joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10fcfd5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192690], 1
jne 0x10fd013
or dword [0x1192690], 1
mov dword [0x11919d0], 0xa098bc86
mov dword [0x11919d4], 0x9ffbf9b8
mov dword [0x11919d8], 0xaaaca0bd
mov word [0x11919dc], 0xbcbc
mov byte [0x11919de], 0xcf
xor eax, eax
mov cl, byte [eax + 0x11919d0]
xor cl, 0xcf
mov byte [eax + 0x1192198], cl
inc eax
cmp eax, 0xf
jb 0x10fd015
mov eax, 0x1192198
ret

Function at 0x10fd12b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x119268c], 1
jne 0x10fd194
or dword [0x119268c], 1
mov dword [0x11919e0], 0xa0a3a38e
mov dword [0x11919e4], 0xaabbaeac
mov dword [0x11919e8], 0x86aba18e
mov dword [0x11919ec], 0xa6bba6a1
mov dword [0x11919f0], 0xb5a6a3ae
mov dword [0x11919f4], 0xaba69caa
mov dword [0x11919f8], 0xa6aea9ef
mov dword [0x11919fc], 0xf5abaaa3
mov word [0x1191a00], 0xcfef
xor eax, eax
mov cl, byte [eax + 0x11919e0]
xor cl, 0xcf
mov byte [eax + 0x11921a8], cl
inc eax
cmp eax, 0x22
jb 0x10fd196
mov eax, 0x11921a8
ret

Function at 0x10fd1b1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192688], 1
jne 0x10fd210
or dword [0x1192688], 1
mov dword [0x1191a04], 0xacaaa78c
mov dword [0x1191a08], 0xa4a09ba4
mov dword [0x1191a0c], 0xaa82a1aa
mov dword [0x1191a10], 0xbdaaada2
mov dword [0x1191a14], 0xbfa6a7bc
mov dword [0x1191a18], 0xa6aea9ef
mov dword [0x1191a1c], 0xf5abaaa3
mov word [0x1191a20], 0xcfef
xor eax, eax
mov cl, byte [eax + 0x1191a04]
xor cl, 0xcf
mov byte [eax + 0x11921cc], cl
inc eax
cmp eax, 0x1e
jb 0x10fd212
mov eax, 0x11921cc
ret

Function at 0x10fd476
Capabilities:
Encode data using xor

Disassembly:
test byte [0x119267c], 1
jne 0x10fd4fb
or dword [0x119267c], 1
mov dword [0x1191a38], 0xa1a1ae8c
mov dword [0x1191a3c], 0xbeefbba0
mov dword [0x1191a40], 0xb6bdaaba
mov dword [0x1191a44], 0xf9efaeef
mov dword [0x1191a48], 0xa6adeffb
mov dword [0x1191a4c], 0xa6b9efbb
mov dword [0x1191a50], 0xa0efb8aa
mov dword [0x1191a54], 0xfdfcefa1
mov dword [0x1191a58], 0xbba6adef
mov dword [0x1191a5c], 0xa1a6b8ef
mov dword [0x1191a60], 0xbcb8a0ab
mov byte [0x1191a64], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191a38]
xor cl, 0xcf
mov byte [eax + 0x1192200], cl
inc eax
cmp eax, 0x2d
jb 0x10fd4fd
mov eax, 0x1192200
ret
Function at 0x10fd518
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192678], 1
jne 0x10fd5cc
push ebx
push esi
or dword [0x1192678], 1
mov eax, 0xdd87
mov word [0x1191a68], ax
add eax, 0xfffffffd
mov word [0x1191a6a], ax
push edi
mov edi, 0xdd8a
mov eax, edi
mov word [0x1191a6c], ax
add eax, 0xc
mov word [0x1191a6e], ax
lea esi, [edi + 6]
mov eax, esi
mov word [0x1191a70], ax
lea edx, [edi - 7]
mov eax, edx
mov word [0x1191a72], ax
add eax, 0xfffffffd
mov word [0x1191a74], ax
lea ecx, [edi + 2]
mov eax, ecx
mov word [0x1191a76], ax
add eax, 2
mov ebx, eax
lea eax, [edi - 4]
pop edi
mov word [0x1191a86], ax
add eax, 0x49
pop esi
mov word [0x1191a78], bx
mov dword [0x1191a7a], 0xdd90dd83
mov dword [0x1191a7e], 0xdd8edd82
mov dword [0x1191a82], 0xdd87dd8c
mov dword [0x1191a88], 0xdd8add81
mov word [0x1191a8c], ax
pop ebx
xor eax, eax
mov ecx, 0xddcf
xor cx, word [eax + 0x1191a68]
add eax, 2
mov word [eax + 0x119222e], cx
cmp eax, 0x26
jb 0x10fd5ce
mov eax, 0x1192230
ret

