joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e12b
Capabilities:
Encrypt data using aes

Disassembly:
jmp 0x955a5
lea esp, [esp + 0x2c]
je 0x85319
pushfd
mov ecx, dword [ebp - 0xc]
pushal
push dword [esp + 8]
push dword [esp + 8]
push eax
lea esp, [esp + 0x30]
jmp fcn.0007f5f0
jmp 0x91ff8

Function at 0x4f8b6
Capabilities:
Encrypt data using aes

Disassembly:
mov edi, dword [edi + 0x6e279]
call fcn.00097704
clc
xor eax, esi
jmp 0x5813a
jmp 0xa1a78
and eax, 0xff000000
jmp 0xad33c

Function at 0x518d6
Capabilities:
Encrypt data using aes

Disassembly:
mov dword [eax + 0x18], edx
stc
cmp esi, 0x35720
mov dword [esp + 4], 0x6d9df58b
pushfd
push 0x5e61af94
push dword [esp]
lea esp, [esp + 0x18]
jne 0x74bf5
shrd si, di, 6
mov esi, dword [ebp + 0xc]
setns ah
mov ecx, dword [ebp + 8]
cmp ah, ch
aaa
cwde
mov edi, dword [esi + 0x13]
bts ax, bx
xor ah, 0xc8
and dword [ebp + 8], 0
movsx ax, al
ror ah, 4
cwde
lea eax, [ecx - 1]
cmp bl, dl
cmp cl, al
add edi, 3
call fcn.000b6d04
popal
pop es
mov esp, gs
mov ebp, 0x7dcb3362
sub eax, 0x3be524ee
mov cs, word [ebx - 0x5855c2d6]
invalid

Function at 0x52d1f
Capabilities:
Encrypt data using aes

Disassembly:
mov dword [ebp - 0x10], eax
pushal
rep movsd dword es:[edi], dword [esi]
push esi
mov byte [esp], bh
pushfd
lea esp, [esp + 0x38]
jmp fcn.0007f58f

Function at 0x54ad6
Capabilities:
Encrypt data using aes

Disassembly:
xchg dword [esp + 0x50], esi
mov byte [esp], 0xd2
mov byte [esp], 0x56
push dword [esp + 0x50]
ret 0x54
lea esp, [esp + 8]
jg 0x5e48d
jge 0x6f1a8
pushal
lea esp, [esp + 0x20]
je 0x92455
cmc
bt ax, dx
stc
stc
test eax, eax
jmp 0xcd27d
pushal
pushfd
jmp 0x566e7
je 0x80aea
pushfd
cmp eax, 1
pushal
pushal
lea esp, [esp + 0x44]
je 0x523ad
pushal
clc
pushfd
cmp eax, 2
pushal
call fcn.000806ea
jmp 0x53ffc

Function at 0x56672
Capabilities:
Encrypt data using aes

Disassembly:
test al, al
push dword [esp]
lea esp, [esp + 8]
je 0x85319
pushfd
bswap ecx
mov ecx, dword [ebp - 0xc]
pushal
lea esp, [esp + 0x24]
jmp fcn.0007f5f0
Function at 0x567c3
Capabilities:
Encrypt data using aes

Disassembly:
stc
and edx, 0xff0000
mov byte [esp + 4], dl
bt ecx, ecx
push esi
pushfd
and edi, 0xff000000
stc
mov byte [esp + 8], 0xd6
xor edx, edi
pop edi
movzx di, cl
movzx di, al
push ebx
mov edi, esi
mov byte [esp], cl
push 0x2f40731
lea esp, [esp + 0x48]
jmp 0x70674
test ch, al
pushal
xor esi, edx
bswap edx
sar dh, 4
not dx
mov dword [eax + 0x10], esi
push 0x99055a2
movsx dx, bl
bswap edx
sar edx, 9
mov edx, dword [eax + 4]
jmp 0x8c0e8
jmp 0x89885
push 0x56de9d98
mov esi, dword [esi*4 + 0x335f8]
cmp dl, 0xb5
shr edi, 0x18
pushal
movzx edi, byte [edi*4 + 0x339f8]
stc
clc
push 0xce2faea
bt ax, 0xc
and esi, 0xff00
cmp bh, dl
xor edx, edi
cmp ch, 0x4e
xor edx, esi
neg si
sub esi, 0xdff009e5
xor edx, dword [eax - 4]
bts esi, eax
pushfd
shld esi, esi, 0x19
mov esi, dword [ebp + 8]
cmc
clc
clc
xor edx, dword [esi]
and si, 0x9d35
sar esi, cl
btc si, 0xe
add dword [ebp + 8], 4
lea esp, [esp + 0x30]
pushal
cmc
rcr si, 0xb
add si, 0x259a
mov dword [eax + 0xc], edx
test al, 0x7f
xor si, 0xcaca
btr si, 1
bt ecx, 0x1a
mov esi, dword [eax]
jmp 0x65d74
test al, 0x3c
stc
cmp ebp, ecx
and esi, ecx
push 0x6c6b3f5a
jmp 0x7f665
test bl, 0xa8
xor edx, esi
rcl esi, 1
inc esi
sal si, 0xd
mov dword [eax + 0x14], edx
shld esi, esp, cl
ror si, 7
shl esi, 6
cmp esp, 0x91d5376b
mov esi, dword [eax + 8]
push ebx
cmc
jmp 0xac1e4
stc
xor esi, edx
cmc
bt bx, 2
cmp dword [ebp + 8], 0x35720
mov byte [esp], al
mov word [esp], 0x4fdc
mov dword [eax + 0x18], esi
call fcn.000a7992

