joyce8/EMBER2024-capa huggingface dataset:
Function at 0x32a8dc
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x38ada5
call fcn.00389c38
sub esp, 0xb0
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
lea eax, [ebp - 0x10]
push eax
push ebx
push dword [ebp + 0xc]
mov dword [ebp - 0x10], ebx
push ebx
push 0x1300
call dword [0x39212c]
test eax, eax
jne 0x32a924
call fcn.0032aa7d
mov ecx, dword [ebp + 8]
push eax
call fcn.00306aa9
mov eax, dword [ebp + 8]
jmp 0x32aa6e
test byte [0x3c26f0], 1
jne 0x32a945
or dword [0x3c26f0], 1
mov dword [0x3c16c8], 0x62c2b2f
mov byte [0x3c16cc], 0x26
xor eax, eax
mov cl, byte [eax + 0x3c16c8]
xor cl, 0x26
mov byte [eax + 0x3c1e9c], cl
inc eax
cmp eax, 5
jb 0x32a947
push 0xf
mov esi, 0x3c1e9c
pop edi
mov eax, esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x32a972
sub eax, ecx
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.00304c54
mov dword [ebp - 4], ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00304cc9
lea eax, [ebp - 0x2c]
push eax
lea edi, [ebp - 0x48]
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.0032fd99
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00304cea
push ebx
push 1
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.00304cea
push dword [ebp - 0x10]
call dword [0x3920e0]
push ebx
push dword [ebp + 0xc]
lea esi, [ebp - 0xb8]
call fcn.0032adc8
pop ecx
pop ecx
push eax
mov byte [ebp - 4], 5
call fcn.0032aae6
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00306ae6
add esp, 0xc
push 0x3ad294
push eax
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 6
call fcn.0030d66d
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 7
call fcn.0030b592
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.00304cea
push ebx
push 1
lea ecx, [ebp - 0x80]
call fcn.00304cea
push ebx
push 1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 4
call fcn.00304cea
mov edi, dword [ebp + 8]
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ebx
mov byte [edi], bl
call fcn.00304c0a
push ebx
push 1
mov ecx, esi
call fcn.00304cea
mov eax, edi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret

Function at 0x32aa7d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26f4], 1
jne 0x32aac9
or dword [0x3c26f4], 1
mov dword [0x3c16b0], 0x43544873
mov dword [0x3c16b4], 0x48414945
mov dword [0x3c16b8], 0x42435c4f
mov dword [0x3c16bc], 0x54544306
mov dword [0x3c16c0], 0x45065449
mov dword [0x3c16c4], 0x26434249
xor eax, eax
mov cl, byte [eax + 0x3c16b0]
xor cl, 0x26
mov byte [eax + 0x3c1e84], cl
inc eax
cmp eax, 0x18
jb 0x32aacb
mov eax, 0x3c1e84
ret

Function at 0x32aae6
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26ec], 1
jne 0x32ab24
or dword [0x3c26ec], 1
mov dword [0x3c16d0], 0x54430e06
mov dword [0x3c16d4], 0x6544954
mov dword [0x3c16d8], 0x43424945
mov word [0x3c16dc], 0x61c
mov byte [0x3c16de], 0x26
xor eax, eax
mov cl, byte [eax + 0x3c16d0]
xor cl, 0x26
mov byte [eax + 0x3c1ea4], cl
inc eax
cmp eax, 0xf
jb 0x32ab26
mov eax, 0x3c1ea4
ret
Function at 0x32adc8
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
and dword [ebp - 4], 0
test byte [0x3c26e8], 1
jne 0x32adf3
or dword [0x3c26e8], 1
mov dword [0x3c16e0], 0x424a4a03
mov byte [0x3c16e4], 0x26
xor eax, eax
mov cl, byte [eax + 0x3c16e0]
xor cl, 0x26
mov byte [eax + 0x3c1eb4], cl
inc eax
cmp eax, 5
jb 0x32adf5
push dword [ebp + 0xc]
lea eax, [ebp - 0x48]
push dword [ebp + 8]
push 0x3c1eb4
push eax
call fcn.0032fdf2
and dword [esi + 0x10], 0
add esp, 0x10
lea eax, [ebp - 0x48]
mov dword [esi + 0x14], 0xf
push eax
mov ecx, esi
mov byte [esi], 0
call fcn.00304cc9
mov eax, esi
leave
ret

