joyce8/EMBER2024-capa huggingface dataset:
Function at 0x7f161a
Capabilities:
Check for software breakpoints

Disassembly:
push 0xb69bc610
shr eax, cl
mov dword [ebp], eax
jmp 0x844566
jne 0x9907af
push 0x57143791
mov word [esi], bp
push 0x4c9d2189
lea esp, [esp + 0x10]
jmp fcn.007ebae0
jmp 0x817d9e
adc edi, 8
jmp 0x7e7d4e
push 0x3342181
neg dword [esp]
adc ebp, 1
jmp 0x7623b9
mov dword ss:[edx], eax
push 0x328f2434
jmp 0x799ea1
push 0x1c2d1039
push 0x13931b95
mov word [esi], ax
call fcn.007b4c47
mov edx, 0x9e31bb03
ror edx, 0xc6
jae 0x9830ff
mov ecx, 0x41af201b
rol cx, 8
movzx eax, cl
mov eax, dword [ebp + ecx - 0x41af1b20]
shr ecx, 0x86
mov cl, byte [ebp + ecx - 0x106bc68]
jne 0x7c326b
sal esi, 1
mov ecx, 0x56534e79
sub byte [esi + 0x431d9197], 0xa3
push edi
arpl bp, di
ret
lea esp, [esp + 4]
jmp fcn.009737f8
not word [esp + 3]
lea esp, [esp + 8]
jmp fcn.009619f3
mov edx, dword [edx + edi - 0xe78c6ec]
mov eax, 0x9106483
bts eax, eax
shr eax, 0xf1
mov eax, dword [edi + eax - 0x484]
jae 0x7b1f2a
adc ebp, 6
mov byte [edi], cl
lea esp, [esp + 4]
jmp fcn.009619f3
adc esi, 2
add al, cl
jmp 0x7f1608

Function at 0x7f1628
Capabilities:
Check for software breakpoints

Disassembly:
push 0xb69bc610
shr eax, cl
mov dword [ebp], eax
jmp 0x844566
jne 0x9907af
push 0x57143791
mov word [esi], bp
push 0x4c9d2189
lea esp, [esp + 0x10]
jmp fcn.007ebae0
jmp 0x817d9e
adc edi, 8
jmp 0x7e7d4e
push 0x3342181
neg dword [esp]
adc ebp, 1
jmp 0x7623b9
mov dword ss:[edx], eax
push 0x328f2434
jmp 0x799ea1
push 0x1c2d1039
push 0x13931b95
mov word [esi], ax
call fcn.007b4c47
mov edx, 0x9e31bb03
ror edx, 0xc6
jae 0x9830ff
mov ecx, 0x41af201b
rol cx, 8
movzx eax, cl
mov eax, dword [ebp + ecx - 0x41af1b20]
shr ecx, 0x86
mov cl, byte [ebp + ecx - 0x106bc68]
jne 0x7c326b
sal esi, 1
mov ecx, 0x56534e79
sub byte [esi + 0x431d9197], 0xa3
push edi
arpl bp, di
ret
lea esp, [esp + 4]
jmp fcn.009737f8
not word [esp + 3]
lea esp, [esp + 8]
jmp fcn.009619f3
mov edx, dword [edx + edi - 0xe78c6ec]
mov eax, 0x9106483
bts eax, eax
shr eax, 0xf1
mov eax, dword [edi + eax - 0x484]
jae 0x7b1f2a
adc ebp, 6
mov byte [edi], cl
lea esp, [esp + 4]
jmp fcn.009619f3
adc esi, 2
add al, cl
jmp 0x7f1608

Function at 0x7f4538
Capabilities:
Check for software breakpoints

Disassembly:
push 0xf7bef63e
mov byte ss:[eax], cl
jmp 0x859cec
lea esp, [esp + 0x10]
jmp fcn.009619f3

Function at 0x7f6148
Capabilities:
Check for software breakpoints

Disassembly:
mov dword [esp], 0x8909e8b9
jb 0x9858d2
adc ebp, 4
shrd ax, di, cl
mov word [ebp], ax
jmp 0x960197
lea esp, [esp + 4]
jmp fcn.009619f3

Function at 0x7fa30b
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0x14]
jmp fcn.009619f3

