joyce8/EMBER2024-capa huggingface dataset:
Function at 0x111532f3
Capabilities:
Encode data using base64

Disassembly:
inc ecx
setle al
or edx, edi
dec edx
xadd dword [esp + esi*2 - 0x3b316232], eax
inc edx
mov dword [ebp + esi - 0x1d98b115], edx
inc esi
mov byte [esp + esi - 0x1d98b116], ah
inc ecx
neg esp
dec esi
mov ebp, dword [ebp + esi - 0x1d98b115]
mov esi, 0x2f2f9a25
dec ebp
lea esi, [edx + 0x730e05b2]
dec eax
cdq
inc ecx
mov cl, byte [esi + ebp - 0x730e05d2]
dec edx
idiv dword [esp + edx - 0x2c]
call fcn.118d36dc
setne byte [esp + 5]
inc ecx
neg edx
inc esp
mov esi, edi
dec ebx
lea esi, [ebp + ebp - 0x7379f4f9]
dec eax
or dword [esp], 0x24219203
inc ecx
bswap edx
inc ecx
not ebp
inc edx
adc dword [esp + ebp - 0x6b7e9a7e], esi
inc ecx
not edx
dec di
inc esi
lea edx, [edi + edx - 0x57d7d9c7]
dec esi
mov dword [esp + ebp - 0x6b7e9a7e], edi
inc esi
xor dword [esp + ebp - 0x6b7e9a7e], edx
dec ecx
not esi
inc ecx
sal dh, 0x22
inc ecx
pop edi
inc ecx
adc esi, ebp
inc esp
mov esp, esi
dec ebp
arpl dx, dx
dec ebp
add ebx, edx
neg di
dec edx
mov edi, dword [ebp + ebp - 0x6b7e9a7e]
mov ecx, 0x30e8bb5
inc esp
mov eax, dword [edi + esi - 0x21077088]
dec edx
lea eax, [0x1c268a86]
inc cx
adc ecx, 0xf7483aa3
ror byte [eax - 0x73], cl
lodsb al, byte [esi]
jne 0x10d19f39
push ds
int1
mov ebp, 0xd1b70f44
inc esi
mov dword [ebp - 0x420ee110], eax
jnp 0x10d35e1c
dec edx
lea ebx, [ebx + esi - 0x3d57]
inc ecx
push eax
inc cx
bts ecx, 0xa2
inc edx
setae byte [esp + esi - 0x3d55]
movzx eax, word [edi + ebx - 0x1ffff]
xor cl, 0x22
inc cx
xor eax, edi
rol ax, 1
jmp 0x111635ec
inc ecx
inc ch
cwd
inc esp
xor dword [esp + edx - 0xfff7], eax
dec eax
mov dword [esp + edx*8 - 0x7fff8], 0x1d98b119
dec esp
mov edi, dword [esp + edx - 0xfff7]
dec eax
mov dword [esp + edx - 0xfff7], edi
and dword [esp + edx - 0xfff8], edx
dec ebp
arpl ax, ax
inc ecx
pop esi
jae 0x111aa0c7
inc ecx
mov esi, 0x9b000d92
inc ecx
xor ecx, 0x79a1e41a
inc cx
sar eax, cl
push eax
dec esi
mov dword [esp + ebp*2 - 0x1b24], edi
mul dl
inc esi
xor dword [esp + ebp - 0xd92], ecx
inc ecx
pop edi
inc ecx
shl dh, 1
dec ebp
arpl cx, cx
inc esp
imul ebp, eax
dec ebp
add ebx, ecx
dec al
je 0x10d19eb9
inc ecx
push esi
mov esi, dword [ebp]
mov edi, dword [ebp + 4]
dec esp
sub esp, edx
cwd
inc ecx
and ecx, ebp
inc ecx
mov cl, byte [esp + ebp + 0xe3]
dec edx
lea ebp, [ebp + 0xe1]
call fcn.118c95ea
push 0xfa0dc21b
neg word [esp + 2]
dec eax
mov eax, dword [ebp]
inc ecx
mov eax, 0xf2921531
inc ebp
movsx ebp, al
dec edx
mov ecx, dword [ebp + ebp - 0x29]
dec edi
lea edx, [eax + ebp*2 - 0x3ee3b75]
mov edx, 0x5d263a08
call fcn.1118a6ae
jmp 0x118bfc03
call 0x10d4282b
movsx edx, cx
jmp 0x118f0202
dec ebp
adc ebx, eax
btr di, 0x97
dec eax
rol dword [esp + edx*2 - 0x1fffe], cl
rol dword [esp + edx - 0xfffe], 0xd5
mov edx, dword [ebp + edx*2 - 0x1fffe]
inc ecx
mov ecx, 0x338abe28
inc ecx
mov edi, dword [esi + ebp - 0x1d98b115]
inc esi
movsx esp, word [esp + esi - 0x1d98b119]
inc sp
imul esp, eax
not edx
inc edx
xor dword [esp + esi - 0x1d98b115], 0x40ba02d
inc esi
movzx eax, word [esp + esi*2 - 0x3b316232]
not edi
jae 0x10d05228
Function at 0x1115ea04
Capabilities:
Encode data using base64

