joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1001b0c0
Capabilities:
Encode data using xor

Disassembly:
inc edi
je 0x1001b0e0
add dword [eax - 5], 0xffffff93
inc eax
sti
xchg ebx, eax
pop edx
mov eax, dword [0xe5a627c2]
pushal
jns 0x1001b0d1
jne 0x1001b05f
xor esp, dword [eax]
jb 0x1001b072
mov byte [0xca49fdb8], al
sub esi, dword [edx + ebp*4 + 0x7aa278a1]
cmpsd dword [esi], dword es:[edi]
out dx, al
xchg ebp, eax
stosb byte es:[edi], al
dec ebx
shl dh, cl
push ebp
pushal
or ebx, edx
and al, 0x15
push 0x18d86409
invalid
jae 0x1001b124
mov al, byte [0x57b581a0]
stosb byte es:[edi], al
mov edx, 0xf3c31df1
sbb eax, 0x7de0f3c3
ja 0xadc6bd6b
mov al, byte [0xba9dc50c]
les ebx, [edi - 0x6e8f8c51]
mov edx, 0x73af9fc4
jo 0x1001b063
xchg ecx, eax
or eax, 0x3146e064
lodsd eax, dword [esi]
std
outsd dx, dword [esi]
popfd
add al, 0x30
into
inc esi
nop
pop edi
popfd
pop ss
jg 0x1001b0c7
push ds
jbe 0x1001b0e5
das
pop esi
xchg dword [edi + 0x3a452244], edx
in al, dx
and byte [edx], cl
dec esi
cmc
adc dword cs:[bp + si], eax
dec edx
mov dword [0x334d5412], edi
jnp 0x1001b176
idiv dword [eax - 0x2711cfbd]
push edx
xor edi, eax
fucom st(2)
push cs
pop edi
or al, 0x6a
jle 0x1001b0b6
aas
dec edi
aaa
xchg eax, ebx
mov ebp, es
stosb byte es:[edi], al
call dword [edi]
xchg cx, ax
iretd
popfd
and esi, 0x2904258e
call 0xf5ff7c93
inc esp
fucom st(0)
xor ecx, eax
fnclex
pop ebp
mov esp, 0x717a3ef1
or cl, al
daa
arpl word [eax + 0x55], bp
push ebp
mov ecx, 0xe0807f4e
cwde
xchg ebx, eax
or eax, 0xdebc8134
and edi, ecx
inc edi
cmpsd dword [esi], dword es:[edi]
push 0xe0b1104c
sub eax, 0x207b8902
xor esi, eax
add byte [edx + 0x7e], 0xae
inc edx
jle 0x1001b111
dec esp
dec edx
imul esi, dword [ecx + 0x2ddf314e], 0xf5277b09
shl dword [ebp + 0x6ad6e63a], 1
invalid
sar dword [ebx], cl
lodsd eax, dword [esi]
jno 0x1001b160
mov eax, dword [esi - 0x7e]
pop esp
xor eax, 0xb92116aa
enter 0x19d8, 0x18
sbb dh, dl
popal
std
cmp dl, bl
add eax, dword [eax + 5]
cmc
jecxz 0x1001b1d7
push edx
fisttp dword [esi - 0x62103b90]
mov word [eax - 0xe], ss
mov dword [0x26e7ca3e], eax
invalid
mov esi, 0x27b6d6aa
stosb byte es:[edi], al
dec eax
inc esp
bound ebp, qword [esp + ebx*8 + 0x7ec8d6d1]
pop ds
push ecx
push 0xffffffffffffffe3
mov dx, 0xe222
cmc
bound ebp, qword [esp + ecx + 0x1a2e2916]
retf 0x6d8f

Function at 0x1001c130
Capabilities:
Encode data using xor

Disassembly:
mov dl, 5
mov ebx, 0x6f0d3e76
or eax, 0x55eef4e9
in eax, 0x44
inc esp
nop
xchg esp, eax
push 0x7e7d81f8
mov al, 0x75
loope 0x1001c188
xor eax, 0xaf3d89a
retf
sbb al, 0xeb
daa
aaa
invalid
Function at 0x10022890
Capabilities:
Encode data using xor