Function at 0x7fb089
Capabilities:
Check for software breakpoints

Disassembly:
sub esi, 1
mov eax, 0xb9a73f01
movzx eax, byte [esi]
jmp 0x81da31
mov dword [esp], 0x6f9f3d09
push 0x35a408bb
xor al, bl
shr dword [esp + 4], 0xd3
shr dword [esp], 0x34
jns 0x777643

Function at 0x7fd615
Capabilities:
Check for software breakpoints

Disassembly:
mov dword [esp], 0xd03eef39
dec byte [esp + 1]
shl di, cl
mov word [ebp], di
lea esp, [esp + 4]
jmp fcn.009619f3
Function at 0x7fe634
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0x18]
jmp fcn.009619f3

Function at 0x8053e3
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0x18]
jmp fcn.009619f3

Function at 0x806840
Capabilities:
Check for software breakpoints

Disassembly:
push 0x8e10329a
lea esp, [esp + 8]
jmp fcn.009619f3
mov dword [esp], 0x4d933421
inc dword [esp]
mov dword [esp], eax
call fcn.007d0b89
mov eax, 0x233a6e36
cbw
mov dx, word [ebp + eax*2 - 0x4674006c]
lea eax, [eax*4 + 0x3182b08c]
and ax, ax
lea eax, [eax + eax*4 + 0x2d0b7eb2]
mov ax, word [ebp + 2]
jno 0x8248dd
mov eax, 0xf3a51b29
mul eax
xor eax, eax
xor eax, dword [ebp + eax*2]
shr dl, 0xe2
mov edx, dword [ebp + 4]
push 0xc8b70ab9
dec word [esp + 1]
adc ebp, 7
mov dword fs:[eax], edx
jmp 0x77babb
push 0x343e81a4
sal dword [esp], 0xcf
adc ebp, 1
jmp 0x855e92
push 0x8ea5a09a
not dx
call fcn.008492dd

Function at 0x80686b
Capabilities:
Check for software breakpoints

Disassembly:
push 0x8e10329a
lea esp, [esp + 8]
jmp fcn.009619f3
mov dword [esp], 0x4d933421
inc dword [esp]
mov dword [esp], eax
call fcn.007d0b89
mov eax, 0x233a6e36
cbw
mov dx, word [ebp + eax*2 - 0x4674006c]
lea eax, [eax*4 + 0x3182b08c]
and ax, ax
lea eax, [eax + eax*4 + 0x2d0b7eb2]
mov ax, word [ebp + 2]
jno 0x8248dd
mov eax, 0xf3a51b29
mul eax
xor eax, eax
xor eax, dword [ebp + eax*2]
shr dl, 0xe2
mov edx, dword [ebp + 4]
push 0xc8b70ab9
dec word [esp + 1]
adc ebp, 7
mov dword fs:[eax], edx
jmp 0x77babb
push 0x343e81a4
sal dword [esp], 0xcf
adc ebp, 1
jmp 0x855e92
push 0x8ea5a09a
not dx
call fcn.008492dd

Function at 0x8080c6
Capabilities:
Encode data using base64
Encrypt data using speck

Disassembly:
mov dword [esp + 8], 0xe0b1fcbe
rol dl, 1
shr byte [esp + 0xd], 0xc6
xor bl, dl
jmp 0x77a12c
xor byte [esp + 0xd], 0x19
xor dl, 0xa2
inc dl
mov dword [esp], 0xd489742b
jmp 0x84198b
neg dword [esp + 0xc]
not dl
jns 0x782dad

Function at 0x8094b7
Capabilities:
Check for software breakpoints

Disassembly:
mov word [ebp], ax
lea esp, [esp + 8]
jmp fcn.009619f3

Function at 0x80a14b
Capabilities:
Encode data using base64
Encrypt data using speck

