joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1037828
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3da4], 1
jne 0x1037aae
or dword [0x10f3da4], 1
mov dword [0x10eec20], 0xb5e8a9af
mov dword [0x10eec24], 0xb3a9a2b2
mov dword [0x10eec28], 0xa3b5fcb2
mov dword [0x10eec2c], 0xb3a4b0b2
mov dword [0x10eec30], 0xa8e1eea0
mov dword [0x10eec34], 0xccefe1a9
mov dword [0x10eec38], 0xada5a7b6
mov dword [0x10eec3c], 0xe8a3a1a7
mov dword [0x10eec40], 0xaeb2a7b6
mov dword [0x10eec44], 0xcce1e1fb
mov dword [0x10eec48], 0xb3b7a3b4
mov dword [0x10eec4c], 0xeea3b4af
mov dword [0x10eec50], 0xb4b2b5e1
mov dword [0x10eec54], 0xe1b2a5af
mov dword [0x10eec58], 0xa9aaccef
mov dword [0x10eec5c], 0xe6aaa7a5
mov dword [0x10eec60], 0xfbe6aaab
mov dword [0x10eec64], 0xb7a3b4e6
mov dword [0x10eec68], 0xa3b4afb3
mov dword [0x10eec6c], 0xaaabe1ee
mov dword [0x10eec70], 0xaaccefe1
mov dword [0x10eec74], 0xaaa7a5a9
mov dword [0x10eec78], 0xb4eab5e6
mov dword [0x10eec7c], 0xfbe6a3ea
mov dword [0x10eec80], 0xa5b6bee6
mov dword [0x10eec84], 0xeeaaaaa7
mov dword [0x10eec88], 0xa5a8b3a0
mov dword [0x10eec8c], 0xa8a9afb2
mov dword [0x10eec90], 0xb4e6efee
mov dword [0x10eec94], 0xb4b3b2a3
mov dword [0x10eec98], 0xa3b4e6a8
mov dword [0x10eec9c], 0xb4afb3b7
mov dword [0x10eeca0], 0xe3e1eea3
mov dword [0x10eeca4], 0xe8efe18b
mov dword [0x10eeca8], 0xe3ee80e3
mov dword [0x10eecac], 0xa3e6ef87
mov dword [0x10eecb0], 0xe6eaa2a8
mov dword [0x10eecb4], 0xb3a4a3a2
mov dword [0x10eecb8], 0xb4b2e8a1
mov dword [0x10eecbc], 0xa4a3a5a7
mov dword [0x10eecc0], 0xefada5a7
mov dword [0x10eecc4], 0xe6a0afcc
mov dword [0x10eecc8], 0xe6b2a9a8
mov dword [0x10eeccc], 0xaeb2e6b5
mov dword [0x10eecd0], 0xb4e6a8a3
mov dword [0x10eecd4], 0xb4b3b2a3
mov dword [0x10eecd8], 0xafa8e6a8
mov dword [0x10eecdc], 0xb4e6eaaa
mov dword [0x10eece0], 0xa2a8a3e6
mov dword [0x10eece4], 0xe6a0afcc
mov dword [0x10eece8], 0xfbb8e6b4
mov dword [0x10eecec], 0xaaafa8e6
mov dword [0x10eecf0], 0xa3aeb2e6
mov dword [0x10eecf4], 0xe6b4e6a8
mov dword [0x10eecf8], 0xaaabe6fb
mov dword [0x10eecfc], 0xb2b5b2e8
mov dword [0x10eed00], 0xa1a8afb4
mov dword [0x10eed04], 0xe6efb4ee
mov dword [0x10eed08], 0xcca2a8a3
mov dword [0x10eed0c], 0xb3b2a3b4
mov dword [0x10eed10], 0xb4e6a8b4
mov word [0x10eed14], 0xa3ea
mov byte [0x10eed16], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10eec20]
xor cl, 0xc6
mov byte [eax + 0x10ef218], cl
inc eax
cmp eax, 0xf7
jb 0x1037ab0
mov eax, 0x10ef218
ret
Function at 0x1037acd
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
test byte [0x10f3d64], 1
jne 0x1037af4
or dword [0x10f3d64], 1
mov dword [0x10eee0c], 0xada5a7b6
mov dword [0x10eee10], 0xc6a3a1a7
xor eax, eax
mov cl, byte [eax + 0x10eee0c]
xor cl, 0xc6
mov byte [eax + 0x10ef404], cl
inc eax
cmp eax, 8
jb 0x1037af6
push 0x10ef404
push dword [ebp + 8]
call fcn.010815e5
test byte [0x10f3d60], 1
pop ecx
pop ecx
jne 0x1037b3e
or dword [0x10f3d60], 1
mov dword [0x10eee14], 0xaaa3b4b6
mov dword [0x10eee18], 0xc6a2a7a9
xor eax, eax
mov cl, byte [eax + 0x10eee14]
xor cl, 0xc6
mov byte [eax + 0x10ef40c], cl
inc eax
cmp eax, 8
jb 0x1037b40
push esi
push 0x10ef40c
push 0xffffffffffffffff
push dword [ebp + 8]
call fcn.01081659
add esp, 0xc
cmp dword [0x10e9be8], 0
mov esi, 0x10e9be8
je 0x1037ba0
push edi
mov edi, esi
push 0
push dword [esi + 4]
push dword [ebp + 8]
call fcn.01081505
push dword [esi]
push 0xfffffffffffffffe
push dword [ebp + 8]
call fcn.01081886
add edi, 8
add esp, 0x18
cmp dword [edi], 0
mov esi, edi
jne 0x1037b79
pop edi
push 0xfffffffffffffffd
