joyce8/EMBER2024-capa huggingface dataset:
Function at 0x111bc713
Capabilities:
Encode data using base64

Disassembly:
dec ebp
adc ebx, esi
inc ecx
or esp, 0x4111dbf
shr si, 0x8f
dec eax
lea eax, [esp + edx*4 + 0x60]
dec eax
bswap esi
inc esp
adc ecx, dword [edx + eax]
inc esp
mov dword [ebp + edx*2 - 8], ecx
inc esp
movzx ecx, dh
xor edx, dword [edx + ebp - 8]
jmp fcn.1117b393
dec eax
lea edi, [esp + edi + 8]
dec eax
mov dword [esp + esi - 0x7c3cc1b9], 0x1c1f1e8d
inc esp
mov esi, dword [edi + esi - 0x7c3cc1b9]
inc ebp
xor dl, ah
inc esp
mov dword [esi + ebp - 0x7c3cc1bd], esi
inc ebp
movsx ebp, cl
inc ebp
adc cl, ch
inc ecx
add esp, 0xab8182c
inc esp
mov esi, dword [ebx + esi - 0x7c3cc1be]
dec eax
lea ebx, [ebx + esi - 0x7c3cc1be]
dec eax
shr dword [esp + esi - 0x7c3cc1b9], 0x79
inc ebp
xor esi, edi
dec esp
xadd dword [esp + esi - 0x7c3cc1b9], ecx
inc ecx
neg esi
inc edi
lea esi, [edx + esi - 0x6db22d77]
inc ecx
not esi
inc edx
sar byte [esp + ecx], 0x62
dec ebp
sbb ebp, esp
mov edi, esi
inc ecx
ror esi, 1
movsx eax, si
inc esi
add dword [esp + ecx*2 + 3], ebp
inc ecx
mul ah
dec esp
mov dword [esp + esi - 0x7c3cc1b9], edi
dec ecx
sal ebp, 0x2e
inc ecx
setbe dl
inc esi
xor dword [esp + ecx], esi
inc esp
mov edi, edx
dec eax
cdq
inc esp
or edi, edx
inc ecx
pop edi
dec edx
lea ecx, [eax*8 - 0x2c579300]
dec ebp
arpl si, si
dec eax
not esi
dec esp
lea eax, [ecx + edi + 0x5c380aa1]
jne 0x111b3980
not edx
and al, ah
xor ecx, ecx
les esi, [ebx]
leave
je 0x118ff18a
xchg ecx, eax
push 0xffffffffffffff8a
cmp eax, 0x59ed700
ja 0x111bc7cd
dec edx
invalid
xor ebx, edx
bt ax, ax
adc esi, edx
call fcn.10d1603f
mov ecx, dword [ebp]
mov edx, dword [ebp + 4]
mov eax, 0x7d929d97
bt eax, 0x18
mov dword ss:[ecx + eax - 0x7d929d97], edx
setb al
movzx edx, ax
mov edx, dword [eax + edi - 0x7d929d05]
lea edi, [edi + eax - 0x7d929d05]
movsx ecx, al
xchg ecx, eax
rol cl, cl
xor edx, ebx
push ecx
dec al
sal eax, 0xad
inc edx
not ecx
call fcn.118f0ab1
pushfd
mov esi, dword [esp + esi - 0x630bf08f]
mov dword [esp + 4], 0x9724bcca
push dword [esp]
popfd
lea esp, [esp + 4]
call fcn.1119dece
mov edx, dword [ebp]
mov eax, 0x19b118bc
ror eax, 0x5e
jae 0x1115f4a9

Function at 0x111bdb1d
Capabilities:
Encode data using base64

Disassembly:
sub edx, 0xb92f7290
cwde
dec eax
xor edx, 0xf42b2c00
shl dword [esp + eax - 0xaf8], 0x1c
lea edx, [edx + eax*2 + 0x1e226987]
ror cx, cl
not word [esp + ecx - 0x7ffe]
xor ebx, edx
shl byte [esp + ecx - 0x7ffd], 0xa4
mov dword [ebp + eax - 0xb0a], edx
shr ecx, 0xa1
cdq
lea ebp, [ebp + eax*2 - 0x160a]
sete al
or edx, dword [edi + eax - 0xb0d]
sub cx, 0x5d0c
shl word [esp + ecx*2 - 0x1c5e4], 0x81
lea edi, [edi + eax*8 - 0x580d]
btc eax, eax
or ecx, 0xf436982b
xor edx, ebx
neg edx
bt ecx, ecx
shl word [esp + eax - 0xaf7], 0x25
ror edx, 1
inc edx
bswap edx
jmp 0x118f2499
not edx
neg dword [esp + ecx - 0xef8]
movzx cx, byte [eax + ecx - 0xf00]
mov dword [esp], edx
mov word [ebp - 6], cx
sbb dx, dx
lea edx, [edx - 0x597821c4]
mov edx, dword [edi + edx - 0x79ccde44]
adc byte [esp + 5], 0xa0
xor edx, ebx
mov eax, 0xe0980b01
movzx ecx, al
neg edx
jmp 0x1119e5e2
Function at 0x118315b0
Capabilities:
Encode data using base64

