joyce8/EMBER2024-capa huggingface dataset:
Function at 0xbb7891
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58ca0], 1
jne 0xbb7b17
or dword [0xc58ca0], 1
mov dword [0xc53be0], 0x376a2b2d
mov dword [0xc53be4], 0x312b2030
mov dword [0xc53be8], 0x21377e30
mov dword [0xc53bec], 0x31263230
mov dword [0xc53bf0], 0x2a636c22
mov dword [0xc53bf4], 0x4e6d632b
mov dword [0xc53bf8], 0x2f272534
mov dword [0xc53bfc], 0x6a212325
mov dword [0xc53c00], 0x2c302534
mov dword [0xc53c04], 0x4e636379
mov dword [0xc53c08], 0x31352136
mov dword [0xc53c0c], 0x6c21362d
mov dword [0xc53c10], 0x36303763
mov dword [0xc53c14], 0x6330272d
mov dword [0xc53c18], 0x2b284e6d
mov dword [0xc53c1c], 0x64282527
mov dword [0xc53c20], 0x79642829
mov dword [0xc53c24], 0x35213664
mov dword [0xc53c28], 0x21362d31
mov dword [0xc53c2c], 0x2829636c
mov dword [0xc53c30], 0x284e6d63
mov dword [0xc53c34], 0x2825272b
mov dword [0xc53c38], 0x36683764
mov dword [0xc53c3c], 0x79642168
mov dword [0xc53c40], 0x27343c64
mov dword [0xc53c44], 0x6c282825
mov dword [0xc53c48], 0x272a3122
mov dword [0xc53c4c], 0x2a2b2d30
mov dword [0xc53c50], 0x36646d6c
mov dword [0xc53c54], 0x36313021
mov dword [0xc53c58], 0x2136642a
mov dword [0xc53c5c], 0x362d3135
mov dword [0xc53c60], 0x61636c21
mov dword [0xc53c64], 0x6a6d6309
mov dword [0xc53c68], 0x616c0261
mov dword [0xc53c6c], 0x21646d05
mov dword [0xc53c70], 0x6468202a
mov dword [0xc53c74], 0x31262120
mov dword [0xc53c78], 0x36306a23
mov dword [0xc53c7c], 0x26212725
mov dword [0xc53c80], 0x6d2f2725
mov dword [0xc53c84], 0x64222d4e
mov dword [0xc53c88], 0x64302b2a
mov dword [0xc53c8c], 0x2c306437
mov dword [0xc53c90], 0x36642a21
mov dword [0xc53c94], 0x36313021
mov dword [0xc53c98], 0x2d2a642a
mov dword [0xc53c9c], 0x36646828
mov dword [0xc53ca0], 0x202a2164
mov dword [0xc53ca4], 0x64222d4e
mov dword [0xc53ca8], 0x793a6436
mov dword [0xc53cac], 0x282d2a64
mov dword [0xc53cb0], 0x212c3064
mov dword [0xc53cb4], 0x6436642a
mov dword [0xc53cb8], 0x28296479
mov dword [0xc53cbc], 0x3037306a
mov dword [0xc53cc0], 0x232a2d36
mov dword [0xc53cc4], 0x646d366c
mov dword [0xc53cc8], 0x4e202a21
mov dword [0xc53ccc], 0x31302136
mov dword [0xc53cd0], 0x36642a36
mov word [0xc53cd4], 0x2168
mov byte [0xc53cd6], 0x44
xor eax, eax
mov cl, byte [eax + 0xc53be0]
xor cl, 0x44
mov byte [eax + 0xc541d0], cl
inc eax
cmp eax, 0xf7
jb 0xbb7b19
mov eax, 0xc541d0
ret
Function at 0xbb7b36
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
test byte [0xc58c64], 1
jne 0xbb7b5d
or dword [0xc58c64], 1
mov dword [0xc53dc8], 0x2f272534
mov dword [0xc53dcc], 0x44212325
xor eax, eax
mov cl, byte [eax + 0xc53dc8]
xor cl, 0x44
mov byte [eax + 0xc543b8], cl
inc eax
cmp eax, 8
jb 0xbb7b5f
push 0xc543b8
push dword [ebp + 8]
call fcn.00be8c96
test byte [0xc58c60], 1
pop ecx
pop ecx
jne 0xbb7ba7
or dword [0xc58c60], 1
mov dword [0xc53dd0], 0x28213634
mov dword [0xc53dd4], 0x4420252b
xor eax, eax
mov cl, byte [eax + 0xc53dd0]
xor cl, 0x44
mov byte [eax + 0xc543c0], cl
inc eax
cmp eax, 8
jb 0xbb7ba9
push esi
push 0xc543c0
push 0xffffffffffffffff
push dword [ebp + 8]
call fcn.00be8d0a
add esp, 0xc
cmp dword [0xc4ebe0], 0
mov esi, 0xc4ebe0
je 0xbb7c09
push edi
mov edi, esi
push 0
push dword [esi + 4]
push dword [ebp + 8]
call fcn.00be8bb6
push dword [esi]
push 0xfffffffffffffffe
push dword [ebp + 8]
call fcn.00be8f37
add edi, 8
add esp, 0x18
cmp dword [edi], 0
mov esi, edi
jne 0xbb7be2
pop edi
push 0xfffffffffffffffd
