joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1142fde
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
ja 0x156fd27
mov edx, 0xf8bbf517
mov eax, esp
dec dl
mov ecx, 0x64
bswap edx
lea edx, [ebp + edx*2 - 0x2deb7870]
jno 0x1038328
mov edx, dword [edi]
mov eax, 0xaeb0549a
movsx ecx, al
xor ecx, ecx
mov eax, dword [edi + ecx + 4]
shr ecx, 8
lea edi, [edi + ecx + 8]
shl cl, 0x21
dec ecx
mov dword ss:[edx], eax
mov eax, dword [esi]
jbe 0x108accf
adc esi, 4
movzx edx, cx
inc cx
dec dl
xor eax, ebx
dec eax
bts ecx, edx
call fcn.00c78c5f
inc edx
xor ebx, edx
dec dword [esp + 4]
cwde
xchg byte [esp + eax*2 - 0x6136], al
add ebp, edx
mov edx, eax
inc cx
ror eax, 0x6f
mov eax, dword [eax + edi - 0x60040000]
mov edx, dword [edi + edx*2 - 0x6000]
adc cl, ch
rol cx, 0x85
mov cl, byte [edi + 8]
jae 0x10e66c7
mov edx, 0x261cd02e
sal dl, 0x61
lea eax, [edx*4 - 0x7bf6405f]
mov edx, dword [esi + eax*2 - 0x38fa0222]
lea esi, [esi + eax - 0x1c7d010d]
lea ecx, [eax + eax + 0x68bf6902]
sbb eax, ecx
xor edx, ebx
push eax
neg ecx
inc edx
sub cx, word [esp + ecx - 0x5e4694dc]
ror edx, 2
sub edx, 0x8782660e
bswap edx
add al, 0x27
shr cl, 0x62
xor ebx, edx
sub eax, 0x2a93d21d
cbw
pop ecx
adc ebp, edx
mov edx, dword [eax + edi - 0x502ffff7]
sar al, 0x83
lea edi, [ecx + edi - 0x7ac395e9]
xor cx, ax
push edx
movzx edx, cx
xor edx, 0xc9bee22
popfd
and ecx, eax
btc ecx, 0x3e
shr ecx, 0xa
jmp ebp

Function at 0x1149c93
Capabilities:
Encode data using xor

Disassembly:
mov dword [esp], 0x5a0f807d
call fcn.0103df9f

Function at 0x114e9c7
Capabilities:
Encode data using base64

Disassembly:
rol ecx, 3
bt eax, 0x36
xor ebx, ecx
push eax
xchg edx, eax
add edi, ecx
movzx eax, byte [ebp + edx*2 - 0x4856b782]
movsx ecx, dx
dec word [esp + ecx*2 - 0xb774]
lea ebp, [edx + ebp - 0x242b5bc0]
shl dx, 0xa8
ror edx, 0x34
xor al, bl
sub dword [esp + ecx - 0x5bb7], ecx
lea edx, [edx + 0xe3da888]
not al
xor ecx, ecx
bswap ecx
sbb al, 0x10
mov dword [esp + ecx*4 + 4], edx
not al
xor al, 0x2a
bswap edx
ror al, 1
add al, 0x85
xchg edx, ecx
xor bl, al
lea eax, [esp + eax + 0x10]
xchg dword [esp + edx*4 + 6], edx
shr cl, 6
rol cl, 0xc2
mov cx, word [edx + eax - 0x5b93ca4d]
mov ecx, dword [edx + eax - 0x5b93ca4d]
lea esi, [esi + edx - 0x5b93ca4f]
add dx, 0x280e
xchg word [esp + edx - 0x5b93f254], dx
mov word [esi + edx - 0x5b930000], cx
pop edx
pop ecx
pop edx
pop ecx
jle fcn.01334555
sbb ecx, edx
sbb byte [ebp - 1], bl
dec edx
cld
pop dword [eax]
sbb byte [ebp - 0x60f828ae], dh
add byte [eax], bl
mov ch, 0x52
xlatb
pop es
lahf
lodsb al, byte [esi]
add eax, 0x4a110177
cmp dl, byte [0xd1362fff]
div byte [ecx - 0x66e7b5be]
add byte [ecx + edi*4 + 0x3eef5ddd], dl
nop
mov ch, dh
pop ebx
cmp byte [eax - 0x1c], dh
in al, 1
jb 0x114ea62
mov ebp, 0xe0650098
jg 0x114ea2d
add ah, al
mov esp, 0xbf51ff17
adc cl, byte [edi - 8]
movsd dword es:[edi], dword [esi]
mov dh, 0x45
out dx, eax
invalid
Function at 0x1157040
Capabilities:
Encode data using base64

