joyce8/EMBER2024-capa huggingface dataset:
Function at 0x111baaa
Capabilities:
Write file on windows

Disassembly:
mov eax, 0x119aa3b
call fcn.01199c88
sub esp, 0x20
push ebx
xor ebx, ebx
cmp dword [edi + 0x44], ebx
je 0x111bb8e
cmp byte [edi + 0x49], bl
je 0x111bb8e
mov eax, dword [edi]
push 0xffffffffffffffff
mov ecx, edi
call dword [eax + 0xc]
cmp eax, 0xffffffff
jne 0x111bae1
xor al, al
jmp 0x111bb90
push esi
lea esi, [ebp - 0x2c]
call fcn.0111b5a3
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x111bb31
lea eax, [ebp - 0x2c]
mov edx, eax
mov ecx, dword [edi + 0x44]
mov esi, dword [ecx]
lea ebx, [ebp - 0x10]
push ebx
mov ebx, dword [ebp - 0x1c]
add eax, ebx
push eax
push edx
lea eax, [edi + 0x4c]
push eax
call dword [esi + 0x18]
sub eax, 0
je 0x111bb36
dec eax
je 0x111bb3a
dec eax
dec eax
je 0x111bb8a
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.01114ce5
mov al, bl
pop esi
jmp 0x111bb90
mov edx, dword [ebp - 0x2c]
jmp 0x111bafb
mov byte [edi + 0x49], 0
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x111bb46
lea eax, [ebp - 0x2c]
mov esi, dword [ebp - 0x10]
sub esi, eax
je 0x111bb6c
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x111bb59
lea eax, [ebp - 0x2c]
push dword [edi + 0x54]
push esi
push 1
push eax
call fcn.0117578e
add esp, 0x10
cmp esi, eax
jne 0x111bb1e
cmp byte [edi + 0x49], 0
je 0x111bb8a
test esi, esi
jne 0x111baed
push esi
push 8
lea esi, [ebp - 0x2c]
call fcn.0111b67c
jmp 0x111baed
mov bl, 1
jmp 0x111bb20
mov al, 1
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
leave
ret

Function at 0x11203f0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2bcc], 1
jne 0x1120464
or dword [0x11d2bcc], 1
mov dword [0x11ce724], 0xb8a1bb97
mov dword [0x11ce728], 0xbbbaf4b0
mov dword [0x11ce72c], 0xb1b3f4a0
mov dword [0x11ce730], 0xbdb0f4a0
mov dword [0x11ce734], 0xb0bda4a7
mov dword [0x11ce738], 0xf4b2bbf4
mov dword [0x11ce73c], 0xbca0b1b9
mov dword [0x11ce740], 0xf3f4b0bb
mov dword [0x11ce744], 0xb8b8b5b7
mov dword [0x11ce748], 0xd4f4eef3
xor eax, eax
mov cl, byte [eax + 0x11ce724]
xor cl, 0xd4
mov byte [eax + 0x11ce868], cl
inc eax
cmp eax, 0x28
jb 0x1120466
mov eax, 0x11ce868
ret

Function at 0x1120481
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2bc8], 1
jne 0x11204e8
or dword [0x11d2bc8], 1
mov dword [0x11ce74c], 0xb8bdb592
mov dword [0x11ce750], 0xa0f4b0b1
mov dword [0x11ce754], 0xbabdf4bb
mov dword [0x11ce758], 0xb1bfbba2
mov dword [0x11ce75c], 0xa0b1b9f4
mov dword [0x11ce760], 0xf4b0bbbc
mov dword [0x11ce764], 0xb8b5b7f3
mov dword [0x11ce768], 0xf4eef3b8
mov byte [0x11ce76c], 0xd4
xor eax, eax
mov cl, byte [eax + 0x11ce74c]
xor cl, 0xd4
mov byte [eax + 0x11ce890], cl
inc eax
cmp eax, 0x21
jb 0x11204ea
mov eax, 0x11ce890
ret
Function at 0x1120505
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2bc4], 1
jne 0x1120565
or dword [0x11d2bc4], 1
mov dword [0x11ce770], 0xbba684de
mov dword [0x11ce774], 0xb8b6b5b6
mov dword [0x11ce778], 0xa1b0f4ad
mov dword [0x11ce77c], 0xbba0f4b1
mov dword [0x11ce780], 0xa6b7a7f4
mov dword [0x11ce784], 0xf4a0a4bd
mov dword [0x11ce788], 0xbba6a6b1
mov dword [0x11ce78c], 0xd4f4eea6
xor eax, eax
mov cl, byte [eax + 0x11ce770]
xor cl, 0xd4
mov byte [eax + 0x11ce8b4], cl
inc eax
cmp eax, 0x20
jb 0x1120567
mov eax, 0x11ce8b4
ret