Function at 0x56927
Capabilities:
Encrypt data using aes

Disassembly:
pushal
pushfd
jmp 0x848bf
lea esp, [esp + 0x2c]
je 0x92455
jmp 0xb5723

Function at 0x56a0c
Capabilities:
Encrypt data using aes

Disassembly:
lea esp, [esp + 4]
je 0x92455
test dh, al
test eax, eax
pushfd
pushfd
lea esp, [esp + 8]
je 0x80aea
push ebp
push ebp
call fcn.00057107

Function at 0x56a5d
Capabilities:
Encrypt data using aes

Disassembly:
xor edi, ecx
mov edx, esi
shrd di, cx, cl
movsx di, dl
or di, bp
shr edx, 8
shld edi, esp, cl
add di, 0xbe9d
mov edi, esi
test ebx, 0x1b6b086b
stc
and edx, ecx
bt bp, 9
clc
mov edx, dword [edx*4 + 0x341f8]
stc
mov word [esp + 4], cx
cmc
shr edi, 0x10
jmp 0x8995a
mov word [esp], bx
cmp al, al
and edi, ecx
jmp 0x5b5f5

Function at 0x57a0b
Capabilities:
Encrypt data using aes

Disassembly:
mov edx, dword [edx + 0x89acf]
push 0xc1cb86fb
call fcn.000786f6

Function at 0x58794
Capabilities:
Encrypt data using aes

Disassembly:
stc
and esi, ecx
cmp bh, 0xf8
jmp 0x7fb60
stc
push 0xb8369a0c
mov esi, dword [esi*4 + 0x335f8]
pushfd
test bh, 0x67
clc
test ah, 0x73
shr edi, 0x18
push dword [esp]
jmp 0x9770f
clc
movzx edi, byte [edi*4 + 0x339f8]
stc
clc
pushfd
test bl, ah
and esi, 0xff00
mov byte [esp + 4], 0x2b
xor edx, edi
jmp 0xb6b4f

Function at 0x59eb1
Capabilities:
Encrypt data using aes

Disassembly:
mov word [esp], 0xf74a
and edi, ecx
mov byte [esp], 0x4e
push dword [esp]
mov edi, dword [edi*4 + 0x33df8]
stc
bt di, dx
stc
and edx, 0xff0000
pushfd
test dl, bh
stc
and edi, 0xff000000
clc
call fcn.0004f8c7
Function at 0x5bfb7
Capabilities:
Encrypt data using aes

Disassembly:
push 0x6f547db9
lea esp, [esp + 0x30]
ja fcn.0007f58f
movzx ax, bl
pushfd
rcr edi, 0x1d
mov edi, edx
shld dx, di, 4
sub dx, sp
shrd dx, di, 0xa
call fcn.0006dbb9
clc
xor esi, 0xfc6c1108
bt di, sp
push 0x77953ed8
xor edx, 0xf3fc2eb1
test bh, 0xfa
xor ecx, 0x51348bbc
bt ax, 7
stc
xor ebx, 0xd190b17a
clc
xor dword [esp + 4], 0x41
bt sp, 0xf
xor edi, 0x772cf92d
pushfd
xor eax, 0xfdcb458b
cmp ah, 0x5e
cmc
xor ebp, 0x172ee367
test edx, esp
clc
push dword [esp + 8]
popfd
push ebp
push dword [esp + 0x10]
ret 0x14

Function at 0x61d9a
Capabilities:
Encrypt data using aes

Disassembly:
xchg dword [esp + 4], ecx
seta ch
call fcn.00066b11

Function at 0x6319c
Capabilities:
Encrypt data using aes

Disassembly:
lea esp, [esp + 0x28]
je 0x92455
bt di, 0xa
jmp 0x8c2eb

Function at 0x69ee1
Capabilities:
Encrypt data using aes

Disassembly:
push 0xe375ae06
call fcn.000b0bf6

Function at 0x69eeb
Capabilities:
Encrypt data using aes

Disassembly:
shl ecx, 4
cmp edx, 0xaf94934a
mov byte [esp], 0x4e
jmp 0x7975b
mov cl, byte [ecx + esi + 8]
push esi
cmp si, 0xbb73
bt ebx, 0x1b
and cl, 0x50
test dh, 0xde
cmp cl, 0x50
mov byte [esp + 4], ah
lea esp, [esp + 0x30]
jne 0x760fe
call fcn.00059fa3

