joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1132811
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x7c
test byte [0x11d8dfc], 1
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov ecx, 0x8707
jne 0x113284f
or dword [0x11d8dfc], 1
lea eax, [ecx + 0x69]
mov word [0x11d2a24], ax
add eax, 0xfffffff5
mov word [0x11d2a26], ax
mov eax, ecx
mov word [0x11d2a28], ax
xor esi, esi
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x11d2a24]
add eax, 2
mov word [eax + 0x11d30ce], dx
cmp eax, 6
jb 0x1132853
lea eax, [ebx + 0xc]
cmp dword [eax + 0x14], 8
jb 0x1132876
mov eax, dword [eax]
push 0x11d30d0
push eax
lea eax, [esp + 0x18]
push eax
call fcn.0117b927
add esp, 0xc
test eax, eax
jne 0x1132941
push dword [esp + 0x10]
push dword [ebp + 0xc]
push ebx
call fcn.011335a4
push dword [esp + 0x10]
call fcn.0113294a
push eax
call fcn.0117be81
push dword [esp + 0x18]
call fcn.0117c40c
add esp, 0xc
push 0x44
pop edi
push edi
lea eax, [esp + 0x44]
push esi
push eax
call fcn.0117efe0
add esp, 0xc
mov dword [esp + 0x40], edi
xor eax, eax
lea ecx, [esp + 0x14]
push ecx
lea edi, [esp + 0x18]
stosd dword es:[edi], eax
lea ecx, [esp + 0x44]
push ecx
push esi
push esi
stosd dword es:[edi], eax
push esi
push esi
stosd dword es:[edi], eax
push esi
stosd dword es:[edi], eax
mov eax, dword [ebx + 0x28]
push esi
push eax
push esi
call dword [0x11aa08c]
test eax, eax
jne 0x113292f
call dword [0x11aa0a8]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.0115a8c7
cmp dword [eax + 0x14], 0x10
pop ecx
pop ecx
jb 0x1132913
mov eax, dword [eax]
push eax
call fcn.0113298a
push eax
call fcn.0117c150
pop ecx
pop ecx
push esi
push 1
lea ecx, [esp + 0x2c]
call fcn.01134cff
jmp 0x1132941
push dword [esp + 0x18]
mov esi, dword [0x11aa0bc]
call esi
push dword [esp + 0x14]
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0x113294a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8df8], 1
jne 0x113296d
or dword [0x11d8df8], 1
mov dword [0x11d2a2c], 0x49420d0a
mov word [0x11d2a30], 0x743
xor eax, eax
mov cl, byte [eax + 0x11d2a2c]
xor cl, 7
mov byte [eax + 0x11d30d8], cl
inc eax
cmp eax, 6
jb 0x113296f
mov eax, 0x11d30d8
ret

Function at 0x113298a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8df4], 1
jne 0x1132a0f
or dword [0x11d8df4], 1
mov dword [0x11d2a34], 0x6b6e6641
mov dword [0x11d2a38], 0x73276362
mov dword [0x11d2a3c], 0x75642768
mov dword [0x11d2a40], 0x62736662
mov dword [0x11d2a44], 0x66756427
mov dword [0x11d2a48], 0x75276f74
mov dword [0x11d2a4c], 0x75687762
mov dword [0x11d2a50], 0x27756273
mov dword [0x11d2a54], 0x64687577
mov dword [0x11d2a58], 0x3d747462
mov dword [0x11d2a5c], 0xd742227
mov byte [0x11d2a60], 7
xor eax, eax
mov cl, byte [eax + 0x11d2a34]
xor cl, 7
mov byte [eax + 0x11d30e0], cl
inc eax
cmp eax, 0x2d
jb 0x1132a11
mov eax, 0x11d30e0
ret
Function at 0x1133ad9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d94], 1
jne 0x1133b0e
or dword [0x11d8d94], 1
mov dword [0x11d2ce0], 0x7263684a
mov dword [0x11d2ce4], 0x273d626b
mov dword [0x11d2ce8], 0xd0a7422
mov byte [0x11d2cec], 7
xor eax, eax
mov cl, byte [eax + 0x11d2ce0]
xor cl, 7
mov byte [eax + 0x11d338c], cl
inc eax
cmp eax, 0xd
jb 0x1133b10
mov eax, 0x11d338c
ret

