joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140137f09
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
shl r11d, 0x28
sbb ecx, 0xee21372b
mov qword [rsp + rbx], rdi
rol ecx, 1
cqo
xor rax, 0xffffffffef9c401c
and r11d, dword [rsp + rbx + 2]
mov qword [rsp + rbx], rbp
jb 0x140225c98
shl edi, 0x8f
xor dword [rsp + rbx*2], ecx
call fcn.140133da3
mov eax, 0xac018aba
mov ebx, eax
inc al
sub r10, 1
xchg bx, ax
movzx edx, byte [r10 + riz]
lea rcx, [rax*2 + 0x14a5100a]
rol bl, 0x45
xor dl, r9b
or ecx, eax
rol dl, 1
lea r8, [rbx + rbx*8 - 0x7a70a641]
movsx edi, r8b
xor dl, 0x83
not dl
dec dl
inc bx
rol ax, 0x61
ror dl, 1
bts ax, 0xbb
lea r11, [r8 + rbx*8 - 0x3b6050c7]
xor r9b, dl
not ecx
lea rsi, [rsi + rcx - 0x13565003]
bswap eax
mov word [rsi + rax - 0x751d01ac], dx
lea r10, [r10 + rax - 0x751d01b0]
sub cl, 0x13
bswap edi
mov edx, dword [r10 + rcx - 0x135650ee]
xor edx, r9d
lea rbx, [rax + r11 + 0x5602d5ae]
lea edx, [rdx + rax*2 - 0x40fc074f]
lea rdi, [rdi + r11*2 + 0x7e142281]
bswap edx
cdqe
sal r11w, cl
shl r11w, 0x2f
lea edx, [rdx + rcx*2 + 0x7e0a8557]
shl rax, 0x5c
cwde
shr edi, 0x1c
xor edx, 0x7b8bed21
push rbx
inc edx
mov qword [rsp + rax], r9
xor dword [rsp + rax*2], edx
neg r8
seta cl
pop r9
movsxd rdx, edx
sal r8d, 0x59
ror r11d, 0xcd
bt ebx, eax
add rbp, rdx
lea rbx, [r11*2 + 0x340c7d05]
sar r8b, 0x66
or r8d, edi
jae fcn.140158ba3
mov r10d, dword [rdi]
add rdi, 4
xor r10d, r11d
mov ecx, 0xa0921380
bswap r10d
xor r10d, 0xd9938c35
jmp 0x1401fda9f
movsx r8d, cx
inc r10d
rol r10d, 1
movzx edx, r8w
inc r10d
ror rdx, 0xaa
sar rdx, 0x18
not r8b
push r11
xor dword [rsp + r8*2 - 0x26fe], r10d
pop r11
sar dl, 0xa2
xadd cx, r8w
lea r9, [rcx*2 - 0x2ccfc250]
movsxd r10, r10d
adc rbx, r10
mov r10d, 0x5ba68e20
movzx ax, byte [rbp + r8*4 - 0x4e00]
btc r9, 0x17
mov cl, byte [rbp + r8 - 0x137e]
or edx, r9d
xadd r10w, dx
lea rbp, [rbp + r8 - 0x137e]
bts r10d, r8d
shr al, cl
bts r10w, r9w
inc rdx
mov word [r8 + rbp - 0x1380], ax
mov ecx, 0xaf02cfa0
movzx esi, cl
jmp rbx
Function at 0x14013af03
Capabilities:
Encode data using base64

Disassembly:
dec dx
pop rcx
mov qword [rsp + rcx*8 - 0x2020], rdi
ret
neg dil
imul dl
lea rax, [rdx + rsi*8 + 0x5b028e01]
adc dil, al
call fcn.14014f422
mov qword [rsp + r10 - 0x1eb44cd0], r11
xor dword [rsp + r10 - 0x1eb44cd0], esi
cdq
jmp 0x140168c85
movsx r11d, al
pop r11
neg dl
movsxd rsi, esi
and r9w, r9w
xchg al, r10b
sar r8b, 0xe1
adc rbx, rsi
mov rax, qword [rdi + r10*2 - 0x3d689940]
inc cl
lea r8, [r9*8 - 0x5a4489e9]
lea rdx, [r8 + r10*8 + 0x533b3b7]
lea rdi, [rdi + r10 - 0x1eb44c98]
jnp 0x1401e7c65
and r9w, r9w
xor rax, r11
ror rax, 3
dec rax
sub dx, r9w
call fcn.140143123
push rcx
movsxd rdx, edx
dec byte [rsp + r11 - 0x16ff9]
ror byte [rsp + r11 - 0x17000], 0x41
sar r11, cl
adc rdi, rdx
mov r11, qword [rbp + r11 - 0x5c00]
cdq
mov bl, byte [rsi + rbp - 0x61b4]
and dx, word [rsp + rsi*2 - 0xc373]
add qword [rsp + rsi*2 - 0xc378], r8
inc r8w
lea rbp, [rbp + rsi - 0x61b2]
rol r8, 0x2f
add qword [rsp + rax - 0x404], rsi
push rax
mov byte [r11 + rsi*4 - 0x186f0], bl
jl 0x14007c476
bswap edx
push r10
and byte [rsp + r10*2 - 0x13f], r9b
call fcn.14017b15d
je 0x1400c5503
mov r10d, 0xa18fc3a3
movzx r9d, r10b
mov edx, dword [rbx + r9*4 - 0x28c]
mov r8d, r9d
dec r8
and r10, 0xffffffff9f274498
lea rbx, [rbx + r9*2 - 0x142]
lea rcx, [r8*2 - 0x7f440348]
xchg r10d, r9d
xor edx, r11d
sal r9d, cl
add r8, r10
lea edx, [rdx + r10*8 + 0x2348e70]
movsx esi, cx
xor edx, 0x7bba922d
not edx
movzx eax, r9b
xadd r9w, si
inc edx
push rax
jmp 0x14022d6ba
jmp 0x1401d80f0

