joyce8/EMBER2024-capa huggingface dataset:
Function at 0x71b9ac
Capabilities:
Encode data using xor

Disassembly:
call fcn.006b799c
add byte [eax], al
add byte [eax + edi*8], dl
xor ch, byte [edx - 0x22ca377e]
cmp byte [ecx - 0x5651bbc4], bl
cmp esi, dword [ebx]
or eax, 0x9bad5f3c
scasb al, byte es:[edi]
test eax, 0x3c0d333b
pop edi
lodsd eax, dword [esi]
wait
or al, 0x58
fisub dword [ecx]
pop ebp
push ecx
inc ebx
mov bh, 0x6d
push esi
xor al, 0x26
jo 0x71b9c0
movsb byte es:[edi], byte [esi]
mov al, 0x40
out dx, al
ror dword [edx], cl
adc edi, esp
dec edx
out 0x4a, eax
pushfd
and eax, esp
cmp eax, 0xa384b43f
test eax, 0x13d48384
aad 0x8a
dec ebp
test ebp, esp
lea edi, [edx]
jo 0x71b9de
cmp dh, byte [eax - 0x18]
test dword [edi - 0x3f7d271a], esi
pop esp
mov dword [ebx - 0x734635a7], ecx
imul ebp, dword cs:[eax + ebp*8], 0xef1cffb0
mov dword [ebp + 0x4d], 0x7dd35ee6
loope 0x71ba3d
inc edx
pushal
pop esi
mov ecx, 0xce5950d4
outsb dx, byte [esi]
add dword [eax + 0x57], edx
clc
xor dword [edi + 0x20], edx
pop ebx
movsb byte es:[edi], byte [esi]
xor edi, dword [esi - 0x36cb6b33]
ja 0x71b9f3
cmp eax, 0x3af5e150
daa
invalid
pop esp
xchg ecx, eax
dec edx
call 0xba62a099
push edx
jg 0x71baa7
mov ecx, 0x89667f52
push ebp
or ch, al
sbb al, 0x31
mov dword [ebp + 8], edx
lds ebx, [ecx + esi]
xchg esi, eax
push ebx
sub al, 0x36
loope 0x71ba36
jge 0x71ba8e
js 0x71bad0
dec ebp
cmp byte [edi], cl
out dx, al
push eax
xchg dword [edi - 0x177f9f88], ebx
ret 0x8931
mov byte [ebp + 0x1b], ah
pop ebp
invalid
insb byte es:[edi], dx
xor byte [ecx], dl
cmp dword [ebx], ebx
xchg ebx, eax
test byte [ebp - 0x7b], bl
add eax, 0xbff25ab4
test dword [0xbff25ab4], eax
in eax, 0x53
imul ebp, dword [ecx], 0xffffffd5
push esp
sbb al, 0x84
mov ecx, 0x8912dcee
jmp 0xe14a636a
daa
sub al, 0x8a
inc edx
mov dh, 0x31
xor eax, 0x320120d2
movsd dword es:[edi], dword [esi]
lcall 0x3c60, 0xc3c3b50
dec ebx
scasd eax, dword es:[edi]
cmc
pop eax
aad 0x39
lds ebx, [edi - 0x5e]
adc dword [esi + edx*2 + 0x51a4153b], 0x4c
loopne 0x71ba9f
pop ecx
sal dword [esi - 0x67], 0x5e
mov dh, 0xcc
enter 0x2f57, 0x5a
clc
push eax
pop eax
stc
insd dword es:[edi], dx
xor al, 0xc6
outsd dx, dword [esi]
pop ebp
xor esi, dword [ecx + 0x283a0cd5]
aad 0xc
cmp ch, byte [eax]
inc ebx
cmp al, 0x3d
pop edi
shl byte [ecx], cl
or bh, 0x44
adc dword [ebp - 0x73bf0148], eax
and dword [eax + 0x70], ebp
mov edx, dword [esi - 0x35]
in eax, 0xef
enter 0xffffffffffffd55d, 0xffffffffffffffe8
mov edi, 0x26e184e7
jno 0x71bae6
out 0x51, al
dec esp
cdq
and bh, 0xda
test eax, 0xf8609087
mov cs, word [ecx]
test al, 0x89
jle 0x71bb9a
pop ebp
in eax, dx
loopne 0x71bb0c
insd dword es:[edi], dx
ljmp 0xef0e
jmp 0x71bb1f