Function at 0x1133b2b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d90], 1
jne 0x1133b6a
or dword [0x11d8d90], 1
mov dword [0x11d2cf0], 0x62756f53
mov dword [0x11d2cf4], 0x273d6366
mov dword [0x11d2cf8], 0x7f227f37
mov dword [0x11d2cfc], 0xd0a0d0a
mov byte [0x11d2d00], 7
xor eax, eax
mov cl, byte [eax + 0x11d2cf0]
xor cl, 7
mov byte [eax + 0x11d339c], cl
inc eax
cmp eax, 0x11
jb 0x1133b6c
mov eax, 0x11d339c
ret

Function at 0x1133b87
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d8c], 1
jne 0x1133bc5
or dword [0x11d8d8c], 1
mov dword [0x11d2d04], 0x62647f42
mov dword [0x11d2d08], 0x686e7377
mov dword [0x11d2d0c], 0x63222769
mov word [0x11d2d10], 0xd0a
mov byte [0x11d2d12], 7
xor eax, eax
mov cl, byte [eax + 0x11d2d04]
xor cl, 7
mov byte [eax + 0x11d33b0], cl
inc eax
cmp eax, 0xf
jb 0x1133bc7
mov eax, 0x11d33b0
ret

Function at 0x1133be2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d88], 1
jne 0x1133c20
or dword [0x11d8d88], 1
mov dword [0x11d2d14], 0x6664684b
mov dword [0x11d2d18], 0x69686e73
mov dword [0x11d2d1c], 0x7722273d
mov word [0x11d2d20], 0xd0a
mov byte [0x11d2d22], 7
xor eax, eax
mov cl, byte [eax + 0x11d2d14]
xor cl, 7
mov byte [eax + 0x11d33c0], cl
inc eax
cmp eax, 0xf
jb 0x1133c22
mov eax, 0x11d33c0
ret

Function at 0x1133c3d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d84], 1
jne 0x1133c7e
or dword [0x11d8d84], 1
mov dword [0x11d2d24], 0x62777e53
mov dword [0x11d2d28], 0x7422273d
mov dword [0x11d2d2c], 0x7f372f27
mov dword [0x11d2d30], 0xa2e7f22
mov word [0x11d2d34], 0x70d
xor eax, eax
mov cl, byte [eax + 0x11d2d24]
xor cl, 7
mov byte [eax + 0x11d33d0], cl
inc eax
cmp eax, 0x12
jb 0x1133c80
mov eax, 0x11d33d0
ret

