joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1017bd49
Capabilities:
Encode data using base64

Disassembly:
mov bp, word [edi]
mov dword [esp], 0x93222c89
sal dword [esp + 1], 0x4f
mov dx, word [edi + 2]
mov ecx, dword [esp + 3]
sbb ecx, dword [esp + ecx*2 - 0x40192228]
mov cl, byte [edi + ecx*2 - 0x5dd90904]
adc edi, 3
dec word [esp + 3]
sal word [esp], 0x6d
shld bp, dx, cl
push 0x130597b1
mov word [edi], bp
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x1017ca44
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], dx
lea esp, [esp + 0x10]
jmp fcn.101e22c9

Function at 0x1017cff3
Capabilities:
Encode data using base64

Disassembly:
push 0x55bd2680
mov word [edi], dx
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x1017d063
Capabilities:
Encode data using base64

Disassembly:
jmp 0x101ac21d
lea esp, [esp + 8]
jmp fcn.101e22c9

Function at 0x1017d167
Capabilities:
Encode data using base64

Disassembly:
push 0x4132aebb
mov word [edi], cx
mov dword [esp + 4], 0x3a0ce20e
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x1017d3b4
Capabilities:
Encode data using base64

Disassembly:
shr cx, 1
rcr edx, cl
call fcn.102214d2

Function at 0x101802f7
Capabilities:
Encode data using base64

Disassembly:
or edx, 0x4c25c58f
lea ecx, [esp + ecx + 4]
mov edx, dword [ecx + edx - 0x6d65dfbf]
sbb ebp, 4
call fcn.1017dc06
jp 0x10230d29
call fcn.1018f6a8
sbb ebp, 2
jmp 0x1022a811

Function at 0x10180c2a
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x101816fc
Capabilities:
Encode data using base64

Disassembly:
shl word [esp + 2], 0x2e
push 0x8a34f938
adc ebp, 1
call fcn.101f9115
mov ebx, dword [esp + 0x10]
push 0xe29b95b1
jmp 0x1017f6df
push 0x110806ba
lea esp, [esp + 0x1c]
jmp fcn.10188d08
mov dword [esp], 0x45a54399
mov eax, 0xcc328782
mov eax, dword [ebp]
mov ecx, 0xc7b4bb87
lea ecx, [ecx - 0x1641b75d]
movzx cx, byte ss:[eax]
jmp 0x1017edcc

Function at 0x10181cb3
Capabilities:
Encode data using base64

Disassembly:
add dl, cl
push 0x1f8e75be
push 0x97ab90ad
mov word [edi], dx
mov dword [esp + 0x10], 0x7f0f372a
push 0x552f16ad
lea esp, [esp + 0x18]
jmp fcn.101e22c9

Function at 0x10181ee9
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 4]
call eax
mov esi, 0xbd04afa9
mov ebp, dword [ebp - 4]
call fcn.1021cfef

Function at 0x10181f8a
Capabilities:
Encode data using base64

Disassembly:
push 0xdb3daca1
dec eax
dec word [esp + 1]
xor byte [esp], 0x21
jl 0x102403f2
ror eax, 2
jmp 0x101a2d5b

Function at 0x1018545b
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp], ecx
movzx dx, byte [edi]
call fcn.1021c516

Function at 0x10185469
Capabilities:
Encode data using base64

Disassembly:
call fcn.102193ac
push 0x1dacd2bb
mov byte es:[ecx], dl
jmp 0x1018a04a
lea esp, [esp + 0x10]
jmp fcn.101e22c9
Function at 0x10186379
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp + ebx*2 - 0xcccd63c], esi
dec ebx
dec ebp
dec ebp
push ecx
mov ebx, 0
movzx esi, bp
mov dword [esp + esi - 0x7e3c], ebx
lea ecx, [esi + esi*8 + 0x12868493]
bt si, 0x84
rol bp, cl
mov esi, dword [esp + esi*4 - 0x1f920]
rol esi, cl
neg ecx
not esi
call fcn.101ecd9d
mov edx, dword [ebp]
call fcn.1016a0b9

