joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1006999a
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
shr eax, 8
mov byte [esp], al
jmp 0x1006f648
movzx eax, al
push dword [esp]
mov byte [esp], bh
mov word [esp + 4], bx
mov byte [esp + 8], 0x2a
lea esp, [esp + 0x50]
jmp 0x1006754e

Function at 0x100699c0
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
lea esi, [edi - 0x1f2c591e]
or ecx, eax
sar ax, 0xa
xchg esi, eax
shr ax, 0xf
seta ah
mov eax, dword [ebp - 8]
bts esi, esi
rcl si, cl
shld si, ax, cl
bsf si, cx
xor ecx, dword [edi + 0x18]
add esp, 0x30

Function at 0x10069f39
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
bt di, ax
shl ecx, 8
mov word [esp], 0x979f
test ch, 0x5d
bt edi, 0x10
movzx eax, byte [eax + str.cw]
test di, si
bt ebp, esi
test bl, 0x69
test cx, cx
or ecx, eax
lahf
lea eax, [esi*8 + 0x3f0fed8d]
cwde
mov eax, ebx
push esi
lea esp, [esp + 0x44]
jmp 0x10067530

Function at 0x1006a1ba
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
mov ebx, dword [ecx + eax*4 + 0x104]
rcl ax, 0xb
rol ax, 0xc
xor ebx, dword [ecx + edx*4 + 0x504]
shrd dx, bx, cl
test ax, 0x9a17
and al, 0x8f
movzx eax, byte [ebp - 0x21]
or dl, 0x28
btr edx, edi
bswap dx
test dx, si
movzx edx, byte [ebp - 0x1e]
pushfd
cmp al, ah
test ah, dl
xor ebx, dword [ecx + eax*4 + 0xd04]
push esp
mov word [esp], 0x6f74
mov byte [esp], bl
mov byte [esp], 0xba
lea esp, [esp + 0x50]
jmp 0x10079042

Function at 0x1006a5ef
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
seta cl
mov ecx, dword [ebp - 8]
mov word [esp + 4], di
call fcn.1007ab26

Function at 0x1006b167
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
push edx
push dword [esp]
jmp 0x1006eae2
xor di, 0xf4db
ror edi, cl
mov dword [0x100606f8], eax
bsf bx, dx
xor bl, 0xc3
neg edi
bsf bx, ax
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
movzx di, cl
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
pushal
stc
cmp dword [edx], 0
push dword [esp]
lea esp, [esp + 0x28]
je 0x100715fe
daa
rcr esi, cl
cwde
mov esi, dword [0x1006077c]
setns ah
sub ah, 0x73
adc cx, 0xab6b
sar al, cl
mov ecx, esi
movzx ax, al
setbe al
mov eax, dword [esi + 4]
stc
stc
test dh, 0x17
jmp 0x1006c03c
cmp byte [eax + 0xd], 0
push ecx
lea esp, [esp + 4]
jne 0x10080758
bt sp, 3
mov edx, dword [edx]
cmc
nop
cmc
push 0x5d6c52e7
clc
cmp bx, 0x59a1
cmp dword [eax + 0x10], edx
lea esp, [esp + 4]
jg 0x10069f30
pushfd
lea esp, [esp + 4]
jae 0x1006a0d5
jmp 0x1006bf04
lea esp, [esp + 8]
jae 0x1006a0d5
call 0x1007ab20

Function at 0x1006b296
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
movzx eax, byte [eax + str.cw]
bt edx, ebp
or ecx, eax
shld ax, si, cl
shr al, 2
mov eax, dword [ebp - 4]
push ebp
clc
bt bp, sp
pushfd
xor ecx, dword [edi + 0x10]
mov byte [esp], 0x2e
cmp bl, al
test bl, cl
stc
shr eax, 0x18
push ebp
test ch, bl
mov dword [edx], ecx
bswap cx
shl cx, cl
sbb cl, cl
movzx ecx, byte [eax + str.cw]
bswap ax
daa
mov eax, dword [ebp + 0xc]
bt cx, 8
test di, 0x6583
pushfd
test dl, 0x73
shr eax, 0x10
jmp 0x1008071b
Function at 0x1006bf29
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
test bl, 0x15
test sp, 0xbf23
movzx eax, byte [eax + str.cw]
mov word [esp + 0xc], 0xbcf7
stc
or ecx, eax
bts eax, edx
pop eax
dec eax
not ax
mov eax, ebx
mov byte [esp + 8], 0xe8
stc
stc
bt ax, ax
shr eax, 8
call fcn.100677d1

