joyce8/EMBER2024-capa huggingface dataset:
Function at 0x104d4d9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f39f0], 1
mov ecx, 0x91cf
jne 0x104d54e
or dword [0x10f39f0], 1
lea eax, [ecx - 0x2c]
mov word [0x10f0fb4], ax
add eax, 0x17
mov word [0x10f0fb6], ax
lea eax, [ecx - 0x21]
mov word [0x10f0fb8], ax
add eax, 0xffffffe2
mov word [0x10f0fba], ax
lea eax, [ecx - 0x17]
mov edx, eax
mov word [0x10f0fbc], dx
add edx, 0xffffffee
mov word [0x10f0fbe], dx
lea edx, [ecx - 0x2e]
mov word [0x10f0fc0], dx
add edx, 0xa
mov eax, ecx
mov word [0x10f0fc2], dx
mov dword [0x10f0fc4], 0x91b891a0
mov word [0x10f0fc8], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x10f0fb4]
add eax, 2
mov word [eax + 0x10f1216], dx
cmp eax, 0x16
jb 0x104d550
mov eax, 0x10f1218
ret

Function at 0x104d56e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f39ec], 1
mov edx, 0x91cf
jne 0x104d612
or dword [0x10f39ec], 1
lea ecx, [edx - 0x2c]
mov eax, ecx
mov word [0x10f0fcc], ax
add eax, 0x17
mov word [0x10f0fce], ax
lea eax, [edx - 0x21]
mov word [0x10f0fd0], ax
add eax, 0xffffffe2
push esi
mov esi, eax
mov word [0x10f0fdc], ax
lea eax, [edx - 0x17]
mov ecx, eax
mov word [0x10f0fde], cx
add ecx, 0xffffffee
mov word [0x10f0fd2], si
lea esi, [edx - 0x28]
mov word [0x10f0fe0], cx
lea ecx, [edx - 0x2e]
mov word [0x10f0fd4], si
add esi, 0x14
mov word [0x10f0fe2], cx
add ecx, 0xa
mov eax, edx
mov word [0x10f0fd6], si
mov dword [0x10f0fd8], 0x91a391a2
mov word [0x10f0fe4], cx
mov dword [0x10f0fe6], 0x91b891a0
mov word [0x10f0fea], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x10f0fcc]
add eax, 2
mov word [eax + 0x10f122e], cx
cmp eax, 0x20
jb 0x104d614
mov eax, 0x10f1230
ret

Function at 0x104d856
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f39e8], 1
jne 0x104d89f
or dword [0x10f39e8], 1
mov dword [0x10f0fec], 0xefaeba83
mov dword [0x10f0ff0], 0xa0bdbdaa
mov dword [0x10f0ff4], 0xa1a6efbd
mov dword [0x10f0ff8], 0xaba1b8ef
mov dword [0x10f0ffc], 0xaca0bdbf
mov byte [0x10f1000], 0xcf
xor eax, eax
mov cl, byte [eax + 0x10f0fec]
xor cl, 0xcf
mov byte [eax + 0x10f1250], cl
inc eax
cmp eax, 0x15
jb 0x104d8a1
mov eax, 0x10f1250
ret

Function at 0x104f8f8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3960], 1
jne 0x104f939
or dword [0x10f3960], 1
mov dword [0x10f147c], 0xa7f0bf9e
mov dword [0x10f1480], 0xbfb4beb9
mov dword [0x10f1484], 0xbfb3f0a7
mov dword [0x10f1488], 0xa8b5a4be
mov word [0x10f148c], 0xd0a4
xor eax, eax
mov cl, byte [eax + 0x10f147c]
xor cl, 0xd0
mov byte [eax + 0x10f1708], cl
inc eax
cmp eax, 0x12
jb 0x104f93b
mov eax, 0x10f1708
ret