Function at 0x1133c9b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d80], 1
jne 0x1133d23
or dword [0x11d8d80], 1
mov dword [0x11d2d38], 0x66736243
mov dword [0x11d2d3c], 0x3d746b6e
mov dword [0x11d2d40], 0x6e755327
mov dword [0x11d2d44], 0x73276362
mov dword [0x11d2d48], 0x62752768
mov dword [0x11d2d4c], 0x61276366
mov dword [0x11d2d50], 0x276a6875
mov dword [0x11d2d54], 0x686a626a
mov dword [0x11d2d58], 0x66277e75
mov dword [0x11d2d5c], 0x62756363
mov dword [0x11d2d60], 0x22277474
mov dword [0x11d2d64], 0x70d0a77
xor eax, eax
mov cl, byte [eax + 0x11d2d38]
xor cl, 7
mov byte [eax + 0x11d33e4], cl
inc eax
cmp eax, 0x30
jb 0x1133d25
mov eax, 0x11d33e4
ret
Function at 0x1133d40
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d7c], 1
jne 0x1133dd2
or dword [0x11d8d7c], 1
mov dword [0x11d2d68], 0x66736243
mov dword [0x11d2d6c], 0x3d746b6e
mov dword [0x11d2d70], 0x6e755327
mov dword [0x11d2d74], 0x73276362
mov dword [0x11d2d78], 0x75702768
mov dword [0x11d2d7c], 0x2762736e
mov dword [0x11d2d80], 0x6a276873
mov dword [0x11d2d84], 0x75686a62
mov dword [0x11d2d88], 0x6366277e
mov dword [0x11d2d8c], 0x74627563
mov dword [0x11d2d90], 0x77222774
mov word [0x11d2d94], 0xd0a
mov byte [0x11d2d96], 7
xor eax, eax
mov cl, byte [eax + 0x11d2d68]
xor cl, 7
mov byte [eax + 0x11d3414], cl
inc eax
cmp eax, 0x2f
jb 0x1133dd4
mov eax, 0x11d3414
ret

Function at 0x1133def
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d78], 1
jne 0x1133e82
or dword [0x11d8d78], 1
mov dword [0x11d2d98], 0x66736243
mov dword [0x11d2d9c], 0x3d746b6e
mov dword [0x11d2da0], 0x6e755327
mov dword [0x11d2da4], 0x73276362
mov dword [0x11d2da8], 0x7f622768
mov dword [0x11d2dac], 0x73726462
mov dword [0x11d2db0], 0x626a2762
mov dword [0x11d2db4], 0x7e75686a
mov dword [0x11d2db8], 0x27736627
mov dword [0x11d2dbc], 0x75636366
mov dword [0x11d2dc0], 0x27747462
mov dword [0x11d2dc4], 0xd0a7722
mov byte [0x11d2dc8], 7
xor eax, eax
mov cl, byte [eax + 0x11d2d98]
xor cl, 7
mov byte [eax + 0x11d3444], cl
inc eax
cmp eax, 0x31
jb 0x1133e84
mov eax, 0x11d3444
ret

Function at 0x1133e9f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d74], 1
jne 0x1133ed6
or dword [0x11d8d74], 1
mov dword [0x11d2dcc], 0x60666b41
mov dword [0x11d2dd0], 0x37273d74
mov dword [0x11d2dd4], 0xa7f227f
mov word [0x11d2dd8], 0x70d
xor eax, eax
mov cl, byte [eax + 0x11d2dcc]
xor cl, 7
mov byte [eax + 0x11d3478], cl
inc eax
cmp eax, 0xe
jb 0x1133ed8
mov eax, 0x11d3478
ret

Function at 0x1133ef3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d70], 1
jne 0x1133f2a
or dword [0x11d8d70], 1
mov dword [0x11d2ddc], 0x66756657
mov dword [0x11d2de0], 0x6273626a
mov dword [0x11d2de4], 0xa3d7475
mov word [0x11d2de8], 0x70d
xor eax, eax
mov cl, byte [eax + 0x11d2ddc]
xor cl, 7
mov byte [eax + 0x11d3488], cl
inc eax
cmp eax, 0xe
jb 0x1133f2c
mov eax, 0x11d3488
ret

Function at 0x1133f47
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d6c], 1
jne 0x1133f90
or dword [0x11d8d6c], 1
mov dword [0x11d2dec], 0x7566570e
mov dword [0x11d2df0], 0x73626a66
mov dword [0x11d2df4], 0x225c7562
mov dword [0x11d2df8], 0x273d5a63
mov dword [0x11d2dfc], 0xd0a7722
mov byte [0x11d2e00], 7
xor eax, eax
mov cl, byte [eax + 0x11d2dec]
xor cl, 7
mov byte [eax + 0x11d3498], cl
inc eax
cmp eax, 0x15
jb 0x1133f92
mov eax, 0x11d3498
ret