Function at 0x1006c7ef
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
cmc
or ecx, eax
mov byte [esp], 0x46
mov byte [esp + 4], ah
mov byte [esp + 4], dh
mov byte [esp], 0x54
lea esp, [esp + 0x60]
jmp 0x1006756b
mov byte [esp], cl
movzx eax, byte [eax + str.cw]
jmp 0x1006bf5f

Function at 0x1006c932
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
movzx eax, bl
cmc
pushfd
mov byte [esp], bl
shl ecx, 8
bt bp, cx
jmp 0x1006f603
cmc
cmc
shr ebx, 0x18
mov word [esp], 0x5c6e
push 0x8db8b164
push ecx
clc
movzx eax, byte [eax + str.cw]
cmc
stc
or ecx, eax
xor ah, dl
and eax, 0xea57005a
jmp 0x1006d422

Function at 0x1006e022
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
lea esi, [ebx + 0x730fdb3b]
mov esi, dword [esp + 0x28]
pushfd
lea esp, [esp + 0x30]
call fcn.100370be
call 0x100700db
pushfd
pushfd
mov eax, dword [eax + 8]
mov word [esp], cx
lea esp, [esp + 0x28]
jmp 0x10076056
sal si, cl
xor ecx, ebp
push dword [esp + 4]
jmp 0x1006c2da
Function at 0x1006e050
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
rcr si, 0xf
mov dword [ecx + 0x2110], eax
shr si, cl
mov ecx, dword [ebp - 4]
sar si, cl
shrd esi, ecx, cl
rcr esi, 0x1c
xor ecx, ebp
call fcn.1007bde6
mov eax, esi
mov byte [esp + 4], 0xf4
bt eax, ebx
mov dword [ebp - 4], esi
test dh, 0xe
call fcn.10068676
setns dh
pushfd
lea edx, [ebp - 0x24]
bswap cx
mov byte [esp], cl
lea esp, [esp + 8]
jl 0x1007d95c
bswap cx
mov ecx, esi
push esp
lea esp, [esp + 4]
call fcn.10002e00
stc
aaa
shl cx, 6
mov eax, dword [esi]
rcr cl, cl
sar ch, cl
xor cl, bl
add esp, 4
shld cx, ax, 0xc
sar cl, 3
rol cx, cl
and cx, sp
lea ecx, [esi + eax*4]
lea esi, [ebp - 0x7bb41080]
setns ah
ror si, cl
and ah, 0xe7
mov eax, dword [ebp - 0x14]
lea esi, [edi*2 + 0x3a170a65]
btc si, bx
bts si, si
mov dword [ecx + 0x2104], eax
neg si
aas
sar eax, 1
or al, al
mov eax, dword [ebp - 0x10]
lea esi, [esp + 0x219931ba]
mov dword [ecx + 0x2108], eax
not si
mov eax, dword [ebp - 0xc]
shl esi, cl
movzx si, cl
cmp cx, dx
rcr si, 0xb
mov dword [ecx + 0x210c], eax
mov ah, 0xbd
mov eax, dword [ebp - 8]
add si, bp
sal si, 9
rcr si, cl
bts si, 6
mov dword [ecx + 0x2110], eax
jmp 0x1006fbef
sar si, cl
bswap si
mov ecx, dword [ebp - 4]
pushal
call fcn.1006e022
jmp 0x10080d95
seto cl
mov ecx, esi
pushal
lea esp, [esp + 0x20]
call fcn.10002e00
aad 0xc8
clc
ror al, 4
mov eax, dword [esi]
btc ecx, ebp
adc ch, 0xc
add esp, 4
sbb cx, 0x2279
cmc
lea ecx, [esi + eax*4]
btr si, dx
mov eax, dword [ebp - 0x14]
clc
