joyce8/EMBER2024-capa huggingface dataset:
Function at 0x770b1b
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
xor ebx, eax
sub dl, dl
bswap edx
adc esi, eax
lea ebp, [ebp + edx - 1]
movzx ecx, byte [edx + ebp]
mov dword [esp + edx*2], edx
xor dword [esp + edx], edx
mov eax, 0xb9219133
xor cl, bl
dec cl
cdq
xor edx, dword [esp]
xor cl, dl
mul eax
cdq
and eax, 0xb938d686
dec cl
not edx
sar word [esp + eax - 0x3100d000], 0xa9
je 0x9fc331
inc ecx
btc dx, 0x8d
lea edx, [eax*2 - 0x2479a6d8]
xor ebx, ecx
imul dx
neg al
add esi, ecx
lea ecx, [eax*4 + 0xe05793d]
call fcn.009b52a1
xor cl, 0xb3
neg cl
or dl, dh
cdq
xor bl, cl
lea ecx, [esp + ecx + 4]
cwde
push eax
bts edx, eax
movzx ax, byte [edx + ecx - 1]
adc dword [esp + edx + 3], edx
lea edi, [edi + edx - 3]
mov word [edi + edx - 1], ax
shl byte [esp + edx*4 - 3], 0xa2
pop eax
pop edx
jns fcn.00cad447

Function at 0x771440
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
mov dword [esp + eax - 0x1d8fb8f8], eax
lea edi, [eax + edi - 0x1d8fb8fa]
neg dword [esp + eax*4 - 0x763ee3df]
sal eax, 0x8e
mov word [edi], dx
push eax
pop ecx
pop ecx
pop eax
jbe fcn.00747049
mov ecx, 0xc19a55ab
jmp 0x946afd
shr dword [esp + eax - 0x66b90fff], 0x9f
neg word [esp + eax - 0x66b90ffb]
sbb dl, 0x9f
dec eax
bts esi, 0x2e
inc esp
xor ah, dl
dec eax
lea edx, [esp + edx + 8]
dec eax
cwde
dec eax
lea ecx, [ecx + 0x731cb9b0]
inc dx
mov ebp, dword [edx + esi - 0x66b98440]
dec esi
sub dword [esp + esi - 0x66b98440], edi
mov edx, ecx
dec edx
lea edi, [edi + edi*2 - 0x82]
inc ecx
btr esi, 0x3a
push ebx
xadd word [esp + eax - 0x66b90ffe], ax
mov word [edi + eax - 0x66b96bfa], bp
dec edi
lea edx, [edx + edi*2 - 0x84]
inc edx
mov esi, dword [eax + edx - 0x66b96bfa]
inc dx
sub dword [esp + edi*4 - 0xf5], eax
movsx ebp, ax
inc esp
movsx ecx, cl
inc ecx
xor esi, esp
inc edx
lea esi, [esi + edi - 0x308366da]
call fcn.008ca901
cdq
xchg dl, al
rol ecx, 1
btc ax, dx
cwde
ror al, 0xe7
lea ecx, [ecx + edx - 0x61d17077]
sub edx, eax
ror edx, 0xf1
sub dl, al
ror ecx, 1
sub eax, 0x822185bb
shr al, 0x41
or eax, 0x7dbe0635
lea ecx, [ecx + eax - 0x73fe3e93]
adc edx, eax
mul eax
xor ebx, ecx
add ebp, ecx
mov edi, dword [edi + edx - 0x3e02c43b]
jmp fcn.008360bb
movsx eax, cl
dec esp
mov eax, dword [edi]
movsx ebp, al
dec eax
add edi, 8
dec eax
cdq
dec esi
lea edx, [edx + edx - 1]
inc eax
movsx ebx, ch
inc esp
movzx esi, al
inc ecx
movzx ecx, byte [edx + edx*2]
dec eax
shr ebx, 0xbd
inc ecx
xor cl, ah
dec esp
lea ecx, [ebx*2 + 0x43876c88]
inc ecx
movzx esi, dh
dec eax
shr ebp, 0xad
xor cl, 0x86
inc ebp
movsx edi, cl
inc ecx
ror cl, 0x42
ror cl, 1
dec eax
cdq
xor cl, 0x9c
inc esp
btr ebx, edi
dec ecx
xor esi, 0x5308886
not cl
jle 0x83b257
bswap eax
inc esp
xor ah, cl
dec eax
add ecx, esp
dec eax
sub eax, ebx
dec esp
mov dword [ecx + ebp], eax
inc sp
sub ecx, edx
dec ebp
lea edx, [edx + ebp*2 - 4]
inc esp
movzx ebp, dx
inc eax
or ch, dh
dec eax
cwde
inc ebp
mov eax, dword [edx + eax + 0x54000001]
dec esp
or ebp, esi
dec esi
inc ebp
xor eax, esp
inc ecx
neg eax
dec eax
cwde
inc ecx
inc eax
inc ecx
ror eax, 2
dec esp
lea edi, [edx*8 - 0x46412177]
inc ecx
not eax
dec eax
cdq
inc esp
add eax, edx
Function at 0x77379e
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using aes mixcolumns step
Encrypt data using chaskey