push dword [ebp + 8]
call fcn.00be840b
pop ecx
pop ecx
pop esi
pop ebp
ret
Function at 0xbb7e83
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0xc22d66
call fcn.00c21d38
sub esp, 0x64
test byte [0xc58c4c], 1
jne 0xbb7eb0
or dword [0xc58c4c], 1
mov word [0xc53e00], 0x961
mov byte [0xc53e02], 0x44
push ebx
push esi
xor ebx, ebx
push edi
xor eax, eax
mov cl, byte [eax + 0xc53e00]
xor cl, 0x44
mov byte [eax + 0xc543f0], cl
inc eax
cmp eax, 3
jb 0xbb7eb7
mov esi, 0xc543f0
mov eax, esi
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x54], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0xbb7ee3
sub eax, edi
push eax
push esi
lea ecx, [ebp - 0x54]
call fcn.00bb4c12
push dword [ebp + 0x10]
lea eax, [ebp - 0x54]
push eax
push dword [ebp + 0xc]
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 4], ebx
call fcn.00bbd08e
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.00bb4ca8
cmp dword [ebp - 0x5c], 0x10
mov eax, dword [ebp - 0x70]
jae 0xbb7f2a
lea eax, [ebp - 0x70]
mov esi, dword [ebp + 8]
push eax
push esi
call fcn.00be7809
pop ecx
pop ecx
cmp eax, ebx
je 0xbb7f7b
cmp eax, 3
jne 0xbb7f68
call fcn.00bb8082
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00bfba55
mov dword [ebp - 0x1c], vtable.std::runtime_error.0
push 0xc444a0
lea eax, [ebp - 0x1c]
push eax
call fcn.00c05956
cmp eax, 4
jne 0xbb7f74
call fcn.00bb8135
jmp 0xbb7f44
call fcn.00bb81e8
jmp 0xbb7f44
push ebx
push ebx
push ebx
push 1
push ebx
push esi
call fcn.00be923f
mov edi, eax
add esp, 0x18
cmp edi, ebx
je 0xbb8032
push ebx
call fcn.00bb826c
push eax
push 0xffffffffffffffff
push esi
call fcn.00be7fa0
add esp, 0x10
push eax
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0xf
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
call fcn.00bb4c87
mov byte [ebp - 4], 3
cmp edi, 2
jne 0xbb7fea
call fcn.00bb82b3
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.00bbd0ff
pop ecx
pop ecx
mov byte [ebp - 4], 4
lea esi, [ebp - 0x1c]
call fcn.00bb5c01
jmp 0xbb7f5a
cmp edi, 4
jne 0xbb8009
call fcn.00bb8312
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.00bbd0ff
pop ecx
pop ecx
mov byte [ebp - 4], 5
jmp 0xbb7fdd
cmp edi, 6
jne 0xbb8028
call fcn.00bb8377
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.00bbd0ff
pop ecx
pop ecx
mov byte [ebp - 4], 6
jmp 0xbb7fdd
call fcn.00bb83fb
jmp 0xbb7f44
or edi, 0xffffffff
push edi
push esi
mov dword [ebp - 0x10], edi
call fcn.00be85fb
pop ecx
pop ecx
test eax, eax
je 0xbb8053
push ebx
push edi
push esi
call fcn.00be87bf
add esp, 0xc
mov dword [ebp - 0x10], eax
push esi
call fcn.00be83f5
sub edi, eax
push edi
push esi
call fcn.00be840b
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.00bb4ca8
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
Function at 0xbb8082
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c48], 1
jne 0xbb8118
or dword [0xc58c48], 1
mov dword [0xc53e04], 0x282d2502
mov dword [0xc53e08], 0x30642021
mov dword [0xc53e0c], 0x3221642b
mov dword [0xc53e10], 0x25312825
mov dword [0xc53e14], 0x26642130
mov dword [0xc53e18], 0x37302b2b
mov dword [0xc53e1c], 0x34253630
mov dword [0xc53e20], 0x25362264
mov dword [0xc53e24], 0x2a212923
mov dword [0xc53e28], 0x37646830
mov dword [0xc53e2c], 0x25302a3d
mov dword [0xc53e30], 0x3621643c
mov dword [0xc53e34], 0x44362b36
xor eax, eax
mov cl, byte [eax + 0xc53e04]
xor cl, 0x44
mov byte [eax + 0xc543f4], cl
inc eax
cmp eax, 0x34
jb 0xbb811a
mov eax, 0xc543f4
ret