Function at 0x6b815
Capabilities:
Encrypt data using aes

Disassembly:
mov dword [esp + 0x14], edx
lea edx, [edi*8 + 0x3ea18dc5]
mov edx, 0x163e8
push dword [esp]
mov edx, dword [edx + 0x39362]
jmp 0x92ba8
pushfd
pushfd
mov byte [esp + 4], ah
lea edx, [edx + 0x54e40724]
call fcn.0005e645

Function at 0x6c9e8
Capabilities:
Encrypt data using aes

Disassembly:
lea esp, [esp + 0x10]
jl 0xcd777
pushfd
bt dx, 3
cmp cl, 0x11
jmp 0x809ee

Function at 0x6ca72
Capabilities:
Encrypt data using aes

Disassembly:
xor eax, dword [ebp - 0x128]
rcr esi, cl
sbb esi, esp
mov dword [ebp - 0x12c], edi
shld si, sp, cl
rcr si, cl
mov dword [ebp - 0x118], eax
dec si
btr esi, 1
stc
xor eax, edx
bts si, 0xa
sbb di, 0xcd8f
mov dword [ebp - 0x114], eax
rol di, cl
cmc
movzx ax, bl
sub ax, si
mov dword [ebp - 0x124], edx
cdq
rdtsc
adc al, 0x14
shrd ax, si, 0xf
lea eax, [ebp - 0x12c]
inc si
ror si, cl
mov dword [ebp + 8], 0x356fc
movsx dx, cl
clc
movzx esi, dl
sbb si, 0xf9b5
mov esi, dword [eax + 0x18]
call fcn.000b6075

Function at 0x6ffb8
Capabilities:
Encrypt data using aes

Disassembly:
push esp
pushal
pushfd
movsd dword es:[edi], dword [esi]
push ebp
push dword [esp + 8]
movsw word es:[edi], word [esi]
mov dword [esp], esp
push ebx
lea esp, [esp + 0x34]
jmp fcn.0007f58f
jmp 0x6cc29
mov dword [ebp - 0x10], eax
mov byte [esp + 4], cl
jmp 0xb6b71
pushfd
movsd dword es:[edi], dword [esi]
push 0xd29f5347
pushfd
lea esp, [esp + 0x50]
jmp 0x6d219
Function at 0x70649
Capabilities:
Encrypt data using aes

Disassembly:
test bh, ah
push 0x353bcbb4
and edi, 0xff000000
pushfd
pushfd
mov byte [esp], 0xf9
stc
xor edx, edi
lea edi, [ebx - 0x44df9a97]
not edi
sub di, 0x8196
mov edi, esi
jmp 0x99b2d
add esp, 8
jne 0x4caee
push edi
and edi, 0xff000000
cmp dh, 0x18
bt dx, dx
push 0x819cd92c
xor edx, edi
pop edi
bt cx, sp
add di, bp
mov edi, esi
sub esp, 0xfffffffc
cmc
jmp 0x9b30a
and esi, ecx
clc
pushal
mov word [esp], sp
stc
mov esi, dword [esi*4 + 0x335f8]
push esi
push dword [esp + 0x10]
pushfd
cmp sp, ax
shr edi, 0x18
cmp al, 0xef
movzx edi, byte [edi*4 + 0x339f8]
test ch, 0x94
and esi, 0xff00
test sp, sp
push 0x2f4816bf
test ax, 0x957d
cmp ch, al
xor edx, edi
clc
test ebp, edi
xor edx, esi
sar esi, cl
movsx si, bl
btr si, di
xor edx, dword [eax - 4]
not si
sar si, cl
mov esi, dword [ebp + 8]
call fcn.000685b6

Function at 0x70e73
Capabilities:
Encrypt data using aes

Disassembly:
pushfd
dec eax
lea esp, [esp + 4]
jne 0xb6c80
pushal
lea esp, [esp + 0x20]
je 0x97b3c
jmp 0xad0b5
dec eax
push dword [esp]
pushfd
lea esp, [esp + 0x30]
je fcn.0007f58f
jmp 0x6dada
sal di, 7
adc di, dx
rcr di, cl
inc edi
push 6
shl di, cl
pop edi
call fcn.0007bcb1
call fcn.0008d7b3
call fcn.0009a092

Function at 0x74bc1
Capabilities:
Encrypt data using aes

Disassembly:
clc
neg dl
mov dword [ebp - 0x100], edi
aaa
btr ax, 1
mov dword [ebp - 0xf8], ecx
not ax
cdq
lea eax, [ebp - 0x100]
shld di, bp, cl
bt bx, 2
neg si
mov esi, 0x356fc
lea esp, [esp + 0x6c]