Function at 0x1120b2d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
and dword [ebp - 4], 0
cmp dword [ebp + 0xc], 0
push ebx
push esi
push edi
mov edi, eax
jbe 0x1120c72
mov ebx, dword [ebp + 8]
push 4
sub ebx, edi
pop esi
test byte [0x11d2bc0], 1
jne 0x1120b8f
or dword [0x11d2bc0], 1
mov eax, 0xcfa7
mov word [0x11ce790], ax
add eax, 0xa
mov word [0x11ce792], ax
mov eax, 0xcfba
mov word [0x11ce794], ax
add eax, 0xfffffff6
mov word [0x11ce796], ax
mov eax, 0xcfd4
mov word [0x11ce798], ax
xor eax, eax
mov ecx, 0xcfd4
xor cx, word [eax + 0x11ce790]
add eax, 2
mov word [eax + 0x11ce8d2], cx
cmp eax, 0xa
jb 0x1120b91
mov eax, dword [ebx + edi]
mov ecx, 0x11ce8d4
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1120bd8
test dx, dx
je 0x1120bd4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1120bd8
add eax, esi
add ecx, esi
test dx, dx
jne 0x1120bb4
xor eax, eax
jmp 0x1120bdd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1120be9
mov dword [edi], 0x385
jmp 0x1120c61
call fcn.01120c82
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x1120c15
test dx, dx
je 0x1120c11
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x1120c15
add ecx, esi
add eax, esi
test dx, dx
jne 0x1120bf1
xor eax, eax
jmp 0x1120c1a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1120c26
mov dword [edi], 0x386
jmp 0x1120c61
call fcn.01120d55
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x1120c52
test dx, dx
je 0x1120c4e
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x1120c52
add ecx, esi
add eax, esi
test dx, dx
jne 0x1120c2e
xor eax, eax
jmp 0x1120c57
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1120c7b
mov dword [edi], 0x387
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
add edi, esi
cmp eax, dword [ebp + 0xc]
jb 0x1120b4c
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 8
mov eax, 0x80020006
jmp 0x1120c74
Function at 0x1120c82
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2bbc], 1
jne 0x1120d32
or dword [0x11d2bbc], 1
mov eax, 0xcfb5
mov word [0x11ce79c], ax
add eax, 0xfffffffb
mov ecx, eax
mov word [0x11ce7a0], ax
mov eax, 0xcf91
mov word [0x11ce7a2], ax
add eax, 0x11
mov word [0x11ce7a4], ax
mov eax, 0xcfb1
mov word [0x11ce79e], cx
mov ecx, eax
lea edx, [eax + 9]
mov word [0x11ce7a6], cx
mov ecx, edx
push edi
mov word [0x11ce7a8], cx
add ecx, 0xffffffe6
mov edi, ecx
mov word [0x11ce7aa], di
lea edi, [eax - 0x19]
mov word [0x11ce7ac], di
add edi, 0x25
mov ecx, eax
add eax, 0xfffffff5
mov word [0x11ce7ba], ax
lea eax, [ecx + 0x23]
mov word [0x11ce7ae], di
mov dword [0x11ce7b0], 0xcfa0cfa7
mov word [0x11ce7b4], cx
mov dword [0x11ce7b6], 0xcfb1cfba
mov word [0x11ce7bc], ax
pop edi
xor eax, eax
mov ecx, 0xcfd4
xor cx, word [eax + 0x11ce79c]
add eax, 2
mov word [eax + 0x11ce8de], cx
cmp eax, 0x22
jb 0x1120d34
mov eax, 0x11ce8e0
ret