Function at 0x104f956
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f395c], 1
jne 0x104f997
or dword [0x10f395c], 1
mov dword [0x10f1490], 0xa7f0bf9e
mov dword [0x10f1494], 0xbfb4beb9
mov dword [0x10f1498], 0xbfb3f0a7
mov dword [0x10f149c], 0xa8b5a4be
mov word [0x10f14a0], 0xd0a4
xor eax, eax
mov cl, byte [eax + 0x10f1490]
xor cl, 0xd0
mov byte [eax + 0x10f171c], cl
inc eax
cmp eax, 0x12
jb 0x104f999
mov eax, 0x10f171c
ret
Function at 0x104f9b4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3958], 1
jne 0x104f9fc
or dword [0x10f3958], 1
mov dword [0x10f14a4], 0xb2f0bf9e
mov dword [0x10f14a8], 0xa3a7bfa2
mov dword [0x10f14ac], 0xb3f0a2b5
mov dword [0x10f14b0], 0xb5a4bebf
mov word [0x10f14b4], 0xa4a8
mov byte [0x10f14b6], 0xd0
xor eax, eax
mov cl, byte [eax + 0x10f14a4]
xor cl, 0xd0
mov byte [eax + 0x10f1730], cl
inc eax
cmp eax, 0x13
jb 0x104f9fe
mov eax, 0x10f1730
ret

Function at 0x104fa72
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3954], 1
jne 0x104fab3
or dword [0x10f3954], 1
mov dword [0x10f14b8], 0xb5f0bf9e
mov dword [0x10f14bc], 0xb5bdb5bc
mov dword [0x10f14c0], 0xb8f0a4be
mov dword [0x10f14c4], 0xbcb4beb1
mov word [0x10f14c8], 0xd0b5
xor eax, eax
mov cl, byte [eax + 0x10f14b8]
xor cl, 0xd0
mov byte [eax + 0x10f1744], cl
inc eax
cmp eax, 0x12
jb 0x104fab5
mov eax, 0x10f1744
ret

Function at 0x104fad0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3950], 1
jne 0x104fb11
or dword [0x10f3950], 1
mov dword [0x10f14cc], 0xb5f0bf9e
mov dword [0x10f14d0], 0xb5bdb5bc
mov dword [0x10f14d4], 0xb8f0a4be
mov dword [0x10f14d8], 0xbcb4beb1
mov word [0x10f14dc], 0xd0b5
xor eax, eax
mov cl, byte [eax + 0x10f14cc]
xor cl, 0xd0
mov byte [eax + 0x10f1758], cl
inc eax
cmp eax, 0x12
jb 0x104fb13
mov eax, 0x10f1758
ret

Function at 0x104fc41
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f394c], 1
jne 0x104fc79
or dword [0x10f394c], 1
mov dword [0x10f14e0], 0xb9a6b19e
mov dword [0x10f14e4], 0xb5a4b1b7
mov dword [0x10f14e8], 0xb9b1b6f0
mov dword [0x10f14ec], 0xd0b4b5bc
xor eax, eax
mov cl, byte [eax + 0x10f14e0]
xor cl, 0xd0
mov byte [eax + 0x10f176c], cl
inc eax
cmp eax, 0x10
jb 0x104fc7b
mov eax, 0x10f176c
ret

Function at 0x10501c6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3948], 1
jne 0x105020f
or dword [0x10f3948], 1
mov dword [0x10f14f0], 0xb5f0bf9e
mov dword [0x10f14f4], 0xb5bdb5bc
mov dword [0x10f14f8], 0xa7f0a4be
mov dword [0x10f14fc], 0xf0b8a4b9
mov dword [0x10f1500], 0xf0eab4b9
mov byte [0x10f1504], 0xd0
xor eax, eax
mov cl, byte [eax + 0x10f14f0]
xor cl, 0xd0
mov byte [eax + 0x10f177c], cl
inc eax
cmp eax, 0x15
jb 0x1050211
mov eax, 0x10f177c
ret

Function at 0x1050344
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3944], 1
jne 0x105038d
or dword [0x10f3944], 1
mov dword [0x10f1508], 0x8fa4b5b7
mov dword [0x10f150c], 0xb5bebeb9
mov dword [0x10f1510], 0x9d8498a2
mov dword [0x10f1514], 0xb1b6f09c
mov dword [0x10f1518], 0xb4b5bcb9
mov byte [0x10f151c], 0xd0
xor eax, eax
mov cl, byte [eax + 0x10f1508]
xor cl, 0xd0
mov byte [eax + 0x10f1794], cl
inc eax
cmp eax, 0x15
jb 0x105038f
mov eax, 0x10f1794
ret
Function at 0x10504c2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3940], 1
jne 0x105050b
or dword [0x10f3940], 1
mov dword [0x10f1520], 0x8fa4b5b7
mov dword [0x10f1524], 0xb5a4a5bf
mov dword [0x10f1528], 0x9d8498a2
mov dword [0x10f152c], 0xb1b6f09c
mov dword [0x10f1530], 0xb4b5bcb9
mov byte [0x10f1534], 0xd0
xor eax, eax
mov cl, byte [eax + 0x10f1520]
xor cl, 0xd0
mov byte [eax + 0x10f17ac], cl
inc eax
cmp eax, 0x15
jb 0x105050d
mov eax, 0x10f17ac
ret

