joyce8/EMBER2024-capa huggingface dataset:
Function at 0xec782e
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82cb4], 1
jne 0xec7ab4
or dword [0xf82cb4], 1
mov dword [0xf7dbe0], 0x4f125355
mov dword [0xf7dbe4], 0x49535848
mov dword [0xf7dbe8], 0x594f0648
mov dword [0xf7dbec], 0x495e4a48
mov dword [0xf7dbf0], 0x521b145a
mov dword [0xf7dbf4], 0x36151b53
mov dword [0xf7dbf8], 0x575f5d4c
mov dword [0xf7dbfc], 0x12595b5d
mov dword [0xf7dc00], 0x54485d4c
mov dword [0xf7dc04], 0x361b1b01
mov dword [0xf7dc08], 0x494d594e
mov dword [0xf7dc0c], 0x14594e55
mov dword [0xf7dc10], 0x4e484f1b
mov dword [0xf7dc14], 0x1b485f55
mov dword [0xf7dc18], 0x53503615
mov dword [0xf7dc1c], 0x1c505d5f
mov dword [0xf7dc20], 0x11c5051
mov dword [0xf7dc24], 0x4d594e1c
mov dword [0xf7dc28], 0x594e5549
mov dword [0xf7dc2c], 0x50511b14
mov dword [0xf7dc30], 0x5036151b
mov dword [0xf7dc34], 0x505d5f53
mov dword [0xf7dc38], 0x4e104f1c
mov dword [0xf7dc3c], 0x11c5910
mov dword [0xf7dc40], 0x5f4c441c
mov dword [0xf7dc44], 0x1450505d
mov dword [0xf7dc48], 0x5f52495a
mov dword [0xf7dc4c], 0x52535548
mov dword [0xf7dc50], 0x4e1c1514
mov dword [0xf7dc54], 0x4e494859
mov dword [0xf7dc58], 0x594e1c52
mov dword [0xf7dc5c], 0x4e55494d
mov dword [0xf7dc60], 0x191b1459
mov dword [0xf7dc64], 0x12151b71
mov dword [0xf7dc68], 0x19147a19
mov dword [0xf7dc6c], 0x591c157d
mov dword [0xf7dc70], 0x1c105852
mov dword [0xf7dc74], 0x495e5958
mov dword [0xf7dc78], 0x4e48125b
mov dword [0xf7dc7c], 0x5e595f5d
mov dword [0xf7dc80], 0x15575f5d
mov dword [0xf7dc84], 0x1c5a5536
mov dword [0xf7dc88], 0x1c485352
mov dword [0xf7dc8c], 0x54481c4f
mov dword [0xf7dc90], 0x4e1c5259
mov dword [0xf7dc94], 0x4e494859
mov dword [0xf7dc98], 0x55521c52
mov dword [0xf7dc9c], 0x4e1c1050
mov dword [0xf7dca0], 0x5852591c
mov dword [0xf7dca4], 0x1c5a5536
mov dword [0xf7dca8], 0x1421c4e
mov dword [0xf7dcac], 0x5055521c
mov dword [0xf7dcb0], 0x5954481c
mov dword [0xf7dcb4], 0x1c4e1c52
mov dword [0xf7dcb8], 0x50511c01
mov dword [0xf7dcbc], 0x484f4812
mov dword [0xf7dcc0], 0x5b52554e
mov dword [0xf7dcc4], 0x1c154e14
mov dword [0xf7dcc8], 0x36585259
mov dword [0xf7dccc], 0x4948594e
mov dword [0xf7dcd0], 0x4e1c524e
mov word [0xf7dcd4], 0x5910
mov byte [0xf7dcd6], 0x3c
xor eax, eax
mov cl, byte [eax + 0xf7dbe0]
xor cl, 0x3c
mov byte [eax + 0xf7e1d8], cl
inc eax
cmp eax, 0xf7
jb 0xec7ab6
mov eax, 0xf7e1d8
ret
Function at 0xec7ad3
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
test byte [0xf82c74], 1
jne 0xec7afa
or dword [0xf82c74], 1
mov dword [0xf7ddcc], 0x575f5d4c
mov dword [0xf7ddd0], 0x3c595b5d
xor eax, eax
mov cl, byte [eax + 0xf7ddcc]
xor cl, 0x3c
mov byte [eax + 0xf7e3c4], cl
inc eax
cmp eax, 8
jb 0xec7afc
push 0xf7e3c4
push dword [ebp + 8]
call fcn.00f10ba5
test byte [0xf82c70], 1
pop ecx
pop ecx
jne 0xec7b44
or dword [0xf82c70], 1
mov dword [0xf7ddd4], 0x50594e4c
mov dword [0xf7ddd8], 0x3c585d53
xor eax, eax
mov cl, byte [eax + 0xf7ddd4]
xor cl, 0x3c
mov byte [eax + 0xf7e3cc], cl
inc eax
cmp eax, 8
jb 0xec7b46
push esi
push 0xf7e3cc
push 0xffffffffffffffff
push dword [ebp + 8]
call fcn.00f10c19
add esp, 0xc
cmp dword [0xf78be0], 0
mov esi, 0xf78be0
je 0xec7ba6
push edi
mov edi, esi
push 0
push dword [esi + 4]
push dword [ebp + 8]
call fcn.00f10ac5
push dword [esi]
push 0xfffffffffffffffe
push dword [ebp + 8]
call fcn.00f10e46
add edi, 8
add esp, 0x18
cmp dword [edi], 0
mov esi, edi
jne 0xec7b7f
pop edi
push 0xfffffffffffffffd