Function at 0x14013c4fc
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + rsi - 0x210f], 0xffffffffbd854dad
lea edx, [r11 + rdx - 0x86c09a4]
shr cl, cl
sub r8b, 0x82
neg edx
add r11d, dword [rsp + rsi*4 - 0x8438]
movzx eax, word [rsp + rsi*4 - 0x843c]
not edx
not rbx
dec word [rsp + rsi*4 - 0x8437]
sbb rcx, 0x259fdab4
xor edx, 0xd3b60c07
shl r8w, cl
neg ecx
neg edx
xchg word [rsp + r8 - 0x1aac4ffb], ax
mov qword [rsp + rsi*4 - 0x843c], r9
xor dword [rsp + rsi*4 - 0x843c], edx
and r11d, 0xca279230
js 0x1401c97af
add rsi, r11
pop r9
movsxd rdx, edx
xchg r8, rax
adc rdi, rdx
mov ebx, dword [r8 + rbp - 0xfffe]
add r11d, 0x91277034
mov cl, byte [rbp + r8 - 0xfffa]
lea rbp, [rbp + r8*8 - 0x7ffee]
lea rdx, [rax + r8*8 - 0x306f38e9]
push rsi
ror byte [rsp + r11 - 0x514c8043], 0x65
shr ebx, cl
mov dword [rbp + r11 - 0x514c8044], ebx
mul rdx
mov qword [rsp + r8 - 0xfffe], rdi
ret

Function at 0x140142487
Capabilities:
Encode data using base64

Disassembly:
mov al, byte [r10 + rax - 0x1e]
neg esi
neg esi
mov qword [rsp + rcx - 0x1d], 0xffffffff9683c4ab
xor al, r9b
not dword [rsp + rcx - 0x1a]
ror al, 1
bt r11d, ecx
adc al, sil
sal r8d, cl
xor al, 0xe
sal esi, cl
adc al, 0x9a
xor r9b, al
push rsi
mov edx, 0xe203d18d
lea rax, [rsp + rax + 0x10]
neg qword [rsp + rcx - 0x1a]
mov dx, word [rax + rcx - 0x1d]
dec dword [rsp + rcx*2 - 0x38]
lea rbp, [rcx + rbp - 0x1f]
xadd sil, r8b
mov word [rbp + rcx*2 - 0x3a], dx
pop r8
pop rcx
jae fcn.1400bd550
Function at 0x140143ddf
Capabilities:
Encode data using base64

Disassembly:
not r11
lea edi, [rax + rdi + 0x506a25ce]
bswap ecx
mov qword [rsp + rax - 0x2432bdb7], r9
mov qword [rsp + rdx], r11
shr r11b, 0x87
xor dword [rsp + rax - 0x2432bdb7], edi
and r11w, 0x7583
dec r11w
mov r9, qword [rsp + rax*2 - 0x48657b76]
cdqe
movsxd rdi, edi
adc rbp, rdi
mul al
cqo
lea r10, [r10 + rdx*4 - 1]
div bx
movzx ecx, byte [rax + r10 - 0x24320007]
xor cl, r9b
xadd bl, r11b
not cl
xor cl, 0x1c
dec cl
xchg bl, r11b
xor cl, 0xbb
mov qword [rsp + r11 + 0x71258b16], 0xfffffffffca9e414
xor r9b, cl
imul rax, rbx
shr rax, 0x68
lea rcx, [rsp + rcx + 0x10]
mov edi, r11d
idiv dl
mov r11, qword [rcx + rax*2 - 0x1ffa0c]
mul byte [rsp + rax*4 - 0x3ff40c]
lea rsi, [rsi + rax*4 - 0x3c17f0]
inc r8d
shl bl, 0x21
sal qword [rsp + rax*4 - 0x3c17e0], 0xb6
mov qword [rax + rsi - 0xf05fa], r11
xor bl, dil
pop r11
pop rax
jno fcn.140158ba3

