joyce8/EMBER2024-capa huggingface dataset:
Function at 0x7fff69
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
pop eax
mov eax, 0xf52c3bb6
dec ecx
sub edx, 4
inc ebp
mov esi, dword [edx]
cbw
dec esp
lea eax, [eax + eax*4 + 0x7d2f7299]
inc ebp
xor esi, esp
inc ebp
mov edi, eax
dec edx
lea ecx, [edi*4 + 0x319a2da7]
inc ecx
mov ecx, 0x6baacc1b
inc ecx
neg esi
inc ecx
not esi
dec eax
lea edx, [ecx*2 - 0x57e060c7]
inc ecx
ror esi, cl
inc ecx
bswap esi
dec eax
lea ebx, [ecx + eax*8 + 0x303ba6a6]
neg dl
inc ecx
mov ebp, ecx
inc ecx
push esp
inc esp
movsx esp, bl
inc esp
movzx ebp, dl
inc esi
xor dword [esp + edi - 0x47107127], esi
inc esp
xchg ebp, esp
dec ebp
imul ebp, ecx
inc ecx
pop esp
inc ax
dec eax
sal ebx, cl
inc eax
sal ch, cl
dec ebp
arpl si, si
dec ebp
adc ebx, esi
dec eax
inc eax
dec esp
mov ebp, edi
dec edx
lea edi, [edi + edi - 0x4710712f]
dec eax
lea esi, [ecx*4 - 0x51f880cf]
inc ecx
xchg bh, dl
jo 0xa38308
dec ebp
mov dword [edi + edi - 0x47107141], ebp
inc bp
cmovo edi, ecx
jne fcn.008c5046

Function at 0x8060ab
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
inc cx
sar ebp, 0x61
inc ecx
xor edx, esp
dec esp
mov dword [esp + eax + 0x586ca0de], ebp
neg edx
dec ecx
btr esi, esi
xchg byte [esp + esi - 0xff8b], cl
sub ax, 0x5890
ror edx, 2
inc eax
dec ch
shl dword [esp + eax + 0x586cf96f], 0xb4
inc ecx
pop ebp
dec edx
ror edx, 3
inc ebp
xadd esi, ebp
jp 0x7aba51
inc ecx
push esp
rol si, 0x2e
inc cx
inc eax
xor dword [esp + eax + 0x586cf96e], edx
inc ecx
pop esp
mov dword [edi + esi*4 - 0x1ff8e], edx
shl bp, 1
dec eax
lea edi, [edi + esi*2 - 0xffc8]
inc eax
idiv dh
inc ebp
mov ecx, ebp
inc ecx
ror esi, 0x8a
jae fcn.008c5046
Function at 0x806590
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
movzx ecx, dl
xor eax, ebx
inc cl
xadd cx, dx
lea eax, [eax + edx + 0x5e62278f]
jno 0x83cca4
sub ebp, 4
mov ecx, 0x6bafda06
mov ecx, dword [ebp + ecx - 0x6bafda06]
mov edx, 0xa529babe
movsx eax, dx
xor ecx, ebx
not ecx
dec ecx
sal dx, 0x65
dec edx
xor ecx, 0xa1ba7305
inc ecx
cbw
mul eax
xor ebx, ecx
jmp 0x81da76
add edi, 6
mov dword [esp], 0x7d913f90
shr dword [esp], 0x1a
jns 0x9bb198
dec ecx
sub edx, 4
inc ecx
mov ecx, 0x17a40c3c
inc ebp
mov eax, ecx
inc edi
mov esi, dword [edx + ecx*2 - 0x2f481878]
inc ecx
movsx edx, al
inc ecx
movsx eax, ax
inc ebp
xor esi, esp
inc ecx
dec esi
bt edx, 0x3d
dec ebp
xadd eax, ecx
inc ecx
bswap esi
dec esp
lea edi, [eax*8 + 0x371b0b2e]
inc ecx
add al, bh
inc ecx
sbb edx, ecx
inc ecx
xor esi, 0xa1bc0c93
inc cx
ror edi, 3
inc ecx
inc esi
inc ecx
neg esi
inc ecx
xor esi, 0x40329221
inc ecx
neg esi
inc ecx
movsx ebp, bh
inc ebp
lea esi, [esi + eax - 0x638574d5]
inc esp
mov ebp, edx
dec ecx
bt edi, 0x33
inc ecx
push esp
neg dl
dec ecx
lea esi, [ebp + ebp*2 + 0x7fb3ef39]
inc sp
btc eax, ebp
inc esi
xor dword [esp + ecx*2 - 0x2f481878], esi
cbw
inc ecx
pop esp
dec ebp
arpl si, si
dec ebp
add ebx, esi
inc sp
bt ebp, eax
adc ebp, esi
cbw
dec edx
mov edi, dword [edi + ecx*4 - 0x5e9030f0]
bswap eax
inc ecx
movzx ecx, cx
jbe fcn.008c5046
add edi, ecx
lea ecx, [edx + eax*8 + 0x132ace80]
movzx dx, byte [esi + ecx*4 - 0x4cad5870]
shr cx, 0x66
mov al, byte [esi + eax*4 - 0x440e]
lea ecx, [ecx + ecx + 0xc95b002]
bts ecx, 0x17
lea esi, [esi + ecx*2 - 0x65d76562]
imul ecx, ecx
add dl, al
jmp 0x8992f0
rol cx, cl
movzx eax, cl
mov word [esi + eax*2 - 0x80], dx
add cx, cx
btc ecx, 0xa2
jmp edi
shld edx, eax, cl
mov eax, dword [esp]
lea ecx, [eax*8 + 0x223edaa5]
mov dword [edi + eax*4 - 0x7c], edx
mov edx, ecx
call fcn.00965e77
mov edx, 0xab1c7603
lea eax, [edx*4 + 0x792de78c]
mov edx, dword [edi + eax - 0x259fbf98]
movzx ecx, al
add al, ah
lea eax, [eax*2 + 0x3e18dd9a]
mov cx, word ss:[edx + ecx*2 - 0x130]
movsx edx, ax
je 0x8ea4c1
setno dl
lea edi, [edi + edx*2 - 0xb7fe]
jp 0x7ea717
mov word [edi + edx - 0x5c00], cx
sal eax, 0x56
call fcn.0074e4b2