Function at 0x10fd5ef
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192674], 1
jne 0x10fd6a0
or dword [0x1192674], 1
mov eax, 0xdd87
mov word [0x1191a90], ax
add eax, 0xfffffffd
mov word [0x1191a92], ax
mov ecx, 0xdd8a
push ebx
mov eax, ecx
mov word [0x1191a94], ax
add eax, 0xc
push esi
mov word [0x1191a96], ax
lea esi, [ecx + 6]
mov eax, esi
mov word [0x1191a98], ax
add eax, 0xfffffffc
mov word [0x1191a9a], ax
lea edx, [ecx + 0x10]
mov eax, edx
mov word [0x1191a9c], ax
add eax, 3
mov ebx, eax
mov word [0x1191a9e], bx
mov word [0x1191aa0], bx
mov ebx, ecx
mov word [0x1191aa2], bx
add ebx, 0xfffffff7
mov word [0x1191ab0], ax
lea eax, [ecx + 0x45]
pop esi
mov word [0x1191aa4], bx
mov dword [0x1191aa6], 0xdd90dd9b
mov word [0x1191aaa], dx
mov dword [0x1191aac], 0xdd8add9c
mov word [0x1191ab2], ax
pop ebx
xor eax, eax
mov ecx, 0xddcf
xor cx, word [eax + 0x1191a90]
add eax, 2
mov word [eax + 0x1192256], cx
cmp eax, 0x24
jb 0x10fd6a2
mov eax, 0x1192258
ret

Function at 0x10fd6c3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192670], 1
mov edx, 0xddcf
jne 0x10fd737
or dword [0x1192670], 1
lea eax, [edx - 0x48]
mov word [0x1191ab4], ax
add eax, 0xfffffffd
mov word [0x1191ab6], ax
lea ecx, [edx - 0x45]
mov eax, ecx
mov word [0x1191ab8], ax
add eax, 0xc
mov word [0x1191aba], ax
lea eax, [edx - 0x3f]
mov word [0x1191abc], ax
add eax, 0xa
mov word [0x1191abe], ax
lea eax, [edx - 0x33]
push esi
mov esi, eax
mov eax, edx
mov word [0x1191ac0], si
mov word [0x1191ac2], cx
mov dword [0x1191ac4], 0xdd9cdd9d
mov word [0x1191ac8], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x1191ab4]
add eax, 2
mov word [eax + 0x119227a], cx
cmp eax, 0x16
jb 0x10fd739
mov eax, 0x119227c
ret
Function at 0x10fd757
Capabilities:
Encode data using xor

Disassembly:
test byte [0x119266c], 1
jne 0x10fd819
push ebx
mov eax, 0xdd87
mov word [0x1191acc], ax
add eax, 0xfffffffd
mov word [0x1191ace], ax
push esi
mov esi, 0xdd8a
or dword [0x119266c], 1
mov eax, esi
mov word [0x1191ad0], ax
add eax, 0xc
mov word [0x1191ad2], ax
lea edx, [esi + 6]
lea ecx, [esi + 2]
mov eax, edx
mov word [0x1191ad4], ax
mov eax, ecx
mov word [0x1191ad6], ax
add eax, 0xe
mov word [0x1191ad8], ax
lea eax, [esi + 0x13]
mov ebx, eax
add eax, 0xffffffe4
mov esi, eax
lea eax, [edx - 7]
mov word [0x1191aec], ax
add eax, 0xfffffffd
mov word [0x1191aee], ax
lea eax, [edx - 8]
mov word [0x1191ae0], si
mov word [0x1191af0], ax
add eax, 0x47
pop esi
mov word [0x1191ada], bx
mov dword [0x1191adc], 0xdd8add9d
mov dword [0x1191ae2], 0xdd90dd9b
mov word [0x1191ae6], cx
mov dword [0x1191ae8], 0xdd81dd80
mov word [0x1191af2], ax
pop ebx
xor eax, eax
mov ecx, 0xddcf
xor cx, word [eax + 0x1191acc]
add eax, 2
mov word [eax + 0x1192292], cx
cmp eax, 0x28
jb 0x10fd81b
mov eax, 0x1192294
ret

