joyce8/EMBER2024-capa huggingface dataset:
Function at 0x101f07e7
Capabilities:
Encode data using xor

Disassembly:
dec cl
call fcn.1021c4d7
push cs
and dh, byte [ecx + 0x54]
sbb dword [esi], edx
sahf
pop es
pop esp
jno 0x101752e1
sub eax, 0x7441009f
or dword [edx + ebx*4], ebp
je 0x101752ec
sub al, 0x9a
or eax, 0x8debc554
sub dword [edx + 0x6e], esp
outsb dx, byte [esi]
imul eax, dword [edi - 0x54], 0x16
stosd dword es:[edi], eax
sbb al, 0xf1
add eax, 0x526c33f7
xchg ebx, eax
nop
or ch, byte [edx]
pop ds
xor ecx, dword [esi]
movhps qword [esi], xmm5
push es
xor dword [ebx], eax
or byte [esi], ch
adc eax, 0xb160c23
sbb ecx, dword [ecx + ebp*2 + 0x24]
or eax, 0x64491cbf
adc dword [eax], ecx
stosb byte es:[edi], al
and dword [ecx + edi*2 + 4], ecx
add eax, 0xe441188f
invalid
sar byte [esp + 0x2a], 0xc2
neg cl
jmp 0x101752cb

Function at 0x101f08d8
Capabilities:
Encode data using base64

Disassembly:
mov dword [0x661e94ec], eax
movsd dword es:[edi], dword [esi]
xor al, 0xa5
or eax, 0x8be5d346
retf 0x4178
neg al
or al, byte [eax + ebp + 2]
push 0x87178e1a
call fcn.1017973c
out dx, al
sbb eax, 0xff3dc780
dec eax
cmp bh, byte [edx - 0x26d4be06]
and byte [esi - 0x7bebcd37], bh
stosd dword es:[edi], eax
js 0x101f08bf
stc
add eax, 0xf5e23b66

Function at 0x101f14aa
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp + 4], 0xcb1ce4e4
lea esp, [esp + 4]
call fcn.101e6f82

Function at 0x101f409b
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x10]
jmp fcn.101e22c9

Function at 0x101f54b8
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x14]
jmp fcn.10188d08

Function at 0x101f54e9
Capabilities:
Encode data using base64

Disassembly:
mov dword [edx], ebp
push 0xd125b580
lea esp, [esp + 0x20]
jmp fcn.101e22c9
jmp 0x10196363

Function at 0x101f5815
Capabilities:
Encode data using base64

Disassembly:
xor bl, dl
lea edx, [esp + edx + 0x10]
push 0xbc9f9b13
call fcn.101cc1dd
call fcn.101b36a0

Function at 0x101f5f03
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x10]
jmp fcn.101e22c9

Function at 0x101f62b2
Capabilities:
Encode data using xor

Disassembly:
mov byte [ebp], dl
call fcn.101ab26e
inc ecx
mov esi, 0x7aa87fb1
inc ecx
push esi
inc ebx
mov ecx, dword [esi + edi - 0x7aa87fb1]
dec edi
lea edi, [edi + esi - 0x7aa87fad]
dec edi
lea ecx, [ecx + esi - 0x7aa87fb3]
inc esi
sub dword [esp + esi - 0x7aa87fae], esi
inc edi
movzx esi, word [ecx + esi - 0x7aa87fb1]
inc sp
xor esi, edi
call fcn.101b36a9
add ebp, 6
mov byte ss:[eax], dl
call fcn.101a457f
xchg ebx, eax
xchg ecx, eax
sub esp, dword [esi - 0x7962193f]
xor ch, byte [ebp - 0x5a473814]
sbb ecx, dword [esi + 0x18eecbe1]
mov dword [edx - 0x1b525f95], ebp
jb 0x101f62ca
test dword [edi - 0x73], ecx
mov esp, 0x57805337
test dword [edi - 0x73], ecx
invalid
std
dec edx
adc cl, byte [ebx]
xchg esp, eax
or dword [edx], edi
jge 0x101f635e
nop
mov ecx, 0xfca779fd
cmp byte [edx + 0x3bc9808d], bl
xor bh, byte [edx - 0x33795616]
mov ebp, 0x3adc3934
cdq
push ebx
cmp dword [edi - 0x578177f], ecx
adc al, 0xe7
or edx, dword [ebx + 0x39]
invalid
into
mov eax, 0xfd5a3786
scasd eax, dword es:[edi]
push ebp
retf 0xf44
Function at 0x101f918a
Capabilities:
Encode data using base64