Function at 0x71fe55
Capabilities:
Encode data using base64

Disassembly:
sub esi, 1
pop eax
movzx eax, byte [esi]
push 0xb1390d31
jmp 0x66f552

Function at 0x7201f5
Capabilities:
Encode data using base64

Disassembly:
jmp 0x73fc48
lea esp, [esp + 0xc]
jmp fcn.007b57f6

Function at 0x72694a
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], cx
lea esp, [esp + 0x18]
jmp fcn.0077dcde
sub edi, 2
jmp 0x58a1aa
Function at 0x7279ad
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 8]
jmp fcn.0077dcde
jl 0x7279f0
sal byte [ebx + 0x2e], 1
sbb byte [esi - 0x77], ah
mov word [edi], dx
jmp 0x688d06
mov dword [esp], 0xbbee1e18
call fcn.007bfde5
fidiv word [edx]
adc ebx, dword [edx - 0x2fa78dc3]
mov dh, 0x1a
imul eax, eax, 0xffffffcd
arpl word [eax - 0x64ef2167], dx
jae 0x727a44
and byte [eax + 0x4b], 0xa6
stosd dword es:[edi], eax
xchg ebx, eax
cli
test eax, ebp
push 0xbbb9d6a3
shr byte [0x19638021], 1
mov dword [0xd0bbb9d6], eax
sub eax, 0x19638021
jle 0x7279a7
sub eax, 0xadf86a0
fisttp word [edx]
inc esi
jmp 0x7279ff
imul ecx, dword [edi + 6], 0xa2131985
inc eax
jns 0x727a0c
int1
invalid
inc edi
jmp 0x7279e1

Function at 0x728c85
Capabilities:
Encode data using base64

Disassembly:
push 0xeca3d9bc
mov dword [edi], eax
mov dword [esp + 4], 0xac9197b7
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x72a5db
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x10]
jmp dword [ecx*4 + 0x7a05dc]

Function at 0x72a6f4
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], bp
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x72d305
Capabilities:
Encode data using base64

Disassembly:
not dl
not cl
or dl, cl
jmp 0x76b7f5
mov word [edi], dx
lea esp, [esp + 4]
jmp fcn.007b57f6

Function at 0x72d3f5
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 8]
jmp fcn.0077dcde

Function at 0x72dba7
Capabilities:
Encode data using base64

Disassembly:
not ecx
mov dword [esp], 0x22b408a7
mov dword [edi], ecx
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x730040
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x73375d
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], dx
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x7346cb
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], bp
lea esp, [esp + 8]
jmp fcn.007b57f6
add edi, 2
ror word [esp + 6], 0xc9
sal bp, cl
jmp 0x6744b1

Function at 0x734e28
Capabilities:
Encode data using base64

Disassembly:
add cx, dx
mov word [edi], cx
lea esp, [esp + 4]
jmp fcn.007b57f6

Function at 0x7385d0
Capabilities:
Encode data using base64

Disassembly:
not eax
xor ebx, eax
sub edi, 4
mov dword [edi], eax
lea esp, [esp + 4]
jmp fcn.0077dcde
lea esi, [esi + eax - 0x116af67d]
lea eax, [eax + eax - 0x675259cc]
xadd al, ah
mov eax, dword [esi]
xor eax, ebx
inc eax
xor eax, 0x63a39cae
ror eax, 1
jmp 0x57af49

Function at 0x738b8d
Capabilities:
Encode data using base64

Disassembly:
not si
call fcn.007abf6b
mov edx, dword [edi]
mov ebp, 0x59d2a0a
neg ebp
add edi, 4
lea esi, [ebp + ebp - 0x66c4196e]
xchg edx, edi
mov eax, ebp
sub ax, bp
and bp, 0xfd3b
mov esi, edx
push ebp
pop edx
ja 0x75249a
adc edi, 6
mov word [ecx], ax
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x73cbcc
Capabilities:
Encode data using base64