Function at 0x10fd83c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192668], 1
jne 0x10fd8ed
mov eax, 0xdd87
mov word [0x1191af4], ax
add eax, 0xfffffffd
mov word [0x1191af6], ax
or dword [0x1192668], 1
mov edx, 0xdd8a
mov eax, edx
mov word [0x1191af8], ax
add eax, 0xc
mov word [0x1191afa], ax
lea ecx, [edx + 6]
mov eax, ecx
mov word [0x1191afc], ax
add eax, 0xfffffffc
mov word [0x1191afe], ax
lea eax, [edx - 7]
mov word [0x1191b00], ax
add eax, 0xb
mov word [0x1191b02], ax
lea eax, [edx + 0x12]
push edi
mov edi, eax
add eax, 0xffffffe4
mov ecx, eax
mov word [0x1191b12], ax
lea eax, [edx + 0x11]
mov word [0x1191b14], ax
add eax, 0x34
mov word [0x1191b04], di
mov word [0x1191b06], di
mov dword [0x1191b08], 0xdd9cdd8a
mov dword [0x1191b0c], 0xdd9ddd90
mov word [0x1191b10], cx
mov word [0x1191b16], ax
pop edi
xor eax, eax
mov ecx, 0xddcf
xor cx, word [eax + 0x1191af4]
add eax, 2
mov word [eax + 0x11922ba], cx
cmp eax, 0x24
jb 0x10fd8ef
mov eax, 0x11922bc
ret

Function at 0x10fdcbb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192650], 1
jne 0x10fdd10
or dword [0x1192650], 1
mov dword [0x1191ba0], 0x8ca8aa9d
mov dword [0x1191ba4], 0xbbaeaabd
mov dword [0x1191ba8], 0xb6aa84aa
mov dword [0x1191bac], 0xe6e7b78a
mov dword [0x1191bb0], 0xa6aea9ef
mov dword [0x1191bb4], 0xf5abaaa3
mov word [0x1191bb8], 0xcfef
xor eax, eax
mov cl, byte [eax + 0x1191ba0]
xor cl, 0xcf
mov byte [eax + 0x1192318], cl
inc eax
cmp eax, 0x1a
jb 0x10fdd12
mov eax, 0x1192318
ret

Function at 0x10fddf2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x119264c], 1
jne 0x10fde58
or dword [0x119264c], 1
mov dword [0x1191bbc], 0xa2baa18a
mov dword [0x1191bc0], 0xbbaebdaa
mov dword [0x1191bc4], 0xefa1a0a6
mov dword [0x1191bc8], 0xaaaba1a6
mov dword [0x1191bcc], 0xbaa0efb7
mov dword [0x1191bd0], 0xa9a0efbb
mov dword [0x1191bd4], 0xa1aebdef
mov word [0x1191bd8], 0xaaa8
mov byte [0x1191bda], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191bbc]
xor cl, 0xcf
mov byte [eax + 0x1192334], cl
inc eax
cmp eax, 0x1f
jb 0x10fde5a
mov eax, 0x1192334
ret
Function at 0x10fde75
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192648], 1
jne 0x10fdec1
or dword [0x1192648], 1
mov dword [0x1191bdc], 0x8aa8aa9d
mov dword [0x1191be0], 0x84a2baa1
mov dword [0x1191be4], 0xb78ab6aa
mov dword [0x1191be8], 0xa9efe6e7
mov dword [0x1191bec], 0xaaa3a6ae
mov dword [0x1191bf0], 0xcfeff5ab
xor eax, eax
mov cl, byte [eax + 0x1191bdc]
xor cl, 0xcf
mov byte [eax + 0x1192354], cl
inc eax
cmp eax, 0x18
jb 0x10fdec3
mov eax, 0x1192354
ret