Function at 0x32af97
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26e4], 1
jne 0x32aff3
or dword [0x3c26e4], 1
mov dword [0x3c16e8], 0x6b524361
mov dword [0x3c16ec], 0x4a534249
mov dword [0x3c16f0], 0x4a4f6043
mov dword [0x3c16f4], 0x4b476843
mov dword [0x3c16f8], 0x47400643
mov dword [0x3c16fc], 0x42434a4f
mov word [0x3c1700], 0x61c
mov byte [0x3c1702], 0x26
xor eax, eax
mov cl, byte [eax + 0x3c16e8]
xor cl, 0x26
mov byte [eax + 0x3c1ebc], cl
inc eax
cmp eax, 0x1b
jb 0x32aff5
mov eax, 0x3c1ebc
ret

Function at 0x32b010
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26e0], 1
jne 0x32b06d
or dword [0x3c26e0], 1
mov dword [0x3c1704], 0x65524375
mov dword [0x3c1708], 0x43545453
mov dword [0x3c170c], 0x4f625248
mov dword [0x3c1710], 0x52454354
mov dword [0x3c1714], 0x65f5449
mov dword [0x3c1718], 0x4a4f4740
mov dword [0x3c171c], 0x61c4243
mov byte [0x3c1720], 0x26
xor eax, eax
mov cl, byte [eax + 0x3c1704]
xor cl, 0x26
mov byte [eax + 0x3c1ed8], cl
inc eax
cmp eax, 0x1d
jb 0x32b06f
mov eax, 0x3c1ed8
ret

Function at 0x32b181
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26dc], 1
jne 0x32b1de
or dword [0x3c26dc], 1
mov dword [0x3c1724], 0x65524361
mov dword [0x3c1728], 0x43545453
mov dword [0x3c172c], 0x4f625248
mov dword [0x3c1730], 0x52454354
mov dword [0x3c1734], 0x65f5449
mov dword [0x3c1738], 0x4a4f4740
mov dword [0x3c173c], 0x61c4243
mov byte [0x3c1740], 0x26
xor eax, eax
mov cl, byte [eax + 0x3c1724]
xor cl, 0x26
mov byte [eax + 0x3c1ef8], cl
inc eax
cmp eax, 0x1d
jb 0x32b1e0
mov eax, 0x3c1ef8
ret
Function at 0x32b399
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26d8], 1
jne 0x32b508
mov eax, 0x837a
mov ecx, eax
mov word [0x3c1748], cx
mov word [0x3c174a], cx
add ecx, 0xfffffffb
mov word [0x3c174c], cx
lea ecx, [eax - 0x28]
mov word [0x3c174e], cx
add ecx, 2
lea edx, [eax - 0x2b]
mov word [0x3c1750], cx
push ebx
mov ecx, edx
mov word [0x3c1752], cx
add ecx, 0xfffffff9
push esi
mov esi, ecx
lea ecx, [eax - 0x3a]
mov word [0x3c1754], si
lea esi, [eax - 0x39]
mov word [0x3c1756], si
mov word [0x3c1764], cx
add esi, 8
add edx, 0xfffffffb
mov ecx, esi
push edi
lea edi, [eax - 0x37]
mov word [0x3c1766], cx
mov ecx, eax
mov word [0x3c175c], dx
mov edx, edi
mov word [0x3c1768], cx
mov word [0x3c176a], cx
add ecx, 0xffffff9c
mov word [0x3c175e], dx
mov edx, ecx
or dword [0x3c26d8], 1
mov word [0x3c176c], dx
lea edx, [eax - 0x68]
mov ebx, edx
mov word [0x3c176e], bx
mov ebx, ecx
mov word [0x3c1770], bx
lea ebx, [eax - 0x5b]
mov word [0x3c177e], ax
mov word [0x3c1772], bx
mov ebx, ecx
mov ecx, eax
add eax, 0xfffffffc
mov word [0x3c1780], ax
lea eax, [ecx - 0x38]
mov word [0x3c1786], ax
add eax, 0x11
mov word [0x3c1788], ax
lea eax, [ecx - 0x35]
mov word [0x3c178a], ax
add eax, 0xd
mov word [0x3c178c], ax
lea eax, [ecx - 0x12]
mov word [0x3c178e], ax
add eax, 0xffffffdf
pop edi
mov word [0x3c1790], ax
lea eax, [ecx - 0x54]
pop esi
mov word [0x3c1774], bx
mov dword [0x3c1758], 0x834f8360
mov dword [0x3c1760], 0x8348836f
mov word [0x3c1776], dx
mov dword [0x3c1778], 0x83168364
mov word [0x3c177c], cx
mov dword [0x3c1782], 0x83498354
mov dword [0x3c1792], 0x8343834b
mov word [0x3c1796], ax
pop ebx
xor eax, eax
mov ecx, 0x8326
xor cx, word [eax + 0x3c1748]
add eax, 2
mov word [eax + 0x3c1f16], cx
cmp eax, 0x50
jb 0x32b50a
mov eax, 0x3c1f18
ret