Function at 0x808a7d
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
adc edi, 4
jmp 0x7f3aeb
mov dword [esp + 4], 0x20124e15
call fcn.00995af9
jae 0x713df4

Function at 0x808a83
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
xor ecx, ebx
add edx, eax
neg ecx
call fcn.009a10e6
mov eax, dword [esi]
mov ecx, 0xb9850a8c
jmp 0x71e9d5
Function at 0x8099d6
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
mov dword [esp + 4], ebx
inc dl
push edx
movsx ebx, word [esp]
cpuid
sbb edi, 7
push 0x7d9ed685
push 0x9b09962d
push 0x234a413
mov dword [edi + 0xc], eax
mov dword [esp + 0x10], 0xf22acb9b
mov eax, dword [esp + 0x10]
and dword [esp + 6], eax
mov dword [edi + 8], ebx
push eax
lea ebx, [eax*8 - 0x75e093fb]
mov dword [edi + ebx*2 - 0x36eb91b6], ecx
or byte [esp + ebx*4 - 0x6dd72366], bl
cwde
movzx ecx, bl
mov dword [edi + ebx*2 - 0x36eb91ba], edx
mov edx, 0x9eb59b13
sbb byte [esp + ecx - 0xd5], al
setg bl
mov ebx, dword [esp + ebx - 0x1b75c7e9]
cwd
pop eax
pop edx
pop ecx
pop edx
pop eax
pop edx
pop edx
jnp fcn.008360bb

Function at 0x80cc19
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step
Parse pe header