Function at 0x10fe026
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192644], 1
jne 0x10fe05b
or dword [0x1192644], 1
mov dword [0x1191bf4], 0xa3a3ba81
mov dword [0x1191bf8], 0xa1a0acef
mov dword [0x1191bfc], 0xbbb7aabb
mov byte [0x1191c00], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191bf4]
xor cl, 0xcf
mov byte [eax + 0x119236c], cl
inc eax
cmp eax, 0xd
jb 0x10fe05d
mov eax, 0x119236c
ret

Function at 0x10fe078
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192640], 1
jne 0x10fe0c4
or dword [0x1192640], 1
mov dword [0x1191c04], 0x80a8aa9d
mov dword [0x1191c08], 0x84a1aabf
mov dword [0x1191c0c], 0xb78ab6aa
mov dword [0x1191c10], 0xa9efe6e7
mov dword [0x1191c14], 0xaaa3a6ae
mov dword [0x1191c18], 0xcfeff5ab
xor eax, eax
mov cl, byte [eax + 0x1191c04]
xor cl, 0xcf
mov byte [eax + 0x119237c], cl
inc eax
cmp eax, 0x18
jb 0x10fe0c6
mov eax, 0x119237c
ret

Function at 0x10fe0e1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x119263c], 1
jne 0x10fe13d
or dword [0x119263c], 1
mov dword [0x1191c1c], 0x9ea8aa9d
mov dword [0x1191c20], 0xb6bdaaba
mov dword [0x1191c24], 0xa0a9a186
mov dword [0x1191c28], 0xe7b6aa84
mov dword [0x1191c2c], 0xaea9efe6
mov dword [0x1191c30], 0xabaaa3a6
mov word [0x1191c34], 0xeff5
mov byte [0x1191c36], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191c1c]
xor cl, 0xcf
mov byte [eax + 0x1192394], cl
inc eax
cmp eax, 0x1b
jb 0x10fe13f
mov eax, 0x1192394
ret

Function at 0x10fe230
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192638], 1
jne 0x10fe296
or dword [0x1192638], 1
mov dword [0x1191c38], 0xa2baa18a
mov dword [0x1191c3c], 0xbbaebdaa
mov dword [0x1191c40], 0xefa1a0a6
mov dword [0x1191c44], 0xaaaba1a6
mov dword [0x1191c48], 0xbaa0efb7
mov dword [0x1191c4c], 0xa9a0efbb
mov dword [0x1191c50], 0xa1aebdef
mov word [0x1191c54], 0xaaa8
mov byte [0x1191c56], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191c38]
xor cl, 0xcf
mov byte [eax + 0x11923b0], cl
inc eax
cmp eax, 0x1f
jb 0x10fe298
mov eax, 0x11923b0
ret

Function at 0x10fe2b3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192634], 1
jne 0x10fe30f
or dword [0x1192634], 1
mov dword [0x1191c58], 0x9ea8aa9d
mov dword [0x1191c5c], 0xb6bdaaba
mov dword [0x1191c60], 0xa0a9a186
mov dword [0x1191c64], 0xe7b6aa84
mov dword [0x1191c68], 0xaea9efe6
mov dword [0x1191c6c], 0xabaaa3a6
mov word [0x1191c70], 0xeff5
mov byte [0x1191c72], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191c58]
xor cl, 0xcf
mov byte [eax + 0x11923d0], cl
inc eax
cmp eax, 0x1b
jb 0x10fe311
mov eax, 0x11923d0
ret
Function at 0x10fe471
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192630], 1
jne 0x10fe4a6
or dword [0x1192630], 1
mov dword [0x1191c74], 0xa3a3ba81
mov dword [0x1191c78], 0xa1a0acef
mov dword [0x1191c7c], 0xbbb7aabb
mov byte [0x1191c80], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191c74]
xor cl, 0xcf
mov byte [eax + 0x11923ec], cl
inc eax
cmp eax, 0xd
jb 0x10fe4a8
mov eax, 0x11923ec
ret