Disassembly:
mov dword [edi], eax
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x73e60e
Capabilities:
Encode data using base64

Disassembly:
push 0x8198962c
lea esp, [esp + 0x14]
jmp fcn.007b57f6
Function at 0x741fdf
Capabilities:
Encode data using base64

Disassembly:
mov eax, dword [esp + 4]
mov eax, dword [eax + edi - 0x55b3802c]
mul ecx
mov dword [esp], 0xce8092b4
mov dword [edi], edx
mov dword [edi + 4], eax
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x74572e
Capabilities:
Encode data using base64

Disassembly:
inc ecx
inc word [esp + 0xc]
jo 0x77c79d
xor eax, 0x1b194506
dec edx
lea esp, [esp + 0x10]
jne 0x67320e
pop edi
jmp 0x69e019
shr eax, 8
mov dword [esp + 4], 0x43f2533
xor eax, edi
push 0x2eb57dbe
jmp 0x6b8aec

Function at 0x74877a
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], dx
lea esp, [esp + 4]
jmp fcn.007b57f6
movzx dx, byte [edi]
mov ecx, 0x993922b3
lea ecx, [ecx + 0x89187ae]
not cx
mov cl, byte [edi + 2]
add edi, 2
jmp 0x7ac437
shl dl, cl
jmp 0x668028

Function at 0x7491fa
Capabilities:
Encode data using base64

Disassembly:
sal byte [esp + 6], 0xa4
adc edi, 2
shr dword [esp + 4], 0x84
shl ax, cl
mov word [edi], ax
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x74ccb3
Capabilities:
Encode data using base64

Disassembly:
mov byte [edx], al
lea esp, [esp + 0xc]
jmp fcn.007b57f6

Function at 0x74cde3
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 8]
jmp fcn.0077dcde

Function at 0x7527e7
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 4]
jmp fcn.0077dcde
jmp 0x67eb2a

Function at 0x754a42
Capabilities:
Encode data using base64

Disassembly:
xor al, bl
add al, 0xab
not al
dec al
xor al, 0xa
neg al
inc al
xor bl, al
mov dword [esp], 0x121ab7a2
ror byte [esp + 1], 0x41
push 0x233cf13
sub edi, 2
mov word [edi], ax
lea esp, [esp + 8]
jmp fcn.0077dcde

Function at 0x754df5
Capabilities:
Encode data using base64

Disassembly:
mov cl, byte [ecx + edi - 0x37896f0d]
add edi, 6
shrd edx, ebp, cl
mov dword [edi], edx
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x7559af
Capabilities:
Encode data using base64

Disassembly:
mov bp, word [edi]
mov cx, word [edi + 2]
add edi, 2
add bp, cx
mov word [edi], bp
lea esp, [esp + 4]
jmp fcn.007b57f6

Function at 0x758d7d
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], dx
push 0xc530551b
lea esp, [esp + 0x10]
jmp fcn.007b57f6

Function at 0x758ffa
Capabilities:
Encode data using base64

Disassembly:
push 0x7db610ab
lea esp, [esp + 0xc]
jmp fcn.007b57f6

Function at 0x75d3a8
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 4]
jmp fcn.007b57f6
xor dl, bl
inc dl
ror dl, 1
neg dl
inc dl
xor bl, dl
lea edx, [esp + edx + 4]
mov byte [edx], al
jmp 0x719edd

Function at 0x75e595
Capabilities:
Encode data using base64

Disassembly:
adc edi, 6
not word [esp + 0x10]
mov byte es:[ecx], al
lea esp, [esp + 0x14]
jmp fcn.007b57f6
Function at 0x762402
Capabilities:
Access peb ldr_data
Get number of processors