Disassembly:
call 0x8d0e0c
mov ecx, 0xa057da7
lea edx, [ecx + 0x632b4888]
mov edx, dword [edi + ecx - 0xa057da7]
lea edi, [edi + ecx*2 - 0x140afb4a]
mov eax, ecx
shr ax, 0xab
xor edx, ebx
neg edx
lea ecx, [eax + 0x560053b5]
sar ax, 0x66
or ax, cx
bswap edx
shr cl, cl
not edx
btr eax, eax
sub al, 0x33
bswap edx
btr ax, cx
rol cx, cl
jb 0xcbdbed
xor edx, 0x3aa1f89a
and ecx, eax
sbb eax, eax
adc edx, 0xe09c7190
xchg ah, al
rol edx, 3
shr eax, cl
ror ecx, 0x4e
not edx
sub eax, 0x809feda2
bswap eax
xor ebx, edx
cwde
btr ecx, 4
add ebp, edx
mov si, word [esi + ecx*2 - 0x880000a]
and eax, ecx
adc cx, ax
jne fcn.007194ad
ror word [esp + edx - 0x3aee1438], 0xae
cdq
mov ecx, edx
mov edx, dword [edi]
setae byte [esp + 1]
mov ax, word [edx]
shl dword [esp], 0xba
lea edx, [ecx*2 - 0x44f641f0]
adc edi, 2
pop edx
mov word [edx + edi - 0x28000000], ax
jmp ebp