Disassembly:
add byte [ecx + eax*4 - 0x73], dl
mov word [eax - 0x5d], es
sub eax, 0x973414ae
add esi, ecx
mul edx
movsx ecx, ax
call fcn.1115c99e
push ebx
pop eax
sub bh, 5
jle 0x10d6a0b5
push dword [ecx]
fistp dword [eax + 0x1be541fa]
and eax, 0x41fa98d7
mov byte [eax + 0x6a81fc3b], dl
add dword [esi + ecx*2], 0xb501a6ff
push esi
mov eax, 0x9a3bc635
invalid
bt edx, edx
rol dx, 0xe6
ror eax, 1
not ecx
dec eax
not dl
neg eax
xor ebx, eax
ror dl, 0xe2
add esi, eax
movsx eax, cx
mov ecx, dword [ebp + edx - 0xff]
ror edx, 0xd9
mov dword [esp + edx - 0x7f80], eax
jb 0x1190f861
lea ebp, [eax + ebp - 0x89c]
movzx edx, byte [edx + edi - 0x7f85]
sub ax, 0x8b8a
ror dword [esp + eax*2 - 0xfa2c], 0x26
xchg dword [esp + eax - 0x7d16], eax
adc edi, 0xfffffffa
idiv al
jmp 0x11902147
mov byte [esp], 0x8d
xor dl, bl
add dl, al
xor dl, 0xf
sub ax, 0xc33d
dec dword [esp]
setg al
add dl, al
xor al, ah
cwde
call fcn.10ced59a
lea ebp, [eax + ebp - 0x7c1]
push ecx
and al, 0x23
pop ecx
jns fcn.10ce0aa7
mov eax, 0x27a96b20
mov ecx, dword [ebp + eax*2 - 0x4f52d640]
movzx edx, byte [eax + edi - 0x27a96b21]
sar al, 0x83
push eax
xor dl, bl
shl word [esp + eax*2 - 0x4f52d608], 0x42
xor dl, 8
dec eax
cbw
ror dl, 1
rol eax, 0x81
sal dword [esp + eax - 0x4f520006], 0xe6
adc dl, 0x2d
not al
pop eax
dec eax
neg dl
ror eax, 0x66
dec dl
xor bl, dl
neg al
or eax, 0x44051997
adc edx, esp
neg eax
mov dword [edx + eax - 0x524209], ecx
movzx ecx, al
imul eax
mov edx, dword [ebp + ecx*2 - 0xe]
mov cx, word [ebp + ecx*2 - 0xa]
lea ebp, [ebp + eax - 0x5ecca447]
dec eax
mov word ss:[edx + eax - 0x5ecca450], cx
push eax
mov ecx, dword [eax + edi - 0x5ecca455]
lea edi, [edi + eax - 0x5ecca455]
pop eax
movsx edx, ax
dec edx
xor ecx, ebx
sub ecx, 0xba3eca10
mul dl
neg ecx
not ecx
cdq
lea ecx, [ecx + edx*2 + 0x4838a20a]
lea edx, [edx + edx - 0x7ae7b6e5]
not ecx
xadd eax, edx
ror ecx, 1
not dx
xor ecx, 0x30bed481
sar eax, 0x6d
xor ebx, ecx
jmp 0x10d6a100

Function at 0x11836ef8
Capabilities:
Encode data using base64

Disassembly:
inc ebp
xor esp, edi
call fcn.11167d78
mov edi, 0x5aa5061a
inc sp
mov ecx, dword [edi + ebp - 0x5aa5061a]
mov eax, 0xd738ad3b
dec eax
lea ebp, [ebp + edi - 0x5aa50618]
inc esp
mov esi, eax
inc esp
movsx eax, bh
inc ecx
mov ecx, esi
dec eax
lea ebx, [edi + ebx - 0x5aa5061b]
dec eax
btr ecx, eax
movzx esi, byte [edi + ebx - 0x5aa5061a]
inc ecx
adc al, al
inc esp
mov ebp, ecx
inc ecx
xor dh, bh
inc cx
inc eax
dec dh
push edi
dec ebx
lea edx, [esi + ebp*4 + 0x6499f983]
inc eax
ror dh, 1
inc cx
shr eax, 0x4e
bts ax, 0x30
dec edx
shr dword [esp + eax*4], 0x8e
inc eax
sbb dh, 0xb2
call fcn.10d40887
Function at 0x118b6798
Capabilities:
Encode data using base64

