joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1039e42
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3cd8], 1
mov ecx, 0x91c6
jne 0x1039e71
or dword [0x10f3cd8], 1
lea eax, [ecx - 0x1f]
mov word [0x10ef0dc], ax
add eax, 0x4d
mov word [0x10ef0de], ax
mov eax, ecx
mov word [0x10ef0e0], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x10ef0dc]
add eax, 2
mov word [eax + 0x10ef6d2], dx
cmp eax, 6
jb 0x1039e73
mov eax, 0x10ef6d4
ret

Function at 0x1039e91
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3cd0], 1
jne 0x1039f01
or dword [0x10f3cd0], 1
mov dword [0x10ef0ec], 0xaaafa780
mov dword [0x10ef0f0], 0xb2e6a2a3
mov dword [0x10ef0f4], 0xa8afe6a9
mov dword [0x10ef0f8], 0xa7afb2af
mov dword [0x10ef0fc], 0xa3bcafaa
mov dword [0x10ef100], 0xb0a8a3e6
mov dword [0x10ef104], 0xa8a9b4af
mov dword [0x10ef108], 0xb2a8a3ab
mov word [0x10ef10c], 0xe6fc
mov byte [0x10ef10e], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10ef0ec]
xor cl, 0xc6
mov byte [eax + 0x10ef6e4], cl
inc eax
cmp eax, 0x23
jb 0x1039f03
mov eax, 0x10ef6e4
ret

Function at 0x1039f1e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3cc8], 1
jne 0x1039f69
or dword [0x10f3cc8], 1
mov dword [0x10ef118], 0xa7aea893
mov dword [0x10ef11c], 0xa3aaa2a8
mov dword [0x10ef120], 0xbea3e6a2
mov dword [0x10ef124], 0xb2b6a3a5
mov dword [0x10ef128], 0xfca8a9af
mov word [0x10ef12c], 0xc6e6
xor eax, eax
mov cl, byte [eax + 0x10ef118]
xor cl, 0xc6
mov byte [eax + 0x10ef710], cl
inc eax
cmp eax, 0x16
jb 0x1039f6b
mov eax, 0x10ef710
ret

Function at 0x1039f86
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3cc4], 1
jne 0x1039fd9
or dword [0x10f3cc4], 1
mov dword [0x10ef130], 0xa7aea893
mov dword [0x10ef134], 0xa3aaa2a8
mov dword [0x10ef138], 0xbea3e6a2
mov dword [0x10ef13c], 0xb2b6a3a5
mov dword [0x10ef140], 0xfca8a9af
mov dword [0x10ef144], 0xccb5e3e6
mov byte [0x10ef148], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10ef130]
xor cl, 0xc6
mov byte [eax + 0x10ef728], cl
inc eax
cmp eax, 0x19
jb 0x1039fdb
mov eax, 0x10ef728
ret

Function at 0x1039ff6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3cc0], 1
jne 0x103a02e
or dword [0x10f3cc0], 1
mov dword [0x10ef14c], 0xa4b3b295
mov dword [0x10ef150], 0xafbea3e6
mov dword [0x10ef154], 0xe3eee6b2
mov dword [0x10ef158], 0xc6ccefa2
xor eax, eax
mov cl, byte [eax + 0x10ef14c]
xor cl, 0xc6
mov byte [eax + 0x10ef744], cl
inc eax
cmp eax, 0x10
jb 0x103a030
mov eax, 0x10ef744
ret
Function at 0x103ba26
Capabilities:
Write file on windows