Disassembly:
inc ecx
mul ebp
dec edx
lea ebp, [ebp + esi - 9]
jo 0x10d3dc00
adc eax, 0xec1ee6
jbe 0x1115ea84
lea eax, [ebx + 0x29]
wait
dec dword [ecx + 0x21]
mov cl, 0x46
push ebp
wait
dec dword [ecx + 0x11]
push cs
cmp cl, bh
mov dword [esi - 0x32f7501], eax
mov dword [0xbd552b09], eax
cmp eax, 0x7a1dd11b
sbb dword [edx + ebx - 0x49], ebx
daa
lodsd eax, dword [esi]
aam 0x7d
pop ebx
aaa
jbe 0x1115eaa9
wait
adc eax, 0x19ee01a9
div dword [eax - 0x6c]
mov al, 0xb6
mov al, 0x63
inc ecx
not dword [edi - 3]
inc dword [ebx + 0x22]
inc ecx
iretd
mov ebx, 0x74c13e3b
and al, 0
wait
invalid

Function at 0x1115ea71
Capabilities:
Encode data using base64

Disassembly:
bt cx, cx
mov ecx, dword [ebp + ecx - 0xf00c]
adc ebp, 3
push 0x3e3bbb0a
sal dword [esp], 0x9b
jne 0x118fa301
inc ecx
push 0xbd02616f
invalid

Function at 0x1115f4e1
Capabilities:
Encode data using base64

Disassembly:
xadd al, dh
mov edx, dword [edi + eax - 0x1809de8d]
mov dword [esp + eax - 0x1809de8d], eax
xchg word [esp + eax - 0x1809de8d], ax
push eax
xor edx, ebx
bswap edx
or word [esp + eax - 0x1809de87], ax
or ecx, 0xee14d73c
sub al, 0xa8
not edx
and al, ch
sal cx, 0x6e
neg cl
dec edx
not edx
inc cx
rol edx, 2
xor ebx, edx
add esi, edx
not ecx
mov dx, word [ebp + eax*2 - 0x3013bdca]
shl ax, 0xee

Function at 0x11163e4a
Capabilities:
Encode data using base64

Disassembly:
jmp 0x119004f9
inc eax
sal dword [esp + 8], 0xf2
sal word [esp + 9], 0x6f
neg eax
not eax
shr word [esp + 9], 0xeb
jp 0x10d65d98
dec eax
mov esi, dword [ebp]
inc ecx
mov esi, 0x5d8b200b
dec edi
lea ebp, [esi + esi - 0x186ae25d]
mov edx, 0x5f0b4a9c
inc bp
mov ecx, dword [esi + esi - 0x5d8b200b]
dec eax
lea ebp, [edx + ebp - 0x5f0b4a96]
call fcn.118e20ef
mov eax, 0x320b9c8f
rol eax, 0xbb
mov edx, dword [edi + eax - 0x79905ce8]
xor edx, ebx
movsx ecx, ax
sub ecx, eax
shr ecx, 0x93
rol edx, 1
sub cl, ah
not edx
push ecx
neg eax
dec edx
bt ecx, ecx
bt eax, eax
ror edx, 2
sal al, 0x23
sub dword [esp + ecx - 0x1072], 0x74bf2d02
xor ebx, edx
inc word [esp + ecx - 0x1070]
add esi, edx
mov edx, dword [ebp + ecx*8 - 0x8390]
neg ecx
not al
not dword [esp]
mov eax, dword [ebp + 4]
shr cx, 0x41
or cx, cx
mov dword [esp], ecx
mov ecx, dword [ebp + 8]
idiv ecx
mov ecx, dword [esp]
mov dword [ebp + 4], edx
sub dword [esp], ecx
inc word [esp]
mov dword [ebp + 8], eax
mov edx, ecx
mov eax, ecx
setns dl
mov ecx, dword [edi - 8]
sete dl
sbb edi, 8
inc dl
jl 0x10d19d4a
mov dword [esp], eax
xor ecx, ebx
sal edx, 0x47
lea ecx, [ecx + eax - 0x78dee321]
pop eax
add ax, dx
rol ecx, 1
cwd
rol al, 0x21
seto dl
neg ecx
xor ecx, 0x64b61c91
shr edx, 0xbd
or ax, dx
sar eax, 0x86
xor ebx, ecx
bts ax, 0x37
mov dword [ebp + edx*4 - 0x1c], ecx
bts edx, 0x19
sbb eax, edx
imul al
jmp esi

