joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1445ace22
Capabilities:
Encrypt data using aes mixcolumns step

Disassembly:
add r11, 4
mov qword [rsp], 0xffffffffcc004829
xor ebx, esi
movzx ecx, dil
inc ebx
lea rdx, [rdi*8 - 0x2e7d737f]
and dword [rsp + rcx - 0xa1], edi
xor qword [rsp + rcx - 0xa4], 0x41060c8e
not ebx
mov byte [rsp + rcx - 0x9d], bpl
or edi, dword [rsp + rcx - 0xa4]
bswap ebx
dec edi
push rcx
sbb byte [rsp + rcx*4 - 0x283], dh
ror ebx, 2
jmp 0x14461a9ad
mov qword [rsp + rcx - 0x9c], rsi
xor dword [rsp + rcx*2 - 0x140], ebx
pop rbp
bswap edx
mov esi, edi
pop rsi
movsxd rbx, ebx
add r9, rbx
mov r8d, edx
sar rbp, cl
shr r8, cl
mov rdi, qword [rbp + r10]
sal rbp, cl
mov eax, dword ss:[rdi + rbp*4]
lea r10, [r10 + rbp*2 + 4]
ror r8, cl
rol bpl, 0x46
not cl
mov dword [r10 + rbp], eax
mov edi, ecx
call fcn.1445fd311
jmp 0x1445fc525

Function at 0x1445ad155
Capabilities:
Authenticate hmac

Disassembly:
dec bl
xadd r8, rdx
shl rdi, 0xee
not bl
mov qword [rsp + rdx*8 - 0x2b0], 0xffffffffaa3c8316
cmovbe eax, ebp
dec bl
xor sil, bl
inc rdi
lea rbx, [rsp + rbx + 0x10]
mov dil, byte [rbx + rcx*2 - 0x42040000]
xor edx, eax
call fcn.1445f02d7

Function at 0x1445af832
Capabilities:
Authenticate hmac

Disassembly:
mov qword [rsp + r8 - 0xc845], 0x32a4d93e
mov qword [r8 + r10 - 0xc845], rdx
xor dword [rsp + r8 - 0xc845], 0x112c030b
mov edx, edi
mov qword [r10 + r8 - 0xc83d], rax
js fcn.1445f4bc8
mov qword [rsp + r8*4 - 0x32114], r9
ret

Function at 0x1445b444b
Capabilities:
Encrypt data using aes mixcolumns step

Disassembly:
not eax
mov qword [rsp + r8 - 0x359d999f], 0xffffffffd9b31585
or ecx, 0xd8acf798
xchg bx, cx
mov dword [rdx + r10 - 0x52296880], eax
call fcn.14459d0fe

Function at 0x1445b8145
Capabilities:
Authenticate hmac

Disassembly:
movzx ecx, r8w
lea r11, [r11 + rcx - 0xab0f]
sar rdx, cl
mov qword [rsp + rdx*4 - 0x7ac8], rax
xor dword [rsp + r8*4 - 0x2ac4a], ecx
xor ebp, esi
xor byte [rsp + r8*2 - 0x15616], al
dec ecx
push r8
xor ebp, 0xcc07d8bc
rol ebp, 1
not ebp
rol ebp, 2
sar dword [rsp + r8*2 - 0x15625], cl
jnp 0x14461f773
sbb ebp, 0xef935618
xor ebp, 0x73070abb
dec r8d
dec ebp
or rdx, 0x3eacfd21
xor ebp, 0xa7b0e831
and dword [rsp + r8*2 - 0x15600], edx
mov qword [rsp + r8*2 - 0x15604], rsi
xor edx, 0x8d01cd1a
ror dword [rsp + r8*8 - 0x55887], 0x5c
jne 0x1445e1aba
mov r14, qword [rsp + rdi*8 - 0x12570]
mov r11, qword [rsp + rdi - 0x248a]
call fcn.144612978
neg dil
shr bl, 0xc2
and rbp, 0x1312b71f
add dl, ah
sbb dil, 0x85
ror rbx, 0xb8
xor dil, 0x99
mov qword [rsp + rax - 0x43bf46c0], rbp
ror dil, 1
and ebx, 0xac2243a3
call fcn.1445bafaa
xor dword [rsp + r8*4 - 0x2ac28], ebp
mov byte [rsp + r8*8 - 0x5587f], 0x36
neg cl
mov rsi, qword [rsp + r8*2 - 0x15604]
cmovnp rax, rdx
and rcx, r8
movsxd rbp, ebp
push rbx
mov qword [rsp + r8 - 0xaaea], rbx
adc r9, rbp
pop rbp
pop rdi
pop r8
pop rax
pop rbx
pop rdx
jmp fcn.14459f190
call fcn.14461a72a
push 0xffffffffcdbe1524
mov ebx, dword [r11]
add r11, 4
mov r8d, 0x3c18da39
lea rax, [r8 - 0x23dd6c4e]
xor ebx, esi
lea ebx, [rbx + r8*2 + 0x7e1ae44]
mov ebp, r8d
not ebx
call fcn.14459fde2
Function at 0x1445c59a7
Capabilities:
Authenticate hmac