mov dword [ecx + 0x2104], eax
sub si, bx
clc
mov eax, dword [ebp - 0x10]
ror esi, 0x18
mov dword [ecx + 0x2108], eax
setns ah
daa
btr ax, 0xa
mov eax, dword [ebp - 0xc]
btc si, di
movsx esi, bl
mov dword [ecx + 0x210c], eax
test dh, al
daa
mov eax, dword [ebp - 8]
sar esi, cl
mov dword [ecx + 0x2110], eax
rcl esi, cl
stc
btr cx, cx
mov ecx, dword [ebp - 4]
ror si, 1
sal si, cl
movsx si, al
shl si, 8
xor ecx, ebp
bswap si
pop esi
push 0x88315cd9
push dword [esp]
pushal
lea esp, [esp + 0x28]
call fcn.100370be
pushfd
pushal
pushal
mov esp, ebp
pushfd
push 0x85f2b6cb
call fcn.1006f120
pushfd
lea ecx, [esi + eax*4]
aad 0x18
cmc
btc ax, dx
mov eax, dword [ebp - 0x14]
movzx esi, dl
mov dword [ecx + 0x2104], eax
inc esi
pushfd
rcr si, cl
mov eax, dword [ebp - 0x10]
ror esi, cl
cmp dh, 0xfb
mov dword [ecx + 0x2108], eax
bsf eax, edi
and al, 0x9c
mov eax, dword [ebp - 0xc]
push 0x959b1d74
ror si, 3
movzx si, bl
shr esi, 0xa
mov dword [ecx + 0x210c], eax
cwde
shr esi, 0x1d
mov eax, dword [ebp - 8]
ror esi, cl
bts esi, 0x1f
jmp 0x1006a54f
movzx eax, byte [eax + str.cw]
cmp bp, 0x7a8f
cmp bh, cl
cmc
bt bx, bp
or ecx, eax
push ecx
cmp al, 0x66
daa
push 0xd35770fb
mov eax, dword [ebp - 4]
cmc
clc
mov byte [esp], cl
movzx eax, al
bt di, bp
stc
mov byte [esp], dl
shl ecx, 8
clc
movzx eax, byte [eax + str.cw]
test dh, bl
call fcn.1006d448
Function at 0x1006f1af
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
jmp 0x1006b3ca
mov byte [esp + 4], dl
mov word [esp], 0xaf99
lea esp, [esp + 0x5c]
jne 0x1006a02f
setne ah
mov eax, ebx
sbb ch, ah
shld cx, dx, cl
dec bl
mov ebx, dword [ebp - 0xc]
adc cl, ch
shr eax, 0x18
neg cl
inc cl
movzx ecx, byte [eax + str.cw]
push ebx
btr eax, 0x17
clc
lea eax, [ebp + 0xca90c18]
mov eax, ebx
mov byte [esp], bh
jmp 0x1007be8f
mov dword [ebp - 8], edx
jmp 0x10067d4d
cmc
shr eax, 0x10
call fcn.100794e1
bsr dx, cx
dec dx
sal edx, 0x10
sub eax, dword [0x100606ec]
add dl, ch
add dx, 0xc034
mov edx, dword [ebp + 0xc]
cmp cx, sp
cmp eax, 0x3e8
push 0xf1579ee4
pushfd
lea esp, [esp + 8]
ja 0x1006f130
push 0x65cbc308
shl cx, cl
mov ecx, dword [0x1006070c]
cmp ah, bl
stc
cmc
cmp dl, dl
test ecx, ecx
push dword [esp]
call fcn.1007de6e
Function at 0x1006f45c
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
sal si, 6
shl ecx, 8
bsr si, bp
dec esi
rol esi, cl
cmc
movzx eax, byte [eax + str.cw]
dec esi
shr si, 0xc
or ecx, eax
xchg si, ax
mov eax, dword [ebp - 8]
bt edx, ebx
pushfd
not si
bsr si, cx
movzx eax, al
sal esi, 0x19
