joyce8/EMBER2024-capa huggingface dataset:
Function at 0x112f89f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2870], 1
jne 0x112f8e7
or dword [0x11d2870], 1
mov dword [0x11d0434], 0x89cb84a5
mov dword [0x11d0438], 0x989c8499
mov dword [0x11d043c], 0x88cb998e
mov dword [0x11d0440], 0x8e9f8584
mov word [0x11d0444], 0x9f93
mov byte [0x11d0446], 0xeb
xor eax, eax
mov cl, byte [eax + 0x11d0434]
xor cl, 0xeb
mov byte [eax + 0x11d06c0], cl
inc eax
cmp eax, 0x13
jb 0x112f8e9
mov eax, 0x11d06c0
ret

Function at 0x112f95d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d286c], 1
jne 0x112f99e
or dword [0x11d286c], 1
mov dword [0x11d0448], 0x8ecb84a5
mov dword [0x11d044c], 0x8e868e87
mov dword [0x11d0450], 0x83cb9f85
mov dword [0x11d0454], 0x878f858a
mov word [0x11d0458], 0xeb8e
xor eax, eax
mov cl, byte [eax + 0x11d0448]
xor cl, 0xeb
mov byte [eax + 0x11d06d4], cl
inc eax
cmp eax, 0x12
jb 0x112f9a0
mov eax, 0x11d06d4
ret

Function at 0x112f9bb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2868], 1
jne 0x112f9fc
or dword [0x11d2868], 1
mov dword [0x11d045c], 0x8ecb84a5
mov dword [0x11d0460], 0x8e868e87
mov dword [0x11d0464], 0x83cb9f85
mov dword [0x11d0468], 0x878f858a
mov word [0x11d046c], 0xeb8e
xor eax, eax
mov cl, byte [eax + 0x11d045c]
xor cl, 0xeb
mov byte [eax + 0x11d06e8], cl
inc eax
cmp eax, 0x12
jb 0x112f9fe
mov eax, 0x11d06e8
ret

Function at 0x112fb2c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2864], 1
jne 0x112fb64
or dword [0x11d2864], 1
mov dword [0x11d0470], 0x829d8aa5
mov dword [0x11d0474], 0x8e9f8a8c
mov dword [0x11d0478], 0x828a8dcb
mov dword [0x11d047c], 0xeb8f8e87
xor eax, eax
mov cl, byte [eax + 0x11d0470]
xor cl, 0xeb
mov byte [eax + 0x11d06fc], cl
inc eax
cmp eax, 0x10
jb 0x112fb66
mov eax, 0x11d06fc
ret

Function at 0x11300b1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2860], 1
jne 0x11300fa
or dword [0x11d2860], 1
mov dword [0x11d0480], 0x8ecb84a5
mov dword [0x11d0484], 0x8e868e87
mov dword [0x11d0488], 0x9ccb9f85
mov dword [0x11d048c], 0xcb839f82
mov dword [0x11d0490], 0xcbd18f82
mov byte [0x11d0494], 0xeb
xor eax, eax
mov cl, byte [eax + 0x11d0480]
xor cl, 0xeb
mov byte [eax + 0x11d070c], cl
inc eax
cmp eax, 0x15
jb 0x11300fc
mov eax, 0x11d070c
ret

Function at 0x113022f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d285c], 1
jne 0x1130278
or dword [0x11d285c], 1
mov dword [0x11d0498], 0xb49f8e8c
mov dword [0x11d049c], 0x8e858582
mov dword [0x11d04a0], 0xa6bfa399
mov dword [0x11d04a4], 0x8a8dcba7
mov dword [0x11d04a8], 0x8f8e8782
mov byte [0x11d04ac], 0xeb
xor eax, eax
mov cl, byte [eax + 0x11d0498]
xor cl, 0xeb
mov byte [eax + 0x11d0724], cl
inc eax
cmp eax, 0x15
jb 0x113027a
mov eax, 0x11d0724
ret
Function at 0x11303ad
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2858], 1
jne 0x11303f6
or dword [0x11d2858], 1
mov dword [0x11d04b0], 0xb49f8e8c
mov dword [0x11d04b4], 0x8e9f9e84
mov dword [0x11d04b8], 0xa6bfa399
mov dword [0x11d04bc], 0x8a8dcba7
mov dword [0x11d04c0], 0x8f8e8782
mov byte [0x11d04c4], 0xeb
xor eax, eax
mov cl, byte [eax + 0x11d04b0]
xor cl, 0xeb
mov byte [eax + 0x11d073c], cl
inc eax
cmp eax, 0x15
jb 0x11303f8
mov eax, 0x11d073c
ret