Function at 0x101863bd
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp], 0x5910f30d
mov dword [edi], eax
jmp 0x101a61a8
lea esp, [esp + 8]
jmp fcn.101e22c9

Function at 0x101863cc
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
mov ecx, dword [edi + 4]
jle 0x101cff6a
add ebp, 8
push 0x15295113
call fcn.101ba733
adc edi, 3
push 0x2e8ecda2
push 0xe61f25a1
mov dword [esp + 8], 0x66af430c
xor ebp, ebp
push 0x300ad723
test ecx, ecx
jmp 0x101f002f
lea esp, [esp + 0x10]
je 0x102200f1
call fcn.101681e3
ficomp dword [esi]
mov cl, 0xc5
cmp al, 0xb0
pop esp
add byte [edi + 0x560de99f], bh
jmp 0x1023565a
stosd dword es:[edi], eax
stosd dword es:[edi], eax
int3

Function at 0x101863e6
Capabilities:
Encode data using base64

Disassembly:
inc ebp
mov byte [esp], al
push 0xa8e843b
dec eax
lea esp, [esp + 0x20]
js fcn.101b835a
inc ecx
xor bh, ah
dec eax
mov dword [esp], 0x398d6ea9
dec word [esp + 7]
dec esi
lea esp, [esp + 0x10]
push 0xfb2d0a1b
jp 0x10173000
ror eax, 0xd7
push ebp
pop ss
imul ebx, dword [ecx], 0x50f0e46e
and dword [ecx], esp
push edx
daa
push ecx
in eax, dx
imul dword [esi + 0x12]
xchg ebx, eax
xor dword [esi + 0x5082750b], ecx
out dx, al
out 0x97, eax
inc ebp
in eax, 0x74
jbe 0x10186462
inc edi
mov cl, 0xfb
retf 0x9919
xchg esp, eax
fnsave dword [esi]
sbb dword [esi - 0x4b4d634], ebx
xchg byte [edx], ah
nop
push ds
das
cmp dword [edx], esp
shl byte [eax - 0x32], cl
mov bh, 0xcd
mov dh, 0x36
test byte [edx], bh
add edx, dword [ecx]
ret 0xc9d6

Function at 0x1018769a
Capabilities:
Encode data using base64

Disassembly:
adc edi, 2
call fcn.1023badc
cmc

Function at 0x10187ae5
Capabilities:
Encode data using base64

Disassembly:
jmp 0x1020102e
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x10188789
Capabilities:
Encode data using base64

Disassembly:
mov dword [ecx], edx
not byte [esp + 5]
lea esp, [esp + 8]
jmp fcn.101e22c9

Function at 0x10188ce8
Capabilities:
Encode data using base64

Disassembly:
sub ebp, 2
push 0x7863018
push 0x1c8c3b37
call fcn.101660cc
pop ecx
call fcn.101e1243

Function at 0x1018a053
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x10]
jmp fcn.10188d08

Function at 0x1018a0a7
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp], 0x52020daf
not al
push 0x94a7e69c
jmp 0x101b28de
push 0xbab98631
push 0x6f30d72f
jmp 0x101f3123
not byte [esp + 0xf]
call fcn.101d4823
push 0xdb87119f
inc al
ror al, 1
dec word [esp + 9]
jl 0x101a0949
dec al
neg al
call fcn.10175020
mov dword [edi], ebp
jmp 0x101a6633
Function at 0x1018a839
Capabilities:
Encode data using base64

Disassembly:
push 0x73ae0818
call fcn.1022b428
add byte [eax], al
add byte [edi + 0x63], bl
js 0x1018a8b4
je 0x1018a84d
insb byte es:[edi], dx
sub eax, 0xac716bb0
into
les esi, [ecx]
mov cl, 0x22
bound edi, qword [edx + 0x31]
dec edi
xchg esi, eax
lodsb al, byte [esi]
push edi
adc edi, 0xf17833e8
out 0x84, eax
test esp, esp
sbb al, 0x24
int3