Disassembly:
xor edx, edx
mov dl, 0x43
je 0x100228f5
pop esp
xor eax, dword [ecx + 0x631618e8]
popfd
xchg edi, esi
sysexit
mov edx, 0xf5184740
movsb byte es:[edi], byte [esi]
adc al, 0xee
invalid
ljmp 0x98b9:0xfc61f3fd
push edx
xchg ecx, eax
loopne 0x10022908
mov word [eax + 0x49], gs
pop edi
dec esi
lodsd eax, dword [esi]
mov edx, 0xa1bca726
jle 0x100228b6
or edx, esi
ficomp word [edi + 0xc188a40]
ficomp word [edi + 0xc188a40]
push 0xffffffffffffff9b
dec ecx
jae 0x1002291f
mov byte [0x89372d43], al
sub esp, esi
invalid
imul edx, dword [edi - 0x4d0430f], 0xb41bd194
mov bh, 0x71
dec esp
mov al, 0x82
pop ebp
mov bh, 0x60
in eax, dx
sahf
invalid

Function at 0x10024650
Capabilities:
Encode data using xor

Disassembly:
in eax, 0x8b
inc dword [ebp + ebx*4 - 0x718bc5e2]
je 0x10024580
test al, 0x15
wait
sub ebx, 0xffffffde
lea esi, [ebp + 0x6a]
xchg edx, eax
test byte [edi + 0x7d745983], bl
adc dword [eax + 0x7f8231e7], 0xfffffffc
pop ebp
xor eax, 0xec8f2a83
invalid
jge 0x100245e9
retf 0x2452

Function at 0x100393e0
Capabilities:
Encode data using xor

Disassembly:
mov byte [esp + ecx*8 - 0x4f], ah
loop 0x10039459
js 0x10039435
scasd eax, dword es:[edi]
sbb ebp, dword [ebp - 0x72876fd8]
xor dword [edx + 0x46a62a16], 0xffffffcc
sub byte [ebx], bh
stosb byte es:[edi], al
inc esi
dec esi
aaa
inc ebx
js 0x10039461
pushal
fucomi st(1)
arpl word [0x14261f6b], bx
add ebp, ebx
pop ebx
jmp 0x1003943c
pop esi
mov dword [edx + 0x4e], esi
invalid
push 0xffffffffffffffb8
push edx
pop ecx
push edx
xchg ebx, eax
mov esi, dword [edx + 0x9ee5385]
xchg esp, eax
sahf
lea esp, [edi]
test dword [ebx - 0x12], edx
or dword [esi + ebx*4 + 0x59a9278d], edx
sub byte [edi + eax*2], 0xa1
pop es
jbe 0x1003942d
daa
test eax, 0x472c8059
mov eax, dword [0xd4e77607]
mov ah, 0x73
pop ebx
aam 0xb4
jae 0x100394a5
pop es
lcall 0xff28, 0xe8cab7dc
clc
daa
xchg edx, eax
dec esp
ret 0x5549
ret
and eax, 0xf6741227
je 0x10039459
sub ch, dl
and eax, 0x3a951afb
push ss
xchg edi, eax
jae 0x10039480
test dword [edx + edi*4 + 0x2c], edx
xor dword [edi - 0x121816a6], edi
inc ebx
add eax, 0x69d32f42
jecxz 0x10039473
imul esp, dword [eax + 0x72], 0xfb6bb748
imul esp, dword [eax + 0x72], 0xfb6bb748
pop edx
push edx
push ebp
pop es
in al, 0x67
sbb al, 0x2a
inc ebp
jae 0x100394cc
pop ss
jp 0x100394c3
jo 0x10039425
lahf
jle 0x100394fd
mov bh, byte [ebp - 0x6a72c07e]
test eax, 0xb7d40cf
inc eax
jge 0x100394b3
mov dword [0x793bffb6], eax
je 0x1003945e
invalid

Function at 0x1003fe00
Capabilities:
Encode data using xor

Disassembly:
stosd dword es:[edi], eax
into
sub eax, 0x725f98e6
out dx, eax
mov word [esi - 0x1f], es
iretd
lodsb al, byte [esi]
mov ecx, dword [eax + edi*2 - 0x21]
imul ebx, dword [edi], 0x48
fcompi st(0)
add ebp, dword [esi]
jle 0x1003fda6
invalid

Function at 0x10042ab0
Capabilities:
Encode data using xor

Disassembly:
enter 0x557a, 0x19
mov al, byte [0xa6f43883]
mov bl, 0x26
mul dword es:[edx + esi + 0x1bb8332f]
sbb byte [edi], ah
das
jae 0x10042a55
imul byte [edx + 0x2bbecd00]
mov ch, byte [ebx + ecx*8 + 0xf]
add byte [esi - 0x137fc2a0], dl
xchg esi, eax
pushal
cmp eax, 0xf2afec80
mov al, byte [0x94df6855]
Function at 0x10078a00
Capabilities:
Encode data using xor