Disassembly:
sub esp, 0x10c
push ebx
cmp esi, ecx
push esi
clc
push edi
shrd di, dx, 0x11
bt di, 0x86
bts di, bx
mov edi, eax
sub eax, 0x763a823d
sal ah, 0x9e
shl eax, cl
lea eax, [ebp - 0x10c]
xor edx, edx
cmc
sub edi, eax
jmp 0x7559cb
jmp fcn.00585e49
mov edx, 0x71da682
mov ecx, dword [esi + edx*2 - 0xe3b4d04]
mov dx, word ss:[edx + ecx - 0x71da682]
mov dword [esp], 0x5221152b
add esi, 2
call fcn.006c5a2c
inc esi
into
test al, 0x85
xchg ebp, eax
mov esi, 0x874efe53
jo 0x76237d
inc ebp
push cs
invalid
pop edi
jnp 0x7c5103
or al, 2
add bh, bh
loope 0x7623d0
jge 0x7623fd
jg 0x76239f
and byte [ecx + 0x50], ch
jb 0x762390
imul edx, dword [eax + 0x72], 0x4f4d440d
inc esp
dec ebp
dec edi
sub byte [ecx + 0x70], dl
bound edx, qword [ecx + 0x10]
pop ebp
inc edi
sbb al, 0x5d
sub bl, al
or edx, dword [ebp + 0xd]
stosb byte es:[edi], al
mov eax, 0x652c18f4
imul esp, dword cs:[ebx - 0x2b1c02cb], 0x71f8faf1
pop ds
std
jecxz 0x762376
int1
cli
clc
jno 0x7623c6
test dword [eax + 0x6be45dc4], esp
sub al, 0x79
sub edx, esp
push ebp
fistp word [ebx + 0x6762ef61]
xor dword [edx], eax
mov esp, dword [esi]
in al, dx
xchg edx, eax
cmpsd dword [esi], dword es:[edi]
mov ebp, 0xc0c2cb82
jecxz 0x762368
invalid
mov es, edi
ljmp 0xf582
cwde
salc
js 0x76242e
add al, 0x55
mov ebp, esp
jmp 0x6b1c48
cld
test byte [0x51309ff6], dh
dec eax
add dword [ecx], esi
add bl, byte [edx + 0x3dc5130]
fisub dword [edx - 0x618b5fa2]
xor byte [ecx + 0x4d], dl
cmp al, 0x2d
dec edx
ret

Function at 0x7628f5
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x76294e
Capabilities:
Encode data using base64

Disassembly:
sub edi, 4
mov dword [esp], 0x863f8b16
mov dword [edi], ebp
push 0xcd1ae997
lea esp, [esp + 8]
jmp fcn.0077dcde

Function at 0x76296b
Capabilities:
Encode data using base64

Disassembly:
push 0x9d0b6f1c
lea esp, [esp + 0xc]
jmp fcn.0077dcde
sub edi, 2
mov word [edi], dx
jmp 0x748414

Function at 0x7641de
Capabilities:
Encode data using base64

Disassembly:
movzx dx, byte [eax]
call fcn.0076296b
mov ecx, 0xdc11d305
call fcn.006da7df
inc al
xor al, 0x25
mov dword [esp + edx - 0x113c8a72], 0x9c86ff36
shl dl, 0x21
add edx, edx
not al
xchg word [esp + edx*2 - 0x44f22b8e], dx
xor bl, al
lea edx, [edx + edx*4 + 0x342364b2]
lea eax, [esp + eax + 4]
jmp 0x589b52

Function at 0x7668f4
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.007b57f6

Function at 0x76a063
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 4]
jmp fcn.007b57f6

Function at 0x76b06b
Capabilities:
Encode data using base64

Disassembly:
mov dl, byte [edi + 4]
add edi, 6
mov byte es:[eax], dl
lea esp, [esp + 4]
jmp fcn.007b57f6

Function at 0x76c79d
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jne 0x78ceb8