push dword [ebp + 8]
call fcn.00f1031a
pop ecx
pop ecx
pop esi
pop ebp
ret
Function at 0xec7e20
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0xf4ac8e
call fcn.00f49c28
sub esp, 0x64
test byte [0xf82c5c], 1
jne 0xec7e4d
or dword [0xf82c5c], 1
mov word [0xf7de04], 0x7119
mov byte [0xf7de06], 0x3c
push ebx
push esi
xor ebx, ebx
push edi
xor eax, eax
mov cl, byte [eax + 0xf7de04]
xor cl, 0x3c
mov byte [eax + 0xf7e3fc], cl
inc eax
cmp eax, 3
jb 0xec7e54
mov esi, 0xf7e3fc
mov eax, esi
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x54], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0xec7e80
sub eax, edi
push eax
push esi
lea ecx, [ebp - 0x54]
call fcn.00ec4c59
push dword [ebp + 0x10]
lea eax, [ebp - 0x54]
push eax
push dword [ebp + 0xc]
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 4], ebx
call fcn.00ecd057
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.00ec4cef
cmp dword [ebp - 0x5c], 0x10
mov eax, dword [ebp - 0x70]
jae 0xec7ec7
lea eax, [ebp - 0x70]
mov esi, dword [ebp + 8]
push eax
push esi
call fcn.00f0f718
pop ecx
pop ecx
cmp eax, ebx
je 0xec7f18
cmp eax, 3
jne 0xec7f05
call fcn.00ec801f
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00f23955
mov dword [ebp - 0x1c], vtable.std::runtime_error.0
push 0xf6ec28
lea eax, [ebp - 0x1c]
push eax
call fcn.00f2d865
cmp eax, 4
jne 0xec7f11
call fcn.00ec80d2
jmp 0xec7ee1
call fcn.00ec8185
jmp 0xec7ee1
push ebx
push ebx
push ebx
push 1
push ebx
push esi
call fcn.00f1114e
mov edi, eax
add esp, 0x18
cmp edi, ebx
je 0xec7fcf
push ebx
call fcn.00ec8209
push eax
push 0xffffffffffffffff
push esi
call fcn.00f0feaf
add esp, 0x10
push eax
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0xf
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
call fcn.00ec4cce
mov byte [ebp - 4], 3
cmp edi, 2
jne 0xec7f87
call fcn.00ec8250
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.00ecd0c8
pop ecx
pop ecx
mov byte [ebp - 4], 4
lea esi, [ebp - 0x1c]
call fcn.00ec5bd3
jmp 0xec7ef7
cmp edi, 4
jne 0xec7fa6
call fcn.00ec82af
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.00ecd0c8
pop ecx
pop ecx
mov byte [ebp - 4], 5
jmp 0xec7f7a
cmp edi, 6
jne 0xec7fc5
call fcn.00ec8314
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.00ecd0c8
pop ecx
pop ecx
mov byte [ebp - 4], 6
jmp 0xec7f7a
call fcn.00ec8398
jmp 0xec7ee1
or edi, 0xffffffff
push edi
push esi
mov dword [ebp - 0x10], edi
call fcn.00f1050a
pop ecx
pop ecx
test eax, eax
je 0xec7ff0
push ebx
push edi
push esi
call fcn.00f106ce
add esp, 0xc
mov dword [ebp - 0x10], eax
push esi
call fcn.00f10304
sub edi, eax
push edi
push esi
call fcn.00f1031a
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.00ec4cef
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
Function at 0xec801f
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c58], 1
jne 0xec80b5
or dword [0xf82c58], 1
mov dword [0xf7de08], 0x50555d7a
mov dword [0xf7de0c], 0x481c5859
mov dword [0xf7de10], 0x4a591c53
mov dword [0xf7de14], 0x5d49505d
mov dword [0xf7de18], 0x5e1c5948
mov dword [0xf7de1c], 0x4f485353
mov dword [0xf7de20], 0x4c5d4e48
mov dword [0xf7de24], 0x5d4e5a1c
mov dword [0xf7de28], 0x5259515b
mov dword [0xf7de2c], 0x4f1c1048
mov dword [0xf7de30], 0x5d485245
mov dword [0xf7de34], 0x4e591c44
mov dword [0xf7de38], 0x3c4e534e
xor eax, eax
mov cl, byte [eax + 0xf7de08]
xor cl, 0x3c
mov byte [eax + 0xf7e400], cl
inc eax
cmp eax, 0x34
jb 0xec80b7
mov eax, 0xf7e400
ret