Function at 0x75845
Capabilities:
Encrypt data using aes

Disassembly:
mov edi, 0x265f5
mov byte [esp + 4], 0x4e
mov word [esp], bp
push 0xbb0e5f16
mov edi, dword [edi + 0x5a1e5]
push edi
mov byte [esp], 0xf2
jmp 0x9f3f3

Function at 0x76121
Capabilities:
Encrypt data using aes

Disassembly:
dec eax
jmp 0x8a47b
lea esp, [esp + 8]
je 0x9115d
pushfd
jmp 0x856c6
sar al, 7
bsr eax, edx
mov ah, cl
push 8
das
stc
pop eax
test sp, ax
cmp cx, 0x8439
cmp si, ax
pushfd
pushal
pushfd
push dword [esp + 4]
lea esp, [esp + 0x2c]
jb 0xcd777
lea esi, [ebx - 0x4f823ce7]
pushal
bswap esi
pushfd
mov dword [ebp - 0x10], eax
not si
movzx esi, bl
lea esi, [ebp*4 + 0xe2bdbf5]
mov esi, 0x431c4
mov byte [esp], 0xad
mov byte [esp], 0x5f
lea esp, [esp + 0x24]
jmp 0xa52a6

Function at 0x78275
Capabilities:
Encrypt data using aes

Disassembly:
lea esp, [esp + 0x28]
je 0x97c3d
push 0xc9bb65b7
dec eax
pushfd
pushfd
lea esp, [esp + 0xc]
je 0x9672c
pushal
dec eax
jmp 0x785b1
mov byte [esp + 8], bl
jmp 0xa1d6a
call fcn.0007fb51

Function at 0x78298
Capabilities:
Encrypt data using aes

Disassembly:
pushfd
bt esp, edi
pushfd
mov byte [esp], 0xe2
xor edx, dword [esi]
jmp 0x7029f
bt edi, 0x14
cmp ah, cl
clc
add dword [ebp + 8], 4
pushfd
pushfd
mov byte [esp + 4], cl
lea esp, [esp + 0x10]
jmp 0x7f6cb
movzx edi, byte [edi*4 + 0x339f8]
test ch, dh
cmc
and esi, 0xff00
mov byte [esp + 0x10], 0x90
xor edx, edi
jmp 0xcdfd3
xor edx, esi
dec esi
xor edx, dword [eax - 4]
xor esi, 0xfddbfb8a
neg si
movzx si, al
mov esi, dword [ebp + 8]
sub esp, 0xffffffa8
jp 0x67f89
xor edx, dword [esi]
test ax, 0x3597
bt bx, bp
add dword [ebp + 8], 4
pushfd
push dword [esp]
lea esp, [esp + 8]
jmp 0x7f6cb
Function at 0x785e6
Capabilities:
Encrypt data using aes

Disassembly:
mov dword [ebp - 0x100], esi
pushfd
mov word [esp], sp
lea esp, [esp + 0x44]
jmp 0x7e29c
jmp 0x4e785

Function at 0x78b3f
Capabilities:
Encrypt data using aes

Disassembly:
call fcn.0004e12b
bt edi, 0x19
pushal
mov word [esp + 4], si
cmp byte [esi + 5], 0x16
push dword [esp]
jmp 0x84c5c
lea esp, [esp + 0x28]
jne fcn.0007f58f
pushal
cmp edi, edx
mov byte [esi + 0x64], 1
cmc
sbb edx, edi
daa
aad 0x74
mov esi, dword [ebp + 0xc]
cwde
shld ax, di, cl
sbb dx, 0x2e87
xchg ah, cl
mov edx, dword [ebp + 8]
sar al, 5
push dword [esp]
inc cl
movzx ax, bl
mov eax, dword [esi + 0x13]
ror cl, 7
mov cl, byte [edx + 4]
clc
mov byte [eax], cl
or al, cl
sal al, 3
shl al, 5
mov al, byte [ebp - 1]
pushfd
test al, 0x35
test al, al
jmp 0x518d1

Function at 0x79c6a
Capabilities:
Encrypt data using aes

Disassembly:
pushal
lea esp, [esp + 0x28]
je 0x92455
bt bx, 0xa
pushal
pushal
jmp 0xac223
mov byte [esp + 8], 0xc
lea esp, [esp + 0x40]
ja fcn.0007f58f
not eax
shrd di, bx, 4
xchg di, ax
neg di
mov edi, edx
ror eax, cl
mov edx, dword [edi + 0x5a]
sar eax, 0x15
shr al, 1
shl ah, cl
sub al, 0xaf
mov eax, dword [edi + 8]
cmc
bt bp, 9
stc
shr edx, 4
cmc
stc
test dh, 0x89
cmp eax, edx
pushal
mov word [esp + 4], 0xd513
pushal
pushfd
lea esp, [esp + 0x44]
jae 0xcd777
stc
add dl, 0x65
or dl, 0x1d
push 8
or dx, di
bswap dx
pushal
neg dl
mov edx, dword [esp + 0x20]
pushal
clc
cmp si, dx
pushfd
jmp 0x774b1
cmp eax, 8
push ebx
pushfd
lea esp, [esp + 0x48]
je 0x51c55
cmc
add eax, 0xfffffff0
stc
pushal
pushal
stc
cmp eax, 1
jmp 0x8cbbe