Disassembly:
inc ecx
mov dword [ebp + ebp - 0x35fc], eax
inc ecx
sar ah, 0xe5
dec esp
btr esi, esi
dec ebp
btr esp, eax
inc esi
mov edx, dword [ebx + ebp - 0x3604]
dec ecx
inc ecx
dec ecx
sub esi, ecx
dec edx
lea ebx, [ebx + ebp*2 - 0x6c04]
inc ecx
sar ch, 0xc2
inc ebp
xor edx, edi
inc ecx
rol edx, 3
inc ecx
movsx eax, dh
dec ecx
lea edi, [ecx + 0x3f26398e]
inc ecx
xor edx, 0x9639970a
sar si, 0xc1
inc cx
not ecx
inc ecx
rol edx, 1
dec ecx
bswap esp
dec ecx
btc eax, 0x9d
inc ecx
dec edx
dec ecx
mul esp
inc ecx
adc ecx, 0xf9f3ea1
jae 0x11159512
mov ax, word [edx]
sal cl, 1
movsx edx, cl
xadd dword [esp + edx], edx
sbb ebp, 2
mov word [ebp], ax
call fcn.11910757
inc ecx
push edi
dec eax
dec edi
inc ebp
movzx edi, cl
inc esi
xor dword [esp + ebp - 0x3600], edx
inc ecx
pop edi
neg si
dec ebp
arpl dx, dx
jg 0x118f08b0
dec ebp
add ebx, edx
inc ebp
xor ch, cl
inc ebp
mov ecx, dword [ebp + ebp - 0x3609]
inc edx
mov edi, dword [ebp + ebp*8 - 0x1b060]
inc ecx
not ecx
dec eax
cwde
inc ecx
idiv dh
not edi
mov ecx, eax
not eax
inc ecx
btr ebp, 0x8e
inc esp
and ecx, edi
push esi
inc esi
mov dword [ebp + ebp - 0x3605], ecx
cwd
dec ecx
lea ebp, [ebp + ebp - 0x3605]
dec edx
inc dword [esp + ebp - 0x360d]
pop ecx
inc ebp
movzx edx, ax
inc ecx
jmp ebx
dec eax
not edi
adc edx, 0x1394b896
inc ecx
neg eax
dec ecx
not esp
inc esi
movzx ecx, byte [esp + ebp*2 - 0x287ca5e5]
dec ecx
and edi, esp
inc ebp
sub al, cl
dec edx
imul dword [esp + ebp - 0x143e52f7]
dec edx
mov dword [ebp + ebp - 0x143e5303], edi
inc ecx
shr eax, 0x5a
dec esi
mov dword [esp + ebp*2 - 0x287ca606], ebx
ret 0x20
dec esi
mov dword [esp + ebp*2 - 0x403c], edi
dec ebx
lea edi, [esp + eax*4 + 0x7a37c90e]
inc esi
xor dword [esp + ebp*2 - 0x403c], edx
call fcn.1182f8c0
inc ecx
push 0xab0e786f
xlatb
add eax, 0xca8e9610
invalid
inc ecx
bswap edx
pop ecx
sub esi, dword [esp + edx - 0x64f992de]
inc ebp
lea edx, [edx + edx*2 - 0x45397a9b]
push esi
inc ecx
bswap edx
inc ebp
movzx esp, bp
jp 0x111a8bdf
inc ecx
mov ebp, 0xdf936793
inc ebp
movzx edx, ch
inc ecx
movsx eax, dl
inc edx
mov eax, dword [ebp + edx*4 - 0x24c]
inc ebp
mov ecx, edx
inc ecx
mov eax, 0x41b8cf9a
inc ebp
movsx esi, cx
inc edx
mov edi, dword [ebp + edx*2 - 0x122]
inc ecx
shr ebp, 0xbb
inc ebp
movzx esp, dl
not eax
inc cx
rol ebp, 0x89
not edi
jbe 0x1115f65b
and eax, edi
dec ecx
dec edx
inc ecx
movsx esi, bp
jns 0x10ce4862
dec esp
cmovae edx, eax
inc dl
inc esp
cmovl esp, edx
inc edx
xor dword [esp - 0x437702fc], ecx
inc ecx
bswap edx
inc ecx
pop edi
not eax
btc dx, 0x13
dec eax
cdq
dec eax
arpl cx, cx
inc ecx
div ah
btr dx, 0x9f
dec esp
adc ebx, ecx
dec esp
mov edx, dword [edx + ebp]
mov edi, edx
dec eax
lea esi, [edx - 0x7d67d366]
inc cx
and edi, esp
inc cx
xor edx, dword [edx + eax - 0x1fc67cd6]
cwde
call fcn.10d5c2a2