Function at 0xbb8135
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c44], 1
jne 0xbb81cb
or dword [0xc58c44], 1
mov dword [0xc53e38], 0x282d2502
mov dword [0xc53e3c], 0x30642021
mov dword [0xc53e40], 0x3221642b
mov dword [0xc53e44], 0x25312825
mov dword [0xc53e48], 0x26642130
mov dword [0xc53e4c], 0x37302b2b
mov dword [0xc53e50], 0x34253630
mov dword [0xc53e54], 0x25362264
mov dword [0xc53e58], 0x2a212923
mov dword [0xc53e5c], 0x29646830
mov dword [0xc53e60], 0x362b2921
mov dword [0xc53e64], 0x3621643d
mov dword [0xc53e68], 0x44362b36
xor eax, eax
mov cl, byte [eax + 0xc53e38]
xor cl, 0x44
mov byte [eax + 0xc54428], cl
inc eax
cmp eax, 0x34
jb 0xbb81cd
mov eax, 0xc54428
ret

Function at 0xbb81e8
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c40], 1
jne 0xbb824f
or dword [0xc58c40], 1
mov dword [0xc53e6c], 0x2a2f2a11
mov dword [0xc53e70], 0x642a332b
mov dword [0xc53e74], 0x2b363621
mov dword [0xc53e78], 0x2a2d6436
mov dword [0xc53e7c], 0x25312864
mov dword [0xc53e80], 0x2b281b08
mov dword [0xc53e84], 0x30372025
mov dword [0xc53e88], 0x232a2d36
mov byte [0xc53e8c], 0x44
xor eax, eax
mov cl, byte [eax + 0xc53e6c]
xor cl, 0x44
mov byte [eax + 0xc5445c], cl
inc eax
cmp eax, 0x21
jb 0xbb8251
mov eax, 0xc5445c
ret

Function at 0xbb826c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c3c], 1
jne 0xbb8296
or dword [0xc58c3c], 1
mov dword [0xc53e90], 0x2a2b2a78
mov word [0xc53e94], 0x7a21
mov byte [0xc53e96], 0x44
xor eax, eax
mov cl, byte [eax + 0xc53e90]
xor cl, 0x44
mov byte [eax + 0xc54480], cl
inc eax
cmp eax, 7
jb 0xbb8298
mov eax, 0xc54480
ret

Function at 0xbb82b3
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c38], 1
jne 0xbb82f5
or dword [0xc58c38], 1
mov dword [0xc53e98], 0x64253108
mov dword [0xc53e9c], 0x302a3136
mov dword [0xc53ea0], 0x6421292d
mov dword [0xc53ea4], 0x2b363621
mov dword [0xc53ea8], 0x44647e36
xor eax, eax
mov cl, byte [eax + 0xc53e98]
xor cl, 0x44
mov byte [eax + 0xc54488], cl
inc eax
cmp eax, 0x14
jb 0xbb82f7
mov eax, 0xc54488
ret
Function at 0xbb8312
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c34], 1
jne 0xbb835a
or dword [0xc58c34], 1
mov dword [0xc53eac], 0x64253108
mov dword [0xc53eb0], 0x2b292129
mov dword [0xc53eb4], 0x21643d36
mov dword [0xc53eb8], 0x362b3636
mov word [0xc53ebc], 0x647e
mov byte [0xc53ebe], 0x44
xor eax, eax
mov cl, byte [eax + 0xc53eac]
xor cl, 0x44
mov byte [eax + 0xc5449c], cl
inc eax
cmp eax, 0x13
jb 0xbb835c
mov eax, 0xc5449c
ret