Function at 0x1120d55
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2bb8], 1
mov ecx, 0xcfd4
jne 0x1120daf
or dword [0x11d2bb8], 1
lea eax, [ecx - 0x32]
mov word [0x11ce7c0], ax
add eax, 0xf
mov word [0x11ce7c2], ax
lea eax, [ecx - 0x2e]
mov word [0x11ce7c4], ax
inc eax
mov word [0x11ce7c6], ax
lea eax, [ecx - 0x17]
mov word [0x11ce7c8], ax
add eax, 0xfffffffe
mov word [0x11ce7ca], ax
lea eax, [ecx - 0x1a]
mov word [0x11ce7cc], ax
mov eax, ecx
mov word [0x11ce7ce], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x11ce7c0]
add eax, 2
mov word [eax + 0x11ce902], dx
cmp eax, 0x10
jb 0x1120db1
mov eax, 0x11ce904
ret

Function at 0x112176e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2bb4], 1
mov edx, 0xcfd4
jne 0x11217d1
or dword [0x11d2bb4], 1
lea ecx, [edx - 0x23]
mov eax, ecx
mov word [0x11ce7d0], ax
add eax, 0xfffffff5
push esi
mov esi, eax
lea eax, [edx - 0x3c]
mov word [0x11ce7da], ax
add eax, 0x25
mov word [0x11ce7dc], ax
mov eax, edx
mov word [0x11ce7d2], si
mov word [0x11ce7d4], si
mov dword [0x11ce7d6], 0xcfa6cfbb
mov dword [0x11ce7de], 0xcfb1cfba
mov word [0x11ce7e2], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x11ce7d0]
add eax, 2
mov word [eax + 0x11ce912], cx
cmp eax, 0x14
jb 0x11217d3
mov eax, 0x11ce914
ret

Function at 0x11217f1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2bb0], 1
jne 0x112188d
or dword [0x11d2bb0], 1
mov edx, 0xcfb1
mov eax, edx
mov word [0x11ce7e4], ax
add eax, 0xfffffff5
mov ecx, eax
mov word [0x11ce7e6], cx
mov word [0x11ce7e8], cx
lea ecx, [edx + 0xa]
mov word [0x11ce7ea], cx
mov ecx, eax
mov word [0x11ce7ec], cx
lea ecx, [edx - 0x1a]
mov word [0x11ce7ee], cx
add ecx, 0x25
mov word [0x11ce7f0], cx
lea ecx, [edx + 4]
push edi
mov edi, ecx
mov word [0x11ce7f2], di
mov edi, eax
mov word [0x11ce7f6], cx
mov word [0x11ce7fe], ax
add ecx, 2
lea eax, [edx + 0x23]
mov word [0x11ce7f4], di
mov word [0x11ce7f8], cx
mov dword [0x11ce7fa], 0xcfb1cfa0
mov word [0x11ce800], ax
pop edi
xor eax, eax
mov ecx, 0xcfd4
xor cx, word [eax + 0x11ce7e4]
add eax, 2
mov word [eax + 0x11ce926], cx
cmp eax, 0x1e
jb 0x112188f
mov eax, 0x11ce928
ret
Function at 0x11218b0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2bac], 1
jne 0x1121911
or dword [0x11d2bac], 1
mov edx, 0xcfb1
mov eax, edx
mov word [0x11ce804], ax
add eax, 0xfffffff5
mov ecx, eax
mov word [0x11ce806], cx
mov word [0x11ce808], cx
push edi
lea ecx, [edx + 0xa]
mov edi, ecx
mov word [0x11ce80c], ax
lea eax, [edx + 0x23]
mov word [0x11ce80a], di
mov dword [0x11ce80e], 0xcfbbcf97
mov dword [0x11ce812], 0xcfb1cfb0
mov word [0x11ce816], ax
pop edi
xor eax, eax
mov ecx, 0xcfd4
xor cx, word [eax + 0x11ce804]
add eax, 2
mov word [eax + 0x11ce946], cx
cmp eax, 0x14
jb 0x1121913
mov eax, 0x11ce948
ret