Function at 0x11165bac
Capabilities:
Encode data using base64

Disassembly:
call fcn.10d3aa59
dec ebp
lea ebp, [eax + edx*4 - 0x9f5737a]
dec ecx
mov dword [esi + ebp - 0x2da94df3], edi
dec esi
lea esp, [ebp*2 + 0x519fce1f]
inc ecx
and ecx, eax
dec eax
lea ebp, [ebp + ecx - 0x178d0818]
dec eax
lea edx, [ecx*8 - 0x11f273e2]
inc ecx
push esp
inc ecx
pop esp
ja fcn.10cf108c
Function at 0x11165cbd
Capabilities:
Encode data using base64

Disassembly:
inc ecx
bswap edx
shr edx, cl
inc ecx
push edi
inc cx
ror ecx, 0x23
inc esp
or ecx, eax
inc esp
xor dword [esp + edi - 0x2c3905fc], edx
inc ecx
mov edi, 0x653fd3a3
inc eax
dec dh
dec eax
cmovno eax, esi
inc ecx
pop edi
inc ebp
mov esp, eax
inc ecx
btr ecx, edx
cwd
dec ebp
arpl dx, dx
bt eax, eax
dec esp
lea ebp, [esi*4 - 0x615ffa67]
ror di, 0x44
dec ebp
add ebx, edx
shr esi, cl
push eax
dec esp
mov edx, dword [edi + ebp - 0x2c39c05f]
call fcn.118da378
inc esp
bts esi, ebp
dec eax
mov dword [esp + edi - 0x72275b2c], esi
inc ecx
dec esi
dec esp
add dword [esp + esi - 0x1024], ecx
jo 0x10cde818
inc ecx
ror esi, 1
inc eax
not dh
mov eax, 0x4d8e899e
inc eax
or bh, byte [esp + esi - 0x10c9]
dec esi
mov dword [esp + ebp - 0x24], edi
inc ecx
btr ebp, 0xbb
inc dword [esp + esi - 0x10cf]
inc esp
xor dword [esp + edi - 0x72275b27], esi
inc ebp
movzx edi, cx
sal dword [esp + esi*2 - 0x21a3], 0x8a
inc ebp
movzx edx, ch
dec esp
mov edi, dword [esp + edi - 0x72275b27]
dec ebp
arpl si, si

Function at 0x1116b1bb
Capabilities:
Encode data using base64

Disassembly:
sbb dl, 0xd
inc ecx
rol al, 0x83
inc dx
add dword [esp + ecx*8 - 0x1d], edi
not dl
inc esp
xor bh, dl
call fcn.11907008
inc eax
xor dh, 0x19
inc eax
dec dh
dec ecx
not esp
inc eax
not dh
inc ecx
ror dh, 0x81
dec eax
not edx
inc esp
xor bh, dh
inc bp
or esp, ecx
dec eax
dec edx
cwde
dec eax
adc esi, esp
rol cx, 0x4b
add al, byte [esi + edi*2 - 0x658]
call fcn.118bf54a
dec edx
mov dword [esp + ecx - 4], 0xc38b313c
xor dl, 0x24
inc dx
rol dword [esp + ecx - 1], 1
not dl
inc cx
neg eax
inc bp
cmovl esp, esi
jp 0x10ced7e0
dec ebx
lea eax, [ebp + ebp - 0x5d4e675c]
mov edi, 0xb792e4bd
mov dl, byte [ebp + eax*2 - 0x7775b3ea]
dec ebx
lea esi, [ebp + ebp*2 + 0x151d6022]
inc ecx
mov edx, 0x7b18d797
inc ebp
movzx eax, bp
dec edx
lea ebp, [ebp + ebp - 0x4c84a0a7]
inc esp
bt eax, eax
inc eax
adc dh, 0x8d
jle 0x118c5133
mov eax, 0xaa37b012
cwde
xor edx, ebx
sub eax, eax
mov ecx, eax
neg edx
shr ecx, 0x7e
shr al, 0x65
rol cx, 0x2e
sbb edx, 0xb92f7290
xor edx, 0xf42b2c00
not ecx
btr eax, 0x85
lea edx, [edx + eax*2 + 0x1e227f87]
call fcn.111a57e3
inc ecx
mov esp, 0x2e8133a7
inc ebp
movsx edx, ah
inc ebp
mov ecx, edx
dec edx
lea ebx, [ebx - 0x5d026752]
inc edx
mov ecx, dword [ebx - 0x5d02674e]
inc ebp
movzx esi, sp
inc ecx
ror ah, 0xa4
inc ecx
movzx esi, dl
inc ecx
xor ecx, edi
not ecx
inc edx
lea ecx, [ecx + esi*2 - 0x21040d0a]
inc ecx
movsx edi, sp
dec esi
lea esi, [ecx*8 + 0x6af32ba]
bswap ecx
jmp 0x111b64ad
inc edx
lea ecx, [ecx + ecx - 0x7b465482]
inc esp
bt esi, esp
bswap ecx
inc ecx
push edi
inc ecx
movzx eax, dh
dec eax
bt eax, 0xa7
inc edx
xor dword [esp - 0x2e81337a], ecx
inc ecx
push esi
dec esp
mov edi, dword [esp + esi - 0x9f]
dec eax
mov dword [esp + esi - 0x9f], 0xf6178f13
dec eax
arpl cx, cx
dec esp
add ebx, ecx
inc dx
sar dword [esp - 0x2e813374], 0x4e
inc dx
cmove esi, dword [esp - 0x2e813379]
mov edx, dword [ebp + esi*2 - 0x15e5e]
div al
inc ecx
idiv ah
dec eax
lea ebp, [esi + ebp - 0xaf2b]
dec ecx
lea ebx, [esp + ebx - 0x2e81337c]
dec edx
add esi, dword [esp - 0x2e81337a]
ja 0x10cd97fc
Function at 0x1116b33c
Capabilities:
Encode data using base64

