joyce8/EMBER2024-capa huggingface dataset:
Function at 0x54b944
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], esi
mov esi, dword [esi]
sub esp, 0x14
mov dword [esp + 0x10], 0x1c17dc80
mov dword [esp + 0xc], 0x2003a
mov dword [esp + 8], edx
mov edx, 0x54b914
mov dword [esp + 4], ebx
mov dword [esp + 0x10], edx
xor edx, edx
mov ebx, dword [esp + 0x10]
mov ebx, dword [ebx]
xor edx, ebx
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x54b983
cmp edx, 0x2460
je 0x54b9a0
int3
mov ebx, dword [esp + 4]
add esi, edx
mov edx, dword [esp + 8]
add esp, 0x14
xchg dword [esp], esi
mov dword [esp + 4], 0xed0004c2
jmp 0x54b9b4
ret 4

Function at 0x54bbac
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7f
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], ecx
mov ecx, dword [ecx]
sub esp, 0x1c
mov dword [esp + 0x18], 0xef96e616
mov dword [esp + 0x14], 0x20041
mov dword [esp + 0x10], edx
mov edx, 0x54bb7c
mov dword [esp + 0xc], ebp
mov dword [esp + 0x18], edx
xor edx, edx
mov ebp, dword [esp + 0x18]
mov ebp, dword [ebp]
xor edx, ebp
add dword [esp + 0x18], 4
dec word [esp + 0x14]
jne 0x54bbeb
cmp edx, 0x2692
je 0x54bc09
int3
mov ebp, dword [esp + 0xc]
add ecx, edx
mov edx, dword [esp + 0x10]
add esp, 0x1c
xchg dword [esp], ecx
mov dword [esp + 4], 0xd70004c2
jmp 0x54bc1d
ret 4

Function at 0x54bd36
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7d
push dword [esp]
sub dword [esp], 0x7c
push dword [esp]
xchg dword [esp], esi
mov esi, dword [esi]
sub esp, 0x24
mov dword [esp + 0x20], 0x3ff167ab
mov dword [esp + 0x1c], 0x2006e
mov dword [esp + 0x18], ebp
mov ebp, 0x54bd04
mov dword [esp + 0x14], edi
mov dword [esp + 0x20], ebp
xor ebp, ebp
mov edi, dword [esp + 0x20]
mov edi, dword [edi]
xor ebp, edi
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x54bd75
cmp ebp, 0x2449
je 0x54bd92
int3
mov edi, dword [esp + 0x14]
add esi, ebp
mov ebp, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], esi
mov dword [esp + 4], 0xdf0004c2
jmp 0x54bda6
ret 4

Function at 0x54be57
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], edi
mov edi, dword [edi]
sub esp, 0x18
mov dword [esp + 0x14], 0xa4676a34
mov dword [esp + 0x10], 0x20033
mov dword [esp + 0xc], esi
mov esi, 0x54be24
mov dword [esp + 8], ecx
mov dword [esp + 0x14], esi
xor esi, esi
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
xor esi, ecx
add dword [esp + 0x14], 4
dec word [esp + 0x10]
jne 0x54be96
cmp esi, 0x2be9
je 0x54beb3
int3
mov ecx, dword [esp + 8]
add edi, esi
mov esi, dword [esp + 0xc]
add esp, 0x18
xchg dword [esp], edi
mov dword [esp + 4], 0x610004c2
jmp 0x54bec7
ret 4
Function at 0x54bf7c
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x81
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], edi
mov edi, dword [edi]
sub esp, 0x24
mov dword [esp + 0x20], 0x7bd00a16
mov dword [esp + 0x1c], 0x20073
mov dword [esp + 0x18], ecx
mov ecx, 0x54bf4c
mov dword [esp + 0x14], esi
mov dword [esp + 0x20], ecx
xor ecx, ecx
mov esi, dword [esp + 0x20]
mov esi, dword [esi]
xor ecx, esi
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x54bfbb
cmp ecx, 0x10c0
je 0x54bfd8
int3
mov esi, dword [esp + 0x14]
add edi, ecx
mov ecx, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], edi
mov dword [esp + 4], 0xb80004c2
jmp 0x54bfec
ret 4

