joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5107a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0xa0]
cmp r12, qword [r14 + 0x10]
jbe 0x5109a6
push rbp
mov rbp, rsp
sub rsp, 0x118
nop dword [rax]
cmp cl, 0x10
jae 0x510992
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x130], rbx
mov byte [rsp + 0x138], cl
nop
movups xmmword [rsp + 0xb8], xmm15
movups xmmword [rsp + 0xc0], xmm15
movups xmmword [rsp + 0xd0], xmm15
movups xmmword [rsp + 0xe0], xmm15
movups xmmword [rsp + 0xf0], xmm15
movups xmmword [rsp + 0x70], xmm15
movups xmmword [rsp + 0x78], xmm15
movups xmmword [rsp + 0x88], xmm15
movups xmmword [rsp + 0x98], xmm15
movups xmmword [rsp + 0xa8], xmm15
nop
movabs rdx, 0x80000000000000
mov qword [rsp + 0x70], rdx
movups xmmword [rsp + 0x28], xmm15
movups xmmword [rsp + 0x30], xmm15
movups xmmword [rsp + 0x40], xmm15
movups xmmword [rsp + 0x50], xmm15
movups xmmword [rsp + 0x60], xmm15
movups xmmword [rsp + 0x100], xmm15
mov qword [rsp + 0x110], 0
lea rdx, [rsp + 0xb8]
mov qword [rsp + 0x100], rdx
lea rsi, [rsp + 0x70]
mov qword [rsp + 0x108], rsi
lea rsi, [rsp + 0x28]
mov qword [rsp + 0x110], rsi
mov rsi, qword [rbx]
mov r8, qword [rdx]
mov qword [rsi], r8
movups xmm0, xmmword [rdx + 8]
movups xmmword [rsi + 8], xmm0
movups xmm0, xmmword [rdx + 0x18]
movups xmmword [rsi + 0x18], xmm0
movups xmm0, xmmword [rdx + 0x28]
movups xmmword [rsi + 0x28], xmm0
movups xmm0, xmmword [rdx + 0x38]
movups xmmword [rsi + 0x38], xmm0
mov rdx, qword [rbx + 8]
mov rsi, qword [rsp + 0x108]
mov r8, qword [rsi]
mov qword [rdx], r8
movups xmm0, xmmword [rsi + 8]
movups xmmword [rdx + 8], xmm0
movups xmm0, xmmword [rsi + 0x18]
movups xmmword [rdx + 0x18], xmm0
movups xmm0, xmmword [rsi + 0x28]
movups xmmword [rdx + 0x28], xmm0
movups xmm0, xmmword [rsi + 0x38]
movups xmmword [rdx + 0x38], xmm0
mov rdx, qword [rbx + 0x10]
mov rsi, qword [rsp + 0x110]
mov r8, qword [rsi]
mov qword [rdx], r8
movups xmm0, xmmword [rsi + 8]
movups xmmword [rdx + 8], xmm0
movups xmm0, xmmword [rsi + 0x18]
movups xmmword [rdx + 0x18], xmm0
movups xmm0, xmmword [rsi + 0x28]
movups xmmword [rdx + 0x28], xmm0
movups xmm0, xmmword [rsi + 0x38]
movups xmmword [rdx + 0x38], xmm0
mov edx, 1
jmp 0x510984
test byte [rax], al
lea esi, [rdx - 1]
movzx esi, sil
mov rsi, qword [rax + rsi*8]
mov r8d, edx
xor edx, ecx
movzx edi, dl
dec edi
shr edi, 0x1f
lea edx, [r8 + 1]
mov byte [rsp + 0x27], dl
nop
mov rax, rbx
mov rbx, rsi
mov rcx, rax
call fcn.005106c0
mov rax, qword [rsp + 0x128]
movzx ecx, byte [rsp + 0x138]
mov rbx, qword [rsp + 0x130]
movzx edx, byte [rsp + 0x27]
cmp dl, 0x10
jb 0x510936
add rsp, 0x118
pop rbp
ret
lea rax, [0x0067b560]
lea rbx, [0x007652f0]
call fcn.00431120
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x18], cl
call fcn.0045a0c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
movzx ecx, byte [rsp + 0x18]
jmp fcn.005107a0
Function at 0x513ac0
Capabilities:
Encode data using xor

Disassembly:
mov rax, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x10]
mov rdx, qword [rsp + 8]
pxor xmm15, xmm15
pcmpeqd xmm14, xmm14
psubd xmm15, xmm14
movd xmm14, eax
pshufd xmm14, xmm14, 0
pxor xmm0, xmm0
pxor xmm1, xmm1
pxor xmm2, xmm2
pxor xmm3, xmm3
pxor xmm4, xmm4
pxor xmm5, xmm5
mov rax, 0x10
movdqu xmm13, xmm15
movdqu xmm12, xmm13
paddd xmm13, xmm15
pcmpeqd xmm12, xmm14
movdqu xmm6, xmmword [rdi]
movdqu xmm7, xmmword [rdi + 0x10]
movdqu xmm8, xmmword [rdi + 0x20]
movdqu xmm9, xmmword [rdi + 0x30]
movdqu xmm10, xmmword [rdi + 0x40]
movdqu xmm11, xmmword [rdi + 0x50]
add rdi, 0x60
pand xmm6, xmm12
pand xmm7, xmm12
pand xmm8, xmm12
pand xmm9, xmm12
pand xmm10, xmm12
pand xmm11, xmm12
pxor xmm0, xmm6
pxor xmm1, xmm7
pxor xmm2, xmm8
pxor xmm3, xmm9
pxor xmm4, xmm10
pxor xmm5, xmm11
dec rax
jne 0x513b0d
movdqu xmmword [rdx], xmm0
movdqu xmmword [rdx + 0x10], xmm1
movdqu xmmword [rdx + 0x20], xmm2
movdqu xmmword [rdx + 0x30], xmm3
movdqu xmmword [rdx + 0x40], xmm4
movdqu xmmword [rdx + 0x50], xmm5
ret

Function at 0x513ba0
Capabilities:
Encode data using xor

Disassembly:
mov rax, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x10]
mov rdx, qword [rsp + 8]
pxor xmm15, xmm15
pcmpeqd xmm14, xmm14
psubd xmm15, xmm14
movd xmm14, eax
pshufd xmm14, xmm14, 0
pxor xmm0, xmm0
pxor xmm1, xmm1
pxor xmm2, xmm2
pxor xmm3, xmm3
mov rax, 0x10
movdqu xmm13, xmm15
movdqu xmm12, xmm13
paddd xmm13, xmm15
pcmpeqd xmm12, xmm14
movdqu xmm4, xmmword [rdi]
movdqu xmm5, xmmword [rdi + 0x10]
movdqu xmm6, xmmword [rdi + 0x20]
movdqu xmm7, xmmword [rdi + 0x30]
movdqu xmm8, xmmword [rdi + 0x40]
movdqu xmm9, xmmword [rdi + 0x50]
movdqu xmm10, xmmword [rdi + 0x60]
movdqu xmm11, xmmword [rdi + 0x70]
add rdi, 0x80
pand xmm4, xmm12
pand xmm5, xmm12
pand xmm6, xmm12
pand xmm7, xmm12
movdqu xmm12, xmm13
paddd xmm13, xmm15
pcmpeqd xmm12, xmm14
pand xmm8, xmm12
pand xmm9, xmm12
pand xmm10, xmm12
pand xmm11, xmm12
pxor xmm0, xmm4
pxor xmm1, xmm5
pxor xmm2, xmm6
pxor xmm3, xmm7
pxor xmm0, xmm8
pxor xmm1, xmm9
pxor xmm2, xmm10
pxor xmm3, xmm11
dec rax
jne 0x513be5
movdqu xmmword [rdx], xmm0
movdqu xmmword [rdx + 0x10], xmm1
movdqu xmmword [rdx + 0x20], xmm2
movdqu xmmword [rdx + 0x30], xmm3
ret
Function at 0x516880
Capabilities:
Encode data using base64

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51699c
push rbp
mov rbp, rsp
sub rsp, 0x60
mov qword [rsp + 0x78], rbx
mov rcx, qword [rax]
mov qword [rsp + 0x10], rcx
movups xmm0, xmmword [rax + 8]
movups xmmword [rsp + 0x18], xmm0
movups xmm0, xmmword [rax + 0x18]
movups xmmword [rsp + 0x28], xmm0
lea rax, [rsp + 0x10]
call fcn.00515d20
movups xmmword [rsp + 0x38], xmm15
movups xmmword [rsp + 0x40], xmm15
movups xmmword [rsp + 0x50], xmm15
mov rcx, qword [rsp + 0x10]
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x18]
mov qword [rsp + 0x40], rcx
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x48], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x58], rcx
mov rcx, qword [rsp + 0x78]