Disassembly:
neg edx
ror cx, 1
bt edx, 0x12
mov dword [esp + eax*8 - 8], edx
dec dword [esp + edx - 0x506791f2]
adc cx, 0xed38
neg al
ror eax, 0x6a
call fcn.111a632f

Function at 0x1117cf8f
Capabilities:
Encode data using base64

Disassembly:
xor dl, bl
sub ecx, ecx
or byte [esp + ecx + 6], ch
xchg ch, al
dec dl
ror eax, 0x3d
xchg word [esp + ecx*2 - 0x105f9], cx
xor dl, 0x83
add ecx, 0x580be029
shr dword [esp + ecx - 0x580bedbb], 0x99
adc dl, 0x29
add ecx, 0x96048617
ror dl, 1
cwde
dec cl
pop eax
xor bl, dl
lea edx, [esp + edx + 8]
sar dword [esp + 4], 0x2b
movsx eax, word [esp + 4]
sal ax, 0x87
add ax, word [edx + eax*4]
and dword [esp + 1], ecx
jge 0x1182e46a
test dword [esi - 0x42], esp
and dword [ebp - 0x54], ecx
xchg esi, eax
or dword [ebx], ecx
test eax, 0xd493b256
mov ch, 0x47
popfd
push esi
mov dl, 0x93
xchg ebp, eax
mov dh, 0xf5
mov ah, 0x53
pop ebp
wait
xor esi, ebp
rcr dword [edi - 0x13180f68], cl
adc dword [eax + edi*4 + 0x2c], edx
or esi, ebx
outsd dx, dword [esi]
inc edx
push 0xfa4c48ae
invalid
mov word [ebp - 2], ax
mov cx, word [ebp - 2]
mov eax, dword [esp + 2]
mov dx, word [ebp + eax]
or dword [esp + eax*8 + 4], 0x6d13f6aa

Function at 0x11181268
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp + ecx*2 - 0x30a0000], esi
ret 0x10
lea edx, [eax + edx + 0x10ff72]
mov dword [esp + eax - 0x1c802c99], ecx
btr cx, 0x1e
sbb al, 0x2a
bswap edx
div al
lea ecx, [eax*4 + 0x2c11df87]
dec al
dec edx
xchg ecx, eax
neg edx
mov dword [esp + ecx*4 - 0x7201b584], 0x3a968da8
xor ebx, edx
or dword [esp + ecx*4 - 0x7201b57d], ecx
rol cx, 8
add esi, edx
mov dx, word [ebp + ecx - 0x1c806163]
shl dword [esp + ecx*2 - 0x3900c2d6], cl
bswap eax
sbb dword [esp + ecx*4 - 0x720185ae], eax
lea ebp, [ebp + eax - 0xf951392]
movzx eax, byte [edi + eax - 0xf9513a3]
lea edi, [ecx + edi - 0x1c806172]
neg dword [esp + ecx*2 - 0x3900c2d2]
shl ecx, cl
xor al, bl
push ecx
ror al, 1
shr cl, 0xa7
pop ecx
rol ecx, 0x7d
xor al, 0xad
shl byte [esp + ecx - 0x185b3fd], 0xe6
neg al
sub cl, cl
sal dword [esp + ecx - 0x185b3fe], 0x8e
sbb al, 0x17
not al
xor cx, cx
btc cx, cx
sub byte [esp + ecx*4 - 0x6140004], cl
xor bl, al
push ecx
or cx, cx
push ecx
lea eax, [esp + eax + 0x14]
dec cl
mov byte [eax + ecx*8 - 0xc280000], dl
shr word [esp + ecx - 0x184ffff], 0xab
ror word [esp + ecx*8 - 0xc27fff9], 0x21
jno 0x10d495bf
mov edx, 0xd8084426
call fcn.10d0e2d4
Function at 0x1118159c
Capabilities:
Encode data using base64