Disassembly:
mov byte [ecx], dl
push 0x58245700
push 0x3415968a
lea esp, [esp + 0x24]
jmp fcn.101e22c9
jmp 0x102205e0
lea ecx, [esp + ecx + 0x18]
push 0xc42e1b0b
mov dword [esp + 4], 0x6525e23c
jmp 0x1017bda3

Function at 0x101fa9c7
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x101fadba
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x14]
jmp fcn.101e22c9

Function at 0x101fc788
Capabilities:
Encode data using base64

Disassembly:
neg dl
xor dl, 0x81
dec eax
mov dword [esp + 8], 0xc4ac912e
dec eax
rol dword [esp + 8], 0xd1
jae fcn.101f7927
inc eax
xor bh, dl
dec eax
shl dword [esp + 8], 0x8c
jbe 0x1020dfd4
call fcn.10216189

Function at 0x101fc7b1
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], ax
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x101fc833
Capabilities:
Encode data using base64

Disassembly:
push 0xde90f2af
push 0xef873e9b
mov word [edi], ax
push 0x73305425
push 0xb295d895
lea esp, [esp + 0x1c]
jmp fcn.1023571a
add ebp, 2
imul dl
push 0x3eb62383
mov dword [esp + 4], 0x52339990
push 0xa6a9d21e
mov word [ebp], ax
call fcn.101755b5
ja 0x10222e54
adc ax, 0xa7b8
and byte [edx + 0x69], bl
adc eax, 0xacbd265c
and al, 0x5d
jp 0x101fc870
imul ebx, dword [ecx], 0x3a90bba0
pop es
mov al, byte [0x73a90bb]
in al, 0x9f
cwde
out dx, eax
fisubr word [edx + 0x11]
stosb byte es:[edi], al
mov cl, 0x2e
fistp dword [esi + edx*2 - 0xc1f8721]
pop ebx
dec ecx
sub dl, byte [esi - 0x5e447dec]
mov edx, 0x7766e042
push ecx
xor bl, byte [esi - 0x200169cc]
cmpsb byte [esi], byte es:[edi]
xor ah, byte [eax]
mov bl, 0xcd
ljmp 0xaf27
ror al, 1
sub al, 0x21
push 0x282af2a1
neg al
dec al
dec word [esp + 3]
or word [esp + 4], 0x6699
jg fcn.10181f8a
xor bl, al
sub edi, 2
jmp 0x1016b33f

Function at 0x101febf0
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], bp
lea esp, [esp + 0xc]
jmp fcn.101e22c9
push 0x2ab29aab
adc edi, 2
jmp 0x101c588b

Function at 0x101ffb74
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], ax
jmp 0x1020b4bb
push 0xb1202dbe
not dword [esp + 8]
lea esp, [esp + 0x14]
jmp fcn.101e22c9

Function at 0x10200852
Capabilities:
Encode data using base64

Disassembly:
mov dword [edx], ecx
lea esp, [esp + 8]
jmp fcn.101e22c9

Function at 0x102018f2
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp], 0x993f802b
push 0x4b36b6a6
mov dword [esp + 8], eax
push 0x903ee503
push dword [esp + 0xc]
popfd
lea esp, [esp + 0x10]
jmp fcn.101e22c9

Function at 0x10201fef
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x24]
jmp fcn.10188d08

Function at 0x10203460
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.101e22c9
jmp 0x101e6515

Function at 0x10203836
Capabilities:
Encode data using base64

Disassembly:
push 0x8da979b6
jmp 0x101ef1a7
cmp edi, eax
jmp 0x101a156e

Function at 0x10203891
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x14]
jmp fcn.101e22c9
Function at 0x1020664c
Capabilities:
Encode data using base64