Function at 0xec80d2
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c54], 1
jne 0xec8168
or dword [0xf82c54], 1
mov dword [0xf7de3c], 0x50555d7a
mov dword [0xf7de40], 0x481c5859
mov dword [0xf7de44], 0x4a591c53
mov dword [0xf7de48], 0x5d49505d
mov dword [0xf7de4c], 0x5e1c5948
mov dword [0xf7de50], 0x4f485353
mov dword [0xf7de54], 0x4c5d4e48
mov dword [0xf7de58], 0x5d4e5a1c
mov dword [0xf7de5c], 0x5259515b
mov dword [0xf7de60], 0x511c1048
mov dword [0xf7de64], 0x4e535159
mov dword [0xf7de68], 0x4e591c45
mov dword [0xf7de6c], 0x3c4e534e
xor eax, eax
mov cl, byte [eax + 0xf7de3c]
xor cl, 0x3c
mov byte [eax + 0xf7e434], cl
inc eax
cmp eax, 0x34
jb 0xec816a
mov eax, 0xf7e434
ret

Function at 0xec8185
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c50], 1
jne 0xec81ec
or dword [0xf82c50], 1
mov dword [0xf7de70], 0x52575269
mov dword [0xf7de74], 0x1c524b53
mov dword [0xf7de78], 0x534e4e59
mov dword [0xf7de7c], 0x52551c4e
mov dword [0xf7de80], 0x5d49501c
mov dword [0xf7de84], 0x53506370
mov dword [0xf7de88], 0x484f585d
mov dword [0xf7de8c], 0x5b52554e
mov byte [0xf7de90], 0x3c
xor eax, eax
mov cl, byte [eax + 0xf7de70]
xor cl, 0x3c
mov byte [eax + 0xf7e468], cl
inc eax
cmp eax, 0x21
jb 0xec81ee
mov eax, 0xf7e468
ret