xor eax, eax
jmp 0x51690e
inc rax
mov rcx, rbx
cmp rax, 5
jge 0x516951
mov rdx, qword [rsp + rax*8 + 0x38]
imul rsi, rax, 0x33
mov rdi, rsi
sar rsi, 0x3f
shr rsi, 0x3d
add rsi, rdi
mov r8, rsi
and rsi, 0xfffffffffffffff8
sub rdi, rsi
mov rbx, rcx
mov rcx, rdi
shl rdx, cl
cmp rcx, 0x40
sbb rsi, rsi
and rdx, rsi
mov qword [rsp + 8], rdx
xor ecx, ecx
jmp 0x516980
test byte [rcx], al
mov rax, rcx
mov ebx, 0x20
mov rcx, rbx
add rsp, 0x60
pop rbp
ret
test byte [rbx], al
movzx edi, byte [rbx + rsi]
movzx r9d, byte [rsp + rcx + 8]
or edi, r9d
mov byte [rbx + rsi], dil
inc rcx
mov r8, rdx
nop dword [rax]
cmp rcx, 8
jge 0x516908
mov rdx, r8
sar r8, 3
lea rsi, [r8 + rcx]
cmp rsi, 0x20
jl 0x516964
jmp 0x516908
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.0045a0c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.00516880
Function at 0x52a060
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52a1ae
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x90], r9
mov qword [rsp + 0x88], r8
mov qword [rsp + 0x98], r10
lea rbx, [r10 + rsi]
nop
test rbx, rbx
je 0x52a0e3
shl rbx, 3
call fcn.0045c8e0
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x78]
mov r8, qword [rsp + 0x88]
mov r9, qword [rsp + 0x90]
mov r10, qword [rsp + 0x98]
xor edx, edx
jmp 0x52a0ea
inc rdx
cmp r10, rdx
jle 0x52a1a8
mov rbx, qword [r9 + rdx*8]
test rbx, rbx
je 0x52a0e7
mov qword [rsp + 0x40], rdx
mov r9, rdx
shl rdx, 3
lea r10, [r9 + rsi]
mov qword [rsp + 0x48], r10
sub rcx, r9
mov r12, rcx
neg rcx
sar rcx, 0x3f
and rdx, rcx
lea rcx, [rax + rdx]
mov qword [rsp], rcx
mov qword [rsp + 8], rsi
mov qword [rsp + 0x10], r12
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x30], rbx
call fcn.00534e40
xorps xmm15, xmm15
mov r14, qword [0x00c4bbb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x60]
mov qword [rdx + rcx*8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x78]
mov r8, qword [rsp + 0x88]
mov r9, qword [rsp + 0x90]
mov r10, qword [rsp + 0x98]
jmp 0x52a0e7
add rsp, 0x50
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x48], r11
nop dword [rax + rax]
call fcn.0045a0c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
mov r11, qword [rsp + 0x48]
jmp fcn.0052a060
Function at 0x52a6e0
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52a7d4
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x90], r9
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rax
mov qword [rsp], rax
mov qword [rsp + 8], r9
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], r8
call fcn.00534a20
xorps xmm15, xmm15
mov r14, qword [0x00c4bbb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x52a7ce
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x90]
sub rcx, rdx
mov rbx, rcx
neg rcx
sar rcx, 0x3f
mov rsi, rdx
shl rdx, 3
and rdx, rcx
mov rcx, qword [rsp + 0x60]
add rcx, rdx
mov qword [rsp], rcx
mov rdx, rsi
sar rsi, 1
mov qword [rsp + 8], rsi
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov rcx, qword [rsp + 0x68]
sub rcx, rdx