Function at 0x118b69e3
Capabilities:
Encode data using base64

Disassembly:
jno 0x118c85da
dec ecx
dec esp
inc eax
neg bh
inc ecx
pop esp
inc ecx
dec esi
dec ecx
bswap ebp
inc eax
inc bh
inc esp
and ecx, eax
inc eax
xor bh, 0x8f
dec eax
sub edx, 0xec8b1e00
inc ebp
bt ebp, ecx
dec esi
lea esp, [eax*2 + 0x17a2c33b]
inc esp
xor bh, bh
jmp 0x1119f8ba
Function at 0x118b69e9
Capabilities:
Encode data using base64

Disassembly:
inc ecx
not ebp
inc ecx
ror ebp, 1
inc cx
sar ecx, 0x26
inc ecx
push edi
inc ecx
sar esi, cl
inc esi
xor dword [esp + edx*4 - 0x238], ebp
dec edx
lea edx, [ecx*2 + 0x26be4885]
shr edi, cl
inc ecx
pop edi
dec ebp
xor eax, edx
inc ecx
not edx
dec ebp
arpl bp, bp
add al, ah
jno 0x10d3ef63
mov ecx, 0xcba2093c
movzx ecx, byte [edi - 1]
mov eax, 0xe9338aa9
movzx edx, ax
xor cl, bl
shr eax, 0xc3
ror cl, 1
or eax, eax
dec cl
rol cl, 1
and eax, eax
not cl
inc dx
xor bl, cl
cbw
jmp 0x11184669
dec ebp
add ebx, ebp
inc esp
mov esp, edi
jmp 0x10d19f5a
jmp 0x118b602f
jmp 0x1119eb78
add ecx, esp
cwde
lea edx, [eax + edx*8 + 0x7630ad36]
mov eax, dword [eax + ecx - 0x55]
push edx
shr dl, 4
mov dword [ebp + edx - 0x76350211], eax
mov ecx, dword [ebp + edx - 0x76350211]
mov edx, dword [ebp + edx - 0x7635020d]
pop eax
ror ax, 0x2d
neg eax
add ecx, edx
mov dword [ebp], ecx
movzx ecx, al
btc eax, 0x39
mov edx, dword [edi + ecx*4 - 0xa5]
lea edi, [ecx + edi - 0x2d]
sub al, cl
xor edx, ebx
call fcn.10d3e06d
inc esp
mov ebp, dword [ebx]
inc ebp
xor ebp, edi
inc ebp
movzx edx, al
inc ecx
movsx eax, dl
inc edi
lea ebp, [eax + ebp + 0x6680b984]
movsx ecx, al
inc ecx
movsx edi, ax
dec esi
lea esi, [ecx + edx*4 + 0x1eaa7e96]
inc ecx
not ebp
dec edx
lea esi, [eax*4 - 0x56e502c5]
inc cx
inc esp
movzx ecx, si
inc ecx
bswap ebp
inc eax
dec dh
jns 0x10d1a635
mov word [ebp - 2], dx
mov ecx, 0x938a4e01
mov eax, ecx
add ebp, 0xfffffffe
mov edx, dword [edi - 5]
lea eax, [ecx + ecx*4 - 0x40f30262]
dec al
add edi, 0xfffffffb
ror cl, 0x46
add ecx, 0x6e2320b8
xor edx, ebx
rol edx, 1
jmp 0x10d5cf0b
ror word [esp + eax - 0x7a20650b], 0x2b
xor ebx, edx
mov dword [esp + eax - 0x7a206510], eax
add eax, dword [esp + eax - 0x7a20650c]
adc esi, edx
neg dword [esp + ecx - 0x54d75e22]
pop edx
pop eax
jb fcn.10ce0aa7
dec eax
sub ebx, 4
inc ecx
mov eax, 0x96bed48e
jmp 0x10d5affd
Function at 0x118b932e
Capabilities:
Encode data using base64