Function at 0xec8209
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
test byte [0xf82c4c], 1
jne 0xec8235
or dword [0xf82c4c], 1
mov dword [0xf7de94], 0x52535200
mov word [0xf7de98], 0x259
mov byte [0xf7de9a], 0x3c
mov cl, byte [eax + 0xf7de94]
xor cl, 0x3c
mov byte [eax + 0xf7e48c], cl
inc eax
cmp eax, 7
jb 0xec8235
mov eax, 0xf7e48c
ret

Function at 0xec8250
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c48], 1
jne 0xec8292
or dword [0xf82c48], 1
mov dword [0xf7de9c], 0x1c5d4970
mov dword [0xf7dea0], 0x4852494e
mov dword [0xf7dea4], 0x1c595155
mov dword [0xf7dea8], 0x534e4e59
mov dword [0xf7deac], 0x3c1c064e
xor eax, eax
mov cl, byte [eax + 0xf7de9c]
xor cl, 0x3c
mov byte [eax + 0xf7e494], cl
inc eax
cmp eax, 0x14
jb 0xec8294
mov eax, 0xf7e494
ret
Function at 0xec82af
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c44], 1
jne 0xec82f7
or dword [0xf82c44], 1
mov dword [0xf7deb0], 0x1c5d4970
mov dword [0xf7deb4], 0x53515951
mov dword [0xf7deb8], 0x591c454e
mov dword [0xf7debc], 0x4e534e4e
mov word [0xf7dec0], 0x1c06
mov byte [0xf7dec2], 0x3c
xor eax, eax
mov cl, byte [eax + 0xf7deb0]
xor cl, 0x3c
mov byte [eax + 0xf7e4a8], cl
inc eax
cmp eax, 0x13
jb 0xec82f9
mov eax, 0xf7e4a8
ret

Function at 0xec8314
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c40], 1
jne 0xec837b
or dword [0xf82c40], 1
mov dword [0xf7dec4], 0x1c5d4970
mov dword [0xf7dec8], 0x534e4e59
mov dword [0xf7decc], 0x52551c4e
mov dword [0xf7ded0], 0x5958554f
mov dword [0xf7ded4], 0x4e4e591c
mov dword [0xf7ded8], 0x541c4e53
mov dword [0xf7dedc], 0x5058525d
mov dword [0xf7dee0], 0x1c064e59
mov byte [0xf7dee4], 0x3c
xor eax, eax
mov cl, byte [eax + 0xf7dec4]
xor cl, 0x3c
mov byte [eax + 0xf7e4bc], cl
inc eax
cmp eax, 0x21
jb 0xec837d
mov eax, 0xf7e4bc
ret

Function at 0xec8398
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c3c], 1
jne 0xec83f4
or dword [0xf82c3c], 1
mov dword [0xf7dee8], 0x52575269
mov dword [0xf7deec], 0x1c524b53
mov dword [0xf7def0], 0x534e4e59
mov dword [0xf7def4], 0x52551c4e
mov dword [0xf7def8], 0x5d49501c
mov dword [0xf7defc], 0x5d5f4c63
mov word [0xf7df00], 0x5050
mov byte [0xf7df02], 0x3c
xor eax, eax
mov cl, byte [eax + 0xf7dee8]
xor cl, 0x3c
mov byte [eax + 0xf7e4e0], cl
inc eax
cmp eax, 0x1b
jb 0xec83f6
mov eax, 0xf7e4e0
ret