Disassembly:
mov eax, 0x10bb3f8
call fcn.010ba668
sub esp, 0x20
push ebx
xor ebx, ebx
cmp dword [edi + 0x44], ebx
je 0x103bb0a
cmp byte [edi + 0x49], bl
je 0x103bb0a
mov eax, dword [edi]
push 0xffffffffffffffff
mov ecx, edi
call dword [eax + 0xc]
cmp eax, 0xffffffff
jne 0x103ba5d
xor al, al
jmp 0x103bb0c
push esi
lea esi, [ebp - 0x2c]
call fcn.0103b51f
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x103baad
lea eax, [ebp - 0x2c]
mov edx, eax
mov ecx, dword [edi + 0x44]
mov esi, dword [ecx]
lea ebx, [ebp - 0x10]
push ebx
mov ebx, dword [ebp - 0x1c]
add eax, ebx
push eax
push edx
lea eax, [edi + 0x4c]
push eax
call dword [esi + 0x18]
sub eax, 0
je 0x103bab2
dec eax
je 0x103bab6
dec eax
dec eax
je 0x103bb06
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.01034cea
mov al, bl
pop esi
jmp 0x103bb0c
mov edx, dword [ebp - 0x2c]
jmp 0x103ba77
mov byte [edi + 0x49], 0
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x103bac2
lea eax, [ebp - 0x2c]
mov esi, dword [ebp - 0x10]
sub esi, eax
je 0x103bae8
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x103bad5
lea eax, [ebp - 0x2c]
push dword [edi + 0x54]
push esi
push 1
push eax
call fcn.0109616e
add esp, 0x10
cmp esi, eax
jne 0x103ba9a
cmp byte [edi + 0x49], 0
je 0x103bb06
test esi, esi
jne 0x103ba69
push esi
push 8
lea esi, [ebp - 0x2c]
call fcn.0103b5f8
jmp 0x103ba69
mov bl, 1
jmp 0x103ba9c
mov al, 1
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
leave
ret

Function at 0x10403b8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3cbc], 1
jne 0x104042c
or dword [0x10f3cbc], 1
mov dword [0x10ef764], 0xabb2a884
mov dword [0x10ef768], 0xa8a9e7a3
mov dword [0x10ef76c], 0xa2a0e7b3
mov dword [0x10ef770], 0xaea3e7b3
mov dword [0x10ef774], 0xa3aeb7b4
mov dword [0x10ef778], 0xe7a1a8e7
mov dword [0x10ef77c], 0xafb3a2aa
mov dword [0x10ef780], 0xe0e7a3a8
mov dword [0x10ef784], 0xababa6a4
mov dword [0x10ef788], 0xc7e7fde0
xor eax, eax
mov cl, byte [eax + 0x10ef764]
xor cl, 0xc7
mov byte [eax + 0x10ef8a8], cl
inc eax
cmp eax, 0x28
jb 0x104042e
mov eax, 0x10ef8a8
ret

Function at 0x1040449
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3cb8], 1
jne 0x10404b0
or dword [0x10f3cb8], 1
mov dword [0x10ef78c], 0xabaea681
mov dword [0x10ef790], 0xb3e7a3a2
mov dword [0x10ef794], 0xa9aee7a8
mov dword [0x10ef798], 0xa2aca8b1
mov dword [0x10ef79c], 0xb3a2aae7
mov dword [0x10ef7a0], 0xe7a3a8af
mov dword [0x10ef7a4], 0xaba6a4e0
mov dword [0x10ef7a8], 0xe7fde0ab
mov byte [0x10ef7ac], 0xc7
xor eax, eax
mov cl, byte [eax + 0x10ef78c]
xor cl, 0xc7
mov byte [eax + 0x10ef8d0], cl
inc eax
cmp eax, 0x21
jb 0x10404b2
mov eax, 0x10ef8d0
ret
Function at 0x10404cd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3cb4], 1
jne 0x104052d
or dword [0x10f3cb4], 1
mov dword [0x10ef7b0], 0xa8b597cd
mov dword [0x10ef7b4], 0xaba5a6a5
mov dword [0x10ef7b8], 0xb2a3e7be
mov dword [0x10ef7bc], 0xa8b3e7a2
mov dword [0x10ef7c0], 0xb5a4b4e7
mov dword [0x10ef7c4], 0xe7b3b7ae
mov dword [0x10ef7c8], 0xa8b5b5a2
mov dword [0x10ef7cc], 0xc7e7fdb5
xor eax, eax
mov cl, byte [eax + 0x10ef7b0]
xor cl, 0xc7
mov byte [eax + 0x10ef8f4], cl
inc eax
cmp eax, 0x20
jb 0x104052f
mov eax, 0x10ef8f4
ret