Function at 0x105064f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f393c], 1
jne 0x1050698
or dword [0x10f393c], 1
mov dword [0x10f1538], 0x8fa4a5a0
mov dword [0x10f153c], 0xb5bebeb9
mov dword [0x10f1540], 0x9d8498a2
mov dword [0x10f1544], 0xb1b6f09c
mov dword [0x10f1548], 0xb4b5bcb9
mov byte [0x10f154c], 0xd0
xor eax, eax
mov cl, byte [eax + 0x10f1538]
xor cl, 0xd0
mov byte [eax + 0x10f17c4], cl
inc eax
cmp eax, 0x15
jb 0x105069a
mov eax, 0x10f17c4
ret

Function at 0x10507dc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3938], 1
jne 0x1050825
or dword [0x10f3938], 1
mov dword [0x10f1550], 0x8fa4a5a0
mov dword [0x10f1554], 0xb5a4a5bf
mov dword [0x10f1558], 0x9d8498a2
mov dword [0x10f155c], 0xb1b6f09c
mov dword [0x10f1560], 0xb4b5bcb9
mov byte [0x10f1564], 0xd0
xor eax, eax
mov cl, byte [eax + 0x10f1550]
xor cl, 0xd0
mov byte [eax + 0x10f17dc], cl
inc eax
cmp eax, 0x15
jb 0x1050827
mov eax, 0x10f17dc
ret

Function at 0x1050ae4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3930], 1
jne 0x1050b2d
or dword [0x10f3930], 1
mov dword [0x10f1574], 0x8fa4b5b7
mov dword [0x10f1578], 0xa3b1bcb3
mov dword [0x10f157c], 0xbdb19ea3
mov dword [0x10f1580], 0xb1b6f0b5
mov dword [0x10f1584], 0xb4b5bcb9
mov byte [0x10f1588], 0xd0
xor eax, eax
mov cl, byte [eax + 0x10f1574]
xor cl, 0xd0
mov byte [eax + 0x10f1800], cl
inc eax
cmp eax, 0x15
jb 0x1050b2f
mov eax, 0x10f1800
ret

Function at 0x1050b4a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f392c], 1
jne 0x1050b8c
or dword [0x10f392c], 1
mov dword [0x10f158c], 0x91a4b5b7
mov dword [0x10f1590], 0xb9a2a4a4
mov dword [0x10f1594], 0xb5a4a5b2
mov dword [0x10f1598], 0xb9b1b6f0
mov dword [0x10f159c], 0xd0b4b5bc
xor eax, eax
mov cl, byte [eax + 0x10f158c]
xor cl, 0xd0
mov byte [eax + 0x10f1818], cl
inc eax
cmp eax, 0x14
jb 0x1050b8e
mov eax, 0x10f1818
ret

Function at 0x1050e57
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3924], 1
jne 0x1050ea0
or dword [0x10f3924], 1
mov dword [0x10f15ac], 0x8fa4a5a0
mov dword [0x10f15b0], 0xa3b1bcb3
mov dword [0x10f15b4], 0xbdb19ea3
mov dword [0x10f15b8], 0xb1b6f0b5
mov dword [0x10f15bc], 0xb4b5bcb9
mov byte [0x10f15c0], 0xd0
xor eax, eax
mov cl, byte [eax + 0x10f15ac]
xor cl, 0xd0
mov byte [eax + 0x10f1838], cl
inc eax
cmp eax, 0x15
jb 0x1050ea2
mov eax, 0x10f1838
ret
Function at 0x1050ebd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3920], 1
jne 0x1050eff
or dword [0x10f3920], 1
mov dword [0x10f15c4], 0x91a4b5a3
mov dword [0x10f15c8], 0xb9a2a4a4
mov dword [0x10f15cc], 0xb5a4a5b2
mov dword [0x10f15d0], 0xb9b1b6f0
mov dword [0x10f15d4], 0xd0b4b5bc
xor eax, eax
mov cl, byte [eax + 0x10f15c4]
xor cl, 0xd0
mov byte [eax + 0x10f1850], cl
inc eax
cmp eax, 0x14
jb 0x1050f01
mov eax, 0x10f1850
ret