Function at 0x7b995
Capabilities:
Encrypt data using aes

Disassembly:
mov esi, 0x356fc
neg di
xadd dx, cx
not dh
mov edx, dword [eax + 0x18]
bsr cx, dx
add eax, 0x10
bts cx, si
sar ecx, cl
mov ecx, edx
neg di
cmp si, si
shr ecx, 8
xor edi, ebx
rcr edi, cl
stc
add di, 0x9d
mov edi, edx
clc
cmc
mov byte [esp], bl
and ecx, ebx
mov byte [esp + 8], 0x22
mov byte [esp + 4], 0x27
mov byte [esp], bl
mov word [esp], 0xf478
lea esp, [esp + 0x50]
jmp 0xa78e7
mov ecx, dword [ecx*4 + 0x341f8]
clc
shr edi, 0x10
push ebp
and edi, ebx
call fcn.000914ba
clc
cmp eax, 0x10
lea esp, [esp + 0x44]
js 0xa7962
push esi
lea esp, [esp + 4]
jb 0x6dc3f
pushfd
setae ah
cwde
pushal
mov dword [esp + 0x20], 4
movzx eax, cl
not al
lea eax, [ebp - 8]
push ebx
call fcn.000910e3
jmp 0x92aee
Function at 0x7be40
Capabilities:
Encrypt data using aes

Disassembly:
clc
bsf si, sp
pop edi
mov dword [ebp - 0x104], edx
setnp dl
xor si, sp
bswap si
mov dword [ebp - 0xf8], ecx
setae ch
movsx si, dl
push ecx
lea eax, [ebp - 0x100]
not esi
adc esi, 0x887ac1c9
movzx si, bl
mov esi, 0x356fc
add esp, 4
bsf dx, di
rcr di, 9
rcl cx, cl
mov edx, dword [eax + 0x18]
not ecx
sbb ch, 0x2b
test edi, 0xfca1c8b4
push edx
add eax, 0x10
sbb edi, edi
btr edi, 0xe
mov ecx, edx
cmp cx, 0xd669
rcr edi, cl
mov di, bx
shr ecx, 8
push esi
mov edi, edx
mov byte [esp], ah
cmc
and ecx, ebx
test dl, 0x2f
pushfd
cmp al, 0xd4
mov ecx, dword [ecx*4 + 0x341f8]
push esp
shr edi, 0x10
cmp dh, 0xa3
cmc
call fcn.0009b1a9
cmp ah, 0xc4
clc
xor eax, edi
btr di, sp
shld di, sp, 0xd
bsr edi, esi
rcr edi, cl
mov edi, ecx
test cl, cl
clc
and edi, ebx
clc
bt bx, dx
mov edi, dword [edi*4 + 0x335f8]
test di, bx
cmp al, cl
and edi, 0xff00
cmc
stc
bt ecx, 8
clc
xor eax, edi
not edi
rcr di, cl
xor eax, edx
rcl edi, 0x17
adc di, si
mov dword [ebp - 0xf4], eax
shld di, si, 7
adc edi, ecx
bt sp, ax
stc
xor eax, esi
cmp bl, 0x6e
bt di, 0xd
mov dword [ebp - 0xf0], eax
jmp 0x9f664
sub edi, 0x1e545f0b
xor eax, dword [ebp - 0xfc]
rcl edi, 0x13
stc
mov dword [ebp - 0x100], esi
lea esp, [esp + 0x5c]
bsr di, bx
mov dword [ebp - 0xec], eax
bsr si, cx
lea esi, [ebx - 0x5881dc73]
shld si, si, 7
xor eax, ecx
sub di, 0x2fd3
push esp
not si
cmp ch, ch
mov dword [ebp - 0xe8], eax
stc
mov dword [ebp - 0x14], 0xa
jmp 0x69f84
add di, cx
jmp 0x7e282