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rax
call fcn.00534b60
xorps xmm15, xmm15
mov r14, qword [0x00c4bbb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
add rsp, 0x50
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
call fcn.0045a0c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
nop
jmp fcn.0052a6e0
Function at 0x52a840
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52a934
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x90], r9
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rax
mov qword [rsp], rax
mov qword [rsp + 8], r9
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], r8
call fcn.00534ac0
xorps xmm15, xmm15
mov r14, qword [0x00c4bbb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x52a92e
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x90]
sub rcx, rdx
mov rbx, rcx
neg rcx
sar rcx, 0x3f
mov rsi, rdx
shl rdx, 3
and rdx, rcx
mov rcx, qword [rsp + 0x60]
add rcx, rdx
mov qword [rsp], rcx
mov rdx, rsi
sar rsi, 1
mov qword [rsp + 8], rsi
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov rcx, qword [rsp + 0x68]
sub rcx, rdx
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rax
call fcn.00534c00
xorps xmm15, xmm15
mov r14, qword [0x00c4bbb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
add rsp, 0x50
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
call fcn.0045a0c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
nop
jmp fcn.0052a840
Function at 0x52b140
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52b273
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x78], rdi
nop dword [rax]
test rsi, rsi
je 0x52b26d
mov qword [rsp + 0x90], r9
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rax
sub rcx, r9
mov r10, rcx
neg rcx
mov r11, r9
shl r9, 3
sar rcx, 0x3f
and r9, rcx
lea rcx, [rax + r9]
mov qword [rsp], rcx
mov qword [rsp + 8], rsi
mov qword [rsp + 0x10], r10
mov qword [rsp + 0x18], rcx
sub rbx, r11
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], r10
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], r8
call fcn.00534a20
xorps xmm15, xmm15
mov r14, qword [0x00c4bbb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x52b26d
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x90]
add rcx, rdx
mov rdx, qword [rsp + 0x68]
cmp rdx, rcx
jle 0x52b26d
mov rbx, qword [rsp + 0x70]
sub rbx, rcx
sub rdx, rcx
mov rsi, rbx
neg rbx
shl rcx, 3
sar rbx, 0x3f
and rbx, rcx
mov rcx, qword [rsp + 0x60]
add rcx, rbx
mov qword [rsp], rcx
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], rax
call fcn.00534b60
xorps xmm15, xmm15
mov r14, qword [0x00c4bbb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
add rsp, 0x50
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
call fcn.0045a0c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
nop
jmp fcn.0052b140
Function at 0x530160
Capabilities:
Encode data using base64

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5302ac
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], rdi
