joyce8/EMBER2024-capa huggingface dataset:
Function at 0x547078
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7d
push dword [esp]
sub dword [esp], 0x7b
push dword [esp]
xchg dword [esp], ecx
mov ecx, dword [ecx]
sub esp, 0x14
mov dword [esp + 0x10], 0xbf18d450
mov dword [esp + 0xc], 0x20034
mov dword [esp + 8], esi
mov esi, 0x547048
mov dword [esp + 4], ebx
mov dword [esp + 0x10], esi
xor esi, esi
mov ebx, dword [esp + 0x10]
mov ebx, dword [ebx]
xor esi, ebx
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x5470b7
cmp esi, 0x2271
je 0x5470d4
int3
mov ebx, dword [esp + 4]
add ecx, esi
mov esi, dword [esp + 8]
add esp, 0x14
xchg dword [esp], ecx
mov dword [esp + 4], 0x6e0004c2
jmp 0x5470e8
ret 4

Function at 0x54712c
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x82
push dword [esp]
sub dword [esp], 0x7f
push dword [esp]
xchg dword [esp], edx
mov edx, dword [edx]
sub esp, 0x1c
mov dword [esp + 0x18], 0x60e1884a
mov dword [esp + 0x14], 0x20044
mov dword [esp + 0x10], ebp
mov ebp, 0x5470fc
mov dword [esp + 0xc], ecx
mov dword [esp + 0x18], ebp
xor ebp, ebp
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
xor ebp, ecx
add dword [esp + 0x18], 4
dec word [esp + 0x14]
jne 0x54716b
cmp ebp, 0xb67
je 0x547188
int3
mov ecx, dword [esp + 0xc]
add edx, ebp
mov ebp, dword [esp + 0x10]
add esp, 0x1c
xchg dword [esp], edx
mov dword [esp + 4], 0xb40004c2
jmp 0x54719c
ret 4

Function at 0x5474c4
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7f
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], eax
mov eax, dword [eax]
sub esp, 0x24
mov dword [esp + 0x20], 0x68b7c194
mov dword [esp + 0x1c], 0x20069
mov dword [esp + 0x18], edi
mov edi, 0x547494
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], edi
xor edi, edi
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx]
xor edi, ecx
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x547503
cmp edi, 0x3605
je 0x547520
int3
mov ecx, dword [esp + 0x14]
add eax, edi
mov edi, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], eax
mov dword [esp + 4], 0x150004c2
jmp 0x547534
ret 4

Function at 0x547659
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x81
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], ebx
mov ebx, dword [ebx]
sub esp, 0x14
mov dword [esp + 0x10], 0x364dac26
mov dword [esp + 0xc], 0x2007d
mov dword [esp + 8], edx
mov edx, 0x547628
mov dword [esp + 4], ecx
mov dword [esp + 0x10], edx
xor edx, edx
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx]
xor edx, ecx
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x547698
cmp edx, 0xec4
je 0x5476b5
int3
mov ecx, dword [esp + 4]
add ebx, edx
mov edx, dword [esp + 8]
add esp, 0x14
xchg dword [esp], ebx
mov dword [esp + 4], 0x6b0004c2
jmp 0x5476c9
ret 4
Function at 0x54777a
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x81
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], ebp
mov ebp, dword [ebp]
sub esp, 0x14
mov dword [esp + 0x10], 0xc21eb577
mov dword [esp + 0xc], 0x20040
mov dword [esp + 8], edx
mov edx, 0x547748
mov dword [esp + 4], ebx
mov dword [esp + 0x10], edx
xor edx, edx
mov ebx, dword [esp + 0x10]
mov ebx, dword [ebx]
xor edx, ebx
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x5477ba
cmp edx, 0x108e
je 0x5477d7
int3
mov ebx, dword [esp + 4]
add ebp, edx
mov edx, dword [esp + 8]
add esp, 0x14
xchg dword [esp], ebp
mov dword [esp + 4], 0xf00004c2
jmp 0x5477eb
ret 4