Disassembly:
sbb ebp, 8
jmp fcn.0090878c
mov ecx, dword [ebp + edx*2 - 0x4f79f0ce]
bt edx, edx
mov dword [esp + edx - 0x27bcf865], ebx
cpuid
jb 0x9ba05c
jae 0x7a96de
neg dl
sal word [esp + 2], 0xcc
or ecx, ecx
shl dword [esp + 4], cl
adc dl, 0xaa
and ax, word [esp + 6]
ror ax, 0xca
sbb ecx, eax
rol dl, 1
imul ecx, dword [esp + 4]
xchg word [esp + ecx - 0x7b480000], cx
not dl
setae byte [esp + ecx - 0x7b480011]
xor dl, 0x3d
neg cx
bswap eax
and al, al
xor bl, dl
inc eax
ror word [esp + eax - 0x26ffff], 0x46
cbw
lea ebp, [eax + ebp - 0x270002]
jns 0x84147e
rol edx, 0xdf
dec eax
btr cx, 0x80
sbb edx, edx
xor edx, 0x648d9a2e
rol eax, 2
imul edx, edx
bts ecx, edx
bswap eax
lea edx, [edx*4 + 0x48ad02a3]
btr ecx, edx
xor ebx, eax
sub dx, dx
bswap ecx
sbb edx, edx
adc esi, eax
sal edx, 1
or ecx, 0x72a80c18
bswap ecx
mov cx, word [edx + edi]
movzx eax, dl
shl eax, 0x19
push eax
xor ax, word [edi + edx*2 + 2]
dec dword [esp + edx]
lea edi, [edi + edx*2 + 2]
add cx, ax
movzx eax, dx
mov word [edi + edx], cx
mov dword [esp + edx], esi
ret
shr al, 0xa2
imul ecx, eax
mov word [ebp + eax - 0x270000], dx
dec word [esp + eax - 0x26fffa]
mov edx, dword [esp + eax*4 - 0x9bfffc]
lea edi, [edi + eax - 0x270004]
mov word [esp + eax*4 - 0x9bfffb], 0xc121
and dword [esp + eax - 0x26fffc], ecx
btr eax, ecx
mov edx, dword [edi + eax*2 - 0x4e0000]
rol al, 0x61
xor edx, ebx
ror eax, 0x48
jae 0x90ebdc
call fcn.009f597d

Function at 0x80fbd1
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
sub cx, 0x749f
pop edx
pop edx
pop ecx
js fcn.0092c225

Function at 0x8127d1
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using aes mixcolumns step
Parse pe header

Disassembly:
mov dword [ebp + eax*4 - 0xb0a4], edx
lea edx, [ecx + eax*2 - 0x12e712da]
mov dword [esp + eax - 0x2c2a], eax
jmp 0xa08c63
mov eax, dword [esi + eax - 0x2c2a]
btc cx, cx
bswap edx
xor eax, ebx
btr edx, 0x8f
bswap eax
dec eax
sar byte [esp + ecx*4 - 0xa0a7], 0x44
pop edx
Function at 0x8148fd
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
pop eax
sub ebp, 2
movzx edx, cx
push edx
mov dx, word [ebp + edx*4 - 0x783c]
xor dx, bx
inc dx
ror dx, 1
dec dx
ror dword [esp], cl
movzx eax, word [esp]
lea ecx, [ecx + ecx*4 + 0x6eb8013e]
rol dx, 1
sar eax, 0x7f
xchg cl, al
xor bx, dx
lea edi, [eax + edi - 0x8b]
shl ecx, 0x17
adc byte [esp + ecx - 0x80000000], cl
dec eax
mov word [edi + ecx - 0x80000000], dx
lea ebp, [ebp + eax - 0x8c]
xchg cx, ax
mov edx, dword [ebp + eax]
bts ax, cx
sub eax, eax
xor edx, ebx
add dword [esp + eax], 0xa4b62d0d
shl byte [esp + eax*4 + 2], 0xe2
lea edx, [edx + ecx*2 - 0x12fa90f6]
ror cl, 0xe2
jae 0x8e135f
sar eax, cl
dec eax
mov dword [ebx + edi - 0x74b3c82a], edx
dec eax
lea edi, [edi + eax*8 - 4]
mov esi, 0x779fa803
je fcn.008c5046
bswap edx
rol cx, 0x6e
not edx
add al, al
cmove ecx, dword [esp + eax]
neg edx
xor word [esp + eax + 2], 0x64b6
xor ebx, edx
sal ecx, 0x1a
push eax
bt ax, cx
adc esi, edx
bswap eax
mov edx, 0x6825284
pop eax
pop ecx
jmp fcn.00cad447