Function at 0x1050fe4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f391c], 1
jne 0x1051019
or dword [0x10f391c], 1
mov dword [0x10f15d8], 0xb3b9bcb3
mov dword [0x10f15dc], 0xb1b6f0bb
mov dword [0x10f15e0], 0xb4b5bcb9
mov byte [0x10f15e4], 0xd0
xor eax, eax
mov cl, byte [eax + 0x10f15d8]
xor cl, 0xd0
mov byte [eax + 0x10f1864], cl
inc eax
cmp eax, 0xd
jb 0x105101b
mov eax, 0x10f1864
ret

Function at 0x10510c8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3904], 1
jne 0x105111a
or dword [0x10f3904], 1
mov dword [0x10f1648], 0xbdb5bcb5
mov dword [0x10f164c], 0x8fa4beb5
mov dword [0x10f1650], 0x8fa4b5b7
mov dword [0x10f1654], 0xb5bebeb9
mov dword [0x10f1658], 0xa4b88fa2
mov word [0x10f165c], 0xbcbd
mov byte [0x10f165e], 0xd0
xor eax, eax
mov cl, byte [eax + 0x10f1648]
xor cl, 0xd0
mov byte [eax + 0x10f18d4], cl
inc eax
cmp eax, 0x17
jb 0x105111c
mov eax, 0x10f18d4
ret

Function at 0x1051137
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3900], 1
jne 0x1051189
or dword [0x10f3900], 1
mov dword [0x10f1660], 0xbdb5bcb5
mov dword [0x10f1664], 0x8fa4beb5
mov dword [0x10f1668], 0x8fa4b5b7
mov dword [0x10f166c], 0xb5a4a5bf
mov dword [0x10f1670], 0xa4b88fa2
mov word [0x10f1674], 0xbcbd
mov byte [0x10f1676], 0xd0
xor eax, eax
mov cl, byte [eax + 0x10f1660]
xor cl, 0xd0
mov byte [eax + 0x10f18ec], cl
inc eax
cmp eax, 0x17
jb 0x105118b
mov eax, 0x10f18ec
ret

Function at 0x10511a6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f38fc], 1
jne 0x10511f8
or dword [0x10f38fc], 1
mov dword [0x10f1678], 0xbdb5bcb5
mov dword [0x10f167c], 0x8fa4beb5
mov dword [0x10f1680], 0x8fa4b5a3
mov dword [0x10f1684], 0xb5bebeb9
mov dword [0x10f1688], 0xa4b88fa2
mov word [0x10f168c], 0xbcbd
mov byte [0x10f168e], 0xd0
xor eax, eax
mov cl, byte [eax + 0x10f1678]
xor cl, 0xd0
mov byte [eax + 0x10f1904], cl
inc eax
cmp eax, 0x17
jb 0x10511fa
mov eax, 0x10f1904
ret

Function at 0x1051215
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f38f8], 1
jne 0x1051267
or dword [0x10f38f8], 1
mov dword [0x10f1690], 0xbdb5bcb5
mov dword [0x10f1694], 0x8fa4beb5
mov dword [0x10f1698], 0x8fa4b5a3
mov dword [0x10f169c], 0xb5a4a5bf
mov dword [0x10f16a0], 0xa4b88fa2
mov word [0x10f16a4], 0xbcbd
mov byte [0x10f16a6], 0xd0
xor eax, eax
mov cl, byte [eax + 0x10f1690]
xor cl, 0xd0
mov byte [eax + 0x10f191c], cl
inc eax
cmp eax, 0x17
jb 0x1051269
mov eax, 0x10f191c
ret
Function at 0x10516b6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f38e0], 1
jne 0x10516fe
or dword [0x10f38e0], 1
mov dword [0x10f1994], 0xbdbda49f
mov dword [0x10f1998], 0xb6b8bdf1
mov dword [0x10f199c], 0xa2a4a5b9
mov dword [0x10f19a0], 0xb0b5a3b4
mov word [0x10f19a4], 0xb0a5
mov byte [0x10f19a6], 0xd1
xor eax, eax
mov cl, byte [eax + 0x10f1994]
xor cl, 0xd1
mov byte [eax + 0x10f1b6c], cl
inc eax
cmp eax, 0x13
jb 0x1051700
mov eax, 0x10f1b6c
ret