Disassembly:
not al
sbb cx, dx
xor al, 0x2a
lea ecx, [ecx + edx*4 + 0x5d9a859d]
sar ecx, cl
ror al, 1
not cx
add al, 0x85
sal dx, cl
shl ecx, cl
xor ecx, 0x4d95ae17
xor bl, al
add eax, esp
shl edx, 0xfe
mov dword [esp + ecx*8 - 0x800], ecx
jb 0x10bc4ce
bswap edx
neg cl
ror dword [esp + ecx*2 - 0x1fd], 0x75
or dword [esp + ecx - 0xfe], ecx
ror edx, 3
pop eax
jmp 0x1473756

Function at 0x115ad77
Capabilities:
Encode data using base64

Disassembly:
dec eax
lea ebp, [ebp + eax*2 - 0x19ced084]
mov dword [ebp + eax*2 - 0x19ced080], edx
not ecx
jne 0x1596645
lea esp, [esp + 8]
jne 0x138280b
mov ecx, 0xa58f50b8
movzx edi, cl
neg ecx
pop edi
mov ecx, 0x8724c1a6
shl ecx, 0xe6
not eax
mov dword [edi], eax
lea eax, [ecx - 0x841affd]
mov edx, dword [esi]
add ecx, 0x43b80b1
adc esi, 4
bswap eax
xor edx, ebx
xor eax, eax
dec al
sal ecx, 0xe9
dec edx
neg ecx
call fcn.010721c7
mov ecx, 0xc92c11be
mov eax, 0x8c141bb4
mov ecx, dword [ebp]
mov dx, word ss:[ecx]
mov ecx, eax
not eax
lea ebp, [ebp + eax - 0x73ebe449]
neg eax
xchg ecx, eax
or eax, 0x3ab19ea6
mov word [ebp], dx
movzx edx, ax
xor cx, 0x7ea4
inc ax
mov eax, dword [edx + esi - 0x9fb6]
lea esi, [esi + edx*4 - 0x27ed4]
xor eax, ebx
inc eax
push ecx
rol eax, 1
not word [esp + edx*2 - 0x13f6a]
lea edx, [ecx*2 - 0x465817f4]
sub eax, 0xfcb5ad86
pop ecx
ror ecx, cl
bt ecx, ecx
ror eax, 1
sub eax, 0x78b483a5
shr cl, 0x25
or ecx, edx
xor ebx, eax
add edi, eax
push edx
pop ecx
jmp edi
call fcn.0149a6b6
cwde
jne 0x10f2592
clc
sub dword [edx - 0x1b], 0xacff04d6
fcmovb st(0), st(0)
mul byte [ecx]
add dword [ecx], ebp
hlt
pushfd
add byte [esi], bl
lcall 0xb42b, 0x23700958
adc bh, bh
push ebp
mov eax, 0x3f10d471
cmp al, 3
adc dword [edx - 6], ebp
ror dword [eax + 0x6d], 1
invalid
not edx
shl dword [esp + 0x10], 0x3c
je 0x151ffdb
not word [esp + 0xe]
rol edx, 2
mov byte [esp + 7], 0xb
xor ebx, edx
add esi, edx
push 0x29389d87
call fcn.01582686
imul edx, eax
neg ecx
sal edx, 0x21
xor ecx, 0x190962c
inc eax
xor eax, edx
sbb ecx, 0xd5a7063c
xchg dx, ax
ror edx, 0x19
shl edx, 0xca
xor ecx, 0x88355da7
xor ebx, ecx
btc dx, dx
add dl, 0xb
rol edx, 0x6c
adc edi, ecx
lea ecx, [eax + 0x1e0da6b7]
push ecx
mov edx, ebp
inc al
jno 0xc76a8a
or cl, cl
xor edx, ebx
sal cx, 1
add ecx, 0x1b8168b3
bswap edx
not edx
or cl, cl
shr cx, 0xe1
dec edx
or cx, 0x6216
rol edx, 2
lea eax, [eax*8 - 0xddc1dd8]
xor ebx, edx
sal ax, 0x6e
shr ecx, 8
adc ebp, edx
jmp ebp
mov edi, 0x9627e7bd
movzx edi, byte [edx]
jmp 0x150d4b1
xor edi, eax
jmp 0x10f254e
call fcn.013363c2
inc edx
add edi, eax
sub edx, edx
lea eax, [edx + edx*8 + 0x3f92fd97]
mul eax
mov edx, dword [esi + edx*2 - 0x1f935a6c]
mov eax, dword [esi + 4]
adc esi, 3
jmp 0x15722ef
push 0xb8056997
xor ecx, ecx
shl dword [esp], 0xe7
call fcn.013ac39e
jmp 0x155dd65
pop eax
jnp fcn.0114844c
mov ebp, dword [esp + 0x2c]
lea esp, [esp + 0x30]
ret
Function at 0x12f9e89
Capabilities:
Encode data using base64