Disassembly:
jo 0x814041
inc cx
not edx
inc bp
xor edi, edx
dec eax
sal dword [esp + 0x38], 0x8a
dec esi
lea edx, [esp + edx + 0x40]
jp 0x815d39
mov byte [eax], 0
jb 0x80964b
push edx
jnp 0x809629
and esp, dword [esi + 0x5dfa8e3d]
push 0x884f16d3
sbb eax, esp
dec ebx
sbb esp, dword [eax + 0x5aec1600]
in eax, dx
fcomp dword [esi + 0x4c]
xchg ebp, eax
aas
mov ebp, 0xa741fd01
cmpsd dword [esi], dword es:[edi]
mov ch, 0xab
invalid
not eax
not byte [esp + 2]
not dword [esp]
mov dword [esi], eax
call fcn.0079fe73
dec edi
pop esp
adc al, 0xc1
aaa
fnstsw word [ebp*4 + 0x3a8fe9]
jmp 0x80dbda
mov ebp, 0x68867581
mov edx, dword [esi + ebp - 0x68867581]
imul ebp, ebp
mov bp, word ss:[edx + ebp*2 - 0x11f65602]
jb 0x80962f
inc cx
xor eax, edi
sub ax, 0x2113
rol ax, 1
call fcn.0099801a
call fcn.00768d74
push 0xa5bdae16
adc esi, 1
call fcn.0080d730
call fcn.0084ec6d
lea esp, [esp + 0x10]
je 0x984f27
call 0x75384a
push 0x7524aa05
not dword [esp]
jmp 0x80a12d
Function at 0x80a1c1
Capabilities:
Check for software breakpoints

Disassembly:
sub esi, 2
mov word [esi], cx
lea esp, [esp + 4]
jmp fcn.0085a49e

Function at 0x80a2fa
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 8]
jmp fcn.009619f3

Function at 0x80bce9
Capabilities:
Check for software breakpoints

Disassembly:
inc cl
mov dword [esp], 0x7606fdaf
jmp fcn.00822cf2
xor edx, esi
call fcn.00954c87
mov edx, 0x4c077308
movsx ecx, dx
bt edx, 0xaf
mov ecx, dword [ebp + ecx*2 - 0xe610]
mov eax, edx
lea ebp, [ebp + eax - 0x4c077304]
lea edi, [edx + edx + 0x5d2bb1be]
shr eax, 0x71
sal eax, 0x61
xchg ecx, ebp
mov esi, edi
mov edi, ecx
neg eax
neg esi
mov ecx, 0x512b0e0c
jnp 0x7a7bf0
test dword [ebx - 0x8270807], 0xe0cb9de
sub edx, dword [ecx + 0xf]
mov esi, dword [0x320000a3]
pop ss
xor dl, byte [edi]
add ah, byte [0x6099db7b]
cmp dword [edi], edi
push edx
ja 0x79d8a9
iretd
inc word [esp]
shr edx, 8
ror byte [esp + 0xb], 0xe5
jae 0x78693b
jb 0x79d876
xor esi, edx
and esi, 0xff
push 0x3ba8cf9e
dec dword [esp]
sar dword [esp], 0xd8
mov esi, dword [esi*4 + 0x7759d8]
jb 0x7eb700
mov ebp, 0x6a6f7275
cld
ret

Function at 0x80c474
Capabilities:
Check for software breakpoints

Disassembly:
push 0x2e2db10b
shld dx, ax, cl
mov word [ebp], dx
push 0xe184ff9c
jmp 0x81ccfd
push 0x3d3ae512
lea esp, [esp + 0x14]
jmp fcn.009619f3

Function at 0x80d04e
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0x1c]
jmp fcn.009619f3
push 0xc01b49a0
not byte [esp + 8]
mov ecx, dword fs:[edx]
push 0xaba00f05
push 0x7a8608ac
push 0x7c31781b
mov dword [ebp], ecx
jmp 0x7600b3

Function at 0x80d51f
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0x1c]
jmp fcn.0085a49e
jmp 0x7c70be

Function at 0x80d5e7
Capabilities:
Check for software breakpoints

Disassembly:
push 0x9c390f19
mov word [ebp], di
lea esp, [esp + 0x14]
jmp fcn.009619f3

Function at 0x80fe1b
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.009619f3
push 0xeb1143b7
mov word [ebp], dx
push 0xe5375dbd
jmp 0x7b7df2

Function at 0x810efa
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.009619f3

Function at 0x8133f1
Capabilities:
Check for software breakpoints

Disassembly:
push 0xeb20731b
lea esp, [esp + 0xc]
jmp fcn.0085a49e

Function at 0x8146eb
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0x24]
jmp fcn.0085a49e

Function at 0x815c79
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.009619f3
Function at 0x817ca1
Capabilities:
Authenticate hmac
Check for software breakpoints

