joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140bff9a0
Capabilities:
Encode data using base64

Disassembly:
xor bl, 0xa0
xchg r10w, dx
xor r9b, bl
sub r8w, r10w
mov qword [rsp], r10
not word [rsp]
lea rbx, [rsp + rbx + 8]
mov qword [rsp], r8
or dx, word [rbx + riz]
sub rsi, 2
rol dword [rsp + 3], cl
sub r8w, r8w
call fcn.140c388d8
mov edx, 0x8626b92c
add rdx, 0x13258ea1
mov rcx, qword [rsi + riz]
adc rsi, 8
movzx ebx, dx
movzx ebx, byte [rdi + rbx*4 - 0x11f35]
lea rax, [rdx*4 + 0x400a9ab9]
lea r8, [rax*8 + 0x653780bc]
xadd rax, rdx
xor bl, r9b
movzx ebp, ax
jmp 0x140c0c000
jge 0x140c2d890
sub bp, r10w
lea rbx, [rbx + rdx + 0x16b26c8a]
cmovo rdx, qword [rsp + rdx]
ror rbx, 1
and dword [rsp + rdx + 3], r10d
shr r8d, 0x24
sar bpl, 0xa1
not rbx
idiv qword [rsp + rdx*2]
xor rbx, 0xffffffffb81ddcb0
dec r8
jne 0x140bffc1e
mov rbx, qword [rdi + rdx - 9]
xor rbx, r9
neg dword [rsp + rdx]
lea r10, [rbp*4 - 0x44eb1b77]
dec byte [rsp + rdx + 5]
not rbx
jne 0x140c07874
pop rbp
jl fcn.140c020aa
mov r8d, 0x4fb4f337
mov r10d, dword [rsi + r8 - 0x4fb4f337]
mov cl, byte [rsi + r8 - 0x4fb4f333]
mov eax, r8d
lea rdx, [rax*2 - 0x17f6153]
lea rsi, [r8 + rsi - 0x4fb4f335]
movzx ebp, ax
sar bp, 0x21
shl rdx, 0xd6
shr r10d, cl
shr r8b, 3
adc ebp, ebp
mov dword [r8 + rsi - 0x4fb4f306], r10d
movzx r10d, dx
lea rdi, [r8 + rdi - 0x4fb4f30a]
lea rdx, [rbp + r10*4 - 0x6ef56f7d]
mov ebp, dword [rdi + r8 - 0x4fb4f306]
xor ebp, r9d
jmp 0x140c32750
dec rdx
xor bl, 0x86
div al
shl edx, 0x9c
add ax, dx
rol bl, 1
shl bp, 0x41
sar bp, 0x41
dec bl
shr rdx, 0xbb
push rdx
neg bl
xor r9b, bl
neg r8d
lea rbx, [rsp + rbx + 8]
shr byte [rsp + rdx], 0xe6
sbb r8b, byte [rsp + rdx + 4]
mov qword [rbx + rdx*2], rcx
jno 0x140c089dd
neg rbx
not rbx
cqo
xchg qword [rsp + rdx], r8
sub byte [rsp + rdx*2 + 4], r8b
xor r9, rbx
rol dword [rsp + rdx*2 + 4], 0xb6
movsx ecx, bpl
xor al, byte [rdi + rdx - 0xa]
not cx
xadd word [rsp + rdx*2 + 4], r10w
cmovae r10w, cx
xor al, r9b
xadd byte [rsp + rdx*4 + 4], dh
rol dword [rsp + rdx - 0x70fe], 0xa7
shl byte [rsp + rdx - 0x7100], 0xa4
not al
xadd ecx, r10d
btc r8, 0xb1
neg al
ror al, 1
dec al
pop r8
lea r8, [rcx + r10*8 - 0x24daaa64]
xor r9b, al
add rax, rsp
mov qword [rax + rdx*2 - 0xe200], rbx
movzx ebx, r10w
mov ecx, dword [rdi + rdx*8 - 0x3880e]
shl r10w, 0xcd
and bx, 0x478a
jp 0x140bfe207
lea rdi, [rdi + rdx*2 - 0xe20e]
inc rdx
not r8b
xor ecx, r9d
add bl, bl
bswap ecx
shr r8w, 0x25
push r8
sar bl, 0xc6
neg ecx
sar dl, 0x45
lea rax, [rdx*8 - 0xe760258]
dec ecx
sar bp, 0x85
cwd
ror ebx, 0x90
xor ecx, 0xdca04515
sar ebp, 0x6a
setp r10b
mov qword [rsp + rdx*2 - 0x1fffe], r9
xor dword [rsp + rdx*2 - 0x1fffe], ecx
cwde
shr ebx, 0x52
xor bx, r8w
pop r9
xadd bx, r8w
shr ax, 0xc6
movsxd rcx, ecx
cdq
add r11, rcx
and r8, 0x67bb55a3
add rbp, r11
jmp rbp
Function at 0x140c02613
Capabilities:
Authenticate hmac
Encrypt data using aes mixcolumns step
Encrypt data using speck
Parse pe header