Function at 0x1018d6f5
Capabilities:
Encode data using base64

Disassembly:
ror ax, 1
not word [esp + 0xc]
not byte [esp]
xor bx, ax
sub dword [esp + 1], 0xf23749be
sbb edi, 1
call fcn.101faa79
xor ax, bx
mov dword [esp + 4], 0x1f1389ad
not ax
jmp 0x101a2082
push 0xb4167d91
push 0x9c8aebad
dec ax
xor ax, 0x3d96
sal word [esp + 4], 0x22
jne 0x1016cd1e

Function at 0x1018e890
Capabilities:
Encode data using base64

Disassembly:
dec word [esp + 8]
dec eax
mov dword [esp], 0xf4a2ca97
inc ecx
not dh
jl 0x101c1c0c
js 0x101f915f
lea esp, [esp + 8]
jmp fcn.10188d08
push 0x258b029b
inc ecx
ror dh, 1
inc ecx
xor dh, 0xbe
dec byte [esp + 0x24]
inc ecx
not dh
shr word [esp + 2], 0xc8
call fcn.10180f38

Function at 0x1018e8a7
Capabilities:
Encode data using base64

Disassembly:
dec di
xor bl, cl
shl edi, 0xe1
sub edi, 0xc9999a86
add ecx, esp
btr di, di
mov di, word [ecx]
sbb ebp, 1
call fcn.101ab264
lea esp, [esp + 4]
jmp 0x101e94b9
adc edi, 4
jmp 0x10208df4
push ebp
mov dword [esp], 0xc5f74444
call fcn.101e6f82
call fcn.101a263b
mov edi, 0xb130f39
neg edi
sbb esi, 0
movzx ecx, byte [esi]
btr edi, 0x27
neg di
xor cl, bl
inc edi
sub cl, 0x89
ror cl, 1
btc edi, 0x20
or edi, 0xd83be382
xor cl, 0x26
shl edi, 0x26
and di, di
not cl
neg cl
bswap edi
jmp 0x10177255

Function at 0x1018ea28
Capabilities:
Encode data using base64

Disassembly:
jmp 0x1023389f
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x1018f2b2
Capabilities:
Encode data using base64

Disassembly:
push 0xfa0d10f
shl dword [esp], 0x91
shr cx, 1
jmp 0x10194e2e
mov dword [esp], 0xf52b2289
add edi, 4
ror word [esp + 2], 0x83
mov dword [esp], eax
jae 0x101c4500
mov ebp, dword [edi + ebp*2 - 0x5d5fd616]
mov cx, word [edi + 4]
adc edi, 2
jmp 0x10173ec3
push 0xb82e1b9e
rcr ebp, cl
jmp 0x101ef12a
jmp 0x10212428
not dword [esp]
mov dword [edi], ebp
push 0x8f2a3185
call fcn.102307ef

Function at 0x1018f67e
Capabilities:
Encode data using base64

Disassembly:
xor bl, al
sal dword [esp + 0xc], 0x52
setns byte [esp + 4]
sar dword [esp + 4], 0x2e
lea eax, [esp + eax + 0x10]
mov word [eax], dx
lea esp, [esp + 0x10]
jns fcn.101e22c9
inc ecx
rol bl, 1
call fcn.10179499

Function at 0x1018f6a8
Capabilities:
Encode data using base64

Disassembly:
mov word [ebp], ax
lea esp, [esp + 4]
jmp fcn.10188d08

Function at 0x10191aa7
Capabilities:
Execute syscall

Disassembly:
mov edx, dword [edx + edi - 0x543e9f00]
jmp 0x101ccf52
mov dword [esp], 0x98bd30f
add edi, 4
push 0xc80a82b6
sal dword [esp + 4], 0x61
inc byte [esp + 5]
xor ebp, ebp
test edx, edx
call fcn.102076f8
call fcn.10188789
syscall
inc ecx
push ecx
dec ecx
mov ecx, 0x6a135bb3
mov esi, 0x68e6b5e5
xchg ebp, eax
ret 0x6139