Function at 0x54c45a
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7f
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], ebp
mov ebp, dword [ebp]
sub esp, 0x18
mov dword [esp + 0x14], 0x515ab12b
mov dword [esp + 0x10], 0x2004d
mov dword [esp + 0xc], eax
mov eax, 0x54c428
mov dword [esp + 8], ecx
mov dword [esp + 0x14], eax
xor eax, eax
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
xor eax, ecx
add dword [esp + 0x14], 4
dec word [esp + 0x10]
jne 0x54c49a
cmp eax, 0x233e
je 0x54c4b6
int3
mov ecx, dword [esp + 8]
add ebp, eax
mov eax, dword [esp + 0xc]
add esp, 0x18
xchg dword [esp], ebp
mov dword [esp + 4], 0x2b0004c2
jmp 0x54c4ca
ret 4

Function at 0x54c517
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7f
push dword [esp]
xchg dword [esp], ebp
mov ebp, dword [ebp]
sub esp, 0x14
mov dword [esp + 0x10], 0xb6017b10
mov dword [esp + 0xc], 0x2006c
mov dword [esp + 8], eax
mov eax, 0x54c4e4
mov dword [esp + 4], ecx
mov dword [esp + 0x10], eax
xor eax, eax
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx]
xor eax, ecx
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x54c557
cmp eax, 0x612
je 0x54c573
int3
mov ecx, dword [esp + 4]
add ebp, eax
mov eax, dword [esp + 8]
add esp, 0x14
xchg dword [esp], ebp
mov dword [esp + 4], 0xac0004c2
jmp 0x54c587
ret 4

Function at 0x54d04e
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x81
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], eax
mov eax, dword [eax]
sub esp, 0x14
mov dword [esp + 0x10], 0xd5491889
mov dword [esp + 0xc], 0x20034
mov dword [esp + 8], ebx
mov ebx, 0x54d01c
mov dword [esp + 4], ebp
mov dword [esp + 0x10], ebx
xor ebx, ebx
mov ebp, dword [esp + 0x10]
mov ebp, dword [ebp]
xor ebx, ebp
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x54d08d
cmp ebx, 0x3330
je 0x54d0ab
int3
mov ebp, dword [esp + 4]
add eax, ebx
mov ebx, dword [esp + 8]
add esp, 0x14
xchg dword [esp], eax
mov dword [esp + 4], 0x410004c2
jmp 0x54d0bf
ret 4
Function at 0x54d5db
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], edx
mov edx, dword [edx]
sub esp, 0x14
mov dword [esp + 0x10], 0xaebd008f
mov dword [esp + 0xc], 0x2004e
mov dword [esp + 8], ebx
mov ebx, 0x54d5a8
mov dword [esp + 4], eax
mov dword [esp + 0x10], ebx
xor ebx, ebx
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
xor ebx, eax
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x54d61a
cmp ebx, 0x2a1a
je 0x54d637
int3
mov eax, dword [esp + 4]
add edx, ebx
mov ebx, dword [esp + 8]
add esp, 0x14
xchg dword [esp], edx
mov dword [esp + 4], 0xb50004c2
jmp 0x54d64b
ret 4

Function at 0x54d760
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], edx
mov edx, dword [edx]
sub esp, 0x20
mov dword [esp + 0x1c], 0xe66aaabc
mov dword [esp + 0x18], 0x20037
mov dword [esp + 0x14], esi
mov esi, 0x54d730
mov dword [esp + 0x10], ebx
mov dword [esp + 0x1c], esi
xor esi, esi
mov ebx, dword [esp + 0x1c]
mov ebx, dword [ebx]
xor esi, ebx
add dword [esp + 0x1c], 4
dec word [esp + 0x18]
jne 0x54d79f
cmp esi, 0x2771
je 0x54d7bc
int3
mov ebx, dword [esp + 0x10]
add edx, esi
mov esi, dword [esp + 0x14]
add esp, 0x20
xchg dword [esp], edx
mov dword [esp + 4], 0xda0004c2
jmp 0x54d7d0
ret 4