Disassembly:
push 0x9f1357b8
xor eax, ebx
call fcn.118e15c4
inc bp
xor edi, ebp
inc ebp
sub dh, dl
dec ecx
lea ebp, [esp + ebp - 2]
inc si
mov dword [ebp], ebp
inc ecx
push edx
inc edx
rol dword [esp + 3], cl
pop ecx
jbe fcn.10cf108c
neg dl
xor ecx, 0xabb7994
shr byte [esp + ecx - 0x7c263813], 1
xadd dword [esp + eax - 0x7bfffff2], ecx
ror dl, 1
sal cx, 0xa6
sal byte [esp + eax - 0x7bfffff1], 0xa1
mov dword [esp + ecx - 0x769d2000], ecx
not dl
xor bl, dl
bts ecx, eax
lea edx, [esp + edx + 4]
sub cl, al
movzx cx, byte [edx + eax - 0x7bfffff2]
movsx edx, al
mov word [ebp + eax - 0x7bfffff8], cx
and dword [esp + eax - 0x7bfffff2], eax
mov ecx, dword [edi + eax - 0x7bfffffb]
xor ecx, ebx
not eax
inc edx
add dword [esp], edx
inc ecx
imul byte [esp + 2]
dec ax
bswap ecx
neg eax
inc ax
rol ecx, 1
add eax, eax
sub dl, dh
xor ecx, 0x363465b6
call fcn.10d1c6dd
mov byte ss:[eax + edx*8], cl
mov eax, edx
mov ecx, dword [ebp + edx*2 + 6]
sar al, 0x84
add ax, dx
dec edx
lea ebp, [ebp + eax + 0xa]
ja 0x10cfcd30
shr dx, 0x61
imul eax
add al, byte [edi + edx - 1]
rol edx, 0x76
or edx, 0x7e95f22a
xor al, bl
bts edx, edx
rol dx, 0x82
xor al, 8
shr edx, 0x41
ror al, 1
add al, 0x2e
neg al
shr edx, 0x74
and edx, edx
dec al
shl dx, 0x2a
xor bl, al
rol dx, 0x6f
adc eax, esp
xor edx, 0xd71a111c
shl edx, 0x43
neg dl
mov dword [eax], ecx
lea eax, [edx*2 + 0x6fa98c9c]
shr eax, 0xb5
lea ecx, [eax + edx*2 - 0x65f091d6]
mov ecx, dword [edi + eax*2 - 0xe19]
div dl
cwde
lea edi, [edi + eax*2 - 0x1475]
sal edx, 0x2b
bts ax, ax
xor ecx, ebx
inc ecx
sar dl, 0x45
neg ecx
call fcn.10d5a149
sal dword [esp + 4], 0x52
mov ebx, dword [ebx*4 + 0x118c1224]
push 0xea0d1e80
shr eax, 8
jmp 0x10cf50d6

Function at 0x118bd766
Capabilities:
Encode data using base64

Disassembly:
mov dword [ebp - 0x24], edi
jmp 0x11176312
xor bl, al
btc cx, 0x2b
mov dword [esp + ecx - 0x866], ecx
lea ebp, [ebp + ecx - 0x868]
sal ecx, 4
setb byte [esp + ecx - 0x865a]
mov word [ecx + ebp - 0x8660], ax
pop eax
pop eax
pop ecx
pop ecx
jp fcn.10ce0aa7
rol eax, 1
inc dl
lea eax, [ecx + eax - 0x8ee8645]
not dl
call fcn.10cf04c2
mov di, word [ebx + edi - 0x5c15]
dec esi
lea edx, [ebp*4 - 0x227fb459]
dec ebx
lea edx, [eax + eax*2 + 0x738d3701]
jae 0x10d0f4fe
mov dword [ebp - 0x28], edi
jmp 0x10ceec5b
Function at 0x118bfb88
Capabilities:
Encode data using base64

Disassembly:
sbb eax, 0xba3eca10
mov dword [esp], ecx
lea ecx, [ecx*4 - 0x52db13de]
inc ecx
neg eax
not eax
xor dword [esp + ecx - 0x6a0a2c37], ecx
movzx edx, cl
jno 0x11909087