Function at 0x10192a39
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 8]
jmp fcn.10188d08
Function at 0x101962e7
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
mov esp, ebp
push edi
mov edi, 0xbf835b1a
push esi
movsx esi, di
jmp 0x101b7d04
mov dword [esp], 0xad3cc5a6
and ebp, 0xfffffffc
not dword [esp]
shr dword [esp], 0x99
sbb ebp, ecx
jmp 0x10172896
dec dl
jmp 0x101b68dc
js 0x1018a84d
ror dl, 1
jmp 0x1018fb11
push 0x91fea12
lea esp, [esp + 4]
jmp fcn.101e22c9
call fcn.101d1d57
test dword [esi], edx
arpl word [eax + eax*8 - 0x2f], cx
sbb al, 0x33
invalid
lea esi, [esi*8 - 0x67e305fc]
pushfd
bt edi, 0x92
inc di
mov esi, edx
adc di, di
ror edi, 0x21
mov edi, ebp
cld
rep movsb byte es:[edi], byte [esi]
popfd
pop esi
mov edi, 0xb315f8a7
pop edi
jmp 0x1019abae

Function at 0x10196a0c
Capabilities:
Encode data using base64

Disassembly:
jb 0x101ebfde
inc sp
xor esp, edi
call fcn.1022f02c
inc ebp
movzx esi, word [ecx]
inc sp
xor esi, edi
jmp 0x101d9de1

Function at 0x1019b099
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x10]
jmp fcn.101e22c9

Function at 0x1019b752
Capabilities:
Encode data using xor

Disassembly:
dec eax
mov dword [esp], 0x5d69bde2
call int.1023b78a
add byte [eax], al
push ebx
je 0x1019b7b2
popal
jae 0x1019b7dd
inc ebp
jb 0x1019b7de
outsd dx, dword [esi]
jb 0x1019b76f
mov ecx, 0xfeb8c321
mov ax, word [edi]
mov dx, word [edi + 2]
btr ecx, ecx
mov cl, byte [edi + 4]
adc edi, 4
jmp 0x101f4525
in eax, 0x61
jmp 0x1019b81b
mov eax, dword [0xd2280c03]
cmp ch, byte [ebx - 0x51]
or eax, 0xf362211a
add ecx, dword [eax + ebp]
sar byte [edx], cl
imul ebp, dword [edi + 0x62211a0d], 0xfffffff3
loopne 0x1019b80d
pop ds
in eax, 0x43
push ds
stosb byte es:[edi], al
xchg dl, cl
push ss
push cs
cmp dword [ebx], ecx
add byte [esi], ah
pop ss
daa
add al, 0x1a
and dword [edi], edx
xor ch, byte [esi]
pop ss
aas
push ds
imul dh
invalid
inc edi
salc
xchg ebp, eax
adc al, 0xa
mov ecx, 0xada06d2a
adc esp, dword [esi - 5]
mov esi, 0xb749a947
jl 0x1019b7f3
inc edi
test eax, 0xd27cb749
mov ebx, 0xf656df1a
and al, 0xe
push cs
mov es, word [esi + 0x42]
mov edx, 0xb9008e96
jae 0x1019b839
scasd eax, dword es:[edi]
jmp 0x66e960fc
xor al, 0x53
adc esp, dword [edi + 0x7e4416f2]
loope 0x1019b828
das
sbb ah, byte [esi]
lcall 0x3ba, 0x752f475
inc edx
aad 0xad
and al, 0x54
add dword [edx], eax
inc ebp
invalid
call 0x10175f0a
movsb byte es:[edi], byte [esi]
mov byte [0x52f589de], al
cmc
push edx
dec edi
fldenv [esi - 0x21552a5a]
jl 0x101d0cb1
lea ebp, [edx - 0xa126b2e]
push ecx
pop ebp
aad 0xc2
dec edi
push esi
or al, 0xd3
movsb byte es:[edi], byte [esi]
clc
cld
fnsave dword [ebp - 0x58]
push 0x8ca10bba
not word [esp]
shrd ax, dx, cl
jmp 0x101d0ca8