Function at 0x815b30
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
dec edx
mov dword [esp + ecx - 0x1c], 0xf8ba5c2f
inc ecx
push ecx
neg dl
inc edx
and dword [esp + ecx - 0x1c], 0xf1151802
dec eax
cwde
inc esp
mov esi, ebp
sbb dl, 0x29
inc eax
shr dh, 0xc4
inc edx
neg dword [esp + ecx - 0x14]
inc ecx
pop eax
neg dl
add dl, 0x32
inc esp
xor ah, dl
pop ecx
push ebx
inc ecx
sar al, 0x43
dec eax
lea edx, [esp + edx + 0x20]
neg ebx
inc ecx
rol ch, 0x83
inc sp
movzx esi, byte [eax + edx + 0x42113dcc]
dec eax
cwde
inc si
mov dword [edi + eax - 0xa], esi
dec ecx
btc ecx, ebp
dec eax
lea ebx, [ebp + eax - 0x70c8425f]
inc edx
sal byte [esp + eax + 0x18], 0x65
dec edx
lea edi, [edi + eax*2 - 0x10]
dec eax
inc eax
pop edx
inc ecx
pop ebp
pop eax
pop ebx
jno fcn.008c5046
mov edx, 0x982ee589
sub ebp, 4
movsx eax, dl
movsx ecx, ax
mov eax, dword [ebp]
xor eax, ebx
or cl, cl
xor eax, 0xce87818d
lea eax, [eax + edx - 0x4a83bd89]
dec dx
rol eax, 1
shr dx, 0x43
btc cx, 0x82
rol cx, cl
bswap eax
btr dx, 5
or edx, ecx
xor ebx, eax
neg dx
add esi, eax
inc edx
call fcn.008ca452
Function at 0x817758
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
dec esi
lea edi, [ebp*2 - 0x467681e5]
dec edx
mov dword [esp + esi - 0x6f0a], ecx
rol esi, 1
dec edx
sar dword [esp + esi - 0x6efa], 0xb7
inc cx
adc edi, 0xf415104
mov dh, 0xc1
inc ecx
lea esi, [ebp + esi + 0x68eb7c95]
neg edx
neg esi
xadd byte [esp + edx + 0x18], al
sbb esi, 0xfb35ea9f
inc ebp
imul ebp, edi
inc cx
adc ebp, 0x456605be
xchg edi, esi
ror esi, 3
inc cx
neg esi
inc cx
mul ecx
inc ebp
mov eax, ecx
dec esi
shl cl, 0x41
dec ecx
dec ecx
ror esi, 1
ror cl, 0x21
inc ebp
sbb al, dh
pop ecx
dec esp
add dword [esp + edx + 0x10], esp
inc esp
movzx esp, dl
cdq
xor dword [esp + edx + 0x10], esi
dec esp
mov esp, dword [esp + edx + 0x10]
inc ecx
sal dh, 0xc2
call fcn.00a08839
mov eax, 0x8abbff3c
shr eax, 0xbb
mov eax, dword [eax + edi - 0x11]
mov ecx, 0x39b32d08
lea edi, [edi + ecx - 0x39b32d04]
xor eax, ebx
bts ecx, ecx
dec eax
push ecx
movzx edx, cl
rol eax, 2
jmp 0x9731b6
or dx, cx
jbe 0x9cdd15
not eax
pop ecx
shr edx, cl
xor eax, 0xf191a6be
bts ecx, edx
imul cx, dx
shr dx, 0x4b
sbb eax, 0xd2bd7d8c
xadd cl, ch
or cl, cl
and dx, dx
not eax
sar dx, 0xe6
sal dl, 0xe6
xor eax, 0xfeb9f584
sal dx, 0xe1
sar ecx, cl
sets cl
sbb eax, 0xa08aa916
shl edx, 0xb2
adc dl, 0x2c
call fcn.00740f54
mov eax, 0xa519b610
mov ecx, dword [ebp - 4]
bt ax, ax
adc ebp, 0xfffffffc
movzx edx, al
xor ecx, ebx
cwd
mul al
bts dx, ax
not ecx
neg ecx
or edx, edx
inc ecx
rol ecx, 1
xor ebx, ecx
call fcn.008027b9
mov ecx, 0xcf590f0
adc byte [edi + 0x5606533f], bh
in al, 0
sbb ebp, dword [edi + 0x7e]
push esi
in al, 0
sub esp, dword [esi + 0xb]
loope 0x97328d
xor eax, 0xdfbe3405
mov edi, ebp
salc
inc edi
test dword [esi], eax
in al, 0x68
wait
sub eax, 0x68e406ed
cmpsb byte [esi], byte es:[edi]
and eax, 0x68e406f9
iretd

Function at 0x819019
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
pop ebp
dec ebp
adc ebx, ecx
dec edx
mov dword [esp + eax*2 + 8], 0x393f1480
pop eax
pop ebx
jmp fcn.008c5046