Function at 0x54e846
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7f
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], eax
mov eax, dword [eax]
sub esp, 0x24
mov dword [esp + 0x20], 0x3b7c1691
mov dword [esp + 0x1c], 0x2005f
mov dword [esp + 0x18], ecx
mov ecx, 0x54e814
mov dword [esp + 0x14], ebp
mov dword [esp + 0x20], ecx
xor ecx, ecx
mov ebp, dword [esp + 0x20]
mov ebp, dword [ebp]
xor ecx, ebp
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x54e885
cmp ecx, 0x3aa3
je 0x54e8a3
int3
mov ebp, dword [esp + 0x14]
add eax, ecx
mov ecx, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], eax
mov dword [esp + 4], 0x350004c2
jmp 0x54e8b7
ret 4

Function at 0x54e9f0
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7f
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], eax
mov eax, dword [eax]
sub esp, 0x1c
mov dword [esp + 0x18], 0x531a8af6
mov dword [esp + 0x14], 0x20037
mov dword [esp + 0x10], ecx
mov ecx, 0x54e9c0
mov dword [esp + 0xc], edx
mov dword [esp + 0x18], ecx
xor ecx, ecx
mov edx, dword [esp + 0x18]
mov edx, dword [edx]
xor ecx, edx
add dword [esp + 0x18], 4
dec word [esp + 0x14]
jne 0x54ea2f
cmp ecx, 0x11dc
je 0x54ea4c
int3
mov edx, dword [esp + 0xc]
add eax, ecx
mov ecx, dword [esp + 0x10]
add esp, 0x1c
xchg dword [esp], eax
mov dword [esp + 4], 0xf50004c2
jmp 0x54ea60
ret 4
Function at 0x54eb16
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7e
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], eax
mov eax, dword [eax]
sub esp, 0x24
mov dword [esp + 0x20], 0x1f33cc7f
mov dword [esp + 0x1c], 0x20063
mov dword [esp + 0x18], ebp
mov ebp, 0x54eae4
mov dword [esp + 0x14], esi
mov dword [esp + 0x20], ebp
xor ebp, ebp
mov esi, dword [esp + 0x20]
mov esi, dword [esi]
xor ebp, esi
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x54eb55
cmp ebp, 0x2f8a
je 0x54eb72
int3
mov esi, dword [esp + 0x14]
add eax, ebp
mov ebp, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], eax
mov dword [esp + 4], 0x90004c2
jmp 0x54eb86
ret 4

Function at 0x54fa4a
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], esi
mov esi, dword [esi]
sub esp, 0x20
mov dword [esp + 0x1c], 0xdcc19299
mov dword [esp + 0x18], 0x20034
mov dword [esp + 0x14], ebp
mov ebp, 0x54fa18
mov dword [esp + 0x10], ebx
mov dword [esp + 0x1c], ebp
xor ebp, ebp
mov ebx, dword [esp + 0x1c]
mov ebx, dword [ebx]
xor ebp, ebx
add dword [esp + 0x1c], 4
dec word [esp + 0x18]
jne 0x54fa89
cmp ebp, 0x1b48
je 0x54faa6
int3
mov ebx, dword [esp + 0x10]
add esi, ebp
mov ebp, dword [esp + 0x14]
add esp, 0x20
xchg dword [esp], esi
mov dword [esp + 4], 0x130004c2
jmp 0x54faba
ret 4