Disassembly:
movzx cx, byte [r10 + rbx - 0x62870008]
sar dl, 0x85
and word [rsp + r10 - 0x6286ffff], 0xfc12
push r10
mov word [rsi + rbp*4 - 0x1ec74], cx
mov ecx, dword [rsp + rbp - 0x7b08]
mov ebx, r8d
lea rsi, [rsi + r10 - 0x62870010]
inc r8d
xchg word [rsp + rbp*4 - 0x1ec69], bx
dec dl
pop r10
pop r10
pop r8
pop rbp
jle fcn.140c020aa
mov r8d, 0x1d3aaa1a
mov r10d, r8d
lea rdi, [rdi + r8*2 - 0x3a755438]
mov r8d, dword [r8 + rdi - 0x1d3aaa1a]
call fcn.140c255e1
Function at 0x140c094be
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using aes mixcolumns step
Encrypt data using speck
Parse pe header

Disassembly:
not qword [rsp + r10*4]
sbb rax, rax
xor dword [rsp + r10*2 + 8], edx
mov r9, qword [rsp + r10*2 + 8]
add r10d, ecx
movsxd rdx, edx
mov qword [rsp + r10 - 0x69], r10
adc r11, rdx
not qword [rsp + r10 - 0x6c]
movzx edx, cx
mov rdx, qword [rsi + r10 - 0x69]
sub word [rsp + rax + 5], cx
lea rbp, [rax*4 - 0x21ece174]
mov r10d, dword ss:[rdx + rax]
jge 0x140c34208
mov edx, 0x40abc4b9
push rdx
lea rdi, [rdx + rdi - 0x40abc4bd]
pop rbx
movsx ebp, dl
lea rdx, [rbp + rdx - 0x7453d048]
mov r8d, dword [rdi + rbx - 0x40abc4b9]
sub bpl, dl
ja 0x140c3a5d1
sub r8d, eax
ror r8d, 3
and r10d, dword [rsp + r10 - 0x8bd2]
mov ebp, 0x970bcf1b
mov qword [rsp + r10*2 + 0x10], r9
neg cx
shl qword [rsp + r10*2 + 8], cl
add ax, 0xa528
xor dword [rsp + r10*2 + 0x10], r8d
mov r9, qword [rsp + r10 + 0x10]
sar rcx, 0x2d
movsxd r8, r8d
and word [rsp + r10 + 4], bx
adc r11, r8
mov qword [rsp + r10*4], r11
ret 0x10
shr r10d, cl
xor edx, 0x7227718
bswap edx
mov qword [rsp + r10], rbx
sub edx, 0xb2058c0b
shl bl, 0xc4
mov qword [rsp + r10*2 + 8], r9
jae 0x140c04801
not ax
ja 0x140c3bd35
add rbx, r11
jmp rbx
xor r8d, r9d
movzx ecx, bp
sal ebx, 0x43
inc r8d
add dx, bx
xor r8d, 0xc0a28328
shl dx, 0x24
btr rbp, rbp
sbb r8d, 0x86030baa
or cx, dx
inc dx
rol r8d, 1
push r9
movsx r9d, dx
inc ecx
xor dword [rsp + rbx*2 - 0xabc4b90], r8d
pop r9
xchg rdx, rbp
movsxd r8, r8d
ror cl, 0x25
add r11, r8
sar ecx, cl
btr ebx, 0xa7
lea rdi, [rdi + rbx*2 - 0xabc4a91]
or bpl, bl
add rbx, 0xffffffff919585b1
movzx ecx, byte [rdi + rcx*2 - 0xff8]
bt ebx, ebp
xor cl, r9b
add cl, 0xa5
ror cl, 1
dec cl
inc bl
neg cl
xor r9b, cl
push rdi
push r11
inc bpl
sal bx, 0xe2
sbb ebp, edx
push r9
not rbp
call fcn.140c433d5
mov dword [rax + rsi - 0xfff3], r10d
lea rsi, [rax + rsi - 0xfff3]
push r8
mov qword [rsp + rax - 0xffff], r11
ret 0x10

Function at 0x140c09afb
Capabilities:
Authenticate hmac
Encrypt data using aes mixcolumns step
Encrypt data using speck
Parse pe header

Disassembly:
imul rax, r10
lea rdx, [rbx*4 - 0x57642df1]
pop r9
movsxd r8, r8d
xchg r10d, ecx
adc r11, r8
inc ecx
add rbx, r11
jmp rbx
adc qword [rsp + rbx + 8], rax
cdqe
not dl
mov qword [rsp + rax - 0x77e3ff01], rbp
pop r8
jnp 0x140c1f7f2
sal edx, cl
mov r8, qword [rbx + rsi - 0x25a3ef82]
push rbp
mov cl, byte [rsi + rbx - 0x25a3ef7a]
lea rsi, [rsi + r10 + 0xa]
jbe 0x140c00b0d
imul rdx, qword [rsp + rbx - 0x25a3ef87]
bt dx, 0x38
shld rax, r8, cl
movzx ecx, dx
mov qword [r10 + rsi], rax
mov qword [rsp + rbx - 0x25a3ef8a], r11
ret 0x10
Function at 0x140c0d768
Capabilities:
Authenticate hmac
Encrypt data using aes mixcolumns step
Encrypt data using speck