Function at 0x1121934
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2ba8], 1
mov edx, 0xcfd4
jne 0x11219b1
or dword [0x11d2ba8], 1
lea ecx, [edx - 0x23]
mov eax, ecx
mov word [0x11ce818], ax
add eax, 0xfffffff5
push esi
mov esi, eax
lea eax, [edx - 0x3b]
mov word [0x11ce822], ax
mov eax, ecx
mov word [0x11ce824], ax
add eax, 0xfffffff6
mov word [0x11ce81a], si
mov word [0x11ce81c], si
mov esi, eax
mov word [0x11ce828], ax
lea eax, [edx - 0x1f]
mov word [0x11ce82a], ax
mov eax, edx
mov word [0x11ce826], si
mov dword [0x11ce81e], 0xcfa6cfbb
mov dword [0x11ce82c], 0xcfb1cfb3
mov word [0x11ce830], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x11ce818]
add eax, 2
mov word [eax + 0x11ce95a], cx
cmp eax, 0x1a
jb 0x11219b3
mov eax, 0x11ce95c
ret

Function at 0x11219d1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2ba4], 1
mov ecx, 0xcfd4
jne 0x1121a30
or dword [0x11d2ba4], 1
lea eax, [ecx - 0x23]
mov word [0x11ce834], ax
add eax, 0xfffffff5
mov edx, eax
mov word [0x11ce836], dx
mov word [0x11ce838], dx
lea edx, [ecx - 0x19]
mov word [0x11ce83a], dx
mov edx, eax
lea eax, [ecx - 0x1c]
mov word [0x11ce842], ax
mov eax, ecx
mov word [0x11ce83c], dx
mov dword [0x11ce83e], 0xcfa6cf81
mov word [0x11ce844], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x11ce834]
add eax, 2
mov word [eax + 0x11ce976], dx
cmp eax, 0x12
jb 0x1121a32
mov eax, 0x11ce978
ret

Function at 0x11220d5
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2ba0], 1
jne 0x11220ff
or dword [0x11d2ba0], 1
mov dword [0x11ce848], 0xb8a1bae8
mov word [0x11ce84c], 0xeab8
mov byte [0x11ce84e], 0xd4
xor eax, eax
mov cl, byte [eax + 0x11ce848]
xor cl, 0xd4
mov byte [eax + 0x11ce98c], cl
inc eax
cmp eax, 7
jb 0x1122101
mov eax, 0x11ce98c
ret

Function at 0x112211c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b9c], 1
jne 0x1122146
or dword [0x11d2b9c], 1
mov dword [0x11ce850], 0xb8a1bae8
mov word [0x11ce854], 0xeab8
mov byte [0x11ce856], 0xd4
xor eax, eax
mov cl, byte [eax + 0x11ce850]
xor cl, 0xd4
mov byte [eax + 0x11ce994], cl
inc eax
cmp eax, 7
jb 0x1122148
mov eax, 0x11ce994
ret

Function at 0x1122163
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b94], 1
jne 0x1122187
or dword [0x11d2b94], 1
mov dword [0x11ce85c], 0xbbb78ff4
mov dword [0x11ce860], 0xd4e9b1b0
xor eax, eax
mov cl, byte [eax + 0x11ce85c]
xor cl, 0xd4
mov byte [eax + 0x11ce9a0], cl
inc eax
cmp eax, 8
jb 0x1122189
mov eax, 0x11ce9a0
ret
Function at 0x1122ee0
Capabilities:
Encode data using xor