Disassembly:
wait
out 0xda, al
cmp byte [edi + edi*8 - 0x7f], bl
xchg ebp, eax
rol dword [ebx - 0x58], 1
pop esp
inc dword [ecx - 0x57bc2e6b]
add eax, 0x5f14f4a7
jbe 0x1007899f
out dx, al
pop ds
in al, 0xb4
lodsb al, byte [esi]
xor eax, 0x1c31a9ec
invalid
jae 0x10078a39
sub al, 0x2f
push dword [ecx - 0x1bf7096b]
or eax, esi
shr al, 0x23
push 0xffffffffffffffc8
invalid
jle 0x10078a75
adc dword [0x40e2e2c5], eax
insd dword es:[edi], dx
jle 0x100789a3
stosb byte es:[edi], al
stosd dword es:[edi], eax
cmpsd dword gs:[esi], dword es:[edi]
stosb byte es:[edi], al
xor bl, cl
cli
jge 0x10078a02
retf
invalid

Function at 0x1007cef0
Capabilities:
Encode data using xor

Disassembly:
mov al, 0x28
psllw mm6, qword [edx + 9]
mov ebp, 0x3f310909
rcl byte [eax + 0x6b]
salc
xor byte [edx], 0xe6
invalid

Function at 0x1007d1c0
Capabilities:
Encode data using xor

Disassembly:
mov cs, word ss:[ebx]
fstp dword [ebx]
pushfd
mov edi, 0x8ecdb562
mov edi, 0x762d64e3
sahf
or ah, byte [esi + 0x9450642]
nop
push 0x5912d9a2
inc edx
push es
inc ebp
or dword [eax + 0x12d9a268], edx
pop ecx
dec esp
push ds
sbb byte [eax + 0x73cf8ddb], ch
test eax, 0xedce771e
popfd
cmp byte cs:[ebx - 0x1dc2af0a], dh
xchg ebp, eax
mov al, 6
sal dword [eax - 0x4eee31a9], 1
add byte [edi + edx], al
dec edi
pop ebx
push esi
popal
mov dword [0xeab8abb7], eax
cwde
xor byte [ecx + ecx*4 - 0x6b7579ce], bl
ja 0x1007d1d3
inc ebx
daa
cmc
pop ebx
mov byte [0xf3559aea], al
fnstenv [ecx]
and dword [eax - 0x31], ebp
cmp ah, dh
adc esi, 0x56de496
cmp byte [ebp - 0x50822469], 0xa4
ret 0x6e5d
pop ebp
outsb dx, byte [esi]

Function at 0x1007d760
Capabilities:
Check for software breakpoints

Disassembly:
xor esi, dword [esi + 0x607ae7b6]
xor al, 0x91
aad 0x99
dec edi
fsubr dword gs:[esi]
xor al, 0x8f
mov dl, 0x73
xor al, 0x9e
xor byte [esi + 0x13e16280], al
test ch, bh
jle 0x1007d7ce
invalid

Function at 0x1007d780
Capabilities:
Check for software breakpoints

Disassembly:
fistp word [edx - 0x50]
xchg esp, eax
cmp al, 0xbd
loop 0x1007d7d1
popal
lds edi, [ebp + 0x70]
outsd dx, dword [esi]
jo 0x1007d758
int 0x2e
sti
invalid

Function at 0x1007d7a0
Capabilities:
Check for software breakpoints

Disassembly:
jo 0x1007d7f4
add al, 0xb3
fisttp dword [edx + ebp*8 - 0x6b]
dec ebx
stosb byte es:[edi], al
jno 0x1007d7d7
loop 0x1007d783
sub bl, byte [ebp + 0x3dde6e4e]
nop
cdq
fdiv st(3)
invalid
invalid
cmp eax, 0xaf68d772
xor al, 0xdd
push esi
rol dword [0x919cebb4], 0x76
inc edx
push ebp
pushal
xchg edx, eax
mov cl, 0xe1
popal
shl bl, 0x4d
clc
cli

Function at 0x1007d8e0
Capabilities:
Encode data using xor

Disassembly:
sub cl, dh
hlt
hlt
adc edi, dword [ebp - 0x38]
jae 0x1007d958
jle 0x1007d8a6
cli
sti
mov word [ebp - 0x4c], gs
movsd dword es:[edi], dword [esi]
mov edi, dword [eax - 0x2366c671]
sbb bl, dl
pop ebp
ja 0x1007d895
nop
sar bh, cl
xor al, 0x57
jg 0x1007d967
invalid