Disassembly:
xor eax, 0xb9a89487
not dword [esp + 0x14]
dec ecx
mov dword [esp + 0x14], 0x5212ba13
push 0x4422eda8
lea esp, [esp + 0x1c]
jne 0x101cf1f4
not eax
call fcn.102220a1
movzx edi, byte [edx]
call fcn.101772db
push 0x2fa92c3d
xor eax, edi
inc edx
xor byte [esp + 0xd], 0x24
push 0xfca795bc
jne 0x101a06eb
inc ecx
inc ebx
adc bl, byte [ecx]
popfd
imul ecx, dword ds:[edi + esi + 0x34], 0xffffff88
adc eax, 0x2d3e7542
mov eax, dword [0x2f567f3e]
mov byte [esi + 0x3a8b031e], dl
int3

Function at 0x10206b7f
Capabilities:
Encode data using base64

Disassembly:
shr ebp, cl
mov dword [edi], ebp
push 0x758d3ebf
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x10207137
Capabilities:
Encode data using base64

Disassembly:
add ebp, 6
call fcn.101ad6ef

Function at 0x10207142
Capabilities:
Encode data using base64

Disassembly:
mov word [ebp], di
jmp 0x10181c2f
inc cl
mov dword [esp + edi*4 - 0x52a2ae64], 0x3eaf338f
not cl
add edi, edi
xor edi, 0xeb12cda7
shr di, 0x84
dec cl
push edi
lea edi, [edi*8 - 0x32793cf0]
not di
xor bl, cl
shr dword [esp + 1], 0xa9
bts edi, edi
lea ecx, [esp + ecx + 8]
ror di, 0xa1
seto byte [esp + 4]
pop edi
movzx di, byte [ecx + edi - 0x47e121a9]
or dword [esp], 0x611bb612
neg byte [esp + 3]
sbb ebp, 1
jmp 0x10171a0a
lea esp, [esp + 4]
jmp fcn.10188d08
xor dl, bl
mov dword [esp], 0xe6a79284
not dl
sub word [esp + 1], 0x2f99
jb 0x10179d84
inc dl
push 0xd9916020
call fcn.1021e912
outsd dx, dword [esi]
cld
fmul st(1)
dec ebx
scasd eax, dword es:[edi]
out dx, eax
sub esi, esi
out dx, eax
retf 0x41e5

Function at 0x10207639
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 8]
jmp fcn.101e22c9

Function at 0x102076f8
Capabilities:
Encode data using base64

Disassembly:
and esi, 0xff
call fcn.101a8eb5
stc
shl dword [edx + 0x3f2791eb], 1
xor esi, 0xb2c0a1db
pop ds
add byte [ebx - 0x11750b33], bh
popfd
in eax, dx
pop ds
push ds
and byte [ebp + 6], bl
mov dl, cl
movsb byte es:[edi], byte [esi]
push edi
dec esp
into
mov ch, 0x90
push ds
mov fs, word [edx - 0x354aea75]
call 0x815c34a3
xlatb
inc esp
mov byte [eax + 3], 0x79
jno 0x1016685d
invalid
jmp 0x101ab86f
jmp 0x101ef4dc
mov dword [edi], ebp
jmp 0x10179484
lea esp, [esp + 4]
jmp fcn.101e22c9
push 0x1eaff014
not ebp
jmp 0x101a3ef6
lea esp, [esp + 0xc]
je 0x10183a25
push esi
movzx esi, byte [eax]
xor esi, ebp
jmp 0x1016683b

Function at 0x1020771c
Capabilities:
Encode data using base64

Disassembly:
mov dword [edi], ebp
mov dword [esp + 0xc], 0x939f0aa4
lea esp, [esp + 0x14]
jmp fcn.101e22c9
jmp 0x1017f5dd
push 0xf293b00a
and ebp, edx
not ebp
push 0x1d06ad13
jmp 0x101ab287

Function at 0x102085b0
Capabilities:
Encode data using base64

Disassembly:
movzx cx, byte [ebp]
mov dword [esp], 0xa98eb79c
jge 0x102145eb
adc edi, 2
call fcn.101edc49
Function at 0x102085f3
Capabilities:
Encode data using base64