Function at 0x113053a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2854], 1
jne 0x1130583
or dword [0x11d2854], 1
mov dword [0x11d04c8], 0xb49f9e9b
mov dword [0x11d04cc], 0x8e858582
mov dword [0x11d04d0], 0xa6bfa399
mov dword [0x11d04d4], 0x8a8dcba7
mov dword [0x11d04d8], 0x8f8e8782
mov byte [0x11d04dc], 0xeb
xor eax, eax
mov cl, byte [eax + 0x11d04c8]
xor cl, 0xeb
mov byte [eax + 0x11d0754], cl
inc eax
cmp eax, 0x15
jb 0x1130585
mov eax, 0x11d0754
ret

Function at 0x11306c7
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2850], 1
jne 0x1130710
or dword [0x11d2850], 1
mov dword [0x11d04e0], 0xb49f9e9b
mov dword [0x11d04e4], 0x8e9f9e84
mov dword [0x11d04e8], 0xa6bfa399
mov dword [0x11d04ec], 0x8a8dcba7
mov dword [0x11d04f0], 0x8f8e8782
mov byte [0x11d04f4], 0xeb
xor eax, eax
mov cl, byte [eax + 0x11d04e0]
xor cl, 0xeb
mov byte [eax + 0x11d076c], cl
inc eax
cmp eax, 0x15
jb 0x1130712
mov eax, 0x11d076c
ret

Function at 0x11309cd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2848], 1
jne 0x1130a16
or dword [0x11d2848], 1
mov dword [0x11d0504], 0xb49f8e8c
mov dword [0x11d0508], 0x988a8788
mov dword [0x11d050c], 0x868aa598
mov dword [0x11d0510], 0x8a8dcb8e
mov dword [0x11d0514], 0x8f8e8782
mov byte [0x11d0518], 0xeb
xor eax, eax
mov cl, byte [eax + 0x11d0504]
xor cl, 0xeb
mov byte [eax + 0x11d0790], cl
inc eax
cmp eax, 0x15
jb 0x1130a18
mov eax, 0x11d0790
ret

Function at 0x1130a33
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2844], 1
jne 0x1130a75
or dword [0x11d2844], 1
mov dword [0x11d051c], 0xaa9f8e8c
mov dword [0x11d0520], 0x82999f9f
mov dword [0x11d0524], 0x8e9f9e89
mov dword [0x11d0528], 0x828a8dcb
mov dword [0x11d052c], 0xeb8f8e87
xor eax, eax
mov cl, byte [eax + 0x11d051c]
xor cl, 0xeb
mov byte [eax + 0x11d07a8], cl
inc eax
cmp eax, 0x14
jb 0x1130a77
mov eax, 0x11d07a8
ret

Function at 0x1130d3e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d283c], 1
jne 0x1130d87
or dword [0x11d283c], 1
mov dword [0x11d053c], 0xb49f9e9b
mov dword [0x11d0540], 0x988a8788
mov dword [0x11d0544], 0x868aa598
mov dword [0x11d0548], 0x8a8dcb8e
mov dword [0x11d054c], 0x8f8e8782
mov byte [0x11d0550], 0xeb
xor eax, eax
mov cl, byte [eax + 0x11d053c]
xor cl, 0xeb
mov byte [eax + 0x11d07c8], cl
inc eax
cmp eax, 0x15
jb 0x1130d89
mov eax, 0x11d07c8
ret
Function at 0x1130da4
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2838], 1
jne 0x1130de6
or dword [0x11d2838], 1
mov dword [0x11d0554], 0xaa9f8e98
mov dword [0x11d0558], 0x82999f9f
mov dword [0x11d055c], 0x8e9f9e89
mov dword [0x11d0560], 0x828a8dcb
mov dword [0x11d0564], 0xeb8f8e87
xor eax, eax
mov cl, byte [eax + 0x11d0554]
xor cl, 0xeb
mov byte [eax + 0x11d07e0], cl
inc eax
cmp eax, 0x14
jb 0x1130de8
mov eax, 0x11d07e0
ret