Function at 0x32b52b
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26d4], 1
jne 0x32b580
or dword [0x3c26d4], 1
mov dword [0x3c1798], 0x50064968
mov dword [0x3c179c], 0x4f555443
mov dword [0x3c17a0], 0x4f064849
mov dword [0x3c17a4], 0x6494048
mov dword [0x3c17a8], 0x4f475047
mov dword [0x3c17ac], 0x4a44474a
mov word [0x3c17b0], 0x2643
xor eax, eax
mov cl, byte [eax + 0x3c1798]
xor cl, 0x26
mov byte [eax + 0x3c1f68], cl
inc eax
cmp eax, 0x1a
jb 0x32b582
mov eax, 0x3c1f68
ret

Function at 0x32b76f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26d0], 1
jne 0x32b7c4
or dword [0x3c26d0], 1
mov dword [0x3c17b4], 0x50064968
mov dword [0x3c17b8], 0x4f555443
mov dword [0x3c17bc], 0x4f064849
mov dword [0x3c17c0], 0x6494048
mov dword [0x3c17c4], 0x4f475047
mov dword [0x3c17c8], 0x4a44474a
mov word [0x3c17cc], 0x2643
xor eax, eax
mov cl, byte [eax + 0x3c17b4]
xor cl, 0x26
mov byte [eax + 0x3c1f84], cl
inc eax
cmp eax, 0x1a
jb 0x32b7c6
mov eax, 0x3c1f84
ret
Function at 0x32b7e1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26cc], 1
jne 0x32b847
or dword [0x3c26cc], 1
mov dword [0x3c17d0], 0x4750486f
mov dword [0x3c17d4], 0x6424f4a
mov dword [0x3c17d8], 0x55544350
mov dword [0x3c17dc], 0x648494f
mov dword [0x3c17e0], 0x4940484f
mov dword [0x3c17e4], 0x414f5506
mov dword [0x3c17e8], 0x53524748
mov word [0x3c17ec], 0x4354
mov byte [0x3c17ee], 0x26
xor eax, eax
mov cl, byte [eax + 0x3c17d0]
xor cl, 0x26
mov byte [eax + 0x3c1fa0], cl
inc eax
cmp eax, 0x1f
jb 0x32b849
mov eax, 0x3c1fa0
ret