lea esi, [edi - 0x46b75654]
shl ecx, 8
bt bx, dx
sal si, 5
cmp edi, esp
test bl, 0x41
movzx eax, byte [eax + str.cw]
ror esi, 0xb
or ecx, eax
lahf
aam 0x73
aaa
mov eax, dword [ebp - 8]
or si, 0xe5
sub si, cx
sub si, 0x5310
inc si
xor ecx, dword [edi + 0x14]
sub esp, 0xfffffffc
jns 0x100761d7
shr eax, 0x18
bswap esi
shr si, cl
dec esi
mov dword [edx + 4], ecx
test ah, dh
bsr cx, di
rcr cx, cl
rol si, 0xe
movzx ecx, byte [eax + str.cw]
shl si, cl
sub ax, si
mov eax, dword [ebp - 4]
bsf si, sp
sbb si, 0x3d3c
rcr si, 0xd
sub esi, 0x206af5a1
shr eax, 0x10
not si
dec si
movzx si, cl
movzx eax, al
rcr si, cl
push esi
shl ecx, 8
bts esi, 3
stc
movzx eax, byte [eax + str.cw]
sbb si, ax
stc
or ecx, eax
aam 0x35
daa
mov si, word [esp]
mov eax, dword [ebp + 0xc]
add si, ax
shr si, cl
shr eax, 8
lea esi, [eax - 0x29c70043]
pushal
movzx eax, al
movsx si, cl
shl si, 2
lea esi, [edi + 0xdae0f6c]
btr si, 0xb
shl ecx, 8
bts si, 9
dec si
movzx eax, byte [eax + str.cw]
push 0x7d732abf
or ecx, eax
mov eax, dword [esp + 0x10]
movzx eax, bl
sub si, 0xa771
push dword [esp]
not si
shl ecx, 8
pop esi
shr ebx, 0x18
and si, 0x44d0
inc esi
bswap si
movzx eax, byte [eax + str.cw]
call fcn.1006f230
mov esp, ebp
push 0xe83acfdb
call fcn.100772d1
call fcn.100740b7
jmp 0x10080663
movzx eax, byte [eax + str.cw]
dec si
xor esi, ecx
inc esi
cmc
or ecx, eax
ror esi, 4
xor si, 0x4de2
cwde
mov eax, dword [ebp + 0xc]
inc si
shr eax, 8
btc si, ax
rol si, cl
movzx eax, al
stc
add si, sp
bts si, ax
shr si, cl
shl ecx, 8
test ebp, 0x1eeec7fd
sal si, cl
dec esi
bsf si, sp
movzx eax, byte [eax + str.cw]
test ax, si
movsx esi, dl
bts si, bp
bsf si, cx
or ecx, eax
lahf
shrd ax, si, cl
btc si, cx
aas
movzx eax, bl
neg si
bt dx, 0xd
shl ecx, 8
shrd esi, eax, cl
not si
shr ebx, 0x18
shl si, cl
bsr si, sp
movzx eax, byte [eax + str.cw]
or esi, 0xdac0176
ror si, 1
shld si, cx, 2
btr si, bp
or ecx, eax
ror si, cl
mov eax, dword [ebp - 8]
dec si
sal si, 6
pushfd
bsr esi, ecx
xor ecx, dword [edi + 0x18]
stc
rol esi, 0x1e
shr eax, 0x10
jmp 0x10069fac
bswap si
movzx si, bl
add si, si
rcl esi, 3
shr eax, 0x18
push ecx
not si
mov dword [edx + 4], ecx
mov word [esp], sp
movzx ecx, byte [eax + str.cw]
pop eax
mov eax, dword [ebp - 4]
dec si
shr eax, 0x10
add si, dx
bt si, 0xb
cmc
bswap si
movzx eax, al
shrd si, bx, cl
shl ecx, 8
shr si, 2
clc
lea esi, [ecx + 0x1bf1499f]
jmp 0x10072074
movzx eax, al
mov byte [esp], 0x95
mov byte [esp + 0xc], 0
mov word [esp + 4], 0xd962
lea esp, [esp + 0x6c]
jmp 0x1006754e