Disassembly:
cdqe
xor dword [rsp + rax - 0x9c], r10d
pop rbp
lea rbp, [r8 + r8 - 0x1b6d0774]
bts r8w, bp
pop r9
mov dword [rsi + rax - 0xaa], r10d
mov r10d, 0x25258291
shr r8b, 0x82
add ebp, r8d
mov ecx, dword [rdi + rax*8 - 0x528]
xor ecx, r9d
neg ecx
sar bp, 0xc7
sbb eax, 0x9796c429
rol ecx, 1
mov ebx, 0xc12729a3
inc ebp
shr r8b, 0x24
lea ecx, [rcx + rax - 0x1e628a6a]
sar r10d, 0xfc
xadd r10, rax
jns 0x140c36269
add byte [rax], al
or dword [rcx], eax
lodsb al, byte [rsi]
insb byte [rdi], dx
lahf
xor dword [rbx - 0x5d9fdae5], ebp
invalid
not rbx
push r9
xor dword [rsp + rax*2 - 4], ecx
call fcn.140c24d08
bswap ecx
sbb dx, r10w
jge 0x140c1d251

Function at 0x140c19300
Capabilities:
Authenticate hmac
Encrypt data using aes mixcolumns step
Encrypt data using speck

Disassembly:
call fcn.140927247
add byte [rax], al
je 0x14086a754
outsd dx, dword [rsi]
outsb dx, byte [rsi]
push rax
invalid
invalid
dec ebx
mov qword [rsp], 0xffffffff87899d90
and byte [rsp + 0xe], 0xa3
jl 0x140c3d3e4
rol ebx, 1
dec ebx
mov qword [rsp + 0x10], r9
mov r9d, dword [rsp + 4]
shr r9d, 0x6f
xor dword [rsp + r9*4 - 0x7ffec], ebx
mov r9, qword [rsp + r9 - 0x1ffef]
jmp 0x140c2dde3
push 0x7a3c1123
lea rsp, [rsp + 8]
jmp 0x14086a6fd
jmp 0x140c3cfe9
inc byte [rsp + 0xe]
movsxd rbx, ebx
add r11, rbx
lea rsp, [rsp + 0x18]
jmp 0x140c2d7a0

Function at 0x140c1a75b
Capabilities:
Encrypt data using aes mixcolumns step
Encrypt data using speck

Disassembly:
lea rbp, [rbp*4 - 0x37f617cc]
sub r8, r10
xor ecx, 0xc0a28328
mov eax, r8d
mov qword [rsp + r8 - 0x5881], rdx
sub ecx, 0x86030bab
rol ecx, 1
or eax, dword [rsp + r8 - 0x5891]
jge 0x140c41489
movzx r11d, r8b
not r11b
mov rbp, qword [r8 + rbp - 0x7aa3]
mov qword [rsp + r8*8 - 0x3d4d8], r8
xchg byte [rsp + r8*2 - 0xf535], sil
mov qword [rbp + r8*2 - 0xf536], rax
sar word [rsp + r8 - 0x7a95], 0x84
mov rsi, rbp
and r8b, r8b
mov r10d, 0x3bb69cbd
dec dl
mov r9, qword [rsp + r8 - 0x7a93]
sbb r10w, r8w
mov r11, qword [rsp + r8 - 0x7a8b]
neg word [rsp + r8 - 0x7a95]
mov qword [rsp + r8*2 - 0xf52e], 0x1428cc1a
mov rdi, qword [rsp + r8*2 - 0xf51e]
or rdx, r8
lea rdi, [r8 + rdi - 0x7a9f]
mov ecx, dword [rdi + r8*4 - 0x1ea6c]
and r10d, r8d
xor ecx, r9d
mov qword [rsp + r10*8 - 0x11000], r8
mov ebp, edx
inc ecx
jmp 0x140bf9e27
Function at 0x140c1f62a
Capabilities:
Encode data using base64