Function at 0x1040af5
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
and dword [ebp - 4], 0
cmp dword [ebp + 0xc], 0
push ebx
push esi
push edi
mov edi, eax
jbe 0x1040c3a
mov ebx, dword [ebp + 8]
push 4
sub ebx, edi
pop esi
test byte [0x10f3cb0], 1
jne 0x1040b57
or dword [0x10f3cb0], 1
mov eax, 0x91b4
mov word [0x10ef7d0], ax
add eax, 0xffffffee
mov word [0x10ef7d2], ax
mov eax, 0x91a9
mov word [0x10ef7d4], ax
add eax, 0xfffffffa
mov word [0x10ef7d6], ax
mov eax, 0x91c7
mov word [0x10ef7d8], ax
xor eax, eax
mov ecx, 0x91c7
xor cx, word [eax + 0x10ef7d0]
add eax, 2
mov word [eax + 0x10ef912], cx
cmp eax, 0xa
jb 0x1040b59
mov eax, dword [ebx + edi]
mov ecx, 0x10ef914
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1040ba0
test dx, dx
je 0x1040b9c
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1040ba0
add eax, esi
add ecx, esi
test dx, dx
jne 0x1040b7c
xor eax, eax
jmp 0x1040ba5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1040bb1
mov dword [edi], 0x385
jmp 0x1040c29
call fcn.01040c4a
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x1040bdd
test dx, dx
je 0x1040bd9
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x1040bdd
add ecx, esi
add eax, esi
test dx, dx
jne 0x1040bb9
xor eax, eax
jmp 0x1040be2
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1040bee
mov dword [edi], 0x386
jmp 0x1040c29
call fcn.01040d1d
mov ecx, dword [ebx + edi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x1040c1a
test dx, dx
je 0x1040c16
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x1040c1a
add ecx, esi
add eax, esi
test dx, dx
jne 0x1040bf6
xor eax, eax
jmp 0x1040c1f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1040c43
mov dword [edi], 0x387
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
add edi, esi
cmp eax, dword [ebp + 0xc]
jb 0x1040b14
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 8
mov eax, 0x80020006
jmp 0x1040c3c
Function at 0x1040c4a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3cac], 1
jne 0x1040cfa
or dword [0x10f3cac], 1
mov eax, 0x91a6
mov word [0x10ef7dc], ax
add eax, 0xfffffffd
mov ecx, eax
mov word [0x10ef7e0], ax
mov eax, 0x9182
mov word [0x10ef7e2], ax
add eax, 0x2f
mov word [0x10ef7e4], ax
mov eax, 0x91a2
mov word [0x10ef7de], cx
mov ecx, eax
lea edx, [eax + 7]
mov word [0x10ef7e6], cx
mov ecx, edx
push edi
mov word [0x10ef7e8], cx
add ecx, 0xa
mov edi, ecx
mov word [0x10ef7ea], di
lea edi, [eax - 0x17]
mov word [0x10ef7ec], di
add edi, 0x23
mov ecx, eax
add eax, 0x13
mov word [0x10ef7fa], ax
lea eax, [ecx + 0x25]
mov word [0x10ef7ee], di
mov dword [0x10ef7f0], 0x91b391b4
mov word [0x10ef7f4], cx
mov dword [0x10ef7f6], 0x91a291a9
mov word [0x10ef7fc], ax
pop edi
xor eax, eax
mov ecx, 0x91c7
xor cx, word [eax + 0x10ef7dc]
add eax, 2
mov word [eax + 0x10ef91e], cx
cmp eax, 0x22
jb 0x1040cfc
mov eax, 0x10ef920
ret