Disassembly:
push esi
push edi
push 0x31
pop ecx
mov esi, 0x11a2ac8
mov edi, 0x11d2f40
push 0x11a2b8c
rep movsd dword es:[edi], dword [esi]
call fcn.0115a630
pop ecx
pop edi
pop esi
cmp eax, 0xffffffff
jne 0x1122f06
xor al, al
ret
push 0x11a2bf8
call fcn.0115a580
pop ecx
cmp eax, 0xffffffff
je 0x1122f03
push 0x11a2d00
call fcn.01158ff0
pop ecx
cmp eax, 0xffffffff
je 0x1122f03
test byte [0x11d2b88], 1
jne 0x1122f47
or dword [0x11d2b88], 1
mov dword [0x11ce9c0], 0xe7b7bea5
mov byte [0x11ce9c4], 0xd6
xor eax, eax
mov cl, byte [eax + 0x11ce9c0]
xor cl, 0xd6
mov byte [eax + 0x11cea8c], cl
inc eax
cmp eax, 5
jb 0x1122f49
push 0x11cea8c
call fcn.0115a6a0
pop ecx
mov dword [0x11c8928], eax
test eax, eax
js 0x1122f03
call fcn.01122fd2
push eax
call fcn.01159060
pop ecx
mov dword [0x11c892c], eax
test eax, eax
js 0x1122f03
test byte [0x11d2b80], 1
jne 0x1122fa5
or dword [0x11d2b80], 1
mov dword [0x11ce9d0], 0xd6a5b3b7
xor eax, eax
mov cl, byte [eax + 0x11ce9d0]
xor cl, 0xd6
mov byte [eax + 0x11cea9c], cl
inc eax
cmp eax, 4
jb 0x1122fa7
push 0x11cea9c
call fcn.0115a5f0
test eax, eax
mov dword [0x11c8930], eax
pop ecx
setns al
ret

Function at 0x1122fd2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b84], 1
jne 0x1122ff6
or dword [0x11d2b84], 1
mov dword [0x11ce9c8], 0xa2a4b9b0
mov dword [0x11ce9cc], 0xd6b7b8a3
xor eax, eax
mov cl, byte [eax + 0x11ce9c8]
xor cl, 0xd6
mov byte [eax + 0x11cea94], cl
inc eax
cmp eax, 8
jb 0x1122ff8
mov eax, 0x11cea94
ret

Function at 0x1123276
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b7c], 1
jne 0x11232b4
or dword [0x11d2b7c], 1
mov dword [0x11ce9d4], 0xbff6a6bb
mov dword [0x11ce9d8], 0xf6a2bfb8
mov dword [0x11ce9dc], 0xbabfb7b0
mov word [0x11ce9e0], 0xb2b3
mov byte [0x11ce9e2], 0xd6
xor eax, eax
mov cl, byte [eax + 0x11ce9d4]
xor cl, 0xd6
mov byte [eax + 0x11ceaa0], cl
inc eax
cmp eax, 0xf
jb 0x11232b6
mov eax, 0x11ceaa0
ret

Function at 0x11232d1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b78], 1
jne 0x112330f
or dword [0x11d2b78], 1
mov dword [0x11ce9e4], 0xbff6a6bb
mov dword [0x11ce9e8], 0xf6a2bfb8
mov dword [0x11ce9ec], 0xbabfb7b0
mov word [0x11ce9f0], 0xb2b3
mov byte [0x11ce9f2], 0xd6
xor eax, eax
mov cl, byte [eax + 0x11ce9e4]
xor cl, 0xd6
mov byte [eax + 0x11ceab0], cl
inc eax
cmp eax, 0xf
jb 0x1123311
mov eax, 0x11ceab0
ret