Disassembly:
neg eax
sbb ebp, 1
mov word [ebp], cx
shr dx, 0x62
movzx ecx, dl
mov ecx, dword [esi + ecx - 0xff]
call fcn.014b2c18
add eax, eax
btr eax, eax
sbb edx, 0xf8115296
neg edx
sub edx, 0x76a48a85
not edx
lea edx, [ecx + edx + 0x4b786386]
shl cl, cl
rol edx, 3
xor ebx, edx
shr ax, 0x2c
adc ebp, edx
or al, cl
cbw
bt ecx, 0xb6
mov eax, dword [edi + ecx*2 - 0x676f6710]
push ecx
movzx edx, cl
rol edx, cl
mov edx, dword [edi + ecx*2 - 0x676f670c]
lea edi, [edi + ecx*2 - 0x676f6708]
not word [esp + ecx*2 - 0x676f6710]
mov dword [eax + ecx - 0x33b7b388], edx
lea edx, [ecx + ecx*4 - 0x15c83deb]
sar dl, 3
neg word [esp + ecx*2 - 0x676f6710]
mov dword [esp + ecx - 0x33b7b388], ebp
ret
xor ecx, 0xb2818f09
inc dl
cmovle eax, edx
neg ecx
shr dword [esp], 0x77
btc dx, dx
xor ebx, ecx
add esi, ecx
pop edx
jmp esi
call fcn.0111665d
mov edx, 0xc5a39b00
imul edx, edx
mov edx, dword [ebp + 4]
adc ebp, 7
mov eax, 0x503d799c
jmp 0x14bbe5f
mov dword [esp], 0x1d19cb2b
not dword [esp]
add eax, edx
shr dword [esp], 0x48
jnp 0x14b7e53
mov dword fs:[ecx + eax - 0x503d799c], edx
mov edx, 0xcbb24386
push edx
mov ecx, dword [eax + edi - 0x503d799c]
inc eax
lea edi, [edi + eax - 0x503d7999]
dec dl
neg ax
btr ax, 2
xor ecx, ebx
sal eax, 0x37
cbw
sbb eax, 0x352df0a5
neg ecx
dec ecx
sar dl, 0x81
neg ecx
sar al, 0x84
bswap ecx
btc eax, 0xe
jae 0x10b20fd
movzx ax, byte [edi]
mov cl, byte [edi + 2]
add edi, 2
call fcn.0134ca57
push 0xec1307af
mov dword [ebp - 4], eax
jb 0x10df785
lea edx, [edx*8 - 0x44eb14c4]
btr dx, dx
xor eax, 0x190962c
and ecx, 0x37ad3000
sbb eax, 0xd5a7063c
push ecx
ror edx, 0xc2
neg dx
xor eax, 0x88355da7
dec dword [esp + ecx - 0x32050000]
cmovnp cx, dx
xor ebx, eax
inc dword [esp + ecx - 0x32050000]
shl dword [esp + ecx - 0x32050000], 0x4a
adc edi, eax
dec edx
neg dx
inc cx
mov eax, ebp
sub cl, byte [esp + ecx - 0x32050000]
lea ebp, [edx + ebp - 0xc328b7e]
js 0x101b575
mov dword [esp + ecx - 0x32050001], ecx
mov dword [ebp + ecx - 0x32050001], eax
bts edx, 3
btc dx, cx
jae 0xc9c0ff
pop eax
jb fcn.0114844c
jmp 0x14b6e6a
Function at 0x130f9f0
Capabilities:
Encode data using base64

