esi], dword es:[edi]
test al, 0x22
lodsd eax, dword [esi]
cmpsd dword [esi], dword es:[edi]
cmpsd dword [esi], dword es:[edi]
cmpsd dword [esi], dword es:[edi]
and ch, byte [ebp + 0x24a7a7a7]
fdiv dword [edi - 0x3dc5759]
and al, 0xd8
mov bh, 0xa7
test al, 0x23
cld
cmpsd dword [esi], dword es:[edi]
cmpsd dword [esi], dword es:[edi]
cmpsd dword [esi], dword es:[edi]
sub al, bl
sbb dword [ebx + 0x2e], 0xffffff8b
sub dword [edx + esi*2], 0x2c
enter 0xffffffffffffa4b7, 0x49
and al, 0xda
cmpsd dword [esi], dword es:[edi]
cmpsd dword [esi], dword es:[edi]
test al, 0x23
in al, 0xa7
cmpsd dword [esi], dword es:[edi]
cmpsd dword [esi], dword es:[edi]
and byte [esi + 0x2c], cl
into
cmpsd dword [esi], dword es:[edi]
and byte [esi - 9], cl
sub al, bl
sbb dword [ebx + 0x2e], 0xffffffb3
sub dword [esi + ebp*2 - 0x585ed158], 0xffffffa7
cmpsd dword [esi], dword es:[edi]
test byte [esi - 0x58], 0xa7
cmpsd dword [esi], dword es:[edi]
cmpsd dword [esi], dword es:[edi]
movsb byte es:[edi], byte [esi]
imul esp, dword [esi], 0xa7a7a566
cmpsd dword [esi], dword es:[edi]
sub al, bl
sbb dword [ebx + 0x2e], 0xffffffab
xor edi, 0x58
xor eax, 0xa71078bb
std
loop 0x11abafc
jmp dword [esi]