Function at 0x774655
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
dec esp
mov esp, dword [esp + ebp*2 - 0x184a3dbc]
inc esp
or esi, dword [esp + ebp - 0xc251ee1]
dec ecx
add ecx, ebp
inc esp
adc eax, ecx
dec eax
arpl ax, ax
dec esp
adc ebx, eax
inc ecx
push eax
ror bl, 0xc2
sal dx, 0x42
pop esi
pop edx
inc ecx
pop ebp
ja fcn.008c5046
mov ecx, 0xa986c51a
movsx edx, cx
sub edi, 4
movsx eax, cl
dec al
mov ecx, dword [eax + edi - 0x19]
push eax
rol edx, 0x99
btc edx, eax
xor ecx, ebx
rol dword [esp + edx - 0x37ffff8a], 0x51
adc edx, edx
ror ecx, 3
lea ecx, [edx + ecx - 0x50e606e0]
xor ecx, 0x318b942a
dec dl
cwde
mul ax
inc ecx
xor ebx, ecx
shl ax, 0x88
btc edx, 0x2f
sal al, 0xc2
adc esi, ecx
inc dword [esp + eax*2 - 0xe200]
mov dx, word [eax + ebp - 0x7100]
lea ebp, [ebp + eax*2 - 0xe1fe]
xchg dword [esp + eax - 0x7100], eax
mov ecx, 0x25ac188e
lea edi, [edi + eax*4 - 0xc80005]
setle cl
sal byte [esp + ecx*2 - 0x4b582ffd], 0xe1
movzx ecx, byte [eax + edi - 0x320001]
inc dword [esp + eax*4 - 0xc80004]
rol dword [esp + eax*2 - 0x640002], 0xfd
xor cl, bl
xor cl, 9
sub cl, 0xb4
rol cl, 1
neg cl
pop eax
rol cl, 1
bt eax, eax
sal al, 0x22
xor bl, cl
add ecx, esp
shl ax, 0xad
and eax, 0x5816f003
mov byte [ecx + eax*2], dl
xor eax, esi
jmp eax
ror eax, 1
inc cx
rol ecx, 0xed
inc ecx
sbb eax, 0x141f8f84
dec eax
mov dword [esp + ebp - 0xc251ee2], 0x75bcf095
inc eax
neg eax
bswap eax
dec eax
or dword [esp + ebp*4 - 0x30947b80], esi
jno 0x9b36c8
inc sp
imul ebp, esi
adc eax, ecx
dec esp
mov dword [esp + ebp - 0xc251eda], esp
sar edx, 0x7e
xor dword [esp + ebp - 0xc251eda], eax
jmp 0x721bf7
Function at 0x77564f
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
inc edx
xor dword [esp + edi - 0x941094], ecx
inc esp
bt esi, esi
inc ebp
or al, dh
inc ecx
pop esp
dec ebx
lea edx, [edi + esi + 0x1c12a20c]
dec ecx
sal eax, 0xdf
dec ebp
bts esi, esi
dec eax
arpl cx, cx
dec esp
adc ebx, ecx
mov eax, ebp
dec edi
lea edx, [edi + edx - 0x94109c]
dec eax
cwde
dec ebp
lea eax, [ebp - 0x1ef25776]
dec ebx
mov ecx, dword [edi + edx - 0x941094]
xadd esi, ebp
inc ebp
xor eax, esi
dec ecx
xor ecx, esp
dec esp
xchg ebp, eax
dec eax
inc ecx
dec eax
not ecx
sal ebp, 0xef
inc ecx
inc bh
dec eax
neg ecx
dec eax
sub edx, 0x12222f80
inc eax
xchg dh, ch
dec eax
inc ecx
inc ecx
push eax
inc bp
or ecx, esi
dec edx
mov dword [esp + edi*2 - 0x128212a], edx
dec esp
xor esp, ecx
dec edx
lea edi, [edi + edi - 0x94109d]
inc eax
ror ch, 0x42
dec ebx
lea ebx, [ebp + ecx*2 - 0x5a49feda]
dec edx
mov dword [edi + edi - 0x941095], ecx
inc ecx
pop ebp
jae fcn.008c5046
inc ecx
movsx ebp, si
dec edx
mov dword [esp + edi - 0x941094], esi
rol ecx, 1
dec edx
xor dword [esp + edi - 0x941094], 0xd63dfc3b
inc ebp
movsx ecx, bp
jl 0x98fa24
shr dx, 0x85
lea ecx, [edx*4 + 0x2f98ca36]
xor ebx, eax
add esi, eax
xchg edx, ecx
mov edx, dword [edi + ecx*2 - 0x65ca0c6e]
and cl, ch
mov eax, dword [edi + ecx*2 - 0x65ca0c08]
neg cl
rol ecx, cl
not edx
not ecx
not eax
xor ecx, ecx
or edx, eax
jmp 0x97fb70
movzx eax, cl
add cl, byte [edi + ecx*8 + 8]
shr edx, cl
lea ecx, [eax*8 - 0x24ea3a55]
shl ecx, cl
bswap eax
mov dword [eax + edi + 6], edx
mov edx, ecx
bts ecx, edx
and dx, cx
lea edi, [edi + eax*2 + 6]
xor eax, esi
jmp eax
dec esi
mov dword [esp + edi - 0x941094], esp
js 0x707bdf

Function at 0x7756c3
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
jmp 0x7b6960
xor esi, edx
call fcn.008dad6d

Function at 0x7760ad
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step
Parse pe header

Disassembly:
mov dword [ebp + 8], ebx
bt eax, eax
movzx ebx, ax
mov dword [ebx + ebp - 0xc493], ecx
setb bl
mov dword [ebx + ebp - 0xc400], edx
mov dword [esp + ebx*4 - 0x31000], ebx
xor byte [esp + ebx - 0xc3fd], 0x3a
mov ebx, dword [esp + ebx - 0xc3f0]
pop eax
pop eax
pop edx
pop edx
pop ecx
jp fcn.0089b138