Disassembly:
inc ecx
neg edx
inc edx
rol dword [esp + esi*8 - 0xdc], 0xf
dec esi
lea esp, [esp + 0x10]
inc edi
mov dword [esp + ecx*2 - 0x650b87c6], ebp
inc edx
not dword [esp + ecx - 0x3285c3da]
inc ecx
pop edx
dec esi
mov edx, dword [ebp + ecx*2 - 0x650b87c2]
or edx, edi
dec edi
mov esp, dword [edx + ecx - 0x3285c3e3]
dec esp
lea ebp, [eax*4 - 0x4357176b]
inc ecx
push esi
inc edx
seta byte [esp + ecx*2 - 0x650b87be]
dec esi
mov dword [ebp + ecx*2 - 0x650b87c2], esp
call fcn.118f0331
or ax, 0x59c
rol edx, 2
sal ax, 0x6a
lea edx, [edx + eax - 0x70d7c5c7]
ror edx, 2
and al, al
call fcn.11904443
inc ecx
push 0x9000746f
int3
lea ebp, [eax + ebp - 0xf3]
neg eax
adc al, 0x8f
movzx ecx, byte [edi - 5]
sar al, 5
sub eax, dword [esp + 3]
xadd byte [esp + eax*8 - 0x6b7da], al
lea edi, [edi + eax*2 - 0x1ae03]
sal dword [esp + eax*2 - 0x1adfc], 0x38
xor cl, bl
jmp 0x118dd337
rdtsc
ror cl, 0xc7
or cx, cx
lea ebp, [ecx + ebp - 0x2d2cf61b]
lea ecx, [ecx*2 - 0x6fcd4959]
mov dword [ebp + 4], eax
movsx eax, cx
bt eax, 0x36
sub ecx, 0x35271f01
mov dword [ebp], edx
inc cl
sbb edi, 4
lea edx, [eax + eax*4 + 0x7f98aeae]
mov edx, dword [edi + edx - 0x7f96dcaf]
xor edx, ebx
sal ax, cl
js 0x10d05272
inc ecx
bswap eax
shl esi, 0x6c
inc ecx
bts ecx, esi
inc ecx
ror eax, 2
inc ecx
push edx
dec edx
shr dword [esp + ecx - 0xaa85], cl
dec eax
cdq
dec esi
mov dword [esp - 0x6abe542c], edi
inc esi
xor dword [esp + ecx - 0xaa85], eax
inc cx
shl esi, cl
inc ecx
pop edi
idiv eax
dec ebp
arpl ax, ax
dec ebp
add ebx, eax
dec ecx
add ebp, 0x9e8f2488
inc cx
shr edx, 0x21
btr edx, edx
inc ecx
jmp ebx
xor cl, bl
rol dx, 2
sbb dx, dx
mov dword [esp + edx - 0x6fc80000], edx
neg cl
bswap eax
sal word [esp + edx - 0x6fc80000], 3
sub dl, 0xba
sbb cl, al
add dword [esp + edx - 0x6fc80046], eax
cbw
shr dword [esp + eax*8], 0xb5
xor cl, 0x80
pop edx
add cl, 0x2d
ror eax, 0x46
and eax, eax
xor bl, cl
push edx
lea ecx, [esp + ecx + 4]
not dx
ror dl, 0xa7
mov edx, dword [ecx + edx - 0xfc03]
xchg byte [esp + eax*4 + 3], ah
movsx ecx, al
mov dword [ebp + eax*4 - 8], edx
push ecx
xchg word [esp + eax + 1], cx
lea ebp, [ebp + eax*2 - 8]
mov edx, eax
cdq
sar eax, 7
pop edx
pop ecx
jae fcn.10ce0aa7
mov dx, word [ebp + eax*2 - 0x1ec]
jb 0x10d1e81c
mov ecx, 0x2d2cf689
jmp 0x10d462e5
or ax, 0x8112
not eax
rol cl, 1
dec cl
rol cl, 1
rol ax, 4
bt eax, 0x97
sub eax, eax
adc cl, 0x89
or dword [esp + eax + 2], 0x30299fac
neg cl
shl ax, 0xa5
shr al, 0x81
inc cl
xor bl, cl
xchg word [esp + eax*4], ax
call fcn.118ef020
inc ebp
xor ah, bh
inc ecx
xor ah, 0xad
dec esi
sub dword [esp + ecx - 0x3285c3e3], eax
inc ecx
not ah
inc esp
sbb ah, cl
inc dx
xchg dword [esp + ecx*2 - 0x650b87c5], eax
dec edx
mov dword [esp + ecx - 0x3285c3e3], 0x6a37d693
push esi
inc ecx
ror ah, 1
inc ebp
xor bh, ah
jmp 0x10cd7c22

Function at 0x111845a5
Capabilities:
Encode data using base64

Disassembly:
xor dl, 0x10
imul ecx, ecx
pop ecx
inc dl
xor bl, dl
mov ecx, 0x5f8451a7
neg ecx
call fcn.118ce298
Function at 0x11187090
Capabilities:
Encode data using base64