Function at 0x76e719
Capabilities:
Encode data using base64

Disassembly:
mov byte es:[ecx], dl
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x76f77b
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], dx
not dword [esp + 4]
lea esp, [esp + 0xc]
jmp fcn.007b57f6
Function at 0x7760b3
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 4]
jne 0x68dd0e
mov eax, dword [ebp]
jmp 0x7c0193
mov eax, 0x9d1be6a9
mov eax, dword [ebp + ebx*4]
call fcn.00768e65
jmp 0x7845da
dec ebx
jmp 0x67382b
jmp fcn.007b57f6
call eax
mov ebx, 0x898405b6
movzx edi, bx
mov ebp, dword [ebp + edi*8 - 0x2db4]
mov dword [ebp + edi - 0x5b6], eax
mov edi, ebp
lea ebx, [ebx*4 - 0x6065d9d5]
pop ebx
mov esi, 0xe8a2511e
pop esi
jmp 0x6d3982

Function at 0x7798ae
Capabilities:
Encode data using base64

Disassembly:
add edi, 4
xor edx, edx
mov dword [esp], 0xf97340f
test ebp, ebp
lea esp, [esp + 8]
je 0x68beb7

Function at 0x77a304
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x77a697
Capabilities:
Encode data using base64

Disassembly:
mov word [eax], dx
jmp 0x7a0175
jmp 0x74de95
mov dword [esp + 4], 0x65b43127
lea esp, [esp + 0xc]
jmp fcn.007b57f6

Function at 0x77c4dd
Capabilities:
Encode data using base64

Disassembly:
not bp
mov word [edi], bp
push 0xecabf40f
jmp 0x7d2334
lea esp, [esp + 0x14]
jmp fcn.007b57f6

Function at 0x77d457
Capabilities:
Encode data using base64

Disassembly:
mov ecx, dword [edi + 4]
add edi, 8
mov dword ss:[edx], ecx
lea esp, [esp + 4]
jmp fcn.007b57f6

Function at 0x77e035
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
je 0x673835
test ebx, ebx
push 0xc6be4413
jmp 0x68dd04

Function at 0x780870
Capabilities:
Encode data using base64

Disassembly:
mov eax, dword [edi]
pop ecx
mov ecx, dword fs:[eax]
jmp 0x6a983d

Function at 0x785359
Capabilities:
Encode data using base64

Disassembly:
sbb edi, 0xc
mov dword [esp], 0xb1246107
mov dword [edi + 0xc], eax
mov dword [edi + 8], ebx
mov dword [edi + 4], ecx
mov dword [esp], 0x22211839
mov dword [edi], edx
pop ebx
not bx
pop ebx
call fcn.007527e7

Function at 0x785382
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 8]
jmp fcn.0077dcde

Function at 0x78671e
Capabilities:
Encode data using base64

Disassembly:
mov ecx, dword [edi]
mov eax, dword [edi + 4]
jmp 0x7bf39c
mul ecx
mov dword [edi], edx
mov dword [edi + 4], eax
mov dword [esp], 0x21e24be
push 0x72b13630
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x789168
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x78aeda
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 8]
jmp fcn.007b57f6
or cl, byte [edi + 8]
add edi, 6
shrd ebp, edx, cl
mov dword [edi], ebp
push 0x19bde033
jmp 0x667179

Function at 0x78b147
Capabilities:
Encode data using base64

Disassembly:
adc edi, 4
shld ax, bp, cl
mov word [edi], ax
lea esp, [esp + 4]
jmp fcn.007b57f6

Function at 0x78b978
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], cx
jmp 0x7a51e1
xor bx, cx
sub edi, 2
push 0x84015eb8
jmp 0x6db1f9
lea esp, [esp + 0x10]
jmp fcn.0077dcde
Function at 0x78cea7
Capabilities:
Encode data using base64

