joyce8/EMBER2024-capa huggingface dataset:
Function at 0xc0fc98
Capabilities:
Encode data using base64

Disassembly:
push dword [esp + 0xc]
popfd
lea esp, [esp + 0x18]
call fcn.01442334
mov edx, dword [edi]
mov eax, dword fs:[edx]
mov edx, 0x95aec1b1
movsx ecx, dl
dec edx
mov dword [edi], eax
mov edx, dword [esi]
jl 0x14db881
xor edx, ebx
inc edx
sal cx, 6
and al, al
bswap edx
neg ecx
jbe 0x1525760
mov ecx, 0xa917a305
mov cl, byte [edi + 4]
jmp 0x1504425
lea eax, [ecx + ecx + 0x47848d82]
lea esi, [eax + esi - 0x47848ce0]
sar ecx, 0xbe
jne 0xc2dd79
mov ecx, 0xe086f1ac
movzx edx, cx
mov ecx, dword [edi + edx*4 - 0x3c6b0]
lea eax, [edx + 0x37958d9b]
xor edx, 0x76209caf
ror edx, 0x9e
movzx ax, byte ss:[ecx + eax*2 - 0x6f2cfe8e]
add edi, 2
sar dl, 0x44
call fcn.00c164d9
push edx
inc edx
add cl, byte [edi + ecx*2 + 4]
dec eax
sal esi, 0xa4
dec edx
lea edi, [edi + ecx*2 + 4]
shrd bp, ax, cl
inc ecx
neg bl
dec edx
and esi, dword [esp + ecx + 7]
inc cx
mov dword [ecx + edi], ebp
mov ecx, edx
dec esi
mov dword [esp + ecx*4], ebp
ret 0x10
push 0x1f9e6abf
add edi, 4
jmp fcn.01503ba1
neg edx
call fcn.014e5a0f
dec esp
mov dword [esp + edx + 0x620feca8], ebp
ret

Function at 0xc11e7d
Capabilities:
Encode data using base64

Disassembly:
dec esi
mov dword [esp + edx - 0x3235d666], esi
inc edx
xor dword [esp + edi - 0xb3], ebp
inc cx
neg edi
inc cx
sbb edi, 0x5e416a1e
inc ecx
movsx esi, dl
dec eax
arpl bp, bp
dec esp
adc ebp, ebp
dec ebp
mov ecx, dword [edx + edi - 0x3235d666]
inc ecx
movzx eax, bx
ror cl, 0x87
dec edx
lea edi, [edi + edi - 0x9526]
dec eax
sal eax, 0x88
dec edi
lea eax, [eax + edx*2 - 0x646baccd]
mov ebx, esi
inc ebx
mov bl, byte [eax + edi*8 - 0x4a970]
inc ecx
shl ebx, cl
call fcn.00bebcd8
lea edi, [edi + eax + 4]
je 0x1492cc3
inc ebp
mov edx, dword [eax + esi - 0x71af0524]
inc ebp
xor edx, esi
inc ecx
neg edx
inc esp
mov esp, esi
inc ebp
movsx ecx, sp
inc ecx
bswap edx
inc cx
sar ecx, 0xea
dec edx
lea edx, [esi + ecx*4 - 0x4ff659e2]
inc ebp
adc edx, ecx
inc ecx
mov ebx, 0x81045223
inc ebp
movzx edi, ah
inc ecx
ror edx, 2
mov ebx, 0x30065a32
inc ecx
shr esp, 0xf1
inc edi
lea edx, [edx - 0x23a60144]
dec ecx
lea eax, [edi + 0x7a8997a4]
inc ecx
rol edx, 3
dec dx
inc ecx
push esi
inc esp
xor dword [esp + esi - 0x71af0524], edx
call fcn.0149f666
adc al, 9
or edx, ecx
not edx
lea eax, [eax + eax + 0x611b06a3]
dec ax
mov dword [edi + eax - 0x611b06b4], edx
mov edx, eax
xadd dx, ax
mov edx, dword [eax + esi - 0x611b06b4]
adc eax, 0x47b53fac
movzx ecx, ax
lea esi, [esi + ecx*2 - 0x8cbc]
sete al
xor edx, ebx
lea edx, [edx + ecx*2 + 0x388e5477]
shr ax, 0x4c
shl al, 0xe4
not edx
sbb cl, ch
ror edx, 2
xor edx, 0xea936d34
inc edx
xor edx, 0xa40275b9
and eax, ecx
sbb cl, cl
rol edx, 1
and eax, 0xcaf8d89
xor ebx, edx
rol cx, 8
adc ebp, edx
sar ecx, cl
movsx edx, cx
and cx, ax
xor eax, ebp
jmp eax
Function at 0xc12443
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], dx
jmp ebp
inc ecx
push eax
bswap ecx
push edx
mov dword [esp + edx + 8], eax
mov dword [esp + edx + 0xc], edx
neg ecx
sub ecx, 0xe08c2432
shl al, 0x87
jb 0xbd4be8
xadd dl, dh
xor ebx, ecx
sub dword [esp + edx + 0xa], 0x238ac227
sar edx, 0x56
adc ebp, ecx
jmp 0x14476c1
inc edx
jge 0x1525ee6
dec eax
mov ecx, dword [esp + edi + 0xc9cce8c]
dec eax
mov dword [esp + edi + 0xc9cce4c], 0x720a4f2e
pop ebx
dec edx
mov dword [esp + ebp - 0x29ad0c2d], edi
dec eax
mov eax, dword [esp + edi + 0xc9cce8c]
inc ebp
movsx eax, bp
call fcn.014cc067
inc edi
mov edi, dword [edi + eax - 0x66097f8c]
movsx edx, al
inc esp
movsx ebx, al
inc ebp
xor edi, esi
inc ecx
movzx ebx, bx
inc ecx
mov esp, 0x409d6383
sar dx, 0x4c
inc ecx
xor edi, 0xcba88d22
inc eax
push edx
inc ecx
bswap edi
inc esp
mov edx, edx
call fcn.0152174d
call fcn.00c07287
or dword [esp + edx - 1], ebp
ret 0xc