Function at 0x1006feca
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
push dword [esp]
mov eax, dword [eax + 8]
pushfd
mov byte [esp], 0x70
pushal
mov byte [esp], bh
lea esp, [esp + 0x2c]
jmp 0x10076056
Function at 0x10071593
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
movzx eax, al
mov byte [esp + 0xc], bl
shl ecx, 8
pushfd
movzx eax, byte [eax + str.cw]
push dword [esp]
mov byte [esp + 4], 0xfa
stc
or ecx, eax
neg al
push dword [esp + 8]
pushfd
mov eax, dword [ebp + 0xc]
call fcn.10066dbb
adc ah, 0x67
push ebp
sar ebp, 0x1f
mov ebp, esp
not ax
mov ah, cl
sub esp, 0x24
add ah, 0xd
mov eax, dword [section..data]
test cl, 0x5b
cmc
cmp ch, 0xed
cmc
xor eax, ebp
cmp di, 0x5d78
push edi
call fcn.10074aef
push 0x5a700cc9
pushfd
pushfd
mov dword [eax], 0
lea esp, [esp + 0xc]

Function at 0x10071fef
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
xor dword [esp + 0x24], 0xc4
clc
call fcn.1007f1a0
push dword [esp]
lea esp, [esp + 0x4c]
jne 0x1006a02f
bt edi, 5
not ecx
mov eax, ebx
rcl bl, cl
shrd bx, ax, 5
rcl ch, cl
mov ebx, dword [ebp - 0xc]
movzx cx, dl
sub cx, 0x4987
shrd cx, si, cl
btr ecx, esp
shr eax, 0x18
cmp si, 0xb9b0
shr ch, 1
movzx ecx, byte [eax + str.cw]
rcl ah, cl
sal al, cl
mov eax, ebx
push 0xa0ed8159
pushal
mov byte [esp + 4], 0x63
clc
shr eax, 0x10
call fcn.1007338f
push 0x4e243fd6
pushal
pushfd
pop dword [esp + 0x20]
push ebp
xor esi, 0x51a87e8a
clc
clc
xor eax, 0xa5009145
bt cx, 1
xor edx, 0x8467a3db
jmp 0x1006f474

Function at 0x10072ef3
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
add di, 0x3b1a
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
shr di, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
stc
bt bx, ax
cmp dword [edx], 0
pushfd
pushfd
lea esp, [esp + 8]
je 0x100715fe
add si, bx
mov esi, dword [0x1006077c]
rcl cl, cl
mov ecx, esi
aas
aaa
add al, 0x68
cmc
mov eax, dword [esi + 4]
test eax, 0xf736b7c8
push ebx
cmp bx, 0x95d0
clc
cmp byte [eax + 0xd], 0
pushal
lea esp, [esp + 0x24]
jne 0x10080758
bt ax, dx
call fcn.1007fead
push esp
pop ebx
bts di, sp
mov dword [0x100606fc], edx
bt bx, 0xd
rcr bx, cl
movzx ebx, bl
neg dx
mov edx, dword [0x1006070c]
bsr ebx, esp
mov dword [0x100606f8], eax
bt ebp, 0x1d
movsx edi, dl
jmp 0x1006f0a9
mov dword [esp], ebx
push 0xa49c7e3c
lea esp, [esp + 0x3c]
call fcn.1004a6e0
jmp 0x1006f482
Function at 0x100740b7
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
setb bl
mov edi, dword [esp + 0x20]
movsx esi, cl
pop ebx
sets bl
mov esi, dword [esp + 0x20]
push dword [esp + 8]
pop ebx
pushal
mov dword [edx + 0xc], ecx
bswap bx
call fcn.100793ea
movsx bp, dl
pop ebp
pushal
pushfd
pushal
push dword [esp + 0x44]
ret 0x48
add si, bx
neg si
movzx eax, al
or si, bx
bswap esi
shl esi, 0x1f
sar si, 0xd
mov dword [edx + 8], ecx
test ch, ah
not ecx
rcr si, cl
sub esi, ecx
movzx ecx, byte [ebx + str.cw]
btc esi, esi
shl ecx, 8
btc bx, bx
pop esi
movzx eax, byte [eax + str.cw]
lea ebx, [ecx + 0x19f13b6]
ror bl, 3
or ecx, eax
dec al
mov eax, dword [ebp - 4]
pushal
rol bh, cl
ror si, 7
btr si, si
shr eax, 8
push dword [esp + 4]
movzx eax, al
sar bl, 1
shl ecx, 8
ror bx, cl
mov word [esp + 4], bx
movzx eax, byte [eax + str.cw]
shr si, cl
or ecx, eax
cwde
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], esp
movzx eax, al
not si
xchg si, bx
shl ecx, 8
movzx si, dl
pop esi
movzx ebx, dl
movzx eax, byte [eax + str.cw]
adc bx, di
or ecx, eax
shr esi, 0x19
shr esi, cl
sbb esi, 0xe5d0bc6
dec ebx
xor ecx, dword [edi + 0x1c]
pop edi
jmp 0x1006953b