Function at 0x140145f7d
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + rax*2 - 0x44], r11
imul r9d, eax
xor dword [rsp + rax - 0x22], edx
xor cx, r9w
pop r11
sub r10, r10
jge 0x1401fe802
xor r8b, dl
movzx ebp, cl
mov qword [rsp + rbx + 0x12fc1], r11
or dword [rsp + rbx + 0x12fc3], 0x5da3e286
lea rdx, [rsp + rdx + 0x10]
neg r11d
mov rcx, qword [rdx + rbx*4 + 0x4bf04]
push rbx
lea r10, [r10 + rbx*4 + 0x4befc]
pop rdx
mov qword [rbx + r10 + 0x12fc1], rcx
call fcn.1400f53dc
mov r10d, 0xd3279280
push r10
dec r10b
mov edx, dword [rdi + riz]
mov ecx, 0xa91dc822
movsx r9d, cx
add rdi, 4
xor edx, r11d
sal r10b, cl
dec edx
bswap edx
dec edx
or byte [rsp + 7], r10b
xchg dword [rsp], ecx
not edx
lea edx, [rdx + rcx - 0x786e3b7e]
jae 0x1401cd421
movsx eax, r9b
jne 0x1400b7cd2
lea rsi, [r10*2 - 0x48d620de]
mov qword [rbp + r10*2 - 0x304e], rcx
xor r8, rdi
jmp r8
jp 0x14011f596

Function at 0x140147898
Capabilities:
Encode data using base64

Disassembly:
lea rcx, [rdx + rax*8 + 0x26af4027]
imul cl
mov cl, byte [rax + r11 + 0x10]
jae 0x14016a379
lea r11, [rax + r11 + 0xa]
mov qword [rsp + rax], rdx
adc eax, r8d
adc eax, eax
shrd rdi, rbp, cl
and ax, dx
mov qword [rax + r11 - 0x11a80000], rdi
mov qword [rsp + rax*4 - 0x46a00000], rbx
ret

Function at 0x140150759
Capabilities:
Encode data using base64

Disassembly:
shl bx, 0x63
mov dword [r11 + riz], r10d
mov edx, dword [r9 + riz]
pop rbx
mov r10d, edi
mov eax, edi
adc r9, 4
push rdi
lea rsi, [r10 + rax*4 + 0x753f8f17]
sal esi, 0x24
xor edx, ebp
dec qword [rsp]
rol byte [rsp + 4], 0xa7
call fcn.1401dc8e4

Function at 0x1401530f8
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp], 0xffffffff93a11e0d
invalid
invalid
invalid
invalid

Function at 0x140159d84
Capabilities:
Encode data using base64

Disassembly:
movsx edx, dil
lea ecx, [rdi + rcx + 0x9b2fb36]
mov ebx, dword [rsp + rdi - 0x7eaaf3]
mov qword [rsp + rdi - 0x7eaafb], 0x1baaf007
rol ecx, 1
push r10
mov qword [rsp + rdi - 0x7eaaeb], r11
lea rsi, [rax + rdx*4 - 0x7e763770]
xor dword [rsp + rdi - 0x7eaaeb], ecx
pop rdx
lea rax, [rsi*2 - 0x42eed4e4]
mov r11, qword [rsp + rdi - 0x7eaaf3]
xor edx, 0x3dbaa01f
sal r10, 0xa8
seta byte [rsp + rdx - 0x3dc40abf]
movsxd rcx, ecx
jae 0x14014c6fc
Function at 0x14015f3e4
Capabilities:
Encode data using base64

Disassembly:
mov rcx, qword [rbp + riz]
mov ebx, 0x64261617
mov qword [rsp + rbx - 0x64261617], 0x109b6e82
mov r8, qword [rbp + rbx - 0x6426160f]
lea rbp, [rbp + rbx - 0x64261607]
mov qword [rbx + rcx - 0x64261617], r8
lea r10, [r10 + rbx - 0x6426161b]
mov ecx, dword [r10 + rbx - 0x64261617]
call fcn.1401b78ce