Function at 0xc1680c
Capabilities:
Encode data using base64

Disassembly:
bswap ebx
dec esi
mov dword [esp + ecx - 0x5f1d9909], esp
dec edx
lea ebp, [0xc80ae3f]
inc ecx
pop ebx
dec ebx
dec ebp
lea edx, [ebx + eax*2 - 0x5ce87d68]
ror word [esp + eax*4 - 0x26c], 0x22
dec ecx
not edi
not ebx
dec esp
mov dword [esp + eax - 0x8e], esi
push ecx
inc edx
xor dword [esp + ecx - 0x5f1d98f1], ebx
dec esi
and ecx, dword [esp + ecx - 0x5f1d98fc]
dec esi
mov esi, dword [esp + ecx - 0xcffffe8]
inc esp
and ebx, edx
dec eax
arpl bx, bx
call fcn.0149ad8f
inc ecx
movzx esi, bx
mov ebp, dword [edi + esi*4 - 0x19248]
inc esp
movzx ecx, dh
inc ecx
xadd cl, dh
dec eax
lea edi, [edi + esi*2 - 0xc920]
inc ecx
movsx ebx, cl
dec edi
lea eax, [eax + ebx - 0x46956494]
bswap esi
inc ebx
movzx esi, word [eax + ecx*2 - 0x48]
inc ebp
movsx esp, cx
dec edi
lea edi, [ebx + ebx*8 + 0x21971025]
inc cx
xor esi, esi
inc ecx
movsx edx, bx
rol bl, 0xc4
dec edx
lea eax, [ebx*2 - 0x5164d569]
adc si, 0xde85
jmp 0xc3785f
dec eax
bswap ebx
rol si, 1
inc si
neg si
inc cx
neg ebx
neg bx
not bl
inc sp
xor esi, esi
dec eax
add esi, esp
jmp 0x1415093
inc cx
dec ecx
inc dx
inc ecx
mov dword [ebx + esi - 0x46959b6e], ebp
inc ecx
push ecx
call fcn.0152457e

Function at 0xc1998c
Capabilities:
Encode data using base64

Disassembly:
add ebp, edx
inc byte [esp + ecx*2 - 0x7e0076]
pop eax
pop ecx
pop ecx
pop ecx
jg fcn.00c10a5d
Function at 0xc31cc0
Capabilities:
Encode data using base64