Function at 0x100790b6
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
bsr cx, di
clc
clc
mov ecx, eax
cmp ax, 0x1d0d
clc
jmp 0x10076054
lea esp, [esp + 0x24]
je 0x100715fe
sbb ch, ch
add al, al
seto ch
mov esi, dword [0x1006077c]
cmc
bsr ax, di
rcl ch, 7
mov ecx, esi
rol al, cl
ror ax, cl
mov al, 0x9b
add ah, bl
mov eax, dword [esi + 4]
push edx
pushal
pushal
cmp byte [eax + 0xd], 0
push ecx
lea esp, [esp + 0x48]
jne 0x10080758
bt ecx, 0x18
je 0x1006f457
clc
mov edx, dword [edx]
test dl, bl
pushal
nop
mov word [esp], 0x95dc
mov byte [esp], dl
cmp dword [eax + 0x10], edx
pushfd
push 0xdd281431
pushfd
lea esp, [esp + 0x2c]
jae 0x1006a0d5
jmp 0x1007237a
call fcn.1007f027
pushfd
mov byte [esp], al
mov eax, dword [eax + 8]
pushal
push ecx
push dword [esp + 0x14]
mov byte [esp], 0x2f
lea esp, [esp + 0x2c]
jmp 0x10076056
mov eax, dword [eax]
movzx eax, byte [eax + str.cw]
jmp 0x100808b7
jmp 0x1006f38c
pushfd
mov dword [ebp - 4], ecx
call fcn.10080d25
lea esp, [esp + 0x50]
call fcn.1004a6e0
bts bx, 0xf
rol di, 0xe
bts di, 1
pushal
mov dword [0x100606fc], edx
movzx dx, bl
test bx, 0x85ed
add dl, ah
inc di
mov edx, dword [0x1006070c]
xadd bx, di
mov dword [0x100606f8], eax
xadd di, bx
test cl, cl
btc bx, 4
sar bl, cl
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
sbb di, 0xc03
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
bt ecx, 0x1c
pushfd
cmp dword [edx], 0
jmp 0x1007ddf6
push dword [esp]
pushal
stc
or ecx, eax
pushfd
sar ah, 2
cmp bl, dl
mov eax, dword [ebp - 4]
call fcn.100776ee
cmc
test eax, ebx
mov dword [edi - 0xc], eax
sar al, 1
bswap ax
mov byte [esp], 0x6d
sub eax, 0x12f38ebe
mov eax, ebx
jmp 0x100807cb

Function at 0x10079104
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
stc
cmp byte [eax + 0xd], 0
pushfd
mov byte [esp + 4], dh
lea esp, [esp + 8]
jne 0x10080758
cmc
mov edx, dword [edx]
call fcn.1006f10b
jmp 0x1007820e
Function at 0x1007939e
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
pushal
bt si, 8
movzx eax, byte [eax + str.cw]
cmc
cmc
bt si, bx
push edi
or ecx, eax
or al, bl
bswap eax
mov eax, dword [ebp - 8]
test bl, 0xb6
cmc
push dword [esp + 8]
xor ecx, dword [edi + 0x14]
jmp 0x1007b282
clc
shr eax, 0x18

Function at 0x100794e1
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
test bl, bl
movzx eax, byte [eax + str.cw]
push 0x8e452f54
or ecx, eax
push 0xd974833b
btr eax, esi
sub ax, ax
mov eax, edx
neg dx
inc dh
mov byte [esp], ch
stc
shr eax, 8
jmp 0x1007844e
test dl, bl
pushal
movzx eax, byte [eax + str.cw]
cmp dx, 0xc442
or ecx, eax
lahf
setnp ah
pushal
mov eax, edx
shld dx, cx, cl
shr eax, 8
shl dh, 1
push edx
xor dl, 0xbb
sub dl, dh
movzx eax, al
sal edx, cl
bswap dx
sal dx, cl
shl ecx, 8
push dword [esp + 4]
ror dh, 2
mov edx, dword [ebp + 8]
cmp ax, 0x357e
stc
movzx eax, byte [eax + str.cw]
jmp 0x10072186
bt edi, 0xf
bt di, ax
or ecx, eax
cmc
shrd eax, esi, cl
mov eax, dword [ebp - 4]
call fcn.1006f5b5
bt sp, sp
clc
shl ecx, 8
test bl, 0xcf
jmp 0x1006b10b
movzx eax, al
push dword [esp]
add esp, 0xc
jno 0x10078428
shl ecx, 8
jmp 0x1006fb0f

Function at 0x1007ab20
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
pushfd
mov eax, dword [eax + 8]
push ecx
lea esp, [esp + 0x2c]
jmp 0x10076056
stc
call fcn.10081c1e
stc
pushfd
cmp ebp, esi
mov edx, dword [ecx + edx*4 + 0x904]
call fcn.10072448
pushal
jmp 0x100721b2