Function at 0x14015feb0
Capabilities:
Encode data using base64

Disassembly:
idiv dword [rsp + rdx - 0x1681]
mov r11d, dword [r10 + rax*2 - 0x3caefa]
add ax, cx
xor r11d, r9d
xor dword [rsp + rax - 0x1e5778], edx
call fcn.14008bd4d
mov ecx, dword [r10]
mov ebx, 0x80101ba3
add r10, 4
movsx r11d, bx
movzx eax, r11b
xor ecx, ebp
not eax
xor ecx, 0x8521d714
neg ecx
not ecx
add r11w, 0x1b9b
and rbx, 0xffffffffd617858a
jnp 0x1401dc58a
ror ecx, 1
movsx esi, bl
movzx edi, si
dec ecx
sub dil, dil
xadd esi, eax
btr rbx, 0x3c
xor ecx, 0xf8812b2f
sar ax, 0x6b
sbb di, ax
shr esi, 1
xor ecx, eax
dec si
shl rsi, 0xea
bts si, di
sbb ecx, eax
lea rdx, [rdi + rsi*8 + 0x211604ae]
shr si, 0x2d
neg rax
push rbp
lea rbp, [rbx*4 - 0x43da8ee7]
cmovo rsi, rax
lea rdi, [rsi*2 + 0x289f2891]
xor dword [rsp + r11 - 0x373e], ecx
jmp 0x1401d9658
mov ebx, 0xb63323a7
cqo
jno fcn.14007c713
lea r11, [rsp + r11 + 0x10]
lea r8, [rax*8 - 0x77d572e3]
mov qword [rsp + rdx - 0x168a], 0xffffffffaa8158a0
mov rdi, qword [r11 + rdx*2 - 0x2d14]
lea rsi, [rsi + rdx*8 - 0xb458]
jae 0x1401bb5ce
sub r9, 1
mov esi, 0x825ce98
movsx r11d, si
movsx edx, si
movzx r11d, byte [r9 + rsi*2 - 0x104b9d30]
movsx ecx, dx
xor r11b, r8b
xor r11b, 0xbc
neg r11b
mov ebx, ecx
call fcn.14016f8d2
inc edx
btc ebx, ebx
movzx eax, cx
bswap edx
movsx esi, bx
jb 0x1401d8b68
dec rcx
not edx
xor bl, 0x83
push r10
lea r11, [rsi + rcx*4 - 0x3f625654]
xor dword [rsp + rbx*2 - 0xebca], edx
pop r10
movsxd rdx, edx
ror eax, 0x12
not r9w
adc rdi, rdx
movzx edx, word [r8 + rbx*4 - 0x1d794]
xor cx, 0x7b0d
lea r11, [rcx + rax*2 + 0x38b1bb8b]
lea r8, [r8 + rbx*4 - 0x1d792]
cbw
xor dx, r10w
dec rsi
sub cx, si
ror bx, 0xca
adc dx, 0xa906
ror dx, 1
xchg cx, r9w
inc ebx
neg dx
lea rbx, [r9*4 + 0x600d4d16]
jmp 0x140209c16
mov qword [rsi + rcx*4], rdi
or dword [rsp + rdx - 0x167f], ecx
jo 0x14011db0a
lea r10, [rdx + r10 - 0x168e]
jns 0x1400cbc10
and dil, r8b
shl sil, 0xa6

Function at 0x140162121
Capabilities:
Encode data using base64

Disassembly:
rol cl, 0x47
adc r11, 1
movsx eax, cl
movsx esi, dx
mov qword [rsp + rax*8 - 0x2e8], 0xffffffff8f11621e
lea r10, [r10 + rax - 0x5e]
imul sil
shl dword [rsp + rax*4 - 0x39a47], 0x2a
movzx ecx, byte [rax + r10 - 0xe692]
adc al, al
movzx edi, ax
idiv word [rsp + rax - 0xe623]
xor cl, r9b
or esi, esi
dec cl
btr rdi, 0x37
add di, 0xafa8
btr rdi, 5
xor cl, 9
add cl, 0xa3
shl rdi, 0x76
xor cl, 0x94
call fcn.1401af59f
Function at 0x14016218b
Capabilities:
Encode data using base64

Disassembly:
adc rdi, r8
not qword [rsp + rsi - 0xef8]
ror rax, 0xeb
add edx, dword [rbp + rsi*8 - 0x7800]
shl byte [rsp + rsi*2 - 0x1df0], 0x21
jno 0x14017f7d5
sbb si, 0x9fa3
mov eax, dword [rbp + rsi - 0x6f58]
not bx
sub si, 0xed82
mov r8d, dword [rsp + rsi - 0x81ca]
lea rbp, [rbp + rsi*2 - 0x103b0]
rol qword [rsp + rsi*4 - 0x20765], 0xc
not edx
xadd r8b, sil
not eax
and edx, eax
inc si
sal dword [rsp + rsi - 0x80f6], 0x5d
jnp 0x14022ad11
mov dword [rbp + rsi*8 - 0x40828], edx
sbb dword [rsp + rsi*4 - 0x2040a], esi
mov qword [rsp + rsi*2 - 0x1020a], rdi
ret 0x10
sub rbx, qword [rsp + rbx*4 - 0xe8]
mov r9, qword [rsp + rsi*4 - 0x3bf0]
cbw
mul rbx
mov qword [rsp + rsi - 0xf00], rdx
movsxd r8, r8d
mov qword [rsp + rsi - 0xef0], 0x2082182
adc ax, 0xfd2e
jp 0x140112021
movsxd rcx, ecx
add rdi, rcx
lea r11, [rax*2 + 0x1b3e7180]
rol edx, 0xcd
jmp rdi

Function at 0x140163b59
Capabilities:
Encode data using base64

Disassembly:
rol cl, 4
neg r9d
lea rcx, [rdx*8 - 0x7ad853d0]
or r8w, 0xba30
sar rdx, cl
lea r9d, [r9 + rsi*2 + 0x12c35320]
shr edx, cl
btc ax, ax
setae r10b
neg r9d
not r9d
ror dl, 0x67
rol r9d, 1
xadd ecx, r8d
bt esi, ecx
neg r9d
xchg sil, al
mov qword [rsp + rdx*2], r10
mov qword [rsp + rdx], r11
xor dword [rsp + rdx], r9d
pop r11
xchg edx, r8d
call fcn.1400f5a97