Disassembly:
dec ebx
lea ebp, [edx - 0x715f6cc3]
inc ecx
xor edx, esi
call fcn.014b6ed2
inc dx
dec dword [esp - 0x60934472]
dec edi
lea eax, [eax - 0x60934479]
inc esi
movzx ebx, byte [esp - 0x60934471]
inc ebx
mov edx, dword [ebx + eax - 6]
jns 0xbd1e00
rol ebx, 1
inc esp
movsx esp, dh
sub ebx, 0xf501f8ad
inc ecx
xchg edx, edx
dec esi
lea edi, [edx + edx*2 + 0x17923a39]
dec ecx
lea ebp, [esp + ecx*8 - 0x6073d5f7]
not ebx
dec ecx
inc edx
inc ecx
movzx eax, bh
inc ecx
push esi
inc ebp
movzx ecx, bl
inc esp
movzx esi, cx
xor dword [esp + esi - 0x10abde02], ebx
inc eax
shl dh, cl
inc ecx
pop esi
jp 0x1438fbf
dec esp
mov ecx, dword [edi]
inc ecx
ror esp, 0xbd
dec edx
mov edx, dword [edi - 0x6093446d]
inc ecx
mov ecx, esp
dec esp
lea edx, [ecx + ecx*2 - 0x5c6042fa]
jb 0x145d882
mov cl, byte [edi + ecx - 0x60934465]
dec edx
mov dword [esp - 0x60934475], 0x63278f97
inc dx
ror dword [esp - 0x60934472], 0xc
dec edx
lea edi, [edi - 0x6093446b]
dec ecx
shrd ecx, edx, cl
dec esi
mov dword [edi - 0x60934475], ecx
jmp 0xc04675

Function at 0xc33eb7
Capabilities:
Encode data using base64

Disassembly:
neg bx
dec eax
mov dword [esp + eax - 0xbc], 0x6891efa5
inc esp
xor dword [esp + eax*2 - 0x170], ecx
push eax
dec esp
mov esi, dword [esp + eax*4 - 0x2e0]
dec ebp
arpl cx, cx
dec esp
mov dword [esp + eax*8 - 0x5d8], edx
or dl, bh
add word [esp + eax*2 - 0x177], dx
dec ebp
adc ebp, ecx
dec eax
dec dword [esp + eax*2 - 0x170]
js fcn.00c12125
dec dx
dec esp
mov edx, dword [eax + edi - 0xbc]
push eax
dec eax
lea edi, [edi + eax*2 - 0x170]
dec ebp
lea eax, [eax + eax*2 - 0x179]
inc ebp
movzx ecx, byte [eax + eax*4 - 0x2f0]
call fcn.0140ed40
Function at 0xc33f27
Capabilities:
Encode data using base64
Encode data using xor

Disassembly:
inc ebx
mov edx, dword [eax + ecx*2 - 0x3f0ddd30]
inc ecx
mov esp, 0x421e3381
dec esi
mov dword [esp + ecx - 0x1f86ee98], ebx
inc ecx
not ecx
inc ecx
xor edx, esi
inc ecx
push ecx
inc edx
mov ebp, dword [esp + ebx*2 - 0x263159d6]
inc edx
inc esi
add byte [esp + ebx - 0x1318ace5], cl
neg edx
mov ebx, ebp
inc esp
xchg bl, ah
inc edx
rol edx, 3
dec edx
dec dword [esp + ebx*2 - 0x263159e2]
inc edx
mov eax, dword [esp + ebx*4 - 0x4c62b3b9]
inc esp
xchg al, ah
dec esi
mov dword [esp + ebx - 0x1318ace9], esi
inc edx
neg dword [esp + ebx - 0x1318acef]
inc edx
xor dword [esp + ebx*2 - 0x263159da], edx
inc ecx
sub bl, 0xc
inc esi
xchg dword [esp + ebx - 0x1318ace3], ecx
dec esi
mov esi, dword [esp + ebx*2 - 0x263159c2]
inc edx
movsx ecx, word [esp + ebx - 0x1318ace1]
ja 0x13f5e8b
mov edx, 0xe9a8363d
movsx eax, dl
mov ecx, edx
mov eax, dword [esi + eax*2 - 0x7a]
xadd edx, ecx
xchg dx, cx
neg dx
add esi, 4
jmp 0xc440c2
xor dx, dx
xor eax, ebx
or dl, dh
call fcn.014784fb
dec esp
lea ecx, [eax + ebp*8 + 0xfa0ca8a]
push ebp
inc ebp
mov ecx, dword [eax]
push eax
mov ecx, ebp
ror ecx, cl
inc ebp
xor ecx, esi
mov ebx, ebp
jmp 0x14d7a2b
dec eax
arpl dx, dx
ja 0x1457831
lea eax, [eax + eax*8 + 0x67aff309]
call fcn.014eb6e7
inc ecx
xor ecx, 0x4482f40b
sub byte [esp + ecx - 0x6c1f4f09], al
inc ecx
sub ecx, 0x36182e38
dec esp
lea edi, [eax + ebx*2 - 0xc7d9e5]
dec word [esp + ecx - 0x6c1f4f0c]
rol bl, 0x45
inc ecx
bswap ecx
inc esp
movzx edx, cx
inc ecx
neg ecx
inc ecx
xor ecx, 0xe8afb90f
inc ecx
mov ebx, 0x953a2c3e
inc edx
or byte [esp + edx - 0x4f0e], bl
dec ecx
not edx
inc ecx
dec ecx
dec esi
mov dword [esp + edx + 0x4f20], esi
inc ecx
push edi
inc esi
xor dword [esp + edx*4 + 0x13c70], ecx
inc edx
xor byte [esp + edx*2 + 0x9e36], bl
dec esi
mov esi, dword [esp + edx*4 + 0x13c70]
dec eax
mov dword [esp + ecx - 0x6c1f4f07], ebp
dec ebp
arpl cx, cx
inc edx
movsx edx, word [esp + edx + 0x4f1c]
inc ecx
push ebx
dec eax
lea esi, [ebp + edx*4 - 0x4a7ce7c1]
dec ebp
adc ebp, ecx
jmp 0x150b1f7
call fcn.0142d3b9
inc ecx
ror ecx, 1
inc ecx
neg ecx
shr byte [esp + ecx - 0x6c1f4f13], 4
je 0x1426718
inc ecx
dec esp
inc sp
movzx edx, byte [edi + ebx]
movsx ecx, bp
mov eax, ecx
mov cl, byte [edi + ebx + 2]
call fcn.0151fe88
Function at 0xc3d7c0
Capabilities:
Encode data using base64