Function at 0x1130eca
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2834], 1
jne 0x1130eff
or dword [0x11d2834], 1
mov dword [0x11d0568], 0x88828788
mov dword [0x11d056c], 0x8a8dcb80
mov dword [0x11d0570], 0x8f8e8782
mov byte [0x11d0574], 0xeb
xor eax, eax
mov cl, byte [eax + 0x11d0568]
xor cl, 0xeb
mov byte [eax + 0x11d07f4], cl
inc eax
cmp eax, 0xd
jb 0x1130f01
mov eax, 0x11d07f4
ret

Function at 0x1130fae
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d281c], 1
jne 0x1131000
or dword [0x11d281c], 1
mov dword [0x11d05d8], 0x868e878e
mov dword [0x11d05dc], 0xb49f858e
mov dword [0x11d05e0], 0xb49f8e8c
mov dword [0x11d05e4], 0x8e858582
mov dword [0x11d05e8], 0x9f83b499
mov word [0x11d05ec], 0x8786
mov byte [0x11d05ee], 0xeb
xor eax, eax
mov cl, byte [eax + 0x11d05d8]
xor cl, 0xeb
mov byte [eax + 0x11d0864], cl
inc eax
cmp eax, 0x17
jb 0x1131002
mov eax, 0x11d0864
ret

Function at 0x113101d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2818], 1
jne 0x113106f
or dword [0x11d2818], 1
mov dword [0x11d05f0], 0x868e878e
mov dword [0x11d05f4], 0xb49f858e
mov dword [0x11d05f8], 0xb49f8e8c
mov dword [0x11d05fc], 0x8e9f9e84
mov dword [0x11d0600], 0x9f83b499
mov word [0x11d0604], 0x8786
mov byte [0x11d0606], 0xeb
xor eax, eax
mov cl, byte [eax + 0x11d05f0]
xor cl, 0xeb
mov byte [eax + 0x11d087c], cl
inc eax
cmp eax, 0x17
jb 0x1131071
mov eax, 0x11d087c
ret

Function at 0x113108c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2814], 1
jne 0x11310de
or dword [0x11d2814], 1
mov dword [0x11d0608], 0x868e878e
mov dword [0x11d060c], 0xb49f858e
mov dword [0x11d0610], 0xb49f8e98
mov dword [0x11d0614], 0x8e858582
mov dword [0x11d0618], 0x9f83b499
mov word [0x11d061c], 0x8786
mov byte [0x11d061e], 0xeb
xor eax, eax
mov cl, byte [eax + 0x11d0608]
xor cl, 0xeb
mov byte [eax + 0x11d0894], cl
inc eax
cmp eax, 0x17
jb 0x11310e0
mov eax, 0x11d0894
ret

Function at 0x11310fb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2810], 1
jne 0x113114d
or dword [0x11d2810], 1
mov dword [0x11d0620], 0x868e878e
mov dword [0x11d0624], 0xb49f858e
mov dword [0x11d0628], 0xb49f8e98
mov dword [0x11d062c], 0x8e9f9e84
mov dword [0x11d0630], 0x9f83b499
mov word [0x11d0634], 0x8786
mov byte [0x11d0636], 0xeb
xor eax, eax
mov cl, byte [eax + 0x11d0620]
xor cl, 0xeb
mov byte [eax + 0x11d08ac], cl
inc eax
cmp eax, 0x17
jb 0x113114f
mov eax, 0x11d08ac
ret
Function at 0x113159c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d27f8], 1
jne 0x11315e4
or dword [0x11d27f8], 1
mov dword [0x11d0924], 0x82829ba0
mov dword [0x11d0928], 0x898782ce
mov dword [0x11d092c], 0x9d9b9a86
mov dword [0x11d0930], 0x8f8a9c8b
mov word [0x11d0934], 0x8f9a
mov byte [0x11d0936], 0xee
xor eax, eax
mov cl, byte [eax + 0x11d0924]
xor cl, 0xee
mov byte [eax + 0x11d0afc], cl
inc eax
cmp eax, 0x13
jb 0x11315e6
mov eax, 0x11d0afc
ret