Function at 0x54fbca
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x81
push dword [esp]
sub dword [esp], 0x80
push dword [esp]
xchg dword [esp], ebp
mov ebp, dword [ebp]
sub esp, 0x18
mov dword [esp + 0x14], 0xb4d1a2c4
mov dword [esp + 0x10], 0x20078
mov dword [esp + 0xc], ebx
mov ebx, 0x54fb98
mov dword [esp + 8], eax
mov dword [esp + 0x14], ebx
xor ebx, ebx
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
xor ebx, eax
add dword [esp + 0x14], 4
dec word [esp + 0x10]
jne 0x54fc0a
cmp ebx, 0x10ed
je 0x54fc27
int3
mov eax, dword [esp + 8]
add ebp, ebx
mov ebx, dword [esp + 0xc]
add esp, 0x18
xchg dword [esp], ebp
mov dword [esp + 4], 0x5f0004c2
jmp 0x54fc3b
ret 4

Function at 0x552a7a
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7f
push dword [esp]
xchg dword [esp], esi
mov esi, dword [esi]
sub esp, 0x20
mov dword [esp + 0x1c], 0x757f071c
mov dword [esp + 0x18], 0x20073
mov dword [esp + 0x14], eax
mov eax, 0x552a48
mov dword [esp + 0x10], ebp
mov dword [esp + 0x1c], eax
xor eax, eax
mov ebp, dword [esp + 0x1c]
mov ebp, dword [ebp]
xor eax, ebp
add dword [esp + 0x1c], 4
dec word [esp + 0x18]
jne 0x552ab9
cmp eax, 0x3d0b
je 0x552ad6
int3
mov ebp, dword [esp + 0x10]
add esi, eax
mov eax, dword [esp + 0x14]
add esp, 0x20
xchg dword [esp], esi
mov dword [esp + 4], 0xda0004c2
jmp 0x552aea
ret 4
Function at 0x553a9b
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7e
push dword [esp]
sub dword [esp], 0x7c
push dword [esp]
xchg dword [esp], esi
mov esi, dword [esi]
sub esp, 0x18
mov dword [esp + 0x14], 0x56a36fc2
mov dword [esp + 0x10], 0x2005d
mov dword [esp + 0xc], eax
mov eax, 0x553a68
mov dword [esp + 8], edi
mov dword [esp + 0x14], eax
xor eax, eax
mov edi, dword [esp + 0x14]
mov edi, dword [edi]
xor eax, edi
add dword [esp + 0x14], 4
dec word [esp + 0x10]
jne 0x553ada
cmp eax, 0x24fd
je 0x553af6
int3
mov edi, dword [esp + 8]
add esi, eax
mov eax, dword [esp + 0xc]
add esp, 0x18
xchg dword [esp], esi
mov dword [esp + 4], 0x50004c2
jmp 0x553b0a
ret 4

Function at 0x553d44
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], esi
mov esi, dword [esi]
sub esp, 0x18
mov dword [esp + 0x14], 0xd603bee9
mov dword [esp + 0x10], 0x20032
mov dword [esp + 0xc], edx
mov edx, 0x553d14
mov dword [esp + 8], ebp
mov dword [esp + 0x14], edx
xor edx, edx
mov ebp, dword [esp + 0x14]
mov ebp, dword [ebp]
xor edx, ebp
add dword [esp + 0x14], 4
dec word [esp + 0x10]
jne 0x553d83
cmp edx, 0x1cb3
je 0x553da1
int3
mov ebp, dword [esp + 8]
add esi, edx
mov edx, dword [esp + 0xc]
add esp, 0x18
xchg dword [esp], esi
mov dword [esp + 4], 0x390004c2
jmp 0x553db5
ret 4