Function at 0x1040d1d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3ca8], 1
mov ecx, 0x91c7
jne 0x1040d77
or dword [0x10f3ca8], 1
lea eax, [ecx - 0x16]
mov word [0x10ef800], ax
add eax, 0xfffffff1
mov word [0x10ef802], ax
lea eax, [ecx - 0x12]
mov word [0x10ef804], ax
dec eax
mov word [0x10ef806], ax
lea eax, [ecx - 0x19]
mov word [0x10ef808], ax
add eax, 0xfffffffa
mov word [0x10ef80a], ax
lea eax, [ecx - 0x1e]
mov word [0x10ef80c], ax
mov eax, ecx
mov word [0x10ef80e], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x10ef800]
add eax, 2
mov word [eax + 0x10ef942], dx
cmp eax, 0x10
jb 0x1040d79
mov eax, 0x10ef944
ret

Function at 0x1041736
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3ca4], 1
mov edx, 0x91c7
jne 0x1041799
or dword [0x10f3ca4], 1
lea ecx, [edx - 0x25]
mov eax, ecx
mov word [0x10ef810], ax
add eax, 0x13
push esi
mov esi, eax
lea eax, [edx - 0x3c]
mov word [0x10ef81a], ax
add eax, 0x23
mov word [0x10ef81c], ax
mov eax, edx
mov word [0x10ef812], si
mov word [0x10ef814], si
mov dword [0x10ef816], 0x91b591a8
mov dword [0x10ef81e], 0x91a291a9
mov word [0x10ef822], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x10ef810]
add eax, 2
mov word [eax + 0x10ef952], cx
cmp eax, 0x14
jb 0x104179b
mov eax, 0x10ef954
ret

Function at 0x10417b9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3ca0], 1
jne 0x1041855
or dword [0x10f3ca0], 1
mov edx, 0x91a2
mov eax, edx
mov word [0x10ef824], ax
add eax, 0x13
mov ecx, eax
mov word [0x10ef826], cx
mov word [0x10ef828], cx
lea ecx, [edx + 6]
mov word [0x10ef82a], cx
mov ecx, eax
mov word [0x10ef82c], cx
lea ecx, [edx - 0x1e]
mov word [0x10ef82e], cx
add ecx, 0x2b
mov word [0x10ef830], cx
lea ecx, [edx + 4]
push edi
mov edi, ecx
mov word [0x10ef832], di
mov edi, eax
mov word [0x10ef836], cx
mov word [0x10ef83e], ax
add ecx, 0xfffffffe
lea eax, [edx + 0x25]
mov word [0x10ef834], di
mov word [0x10ef838], cx
mov dword [0x10ef83a], 0x91a291b3
mov word [0x10ef840], ax
pop edi
xor eax, eax
mov ecx, 0x91c7
xor cx, word [eax + 0x10ef824]
add eax, 2
mov word [eax + 0x10ef966], cx
cmp eax, 0x1e
jb 0x1041857
mov eax, 0x10ef968
ret
Function at 0x1041878
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c9c], 1
jne 0x10418d9
or dword [0x10f3c9c], 1
mov edx, 0x91a2
mov eax, edx
mov word [0x10ef844], ax
add eax, 0x13
mov ecx, eax
mov word [0x10ef846], cx
mov word [0x10ef848], cx
push edi
lea ecx, [edx + 6]
mov edi, ecx
mov word [0x10ef84c], ax
lea eax, [edx + 0x25]
mov word [0x10ef84a], di
mov dword [0x10ef84e], 0x91a89184
mov dword [0x10ef852], 0x91a291a3
mov word [0x10ef856], ax
pop edi
xor eax, eax
mov ecx, 0x91c7
xor cx, word [eax + 0x10ef844]
add eax, 2
mov word [eax + 0x10ef986], cx
cmp eax, 0x14
jb 0x10418db
mov eax, 0x10ef988
ret