Function at 0x11316fb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d27f4], 1
jne 0x1131743
or dword [0x11d27f4], 1
mov dword [0x11d0938], 0x82829ba0
mov dword [0x11d093c], 0x898782ce
mov dword [0x11d0940], 0x9d9b9a86
mov dword [0x11d0944], 0x8f8a9c8b
mov word [0x11d0948], 0x8f9a
mov byte [0x11d094a], 0xee
xor eax, eax
mov cl, byte [eax + 0x11d0938]
xor cl, 0xee
mov byte [eax + 0x11d0b10], cl
inc eax
cmp eax, 0x13
jb 0x1131745
mov eax, 0x11d0b10
ret

Function at 0x113185d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d27f0], 1
jne 0x11318a5
or dword [0x11d27f0], 1
mov dword [0x11d094c], 0x82829ba0
mov dword [0x11d0950], 0x898782ce
mov dword [0x11d0954], 0x9d9b9a86
mov dword [0x11d0958], 0x8f8a9c8b
mov word [0x11d095c], 0x8f9a
mov byte [0x11d095e], 0xee
xor eax, eax
mov cl, byte [eax + 0x11d094c]
xor cl, 0xee
mov byte [eax + 0x11d0b24], cl
inc eax
cmp eax, 0x13
jb 0x11318a7
mov eax, 0x11d0b24
ret

Function at 0x113198c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d27ec], 1
jne 0x11319d4
or dword [0x11d27ec], 1
mov dword [0x11d0960], 0x82829ba0
mov dword [0x11d0964], 0x898782ce
mov dword [0x11d0968], 0x9d9b9a86
mov dword [0x11d096c], 0x8f8a9c8b
mov word [0x11d0970], 0x8f9a
mov byte [0x11d0972], 0xee
xor eax, eax
mov cl, byte [eax + 0x11d0960]
xor cl, 0xee
mov byte [eax + 0x11d0b38], cl
inc eax
cmp eax, 0x13
jb 0x11319d6
mov eax, 0x11d0b38
ret

Function at 0x1131c9d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d27e0], 1
jne 0x1131d03
or dword [0x11d27e0], 1
mov dword [0x11d09a4], 0x9a80879b
mov dword [0x11d09a8], 0x82b1dcdd
mov dword [0x11d09ac], 0x9a868987
mov dword [0x11d09b0], 0x9c8b9d9b
mov dword [0x11d09b4], 0x8f9a8f8a
mov dword [0x11d09b8], 0xb1819ab1
mov dword [0x11d09bc], 0x8c839b80
mov word [0x11d09c0], 0x9c8b
mov byte [0x11d09c2], 0xee
xor eax, eax
mov cl, byte [eax + 0x11d09a4]
xor cl, 0xee
mov byte [eax + 0x11d0b7c], cl
inc eax
cmp eax, 0x1f
jb 0x1131d05
mov eax, 0x11d0b7c
ret

Function at 0x1131d20
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d27dc], 1
jne 0x1131d7f
or dword [0x11d27dc], 1
mov dword [0x11d09c4], 0xdd9a8087
mov dword [0x11d09c8], 0x8782b1dc
mov dword [0x11d09cc], 0x9b9a8689
mov dword [0x11d09d0], 0x8a9c8b9d
mov dword [0x11d09d4], 0xb18f9a8f
mov dword [0x11d09d8], 0x80b1819a
mov dword [0x11d09dc], 0x8b8c839b
mov word [0x11d09e0], 0xee9c
xor eax, eax
mov cl, byte [eax + 0x11d09c4]
xor cl, 0xee
mov byte [eax + 0x11d0b9c], cl
inc eax
cmp eax, 0x1e
jb 0x1131d81
mov eax, 0x11d0b9c
ret
Function at 0x1131d9c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d27d8], 1
jne 0x1131dfb
or dword [0x11d27d8], 1
mov dword [0x11d09e4], 0x8f868d9e
mov dword [0x11d09e8], 0x8782b19c
mov dword [0x11d09ec], 0x9b9a8689
mov dword [0x11d09f0], 0x8a9c8b9d
mov dword [0x11d09f4], 0xb18f9a8f
mov dword [0x11d09f8], 0x9db1819a
mov dword [0x11d09fc], 0x80879c9a
mov word [0x11d0a00], 0xee89
xor eax, eax
mov cl, byte [eax + 0x11d09e4]
xor cl, 0xee
mov byte [eax + 0x11d0bbc], cl
inc eax
cmp eax, 0x1e
jb 0x1131dfd
mov eax, 0x11d0bbc
ret