Function at 0x1007bdfd
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
lea esp, [esp + 0x58]
je 0x10067cde
jmp 0x1006a025
Function at 0x1007bf07
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
lea esp, [esp + 0x4c]
jne 0x1006a02f
bsr si, sp
bsr ax, bx
bswap si
mov eax, ebx
neg cl
dec bl
mov ebx, dword [ebp - 0xc]
cmp eax, edi
cmc
btc esi, edi
shr eax, 0x18
shld cx, ax, cl
mov cl, 0xb0
movzx ecx, byte [eax + str.cw]
stc
xor esi, 0xd8e24492
ror si, cl
shld ax, ax, 1
mov eax, ebx
btr esi, 0xa
shrd si, bp, cl
shr eax, 0x10
shl si, 0xc
bt bx, sp
movzx eax, al
ror si, 0xd
stc
btc esi, 0xa
bsr si, bp
shl ecx, 8
rcl si, 0xd
jmp 0x100777cf
btr eax, ecx
sub al, bl
inc ah
shr edx, 0x18
or al, 0x2a
lahf
seta ah
cmc
mov eax, ebx
bswap bx
xadd si, bx
shr eax, 8
btr bx, 2
cmc
movzx eax, al
sub esi, 0x70f44f48
stc
push ecx
sbb bx, 0x30dd
mov ebx, dword [ebp - 0xc]
stc
sbb si, ax
mov edx, dword [ecx + edx*4 + 0xd04]
pushfd
and si, bp
movzx si, cl
xor edx, dword [ecx + eax*4 + 0x504]
shrd si, sp, 0xf
pushfd
mov eax, dword [ebp - 4]
add si, 0x2060
shr eax, 0x10
pushfd
sbb si, 0xcd73
xor si, si
movzx eax, al
shr si, 5
movzx si, bl
xor edx, dword [ecx + eax*4 + 0x904]
aad 0x17
aam 0xb7
bsr ax, di
dec si
movzx eax, bl
and si, 0x702c
xor edx, dword [ecx + eax*4 + 0x104]
movsx ax, dl
xor edx, dword [edi + 0x18]
clc
movsx esi, al
call fcn.10074aea
setle dl
shl ecx, 8
cmp sp, 0x5987
mov edx, dword [ebp + 8]
dec si
lea esi, [edx + 0x39d00abd]
sub si, 0x9b0
movzx eax, byte [eax + str.cw]
shr esi, 1
sub esi, ecx
movsx si, cl
sbb si, ax
or ecx, eax
neg al
sub eax, 0x6dd1bc5
sete al
lea esp, [esp + 0xc]
jp 0x1007bdaf
mov eax, dword [ebp - 4]
pushal
movzx eax, al
sar si, 5
xor si, 0x716a
shl ecx, 8
rol si, cl
stc
movzx eax, byte [eax + str.cw]
push dword [esp]
neg esi
shrd si, si, cl
not si
or ecx, eax
cmc
bts esi, 4
bt ax, ax
bts si, 4
mov eax, dword [ebp - 4]
ror si, cl
bswap si
xor ecx, dword [edi + 0x10]
movsx si, dl
lea esi, [ebp - 0x67049d49]
neg esi
jmp 0x10082723
and si, 0x338c
movzx eax, byte [eax + str.cw]
inc si
bt sp, ax
sbb si, ax
or ecx, eax
rcl ax, cl
xor si, bp
aam 0xfc
das
mov eax, edx
jmp 0x1007907e
xor dh, 0x3f
shld dx, cx, cl
shr eax, 8
push 0x222064b9
xchg edx, esi
movzx eax, al
push dword [esp]
push dword [esp + 4]
jmp 0x1006c80a
ror ah, cl
sub al, ah
pushfd
pushal
mov eax, dword [ebp - 4]
pushfd
push dword [esp]
call fcn.10075643
xor edx, dword [edi + 4]
pushfd
mov word [esp + 0xc], di
dec dword [ebp - 0x18]
mov byte [esp + 4], cl
pushfd
push 0x59349fc6
mov dword [ebp - 8], edx
jmp 0x10067cd4
shr eax, 0x18
pop esi
test di, 0xdda0
neg si
mov dword [edx], ecx
call fcn.100674e9