Function at 0x7776d8
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
neg edx
rol al, 1
shl ecx, 0xa7
rol dl, 1
shr dl, 0x41
not al
or cl, 0xa9
dec al
xadd ecx, edx
bswap edx
neg dx
neg al
dec al
xor cl, dl
sal dl, 3
xor bl, al
lea eax, [esp + eax + 8]
mov cx, word [eax + ecx - 0x625ece18]
movzx eax, dl
sal edx, 0xc4
mov dword [esp + eax], eax
lea edi, [edi + eax*8 - 2]
dec dword [esp + eax*4 + 4]
mov word [edi + eax*4], cx
ror dx, 0xaf
sub ax, ax
pop eax
pop eax
je fcn.008360bb

Function at 0x7797aa
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
btc dx, dx
xor ecx, ebx
dec dx
mov dword [esp], edx
bswap ecx
not ecx
call fcn.00765387
Function at 0x7797d2
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
mov dword [esp + 4], 0x61162523
lea esp, [esp + 0x10]
jne 0xcc0ed4
pop esi
mov edx, 0xa08d6c3e
movzx ecx, dl
not eax
add edx, 0xcaac048e
dec ecx
mov dword [edx + edi - 0x6b3970cc], eax
sbb ecx, edx
lea ebp, [ebp + edx - 0x6b3970d0]
shr cx, 0xc
mov eax, dword [edx + ebp - 0x6b3970cc]
xor ecx, edx
add edx, ecx
xor eax, ebx
rol dx, cl
rol eax, 1
neg eax
not eax
xor esi, eax
jmp 0x842a60
push 0x1ba13a94
and esi, 0xff
mov esi, dword [esi*4 + 0x754148]
call fcn.00a2ae0a
mov esi, 0xbb985636
inc esi
or si, si
movzx esi, byte [ecx]
jno 0x802680
setb ch

