joyce8/EMBER2024-capa huggingface dataset:
Function at 0xc0f598
Capabilities:
Encode data using base64

Disassembly:
inc ebp
mov ebp, dword [edi]
dec eax
mov dword [esp], 0x1e8af02a
dec ecx
add edi, 4
inc ebp
xor ebp, esp
inc ecx
ror ebp, 1
inc esp
mov ebx, dword [esp + 4]
inc edi
lea ebp, [ebp + ebx - 0x7a74918]
inc ecx
movzx ecx, bl
inc ecx
neg ebx
inc ecx
not ebp
push ecx
inc ecx
bswap ebp
jbe 0xc82c9b
not ax
and eax, dword [esp]
lea edx, [edx + eax - 0x2085870d]
dec eax
setns al
xor ebx, edx
add edi, edx
ror cx, 2
ror ax, 0xc1
xadd dword [esp + eax*2 - 0x1f800], ecx
mov ax, word [esi + eax - 0xfc00]
mov cl, byte [esi + ecx - 0x57e3fc02]
dec byte [esp]
jno 0xc94491
not byte [esp]
mov word [esi], ax
sar byte [esp + 2], 0x85
mov eax, 0x42b76cbb
pop ecx
jmp edi
inc ecx
xor ebp, 0xc69b778d
neg cx
inc ecx
neg ebp
dec esi
mov dword [esp + ebx + 8], esp
inc ecx
xor bl, 0x2f
inc ecx
push ebx
inc edx
sets byte [esp + ebx - 0x29]
inc esi
xor dword [esp + ebx*8 - 0x168], ebp
push ecx
dec cl
dec esi
mov esp, dword [esp + ebx*2 - 0x46]
inc ebp
movzx ecx, bx
dec ebp
arpl bp, bp
dec ecx
add ebx, ebp
inc edx
movsx esi, byte [esp + ebx - 0x25]
inc esp
movsx eax, byte [esp + ecx*4 - 0x3ed]
dec edx
dec dword [esp + ebx*2 - 0x4e]
dec esi
mov ebx, dword [ebp + ebx*8 - 0x178]
dec eax
add ecx, ecx
dec eax
mov dword [esp + ecx*8 - 0xfd8], 0x4c899f96
dec ebp
add eax, dword [ebx + ecx*2 - 0x3fc]
dec eax
shr dword [esp + ecx*2 - 0x3e4], cl
btc ecx, 0x8d
dec esp
mov dword [ebp + ecx - 0x21fe], eax
inc sp
xadd esi, ecx
mov edi, esi
movzx edx, byte [esp + ecx - 0x21f0]
dec eax
xor dword [esp + ecx - 0x21fe], ebx
ret 0x18
adc esi, 2
shr ax, cl
jmp 0xc648d8

Function at 0xc13d9f
Capabilities:
Encode data using base64

Disassembly:
jmp 0xe5698c
jmp 0xb79ab2
setp cl
ror edx, 3
xor ebx, edx
add esi, edx
xor dword [esp + eax], esi
ret
and ebx, 0xff
mov dword [esp], 0x6a97748c
mov ebx, dword [ebx*4 + 0xe867b4]
jmp 0x11db2f3
lea esp, [esp + 0x14]
jne 0xe4ae9b
pop ebx
mov edx, 0xd81db1b2
movzx eax, dx
shr edx, 0x69
not ecx
ror ax, 0xcd
dec dl
mov dword [edx + ebp - 0x6c0ed7], ecx
lea edi, [edi + edx*2 - 0xd81db2]
adc dl, 0xc
dec eax
movzx ecx, ax
mov edx, dword [edi + edx*2 - 0xd81dc8]
xor edx, ebx
cbw
xor ecx, ecx
xor al, 0x8f
lea edx, [edx + eax*4 + 0x551cba32]
xadd ecx, eax
rol ecx, cl
sub ecx, 0xa7b31a08
not edx
xor edx, 0xb18d58a6
push eax
dec edx
sar ecx, 0x2c
jns 0xc45a12
inc ecx
mov ecx, 0xe9acb403
inc cx
neg ecx
inc ecx
push ecx
inc ecx
mov edi, dword [edi]
inc cx
inc ecx
dec edi
lea edx, [ecx + ecx - 0x57c88f8]
inc esp
movsx esi, byte [esp + 4]
dec edi
lea edi, [esi + edi + 4]
jg 0x11ce100
mov eax, dword [esi]
lea edx, [esp + 0x3c]
mov ecx, 0x8aa2efaa
bswap ecx
jmp 0xc5ac6e
shr ecx, 8
push 0x5d3b73b8
add word [esp + 4], 0x1193
xor ecx, ebx
inc eax
neg dword [esp + 4]
shr dword [esp + 4], 0xa1
xor ecx, 0xda282613
mov dword [esp + 1], 0xe482538b
push 0xa2bf31b0
push 0xcfacccad
dec edx
push 0x4582e295
jmp 0x11a5b33
Function at 0xc1a600
Capabilities:
Encode data using base64