Disassembly:
lea edi, [edi - 0x5ed535ff]
xor bl, dl
call fcn.007d59df
mov ebp, dword [ebp - 4]
push 0x73017313
mov dword [ebp], eax
mov edi, 0x20aa060b
mov esi, dword [esp + edi - 0x20aa060b]
mov edi, ebp
mov dword [esp + esi - 0x73017313], 0x2c24b531
mov ebx, dword [esp + esi - 0x7301730f]
jmp 0x6d3461
mov eax, dword [ebp]
call eax
jmp 0x75b102
push 0xd5a43630
dec ebx
call fcn.007285ed
call fcn.00673e30
test ebx, ebx
push 0x8681260b
lea esp, [esp + 0xc]
je 0x76c7a7
mov eax, 0xca997eaa
and ax, ax
mov eax, dword [ebp + ebx*4]
push eax
jne 0x7ca047
jg 0x784c86
rol dl, 1
or di, di
xor dl, 0x9a
sub di, 0xd314
inc dl
sal edi, 0x22
ror dl, 1
jmp 0x695ed7

Function at 0x78f270
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x78f676
Capabilities:
Encode data using base64

Disassembly:
not dl
push 0xba3b918b
mov word [edi], dx
jmp 0x7cce2b
lea esp, [esp + 0xc]
jmp fcn.007b57f6

Function at 0x79300a
Capabilities:
Encode data using base64

Disassembly:
or cx, ax
not cx
mov word [edi], cx
lea esp, [esp + 0x10]
jmp fcn.007b57f6

Function at 0x79385c
Capabilities:
Encode data using base64

Disassembly:
add edi, 6
shrd eax, edx, cl
mov dword [edi], eax
jmp 0x72d28e

Function at 0x7951ef
Capabilities:
Encode data using base64

Disassembly:
mov edx, dword [edi]
mov bp, word [edi + 4]
add edi, 6
push 0x559597ab
mov word ss:[edx], bp
push 0x65281683
lea esp, [esp + 0xc]
jmp fcn.007b57f6

Function at 0x79588e
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], cx
lea esp, [esp + 0xc]
jmp fcn.007b57f6

Function at 0x7962f0
Capabilities:
Encode data using xor

Disassembly:
xor ebx, ecx
mov dword [esp], 0x742dd097
sub esi, 4
push 0x8d25141e
jmp 0x7c5b21
xor ecx, 0x34988e00
rol dword [esp + 4], 0xd
mov ds, word [eax + 0x2444c134]
add al, 0xd
jb 0x670d58
add byte [eax], al
add byte [ebx + 0x72], al
popal
je 0x79636f
inc esi
imul ebp, dword [ebp + 0x57], 0x561f1400
sbb eax, 0xb27555cc
xor ecx, edx
sti
test al, 0x69
cmp byte [eax + 0x3ea78a53], ch
lahf
scasb al, byte es:[edi]
jnp 0x7962f3
ret
add byte [eax], al
add byte [edx], dh
retf
push esi
mov ebp, dword [esp + esi - 0xd92b]
mov edx, dword [esp + esi - 0xd927]
mov edi, dword [esp + esi - 0xd923]
push ebp
lea ebp, [esi + ebp - 0x6465ff68]
call fcn.00754d89
cwde
add byte [edx - 0xd841765], bl
clc
jmp dword [esi - 9]
invalid
invalid
lcall 0xfff8, 0xf27be89b
mov dword [esi], ecx
push 0xdfbc4287
call fcn.006ced05
mov ds, word [esi + 4]
sbb byte [eax + ebx], 0x1e
dec dword [esi + 0x1c80045e]
sbb byte [esi], bl
salc
jecxz fcn.007c5baa
std
or dword [esi], eax
push esi
out 0x16, al
jbe 0x7c5b35
mov al, 0x6c
mov edx, 0x8a6b3639
jle 0x7c5aeb
loopne 0x7c5b55
cmc
jle 0x7c5b04
out dx, al
cmp dword [eax - 0x5a0b4d15], ecx
loopne 0x7c5b2c
xlatb
jge 0x7c5b07
invalid

Function at 0x797def
Capabilities:
Encode data using base64

Disassembly:
push 0xf9b1161c
mov word [edi], ax
lea esp, [esp + 0x10]
jmp fcn.0077dcde
sub edi, 2
jmp 0x73b538

Function at 0x7994b2
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 4]
jmp fcn.0077dcde
Function at 0x7a1e62
Capabilities:
Encode data using base64