Disassembly:
shr dword [esp + 6], 0xa2
adc al, 0xae
sal word [esp + 6], 0x6d
jp 0x95f61a
rol al, 1
call fcn.007761d8
mov eax, 0x5f915d0a
mov edx, dword [ebp + eax - 0x5f915d0a]
lea ebp, [ebp + eax - 0x5f915d06]
dec al
push eax
lea esi, [esi + eax - 0x5f915d0a]
xor ax, ax
and eax, eax
ror dword [esp + eax - 0x5f910000], 0x31
movzx eax, byte [esi + eax - 0x5f910000]
jbe 0x9581bc
xor al, bl
jmp 0x969a60
dec byte [esp + 0xa]
xor al, 0xb4
xor byte [esp + 4], 0x36
neg dword [esp + 3]
ror al, 1
push 0xc183a737
add al, 0x26
not al
neg al
ror byte [esp + 0xc], 0xe1
sar byte [esp + 0xf], 0x41
sbb al, 0x3b
xor al, 0x22
xor bl, al
jmp 0x796e5d
push 0xefb2b908
push 0xfc9e4e1b
add al, 0x12
not al
jmp 0x78ceb7

Function at 0x81b019
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 8]
jmp fcn.009619f3

Function at 0x81b2b4
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0x1c]
jmp fcn.009619f3

Function at 0x81b7b8
Capabilities:
Check for software breakpoints

Disassembly:
jle 0x8274b7
rol cx, 1
mov dword [esp], 0x559c3185
dec dword [esp + 4]
push 0x4199ba98
dec cx
not cx
dec word [esp + 2]
rol dword [esp + 1], 0xd8
sar byte [esp + 0xa], 0xe3
xor cx, 0xd236
push 0x3781c7b3
call fcn.0078182e

Function at 0x81c5d4
Capabilities:
Check for software breakpoints

Disassembly:
mov dword [ebp], edi
lea esp, [esp + 0xc]
jmp fcn.009619f3

Function at 0x81c83d
Capabilities:
Check for software breakpoints

Disassembly:
mov dword [ebp], edx
push 0x6bb10126
jmp 0x7b5b27

Function at 0x81d11f
Capabilities:
Encode data using base64
Encrypt data using speck

Disassembly:
adc esi, 1
call fcn.0083abc9
mov word [esi], dx
call fcn.007697ed
mov eax, 0x9fb94f91
lea eax, [eax + eax + 0x453e6d95]
and eax, 0x58b4039c
mov eax, esi
call fcn.0084b5e7
mov ax, word [esi]
mov ecx, 0x2ca6e7a5
btc cx, 0x29
mov cx, word [esi + ecx*2 - 0x594dcb48]
jb 0x785162
and eax, 0xd6cc1637
mov ecx, dword es:[esi - 0x40]
lahf
jg 0x81d1bb
inc esp
movsb byte es:[edi], byte ds:[esi]
clc
lds esi, [edi]
xchg al, cl
test al, 0xa6
les esi, [ebp + 0x16]
cwde
in al, dx
mov dword [eax + ecx - 0x41b3478e], esp
out dx, al
scasd eax, dword es:[edi]
cli
and dword gs:[eax + 0xd9f5d4d], edi
mov dword [ecx + 0x44c70445], ecx
mov dword [ebp + 4], eax
mov dword [esp], 0xb007a732
invalid
invalid
invalid
mov edx, 0xa66d9561
mov ch, 0x42
movsb byte es:[edi], byte fs:[esi]
cmc
lea edi, [edx - 0xf]
mov ah, 0xd2
push 0x1b
cmp ebp, dword [edx - 0x4a65a26e]
xchg ecx, eax
mov eax, edi
mov eax, 0xe84031e9
push dword [eax - 0x4c]
dec edi
pop ss
invalid

Function at 0x81d167
Capabilities:
Encode data using base64
Encrypt data using speck

Disassembly:
jmp 0x800a16
mov dword [ebp + 4], eax
mov dword [esp], 0xb007a732
jmp 0x7997fa

Function at 0x81f356
Capabilities:
Check for software breakpoints

Disassembly:
mov word [ebp], di
jmp 0x8233d2
push 0x45282e1d
lea esp, [esp + 0x14]
jmp fcn.009619f3

Function at 0x8211a3
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 8]
jmp fcn.0085a49e
Function at 0x821e58
Capabilities:
Check for software breakpoints

Disassembly:
jmp 0x96255b
jmp 0x7c4c90
mov word [esi], dx
lea esp, [esp + 0x18]
jmp fcn.0085a49e