lea rdx, [rsi + 7]
sar rdx, 0x3f
shr rdx, 0x3d
lea rbx, [rdx + rsi]
lea rbx, [rbx + 7]
sar rbx, 3
cmp rcx, rbx
jge 0x530215
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rdi
cmp rbx, 1
jne 0x5301e2
lea rax, [0x0067c1a0]
mov ebx, 1
mov rcx, rbx
nop dword [rax]
call fcn.00444c80
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
mov ebx, 1
mov ecx, 1
nop
jmp 0x530215
mov qword [rsp + 0x20], rbx
lea rcx, [rbx + 4]
mov qword [rsp + 0x18], rcx
lea rax, [0x0067c1a0]
call fcn.00444c80
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x18]
xor edx, edx
jmp 0x530244
mov r9, r8
sub r9, rsi
add r9, 8
neg r9
sar r9, 0x3f
add rsi, 0xfffffffffffffff8
and r9, rsi
mov r9, qword [rdi + r9]
bswap r9
lea r10, [rdx + 1]
nop
mov qword [rax + rdx*8], r9
mov rdx, r10
cmp rsi, 8
jge 0x530219
test rsi, rsi
jle 0x530256
xor edx, edx
xor r8d, r8d
jmp 0x5302a0
nop
jmp 0x530260
dec rbx
nop dword [rax]
test rbx, rbx
jle 0x53026f
mov rdx, qword [rax + rbx*8 - 8]
test rdx, rdx
je 0x530259
add rsp, 0x28
pop rbp
ret
movzx r9d, byte [rsi + rdi - 1]
mov r10, rcx
mov rcx, rdx
shl r9, cl
lea r11, [rcx + 8]
dec rsi
cmp rcx, 0x40
sbb r12, r12
and r9, r12
or r8, r9
mov rcx, r10
mov rdx, r11
nop
test rsi, rsi
jg 0x530275
mov qword [rax + rbx*8 - 8], r8
jmp 0x530256
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
call fcn.0045a0c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
jmp fcn.00530160
Function at 0x53df20
Capabilities:
Hash data using sha384
Hash data using sha512

Disassembly:
mov rcx, qword [rax + 0xd0]
cmp rcx, 6
jne 0x53dfa5
movabs rcx, 0xcbbb9d5dc1059ed8
mov qword [rax], rcx
movabs rcx, 0x629a292a367cd507
mov qword [rax + 8], rcx
movabs rcx, 0x9159015a3070dd17
mov qword [rax + 0x10], rcx
movabs rcx, 0x152fecd8f70e5939
mov qword [rax + 0x18], rcx
movabs rcx, 0x67332667ffc00b31
mov qword [rax + 0x20], rcx
movabs rcx, 0x8eb44a8768581511
mov qword [rax + 0x28], rcx
movabs rcx, 0xdb0c2e0d64f98fa7
mov qword [rax + 0x30], rcx
movabs rcx, 0x47b5481dbefa4fa4
mov qword [rax + 0x38], rcx
nop dword [rax]
jmp 0x53e106
cmp rcx, 0xe
jne 0x53e020
movabs rcx, 0x8c3d37c819544da2
mov qword [rax], rcx
movabs rcx, 0x73e1996689dcd4d6
mov qword [rax + 8], rcx
movabs rcx, 0x1dfab7ae32ff9c82
mov qword [rax + 0x10], rcx
movabs rcx, 0x679dd514582f9fcf
mov qword [rax + 0x18], rcx
movabs rcx, 0xf6d2b697bd44da8
mov qword [rax + 0x20], rcx
movabs rcx, 0x77e36f7304c48942
mov qword [rax + 0x28], rcx
movabs rcx, 0x3f9d85a86a1d36c8
mov qword [rax + 0x30], rcx
movabs rcx, 0x1112e6ad91d692a1
mov qword [rax + 0x38], rcx
jmp 0x53e106
cmp rcx, 0xf
jne 0x53e097
movabs rcx, 0x22312194fc2bf72c
mov qword [rax], rcx
movabs rcx, 0x9f555fa3c84c64c2
mov qword [rax + 8], rcx
movabs rcx, 0x2393b86b6f53b151
mov qword [rax + 0x10], rcx
movabs rcx, 0x963877195940eabd
mov qword [rax + 0x18], rcx
movabs rcx, 0x96283ee2a88effe3
mov qword [rax + 0x20], rcx
movabs rcx, 0xbe5e1e2553863992
mov qword [rax + 0x28], rcx
movabs rcx, 0x2b0199fc2c85b8aa