Disassembly:
xor bl, dl
lea edx, [esp + edx + 0x1c]
jmp 0x102150b2
ror dl, 1
dec dl
mov dword [esp], 0x953114bc
shr dword [esp + 8], 0xd7
neg dl
mov dword [esp + 4], 0x28a61102
xor dl, 0xb4
shr byte [esp + 0x19], 0xe1
je 0x101edc53
add byte [eax], al
inc esi
jb 0x10208686
inc ebp
outsb dx, byte [esi]
jbe 0x1020868f
jb 0x10208697
outsb dx, byte [esi]
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x10208681
je 0x102086a2
invalid
outsb dx, byte [esi]
jae 0x1020868c
invalid

Function at 0x10208a99
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x14]
jmp fcn.101e22c9

Function at 0x1020b433
Capabilities:
Encode data using base64

Disassembly:
mov word [edx], ax
push 0xde949924
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x1020d057
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp], 0xda023798
lea esp, [esp + 0x18]
jmp fcn.101e22c9

Function at 0x1020d505
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.101e22c9
push 0xbd0c5c2e
mov byte es:[ecx], al
jmp 0x10208aa2

Function at 0x1020fef2
Capabilities:
Encode data using base64

Disassembly:
call fcn.101a08ce
rdtsc
jmp 0x101d6d7c
push 0x1940130
sub ebp, 8
push 0xa72ae20e
push 0x74adcfab
mov dword [ebp + 4], eax
mov dword [ebp], edx
push 0xd5126a0a
lea esp, [esp + 0x10]
jmp fcn.10188d08
call fcn.101ac670
adc ebp, 4
jmp 0x10181ca7

Function at 0x10211304
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp + 4], 0xa984900b
lea esp, [esp + 8]
jmp fcn.101e22c9

Function at 0x10211335
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp], 0xed267322
lea esp, [esp + 0x14]
jmp fcn.101e22c9

Function at 0x1021134b
Capabilities:
Encode data using base64

Disassembly:
mov dword [ebp], edx
lea esp, [esp + 0x10]
jmp fcn.10188d08

Function at 0x102117fe
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 8]
jmp fcn.101e22c9
mov byte ss:[ecx], al
jmp 0x10197c66

Function at 0x102138f3
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x14]
jmp fcn.101e22c9

Function at 0x102145e5
Capabilities:
Encode data using base64

Disassembly:
mov word [ebp], ax
lea esp, [esp + 0x18]
jmp fcn.10188d08
sub ebp, 2
jmp 0x1018e6c3

Function at 0x10214622
Capabilities:
Encode data using base64

Disassembly:
not dword [esp + 8]
lea esp, [esp + 0x18]
jmp fcn.101e22c9
mov dword [edi + 4], eax
jmp 0x10180987
jmp 0x101ecbe9

Function at 0x10215bff
Capabilities:
Encode data using base64

Disassembly:
jmp 0x10215bfa
call fcn.1022d21e
mov edx, dword [ebp]
mov ecx, 0xc9aca81e
push ecx
mov ecx, dword ss:[edx]
push 0x6215e7ab
push 0xa4331f2f
mov word [esp + 8], 0xac9b
mov dword [ebp], ecx
push 0x9c1a6529
call fcn.1017d068
Function at 0x10217ce3
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp], 0x4ea6c5bc
push 0xc0f721a
add edi, 2
ror byte [esp + 2], 0x62
sal dword [esp + 4], 0x22
push 0x380bf1e
sal dx, cl
mov word [edi], dx
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x10217d6e
Capabilities:
Encode data using base64

Disassembly:
mov byte [ecx], dl
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x102180b7
Capabilities:
Encode data using base64

Disassembly:
dec eax
mov ebp, dword [esp + ebp*2 - 0xe0b6]
inc ecx
push ebp
call fcn.101faa2c

Function at 0x10219300
Capabilities:
Encode data using base64

Disassembly:
mov edi, dword [esp + 0x14]
jmp fcn.101cb976
inc al
sub byte [esp + 6], 0x17
setl byte [esp + 0xc]
ror al, 1
shr byte [esp + 0xc], 0x22
js 0x101895a9
xor bl, al
call fcn.102145e5