push dword [ebp + 8]
call fcn.01080d5a
pop ecx
pop ecx
pop esi
pop ebp
ret
Function at 0x1037e1a
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x10bb697
call fcn.010ba668
sub esp, 0x64
test byte [0x10f3d4c], 1
jne 0x1037e47
or dword [0x10f3d4c], 1
mov word [0x10eee44], 0x8be3
mov byte [0x10eee46], 0xc6
push ebx
push esi
xor ebx, ebx
push edi
xor eax, eax
mov cl, byte [eax + 0x10eee44]
xor cl, 0xc6
mov byte [eax + 0x10ef43c], cl
inc eax
cmp eax, 3
jb 0x1037e4e
mov esi, 0x10ef43c
mov eax, esi
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x54], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x1037e7a
sub eax, edi
push eax
push esi
lea ecx, [ebp - 0x54]
call fcn.01034c54
push dword [ebp + 0x10]
lea eax, [ebp - 0x54]
push eax
push dword [ebp + 0xc]
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 4], ebx
call fcn.0103d02c
add esp, 0x10
push ebx
push 1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 2
call fcn.01034cea
cmp dword [ebp - 0x5c], 0x10
mov eax, dword [ebp - 0x70]
jae 0x1037ec1
lea eax, [ebp - 0x70]
mov esi, dword [ebp + 8]
push eax
push esi
call fcn.01080158
pop ecx
pop ecx
cmp eax, ebx
je 0x1037f12
cmp eax, 3
jne 0x1037eff
call fcn.01038019
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1c]
call fcn.01094395
mov dword [ebp - 0x1c], vtable.std::runtime_error.0
push 0x10dfd00
lea eax, [ebp - 0x1c]
push eax
call fcn.0109e2a5
cmp eax, 4
jne 0x1037f0b
call fcn.010380cc
jmp 0x1037edb
call fcn.0103817f
jmp 0x1037edb
push ebx
push ebx
push ebx
push 1
push ebx
push esi
call fcn.01081b8e
mov edi, eax
add esp, 0x18
cmp edi, ebx
je 0x1037fc9
push ebx
call fcn.01038203
push eax
push 0xffffffffffffffff
push esi
call fcn.010808ef
add esp, 0x10
push eax
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0xf
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x38], bl
call fcn.01034cc9
mov byte [ebp - 4], 3
cmp edi, 2
jne 0x1037f81
call fcn.0103824a
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.0103d09d
pop ecx
pop ecx
mov byte [ebp - 4], 4
lea esi, [ebp - 0x1c]
call fcn.01035bce
jmp 0x1037ef1
cmp edi, 4
jne 0x1037fa0
call fcn.010382a9
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.0103d09d
pop ecx
pop ecx
mov byte [ebp - 4], 5
jmp 0x1037f74
cmp edi, 6
jne 0x1037fbf
call fcn.0103830e
push eax
lea eax, [ebp - 0x54]
push eax
lea edi, [ebp - 0x38]
call fcn.0103d09d
pop ecx
pop ecx
mov byte [ebp - 4], 6
jmp 0x1037f74
call fcn.01038392
jmp 0x1037edb
or edi, 0xffffffff
push edi
push esi
mov dword [ebp - 0x10], edi
call fcn.01080f4a
pop ecx
pop ecx
test eax, eax
je 0x1037fea
push ebx
push edi
push esi
call fcn.0108110e
add esp, 0xc
mov dword [ebp - 0x10], eax
push esi
call fcn.01080d44
sub edi, eax
push edi
push esi
call fcn.01080d5a
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.01034cea
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
Function at 0x1038019
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d48], 1
jne 0x10380af
or dword [0x10f3d48], 1
mov dword [0x10eee48], 0xaaafa780
mov dword [0x10eee4c], 0xb2e6a2a3
mov dword [0x10eee50], 0xb0a3e6a9
mov dword [0x10eee54], 0xa7b3aaa7
mov dword [0x10eee58], 0xa4e6a3b2
mov dword [0x10eee5c], 0xb5b2a9a9
mov dword [0x10eee60], 0xb6a7b4b2
mov dword [0x10eee64], 0xa7b4a0e6
mov dword [0x10eee68], 0xa8a3aba1
mov dword [0x10eee6c], 0xb5e6eab2
mov dword [0x10eee70], 0xa7b2a8bf
mov dword [0x10eee74], 0xb4a3e6be
mov dword [0x10eee78], 0xc6b4a9b4
xor eax, eax
mov cl, byte [eax + 0x10eee48]
xor cl, 0xc6
mov byte [eax + 0x10ef440], cl
inc eax
cmp eax, 0x34
jb 0x10380b1
mov eax, 0x10ef440
ret