Function at 0xbb8377
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c30], 1
jne 0xbb83de
or dword [0xc58c30], 1
mov dword [0xc53ec0], 0x64253108
mov dword [0xc53ec4], 0x2b363621
mov dword [0xc53ec8], 0x2a2d6436
mov dword [0xc53ecc], 0x21202d37
mov dword [0xc53ed0], 0x36362164
mov dword [0xc53ed4], 0x2c64362b
mov dword [0xc53ed8], 0x28202a25
mov dword [0xc53edc], 0x647e3621
mov byte [0xc53ee0], 0x44
xor eax, eax
mov cl, byte [eax + 0xc53ec0]
xor cl, 0x44
mov byte [eax + 0xc544b0], cl
inc eax
cmp eax, 0x21
jb 0xbb83e0
mov eax, 0xc544b0
ret

Function at 0xbb83fb
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c2c], 1
jne 0xbb8457
or dword [0xc58c2c], 1
mov dword [0xc53ee4], 0x2a2f2a11
mov dword [0xc53ee8], 0x642a332b
mov dword [0xc53eec], 0x2b363621
mov dword [0xc53ef0], 0x2a2d6436
mov dword [0xc53ef4], 0x25312864
mov dword [0xc53ef8], 0x2527341b
mov word [0xc53efc], 0x2828
mov byte [0xc53efe], 0x44
xor eax, eax
mov cl, byte [eax + 0xc53ee4]
xor cl, 0x44
mov byte [eax + 0xc544d4], cl
inc eax
cmp eax, 0x1b
jb 0xbb8459
mov eax, 0xc544d4
ret

Function at 0xbb8695
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c28], 1
jne 0xbb86de
or dword [0xc58c28], 1
mov dword [0xc53f00], 0x21372506
mov dword [0xc53f04], 0x20647072
mov dword [0xc53f08], 0x202b2721
mov dword [0xc53f0c], 0x25226421
mov dword [0xc53f10], 0x2021282d
mov byte [0xc53f14], 0x44
xor eax, eax
mov cl, byte [eax + 0xc53f00]
xor cl, 0x44
mov byte [eax + 0xc544f0], cl
inc eax
cmp eax, 0x15
jb 0xbb86e0
mov eax, 0xc544f0
ret
Function at 0xbb86fb
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0xc24a60
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50
push ebx
push esi
push edi
push dword [ebp + 0xc]
lea eax, [esp + 0x24]
xor ebx, ebx
push eax
mov dword [esp + 0x18], ebx
call fcn.00bdc73d
lea ecx, [esp + 0x44]
push ecx
mov ecx, eax
mov dword [esp + 0x70], ebx
call fcn.00bdab21
add esp, 0xc
push 1
xor edi, edi
lea esi, [esp + 0x24]
call fcn.00bb4de6
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x64], 3
mov esi, dword [esp + 0x4c]
lea eax, [esp + 0x20]
call fcn.00bbac88
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x20]
cmp dword [esp + 0x50], 0x10
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
jae 0xbb8788
lea eax, [esp + 0x3c]
lea ecx, [esp + 0xc]
push ecx
push dword [esp + 0x24]
push esi
push eax
call fcn.00bdf744
add esp, 0x10
test al, al
jne 0xbb87cd
call fcn.00bb8844
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x18]
call fcn.00bfba55
push 0xc444a0
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], vtable.std::runtime_error.0
call fcn.00c05956
mov esi, dword [esp + 0xc]
lea eax, [esp + 0x20]
call fcn.00bbac88
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
xor esi, esi
sub ecx, eax
mov dword [esp + 0xc], ecx
je 0xbb880d
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov edi, dword [eax + 4]
sub edi, ecx
xor edx, edx
mov eax, esi
div edi
mov eax, dword [esp + 0x20]
mov cl, byte [edx + ecx]
xor byte [eax + esi], cl
inc esi
cmp esi, dword [esp + 0xc]
jb 0xbb87ec
push dword [esp + 0xc]
mov esi, dword [ebp + 8]
push eax
call fcn.00bba0da
lea esi, [esp + 0x20]
call fcn.00bbac6f
push ebx
push 1
lea ecx, [esp + 0x44]
call fcn.00bb4ca8
mov ecx, dword [esp + 0x5c]
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0xbb8844
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c24], 1
jne 0xbb888d
or dword [0xc58c24], 1
mov dword [0xc53f18], 0x21372506
mov dword [0xc53f1c], 0x20647072
mov dword [0xc53f20], 0x202b2721
mov dword [0xc53f24], 0x25226421
mov dword [0xc53f28], 0x2021282d
mov byte [0xc53f2c], 0x44
xor eax, eax
mov cl, byte [eax + 0xc53f18]
xor cl, 0x44
mov byte [eax + 0xc54508], cl
inc eax
cmp eax, 0x15
jb 0xbb888f
mov eax, 0xc54508
ret