Function at 0x1051815
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f38dc], 1
jne 0x105185d
or dword [0x10f38dc], 1
mov dword [0x10f19a8], 0xbdbda49f
mov dword [0x10f19ac], 0xb6b8bdf1
mov dword [0x10f19b0], 0xa2a4a5b9
mov dword [0x10f19b4], 0xb0b5a3b4
mov word [0x10f19b8], 0xb0a5
mov byte [0x10f19ba], 0xd1
xor eax, eax
mov cl, byte [eax + 0x10f19a8]
xor cl, 0xd1
mov byte [eax + 0x10f1b80], cl
inc eax
cmp eax, 0x13
jb 0x105185f
mov eax, 0x10f1b80
ret

Function at 0x1051977
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f38d8], 1
jne 0x10519bf
or dword [0x10f38d8], 1
mov dword [0x10f19bc], 0xbdbda49f
mov dword [0x10f19c0], 0xb6b8bdf1
mov dword [0x10f19c4], 0xa2a4a5b9
mov dword [0x10f19c8], 0xb0b5a3b4
mov word [0x10f19cc], 0xb0a5
mov byte [0x10f19ce], 0xd1
xor eax, eax
mov cl, byte [eax + 0x10f19bc]
xor cl, 0xd1
mov byte [eax + 0x10f1b94], cl
inc eax
cmp eax, 0x13
jb 0x10519c1
mov eax, 0x10f1b94
ret

Function at 0x1051aa6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f38d4], 1
jne 0x1051aee
or dword [0x10f38d4], 1
mov dword [0x10f19d0], 0xbdbda49f
mov dword [0x10f19d4], 0xb6b8bdf1
mov dword [0x10f19d8], 0xa2a4a5b9
mov dword [0x10f19dc], 0xb0b5a3b4
mov word [0x10f19e0], 0xb0a5
mov byte [0x10f19e2], 0xd1
xor eax, eax
mov cl, byte [eax + 0x10f19d0]
xor cl, 0xd1
mov byte [eax + 0x10f1ba8], cl
inc eax
cmp eax, 0x13
jb 0x1051af0
mov eax, 0x10f1ba8
ret

Function at 0x1051db7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f38c8], 1
jne 0x1051e1d
or dword [0x10f38c8], 1
mov dword [0x10f1a14], 0xa5bfb8a4
mov dword [0x10f1a18], 0xbd8ee3e2
mov dword [0x10f1a1c], 0xa5b9b6b8
mov dword [0x10f1a20], 0xa3b4a2a4
mov dword [0x10f1a24], 0xb0a5b0b5
mov dword [0x10f1a28], 0x8ebea58e
mov dword [0x10f1a2c], 0xb3bca4bf
mov word [0x10f1a30], 0xa3b4
mov byte [0x10f1a32], 0xd1
xor eax, eax
mov cl, byte [eax + 0x10f1a14]
xor cl, 0xd1
mov byte [eax + 0x10f1bec], cl
inc eax
cmp eax, 0x1f
jb 0x1051e1f
mov eax, 0x10f1bec
ret

Function at 0x1051e3a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f38c4], 1
jne 0x1051e99
or dword [0x10f38c4], 1
mov dword [0x10f1a34], 0xe2a5bfb8
mov dword [0x10f1a38], 0xb8bd8ee3
mov dword [0x10f1a3c], 0xa4a5b9b6
mov dword [0x10f1a40], 0xb5a3b4a2
mov dword [0x10f1a44], 0x8eb0a5b0
mov dword [0x10f1a48], 0xbf8ebea5
mov dword [0x10f1a4c], 0xb4b3bca4
mov word [0x10f1a50], 0xd1a3
xor eax, eax
mov cl, byte [eax + 0x10f1a34]
xor cl, 0xd1
mov byte [eax + 0x10f1c0c], cl
inc eax
cmp eax, 0x1e
jb 0x1051e9b
mov eax, 0x10f1c0c
ret
Function at 0x1051eb6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f38c0], 1
jne 0x1051f15
or dword [0x10f38c0], 1
mov dword [0x10f1a54], 0xb0b9b2a1
mov dword [0x10f1a58], 0xb8bd8ea3
mov dword [0x10f1a5c], 0xa4a5b9b6
mov dword [0x10f1a60], 0xb5a3b4a2
mov dword [0x10f1a64], 0x8eb0a5b0
mov dword [0x10f1a68], 0xa28ebea5
mov dword [0x10f1a6c], 0xbfb8a3a5
mov word [0x10f1a70], 0xd1b6
xor eax, eax
mov cl, byte [eax + 0x10f1a54]
xor cl, 0xd1
mov byte [eax + 0x10f1c2c], cl
inc eax
cmp eax, 0x1e
jb 0x1051f17
mov eax, 0x10f1c2c
ret