Function at 0x81a79a
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
dec bx
dec esi
mov dword [esp + esi - 0xf], ebp
dec esp
mov dword [esp + ebx*2 - 0x14], esp
pop ecx
inc edx
xor dword [esp + esi - 0xf], edx
xadd esi, ecx
js 0xca331e
dec byte [esp + eax + 1]
add al, ah
sbb dl, 0x24
neg word [esp + eax]
push eax
inc ax
ror dl, 1
xor bl, dl
lea edx, [esp + edx + 8]
mov dword [edx + eax*4 - 4], ecx
add dword [esp + eax*2 - 2], edi
ret 4
setne al
inc ecx
pop esp
not cx
dec eax
arpl dx, dx
not al
inc sp
xadd esi, ecx
inc ebp
mov eax, esi
dec esp
adc ebx, edx
inc eax
movsx edx, ch
inc edx
mov edi, dword [edi + esi*2 - 0x1e]
dec ecx
bswap esi
mul ax
jno fcn.008c5046
jg 0xca338f
dec esi
outsd dx, dword [esi]
or eax, 0xa1d5bf4d
test byte [edi - 0x47], dl
add byte [ecx - 0x46a8070b], bl
add byte [ebp + 0x40bc0ae8], ch
xchg ebx, eax
xchg edi, eax
mov dh, 0x3c
invalid
dec esp
and eax, 0xd6282d00
sbb edx, edi
mov dx, word ss:[ecx]
xor dword [esp + 5], eax
adc ebp, 2
mov word [ebp], dx
movsx ecx, byte [esp + 4]
pop edx
pop edx
pop eax
jmp edi
Function at 0x81a993
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
mov dword [esp + ecx*8 - 0x8001a8], 0xee9b1686
jmp 0x8e8863
mov ecx, dword [edx + ecx - 0x100035]
movzx edx, byte [esp]
mov edx, ecx
call fcn.00936fa8

Function at 0x81b86b
Capabilities:
Execute syscall

Disassembly:
bts eax, edx
mov dx, word [ebp]
lea ecx, [eax + eax*4 - 0x6d6b8580]
mov cl, byte [ebp + 2]
neg ax
adc ebp, 1
rol eax, 0x1d
jae 0x992f8d
add byte [eax], al
inc edi
je 0x81b8d9
jne 0x81b90a
jb 0x81b8ff
outsb dx, byte [esi]
je 0x81b8ed
jb 0x81b90e
arpl word [ebp + 0x73], sp
jae 0x81b8ed
add byte fs:[ebp - 0x777baee9], bh
movsx ebx, bp
sal bl, 0x84
mov esp, edi
bts bp, bp
pop ebp
pop edi
mov edx, ebx
mov eax, ebx
pop eax
xadd ebx, edx
movsx esi, dx
rol ebx, 0xe
pop ebx
lea ecx, [edx*4 + 0x1fa22f93]
inc ecx
popfd
lea edx, [esi + 0x1f00a938]
pop esi
lea edx, [ecx*4 + 0x3237c31e]
call fcn.00819864
adc al, 0x8d
push ds
ret
adc al, 0x37
add eax, 0xf7b490b1
shl dword [esi - 0x79], 1
xchg esp, eax
adc al, 0x37
add eax, 0x84e890b1
push 0x50fffff
add byte [ebx - 0x174426ea], dh
outsb dx, byte [esi]
inc esp
bnd call dword [ecx + ebp*2]
mov ebx, 0xf2446ee8
call dword [ecx + ebp*2]

Function at 0x81ea76
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
xor ecx, 0x1e85ee28
rol eax, 0x87
rol ecx, 1
bts ax, ax
lea eax, [eax + eax*2 - 0x50611942]
shr edx, 0xeb
neg ecx
ror ax, 0x8e
sar eax, 0x72
sbb ax, dx
xor ecx, 0xe6ae9cbf
shr eax, 0x11
rol ecx, 1
mov dword [esp + edx - 0x1fffff], edx
cdq
neg dl
xor ebx, ecx
imul dword [esp + eax - 0x7fff]
xor dword [esp + edx*8 - 0x78], edx
mov dword [edi + edx*2 - 0x26], ecx
lea edi, [edx + edi - 0x17]
sbb edx, 0xb6a4d82c
pop ecx
jge fcn.008360bb
mov edx, dword [ebp]
mov ecx, 0x818c5b21
push ecx
jmp 0x96894c
mov al, byte [ebp + 4]
add ebp, 6
xchg byte [esp + 2], cl
sub word [esp + 2], cx
rol ecx, 0xb4
mov byte [edx], al
mov eax, ecx
sbb esi, 3
jmp 0x711348