Disassembly:
sal eax, cl
movzx eax, byte [esi + ecx - 0x44708c26]
dec cx
xor al, bl
neg al
or ecx, edx
lea ecx, [ecx - 0x6455ac5e]
push ecx
xor al, dl
xadd ecx, edx
dec al
or dx, cx
xor ecx, dword [esp]
rol al, cl
not edx
sub al, 0xa5
jmp 0x133c5bc
lea edi, [edi + ecx*2 - 0x60278d2]
ja 0x1331641
shr dl, 0x63
mov dword [esp + ecx*2 - 0x42614692], 0x3173c32
inc al
and cx, dx
setge byte [esp + ecx*2 - 0x42604010]
xor al, 0x17
bt edx, 0x10
pop ecx
inc al
sub byte [esp + ecx - 0x3013c32], ch
btr cx, 0x9f
not al
not dx
rol dword [esp + ecx - 0x3013c32], 0xbf
rol byte [esp + ecx*4 - 0xc04f0c5], 0x83
xor al, 0x8f
neg dword [esp + ecx - 0x3013c32]
xor bl, al
xor dword [esp + ecx - 0x3013c32], 0xd21e6222
xchg byte [esp + ecx*2 - 0x6027863], cl
jno 0x11457ee
inc ebp
lea eax, [eax + ebx + 0x1c7d7cd0]
call fcn.01349cac
mov ecx, dword [esi]
mov edx, 0x8886ba8f
lea eax, [edx*4 + 0x15153389]
lea esi, [eax + esi - 0x37301dc1]
lea edx, [eax + edx*2 - 0x1477b700]
xor ecx, ebx
call fcn.01362e8e
mov eax, 0xc6109a96
lea ecx, [eax*8 + 0x1683edb4]
cdq
lea esi, [esi + ecx - 0x4708c265]
ror ecx, cl
jae 0x10bae3e
shr dx, cl
mov word [ecx + edi - 0x3013c68], ax
pop ecx
jp fcn.012f3110
add ecx, dword [esp + ecx - 1]
push ecx
xor al, 0x39
xadd word [esp + edx - 0x6455ac5b], dx
xor bl, al
sal dl, 0xa4
rol ecx, 0x89
rol dx, 0xe3
lea ebp, [ecx + ebp - 0x54a74539]
shl edx, cl
shl dword [esp + ecx - 0x54a74534], 0xcb
setbe byte [esp + ecx - 0x54a74533]
mov word [ebp + ecx - 0x54a74537], ax
rol word [esp + ecx - 0x54a74531], 0x4f
lea eax, [edx + 0x2d1c78a7]
lea esi, [esi + ecx - 0x54a7453b]
mov ecx, dword [ecx + esi - 0x54a74537]
sete al
bt ax, dx
xor ecx, ebx
not dword [esp + 4]
mul eax
lea ecx, [ecx + edx - 0xe0e687f]
setno byte [esp + eax - 0x783ffff9]
cbw
xor ecx, 0x73b78d0b
imul edx
neg edx
lea ecx, [ecx + edx + 0x7aa180c]
xchg dword [esp + edx*4 - 0x3b9d5c08], eax
setp dl
xchg dword [esp + edx*2 - 0x1dceae02], eax
ror ecx, 2
rol dx, 0x6d
pop eax
sbb dword [esp + edx*2 - 0x1dce55c0], edx
xor ebx, ecx
or dword [esp + edx - 0xee72ae0], 0x328b2f39
cwd
pop edx
adc edi, ecx
sub edx, 0x59989c9f
movsx ecx, ax
jge fcn.01507e07
Function at 0x13120e1
Capabilities:
Encode data using xor

Disassembly:
imul ecx, eax
inc edx
mov dword [esp], 0x681fdc9b
or byte [esp + 3], ch
xchg byte [esp + 1], ch
ror edx, cl
inc dword [esp]
sub al, cl
sbb cx, cx
xor edx, 0x5bb7989f
xadd eax, ecx
dec cl
rol dword [esp], cl
ror edx, 1
xor edx, 0xf12161a0
xor ebx, edx
add edi, edx
mov edx, dword [esp]
call fcn.01596f4f
mov edx, 0x2537a28b
lea eax, [edx + edx*4 - 0x247778ea]
movsx ecx, ax
lea ebp, [ebp + edx - 0x2537a28c]
movzx edx, byte [ebp + edx - 0x2537a28b]
jmp 0x14bfc8e
ror ecx, cl
xor dl, bl
cbw
shl al, 0x81
adc dl, 0x17
not cl
inc eax
ror dl, 1
lea eax, [ecx - 0x776ba200]
and ecx, eax
dec dl
push eax
rol dl, 1
inc dl
shr al, 0xc4
xor dl, 0xad
ror dword [esp + eax - 0x27045d00], cl
ror ax, 0xa1
bswap ecx
xor bl, dl
neg eax
xchg dword [esp + ecx - 0x25d0406], eax
lea edx, [esp + edx + 4]
mov cx, word [edx + ecx - 0x25d0406]
movsx edx, ax
cwde
adc dword [esp + eax*2 - 0x2e80], edx
lea esi, [esi + eax*2 - 0x2e82]
mul ax
pop eax
xchg ah, dl
mov word [esi + edx*8 - 0x1740], cx
jb 0x110268c

Function at 0x131f838
Capabilities:
Encode data using base64

Disassembly:
adc dl, byte [esp + edx - 0x7f]
add al, dh
rol word [esp + edx - 0x7f], 0xf
xor ecx, ebx
inc edx
neg ecx
jmp 0x14750b5
dec eax
shl dl, 1
xor eax, 0x8f3a338f
xor edi, dword [edx]
invalid
push edx
and cx, cx
xor ebx, eax
rol dl, 0xc1
mov dword [esp + ecx*2 - 0x72], 0x183bd585
jno 0x10cd865
adc ebp, eax
call fcn.010a880f