Disassembly:
dec eax
mov dword [esp + esi*2 - 0x24], 0x8a39c704
inc ecx
xor edx, esi
xadd word [esp + esi - 0xf], si
inc ecx
pop ebx
ror edx, 1
xor ax, 0x4030
ror esi, 0x79
jnp 0x13f12d0
inc eax
neg dh
call fcn.01402b38
inc edx
lea edx, [edx + ebx*2 - 0x1f30120f]
xor edx, 0xa4206987
inc sp
mov dword [esp + esi - 0x7fc4fb], ebx
lea edx, [esi + edx - 0x7828c87]
neg edx
mov ebx, eax
dec ebp
lea ebx, [esp + esi - 0x17a5e5b]
dec esp
mov dword [esp + esi - 0x7fc500], esi
sal ebx, 0xac
inc cx
not esp
inc ecx
mov esi, 0x163089a4
xor dword [esp + esi*2 - 0xff8a00], edx
inc ecx
pop esi
inc ecx
not ebx
mov ebp, 0x9e3a8f24
dec ecx
lea ebx, [ebx + ebx*4 - 0x6b74fce0]
dec eax
arpl dx, dx
dec eax
sal ebp, 0x6b
inc ecx
push ebx
jne 0x150c4ab
not edx
xor ecx, 0xb51df797
add ax, 0xfc83
sbb ecx, 0x712bca2e
jmp 0x149d5d3
sbb word [esp + 1], ax
mov edx, dword [edi + 4]
jns 0x149a9ec
xor eax, eax
lea edi, [edi + eax + 8]
inc eax
mov dword ss:[ecx + eax - 1], edx
movsx edx, ax
pop eax
jmp ebp
xor ecx, 0x8e3fe63d
or edx, 0xe3ae3e15
dec ax
shl edx, 0x13
rol ecx, 2
sal ax, 0x49
ja 0x152869c
push edx
xor ebx, ecx
add edx, dword [esp + eax - 0x70000400]
or al, byte [esp + eax - 0x700003fd]
sal word [esp + eax - 0x700004f1], 0x8c
adc ebp, ecx
lea ecx, [eax*8 + 0x3481708e]
xadd dword [esp + eax - 0x700004f2], eax
sub cl, cl
mov ecx, dword [edi]
jbe 0x14494f3
jmp edx

Function at 0xc4b6e3
Capabilities:
Encode data using base64

Disassembly:
sar edx, cl
neg eax
call fcn.01404af5
add ebp, edx
mov dx, word [eax + edi - 1]
call fcn.014049d3
inc esp
mov ecx, ecx
xchg bh, cl
inc ecx
push esi
xor dword [esp + ebx], edx
dec eax
sub esi, 0x633f2237
jl 0x142e905