Function at 0x7c1bc
Capabilities:
Encrypt data using aes

Disassembly:
push dword [esp]
mov esi, dword [esi*4 + 0x335f8]
stc
shr edi, 0x18
test esp, esi
pushfd
cmp ch, 0x5d
movzx edi, byte [edi*4 + 0x339f8]
cmp bl, 0xdc
pushfd
and esi, 0xff00
cmp cl, dh
mov word [esp + 8], 0x1e7
cmp dh, bl
test edx, ebx
xor edx, edi
test dl, 0xc7
clc
xor edx, esi
shl esi, cl
xor edx, dword [eax - 4]
test bp, sp
pushfd
xor esi, 0xf95232d2
jmp 0xa5a5b
and edi, ecx
cmp dl, bl
mov edi, dword [edi*4 + 0x33df8]
jmp 0x84930
and edx, 0xff0000
clc
cmp bl, bl
and edi, 0xff000000
bt si, bp
xor edx, edi
stc
cmp ah, 0x7e
mov edi, esi
stc
cmp cl, 0xae
and esi, ecx
cmc
stc
jmp 0x4cd34

Function at 0x80754
Capabilities:
Encrypt data using aes

Disassembly:
mov dword [eax + 0x18], edx
clc
cmp cl, 0xad
mov byte [esp], 0xa1
bt esi, 0x12
cmp esi, 0x35720
jmp 0x83065
mov byte [esp], al
mov byte [esp + 4], 0x81
lea esp, [esp + 0x58]
jne 0x69fc1
call fcn.000af066
push 0x4d61db88
mov edx, dword [edx + 0x71ae5]
pushfd
lea edx, [edx - 0x273e5f01]
pushfd
push edi
mov word [esp], di
call fcn.000cffb5

Function at 0x80afc
Capabilities:
Encrypt data using aes

Disassembly:
pushfd
lea esp, [esp + 0x48]
jne 0x69fc1
pushfd
pushfd
lahf
bswap eax
mov esi, dword [ebp + 8]
pushfd
lea eax, [ebp - 0x104]
pushfd
xchg dword [esp + 0xc], eax
push dword [esp]
bswap ax
not al
push edx
push dword [ebp - 0xc]
pop dword [esp + 0x10]
call fcn.000ab945

Function at 0x82e91
Capabilities:
Encode data using xor

Disassembly:
lea ebx, [ebx - 0x653d4ca5]
call fcn.000aba48
mov word [esp + 4], 0x5de4
jmp 0x65f02
Function at 0x82eb9
Capabilities:
Encrypt data using aes

Disassembly:
bt ax, 9
cmp esi, 0x35720
pushfd
push esi
pushfd
pushfd
lea esp, [esp + 0x38]
jne 0x69fc1
lea esi, [ebx*4 - 0x20693e96]
mov esi, dword [ebp + 8]
movzx eax, bl
jmp 0x687aa
push dword [ebp + 8]
push 0x9d07fd9e
pushal
pushfd
call fcn.000a68fb
jmp 0x687f2
lea eax, [ebp - 0x104]
jmp 0x7be1c
xchg dword [esp], edx
push 0x331f67e1
call fcn.0009acbc
push dword [ebp - 0xc]
lea eax, [esi*4 + 0x5624ddf9]
lea eax, [esi + 0x1e]
jmp 0x929d1
push eax
jmp 0x6f729
stc
shr edi, 0x18
cmp ecx, eax
movzx edi, byte [edi*4 + 0x339f8]
clc
mov dword [esp], ebp
bt ebp, 0xc
cmp al, dh
xor ecx, edi
clc
test ah, dl
cmp dx, dx
bt ax, 9
and edx, 0xff00
test dl, 0x68
xor ecx, edx
not dx
shl dl, cl
bswap dx
xor ecx, dword [eax - 4]
and dl, 0x27
xor ecx, dword [esi]
rol dl, 1
add esi, 4
inc dh
shld dx, di, 7
mov dword [eax + 0xc], ecx
sal dx, 6
mov edx, dword [eax]
sub esp, 0xffffffb0
jge 0x91510
xor edx, ecx
bswap cx
neg ch
mov dword [eax + 0x10], edx
cmc
bsf cx, cx
bsf ecx, eax
rcl ch, cl
mov ecx, dword [eax + 4]
cmc
xor ecx, edx
and dl, 0x5e
and dh, dh
neg dl
mov dword [eax + 0x14], ecx
cmp cl, bl
and dh, bl
mov edx, dword [eax + 8]
test dh, bh
pushal
cmc
push ebx
xor edx, ecx
cmp ch, 0xe9
push eax
mov word [esp + 0xc], dx
mov dword [eax + 0x18], edx
clc
jmp 0x568df
call fcn.0009fc14
jmp 0x580c4
push edx
mov dword [esp], eax
push ecx
mov dword [esp], ecx
pushal
lea esp, [esp + 0x24]
call fcn.00012f4e
call fcn.0009ad98
pop edx
pushal
pushfd
mov dword [esp], 0x18778d80
push ebp
push dword [esp + 0x28]
ret 0x2c