Function at 0x10380cc
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d44], 1
jne 0x1038162
or dword [0x10f3d44], 1
mov dword [0x10eee7c], 0xaaafa780
mov dword [0x10eee80], 0xb2e6a2a3
mov dword [0x10eee84], 0xb0a3e6a9
mov dword [0x10eee88], 0xa7b3aaa7
mov dword [0x10eee8c], 0xa4e6a3b2
mov dword [0x10eee90], 0xb5b2a9a9
mov dword [0x10eee94], 0xb6a7b4b2
mov dword [0x10eee98], 0xa7b4a0e6
mov dword [0x10eee9c], 0xa8a3aba1
mov dword [0x10eeea0], 0xabe6eab2
mov dword [0x10eeea4], 0xb4a9aba3
mov dword [0x10eeea8], 0xb4a3e6bf
mov dword [0x10eeeac], 0xc6b4a9b4
xor eax, eax
mov cl, byte [eax + 0x10eee7c]
xor cl, 0xc6
mov byte [eax + 0x10ef474], cl
inc eax
cmp eax, 0x34
jb 0x1038164
mov eax, 0x10ef474
ret

Function at 0x103817f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d40], 1
jne 0x10381e6
or dword [0x10f3d40], 1
mov dword [0x10eeeb0], 0xa8ada893
mov dword [0x10eeeb4], 0xe6a8b1a9
mov dword [0x10eeeb8], 0xa9b4b4a3
mov dword [0x10eeebc], 0xa8afe6b4
mov dword [0x10eeec0], 0xa7b3aae6
mov dword [0x10eeec4], 0xa9aa998a
mov dword [0x10eeec8], 0xb2b5a2a7
mov dword [0x10eeecc], 0xa1a8afb4
mov byte [0x10eeed0], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10eeeb0]
xor cl, 0xc6
mov byte [eax + 0x10ef4a8], cl
inc eax
cmp eax, 0x21
jb 0x10381e8
mov eax, 0x10ef4a8
ret