Function at 0x10418fc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c98], 1
mov edx, 0x91c7
jne 0x1041979
or dword [0x10f3c98], 1
lea ecx, [edx - 0x25]
mov eax, ecx
mov word [0x10ef858], ax
add eax, 0x13
push esi
mov esi, eax
lea eax, [edx - 0x3d]
mov word [0x10ef862], ax
mov eax, ecx
mov word [0x10ef864], ax
add eax, 0x12
mov word [0x10ef85a], si
mov word [0x10ef85c], si
mov esi, eax
mov word [0x10ef868], ax
lea eax, [edx - 0x21]
mov word [0x10ef86a], ax
mov eax, edx
mov word [0x10ef866], si
mov dword [0x10ef85e], 0x91b591a8
mov dword [0x10ef86c], 0x91a291a0
mov word [0x10ef870], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x10ef858]
add eax, 2
mov word [eax + 0x10ef99a], cx
cmp eax, 0x1a
jb 0x104197b
mov eax, 0x10ef99c
ret

Function at 0x1041999
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c94], 1
mov ecx, 0x91c7
jne 0x10419f8
or dword [0x10f3c94], 1
lea eax, [ecx - 0x25]
mov word [0x10ef874], ax
add eax, 0x13
mov edx, eax
mov word [0x10ef876], dx
mov word [0x10ef878], dx
lea edx, [ecx - 0x1f]
mov word [0x10ef87a], dx
mov edx, eax
lea eax, [ecx - 0x1c]
mov word [0x10ef882], ax
mov eax, ecx
mov word [0x10ef87c], dx
mov dword [0x10ef87e], 0x91b59192
mov word [0x10ef884], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x10ef874]
add eax, 2
mov word [eax + 0x10ef9b6], dx
cmp eax, 0x12
jb 0x10419fa
mov eax, 0x10ef9b8
ret

Function at 0x104209d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c90], 1
jne 0x10420c7
or dword [0x10f3c90], 1
mov dword [0x10ef888], 0xabb2a9fb
mov word [0x10ef88c], 0xf9ab
mov byte [0x10ef88e], 0xc7
xor eax, eax
mov cl, byte [eax + 0x10ef888]
xor cl, 0xc7
mov byte [eax + 0x10ef9cc], cl
inc eax
cmp eax, 7
jb 0x10420c9
mov eax, 0x10ef9cc
ret

Function at 0x10420e4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c8c], 1
jne 0x104210e
or dword [0x10f3c8c], 1
mov dword [0x10ef890], 0xabb2a9fb
mov word [0x10ef894], 0xf9ab
mov byte [0x10ef896], 0xc7
xor eax, eax
mov cl, byte [eax + 0x10ef890]
xor cl, 0xc7
mov byte [eax + 0x10ef9d4], cl
inc eax
cmp eax, 7
jb 0x1042110
mov eax, 0x10ef9d4
ret

Function at 0x104212b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c84], 1
jne 0x104214f
or dword [0x10f3c84], 1
mov dword [0x10ef89c], 0xa8a49ce7
mov dword [0x10ef8a0], 0xc7faa2a3
xor eax, eax
mov cl, byte [eax + 0x10ef89c]
xor cl, 0xc7
mov byte [eax + 0x10ef9e0], cl
inc eax
cmp eax, 8
jb 0x1042151
mov eax, 0x10ef9e0
ret
Function at 0x1042e45
Capabilities:
Encode data using xor