Disassembly:
inc bp
shl r10b, 0x43
rol bp, 1
movzx eax, r8b
pop rcx
sub bp, 0x54b1
btc r8, 0x1d
ror bp, 1
shr r10d, 0x27
sar ebx, 0xb0
xor r9w, bp
imul r10d, ecx
lea rsi, [rsi + rbx - 2]
div al
mov word [rsi + rbx], bp
xchg bx, ax
xor r10, rcx
cdqe
jp fcn.140c020aa
xor bp, r9w
jmp 0x140bfed33
sub eax, r8d
mov byte [rsp + rdx*2 + 7], bpl
not rbp
add byte [rsp + rdx + 4], 0x98
ror eax, 2
mov qword [rsp + rdx*2], r9
xor dword [rsp + rdx], eax
push rcx
pop r10
pop r9
movsxd rax, eax
add r10b, 3
adc r11, rax
rol ebx, cl
xor r8b, r10b
neg r8w
xor rdx, r11
jmp rdx
movzx ebp, word [rdi + rbx*2]
mov qword [rsp + rbx], 0x3584d2b2
jg 0x140c051c3
mov ebp, 0x870943be
mov rbp, qword [rsi + riz]
mov ebx, 0xdd18c0ac
movsx r10d, bx
sub rsi, 0xfffffffffffffff8
lea r8, [rsp + 0x100]
mov ecx, ebx
mov qword [r8 + riz], rbp
lea rdx, [r10 + r10*4 - 0x39d0b850]
mov ebp, r10d
movzx edx, byte [rdi + riz - 1]
inc ecx
sar r10, cl
xor dl, r9b
lea r8, [r10*8 - 0x543b2dc]
rol dl, 1
lea rcx, [r10*8 - 0x5af47a5a]
inc r10
xor dl, 0x3c
add bx, 0x1626
or bl, bpl
ror dl, 1
xor dl, 0x1b
xor r9b, dl
lea rbx, [r8 + rbp*2 - 0x5bf3d5ec]
sal r10w, 0xe3
push r10
lea rdx, [rsp + rdx + 8]
mov rbx, qword [rdx + r10 - 8]
sar qword [rsp + r10 - 8], cl
mov word [rsp + r10*2 - 0x10], 0x2a92
mov r10w, word [r10 + rdi - 0xb]
movsx eax, cl
xor r10w, r9w
bt ecx, ecx
dec dword [rsp + rcx + 0x5af47a5d]
and rcx, rbp
rol r10w, 1
not r10w
movsx edx, bpl
inc byte [rsp + r8 + 0x543b2dc]
sub r10w, 0x9aa1
cwde
sal dword [rsp + r8 + 0x543b2df], cl
or r8d, ebp
not r10w
sbb ax, cx
sar dword [rsp + 4], cl
push r8
sbb r10w, 0x162b
xor r9w, r10w
sal bp, 8
lea r8, [rbp*8 - 0x617dd7e0]
sar rdx, 0x8b
lea r10, [rsp + r10 + 0x10]
mov qword [r10 + rdx*8 - 0xfffff8], rbx
sbb r8d, r8d
mov eax, dword [rdx + rdi - 0x200006]
lea rdi, [rdx + rdi - 0x200006]
mov r10d, dword [rsp + rdx*8 - 0xffffed]
shr rdx, 0xed
xor eax, r9d
sub eax, r8d
and dl, r10b
pop rbx
neg eax
jmp 0x140c0d096

Function at 0x140c1f79d
Capabilities:
Authenticate hmac
Encrypt data using aes mixcolumns step
Encrypt data using speck
Parse pe header

Disassembly:
movsx ebx, cx
pop rbp
pop rbp
jp fcn.140c020aa
mov edx, 0xd9ac382f
shr dl, 0x46
push rdx
sbb rdi, 3
mov r8d, dword [rdi + riz]
call fcn.140c0d559
movzx r10d, dl
xor ecx, r9d
mov r8d, 0x47135629
bswap ecx
neg ecx
movsx ebx, r8b
dec ecx
ror r8, 0xd0
movsx eax, r8w
xor ecx, 0xdca04515
shr bl, 0x22
call fcn.140c2af51
cwde
cbw
xor dword [rsp + rax*2 + 8], r8d
and cl, bpl
xchg dx, ax
mov r9, qword [rsp + rax - 0x8dea]
movsxd r8, r8d
pop rbx
adc r11, r8
mov qword [rsp + rax*2 - 0x11be4], r10
rdtsc
shl bpl, 0x46
lea rsi, [rbp + rsi - 0xd08]
js 0x140c348a5
mov dword [rbp + rsi - 0xcfc], eax
push rbp
mov qword [rsp + rbp*2 - 0x19f8], rcx
mov dword [rsi + rbp*8 - 0x6800], edx
jb 0x140bff3b7
and r10b, dl
lea rdx, [rax*8 - 0x2e5433f6]
call fcn.140c29a70
Function at 0x140c2252e
Capabilities:
Authenticate hmac