Function at 0xec8632
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c38], 1
jne 0xec867b
or dword [0xf82c38], 1
mov dword [0xf7df04], 0x594f5d7e
mov dword [0xf7df08], 0x581c080a
mov dword [0xf7df0c], 0x58535f59
mov dword [0xf7df10], 0x5d5a1c59
mov dword [0xf7df14], 0x58595055
mov byte [0xf7df18], 0x3c
xor eax, eax
mov cl, byte [eax + 0xf7df04]
xor cl, 0x3c
mov byte [eax + 0xf7e4fc], cl
inc eax
cmp eax, 0x15
jb 0xec867d
mov eax, 0xf7e4fc
ret
Function at 0xec8698
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0xf4c943
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50
push ebx
push esi
push edi
push dword [ebp + 0xc]
lea eax, [esp + 0x24]
xor ebx, ebx
push eax
mov dword [esp + 0x18], ebx
call fcn.00eec758
lea ecx, [esp + 0x44]
push ecx
mov ecx, eax
mov dword [esp + 0x70], ebx
call fcn.00eeab41
add esp, 0xc
push 1
xor edi, edi
lea esi, [esp + 0x24]
call fcn.00ec4e2d
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x64], 3
mov esi, dword [esp + 0x4c]
lea eax, [esp + 0x20]
call fcn.00ecac22
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x20]
cmp dword [esp + 0x50], 0x10
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
jae 0xec8725
lea eax, [esp + 0x3c]
lea ecx, [esp + 0xc]
push ecx
push dword [esp + 0x24]
push esi
push eax
call fcn.00eef75f
add esp, 0x10
test al, al
jne 0xec876a
call fcn.00ec87e1
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x18]
call fcn.00f23955
push 0xf6ec28
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], vtable.std::runtime_error.0
call fcn.00f2d865
mov esi, dword [esp + 0xc]
lea eax, [esp + 0x20]
call fcn.00ecac22
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
xor esi, esi
sub ecx, eax
mov dword [esp + 0xc], ecx
je 0xec87aa
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov edi, dword [eax + 4]
sub edi, ecx
xor edx, edx
mov eax, esi
div edi
mov eax, dword [esp + 0x20]
mov cl, byte [edx + ecx]
xor byte [eax + esi], cl
inc esi
cmp esi, dword [esp + 0xc]
jb 0xec8789
push dword [esp + 0xc]
mov esi, dword [ebp + 8]
push eax
call fcn.00eca077
lea esi, [esp + 0x20]
call fcn.00ecac09
push ebx
push 1
lea ecx, [esp + 0x44]
call fcn.00ec4cef
mov ecx, dword [esp + 0x5c]
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0xec87e1
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c34], 1
jne 0xec882a
or dword [0xf82c34], 1
mov dword [0xf7df1c], 0x594f5d7e
mov dword [0xf7df20], 0x581c080a
mov dword [0xf7df24], 0x58535f59
mov dword [0xf7df28], 0x5d5a1c59
mov dword [0xf7df2c], 0x58595055
mov byte [0xf7df30], 0x3c
xor eax, eax
mov cl, byte [eax + 0xf7df1c]
xor cl, 0x3c
mov byte [eax + 0xf7e514], cl
inc eax
cmp eax, 0x15
jb 0xec882c
mov eax, 0xf7e514
ret

Function at 0xec8f1e
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c30], 1
jne 0xec8f73
or dword [0xf82c30], 1
mov dword [0xf7df34], 0x5049537f
mov dword [0xf7df38], 0x53521c58
mov dword [0xf7df3c], 0x4c531c48
mov dword [0xf7df40], 0x5f1c5259
mov dword [0xf7df44], 0x544f5d4e
mov dword [0xf7df48], 0x5149581c
mov word [0xf7df4c], 0x3c4c
xor eax, eax
mov cl, byte [eax + 0xf7df34]
xor cl, 0x3c
mov byte [eax + 0xf7e52c], cl
inc eax
cmp eax, 0x1a
jb 0xec8f75
mov eax, 0xf7e52c
ret
Function at 0xec8f90
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c28], 1
jne 0xec8fb3
or dword [0xf82c28], 1
mov dword [0xf7df54], 0x5b535013
mov word [0xf7df58], 0x3c13
xor eax, eax
mov cl, byte [eax + 0xf7df54]
xor cl, 0x3c
mov byte [eax + 0xf7e54c], cl
inc eax
cmp eax, 6
jb 0xec8fb5
mov eax, 0xf7e54c
ret