Function at 0x547a4f
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7e
push dword [esp]
sub dword [esp], 0x7b
push dword [esp]
xchg dword [esp], eax
mov eax, dword [eax]
sub esp, 0x20
mov dword [esp + 0x1c], 0x546484fe
mov dword [esp + 0x18], 0x20055
mov dword [esp + 0x14], ebp
mov ebp, 0x547a1c
mov dword [esp + 0x10], esi
mov dword [esp + 0x1c], ebp
xor ebp, ebp
mov esi, dword [esp + 0x1c]
mov esi, dword [esi]
xor ebp, esi
add dword [esp + 0x1c], 4
dec word [esp + 0x18]
jne 0x547a8e
cmp ebp, 0x31f4
je 0x547aab
int3
mov esi, dword [esp + 0x10]
add eax, ebp
mov ebp, dword [esp + 0x14]
add esp, 0x20
xchg dword [esp], eax
mov dword [esp + 4], 0x420004c2
jmp 0x547abf
ret 4

Function at 0x547b75
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x81
push dword [esp]
sub dword [esp], 0x7f
push dword [esp]
xchg dword [esp], edx
mov edx, dword [edx]
sub esp, 0x24
mov dword [esp + 0x20], 0x9e58f025
mov dword [esp + 0x1c], 0x2007b
mov dword [esp + 0x18], ebp
mov ebp, 0x547b44
mov dword [esp + 0x14], edi
mov dword [esp + 0x20], ebp
xor ebp, ebp
mov edi, dword [esp + 0x20]
mov edi, dword [edi]
xor ebp, edi
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x547bb4
cmp ebp, 0x1ac3
je 0x547bd1
int3
mov edi, dword [esp + 0x14]
add edx, ebp
mov ebp, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], edx
mov dword [esp + 4], 0xc20004c2
jmp 0x547be5
ret 4

Function at 0x54823f
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7f
push dword [esp]
xchg dword [esp], edx
mov edx, dword [edx]
sub esp, 0x20
mov dword [esp + 0x1c], 0xe523c33c
mov dword [esp + 0x18], 0x2004f
mov dword [esp + 0x14], edi
mov edi, 0x54820c
mov dword [esp + 0x10], esi
mov dword [esp + 0x1c], edi
xor edi, edi
mov esi, dword [esp + 0x1c]
mov esi, dword [esi]
xor edi, esi
add dword [esp + 0x1c], 4
dec word [esp + 0x18]
jne 0x54827e
cmp edi, 0x5b5
je 0x54829b
int3
mov esi, dword [esp + 0x10]
add edx, edi
mov edi, dword [esp + 0x14]
add esp, 0x20
xchg dword [esp], edx
mov dword [esp + 4], 0xe0004c2
jmp 0x5482af
ret 4
Function at 0x548437
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7f
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], edi
mov edi, dword [edi]
sub esp, 0x18
mov dword [esp + 0x14], 0xad1dcc7
mov dword [esp + 0x10], 0x2005c
mov dword [esp + 0xc], edx
mov edx, 0x548404
mov dword [esp + 8], eax
mov dword [esp + 0x14], edx
xor edx, edx
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
xor edx, eax
add dword [esp + 0x14], 4
dec word [esp + 0x10]
jne 0x548476
cmp edx, 0x2e98
je 0x548493
int3
mov eax, dword [esp + 8]
add edi, edx
mov edx, dword [esp + 0xc]
add esp, 0x18
xchg dword [esp], edi
mov dword [esp + 4], 0x780004c2
jmp 0x5484a7
ret 4