Function at 0x1133fb0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d68], 1
jne 0x1133fe8
or dword [0x11d8d68], 1
mov dword [0x11d2e04], 0x274f4254
mov dword [0x11d2e08], 0x6b666946
mov dword [0x11d2e0c], 0x746e747e
mov dword [0x11d2e10], 0x70d0a3d
xor eax, eax
mov cl, byte [eax + 0x11d2e04]
xor cl, 7
mov byte [eax + 0x11d34b0], cl
inc eax
cmp eax, 0x10
jb 0x1133fea
mov eax, 0x11d34b0
ret
Function at 0x1134005
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d64], 1
jne 0x113404d
or dword [0x11d8d64], 1
mov dword [0x11d2e14], 0x6d65480e
mov dword [0x11d2e18], 0x27736462
mov dword [0x11d2e1c], 0x62777e73
mov dword [0x11d2e20], 0x7422273d
mov word [0x11d2e24], 0xd0a
mov byte [0x11d2e26], 7
xor eax, eax
mov cl, byte [eax + 0x11d2e14]
xor cl, 7
mov byte [eax + 0x11d34c0], cl
inc eax
cmp eax, 0x13
jb 0x113404f
mov eax, 0x11d34c0
ret

Function at 0x113406a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d60], 1
jne 0x11340d3
or dword [0x11d8d60], 1
mov dword [0x11d2e28], 0x6e66410e
mov dword [0x11d2e2c], 0x2763626b
mov dword [0x11d2e30], 0x61276873
mov dword [0x11d2e34], 0x686b6b68
mov dword [0x11d2e38], 0x68772770
mov dword [0x11d2e3c], 0x6273696e
mov dword [0x11d2e40], 0x6f642775
mov dword [0x11d2e44], 0xa696e66
mov word [0x11d2e48], 0x70d
xor eax, eax
mov cl, byte [eax + 0x11d2e28]
xor cl, 7
mov byte [eax + 0x11d34d4], cl
inc eax
cmp eax, 0x22
jb 0x11340d5
mov eax, 0x11d34d4
ret

Function at 0x11340f0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d5c], 1
jne 0x1134113
or dword [0x11d8d5c], 1
mov dword [0x11d2e4c], 0x63737447
mov word [0x11d2e50], 0x747
xor eax, eax
mov cl, byte [eax + 0x11d2e4c]
xor cl, 7
mov byte [eax + 0x11d34f8], cl
inc eax
cmp eax, 6
jb 0x1134115
mov eax, 0x11d34f8
ret

Function at 0x1134130
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d58], 1
jne 0x1134167
or dword [0x11d8d58], 1
mov dword [0x11d2e54], 0x73697275
mov dword [0x11d2e58], 0x58626a6e
mov dword [0x11d2e5c], 0x68757562
mov word [0x11d2e60], 0x775
xor eax, eax
mov cl, byte [eax + 0x11d2e54]
xor cl, 7
mov byte [eax + 0x11d3500], cl
inc eax
cmp eax, 0xe
jb 0x1134169
mov eax, 0x11d3500
ret

Function at 0x1134184
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d54], 1
jne 0x11341b2
or dword [0x11d8d54], 1
mov dword [0x11d2e64], 0x60696675
mov dword [0x11d2e68], 0x75625862
mov dword [0x11d2e6c], 0x7756875
xor eax, eax
mov cl, byte [eax + 0x11d2e64]
xor cl, 7
mov byte [eax + 0x11d3510], cl
inc eax
cmp eax, 0xc
jb 0x11341b4
mov eax, 0x11d3510
ret

Function at 0x11341cf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d50], 1
jne 0x113420d
or dword [0x11d8d50], 1
mov dword [0x11d2e70], 0x75627168
mov dword [0x11d2e74], 0x70686b61
mov dword [0x11d2e78], 0x75756258
mov word [0x11d2e7c], 0x7568
mov byte [0x11d2e7e], 7
xor eax, eax
mov cl, byte [eax + 0x11d2e70]
xor cl, 7
mov byte [eax + 0x11d351c], cl
inc eax
cmp eax, 0xf
jb 0x113420f
mov eax, 0x11d351c
ret