Function at 0x77ffbd
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
mov dword [esp + ecx], ecx
lea edi, [edi + ecx*4 + 6]
shl cx, 0x61
sub cl, byte [esp + ecx*4 + 3]
mov byte [edx + ecx], al
push ecx
movsx eax, cl
jno 0x91dfc2
mov eax, 0x37beb00f
shr ax, 0x43
movzx ecx, al
mov edx, dword [edi + eax*2 - 0x6f7c2c02]
adc ax, 0xb83f
lea edi, [edi + eax*2 - 0x6f7d9c7e]
dec eax
xor edx, ebx
sub edx, ecx
cbw
bt cx, ax
ror edx, cl
lea ebp, [ecx + ebp - 4]
shl byte [esp + ecx*2 + 2], 3
cbw
push ecx
or eax, dword [ebp + ecx*2]
mov edx, ecx
call fcn.00986450
push 0x6e2af92c
call fcn.007860e4
Function at 0x781f07
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
inc ebp
lea eax, [eax + ecx - 0x288321eb]
not word [esp + ecx*2 - 0x5a51]
movsx ebp, bx
movzx edx, byte [esp + ecx*2 - 0x5a4f]
inc ecx
rol eax, 1
inc ecx
sub eax, 0xbb29c319
inc ecx
xor eax, 0x5c094226
or ebx, ebp
not ebx
inc ecx
dec eax
dec esp
mov dword [esp + ecx*2 - 0x5a52], esp
sub bx, 0x1dbd
xadd bx, dx
inc esp
xor dword [esp + ecx*2 - 0x5a52], eax
dec eax
sal ebp, 0xa8
dec eax
mov dword [esp + ecx*8 - 0x16968], ebp
dec eax
btr ecx, edx
dec esp
mov esp, dword [esp + ecx - 0x2d25]
dec ebp
arpl ax, ax
dec eax
mov dword [esp + ecx*2 - 0x5a52], 0x83bbe926
dec ebp
adc ebx, eax
dec esp
lea ebp, [ecx + ebp + 0x703adfaf]
dec eax
and ebx, ecx
dec ebp
lea edx, [edx + ecx - 0x2d2e]
inc ecx
movzx ecx, byte [edx + ecx*4 - 0xb4b4]
inc ecx
mov eax, 0x919fac10
inc ecx
xor cl, ah
and word [esp + ebx - 0x2503], dx
dec ecx
lea esi, [ebp - 0x246b9d6e]
inc cl
not cl
dec eax
lea esi, [edx*4 + 0x999743f]
inc esp
movsx edi, word [esp + ebx*4 - 0x9412]
rol cl, 1
dec eax
dec dword [esp + ebx - 0x2500]
dec cl
dec eax
neg ebx
xor dword [esp + ebx + 0x250e], ebp
inc esp
mov esi, dword [esp + ebx + 0x2505]
neg cl
inc esp
add dword [esp + ebx*2 + 0x4a15], eax
not cl
dec esp
or dword [esp + ebx + 0x250c], eax
inc esp
adc edi, ebp
inc esp
xor ah, cl
inc ecx
xchg al, ch
dec eax
lea ecx, [esp + ecx + 0x10]
add si, word [esp + ebx*8 + 0x12829]
inc ecx
push eax
inc sp
movzx ebp, byte [ecx + ebx + 0x2505]
inc sp
xchg ebp, esi
dec eax
lea edi, [edi + ebx + 0x2503]
inc eax
rol dh, 0x41
dec eax
sal dword [esp + ebx + 0x2515], 0xe8
sar esi, 0x70
inc sp
mov dword [edi + ebx*2 + 0x4a0a], ebp
dec eax
xor dword [esp + ebx + 0x2513], 0xdae791a
inc ecx
pop eax
pop ebx
pop edx
ja fcn.008c5046
call fcn.009a6dc4
push eax
xor edx, ebx
pop ecx
ror edx, 3
or al, 0x95
sbb edx, 0x251b8ead
xadd cl, al
xor edx, 0xab068010
lea edx, [edx + ecx - 0x478ece30]
or cx, 0xe6b6
xor ebx, edx
sal ax, 0xc
adc ebp, edx
movsx edx, cl
and edx, 0x5d95201e
not cl
mov ax, word [edi + edx - 0x5d952016]
mov cl, byte [edi + edx - 0x5d952014]
bswap edx
or dx, dx
and edx, edx
lea edi, [edi + edx - 0x1620955b]
shr dx, 0xac
btc edx, edx
shr ax, cl
lea ecx, [edx*2 - 0x977d84c]
inc dx
call fcn.009971c6
into
mov cl, 0xde
sub edi, esi
bound ebp, qword [ebx - 0x209f3470]
sub dword [esp], ecx
leave
push 0x40c29df
pop ecx
invalid
Function at 0x782c0f
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
dec bx
dec eax