Function at 0x32bb4e
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26c8], 1
jne 0x32bbb4
or dword [0x3c26c8], 1
mov dword [0x3c17f0], 0x4a4f4760
mov dword [0x3c17f4], 0x52064243
mov dword [0x3c17f8], 0x43410649
mov dword [0x3c17fc], 0x43520652
mov dword [0x3c1800], 0x4006564b
mov dword [0x3c1804], 0x43424a49
mov dword [0x3c1808], 0x47560654
mov word [0x3c180c], 0x4e52
mov byte [0x3c180e], 0x26
xor eax, eax
mov cl, byte [eax + 0x3c17f0]
xor cl, 0x26
mov byte [eax + 0x3c1fc0], cl
inc eax
cmp eax, 0x1f
jb 0x32bbb6
mov eax, 0x3c1fc0
ret

Function at 0x32bd26
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26c4], 1
jne 0x32bd78
or dword [0x3c26c4], 1
mov dword [0x3c1810], 0x60524361
mov dword [0x3c1814], 0x43424a49
mov dword [0x3c1818], 0x52477654
mov dword [0x3c181c], 0x4740064e
mov dword [0x3c1820], 0x42434a4f
mov word [0x3c1824], 0x61c
mov byte [0x3c1826], 0x26
xor eax, eax
mov cl, byte [eax + 0x3c1810]
xor cl, 0x26
mov byte [eax + 0x3c1fe0], cl
inc eax
cmp eax, 0x17
jb 0x32bd7a
mov eax, 0x3c1fe0
ret

Function at 0x32c042
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26c0], 1
mov edx, 0x8326
jne 0x32c0d9
or dword [0x3c26c0], 1
lea ecx, [edx - 0x23]
mov eax, ecx
mov word [0x3c1828], ax
add eax, 0x73
mov word [0x3c182a], ax
push esi
lea eax, [edx + 0x2e]
mov esi, eax
add eax, 0xfffffff3
mov word [0x3c1834], ax
lea eax, [edx + 0x25]
mov word [0x3c1836], ax
add eax, 0x26
mov word [0x3c1838], ax
lea eax, [edx - 0x16]
mov word [0x3c182c], si
add esi, 0xfffffff5
mov word [0x3c183a], ax
add eax, 2
mov word [0x3c183c], ax
lea eax, [edx - 0x11]
mov word [0x3c183e], ax
mov eax, edx
mov word [0x3c182e], si
mov dword [0x3c1830], 0x83548341
mov dword [0x3c1840], 0x83038314
mov word [0x3c1844], ax
pop esi
xor eax, eax
mov ecx, edx
xor cx, word [eax + 0x3c1828]
add eax, 2
mov word [eax + 0x3c1ff6], cx
cmp eax, 0x1e
jb 0x32c0db
mov eax, 0x3c1ff8
ret

Function at 0x32c0f9
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26bc], 1
mov ecx, 0x8326
jne 0x32c13a
or dword [0x3c26bc], 1
lea eax, [ecx + 0x37]
mov word [0x3c1848], ax
add eax, 0xfffffff9
mov word [0x3c184a], ax
lea eax, [ecx + 0x1a]
mov word [0x3c184c], ax
add eax, 0x1b
mov word [0x3c184e], ax
mov eax, ecx
mov word [0x3c1850], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x3c1848]
add eax, 2
mov word [eax + 0x3c2016], dx
cmp eax, 0xa
jb 0x32c13c
mov eax, 0x3c2018
ret
Function at 0x32c15a
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26b8], 1
mov ecx, 0x8326
jne 0x32c1ad
or dword [0x3c26b8], 1
lea eax, [ecx + 0x37]
mov word [0x3c1854], ax
add eax, 0xfffffff9
mov word [0x3c1856], ax
lea eax, [ecx + 0x1a]
mov word [0x3c1858], ax
add eax, 0xffffffd5
mov word [0x3c185a], ax
lea eax, [ecx - 0x12]
mov word [0x3c185c], ax
add eax, 0x47
mov word [0x3c185e], ax
mov eax, ecx
mov word [0x3c1860], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x3c1854]
add eax, 2
mov word [eax + 0x3c2022], dx
cmp eax, 0xe
jb 0x32c1af
mov eax, 0x3c2024
ret