Function at 0x113422a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d4c], 1
jne 0x1134262
or dword [0x11d8d4c], 1
mov dword [0x11d2e80], 0x62636972
mov dword [0x11d2e84], 0x686b6175
mov dword [0x11d2e88], 0x75625870
mov dword [0x11d2e8c], 0x7756875
xor eax, eax
mov cl, byte [eax + 0x11d2e80]
xor cl, 7
mov byte [eax + 0x11d352c], cl
inc eax
cmp eax, 0x10
jb 0x1134264
mov eax, 0x11d352c
ret
Function at 0x113427f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d48], 1
jne 0x11342ad
or dword [0x11d8d48], 1
mov dword [0x11d2e90], 0x6e60686b
mov dword [0x11d2e94], 0x75625864
mov dword [0x11d2e98], 0x7756875
xor eax, eax
mov cl, byte [eax + 0x11d2e90]
xor cl, 7
mov byte [eax + 0x11d353c], cl
inc eax
cmp eax, 0xc
jb 0x11342af
mov eax, 0x11d353c
ret

Function at 0x11342ca
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d44], 1
jne 0x11342ff
or dword [0x11d8d44], 1
mov dword [0x11d2e9c], 0x666a6863
mov dword [0x11d2ea0], 0x6258696e
mov dword [0x11d2ea4], 0x75687575
mov byte [0x11d2ea8], 7
xor eax, eax
mov cl, byte [eax + 0x11d2e9c]
xor cl, 7
mov byte [eax + 0x11d3548], cl
inc eax
cmp eax, 0xd
jb 0x1134301
mov eax, 0x11d3548
ret

Function at 0x113431c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d40], 1
jne 0x113435b
or dword [0x11d8d40], 1
mov dword [0x11d2eac], 0x6671696e
mov dword [0x11d2eb0], 0x58636e6b
mov dword [0x11d2eb4], 0x72607566
mov dword [0x11d2eb8], 0x7369626a
mov byte [0x11d2ebc], 7
xor eax, eax
mov cl, byte [eax + 0x11d2eac]
xor cl, 7
mov byte [eax + 0x11d3558], cl
inc eax
cmp eax, 0x11
jb 0x113435d
mov eax, 0x11d3558
ret

Function at 0x1134378
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d3c], 1
jne 0x11343ad
or dword [0x11d8d3c], 1
mov dword [0x11d2ec0], 0x6069626b
mov dword [0x11d2ec4], 0x62586f73
mov dword [0x11d2ec8], 0x75687575
mov byte [0x11d2ecc], 7
xor eax, eax
mov cl, byte [eax + 0x11d2ec0]
xor cl, 7
mov byte [eax + 0x11d356c], cl
inc eax
cmp eax, 0xd
jb 0x11343af
mov eax, 0x11d356c
ret

Function at 0x11343ca
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d38], 1
jne 0x11343ff
or dword [0x11d8d38], 1
mov dword [0x11d2ed0], 0x58737268
mov dword [0x11d2ed4], 0x75586168
mov dword [0x11d2ed8], 0x62606966
mov byte [0x11d2edc], 7
xor eax, eax
mov cl, byte [eax + 0x11d2ed0]
xor cl, 7
mov byte [eax + 0x11d357c], cl
inc eax
cmp eax, 0xd
jb 0x1134401
mov eax, 0x11d357c
ret

Function at 0x113441c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d34], 1
jne 0x1134449
or dword [0x11d8d34], 1
mov dword [0x11d2ee0], 0x62647f62
mov dword [0x11d2ee4], 0x686e7377
mov word [0x11d2ee8], 0x769
xor eax, eax
mov cl, byte [eax + 0x11d2ee0]
xor cl, 7
mov byte [eax + 0x11d358c], cl
inc eax
cmp eax, 0xa
jb 0x113444b
mov eax, 0x11d358c
ret