Disassembly:
ror dword [rsp + r8 + 0x31], 0x4d
lea rcx, [rsp + rcx + 0x58]
add ax, 0x390e
push rbp
mov qword [rsp + r8*4 + 0x18], rbx
xor bpl, byte [rcx + r8]
push rdx
mov word [r10 + r8*2 - 2], bp
lea r10, [r10 + r8 - 2]
xchg edi, eax
dec dword [rsp + rax*2 + 0x21]
pop rax
pop r8
pop rbx
pop rbx
pop rdx
pop rdi
pop r8
pop rdi
pop rcx
pop rbx
pop rdi
pop rbp
pop rbp
jnp fcn.14459f190

Function at 0x1445c81ef
Capabilities:
Authenticate hmac

Disassembly:
xor ebp, esi
lea rcx, [rbx*8 + 0x1d913aae]
shr edx, cl
ror ebp, 1
mov qword [rsp + rbx + 0xb], rdi
bswap ebp
jmp 0x1445ca7b3

Function at 0x1445c8aa0
Capabilities:
Authenticate hmac

Disassembly:
sal r8, 0x6d
mov qword [rsp + rdx*2 - 0xca], rsi
sub byte [rsp + rdx - 0x66], dh
rol al, cl
jns 0x1445f2dae
mov rsi, qword [rsp + rcx*4 + 8]
call fcn.1445baffc
rol cx, 0xe2
jne 0x1445995ee
call fcn.1445e449e
ror edx, cl
xor dword [rsp + rdi - 0x6191b61a], r8d
movzx ebx, ax
dec ebp
ror edx, 0xc1
pop rsi
jo 0x14461ce86
or al, 1
not rdx
neg bx
or rbp, rdx
mov qword [r10 + 8], rbp
mov ebp, dword [r11]
jmp 0x144619a98
xor dword [rsp + rdx - 0x61], ebp
shr di, 0x64
mov rsi, qword [rsp + rdx*2 - 0xca]
lea rdx, [rdi + rbx + 0xe8a5dab]
mov qword [rsp + rcx + 1], rcx
movsxd rbp, ebp
add r9, rbp
mov rax, qword [r10 + rcx + 1]
add qword [rsp + rcx*8 - 0x30], rcx
mov rbx, qword [rcx + r10 + 9]
not rdi
xor rdx, rdx
push rcx
or rax, rbx
shr qword [rsp + rdx*2 + 0xf], cl
not rax
setne byte [rsp + rdx*2 + 0x14]
inc byte [rsp + rdx*2 + 0x10]
mov qword [r10 + rdx*2 + 0x10], rax
lea r10, [r10 + rdx*2 + 0x10]
mov qword [rsp + rdx*2], r9
ret 0x10
add r11, 4
push r8
and word [rsp], 0x670d
xor ebp, esi
movsx edx, r8b
movzx ecx, byte [rsp + rdx*8 - 0x347]
neg ebp
not ebp
neg di
lea ebp, [rbp + rdi - 0x14f75147]
push rcx
bswap ebp
jb 0x1445ba115
dec dx
movsxd r8, r8d
shl edx, cl
add r9, r8
dec ecx
jns 0x14460e3f5
Function at 0x1445ca4d9
Capabilities:
Authenticate hmac