Disassembly:
neg ecx
ror ecx, 2
xor dx, ax
push eax
js 0x116673b
sub ax, word [esp + edx - 0x4b8a2c14]
add edi, ecx
movsx ecx, dl
push edx
pop ecx
pop ecx
pop eax
jmp fcn.011d0d7c
mul dword [esp + eax - 0x69568a1b]
bswap ecx
xor eax, edx
bswap edx
dec ecx
mov dword [esp], edx
sar ax, 0xa8
not ecx
xor ecx, 0xde00cc98
add al, byte [esp + 7]
shr edx, 0x41
xor ebx, ecx
sal ax, 5
jns 0xb8d714
mov ecx, 0xbfa4f38c
mov edx, ecx
mov eax, edx
sub esi, 4
mov ecx, dword [esi]
sub edx, eax
ror dl, 0x61
not al
xor ecx, ebx
lea ecx, [ecx + edx*8 - 0x4a9658a3]
bts dx, ax
sar al, 0x85
jp 0xb837e4
dec ecx
ror dword [esp + edx - 0xf30b], 0x44
mul word [esp + edx - 0xf30b]
rol byte [esp + edx*4 - 0x12caa], 0x65
rol ecx, 1
push eax
lea eax, [eax + eax*2 - 0x46c39f7f]
xor ebx, ecx
xadd edx, eax
xchg dx, ax
sal eax, 0x23
adc edi, ecx
inc dword [esp + eax - 0x122df]
call fcn.011d78b9
mov edx, 0x3a98972b
sal edx, 0x77
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov ecx, 0x2298bc99
bts cx, cx
lea esi, [esi + ecx - 0x2298be95]
or ecx, ecx
setne cl
not eax
not edx
dec ecx
and eax, edx
mov dword [esi + ecx - 0x2298be00], eax
shl ecx, 0xc9
movzx edx, cx
xor edx, dword [ebp + ecx*2 - 0x62f80000]
mov eax, ecx
xor ecx, 0x37389abf
lea ebp, [ebp + ecx - 0x6449abb]
bts ax, ax
bswap eax
push eax
xor edx, ebx
or cl, 0x3e
neg ax
sub ecx, eax
inc edx
shl word [esp + ecx - 0x54416f0], 0xe6
or al, byte [esp + ecx*8 - 0x2a20b77e]
sub eax, ecx
xor edx, 0x8e159334
push eax
push ecx
inc cx
rol edx, 2
lea eax, [eax*2 - 0x285bfa67]
dec edx
not cx
xor ebx, edx
add edi, edx
movzx edx, al
mov dword [esp + ecx - 0x544e90e], edi
ret 8

Function at 0xc1aa62
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp], 0xab82b282
call fcn.00c04db1
Function at 0xc2c68e
Capabilities:
Encode data using base64

Disassembly:
push edi
mov dword [esp + 4], 0x83d175fd
lea esp, [esp + 4]
call fcn.00c0905c
mov edx, 0x3fa3ee9a
btr dx, dx
jb 0xee610d
add byte [eax], al
add byte [edi + 0x6c], al
add byte [eax], al
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
inc ecx
inc ecx
je 0xc2c72d
insd dword es:[edi], dx
inc ecx
add byte [edx], dh
xor bl, al
invalid
mov word [ecx + eax], cs
add bh, bh
pop es
ja 0xc2c6b0
xor al, 0x48

Function at 0xc2c6e7
Capabilities:
Encode data using base64

Disassembly:
inc esp
and ebx, edi
xadd dx, cx
dec esi
lea edi, [ecx + edi - 0xa0f7]
dec ecx
xor esi, esp
inc ebp
imul eax, eax
dec edi
lea edx, [ecx + ecx*4 - 0x6e4d8b7d]
dec eax
not esi
inc ecx
pop ebp
or word [esp + ecx - 0xa101], 0x62b0
dec eax
dec esi
inc ecx
movsx eax, al
inc ecx
pop esi
inc ecx
mul ecx
dec eax
bswap esi
inc bp
adc edx, ebx
dec ecx
mul ebx
dec eax
sub ecx, 0x34807707
dec eax
sbb esi, edx
inc cl
cdq
inc ecx
idiv cl
dec eax
ror esi, 1
dec ecx
rol ecx, 0x3b
add eax, 0xde037fa0
call fcn.00b6d64a