Function at 0x1051f32
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f38bc], 1
jne 0x1051f98
or dword [0x10f38bc], 1
mov dword [0x10f1a74], 0xb9b2a6a1
mov dword [0x10f1a78], 0xbd8ea3b0
mov dword [0x10f1a7c], 0xa5b9b6b8
mov dword [0x10f1a80], 0xa3b4a2a4
mov dword [0x10f1a84], 0xb0a5b0b5
mov dword [0x10f1a88], 0x8ebea58e
mov dword [0x10f1a8c], 0xb8a3a5a2
mov word [0x10f1a90], 0xb6bf
mov byte [0x10f1a92], 0xd1
xor eax, eax
mov cl, byte [eax + 0x10f1a74]
xor cl, 0xd1
mov byte [eax + 0x10f1c4c], cl
inc eax
cmp eax, 0x1f
jb 0x1051f9a
mov eax, 0x10f1c4c
ret

Function at 0x1051fb5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f38b8], 1
jne 0x105201c
or dword [0x10f38b8], 1
mov dword [0x10f1a94], 0xb9b6b8bd
mov dword [0x10f1a98], 0xb4a2a4a5
mov dword [0x10f1a9c], 0xa5b0b5a3
mov dword [0x10f1aa0], 0xb4a28eb0
mov dword [0x10f1aa4], 0xb0a78ea5
mov dword [0x10f1aa8], 0xbfb0b8a3
mov dword [0x10f1aac], 0xa5a28ea5
mov dword [0x10f1ab0], 0xb6bfb8a3
mov byte [0x10f1ab4], 0xd1
xor eax, eax
mov cl, byte [eax + 0x10f1a94]
xor cl, 0xd1
mov byte [eax + 0x10f1c6c], cl
inc eax
cmp eax, 0x21
jb 0x105201e
mov eax, 0x10f1c6c
ret

Function at 0x1052039
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f38b4], 1
jne 0x10520a0
or dword [0x10f38b4], 1
mov dword [0x10f1ab8], 0xb9b6b8bd
mov dword [0x10f1abc], 0xb4a2a4a5
mov dword [0x10f1ac0], 0xa5b0b5a3
mov dword [0x10f1ac4], 0xb4a28eb0
mov dword [0x10f1ac8], 0xb0a78ea5
mov dword [0x10f1acc], 0xbfb0b8a3
mov dword [0x10f1ad0], 0xa4bf8ea5
mov dword [0x10f1ad4], 0xa3b4b3bc
mov byte [0x10f1ad8], 0xd1
xor eax, eax
mov cl, byte [eax + 0x10f1ab8]
xor cl, 0xd1
mov byte [eax + 0x10f1c90], cl
inc eax
cmp eax, 0x21
jb 0x10520a2
mov eax, 0x10f1c90
ret

Function at 0x10520bd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f38b0], 1
jne 0x1052126
or dword [0x10f38b0], 1
mov dword [0x10f1adc], 0xb9b6b8bd
mov dword [0x10f1ae0], 0xb4a2a4a5
mov dword [0x10f1ae4], 0xa5b0b5a3
mov dword [0x10f1ae8], 0xb4a28eb0
mov dword [0x10f1aec], 0xb0a78ea5
mov dword [0x10f1af0], 0xbfb0b8a3
mov dword [0x10f1af4], 0xbeb38ea5
mov dword [0x10f1af8], 0xb0b4bdbe
mov word [0x10f1afc], 0xd1bf
xor eax, eax
mov cl, byte [eax + 0x10f1adc]
xor cl, 0xd1
mov byte [eax + 0x10f1cb4], cl
inc eax
cmp eax, 0x22
jb 0x1052128
mov eax, 0x10f1cb4
ret
Function at 0x1052143
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f38ac], 1
jne 0x10521a9
or dword [0x10f38ac], 1
mov dword [0x10f1b00], 0xb9b6b8bd
mov dword [0x10f1b04], 0xb4a2a4a5
mov dword [0x10f1b08], 0xa5b0b5a3
mov dword [0x10f1b0c], 0xb4a28eb0
mov dword [0x10f1b10], 0xb0a78ea5
mov dword [0x10f1b14], 0xbfb0b8a3
mov dword [0x10f1b18], 0xa4bf8ea5
mov word [0x10f1b1c], 0xbdbd
mov byte [0x10f1b1e], 0xd1
xor eax, eax
mov cl, byte [eax + 0x10f1b00]
xor cl, 0xd1
mov byte [eax + 0x10f1cd8], cl
inc eax
cmp eax, 0x1f
jb 0x10521ab
mov eax, 0x10f1cd8
ret