Function at 0x1038203
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d3c], 1
jne 0x103822d
or dword [0x10f3d3c], 1
mov dword [0x10eeed4], 0xa8a9a8fa
mov word [0x10eeed8], 0xf8a3
mov byte [0x10eeeda], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10eeed4]
xor cl, 0xc6
mov byte [eax + 0x10ef4cc], cl
inc eax
cmp eax, 7
jb 0x103822f
mov eax, 0x10ef4cc
ret

Function at 0x103824a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d38], 1
jne 0x103828c
or dword [0x10f3d38], 1
mov dword [0x10eeedc], 0xe6a7b38a
mov dword [0x10eeee0], 0xb2a8b3b4
mov dword [0x10eeee4], 0xe6a3abaf
mov dword [0x10eeee8], 0xa9b4b4a3
mov dword [0x10eeeec], 0xc6e6fcb4
xor eax, eax
mov cl, byte [eax + 0x10eeedc]
xor cl, 0xc6
mov byte [eax + 0x10ef4d4], cl
inc eax
cmp eax, 0x14
jb 0x103828e
mov eax, 0x10ef4d4
ret
Function at 0x10382a9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d34], 1
jne 0x10382f1
or dword [0x10f3d34], 1
mov dword [0x10eeef0], 0xe6a7b38a
mov dword [0x10eeef4], 0xa9aba3ab
mov dword [0x10eeef8], 0xa3e6bfb4
mov dword [0x10eeefc], 0xb4a9b4b4
mov word [0x10eef00], 0xe6fc
mov byte [0x10eef02], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10eeef0]
xor cl, 0xc6
mov byte [eax + 0x10ef4e8], cl
inc eax
cmp eax, 0x13
jb 0x10382f3
mov eax, 0x10ef4e8
ret

Function at 0x103830e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d30], 1
jne 0x1038375
or dword [0x10f3d30], 1
mov dword [0x10eef04], 0xe6a7b38a
mov dword [0x10eef08], 0xa9b4b4a3
mov dword [0x10eef0c], 0xa8afe6b4
mov dword [0x10eef10], 0xa3a2afb5
mov dword [0x10eef14], 0xb4b4a3e6
mov dword [0x10eef18], 0xaee6b4a9
mov dword [0x10eef1c], 0xaaa2a8a7
mov dword [0x10eef20], 0xe6fcb4a3
mov byte [0x10eef24], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10eef04]
xor cl, 0xc6
mov byte [eax + 0x10ef4fc], cl
inc eax
cmp eax, 0x21
jb 0x1038377
mov eax, 0x10ef4fc
ret

Function at 0x1038392
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d2c], 1
jne 0x10383ee
or dword [0x10f3d2c], 1
mov dword [0x10eef28], 0xa8ada893
mov dword [0x10eef2c], 0xe6a8b1a9
mov dword [0x10eef30], 0xa9b4b4a3
mov dword [0x10eef34], 0xa8afe6b4
mov dword [0x10eef38], 0xa7b3aae6
mov dword [0x10eef3c], 0xa7a5b699
mov word [0x10eef40], 0xaaaa
mov byte [0x10eef42], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10eef28]
xor cl, 0xc6
mov byte [eax + 0x10ef520], cl
inc eax
cmp eax, 0x1b
jb 0x10383f0
mov eax, 0x10ef520
ret