Function at 0xc5407c
Capabilities:
Encode data using base64

Disassembly:
and edi, 0xff
mov dword [esp], 0x9890cc2a
sal byte [esp + 3], 0x22
push 0x23ab571b
mov edi, dword [edi*4 + 0xc937c8]
not word [esp]
push 0xa35ec86
shr edx, 8
xor edx, edi
or dword [esp + 2], 0x6b15adb4
adc word [esp + 0xa], 0x9612
inc ecx
jmp 0xca525f
xor edx, 0x3b9e1c03
neg dword [esp + 1]
dec eax
push 0xbeac3fb9
call fcn.00c4d516
neg eax
xor eax, 0xa72c3b3c
xor ebx, eax
not word [esp + 8]
and word [esp + 6], 0x3327
inc dword [esp + 3]
adc edi, eax
lea esp, [esp + 0xc]
call fcn.00c38a7e
Function at 0xc559b0
Capabilities:
Encode data using base64

Disassembly:
or dx, word [esp + edx*2 - 0x1fd]
adc dl, 0xbf
xor ebx, ecx
sub edx, 0xc7972f97
add edi, ecx
mov bp, word [ebp + edx*2 - 0x70d1a24e]
mov ecx, eax
call fcn.00c5705b
xor edx, 0x1da8f92c
shl ax, 0xe
lea edx, [edx + eax - 0x3985c19c]
cbw
neg edx
dec edx
ror edx, 1
bswap edx
mov dword [esp + eax*8], ecx
lea edx, [eax + edx + 0x3a855b06]
xor ebx, edx
add edi, edx
xor ecx, eax
neg cx
lea edx, [ecx + 0x3aa1f91a]
mov cl, byte [ebp + eax]
sbb edx, edx
div byte [esp + eax*2 + 6]
cwd
xor al, byte [eax + ebp + 2]
sar word [esp + 5], 4
add dl, 0x9e
adc ebp, 2
sal edx, 0xf9
bts edx, 0x2c
not dx
imul cl
or dword [esp + edx*2 - 0x7801dffa], edx
shr edx, 0x17
movsx ecx, dl
mov word [ebp + edx - 0x78], ax
btc edx, 3
movsx eax, byte [esp + ecx - 0x78]
jb 0xe79c72
mov eax, 0x6a0084b1
sal al, 0xa1
shl al, 0xe4
mov eax, dword [ebp + eax - 0x6a008420]
mov ecx, 0x7aa4e48c
sub cx, cx
mov ecx, dword ss:[ecx + eax - 0x7aa40000]
mov eax, 0x3b17826
imul eax
jb 0x11b4a59
rol dx, 7
adc dl, ch
mov ecx, dword [esi + edx*8 - 0x3fbfc]
btr edx, 0x95
sbb edx, edx
jnp 0xb545ff
lea esi, [esi + edx*2 + 4]
adc dl, dl
rol dl, 0x86
and dl, dl
or eax, ecx
lea ecx, [edx + edx - 0x72d44dfe]
neg ecx
rol edx, cl
not eax
btr edx, 0x3d
xor edx, edx
mov dword [esi + edx*8], eax
movzx eax, dx
sal dx, 0x89
mul dl
add edx, edi
jmp edx
mov dword [esp + edx - 0x70], edi
ret 4
mov dword [ebp + edx - 0xda3d8], ecx
lea ecx, [edx - 0x65647751]
sbb edx, 0x5f313500
mov edx, dword [edi + eax - 0x40efa5a8]
lea eax, [eax + eax*2 + 0x4690389f]
xor edx, ebx
not al
div al
lea edx, [edx + eax - 0x7ee04704]
call fcn.00c2b91d
mov eax, 0xa6b99902
mov ecx, eax
mov ecx, ebp
cdq
sub ebp, 2
mul ax
mov word [ebp], cx
and edx, eax
sbb edi, 4
mov edx, dword [edi]
mov ecx, 0xf3b4511c
inc cl
xor edx, ebx
xadd cl, ah
not edx
sal al, cl
cwde
rol cx, 0xe6
lea edx, [eax + edx + 0x6307892]
div cl
neg edx
lea ecx, [ecx - 0x30daf547]
dec edx
shl ecx, 0x14
adc cl, 0xb1
and ecx, ecx
not edx
jl 0xc81aae

Function at 0xc5ac19
Capabilities:
Encode data using base64

Disassembly:
xor eax, ecx
mov edx, ecx
push ecx
add eax, ecx
and byte [esp + 2], cl
xor eax, 0x27ab0682
call fcn.00b494a7
Function at 0xc5f5d8
Capabilities:
Encode data using base64