mov qword [rax + 0x30], rcx
movabs rcx, 0xeb72ddc81c52ca2
mov qword [rax + 0x38], rcx
jmp 0x53e106
movabs rcx, 0x6a09e667f3bcc908
mov qword [rax], rcx
movabs rcx, 0xbb67ae8584caa73b
mov qword [rax + 8], rcx
movabs rcx, 0x3c6ef372fe94f82b
mov qword [rax + 0x10], rcx
movabs rcx, 0xa54ff53a5f1d36f1
mov qword [rax + 0x18], rcx
movabs rcx, 0x510e527fade682d1
mov qword [rax + 0x20], rcx
movabs rcx, 0x9b05688c2b3e6c1f
mov qword [rax + 0x28], rcx
movabs rcx, 0x1f83d9abfb41bd6b
mov qword [rax + 0x30], rcx
movabs rcx, 0x5be0cd19137e2179
mov qword [rax + 0x38], rcx
movups xmmword [rax + 0xc0], xmm15
ret
Function at 0x544680
Capabilities:
Encode data using base64

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x544765
push rbp
mov rbp, rsp
sub rsp, 0x40
mov qword [rsp + 0x50], rax
mov rdx, rdi
sar rdi, 0x3f
shr rdi, 0x3d
lea rsi, [rdi + rdx]
and rsi, 0xfffffffffffffff8
sub rdx, rsi
lea rsi, [rdx - 8]
neg rsi
cmp rsi, 8
je 0x544718
test rbx, rbx
je 0x544718
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x38], rax
cmp rsi, 8
sbb edx, edx
mov byte [rsp + 0x1f], dl
lea rax, [0x0067b5e0]
mov rcx, rbx
call fcn.00444c80
mov rdx, qword [rsp + 0x38]
movzx esi, byte [rdx]
mov rcx, qword [rsp + 0x28]
shr sil, cl
movzx edi, byte [rsp + 0x1f]
and esi, edi
mov byte [rax], sil
mov rbx, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x30]
mov r8d, 1
jmp 0x544757
add rsp, 0x40
pop rbp
ret
movzx r9d, byte [r8 + rdx - 1]
mov r10, rcx
mov rcx, rsi
shl r9d, cl
lea r11, [r8 + 1]
cmp rcx, 0x20
sbb r12d, r12d
and r9d, r12d
mov byte [rax + r8], r9b
movzx r12d, byte [rdx + r8]
mov rcx, r10
shr r12b, cl
and r12d, edi
or r9d, r12d
mov byte [rax + r8], r9b
mov r8, r11
cmp rbx, r8
jg 0x54471e
mov rcx, rbx
add rsp, 0x40
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
call fcn.0045a0c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
jmp fcn.00544680
Function at 0x553020
Capabilities:
Encode data using base64

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55318a
push rbp
mov rbp, rsp
sub rsp, 0x38
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], rdi
mov rdx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
mov rdx, qword [rdx + 0x30]
call rdx
cmp qword [rax + 0x38], 5
jne 0x5530c5
mov rdx, qword [rax + 0x30]
cmp dword [rdx], 0x35322d50
jne 0x5530c5
cmp byte [rdx + 4], 0x36
jne 0x5530c5
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rdx + 0x18]
mov rdi, qword [rsi]
mov rdi, qword [rdi + 8]
shl rdi, 6
sub rdi, qword [rsi + 8]
lea rsi, [rdi + 7]
sar rsi, 0x3f
shr rsi, 0x3d
lea rcx, [rsi + rdi]
lea rcx, [rcx + 7]
sar rcx, 3
mov qword [rsp + 0x30], rcx
nop
lea rax, [0x0067b5e0]
mov rbx, rcx
call fcn.00444c80
mov rdx, qword [rsp + 0x60]
mov rsi, qword [rdx]
mov rdi, qword [rdx + 8]
mov r8, qword [rsp + 0x30]
mov rcx, r8
xor ebx, ebx
jmp 0x5530f5
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rdx + 0x20]
mov rdi, qword [rdx + 0x28]
mov rsi, qword [rdx + 0x30]
mov r8, qword [rdx + 0x18]