Function at 0x132a2e1
Capabilities:
Encode data using base64

Disassembly:
pushfd
mov dword [esp], edi
push esi
mov esi, 0x2c2d1a89
movzx edi, si
jmp 0xc76de6
jmp 0x111fa8d

Function at 0x133c6cf
Capabilities:
Encode data using xor

Disassembly:
mov dword [esp + 4], 0x8509d983
mov esi, dword [esi*4 + 0x147481c]
shr edx, 8
mov dword [esp], 0x3e871f18
and dword [esp + 2], 0xf2dab92
xor edx, esi
push 0xa18195b0
ror word [esp + 8], 0xcf

Function at 0x1358a14
Capabilities:
Encode data using base64

Disassembly:
dec ecx
not ecx
ror ecx, 2
idiv eax
neg ecx
shl eax, 0x35
xor ebx, ecx
pop eax
add edi, ecx
mov ecx, edx
mov ecx, dword [esi + edx*2 - 0x103a7a94]
rol edx, 0xc7
bts edx, 0x13
lea eax, [edx + 0x13998904]
mov al, byte [edx + esi - 0xe9ea500]
bts dx, 0xa2
lea esi, [esi + edx*2 - 0x1d3d4a02]
shl dx, 0xcd
mov byte [edx + ecx - 0xe9e8000], al
lea ecx, [edx*2 - 0x73dec974]
jnp 0xc9c082
xadd ecx, edx
jmp edi

Function at 0x135fdcf
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], ax
sal cl, 0x23
xor cx, 0xd6aa
imul dx, cx
pop eax
pop edx
pop ecx
jb fcn.012f3110
Function at 0x137ad89
Capabilities:
Encode data using base64

Disassembly:
ror byte [esp + edx - 0x5e180f1e], cl
dec eax
btr edx, edx
btc ecx, edx
bswap eax
btr dx, 0x16
xor ebx, eax
btr ecx, 0x14
add ebp, eax
mov ecx, dword [esi + ecx - 0x5e080f23]
neg dword [esp + edx - 0x5e180f21]
dec dl
mov eax, dword ss:[ecx + edx - 0x5e180f20]
jp 0xcb4117
ja 0xcbb635
adc edx, edx
mov dword [esi], eax
call fcn.01539247
sbb eax, 0x34a8be12
and dx, dx
ror eax, cl
or edx, ecx
sbb eax, 0x5a87103c
rol dx, 0xeb
mov dword [esp + edx - 0x5e184bf9], ecx
neg edx
not eax
pop edx
push edx
bswap eax
jbe 0x10cb056
call fcn.0106d24b
mov ecx, 0x4184fcb2
mov eax, ebp
movzx edx, cx
lea ebp, [ebp + ecx - 0x4184fcb4]
or ecx, edx
mov word [ecx + ebp - 0x4184fcb2], ax
bt ecx, edx
mov edx, dword [esi + edx - 0xfcb2]
setae cl
lea esi, [ecx + esi - 0x4184fbfc]
mov eax, 0xd2bf0b01
push ecx
xor edx, ebx
shl al, 0x45
ror ecx, 0xce
ror edx, 3
sar cx, 0x69
inc edx
rol edx, 1
bswap edx
pop ecx
neg edx
sar eax, 5
xor edx, 0xb63241ae
dec edx
xor ecx, eax
xor ebx, edx
inc ecx
add edi, edx
bswap eax
jmp fcn.0114844c

Function at 0x13883d1
Capabilities:
Encode data using base64

Disassembly:
dec dword [esp + edx*4 - 0x3fffffd0]
inc ecx
push eax
dec esi
lea esp, [esp + 0x20]
inc ebp
mov dword [esp + edx*8 - 0x7fffffc0], edx
dec ebp
lea edi, [edi + edx*8 - 0x7fffffc4]
inc edx
mov ecx, dword [ebp + edi - 0x84]
dec eax
mov dword [esp + edx*4 - 0x3fffffd8], 0x4029300c
inc esp
xchg byte [esp + edx*8 - 0x7fffffbf], bl
movsx eax, bp
inc ecx
xor ecx, esi
inc esp
movzx esp, word [esp + edx*4 - 0x3fffffc6]
not ecx
inc ecx
mul ch
inc ecx
push ebp
ror ecx, 3
inc ecx
xadd eax, ebx
and dword [esp + edx*4 - 0x3fffffbc], 0x47058d34
dec eax
xor eax, edx
lea ecx, [ecx + ebp*2 - 0x33ab44b9]
sar byte [esp + edx*8 - 0x7fffffac], 0xa5
inc ebp
mov edx, eax
dec byte [esp + edx*4 - 0x3fffffcd]
not ecx
inc esp
sbb esp, dword [esp + edx*8 - 0x7fffffac]
inc ebp
add dl, ch
rol ecx, 1
dec eax
cdq
cwd
dec esp
mov dword [esp + edx - 0xffdf], esi
xor dword [esp + edx - 0xffdf], ecx
xadd dl, dh
dec ebp
btc edx, ebp
call fcn.014ae313