Disassembly:
xor edx, ebx
imul cx, ax
shr cl, 0x25
sar cx, 0x4e
xor edx, 0x78060826
pop eax
lea edx, [edx + eax*4 - 0x58a66119]
xchg cx, ax
rol ax, 0xc6
push eax
rol edx, 3
shr eax, 0x82
call fcn.00e627ad
dec byte [esp + eax - 0x6c0bc353]
xor ecx, ebx
add edx, 0xa9ba2f91
dec dl
not edx
not ecx
not word [esp + eax - 0x6c0bc354]
cwde
bswap ecx
cdq
push eax
rol ecx, 1
bswap ecx
neg dword [esp + 8]
sub ecx, edx
sal eax, 0xc8
rol ecx, 2
xor ebx, ecx
pop edx
add edi, ecx
pop edx
pop ecx
jmp edi
call fcn.011d60e6
dec edx
lea ebp, [ebp + ecx - 0x44a5c719]
dec edx
mov dword [esp + ecx - 0x44a5c71b], 0xfc21d3b2
inc ebp
mov ebx, esi
inc esi
and byte [esp + eax - 0x44a5c71b], dh
not dl
inc ecx
movsx ecx, bl
inc eax
not bh
dec ecx
ror ecx, cl
inc eax
and dl, bh
inc esi
sub dword [esp + esi - 0x44a5c717], eax
inc ecx
push eax
inc cx
mov dword [eax + ebp - 0x44a5c71b], edx
inc esi
or byte [esp + eax - 0x44a5c716], cl
inc ebx
mov edi, dword [edi + esi - 0x44a5c71b]
inc ecx
movzx esi, cl
dec ecx
xchg esi, ecx
dec edi
lea edi, [edi + esi*2 - 0x32]
dec edx
lea eax, [esi*4 + 0x56a103b5]
call fcn.011658d2
inc ebp
movzx edx, word [edi + edi - 0x552b]
inc cx
not ebp
shl edx, 6
inc cx
btc esi, edi
dec ebp
lea edi, [edi + edi*4 - 0x154bc]
inc bp
xor edx, esp
movzx esi, di
dec eax
cwde
inc cx
inc edx
inc cx
neg edx
jmp 0x11718df
inc eax
rol bh, 0x24
add di, 0xf507
inc cx
adc edx, 0xf447419
mov dh, 0xc8
inc cx
bts ebx, ecx
inc ecx
dec cl
inc cx
xor edx, 0xf7418092
aad 0x66
inc ecx
ror edx, 1
inc ecx
dec eax
setl al
inc bp
xor esp, edx
inc esp
xor ebx, ecx
dec ecx
div ebp
inc bp
mov dword [eax + ebp - 0x4c40002f], edx
call fcn.00eb75ab
movsx edx, ax
mov ecx, dword [ecx + ebp - 0x6b34d780]
xor al, dh
lea ebp, [ebp + eax - 0x6c0bc351]
ja 0xb82fa6
mov ecx, 0x31bd8bf
movsx eax, cx
mov dx, word [ecx + edi - 0x31bd8bf]
lea edi, [edi + ecx - 0x31bd8bd]
xadd ecx, eax
bts ecx, 0xac
xchg cl, al
movzx ecx, byte [esi + ecx*2 - 0x637637e]
cwde
or al, ah
bts eax, eax
adc esi, 0
lea eax, [eax + eax - 0xec64056]
xor cl, bl
btc ax, ax
rol ax, 0xc1
lea eax, [eax + 0x3f937412]
ror cl, 1
rol ax, 0xe3
jae 0xc24bf2
xor ebx, ecx
sal edx, 0xca
adc edi, ecx
movsx ecx, byte [esp + edx + 4]
mov esi, dword [esi + edx - 4]
cwde
push edx
sub eax, 0xbd2ccb93
pop edx
pop ecx
pop ecx
jbe fcn.01181cee
shr dl, 0xa6
lea esi, [esi + edx - 0x7d1bfe00]
dec edx
shl al, cl
push edx
pop edx
mov ecx, 0xc3a8f8be
mov word [esi + edx - 0x7d1bfe01], ax
mov eax, edx
lea ebp, [ebp + eax - 0x7d1bfe05]
sub eax, eax
mov edx, dword [ebp + edx - 0x7d1bfe01]
push eax
and eax, ecx
jbe 0xb706aa