Disassembly:
mov qword [rsp + r10 - 0x6e1e6cb7], 0x770db90b
mov edx, dword [rdi + r10 - 0x6e1e6cb7]
dec word [rsp + r10 - 0x6e1e6cb2]
jge 0x140c16f82
rol r10d, 0x33
xor edx, r9d
movsx eax, r10w
ror qword [rsp + rax*2 - 0xe1e6], 0x21
jb 0x140c237fa
bswap edx
pop rax
mov ecx, r10d
rol edx, 2
bt ecx, ecx
mov ebx, r10d
dec edx
mov ebp, r10d
movzx r8d, ax
sal bl, 4
bswap edx
rol r8b, 0x67
sar r10, 0xdf
jbe 0x140c327b8
mov ecx, 0x563165a9
mov edx, 0x7a1c6391
jmp 0x140c16027
xor ecx, r9d
call fcn.140c1df15
mov eax, 0x4ebf4913
lea rcx, [rax + rax*4 + 0x40b16000]
lea rdi, [rdi + rax - 0x4ebf4917]
movsx r8d, cx
jmp 0x140c2c35c
xor dl, r9b
cwde
sub dl, 0x34
lea rbp, [rax + r10*8 - 0x385dd177]
not r10
movsx r8d, cx
xor dl, 0x92
neg dl
sar r8w, 0xa2
sbb dl, 0x25
ror r10d, 0x97
bswap eax
inc r8
xor dl, 0x1d
xadd cl, bpl
jb 0x140c386c1
cbw
xor dword [rsp + r10], edx
sar cx, 0xa
bt r8d, 0x1a
mov r9d, eax
pop r9
shr rcx, 0xdc
inc ecx
movsxd rdx, edx
bswap ebx
sar rbp, 0xfe
adc r11, rdx
cbw
lea r10, [rax*4 - 0x4dc0d065]
mov cx, word [rsi + rcx*4 - 0x1c]
lea rsi, [rsi + rbx - 0x3070bb63]
xadd al, bh
lea rdi, [rdi + rbx*2 - 0x60e100cb]
lea rdx, [rax*8 + 0xa873e3b]
movzx r8d, byte [rbp + rdi]
mul ax
call fcn.140c29a2b
mov ecx, 0x6531feab
inc rcx
lea rdi, [rcx + rdi - 0x6531feb0]
imul ecx, ecx
and rcx, rcx
mov ecx, dword [rcx + rdi - 0x3331c390]
push 0xffffffffa59c6783
sal dword [rsp + 2], 0x34
jp 0x140c2358b
lea r8, [r8 + r10*4 + 0x5e87dbbb]
mov byte [rdx + rbp - 0x7e12], cl
cbw
mov qword [rsp + r10*8 - 0x1f844], r8
sal r10w, 0xe2
lea rdi, [rbx + rdi - 0x56f8]
pop rdx
and dword [rsp + rbx*2 - 0xade4], r8d
sal rbp, 0x8b
mov edx, dword [rdi + rax - 0x4ebf4913]
mov r10d, 0xe59b8295
btr r10, rcx
xor edx, r9d
xor edx, 0x19ba96a4
bswap edx
add rax, rcx
xadd eax, ecx
lea rbp, [r8 + rcx*2 + 0x738cab14]
inc edx
btc ecx, 0x93
xor edx, 0xcae6d36
or r8b, al
sub r10d, 0x732b9932
push r9
call fcn.140bfa58e
push r9
je 0x140c23e26
jmp 0x140c28039
sbb r10b, 0xa
sbb dl, 0x9f
xchg rbp, rax
inc rax
shr bpl, 0xc2
not dl
shr r8d, cl
shl r8w, 1
xor r9b, dl
jmp 0x140c0ca1d
Function at 0x140c255e1
Capabilities:
Authenticate hmac
Encrypt data using aes mixcolumns step
Encrypt data using speck

Disassembly:
mov qword [rsp + r10*4 - 0x74eaa868], 0xffffffffeeb48f00
shr r10w, 1
xor r8d, r9d
jmp 0x140c3de1f
movzx ebx, r10b
lea r8d, [r8 + r10*2 + 0x362b2f9d]
mov eax, 0x3250308
ror r8d, 1
movsx ebp, byte [rsp + r10 - 0x1d3a550b]
movsx edx, bp
inc r8d
imul byte [rsp + r10 - 0x1d3a5506]
cmovb dx, word [rsp + r10 - 0x1d3a550a]
ror r8d, 3
neg dword [rsp + rbx - 0xc]
btc rbx, rbx
ror word [rsp + rbx - 0x200a], 6
mov qword [rsp + r10 - 0x1d3a550d], r9
bt ebx, eax
xor dword [rsp + r10 - 0x1d3a550d], r8d
ror ebp, 0x79
pop r9
jae fcn.140c2b06b
movsxd r8, r8d
mov ecx, eax
add r11, r8
ror ebx, 0xf9
mov r8, qword [rsi + r10*2 - 0x3a74aa1a]
push rax
ror dword [rsp + r10*4 - 0x74e95430], 0x4b
mov ebx, dword [rsi + r10*2 - 0x3a74aa12]
inc cx
xchg qword [rsp + r10 - 0x1d3a550d], rcx
lea rsi, [rsi + r10*4 - 0x74e95428]
inc dword [rsp + rax - 0x325fff5]
mov dword [rax + r8 - 0x325fff8], ebx
cdqe
idiv byte [rsp + r10 - 0x1d3a550b]
sal bpl, 0x66
mov qword [rsp + r10 - 0x1d3a550d], r11
ret