Function at 0x103862c
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d28], 1
jne 0x1038675
or dword [0x10f3d28], 1
mov dword [0x10eef44], 0xa3b5a784
mov dword [0x10eef48], 0xa2e6f2f0
mov dword [0x10eef4c], 0xa2a9a5a3
mov dword [0x10eef50], 0xa7a0e6a3
mov dword [0x10eef54], 0xa2a3aaaf
mov byte [0x10eef58], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10eef44]
xor cl, 0xc6
mov byte [eax + 0x10ef53c], cl
inc eax
cmp eax, 0x15
jb 0x1038677
mov eax, 0x10ef53c
ret
Function at 0x1038692
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10bd373
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50
push ebx
push esi
push edi
push dword [ebp + 0xc]
lea eax, [esp + 0x24]
xor ebx, ebx
push eax
mov dword [esp + 0x18], ebx
call fcn.0105cc0c
lea ecx, [esp + 0x44]
push ecx
mov ecx, eax
mov dword [esp + 0x70], ebx
call fcn.0105afd7
add esp, 0xc
push 1
xor edi, edi
lea esi, [esp + 0x24]
call fcn.01034e28
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x64], 3
mov esi, dword [esp + 0x4c]
lea eax, [esp + 0x20]
call fcn.0103ac04
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x20]
cmp dword [esp + 0x50], 0x10
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
jae 0x103871f
lea eax, [esp + 0x3c]
lea ecx, [esp + 0xc]
push ecx
push dword [esp + 0x24]
push esi
push eax
call fcn.0105fd61
add esp, 0x10
test al, al
jne 0x1038764
call fcn.010387db
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x18]
call fcn.01094395
push 0x10dfd00
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], vtable.std::runtime_error.0
call fcn.0109e2a5
mov esi, dword [esp + 0xc]
lea eax, [esp + 0x20]
call fcn.0103ac04
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
xor esi, esi
sub ecx, eax
mov dword [esp + 0xc], ecx
je 0x10387a4
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov edi, dword [eax + 4]
sub edi, ecx
xor edx, edx
mov eax, esi
div edi
mov eax, dword [esp + 0x20]
mov cl, byte [edx + ecx]
xor byte [eax + esi], cl
inc esi
cmp esi, dword [esp + 0xc]
jb 0x1038783
push dword [esp + 0xc]
mov esi, dword [ebp + 8]
push eax
call fcn.0103a06f
lea esi, [esp + 0x20]
call fcn.01034bf1
push ebx
push 1
lea ecx, [esp + 0x44]
call fcn.01034cea
mov ecx, dword [esp + 0x5c]
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x10387db
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d24], 1
jne 0x1038824
or dword [0x10f3d24], 1
mov dword [0x10eef5c], 0xa3b5a784
mov dword [0x10eef60], 0xa2e6f2f0
mov dword [0x10eef64], 0xa2a9a5a3
mov dword [0x10eef68], 0xa7a0e6a3
mov dword [0x10eef6c], 0xa2a3aaaf
mov byte [0x10eef70], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10eef5c]
xor cl, 0xc6
mov byte [eax + 0x10ef554], cl
inc eax
cmp eax, 0x15
jb 0x1038826
mov eax, 0x10ef554
ret

Function at 0x1038f18
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d20], 1
jne 0x1038f6d
or dword [0x10f3d20], 1
mov dword [0x10eef74], 0xaab3a985
mov dword [0x10eef78], 0xa9a8e6a2
mov dword [0x10eef7c], 0xb6a9e6b2
mov dword [0x10eef80], 0xa5e6a8a3
mov dword [0x10eef84], 0xaeb5a7b4
mov dword [0x10eef88], 0xabb3a2e6
mov word [0x10eef8c], 0xc6b6
xor eax, eax
mov cl, byte [eax + 0x10eef74]
xor cl, 0xc6
mov byte [eax + 0x10ef56c], cl
inc eax
cmp eax, 0x1a
jb 0x1038f6f
mov eax, 0x10ef56c
ret
Function at 0x1038f8a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d18], 1
jne 0x1038fad
or dword [0x10f3d18], 1
mov dword [0x10eef94], 0xa1a9aae9
mov word [0x10eef98], 0xc6e9
xor eax, eax
mov cl, byte [eax + 0x10eef94]
xor cl, 0xc6
mov byte [eax + 0x10ef58c], cl
inc eax
cmp eax, 6
jb 0x1038faf
mov eax, 0x10ef58c
ret