Function at 0x1019cb3b
Capabilities:
Encode data using base64

Disassembly:
mov word [edi], bp
lea esp, [esp + 8]
jmp fcn.101e22c9

Function at 0x1019d90d
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp], 0xbf1bdba6
sbb ebp, 1
push 0x79b67515
push 0xadac9eb4
mov word [ebp], cx
jmp 0x101719e5

Function at 0x1019e211
Capabilities:
Encode data using base64

Disassembly:
push 0x791d8683
push 0xeb089dbd
mov dword [edi], ebp
call fcn.101ba5a0
Function at 0x1019eb70
Capabilities:
Encode data using base64

Disassembly:
shr esi, 0xf6
movzx esi, byte [edx + esi*2 - 0x410]
call fcn.10175e80
xor eax, 0x23333035
jmp 0x102010a7
mov esi, 0x8222cebe
jmp 0x10179489
dec ecx
push 0xf2b51620
push 0x5331de19
lea esp, [esp + 0x24]
jne 0x101e2692
pop esi
push 0xc984c824
mov word [esp + 1], 0xa61a
push 0xa813e70b
not eax
call fcn.1017169e
mov ecx, dword [ebp]
mov eax, dword [ebp + 4]
call int.101bb1b5
push 0x28a1af95
dec bl
sal word [esp + 2], 0x29
rol bl, 1
dec eax
mov dword [esp + 8], 0x3eafab22
dec eax
inc dword [esp + 0xd]
ror dword [esp + 7], 0xf
dec bl
xor bl, 0x99
dec bl
sar byte [esp + 5], 0x42
call fcn.1022bf52
mov ecx, dword [edi]
mov edx, 0xd595dd9e
lea edx, [edx*4 + 0x74998b9b]
mov dx, word [edi + 4]
add edi, 6
mov word ss:[ecx], dx
jmp fcn.101e22c9

Function at 0x1019ed0d
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp], 0xfc821439
sub word [esp], 0xc19a
shld bp, ax, cl
push 0xf12d71b9
push 0xafa40c0d
mov word [edi], bp
lea esp, [esp + 0x10]
jmp fcn.101e22c9

Function at 0x1019fbb3
Capabilities:
Encode data using base64

Disassembly:
call fcn.1018f6c1
jmp 0x101ef100
mov edx, 0x73216531
mov edx, dword [edi + edx - 0x73216531]
mov ebp, dword fs:[edx]
mov dword [edi], ebp
jmp fcn.101e22c9

Function at 0x1019fbc4
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x18]
jmp fcn.101e22c9

Function at 0x1019fc2d
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x24]
jmp fcn.101e22c9

Function at 0x101a0713
Capabilities:
Encode data using base64

Disassembly:
push 0xf19e098d
push 0xd9b7da8f
shld ebp, edx, cl
push 0xe72c1e35
not byte [esp + 1]
push 0x5baeccb6
mov dword [edi], ebp
lea esp, [esp + 0x14]
jmp fcn.101e22c9

Function at 0x101a091b
Capabilities:
Encode data using base64

Disassembly:
adc ebp, 4
mov dword [esp], 0xf795a8ba
call fcn.101730d6

Function at 0x101a09ba
Capabilities:
Encode data using base64

Disassembly:
dec eax
not dword [esp + 0x30]
not bl
dec eax
dec dword [esp + 0x30]
jl 0x101ae129
mov ax, word [ebp]
mov ecx, 0x4d891639
shl cx, 0x42
btc ecx, ecx
mov cl, byte [ecx + ebp - 0x4d8958f2]
push 0xc0849c8c
setb byte [esp + 1]
adc ebp, 2
add dword [esp], 0xbe074a03
sal ax, cl
push 0xdb2b6eab
mov word [ebp], ax
call fcn.10192a42
mov eax, 0xa80b403f
bts eax, eax
movzx ax, byte [edi]
mov cl, byte [edi + 2]
adc edi, 1
add al, cl
mov word [edi], ax
jmp fcn.1021090e
neg bl
push 0x7889f882
rol word [esp + 0x19], 0x89
jb 0x102105ea
dec bl
not bl
push 0x5f1230a1
inc eax
xor bh, bl
jmp 0x101e12b1
push 0x5114c0b9
dec eax
lea ebx, [esp + ebx + 0x50]
call fcn.101d65a1
jmp fcn.101b835a
Function at 0x101a18e1
Capabilities:
Encode data using base64