Function at 0x102193ac
Capabilities:
Encode data using base64

Disassembly:
jmp 0x101f29b6
jmp 0x10189480
call fcn.10201fef
add byte [eax], al
add byte [ebp + 0x61], cl
jbe 0x101894f2
inc ebx
jb 0x101894f9
je 0x101894fb
arpl word [ecx + 0x6c], sp
push ebx
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
add byte [ecx - 0x556281cf], bh
dec ecx
mov ebx, dword [edi]
dec eax
btr ecx, ecx
bts ecx, 0x9f
inc ecx
mov cl, byte [edi + 8]
jb 0x101c2751
push cs
push 0x101aec6b
ljmp 0x33
mov edx, 0x9726d0ab
mov dl, byte [edi + eax - 0x6f062e0b]
pop es
cmc
sar ecx, 1
nop
movzx ax, byte [edi + eax - 0x6f062e09]
jmp 0x1016e97a
jb 0x101fba96
push 0xd0b1d03d
add edi, 2
imul dl
jmp fcn.101a209f
call fcn.101d6d55
push 0x11803384
mov word [ebp], ax
jmp 0x10178118
pop ds
sub cl, byte [di + 0x49]
adc edi, 3
inc ecx
mov dword [edi], ecx
dec eax
lea esp, [esp + 0x10]
jmp fcn.101b835a

Function at 0x10219bb3
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x10]
jmp fcn.101e22c9
Function at 0x1021b8d1
Capabilities:
Encode data using base64

Disassembly:
push ecx
dec eax
bswap ecx
dec edx
mov edi, dword [esp + ebp + 0x20]
dec esp
xchg ebp, ebp
dec ebp
lea esp, [ebp + ecx*8 - 0x2dcc1756]
dec edx
mov ebp, dword [esp + ebp*4 - 0x3bc]
inc ecx
pop esp
dec esi
mov ebp, dword [esp + ebp - 0xbf]
inc ecx
push esp
dec eax
mov dword [esp + 0x20], 0xb00182b
dec esp
mov esp, dword [esp + 0x50]
dec eax
mov ecx, dword [esp + 0x58]
dec eax
lea esp, [esp + 0x60]
retf
dec esp
mov ecx, dword [esp + ecx]
dec eax
lea ecx, [ecx - 0x36cb8b6c]
bswap ecx
dec esi
mov eax, dword [esp + ebp*4 - 0x40]
inc eax
not ch
dec edx
mov esi, dword [esp + ebp + 0x10]
jmp 0x1019b1e4
call fcn.101e201a
inc esp
mov ebp, ecx
movzx ebp, bl
pop eax
push ebp
dec esp
mov edx, dword [esp + ecx - 0x10]
pop esi
dec esp
mov ebx, dword [esp + ecx*2 - 0x28]
dec eax
mov dword [esp + ecx*4 - 0x58], ebx
movsx edi, cl
dec eax
mov ebx, dword [esp + ecx*2 - 0x20]
not esi
jmp 0x101b137f
shr ebp, 0x41
mov dword [esp + ebp - 0x4c330f51], esi
mov dword [esp + ebp - 0x4c330f55], ebx
lea ebp, [ebp - 0x1dd74172]
movzx ebx, dx
bts edx, ebp
mov ebp, edi
mov ebx, eax
shl edx, 0xcc
btr edx, 0x18
ror dx, 0x4e
mov edx, ebx
mov eax, 0x3190a5ad
btc eax, 0x3e
sal eax, 0xf0
shl edx, 2
and al, al
mov eax, ebp
push 0x7eb286a7
adc eax, edx
rol byte [esp + 2], 0xe4
push 0xdf1c5990
or word [esp + 1], 0x9527
mov dword [ebp - 4], eax
ror dword [esp + 4], 0x41
test ebx, ebx
jmp 0x101b994b
xor bl, al
ror ebp, 0x77
jb 0x101bd899
stc

Function at 0x1021bc51
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.10188d08

Function at 0x1021c516
Capabilities:
Encode data using base64

Disassembly:
push 0xab89dbd
lea esp, [esp + 0x10]
jmp fcn.101e22c9
mov cl, byte [edi + 2]
neg dword [esp + 4]
adc edi, 1
shl dl, cl
push 0xa5074090
not byte [esp + 3]
mov word [edi], dx
jmp 0x10189511