Function at 0x118bfc9d
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
lea ebp, [ebp + eax - 0x6cc8]
inc eax
lea ecx, [eax + eax*8 - 0x6ecfa871]
movzx eax, byte [eax + edi - 0x6cd5]
dec ecx
sbb cl, ch
jno 0x1182b61d
sbb edi, 6
and dword [esp], 0x178fbd99
sbb byte [esp + 3], ch
call fcn.111aed4c
sbb dl, 0x17
mov dword [esp], eax
not dl
shl ax, 0xa9
xor bl, dl
xadd word [esp], ax
lea edx, [esp + edx + 4]
cwde
neg ax
not word [esp]
mov byte [edx], cl
mov ecx, dword [edi - 5]
xor ecx, ebx
dec al
inc ecx
neg ecx
cwde
dec ecx
lea edx, [eax - 0x676f4ff2]
xor ecx, 0x508d919c
cwde
xor ebx, ecx
and ax, ax
inc word [esp + eax - 0x6ccd]
adc esi, ecx
sub byte [esp + eax*2 - 0xd99b], dh
mov edx, dword [ebp + eax*2 - 0xd99a]
jb 0x10d3988f
lea edi, [edi + edx*8 - 0x55dcc]
mov ecx, edx
mov edx, dword [eax + edi - 0x1251abb9]
setb cl
adc eax, 0xb2e4708
and eax, 0xeba66fb6
xor edx, ebx
call fcn.118d735e
mov edx, dword [ebp]
mov eax, 0x82320d3b
push eax
movsx ecx, ax
mov eax, dword [ecx + ebp - 0xd37]
shr ecx, cl
imul ecx, dword [esp + ecx]
or ecx, dword [ebp + ecx*2 + 8]
push 0x7728409e
push 0xbb2a41a8
mov byte [esp + 2], 1
add ebp, 4
push 0x1f13bf13
push 0xc73fd315
div ecx
mov ecx, dword [esp + 3]
bt ecx, 0x28
mov dword [ecx + ebp - 0x13bf13c7], edx
call fcn.118b454b
mov eax, 0xa182d3a4
mov eax, dword [ebp]
mov ecx, 0x43a0a118
movzx ecx, byte [edi + ecx - 0x43a0a119]
xor cl, bl
mov edx, 0x46278e2d
ror cl, 1
not dx
bt edx, 0xb9
not edx
adc cl, 0x92
dec edx
not edx
not edx
rol cl, 1
btc dx, dx
btc edx, edx
sbb cl, 0x33
btr edx, edx
imul dx, dx
xor bl, cl
btr dx, 6
call fcn.118e17ac
inc ecx
mov esi, 0x48b900b1
inc ebp
movzx ecx, si
dec esi
lea ebp, [ecx*4 + 0x432b4a29]
dec ecx
lea ebx, [esi + ebx - 0x48b900b5]
inc ecx
mov esi, dword [esi + ebx - 0x48b900b1]
inc ecx
movsx eax, ch
dec esi
lea esp, [ecx*4 - 0x46c492e4]
inc ecx
movzx edi, dh
inc ecx
xor esi, edi
inc ecx
ror ah, 0x64
inc esi
not esi
xor esi, 0xa7895cba
dec ebx
lea edi, [ecx + 0x35161709]
movzx edx, al
mov ecx, 0xaf13e41a
ror esi, 1
dec eax
dec eax
inc ecx
sub ebp, 0x131b2782
dec ebp
lea eax, [ebp + eax*2 - 0x637711dc]
inc ecx
push edi
call fcn.11157e49