Disassembly:
mov dword [ebp], edx
movzx edx, byte [esp]
dec dword [esp + edx]
pop ecx
jne fcn.10ce0aa7
dec ebx
push 0xb40a4568
mov byte [ebx], 0x13
mov dword [ebx + 0x71c8c1ab], ebx
ror eax, 0x71
adc esi, ecx
and ax, dx
movsx ecx, al
xadd ax, cx
add cx, word [edi + edx*2 - 7]
cwde
lea edi, [edx + edi - 7]
neg edx
inc dword [esp + edx + 4]
mov dword [esp + edx], eax
xor cx, bx
xchg dword [esp + edx*2 + 1], edx
not edx
neg cx
ror al, 0x41
imul dword [esp + eax*8 + 4]
inc cx
xor cx, 0x9d
jmp 0x10d14631
sar dx, 0xe9
mov dword [esp + ecx*2], edx
inc al
ror al, 1
push ecx
dec cl
jp 0x118d79d2
mov edx, dword [edx + eax - 0x6c9fa200]
push ecx
pop eax
sbb ebp, 3
neg byte [esp + 3]
jno 0x10d673b3
xor bl, al
not edx
lea eax, [esp + eax + 8]
not edx
xadd word [esp + ecx - 0xfb], dx
xor edx, dword [eax + ecx*4 - 0x3fc]
dec ecx
ror ecx, cl
movsx eax, cx
mov dword [ecx + ebp - 0x3fc], edx
jne 0x1190f25d
movzx edx, al
imul edx
lea ebp, [ecx + ebp - 0x3fc]
pop edx
pop ecx
jno fcn.10ce0aa7
mov ecx, 0xf08e3637
and ecx, ecx
dec eax
lea ecx, [ecx + ecx + 0x552bdf96]
dec eax
mov edx, dword [ebp]
dec esp
mov ecx, dword [ebp + 8]
inc esp
movsx edx, cl
inc edx
mov cl, byte [ebp + edx*2 + 8]
dec ebp
lea eax, [edx + 0x690ecaa2]
inc ecx
neg eax
call fcn.118cf70b
Function at 0x1119e249
Capabilities:
Encode data using base64

Disassembly:
sar eax, 1
mov dword [esp], ebx
adc al, al
jbe 0x118f45e8

Function at 0x111aed4c
Capabilities:
Encode data using base64

Disassembly:
mov dword [eax], edx
movzx edx, cl
sal ecx, 0x41
jmp esi
xor al, bl
imul cx, word [esp + 4]
pop ecx
mov ecx, dword [esp]
neg al
sal ecx, 0x1d
not al
pop ecx
xor al, 4
ror al, 1
not cx
or cl, cl
push ecx
sbb al, 0x22
rol al, 1
pop ecx
shr cx, 0x42
xor bl, al
add eax, esp
sar cx, 0x41
jno 0x10d494e4

Function at 0x111b48b5
Capabilities:
Encode data using base64

Disassembly:
movzx ax, byte [ebp]
inc eax
mov dh, byte [ebp + 2]
inc ecx
mov ebp, 0x94ac37bb
not al
dec edi
lea ecx, [ebp + ebp*2 - 0x6dcb927c]
dec ebx
lea ecx, [ebp + ebp - 0x32f040e0]
inc eax
not dh
dec eax
mov dword [esp], 0xe483daa8
movsx edi, cx
dec eax
dec dword [esp + edi*2 - 0x5d2c]
inc eax
and al, dh
mov word [ebp + edi*4 - 0xba56], ax
inc ecx
or cl, 0x29
inc esp
mov esi, dword [esp + edi - 0x2e94]
inc esp
mov edx, dword [ebx + edi - 0x2e9a]
inc esp
and ebp, ecx
inc ebp
xor edx, edi
movsx esi, cl
inc ebp
lea edx, [edx + edi*8 + 0x47b646d6]
inc ecx
ror edx, 1
inc edi
lea edx, [edx + esi - 0x627956fa]
inc cx
sub ecx, ecx
sar cx, 0x8a
dec edx
lea eax, [esi + ebp - 0x4245fc4d]
inc ecx
ror edx, 1
sub ax, si
rol cx, 0xeb
inc esp
movzx esp, word [esp + edi*8 - 0x174ae]
dec esp
mov dword [esp + edi - 0x2e96], edi
inc esp
xor dword [esp + edi*2 - 0x5d2c], edx
inc ecx
not ebp
inc ecx
pop edi
dec ebp
arpl dx, dx
inc sp
xadd eax, ebp
inc eax
ror bh, 0xe3
dec ebp
add ebx, edx
inc ecx
mov edx, 0x369af29b
inc ebp
or ecx, esp
dec eax
mov ecx, dword [edi + ebp - 0x2ed0]
dec eax
xchg esi, edi
dec ecx
sal esi, 0xf0
dec edx
mov edx, dword [ebp + ecx - 0x5039f4b5]
call fcn.111ba3b0
sar edx, 0x6c
xor ecx, ebx
rol ecx, 1
cdq
cwd
btc edx, eax
xor ecx, 0x40151b28
add ecx, 0x59ba6606
not dword [esp]
add dl, ah
ror ecx, 3
sub al, byte [esp + 1]
dec word [esp + 1]
ror dword [esp], 0xf
xor ebx, ecx
sar dx, 0x45
cwde
add esi, ecx
shl dword [esp], 0xf0
lea ecx, [edx + eax + 0x4c2bda96]
btr cx, 0xe
rdtsc
or byte [esp + ecx - 0x4c2b34f5], ch
mov dword [ebp + ecx - 0x4c2b34f5], eax
mov dword [ecx + ebp - 0x4c2b34f9], edx
mov eax, dword [esp + ecx - 0x4c2b34f5]
shl dword [esp + eax - 0x6aca0034], 0xdb
neg byte [esp + ecx - 0x4c2b34f4]
lea ebp, [ecx + ebp - 0x4c2b34f9]
movzx edx, cx
inc word [esp + ecx - 0x4c2b34f4]
pop eax
jae fcn.10ce0aa7
Function at 0x111b7ae5
Capabilities:
Encode data using base64