Function at 0x822503
Capabilities:
Check for software breakpoints

Disassembly:
not al
add dword [esp + 6], 0x1b8ac5ae
or cl, al
push 0xe5173c34
call fcn.0074f01a
mov edi, 0xaeb01fac
lea edx, [edi + 0x473b500f]
mov edi, dword [ebp]
and edx, 0x5088272a
neg edx
mov dx, word ss:[edi]
adc ebp, 1
call fcn.0075b00b
lea esp, [esp + 0x10]
jmp fcn.0085a49e

Function at 0x82312e
Capabilities:
Check for software breakpoints

Disassembly:
push 0x712ed013
mov dword [ebp], edi
lea esp, [esp + 0x10]
jmp fcn.009619f3
jmp 0x755a97
shl dword [esp + 5], 0xcc
add edi, ecx
jmp 0x7c21d9

Function at 0x823f34
Capabilities:
Check for software breakpoints

Disassembly:
push 0xf7933939
mov dword [esp + 4], 0xe229e8b0
add ebp, 6
push 0x46251d11
rol dword [esp + 7], 0x21
shld eax, edx, cl
jmp 0x79e078

Function at 0x8240a7
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0x2c]
jmp fcn.0085a49e

Function at 0x826d63
Capabilities:
Check for software breakpoints

Disassembly:
not word [esp + 0xc]
lea esp, [esp + 0x14]
jmp fcn.009619f3

Function at 0x82747f
Capabilities:
Check for software breakpoints

Disassembly:
mov dword [ebp], eax
jmp 0x8358b5
not eax
jmp 0x75b046
test ebx, ebx
call fcn.0079c036
inc ecx
mov esi, 0x843ada18
dec ecx
ror esi, 0xea
dec ebp
mov esp, dword [ecx]
inc ecx
setae dh
inc ecx
setae dh
inc cx
xor esi, 0x8b457132
xor al, 0x24
dec ecx
adc ecx, 4
push 0xc90fa324
push 0x62388d1b
push 0x983fe59d
inc ebp
mov dword [ecx], esi
call fcn.0084b824
scasb al, byte es:[edi]
scasd eax, dword es:[edi]
cdq
test byte [ecx + 0x47983867], al
xchg byte [eax + 0x2433a347], bh
push ecx
jle 0x8005ef
inc edi
inc esi
clc
invalid
mov dword [esp + eax*4], eax
xor cl, 0x84
dec cl
ror cl, 1
mov edx, dword [esp + ebp*2 - 0xbb66]
div ebp
or byte [esp + ebp - 0x5db0], dh
sbb cl, 0x2b
cbw
xor bl, cl
add dword [esp + ebp*2 - 0xbb66], edi
sar edx, 0xbb
cdq
shr bp, 0xae
push ebx
ror dx, 0xab
xchg bp, dx
adc ebp, esi
mov ebx, ecx
sal dx, 0xca
xchg edx, eax
btr dx, ax
add edx, ebx
push eax
sal edx, 2
and dword [esp + eax*8 - 0x2000], eax
mov eax, ebp
adc eax, edx
mov dword [ebp - 4], eax
sar word [esp], 7
jns 0x8005da
push 0x84969d27
jmp 0x7d528f

Function at 0x829251
Capabilities:
Encode data using base64
Encrypt data using speck

Disassembly:
dec eax
lea esp, [esp + 0x48]
ja fcn.007c61ae
stc
cmp edi, 0xf12f359d

Function at 0x8297d1
Capabilities:
Check for software breakpoints

Disassembly:
jmp 0x84547b
lea esp, [esp + 0xc]
jmp fcn.009619f3

Function at 0x833f4c
Capabilities:
Check for software breakpoints

Disassembly:
add ebp, 2
mov word [ebp], dx
lea esp, [esp + 4]
jmp fcn.009619f3

Function at 0x8398f1
Capabilities:
Check for software breakpoints

Disassembly:
xor bx, cx
sub esi, 2
mov word [esi], cx
lea esp, [esp + 0xc]
jmp fcn.0085a49e

Function at 0x83b7b6
Capabilities:
Check for software breakpoints

Disassembly:
neg cl
neg dword [esp + 0x13]
sbb cl, 0x3a
xor cl, 0x22
jmp 0x858dda
Function at 0x83e02b
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0x18]
jmp fcn.0085a49e