Function at 0x54884a
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7e
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], ebx
mov ebx, dword [ebx]
sub esp, 0x14
mov dword [esp + 0x10], 0xcc1d0a81
mov dword [esp + 0xc], 0x20058
mov dword [esp + 8], esi
mov esi, 0x548818
mov dword [esp + 4], ecx
mov dword [esp + 0x10], esi
xor esi, esi
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx]
xor esi, ecx
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x548889
cmp esi, 0x29f7
je 0x5488a6
int3
mov ecx, dword [esp + 4]
add ebx, esi
mov esi, dword [esp + 8]
add esp, 0x14
xchg dword [esp], ebx
mov dword [esp + 4], 0x750004c2
jmp 0x5488ba
ret 4

Function at 0x548b1d
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7d
push dword [esp]
sub dword [esp], 0x7c
push dword [esp]
xchg dword [esp], ecx
mov ecx, dword [ecx]
sub esp, 0x24
mov dword [esp + 0x20], 0x82541b36
mov dword [esp + 0x1c], 0x20030
mov dword [esp + 0x18], edi
mov edi, 0x548aec
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], edi
xor edi, edi
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
xor edi, eax
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x548b5c
cmp edi, 0x3e06
je 0x548b79
int3
mov eax, dword [esp + 0x14]
add ecx, edi
mov edi, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], ecx
mov dword [esp + 4], 0xce0004c2
jmp 0x548b8d
ret 4

Function at 0x549010
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], eax
mov eax, dword [eax]
sub esp, 0x24
mov dword [esp + 0x20], 0x282a7344
mov dword [esp + 0x1c], 0x2007c
mov dword [esp + 0x18], edx
mov edx, 0x548fe0
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], edx
xor edx, edx
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx]
xor edx, ecx
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x54904f
cmp edx, 0x21f4
je 0x54906c
int3
mov ecx, dword [esp + 0x14]
add eax, edx
mov edx, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], eax
mov dword [esp + 4], 0x610004c2
jmp 0x549080
ret 4
Function at 0x549136
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7f
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], edx
mov edx, dword [edx]
sub esp, 0x14
mov dword [esp + 0x10], 0x3f19e0d9
mov dword [esp + 0xc], 0x20076
mov dword [esp + 8], ebp
mov ebp, 0x549104
mov dword [esp + 4], ebx
mov dword [esp + 0x10], ebp
xor ebp, ebp
mov ebx, dword [esp + 0x10]
mov ebx, dword [ebx]
xor ebp, ebx
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x549175
cmp ebp, 0x901
je 0x549192
int3
mov ebx, dword [esp + 4]
add edx, ebp
mov ebp, dword [esp + 8]
add esp, 0x14
xchg dword [esp], edx
mov dword [esp + 4], 0x310004c2
jmp 0x5491a6
ret 4

Function at 0x54969e
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], ebp
mov ebp, dword [ebp]
sub esp, 0x1c
mov dword [esp + 0x18], 0xc0e5f25e
mov dword [esp + 0x14], 0x2003e
mov dword [esp + 0x10], edi
mov edi, 0x54966c
mov dword [esp + 0xc], esi
mov dword [esp + 0x18], edi
xor edi, edi
mov esi, dword [esp + 0x18]
mov esi, dword [esi]
xor edi, esi
add dword [esp + 0x18], 4
dec word [esp + 0x14]
jne 0x5496de
cmp edi, 0x109b
je 0x5496fb
int3
mov esi, dword [esp + 0xc]
add ebp, edi
mov edi, dword [esp + 0x10]
add esp, 0x1c
xchg dword [esp], ebp
mov dword [esp + 4], 0x530004c2
jmp 0x54970f
ret 4

Function at 0x5498af
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7d
push dword [esp]
sub dword [esp], 0x7c
push dword [esp]
xchg dword [esp], edi
mov edi, dword [edi]
sub esp, 0x24
mov dword [esp + 0x20], 0x57f153e8
mov dword [esp + 0x1c], 0x2006b
mov dword [esp + 0x18], eax
mov eax, 0x54987c
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], eax
xor eax, eax
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx]
xor eax, ecx
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x5498ee
cmp eax, 0x3007
je 0x54990a
int3
mov ecx, dword [esp + 0x14]
add edi, eax
mov eax, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], edi
mov dword [esp + 4], 0x740004c2
jmp 0x54991e
ret 4