Function at 0x118c0e02
Capabilities:
Encode data using xor

Disassembly:
xor ecx, ebx
xchg dword [esp + edx - 0xd], edx
neg al
call fcn.11187067
Function at 0x118c4919
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
mov cx, word [ebp + eax - 0x5d]
bswap eax
lea ebp, [ebp + eax - 0x5efffffe]
push eax
sal eax, 0x32
not dx
ror eax, 0x4f
lea eax, [eax*8 + 0x3f856e3d]
not cx
xor ax, ax
and dx, cx
call fcn.118c511f
inc ecx
jg 0x10ce46e6
dec edi
cmp byte [edi - 0x69edd72f], ah
wait
stosd dword es:[edi], eax
and al, byte [esp + eax*2 + 8]
mov dword [esp + eax*8 + 4], 0x84041103
xor ebx, ecx
mov dword [ebp + eax - 6], ecx
lea ebp, [ebp + eax - 6]
pop edx
pop ecx
pop eax
jmp fcn.10ce0aa7
shr dl, 0x62
je 0x118da8f0
xor eax, ebx
inc eax
or edx, edx
or dx, dx
rol edx, 1
not eax
xor ecx, edx
neg eax
sar cl, 0xa4
ror edx, 0x16
rol eax, 1
call fcn.111a57eb
sub edi, 4
mov ecx, 0xd01e022c
sal cl, 0xc2
mov edx, dword [edi]
xor edx, ebx
call fcn.11839002
mov eax, 0x56146d15
movsx ecx, ax
mov eax, dword [ebp + eax - 0x56146d15]
mov edx, ecx
imul edx, edx
lea edx, [edx*8 - 0x5e45fef7]
mov edx, dword [ebp + ecx*2 - 0xda26]
mov cl, byte [ecx + ebp - 0x6d0d]
jno 0x10d5798f
dec eax
dec eax
sal edx, 0x7a
xor di, 0x982b
dec edx
inc dword [esp - 0x77]
inc sp
xor edi, edi
dec eax
lea edi, [esp + edi + 0x10]
dec ecx
sal eax, 0x11
inc esi
mov byte [edi - 0x1fc], ch
inc edx
neg dword [esp + ecx - 0x75]
inc esi
or dword [esp - 0x7b], edx
dec edx
lea ebx, [ebx - 0x102]
inc esi
mov esp, dword [ebx - 0x3f8]
inc edx
add byte [esp + ecx*2 - 0xf1], 0x99
inc ebp
xor esp, edi
inc ecx
neg esp
inc ecx
bswap esp
inc ebp
movzx ebp, ax
dec eax
cdq
movzx edi, dx
inc ecx
xor esp, 0xac9fce27
inc sp
sub dword [esp + edx*4 + 2], esi
dec eax
div dword [esp + edx*2 + 8]
dec eax
inc dword [esp + eax + 4]
inc ecx
neg esp
dec edx
lea edx, [edi + eax - 0x6fde61da]
inc eax
ror bh, 0xe4
dec esp
mov dword [esp + eax*8 + 8], edi
sar cx, 0x6e
inc ecx
shl dl, 0x83
inc ecx
xor edi, esi
inc esp
xor dword [esp + eax*8 + 8], esp
dec eax
cdq
dec esp
mov edi, dword [esp + edx*2 + 8]
dec ebp
arpl sp, sp
dec eax
neg edx
call fcn.118fd53c
jmp 0x118c9639
shr cl, 0x83
xor eax, 0xb8bae838
sub cx, dx
and ecx, edx
xadd edx, ecx
xor ebx, eax
or cl, cl
adc esi, eax
sar dl, 0x61
movzx eax, cl
bts eax, ecx
fsub qword [ebp]
bt dx, ax
rol cx, 0xe3
jmp esi
mov dword [esp + 8], 0xdc3631a8
xor eax, esi
add word [esp + 0x10], 0x7294
jno 0x10ce463c
neg dword [esp + 0x10]
inc edx
call fcn.10cf0a84
mov ecx, 0xb9c1ad
mov edx, dword [ebp + ecx - 0xb9c1ad]
mov cx, word [ebp + ecx*4 - 0x2e706b0]
mov eax, 0x5930e081
lea eax, [eax + eax + 0x3abdee9a]
not eax
lea ebp, [ebp + eax*4 - 0x4b81418a]
not eax
sal ax, 0x4b
not al
shr cx, 1
jmp 0x10d0c491
xadd dword [esp + eax - 0x6af7fde5], ecx
xor edx, 0xcb1ed337
ror ax, 0x2c
jae 0x10d014f1
not dword [esp + eax - 0x6af7de6b]
neg edx
xor ebx, edx
add esi, edx
inc cl
pop ecx
pop eax
jne fcn.10ce0aa7
Function at 0x118c4e5a
Capabilities:
Encode data using base64

Disassembly:
inc sp
movzx ecx, byte [edx + ebp - 0x35c01c]
jnp 0x111562e1
dec eax
mov dword [esp + edx*4 - 0xd70070], esi
inc eax
mov dh, byte [edx + ebp - 0x35c01a]
rol edi, cl
inc esp
xor cl, cl
push edi
inc ecx
dec dh
inc ecx
shr edx, 0xc9
inc eax
xor dh, cl
dec eax
shr dword [esp + edx - 0x35c014], cl
push ecx
inc esp
and cl, dh
pop edi
inc ecx
movsx esi, sp
inc cx
or eax, 0x4466a627
mov dword [ebp + edx*2 - 0x6b8036], ecx
inc esp
add esi, ecx
sub dword [esp + edx*2 - 0x6b8032], 0xe0aff1af
inc ebp
bts edx, eax
mov si, word [ebp + edx*2 - 0x6b8036]
inc ebp
movsx ecx, dh
inc ebp
and ebp, esi
inc esp
movzx eax, byte [ebx + edx*2 - 0x6b803d]
or ecx, edx
inc cx
btr esp, 0xa3
inc ebp
xor al, bh
xor word [esp + edx*2 - 0x6b8033], dx
inc ecx
sar cl, 5
or di, dx
inc esp
sbb al, cl
shr dword [esp + edx - 0x35c010], cl
inc cx
sar ecx, 0x41
inc esp
xchg byte [esp + edx*2 - 0x6b8034], dl
inc esp
xor al, bh
or edx, dword [esp + edx - 0x35c014]
inc ecx
pop ebp
inc esp
sbb al, cl
shr byte [esp + edx - 0x35df5b], 0xa7
inc ecx
pop ecx
dec esp
lea ebp, [ecx*4 - 0x17c1844]
inc esp
xor al, bh
dec ecx
neg edx
inc ebp
xor bh, al
inc ecx
btc esi, 0x97
inc cx
dec edx
dec esp
add eax, esp
inc ecx
inc ah
inc edx
mov byte [edx + eax - 0x35df5c], dh
dec esp
mov esi, dword [ebx + edx*4 - 0xd77d7d]
dec ebx
lea eax, [edx + ebp - 0x484da65f]
setno dl
dec eax
lea ebx, [ebx + edx*2 - 0x6bbe0f]
dec eax
btr eax, eax
mul dx
jb 0x10d3d3ce
Function at 0x118c56ad
Capabilities:
Authenticate hmac