Disassembly:
sub si, 0xa085
dec esi
mov dword [ebp + ecx + 0x5a91], eax
inc ecx
movsx eax, cl
dec edx
mov dword [esp + ecx*2 + 0xb50e], 0xb0ac600b
cdq
inc dx
mov ecx, dword [ebx + ecx + 0x5a81]
call fcn.10ce9da5
adc ecx, ecx
mov dword [ebp + ecx + 2], eax
adc cl, ch
mov dword [ecx + ebp - 2], edx
jl 0x10d21b79
imul ecx, ecx
jae fcn.10ce0aa7

Function at 0x111b7b2c
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp], eax
mov word [ebp], cx
sub edi, 4
push eax
shl edx, 0x1b
cwd
mov eax, dword [edi + edx - 0x20000000]
xor eax, ebx
xor dword [esp + edx - 0x1ffffffc], edx
sub byte [esp + edx - 0x1ffffffb], 0xb0
ror eax, 3
sar word [esp + edx - 0x1ffffffe], 4
call fcn.10d216fe

Function at 0x111b9768
Capabilities:
Encode data using base64

Disassembly:
inc ecx
adc ebp, 0xc2932593
jno 0x1190c5fb
mov dword [ebp + 4], eax
rol dword [esp + 3], 0xc1
pop eax
pop ecx
jmp esi
movzx eax, di
inc ecx
dec esi
not ax
inc esp
movsx ebp, al
inc ecx
neg esi
inc ecx
ror esi, 3
inc ebp
movzx edx, ch
inc ecx
push edi
inc esi
xor dword [esp + eax - 0x76da], esi
btr edi, 0xb4
inc ebp
xadd eax, edx
dec esp
lea esp, [eax + edi*8 + 0x47104382]
inc ecx
pop edi
jg 0x10d35811
dec esi
mov eax, dword [esp + eax - 0xad]
mov ebp, 0x41b2dcb3
inc esp
movsx edx, cl
dec eax
mov dword [esp + ebp - 0x41b2dcb3], ecx
dec eax
mov esi, dword [esp + ebp - 0x41b2dc93]
dec eax
mov ecx, dword [esp + ebp - 0x41b2dc8b]
dec esp
mov dword [esp + ebp - 0x41b2dc8b], ebp
dec ecx
bswap ebp
dec esp
mov ebp, dword [esp + ebp - 0x41b2dc83]
dec esp
mov edx, dword [esp + ebp - 0x41b2dc7b]
dec eax
mov dword [esp + ebp - 0x41b2dc83], ebp
call fcn.118c3b10
dec eax
mov dword [esp + ecx - 0x1c56c0a1], esi
inc ecx
push ecx
inc ebp
xor bh, dh
mov dword [esp + ecx - 0x1c56c090], edi
dec esi
lea ecx, [ecx + eax - 0x60ffce54]
inc cx
idiv edx
dec esi
lea esi, [esp + esi + 0x18]
dec ecx
mov edi, dword [esi + ecx - 0x1c56c0a1]
inc esp
mov ebp, esi
dec ecx
inc ebp
dec eax
mov dword [ebp + ecx*2 - 0x38ad8152], edi
inc ecx
movzx edi, dx
dec eax
cmovl esi, dword [esp + ecx - 0x1c56c095]
dec eax
lea ebp, [ecx + ebp - 0x1c56c0b1]
jp 0x111b31bb
inc ecx
pop edx
inc ecx
pop ebp
pop ecx
jno fcn.10cf108c
Function at 0x111ba3b0
Capabilities:
Encode data using base64