Function at 0x549efc
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x81
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], ecx
mov ecx, dword [ecx]
sub esp, 0x18
mov dword [esp + 0x14], 0xdd73d8ec
mov dword [esp + 0x10], 0x20041
mov dword [esp + 0xc], eax
mov eax, 0x549ecc
mov dword [esp + 8], edi
mov dword [esp + 0x14], eax
xor eax, eax
mov edi, dword [esp + 0x14]
mov edi, dword [edi]
xor eax, edi
add dword [esp + 0x14], 4
dec word [esp + 0x10]
jne 0x549f3b
cmp eax, 0x27f4
je 0x549f57
int3
mov edi, dword [esp + 8]
add ecx, eax
mov eax, dword [esp + 0xc]
add esp, 0x18
xchg dword [esp], ecx
mov dword [esp + 4], 0xcf0004c2
jmp 0x549f6b
ret 4
Function at 0x549fb1
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7b
push dword [esp]
sub dword [esp], 0x7a
push dword [esp]
xchg dword [esp], edi
mov edi, dword [edi]
sub esp, 0x18
mov dword [esp + 0x14], 0xa14a2b86
mov dword [esp + 0x10], 0x2004b
mov dword [esp + 0xc], edx
mov edx, 0x549f80
mov dword [esp + 8], ecx
mov dword [esp + 0x14], edx
xor edx, edx
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
xor edx, ecx
add dword [esp + 0x14], 4
dec word [esp + 0x10]
jne 0x549ff0
cmp edx, 0x58
je 0x54a00a
int3
mov ecx, dword [esp + 8]
add edi, edx
mov edx, dword [esp + 0xc]
add esp, 0x18
xchg dword [esp], edi
mov dword [esp + 4], 0x7b0004c2
jmp 0x54a01e
ret 4

Function at 0x54a1c1
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7f
push dword [esp]
xchg dword [esp], ebp
mov ebp, dword [ebp]
sub esp, 0x1c
mov dword [esp + 0x18], 0x31c81daf
mov dword [esp + 0x14], 0x20056
mov dword [esp + 0x10], ecx
mov ecx, 0x54a190
mov dword [esp + 0xc], edx
mov dword [esp + 0x18], ecx
xor ecx, ecx
mov edx, dword [esp + 0x18]
mov edx, dword [edx]
xor ecx, edx
add dword [esp + 0x18], 4
dec word [esp + 0x14]
jne 0x54a201
cmp ecx, 0x32c6
je 0x54a21e
int3
mov edx, dword [esp + 0xc]
add ebp, ecx
mov ecx, dword [esp + 0x10]
add esp, 0x1c
xchg dword [esp], ebp
mov dword [esp + 4], 0xcc0004c2
jmp 0x54a232
ret 4

Function at 0x54a278
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7c
push dword [esp]
sub dword [esp], 0x7b
push dword [esp]
xchg dword [esp], esi
mov esi, dword [esi]
sub esp, 0x14
mov dword [esp + 0x10], 0xf6191764
mov dword [esp + 0xc], 0x20064
mov dword [esp + 8], ecx
mov ecx, 0x54a248
mov dword [esp + 4], eax
mov dword [esp + 0x10], ecx
xor ecx, ecx
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
xor ecx, eax
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x54a2b7
cmp ecx, 0x3226
je 0x54a2d4
int3
mov eax, dword [esp + 4]
add esi, ecx
mov ecx, dword [esp + 8]
add esp, 0x14
xchg dword [esp], esi
mov dword [esp + 4], 0xca0004c2
jmp 0x54a2e8
ret 4