Function at 0x105243b
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x10bb3f8
call fcn.010ba668
sub esp, 0x20
push esi
xor esi, esi
mov dword [ebp - 0x10], esi
push edi
mov dword [ebp - 0x10], esi
call dword [0x10c30a8]
test byte [0x10f388c], 1
mov edi, eax
jne 0x1052488
or dword [0x10f388c], 1
mov dword [0x10f1d74], 0xbabdbaa4
mov dword [0x10f1d78], 0xfda7b6bd
mov dword [0x10f1d7c], 0xd3bfbfb7
xor ecx, ecx
mov al, byte [ecx + 0x10f1d74]
xor al, 0xd3
mov byte [ecx + 0x10f202c], al
inc ecx
cmp ecx, 0xc
jb 0x105248a
push esi
push esi
lea eax, [ebp - 0x10]
push eax
push esi
push edi
push 0x10f202c
call dword [0x10c30d4]
push eax
push 0x1b00
call dword [0x10c3130]
test eax, eax
jne 0x10524d6
call fcn.0105254c
mov ecx, dword [ebp + 0xc]
push eax
push dword [ebp + 8]
call fcn.0103d2ac
pop ecx
pop ecx
jmp 0x105253b
test byte [0x10f3884], 1
jne 0x10524f6
or dword [0x10f3884], 1
mov word [0x10f1d9c], 0xf3e9
mov byte [0x10f1d9e], 0xd3
xor eax, eax
mov cl, byte [eax + 0x10f1d9c]
xor cl, 0xd3
mov byte [eax + 0x10f2054], cl
inc eax
cmp eax, 3
jb 0x10524f8
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x2c]
push 0x10f2054
push eax
call fcn.0103d2ac
mov dword [ebp - 4], esi
push dword [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.0103d65f
add esp, 0x14
push esi
push 1
lea ecx, [ebp - 0x2c]
call fcn.01034cea
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword fs:[0], ecx
leave
ret

Function at 0x105254c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3888], 1
jne 0x10525a1
or dword [0x10f3888], 1
mov dword [0x10f1d80], 0xb295fbf3
mov dword [0x10f1d84], 0xb7b6bfba
mov dword [0x10f1d88], 0xf3bca7f3
mov dword [0x10f1d8c], 0xbea1bcb5
mov dword [0x10f1d90], 0xb6f3a7b2
mov dword [0x10f1d94], 0xa1bca1a1
mov word [0x10f1d98], 0xd3fa
xor eax, eax
mov cl, byte [eax + 0x10f1d80]
xor cl, 0xd3
mov byte [eax + 0x10f2038], cl
inc eax
cmp eax, 0x1a
jb 0x10525a3
mov eax, 0x10f2038
ret

Function at 0x105270c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3880], 1
jne 0x1052755
or dword [0x10f3880], 1
mov dword [0x10f1da0], 0x9bbdba84
mov dword [0x10f1da4], 0x9ca3a7a7
mov dword [0x10f1da8], 0xfbbdb6a3
mov dword [0x10f1dac], 0xb2b5f3fa
mov dword [0x10f1db0], 0xb7b6bfba
mov byte [0x10f1db4], 0xd3
xor eax, eax
mov cl, byte [eax + 0x10f1da0]
xor cl, 0xd3
mov byte [eax + 0x10f2058], cl
inc eax
cmp eax, 0x15
jb 0x1052757
mov eax, 0x10f2058
ret
Function at 0x1052a1c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f387c], 1
jne 0x1052a6f
or dword [0x10f387c], 1
mov dword [0x10f1db8], 0x9bbdba84
mov dword [0x10f1dbc], 0x90a3a7a7
mov dword [0x10f1dc0], 0xb8b0b2a1
mov dword [0x10f1dc4], 0xfbbfa186
mov dword [0x10f1dc8], 0xb2b5f3fa
mov dword [0x10f1dcc], 0xb7b6bfba
mov byte [0x10f1dd0], 0xd3
xor eax, eax
mov cl, byte [eax + 0x10f1db8]
xor cl, 0xd3
mov byte [eax + 0x10f2070], cl
inc eax
cmp eax, 0x19
jb 0x1052a71
mov eax, 0x10f2070
ret