Function at 0x1134466
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d30], 1
jne 0x11344c5
or dword [0x11d8d30], 1
mov dword [0x11d2eec], 0x6373740e
mov dword [0x11d2ef0], 0x7f623d3d
mov dword [0x11d2ef4], 0x73776264
mov dword [0x11d2ef8], 0x3d69686e
mov dword [0x11d2efc], 0x666f703d
mov dword [0x11d2f00], 0x3d2e2f73
mov dword [0x11d2f04], 0xa742227
mov word [0x11d2f08], 0x70d
xor eax, eax
mov cl, byte [eax + 0x11d2eec]
xor cl, 7
mov byte [eax + 0x11d3598], cl
inc eax
cmp eax, 0x1e
jb 0x11344c7
mov eax, 0x11d3598
ret
Function at 0x11344e2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d2c], 1
jne 0x1134556
or dword [0x11d8d2c], 1
mov dword [0x11d2f0c], 0x6e66410e
mov dword [0x11d2f10], 0x2763626b
mov dword [0x11d2f14], 0x60276873
mov dword [0x11d2f18], 0x74277362
mov dword [0x11d2f1c], 0x3d3d6373
mov dword [0x11d2f20], 0x62647f62
mov dword [0x11d2f24], 0x686e7377
mov dword [0x11d2f28], 0x703d3d69
mov dword [0x11d2f2c], 0x2f73666f
mov dword [0x11d2f30], 0x70d0a2e
xor eax, eax
mov cl, byte [eax + 0x11d2f0c]
xor cl, 7
mov byte [eax + 0x11d35b8], cl
inc eax
cmp eax, 0x28
jb 0x1134558
mov eax, 0x11d35b8
ret

Function at 0x1134573
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d28], 1
jne 0x11345a7
or dword [0x11d8d28], 1
mov dword [0x11d2f34], 0x6a686458
mov dword [0x11d2f38], 0x75756258
mov word [0x11d2f3c], 0x7568
mov byte [0x11d2f3e], 7
xor eax, eax
mov cl, byte [eax + 0x11d2f34]
xor cl, 7
mov byte [eax + 0x11d35e0], cl
inc eax
cmp eax, 0xb
jb 0x11345a9
mov eax, 0x11d35e0
ret

Function at 0x11345c4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d24], 1
jne 0x113462d
or dword [0x11d8d24], 1
mov dword [0x11d2f40], 0x6864580e
mov dword [0x11d2f44], 0x7562586a
mov dword [0x11d2f48], 0x3d756875
mov dword [0x11d2f4c], 0x7575423d
mov dword [0x11d2f50], 0x624a7568
mov dword [0x11d2f54], 0x60667474
mov dword [0x11d2f58], 0x3d2e2f62
mov dword [0x11d2f5c], 0xa742227
mov word [0x11d2f60], 0x70d
xor eax, eax
mov cl, byte [eax + 0x11d2f40]
xor cl, 7
mov byte [eax + 0x11d35ec], cl
inc eax
cmp eax, 0x22
jb 0x113462f
mov eax, 0x11d35ec
ret

Function at 0x113464a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d20], 1
jne 0x11346c8
or dword [0x11d8d20], 1
mov dword [0x11d2f64], 0x6e66410e
mov dword [0x11d2f68], 0x2763626b
mov dword [0x11d2f6c], 0x60276873
mov dword [0x11d2f70], 0x58277362
mov dword [0x11d2f74], 0x586a6864
mov dword [0x11d2f78], 0x68757562
mov dword [0x11d2f7c], 0x423d3d75
mov dword [0x11d2f80], 0x75687575
mov dword [0x11d2f84], 0x7474624a
mov dword [0x11d2f88], 0x2f626066
mov dword [0x11d2f8c], 0x70d0a2e
xor eax, eax
mov cl, byte [eax + 0x11d2f64]
xor cl, 7
mov byte [eax + 0x11d3610], cl
inc eax
cmp eax, 0x2c
jb 0x11346ca
mov eax, 0x11d3610
ret