Function at 0x32c1cd
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26b4], 1
mov ecx, 0x8326
jne 0x32c220
or dword [0x3c26b4], 1
lea eax, [ecx + 0x37]
mov word [0x3c1864], ax
add eax, 0xfffffff9
mov word [0x3c1866], ax
lea eax, [ecx + 0x1a]
mov word [0x3c1868], ax
add eax, 0xffffffd0
mov word [0x3c186a], ax
lea eax, [ecx - 0x14]
mov word [0x3c186c], ax
add eax, 0x49
mov word [0x3c186e], ax
mov eax, ecx
mov word [0x3c1870], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x3c1864]
add eax, 2
mov word [eax + 0x3c2032], dx
cmp eax, 0xe
jb 0x32c222
mov eax, 0x3c2034
ret

Function at 0x32c240
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26b0], 1
mov ecx, 0x8326
jne 0x32c281
or dword [0x3c26b0], 1
lea eax, [ecx + 0x37]
mov word [0x3c1874], ax
add eax, 0xfffffff9
mov word [0x3c1876], ax
lea eax, [ecx + 0x1a]
mov word [0x3c1878], ax
add eax, 0x1b
mov word [0x3c187a], ax
mov eax, ecx
mov word [0x3c187c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x3c1874]
add eax, 2
mov word [eax + 0x3c2042], dx
cmp eax, 0xa
jb 0x32c283
mov eax, 0x3c2044
ret