Function at 0xc4f0d1
Capabilities:
Encode data using xor

Disassembly:
xor ecx, ebx
bswap ecx
dec ecx
movsx edx, al
call fcn.0145df4f
inc ebp
movzx esp, dx
pop esi
inc ecx
pop edx
pop eax
jno fcn.01400bb8
dec esi
mov dword [esp + ecx*2 - 0x167ade6e], ecx
inc ecx
rol ebx, 3
dec esi
mov dword [esp + ecx - 0xb3d6f2f], esi
call fcn.014857e8
xchg ecx, edx
mov word [ecx + edi - 0x3e], ax
call fcn.014b08c0
sysenter
call fcn.00c06fab
mov ecx, 0x3bbae909
mov ecx, dword [esi + ecx - 0x3bbae909]
mov eax, 0x2db4b83f
lea esi, [esi + eax*2 - 0x5b69707a]
and eax, eax
jns 0xc15c62
dec ebp
add ebp, ecx
inc esp
mov ecx, eax
dec ecx
dec edx
pop edx
dec eax
mov edi, dword [edi + ebp - 0x427071aa]
jns 0xc1a9a8

Function at 0x13f0c5e
Capabilities:
Encode data using base64

Disassembly:
rol edx, 3
neg edx
xor edx, 0xa5b0fdac
pop ecx
sub ax, 0xcb03
jbe 0x14a18ca
Function at 0x13fa822
Capabilities:
Encode data using base64

Disassembly:
dec esp
mov dword [esp + 8], esi
inc ecx
pop esp
inc esp
mov edi, esi
inc ebp
movsx edx, cx
xor dword [esp], ecx
inc ecx
mov esp, 0x89890617
inc ecx
pop esi
dec eax
arpl cx, cx
jmp 0x15439b7
inc ecx
shl edx, 0xd8
dec esp
add ebp, ecx
dec ecx
sub eax, 1
inc ecx
sar cl, 0x83
inc ebp
movzx edi, byte [eax]
inc ebp
xor bh, dh
inc ecx
dec bh
mov ebp, 0xcc8f1d37
inc ecx
xor bh, 9
inc ecx
ror bh, 1
dec eax
xor esi, esi
inc ecx
and esi, edx
inc ecx
neg bh
inc ecx
not bh
inc bp
inc ebp
xor dh, bh
dec esp
add edi, esp
inc ecx
rol cl, 0x86
inc ecx
mov ebx, dword [edi + esi]
dec esp
lea edi, [esi + ebp*2 + 0x6c8fea11]
dec eax
lea edi, [edi + esi - 4]
jb 0xc00187
jmp 0x1420fe8

Function at 0x1408a93
Capabilities:
Encode data using base64

Disassembly:
pop es
or al, 0x57
in eax, 0xe8
sbb al, 0xf4
adc byte [edi], dl
xlatb
dec eax
sub edi, 8
inc ecx
pop esp
mov esi, 0xef351b02
mov dword [edi + 4], eax
jmp 0x14d8752
mov dword [ebp - 4], eax
test ebx, ebx
push 0x14012a1e
call fcn.00c0aa10
call fcn.0153b07e
pop eax
pop edx
jns 0x1408ae0
lodsb al, byte [esi]
sub ch, dh
push ebp
mov cl, 0xf3
idiv byte [esi + 0xd]
stosb byte es:[edi], al
inc ebx
leave
in eax, dx
push ebp
call 0xab1ff7b8
test al, 0x77
xchg edi, eax
mov edi, 0xecddae55
aad 0xc2
push esi
dec esp
mov al, 0x56
push ebp
push edi
pushfd
or byte [ecx - 0x4c104256], ch
test byte [esi - 0x65605c13], ch
push ecx
push es
xor eax, 0x5120d62f
xchg esp, eax
salc
and byte [ecx - 0x6c], dl
inc eax
push ebp
inc eax
jo 0x1408a73
pop ebx
dec esp
mov ebp, 0xab096979
cmp esp, dword [edx - 0x56b469f4]
retf 0xffbc

Function at 0x14091b7
Capabilities:
Encode data using base64

Disassembly:
inc ebp
xor edx, esp
inc ecx
and edx, 0xff
inc edi
mov edx, dword [ecx + edx*4]
inc ecx
shr esp, 8
push 0x9f128397
inc ebp
xor esp, edx
push 0x8160f31
dec eax
inc eax
jmp 0x14bc4f7

Function at 0x140ed40
Capabilities:
Encode data using base64

Disassembly:
movzx eax, byte [esi]
mov ecx, 0x823e2c2f
add esi, 1
xor al, bl
lea edx, [ecx*8 - 0x1b6935d4]
add cx, 0x322a
inc cl
xor al, 0x1f
sal ecx, 0x88
sbb al, 0x34
xor al, 0x13
inc al
shr edx, 0x62
xor bl, al
xchg edx, ecx
add eax, esp
rol cx, cl
mov cx, word [ecx + eax - 0x3da2d215]
jb 0x143fc1b
inc ebp
xor cl, dh
dec eax
lea ecx, [eax + ecx*8 - 0x2fec17f5]
xor word [esp + eax - 0xad], 0x1788
inc esp
movsx esp, cx
inc esp
sbb cl, al
call fcn.014d8668
jmp 0xc0c82c
rol edx, 0xec
sub edi, 2
call fcn.01496395
invalid