Function at 0x140c296be
Capabilities:
Encode data using base64

Disassembly:
movsxd rcx, ecx
bts dx, 0x39
not bl
adc r11, rcx
add rax, r11
jmp rax
mov qword [rsp + rbx - 0x31c7e6fa], rbx
rol ecx, 1
cwde
sar rbp, 0xb0
cdqe
bswap ecx
adc r8b, byte [rsp + rax*8 + 3]
mov qword [rsp + rax], r9
xor dword [rsp + rax], ecx
pop r9
dec r8b
btc r8, 0x3f
jae 0x140c0aab3
mov r10d, 0x1a87ae8e
movsx ecx, r10w
lea r10, [r10*8 - 0x6fe958d0]
mov rbp, qword [rsi + r10 - 0x64541ba0]
lea rax, [r10 + r10*8 - 0x735ff16a]
sub rcx, 0xffffffff9d98b5a2
lea rbx, [r10 + r10*2 + 0x79a511b9]
movzx eax, byte [r10 + rdi - 0x64541ba1]
lea rdx, [r10*2 + 0x1bcf98f]
shr edx, 0x6b
push r10
xor al, r9b
shr word [rsp + rdx - 0x194ca4], cl
xor al, 0x90
shr cl, 0x22
dec al
bt rdx, rbx
xadd r10b, dl
shl dword [rsp + r10 - 0x64541b42], 0xf4
neg al
xchg byte [rsp + r10 - 0x64541b40], bl
neg word [rsp + rdx*4 - 0x65327a]
adc al, bl
xor cx, bx
xadd dword [rsp + rdx*8 - 0xca6500], ecx
neg al
neg bx
xchg r10, rdx
xor r9b, al
shl rcx, cl
lea r8, [rbx*2 - 0x65d88b75]
lea rax, [rsp + rax + 8]
jp 0x140c0b594
Function at 0x140c2ad3e
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using aes mixcolumns step
Encrypt data using speck

Disassembly:
mov r8d, edx
jg 0x140c319ff
mov ebp, dword [rax + rbp - 0x9ce8]
rol qword [rsp], 0x6f
setnp cl
xor byte [rsp + 3], r10b
sbb rsi, 4
sal byte [rsp + 4], 0xc3
mov dword [rsi + riz], ebp
add dx, word [rsp + 2]
sal cl, 0xc5
pop rax
jae fcn.140c020aa
lea edx, [r10 + rdx + 0x11191001]
ror edx, 1
not edx
sal r8d, 0xc6
shl byte [rsp + r10 - 0x2820], 0xe7
bswap edx
neg eax
mov ecx, dword [rsp + rax - 0x37ebd7dc]
rol edx, 1
mov qword [rsp + rax*2 - 0x6fd7afba], r9
push rax
btc ax, r8w
jb 0x140c2170a
lea rsi, [rsi + rax - 0x6db25e18]
mov word [rbp + rsi - 0x6db25e16], r8w
lea rbx, [r10*4 - 0x17cf3a5c]
lea rdi, [r10 + rdi - 0x6db25e1a]
jge 0x140c4093d
adc r10w, word [rsp + rdx*2 + 0x20005]
mov r10d, dword [rdi + rbp - 0x6db25e16]
xor r10d, r9d
rol word [rsp + rax - 0x6db25e13], cl
jb 0x140c0cb2f
dec r10d
pop rbp
xor r10d, 0x17b51c3a
inc r10d
mov r8d, 0xfeb61888
not r10d
xor r10d, 0xd221dd25
rol r10d, cl
sar rcx, 0x79
neg r8d
jae 0x140c0ad9a
adc r10d, ebp
or r8b, al
xadd rdx, rbp
setne dl
push r9
imul bx, bp
shl rdx, 0xb9
xor dword [rsp + rbp*8 + 0x80000], r10d
lea r9, [r8*2 - 0xc5cfacb]
rol ebp, 0xfc
pop r9
inc edx
call fcn.140c2daa8
xor dword [rsp + r10 - 0x281c], edx
mov r9, qword [rsp + r10 - 0x281c]
shl rcx, cl
mov qword [rsp + r10 - 0x281c], rbx
movsxd rdx, edx
call fcn.140c0e74e
mov qword [rsp + r10 - 0x6db25e16], rdx
sub r8w, 0x54b1
lea rcx, [r10 + rdx*2 + 0x4b18fad]
not rdx
ror r8w, 1
inc rcx
xor r9w, r8w
sar cl, 0xe1
cwd
jne 0x140c1fe11
sub rdi, 4
mov r8d, 0xc42f180e
mov r8d, dword [rdi + riz]
mov ebp, 0xfa73335
xor r8d, r9d
push rbp
lea rax, [rbp - 0x62caa765]
ror r8d, 3
or qword [rsp + rbp - 0xfa73335], rbp
movsx ecx, ax
movzx edx, cl
lea r8d, [r8 + rbp*2 - 0x69cfe229]
ror r8d, 1
inc r8d
sar qword [rsp + rbp - 0xfa73335], cl
add qword [rsp + rbp - 0xfa73335], 0x251a0e33
mov qword [rsp + rbp - 0xfa73335], r9
xor dword [rsp + rbp - 0xfa73335], r8d
xor dl, cl
shl ax, 0xc4
movsx r10d, ax
pop r9
movsxd r8, r8d
adc r11, r8
movzx r8d, bp
or rcx, rdx
movzx ebx, bp
mov r10, rsi
sbb ax, ax
xor r8, rbp
lea rsi, [rsi + rbp*2 - 0x1f4e666c]
xor ax, dx
mov word [rbp + rsi - 0xfa73335], r10w
cqo
xor r8, 0x41b9df05
jae fcn.140c020aa
xadd byte [rsp + rdx + 3], al
sar dx, 0xe5
or dword [rsp + rdx + 4], edx
mov qword [rsp + rdx], r11
ret
Function at 0x140c2b06b
Capabilities:
Authenticate hmac
Encrypt data using aes mixcolumns step
Encrypt data using speck