Function at 0x112332c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b74], 1
jne 0x112336a
or dword [0x11d2b74], 1
mov dword [0x11ce9f4], 0x89a2b3a5
mov dword [0x11ce9f8], 0xf6a2b8bf
mov dword [0x11ce9fc], 0xbabfb7b0
mov word [0x11cea00], 0xb2b3
mov byte [0x11cea02], 0xd6
xor eax, eax
mov cl, byte [eax + 0x11ce9f4]
xor cl, 0xd6
mov byte [eax + 0x11ceac0], cl
inc eax
cmp eax, 0xf
jb 0x112336c
mov eax, 0x11ceac0
ret
Function at 0x1123387
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b70], 1
jne 0x11233d0
or dword [0x11d2b70], 1
mov dword [0x11cea04], 0xbfa5b8a3
mov dword [0x11cea08], 0xb2b3b8b1
mov dword [0x11cea0c], 0xb7b3a489
mov dword [0x11cea10], 0xb7b0f6b2
mov dword [0x11cea14], 0xb2b3babf
mov byte [0x11cea18], 0xd6
xor eax, eax
mov cl, byte [eax + 0x11cea04]
xor cl, 0xd6
mov byte [eax + 0x11cead0], cl
inc eax
cmp eax, 0x15
jb 0x11233d2
mov eax, 0x11cead0
ret

Function at 0x11233ed
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b6c], 1
jne 0x112342c
or dword [0x11d2b6c], 1
mov dword [0x11cea1c], 0xb1b8a4a6
mov dword [0x11cea20], 0xbdb7bbf6
mov dword [0x11cea24], 0xb7b0f6b3
mov dword [0x11cea28], 0xb2b3babf
mov byte [0x11cea2c], 0xd6
xor eax, eax
mov cl, byte [eax + 0x11cea1c]
xor cl, 0xd6
mov byte [eax + 0x11ceae8], cl
inc eax
cmp eax, 0x11
jb 0x112342e
mov eax, 0x11ceae8
ret

Function at 0x1123449
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b68], 1
jne 0x112348b
or dword [0x11d2b68], 1
mov dword [0x11cea30], 0xa2a4b9b0
mov dword [0x11cea34], 0x89b7b8a3
mov dword [0x11cea38], 0xb2b7b3a4
mov dword [0x11cea3c], 0xbfb7b0f6
mov dword [0x11cea40], 0xd6b2b3ba
xor eax, eax
mov cl, byte [eax + 0x11cea30]
xor cl, 0xd6
mov byte [eax + 0x11ceafc], cl
inc eax
cmp eax, 0x14
jb 0x112348d
mov eax, 0x11ceafc
ret

Function at 0x11234a8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b64], 1
jne 0x11234f0
or dword [0x11d2b64], 1
mov dword [0x11cea44], 0xa6afa4b5
mov dword [0x11cea48], 0xbff6b9a2
mov dword [0x11cea4c], 0xf6a2bfb8
mov dword [0x11cea50], 0xbabfb7b0
mov word [0x11cea54], 0xb2b3
mov byte [0x11cea56], 0xd6
xor eax, eax
mov cl, byte [eax + 0x11cea44]
xor cl, 0xd6
mov byte [eax + 0x11ceb10], cl
inc eax
cmp eax, 0x13
jb 0x11234f2
mov eax, 0x11ceb10
ret

Function at 0x1123705
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b60], 1
jne 0x1123728
or dword [0x11d2b60], 1
mov dword [0x11cea58], 0xb2a5a5bf
mov word [0x11cea5c], 0xd6bd
xor eax, eax
mov cl, byte [eax + 0x11cea58]
xor cl, 0xd6
mov byte [eax + 0x11ceb24], cl
inc eax
cmp eax, 6
jb 0x112372a
mov eax, 0x11ceb24
ret

Function at 0x1123745
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b5c], 1
jne 0x1123772
or dword [0x11d2b5c], 1
mov dword [0x11cea60], 0xb4a4a3be
mov dword [0x11cea64], 0xa4a3b2b7
mov word [0x11cea68], 0xd6a4
xor eax, eax
mov cl, byte [eax + 0x11cea60]
xor cl, 0xd6
mov byte [eax + 0x11ceb2c], cl
inc eax
cmp eax, 0xa
jb 0x1123774
mov eax, 0x11ceb2c
ret