Disassembly:
adc r9, rdx
mov qword [rsp + rax - 0x2e204000], r9
ret 0x18
or word [rsp + rdx - 0x169d12], bp
xor al, sil
call fcn.1445ec166
push rcx
bswap ebp
lea ebp, [rbp + rcx + 0x1de8db51]
setbe byte [rsp + rdx*4 - 0x1e153]
movzx eax, cx
not ebp
lea ebp, [rbp + rdx*4 - 0x4929fdf0]
movzx r8d, word [rsp + rdx*2 - 0xf0a7]
movzx edi, cl
dec dword [rsp + rdx*2 - 0xf0b2]
bswap ebp
dec rdi
xor ebp, 0xa70431bc
call fcn.14461d94a
and dil, 0x9b
movsxd rdx, edx
ror ebp, 0x8f
lea rdi, [rcx + rbp*8 + 0x6b20aa0]
jne 0x1445ab0a3
or r8d, 0xa616201b
adc r11, 5
xor edx, esi
movzx ebp, r8w
shr bpl, 0xe6
xor edx, 0x8eba542b
dec dword [rsp + rbp*4 - 0x9403]
inc byte [rsp + rbp*4 - 0x93f6]
sub r8b, cl
not edx
sal bp, 0x4d
inc edx
ror edx, 2
mov ebx, ecx
mov qword [rsp + rbp - 0x1ff8], rsi
push rbx
xor dword [rsp + rbp - 0x1ff0], edx
call fcn.1445ae4e2
pop rbp
mov word [r10 + r8*2 - 0x18000], ax
lea rcx, [rdi*2 - 0x59799c43]
lea r10, [r8 + r10 - 0xbfff]
push rcx
mov qword [rsp + r8 - 0xbfe9], r8
inc dword [rsp + r8 - 0xbffc]
mov qword [rsp + rdx - 0x37], r9
ret 0x18
mov qword [rsp + rax*2 - 0x2d39fff8], rax
mov qword [rsp + rax - 0x169d0000], rax
sbb ebp, 0xcb80b791
mov edx, eax
lea rcx, [rdx + rax*2 - 0x65f164f8]
and word [rsp + rdx*2 - 0x2d39fff5], 0xc702
ror ebp, 2
not ebp
mov qword [rsp + rax - 0x169cfff8], rsi
xor dword [rsp + rax - 0x169cfff8], ebp
mov r8d, 0xbb5ae19
mov rsi, qword [rsp + rax - 0x169cfff8]
push r8
rol byte [rsp + rax - 0x169cfffc], 0xc3
movsxd rbp, ebp
adc r9, rbp
sar r8, 0x7d
and dword [rsp + rax*2 - 0x2d39fffc], 0x2431b3ab
dec r8
movzx ebp, byte [r11 + rax - 0x169cfffc]
ror r8, 0x30
pop r8
shl dword [rsp + rax - 0x169cffff], 0xe8
xor bpl, sil
mov qword [rsp + rax*2 - 0x2d39fff8], 0xffffffffcd32e019
ror cl, 0xe1
lea rbx, [r8 + r8*2 + 0x208fd32f]
dec bpl
neg al
xadd dword [rsp + rax*4 - 0x5a73fffe], edx
xor bpl, 0x1b
xor dl, r8b
sar ebx, cl
rol bpl, 1
not bpl
ror dword [rsp + rax*2 - 0x2d39fff5], 0x45
rol byte [rsp + rax*4 - 0x5a73fffe], cl
xor sil, bpl
sub rbx, rdx
lea rbp, [rsp + rbp + 0x10]
sub bx, bx
mov ebx, dword [rbp + rax*2 - 0x2d3a0000]
movsx ebp, al
mov byte [rsp + rax*2 - 0x2d39fff8], 0x11
mov dword [r10 + rax*4 - 0x5a740004], ebx
setnp cl
and byte [rsp + rax*4 - 0x5a73fff8], 0x14
movzx eax, byte [r11 + rax*2 - 0x2d39fffb]
jg 0x1445af10e
call fcn.1445c910e
mov bl, byte [r10 + rax*8 - 0x5f0]
jge 0x1445c1a1d
xadd byte [rsp + rax*2 - 0x17a], al
not bpl
sbb qword [rsp + rax], rax
lea r8, [rcx + rcx + 0x3413e3b3]
shr byte [rsp + rax*2 + 2], 0x24
not bl
jb 0x1445e7e6b
mov eax, ecx
mov r8, qword ss:[rdx]
mov edx, 0xa9f3c07
mov rdi, r8
mov r8, qword [r10 + rdx*2 - 0x153e780e]
call fcn.14462da65
call fcn.14460a207
or bpl, bl
dec word [rsp + rax + 4]
add ax, bp
mov edx, dword [rsp + 4]
ror word [rsp + rdx - 0xb8], 0xa6
ror byte [rsp + rdx*2 - 0x17b], 0xa7
movzx ax, al
not dword [rsp + rdx*4 - 0x2f4]
mov byte [rsp + rdx*2 - 0x175], r8b
or dword [rsp + rdx*4 - 0x2f7], edx
mov dl, byte [rdx + r10 - 0xb4]
or al, dl
mov edx, ecx
shl dl, 0x87
call fcn.1445ab4a9
mov rbx, r10
mov edx, 0xe7830796
mov ecx, edx
mov rdx, rbx
jmp 0x1445e0e2d
Function at 0x1445ce56f
Capabilities:
Authenticate hmac
Parse pe header