Disassembly:
push esi
push edi
push 0x31
pop ecx
mov esi, 0x10c3ae8
mov edi, 0x10f4040
push 0x10c3bac
rep movsd dword es:[edi], dword [esi]
call fcn.0107b010
pop ecx
pop edi
pop esi
cmp eax, 0xffffffff
jne 0x1042e6b
xor al, al
ret
push 0x10c3c18
call fcn.0107af60
pop ecx
cmp eax, 0xffffffff
je 0x1042e68
push 0x10c3d20
call fcn.010799d0
pop ecx
cmp eax, 0xffffffff
je 0x1042e68
test byte [0x10f3c78], 1
jne 0x1042eac
or dword [0x10f3c78], 1
mov dword [0x10efa00], 0xf9a9a0bb
mov byte [0x10efa04], 0xc8
xor eax, eax
mov cl, byte [eax + 0x10efa00]
xor cl, 0xc8
mov byte [eax + 0x10efacc], cl
inc eax
cmp eax, 5
jb 0x1042eae
push 0x10efacc
call fcn.0107b080
pop ecx
mov dword [0x10e9928], eax
test eax, eax
js 0x1042e68
call fcn.01042f37
push eax
call fcn.01079a40
pop ecx
mov dword [0x10e992c], eax
test eax, eax
js 0x1042e68
test byte [0x10f3c70], 1
jne 0x1042f0a
or dword [0x10f3c70], 1
mov dword [0x10efa10], 0xc8bbada9
xor eax, eax
mov cl, byte [eax + 0x10efa10]
xor cl, 0xc8
mov byte [eax + 0x10efadc], cl
inc eax
cmp eax, 4
jb 0x1042f0c
push 0x10efadc
call fcn.0107afd0
test eax, eax
mov dword [0x10e9930], eax
pop ecx
setns al
ret

Function at 0x1042f37
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c74], 1
jne 0x1042f5b
or dword [0x10f3c74], 1
mov dword [0x10efa08], 0xbcbaa7ae
mov dword [0x10efa0c], 0xc8a9a6bd
xor eax, eax
mov cl, byte [eax + 0x10efa08]
xor cl, 0xc8
mov byte [eax + 0x10efad4], cl
inc eax
cmp eax, 8
jb 0x1042f5d
mov eax, 0x10efad4
ret

Function at 0x10431de
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c6c], 1
jne 0x104321c
or dword [0x10f3c6c], 1
mov dword [0x10efa14], 0xa1e8b8a5
mov dword [0x10efa18], 0xe8bca1a6
mov dword [0x10efa1c], 0xa4a1a9ae
mov word [0x10efa20], 0xacad
mov byte [0x10efa22], 0xc8
xor eax, eax
mov cl, byte [eax + 0x10efa14]
xor cl, 0xc8
mov byte [eax + 0x10efae0], cl
inc eax
cmp eax, 0xf
jb 0x104321e
mov eax, 0x10efae0
ret

Function at 0x1043239
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c68], 1
jne 0x1043277
or dword [0x10f3c68], 1
mov dword [0x10efa24], 0xa1e8b8a5
mov dword [0x10efa28], 0xe8bca1a6
mov dword [0x10efa2c], 0xa4a1a9ae
mov word [0x10efa30], 0xacad
mov byte [0x10efa32], 0xc8
xor eax, eax
mov cl, byte [eax + 0x10efa24]
xor cl, 0xc8
mov byte [eax + 0x10efaf0], cl
inc eax
cmp eax, 0xf
jb 0x1043279
mov eax, 0x10efaf0
ret

Function at 0x1043294
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c64], 1
jne 0x10432d2
or dword [0x10f3c64], 1
mov dword [0x10efa34], 0x97bcadbb
mov dword [0x10efa38], 0xe8bca6a1
mov dword [0x10efa3c], 0xa4a1a9ae
mov word [0x10efa40], 0xacad
mov byte [0x10efa42], 0xc8
xor eax, eax
mov cl, byte [eax + 0x10efa34]
xor cl, 0xc8
mov byte [eax + 0x10efb00], cl
inc eax
cmp eax, 0xf
jb 0x10432d4
mov eax, 0x10efb00
ret
Function at 0x10432ef
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c60], 1
jne 0x1043338
or dword [0x10f3c60], 1
mov dword [0x10efa44], 0xa1bba6bd
mov dword [0x10efa48], 0xacada6af
mov dword [0x10efa4c], 0xa9adba97
mov dword [0x10efa50], 0xa9aee8ac
mov dword [0x10efa54], 0xacada4a1
mov byte [0x10efa58], 0xc8
xor eax, eax
mov cl, byte [eax + 0x10efa44]
xor cl, 0xc8
mov byte [eax + 0x10efb10], cl
inc eax
cmp eax, 0x15
jb 0x104333a
mov eax, 0x10efb10
ret