Function at 0x1123852
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b58], 1
jne 0x112387f
or dword [0x11d2b58], 1
mov dword [0x11cea6c], 0xb4a4a3be
mov dword [0x11cea70], 0xa4a3b2b7
mov word [0x11cea74], 0xd6a4
xor eax, eax
mov cl, byte [eax + 0x11cea6c]
xor cl, 0xd6
mov byte [eax + 0x11ceb38], cl
inc eax
cmp eax, 0xa
jb 0x1123881
mov eax, 0x11ceb38
ret
Function at 0x1123f6b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b54], 1
jne 0x1123fb3
or dword [0x11d2b54], 1
mov dword [0x11ceb44], 0xa9a0abba
mov dword [0x11ceb48], 0xb0f9b6ad
mov dword [0x11ceb4c], 0xf9adb0b7
mov dword [0x11ceb50], 0xb5b0b8bf
mov word [0x11ceb54], 0xbdbc
mov byte [0x11ceb56], 0xd9
xor eax, eax
mov cl, byte [eax + 0x11ceb44]
xor cl, 0xd9
mov byte [eax + 0x11cec58], cl
inc eax
cmp eax, 0x13
jb 0x1123fb5
mov eax, 0x11cec58
ret

Function at 0x1123fd0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b50], 1
jne 0x1124018
or dword [0x11d2b50], 1
mov dword [0x11ceb58], 0xa9a0abba
mov dword [0x11ceb5c], 0xb0f9b6ad
mov dword [0x11ceb60], 0xf9adb0b7
mov dword [0x11ceb64], 0xb5b0b8bf
mov word [0x11ceb68], 0xbdbc
mov byte [0x11ceb6a], 0xd9
xor eax, eax
mov cl, byte [eax + 0x11ceb58]
xor cl, 0xd9
mov byte [eax + 0x11cec6c], cl
inc eax
cmp eax, 0x13
jb 0x112401a
mov eax, 0x11cec6c
ret

Function at 0x1124035
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b48], 1
jne 0x112407d
or dword [0x11d2b48], 1
mov dword [0x11ceb74], 0xa9a0abba
mov dword [0x11ceb78], 0xb0f9b6ad
mov dword [0x11ceb7c], 0xf9adb0b7
mov dword [0x11ceb80], 0xb5b0b8bf
mov word [0x11ceb84], 0xbdbc
mov byte [0x11ceb86], 0xd9
xor eax, eax
mov cl, byte [eax + 0x11ceb74]
xor cl, 0xd9
mov byte [eax + 0x11cec88], cl
inc eax
cmp eax, 0x13
jb 0x112407f
mov eax, 0x11cec88
ret

Function at 0x112409a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b40], 1
jne 0x11240e2
or dword [0x11d2b40], 1
mov dword [0x11ceb8c], 0xa9a0abba
mov dword [0x11ceb90], 0xb0f9b6ad
mov dword [0x11ceb94], 0xf9adb0b7
mov dword [0x11ceb98], 0xb5b0b8bf
mov word [0x11ceb9c], 0xbdbc
mov byte [0x11ceb9e], 0xd9
xor eax, eax
mov cl, byte [eax + 0x11ceb8c]
xor cl, 0xd9
mov byte [eax + 0x11ceca0], cl
inc eax
cmp eax, 0x13
jb 0x11240e4
mov eax, 0x11ceca0
ret

Function at 0x11240ff
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b3c], 1
jne 0x1124136
or dword [0x11d2b3c], 1
mov dword [0x11ceba0], 0xa9a0abba
mov dword [0x11ceba4], 0xbff9b6ad
mov dword [0x11ceba8], 0xbcb5b0b8
mov word [0x11cebac], 0xd9bd
xor eax, eax
mov cl, byte [eax + 0x11ceba0]
xor cl, 0xd9
mov byte [eax + 0x11cecb4], cl
inc eax
cmp eax, 0xe
jb 0x1124138
mov eax, 0x11cecb4
ret