Function at 0x54a40e
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], ebp
mov ebp, dword [ebp]
sub esp, 0x1c
mov dword [esp + 0x18], 0x3ec52c24
mov dword [esp + 0x14], 0x2007c
mov dword [esp + 0x10], eax
mov eax, 0x54a3dc
mov dword [esp + 0xc], ebx
mov dword [esp + 0x18], eax
xor eax, eax
mov ebx, dword [esp + 0x18]
mov ebx, dword [ebx]
xor eax, ebx
add dword [esp + 0x18], 4
dec word [esp + 0x14]
jne 0x54a44e
cmp eax, 0x1b2e
je 0x54a46a
int3
mov ebx, dword [esp + 0xc]
add ebp, eax
mov eax, dword [esp + 0x10]
add esp, 0x1c
xchg dword [esp], ebp
mov dword [esp + 4], 0x720004c2
jmp 0x54a47e
ret 4
Function at 0x54a907
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x81
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], edi
mov edi, dword [edi]
sub esp, 0x14
mov dword [esp + 0x10], 0xb300775
mov dword [esp + 0xc], 0x2005e
mov dword [esp + 8], edx
mov edx, 0x54a8d4
mov dword [esp + 4], ebp
mov dword [esp + 0x10], edx
xor edx, edx
mov ebp, dword [esp + 0x10]
mov ebp, dword [ebp]
xor edx, ebp
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x54a946
cmp edx, 0x3f25
je 0x54a964
int3
mov ebp, dword [esp + 4]
add edi, edx
mov edx, dword [esp + 8]
add esp, 0x14
xchg dword [esp], edi
mov dword [esp + 4], 0x510004c2
jmp 0x54a978
ret 4

Function at 0x54a9bd
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x81
push dword [esp]
sub dword [esp], 0x7f
push dword [esp]
xchg dword [esp], esi
mov esi, dword [esi]
sub esp, 0x18
mov dword [esp + 0x14], 0x76f577b5
mov dword [esp + 0x10], 0x20074
mov dword [esp + 0xc], edx
mov edx, 0x54a98c
mov dword [esp + 8], ecx
mov dword [esp + 0x14], edx
xor edx, edx
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
xor edx, ecx
add dword [esp + 0x14], 4
dec word [esp + 0x10]
jne 0x54a9fc
cmp edx, 0xdd3
je 0x54aa19
int3
mov ecx, dword [esp + 8]
add esi, edx
mov edx, dword [esp + 0xc]
add esp, 0x18
xchg dword [esp], esi
mov dword [esp + 4], 0x640004c2
jmp 0x54aa2d
ret 4

Function at 0x54aadf
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], eax
mov eax, dword [eax]
sub esp, 0x24
mov dword [esp + 0x20], 0xba26e6b7
mov dword [esp + 0x1c], 0x2005c
mov dword [esp + 0x18], esi
mov esi, 0x54aaac
mov dword [esp + 0x14], ebx
mov dword [esp + 0x20], esi
xor esi, esi
mov ebx, dword [esp + 0x20]
mov ebx, dword [ebx]
xor esi, ebx
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x54ab1e
cmp esi, 0x25dd
je 0x54ab3b
int3
mov ebx, dword [esp + 0x14]
add eax, esi
mov esi, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], eax
mov dword [esp + 4], 0xed0004c2
jmp 0x54ab4f
ret 4