Function at 0x1038fca
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d14], 1
jne 0x1039045
or dword [0x10f3d14], 1
mov dword [0x10eef9c], 0xb6b2b2ae
mov dword [0x10eefa0], 0xa7e9e9fc
mov dword [0x10eefa4], 0xbfaaa7a8
mov dword [0x10eefa8], 0xb5a5afb2
mov dword [0x10eefac], 0xb2a3a1e8
mov dword [0x10eefb0], 0xa8b1a9a2
mov dword [0x10eefb4], 0xb2b5a3b2
mov dword [0x10eefb8], 0xaba9a5e8
mov dword [0x10eefbc], 0xe9f4b0e9
mov dword [0x10eefc0], 0xe9a1a9aa
mov byte [0x10eefc4], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10eef9c]
xor cl, 0xc6
mov byte [eax + 0x10ef594], cl
inc eax
cmp eax, 0x29
jb 0x1039047
mov eax, 0x10ef594
ret

Function at 0x1039062
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d10], 1
jne 0x103908d
or dword [0x10f3d10], 1
mov dword [0x10eefc8], 0xb5e0fba5
mov dword [0x10eefcc], 0xfbb2e0fb
mov byte [0x10eefd0], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10eefc8]
xor cl, 0xc6
mov byte [eax + 0x10ef5c0], cl
inc eax
cmp eax, 9
jb 0x103908f
mov eax, 0x10ef5c0
ret

Function at 0x10390aa
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3d00], 1
jne 0x1039132
or dword [0x10f3d00], 1
mov dword [0x10eefe4], 0xb2a8a985
mov dword [0x10eefe8], 0xebb2a8a3
mov dword [0x10eefec], 0xa3b6bf92
mov dword [0x10eeff0], 0xb6a7e6fc
mov dword [0x10eeff4], 0xa5afaab6
mov dword [0x10eeff8], 0xa9afb2a7
mov dword [0x10eeffc], 0xebbee9a8
mov dword [0x10ef000], 0xebb1b1b1
mov dword [0x10ef004], 0xabb4a9a0
mov dword [0x10ef008], 0xaab4b3eb
mov dword [0x10ef00c], 0xa9a5a8a3
mov dword [0x10ef010], 0xc6a2a3a2
xor eax, eax
mov cl, byte [eax + 0x10eefe4]
xor cl, 0xc6
mov byte [eax + 0x10ef5dc], cl
inc eax
cmp eax, 0x30
jb 0x1039134
mov eax, 0x10ef5dc
ret

Function at 0x103914f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3cfc], 1
jne 0x103917a
or dword [0x10f3cfc], 1
mov dword [0x10ef014], 0x92958996
mov dword [0x10ef018], 0xe6a9b2e6
mov byte [0x10ef01c], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10ef014]
xor cl, 0xc6
mov byte [eax + 0x10ef60c], cl
inc eax
cmp eax, 9
jb 0x103917c
mov eax, 0x10ef60c
ret