Disassembly:
dec cl
inc dword [esp + 4]
rol byte [esp + 0xe], 0xe2
sub dword [esp + 0xc], 0x82041115
neg cl
jmp 0x101ac234
jne 0x101756dc
mov edx, 0xcc8f1b20
mov bp, word [edi]
not dl
bts edx, edx
shr edx, 0x3a
mov dx, word [edi + edx*8 - 0x196]
call fcn.101c83a9
adc eax, 0xe3f06110
push edi
and cl, byte [edx]
jno 0x101a1910
jbe 0x101a190d
cld
call 0x6e435663
test eax, 0x69d24c65
jo 0x101a1947
in al, 0x98
movsb byte es:[edi], byte [esi]
in al, 0x36
pop ecx
movsb byte es:[edi], byte [esi]
call 0x969f9a41
in eax, dx
int1
add bl, byte [ebx + ecx*2 - 0x2e]
mov al, byte [0x1cf7c87]
jae 0x101a19a6
mov ch, 0xad
add byte [esi], dh
adc eax, 0xc1c305b8
jmp 0x7dca4807
fstp qword [eax + ecx*4]
out 0x8f, eax
dec ebp
popal
and al, 0xb0
insd dword es:[edi], dx
add byte [edx - 0x5f], dh
adc dword [ebx + edi*2 - 0x104ce0a2], ebp
mov edx, 0xf2cadadb
movsd dword es:[edi], dword [esi]
pop edx
imul ebp, dword [ecx + 0x45], 0xfffffff4
cmc
and al, 0x38
dec edx
jl 0x101a197d
pop es
dec edi
xchg edx, eax
jmp edi
movsb byte es:[edi], byte [esi]
fxch st(2)
push ebx
test byte [ecx - 0x4ec23486], ah
invalid
out dx, al
out 0xdd, eax
mov eax, dword [0x3b808c28]
xor al, 7
mov word [eax + 0x7f0823b], es
mov ebx, dword [edx - 0x7ae42c51]
stosb byte es:[edi], al
inc edi
insd dword es:[edi], dx
jge 0x101a19fc
outsb dx, byte [esi]
or dl, bl
leave
cmp byte [eax + 0x79], 0x57
dec esp
mov ah, 0xd8
mov ebx, 0xc1b30a02
pushfd
mov esi, 0x327c10ec
xchg dword [ecx], ecx
xor dword [edi + 0x18], esp
cmpsd dword [esi], dword es:[edi]
jne 0x101a19a1
dec byte [edi + edi - 0x26bf3e63]
cmp byte [eax + 0x23], ch
sub al, byte [edi]
cmp eax, 0x18c0f94f
mov eax, dword [0xe5d00cb3]
mov edx, eax
invalid
test al, 0xc6
aaa
cmp ebp, dword [esi + 0x5e9b94c8]
wait
pop esi
and dword [eax], edi
jbe 0x101a1a03
xchg ebp, eax
std
mov edi, 0xe77e7663
xchg ebp, eax
retf 0x716
push 0xb2bfdbbf
xor cl, 0xb4
jmp 0x101b28cf
mov dword [esp + 4], 0x2691df07
xor bl, cl
call fcn.101f918a

Function at 0x101a263b
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp + 4], 0x771eab85
shrd dx, bp, cl
push 0xa9bc2587
push 0x4390f53f
mov word [edi], dx
jmp 0x101e1733
push 0x3b3ed714
push 0xf21b91b0
lea esp, [esp + 0x18]
jmp fcn.101e22c9