Function at 0x844e6c
Capabilities:
Check for software breakpoints

Disassembly:
mul edi
mov dword [ebp], edx
jmp 0x992b80
mov dword [esp], 0xec24e700
jb 0x7f943f
jmp 0x7c7304

Function at 0x844e8d
Capabilities:
Check for software breakpoints

Disassembly:
mov dword [ebp + 4], eax
not byte [esp + 2]
jmp 0x83f577
push 0xab90031
lea esp, [esp + 0x10]
jmp fcn.009619f3
sub esi, 2
push 0xe3c7f29
mov word [esi], dx
call fcn.00838a21
push 0x392436af
jmp 0x79044e

Function at 0x8473cf
Capabilities:
Check for software breakpoints

Disassembly:
not dword [esp + 7]
mov dword [ebp], eax
lea esp, [esp + 0x10]
jmp fcn.009619f3

Function at 0x84adc9
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0x14]
jmp fcn.009619f3

Function at 0x84c935
Capabilities:
Check for software breakpoints

Disassembly:
mov dword ss:[eax], ecx
lea esp, [esp + 0x10]
jmp fcn.009619f3

Function at 0x84cecd
Capabilities:
Check for software breakpoints

Disassembly:
imul cl
mov word [ebp], ax
push 0x4a894a9a
jmp 0x951c46

Function at 0x84f4e3
Capabilities:
Encode data using base64
Encrypt data using speck

Disassembly:
jmp 0x8595c1
mov ecx, edi
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10], edi
mov dword [esp + 4], edi
mov edi, dword [esp + 0x18]
jmp 0x808255
call fcn.0098ae9b

Function at 0x8541ec
Capabilities:
Check for software breakpoints

Disassembly:
mov word [esi], cx
lea esp, [esp + 8]
jmp fcn.0085a49e
jmp 0x7967eb

Function at 0x8542bf
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.009619f3

Function at 0x856430
Capabilities:
Check for software breakpoints

Disassembly:
add ebp, 2
push 0x6887a92
ror byte [esp + 7], 0x61
add dl, al
mov word [ebp], dx
push 0x9096e400
push 0x7a84d339
push 0xf02f8f02
lea esp, [esp + 0x14]
jmp fcn.009619f3
mov dword [esp], 0x991fce1d
jmp 0x7d410e

Function at 0x8564ef
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0x10]
jmp fcn.009619f3

Function at 0x8567ce
Capabilities:
Check for software breakpoints

Disassembly:
push 0xdc9e4988
mov word [ebp], di
lea esp, [esp + 0xc]
jmp fcn.009619f3

Function at 0x858731
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0x1c]
jmp fcn.009619f3

Function at 0x859de6
Capabilities:
Check for software breakpoints

Disassembly:
push 0xcad7c3e
mov dword [ebp], edx
push 0x9ea83a89
lea esp, [esp + 0x14]
jmp fcn.009619f3

Function at 0x94ffa1
Capabilities:
Encode data using base64
Encrypt data using speck

Disassembly:
mov dword [esp], 0xabe9faa
mov dword [ebp - 4], eax
ror dword [esp], 0x65
jae 0x81d5ce
mov ecx, 0x9ab3ee2f
mov edx, 0x230c0c26
mov edx, dword [edi + edx*2 - 0x4618184c]
sal ecx, cl
or ecx, ecx
jae 0x79a8da

Function at 0x94ffb8
Capabilities:
Encode data using base64
Encrypt data using speck

Disassembly:
mov dword [esp], 0xabe9faa
mov dword [ebp - 4], eax
ror dword [esp], 0x65
jae 0x81d5ce
mov ecx, 0x9ab3ee2f
mov edx, 0x230c0c26
mov edx, dword [edi + edx*2 - 0x4618184c]
sal ecx, cl
or ecx, ecx
jae 0x79a8da
Function at 0x951ed3
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0x10]
jmp fcn.009619f3

Function at 0x9525d7
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.009619f3

Function at 0x952f43
Capabilities:
Check for software breakpoints

Disassembly:
push 0xc72e0baa
lea esp, [esp + 0x10]
jmp fcn.009619f3

Function at 0x9541bb
Capabilities:
Check for software breakpoints

Disassembly:
adc ebp, 2
add ax, di
not dword [esp + 4]
mov word [ebp], ax
push 0x3ba0da24
push 0x622d22b4
lea esp, [esp + 0x10]
jmp fcn.009619f3