Function at 0x10fe4c3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x119262c], 1
jne 0x10fe50f
or dword [0x119262c], 1
mov dword [0x1191c84], 0x80a8aa9d
mov dword [0x1191c88], 0x84a1aabf
mov dword [0x1191c8c], 0xb78ab6aa
mov dword [0x1191c90], 0xa9efe6e7
mov dword [0x1191c94], 0xaaa3a6ae
mov dword [0x1191c98], 0xcfeff5ab
xor eax, eax
mov cl, byte [eax + 0x1191c84]
xor cl, 0xcf
mov byte [eax + 0x11923fc], cl
inc eax
cmp eax, 0x18
jb 0x10fe511
mov eax, 0x11923fc
ret

Function at 0x10fe52c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192628], 1
jne 0x10fe588
or dword [0x1192628], 1
mov dword [0x1191c9c], 0x9ea8aa9d
mov dword [0x1191ca0], 0xb6bdaaba
mov dword [0x1191ca4], 0xa0a9a186
mov dword [0x1191ca8], 0xe7b6aa84
mov dword [0x1191cac], 0xaea9efe6
mov dword [0x1191cb0], 0xabaaa3a6
mov word [0x1191cb4], 0xeff5
mov byte [0x1191cb6], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191c9c]
xor cl, 0xcf
mov byte [eax + 0x1192414], cl
inc eax
cmp eax, 0x1b
jb 0x10fe58a
mov eax, 0x1192414
ret

Function at 0x10fe836
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192624], 1
mov ecx, 0xddcf
jne 0x10fe8a2
or dword [0x1192624], 1
lea eax, [ecx + 0x18]
mov word [0x1191cb8], ax
add eax, 0xffffffa4
mov word [0x1191cba], ax
lea eax, [ecx - 0x25]
mov word [0x1191cbc], ax
dec eax
mov word [0x1191cbe], ax
lea eax, [ecx - 0x21]
mov word [0x1191cc0], ax
add eax, 0xc
mov word [0x1191cc2], ax
lea eax, [ecx - 0x2c]
mov word [0x1191cc4], ax
add eax, 0x18
mov word [0x1191cc6], ax
lea eax, [ecx + 0x17]
mov word [0x1191cc8], ax
mov eax, ecx
mov word [0x1191cca], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x1191cb8]
add eax, 2
mov word [eax + 0x119242e], dx
cmp eax, 0x14
jb 0x10fe8a4
mov eax, 0x1192430
ret

Function at 0x10fe8c2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192620], 1
mov ecx, 0xddcf
jne 0x10fe92e
or dword [0x1192620], 1
lea eax, [ecx + 0x18]
mov word [0x1191ccc], ax
add eax, 0xffffffc4
mov word [0x1191cce], ax
lea eax, [ecx - 0x25]
mov word [0x1191cd0], ax
dec eax
mov word [0x1191cd2], ax
lea eax, [ecx - 0x21]
mov word [0x1191cd4], ax
add eax, 0xc
mov word [0x1191cd6], ax
lea eax, [ecx - 0x2c]
mov word [0x1191cd8], ax
add eax, 0x18
mov word [0x1191cda], ax
lea eax, [ecx + 0x17]
mov word [0x1191cdc], ax
mov eax, ecx
mov word [0x1191cde], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x1191ccc]
add eax, 2
mov word [eax + 0x1192442], dx
cmp eax, 0x14
jb 0x10fe930
mov eax, 0x1192444
ret
Function at 0x10fe94e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x119261c], 1
jne 0x10fe99a
or dword [0x119261c], 1
mov dword [0x1191ce0], 0x80a8aa9d
mov dword [0x1191ce4], 0x84a1aabf
mov dword [0x1191ce8], 0xb78ab6aa
mov dword [0x1191cec], 0xa9efe6e7
mov dword [0x1191cf0], 0xaaa3a6ae
mov dword [0x1191cf4], 0xcfeff5ab
xor eax, eax
mov cl, byte [eax + 0x1191ce0]
xor cl, 0xcf
mov byte [eax + 0x1192458], cl
inc eax
cmp eax, 0x18
jb 0x10fe99c
mov eax, 0x1192458
ret