Function at 0x140163bf3
Capabilities:
Encode data using base64
Parse pe header

Disassembly:
ror cl, 1
mov qword [rsp + rdx - 0x2c543554], rsi
add cl, 0xab
ror cl, 1
or esi, dword [rsp + rdx - 0x2c543551]
ror byte [rsp + rdx - 0x2c54354d], 0x83
sbb cl, 0x13
movsx r11d, byte [rsp + rdx - 0x2c543552]
mov r8d, 0xdeae121c
xor r9b, cl
and dx, r11w
lea rcx, [rsp + rcx + 8]
sal byte [rsp + rdx*2 - 0x58a86aa8], 0x81
mov qword [rcx + rdx*2 - 0x58a86aa8], rax
bts si, 0xb7
adc r11w, 0x48be
lea r10, [rdx + r10 - 0x2c543558]
ror qword [rsp + rdx - 0x2c543554], 0x29
sete byte [rsp + rdx - 0x2c543550]
shl dword [rsp + rdx*2 - 0x58a86aa8], 0x38
mov edx, dword [r10 + rdx*2 - 0x58a86aa8]
je 0x1400dead8

Function at 0x140164964
Capabilities:
Encode data using base64

Disassembly:
movsxd rdx, edx
adc rbp, rdx
xchg rcx, rbx
mov qword [rsp + r8*4 - 0xe0], 0xffffffffd8ab8ca2
lea r10, [r8 + r10 - 0x3a]
xor cx, word [r10 + r8*2 - 0x70]
cbw
lea rdx, [rbx + rbx*8 + 0x61a8cd30]
bts r8, rdi
xor cx, r9w
shr di, 0x6a
sal rax, 0x26
btc di, dx
xor cx, 0x3695
sub cx, 0x8a9f
ror eax, 0xdf
xor cx, 0xb12b
not dword [rsp + rax + 2]
rol cx, 1
or al, dil
xor r9w, cx
and dword [rsp + rax - 0x34], 0xd9afaac
lea rcx, [rsp + rcx + 8]
mov di, word [rcx + rax*2 - 0x6e]
dec byte [rsp + rax - 0x31]
shr word [rsp + rax*4 - 0xd7], 0xc9
lea rsi, [rax + rsi - 0x39]
setb byte [rsp + rax - 0x37]
mov word [rsi + rax - 0x37], di
movzx edi, r8w
xchg byte [rsp + rax*2 - 0x6b], r11b
pop rbx
jne fcn.140158ba3

Function at 0x1401671b6
Capabilities:
Encode data using base64

Disassembly:
sub esi, 0xf301c299
not esi
cdqe
lea esi, [rsi + r9 - 0x34c7a033]
shl r10, cl
not esi
call fcn.14012c177
Function at 0x140167ed5
Capabilities:
Encode data using base64

Disassembly:
lea rsp, [rsp + 0xa0]
ret
bswap r11d
or di, bx
ror r11d, 3
lea rax, [rdi + r8*8 + 0x749cc489]
not r11d
cdq
pop rcx
jmp 0x1401b69fd
mov dword [r8 + riz], ebx
lea rbx, [rsi + rsi - 0x32764845]
mov ebx, dword [rbp + riz]
lea rdi, [rsi + 0x293a0109]
mov eax, 0xc89fd91e
bt si, 0x3f
adc rbp, 3
or dx, di
xor ebx, r11d
xchg di, ax
not ebx
movzx ecx, si
add rsi, rax
ror cx, 0x4d
rol ebx, 2
rol dx, cl
ror cx, cl
shl dil, 0xe1
xor ebx, 0x52317c09
btr ecx, esi
push rdi
lea ebx, [rbx + rcx*2 + 0xa9d9971]
ror ebx, 1
lea r10, [rsi + rsi*2 - 0x20e44478]
cdq
pop rdi
push r11
call fcn.14013ab82
ror r11d, 3
cbw
bswap r11d
lea rcx, [rdi - 0x55eebf7c]
rol r11d, 2
bswap r11d
btc eax, eax
push rax
shl word [rsp + rbx*2 - 0xf13dc6d], cl
sbb r11d, 0x8f890b86
bswap r11d
shr qword [rsp + rbx - 0x789ee38], cl
ror r11d, 3
bt ecx, 0xb9
sar cl, cl
cbw
mov qword [rsp + rbx - 0x789ee38], r9
ror r8, 0x54
xor dword [rsp + rbx - 0x789ee38], r11d
pop r9
rol r8d, 0x34
movsxd r11, r11d
adc rbp, r11
xor di, 0x843a
call fcn.140172fb2
mov ecx, 0xaf15e5b0
mov esi, ecx
mov ebx, dword [r8 + riz]
mov r10d, dword [r8 + riz + 4]
mov edx, ecx
mov cl, byte [r8 + riz + 8]
add r8, 6
shld ebx, r10d, cl
ror rdx, 0xfc
jae 0x1401874d3
mov rsi, qword [rsp + 0x98]
jmp 0x1402202da
jmp 0x14011be03