Function at 0x81f70f
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
push 0x21b9d2bc
lea esp, [esp + 8]
jmp 0xa34896
call fcn.00c9f7ff

Function at 0x824d14
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
lea esp, [esp + 0x1c]
jne 0x905ade
mov eax, 0x6402b904
movsx ebx, al
btc ebx, 0x38
pop ebx
mov edx, 0x53b1fe21
sal edx, 0x41
not ecx
mov dword [edi], ecx
add dx, dx
lea ecx, [edx*4 - 0xcc0364c]
bts cx, cx
jmp ebp
mov ebx, 0xfe28fc01
ror bx, 0x87
jb 0x78b2b5
movzx ebx, byte [edx]
push 0x4c2b71a6
xor ebx, ecx
inc word [esp + 2]
and ebx, 0xff
dec dword [esp]
mov ebx, dword [ebx*4 + 0x8f9e40]
jp 0xa09f3c
Function at 0x826239
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
mov eax, dword [esp + 0x14]
lea eax, [eax*8 - 0x67ca7645]
mov dword [edi + eax*4 - 0x6e254004], ebx
mov dword [edi + eax*4 - 0x6e254008], ecx
movsx ecx, al
mov dword [edi + eax*2 - 0x3712a006], edx
mov dword [esp + eax*2 - 0x3712a002], 0xedb45e8b
or dword [esp + eax*2 - 0x37129ff4], eax
mov ebx, dword [esp + eax*2 - 0x37129fee]
dec cx
pop ecx
pop eax
pop edx
pop edx
pop eax
pop ecx
pop ecx
jge fcn.00cad447
Function at 0x829c38
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
mov word [ecx + ebp - 0x29429de5], ax
lea eax, [edx - 0x685030dc]
jb 0x9af0d9
add esi, ecx
bts edx, 0x83
movsx ecx, ax
jmp esi
adc ebp, 2
pop edx
mov edx, 0xbdb6898a
imul cl
ror edx, 0xd5
lea ecx, [edx + edx - 0x3f560df5]
jb 0x79ae38
mov bh, 0x55
xchg byte [esi - 0xa0d0f7c], cl
push esp
fucomp st(4)
xor ebx, 0x39
invalid
xor ecx, ecx
lea edi, [edi + ecx*2 - 4]
xchg ecx, edx
rol al, 0xe6
mov ecx, dword [edi + edx*2]
xor ecx, ebx
inc ecx
ror al, 0x63
not ecx
mul dx
inc eax
bts edx, eax
rol ecx, 3
btc eax, 0xb6
bswap ecx
xor ebx, ecx
cdq
dec dl
js 0x79c841
mov edx, dword [edi + ecx*2 - 0x7d866e5e]
call fcn.00a318f8

Function at 0x82ae75
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
xor eax, eax
jmp 0x9a77ff
test edx, edx
call fcn.00a15d5f
Function at 0x82bbcd
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
neg ecx
rol ecx, 1
lea ecx, [edx + ecx + 0x3c5db727]
and dl, dl
cmovo eax, edx
shr eax, 0xdb
neg ecx
ror word [esp + eax*2 + 5], 0x86
xor ebx, ecx
not dword [esp + eax*2 + 1]
add esi, ecx
mov dword [esp + eax*2], esi
ret 8
mov ecx, 0xbfb573b0
movzx eax, cl
lea ebp, [ebp + eax*8 - 0x584]
sar dword [esp + eax*8 - 0x57a], cl
mov ecx, dword [ebp + eax - 0xb0]
xor ecx, ebx
ror ecx, 2
mov edx, dword [esp + eax - 0xa8]
xor ecx, 0x579c6d31
shl eax, 0x92
ror ax, 0xa7
mov dword [esp + edx - 0x40a10000], edx
lea ecx, [ecx + eax*8 + 0x771f5a24]
btc dx, dx
add edx, 0x5720e20a
jo 0x7ac87c

Function at 0x82c104
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
dec esp
mov dword [esp + edx - 0xf0], esp
inc cx
shr esi, 0x61
inc esp
movzx ecx, ch
inc esp
xor dword [esp + ecx - 0x4b9c4750], eax
dec eax
btc ebx, 0x86
dec esp
mov esp, dword [esp + ecx - 0x4b9c4750]
inc ecx
or ecx, 0xf49e7620
mov eax, 0xdc0be21c
dec ebp
arpl ax, ax
inc ecx
xchg edi, edx
dec ebp
adc ebx, eax
dec esp
mov ecx, dword [edi + ebp*2 - 0x104]
call fcn.007f2a7b