Function at 0x1007db20
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
dec dword [ebp - 0x18]
pushfd
jmp 0x1007f118
jmp 0x10065d66
mov word [esp + 4], 0xffea
pushfd
mov dword [ebp - 8], edx
jmp 0x1006f235
Function at 0x1007f2c4
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
bsr si, sp
shr eax, 0x10
bswap si
bts si, si
rcl si, 6
and si, 0x5587
movzx eax, al
bsf si, ax
mov dword [edx + 8], ecx
xor si, si
test bl, ah
movzx ecx, byte [ebx + str.cw]
cmc
bsf bx, dx
shl ecx, 8
cmc
bt ax, 4
sar esi, cl
movzx eax, byte [eax + str.cw]
sub bx, bx
shl bl, cl
or ecx, eax
pushal
aas
shrd si, dx, 0xb
mov eax, dword [ebp - 4]
test dl, al
xadd bx, si
bswap si
shr esi, cl
shr eax, 8
add bx, 0x5780
movzx eax, al
movzx si, dl
shl ecx, 8
not bl
movzx eax, byte [eax + str.cw]
pushal
rcr si, cl
or ecx, eax
bsr ax, cx
pop ebx
push dword [esp + 4]
dec si
mov eax, dword [ebp + 0xc]
sub si, bx
xor bl, dl
add si, 0x99f0
add bl, 0x6d
movzx eax, al
xor esi, 0xcc38dcbe
shl ecx, 8
cmp ch, dh
movzx eax, byte [eax + str.cw]
call fcn.1006b0f0
and al, 0x52
ja 0x10069a41
ret 0xf66
mov dh, 0xd1
or byte [ecx - 0x4d], ah
and eax, 0x3b8c2ce7
cmp eax, 0x594df60a
mov edi, 0xa5ce2225
mov al, byte [0xb42b3d73]
cmp dword [ecx + 0x7b], ebp
invalid
or ecx, eax
sar ah, cl
rcl eax, cl
rol ax, cl
not al
mov eax, dword [ebp - 8]
mov word [esp + 4], si
mov byte [esp], ah
xor ecx, dword [edi + 0x18]
mov byte [esp + 0xc], ah
mov word [esp + 4], di
mov dword [esp], ecx
lea esp, [esp + 0x58]
jmp 0x100699eb

Function at 0x1007fead
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
stc
cmp dword [eax + 0x10], edx
push dword [esp + 4]
pushal
mov word [esp + 4], 0xe2be
push eax
lea esp, [esp + 0x30]
jae 0x1006a0d5
push ebp
jmp 0x1007c421
pushfd
mov word [esp + 4], cx
mov edx, dword [edx]
cmp al, ch
test ah, cl
nop
jmp 0x1007efa9

Function at 0x10080748
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
push 0x76b5c814
pushal
lea esp, [esp + 0x28]
jae 0x100715fe

Function at 0x10080a6f
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
movzx eax, al
mov word [esp + 8], sp
pushal
mov byte [esp + 0x10], 0xd3
mov byte [esp], 0xf1
lea esp, [esp + 0x30]
jmp 0x1006754e
clc
bt eax, 0x14
or ecx, eax
btr ax, 7
mov eax, ebx
test dl, ch
test ebx, 0x8390ebd7
shr eax, 8
pushfd
jmp 0x1006a120

Function at 0x10080ce5
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
mov edx, dword [ecx + edx*4 + 0xd04]
cmp dh, dh
push 0x69184ea4
pushal
mov byte [esp], ah
xor edx, dword [ecx + eax*4 + 0x504]
bts eax, esp
aas
bswap ax
sub eax, 0x4dbb5b1b
mov eax, dword [ebp - 4]
cmp cl, ah
jmp 0x10066c0c
bt ebp, edx
jmp 0x100805ed
shr eax, 0x10
call fcn.10080ee4
shrd si, dx, cl
neg si
sar eax, 0x10
not esi
neg si
bt bx, 0xe
rcl si, 1
mov dword [ebp - 4], edx
btc dx, ax
bsr dx, di
movzx si, dl
movzx edx, al
bsr ax, ax
mov eax, dword [ebp - 0x14]
cmc
cmc
cmc
sar eax, 0x18
call fcn.1006ffa7
pushfd
lea esp, [esp + 0x34]
je 0x10067cde
neg ah
shr edx, 0x18
sal eax, 0x10
bt ax, si
or al, 0xc3
mov eax, ebx
sar bh, cl
not bh
shr eax, 8
adc bl, bl
adc bl, 0xa3
test bl, al
not bl
movzx eax, al
rol ebx, 0x15
not ebx
xor bx, si
mov ebx, dword [ebp - 0xc]
cmp edx, edi
jmp 0x10065cd8