Function at 0x10fe9b7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192618], 1
jne 0x10fea13
or dword [0x1192618], 1
mov dword [0x1191cf8], 0x9ea8aa9d
mov dword [0x1191cfc], 0xb6bdaaba
mov dword [0x1191d00], 0xbaa3ae99
mov dword [0x1191d04], 0xe7b78aaa
mov dword [0x1191d08], 0xaea9efe6
mov dword [0x1191d0c], 0xabaaa3a6
mov word [0x1191d10], 0xeff5
mov byte [0x1191d12], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191cf8]
xor cl, 0xcf
mov byte [eax + 0x1192470], cl
inc eax
cmp eax, 0x1b
jb 0x10fea15
mov eax, 0x1192470
ret

Function at 0x10fea30
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192614], 1
jne 0x10fea8c
or dword [0x1192614], 1
mov dword [0x1191d14], 0x9ea8aa9d
mov dword [0x1191d18], 0xb6bdaaba
mov dword [0x1191d1c], 0xbaa3ae99
mov dword [0x1191d20], 0xe7b78aaa
mov dword [0x1191d24], 0xaea9efe6
mov dword [0x1191d28], 0xabaaa3a6
mov word [0x1191d2c], 0xeff5
mov byte [0x1191d2e], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191d14]
xor cl, 0xcf
mov byte [eax + 0x119248c], cl
inc eax
cmp eax, 0x1b
jb 0x10fea8e
mov eax, 0x119248c
ret

Function at 0x10fec08
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192610], 1
jne 0x10fec54
or dword [0x1192610], 1
mov dword [0x1191d30], 0x80a8aa9d
mov dword [0x1191d34], 0x84a1aabf
mov dword [0x1191d38], 0xb78ab6aa
mov dword [0x1191d3c], 0xa9efe6e7
mov dword [0x1191d40], 0xaaa3a6ae
mov dword [0x1191d44], 0xcfeff5ab
xor eax, eax
mov cl, byte [eax + 0x1191d30]
xor cl, 0xcf
mov byte [eax + 0x11924a8], cl
inc eax
cmp eax, 0x18
jb 0x10fec56
mov eax, 0x11924a8
ret

Function at 0x10fec71
Capabilities:
Encode data using xor

Disassembly:
test byte [0x119260c], 1
jne 0x10fecd7
or dword [0x119260c], 1
mov dword [0x1191d48], 0x9ca8aa9d
mov dword [0x1191d4c], 0xae99bbaa
mov dword [0x1191d50], 0x8aaabaa3
mov dword [0x1191d54], 0xbbbce7b7
mov dword [0x1191d58], 0xa8a1a6bd
mov dword [0x1191d5c], 0xaea9efe6
mov dword [0x1191d60], 0xabaaa3a6
mov word [0x1191d64], 0xeff5
mov byte [0x1191d66], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191d48]
xor cl, 0xcf
mov byte [eax + 0x11924c0], cl
inc eax
cmp eax, 0x1f
jb 0x10fecd9
mov eax, 0x11924c0
ret

Function at 0x10fee43
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192608], 1
jne 0x10fee8f
or dword [0x1192608], 1
mov dword [0x1191d68], 0x80a8aa9d
mov dword [0x1191d6c], 0x84a1aabf
mov dword [0x1191d70], 0xb78ab6aa
mov dword [0x1191d74], 0xa9efe6e7
mov dword [0x1191d78], 0xaaa3a6ae
mov dword [0x1191d7c], 0xcfeff5ab
xor eax, eax
mov cl, byte [eax + 0x1191d68]
xor cl, 0xcf
mov byte [eax + 0x11924e0], cl
inc eax
cmp eax, 0x18
jb 0x10fee91
mov eax, 0x11924e0
ret
Function at 0x10feeac
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192604], 1
jne 0x10fef0b
or dword [0x1192604], 1
mov dword [0x1191d80], 0x9ca8aa9d
mov dword [0x1191d84], 0xae99bbaa
mov dword [0x1191d88], 0x8aaabaa3
mov dword [0x1191d8c], 0xb8abe7b7
mov dword [0x1191d90], 0xe6abbda0
mov dword [0x1191d94], 0xa6aea9ef
mov dword [0x1191d98], 0xf5abaaa3
mov word [0x1191d9c], 0xcfef
xor eax, eax
mov cl, byte [eax + 0x1191d80]
xor cl, 0xcf
mov byte [eax + 0x11924f8], cl
inc eax
cmp eax, 0x1e
jb 0x10fef0d
mov eax, 0x11924f8
ret