Function at 0x10081380
Capabilities:
Encode data using xor

Disassembly:
add byte [eax - 0x60003345], dh
add ecx, esi
xchg edx, eax
stc
Function at 0x10086a70
Capabilities:
Authenticate hmac

Disassembly:
inc edi
push 0xe182b0c7
adc eax, 0xd69f953d
ficomp dword [edi + 0x3e48bc26]
or al, 0x9a
or al, 0x9a
lodsd eax, dword [esi]
test byte [ecx + edx*2 - 0xc], dl
mov cl, 0x99
inc ebx
mov cl, 0x18
dec edx
jbe 0x10086aab
clc
fsubr qword [ebp + 0x6c]
mov byte [0xf6dad17], al
outsd dx, dword [esi]
cmp ecx, dword [eax - 0x63]
popfd
xchg ebx, eax
lds eax, [ebp + 0x5b24a6df]
fnstcw word [ecx - 0x63]
jne 0x10086a71
mov ebp, 0x3ea8d145
pop esp
xchg edi, eax
inc ebp
shr dword [eax - 0x68a3c1c2], 1
outsd dx, dword [esi]
jbe 0x10086b1d
shl cl, 0xd8
imul esp, dword [edi - 0x5c], 0xf83d2599
mov ah, byte [esi]
in al, dx
mov ecx, 0xca35fd8f
test eax, 0xd3247425
les ebp, [eax]
mov ah, 0xa9
clc
mov dword [0x8982b170], eax
lahf
insb byte es:[edi], dx
mov eax, dword [0x64079077]
popal
sub dh, bl
jno 0x10086aec
mov bh, 0x96
in eax, dx
pop ebp
loope 0x10086a80
cld
jbe 0x10086a9d
invalid

Function at 0x10086b10
Capabilities:
Authenticate hmac

Disassembly:
mov bl, 0x98
sub byte [ecx - 0x6a3b16d1], dl
clc
or al, 0x62
pop eax
xchg esi, eax
jnp 0x10086b8a
ljmp 0xe47f:0x64af18be
out dx, eax
mov edx, dword [esp + esi*4 + 0x2f]
add byte [edx], bl
inc esp
popal
sbb eax, 0x9a822b42
mov cl, 0x29
sub al, 0xaa
adc cl, dh
push ds
cmpsb byte [esi], byte es:[edi]
cld
xor bl, dl
jl 0x10086b1c
or ebx, dword [eax]
bound esp, qword [ebp - 0x23]
adc byte [edi], bl
sbb al, 0xe
mov ebp, 0xd76da539
lahf
and al, 0xa3
lea ebp, [edx + 0x61]
push 0x61
xchg esp, eax
or ebx, 0x36b41bda
test al, 0x84
in al, 0x89
sbb esi, dword [esi + esi - 0x761b7b58]
neg byte [0x3c8abf34]
mov byte [0xb7356331], al
cmp al, 0x71
xor byte [ebx], dh
cmc
xchg esi, eax
lahf
adc bl, al
mov al, 0x61
or byte [edx + eax*8], ch
xor dword [ecx], esp
jo 0x10086bd6
cmp al, 0x31
mov bl, dl
test esp, ebp
mov word [0xe2ba687f], gs
mov dh, 0x18
ja 0x10086b5c
fstp qword [edi]
call 0x783b5c59
and esi, dword [ecx]
lcall 0xf7c0, 0xb0cfc0eb
je 0x10086bce
jmp 0x10086b90
sal bh, 0x74
clc
imul eax, dword [eax], 0x5c
push 0xf054ebcd
cmc
jbe 0x10086c2d
mul bh
salc
test esp, ebp
movsd dword es:[edi], dword [esi]
test eax, 0x7174b577
and byte [eax + 5], al
mov ah, 0xac
or al, ch
cmp al, 0xc3
and eax, 0xd13ebca2
xchg ecx, eax
outsb dx, byte [esi]
mov dword [edi - 0x7b7338ea], 0xb3682151
jnp 0x10086c12
inc ebx
lcall 0x8fc3, 0xc0acc668
jle 0x10086c21
adc al, 0x75
push cs
aaa
adc al, 0x11
js 0x10086bd2
mov al, 0xb2
push es
ljmp 0x8dc4
aam 0xc4
lea esi, [ebp - 0x44983509]
aad 0x77
int3
mov ah, 0x36
sal byte [ecx - 0x6e], cl
mov esi, 0xdc060aa3
xlatb
shl dword [edx], 1
lahf
adc edx, edi
or dword [edx - 0x26333bef], edi
and byte [ecx], bh
rol byte [ebp + ebp - 0x2f1bd14a], 0xb2
sbb eax, 0x1ba71bd4
das
cmpsd dword [esi], dword es:[edi]
or dword [esi], ebx
adc ch, byte [esi + 0x113464dc]
sub byte [edi], 0xa
rol byte [esp + ebx*8 + 0x33], 1
Function at 0x10092870
Capabilities:
Encode data using xor