Function at 0x1021cfef
Capabilities:
Encode data using base64

Disassembly:
call fcn.10202001
mov ecx, 0xe814b71e
dec ecx
mov ecx, dword [edi]
push 0x951a3539
movzx ax, byte [ecx]
push 0x1e9853bb
dec ecx
add edi, 6
jmp 0x1021cf89
call fcn.101ac980
sbb byte [edi], dl
setbe dl
int1
test ebx, ebp
lcall 0xaedb, 0xc5b7180b
aam 0xa1
adc cl, byte [ebx]
stosd dword es:[edi], eax
fidiv dword [ebx - 0x1b]
jp 0x1021cffb
and dword [ecx + edx*8 + 0x4f], edx
in eax, dx
xchg esi, eax
movsb byte es:[edi], byte [esi]
salc
mov edi, 0xd75016b4
in al, dx
inc edx
out dx, al
cmp ebp, dword [esi]
adc dword [edx], 8
aad 0x6e
ja 0x1021cfee
clc
invalid
or dword [ecx - 0x74ffdabc], 0x5c
and al, 4
pop esi
mov esi, 0xcb3b8211
cmp ecx, ebx
mov dword [esp], 0x8714d8ab
mov esi, dword [esp + 4]
call fcn.10228310

Function at 0x1021d00e
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], cx
jmp 0x1023bf53
mov dword [esp + 4], 0xfc27e0af
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x1021de3a
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x10]
jmp fcn.10188d08

Function at 0x1021e50a
Capabilities:
Encode data using base64

Disassembly:
adc edi, 1
mov word [edi], dx
lea esp, [esp + 8]
jmp fcn.101e22c9
Function at 0x1021e5c6
Capabilities:
Encode data using xor

Disassembly:
mov dword [esp + ebp*2 - 0x71f133f2], edx
xchg bp, bx
bswap ebx
not ebx
pushfd
call fcn.10186379
ja 0x1021e646
pop ds
mov dword [0x5e542ab9], eax
das
jge 0x1021e5e5
invalid
xor ch, byte [esi - 0x5e78699c]
ficom dword [edx - 0x20]
pop esi
push ebp
push eax
and al, 0xab
mov esi, 0x28546714
aad 0x28
cmp eax, 0xe61e0b93
pop edi
push edi
cmc
mov ds, word [edx]
call 0xc716c3ee
movsd dword es:[edi], dword [esi]
test edi, eax
push 0xffffffffffffff85
xchg ecx, eax
sahf
shl byte [ebp - 0x5c], cl
inc eax
inc esp
xlatb
add byte [esi + ebx*2 + 0x6a], ch
xchg edx, eax
add eax, 0x3f3c4a0a
ret 0xb85d

Function at 0x1021e917
Capabilities:
Encode data using base64

Disassembly:
mov esp, ebp
pop ecx
pop esi
mov ebx, 0xf58cca25
popfd
movsx ebp, bl
call fcn.10181f4b

Function at 0x1021ee44
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], bp
lea esp, [esp + 4]
jmp fcn.101e22c9
jmp 0x1017d141
jmp 0x101cfbdc

Function at 0x102214af
Capabilities:
Encode data using base64

Disassembly:
not dword [esp]
call fcn.1016cd45
mov dword [esp], 0xbdaa4b1f
adc edi, 1
and dx, ax
not dx
jmp 0x1017c9e3

Function at 0x10221538
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x10]
jmp fcn.101e22c9

Function at 0x10222087
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x1c]
jmp fcn.101e22c9

Function at 0x10222113
Capabilities:
Encode data using base64

Disassembly:
mov dword [edi], eax
push 0x2a01b49f
lea esp, [esp + 0x10]
jmp fcn.101e22c9

Function at 0x10222154
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.101e22c9
push 0x339bfba1
adc dx, ax
mov word [edi], dx
jmp 0x101993af

Function at 0x102221d5
Capabilities:
Encode data using base64

Disassembly:
mov dword [ebp + 4], eax
push 0x6c257021
push 0xe489231b
mov dword [ebp], edx
jmp 0x101aad60
not dword [esp + 6]
lea esp, [esp + 0xc]
jmp fcn.10188d08
dec byte [esp]
sbb ebp, 7
jmp 0x10231c02
jnp 0x1021b517
add edi, 8
mov dword [ebp], eax
mov dword [esp], 0x4ebd8b8e
call fcn.10181a40
jmp 0x1017e94f