Disassembly:
jae 0x1445d1c40
mov qword [rsp + 0x20], rsi
mov qword [rsp + 8], rdx
xor dword [rsp + 0x20], r8d
mov eax, 0xa017692b
mov rsi, qword [rsp + 0x20]
mov qword [rsp + 0x20], 0xfffffffff5314f16
not bpl
movsxd r8, r8d
shl di, 0x8b
adc r9, r8
pop rbp
pop rdi
pop rdi
pop rbp
pop rbx
jmp r9
sar dword [rsp + rax - 0xffef], 0x4a
lea r11, [r11 + rax - 0xfffa]
movsx edi, bpl
ror dil, 0xc2
and eax, dword [rsp + rbp*2 + 0x1b]
xor cl, sil
xor cl, 0x2e
neg cl
lea rdx, [rdi + rax*2 + 0x351ed4b5]
shl r8, 0xf7
call fcn.1445b7ccd
mov edi, 0x5b250fa0
movzx ecx, di
mov rbx, qword [r10 + rdi - 0x5b250fa0]
movzx eax, di
movzx ebp, cx
ror rbp, 0xdf
movzx edx, byte [rcx + r11 - 0xfa0]
jae 0x1445b3e5f
mov edx, dword [r10]
mov ecx, dword [r10 + 4]
not edx
mov ebp, 0x8587c1b5
lea rax, [rbp*4 + 0x4e007907]
and rbp, rbp
not ecx
or edx, ecx
sal ebp, 0xeb
or ebp, 0xdfb06305
movzx ecx, al
mov dword [r10 + rcx - 0xd7], edx
lea rdi, [rcx + rcx - 0x3645b9cc]
shr rdi, 0xfc
movsx r8d, cl
mov rax, qword [r10 + rcx - 0xd7]
or rcx, rbp
mov cl, byte [r10 + rdi*8 - 0x6c]
call fcn.14461b512

Function at 0x1445d1c6d
Capabilities:
Authenticate hmac

Disassembly:
sub rcx, rcx
mov dword [rcx + r8], ebx
xor rcx, 0xfffffffffe0ed63b
bswap ecx
movsx edi, cl
mov ebp, dword [r11 + rcx*2 - 0x77ac1dfc]
jne 0x1445a2bf6
jl 0x1445a9303
xor ebp, esi
sub edi, edi
inc ecx
movzx edx, dil
dec ebp
or dil, cl
bswap ebp
xor di, cx
push rdi
rol ebp, 1
sub ebp, 0x9e09fcba
ror ebp, 2
ror word [rsp + rcx*2 - 0x77ac1dfb], 0xe3
mov qword [rsp + rcx - 0x3bd60eff], rsi
mov ebx, 0x32803336
movzx r8d, di
xor dword [rsp + rdi - 0xe00], ebp
sar bl, 0x61
pop rsi
movsxd rbp, ebp
adc r9, rbp
ror cl, 0x87
add rdx, qword [r10 + rcx*2 - 0x77ac1dfa]
lea rax, [rbx + rbx*4 - 0xd77df44]
mov ebp, ecx
not r8
movzx r8d, byte [r11 + rdi*4 - 0x37fc]
xadd bpl, bl
lea r11, [r11 + rcx*2 - 0x77ac1df9]
sar ebp, 0x39
lea rax, [rcx + rbx + 0x20a3f831]
xor r8b, sil
not al
call fcn.1445e725f
mov qword [rsp + rdi*4 + 0x2408114], 0x7f88e02b
adc r9, rcx
mov rax, qword [r11 + rdi*2 + 0x120408f]
xor rax, rsi
call fcn.14463745a
mov ebx, dword [r10]
mov ecx, 0xc2a27f89
lea r8, [rsp + 0x94]
jmp 0x1445995b0
Function at 0x1445d674b
Capabilities:
Authenticate hmac