Disassembly:
inc ecx
pop esp
inc ecx
pop esp
pop edi
jbe fcn.10cf108c
inc ecx
bswap esp
inc ecx
sub esp, 0xa49f50a2
inc ecx
ror esp, 2
dec ecx
lea edx, [esi + esi*4 + 0x48374b13]
cdq
dec eax
rol edx, cl
inc edi
lea esp, [esp + edx - 0x3633e1c3]
inc ecx
push edi
inc esp
xchg bh, dh
dec eax
sar esi, cl
inc esi
xor dword [esp + edx - 0x22], esp
inc ecx
xadd dh, dl
inc ecx
pop edi
dec ebp
arpl sp, sp
btr di, cx
dec eax
or edx, 0xf699ad82
dec ebp
adc ebx, esp
dec ecx
ror esi, cl
jae fcn.10cf108c
inc esi
xor dword [esp + ebp*2 - 0x3d2cc60], ecx
dec eax
bswap esi
inc ebp
mov edi, esi
inc cx
bt eax, 0xa1
inc ecx
pop edi
dec eax
shr ecx, cl
sar dx, 0xe1
dec ebp
arpl cx, cx
inc ebp
and esi, esi
dec ebp
adc ebx, ecx
mul dl
dec ebp
cmovae esp, eax
dec ecx
adc esi, ebp
ja fcn.10cf108c
inc esp
xor dword [esp + esi*2 - 0xa], esp
inc ecx
movzx eax, cl
dec eax
mov dword [esp + esi - 5], 0x1f0bda06
dec esp
mov edi, dword [esp + esi*4 - 0x24]
inc esp
or esi, edi
inc eax
dec dh
dec ebp
arpl sp, sp
inc cx
not esi
dec ebp
adc ebx, esp
mul byte [esp + esi*4 - 0x23]
inc esp
movzx esp, byte [esp + esi*2 - 0xf]
movzx ecx, word [esp + esi - 2]
dec eax
mov ebp, dword [ebp + esi - 0xc]
shr cx, cl
jp 0x10d07540
dec esp
mov edi, dword [esp + eax - 0x5e2d90f8]
inc ecx
add al, dl
dec esp
lea esi, [ecx + edx + 0x509c7b99]
inc ecx
not dl
inc esi
mov dword [ebp + ebp - 0x1e9662c], eax
dec eax
cmova esi, eax
inc bp
adc edx, esi
dec edx
mov esi, dword [ebx + ebp*2 - 0x3d2cc6d]
dec esi
mov dword [esp + ebp*4 - 0x7a598b8], esi
dec esp
mov dword [esp + eax - 0x5e2d9118], esp
dec ecx
xor esi, edi
dec ecx
shr esp, cl
inc ebp
movsx eax, cl
dec eax
xor esi, 0x31b42107
inc ecx
sar al, 0xc1
and cx, word [esp + eax - 0x5e2d910f]
dec ecx
sbb esi, ecx
dec eax
inc dword [esp + eax - 0x5e2d9110]
dec ecx
inc esi
dec eax
neg esi
dec esp
lea edx, [edi + edi*4 + 0x170ed012]
dec ecx
add esi, ecx
inc esi
mov dword [esp + ebp*8 - 0xf4b317a], edx
dec eax
not esi
inc ecx
dec dl
dec ecx
sal eax, 0x6c
dec esp
xor edi, esi
dec edx
mov dword [ebp + ebp - 0x1e96634], esi
dec eax
lea ebp, [ebp + eax - 0x5e2d911c]
dec ebp
and eax, ecx
inc esp
mov ecx, dword [eax + ebx - 0x5e2d9129]
dec eax
lea ebx, [eax + ebx - 0x5e2d9129]
inc ecx
ror eax, 0x5c
inc cx
bts eax, 0x84
inc ebp
xor ecx, edi
pop esi
inc ecx
xor ecx, 0x31a3ee21
inc ecx
inc dl
inc ecx
rol ecx, 3
inc ebp
lea ecx, [ecx + eax*2 + 0x2c646850]
inc ecx
ror ecx, 3
inc ecx
xor ecx, 0x9e3a2b1c
inc cx
rol edx, 0x89
dec esp
mov dword [esp + eax - 0x5e2d9118], edi
jae 0x10d23da7