Function at 0x1124153
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b38], 1
jne 0x112418a
or dword [0x11d2b38], 1
mov dword [0x11cebb0], 0xa9a0abba
mov dword [0x11cebb4], 0xbff9b6ad
mov dword [0x11cebb8], 0xbcb5b0b8
mov word [0x11cebbc], 0xd9bd
xor eax, eax
mov cl, byte [eax + 0x11cebb0]
xor cl, 0xd9
mov byte [eax + 0x11cecc4], cl
inc eax
cmp eax, 0xe
jb 0x112418c
mov eax, 0x11cecc4
ret

Function at 0x11241a7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b34], 1
jne 0x11241d4
or dword [0x11d2b34], 1
mov dword [0x11cebc0], 0xa9abbcb1
mov dword [0x11cebc4], 0xabbcbdf2
mov word [0x11cebc8], 0xd9a9
xor eax, eax
mov cl, byte [eax + 0x11cebc0]
xor cl, 0xd9
mov byte [eax + 0x11cecd4], cl
inc eax
cmp eax, 0xa
jb 0x11241d6
mov eax, 0x11cecd4
ret
Function at 0x11241f1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b30], 1
jne 0x1124228
or dword [0x11d2b30], 1
mov dword [0x11cebcc], 0xa9a0abba
mov dword [0x11cebd0], 0xbff9b6ad
mov dword [0x11cebd4], 0xbcb5b0b8
mov word [0x11cebd8], 0xd9bd
xor eax, eax
mov cl, byte [eax + 0x11cebcc]
xor cl, 0xd9
mov byte [eax + 0x11cece0], cl
inc eax
cmp eax, 0xe
jb 0x112422a
mov eax, 0x11cece0
ret

Function at 0x1124245
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b2c], 1
jne 0x112427c
or dword [0x11d2b2c], 1
mov dword [0x11cebdc], 0xa9a0abba
mov dword [0x11cebe0], 0xbff9b6ad
mov dword [0x11cebe4], 0xbcb5b0b8
mov word [0x11cebe8], 0xd9bd
xor eax, eax
mov cl, byte [eax + 0x11cebdc]
xor cl, 0xd9
mov byte [eax + 0x11cecf0], cl
inc eax
cmp eax, 0xe
jb 0x112427e
mov eax, 0x11cecf0
ret

Function at 0x112434a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b28], 1
jne 0x1124381
or dword [0x11d2b28], 1
mov dword [0x11cebec], 0xa9a0abba
mov dword [0x11cebf0], 0xbff9b6ad
mov dword [0x11cebf4], 0xbcb5b0b8
mov word [0x11cebf8], 0xd9bd
xor eax, eax
mov cl, byte [eax + 0x11cebec]
xor cl, 0xd9
mov byte [eax + 0x11ced00], cl
inc eax
cmp eax, 0xe
jb 0x1124383
mov eax, 0x11ced00
ret

Function at 0x1124530
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b24], 1
jne 0x1124567
or dword [0x11d2b24], 1
mov dword [0x11cebfc], 0xa9a0abba
mov dword [0x11cec00], 0xbff9b6ad
mov dword [0x11cec04], 0xbcb5b0b8
mov word [0x11cec08], 0xd9bd
xor eax, eax
mov cl, byte [eax + 0x11cebfc]
xor cl, 0xd9
mov byte [eax + 0x11ced10], cl
inc eax
cmp eax, 0xe
jb 0x1124569
mov eax, 0x11ced10
ret

Function at 0x1124584
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2b20], 1
jne 0x11245bb
or dword [0x11d2b20], 1
mov dword [0x11cec0c], 0xa9a0abba
mov dword [0x11cec10], 0xbff9b6ad
mov dword [0x11cec14], 0xbcb5b0b8
mov word [0x11cec18], 0xd9bd
xor eax, eax
mov cl, byte [eax + 0x11cec0c]
xor cl, 0xd9
mov byte [eax + 0x11ced20], cl
inc eax
cmp eax, 0xe
jb 0x11245bd
mov eax, 0x11ced20
ret