Function at 0x1131e18
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d27d4], 1
jne 0x1131e7e
or dword [0x11d27d4], 1
mov dword [0x11d0a04], 0x868d999e
mov dword [0x11d0a08], 0x82b19c8f
mov dword [0x11d0a0c], 0x9a868987
mov dword [0x11d0a10], 0x9c8b9d9b
mov dword [0x11d0a14], 0x8f9a8f8a
mov dword [0x11d0a18], 0xb1819ab1
mov dword [0x11d0a1c], 0x879c9a9d
mov word [0x11d0a20], 0x8980
mov byte [0x11d0a22], 0xee
xor eax, eax
mov cl, byte [eax + 0x11d0a04]
xor cl, 0xee
mov byte [eax + 0x11d0bdc], cl
inc eax
cmp eax, 0x1f
jb 0x1131e80
mov eax, 0x11d0bdc
ret

Function at 0x1131e9b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d27d0], 1
jne 0x1131f02
or dword [0x11d27d0], 1
mov dword [0x11d0a24], 0x86898782
mov dword [0x11d0a28], 0x8b9d9b9a
mov dword [0x11d0a2c], 0x9a8f8a9c
mov dword [0x11d0a30], 0x8b9db18f
mov dword [0x11d0a34], 0x8f98b19a
mov dword [0x11d0a38], 0x808f879c
mov dword [0x11d0a3c], 0x9a9db19a
mov dword [0x11d0a40], 0x8980879c
mov byte [0x11d0a44], 0xee
xor eax, eax
mov cl, byte [eax + 0x11d0a24]
xor cl, 0xee
mov byte [eax + 0x11d0bfc], cl
inc eax
cmp eax, 0x21
jb 0x1131f04
mov eax, 0x11d0bfc
ret

Function at 0x1131f1f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d27cc], 1
jne 0x1131f86
or dword [0x11d27cc], 1
mov dword [0x11d0a48], 0x86898782
mov dword [0x11d0a4c], 0x8b9d9b9a
mov dword [0x11d0a50], 0x9a8f8a9c
mov dword [0x11d0a54], 0x8b9db18f
mov dword [0x11d0a58], 0x8f98b19a
mov dword [0x11d0a5c], 0x808f879c
mov dword [0x11d0a60], 0x9b80b19a
mov dword [0x11d0a64], 0x9c8b8c83
mov byte [0x11d0a68], 0xee
xor eax, eax
mov cl, byte [eax + 0x11d0a48]
xor cl, 0xee
mov byte [eax + 0x11d0c20], cl
inc eax
cmp eax, 0x21
jb 0x1131f88
mov eax, 0x11d0c20
ret