Function at 0x1413834
Capabilities:
Encode data using base64

Disassembly:
pushfd
add dword [esp + 4], 0xfec0a702
mov dword [esp + 8], 0x1ada760b
push dword [esp]
popfd
lea esp, [esp + 8]
call fcn.01442334
xor ebx, eax
sal ecx, 0x96
call fcn.0146ef3f
Function at 0x14184c8
Capabilities:
Encode data using base64

Disassembly:
inc esi
xor dword [esp + ebx - 0x412b8387], ecx
bswap edx
inc edx
sar dword [esp + ebx - 0x412b8389], 0x77
neg word [esp + eax*2 - 0x77]
dec edx
not edx
inc ebp
xchg ah, bl
inc ecx
shr cl, 0xa3
not ax
dec esi
mov dword [esp + ebx - 0x412b839c], esi
dec esp
mov dword [esp + eax - 0xffbe], ecx
inc edx
xor dword [esp + ebx - 0x412b839c], edx
shl esi, 0xf4
dec esi
mov esi, dword [esp + ebx - 0x412b839c]
dec eax
arpl dx, dx
inc edx
shl dword [esp + ebx - 0x412b83a3], 0xff
inc ecx
push ecx
dec esp
adc ebp, edx
pop ebp
inc ecx
pop edx
inc ecx
pop ecx
jmp fcn.01400bb8
Function at 0x141e7e3
Capabilities:
Encode data using base64

Disassembly:
jmp 0x151af5e
dec eax
lea edi, [ecx + edi - 0x5e18]
jmp 0x14f9783
inc ecx
rol cl, 1
call fcn.00c539de
mov dx, word [edi]
inc ecx
mov edi, 0xe1325e1a
inc ecx
movzx ecx, di
mov si, word [ecx + edi - 0x5e18]
dec eax
lea ebp, [ecx + ecx + 0x6fa18686]
dec ecx
lea ebx, [edi - 0x18ed45e9]
jmp 0xc34b3d
inc ebp
xor esp, esi
call fcn.00c498de
inc edi
mov dword [ebx + edx*2 - 0x74], esp
inc esp
movzx esp, ax
jmp 0xbc4009
inc esp
mov ecx, ecx
add dx, si
mov word [edi + ecx*2 - 0xbc34], dx
shr cl, 3
dec ebp
lea eax, [eax + ecx*2 - 0xbc0a]
dec eax
lea ebp, [ebp*8 + 0x2506c197]
jbe 0x14f5de1
inc ecx
mov edx, dword [eax + ecx*4 - 0x1780c]
inc ecx
xor edx, esi
inc edx
dec eax
lea ebx, [ebp + ebp*8 - 0x6245e0d2]
neg edx
call fcn.013ee7e9
pushfd
mov dword [esp], 0x5ad6017e
call fcn.01442334
and al, 0x7d
cmpsb byte [esi], byte es:[edi]
pushfd
sub ch, byte [ebx + ebx*8 + 0x37]
push esi
int3
dec edi
lea eax, [eax + edx*2 - 0x78]
inc ecx
movzx ebx, cl
inc edi
mov esp, dword [ecx + eax - 0x5b00ab3a]
jmp 0x14b974a

Function at 0x14267f2
Capabilities:
Encode data using base64

Disassembly:
shl byte [esp + edx - 0x125f9f46], 0xe2
inc ecx
pop ecx
inc ecx
pop edi
pop esi
pop edx
inc ecx
pop esp
inc ecx
pop ecx
pop ecx
pop edx
jbe fcn.01400bb8
mov ecx, 0x57ae742b
lea edx, [ecx + ecx - 0x67705a60]
push ecx
fmul qword [edi + ecx - 0x57ae742b]
mov eax, dword [esp + edx - 0x47ec8df6]
mov edx, dword [esi + edx - 0x47ec8df6]
lea esi, [esi + eax - 0x57ae7427]
lea eax, [ecx + eax*2 - 0x2ec74e1]
push ecx
xor edx, ebx
and word [esp + eax - 0x41ee7a0], 0x4632
shr cx, 0x4a
rol edx, 1
call fcn.01507448