Function at 0xbb8f81
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c20], 1
jne 0xbb8fd6
or dword [0xc58c20], 1
mov dword [0xc53f30], 0x28312b07
mov dword [0xc53f34], 0x2b2a6420
mov dword [0xc53f38], 0x342b6430
mov dword [0xc53f3c], 0x27642a21
mov dword [0xc53f40], 0x2c372536
mov dword [0xc53f44], 0x29312064
mov word [0xc53f48], 0x4434
xor eax, eax
mov cl, byte [eax + 0xc53f30]
xor cl, 0x44
mov byte [eax + 0xc54520], cl
inc eax
cmp eax, 0x1a
jb 0xbb8fd8
mov eax, 0xc54520
ret
Function at 0xbb8ff5
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c18], 1
jne 0xbb9018
or dword [0xc58c18], 1
mov dword [0xc53f50], 0x232b286b
mov word [0xc53f54], 0x446b
xor eax, eax
mov cl, byte [eax + 0xc53f50]
xor cl, 0x44
mov byte [eax + 0xc54540], cl
inc eax
cmp eax, 6
jb 0xbb901a
mov eax, 0xc54540
ret

Function at 0xbb9035
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c14], 1
jne 0xbb90b0
or dword [0xc58c14], 1
mov dword [0xc53f58], 0x3430302c
mov dword [0xc53f5c], 0x256b6b7e
mov dword [0xc53f60], 0x3d28252a
mov dword [0xc53f64], 0x37272d30
mov dword [0xc53f68], 0x3021236a
mov dword [0xc53f6c], 0x2a332b20
mov dword [0xc53f70], 0x30372130
mov dword [0xc53f74], 0x292b276a
mov dword [0xc53f78], 0x6b76326b
mov dword [0xc53f7c], 0x6b232b28
mov byte [0xc53f80], 0x44
xor eax, eax
mov cl, byte [eax + 0xc53f58]
xor cl, 0x44
mov byte [eax + 0xc54548], cl
inc eax
cmp eax, 0x29
jb 0xbb90b2
mov eax, 0xc54548
ret

Function at 0xbb90cd
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c10], 1
jne 0xbb90f8
or dword [0xc58c10], 1
mov dword [0xc53f84], 0x37627927
mov dword [0xc53f88], 0x79306279
mov byte [0xc53f8c], 0x44
xor eax, eax
mov cl, byte [eax + 0xc53f84]
xor cl, 0x44
mov byte [eax + 0xc54574], cl
inc eax
cmp eax, 9
jb 0xbb90fa
mov eax, 0xc54574
ret

Function at 0xbb9115
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58c00], 1
jne 0xbb919d
or dword [0xc58c00], 1
mov dword [0xc53fa0], 0x302a2b07
mov dword [0xc53fa4], 0x69302a21
mov dword [0xc53fa8], 0x21343d10
mov dword [0xc53fac], 0x3425647e
mov dword [0xc53fb0], 0x272d2834
mov dword [0xc53fb4], 0x2b2d3025
mov dword [0xc53fb8], 0x693c6b2a
mov dword [0xc53fbc], 0x69333333
mov dword [0xc53fc0], 0x29362b22
mov dword [0xc53fc4], 0x28363169
mov dword [0xc53fc8], 0x2b272a21
mov dword [0xc53fcc], 0x44202120
xor eax, eax
mov cl, byte [eax + 0xc53fa0]
xor cl, 0x44
mov byte [eax + 0xc54590], cl
inc eax
cmp eax, 0x30
jb 0xbb919f
mov eax, 0xc54590
ret