Disassembly:
xor dword [ecx + 0x63d5d95d], 0xffffffb8
push edx
push 0x3cf12afe
adc al, 0x36
movsb byte es:[edi], byte [esi]
xchg esi, eax
das
lodsd eax, dword [esi]
sbb eax, 0xbef23445
imul ecx, dword [esi + 0x2253af01], 0x57842058
pop ebp
cmp byte [ebx - 0xa], 0x45
dec edx
xchg esi, eax
sbb byte [esi - 0x48], dl
cmc
inc eax
stosd dword es:[edi], eax
adc bl, byte [eax + 0x70635f74]
jle 0x1009282b
cmp ah, dl
fcom qword [eax - 0x7392ea9a]
salc
or byte [ecx + 0x72], bl
cmp byte [ecx + ebp], dl
adc al, 0x29
call 0x26d64b42
dec ebp
movsd dword es:[edi], dword [esi]
ja 0x10092808
push edx
aad 0x3c
cmp byte [eax - 0x5f32cf1a], cl
or ebp, dword [ebx]
cmpsb byte [esi], byte es:[edi]
mov bh, dl
adc eax, 0xda32b11a
jmp 0x1009284d
adc edx, 0xffffffa3
cmp dh, byte [eax - 0x4c4384bb]
fnsave dword [esi + ebx*4 - 0x4e]
push ecx
sbb al, 0x82
cmp byte [eax - 0xdd93f44], cl
push edi
xor eax, 0xae6b505d
mov edi, 0x74a827c3
les esi, [ebx]
cld
je 0x10092856
xor edi, esp
dec edi
pop ebp
ror dword [edi - 0x274cd920], 1
js 0x10092890
adc eax, 0x4e09b862
cmp dword [ecx - 0x6b], esp
lodsb al, byte gs:[esi]
retf

Function at 0x100b0950
Capabilities:
Encode data using xor

Disassembly:
mov esi, dword [edi - 0x24]
and dword [ebp - 0x57], 0x330be4b5
xchg edi, eax
div byte [0x7de15565]
or al, 0x4b
jb 0x100b09ad
inc esi
out dx, eax
js 0x100b097e
add dword [eax], edx
add byte [ebp + 0x4ecaa40], ah
in al, dx
add al, 0x51
invalid
xchg ecx, eax
sbb al, 3
in al, 0x38
invalid
call 0x2b21e3bb
push cs
stosd dword es:[edi], eax
xor eax, 0xad7afd77
outsb dx, byte [esi]
sub ebx, ebp
pop edx
test al, 0x44
lds ecx, [ebp + 0x2b99f1ae]
mov esp, 0xd7a8f47a
mov edi, 0x40cd3e83
cdq
sub edi, dword [edx + edi*2 - 0x4028570c]
cmp dword [esi], 0xffffffcd
inc eax
cld
jno 0x100b0997
mov al, byte [0xcaedd25]
inc ebp
sub bl, dl
jo 0x100b09db
or edi, dword [esi]
lea eax, [ecx - 0x1a]
hlt
sbb dword [ecx + 0x60], ebx
pushal
int1
je 0x100b09d7
stc
cmp al, 0xb
sysexit
mov edx, 0xf5119c94
arpl ax, ax
lodsd eax, dword [esi]
aam 0x1e
inc esi
xlatb
xchg ebp, eax
xchg ebp, eax
sahf
insd dword es:[edi], dx
and al, 0x6d
invalid