Function at 0x11346e5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d1c], 1
jne 0x1134760
or dword [0x11d8d1c], 1
mov dword [0x11d2f90], 0x64667354
mov dword [0x11d2f94], 0x7263276c
mov dword [0x11d2f98], 0x6227776a
mov dword [0x11d2f9c], 0x75687575
mov dword [0x11d2fa0], 0x6844273d
mov dword [0x11d2fa4], 0x7f627369
mov dword [0x11d2fa8], 0x64625573
mov dword [0x11d2fac], 0x27637568
mov dword [0x11d2fb0], 0x27746670
mov dword [0x11d2fb4], 0x6b6b7269
mov byte [0x11d2fb8], 7
xor eax, eax
mov cl, byte [eax + 0x11d2f90]
xor cl, 7
mov byte [eax + 0x11d363c], cl
inc eax
cmp eax, 0x29
jb 0x1134762
mov eax, 0x11d363c
ret
Function at 0x113477d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d18], 1
jne 0x11347f7
or dword [0x11d8d18], 1
mov dword [0x11d2fbc], 0x64667354
mov dword [0x11d2fc0], 0x7263276c
mov dword [0x11d2fc4], 0x6227776a
mov dword [0x11d2fc8], 0x75687575
mov dword [0x11d2fcc], 0x7e54273d
mov dword [0x11d2fd0], 0x6e694e6a
mov dword [0x11d2fd4], 0x6b666e73
mov dword [0x11d2fd8], 0x27627d6e
mov dword [0x11d2fdc], 0x6b6e6661
mov word [0x11d2fe0], 0x6362
mov byte [0x11d2fe2], 7
xor eax, eax
mov cl, byte [eax + 0x11d2fbc]
xor cl, 7
mov byte [eax + 0x11d3668], cl
inc eax
cmp eax, 0x27
jb 0x11347f9
mov eax, 0x11d3668
ret

Function at 0x1134814
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d14], 1
jne 0x113487a
or dword [0x11d8d14], 1
mov dword [0x11d2fe4], 0x6e6c743b
mov dword [0x11d2fe8], 0x63627777
mov dword [0x11d2fec], 0x66756127
mov dword [0x11d2ff0], 0x272b626a
mov dword [0x11d2ff4], 0x70274457
mov dword [0x11d2ff8], 0x69277466
mov dword [0x11d2ffc], 0x396b6b72
mov word [0x11d3000], 0xd0a
mov byte [0x11d3002], 7
xor eax, eax
mov cl, byte [eax + 0x11d2fe4]
xor cl, 7
mov byte [eax + 0x11d3690], cl
inc eax
cmp eax, 0x1f
jb 0x113487c
mov eax, 0x11d3690
ret