Function at 0x956e37
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 8]
jmp fcn.009619f3

Function at 0x958bf4
Capabilities:
Encode data using xor

Disassembly:
inc eax
dec dword [esp + 0xb]
dec esi
lea edx, [esp + edx + 0x10]
dec eax
mov dword [esp], 0x44a76710
jne 0x7f02c9
add byte [eax], al
add byte [esi + 0x18748327], cl
pop ss
test byte [ebx], al
mov byte [0x349a8d46], al
daa
xor dword [eax + ebx + 0x17], 0xffffff84
add esp, dword [edx + 0x349a8d46]
jbe 0x7a7bed
in eax, dx
xchg edi, eax
jecxz 0x7a7c55
jae 0x7a7c6a
shr ecx, cl
add al, 0xbb
and al, 0x9d
sub eax, 0xbceae7b2
scasd eax, dword es:[edi]
pop eax
jp 0x7a7ca3
jmp 0xe0fd3773
lahf
pop edi
or eax, 0x9456ce90
push es
invalid
pop ecx
outsb dx, byte [esi]
ret
mov dword [edi], ebp
push 0x888b2816
not byte [esp]
lea esp, [esp + 4]
jmp fcn.0080a109
dec ecx
mov dword [edx], eax
jp 0x962bcc
call fcn.009696c0
outsb dx, byte [esi]
jmp 0xe7a8baf9
jmp 0x7a7c39
add word [esp + 9], 0x1b29
inc ecx
inc dl
and dword [esp + 0xc], 0xbd98e02f
dec eax
shr dword [esp + 8], 0x43
shl word [esp + 0xc], 0x22
inc ecx
ror dl, 1
inc ebp
xor bh, dl
jmp 0x8237f2
jg 0x999c2f
push 0xfaa4d80a
dec eax
lea esp, [esp + 0x18]
jno fcn.007c61ae
bswap ebp
lea ebp, [ebp*4 + 0x1a8bb3ab]
mov ebp, dword fs:[eax]
jmp 0x7ce1e2
dec ecx
mov edi, dword [ecx]
inc ecx
mov ebx, 0x1a24ecb9
inc edi
mov ebx, dword [ebx + ecx - 0x1a24ecb1]
not byte [esp + 3]
mov word [esp + 5], 0x1a4
not dword [esp + 2]
dec ecx
add ecx, 0xc
jmp 0x81fb90

Function at 0x9594f9
Capabilities:
Check for software breakpoints

Disassembly:
mov dword [esp], 0xad39240a
mov ebp, esi
rol dword [esp], 0x70
sbb esi, 3
mov dword [esi], ebp
push 0xfb9a998e
push 0x6aafce8a
lea esp, [esp + 0xc]
jmp fcn.0085a49e

Function at 0x95a7aa
Capabilities:
Check for software breakpoints

Disassembly:
mov esi, dword [esp + esi - 0x7d22eefe]
push 0xb7b8cb12
lea esp, [esp + 0xc]
jmp fcn.009619f3

Function at 0x95c9f2
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 0x10]
jmp fcn.009619f3
push 0x4a78f99
jmp 0x958250

Function at 0x95f21f
Capabilities:
Check for software breakpoints

Disassembly:
and edx, eax
push 0xda2d921
not dword [esp]
push 0x8ebf9e8a
not edx
jmp 0x75f2e9

Function at 0x9622ac
Capabilities:
Check for software breakpoints

Disassembly:
lea esp, [esp + 8]
jmp fcn.009619f3
mov word [ebp], ax
jmp 0x76d80e
Function at 0x965ae3
Capabilities:
Check for software breakpoints