Disassembly:
xor dword [rsp + rdx*4 - 0x4cfc0ce0], ebp
jmp 0x1445f0900
ror cl, 1
neg cl
lea rax, [rbp*2 - 0x15c66865]
bswap rax
movsx edx, dil
not cl
neg cl
sar dil, 1
jl 0x1445f6b9a
xor eax, esi
neg eax
mov ecx, edi
not eax
lea eax, [rax + rcx - 0x59426cf4]
call fcn.14462f33b
mov ebx, 0xbc018dbe
movsx ecx, bx
movzx edx, cl
mov ecx, dword [r11 + rdx*8 - 0x5f0]
lea r11, [r11 + rdx*8 - 0x5ec]
xor ecx, esi
movzx r8d, bx
xor ecx, 0x3f8c5c11
inc ecx
neg ecx
ror r8w, 0xef
inc edx
lea ecx, [rcx + rdx - 0x1b33d2c1]
lea rdi, [rdx*4 + 0x25a93419]
mov ebp, ebx
call fcn.1445e3d45
dec dl
jmp 0x1445ffe0a
lea rcx, [rsp + rax*4 + 0xe0]
sal dil, 4
mov edi, dword [rcx + rbp]
mov r8d, 0xb9bbb39b
pop rdx
mov dword [rax + r10 - 8], edi
and byte [rsp + rax + 5], bl
lea r10, [r10 + rax - 8]
add dword [rsp + rax], 0x5b233a2c
pop rdx
ja fcn.14459f190
mov ebx, 0x19bf419e
dec ebp
xor ebp, 0x3e8e8237
mov ecx, edx
ror bl, 0xc3
dec ebp
rol dl, 0x61
push rsi
add eax, 0xdbaf5a99
shl bl, 0x66
jae 0x1445c4d17
movsxd rdi, edi
adc r9, rdi
mov qword [rsp + rdx - 0x54900000], rbx
movsx edi, byte [rsp + rdx - 0x548fffff]
xchg dx, bp
or qword [rsp + rdx - 0x5490857e], r9
ret 0x10
add rcx, rsp
neg ebx
mov dword [rcx + rbp - 0x79357673], r8d
add eax, dword [rdi + r11 - 0x793575db]
lea r11, [r11 + rbp - 0x7935766e]
sar rdx, 0xb
mov ecx, ebx
xor dx, 0xa4b0
xor eax, esi
ror rbp, 0x91
or cx, bx
rol eax, 3
sar ebx, cl
rol rcx, 0xa2
lea eax, [rbx + rax - 0x2c0df9ef]
lea r8, [rdi*2 + 0x573a86a4]
rol eax, 3
xadd rbp, rdi
lea eax, [rax + rdx + 0x3ff48dd0]
jne 0x1445bb3b0
mov rdi, qword [rsp + 8]
add rdi, 0xfffffffffffd14d8
jmp rdi
pop rsi
lea rax, [rdx + rdx*8 + 0x19ac4e24]
call fcn.1446273d4
mov r8d, dword [r10]
mov ebx, 0x793575ba
movzx edi, bl
movzx ecx, byte [rbx + r11 - 0x793575ba]
mov ebp, ebx
xor cl, sil
dec rbp
add cl, 0x22
xadd rbp, rdi
jg 0x1445d2e37
xor sil, cl
jmp 0x1445dc685
rol dl, 1
shr cx, 0x4f
xor sil, dl
mov edi, ecx
sub cx, cx
lea rax, [rcx + rdi*8 + 0x2f29f823]
adc rdx, rsp
movzx ebp, cl
neg rdi
mov qword [rdx + rcx*2], r8
bswap rax
xadd ecx, eax
sub cl, ch
lea rdi, [rsp + rcx + 0x78]
rol rax, 0x79
neg bp
call fcn.14463511b
Function at 0x1445dc334
Capabilities:
Authenticate hmac
Encrypt data using aes mixcolumns step
Parse pe header

Disassembly:
mov edx, ecx
mov edi, dword [r11 + rax*2 - 0x64140076]
pop rdx
movsx edx, word [rsp + rcx - 0x10bc]
xor edi, esi
lea edi, [rdi + rax*2 + 0x2d7589b4]
not eax
or byte [rsp + rcx - 0x10b8], dh
not edi
neg eax
xor edi, 0x1f910b81
mov qword [rsp + rbp - 0x10b5], rax
sub r8w, word [rsp + rax - 0x320a0033]
rol ax, 0xc6
bswap edi
pop rcx
push rax
call fcn.1445a0b64
add r10, 2
and di, di
shr ebp, cl
movzx eax, di
dec rdi
jge 0x144631d65
mov dword [rax + r10 - 0x69ba], ebp
mov ebx, dword [r11 + rax - 0x69ba]
jno 0x14462f12b
mov edx, 0x49890d26
or dx, dx
mov di, word [r10 + rdx - 0x49890d26]
mov dx, word [rdx + r10 - 0x49890d24]
mov eax, 0x5921d8b5
mov ecx, eax
ror al, 0x23
lea r10, [r10 + rax - 0x5921d8b4]
movsx ebx, al
not di
movsx r8d, al
ror ax, 0xf
not dx
rol rbx, 0x55
or rcx, rbx
not rcx
and di, dx
mov word [r10 + rax - 0x5921b16d], di
lea rbx, [rcx*2 - 0x6e810e7]
jmp 0x14459da9b

Function at 0x1445e5dab
Capabilities:
Authenticate hmac

Disassembly:
inc rdx
sar ecx, 0x4f
xor dword [rsp + rcx + 8], edi
call fcn.1445f0a0b
Function at 0x1445e61a4
Capabilities:
Authenticate hmac