Function at 0x140168e02
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + rsi*8 - 0x26e48], rbp
setnp dil
xor dword [rsp + rsi - 0x4dc1], edx
call fcn.140153e2d
btc edx, 0x97
movsxd rdi, edi
sal dl, 0xe5
neg rsi
xchg r10, rsi
add r9, rdi
mov r8d, dword [rsi + r8 - 0x61ac9e3d]
lea rsi, [rdx*2 - 0x3f727d2]
xadd ebx, esi
jnp fcn.1400e29ec
Function at 0x140169653
Capabilities:
Encode data using base64

Disassembly:
and word [rsp + r8*8 - 0x1a17f], r8w
lea rsi, [rsi + r8*8 - 0x1a176]
mov word [r11 + r8 - 0x3430], bx
sar qword [rsp + r8*2 - 0x6860], cl
mov eax, 0xd42e9c81
push rcx
mov qword [rsp + r8 - 0x3430], rbp
ret 8
mov qword [rsp + rdx - 0x270fcaa3], rbp
movsx eax, dl
and edx, 0x3b89491c
cdq
xor dword [rsp + rbx - 0xf283], r10d
lea rcx, [rax + rsi*4 - 0x42e61de0]
xadd ax, si
pop rbp
mov edi, esi
mul di
movsxd r10, r10d
shl rcx, cl
xor dil, 0x39
adc r8, r10
jmp 0x14014cb58
bswap edx
shl ecx, 0x54
shl bl, 0x83
ja 0x14017ad8c
sbb edx, ecx
mov qword [rsp + rdi - 0x1b2f16a], r11
xadd word [rsp + rcx + 0xd], r10w
jae 0x14020faa3
mov edi, 0x77b69680
movzx r8d, dil
lea r10, [r10 + rdi - 0x77b69684]
mov esi, dword [r10 + r8*2 - 0x100]
lea rax, [r8 + r8*4 - 0x38e30974]
lea rdx, [rax + rdi + 0x55228c24]
sal eax, 0xfd
xor esi, r9d
movsx ecx, r8w
lea rbp, [rcx + rdi + 0x380e18b2]
rol dx, 0x8e
sbb esi, 0x8a81db90
rol esi, 2
lea esi, [rsi + rdi - 0x3194f9c1]
not esi
rol esi, 1
xor rdi, 0xffffffffc735fa8c
lea esi, [rsi + rdi*4 + 0x435c4d27]
bts r8d, 0x9c
cwde
call fcn.1400e310e
rol r10d, 1
lea r10d, [r10 + rdx*2 + 0x4b1a135e]
movzx ebx, word [rsp + rdx*2 - 0x4e1f9543]
bswap r10d
not r10d
inc dx
movsx esi, word [rsp + rdx - 0x270fcaa1]
jno 0x140159819
movsx ebx, cl
setnp dl
dec eax
dec r11
xor eax, 0x7788aaae
not r11
mov qword [rsp + r8 - 0x23], r9
ror r11d, 0xb2
sal r8b, cl
sal edx, cl
xor dword [rsp + r11 - 0x4cf71870], eax
pop r9
or rbx, rbx
xor bl, r11b
movsxd rax, eax
sar r11w, cl
push rbx
adc rbp, rax
xchg qword [rsp + r8*2 - 0x30], r8
mov r11, qword [r8 + rsi - 0x53]
sub r8w, cx
mov bx, word [r8 + rsi - 0x3428]
jg 0x1401435a4
mov esi, 0x82ac95ae
rol si, 0xa8
movsx ecx, sil
mov rdx, qword [r8 + riz]
sbb cx, 0xe70f
mov r10d, dword [r8 + riz + 8]
sar sil, cl
adc r8, 0xb
lea rbx, [rcx*4 - 0xecd7dc2]
imul ecx, ebx
mov dword [rdx + riz], r10d
call fcn.140132943
xchg byte [rsp + rcx + 9], cl
xor dword [rsp + rcx - 0x97], edx
rol dword [rsp + rcx - 0x9f], cl
sub sil, r10b
and cx, 0x981d
mov r11, qword [rsp + rcx*2 + 6]
dec edi
movsxd rdx, edx
push rax
adc r9, rdx
pop r10
pop rdi
pop rsi
pop rdx
jmp fcn.1400e29ec

Function at 0x14016a03d
Capabilities:
Encode data using base64

Disassembly:
xadd rdx, r10
movsx ebx, dil
movsxd rax, eax
adc r8, rax
mov qword [rsp + rsi - 0x871a], r8
ret 8
xor cx, 0x7439
xor dword [rsp + rdi*2 - 0x10e2c], eax
mov qword [rsp + rsi*8 - 0x438d0], rcx
shr cl, 0x41
mov ebp, dword [rsp + rsi - 0x8716]
mov rbp, qword [rsp + rsi - 0x8712]
jl 0x1400a1be6
Function at 0x14016f53c
Capabilities:
Encode data using base64