Function at 0x553f6d
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7e
push dword [esp]
sub dword [esp], 0x7c
push dword [esp]
xchg dword [esp], esi
mov esi, dword [esi]
sub esp, 0x20
mov dword [esp + 0x1c], 0xa5157061
mov dword [esp + 0x18], 0x20063
mov dword [esp + 0x14], ecx
mov ecx, 0x553f3c
mov dword [esp + 0x10], ebp
mov dword [esp + 0x1c], ecx
xor ecx, ecx
mov ebp, dword [esp + 0x1c]
mov ebp, dword [ebp]
xor ecx, ebp
add dword [esp + 0x1c], 4
dec word [esp + 0x18]
jne 0x553fac
cmp ecx, 0x10e6
je 0x553fca
int3
mov ebp, dword [esp + 0x10]
add esi, ecx
mov ecx, dword [esp + 0x14]
add esp, 0x20
xchg dword [esp], esi
mov dword [esp + 4], 0xfb0004c2
jmp 0x553fde
ret 4

Function at 0x58b84f
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7f
push dword [esp]
sub dword [esp], 0x7c
push dword [esp]
xchg dword [esp], ecx
mov ecx, dword [ecx]
sub esp, 0x24
mov dword [esp + 0x20], 0x5e4e4f2c
mov dword [esp + 0x1c], 0x20038
mov dword [esp + 0x18], edx
mov edx, 0x58b81c
mov dword [esp + 0x14], edi
mov dword [esp + 0x20], edx
xor edx, edx
mov edi, dword [esp + 0x20]
mov edi, dword [edi]
xor edx, edi
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x58b88e
cmp edx, 0x24e0
je 0x58b8ab
int3
mov edi, dword [esp + 0x14]
add ecx, edx
mov edx, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], ecx
mov dword [esp + 4], 0xec0004c2
jmp 0x58b8bf
ret 4
Function at 0x597091
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x81
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], edi
mov edi, dword [edi]
sub esp, 0x18
mov dword [esp + 0x14], 0x6c719bea
mov dword [esp + 0x10], 0x20032
mov dword [esp + 0xc], ebx
mov ebx, 0x597060
mov dword [esp + 8], eax
mov dword [esp + 0x14], ebx
xor ebx, ebx
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
xor ebx, eax
add dword [esp + 0x14], 4
dec word [esp + 0x10]
jne 0x5970d0
cmp ebx, 0x363e
je 0x5970ed
int3
mov eax, dword [esp + 8]
add edi, ebx
mov ebx, dword [esp + 0xc]
add esp, 0x18
xchg dword [esp], edi
mov dword [esp + 4], 0x960004c2
jmp 0x597101
ret 4

Function at 0x597184
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x81
push dword [esp]
sub dword [esp], 0x7f
push dword [esp]
xchg dword [esp], edx
mov edx, dword [edx]
sub esp, 0x24
mov dword [esp + 0x20], 0xccfaa993
mov dword [esp + 0x1c], 0x2003f
mov dword [esp + 0x18], ebp
mov ebp, 0x597154
mov dword [esp + 0x14], edi
mov dword [esp + 0x20], ebp
xor ebp, ebp
mov edi, dword [esp + 0x20]
mov edi, dword [edi]
xor ebp, edi
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x5971c3
cmp ebp, 0x256
je 0x5971e0
int3
mov edi, dword [esp + 0x14]
add edx, ebp
mov ebp, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], edx
mov dword [esp + 4], 0x7b0004c2
jmp 0x5971f4
ret 4

Function at 0x597679
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7c
push dword [esp]
sub dword [esp], 0x7a
push dword [esp]
xchg dword [esp], edi
mov edi, dword [edi]
sub esp, 0x14
mov dword [esp + 0x10], 0xf5a8060e
mov dword [esp + 0xc], 0x2004b
mov dword [esp + 8], eax
mov eax, 0x597648
mov dword [esp + 4], esi
mov dword [esp + 0x10], eax
xor eax, eax
mov esi, dword [esp + 0x10]
mov esi, dword [esi]
xor eax, esi
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x5976b8
cmp eax, 0x28c0
je 0x5976d4
int3
mov esi, dword [esp + 4]
add edi, eax
mov eax, dword [esp + 8]
add esp, 0x14
xchg dword [esp], edi
mov dword [esp + 4], 0xec0004c2
jmp 0x5976e8
ret 4