Function at 0x100b8390
Capabilities:
Encode data using xor

Disassembly:
invalid
jmp 0x5a7fd9eb
pminsw mm7, qword [ecx - 0x78e2ab49]
cmpsb byte [esi], byte es:[edi]
xor dword [ecx], ebp
add dl, dh
sub dword [ebx + 0x5f], ebp
jl 0x100b83d8
nop
fst qword [0x133494d9]
pop eax
out 0x69, al
push 0x197e6656
sal byte [ebx], 1
xchg ebx, eax
imul ebx, edi, 0xffffffec
mov al, byte [0x8ed4a773]
cmc
sub dl, byte [ecx]
rcl byte gs:[edi + 0x16]
ja 0x100b8363
imul edx, eax, 0xffffffe8
adc al, 0xec
out dx, eax
xchg edx, eax
pop ebp
jp 0x100b837d
inc ebp
inc esp
add ebp, dword [ecx + ecx*8]
inc edx
mov edx, 0x8b467404
mov word [edx], es
in al, 0x4c
insd dword es:[edi], dx
std
mov ecx, dword [edx + eax - 0x292b31c]
sbb eax, dword [esi + edi + 0x60122d42]
push ds
mov esi, 0x68d2e44c
lcall 0x4da6, 0xd64d72d3
rol dword [ebp - 0x3d43b612], cl
scasd eax, dword es:[edi]
scasd eax, dword es:[edi]
xchg edx, eax
ficom word [0xb4d349b6]
les esi, [esi - 0x33]
xor cl, dh
les ebx, gs:[bx + 0x36]
push esi
jge 0x100b83fa
push ecx
mov edi, 0x4be1dffb
invalid
Function at 0x100c7e40
Capabilities:
Authenticate hmac

Disassembly:
pop esi
imul ebp, ebx, 0x36
cmp eax, dword [ebx + ebx + 0x18]
mov dl, 0xa0
mul byte [ebp + 0x4d]
inc ecx
ja 0x100c7ebd
sub eax, 0xd0a8b5e8
fdivr st(7)
jle 0x100c7f09
invalid
adc al, 0xc1
or eax, 0x57147678
jcxz 0x100c7ef1
jbe 0x100c7f48
stc
inc esi
sub bh, ah
test eax, 0x52dbe752
js 0x100c7ea0
and ebx, dword [ebx]
aas
sahf
mov al, 0x4e
jmp 0x100c7f57
fidiv word [0x8b51d618]
mov ah, 0x93
sbb byte [esi + 0x7682bf1b], ch
push ebx
or bh, byte [ecx + 0x695575bd]
call 0x5be075bb
not bl
dec ebx
and bh, ah
cli
std
fcomp dword [ebx + 0x12]
xchg esp, eax
fcomp dword [edx + esi - 0xc046ff9]
neg dword [edi + edx*4 + 0x73]
out 0xc7, al
pop ds
sub byte [ecx + 0x12], ch
je 0x100c7f54
pop esi
test dword [eax + edx*4 + 0x1a324eed], eax
rol byte [edi + ebp + 0x70], 1
dec esp
dec edi
mov ch, 0x51
or bl, byte [edi]
jmp 0x100c7f36
xor ebp, dword [ebx - 0x4d33fe13]
fcmovnu st(0), st(4)
and edx, esi
jge 0x100c7f7e
fidivr dword [ecx + 0x6960542c]
sahf
inc ebp
cmc
jnp 0x100c7f7f
push esp
pushal
imul ebx, dword [esi + 0x7bf53645], 0xc2bdfa1f
movsb byte es:[edi], byte [esi]
and al, byte [edx - 0x5f]
dec ebp
sbb byte [ebx + ebp + 0x62], bl
add al, byte [0x7d8cd69d]
cli
mov ebp, 0x4222a4c2
mov eax, dword [0x2b5c184d]
bound eax, qword [edx]
add eax, 0x7d8cd69d
push ds
sub eax, 0x7d2d4512
int 0x14
cmp bh, al
cdq
mov byte [ebx], ah
and esp, dword [ecx*4 - 0x530db040]
and al, 0x8d
ror byte [edi - 0xe], 0xac
test byte [esi - 0x693b650c], cl
or dl, dl
xor eax, 0xd14a4b93
dec eax
dec edx
mov al, byte [0xe2ffc417]
mov ebp, 0x802e6dbe
push ebx
leave
test ebx, eax
xchg edi, eax
fstp xword [eax]
pop eax
invalid