Function at 0x83a78
Capabilities:
Encrypt data using aes

Disassembly:
lea esp, [esp + 8]
jle fcn.0007f58f
call fcn.00066916
Function at 0x84a2f
Capabilities:
Encrypt data using aes

Disassembly:
jmp 0x54b3e
jne fcn.0007f58f
stc
xadd edx, eax
adc al, 0xa8
mov byte [esi + 0x64], 1
pushal
sal si, cl
mov esi, dword [ebp + 0xc]
pushfd
xadd cl, dh
test ch, 8
mov edx, dword [ebp + 8]
pushal
mov eax, dword [esi + 0x13]
dec cl
push eax
sub cl, 0x10
mov cl, byte [edx + 4]
jmp 0xb0fbb
mov byte [esp + 8], al
mov byte [esp], 0x5a
lea esp, [esp + 0x54]
call fcn.0001a06c
test ah, al
jmp 0x96833
mov byte [edi + 1], 0
jmp 0x4ca46
setae dl
or di, si
add eax, 0x10
stc
mov edx, esi
bts di, 1
shld di, cx, 0xb
bts di, bp
shr edx, 8
pop edi
cmp ebp, 0xd28b655a
shld edi, ebx, cl
lea edi, [edx*4 - 0x5db2c68]
mov edi, esi
cmp dx, 0x34cb
cmc
and edx, ecx
cmp bh, ah
cmc
mov edx, dword [edx*4 + 0x341f8]
clc
shr edi, 0x10
call fcn.00059eb1
movzx si, bl
mov dword [ebp + 8], 0x356fc
neg si
mov word [esp], 0xcba9
shld edi, ebp, 0x16
movsx si, dl
mov esi, dword [eax + 0x18]
jmp 0x8a499
mov dword [ebp + 8], 0x356fc
setno dl
push 0xa2618704
mov esi, dword [eax + 0x18]
ror dh, 6
add di, 0x4380
and dx, 0xd6d8
bswap di
add eax, 0x10
shld di, sp, 0xa
mov edx, esi
push dword [esp]
shr edx, 8
shr edi, 9
bswap di
movsx di, bl
mov edi, esi
call fcn.000ae06f
cmp ebx, ebp
bt edi, eax
cmp byte [esi + 5], 0x16
jmp 0x5390f
mov byte [esp], dl
mov byte [eax], cl
or al, 0xaf
test al, dl
mov al, byte [ebp - 1]
call fcn.00085645
xor eax, dword [ebp - 0x128]
test ax, 0x1e50
sbb esi, 0xbb737a8
shld si, bx, cl
mov dword [ebp - 0x12c], edi
rcr edi, cl
rol si, 5
stc
mov dword [ebp - 0x118], eax
add esp, 0x50
js 0xb161b
xor eax, edx
not edi
mov di, ax
shld si, dx, 0xb
mov dword [ebp - 0x114], eax
pushal
cmc
mov dword [ebp - 0x124], edx
not al
inc si
lea eax, [ebp - 0x12c]
cmc
not dx
jmp 0x95db7
bt sp, 0xc
sar esi, cl
xchg si, di
xor eax, edx
sbb di, 0x8f60
mov dword [ebp - 0x114], eax
inc ah
mov dword [ebp - 0x124], edx
neg di
aas
rol di, cl
lea eax, [ebp - 0x12c]
pushfd
jmp 0x9242d

Function at 0x8535f
Capabilities:
Encrypt data using aes

Disassembly:
jmp 0xa78dc
add dx, 0x98fb
xadd dx, cx
mov edx, dword [eax + 0x18]
or di, ax
not di
add eax, 0x10
cmc
btc cx, dx
rcr ch, 1
mov ecx, edx
and di, 0xac48
adc di, 0x5e1f
shr ecx, 8
btr di, 2
or di, bp
mov edi, edx
jmp 0x60809
lea esp, [esp + 0x4c]
jne 0x74bf5
rcl cl, cl
mov esi, dword [ebp + 0xc]
inc di
das
mov ecx, dword [ebp + 8]
cmp bl, bh
mov edi, dword [esi + 0x13]
cmc
mov ax, 0xbb43
shld ax, cx, 0xd
daa
and dword [ebp + 8], 0
sar ah, 4
aam 0x33
lea eax, [ecx - 1]
clc
clc
add edi, 3
pushal
stc
call fcn.000a00df
bt ecx, 0xb
push edx
and ecx, ebx
lea esp, [esp + 4]

Function at 0x8997d
Capabilities:
Encrypt data using aes

Disassembly:
mov byte [esp + 8], 0x89
mov byte [esp], 0x8c
pushal
lea esp, [esp + 0x2c]
ja fcn.0007f58f
lahf
call fcn.000b3cd1
cmp ch, dl
pushfd
cmp eax, 1
jmp 0x83101
Function at 0x8b4d4
Capabilities:
Encrypt data using aes