Function at 0x138f04b
Capabilities:
Encode data using xor

Disassembly:
mov edi, edx
sar ebp, 0x85
mov dword [esp], ebp
mov ebp, esi
movzx edx, cl
lea ecx, [ecx*8 + 0x17877d99]
pop eax
ja 0x136b923

Function at 0x1392f60
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x18]
jne 0x110e72f
pop ebx

Function at 0x13a34de
Capabilities:
Encode data using base64

Disassembly:
xor eax, 0xf898e39b
dec ecx
call fcn.01552211
mov dword [esp], 0x4f1c52a4
mov dword [esp], edi
mov edi, 0xf78bb2b2
lea edi, [edi*8 - 0x62e9ea59]
call fcn.00c86b3c
shr eax, 8
xor eax, esi
mov dword [esp + 8], 0x8b1f0b9c
inc edx
jmp 0x134a9c7
Function at 0x144d9a0
Capabilities:
Encode data using xor

Disassembly:
xchg bp, sp
aaa
mov eax, dword [0xbdce7cf]
outsd dx, dword [esi]
rcl edx, 1
pop esp
mov eax, dword [0x316f333f]
pop ecx
imul dword [eax]
cmp eax, ebp
adc al, 0x30
sub byte [esi + 0x2e91fea0], dh
pop edx
xor dword [ecx - 9], ebx
sub byte [ecx], bh
call 0xb76d09d0
mov al, byte [0x5a2e91fe]
loopne 0x144d9b2
aam 0x5c
mov edx, 0xbce0977d
lock add ch, byte [ebx + ecx*2 - 0x72]
pushal
pop ds
inc esp
pop es
xor ch, 0xba
int1
add al, 0x7d
jle 0x144da32
add dword [edi - 0x18], ebp
xchg esi, eax
mov byte [0xe2183bf4], al
aaa
sub byte [edi], bl
or esi, ebp
cmp byte [ecx], bh
mov bh, 0xf5
jecxz 0x144da6e
cmp dword [edi - 0x6a801c0b], esi
xchg ebp, eax
jp 0x144d9f8
fidiv word [edi + eax + 0x51471e30]
push ecx
mov dword [0x83219c06], eax
jbe 0x144d9ea
inc ecx
push esp
xchg ebx, eax
and dword [eax + ebx*8 + 0x566f1da7], esi
dec ebx
out dx, al
cmpsd dword [esi], dword es:[edi]
sbb eax, 0xee4b566f
push 0xf3a85055
mov ecx, 0xa941724c
push eax
push eax
jns 0x144da06
mov al, 0xea
sbb bl, ch
std
out 0x9a, eax
xchg ecx, eax
sub al, 0x52
adc al, byte [edx - 0x5b]
imul edx, esi, 6
sub al, 0xf0
imul esp, ebx, 0xffffff80
jle 0x144d9e5
jmp 0x144d9d1
sahf
aam 0x4e
rcr bh, cl
out 0x89, eax
pop ss
mov al, byte [0x59de420e]
retf
jg 0x144da52
test byte [edi + ebx*8], ch
mov esi, 0x5a50b20
loope 0x144da8a
add eax, 0xb6b535e1
mov ch, 0xb6
sbb bh, byte [ecx + 0x66]
movsb byte es:[edi], byte [esi]
inc ebp
fsubrp st(6)
retf 0x9e06
rol byte [ebp + 0x6c], 1
arpl si, bp
xor edx, ebp
out 0xb3, eax
mov bh, 0xe6
ja 0x144da49
inc ebx
idiv ebp
clc
sar byte [edx + 0x52c5dca4], 0x47
pushal
loopne 0x144daae
bound ebp, qword [edi + 0x64d034b7]
lds eax, [ebx - 0x22c0bad0]
int3
scasd eax, dword es:[edi]
mov bh, 0x34
shl byte [ebp + eax*8 - 0x7d], 1
xor byte [ebp + 0x3f], al
invalid
je 0x144da33
and esp, eax
lcall 0xd924, 0x5209ce2a
and dword [ebx + 0xa919310], 0x874b74b6
jl 0x144daed
push es
sbb eax, 0xc1dd2bc7
push ebx
stosd dword es:[edi], eax
cmc
pop esi
or dl, byte [esi - 0x64]
ror ecx, cl
dec esp
scasb al, byte es:[edi]
cdq
adc eax, 0xe1c056e2
dec ebp
push 0xe422bf1c
rol dword [ecx + 0x7f], 1
cmpsd dword [esi], dword es:[edi]
in al, 0x5e
mov edi, 0xc420e52d
cmp ebx, dword [edx]
sub byte [edi + 0x18c02ceb], 0xd8
mov edx, 0x6b780cec
invalid
Function at 0x149dbd5
Capabilities:
Authenticate hmac