Function at 0xec8fd0
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c24], 1
jne 0xec904b
or dword [0xf82c24], 1
mov dword [0xf7df5c], 0x4c484854
mov dword [0xf7df60], 0x5d131306
mov dword [0xf7df64], 0x45505d52
mov dword [0xf7df68], 0x4f5f5548
mov dword [0xf7df6c], 0x48595b12
mov dword [0xf7df70], 0x524b5358
mov dword [0xf7df74], 0x484f5948
mov dword [0xf7df78], 0x51535f12
mov dword [0xf7df7c], 0x130e4a13
mov dword [0xf7df80], 0x135b5350
mov byte [0xf7df84], 0x3c
xor eax, eax
mov cl, byte [eax + 0xf7df5c]
xor cl, 0x3c
mov byte [eax + 0xf7e554], cl
inc eax
cmp eax, 0x29
jb 0xec904d
mov eax, 0xf7e554
ret

Function at 0xec9068
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c20], 1
jne 0xec9093
or dword [0xf82c20], 1
mov dword [0xf7df88], 0x4f1a015f
mov dword [0xf7df8c], 0x1481a01
mov byte [0xf7df90], 0x3c
xor eax, eax
mov cl, byte [eax + 0xf7df88]
xor cl, 0x3c
mov byte [eax + 0xf7e580], cl
inc eax
cmp eax, 9
jb 0xec9095
mov eax, 0xf7e580
ret

Function at 0xec90b0
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c10], 1
jne 0xec9138
or dword [0xf82c10], 1
mov dword [0xf7dfa4], 0x4852537f
mov dword [0xf7dfa8], 0x11485259
mov dword [0xf7dfac], 0x594c4568
mov dword [0xf7dfb0], 0x4c5d1c06
mov dword [0xf7dfb4], 0x5f55504c
mov dword [0xf7dfb8], 0x5355485d
mov dword [0xf7dfbc], 0x11441352
mov dword [0xf7dfc0], 0x114b4b4b
mov dword [0xf7dfc4], 0x514e535a
mov dword [0xf7dfc8], 0x504e4911
mov dword [0xf7dfcc], 0x535f5259
mov dword [0xf7dfd0], 0x3c585958
xor eax, eax
mov cl, byte [eax + 0xf7dfa4]
xor cl, 0x3c
mov byte [eax + 0xf7e59c], cl
inc eax
cmp eax, 0x30
jb 0xec913a
mov eax, 0xf7e59c
ret

Function at 0xec9155
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c0c], 1
jne 0xec9180
or dword [0xf82c0c], 1
mov dword [0xf7dfd4], 0x686f736c
mov dword [0xf7dfd8], 0x1c53481c
mov byte [0xf7dfdc], 0x3c
xor eax, eax
mov cl, byte [eax + 0xf7dfd4]
xor cl, 0x3c
mov byte [eax + 0xf7e5cc], cl
inc eax
cmp eax, 9
jb 0xec9182
mov eax, 0xf7e5cc
ret