Function at 0xc62fb8
Capabilities:
Encode data using xor

Disassembly:
lea esp, [esp + 4]
call eax
mov esi, 0xce89cd32
mov ecx, esi
mov edi, 0x9b03ba12
mov ebp, dword [ebp - 4]
btc cx, di
jb 0xc8599b
mov dword [ebp], eax
lea edx, [edi*2 + 0x44ad4112]
neg edx
movsx ebx, dx
mov esi, ebp
xchg edx, edi
lea ebx, [ecx*4 - 0x10c2e87d]
pop ebx
pop edi
pop ebp
jmp edi
Function at 0xc6f8f4
Capabilities:
Encode data using base64

Disassembly:
cdq
bswap ecx
not al
lea ecx, [eax + ecx - 0x4a034287]
imul dx, ax
xor ecx, 0x58a5123e
sal eax, 0xdc
cbw
js 0xe58510
mov edx, 0xdfa5f392
bt edx, edx
mov eax, dword [esi]
mov edx, dword [esi + 4]
jb 0xec5a35
ljmp 0x2dc:0xe343cd3a
neg edx
shl ecx, cl
sbb ax, 0xc180
inc edx
xor ebx, edx
ror ecx, 0x12
adc esi, edx
inc ax
bswap eax
movzx dx, byte [ebp + ecx - 0x42000000]
push eax
or al, 0xb2
add cl, byte [ecx + ebp - 0x41fffffe]
or al, 0x97
shl byte [esp + 2], 0x61
inc eax
adc ebp, 2
xor byte [esp], ah
push eax
not dl
lea eax, [eax + eax*2 - 0xa5789c9]
sbb eax, dword [esp + eax*2 - 0x7f9d68be]
not al
not cl
setp al
and dl, cl
sub eax, eax
mov word [ebp + eax], dx
mov dword [esp + eax*8], esi
ret 4
or ax, ax
adc byte [esp + 6], 0x3d
neg edx
or dword [esp + 4], ecx
adc edx, ecx
sal ax, 0xc1
not ax
je 0x11e17a0
mov edx, 0x990d7589
movzx eax, dx
mov ecx, dword [ebp + eax*8 - 0x3ac48]
div dl
imul ax
sal eax, 0x7d
add al, byte ss:[eax + ecx - 0x20000000]
neg dx
ja 0xc8071c
adc ebp, 1
mov word [ebp], ax
movsx ecx, dx
sub esi, 4
ror ecx, cl
mov ecx, dword [esi + ecx - 0x44fffff1]
mov eax, edx
or eax, edx
xor ecx, ebx
shr dl, 0xe2
bts dx, ax
jb 0x11a5356
mov edx, eax
lea esi, [esi + ecx*4 - 0x1ad67748]
and ax, dx
shr dl, 0x85
mov ecx, dword [ecx + esi - 0x6b59dd1]
shl dx, 0xa7
xor ecx, ebx
ror ecx, 1
bswap edx
sar dl, 0x61
jnp 0xec9272
xor ecx, 0x50208e12
sar eax, 0xec
rol edx, 0x65
push edx
ror ecx, 2
bswap ecx
xor ebx, ecx
not dx
lea edx, [eax + eax*2 - 0x4e57d768]
add edi, ecx
or ax, word [esp + 1]
adc al, dh
pop edx
jmp edi
xor ebx, ecx
call fcn.01186dd6
mov ecx, 0x82142421
mov edx, 0x7a13f636
movzx eax, cl
lea edi, [edi + eax - 0x25]
mov edx, dword [edx + edi - 0x7a13f636]
xadd eax, ecx
xor edx, ebx
sal ecx, cl
sal cx, cl
neg edx
jmp 0xeda8ab
mov cl, byte [esi + 8]
adc esi, 5
call fcn.00ef3f0b
mov ecx, 0x130ddf24
lea edx, [ecx*8 + 0x2e12183d]
lea eax, [edx + edx*4 + 0x183dc325]
mov edx, dword [ebp + ecx*2 - 0x261bbe48]
sar cl, cl
movzx eax, byte [esi + ecx - 0x130ddf03]
btc ecx, ecx
rol cx, cl
xor al, bl
shl cl, 0xa5
dec al
shl ecx, 0x22
sbb cx, cx
imul ecx, ecx
neg al
shr cx, 0xa6
adc al, 0x91
sub ecx, ecx
sbb ecx, ecx
and ecx, 0x2d22128a
ror al, 1
btr cx, cx
not cl
and cl, cl
xor bl, al
add eax, esp
jmp 0xed63a2
sar ecx, cl
mov dword [eax + ecx*4], edx
je 0xea2c6f
lea edx, [edx + eax*2 - 0x621819d6]
jmp 0xc4572c
xor edx, ecx
shr al, 0xc3
ror edx, 3
mov dword [esp], eax
cwde
xor ebx, edx
mov dword [esi - 6], edx
add esi, 0xfffffffa
shr dword [esp + 8], cl
pop edx
pop eax
pop edx
pop edx
jns fcn.011d0d7c
neg eax
inc word [esp + ecx - 0x1c8161fb]
call fcn.00bfd90b
mov eax, 0x2fab9f8e
or eax, eax
movzx edx, ax
mov ecx, dword [esi + eax - 0x2fab9f8e]
inc edx
ror edx, 0xea
and al, al
lea esi, [esi + eax*2 - 0x5f573f18]
lea eax, [edx + edx*4 + 0x101935b2]
bts eax, edx
xor ecx, ebx
inc ecx
mul edx
xchg edx, eax
bswap eax
ror ecx, 2
cdq
sub edx, eax
shl dl, 0xc2
lea ecx, [ecx + edx*4 - 0x41db9f9d]
cdq
shl edx, 0xc1
neg ecx
jmp 0xc2a313
Function at 0xc6fb41
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp], 0xf4019135
push 0x873d3d32
mov ebx, dword [ebx*4 + 0xb7c748]
jmp 0xeaf28a
jmp 0x1191144
xor ebx, eax
and ebx, 0xff
jmp 0xc29a3d