Disassembly:
je 0x835bf6
xor dl, bl
shr dword [esp], 0x5d
push 0x6a95fe36
rol dl, 1
neg dl
call fcn.007a2cc5
adc edi, 2
push 0xec14c308
shr al, cl
call fcn.007a524c
push 0xd88757ab
add word [esp + 2], 0xbbb1
adc ebp, 5
push 0x2f82e58d
mov byte [esp + 4], 0x1c
mov byte es:[ecx], dl
jmp fcn.00794fa0
adc edi, 1
mov word [edi], cx
not byte [esp]
lea esp, [esp + 4]
jmp fcn.007a7c01
mov dword [esp], 0xee3a50af
mov edx, 0xbda0f6b3
mov ax, word [ebp]
xadd dl, dh
sal edx, 0xb4
sar edx, 0x38
lea ebp, [ebp + edx*4 - 0xe6]
xor edx, edx
neg dword [esp + edx]
sbb al, 0x14
sar edx, 0x9d
lea esi, [esi + edx - 1]
xadd dword [esp + edx], edx
pop edx
adc al, 0x5a
shr dl, 0x22
movzx edx, byte [esi + edx*2 - 0x238b5e28]
push 0xf8d7a19
ja 0x7a12f2
call fcn.0075813c
mov eax, 0x1ebcc3a5
movzx ax, byte [edi + eax - 0x1ebcc3a5]
mov ecx, 0x61325eb1
rol ecx, cl
sal cx, cl
mov cl, byte [edi + 2]
jne 0x7e91d0
ficomp dword [esi - 0x3c]
pop edx
sbb dl, dl
aad 0xda
push edx
les edx, [edi + 0x55]
dec eax
or dh, ah
imul esp, dword [eax + edx*2 + 0x36336477], 0xfffffff5
mov dl, byte es:[esp + esi*8 + 0x1be41a1b]
and al, 0xda
in al, 4
jae 0x965b08
mov esi, dword [0x5114120b]
adc dl, byte [ecx + edx*2]
inc esp
dec ebx
je 0x965c00
jnp 0x965b14
wait
adc eax, 0x368b2c04
adc eax, ebx
xor byte [edx + 0x529561ba], al
cli
sbb eax, dword [ebx + eax*4 - 0x55]
mov byte [eax], bh
jp 0x965b7c
push eax
mov byte ss:[0x27d6c5d3], al
iretd
cmp byte [ecx], dh
invalid

Function at 0x965b31
Capabilities:
Check for software breakpoints
Encode data using xor

Disassembly:
je 0x835bf6
xor dl, bl
shr dword [esp], 0x5d
push 0x6a95fe36
rol dl, 1
neg dl
call fcn.007a2cc5
adc edi, 2
push 0xec14c308
shr al, cl
call fcn.007a524c
push 0xd88757ab
add word [esp + 2], 0xbbb1
adc ebp, 5
push 0x2f82e58d
mov byte [esp + 4], 0x1c
mov byte es:[ecx], dl
jmp fcn.00794fa0
adc edi, 1
mov word [edi], cx
not byte [esp]
lea esp, [esp + 4]
jmp fcn.007a7c01
mov dword [esp], 0xee3a50af
mov edx, 0xbda0f6b3
mov ax, word [ebp]
xadd dl, dh
sal edx, 0xb4
sar edx, 0x38
lea ebp, [ebp + edx*4 - 0xe6]
xor edx, edx
neg dword [esp + edx]
sbb al, 0x14
sar edx, 0x9d
lea esi, [esi + edx - 1]
xadd dword [esp + edx], edx
pop edx
adc al, 0x5a
shr dl, 0x22
movzx edx, byte [esi + edx*2 - 0x238b5e28]
push 0xf8d7a19
ja 0x7a12f2
call fcn.0075813c
mov eax, 0x1ebcc3a5
movzx ax, byte [edi + eax - 0x1ebcc3a5]
mov ecx, 0x61325eb1
rol ecx, cl
sal cx, cl
mov cl, byte [edi + 2]
jne 0x7e91d0
ficomp dword [esi - 0x3c]
pop edx
sbb dl, dl
aad 0xda
push edx
les edx, [edi + 0x55]
dec eax
or dh, ah
imul esp, dword [eax + edx*2 + 0x36336477], 0xfffffff5
mov dl, byte es:[esp + esi*8 + 0x1be41a1b]
and al, 0xda
in al, 4
jae 0x965b08
mov esi, dword [0x5114120b]
adc dl, byte [ecx + edx*2]
inc esp
dec ebx
je 0x965c00
jnp 0x965b14
wait
adc eax, 0x368b2c04
adc eax, ebx
xor byte [edx + 0x529561ba], al
cli
sbb eax, dword [ebx + eax*4 - 0x55]
mov byte [eax], bh
jp 0x965b7c
push eax
mov byte ss:[0x27d6c5d3], al
iretd
cmp byte [ecx], dh
invalid