Function at 0xec919d
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c08], 1
jne 0xec91e6
or dword [0xf82c08], 1
mov dword [0xf7dfe0], 0x555d5a1c
mov dword [0xf7dfe4], 0x1c585950
mov dword [0xf7dfe8], 0x5448554b
mov dword [0xf7dfec], 0x5d484f1c
mov dword [0xf7dff0], 0x1c4f4948
mov byte [0xf7dff4], 0x3c
xor eax, eax
mov cl, byte [eax + 0xf7dfe0]
xor cl, 0x3c
mov byte [eax + 0xf7e5d8], cl
inc eax
cmp eax, 0x15
jb 0xec91e8
mov eax, 0xf7e5d8
ret
Function at 0xec921d
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0xf4b1ca
call fcn.00f49c28
sub esp, 0xa8
push ebx
xor ebx, ebx
push esi
mov dword [ebp - 0x10], ebx
push edi
cmp dword [ebp + 0xc], ebx
je 0xec93ce
cmp dword [ebp + 0x10], ebx
je 0xec93ce
push dword [ebp + 0x14]
lea esi, [ebp - 0x7c]
call fcn.00eca56a
push eax
push 0xf6cb70
lea eax, [ebp - 0x98]
mov dword [ebp - 4], ebx
call fcn.00ec5483
push 0xf6cb6c
push eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.00ec54b9
add esp, 0x10
push 1
xor edi, edi
lea esi, [ebp - 0x98]
call fcn.00ec4e2d
push 1
lea esi, [ebp - 0x7c]
mov byte [ebp - 4], 4
call fcn.00ec4e2d
mov dword [ebp - 0x10], ebx
cmp dword [ebp + 0x10], ebx
jle 0xec9329
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x10]
push dword [eax + ecx*4]
lea esi, [ebp - 0x60]
call fcn.00eca56a
mov byte [ebp - 4], 5
push dword [ebp - 0x1c]
mov eax, esi
push ebx
push eax
lea esi, [ebp - 0xb4]
call fcn.00eca58c
mov ecx, eax
mov byte [ebp - 4], 6
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0xec92dd
lea eax, [ebp - 0x2c]
mov edi, dword [ebp - 0x1c]
push eax
mov eax, dword [ecx + 0x10]
call fcn.00ece07d
mov ebx, eax
neg ebx
sbb bl, bl
push 1
xor edi, edi
lea esi, [ebp - 0xb4]
mov byte [ebp - 4], 5
call fcn.00ec4e2d
inc bl
jne 0xec9395
push 1
lea esi, [ebp - 0x60]
mov byte [ebp - 4], 4
call fcn.00ec4e2d
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
xor ebx, ebx
cmp eax, dword [ebp + 0x10]
jl 0xec92a4
test byte [0xf82c00], 1
jne 0xec9356
or dword [0xf82c00], 1
mov dword [0xf7e004], 0x1c485372
mov dword [0xf7e008], 0x5249535a
mov word [0xf7e00c], 0x3c58
xor eax, eax
mov cl, byte [eax + 0xf7e004]
xor cl, 0x3c
mov byte [eax + 0xf7e5fc], cl
inc eax
cmp eax, 0xa
jb 0xec9358
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp + 0xc], 0xf7e5fc
call fcn.00f23955
mov dword [ebp - 0x44], vtable.std::runtime_error.0
push 0xf6ec28
lea eax, [ebp - 0x44]
push eax
call fcn.00f2d865
mov esi, dword [ebp + 8]
push 0xffffffffffffffff
push dword [ebp - 0x1c]
lea eax, [ebp - 0x60]
push eax
call fcn.00eca58c
push 1
xor edi, edi
lea esi, [ebp - 0x60]
call fcn.00ec4e2d
push 1
lea esi, [ebp - 0x2c]
call fcn.00ec4e2d
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
call fcn.00ec93f3
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x38]
call fcn.00f23955
mov dword [ebp - 0x38], vtable.std::runtime_error.0
push 0xf6ec28
lea eax, [ebp - 0x38]
jmp 0xec938f