Function at 0x100ccc00
Capabilities:
Encode data using xor

Disassembly:
xor cl, byte [edx]
pop esi
invalid
stc
test al, 0x10
mov byte [eax], al
aas
mov edi, 0xc553e4f6
pop esi
pop ss
pop esp
bound ebx, qword [esi - 0x2c69fb24]
pushfd
xor ebp, dword [edx - 0x56]
add byte [ebx + 0x47206f64], al
and byte [edi - 0x4c], al
xlatb
pop ebp
cwde
aas
sbb dword [0x607745f4], 0x5ee3aa95
mov eax, dword [0xc5f2716c]
mov ebp, 0x2c489028
mov esp, 0xf18737d3
pop esp
xchg ebx, eax
cmpsb byte [esi], byte es:[edi]
jne 0x100ccbc3
adc eax, 0xe1362475
jmp 0x100ccbb7

Function at 0x100d0af0
Capabilities:
Encode data using xor

Disassembly:
and esp, dword [eax]
push esi
mov eax, 0x8be76c70
loopne 0x100d0b56
invalid
xchg dword [edi - 0x10], ebx
out dx, al
add eax, 0xdf453214
invalid

Function at 0x100d5230
Capabilities:
Encode data using xor

Disassembly:
ficom word [edx + eax*2 - 0x4a]
push esi
and eax, 0xb8213fb9
out dx, eax
sub byte [edi + 0x7200fc41], cl
inc ecx
cld
add byte [edx - 0x69], dh
inc ecx
cld
add byte [edx - 0x69], dh
dec ebp
les esi, [edi - 0x723d2444]
fist word [edi + 0x5b28bdff]
mov dl, 0x1a
pop esi
lahf
xchg ebp, eax
test al, 0x6a
mov ecx, 0xa467a034
adc bl, byte [edi]
aaa
xor bh, ch
push esi
je 0x100d5222
mov edx, 0x418f7a17
inc esp
sub byte [ebp + 0x5c], cl
int1
Function at 0x100d87b0
Capabilities:
Authenticate hmac

Disassembly:
jb 0x100d8773
fsubr qword [ecx - 0x7dbdabfd]
out 0x6a, al
inc eax
fsub st(4), st(0)
jne 0x100d87ef
imul ebx, dword [ebx + edx*8], 0x4cb565f7
lahf
bswap ebx
mov bh, 0xdf
cmp al, 0x76
mov dword [0x60a5f77e], eax
sub esp, esp
and byte [ecx], ah
invalid
enter 0x13ed, 0xffffffffffffffbc
sbb eax, 0x24108c78
lodsd eax, dword [esi]
sbb al, 0xc3
invalid

Function at 0x100d9180
Capabilities:
Encode data using xor

Disassembly:
invalid
pop es
xchg ecx, eax
cmc
xor al, 0xe
mov al, 0x77
add ax, 0x8588
mov cs, word [ebx + 0x48]
pop esi
jbe 0x100d9174
cmp eax, 0x4dfe864b
movsb byte es:[edi], byte [esi]
mov al, 0x97
pop eax
jno 0x100d915c
in al, dx
dec ecx
inc ecx
inc ebp
sub eax, 0x6e5c8023
insb byte es:[edi], dx
and eax, 0x5f04ee2a
jno 0x100d917d
clc
mov bh, 0xad
and dword [eax - 0x3b511571], esp
ljmp 0x6ad4
fnstenv [eax - 0x70c4eefe]
jg 0x100d9199
pushal
sbb eax, 0xb7ca353a
movsb byte es:[edi], byte [esi]
invalid

Function at 0x100d9270
Capabilities:
Encode data using xor

Disassembly:
add eax, 0x1577a0fc
jcxz 0x100d92d0
dec edi
jge 0x100d920d
cli
mov dword [0xa504a393], eax
outsd dx, dword [esi]
dec ebp
invalid
and al, 4
in eax, 0x53
scasd eax, dword es:[edi]
je 0x100d934c
inc edx
or eax, 0xe510faa5
test al, 0x2b
and dword [eax + 0x566c64a], eax
pop edx
popfd
dec ebp
lodsb al, byte [esi]
aas
sbb eax, 0x3df96b00
stc
cmp eax, 0x92457363
sbb bh, cl
in eax, dx
fdivr dword [ecx + 0x69]

Function at 0x100e35d0
Capabilities:
Encode data using xor

Disassembly:
invalid
not ebp
stosd dword es:[edi], eax
das
outsb dx, byte [esi]
mov bl, dh
fmul qword [ecx + 0x49991038]
inc esi
popfd
xor eax, dword [edi - 0x5dc5f2c7]
push ebx
loop 0x100e35b9
dec esi
adc eax, 0x20b92f4e
dec ecx
outsd dx, dword [esi]
cdq
and eax, 0xa9d5ae36
test dword [eax - 0x43], edi
push 0x5cc4dcda
sbb dword [edx + 0x72], 0x51
jb 0x100e3653
add dword [ebp - 0x5f170d5d], 0x5c
mov ebp, 0x23706555
xor al, 0xda
shl byte [edx], 1
fnstenv [edx - 0x799ec96d]
xor dword [esi - 0x4d], edi
push edx
invalid