Function at 0x1134897
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d8d10], 1
jne 0x113492a
or dword [0x11d8d10], 1
mov dword [0x11d3004], 0x6e6c743b
mov dword [0x11d3008], 0x63627777
mov dword [0x11d300c], 0x66756127
mov dword [0x11d3010], 0x272b626a
mov dword [0x11d3014], 0x70274457
mov dword [0x11d3018], 0x74277466
mov dword [0x11d301c], 0x27626a66
mov dword [0x11d3020], 0x75277466
mov dword [0x11d3024], 0x75727362
mov dword [0x11d3028], 0x63662769
mov dword [0x11d302c], 0x74627563
mov dword [0x11d3030], 0xd0a3974
mov byte [0x11d3034], 7
xor eax, eax
mov cl, byte [eax + 0x11d3004]
xor cl, 7
mov byte [eax + 0x11d36b0], cl
inc eax
cmp eax, 0x31
jb 0x113492c
mov eax, 0x11d36b0
ret
Function at 0x1134947
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16c4
call fcn.0118eb20
push ebx
push esi
push edi
call dword [0x11aa094]
test byte [0x11d8d0c], 1
mov dword [ebp - 4], eax
jne 0x113498e
or dword [0x11d8d0c], 1
mov dword [0x11d3038], 0x63686a3b
mov dword [0x11d303c], 0x38626b72
mov dword [0x11d3040], 0x7393838
xor edi, edi
xor eax, eax
mov cl, byte [eax + 0x11d3038]
xor cl, 7
mov byte [eax + 0x11d36e4], cl
inc eax
cmp eax, 0xc
jb 0x1134992
test byte [0x11d8d08], 1
mov dword [ebp - 8], 0x11d36e4
jne 0x11349dc
or dword [0x11d8d08], 1
mov dword [0x11d3044], 0x6a7e743b
mov dword [0x11d3048], 0x386b6865
mov dword [0x11d304c], 0x7393838
xor eax, eax
mov cl, byte [eax + 0x11d3044]
xor cl, 7
mov byte [eax + 0x11d36f0], cl
inc eax
cmp eax, 0xc
jb 0x11349de
mov esi, 0x688
push esi
lea eax, [ebp - 0x6c0]
push edi
push eax
mov dword [ebp - 0x1c], 0x11d36f0
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
call fcn.0117efe0
mov eax, dword [ebp + 8]
cdq
add esp, 0xc
mov dword [ebp - 0x6c0], esi
mov esi, eax
lea eax, [ebp - 0x6c0]
push eax
mov ebx, edx
push ebx
push esi
push dword [ebp - 4]
call dword [0x11aa3b0]
test eax, eax
je 0x1134a43
lea eax, [ebp - 0x69c]
mov dword [ebp - 8], eax
push 0xffa
lea eax, [ebp - 0x16c0]
push edi
push eax
call fcn.0117efe0
add esp, 0xc
lea eax, [ebp - 0x16c0]
push eax
lea eax, [ebp - 0x18]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x16c0], 0x58
mov dword [ebp - 0x1670], 0x7d0
call dword [0x11aa3bc]
lea ecx, [ebp - 0x166c]
test eax, eax
jne 0x1134a8f
mov ecx, dword [ebp - 0x1c]
test byte [0x11d8d04], 1
jne 0x1134ac6
or dword [0x11d8d04], 1
mov dword [0x11d3050], 0x22277722
mov dword [0x11d3054], 0x74222674
mov dword [0x11d3058], 0x227f372c
mov word [0x11d305c], 0x77f
xor eax, eax
mov dl, byte [eax + 0x11d3050]
xor dl, 7
mov byte [eax + 0x11d36fc], dl
inc eax
cmp eax, 0xe
jb 0x1134ac8
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push ecx
push dword [ebp - 8]
push dword [ebp + 8]
push 0x11d36fc
push dword [ebp + 0xc]
call fcn.0117c20d
add esp, 0x1c
push 6
pop ecx
mov dword [ebp - 0xc], edi
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xc]
push eax
push ebx
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x18
call dword [0x11aa3a4]
test eax, eax
je 0x1134b3f
push dword [ebp - 0xc]
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
call fcn.01134b8c
push eax
push dword [ebp + 0xc]
call fcn.0117c20d
add esp, 0x14
test byte [0x11d8cfc], 1
jne 0x1134b5f
or dword [0x11d8cfc], 1
mov word [0x11d3070], 0xd0a
mov byte [0x11d3072], 7
xor eax, eax
mov cl, byte [eax + 0x11d3070]
xor cl, 7
mov byte [eax + 0x11d371c], cl
inc eax
cmp eax, 3
jb 0x1134b61
push dword [ebp + 0xc]
push 0x11d371c
call fcn.0117be81
pop ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 8