Function at 0xec93f3
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82c04], 1
jne 0xec9420
or dword [0xf82c04], 1
mov dword [0xf7dff8], 0x1c485372
mov dword [0xf7dffc], 0x5249535a
mov word [0xf7e000], 0x3c58
xor eax, eax
mov cl, byte [eax + 0xf7dff8]
xor cl, 0x3c
mov byte [eax + 0xf7e5f0], cl
inc eax
cmp eax, 0xa
jb 0xec9422
mov eax, 0xf7e5f0
ret
Function at 0xec9bd7
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bfc], 1
mov ecx, 0x793c
jne 0xec9c61
or dword [0xf82bfc], 1
lea eax, [ecx + 0x23]
mov word [0xf7e010], ax
add eax, 0xffffffef
mov edx, eax
mov word [0xf7e012], dx
lea edx, [ecx + 0x21]
mov word [0xf7e014], dx
add edx, 0xfffffff2
mov word [0xf7e016], dx
lea edx, [ecx + 0x18]
mov word [0xf7e018], dx
add edx, 0xf
mov word [0xf7e01a], dx
mov edx, eax
mov word [0xf7e01c], dx
lea edx, [ecx + 0x1d]
lea eax, [ecx + 0xc]
mov word [0xf7e01e], dx
mov word [0xf7e026], ax
add edx, 0xfffffff3
mov eax, ecx
mov word [0xf7e020], dx
mov dword [0xf7e022], 0x794e7953
mov word [0xf7e028], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xf7e010]
add eax, 2
mov word [eax + 0xf7e606], dx
cmp eax, 0x1a
jb 0xec9c63
mov eax, 0xf7e608
ret

Function at 0xec9c81
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bf8], 1
jne 0xec9cac
or dword [0xf82bf8], 1
mov dword [0xf7e02c], 0x524e5957
mov dword [0xf7e030], 0xe0f5059
mov byte [0xf7e034], 0x3c
xor eax, eax
mov cl, byte [eax + 0xf7e02c]
xor cl, 0x3c
mov byte [eax + 0xf7e624], cl
inc eax
cmp eax, 9
jb 0xec9cae
mov eax, 0xf7e624
ret

Function at 0xec9cc9
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bf4], 1
jne 0xec9d32
or dword [0xf82bf4], 1
mov dword [0xf7e038], 0x6c48596f
mov dword [0xf7e03c], 0x595f534e
mov dword [0xf7e040], 0x4f694f4f
mov dword [0xf7e044], 0x53714e59
mov dword [0xf7e048], 0x44795958
mov dword [0xf7e04c], 0x484c595f
mov dword [0xf7e050], 0x6c525355
mov dword [0xf7e054], 0x5f555053
mov word [0xf7e058], 0x3c45
xor eax, eax
mov cl, byte [eax + 0xf7e038]
xor cl, 0x3c
mov byte [eax + 0xf7e630], cl
inc eax
cmp eax, 0x22
jb 0xec9d34
mov eax, 0xf7e630
ret

Function at 0xec9d4f
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bf0], 1
jne 0xec9db8
or dword [0xf82bf0], 1
mov dword [0xf7e05c], 0x6c48597b
mov dword [0xf7e060], 0x595f534e
mov dword [0xf7e064], 0x4f694f4f
mov dword [0xf7e068], 0x53714e59
mov dword [0xf7e06c], 0x44795958
mov dword [0xf7e070], 0x484c595f
mov dword [0xf7e074], 0x6c525355
mov dword [0xf7e078], 0x5f555053
mov word [0xf7e07c], 0x3c45
xor eax, eax
mov cl, byte [eax + 0xf7e05c]
xor cl, 0x3c
mov byte [eax + 0xf7e654], cl
inc eax
cmp eax, 0x22
jb 0xec9dba
mov eax, 0xf7e654
ret

Function at 0xec9dd5
Capabilities:
Encode data using xor

Disassembly:
test byte [0xf82bec], 1
jne 0xec9e2b
or dword [0xf82bec], 1
mov dword [0xf7e080], 0x1c595073
mov dword [0xf7e084], 0x48555255
mov dword [0xf7e088], 0x55505d55
mov dword [0xf7e08c], 0x55485d46
mov dword [0xf7e090], 0x5a1c5253
mov dword [0xf7e094], 0x5950555d
mov dword [0xf7e098], 0x3c1c0658
xor eax, eax
mov cl, byte [eax + 0xf7e080]
xor cl, 0x3c
mov byte [eax + 0xf7e678], cl
inc eax
cmp eax, 0x1c
jb 0xec9e2d
mov eax, 0xf7e678
ret