Disassembly:
cdq
pop r11
ror al, 0x61
inc r10
movsxd rdi, edi
sub rdx, r10
lea rsi, [rax + 0x591a7127]
adc r9, rdi
btc edx, 0x9d
neg bx
jmp r9
btc rcx, r11
xor dword [rsp + r11*4 - 0x36cf8c7c], ebp
btr cx, 0xc
pop r8
shr eax, cl
dec ebx
bswap edx
movsxd rbp, ebp
adc rdi, rbp
mov cx, word [r10 + r11*4 - 0x36cf8c7c]
shr rdx, 0xd6
adc r10, rax
imul r11, r11
mov ebp, ebx
div bpl
lea r9, [rax + r9 - 0x201]
xor dl, bpl
movzx eax, byte [rax + r9 - 0x200]
dec dx
setne dl
xor al, r8b
add ebp, esi
ror al, 1
not al
sar si, 0xe6
xchg r11, rbx
shr r11d, 0xab
xor al, 0x8f
or r11, 0x652263a8
sbb al, 0x24
neg r11d
adc bl, 0x81
xor r8b, al
call fcn.140222edf
adc rbp, rbx
sar qword [rsp + rax - 0x1885f3b], cl
setp byte [rsp + rax - 0x1885f3b]
lea rbx, [r8 + rdi*4 + 0x8887c9d]
mov esi, dword [rsi + rax*2 - 0x310be76]
mul qword [rsp + rax*2 - 0x310be76]
pop r11
jae fcn.140158ba3
btr cx, ax
sbb edi, 0x8992a33b
bt ebx, ecx
neg ecx
ror edi, 2
movsx edx, cx
push r11
movsx r10d, cx
lea r11, [rax*2 + 0x730b148e]
xor dword [rsp + rbx - 0x8371], edi
jmp 0x14007e151
mov qword [rsp], 0xffffffffad82242e
mov r9d, 0x938f6bb6
mov ecx, dword [r8 + riz]
sar dword [rsp], 0x3a
adc r8, 4
xor ecx, r10d
movzx esi, r9w
and r9b, 0xa9
lea ecx, [rsi + rcx + 0x769acae3]
mov ebx, r9d
dec byte [rsp + rsi - 0x6baf]
xor bx, bx
bswap ecx
mov edx, esi
pop rsi
not ecx
sbb r9b, r9b
xor ecx, 0xa616cba3
dec ecx
neg bx
call fcn.1401d5d9d
mov ebx, 0xbe062b3a
movzx edi, bl
movsx ecx, dil
movzx ax, byte [r8 + rdi - 0x3a]
sal dil, 0xc1
jne 0x1401ca718
mov ecx, dword [r10 + riz]
mov r11d, 0xafa97cb9
add r10, 4
call fcn.1402167fa
mov esi, dword [r10 + rcx*2 - 0xa6dc]
jmp 0x1401787fa
lea r10, [rbx + r10 - 0x759d538d]
shl cl, 3
mov edi, 0x8a82cc34
xor esi, ebp
and rcx, rdi
bswap esi
ror esi, 1
btc rbx, rbx
movsx edx, r11b
bts rbx, rdx
lea esi, [rsi + rbx - 0x18021c88]
dec r11
dec ebx
neg bl
bswap esi
movzx eax, cl
cwd
xadd r11w, di
not esi
mov cl, byte [r8 + rdi*8 - 0x39e]
movzx edx, bl
btc edi, 0x97
lea r8, [r8 + rdi - 0x800072]
or edi, 0x2803d2b1
shr al, cl
lea r11, [rdi + rdi*4 - 0x3cdcc1dc]
rol di, 0xc7
push rdx
mov word [r8 + rdi*2 - 0x5106f5d2], ax
lea rsi, [rbx*2 + 0x623f6ad]
lea rcx, [r11 - 0x7be5e4da]
and dl, 0xb
mov edi, dword [rdi + r10 - 0x28837ae9]
shl dword [rsp + rdx - 9], 0x1b
lea r10, [rdx + r10 - 6]
xor edi, ebp
movzx eax, byte [rsp + rdx*2 - 0x12]
btr ax, 0x3c
bswap edi
ror r11w, 4
mul cl
lea edi, [rdi + rbx - 0x167ff77f]
jae 0x140212a7e
idiv rsi
xor edi, 0x60364a8b
sar esi, cl
inc dword [rsp + rcx*4 - 0x4741e049]
jno 0x140228f8e
sub r9, 4
mov r11d, 0xdb3e31f
mov ebp, dword [r9 + r11*4 - 0x36cf8c7c]
mov eax, r11d
rol eax, 0x94
xor ebp, r8d
bswap ebp
movzx esi, al
imul eax
lea rbx, [r11*8 + 0x112fa435]
lea ebp, [rbp + rsi*4 - 0x562deb32]
neg ebp
lea ebp, [r11 + rbp - 0x75611ccc]
movsx ecx, si
push r8
jmp 0x140111b3f
Function at 0x14016fbcd
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + rdx*2], rax
mov byte [rsp + rdx*2 + 6], sil
xor r11b, r8b
lea r8, [rsp + r8 + 8]
dec byte [rsp + rdx + 1]
neg dword [rsp + rdx + 4]
or dx, word [r8 + rdx]
movzx r8d, ax
lea rbp, [rbp + rax*2 - 2]
xchg dword [rsp + rax*4 + 1], eax
mov word [rbp + rax*4 - 0x3fc], dx
or r8w, 0x6b17
rol qword [rsp + rax - 0xff], 0x1b
ror dword [rsp + rax*8 - 0x7f6], 2
pop r8
jne fcn.140189ca6
Function at 0x140173d33
Capabilities:
Encode data using base64