Function at 0x142d318
Capabilities:
Encode data using base64

Disassembly:
dec byte [esp + 1]
call fcn.00c26335
inc edx
xor dword [esp + edi - 0x9316c92], ebp
dec esi
mov esi, dword [esp + edi*4 - 0x24c5b290]
dec edx
sal dword [esp + edi*2 - 0x1262d944], 0xd8
call fcn.01543af7
inc edx
rol word [esp + 4], 0x49
bswap edx
jae 0xc125df
Function at 0x14316e9
Capabilities:
Encode data using base64

Disassembly:
add ebp, eax
call fcn.014c6ec2
dec esp
mov edi, dword [edi]
mov edx, 0x23078797
dec eax
lea ebp, [edx*4 - 0x46d14ec6]
dec esp
mov edx, dword [edi + ebp - 0x454ccf8e]
dec eax
lea edi, [edx + edi - 0x2307878f]
inc esp
movsx esp, dl
inc ecx
mov ebx, esp
dec ebp
or edi, edx
xor ebx, ebx
dec eax
xor ebp, ebp
dec ecx
not edi
movzx esi, bp
dec esp
mov dword [edi + edx*2 - 0x460f0f2e], edi
dec ebp
lea eax, [eax + edx*2 - 0x460f0f32]
inc edx
mov ecx, dword [edx + eax - 0x23078797]
inc ecx
xor ecx, esi
dec esp
lea edx, [edx*2 - 0x3e0ef49]
inc ecx
mov ebx, 0x7c3cf190
dec eax
and edx, ebp
lea ecx, [ecx + edx*2 + 0x2599378d]
rol ecx, 2
dec eax
sar esi, 0xa5
call fcn.00be93df
shr dl, cl
sub cl, byte [esp + ecx - 0x48b75741]
bswap eax
pop ecx
adc edx, edx
ror eax, 1
dec cx
shr dl, 0x81
lea eax, [eax + edx*4 + 0x1d2de126]
add ecx, 0x8d96872e
xor eax, 0x31244981
neg edx
xor ebx, eax
lea ecx, [edx*2 + 0x38252b01]
jmp 0xbf0bac
imul ecx
mov dword [edi], edx
mov edx, 0x662190b0
mov dword [esp + edx - 0x662190b0], edx
mov dword [edi + edx - 0x662190ac], eax
movsx ecx, dx
mov ecx, dword [esi + edx - 0x662190b0]
lea esi, [esi + edx - 0x662190ac]
shr dword [esp + edx - 0x662190b0], 0x6c
sub edx, dword [esp + edx - 0x662190b0]
xor ecx, ebx
bswap ecx
not edx
mov dword [esp], edx
not ecx
sub ecx, 0x2f2d268a
inc byte [esp + 3]
ror edx, 0x14
jae 0x14f6bf7
dec eax
and edx, eax
inc ecx
dec ax
sub word [esp + edx - 0x418c400e], 0x900b
neg ecx
and eax, dword [esp + eax - 0x618ed04e]
not byte [esp + edx - 0x418c400e]
not ecx
je 0xbcdfd0
push edx
sub eax, eax
bswap ecx
inc ax
not edx
shl word [esp + eax*4 + 2], 0xc1
xor ecx, 0xf0914a26
call fcn.01436aec
outsb dx, byte [esi]
mov eax, 0xa2dff478
sbb dword [edx + 0x2b07219a], ebp
push esi
mov al, 0x63
das
aam 0xa1
push ecx
push 0x74
mov esi, 0xdbd4a936
mov byte [0x635c04aa], al
pop ebp
push ebp
push esi
inc ebx
fdiv dword [eax + 0x51]
mov fs, word [edi]
hlt
rol ecx, 1
xor ebx, ecx
shr dl, 0x62
not dword [esp + edx - 0x4d168927]
jae 0x1407bfc
add ebp, ecx
call fcn.0144f2aa
push 0xa49d680d
mov ecx, dword [esi]
add esi, 4
mov edx, 0xcbac682e
mov eax, 0x618ee828
shl ax, 0x81
xor ecx, ebx
jmp 0x14d015a

Function at 0x1432fbf
Capabilities:
Encode data using base64

Disassembly:
push 0xea32189
dec ebx
jmp 0x1453ea9
mov eax, dword [ebp + ebx*4]
mov dword [esp], eax
jmp 0x13ea23d
lea esp, [esp + 4]
jne 0x14640e1

Function at 0x143c6c0
Capabilities:
Encode data using base64

Disassembly:
neg ebp
movzx edx, cl
dec esi
mov dword [esp + ebx], esi
inc ecx
or bl, 0x91
inc ecx
rol ebx, 0x88
inc esp
xor dword [esp + ebp], edi
inc cx
shl edx, 0xa
inc ebp
add edx, edx
inc ecx
pop esi
dec ecx
sar edx, 0x41
inc ecx
movsx esi, ah
dec ebp
arpl di, di
dec ebp
adc ebp, edi
mov eax, dword [edi + ebp*2]
push esi
call fcn.014453da