Function at 0x54adb1
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7f
push dword [esp]
sub dword [esp], 0x7e
push dword [esp]
xchg dword [esp], esi
mov esi, dword [esi]
sub esp, 0x1c
mov dword [esp + 0x18], 0xc1cb5404
mov dword [esp + 0x14], 0x2006e
mov dword [esp + 0x10], edx
mov edx, 0x54ad80
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], edx
xor edx, edx
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
xor edx, eax
add dword [esp + 0x18], 4
dec word [esp + 0x14]
jne 0x54adf0
cmp edx, 0x1439
je 0x54ae0d
int3
mov eax, dword [esp + 0xc]
add esi, edx
mov edx, dword [esp + 0x10]
add esp, 0x1c
xchg dword [esp], esi
mov dword [esp + 4], 0xde0004c2
jmp 0x54ae21
ret 4
Function at 0x54ae68
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7d
push dword [esp]
sub dword [esp], 0x7c
push dword [esp]
xchg dword [esp], ebx
mov ebx, dword [ebx]
sub esp, 0x20
mov dword [esp + 0x1c], 0xd5881d76
mov dword [esp + 0x18], 0x2003c
mov dword [esp + 0x14], edx
mov edx, 0x54ae38
mov dword [esp + 0x10], edi
mov dword [esp + 0x1c], edx
xor edx, edx
mov edi, dword [esp + 0x1c]
mov edi, dword [edi]
xor edx, edi
add dword [esp + 0x1c], 4
dec word [esp + 0x18]
jne 0x54aea7
cmp edx, 0x3263
je 0x54aec4
int3
mov edi, dword [esp + 0x10]
add ebx, edx
mov edx, dword [esp + 0x14]
add esp, 0x20
xchg dword [esp], ebx
mov dword [esp + 4], 0x290004c2
jmp 0x54aed8
ret 4

Function at 0x54aff6
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x82
push dword [esp]
sub dword [esp], 0x7f
push dword [esp]
xchg dword [esp], esi
mov esi, dword [esi]
sub esp, 0x20
mov dword [esp + 0x1c], 0x6d1b39ba
mov dword [esp + 0x18], 0x2007f
mov dword [esp + 0x14], edi
mov edi, 0x54afc4
mov dword [esp + 0x10], edx
mov dword [esp + 0x1c], edi
xor edi, edi
mov edx, dword [esp + 0x1c]
mov edx, dword [edx]
xor edi, edx
add dword [esp + 0x1c], 4
dec word [esp + 0x18]
jne 0x54b035
cmp edi, 0x1cb1
je 0x54b052
int3
mov edx, dword [esp + 0x10]
add esi, edi
mov edi, dword [esp + 0x14]
add esp, 0x20
xchg dword [esp], esi
mov dword [esp + 4], 0x6d0004c2
jmp 0x54b066
ret 4

Function at 0x54b183
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7e
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], ebx
mov ebx, dword [ebx]
sub esp, 0x1c
mov dword [esp + 0x18], 0x7d17f8ef
mov dword [esp + 0x14], 0x20067
mov dword [esp + 0x10], esi
mov esi, 0x54b150
mov dword [esp + 0xc], edx
mov dword [esp + 0x18], esi
xor esi, esi
mov edx, dword [esp + 0x18]
mov edx, dword [edx]
xor esi, edx
add dword [esp + 0x18], 4
dec word [esp + 0x14]
jne 0x54b1c2
cmp esi, 0xc60
je 0x54b1df
int3
mov edx, dword [esp + 0xc]
add ebx, esi
mov esi, dword [esp + 0x10]
add esp, 0x1c
xchg dword [esp], ebx
mov dword [esp + 4], 0xbf0004c2
jmp 0x54b1f3
ret 4