add ebp, esp
movzx cx, byte [ebp + ecx*2 - 0xe00]
or si, bx
inc ecx
adc edi, 0xec95a814
inc dx
mov dword [edi + ecx + 0x3e1b9aa8], ecx
dec eax
bts esi, edx
inc ecx
shl ebp, 0x44
dec ebp
adc ecx, esi
dec edx
lea edi, [edi + ebp*2 - 0x7a172c4]
inc cx
rol ecx, 1
dec ebx
lea ebp, [eax + eax - 0x38f4a858]
jp fcn.008c5046
lea edx, [ecx + edx + 0x67bba277]
call fcn.008f9a07
mov edx, 0x7935ac2e
lea esi, [esi + edx - 0x7935ac32]
movzx ecx, dx
ror ecx, cl
mov eax, dword [esi + edx - 0x7935ac2e]
xor eax, ebx
dec edx
ror eax, 1
shl dx, 0xe1
bt edx, edx
lea eax, [eax + ecx*2 - 0x73b1ec74]
dec cx
jnp 0x799e97
mov ebx, 0x3c9649be
inc esp
movsx eax, bx
dec esp
mov ebp, dword [edi + ebx - 0x3c9649be]
inc ecx
movsx edx, al
inc esp
movsx esi, bx
dec esp
mov ecx, dword [edi + ebx*2 - 0x792c9374]
dec eax
lea edi, [edi + ebx*2 - 0x792c936c]
inc esp
mov edi, ebx
dec esi
mov dword [ebx + ebp - 0x3c9649be], ecx
dec edx
lea eax, [edi*4 + 0x421d4c32]
inc ebp
movsx ebp, al
dec edx
lea ecx, [eax*4 + 0x3607e4a5]
dec edi
lea edx, [eax + edx - 0x49c2]
cdq
dec edi
lea ecx, [edi + ebp + 0x5828242e]
inc ebp
mov edi, dword [edx + ebx - 0x3c9649be]
sal cx, 0x29
inc ecx
inc dh
inc ebp
xor edi, esp
inc cx
not ecx
inc ecx
shr ebp, 0x91
inc ecx
ror edi, 1
inc ecx
neg edi
jmp 0x8dd0f0
inc ecx
movzx ebp, byte [edx + edx*8 - 0x5120ff]
dec eax
rol ecx, 0x83
shr word [esp + edx*2 - 0x144833], 0x82
dec esi
lea edx, [ecx + edx - 0x707]
dec eax
mov dword [esp + edx - 0xa241f], ecx
inc ecx
rol bh, 0xe4
pop edx
inc ecx
xor ch, ah
inc ecx
pop edi
dec esp
imul esi, edx
dec eax
bswap edx
inc eax
xor ch, 0x11
and bl, 0xb5
dec ebp
sbb ecx, eax
inc eax
adc ch, 0x12
inc eax
ror ch, 1
inc eax
not ch
inc esp
xor ah, ch
dec eax
inc esi
jl 0x77afbf
dec ecx
lea ebp, [ecx + 0x24be973c]
movzx ecx, dl
not esi
cbw
inc ecx
push esp
dec eax
mul ecx
bt bp, cx
sub cl, 0xb8
xor dword [esp + edx], esi
inc esp
movzx eax, ch
inc esp
btr ecx, eax
inc ecx
pop esp
inc bp
add ebp, eax
jnp 0x7cc6e7
xor ax, 0x8910
movzx ecx, word [esp]
xor ax, cx
bt cx, 0x15
dec dword [esp + ecx*4 - 0x3fffc]
sbb ax, 0x20b1
sar ecx, cl
not ax
js 0x9292ba
inc dword [esp + ecx]
shr dx, 0xec
adc ax, 0xa49f
xor bx, ax
push edx
mov word [esi + ecx*2 - 4], ax
movsx eax, cx
lea esi, [esi + ecx*2 - 4]
sub byte [esp + ecx + 7], ch
pop edx
pop eax
jae fcn.007194ad
sar ecx, cl
neg eax
lea eax, [edx + eax + 0x3ceb1a3d]
add edx, edx
not cx
rol cx, 0xa3
ror eax, 2
xor ebx, eax
shl dx, 0xaf
xor ecx, 0xc7b2748e
call fcn.007efdbe
inc ecx
pop esp
push ebp
inc ecx
pop ebp
dec ebp
arpl di, di
sar al, 0xc1
bts ebx, 0x31
dec ebp
add ebx, edi
dec ecx
or edx, ebx
jmp edx
call fcn.008ee4c5
inc esi
lea edi, [ebx + edi + 0x1005565c]
add ax, 0xcc1c
inc ecx
not edi
movzx ebp, dl
inc ecx
sbb edi, 0xbab6ee2e
cwde
inc ecx
push esp
inc esp
movsx esp, bp
inc ecx
sar al, 0x24
inc esp
xor dword [esp + ebx - 0x3c9649be], edi
jmp 0x7a9371
sub eax, 0xd503a8bb
adc al, ah
cwde
not dx
sal al, 0xe1
mov word [ebp + eax*2 - 0xae74], dx
lea ecx, [eax*2 - 0x47acd63]
bts ax, ax
jmp edi
Function at 0x7839da
Capabilities:
Hash data using murmur3