Disassembly:
or ax, cx
mov word [edi], ax
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x7a3503
Capabilities:
Encode data using base64

Disassembly:
sub edi, 4
mov dword [edi], edx
lea esp, [esp + 4]
jmp fcn.0077dcde

Function at 0x7a38b6
Capabilities:
Encode data using base64

Disassembly:
add edi, 2
shl bp, cl
mov word [edi], bp
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x7a5158
Capabilities:
Encode data using base64

Disassembly:
add edi, 8
push 0x85aa0b16
push 0x5d092c10
mov dword [ebp], ecx
push 0xaa09583f
lea esp, [esp + 0x14]
jmp fcn.007b57f6

Function at 0x7a9152
Capabilities:
Encode data using base64

Disassembly:
push 0x66bc6d12
lea esp, [esp + 0x10]
jmp fcn.007b57f6

Function at 0x7a935a
Capabilities:
Encode data using base64

Disassembly:
push dword [esp + 4]
popfd
jmp 0x6aa368

Function at 0x7aa7f2
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.007b57f6
mov dword [edi], edx
jmp 0x7c1592
jmp 0x75da1a

Function at 0x7ae742
Capabilities:
Encode data using base64

Disassembly:
mov cx, word [edi + 2]
mov dword [esp], 0x8a28e63d
add edi, 2
add dx, cx
jmp 0x7af2e9
mov word [edi], dx
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x7af2d2
Capabilities:
Encode data using base64

Disassembly:
push 0xf0b7502a
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x7afb3d
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.007b57f6

Function at 0x7b12e3
Capabilities:
Encode data using base64

Disassembly:
jmp fcn.007b57f6
mov ebp, dword [edi + ebp*4 - 0x30bd105c]
mov ecx, 0x66365b06
js 0x7ab50d
mov cl, byte [ecx + edi - 0x66365afe]
call fcn.00670a31
lea esp, [esp + 0xc]
jmp fcn.006a2493

Function at 0x7b345d
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], dx
push 0x5796512a
lea esp, [esp + 0xc]
jmp fcn.007b57f6
add edi, 2
add dx, cx
push 0xa5b0e417
jmp 0x697263

Function at 0x7b4763
Capabilities:
Encode data using xor

Disassembly:
lea esp, [esp + 4]
jne 0x789efa

Function at 0x7b5370
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 8]
jmp fcn.007b57f6

Function at 0x7b57e6
Capabilities:
Encode data using base64

Disassembly:
mov edx, ecx
ror edx, 0x10
mov edx, 0
sub ebx, edx
lea esp, [esp + 4]

Function at 0x7b6dc6
Capabilities:
Encode data using base64

Disassembly:
push 0xdb28a933
lea esp, [esp + 0x10]
jmp fcn.007b57f6

Function at 0x7ba000
Capabilities:
Encode data using base64

Disassembly:
add edi, 2
mov dword [esp], 0xf689dc86
not al
not cl
and al, cl
mov word [edi], ax
lea esp, [esp + 0xc]
jmp fcn.007b57f6

Function at 0x7ba326
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.007b57f6

Function at 0x7baf3b
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], ax
lea esp, [esp + 0xc]
jmp fcn.007b57f6
Function at 0x7baf7b
Capabilities:
Encode data using base64