Function at 0x101a2a80
Capabilities:
Encode data using base64

Disassembly:
push 0x15a48eae
mov word [edi], ax
lea esp, [esp + 0x14]
jmp fcn.101e22c9

Function at 0x101a3440
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x10]
jmp fcn.101e22c9

Function at 0x101a4498
Capabilities:
Encode data using base64

Disassembly:
jmp 0x101ef541
lea esp, [esp + 0x10]
jmp fcn.101e22c9

Function at 0x101a4588
Capabilities:
Encode data using base64

Disassembly:
push 0x32b11396
not ebp
mov dword [edi], ebp
lea esp, [esp + 0x10]
jmp fcn.101e22c9

Function at 0x101a56be
Capabilities:
Encode data using base64

Disassembly:
jmp 0x101ea164
jmp 0x102180c6
lea esp, [esp + 0x14]
jmp fcn.101e22c9

Function at 0x101a6623
Capabilities:
Encode data using base64

Disassembly:
mov word [ebp], ax
push 0x5e901026
jmp 0x1019f067
ror dword [esp + 0xc], 0x17
sbb ebp, 1
jmp 0x10188d25
Function at 0x101a7ea8
Capabilities:
Encode data using base64

Disassembly:
call fcn.1017ce95
mov dword [esp], 0xf9220184
mov dword [edi + 4], eax
push 0x5d2c80ad
jmp 0x1018f56a

Function at 0x101a8612
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x101a8acf
Capabilities:
Encode data using base64

Disassembly:
mov word ss:[edx], ax
lea esp, [esp + 0xc]
jmp fcn.101e22c9

Function at 0x101aadd0
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp + 4], 0x49bcb497
dec ecx
push 0x2a80540a
call fcn.10216162
mov dword [edi], ebp
lea esp, [esp + 8]
jmp fcn.101e22c9

Function at 0x101ab264
Capabilities:
Encode data using base64

Disassembly:
mov word [ebp], di
call fcn.101ba74b

Function at 0x101ab26e
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x14]
jmp fcn.101e22c9

Function at 0x101ab361
Capabilities:
Encode data using base64

Disassembly:
mov cl, byte [ecx + edi - 0x192095a8]
add edi, 6
push 0xdb8946aa
mov byte es:[edx], cl
lea esp, [esp + 8]
jmp fcn.101e22c9

Function at 0x101ac20b
Capabilities:
Encode data using base64

Disassembly:
mov cx, word [ebp + ecx - 0x648c2635]
call fcn.102200f6

Function at 0x101ae10a
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0x10]
jmp fcn.101e22c9
ror byte [esp + 0xa], 0xa3
imul cl
push 0xf92538a8
not dword [esp]
jmp 0x10208d05
mov word [edi], ax
jmp 0x1018efdd

Function at 0x101b0ef6
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp + 8], ebp
push dword [esp + 8]
popfd
push 0x70e3187
jmp 0x101e7619
jmp 0x101f2981
lea esp, [esp + 0x10]
jmp fcn.101e22c9

Function at 0x101b34de
Capabilities:
Encode data using base64

Disassembly:
jmp 0x1019ab29
push 0x3f88fe1a
mov dword [esp + 4], 0x46b8adbb
dec dx
neg dx
add dx, 0xc113
jmp 0x102372fa
shl byte [esp + 7], 0xa1
dec word [esp + 0xa]
ror dx, 1
ror word [esp + 9], 0x6a
jb 0x1017e982
xor bx, dx
sub ebp, 2
push 0x312f058d
call fcn.101bd213
dec ecx
sub ecx, 2
inc ecx
movzx eax, word [ecx]
inc ecx
mov ebp, 0xaca12880
inc ecx
ror ch, 0xa3
xor ax, di
dec ax
inc ecx
inc ch
xor ax, 0x17bf
dec ax
inc ecx
neg ebp
dec ecx
rol ebp, 0xf4
ror ax, 1
inc ebp
add ch, ch
sbb ax, 0xae1f
dec ecx
sal ebp, 0xf3
ror ax, 1
inc bp
add ebp, ebp
inc ebp
and ebp, ebp
xor di, ax
inc ecx
sar ebp, 0xd3
dec eax
adc eax, esp
inc ecx
sal ch, 0x62
inc bp
xor ebp, dword [ebp + eax]
call fcn.10190773