Function at 0x1022224f
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x10222b1f
Capabilities:
Encode data using base64

Disassembly:
jmp 0x101a7ead
mov dword [edi], edx
jmp 0x101a2636

Function at 0x1022394f
Capabilities:
Encode data using base64

Disassembly:
push 0x4b17303
mov word [edi], ax
push 0xdbddfb6
lea esp, [esp + 0x18]
jmp fcn.101e22c9

Function at 0x10224c01
Capabilities:
Encode data using base64

Disassembly:
push 0xb109df23
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x102255e4
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], cx
lea esp, [esp + 0xc]
jmp fcn.101e22c9
jmp 0x1016c172

Function at 0x10228fbb
Capabilities:
Encode data using base64

Disassembly:
push 0x340bcc1d
jmp 0x102372c8
lea esp, [esp + 0x18]
jmp fcn.101e22c9

Function at 0x10229e73
Capabilities:
Encode data using base64

Disassembly:
mov word [edx], ax
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x10229e7f
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x18]
jmp fcn.101e22c9
Function at 0x10229e88
Capabilities:
Encode data using base64

Disassembly:
push 0x44877fb6
lea esp, [esp + 0x10]
jmp fcn.101e22c9
call fcn.1021d00e
push 0x4dafb23a
mov dword [edi], edx
jmp 0x101c8121
mov dword [edi + 4], eax
jmp 0x1016cd89
jmp 0x101ae950

Function at 0x1022a816
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.10188d08

Function at 0x1022b486
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 4]
jmp fcn.101e22c9
Function at 0x1022cc54
Capabilities:
Encode data using base64

Disassembly:
push 0xeb33a20d
lea esp, [esp + 0x24]
jmp fcn.101e22c9

Function at 0x1022d6d1
Capabilities:
Encode data using base64

Disassembly:
call fcn.101668dd
jmp 0x1019f0fb

Function at 0x1022e3b4
Capabilities:
Encode data using xor

Disassembly:
push 0x20a98a27
call fcn.101f1273

Function at 0x1022e8db
Capabilities:
Encode data using base64

Disassembly:
push 0x392a6c3f
mov word [edi], dx
push 0x263b342f
lea esp, [esp + 0x10]
jmp fcn.101e22c9

Function at 0x1022efc8
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp], 0xfa82b486
push 0x79a38a21
add edi, 2
and word [esp + 6], 0x461d
push 0x160d6106
sal word [esp + 8], 0x65
or al, cl
jmp fcn.10217d8f

Function at 0x1022f431
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 4]
jmp fcn.101e22c9

Function at 0x1022fc4c
Capabilities:
Encode data using base64

Disassembly:
jmp 0x1018512c
xor ecx, ecx
inc ecx
or cl, byte [ecx + ecx]
dec eax
not dword [esp]
inc eax
xor cl, bh
push 0xb59de293
shr word [esp + 0xb], 0x68
jp 0x1022b1e5
mov eax, dword [edi]
jmp 0x101f97b3
lea esp, [esp + 4]
jmp fcn.101e22c9
lea esp, [esp + 0xc]
jmp fcn.101e22c9
push 0xec92bfb8
push 0xe3b8b595
mov word [edi], cx
not byte [esp + 1]
jmp 0x1019639f
add edi, 8
push 0x7d38bea8
mov dword ss:[eax], edx
jmp 0x1016fb72
mov edx, dword [edi + 4]
jmp 0x101b74f9
ror cl, 1
neg dword [esp + 0xa]
dec cl
xor byte [esp + 4], 0x3f
ror byte [esp + 6], 0xa6
xor cl, 0x83
dec byte [esp + 3]
sal word [esp + 0xe], 0xc1
call fcn.1022d129
mov ecx, 0x15ba8c9c
btc cx, cx
mov edx, dword [ecx + edi - 0x15ba9c9c]
not cl
mov cx, word ss:[edx + ecx*2 - 0x2b7538c6]
push 0x760ef339
adc edi, 2
jmp 0x1019dd88
mov ecx, 0x999e001f
sal cx, 0xec
dec ecx
adc edi, 3
dec eax
mov dword [esp], 0x5734b296
xor cl, 3
dec ecx
sbb ecx, 1
dec eax
bts ecx, ecx
jae 0x1017b11a