Function at 0x1052a8c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3878], 1
jne 0x1052ad8
or dword [0x10f3878], 1
mov dword [0x10f1dd4], 0x9bbdba84
mov dword [0x10f1dd8], 0x90a3a7a7
mov dword [0x10f1ddc], 0xb6bdbdbc
mov dword [0x10f1de0], 0xfafba7b0
mov dword [0x10f1de4], 0xbab2b5f3
mov dword [0x10f1de8], 0xd3b7b6bf
xor eax, eax
mov cl, byte [eax + 0x10f1dd4]
xor cl, 0xd3
mov byte [eax + 0x10f208c], cl
inc eax
cmp eax, 0x18
jb 0x1052ada
mov eax, 0x10f208c
ret

Function at 0x1053431
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3874], 1
jne 0x105350a
or dword [0x10f3874], 1
mov dword [0x10f1df0], 0xa6a2b681
mov dword [0x10f1df4], 0xf3a7a0b6
mov dword [0x10f1df8], 0xf3bfa1a6
mov dword [0x10f1dfc], 0xb7b6a0a6
mov dword [0x10f1e00], 0xb7f3b2f3
mov dword [0x10f1e04], 0xb6b5b5ba
mov dword [0x10f1e08], 0xa7bdb6a1
mov dword [0x10f1e0c], 0xbbb0a0f3
mov dword [0x10f1e10], 0xf3b6beb6
mov dword [0x10f1e14], 0xbdb2bba7
mov dword [0x10f1e18], 0xb6bba7f3
mov dword [0x10f1e1c], 0xbdbcb0f3
mov dword [0x10f1e20], 0xa7b0b6bd
mov dword [0x10f1e24], 0xf3bdbcba
mov dword [0x10f1e28], 0xf3a0b2a4
mov dword [0x10f1e2c], 0xa7babdba
mov dword [0x10f1e30], 0xbabfb2ba
mov dword [0x10f1e34], 0xf3b7b6a9
mov dword [0x10f1e38], 0xbba7baa4
mov byte [0x10f1e3c], 0xd3
xor eax, eax
mov cl, byte [eax + 0x10f1df0]
xor cl, 0xd3
mov byte [eax + 0x10f20a8], cl
inc eax
cmp eax, 0x4d
jb 0x105350c
mov eax, 0x10f20a8
ret

Function at 0x1053527
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3870], 1
jne 0x1053603
or dword [0x10f3870], 1
mov dword [0x10f1e40], 0xa6a2b681
mov dword [0x10f1e44], 0xf3a7a0b6
mov dword [0x10f1e48], 0xf3bfa1a6
mov dword [0x10f1e4c], 0xb7b6a0a6
mov dword [0x10f1e50], 0xb7f3b2f3
mov dword [0x10f1e54], 0xb6b5b5ba
mov dword [0x10f1e58], 0xa7bdb6a1
mov dword [0x10f1e5c], 0xa0bcbbf3
mov dword [0x10f1e60], 0xb2bdf3a7
mov dword [0x10f1e64], 0xa7f3b6be
mov dword [0x10f1e68], 0xf3bdb2bb
mov dword [0x10f1e6c], 0xf3b6bba7
mov dword [0x10f1e70], 0xbdbdbcb0
mov dword [0x10f1e74], 0xbaa7b0b6
mov dword [0x10f1e78], 0xa4f3bdbc
mov dword [0x10f1e7c], 0xbaf3a0b2
mov dword [0x10f1e80], 0xbaa7babd
mov dword [0x10f1e84], 0xa9babfb2
mov dword [0x10f1e88], 0xa4f3b7b6
mov dword [0x10f1e8c], 0xd3bba7ba
xor eax, eax
mov cl, byte [eax + 0x10f1e40]
xor cl, 0xd3
mov byte [eax + 0x10f20f8], cl
inc eax
cmp eax, 0x50
jb 0x1053605
mov eax, 0x10f20f8
ret