Disassembly:
push 0x77b3c08a
mov ebx, dword [ebx*4 + 0x1588540]
ror byte [esp], 0xc7
jae 0x14e5604
btc cx, 5
xor edx, ebx
push eax
or dword [esp + 3], ecx
dec edx
not cl
not edx
xor ecx, dword [esp]
sbb edx, 0x7892a030
ror eax, cl
ror edx, 3
inc ecx
shr dword [esp + ecx - 0xb94cfaf], cl
setae cl
xor ebx, edx
add esi, edx
call fcn.0131ea98
mov ebp, 0x45032582
inc ecx
mov ebx, 0xc394705
inc esp
movzx eax, ch
dec ebp
lea edi, [edi + ebp - 0x45032586]
inc edi
mov eax, dword [edi + ebx - 0xc394705]
dec esp
lea edx, [ebp*2 - 0x79e234ce]
inc ecx
movsx ecx, dl
inc eax
movsx edx, ch
inc ebp
xor eax, esi
dec esi
lea ebp, [edx + ebx*4 - 0x56ec867a]
xor bp, bp
inc esi
lea eax, [ebp + eax - 0x62a83f14]
inc cx
and ebp, 0xf41b501
mov dh, 0xf2
inc ecx
xor eax, 0x42b943a9
inc cx
not ebx
inc ecx
sub eax, 0x93ae9534
inc cx
inc ebp
inc ecx
xor eax, 0xce97b3bf
inc ecx
push esi
inc ecx
movsx eax, dl
mov ebx, 0x1394d88
inc esp
movsx esp, cl
inc esp
xor dword [esp + ebp - 0x45030000], eax
neg ebx
cmovle ecx, esi
inc ecx
setle ah
inc ecx
pop esi
dec ecx
sar esp, cl
dec ebp
arpl ax, ax
push edx
xchg byte [esp + ebp - 0x4502fffa], al
dec ecx
adc edi, eax
inc cx
xor eax, dword [ecx + ebp - 0x45030000]
inc di
mov ebx, dword [ecx + edx - 0x10241634]
dec esi
lea ecx, [ebp + ecx - 0x4502fffe]
dec eax
neg ecx
inc cx
add eax, ebx
or cl, 0x17
neg cx
shl bp, 0xef
inc cx
mov dword [ecx + ebp - 0x45030000], eax
add bp, 0x61b2
dec eax
mov dword [esp + ecx*2 + 0x1ffbe], edi
ret
xor ebx, edx
and ebx, 0xff
jmp 0x139ccff
shr edx, 8
jmp fcn.013a5bda

Function at 0x14b2c18
Capabilities:
Encode data using base64

Disassembly:
xchg dh, dl
adc esi, 3
mov dword [esp], 0xb03fa123
not al
add dl, byte [esp]
xor ecx, ebx
or dx, dx
cwde
btc edx, eax
lea ecx, [ecx + eax*4 - 0x1032bf91]
shr eax, 0xff
neg ecx
xchg dword [esp + eax*2], edx
sar ax, 0xaf
sal eax, 0x42
rol ecx, 2
shr dword [esp + eax*8], 0xfc
jbe 0x14e98c1
push 0x87b11e2a
lea esp, [esp + 0x14]
jne 0x14e32d2
mov edx, 0xfaa88388
movsx ebx, dl
pop ebx
mov ecx, 0xda82d5ae
not ecx
not eax
mov dword [esi + ecx - 0x257d2a51], eax
lea edx, [ecx*4 + 0x1f1bc0a7]
movzx eax, cx
inc edx
lea edi, [ecx + edi - 0x257d2a55]
imul ax
mov ecx, dword [edi + eax*2 - 0x15b42]
add ax, 0xab3f
xor ecx, ebx
sal al, 0x41
bswap ecx
jbe 0x14eb921
stc
dec edx
nop
add dword [eax], edi
mov dh, 0x6a
add dword [edi], eax
das
aas
cmp eax, 0x22b901a1
in eax, dx
add al, bl
jmp dword [esi + ecx - 0x6ae09f9]
mov ebx, 0x19035a20
shr ebx, 0xa8
movzx ebx, byte [ecx + ebx - 0x19035a]
xor ebx, eax
and ebx, 0xff
push 0x64bec193
mov ebx, dword [ebx*4 + 0x137c698]
inc word [esp + 1]
shr eax, 8
push 0xb1b40aa
xor eax, ebx
inc ecx
xor eax, 0x3d0d4180
push 0xe22c6e28
call fcn.012fdd27
cmp bp, ax
ror ecx, 1
rol eax, 0xf0
btc eax, 0x31
cwd
dec ecx
cwd
btr eax, edx
bswap ecx
imul edx
ror eax, 0x23
push eax
xor ebx, ecx
add ebp, ecx
mov ecx, eax
add dword [esp + eax*4], ebp
ret
Function at 0x14b6d2a
Capabilities:
Encrypt data using rc4 prga