Function at 0x82e1a5
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
mul ecx
mov ecx, 0xaf815eb3
mov dword [edi], edx
imul ecx, ecx
movsx edx, cl
mov dword [ecx + edi - 0x4d6df125], eax
movzx eax, cx
or al, 0x8c
call fcn.007e78b0
mov di, word [esi + edi - 0x27ae8201]
inc ecx
shl ch, 0x47
dec eax
mov dword [esp + esi*2 - 0x4f5d03ea], 0xf31b2838
inc ecx
pop ebp
pop esi
inc ecx
pop eax
inc ecx
pop esi
inc ecx
pop eax
inc ecx
pop ebp
jnp fcn.008c5046
mov ecx, 0xf7be7d98
bts ecx, 0x35
mov ecx, dword [edi]
mov eax, 0xa02d0103
shl eax, 0x7f
lea eax, [eax + eax*2 - 0x58f0d860]
mov eax, dword [eax + edi - 0x270f279c]
jb 0x7c1a54

Function at 0x82ec5a
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
mov dword [esp + 4], 0xf01df372
lea esp, [esp + 4]
call fcn.009cb732
stc

Function at 0x82fee2
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
cwde
mov word [edi + eax*8 - 0x1cd88], dx

Function at 0x8303a3
Capabilities:
Authenticate hmac

Disassembly:
call fcn.0076f16a
add eax, edx
mov dword [ebp - 4], eax
jmp 0xa3bdc6
jmp 0x8cbde5

Function at 0x8313f5
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
lea esp, [esp + 8]
je 0x81a725
push 0x2fac26b0
mov dword [esp], ebx

Function at 0x831e99
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
neg edx
not eax
mov dword [esp + ecx*2], edx
ror eax, 2
not dx
lea edx, [edx*4 + 0x4018b8f]
inc eax
or dword [esp + edx - 0x4018b8b], edx
neg dx
not eax
ror eax, 3
sal word [esp + ecx + 1], 0x4b
jbe 0x90c77f
xchg word [esp + edx - 0x4017473], dx
xor eax, 0xd01abb00
mov byte [esp + edx*2 - 0x803feaf], dl
not eax
bt edx, 8
sub cl, 0x87
xor ebx, eax
add cl, 0xac
add esi, eax
mov dword [esp + edx*2 - 0x803feb0], esi
ret
Function at 0x832129
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step
Execute syscall

Disassembly:
dec esp
lea ebp, [edi + edx*2 - 8]
dec eax
mov dword [esp + edx*2], 0xcea338b5
dec esp
mov dword [edi + edx - 0x10], ebp
jg 0x9695ca
xor eax, ebx
add cl, cl
btc cx, cx
mov edx, 0x96b4991f
dec eax
add edx, ecx
rol edx, cl
ror eax, 2
sar dl, cl
not eax
setb cl
ror cl, cl
dec eax
xor cx, 0x75b9
adc dx, dx
shr dx, 0xc2
not eax
jne 0x9bb8c4
inc ecx
xadd eax, ebp
dec eax
lea edi, [edi + edx - 0x10]
shl byte [esp + edx + 5], 0xc1
shl bl, 0x44
seta dl
inc ecx
pop edi
pop ebx
inc ecx
pop edi
jns fcn.008c5046
jmp 0x9a822a
mov ecx, 0x11044a15
mov eax, dword [esi + ecx - 0x11044a15]
ror ecx, 2
inc ecx
lea esi, [ecx + esi - 0x44411282]
lea ecx, [ecx - 0x5984e5]
jnp 0x9678ec
sbb ebp, 4
mov edx, dword [ebp]
xor edx, ebx
movzx ecx, al
btr ax, cx
dec edx
add cx, cx
neg edx
inc eax
lea ecx, [eax + ecx*4 + 0x7727a293]
bswap edx
xadd eax, ecx
bts eax, eax
ror edx, 1
shr ax, 0xd
call fcn.007c1ea6
dec esp
inc eax
rcl dword [esp + ebp*8], 0x9b
pop edi
test byte [ecx], ch
iretd
Function at 0x840ffd
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
dec edx
jmp 0x9bc337
call fcn.00a22053
dec cx
jle 0x729e91
add ebp, eax
call fcn.0076aa92