Function at 0x32c2a1
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26ac], 1
mov ecx, 0x8326
jne 0x32c2f4
or dword [0x3c26ac], 1
lea eax, [ecx + 0x37]
mov word [0x3c1880], ax
add eax, 0xfffffff9
mov word [0x3c1882], ax
lea eax, [ecx + 0x1a]
mov word [0x3c1884], ax
add eax, 0xffffffd5
mov word [0x3c1886], ax
lea eax, [ecx - 0x12]
mov word [0x3c1888], ax
add eax, 0x47
mov word [0x3c188a], ax
mov eax, ecx
mov word [0x3c188c], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x3c1880]
add eax, 2
mov word [eax + 0x3c204e], dx
cmp eax, 0xe
jb 0x32c2f6
mov eax, 0x3c2050
ret
Function at 0x32c3ee
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26a8], 1
mov ecx, 0x8326
jne 0x32c633
or dword [0x3c26a8], 1
lea eax, [ecx - 0x10]
mov word [0x3c1898], ax
inc eax
mov word [0x3c189a], ax
lea eax, [ecx - 0x12]
mov word [0x3c189c], ax
inc eax
mov word [0x3c189e], ax
lea eax, [ecx - 0x14]
mov word [0x3c18a0], ax
inc eax
mov word [0x3c18a2], ax
lea eax, [ecx - 0x16]
mov word [0x3c18a4], ax
inc eax
mov word [0x3c18a6], ax
lea eax, [ecx - 8]
mov word [0x3c18a8], ax
inc eax
mov word [0x3c18aa], ax
lea eax, [ecx + 0x41]
mov word [0x3c18ac], ax
add eax, 0xfffffffd
mov word [0x3c18ae], ax
lea eax, [ecx + 0x3f]
mov word [0x3c18b0], ax
add eax, 0xfffffffd
mov word [0x3c18b2], ax
lea eax, [ecx + 0x3d]
mov word [0x3c18b4], ax
add eax, 0xfffffffd
mov word [0x3c18b6], ax
lea eax, [ecx + 0x3b]
mov word [0x3c18b8], ax
add eax, 0xd
mov word [0x3c18ba], ax
lea eax, [ecx + 0x49]
mov word [0x3c18bc], ax
add eax, 0xfffffffd
mov word [0x3c18be], ax
lea eax, [ecx + 0x47]
mov word [0x3c18c0], ax
add eax, 0xfffffffd
mov word [0x3c18c2], ax
lea eax, [ecx + 0x45]
mov word [0x3c18c4], ax
add eax, 0xfffffffd
mov word [0x3c18c6], ax
lea eax, [ecx + 0x43]
mov word [0x3c18c8], ax
add eax, 0xd
mov word [0x3c18ca], ax
lea eax, [ecx + 0x51]
mov word [0x3c18cc], ax
add eax, 0xfffffffd
mov word [0x3c18ce], ax
lea eax, [ecx + 0x4f]
mov word [0x3c18d0], ax
add eax, 0xfffffffd
mov word [0x3c18d2], ax
lea eax, [ecx + 0x4d]
mov word [0x3c18d4], ax
add eax, 0xfffffffd
mov word [0x3c18d6], ax
lea eax, [ecx + 0x4b]
mov word [0x3c18d8], ax
add eax, 0xd
mov word [0x3c18da], ax
lea eax, [ecx + 0x59]
mov word [0x3c18dc], ax
add eax, 0xfffffffd
mov word [0x3c18de], ax
lea eax, [ecx + 0x21]
mov word [0x3c18e0], ax
add eax, 0xfffffffd
mov word [0x3c18e2], ax
lea eax, [ecx + 0x1f]
mov word [0x3c18e4], ax
add eax, 0xfffffffd
mov word [0x3c18e6], ax
lea eax, [ecx + 0x1d]
mov word [0x3c18e8], ax
add eax, 0xfffffffd
mov word [0x3c18ea], ax
lea eax, [ecx + 0x1b]
mov word [0x3c18ec], ax
add eax, 0xd
mov word [0x3c18ee], ax
lea eax, [ecx + 0x29]
mov word [0x3c18f0], ax
add eax, 0xfffffffd
mov word [0x3c18f2], ax
lea eax, [ecx + 0x27]
mov word [0x3c18f4], ax
add eax, 0xfffffffd
mov word [0x3c18f6], ax
lea eax, [ecx + 0x25]
mov word [0x3c18f8], ax
add eax, 0xfffffffd
mov word [0x3c18fa], ax
lea eax, [ecx + 0x23]
mov word [0x3c18fc], ax
add eax, 0xd
mov word [0x3c18fe], ax
lea eax, [ecx + 0x31]
mov word [0x3c1900], ax
add eax, 0xfffffffd
mov word [0x3c1902], ax
lea eax, [ecx + 0x2f]
mov word [0x3c1904], ax
add eax, 0xfffffffd
mov word [0x3c1906], ax
lea eax, [ecx + 0x2d]
mov word [0x3c1908], ax
add eax, 0xfffffffd
mov word [0x3c190a], ax
lea eax, [ecx + 0x2b]
mov word [0x3c190c], ax
add eax, 0xd
mov word [0x3c190e], ax
lea eax, [ecx + 0x39]
mov word [0x3c1910], ax
add eax, 0xfffffffd
mov word [0x3c1912], ax
mov eax, ecx
mov word [0x3c1914], ax
xor eax, eax
mov edx, ecx
xor dx, word [eax + 0x3c1898]
add eax, 2
mov word [eax + 0x3c205e], dx
cmp eax, 0x7e
jb 0x32c635
mov eax, 0x3c2060
ret
Function at 0x32cd05
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26a4], 1
jne 0x32cd6c
or dword [0x3c26a4], 1
mov dword [0x3c1918], 0x5c795c4b
mov dword [0x3c191c], 0x5479564f
mov dword [0x3c1920], 0x43424743
mov dword [0x3c1924], 0x484f7954
mov dword [0x3c1928], 0x4079524f
mov dword [0x3c192c], 0xe434a4f
mov dword [0x3c1930], 0x4740060f
mov dword [0x3c1934], 0x42434a4f
mov byte [0x3c1938], 0x26
xor eax, eax
mov cl, byte [eax + 0x3c1918]
xor cl, 0x26
mov byte [eax + 0x3c20e0], cl
inc eax
cmp eax, 0x21
jb 0x32cd6e
mov eax, 0x3c20e0
ret