Function at 0x1043355
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c5c], 1
jne 0x1043394
or dword [0x10f3c5c], 1
mov dword [0x10efa5c], 0xafa6bab8
mov dword [0x10efa60], 0xa3a9a5e8
mov dword [0x10efa64], 0xa9aee8ad
mov dword [0x10efa68], 0xacada4a1
mov byte [0x10efa6c], 0xc8
xor eax, eax
mov cl, byte [eax + 0x10efa5c]
xor cl, 0xc8
mov byte [eax + 0x10efb28], cl
inc eax
cmp eax, 0x11
jb 0x1043396
mov eax, 0x10efb28
ret

Function at 0x10433b1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c58], 1
jne 0x10433f3
or dword [0x10f3c58], 1
mov dword [0x10efa70], 0xbcbaa7ae
mov dword [0x10efa74], 0x97a9a6bd
mov dword [0x10efa78], 0xaca9adba
mov dword [0x10efa7c], 0xa1a9aee8
mov dword [0x10efa80], 0xc8acada4
xor eax, eax
mov cl, byte [eax + 0x10efa70]
xor cl, 0xc8
mov byte [eax + 0x10efb3c], cl
inc eax
cmp eax, 0x14
jb 0x10433f5
mov eax, 0x10efb3c
ret

Function at 0x1043410
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c54], 1
jne 0x1043458
or dword [0x10f3c54], 1
mov dword [0x10efa84], 0xb8b1baab
mov dword [0x10efa88], 0xa1e8a7bc
mov dword [0x10efa8c], 0xe8bca1a6
mov dword [0x10efa90], 0xa4a1a9ae
mov word [0x10efa94], 0xacad
mov byte [0x10efa96], 0xc8
xor eax, eax
mov cl, byte [eax + 0x10efa84]
xor cl, 0xc8
mov byte [eax + 0x10efb50], cl
inc eax
cmp eax, 0x13
jb 0x104345a
mov eax, 0x10efb50
ret

Function at 0x104366d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c50], 1
jne 0x1043690
or dword [0x10f3c50], 1
mov dword [0x10efa98], 0xacbbbba1
mov word [0x10efa9c], 0xc8a3
xor eax, eax
mov cl, byte [eax + 0x10efa98]
xor cl, 0xc8
mov byte [eax + 0x10efb64], cl
inc eax
cmp eax, 6
jb 0x1043692
mov eax, 0x10efb64
ret

Function at 0x10436ad
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c4c], 1
jne 0x10436da
or dword [0x10f3c4c], 1
mov dword [0x10efaa0], 0xaababda0
mov dword [0x10efaa4], 0xbabdaca9
mov word [0x10efaa8], 0xc8ba
xor eax, eax
mov cl, byte [eax + 0x10efaa0]
xor cl, 0xc8
mov byte [eax + 0x10efb6c], cl
inc eax
cmp eax, 0xa
jb 0x10436dc
mov eax, 0x10efb6c
ret

Function at 0x10437ba
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c48], 1
jne 0x10437e7
or dword [0x10f3c48], 1
mov dword [0x10efaac], 0xaababda0
mov dword [0x10efab0], 0xbabdaca9
mov word [0x10efab4], 0xc8ba
xor eax, eax
mov cl, byte [eax + 0x10efaac]
xor cl, 0xc8
mov byte [eax + 0x10efb78], cl
inc eax
cmp eax, 0xa
jb 0x10437e9
mov eax, 0x10efb78
ret
Function at 0x1043ed3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c44], 1
jne 0x1043f1b
or dword [0x10f3c44], 1
mov dword [0x10efb84], 0xb9b0bbaa
mov dword [0x10efb88], 0xa0e9a6bd
mov dword [0x10efb8c], 0xe9bda0a7
mov dword [0x10efb90], 0xa5a0a8af
mov word [0x10efb94], 0xadac
mov byte [0x10efb96], 0xc9
xor eax, eax
mov cl, byte [eax + 0x10efb84]
xor cl, 0xc9
mov byte [eax + 0x10efc98], cl
inc eax
cmp eax, 0x13
jb 0x1043f1d
mov eax, 0x10efc98
ret