Disassembly:
pop eax
mov eax, dword [ebp]
call eax
mov ebp, dword [ebp - 4]
mov ecx, 0x5b09b8b2
mov ebx, ecx
mov dword [ecx + ebp - 0x5b09b8b2], eax
xor bl, 0xc
mov esi, ebp
lea eax, [ecx + ebx*4 + 0x6e906d90]
movzx ebp, bl
pop ebx
jl 0x9042fe

Function at 0x785a87
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
inc ecx
mov ecx, dword [edx + eax - 0x6c0d8310]
call fcn.00a47d64
mov ebp, 0x60d0cbb
inc esp
movsx ebp, bp
inc eax
neg ch
dec esi
lea edx, [ebp + edx - 0x60d0c46]
inc ecx
movzx ecx, byte [edx + ebp*4 - 0x18343114]
inc ebp
movsx edi, bp
dec ecx
lea esi, [ebp + ebp - 0x25b237f]
inc ecx
rol bh, 0x81
inc ecx
xor cl, ah
dec cl
dec edx
lea edx, [edi*8 - 0x4fe6a97a]
shl si, 0xca
inc ecx
dec ebp
rol cl, 1
not cl
bt edx, esi
rol cl, 1
push ebp
inc esp
movsx eax, ch
inc esp
xor ah, cl
dec eax
lea ecx, [esp + ecx + 8]
dec ebp
mov ecx, dword [ebp + ecx - 0xcba]
dec edx
lea edi, [edi + ebp*2 - 0x197c]
dec esp
mov dword [ebp + edi - 0x60d0c45], ecx
movsx ecx, bp
dec edi
lea edx, [ebp + edx - 0xcbe]
movsx eax, byte [esp + ebp - 0x60d0c45]
inc esp
mov ecx, edx
push edx
inc esi
mov ebp, dword [ebp + edx - 0x60d0c45]
dec eax
lea eax, [ebp + ebp*8 + 0x29afe23f]
dec eax
not dword [esp + ebp - 0x60d0c41]
inc esp
movzx esi, cl
inc ebp
xor ebp, esp
dec eax
lea ebx, [ecx + ecx + 0x341e03a5]
sub ebp, 0x4e9ecaa6
inc ecx
ror ebp, 3
inc ecx
bswap ebp
inc ecx
dec bh
dec edx
ror dword [esp + edi - 0xc6e], cl
inc ecx
ror ebp, 2
xchg si, ax
inc ecx
xor ebp, 0x72312728
dec edx
sal dword [esp + edi - 0xc71], 0xea
dec edx
add dword [esp + edi*4 - 0x31d3], 0xa40d90
dec esi
mov dword [esp + edi*4 - 0x31d0], esp
inc edx
shr byte [esp + edi - 0xc73], cl
inc esi
xor dword [esp + edi*2 - 0x18e4], ebp
inc edx
add byte [esp + edi - 0xc70], bl
inc ebp
mov esp, eax
dec edx
xor dword [esp + edi*2 - 0x18ec], 0xa0b79cb8
dec esi
mov esp, dword [esp + edi*8 - 0x63a8]
dec ebp
arpl bp, bp
jne 0x7e5a99
add dl, byte [edi + ecx*2 - 0x36000000]
movzx ax, byte [ecx + edi - 0x1afffffe]
xor ecx, 0xf811bb2a
ja 0x9a0177
dec esi
or dword [esp + edi*4 - 0x31d8], ecx
inc edx
and esi, dword [esp + edi - 0xc76]
dec ebp
adc ebx, ebp
jmp 0xcb039c
inc edx
mul dword [esp + edi*2 - 0x18ea]
dec edx
mov dword [esp + edi*2 - 0x18e4], eax
inc ecx
pop esi
pop eax
jo fcn.008c5046

Function at 0x785c55
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step
Encrypt data using chaskey

Disassembly:
mov eax, dword [edi]
ror dword [esp + 6], 0xfc
mov dword [esp], edx
adc edi, 4
shr dx, 0xe9
xor eax, ebx
rol dx, 0xcd
xor eax, 0xf4089b3d
lea edx, [edx*8 + 0x54975c9d]
or edx, ecx
sbb eax, 0x4535aa02
bswap ecx
rol eax, 3
xor ecx, edx
neg eax
neg cl
xchg word [esp + 7], cx
bts edx, 0xb7
xor ebx, eax
bt dx, 0xbb
jb 0x915b29
add ebp, eax
xadd byte [esp + 6], cl
pop edx
pop eax
pop eax
jmp ebp

Function at 0x785ca5
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step
Encrypt data using chaskey

Disassembly:
push 0x22212d15
or dword [esp], 0xccac56b8
mov dword [esp + 4], edi
lea esp, [esp + 4]
Function at 0x789d26
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
dec eax
mov dword [esp + eax - 0x81c2fed], esi
mov word [eax + edi - 0x81c2fed], cx
and byte [esp + eax - 0x81c2fea], 0xa6
pop edx
inc ecx
pop ebp
jge fcn.008c5046