Disassembly:
shr esi, 8
bt di, sp
stc
cmp bx, 0xd94f
jmp 0xce2bf
shl ecx, 8
adc esi, 0x5247f932
bt ax, sp
neg si
shr esi, 1
xor ecx, eax
test si, 0x7b83
rcr esi, 0x10
xadd si, ax
neg ah
mov eax, ecx
movsx esi, dl
shr eax, 0x10
btc si, 3
add esi, 0xbdc73daf
and eax, ebx
shr si, 1
btr si, bp
rcl esi, cl
shld esi, edx, cl
mov eax, dword [eax*4 + 0x33df8]
sar esi, 9
neg si
add si, 0x9bca
xor eax, 0x1000000
dec si
mov esi, ecx
jmp 0x561c8
Function at 0x8d307
Capabilities:
Encrypt data using aes

Disassembly:
pushfd
pushfd
push edi
lea esp, [esp + 0x10]
jbe 0x760fe
pushal
test edx, edx
xor si, di
xadd esi, ecx
mov esi, dword [edi + 0x56]
sar cl, cl
mov ecx, eax
pushal
jmp 0x9fc46
shl ecx, 4
cmc
bt cx, di
push 0x984fbdf7
call fcn.0009b1cf
movsx si, dl
lea esi, [edi + 0xb70f00f]
sub si, si
xor eax, edi
bt ax, dx
bswap esi
mov dword [ebp - 0xf0], eax
and si, bp
pushfd
xor eax, dword [ebp - 0xfc]
stc
dec si
adc si, di
bswap si
mov dword [ebp - 0x14], 0xa
bsr esi, esi
lea esi, [esi - 0x2a556c9d]
cmp ch, ch
mov dword [ebp - 0xec], eax
xor si, 0x6322
sal si, cl
xor eax, ecx
movzx si, dl
dec si
shr esi, cl
lea esi, [ecx*8 + 0x76aed56e]
mov dword [ebp - 0xe8], eax
sbb ah, bl
movzx esi, cl
aaa
mov dword [ebp - 0x104], edx
sub dl, ch
pop esi
mov dword [ebp - 0x100], edi
clc
rdtsc
pop edx
mov dword [ebp - 0xf8], ecx
cmp bh, bh
movzx eax, dl
lea eax, [ebp - 0x100]
shld si, bx, cl
call fcn.00051f6c
mov esp, 0xa0fd8af6
xor edi, dword [bp + si - 0x3079]
push ebx
dec edi
sbb al, byte [esi - 0x12]
out dx, al
call 0x2dfb5360
fcom qword [eax]
adc byte [edx - 0x4952f7e4], 0x20
and al, 0xb6
add eax, 0x29a78740
jge 0x9fd00
sti
cmp byte [edi], dl
lea ebx, [edx]
in eax, dx
out 0x56, al
movsd dword es:[edi], dword [esi]
cmp al, 0x92
invalid

Function at 0x8ddb2
Capabilities:
Encrypt data using aes

Disassembly:
mov word [esp + 4], bp
xchg dword [esp + 0x2c], edi
pushfd
mov word [esp], 0x499f
pushfd
mov byte [esp], ah
push dword [esp + 0x34]
ret 0x38
jmp 0xb6c69
mov byte [esp], 0xc5
lea edi, [edi - 0x4744bda3]
jmp 0x4f701

Function at 0x8ddb7
Capabilities:
Encrypt data using aes

Disassembly:
pushfd
push esp
mov dword [ebp - 0x100], esi
push ebx
push dword [esp + 4]
mov byte [esp], 0xcc
pushfd
lea esp, [esp + 0x50]
jmp 0x7e29c

Function at 0x90ee7
Capabilities:
Encrypt data using aes

Disassembly:
lea esp, [esp + 0x14]
jne 0x760fe
pushfd
mov byte [esp], bh
pushfd
mov byte [ebp - 1], 2
pushfd
push 0x782e2825
pushal
push 0xb161ba95
lea esp, [esp + 0x34]
jmp fcn.0007f58f

Function at 0x90f73
Capabilities:
Encrypt data using aes

Disassembly:
lea esp, [esp + 8]
jg 0xb1690
je 0x9672c
pushal
pushfd
mov word [esp], 0xeaef
pushfd
dec eax
call fcn.0005786c
dec eax
push dword [esp + 4]
call fcn.0008b593
aam 0x8a
invalid
stosd dword es:[edi], eax

Function at 0x92177
Capabilities:
Encrypt data using aes

Disassembly:
jmp 0x9af9b
lea esp, [esp + 0x28]
jbe 0x760fe
call fcn.00051f71
sub byte [edx + ebp*8 - 0x63], dh
lds esp, [esi + 0x33]
sbb dh, byte [eax - 0x3be1fb52]
jbe 0x9215f
fidiv word [esi + 0xe]
out 0x2f, eax
ljmp 0xf558