Function at 0x100e3960
Capabilities:
Encode data using xor

Disassembly:
stosd dword es:[edi], eax
sub dl, byte [edx]
lea ebx, [ebp + 0x3d37a888]
dec esi
mov cl, 0xbc
xchg byte [edi - 0x38], bl
xor eax, 0x4bfa7ce1
invalid
Function at 0x100e9a00
Capabilities:
Encode data using xor

Disassembly:
jl 0x100e9a1c
mov cl, 0x63
pushal
arpl word [esi + 0x61], bx
pushfd
cmpsd dword [esi], dword es:[edi]
ret
mov bl, al
in al, dx
stosb byte es:[edi], al
cld
sbb eax, 0x8674f9cd
xchg byte [ebp + 0x35ad4de8], dh
pop ecx
arpl word [ecx], cx
movsd dword es:[edi], dword [esi]
mov ds, word [edi - 0x3615d62]
mov esp, 0x5df01054
stc
add dword [ecx], esi
push ebx
sbb byte [ecx - 0x48], ch
push 0x60
out 0xb6, eax
aas
xor al, byte [esi - 0x17357bbd]
xchg ecx, eax
inc esi
push edx
insb byte es:[edi], dx
lodsd eax, dword [esi]
fisub word [edx]
popal
push ds
scasd eax, dword es:[edi]
push edx
sbb dword [ebp + 0x5a9d1b34], 0xffffff84
xor bl, bh
push esp
adc byte [eax], cl
in al, dx
test al, 0xde
inc edx
jne 0x100e9a2c
lea ebp, [ecx]
insb byte es:[edi], dx
jbe 0x100e9a1f
jecxz 0x100e9af0
push 0x294426de
mov edi, 0x86378f69
fst qword [esi - 0x21]
lds ebp, [ebx - 0x6b626539]
jecxz 0x100e9a1e
sub dword [ebp + 0x1c], eax
in al, 0xff
mov dword [0x18913f06], eax
mov edi, edx
outsb dx, byte [esi]
cmpsd dword [esi], dword es:[edi]
lcall 0x5643, 0x4988e55
salc
cmp dl, dh
inc eax
ret 0x1e2d
pop ebx
sbb byte [eax + 0x65], dh
inc ecx
pop es
lds ebx, [edi]
dec ebx
xchg edi, eax
xor esi, dword [ecx + 0x11]
xor cl, byte [ebx]
clc
xchg dword [eax + 0x6da47d52], ebx
push edx
outsd dx, dword [esi]
sub dword [ecx + ebx*2 + 0x20], ebp
je 0x100e9aff
popfd
fimul word [edx + 0x7c673dd2]
dec ecx
push edx
push ebp
mov esp, 0x65b61a40
mov esi, 0xa1326594
shl bh, cl
sbb al, 0x11
out 0x30, al
rol esi, 1
adc eax, 0x87d338ac
sbb dword [ebp + 0x2760bbaa], esi
pop es
ret 0xac14

Function at 0x100f1c80
Capabilities:
Encode data using xor

Disassembly:
rcr dword [ebp - 0x5d7f7f35], cl
fld xword [eax + 0x64]
aaa
invalid

Function at 0x100f3030
Capabilities:
Encode data using xor

Disassembly:
xor ah, byte [ebp + 0x2d2e6acd]
mov dword [0x2be44ca3], eax
mov dword [0x302be44c], eax
jnp 0x100f2f9e
add byte [ebp + 0x3dc2f598], al
jns 0x100f3009
test cl, 0xf6
scasd eax, dword es:[edi]
hlt

Function at 0x10117e50
Capabilities:
Encode data using xor

Disassembly:
imul ecx, edi, 0x78d427c7
xchg ebp, eax
mov edi, gs
cmp esp, ecx
imul esi, dword [ecx], 4
or dword [edx + 0x36b9a792], 0x7cdcc6e4
mov edx, 0xe4cdbe3c
mov esp, 0x785e7f68
and al, 0xe4
xlatb
stosd dword es:[edi], eax
mov edi, 0x66c9bd66
invalid
invalid
pop es