Disassembly:
sal word [rsp + r8 - 0xb8], 0x69
xor dword [rsp + r8 - 0xb1], ebx
mov rsi, qword [rsp + r8 - 0xb1]
call fcn.14459ead8
not ecx
sub ax, word [rsp + rdx - 0x3ba4b72]
call fcn.1445ffd00
sub byte [rsp + r8 - 0x8c], bl
lea rbp, [rsp + rbp + 8]
adc eax, dword [rsp + rdi - 0x5793b48c]
mov rbx, qword [rdi + rbp - 0x5793b48f]
ja 0x1445c8876
rol bx, 0x8b
xor qword [rsp + rax*4], r9
ret 0x28
mov qword [rsp + r8 - 0x1e000000], rsi
add r8d, eax
sal r8w, 0x2c
movsx esi, r8b
xor dword [rsp + rax - 0x63659929], edi
pop rsi
sal al, 0x65
mov dword [rax + r10 - 0x6365992c], edi
mov ebp, dword [r11 + rax - 0x6365991b]
xor ebp, esi
mov ebx, r8d
jmp 0x1445cfa09
mov qword [r10 + rax - 0x63659930], rbx
shl r8d, 0x59
inc eax
adc qword [rsp + rax - 0x63659929], r8
mov edi, dword [r11 + r8*2 - 0x3bffffff]
xor edi, esi
shl word [rsp + r8 - 0x1dffffff], 0x46
lea edi, [rax + rdi - 0x68fff92d]
mov edx, 0xc627f7ac
ja 0x14460c920
mov ebp, 0x9e2725bd
lea ecx, [rax + rcx - 0x4331a064]
not dword [rsp + rax*8 - 0x3f2eb]
dec qword [rsp + r8 - 0x63c8a465]
call fcn.14460d0a2
rol r8b, 0x22
xor sil, bpl
lea rbp, [rsp + rbp + 0x28]
and byte [rsp + rdi - 0x1ad982f6], 0xab
push rax
mov qword [rbp + rdi*2 - 0x35b30600], rcx
movzx ebp, byte [rsp + rax*4 + 0x2c]
xor eax, dword [rsp + rdi - 0x1ad982f7]
sal rax, 0x7f
lea rdi, [r10 + rdi - 0x1ad982f4]
mov qword [r10 + rax*2 + 4], rdi
jbe 0x1446284f0
shr byte [rsp + rdx*2 - 0x7749700], 0xe2
lea r11, [rdx + r11 - 0x3ba4b7e]
xor ecx, esi
inc ecx
inc qword [rsp + rdx*4 - 0xee92e07]
push rax
jne 0x1445b3900
movzx eax, byte [r11 + rbp*2 - 0x6a3935fa]
shr rdi, cl
add dil, bpl
neg qword [rsp + rbp - 0x351c9ae6]
lea r11, [r11 + rbp*2 - 0x6a3935f9]
jg 0x1445cdda1
mov qword [rsp + rbp - 0x351c9b01], rbp
call fcn.1445c1a04
mov ebx, dword [rsp + rdi - 0x5793b48e]
xor sil, bpl
jmp 0x1445b53fa
or dx, word [rsp + rax - 0x63659929]
sbb edi, 0xc10f621a
xor edi, 0xcdb13e86
jmp 0x1445c5e1d
ror edi, 1
shl word [rsp + rax - 0x63659928], 0xe
jp 0x1445f0841
lea r10, [r10 + rax + 4]
jbe 0x1445c05fb
lea rcx, [rdi + rdi + 0x66a575a5]
mov qword [rsp + r8*2 - 0x172], rcx
ror ebx, 1
not ebx
rol qword [rsp + r8 - 0xb9], cl
ror ebx, 3
bswap ebx
neg ebx
xor ebx, 0xa8903790
mov qword [rsp + r8 - 0xb1], rcx
sal ecx, cl
mov qword [rsp + r8*2 - 0x16a], rsi
xchg byte [rsp + r8 - 0xb8], cl
js 0x1445aebb8
lea edi, [rdi + rax*2 + 0x78814b59]
inc qword [rsp + rax*2 - 0x1b35d14e]
xor bpl, 0x2c
inc word [rsp + rax - 0xd9ae8a4]
rol edi, 3
lea edi, [rdi + rax*8 + 0x53bc91fd]
not qword [rsp + rax - 0xd9ae8a7]
movsx ecx, ax
push rbx
mov qword [rsp + rax*8 - 0x6cd74530], rsi
inc eax
mov byte [rsp + rax*4 - 0x366ba2a0], ah
xor dword [rsp + rax*2 - 0x1b35d148], edi
movsx esi, word [rsp + rax - 0xd9ae8a5]
sub dword [rsp + rax*8 - 0x6cd7453e], ebx
mov rsi, qword [rsp + rax*2 - 0x1b35d148]
movsxd rdi, edi
Function at 0x1445e68f8
Capabilities:
Authenticate hmac