Function at 0xbb91ba
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58bfc], 1
jne 0xbb91e5
or dword [0xc58bfc], 1
mov dword [0xc53fd0], 0x10170b14
mov dword [0xc53fd4], 0x642b3064
mov byte [0xc53fd8], 0x44
xor eax, eax
mov cl, byte [eax + 0xc53fd0]
xor cl, 0x44
mov byte [eax + 0xc545c0], cl
inc eax
cmp eax, 9
jb 0xbb91e7
mov eax, 0xc545c0
ret

Function at 0xbb9202
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58bf8], 1
jne 0xbb924b
or dword [0xc58bf8], 1
mov dword [0xc53fdc], 0x2d252264
mov dword [0xc53fe0], 0x64202128
mov dword [0xc53fe4], 0x2c302d33
mov dword [0xc53fe8], 0x25303764
mov dword [0xc53fec], 0x64373130
mov byte [0xc53ff0], 0x44
xor eax, eax
mov cl, byte [eax + 0xc53fdc]
xor cl, 0x44
mov byte [eax + 0xc545cc], cl
inc eax
cmp eax, 0x15
jb 0xbb924d
mov eax, 0xc545cc
ret
Function at 0xbb9282
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0xc232ca
call fcn.00c21d38
sub esp, 0xa8
push ebx
xor ebx, ebx
push esi
mov dword [ebp - 0x10], ebx
push edi
cmp dword [ebp + 0xc], ebx
je 0xbb9433
cmp dword [ebp + 0x10], ebx
je 0xbb9433
push dword [ebp + 0x14]
lea esi, [ebp - 0x7c]
call fcn.00bba5d0
push eax
push 0xc42c68
lea eax, [ebp - 0x98]
mov dword [ebp - 4], ebx
call fcn.00bb543c
push 0xc42c64
push eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.00bb5472
add esp, 0x10
push 1
xor edi, edi
lea esi, [ebp - 0x98]
call fcn.00bb4de6
push 1
lea esi, [ebp - 0x7c]
mov byte [ebp - 4], 4
call fcn.00bb4de6
mov dword [ebp - 0x10], ebx
cmp dword [ebp + 0x10], ebx
jle 0xbb938e
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x10]
push dword [eax + ecx*4]
lea esi, [ebp - 0x60]
call fcn.00bba5d0
mov byte [ebp - 4], 5
push dword [ebp - 0x1c]
mov eax, esi
push ebx
push eax
lea esi, [ebp - 0xb4]
call fcn.00bba5f2
mov ecx, eax
mov byte [ebp - 4], 6
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0xbb9342
lea eax, [ebp - 0x2c]
mov edi, dword [ebp - 0x1c]
push eax
mov eax, dword [ecx + 0x10]
call fcn.00bbe086
mov ebx, eax
neg ebx
sbb bl, bl
push 1
xor edi, edi
lea esi, [ebp - 0xb4]
mov byte [ebp - 4], 5
call fcn.00bb4de6
inc bl
jne 0xbb93fa
push 1
lea esi, [ebp - 0x60]
mov byte [ebp - 4], 4
call fcn.00bb4de6
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
xor ebx, ebx
cmp eax, dword [ebp + 0x10]
jl 0xbb9309
test byte [0xc58bf0], 1
jne 0xbb93bb
or dword [0xc58bf0], 1
mov dword [0xc54000], 0x64302b0a
mov dword [0xc54004], 0x2a312b22
mov word [0xc54008], 0x4420
xor eax, eax
mov cl, byte [eax + 0xc54000]
xor cl, 0x44
mov byte [eax + 0xc545f0], cl
inc eax
cmp eax, 0xa
jb 0xbb93bd
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp + 0xc], 0xc545f0
call fcn.00bfba55
mov dword [ebp - 0x44], vtable.std::runtime_error.0
push 0xc444a0
lea eax, [ebp - 0x44]
push eax
call fcn.00c05956
mov esi, dword [ebp + 8]
push 0xffffffffffffffff
push dword [ebp - 0x1c]
lea eax, [ebp - 0x60]
push eax
call fcn.00bba5f2
push 1
xor edi, edi
lea esi, [ebp - 0x60]
call fcn.00bb4de6
push 1
lea esi, [ebp - 0x2c]
call fcn.00bb4de6
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
call fcn.00bb9458
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x38]
call fcn.00bfba55
mov dword [ebp - 0x38], vtable.std::runtime_error.0
push 0xc444a0
lea eax, [ebp - 0x38]
jmp 0xbb93f4