Function at 0x10ff078
Capabilities:
Encode data using xor

Disassembly:
test byte [0x1192600], 1
jne 0x10ff0f2
or dword [0x1192600], 1
mov dword [0x1191da0], 0xbbbcba82
mov dword [0x1191da4], 0xaabfbcef
mov dword [0x1191da8], 0xb6a9a6ac
mov dword [0x1191dac], 0xa1efaeef
mov dword [0x1191db0], 0xaae2a1a0
mov dword [0x1191db4], 0xb6bbbfa2
mov dword [0x1191db8], 0xadbabcef
mov dword [0x1191dbc], 0xefb6aaa4
mov dword [0x1191dc0], 0xa6bdbbbc
mov word [0x1191dc4], 0xa8a1
mov byte [0x1191dc6], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191da0]
xor cl, 0xcf
mov byte [eax + 0x1192518], cl
inc eax
cmp eax, 0x27
jb 0x10ff0f4
mov eax, 0x1192518
ret

Function at 0x10ff10f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11925fc], 1
jne 0x10ff15b
or dword [0x11925fc], 1
mov dword [0x1191dc8], 0x80a8aa9d
mov dword [0x1191dcc], 0x84a1aabf
mov dword [0x1191dd0], 0xb78ab6aa
mov dword [0x1191dd4], 0xa9efe6e7
mov dword [0x1191dd8], 0xaaa3a6ae
mov dword [0x1191ddc], 0xcfeff5ab
xor eax, eax
mov cl, byte [eax + 0x1191dc8]
xor cl, 0xcf
mov byte [eax + 0x1192540], cl
inc eax
cmp eax, 0x18
jb 0x10ff15d
mov eax, 0x1192540
ret

Function at 0x10ff178
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11925f8], 1
jne 0x10ff1ca
or dword [0x11925f8], 1
mov dword [0x1191de0], 0xaa8b879c
mov dword [0x1191de4], 0xaabbaaa3
mov dword [0x1191de8], 0xe7b6aa84
mov dword [0x1191dec], 0xaea9efe6
mov dword [0x1191df0], 0xabaaa3a6
mov word [0x1191df4], 0xeff5
mov byte [0x1191df6], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191de0]
xor cl, 0xcf
mov byte [eax + 0x1192558], cl
inc eax
cmp eax, 0x17
jb 0x10ff1cc
mov eax, 0x1192558
ret

Function at 0x10ff319
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11925f4], 1
jne 0x10ff365
or dword [0x11925f4], 1
mov dword [0x1191df8], 0x80a8aa9d
mov dword [0x1191dfc], 0x84a1aabf
mov dword [0x1191e00], 0xb78ab6aa
mov dword [0x1191e04], 0xa9efe6e7
mov dword [0x1191e08], 0xaaa3a6ae
mov dword [0x1191e0c], 0xcfeff5ab
xor eax, eax
mov cl, byte [eax + 0x1191df8]
xor cl, 0xcf
mov byte [eax + 0x1192570], cl
inc eax
cmp eax, 0x18
jb 0x10ff367
mov eax, 0x1192570
ret