Disassembly:
xor r8d, r9d
call fcn.140c0efe7
jl fcn.140c020aa
bt edx, 0x20
bswap ecx
lea rdi, [rax + rdi - 0xe9]
mov r10d, dword [rdi + rax*2 - 0x1ca]
xor r10d, r9d
mul rbp
movzx r8d, bx
mul ax
lea r10d, [r10 + rdx + 0x709f0246]
btr bx, 1
push rax
ror r10d, 1
inc r10d
add ebp, dword [rsp + rdx*8 - 0x6bb85]
ror r10d, 3
mov word [rsp + rbp - 0xabde], 0x8aa8
mov qword [rsp + rbp*2 - 0x157c8], r9
idiv eax
neg bx
cmovge bp, ax
xor dword [rsp + rbp*4 - 0x2af90], r10d
cbw
rol ax, 0x6b
imul ax
pop r9
cqo
bt ax, bp
add ax, bp
movsxd r10, r10d
bts bp, r8w
adc ebp, 0xcd307a93
or ecx, edx
adc r11, r10
call fcn.140c2618b
dec rbp
mov qword [rsp + rdx - 0x1a0], rdx
xor ecx, 0xb4b8cd9e
rol byte [rsp + rdx*2 - 0x340], 0x66
lea ecx, [rcx + rax + 0x32902e6f]
sal word [rsp + r10 - 0x1d9a9d66], 0x44
rol ecx, 3
dec ecx
ror ecx, 1
mov qword [rsp + rdx - 0x1a0], r9
dec r8b
inc rax
sal r10, 0xeb
xor dword [rsp + rdx*8 - 0xd00], ecx
lea r9, [rbp - 0x2b710ad9]
btr r9, r9
pop r9
movsxd rcx, ecx
adc r11, rcx
xor bl, 0x33
lea rdi, [rdx + rdi - 0x1a1]
xor r10b, dl
jge 0x140c42ad4
sar edx, 0x50
movzx eax, byte [rdi + rdx*2]
call fcn.140c108d6
jne fcn.140c020aa
rol edi, 2
sub r8b, 0x27
lea edi, [r9 + rdi - 0x2e09ed29]
add r10w, r11w
rol edi, 1
dec edi
neg r11
adc r9d, eax
cwde
ror edi, 1
call fcn.140c34450
mov r8d, 0x3ba93527
lea rdi, [rdi + r8*2 - 0x77526a52]
mov r10d, r8d
mov edx, dword [rdi + r8*2 - 0x77526a4e]
xor edx, r9d
movzx ebp, r10w
lea rbx, [r8 + r8*4 - 0x73fc91d1]
inc ebp
sub edx, 0x8c0fb58e
xor edx, 0xca8bd1bc
movzx eax, bp
dec edx
movsx ecx, bp
xor edx, 0xe303423a
neg r8w
imul cx, r10w
xadd r10w, ax
push r9
cdqe
sets r8b
xor dword [rsp + r8 - 0x3ba9ca00], edx
btr r10w, 0xac
sal ebx, cl
pop r9
lea rax, [r8 + 0x28230498]
xadd r10, rcx
movsxd rdx, edx
bts rcx, 0x89
bswap r10
add r11, rdx
sal bp, 0x6c
lea rdi, [r8 + rdi - 0x3ba9ca02]
sar r8b, 0xc7
push rax
movzx edx, word [rdi + rbp*2 - 0x10000]
or dword [rsp + rbp*2 - 0xfffe], 0x6e3ffd10
jae 0x140c3f76f
cwde
xor dx, r9w
rol dword [rsp + r8 - 0x3ba9c9fc], cl
jb 0x140c11bd5
rol dx, 1
bswap rcx
xor dx, 0x838f
and qword [rsp + r8*2 - 0x77539400], r10
neg dx
sub bl, 5
not r10
pop rbp
xor dx, r10w
btr bp, 0xb3
or rax, rbp
inc r10d
xor r9w, dx
rol rbp, 0xc9
sal ax, 0xeb
adc rdx, rsp
shr eax, 2
ror r8b, 0xc1
movzx ax, byte [r8 + rdx - 0x3ba9ca00]
xadd ebx, r10d
sar cx, 0x45
lea rsi, [rsi + r8*2 - 0x77539402]
movsx edx, cl
mov word [rsi + r8 - 0x3ba9ca00], ax
bt ecx, 0x1e
dec edx
jle 0x140c08680
lea rax, [rbp + rbp*4 - 0x36dee64e]
mov ecx, dword [rdi + riz]
xor ecx, r9d
sal rbp, 9
lea r10, [rax + rax*4 - 0x207d9f41]
call fcn.140c40e18
mov r8d, 0x6a089d8a
lea rdi, [r8 + rdi - 0x6a089d8e]
lea rbp, [r8*4 - 0x7bccc9e8]
bswap rbp
movzx ebx, bpl
mov r8d, dword [r8 + rdi - 0x6a089d8a]
mov eax, ebx
mov ecx, eax
jmp 0x140c05d25
xor dword [rsp + rbx - 0x394108], edx
sar rcx, cl
sar rbx, 0xee
pop r9
shr eax, 0xc1
sub cl, 0x88
movsxd rdx, edx
or r8, 0xffffffffcdb38c10
xchg bl, al
adc r11, rdx
mov rcx, qword [rsi + rax - 0x6d1cee00]
mov r8, qword [rcx + rbx - 0x49]
mov qword [rsi + rbx*2 - 0x92], r8
jmp r11
Function at 0x140c3368e
Capabilities:
Encrypt data using aes mixcolumns step
Parse pe header