Function at 0x32cd89
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c26a0], 1
jne 0x32cdf0
or dword [0x3c26a0], 1
mov dword [0x3c193c], 0x5c795c4b
mov dword [0x3c1940], 0x5479564f
mov dword [0x3c1944], 0x43424743
mov dword [0x3c1948], 0x4f407954
mov dword [0x3c194c], 0x5579434a
mov dword [0x3c1950], 0xe524752
mov dword [0x3c1954], 0x4740060f
mov dword [0x3c1958], 0x42434a4f
mov byte [0x3c195c], 0x26
xor eax, eax
mov cl, byte [eax + 0x3c193c]
xor cl, 0x26
mov byte [eax + 0x3c2104], cl
inc eax
cmp eax, 0x21
jb 0x32cdf2
mov eax, 0x3c2104
ret

Function at 0x32ce0d
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c269c], 1
jne 0x32ce8b
or dword [0x3c269c], 1
mov dword [0x3c1960], 0x5c795c4b
mov dword [0x3c1964], 0x5479564f
mov dword [0x3c1968], 0x43424743
mov dword [0x3c196c], 0x5e437954
mov dword [0x3c1970], 0x45475452
mov dword [0x3c1974], 0x4f407952
mov dword [0x3c1978], 0x5279434a
mov dword [0x3c197c], 0x434e7949
mov dword [0x3c1980], 0xf0e5647
mov dword [0x3c1984], 0x4f474006
mov dword [0x3c1988], 0x2642434a
xor eax, eax
mov cl, byte [eax + 0x3c1960]
xor cl, 0x26
mov byte [eax + 0x3c2128], cl
inc eax
cmp eax, 0x2c
jb 0x32ce8d
mov eax, 0x3c2128
ret

Function at 0x32cea8
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2698], 1
jne 0x32cf12
or dword [0x3c2698], 1
mov dword [0x3c198c], 0x4a4f4760
mov dword [0x3c1990], 0x52064243
mov dword [0x3c1994], 0x54450649
mov dword [0x3c1998], 0x43524743
mov dword [0x3c199c], 0x55434206
mov dword [0x3c19a0], 0x47484f52
mov dword [0x3c19a4], 0x48494f52
mov dword [0x3c19a8], 0x52475606
mov dword [0x3c19ac], 0x26061c4e
xor eax, eax
mov cl, byte [eax + 0x3c198c]
xor cl, 0x26
mov byte [eax + 0x3c2154], cl
inc eax
cmp eax, 0x24
jb 0x32cf14
mov eax, 0x3c2154
ret

Function at 0x32cf2f
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2694], 1
jne 0x32cf95
or dword [0x3c2694], 1
mov dword [0x3c19b0], 0x4a4f4760
mov dword [0x3c19b4], 0x52064243
mov dword [0x3c19b8], 0x54450649
mov dword [0x3c19bc], 0x43524743
mov dword [0x3c19c0], 0x52534906
mov dword [0x3c19c4], 0x6525356
mov dword [0x3c19c8], 0x434a4f40
mov word [0x3c19cc], 0x61c
mov byte [0x3c19ce], 0x26
xor eax, eax
mov cl, byte [eax + 0x3c19b0]
xor cl, 0x26
mov byte [eax + 0x3c2178], cl
inc eax
cmp eax, 0x1f
jb 0x32cf97
mov eax, 0x3c2178
ret
Function at 0x32cfcf
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2690], 1
jne 0x32d00d
or dword [0x3c2690], 1
mov dword [0x3c19d0], 0x4971556f
mov dword [0x3c19d4], 0x76121051
mov dword [0x3c19d8], 0x43454954
mov word [0x3c19dc], 0x5555
mov byte [0x3c19de], 0x26
xor eax, eax
mov cl, byte [eax + 0x3c19d0]
xor cl, 0x26
mov byte [eax + 0x3c2198], cl
inc eax
cmp eax, 0xf
jb 0x32d00f
mov eax, 0x3c2198
ret