Function at 0x10ff382
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11925f0], 1
jne 0x10ff3d5
or dword [0x11925f0], 1
mov dword [0x1191e10], 0xaa8b879c
mov dword [0x1191e14], 0xaabbaaa3
mov dword [0x1191e18], 0xbaa3ae99
mov dword [0x1191e1c], 0xefe6e7aa
mov dword [0x1191e20], 0xa3a6aea9
mov dword [0x1191e24], 0xeff5abaa
mov byte [0x1191e28], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191e10]
xor cl, 0xcf
mov byte [eax + 0x1192588], cl
inc eax
cmp eax, 0x19
jb 0x10ff3d7
mov eax, 0x1192588
ret
Function at 0x10ff6ae
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11925ec], 1
jne 0x10ff769
or dword [0x11925ec], 1
mov dword [0x1191e30], 0x8b8c8d8e
mov dword [0x1191e34], 0x8788898a
mov dword [0x1191e38], 0x83848586
mov dword [0x1191e3c], 0x9f808182
mov dword [0x1191e40], 0x9b9c9d9e
mov dword [0x1191e44], 0x9798999a
mov dword [0x1191e48], 0xadae9596
mov dword [0x1191e4c], 0xa9aaabac
mov dword [0x1191e50], 0xa5a6a7a8
mov dword [0x1191e54], 0xa1a2a3a4
mov dword [0x1191e58], 0xbdbebfa0
mov dword [0x1191e5c], 0xb9babbbc
mov dword [0x1191e60], 0xb5b6b7b8
mov dword [0x1191e64], 0xfcfdfeff
mov dword [0x1191e68], 0xf8f9fafb
mov dword [0x1191e6c], 0xe0e4f6f7
mov byte [0x1191e70], 0xcf
xor eax, eax
mov cl, byte [eax + 0x1191e30]
xor cl, 0xcf
mov byte [eax + 0x11925a8], cl
inc eax
cmp eax, 0x41
jb 0x10ff76b
mov eax, 0x11925a8
ret

Function at 0x10ff816
Capabilities:
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, eax
xor edx, edx
push 3
lea eax, [ecx + 2]
pop ebx
div ebx
mov esi, dword [ebp + 0x10]
shl eax, 2
inc eax
cmp dword [esi], eax
jae 0x10ff840
mov dword [esi], eax
xor al, al
jmp 0x10ff918
mov eax, ecx
xor edx, edx
push 3
pop ecx
div ecx
mov esi, dword [ebp + 0xc]
mov ecx, dword [0x118c9b8]
xor edx, edx
imul eax, eax, 3
test eax, eax
je 0x10ff8bc
dec eax
push 3
pop ebx
div ebx
inc eax
mov edx, eax
mov dword [ebp - 4], eax
imul edx, edx, 3
movzx eax, byte [edi]
shr eax, 2
mov al, byte [eax + ecx]
mov byte [esi], al
movzx eax, byte [edi + 1]
movzx ebx, byte [edi]
shr eax, 4
shl ebx, 4
add eax, ebx
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 1], al
movzx eax, byte [edi + 2]
movzx ebx, byte [edi + 1]
shr eax, 6
lea eax, [eax + ebx*4]
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 2], al
movzx eax, byte [edi + 2]
and eax, 0x3f
mov al, byte [eax + ecx]
mov byte [esi + 3], al
add esi, 4
add edi, 3
dec dword [ebp - 4]
jne 0x10ff86a
cmp edx, dword [ebp + 8]
jae 0x10ff90b
movzx eax, byte [edi]
inc edx
cmp edx, dword [ebp + 8]
jae 0x10ff8d0
movzx edi, byte [edi + 1]
jmp 0x10ff8d2
xor edi, edi
mov ebx, eax
shr ebx, 2
and ebx, 0x3f
mov bl, byte [ebx + ecx]
mov byte [esi], bl
mov ebx, edi
shr ebx, 4
shl eax, 4
add ebx, eax
and ebx, 0x3f
mov al, byte [ebx + ecx]
mov byte [esi + 1], al
cmp edx, dword [ebp + 8]
jae 0x10ff8ff
and edi, 0xf
mov cl, byte [ecx + edi*4]
jmp 0x10ff901
mov cl, 0x3d
mov byte [esi + 2], cl
mov byte [esi + 3], 0x3d
add esi, 4
mov eax, dword [ebp + 0x10]
mov byte [esi], 0
sub esi, dword [ebp + 0xc]
mov dword [eax], esi
mov al, 1
pop edi
pop esi
pop ebx
leave
ret
Function at 0x1108bd0
Capabilities:
Encode data using xor

Disassembly:
mov cl, byte [edx]
mov eax, dword [eax + 0x1f0]
test cl, cl
je 0x1108bf2
lea esp, [esp]
imul eax, eax, 0xf4243
movzx ecx, cl
inc edx
xor eax, ecx
mov cl, byte [edx]
test cl, cl
jne 0x1108be0
ret