Disassembly:
xor r9b, bl
lea rbx, [rsp + rbx + 8]
mov qword [rsp + rax], rbp
cdqe
movzx dx, byte [rdx + rbx - 0x604b4c80]
neg cl
mov word [rsp + rax*8 + 2], cx
lea rsi, [rsi + rax*2 - 2]
push r8
mov word [rsi + rax], dx
neg rax
lea rdi, [rdi + rax*8 - 4]
mov dword [rsp + rax*4 + 9], eax
mov edx, dword [rdi + rax]
or r8d, ebp
not word [rsp + rcx - 0x4faa5dbe]
xor edx, r9d
dec word [rsp + rax + 4]
movzx r10d, word [rsp + rax*4 + 2]
sub word [rsp + rax*2 + 8], 0x3296
lea edx, [rbp + rdx - 0x7f5762b2]
jl 0x140c0ac54

Function at 0x140c33b4a
Capabilities:
Authenticate hmac
Encrypt data using aes mixcolumns step
Encrypt data using speck

Disassembly:
mul qword [rsp + r10 - 0x33f9]
xor ebp, r9d
rol ebp, 2
inc eax
mov qword [rsp + r10 - 0x3401], rdx
rol dx, 0x29
not ebp
bswap ebp
sal byte [rsp + r10 - 0x33fd], 0xa5
inc ebp
mov qword [rsp + r10 - 0x33f9], r9
ror byte [rsp + r10*4 - 0xcffd], 0x65
movzx r9d, dx
sar r9d, 0x48
xor dword [rsp + r10*4 - 0xcffc], ebp
xadd qword [rsp + r10 - 0x3401], r9
mov r9, qword [rsp + r10*4 - 0xcffc]
sar rax, 0x46
movsxd rbp, ebp
movsx ecx, byte [rsp + r10*8 - 0x1a006]
adc r11, rbp
movzx edx, byte [rdi + r10 - 0x3407]
xadd r10d, r8d
lea rdi, [r10 + rdi - 0x340b]
mov ebp, 0x68bb70ba
shl byte [rsp + r10 - 0x3405], 0x47
xor dl, r9b
sub bl, 0x38
rol ax, cl
sal r8, cl
xor dl, 0x16
bts r10d, r10d
jae 0x140c1c5f9
rol dl, 1
add dl, 0x9c
mov qword [rsp + r10 - 0x341d], rax
neg cl
not dl
shl r10w, 0x27
xor r9b, dl
lea rdx, [rsp + rdx + 0x10]
inc byte [rsp + r10*2 - 0x24fd]
not dword [rsp + r10*2 - 0x24f6]
seto bl
mov ebp, dword [rdx + r10*8 - 0x9400]
mov edx, eax
mov dword [rsi + rax - 0x3297a00], ebp
mov qword [rsp + r10*8 - 0x9400], r11
ret 8
sub cl, 0x34
movsx eax, bl
xor cl, 0x92
mov qword [rsp + r10 - 0x33fffff9], rbx
ror r10b, 0xc6
neg cl
movsx r8d, r10w
sub cl, 0x25
xor cl, 0x1d
movsx edx, bx
or al, r10b
sub dword [rsp + r10 - 0x33fffff8], 0xb02da290
sbb cl, 0x9e
dec eax
neg word [rsp + r10 - 0x33fffffa]
not cl
cdqe
div word [rsp + r10 - 0x33fffff7]
not dl
xor r9b, cl
xor bl, r10b
or dword [rsp + rax + 0xbeec], r8d
lea rcx, [rsp + rcx + 0x10]
sar r10d, 0xd0
mov dword [rcx + r10 - 0x3400], ebp
mov ebp, edx
imul r10b
mov ebp, dword [rdi + r10 - 0x3405]
setno r10b
jno 0x140c09fff

Function at 0x140c34580
Capabilities:
Authenticate hmac
Encrypt data using aes mixcolumns step
Encrypt data using speck

Disassembly:
mov qword [rsp + rdx], rdx
add r11, r10
sar rbx, cl
mov si, word [rsi + rdx*2]
imul edx, dword [rsp + rdx + 3]
shr qword [rsp + rdx*2], 0xdd
pop r8
je fcn.140c020aa
mov r10d, 0x9692a206
lea r10, [r10 + r10*8 - 0x3465a747]
sub rdi, 4
mov ecx, r10d
movsx eax, cl
movzx ebx, r10w
mov ebx, dword [rdi + rcx*4 - 0x5b082bbc]
xor ebx, r9d
imul rcx, r10
jae 0x140c26782
mov qword [rsp + r8*2 + 2], r9
xor dword [rsp + r8 + 5], ebp