Function at 0x599b29
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7e
push dword [esp]
sub dword [esp], 0x7b
push dword [esp]
xchg dword [esp], eax
mov eax, dword [eax]
sub esp, 0x24
mov dword [esp + 0x20], 0x75a97b09
mov dword [esp + 0x1c], 0x20074
mov dword [esp + 0x18], ebx
mov ebx, 0x599af8
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], ebx
xor ebx, ebx
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx]
xor ebx, ecx
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x599b68
cmp ebx, 0x35ed
je 0x599b85
int3
mov ecx, dword [esp + 0x14]
add eax, ebx
mov ebx, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], eax
mov dword [esp + 4], 0xb80004c2
jmp 0x599b99
ret 4
Function at 0x599c17
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7e
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], ebp
mov ebp, dword [ebp]
sub esp, 0x20
mov dword [esp + 0x1c], 0x3d7a459a
mov dword [esp + 0x18], 0x20036
mov dword [esp + 0x14], esi
mov esi, 0x599be4
mov dword [esp + 0x10], ecx
mov dword [esp + 0x1c], esi
xor esi, esi
mov ecx, dword [esp + 0x1c]
mov ecx, dword [ecx]
xor esi, ecx
add dword [esp + 0x1c], 4
dec word [esp + 0x18]
jne 0x599c57
cmp esi, 0x1567
je 0x599c74
int3
mov ecx, dword [esp + 0x10]
add ebp, esi
mov esi, dword [esp + 0x14]
add esp, 0x20
xchg dword [esp], ebp
mov dword [esp + 4], 0x6a0004c2
jmp 0x599c88
ret 4

Function at 0x59a123
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7e
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], ebp
mov ebp, dword [ebp]
sub esp, 0x14
mov dword [esp + 0x10], 0x771c9af3
mov dword [esp + 0xc], 0x20052
mov dword [esp + 8], edx
mov edx, 0x59a0f0
mov dword [esp + 4], edi
mov dword [esp + 0x10], edx
xor edx, edx
mov edi, dword [esp + 0x10]
mov edi, dword [edi]
xor edx, edi
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x59a163
cmp edx, 0x3c25
je 0x59a180
int3
mov edi, dword [esp + 4]
add ebp, edx
mov edx, dword [esp + 8]
add esp, 0x14
xchg dword [esp], ebp
mov dword [esp + 4], 0x3d0004c2
jmp 0x59a194
ret 4

Function at 0x59a2f6
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], eax
mov eax, dword [eax]
sub esp, 0x20
mov dword [esp + 0x1c], 0xab674e
mov dword [esp + 0x18], 0x20058
mov dword [esp + 0x14], ebp
mov ebp, 0x59a2c4
mov dword [esp + 0x10], edi
mov dword [esp + 0x1c], ebp
xor ebp, ebp
mov edi, dword [esp + 0x1c]
mov edi, dword [edi]
xor ebp, edi
add dword [esp + 0x1c], 4
dec word [esp + 0x18]
jne 0x59a335
cmp ebp, 0x205
je 0x59a352
int3
mov edi, dword [esp + 0x10]
add eax, ebp
mov ebp, dword [esp + 0x14]
add esp, 0x20
xchg dword [esp], eax
mov dword [esp + 4], 0x290004c2
jmp 0x59a366
ret 4