Disassembly:
pop r8
xor sil, cl
lea rcx, [rsp + rcx + 8]
push rdx
mov rax, qword [rcx + rbx - 0x30371b50]
jmp 0x14459ada8
lea r10, [r10 + rbx*2 - 0x606e36a8]
shl rbp, 0xc2
mov qword [r10 + rbx - 0x30371b50], rax
add bp, word [rsp + rbx*2 - 0x606e369a]
bswap rdx
xor dword [rsp + rbx - 0x30371b47], edi
pop rbp
pop rbx
jne fcn.14459f190
xor dword [rsp + rdx + 0x5647d5fd], ebp
mov rsi, qword [rsp + rbx - 0x30371bad]
mov qword [rsp + rbx - 0x30371bad], rax
rol rdx, cl
movsxd rbp, ebp
add r9, rbp
movzx ecx, byte [rbx + r11 - 0x30371bb5]
lea r11, [rdi + r11 - 0x1bb4]
sal edi, 0xe1
xor cl, sil
add cl, 0xa
neg r8b
shr al, 0x63
xadd dword [rsp + rbx - 0x30371bac], r8d
neg cl
shr byte [rsp + rdi - 0x375f], 0xc1
sub r8b, 0xa2
adc rdx, rdi
sbb cl, 0x9f
movsx ebp, di
sal bl, 0x64
neg cl
jmp 0x144599a21
mov qword [rsp + rdi*2 - 0x18], rbx
or dil, 0x8a
dec ebp
shl qword [rsp + rax - 0xc], 0x5c
mov byte [rsp + rax - 0xa], 4
mov qword [rsp + rax*2 - 0x18], rsi
xor dil, al
dec al
ja 0x144604381
xor dword [rsp + rax*2 - 0x16], ebp
shr edi, 0xf6
ja 0x1445b1ae8
pop rsi
not ebx
movsxd rbp, ebp
ror edi, 0xde
mov ecx, eax
push rbx
adc r9, rbp
mov rbx, qword [rax + r10 - 0xb]
not ecx
or word [rsp + rax - 6], 0x824
movzx edx, byte [r11 + rax - 7]
sbb byte [rsp + rdi*2 + 2], dil
xchg byte [rsp + rax - 9], ah
xchg dword [rsp + rax*2 - 0x1e814], eax
xor dl, sil
add di, di
call fcn.1445e3242
movsx eax, bpl
xor eax, ebp
mov ecx, dword [r11 + rbp - 0x1634de00]
bswap eax
ja 0x1445e5712

Function at 0x1445e7cfb
Capabilities:
Authenticate hmac

Disassembly:
and rdx, 0x6211fa39
mov word [r10 + rdx - 8], di
jae 0x1445f837b
movsxd r8, r8d
call fcn.1445ee35b
xor di, si
inc dl
neg di
sub di, 0xae2b
ror rdx, 0x99
rol di, cl
neg di
shr edx, 0x32
xor si, di
jmp 0x1445a9b53
lea r8, [rdx - 0x246f379]
movzx eax, byte [r11 + rdx*8 + 0xb]
movzx edi, bx
mov ebp, 0x1a815caf
lea r11, [rdx + r11 + 0xc]
adc byte [rsp + rdx + 3], 9
push rbp
shl dl, 3
xor al, sil
ror rbp, 0x61
shr word [rsp + rdx + 0xf], 0x41
sub al, cl
xchg word [rsp + rdx*2 + 4], cx
and r8b, dil
xor al, 0x1b
shr r8, 0xf1
sub bpl, byte [rsp + rdx*2 + 3]
and word [rsp + rdx*2 + 0xd], 0xa21b
rol al, 1
xor al, r8b
xor sil, al
ror ecx, 0x9c
pop r8
lea rax, [rsp + rax + 0x10]
xchg qword [rsp + rcx], r8
mov r8d, dword [rax + rcx*2]
call fcn.1445e4fe4
dec dil
xor dil, 0x1b
movsx ebp, ax
rol dil, 1
mov ebx, ebp
not dil
xor sil, dil
call fcn.1445b0a62

Function at 0x1445e9514
Capabilities:
Authenticate hmac

Disassembly:
neg eax
lea r10, [r10 + rcx*4 + 0xf0]
or eax, 0x6b2016b4
mov ebp, edx
mov dword [r10 + rcx*2 + 0x7a], r8d
jg 0x1445f912a
mov edx, 0x8d0398a2
movzx ebp, dl
mov rdx, qword [r10 + rbp - 0xa2]
mov ecx, ebp
movsx r8d, bp
movsx eax, cx
movzx bx, byte [rbp + rdx - 0xa2]
lea r10, [r10 + rbp*2 - 0x13e]
shl rbp, 0x93
mov word [rbp + r10 - 0x5100000], bx
or r8w, 0x9b0
xadd r8w, bp
mov r8d, dword [r11 + rcx*2 - 0x144]
adc al, ch
or bp, 0x7698
lea r11, [r11 + rbp*8 - 0x2883fdcc]
call fcn.144624dc1
mov r8d, dword [rcx + r11 + 0x3d]
inc al
mov qword [rsp + rcx*2 + 0x7a], rdi
Function at 0x1445eeefa
Capabilities:
Authenticate hmac