Function at 0x794f97
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
not edx
and ecx, edx
mov dword [esp + eax - 0x104dd9e3], 0x10bd7cae
pop edx
mov dword [edi + eax*2 - 0x209bb3c2], ecx
movzx ecx, al
add eax, 0xe427ad39
movzx eax, byte [ebp + edx - 0x10bd7caf]
xor al, bl
call fcn.0096208a
dec esp
mov eax, edi
inc ecx
mov ebp, 0xc4b55b02
dec eax
sub edi, 8
inc ecx
movzx ebp, ch
inc ecx
movsx esi, bp
dec esp
mov dword [ebp + edi - 2], eax
inc ecx
mov edi, 0x718f3e23
inc ecx
movsx ecx, bp
dec ebp
lea edx, [edx + ebp*2 - 8]
inc ebp
mov eax, dword [edx + ebp*8 - 0x10]
sal si, cl
inc ebp
xor eax, esp
dec eax
lea edx, [esi + esi*8 + 0xcb3e0b7]
inc ecx
neg eax
inc ecx
not eax
dec eax
inc edx
dec esp
lea esi, [ebp*2 - 0x36f3717b]
inc esp
movsx ecx, dl
inc ecx
ror eax, 3
inc ecx
inc dh
inc ecx
dec cl
dec esp
xchg ebp, edi
inc ecx
bswap eax
inc ecx
or cl, 0x27
inc ecx
push esp
xchg si, dx
dec edx
lea eax, [ecx*4 - 0xeda4a46]
inc ecx
neg esi
inc esp
xor dword [esp + esi*4 - 0x2b400], eax
inc ecx
mov ebx, edi
inc ecx
pop esp
dec ebp
bts ecx, esi
shl eax, 0x96
dec ebp
arpl ax, ax
dec ebp
adc ebx, eax
dec eax
cdq
btr cx, cx
jae fcn.008c5046
dec esp
mov dword [esp + edx*2 - 0xa5db344], esp
neg cl
inc esp
xor dword [esp + edx - 0x52ed9a2], edi
inc cx
imul ebp, eax
inc ecx
sar al, 0x27
inc ecx
pop esp
dec ebp
arpl di, di
movsx eax, dl
dec ebp
adc ebx, edi
inc esp
mov esi, ecx
dec esp
or eax, dword [edi + edx*2 - 0xa5db344]
movzx ebx, cx
dec esp
mov ecx, dword [edx + edi - 0x52ed99a]
cbw
mov cl, byte [edi + edx*2 - 0xa5db334]
movsx esi, dl
inc ecx
sal ebp, 0xa1
dec eax
lea edi, [edi + edx*2 - 0xa5db33a]
dec esp
bts edx, esi
inc esp
movsx edi, ch
dec ebp
shrd eax, ecx, cl
sal edx, 0xd1
inc eax
dec ch
dec esp
mov dword [edi + ebp*2 - 0xa5c01fe], eax
dec ebp
add edi, ebx
inc ecx
jmp edi

Function at 0x799f99
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
mov eax, ecx
xadd dx, ax
mov ecx, dword [ebp + ecx - 0xf16e5a4]
btr dx, 0x1e
xor ecx, ebx
xor ecx, 0xad9e1e8b
call fcn.00905da9
mov ecx, 0x6c0dd231
rol cx, 0xad
and dl, al
sub al, byte [esp + eax*2 + 6]
ror ecx, 1
btc ax, 0x16
mov dword [esp + eax - 0x1e], edx
bswap ecx
imul dx, word [esp + eax*2 - 0x38]
or eax, dword [esp + eax*2 - 0x39]
xor ebx, ecx
add edi, ecx
mov ax, word [esi + edx - 0x45b20002]
call fcn.00c9da04
mov ecx, 0xf16e5a4
mov eax, dword [ecx + edi - 0xf16e5a4]
mov dl, byte [edi + ecx*2 - 0x1e2dcb44]
lea edi, [edi + ecx - 0xf16e59e]
and ecx, ecx
btr ecx, 0xa6
mov byte es:[ecx + eax - 0xf16e5a4], dl
movsx edx, cl
lea ebp, [ebp + ecx*2 - 0x1e2dcb4c]
jae 0x71173e
Function at 0x79a878
Capabilities:
Encode data using base64

Disassembly:
mov eax, dword [edi + 4]
mul ecx
mov ecx, 0xd23b71bd
bt ecx, 3
mov dword [edi], edx
pop edx
mov dword [esp + 4], ecx
call fcn.0091e77f
mov edx, eax
mov word [edi + eax - 0x5f830011], cx
bt eax, 0xe
call fcn.0070e58c