Function at 0x59a394
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7f
push dword [esp]
xchg dword [esp], esi
mov esi, dword [esi]
sub esp, 0x18
mov dword [esp + 0x14], 0xfb81c0e
mov dword [esp + 0x10], 0x2005d
mov dword [esp + 0xc], edx
mov edx, 0x59a364
mov dword [esp + 8], ebp
mov dword [esp + 0x14], edx
xor edx, edx
mov ebp, dword [esp + 0x14]
mov ebp, dword [ebp]
xor edx, ebp
add dword [esp + 0x14], 4
dec word [esp + 0x10]
jne 0x59a3d3
cmp edx, 0x3f4b
je 0x59a3f1
int3
mov ebp, dword [esp + 8]
add esi, edx
mov edx, dword [esp + 0xc]
add esp, 0x18
xchg dword [esp], esi
mov dword [esp + 4], 0x710004c2
jmp 0x59a405
ret 4
Function at 0x59a873
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], edx
mov edx, dword [edx]
sub esp, 0x1c
mov dword [esp + 0x18], 0x2865a76e
mov dword [esp + 0x14], 0x2005b
mov dword [esp + 0x10], eax
mov eax, 0x59a840
mov dword [esp + 0xc], ecx
mov dword [esp + 0x18], eax
xor eax, eax
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
xor eax, ecx
add dword [esp + 0x18], 4
dec word [esp + 0x14]
jne 0x59a8b2
cmp eax, 0x27c3
je 0x59a8ce
int3
mov ecx, dword [esp + 0xc]
add edx, eax
mov eax, dword [esp + 0x10]
add esp, 0x1c
xchg dword [esp], edx
mov dword [esp + 4], 0x40004c2
jmp 0x59a8e2
ret 4

Function at 0x59dc2a
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x81
push dword [esp]
sub dword [esp], 0x7f
push dword [esp]
xchg dword [esp], eax
mov eax, dword [eax]
sub esp, 0x18
mov dword [esp + 0x14], 0x9fae1e06
mov dword [esp + 0x10], 0x2006d
mov dword [esp + 0xc], ecx
mov ecx, 0x59dbf8
mov dword [esp + 8], esi
mov dword [esp + 0x14], ecx
xor ecx, ecx
mov esi, dword [esp + 0x14]
mov esi, dword [esi]
xor ecx, esi
add dword [esp + 0x14], 4
dec word [esp + 0x10]
jne 0x59dc69
cmp ecx, 0x39b3
je 0x59dc86
int3
mov esi, dword [esp + 8]
add eax, ecx
mov ecx, dword [esp + 0xc]
add esp, 0x18
xchg dword [esp], eax
mov dword [esp + 4], 0x2e0004c2
jmp 0x59dc9a
ret 4

Function at 0x59e365
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7d
push dword [esp]
sub dword [esp], 0x7c
push dword [esp]
xchg dword [esp], ebx
mov ebx, dword [ebx]
sub esp, 0x14
mov dword [esp + 0x10], 0x88bec03e
mov dword [esp + 0xc], 0x20035
mov dword [esp + 8], eax
mov eax, 0x59e334
mov dword [esp + 4], ecx
mov dword [esp + 0x10], eax
xor eax, eax
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx]
xor eax, ecx
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x59e3a4
cmp eax, 0x28da
je 0x59e3c0
int3
mov ecx, dword [esp + 4]
add ebx, eax
mov eax, dword [esp + 8]
add esp, 0x14
xchg dword [esp], ebx
mov dword [esp + 4], 0x2b0004c2
jmp 0x59e3d4
ret 4

Function at 0x59e6e6
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7e
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], edx
mov edx, dword [edx]
sub esp, 0x24
mov dword [esp + 0x20], 0xcad85dbe
mov dword [esp + 0x1c], 0x20060
mov dword [esp + 0x18], ecx
mov ecx, 0x59e6b4
mov dword [esp + 0x14], edi
mov dword [esp + 0x20], ecx
xor ecx, ecx
mov edi, dword [esp + 0x20]
mov edi, dword [edi]
xor ecx, edi
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x59e725
cmp ecx, 0x20aa
je 0x59e742
int3
mov edi, dword [esp + 0x14]
add edx, ecx
mov ecx, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], edx
mov dword [esp + 4], 0x570004c2
jmp 0x59e756
ret 4