Function at 0x1131fa3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d27c8], 1
jne 0x113200c
or dword [0x11d27c8], 1
mov dword [0x11d0a6c], 0x86898782
mov dword [0x11d0a70], 0x8b9d9b9a
mov dword [0x11d0a74], 0x9a8f8a9c
mov dword [0x11d0a78], 0x8b9db18f
mov dword [0x11d0a7c], 0x8f98b19a
mov dword [0x11d0a80], 0x808f879c
mov dword [0x11d0a84], 0x818cb19a
mov dword [0x11d0a88], 0x8f8b8281
mov word [0x11d0a8c], 0xee80
xor eax, eax
mov cl, byte [eax + 0x11d0a6c]
xor cl, 0xee
mov byte [eax + 0x11d0c44], cl
inc eax
cmp eax, 0x22
jb 0x113200e
mov eax, 0x11d0c44
ret
Function at 0x1132029
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d27c4], 1
jne 0x113208f
or dword [0x11d27c4], 1
mov dword [0x11d0a90], 0x86898782
mov dword [0x11d0a94], 0x8b9d9b9a
mov dword [0x11d0a98], 0x9a8f8a9c
mov dword [0x11d0a9c], 0x8b9db18f
mov dword [0x11d0aa0], 0x8f98b19a
mov dword [0x11d0aa4], 0x808f879c
mov dword [0x11d0aa8], 0x9b80b19a
mov word [0x11d0aac], 0x8282
mov byte [0x11d0aae], 0xee
xor eax, eax
mov cl, byte [eax + 0x11d0a90]
xor cl, 0xee
mov byte [eax + 0x11d0c68], cl
inc eax
cmp eax, 0x1f
jb 0x1132091
mov eax, 0x11d0c68
ret

Function at 0x1132321
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x119aa3b
call fcn.01199c88
sub esp, 0x20
push esi
xor esi, esi
mov dword [ebp - 0x10], esi
push edi
mov dword [ebp - 0x10], esi
call dword [0x11a20a8]
test byte [0x11d27a4], 1
mov edi, eax
jne 0x113236e
or dword [0x11d27a4], 1
mov dword [0x11d0d04], 0x989f9886
mov dword [0x11d0d08], 0xdf85949f
mov dword [0x11d0d0c], 0xf19d9d95
xor ecx, ecx
mov al, byte [ecx + 0x11d0d04]
xor al, 0xf1
mov byte [ecx + 0x11d0fbc], al
inc ecx
cmp ecx, 0xc
jb 0x1132370
push esi
push esi
lea eax, [ebp - 0x10]
push eax
push esi
push edi
push 0x11d0fbc
call dword [0x11a20d4]
push eax
push 0x1b00
call dword [0x11a212c]
test eax, eax
jne 0x11323bc
call fcn.01132432
mov ecx, dword [ebp + 0xc]
push eax
push dword [ebp + 8]
call fcn.0111d30e
pop ecx
pop ecx
jmp 0x1132421
test byte [0x11d279c], 1
jne 0x11323dc
or dword [0x11d279c], 1
mov word [0x11d0d2c], 0xd1cb
mov byte [0x11d0d2e], 0xf1
xor eax, eax
mov cl, byte [eax + 0x11d0d2c]
xor cl, 0xf1
mov byte [eax + 0x11d0fe4], cl
inc eax
cmp eax, 3
jb 0x11323de
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x2c]
push 0x11d0fe4
push eax
call fcn.0111d30e
mov dword [ebp - 4], esi
push dword [ebp - 0x10]
push eax
push dword [ebp + 8]
call fcn.0111d6c1
add esp, 0x14
push esi
push 1
lea ecx, [ebp - 0x2c]
call fcn.01114ce5
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword fs:[0], ecx
leave
ret

Function at 0x1132432
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d27a0], 1
jne 0x1132487
or dword [0x11d27a0], 1
mov dword [0x11d0d10], 0x90b7d9d1
mov dword [0x11d0d14], 0x95949d98
mov dword [0x11d0d18], 0xd19e85d1
mov dword [0x11d0d1c], 0x9c839e97
mov dword [0x11d0d20], 0x94d18590
mov dword [0x11d0d24], 0x839e8383
mov word [0x11d0d28], 0xf1d8
xor eax, eax
mov cl, byte [eax + 0x11d0d10]
xor cl, 0xf1
mov byte [eax + 0x11d0fc8], cl
inc eax
cmp eax, 0x1a
jb 0x1132489
mov eax, 0x11d0fc8
ret