Function at 0x1039197
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3cf8], 1
jne 0x10391e0
or dword [0x10f3cf8], 1
mov dword [0x10ef020], 0xafa7a0e6
mov dword [0x10ef024], 0xe6a2a3aa
mov dword [0x10ef028], 0xaeb2afb1
mov dword [0x10ef02c], 0xa7b2b5e6
mov dword [0x10ef030], 0xe6b5b3b2
mov byte [0x10ef034], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10ef020]
xor cl, 0xc6
mov byte [eax + 0x10ef618], cl
inc eax
cmp eax, 0x15
jb 0x10391e2
mov eax, 0x10ef618
ret
Function at 0x1039217
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x10bbbe8
call fcn.010ba668
sub esp, 0xa8
push ebx
xor ebx, ebx
push esi
mov dword [ebp - 0x10], ebx
push edi
cmp dword [ebp + 0xc], ebx
je 0x10393c8
cmp dword [ebp + 0x10], ebx
je 0x10393c8
push dword [ebp + 0x14]
lea esi, [ebp - 0x7c]
call fcn.0103a565
push eax
push 0x10ddb78
lea eax, [ebp - 0x98]
mov dword [ebp - 4], ebx
call fcn.0103547e
push 0x10ddb74
push eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.010354b4
add esp, 0x10
push 1
xor edi, edi
lea esi, [ebp - 0x98]
call fcn.01034e28
push 1
lea esi, [ebp - 0x7c]
mov byte [ebp - 4], 4
call fcn.01034e28
mov dword [ebp - 0x10], ebx
cmp dword [ebp + 0x10], ebx
jle 0x1039323
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x10]
push dword [eax + ecx*4]
lea esi, [ebp - 0x60]
call fcn.0103a565
mov byte [ebp - 4], 5
push dword [ebp - 0x1c]
mov eax, esi
push ebx
push eax
lea esi, [ebp - 0xb4]
call fcn.0103a587
mov ecx, eax
mov byte [ebp - 4], 6
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x10392d7
lea eax, [ebp - 0x2c]
mov edi, dword [ebp - 0x1c]
push eax
mov eax, dword [ecx + 0x10]
call fcn.0103e050
mov ebx, eax
neg ebx
sbb bl, bl
push 1
xor edi, edi
lea esi, [ebp - 0xb4]
mov byte [ebp - 4], 5
call fcn.01034e28
inc bl
jne 0x103938f
push 1
lea esi, [ebp - 0x60]
mov byte [ebp - 4], 4
call fcn.01034e28
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
xor ebx, ebx
cmp eax, dword [ebp + 0x10]
jl 0x103929e
test byte [0x10f3cf0], 1
jne 0x1039350
or dword [0x10f3cf0], 1
mov dword [0x10ef044], 0xe6b2a988
mov dword [0x10ef048], 0xa8b3a9a0
mov word [0x10ef04c], 0xc6a2
xor eax, eax
mov cl, byte [eax + 0x10ef044]
xor cl, 0xc6
mov byte [eax + 0x10ef63c], cl
inc eax
cmp eax, 0xa
jb 0x1039352
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp + 0xc], 0x10ef63c
call fcn.01094395
mov dword [ebp - 0x44], vtable.std::runtime_error.0
push 0x10dfd00
lea eax, [ebp - 0x44]
push eax
call fcn.0109e2a5
mov esi, dword [ebp + 8]
push 0xffffffffffffffff
push dword [ebp - 0x1c]
lea eax, [ebp - 0x60]
push eax
call fcn.0103a587
push 1
xor edi, edi
lea esi, [ebp - 0x60]
call fcn.01034e28
push 1
lea esi, [ebp - 0x2c]
call fcn.01034e28
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
call fcn.010393ed
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x38]
call fcn.01094395
mov dword [ebp - 0x38], vtable.std::runtime_error.0
push 0x10dfd00
lea eax, [ebp - 0x38]
jmp 0x1039389

Function at 0x10393ed
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3cf4], 1
jne 0x103941a
or dword [0x10f3cf4], 1
mov dword [0x10ef038], 0xe6b2a988
mov dword [0x10ef03c], 0xa8b3a9a0
mov word [0x10ef040], 0xc6a2
xor eax, eax
mov cl, byte [eax + 0x10ef038]
xor cl, 0xc6
mov byte [eax + 0x10ef630], cl
inc eax
cmp eax, 0xa
jb 0x103941c
mov eax, 0x10ef630
ret
Function at 0x1039bd1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3cec], 1
mov ecx, 0x91c6
jne 0x1039c5b
or dword [0x10f3cec], 1
lea eax, [ecx - 0x21]
mov word [0x10ef050], ax
add eax, 0xf
mov edx, eax
mov word [0x10ef052], dx
lea edx, [ecx - 0x1f]
mov word [0x10ef054], dx
add edx, 0xe
mov word [0x10ef056], dx
lea edx, [ecx - 0x18]
mov word [0x10ef058], dx
add edx, 0xffffffeb
mov word [0x10ef05a], dx
mov edx, eax
mov word [0x10ef05c], dx
lea edx, [ecx - 0x23]
lea eax, [ecx - 0x14]
mov word [0x10ef05e], dx
mov word [0x10ef066], ax
add edx, 0x13
mov eax, ecx
mov word [0x10ef060], dx
mov dword [0x10ef062], 0x91b491a9
mov word [0x10ef068], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x10ef050]
add eax, 2
mov word [eax + 0x10ef646], dx
cmp eax, 0x1a
jb 0x1039c5d
mov eax, 0x10ef648
ret