Function at 0x1043f38
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c40], 1
jne 0x1043f80
or dword [0x10f3c40], 1
mov dword [0x10efb98], 0xb9b0bbaa
mov dword [0x10efb9c], 0xa0e9a6bd
mov dword [0x10efba0], 0xe9bda0a7
mov dword [0x10efba4], 0xa5a0a8af
mov word [0x10efba8], 0xadac
mov byte [0x10efbaa], 0xc9
xor eax, eax
mov cl, byte [eax + 0x10efb98]
xor cl, 0xc9
mov byte [eax + 0x10efcac], cl
inc eax
cmp eax, 0x13
jb 0x1043f82
mov eax, 0x10efcac
ret

Function at 0x1043fa0
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c38], 1
jne 0x1043fe8
or dword [0x10f3c38], 1
mov dword [0x10efbb4], 0xb9b0bbaa
mov dword [0x10efbb8], 0xa0e9a6bd
mov dword [0x10efbbc], 0xe9bda0a7
mov dword [0x10efbc0], 0xa5a0a8af
mov word [0x10efbc4], 0xadac
mov byte [0x10efbc6], 0xc9
xor eax, eax
mov cl, byte [eax + 0x10efbb4]
xor cl, 0xc9
mov byte [eax + 0x10efcc8], cl
inc eax
cmp eax, 0x13
jb 0x1043fea
mov eax, 0x10efcc8
ret

Function at 0x1044005
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c30], 1
jne 0x104404d
or dword [0x10f3c30], 1
mov dword [0x10efbcc], 0xb9b0bbaa
mov dword [0x10efbd0], 0xa0e9a6bd
mov dword [0x10efbd4], 0xe9bda0a7
mov dword [0x10efbd8], 0xa5a0a8af
mov word [0x10efbdc], 0xadac
mov byte [0x10efbde], 0xc9
xor eax, eax
mov cl, byte [eax + 0x10efbcc]
xor cl, 0xc9
mov byte [eax + 0x10efce0], cl
inc eax
cmp eax, 0x13
jb 0x104404f
mov eax, 0x10efce0
ret

Function at 0x104406a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c2c], 1
jne 0x10440a1
or dword [0x10f3c2c], 1
mov dword [0x10efbe0], 0xb9b0bbaa
mov dword [0x10efbe4], 0xafe9a6bd
mov dword [0x10efbe8], 0xaca5a0a8
mov word [0x10efbec], 0xc9ad
xor eax, eax
mov cl, byte [eax + 0x10efbe0]
xor cl, 0xc9
mov byte [eax + 0x10efcf4], cl
inc eax
cmp eax, 0xe
jb 0x10440a3
mov eax, 0x10efcf4
ret

Function at 0x10440be
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c28], 1
jne 0x10440f5
or dword [0x10f3c28], 1
mov dword [0x10efbf0], 0xb9b0bbaa
mov dword [0x10efbf4], 0xafe9a6bd
mov dword [0x10efbf8], 0xaca5a0a8
mov word [0x10efbfc], 0xc9ad
xor eax, eax
mov cl, byte [eax + 0x10efbf0]
xor cl, 0xc9
mov byte [eax + 0x10efd04], cl
inc eax
cmp eax, 0xe
jb 0x10440f7
mov eax, 0x10efd04
ret

Function at 0x1044112
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3c24], 1
jne 0x104413f
or dword [0x10f3c24], 1
mov dword [0x10efc00], 0xb9bbaca1
mov dword [0x10efc04], 0xbbacade2
mov word [0x10efc08], 0xc9b9
xor eax, eax
mov cl, byte [eax + 0x10efc00]
xor cl, 0xc9
mov byte [eax + 0x10efd14], cl
inc eax
cmp eax, 0xa
jb 0x1044141
mov eax, 0x10efd14
ret