Function at 0xc738aa
Capabilities:
Encode data using base64

Disassembly:
inc dword [esp + 9]
xor bl, cl
call fcn.011b4485
mov ecx, 0x36b9752c
movsx eax, cl
mov edx, dword [esi + ecx*2 - 0x6d72ea58]
lea esi, [esi + eax*2 - 0x54]
sar ecx, 0xb2
xor edx, ebx
xchg al, cl
sub cx, ax
not edx
bswap edx
dec eax
push ecx
ror ax, 0x29
xor edx, 0x4bbae401
xchg dword [esp + ecx - 0xc7e], eax
neg edx
ror ecx, 0xe1
bt ecx, ecx
xor ebx, edx
add ebp, edx
movzx edx, cl
btr ecx, edx
idiv cl
mov dl, byte [esi + ecx*2 - 0xc7e]
shl eax, 0x25
lea esi, [ecx + esi - 0x63e]
xor dl, bl
ror dl, 1
ror eax, 0xb
dec dword [esp + ecx*4 - 0x18fc]
xor cl, ch
not dl
jp 0xc82598
mov ecx, 0x4d2cf591
movsx edx, cx
lea edi, [edi + ecx - 0x4d2cf595]
btr cx, dx
sal cx, 0x8e
mov ecx, dword [ecx + edi - 0x4d2c4000]
sub edx, 0x9f8f5c08
movzx eax, dx
mul al
xor ecx, ebx
dec ecx
bswap eax
sar eax, 0xa4
ror ecx, 2
not dl
jmp fcn.00effffc
jae 0xeecee8
mov eax, 0x15965537
mov ecx, dword [esi + eax*2 - 0x2b2caa6e]
lea esi, [esi + eax - 0x15965533]
xor ecx, ebx
push eax
bswap ecx
rol ecx, 1
movzx edx, ax
add dword [esp + eax - 0x15965537], 0xab8fdb3f
bswap ecx
mul al
ror ecx, 2
pop edx
xor ebx, ecx
btr eax, edx
adc ebp, ecx
mov ax, word [edi + eax*2 - 0x2b2c17a2]
lea ecx, [edx*8 + 0x6037a39b]
xchg edx, ecx
mov dx, word [edi + edx - 0x69692749]
neg ecx
mov cl, byte [edi + ecx - 0x3ed9cf86]
adc edi, 3
shrd ax, dx, cl
push 0x4d212407
mov ecx, 0xc0b030b
movsx edx, byte [esp + ecx*2 - 0x18160616]
mov word [ecx + edi - 0xc0b030b], ax
xadd cl, dl
sbb byte [esp + ecx - 0xc0b0312], dh
mov dword [esp + ecx*4 - 0x302c0c48], ebp
ret
Function at 0xc79dc7
Capabilities:
Encode data using base64