mov rax, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
call fcn.0053bc80
add rsp, 0x38
pop rbp
ret
inc rbx
mov r8, r11
cmp rbx, rdi
jge 0x55310f
mov r9, qword [rsi + rbx*8]
xor r10d, r10d
jmp 0x553165
test r9, r9
je 0x5530ef
jmp 0x553176
mov r11, r8
jmp 0x5530ef
mov rbx, rcx
call fcn.0050a7e0
test rdi, rdi
jne 0x5530c5
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rdx + 0x18]
mov rdi, rcx
mov rcx, rbx
mov rbx, rax
mov rax, qword [rsp + 0x58]
call fcn.0053a220
test rbx, rbx
jne 0x553143
add rsp, 0x38
pop rbp
ret
lea rax, [0x0067b560]
lea rbx, [0x00764fb0]
call fcn.00431120
mov byte [r8 + rax - 1], r9b
inc r10
shr r9, 8
mov r8, r11
cmp r10, 8
jge 0x55310a
lea r11, [r8 - 1]
test r11, r11
jge 0x553156
jmp 0x553103
lea rax, [0x0067b560]
lea rbx, [0x00764fa0]
call fcn.00431120
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
nop
call fcn.0045a0c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
jmp fcn.00553020
Function at 0x5531c0
Capabilities:
Encode data using base64

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x553366
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x78], rdi
mov rdx, qword [rbx + 0x18]
mov r9, qword [rdx]
mov r9, qword [r9 + 8]
shl r9, 6
sub r9, qword [rdx + 8]
lea rdx, [r9 + 7]
sar rdx, 0x3f
shr rdx, 0x3d
lea rdx, [rdx + r9]
lea rdx, [rdx + 7]
sar rdx, 3
cmp rsi, rdx
jl 0x5532c2
mov r10, rdx
shl rdx, 3
sub rdx, r9
test rdx, rdx
jle 0x5532f8
nop
test rdi, rdi
jne 0x553230
xor eax, eax
xor esi, esi
xor edi, edi
jmp 0x5532bc
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x38], rdx
nop
test r10, r10
ja 0x553251
lea rax, [rsp + 0x28]
xor esi, esi
xor r8d, r8d
jmp 0x553284
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x78], rdi
lea rax, [rsp + 0x28]
mov rbx, r10
xor ecx, ecx
mov rdi, rbx
lea rsi, [0x0067b5e0]
call fcn.00444d60
mov rdi, qword [rsp + 0x78]
mov r10, qword [rsp + 0x40]
mov rsi, rcx
mov r8, rbx
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x48], rax
mov rbx, rdi
mov rcx, r10
call fcn.0045cbe0
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x30]
lea r8, [rax - 1]
jmp 0x553303
mov rdx, qword [rbx + 0x18]
mov rax, rcx
mov rbx, rdi
mov rcx, rsi
mov rdi, r8
mov rsi, rdx
call fcn.0053a320
test rbx, rbx
jne 0x5532e5
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b560]
lea rbx, [0x00764fc0]
call fcn.00431120
mov rsi, r10
jmp 0x5532c2
dec r8
mov rcx, r10
test r8, r8
jl 0x553354
movzx r9d, byte [rsi + r8]
mov r10, rcx
mov rcx, rdx
shr r9b, cl
cmp rcx, 8
sbb r11d, r11d
and r11d, r9d
mov byte [rsi + r8], r11b
test r8, r8
jle 0x5532fd
lea r9, [rcx - 8]
neg r9
movzx r12d, byte [r8 + rsi - 1]
test r9, r9
jl 0x553360
mov rcx, r9
shl r12d, cl
cmp rcx, 0x20
sbb r9d, r9d
and r9d, r12d
or r11d, r9d
mov byte [rsi + r8], r11b
jmp 0x5532fd
mov r8, rdi
mov r10, rax
mov rdi, rsi
jmp 0x5532f8
call fcn.00430840
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
call fcn.0045a0c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
jmp fcn.005531c0