Function at 0x895b1f
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
imul ax, ax
mov dword [ecx + edi - 0x8a00], edx
sub ecx, dword [esp + eax*8 - 0x33d20]
lea ebp, [ebp + eax*4 - 0x19e94]
cbw
shl word [esp + eax*4 - 0x3fe8e], cl
sbb eax, ecx
mov eax, dword [ebp + eax*2 - 0x268c4]
movzx edx, cx
pop edx
xor eax, ebx
inc dl
inc edx
not eax
mov ecx, 0x63261abe
lea ebp, [ebp + ecx - 0x63261ac2]
lea edx, [ecx*8 + 0x5aa18818]
mov edx, dword [ebp + edx - 0x73d25e08]
xor edx, ebx
not edx
movzx eax, cx
xor edx, 0x6b02534
sub edx, 0xf32ef714
btc eax, 0xe
ror edx, 1
not cl
add ecx, eax
lea edx, [edx + ecx*2 - 0x30ba2152]
not ecx
xor ebx, edx
push eax
xchg byte [esp + eax*2 - 0xb57b], al
lea edi, [edi + eax*8 - 0x2d2d4]
and ecx, dword [esp + eax - 0x5a5a]
jg 0x715fdf
jb 0x805974
sub esi, 1
pop edx
movzx eax, byte [esi]
neg edx
bt edx, edx
xor al, bl
inc al
ror dx, 0xa7
ror al, 1
neg dx
not al
ja 0x75558f
adc al, 0x97
xor bl, al
shl edx, 0xee
setnp dl
push esi
sub edx, 0xaa2aa981
bts edx, 0x89
push ebp
btr edx, edx
jb 0x942ac0
jb 0x73f04a
adc esi, 4
sal edx, 0x65
xor eax, ebx
xor cl, 0xa0
mov dword [esp + 4], 0xa5b9bf8f
push edx
adc eax, 0x300a9f98
neg eax
rol eax, 2
shr dl, 0x81
dec eax
call fcn.0070fbe0
jmp 0x72306c
push ebx
movsx ebp, dl
movzx ebx, dl
sbb dx, bp
mov ebp, edi
setne dl
ror edx, 0xb
btr ebx, ebx
mov ebx, eax
jae 0x705af9
fld xword [edx + 0x24b6963c]
and eax, dword [eax + ecx*8]
or al, 0x8e
and al, 0x23
add al, 0xdc
or byte [edx - 0x1bfbdcdc], dl
push dword [ebx + 0x77c42613]
arpl word [eax + ebp - 0x3b], sp
dec esp
inc esi
arpl word [edi - 0x38541222], bp
shrd dword [0x24b48575], esi, cl
outsb dx, byte [esi]
cmp dword [ebp + 0x5b3a70bf], 0xffffffb3
arpl sp, dx
and eax, 0xa17764df
pushal
bswap esp
fucompi st(2)
pop ss
dec ebp
invalid

Function at 0x897c61
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
xor bl, al
inc dl
lea eax, [esp + eax + 8]
jno 0x9d40f5

Function at 0x899d0d
Capabilities:
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
add ebp, edx
mov dword [esp + ecx - 0x4e346161], eax
cbw
movzx ecx, byte [eax + esi - 0x2100ff9d]
lea esi, [esi + eax*2 - 0x4201ff39]
sub byte [esp + eax - 0x2100ff9a], 0x39
xor cl, bl
push eax
cwde
cdq
add cl, 0xa0
sal byte [esp + 5], 0x65
rol cl, 1
dec word [esp + 2]
xor cl, dl
dec eax
add cl, dl
or edx, edx
cmova eax, dword [esp + 4]
neg cl
jmp 0x9aab61
lea eax, [edx + eax*2 + 0xa20cd8e]
not ax
add cl, dl
xor bl, cl
inc dl
mul edx
imul edx
lea ecx, [esp + ecx + 8]
mov ax, word [ecx + eax*2 - 0x3e3d5000]
lea edi, [edi + edx - 0x5219ae2]
lea edx, [edx*8 + 0x400be99f]
sal edx, 0x42
ror edx, 0x6c
mov word [edx + edi - 0x27ca4630], ax
pop eax
pop edx
jnp fcn.008360bb
mov dword [esp], 0x7eef5376
call fcn.009cb732