Function at 0x143c6f6
Capabilities:
Encode data using base64

Disassembly:
dec eax
arpl dx, dx
jnp fcn.014fbb65
call fcn.01542fb3
Function at 0x143fb3f
Capabilities:
Encode data using base64

Disassembly:
dec esi
mov dword [esp + edx*4 + 0x611766a8], edi
dec eax
arpl bx, bx
inc edx
sets byte [esp - 0x561604bc]
inc ecx
dec ah
inc ecx
movzx eax, sp
dec esp
adc ebp, ebx
dec edi
lea eax, [esp + eax - 0x15858136]
dec edi
mov esp, dword [eax - 0x2b0b025c]
movsx ebx, al
dec ebp
xor esp, esi

Function at 0x1440acc
Capabilities:
Encode data using base64

Disassembly:
xor dword [esp + esi - 0x449af283], ebp
dec esp
mov esi, dword [esp + ecx*2 - 0x11e]
dec esp
xadd dword [esp + ecx*2 - 0x126], esp
dec eax
arpl bp, bp
inc esp
sub dword [esp + esi - 0x449af28d], ecx
setp bl
inc sp
adc esp, ecx
dec esp
adc ebp, ebp
movzx edx, bl
rol ebx, cl
inc edx
shr byte [esp + edi - 0x449af256], 0x81
inc ecx
pop esp
inc ecx
pop ebx
pop esi
pop ecx
jle fcn.01400bb8

Function at 0x1440bd8
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x10]
jne 0x15002c6
mov ecx, 0xb287e4a5
pop esi

Function at 0x1440cd6
Capabilities:
Encode data using base64

Disassembly:
mov eax, dword [edx + esi - 0x7f98b1a9]
mov dword [esp + edx - 0x7f98b1a9], edx
sal edx, 0x15
call fcn.014ed4b2
inc ebp
lea edi, [edi + esi + 0x44b66c96]
inc ecx
neg edi
inc ebp
mov ebx, edx
dec eax
shl esi, 0xba
inc ebp
add ah, ah
inc ecx
adc edi, 0xdba2353d
dec edx
lea ebx, [edx + edx*8 + 0x3f1a0fa9]
shr ebp, 0xb
inc ecx
push esi
inc esp
sbb bl, cl
sbb ebp, 0xa636431c
inc esp
xor dword [esp + ecx - 1], edi
inc ecx
pop esi
dec ecx
bswap edx
dec ebp
arpl di, di
dec eax
lea esi, [ebp + 0x2e26b5b3]
jmp 0x148d7f4
inc esp
mov ecx, edx
dec ebp
add ebp, edi
inc ecx
dec bl
movsx eax, si
call fcn.01519837
movzx ecx, ax
ror ebx, 2
dec esi
mov dword [esp - 0x7ce1ce84], esi
inc ecx
shr bh, cl
dec eax
lea ebp, [ecx + ecx*4 - 0x2b4f3e6e]
not ecx
inc edx
xor dword [esp + ebx*8 + 0x10], ebx
inc ecx
shl ah, 0xe3
dec esi
mov esi, dword [esp + ebx*8 + 0x10]
dec eax
arpl bx, bx
inc ebp
movzx ecx, dx
dec edx
dec dword [esp + ebx*8 + 3]
dec esp
add ebp, ebx
dec eax
lea ebx, [eax - 0x1043a3d9]
call fcn.014d3b83
inc edx
bswap edx
lea ecx, [ecx*8 - 0x305398fe]
jmp 0x149cb58
call fcn.00bddbbc

Function at 0x1442334
Capabilities:
Encode data using base64

Disassembly:
call int.014db905
xadd word [esp + ecx*4 + 0x2b8dd5c9], bx
jb 0x14efb02
inc sp
mov dword [edi + ecx + 0xae37572], edi
inc ecx
mov ecx, 0x598f120c
dec ebp
lea eax, [eax + ecx*2 + 0x15c6eae0]
pop esi
dec eax
xchg ebx, ecx
dec esp
lea esp, [esi*8 - 0x79460458]
inc edi
mov edi, dword [eax + edx*2 - 0x11c]
call fcn.00c39c06
dec esp
add ebp, eax
inc ebp
add bh, cl
sar edx, 0xef
dec esp
or ecx, ebx
ja fcn.01400bb8