Disassembly:
inc esp
mov dword [ebp + ecx - 0x729db5b2], eax
inc ebp
movzx eax, sp
inc esp
mov ebp, dword [ebp + edx - 4]
push esi
sar byte [esp + ecx - 0x729db5aa], 5
inc esp
movzx edx, byte [edx + ebx - 6]
add dword [esp + ecx - 0x729db5ab], eax
inc esp
xadd esi, esp
dec eax
lea ebx, [ebx + edx - 6]
inc ecx
idiv ah
pop edi
inc ebp
xor dl, bh
inc ecx
sar eax, cl
inc ecx
and ecx, 0xe62d423e
inc ebp
xor esi, eax
inc ecx
adc dl, 9
xchg cx, si
inc ecx
xor dl, 0xf
dec eax
sar esi, 0x12
jae 0x1182d733
inc ecx
sal ah, 0x25
dec edx
lea ebx, [ebx + ecx - 0x5039f4c4]
inc edx
sub dword [esp + ecx - 0x5039f4be], edi
dec eax
sal edi, 0x97
jp 0x111abf12
inc ecx
shr eax, cl
inc ecx
dec dl
sub dl, 0xa7
inc bp
xor esp, esi
inc ebp
xor bh, dl
dec esp
add edx, esp
dec ecx
neg esi
mul cx
dec eax
xor eax, edi
inc esi
mov dword [ecx + edx - 0x729d00ae], ebp
inc ecx
shl al, 0x44
cdq
dec ebp
xor eax, ebx
inc ecx
jmp eax
inc ecx
xor cl, bh
inc edx
neg dword [esp + ebp - 0x6bd72a44]
adc cl, 0xb
dec edx
mov dword [esp + ebp - 0x6bd72a45], 0xe01e3888
neg cl
push esi
ror cl, 1
xor dword [esp + esi - 0x2ecf], edi
inc cx
neg ecx
inc eax
sbb cl, bh
pop edx
inc esp
xor bh, cl
inc ecx
mul ecx
dec eax
lea ecx, [esp + ecx + 8]
dec edx
mov eax, dword [ecx + ebp - 0x6bd72a45]
dec edx
mov dword [ebp + ebp - 0x6bd72a43], eax
inc edx
movzx eax, byte [esp + ecx - 0x50390b3f]
dec edx
lea ebp, [ebp + ebp - 0x6bd72a43]
inc edx
sar byte [esp + ebp - 0x6bd72a41], 0xa6
dec esi
mov dword [esp + ecx - 0x50390b41], ebx
ret
dec eax
lea eax, [eax + 0x4405ab32]
rol di, 0xa5
dec eax
add ecx, edx
dec esi
mov dword [esp + ebp - 0x6bd72a45], ebp
cwde
dec eax
mov dword [ebp + esi*2 - 0x5d9a], ecx
inc eax
movzx ecx, dh
dec ecx
ror esi, cl
dec ecx
rol edx, cl
inc edx
mov cl, byte [ebx + ebp - 0x6bd72a4a]
jae 0x11173167
inc ebp
movsx esp, si
inc eax
sub bh, 0x33
jmp 0x119063b3
cbw
inc ecx
ror dl, 1
inc cx
neg ecx
xor si, ax
inc cx
btc ecx, edi
inc ecx
neg dl
jmp 0x11181f3e
inc esp
xor bh, bh
dec ecx
ror esp, cl
dec ecx
mul eax
inc cx
inc ebp
dec eax
adc edi, esp
inc ebp
add esi, esi
dec ebp
cmovno edx, eax
inc bp
sub ecx, esi
inc esp
mov eax, dword [edi + ecx - 0x729db5ae]
jae 0x1116a3fe
lodsd eax, dword [esi]
cmpsd dword [esi], dword es:[edi]
xchg byte [esi + ecx*4 + 0x3fe1986a], ah
fst st(3)
jno 0x1190643e
stosb byte es:[edi], al
inc ecx
outsd dx, dword [esi]
invalid
and dword [esi - 0x31], 0x2dd02082
add ebx, ebx
jns 0x1190647c
xor eax, 0x7bb50dc4
invalid
pushal
fisub word [eax - 0x3e8948a8]
pop esp
invalid

Function at 0x111bc0ec
Capabilities:
Encode data using base64

Disassembly:
sar word [esp + eax + 0xa], 0x68
rol esi, 1
inc bp
add esp, esp
inc cx
btc esi, 0x92
xor esi, 0xc11e6e01
dec eax
mov dword [esp + eax*2], eax
neg di
inc edx
lea esi, [esi + esi*8 + 0x7c2523da]
sal byte [esp + eax*8 + 1], 0x65
rol word [esp + eax*2 + 8], 0x44
bswap esi
sar dx, 0x83
inc ecx
movzx ecx, dh
dec esp
mov dword [esp + eax + 0x10], edi
dec ebp
lea edx, [ecx + 0x5a19bb7]
neg eax
xor dword [esp + eax*2 + 0x10], esi
inc esp
mov eax, dword [esp + eax*4 + 9]
inc cx
dec ecx
and ax, 0xbe3d
dec esp
mov edi, dword [esp + eax*4 + 0x10]
call fcn.10d3991c