Function at 0x54b2a6
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7e
push dword [esp]
sub dword [esp], 0x7c
push dword [esp]
xchg dword [esp], ebx
mov ebx, dword [ebx]
sub esp, 0x18
mov dword [esp + 0x14], 0xe18da504
mov dword [esp + 0x10], 0x2005e
mov dword [esp + 0xc], ecx
mov ecx, 0x54b274
mov dword [esp + 8], eax
mov dword [esp + 0x14], ecx
xor ecx, ecx
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
xor ecx, eax
add dword [esp + 0x14], 4
dec word [esp + 0x10]
jne 0x54b2e5
cmp ecx, 0x198b
je 0x54b302
int3
mov eax, dword [esp + 8]
add ebx, ecx
mov ecx, dword [esp + 0xc]
add esp, 0x18
xchg dword [esp], ebx
mov dword [esp + 4], 0xf70004c2
jmp 0x54b316
ret 4
Function at 0x54b3c8
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7f
push dword [esp]
xchg dword [esp], esi
mov esi, dword [esi]
sub esp, 0x20
mov dword [esp + 0x1c], 0xbea75c2f
mov dword [esp + 0x18], 0x20070
mov dword [esp + 0x14], ebp
mov ebp, 0x54b398
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ebp
xor ebp, ebp
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
xor ebp, eax
add dword [esp + 0x1c], 4
dec word [esp + 0x18]
jne 0x54b407
cmp ebp, 0x1fa4
je 0x54b424
int3
mov eax, dword [esp + 0x10]
add esi, ebp
mov ebp, dword [esp + 0x14]
add esp, 0x20
xchg dword [esp], esi
mov dword [esp + 4], 0xab0004c2
jmp 0x54b438
ret 4

Function at 0x54b485
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x80
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], edx
mov edx, dword [edx]
sub esp, 0x20
mov dword [esp + 0x1c], 0x12014ef3
mov dword [esp + 0x18], 0x2005a
mov dword [esp + 0x14], edi
mov edi, 0x54b454
mov dword [esp + 0x10], esi
mov dword [esp + 0x1c], edi
xor edi, edi
mov esi, dword [esp + 0x1c]
mov esi, dword [esi]
xor edi, esi
add dword [esp + 0x1c], 4
dec word [esp + 0x18]
jne 0x54b4c4
cmp edi, 0x494
je 0x54b4e1
int3
mov esi, dword [esp + 0x10]
add edx, edi
mov edi, dword [esp + 0x14]
add esp, 0x20
xchg dword [esp], edx
mov dword [esp + 4], 0x2d0004c2
jmp 0x54b4f5
ret 4

Function at 0x54b623
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x7f
push dword [esp]
sub dword [esp], 0x7d
push dword [esp]
xchg dword [esp], ecx
mov ecx, dword [ecx]
sub esp, 0x14
mov dword [esp + 0x10], 0x20cea250
mov dword [esp + 0xc], 0x2005d
mov dword [esp + 8], ebx
mov ebx, 0x54b5f0
mov dword [esp + 4], eax
mov dword [esp + 0x10], ebx
xor ebx, ebx
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
xor ebx, eax
add dword [esp + 0x10], 4
dec word [esp + 0xc]
jne 0x54b662
cmp ebx, 0xf36
je 0x54b67f
int3
mov eax, dword [esp + 4]
add ecx, ebx
mov ebx, dword [esp + 8]
add esp, 0x14
xchg dword [esp], ecx
mov dword [esp + 4], 0xfa0004c2
jmp 0x54b693
ret 4

Function at 0x54b6d8
Capabilities:
Encode data using xor

Disassembly:
add dword [esp], 0x82
push dword [esp]
sub dword [esp], 0x7f
push dword [esp]
xchg dword [esp], edi
mov edi, dword [edi]
sub esp, 0x24
mov dword [esp + 0x20], 0x7a2680a5
mov dword [esp + 0x1c], 0x2005e
mov dword [esp + 0x18], ebx
mov ebx, 0x54b6a8
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], ebx
xor ebx, ebx
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx]
xor ebx, ecx
add dword [esp + 0x20], 4
dec word [esp + 0x1c]
jne 0x54b717
cmp ebx, 0x3f9c
je 0x54b734
int3
mov ecx, dword [esp + 0x14]
add edi, ebx
mov ebx, dword [esp + 0x18]
add esp, 0x24
xchg dword [esp], edi
mov dword [esp + 4], 0x300004c2
jmp 0x54b748
ret 4