Function at 0x101b35f0
Capabilities:
Encode data using base64

Disassembly:
not dx
jb 0x101be239
lea esp, [esp + 8]
jmp fcn.101e22c9
ror byte [esp + 0xb], 0x87
or ax, dx
call fcn.101a2a80

Function at 0x101b4a7f
Capabilities:
Encode data using base64

Disassembly:
push 0xc79b56b8
lea esp, [esp + 0x18]
jmp fcn.101e22c9
jmp 0x1016610c
Function at 0x101b4e5e
Capabilities:
Encode data using base64

Disassembly:
loopne 0x101ad0fa
and dl, byte [eax]
add al, 0x11
in al, 4
sub eax, 0xf995c7e4
cdq
adc byte [edx - 0x2e], ah
push edi
or ah, ah
idiv edi
mov esi, 0xe8d42999
mov bh, 0x92
xchg edx, eax
fbstp tbyte [esi - 0x49cc44c9]
jmp 0x169abf37
inc esp
xor dh, bh
dec eax
shl dword [esp + 8], 0x4e
jne 0x101fefde
push edi
push edi
adc dl, byte [ebx]
push edx
inc ecx
int 0x6e
cmp edx, dword [eax]
outsd dx, dword [esi]
insb byte es:[edi], dx
rcl byte [edi + 0x3e]
pop ss
outsb dx, byte [esi]
loope 0x101b4eff
aas
mov eax, 0x502d2ca4
jmp 0x101ad0dd
outsb dx, byte [esi]
wait
adc dl, byte [esp + edi]
and bl, byte [esi - 0x36130b8c]
aad 0xec
invalid
mov byte [0xf3323182], al
and cl, al
jno 0x101b4ec9
pushal
xor esp, dword [edx]
jecxz 0x101b4f63
and eax, 0xe75213c1
ret 0x1964
inc ebx
invalid
sbb al, 0xa6
imul ebx, dword [edi - 0x15], 0x26274e91
dec ecx
adc byte [ebx - 0x2bb551b6], 0xc0
test dword [ebp - 0x2866f386], esp
sbb edi, ebx
cmp ebx, dword ss:[ebp + 0x517b13e0]
mov esi, 0x51eafc4b
je 0x101b4f31
and esp, eax
iretd
setnp byte [esp + 0xc]
inc ecx
ror dh, 1
inc ecx
dec dh
dec eax
dec dword [esp + 8]
dec eax
mov dword [esp], 0x6624bf06
inc ecx
xor dh, 0x83
push 0x301aa8a0
shl word [esp + 0x12], 0xc1
dec eax
xor dword [esp + 0x10], 0xf39e160c
inc ecx
adc dh, 0x24
call fcn.1018e890
mov ebp, dword [edi]
mov ecx, 0x542b5b09
mov cl, byte [edi + ecx - 0x542b5b05]
jmp 0x1023da93
add edi, 6
push 0xd638fc33

Function at 0x101b51c5
Capabilities:
Encode data using base64

Disassembly:
mov dword [ebp + esi*4 - 0x27c], eax
push ebx
mov edi, ebp
not word [esp + ebx*2 - 0x3d05f53d]
mov ebx, dword [esp + ebx*4 - 0x7a0bea70]
lea esi, [esi*2 - 0x4076f9fb]
mov esi, dword [esp + 0x10]
lea esp, [esp + 0x14]
jmp fcn.101e22c9

Function at 0x101b9401
Capabilities:
Encode data using base64

Disassembly:
lea esp, [esp + 0xc]
jmp fcn.101e22c9