Function at 0x32d125
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c268c], 1
jne 0x32d18e
or dword [0x3c268c], 1
mov dword [0x3c19e0], 0x494a4a67
mov dword [0x3c19e4], 0x43524745
mov dword [0x3c19e8], 0x6f424867
mov dword [0x3c19ec], 0x4f524f48
mov dword [0x3c19f0], 0x5c4f4a47
mov dword [0x3c19f4], 0x424f7543
mov dword [0x3c19f8], 0x4f474006
mov dword [0x3c19fc], 0x1c42434a
mov word [0x3c1a00], 0x2606
xor eax, eax
mov cl, byte [eax + 0x3c19e0]
xor cl, 0x26
mov byte [eax + 0x3c21a8], cl
inc eax
cmp eax, 0x22
jb 0x32d190
mov eax, 0x3c21a8
ret

Function at 0x32d1ab
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2688], 1
jne 0x32d20a
or dword [0x3c2688], 1
mov dword [0x3c1a04], 0x45434e65
mov dword [0x3c1a08], 0x4d49724d
mov dword [0x3c1a0c], 0x436b4843
mov dword [0x3c1a10], 0x5443444b
mov dword [0x3c1a14], 0x564f4e55
mov dword [0x3c1a18], 0x4f474006
mov dword [0x3c1a1c], 0x1c42434a
mov word [0x3c1a20], 0x2606
xor eax, eax
mov cl, byte [eax + 0x3c1a04]
xor cl, 0x26
mov byte [eax + 0x3c21cc], cl
inc eax
cmp eax, 0x1e
jb 0x32d20c
mov eax, 0x3c21cc
ret

Function at 0x32d470
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c267c], 1
jne 0x32d4f5
or dword [0x3c267c], 1
mov dword [0x3c1a38], 0x48484765
mov dword [0x3c1a3c], 0x57065249
mov dword [0x3c1a40], 0x5f544353
mov dword [0x3c1a44], 0x10064706
mov dword [0x3c1a48], 0x4f440612
mov dword [0x3c1a4c], 0x4f500652
mov dword [0x3c1a50], 0x49065143
mov dword [0x3c1a54], 0x14150648
mov dword [0x3c1a58], 0x524f4406
mov dword [0x3c1a5c], 0x484f5106
mov dword [0x3c1a60], 0x55514942
mov byte [0x3c1a64], 0x26
xor eax, eax
mov cl, byte [eax + 0x3c1a38]
xor cl, 0x26
mov byte [eax + 0x3c2200], cl
inc eax
cmp eax, 0x2d
jb 0x32d4f7
mov eax, 0x3c2200
ret

Function at 0x32d512
Capabilities:
Encode data using xor

Disassembly:
test byte [0x3c2678], 1
jne 0x32d5c2
or dword [0x3c2678], 1
push ebx
push esi
mov eax, 0x836e
mov word [0x3c1a68], ax
dec eax
mov word [0x3c1a6a], ax
push edi
mov edi, 0x8363
mov eax, edi
mov word [0x3c1a6c], ax
add eax, 0x1c
mov word [0x3c1a6e], ax
lea esi, [edi + 0x16]
mov eax, esi
mov word [0x3c1a70], ax
lea edx, [edi + 7]
mov eax, edx
mov word [0x3c1a72], ax
dec eax
mov word [0x3c1a74], ax
lea ecx, [edi + 2]
mov eax, ecx
mov word [0x3c1a76], ax
add eax, 2
mov ebx, eax
lea eax, [edi + 0xc]
pop edi
mov word [0x3c1a86], ax
add eax, 0xffffffb7
pop esi
mov word [0x3c1a78], bx
mov dword [0x3c1a7a], 0x8379836a
mov dword [0x3c1a7e], 0x8367836b
mov dword [0x3c1a82], 0x836e8365
mov dword [0x3c1a88], 0x83638368
mov word [0x3c1a8c], ax
pop ebx
xor eax, eax
mov ecx, 0x8326
xor cx, word [eax + 0x3c1a68]
add eax, 2
mov word [eax + 0x3c222e], cx
cmp eax, 0x26
jb 0x32d5c4
mov eax, 0x3c2230
ret