Disassembly:
lea ebx, [rbx + rbp + 0x4013e91f]
sets dil
mov qword [rsp + rax + 0x2659312c], rsi
mov esi, ebp
jle 0x1445e871e
or word [rsp + rbp*8 + 0xc], cx
movzx edi, byte [rsp + rax*2 + 0x4cb263b2]
rol ebx, 3
mov qword [rsp + rbp], 0x3b9deea8
not al
movzx edx, bp
lea ebx, [rbx + rcx - 0x2df1cfc6]
sub word [rsp + rbp*4 + 3], cx
jno 0x1446032d1
mov ebx, 0x2e085b24
mov ax, word [rbx + r10 - 0x2e085b24]
mov r8w, word [rbx + r10 - 0x2e085b22]
call fcn.144597af0
mov ebx, 0x2dbad70a
mov ecx, 0x48aeca24
movsx edi, cx
mov edi, dword [r11 + rcx - 0x48aeca24]
inc bl
inc bx
xor edi, esi
mov ebp, 0x8c0183b3
call fcn.144634322
adc dword [rsp + r8*8 - 0xcd27], r8d
mov ecx, ebp
mov qword [rsp + r8 - 0x19a5], r9
ret 8
rol ebx, 3
neg byte [rsp + rbp + 0xc]
pop rdx
jno 0x1445e00fc
jmp 0x1445f98fe

Function at 0x1445f0a0b
Capabilities:
Authenticate hmac

Disassembly:
mov qword [rsp + rcx], rax
mov rsi, qword [rsp + rcx + 0x10]
mov qword [rsp + rcx + 0x10], 0x29a7bd97
and r8b, r8b
sar ecx, 0x6c
movsxd rdi, edi
call fcn.1445d8c46
mov edx, dword [r11]
call fcn.144624039

Function at 0x1445f2901
Capabilities:
Authenticate hmac

Disassembly:
xor r8b, sil
inc byte [rsp + rcx*2 - 0x54d404d9]
add r8b, 0xa
neg r8b
sub r8b, 0x9f
mov ebx, 0x6fb57f31
neg r8b
neg rbp
cmovle rdi, qword [rsp + rcx - 0x2a6a026f]
xor sil, r8b
call fcn.1445ad274
mov r8, qword [r10 + rcx*4 - 0x3fec]
lea rdi, [rcx + rbx*2 - 0x75de7fee]
jmp fcn.14462d56a
mov ebx, dword [r11 + rax*2 - 0x702c017a]
mov qword [rsp + rax - 0x381600bd], 0xffffffffc811c798
mov r8d, 0xf7907c3b
mov ecx, 0x1ca9a80a
xor ebx, esi
not di
jmp 0x1445fca6b
lea rax, [rdi + rcx*2 - 0x616663f3]
lea ebx, [rbx + rbp + 0x378fa7d0]
rol ebx, 1
xor ebx, 0x5d9f318b
shr qword [rsp + rcx*4 - 0x72a6a028], 0x86
ror ecx, 0x1a
xchg al, cl
sbb ebx, 0xd1b63138
xor ebx, 0xe3be0395
shr di, 0x61
shl qword [rsp + rcx - 0x2a6a0271], cl
mov qword [rsp + rcx - 0x2a6a0271], rsi
xor dword [rsp + rcx*2 - 0x54d404e2], ebx
push rax
neg word [rsp + rcx*2 - 0x54d404de]
movzx edx, word [rsp + rcx*2 - 0x54d404e2]
mov rsi, qword [rsp + rcx - 0x2a6a0269]
movsxd rbx, ebx
jl 0x1445c5724
ja 0x14462e5c4
adc r9, rbx
push rax
xchg word [rsp + rcx - 0x2a6a0265], r8w
movzx r8d, byte [r11 + rcx - 0x2a6a026d]
sal qword [rsp + rcx - 0x2a6a0269], cl
lea r11, [rdx + r11 - 0x1182]
jns 0x14459d5ac
dec rax
movzx eax, word [r11 + rbp - 0x9931]
shl edx, 0x8a
lea r11, [rbp + r11 - 0x992f]
or rdx, rdx
xor ax, si
bswap r8
pop rdx
ror ax, 1
neg ax
xor rbp, 0x4e33af17
adc ax, 0xa85
xor ax, 0xf306
mov qword [rsp + rbp - 0x4e333626], 0x7429d190

Function at 0x1445f2bac
Capabilities:
Authenticate hmac

Disassembly:
xor bp, word [rdi + r10 - 0x3e21f68b]
add cx, 0x1388
lea r10, [r10 + rcx*2 - 0x7c43905c]
mov qword [rsp + rcx*2 - 0x7c43905e], rdi
inc rdi
adc bx, bp
jmp 0x1445fad30