Disassembly:
mov r8, rsi
imul edi
lea rsi, [rsi + rdi - 0x34000002]
mov qword [rsp + rdi - 0x34000000], 0x5212a114
sal ecx, 0x4e
mov word [rsi + rax*2 - 0x28000000], r8w
sal word [rsp + rdi - 0x33fffffb], 0x8c
shl dx, 0x26
je 0x1400f145c
pop rax
js fcn.140158ba3

Function at 0x140176bdc
Capabilities:
Encode data using base64

Disassembly:
mov cl, byte [rbp + r9 - 0x6a02]
and dx, 0xe1a3
lea rbp, [r8 + rbp - 0xff47]
shr esi, cl
rol r9d, 0xe1
bts ax, r10w
mov dword [rbp + rdx - 0x4f29e0a2], esi
xor r8b, dl
jmp rdi
mov qword [rsp + rdx*8 + 0x20], r9
xor dword [rsp + rdx*4 + 0x1c], r8d
btc dx, ax
mov qword [rsp + rdx*2 + 0x802], rax
sbb dil, cl
mov r9, qword [rsp + rdx*4 + 0x101c]
movsx ebp, al
cwde
mov qword [rsp + rax*4 - 0x4310], rax
movsxd r8, r8d
sub dl, 0x37
rol dl, cl
adc rbx, r8
cdq
call fcn.14011ec1a
mov esi, dword [rbx]
mov eax, 0x4f29ecb6
lea rbx, [rbx + rax - 0x4f29ecb2]
mov edx, eax
xor esi, r11d
bswap rax
inc esi
mul al
jo 0x1400ee7a5
movzx ecx, dl
rol esi, 2
dec esi
lea r10, [rax - 0xec695fa]
rol ecx, 0x82
bswap esi
push r11
movzx r9d, r10w
xor dword [rsp + rcx - 0x2d8], esi
pop r11
movzx r8d, dl
movsxd rsi, esi
add rdi, rsi
or r8b, dl
sub rcx, rax
mov esi, dword [r9 + rbp - 0x6a06]
not r8w
jne 0x1400aa2dc

Function at 0x14017a754
Capabilities:
Encode data using base64

Disassembly:
adc rbp, r8
rol byte [rsp + rbx + 0x34e228d6], cl
div r11
pop rax
pop rcx
pop rdi
jmp fcn.140158ba3

Function at 0x14017bf6b
Capabilities:
Encode data using base64

Disassembly:
xor qword [rsp + rcx - 0x5790], r9
xor dword [rsp + rcx*2 - 0xaf30], edx
cwde
xadd rcx, rbx
bts r11, rbx
mov r9, qword [rsp + rax + 0x10]
sal r11, 0xbd
mov qword [rsp + rax*2 + 0x10], 0xffffffffa4350c95
movsxd rdx, edx
mov qword [rsp + rax*2], rdi
cbw
xor ebx, 0x96039118
adc rbp, rdx
neg rdi
shr r11b, 0xa7
pop r11
pop rdi
pop rdi
jp fcn.140158ba3

Function at 0x14017c173
Capabilities:
Encode data using base64

Disassembly:
xadd dword [rsp + 3], esi
xor dword [rsp + rsi + 8], eax
mov edi, dword [rsp + rsi*2]
or ebp, edi
seto byte [rsp + rsi + 1]
mov r9, qword [rsp + rsi*2 + 8]
jae 0x140119596
mov qword [rsp + rdx], rdx
shr byte [rsp + rdx + 7], 0x86
rol eax, 2
lea eax, [rax + rdx + 0x46219cbf]
shl qword [rsp + rdx*2 + 5], 0x60
not eax
movsx r8d, bp
movsx esi, bp
rol eax, 1
ror qword [rsp + rdx + 8], cl
sar byte [rsp + rdx + 3], 0xc6
not word [rsp + rdx*2 + 0xd]
sbb eax, 0xfa9602a9
xadd r8w, si
mov qword [rsp + rdx + 8], r9
lea rdx, [rsi*4 - 0x71f7895f]
js 0x14010d2f3