Disassembly:
dec eax
dec edi
inc ecx
neg esi
inc ecx
xor esi, 0x99a48e16
inc ecx
not esi
inc edx
inc ecx
xor esi, 0xd98c2098
dec esp
lea ecx, [edx*4 - 0x7e7fa9dc]
inc ebp
mov ebp, ecx
inc ecx
ror esi, 3
dec esi
mov dword [esp + ebp*2 - 0x43cdb188], esp
sar dx, 0xea
inc esi
xor dword [esp + ebp*2 - 0x43cdb188], esi
dec eax
rol edx, 0xed
mov eax, edi
dec esi
lea esp, [edx + ebp*8 - 0x43684976]
inc ecx
pop esp
dec edx
lea esi, [eax + ecx + 0x76154901]
or edi, edx
cbw
dec ebp
arpl si, si
cwde
sal al, 1
bt ax, 0xa9
dec ecx
adc ebx, esi
dec esp
lea ecx, [eax + edx - 0x38d74ee0]
dec ebp
lea ebp, [ecx + eax*2 - 0x2d6574f6]
mov dx, word [edi + ebp - 0x3f359d0b]
dec ecx
sar edx, 0xe1
adc si, 0x27b3
inc sp
adc ebp, esi
inc ebx
movzx edi, byte [edi + edx + 4]
inc ecx
xor bh, ah
inc ecx
mov ebx, 0xda830f98
inc eax
xor bh, 0x31
mov ecx, 0x14b3f1ba
inc eax
add bh, 0x2c
inc cx
inc ebx
dec ecx
sal edx, cl
jbe 0xe68c53
inc eax
rol bh, 1
dec esp
lea esi, [eax*4 + 0x6bb09ead]
inc cx
add esi, 0x8040bf93
fbld tbyte [ebx + 0x44ceff48]
xor ah, bh
dec ecx
shr ebx, cl
dec eax
rol eax, cl
inc ecx
inc cl
dec eax
adc edi, esp
inc ecx
xor eax, ecx
inc ecx
mov byte [edx + edi], dl
dec edi
mov ebp, dword [edi + edx*2 + 5]
dec edi
lea edi, [edi + edx*2 + 0xd]
inc ecx
movsx edx, dx
dec ebp
xor ebp, esp
inc ecx
and esi, ecx
inc ecx
sal cl, 0x46
shl dl, 0x22
dec ecx
not ebp
mov edi, ecx
dec eax
lea ecx, [edi*8 + 0x31f312b]
js 0xe90e12
dec ecx
inc ebp
dec edi
lea ecx, [esi + edx - 0x745a9ffc]
inc ecx
div ecx
dec ecx
not ebp
dec ecx
inc ebp
dec ebp
xor esp, ebp
dec eax
bt esi, ecx
dec esi
mov dword [ebp + edx*2 - 6], ebp
Function at 0xc7cbde
Capabilities:
Encode data using base64