Function at 0x11325f2
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2798], 1
jne 0x113263b
or dword [0x11d2798], 1
mov dword [0x11d0d30], 0xb99f98a6
mov dword [0x11d0d34], 0xbe818585
mov dword [0x11d0d38], 0xd99f9481
mov dword [0x11d0d3c], 0x9097d1d8
mov dword [0x11d0d40], 0x95949d98
mov byte [0x11d0d44], 0xf1
xor eax, eax
mov cl, byte [eax + 0x11d0d30]
xor cl, 0xf1
mov byte [eax + 0x11d0fe8], cl
inc eax
cmp eax, 0x15
jb 0x113263d
mov eax, 0x11d0fe8
ret
Function at 0x1132902
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2794], 1
jne 0x1132955
or dword [0x11d2794], 1
mov dword [0x11d0d48], 0xb99f98a6
mov dword [0x11d0d4c], 0xb2818585
mov dword [0x11d0d50], 0x9a929083
mov dword [0x11d0d54], 0xd99d83a4
mov dword [0x11d0d58], 0x9097d1d8
mov dword [0x11d0d5c], 0x95949d98
mov byte [0x11d0d60], 0xf1
xor eax, eax
mov cl, byte [eax + 0x11d0d48]
xor cl, 0xf1
mov byte [eax + 0x11d1000], cl
inc eax
cmp eax, 0x19
jb 0x1132957
mov eax, 0x11d1000
ret

Function at 0x1132972
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2790], 1
jne 0x11329be
or dword [0x11d2790], 1
mov dword [0x11d0d64], 0xb99f98a6
mov dword [0x11d0d68], 0xb2818585
mov dword [0x11d0d6c], 0x949f9f9e
mov dword [0x11d0d70], 0xd8d98592
mov dword [0x11d0d74], 0x989097d1
mov dword [0x11d0d78], 0xf195949d
xor eax, eax
mov cl, byte [eax + 0x11d0d64]
xor cl, 0xf1
mov byte [eax + 0x11d101c], cl
inc eax
cmp eax, 0x18
jb 0x11329c0
mov eax, 0x11d101c
ret

Function at 0x1133317
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d278c], 1
jne 0x11333f0
or dword [0x11d278c], 1
mov dword [0x11d0d80], 0x848094a3
mov dword [0x11d0d84], 0xd1858294
mov dword [0x11d0d88], 0xd19d8384
mov dword [0x11d0d8c], 0x95948284
mov dword [0x11d0d90], 0x95d190d1
mov dword [0x11d0d94], 0x94979798
mov dword [0x11d0d98], 0x859f9483
mov dword [0x11d0d9c], 0x999282d1
mov dword [0x11d0da0], 0xd1949c94
mov dword [0x11d0da4], 0x9f909985
mov dword [0x11d0da8], 0x949985d1
mov dword [0x11d0dac], 0x9f9e92d1
mov dword [0x11d0db0], 0x8592949f
mov dword [0x11d0db4], 0xd19f9e98
mov dword [0x11d0db8], 0xd1829086
mov dword [0x11d0dbc], 0x85989f98
mov dword [0x11d0dc0], 0x989d9098
mov dword [0x11d0dc4], 0xd195948b
mov dword [0x11d0dc8], 0x99859886
mov byte [0x11d0dcc], 0xf1
xor eax, eax
mov cl, byte [eax + 0x11d0d80]
xor cl, 0xf1
mov byte [eax + 0x11d1038], cl
inc eax
cmp eax, 0x4d
jb 0x11333f2
mov eax, 0x11d1038
ret