Function at 0xbb9458
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58bf4], 1
jne 0xbb9485
or dword [0xc58bf4], 1
mov dword [0xc53ff4], 0x64302b0a
mov dword [0xc53ff8], 0x2a312b22
mov word [0xc53ffc], 0x4420
xor eax, eax
mov cl, byte [eax + 0xc53ff4]
xor cl, 0x44
mov byte [eax + 0xc545e4], cl
inc eax
cmp eax, 0xa
jb 0xbb9487
mov eax, 0xc545e4
ret
Function at 0xbb9c3c
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58bec], 1
mov ecx, 0x7844
jne 0xbb9cc6
or dword [0xc58bec], 1
lea eax, [ecx - 0x1d]
mov word [0xc5400c], ax
add eax, 0xf
mov edx, eax
mov word [0xc5400e], dx
lea edx, [ecx - 0x1f]
mov word [0xc54010], dx
add edx, 0x12
mov word [0xc54012], dx
lea edx, [ecx - 0x18]
mov word [0xc54014], dx
add edx, 0xffffffef
mov word [0xc54016], dx
mov edx, eax
mov word [0xc54018], dx
lea edx, [ecx - 0x23]
lea eax, [ecx - 0x14]
mov word [0xc5401a], dx
mov word [0xc54022], ax
add edx, 0x13
mov eax, ecx
mov word [0xc5401c], dx
mov dword [0xc5401e], 0x7836782b
mov word [0xc54024], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0xc5400c]
add eax, 2
mov word [eax + 0xc545fa], dx
cmp eax, 0x1a
jb 0xbb9cc8
mov eax, 0xc545fc
ret

Function at 0xbb9ce6
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58be8], 1
jne 0xbb9d11
or dword [0xc58be8], 1
mov dword [0xc54028], 0x2a36212f
mov dword [0xc5402c], 0x76772821
mov byte [0xc54030], 0x44
xor eax, eax
mov cl, byte [eax + 0xc54028]
xor cl, 0x44
mov byte [eax + 0xc54618], cl
inc eax
cmp eax, 9
jb 0xbb9d13
mov eax, 0xc54618
ret

Function at 0xbb9d2e
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58be4], 1
jne 0xbb9d97
or dword [0xc58be4], 1
mov dword [0xc54034], 0x14302117
mov dword [0xc54038], 0x21272b36
mov dword [0xc5403c], 0x37113737
mov dword [0xc54040], 0x2b093621
mov dword [0xc54044], 0x3c012120
mov dword [0xc54048], 0x30342127
mov dword [0xc5404c], 0x142a2b2d
mov dword [0xc54050], 0x272d282b
mov word [0xc54054], 0x443d
xor eax, eax
mov cl, byte [eax + 0xc54034]
xor cl, 0x44
mov byte [eax + 0xc54624], cl
inc eax
cmp eax, 0x22
jb 0xbb9d99
mov eax, 0xc54624
ret

Function at 0xbb9db4
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58be0], 1
jne 0xbb9e1d
or dword [0xc58be0], 1
mov dword [0xc54058], 0x14302103
mov dword [0xc5405c], 0x21272b36
mov dword [0xc54060], 0x37113737
mov dword [0xc54064], 0x2b093621
mov dword [0xc54068], 0x3c012120
mov dword [0xc5406c], 0x30342127
mov dword [0xc54070], 0x142a2b2d
mov dword [0xc54074], 0x272d282b
mov word [0xc54078], 0x443d
xor eax, eax
mov cl, byte [eax + 0xc54058]
xor cl, 0x44
mov byte [eax + 0xc54648], cl
inc eax
cmp eax, 0x22
jb 0xbb9e1f
mov eax, 0xc54648
ret

Function at 0xbb9e3a
Capabilities:
Encode data using xor

Disassembly:
test byte [0xc58bdc], 1
jne 0xbb9e90
or dword [0xc58bdc], 1
mov dword [0xc5407c], 0x6421280b
mov dword [0xc54080], 0x302d2a2d
mov dword [0xc54084], 0x2d28252d
mov dword [0xc54088], 0x2d30253e
mov dword [0xc5408c], 0x22642a2b
mov dword [0xc54090], 0x21282d25
mov dword [0xc54094], 0x44647e20
xor eax, eax
mov cl, byte [eax + 0xc5407c]
xor cl, 0x44
mov byte [eax + 0xc5466c], cl
inc eax
cmp eax, 0x1c
jb 0xbb9e92
mov eax, 0xc5466c
ret