Disassembly:
lea esi, [esi + edx*8 - 0x70008]
movsx ecx, dx
xor eax, ebx
sub cl, cl
rol eax, 1
neg eax
inc eax
inc edx
xor eax, 0x699dab1b
add cx, dx
rol eax, 2
bswap edx
xchg ecx, edx
lea ecx, [edx + ecx*2 - 0x4efb7059]
bswap eax
btr ecx, edx
adc eax, 0x1f01652e
lea edx, [ecx + edx*2 - 0x6e5d0ed2]
rol dx, cl
ror eax, 3
inc ecx
sal dl, 0x67
xor ebx, eax
inc edx
lea ecx, [ecx + 0x3d2fe40a]
not dx
mov dword [ebp + edx - 0x46662802], eax
lea eax, [ecx*2 - 0x17651e5e]
shr ax, 0xc9
mul dl
mov edx, dword [edx + ebp - 0x46662802]
sal ecx, 0x81
jbe 0xc656e5
push eax
lea edx, [eax + edx + 0x25a4a7ea]
cbw
jb 0xe4e52f
inc edx
mov dword [ebp + esi - 0x3e87040f], edx
dec esi
mov dword [esp + ebx - 0x54331c88], edx
jle 0x11c32fe
dec eax
lea ebp, [ebp + esi - 0x5e9b1b79]
inc edx
xchg byte [esp + edx - 0x2749a9aa], dh
inc ecx
mul bl
inc ecx
mov byte [ecx + esi - 0x5e9b1b00], bh
dec eax
mov dword [esp + esi - 0x5e9b1b00], ebx
ret 8
shl ecx, cl
xor edx, ebx
xadd al, ch
js 0xc597e0
sbb edx, 0xd4a04224
bswap edx
xchg al, cl
lea edx, [edx + ecx - 0x4fd3febb]
xor cx, 0xa599
btc cx, 0x90
dec al
xor edx, 0xc039831d
rol edx, 2
xor ebx, edx
cwde
sal ax, 0xa3
adc esi, edx
inc eax
jmp esi
dec eax
adc edi, ecx
sal eax, 0xed
xadd ax, dx
mov eax, dword [esi + edx*2 - 0x1c008]
jno 0xb7086b
inc edi
lea ebx, [ebx + ebp*8 - 0x6a9fa17e]
inc si
inc ecx
rol ebx, 3
call fcn.00b63675
pop edi
jb fcn.011a3bd5
mov edx, 0x83897415
inc dx
sar edx, 0xd3
mov ecx, dword [esi - 4]
xor ecx, ebx
movsx eax, dl
xor dl, 0x22
shr al, 0xa6
lea ecx, [eax + ecx - 0x4a9658a4]
neg ecx
cdq
rol ax, 0x26
ror ecx, 2
cdq
mul eax
bt edx, edx
dec ecx
rol ecx, 1
xor ebx, ecx
btr eax, edx
jae 0x11bacb6
movzx ax, byte [ebp]
mov ecx, 0x71b83e00
xor cl, byte [ebp + ecx - 0x71b83dfe]
mov edx, 0x1a80ae3a
btr dx, dx
and dl, 0xa9
lea ebp, [ebp + edx*4 - 0x6a02a89e]
shr al, cl
mov word [edx + ebp - 0x1a80aa28], ax
sar edx, 0x50
mov ecx, edx
sar edx, 0xa8
lea edi, [edi + edx - 0x1e]
movzx eax, dx
shr ecx, 0x1c
adc eax, 0x78acd4b7
mov edx, dword [edx + edi - 0x1a]
shl eax, 0xec
xor edx, ebx
ror edx, 3
sub ecx, eax
dec eax
jp 0xecd66e
mov ecx, 0xd29f1ba4
mov edx, dword [edi]
bt ecx, 0x8d
sar ecx, cl
mov cx, word [edi + 4]
mov eax, 0x38033905
sub al, 0x16
mov word [edx + eax*2 - 0x700673de], cx
lea ecx, [eax*2 - 0x217ed97d]
mov edx, dword [esi + eax*2 - 0x700673de]
lea ecx, [ecx + eax - 0x34597d4f]
jb 0xea0fde
ror edi, 1
bswap edi
dec eax
cdq
inc ecx
rol eax, cl
inc edx
lea edi, [edi + eax*4 - 0x381a34c5]
neg edi
inc dx
shr dword [esp + eax - 0x4dc82d30], 0xc6
bswap edi
dec edi
dec esi
mov dword [esp + eax - 0x4dc82d32], esp
inc sp
bts edx, ebp
xor dword [esp + edx*2 - 0x8000], edi
inc ecx
mov esi, ebp
rol dx, 0x44
jb 0xc891d6
inc ecx
pop esp
inc ecx
imul dl
mul edx
rol esi, 0x8d
dec eax
arpl di, di
dec eax
add ebx, edi
call fcn.00b9d292
Function at 0xc83216
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
sbb dword [esp + ecx - 0x83], edx
xor ebx, eax
call fcn.0116e674
syscall
push esi
dec eax
mov dword [esp], 0xa7ae1840
call fcn.00b8835b
mov eax, dword [esi + ecx - 0x20c3ee12]
mov dword [esp + ecx*2 - 0x4187dc26], ecx
xor eax, ebx
not eax
sub eax, 0x83b42304
xor eax, 0xcf2b1abc
and ecx, 0xbca62ea1
not eax
movzx edx, byte [esp + ecx - 0x20822dff]
adc dl, dl
rol eax, 3
lea eax, [ecx + eax + 0x41819988]
xadd edx, ecx
not eax
sub byte [esp + ecx*8 - 0x429], dl
xor dl, 0x9d
and dword [esp + ecx*2 - 0x10b], ecx
ror eax, 3
bt ecx, ecx
inc eax
sub byte [esp + ecx - 0x7f], cl
jo 0xb5aa95
inc ecx
mov edx, ebx
dec edi
lea edi, [edi + ebx*2 - 0x7c5d03fc]
inc ecx
xchg bl, dl
inc ecx
xor ecx, esp
inc esp
mov ecx, esi
inc ebp
xadd cl, bl
inc ecx
movsx edi, bx
xor ecx, 0x199fecb4
inc cx
shr ecx, 0x66
call fcn.00b81dc2
inc ecx
mov ecx, 0x718c6424
dec eax
mov esp, ebp
inc ecx
pop edx
inc ebp
movsx ebx, cl
dec ebp
lea eax, [ecx - 0x594e857d]
inc ecx
pop ebp
inc ecx
movzx eax, al
inc ecx
pop esp
call fcn.00ca7666

Function at 0xc89af8
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp + 4], 0x32ad79b2
inc edx
xor dword [esp + 8], 0x82aad912
xor eax, 0xb59eb026
inc byte [esp + 8]
xor eax, edi
jmp 0xb75c96