Function at 0x113340d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2788], 1
jne 0x11334e9
or dword [0x11d2788], 1
mov dword [0x11d0dd0], 0x848094a3
mov dword [0x11d0dd4], 0xd1858294
mov dword [0x11d0dd8], 0xd19d8384
mov dword [0x11d0ddc], 0x95948284
mov dword [0x11d0de0], 0x95d190d1
mov dword [0x11d0de4], 0x94979798
mov dword [0x11d0de8], 0x859f9483
mov dword [0x11d0dec], 0x829e99d1
mov dword [0x11d0df0], 0x909fd185
mov dword [0x11d0df4], 0x85d1949c
mov dword [0x11d0df8], 0xd19f9099
mov dword [0x11d0dfc], 0xd1949985
mov dword [0x11d0e00], 0x9f9f9e92
mov dword [0x11d0e04], 0x98859294
mov dword [0x11d0e08], 0x86d19f9e
mov dword [0x11d0e0c], 0x98d18290
mov dword [0x11d0e10], 0x9885989f
mov dword [0x11d0e14], 0x8b989d90
mov dword [0x11d0e18], 0x86d19594
mov dword [0x11d0e1c], 0xf1998598
xor eax, eax
mov cl, byte [eax + 0x11d0dd0]
xor cl, 0xf1
mov byte [eax + 0x11d1088], cl
inc eax
cmp eax, 0x50
jb 0x11334eb
mov eax, 0x11d1088
ret
Function at 0x1133506
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2784], 1
jne 0x11335de
or dword [0x11d2784], 1
mov dword [0x11d0e20], 0x848094a3
mov dword [0x11d0e24], 0xd1858294
mov dword [0x11d0e28], 0xd19d8384
mov dword [0x11d0e2c], 0x95948284
mov dword [0x11d0e30], 0x95d190d1
mov dword [0x11d0e34], 0x94979798
mov dword [0x11d0e38], 0x859f9483
mov dword [0x11d0e3c], 0x839e81d1
mov dword [0x11d0e40], 0x9985d185
mov dword [0x11d0e44], 0x85d19f90
mov dword [0x11d0e48], 0x92d19499
mov dword [0x11d0e4c], 0x949f9f9e
mov dword [0x11d0e50], 0x9e988592
mov dword [0x11d0e54], 0x9086d19f
mov dword [0x11d0e58], 0x9f98d182
mov dword [0x11d0e5c], 0x90988598
mov dword [0x11d0e60], 0x948b989d
mov dword [0x11d0e64], 0x9886d195
mov word [0x11d0e68], 0x9985
mov byte [0x11d0e6a], 0xf1
xor eax, eax
mov cl, byte [eax + 0x11d0e20]
xor cl, 0xf1
mov byte [eax + 0x11d10d8], cl
inc eax
cmp eax, 0x4b
jb 0x11335e0
mov eax, 0x11d10d8
ret

Function at 0x11335fb
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d2780], 1
jne 0x1133651
or dword [0x11d2780], 1
mov dword [0x11d0e6c], 0xb99f98a6
mov dword [0x11d0e70], 0xbe818585
mov dword [0x11d0e74], 0xa39f9481
mov dword [0x11d0e78], 0x94848094
mov dword [0x11d0e7c], 0xd8d98582
mov dword [0x11d0e80], 0x989097d1
mov dword [0x11d0e84], 0xf195949d
xor eax, eax
mov cl, byte [eax + 0x11d0e6c]
xor cl, 0xf1
mov byte [eax + 0x11d1124], cl
inc eax
cmp eax, 0x1c
jb 0x1133653
mov eax, 0x11d1124
ret

Function at 0x113366e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x11d277c], 1
jne 0x113373d
or dword [0x11d277c], 1
mov dword [0x11d0e88], 0xb99f98a6
mov dword [0x11d0e8c], 0xa2818585
mov dword [0x11d0e90], 0x81be8594
mov dword [0x11d0e94], 0x9f9e9885
mov dword [0x11d0e98], 0xbfb8a6d9
mov dword [0x11d0e9c], 0xa1a5a5b9
mov dword [0x11d0ea0], 0xa5a1beae
mov dword [0x11d0ea4], 0xaebfbeb8
mov dword [0x11d0ea8], 0xa4b2b4a2
mov dword [0x11d0eac], 0xa8a5b8a3
mov dword [0x11d0eb0], 0xb0bdb7ae
mov dword [0x11d0eb4], 0xd1d8a2b6
mov dword [0x11d0eb8], 0x83d19f9e
mov dword [0x11d0ebc], 0x94848094
mov dword [0x11d0ec0], 0x99d18582
mov dword [0x11d0ec4], 0x9d959f90
mov dword [0x11d0ec8], 0x9097d194
mov dword [0x11d0ecc], 0x95949d98
mov byte [0x11d0ed0], 0xf1
xor eax, eax
mov cl, byte [eax + 0x11d0e88]
xor cl, 0xf1
mov byte [eax + 0x11d1140], cl
inc eax
cmp eax, 0x49
jb 0x113373f
mov eax, 0x11d1140
ret