Disassembly:
lea ebx, [esi + ebp*8 - 0x128]
lea edx, [ebp + ebp*4 - 0x40612ffc]
mov ebp, 0
sal edx, 0x2d
push ecx
jne 0x78a53b
test byte [eax - 0x6d20058f], cl
cmp dl, byte [ebx + 0x2c]
add dl, byte [ecx - 0x66]
out dx, eax
loopne 0x6d6f01
mov cl, 0xec
pushal
cmp dword [eax + 0x72fa7a17], esi
adc al, 0x39
sub dword [ebx], esp
cmpsd dword [esi], dword es:[edi]
dec ebx
push 0xffffffffffffff83
pop esp
push ecx
imul eax, dword [ebx - 0x11], 0x2fe68481
inc edi
enter 0xffffffffffffffff, 0xffffffffffffffff
jmp [ecx - 0x3f]
adc al, 0x66
mov edi, edi
lea esp, [esp]
btc dx, sp
mov ebp, 0x982e1c3e
xor dl, bl
dec dl
dec ebp
not dl
jno 0x78a96f
mov word [edi], bp
lea esp, [esp + 4]
jmp fcn.00690a01
movzx ebx, bp
rol edi, 2
sub edi, 0xc8b0b90e
sub ebx, 0x3e81f084
bswap edi
mov dword [esp + ebp*4 - 0x1c], eax
push edx
js 0x6d6e7b
dec eax
lea esp, [esp + 0x10]
jmp fcn.0066b3df
lea edx, [edx + edx*8 + 0x240a2b24]
sbb edx, edx
push ebp
mov ecx, edx
add edi, ebp
shr ecx, cl
call fcn.00754dee
mov edx, 0xf8b7b08f
sub esi, 1
movzx edx, byte [esi]
jmp 0x72085c
add dl, 0x94
push ebp
neg word [esp]
rol dl, 1
and ebp, ebp
xor dword [esp], ebp
shr bp, 3
xor bl, dl
lea edx, [esp + edx + 4]
sar word [esp + 1], 0xe5
mov bp, word [edx]
je 0x79494a
sub edi, 2
jmp 0x761963
call fcn.006a0b89
lea edx, [esi + 0x5d]
invalid
lea ebp, [edi + edi*2 - 0x377d5150]
mov dword [esp + ebp - 0x748c9784], ebp
lea esi, [esp + ebp - 0x748c9790]
mov edi, dword [esp + ebp - 0x748c9768]
dec bp
sar ebp, 0x1c
neg edi
mov word [esp + ebp - 6], bp
shl dword [esp + ebp*8 - 0x38], 0x2a
sbb edi, 0xb43207b4
jmp 0x78165b

Function at 0x7bfcd6
Capabilities:
Encode data using base64

Disassembly:
call fcn.007bf3b8
jmp 0x71f8ea
call fcn.006c4c8c
mov ecx, 0xbf895307
push ecx
mov ecx, dword [edi]
push 0x24b53e08
mov ebp, dword [edi + 4]
add edi, 8
mov dword fs:[ecx], ebp
lea esp, [esp + 8]
jmp fcn.007b57f6
push eax
ja 0x6d9c6c
lds edx, [ecx - 0x21]
pop ebx
xor al, 0x58
mov eax, 0x96e06808
xor cl, byte [eax - 0x34]
push eax
inc eax
scasb al, byte es:[edi]
wait
pop ds
mov cl, 0x69
invalid
mov dword [esp], 0x84b6090c
mov dword [esp + 4], 0x3f94208b
lea esp, [esp + 0xc]
je 0x5796b9
mov eax, 0x70023117
neg eax
ror eax, 0x2d
mov eax, dword [ebp + ebx*4]
jne 0x766e1e
fist word [eax - 0x2ceaa906]
mov cl, 0x81
loopne 0x7bfd1e
push ebp
mov ecx, 0xab8835b
adc byte [ecx + 0x4db0da7f], ch
invalid
lds edx, [eax - 0x3b]
mov eax, 0xa2a894ee
push eax
cdq
cmpsb byte [esi], byte es:[edi]
xor dword [edx - 0x485a2a0f], edx
retf

Function at 0x7bfe4e
Capabilities:
Encode data using base64

Disassembly:
add edi, 6
mov byte [esp + 5], 0x98
mov word ss:[edx], cx
lea esp, [esp + 0xc]
jmp fcn.007b57f6

Function at 0x7c0683
Capabilities:
Encode data using base64

Disassembly:
or dl, cl
not dl
mov word [edi], dx
lea esp, [esp + 4]
jmp fcn.007b57f6

Function at 0x7c3979
Capabilities:
Encode data using base64

Disassembly:
jmp 0x7b570f
lea esp, [esp + 8]
jmp fcn.007b57f6
mov word [edi], cx
jmp 0x795afb