Disassembly:
inc dword [esp + ecx - 0x820d]
adc ax, word [ebp + ecx*2 - 0x10426]
lea ebp, [ebp + ecx - 0x8211]
lea esi, [ecx + esi - 0x8214]
mov edx, ecx
movzx edx, byte [esi + ecx*8 - 0x41098]
or cl, byte [esp + ecx - 0x8205]
xor dl, bl
inc dword [esp + ecx - 0x823b]
xchg word [esp + ecx*2 - 0x1047a], cx
sub dl, cl
and ecx, dword [esp + ecx*8 + 4]
neg dl
not dword [esp + ecx*2 + 5]
not dl
inc byte [esp + ecx*2 + 0xf]
rol dl, 1
sar word [esp + ecx + 0xa], 0xa2
add ecx, 0xe481ce0f
not cl
dec dl
rol dl, 1
call fcn.01092dd4
Function at 0x14d6b69
Capabilities:
Encode data using base64

Disassembly:
btc eax, eax
bswap ecx
xor ebx, ecx
inc dx
xchg edx, eax
add esi, ecx
mul eax
mov eax, ebp
ror dl, 5
sal edx, 0x33
lea ebp, [edx + ebp - 0x62a80004]
mov dword [ebp + edx - 0x62a80000], eax
movzx eax, dx
jp 0x112164c
mov eax, 0xaf996e93
mov edx, 0xcd108029
lea eax, [edx*4 + 0x373088bf]
mov ax, word [eax + esi - 0x6b728963]
movzx ecx, dx
mov cl, byte [ecx + esi - 0x8027]
not edx
and edx, 0x7d905ea7
lea esi, [edx + esi - 0x30805e84]
sar dl, 0x45
shl ax, cl
mov ecx, edx
push ecx
ror ecx, cl
mov word [esi + ecx*2 - 0x100bdf86], ax
sar cl, cl
lea edi, [edx + edi - 0x30805f00]
mov eax, edx
dec dword [esp + edx*2 - 0x6100bdf8]
cwde
mov edx, dword [edx + edi - 0x30805efc]
and dword [esp + ecx - 0x805eff8], 0x85a66719
xor edx, ebx
dec eax
call fcn.0110eb5e
mov eax, 0xf523439b
movzx ecx, ax
mov dl, byte [ebp + ecx*2 - 0x8736]
btr cx, 0xb2
movzx ax, byte [ebp + ecx - 0x4399]
lea ebp, [ebp + ecx - 0x4399]
call fcn.01397978
or dh, byte [esp + edi*8 - 0x10eefed2]
mov esp, 0xcce8ffff
xor dword [edx], 0xa
mov ah, 0xfc
add dword cs:[ecx], edx
out dx, eax
cmc
loopne 0xc6f5a4
push 0xb5ef37b8
and eax, 0x59ccae
invalid
mov esi, dword [esp + esi - 0x54215c1b]
lea edi, [edi + edi - 0x567a0ed5]
mov edi, dword [esp + edi - 0x135dac2d]
lea esp, [esp + 0x14]
lea edi, [esi + esi*8 + 0x3fbfa02a]
jmp 0xca49ec
mov dword [esp], 0xcb878537
rep movsb byte es:[edi], byte [esi]
or byte [esp + 7], 0x28
js 0x1533dbb
mov esi, 0x54215c27
push dword [esp + 8]
popfd
jmp 0x1387ddf
xor ecx, ebx
mov edx, 0x9936b239
shr dl, 0x27
mov eax, edx
xor ecx, 0x1b196e97
shr dx, 0xa2
ror ecx, 1
bt dx, 0x30
inc dl
bswap ecx
neg ecx
jmp 0xc6f4e3