Function at 0x1039c7b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3ce8], 1
jne 0x1039ca6
or dword [0x10f3ce8], 1
mov dword [0x10ef06c], 0xa8b4a3ad
mov dword [0x10ef070], 0xf4f5aaa3
mov byte [0x10ef074], 0xc6
xor eax, eax
mov cl, byte [eax + 0x10ef06c]
xor cl, 0xc6
mov byte [eax + 0x10ef664], cl
inc eax
cmp eax, 9
jb 0x1039ca8
mov eax, 0x10ef664
ret

Function at 0x1039cc3
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3ce4], 1
jne 0x1039d2c
or dword [0x10f3ce4], 1
mov dword [0x10ef078], 0x96b2a395
mov dword [0x10ef07c], 0xa3a5a9b4
mov dword [0x10ef080], 0xb593b5b5
mov dword [0x10ef084], 0xa98bb4a3
mov dword [0x10ef088], 0xbe83a3a2
mov dword [0x10ef08c], 0xb2b6a3a5
mov dword [0x10ef090], 0x96a8a9af
mov dword [0x10ef094], 0xa5afaaa9
mov word [0x10ef098], 0xc6bf
xor eax, eax
mov cl, byte [eax + 0x10ef078]
xor cl, 0xc6
mov byte [eax + 0x10ef670], cl
inc eax
cmp eax, 0x22
jb 0x1039d2e
mov eax, 0x10ef670
ret

Function at 0x1039d49
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3ce0], 1
jne 0x1039db2
or dword [0x10f3ce0], 1
mov dword [0x10ef09c], 0x96b2a381
mov dword [0x10ef0a0], 0xa3a5a9b4
mov dword [0x10ef0a4], 0xb593b5b5
mov dword [0x10ef0a8], 0xa98bb4a3
mov dword [0x10ef0ac], 0xbe83a3a2
mov dword [0x10ef0b0], 0xb2b6a3a5
mov dword [0x10ef0b4], 0x96a8a9af
mov dword [0x10ef0b8], 0xa5afaaa9
mov word [0x10ef0bc], 0xc6bf
xor eax, eax
mov cl, byte [eax + 0x10ef09c]
xor cl, 0xc6
mov byte [eax + 0x10ef694], cl
inc eax
cmp eax, 0x22
jb 0x1039db4
mov eax, 0x10ef694
ret

Function at 0x1039dcf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x10f3cdc], 1
jne 0x1039e25
or dword [0x10f3cdc], 1
mov dword [0x10ef0c0], 0xe6a3aa89
mov dword [0x10ef0c4], 0xb2afa8af
mov dword [0x10ef0c8], 0xafaaa7af
mov dword [0x10ef0cc], 0xafb2a7bc
mov dword [0x10ef0d0], 0xa0e6a8a9
mov dword [0x10ef0d4], 0xa3aaafa7
mov dword [0x10ef0d8], 0xc6e6fca2
xor eax, eax
mov cl, byte [eax + 0x10ef0c0]
xor cl, 0xc6
mov byte [eax + 0x10ef6b8], cl
inc eax
cmp eax, 0x1c
jb 0x1039e27
mov eax, 0x10ef6b8
ret