joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140bf4a41
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp], 0xffffffffe7055994
lea rsp, [rsp + 8]
call rax
mov edx, 0x3bab35ac
lea r8, [rdx + 0x42252a3]
mov rsp, qword [r8 + rbp - 0x3fcd885f]
mov r11d, r8d
bts edx, r8d
mov esi, 0x85a26ea5
mov rbp, qword [rdx + rbp - 0x3babb5b4]
movsx r9d, dx
mov qword [rbp + rdx*2 - 0x77576b58], rax
jb 0x140c214ef
lea r10, [rsi + 0x4917a52d]
mov r9, rbp
or r8, r10
pop r10
sub rdx, rsi
movzx ebx, r8b
sub edx, 0x7539f225
pop rbp
pop rsi
ja 0x140bf0440
add r8w, r8w
sbb ecx, 0xf7147c20
movsxd rbx, ebx
rol di, cl
adc dil, r8b
add rbp, rbx
xchg r11b, cl
mov rdi, qword [r9 + rdx]
movzx ebx, r8b
mov r8d, dword [r9 + rdx*2 + 8]
btr ax, 0x9f
lea r9, [rdx + r9 + 0xc]
sal rcx, cl
sub ecx, 0xa5be6224
mov dword ss:[rdi + rdx*8], r8d
bt eax, ebx
cdq
jmp rbp

Function at 0x140bf4ef1
Capabilities:
Manually build aes constants

Disassembly:
push 0xffffffffb03d1803
mov ecx, dword [rax + rcx*4]
push 0x69a779ab
ror dword [rsp + 9], 0xc3
call fcn.140c13412

Function at 0x140bf8526
Capabilities:
Authenticate hmac

Disassembly:
lea rsp, [rsp + 0x10]
jne 0x140c09bc4

Function at 0x140bfa117
Capabilities:
Authenticate hmac

Disassembly:
movzx r11d, dl
ror cl, 1
add cl, 0x21
btr rbx, rdx
shr dword [rsp + r8 - 0x42f7], 0xe1
ror cl, 1
mov qword [rsp + rdx*2 - 0x25657f48], r8
push rax
dec cl
neg cl
xchg edi, r8d
xor r10b, cl
sub word [rsp + rdx*4 - 0x4acafe94], 0x29b
cwd
dec r11w
lea rcx, [rsp + rcx + 0x20]
cqo
mov r11w, word [rcx + rdx]
cwde
push rdx
lea r9, [rdx + r9 - 2]
pop rdi
cdqe
mov word [r9 + rdx], r11w
pop rbx
pop r11
pop r11
pop rdi
jnp fcn.140bf30a1
mov r8d, 0x9ebd4898
push r8
movzx di, byte [r9 + riz]
movsx r11d, r8w
mov eax, dword [rsp + r11 - 0x4898]
bt r8, 0x10
mov cl, byte [r9 + r11*2 - 0x912e]
xchg dword [rsp + r11*2 - 0x912d], eax
lea r9, [r9 + r11*2 - 0x912e]
or r11d, 0xd6a29f83
lea rbx, [rax*4 + 0x2dac3838]
dec r11
shl dil, cl
mov word [rax + r9 - 0x9e], di
lea rsi, [rsi + rax*2 - 0x140]
movsx ecx, ax
or eax, 0x8e012ca1
mov ebx, dword [rsi + rcx*2 - 0x13c]
cdq
sub word [rsp + rcx - 0x9a], dx
xor ebx, r10d
inc byte [rsp + rcx - 0x99]
mov edi, 0x238fb0d
xadd word [rsp + rcx - 0x9d], di
add ebx, edx
cwd
bswap ebx
inc dl
call fcn.140bfdc24
mov r11d, 0x758d5d8c
movzx di, byte [r9 + r11 - 0x758d5d8c]
mov ecx, r11d
btr r11w, r11w
movsx edx, cx
mov cl, byte [r11 + r9 - 0x758d4d8a]
lea rbx, [rdx*2 - 0x78f3d9c7]
inc bl
lea r9, [r11 + r9 - 0x758d4d8a]
shl dil, cl
mov r8d, r11d
mov word [r9 + rdx*2 - 0xbb18], di
lea rsi, [r11 + rsi - 0x758d4d90]
sar r11, 0xb8
lea r11, [rbx*2 + 0x31b33211]
mov edi, dword [rdx + rsi - 0x5d8c]
xor edi, r10d
lea rcx, [r11 + rdx*8 - 0x2cd719cd]
xadd r8b, cl
adc r8d, r8d
dec edi
bswap edi
and rcx, r8
jp 0x140c14793
ror bl, 2
neg edi
lea rax, [r11 + r11*2 - 0x13e29b67]
or r11b, 0xbd
inc edi
bt dx, dx
imul rdx, r8
push r10
div rbx
xor dword [rsp + rcx*4 - 0x8620e20], edi
and r11d, r11d
pop r10
imul r8w, r11w
push rax
movsxd rdi, edi
add rbp, rdi
or r11b, byte [rsp + r11 - 0x3fccf4bd]
inc byte [rsp + rbx + 0x78f31e6c]
mov qword [rsp + r11*2 - 0x7f99e9fe], rbp
ret
Function at 0x140bfb617
Capabilities:
Encode data using base64

Disassembly:
mov r9d, dword [rsp + 9]
mov r9, rax
call fcn.140c2aa30
ror rcx, cl
sbb bx, 0x2a01
mul cl
rol bx, 1
neg bx
mov qword [rsp + r11*4], rdi
cdqe
dec bx
push rdx
xor r10w, bx
bswap ecx
mul dx
sub dword [rsp + r11*8 + 6], edx
lea rbx, [rsp + rbx + 0x10]
neg word [rsp + r11 + 3]
inc dword [rsp + r11*8 + 5]
mov ecx, dword [r11 + rbx]
lea r9, [r9 + r11 - 4]
cwd
add edx, dword [rsp + r11*8 + 4]
mov dword [r9 + r11*4], ecx
div qword [rsp + r11*2 + 8]
or edx, edi
and qword [rsp + r11 + 6], 0xd2def35
pop r8
pop r8
jno fcn.140bf30a1
Function at 0x140c060ce
Capabilities:
Encode data using base64
Manually build aes constants

Disassembly:
movzx edx, r8w
lea rdi, [rdx + rbx*2 - 0x472abcf]
inc eax
rol eax, 1
btc di, r8w
mov qword [rsp + rdx*2], 0x7916a91
sbb eax, edx
sub byte [rsp + rdx + 4], dl
bt edx, r8d
rol eax, 1
rol r8b, 7
mov qword [rsp + rdx], r10
call fcn.140bece3c
movzx edi, word [rsi - 2]
mov eax, 0x73a95236
xor di, r10w
movzx edx, al
movzx r8d, dl
add di, 0x68b5
neg di
mov ebx, eax
ror di, 1
add rax, rdx
lea r11, [r8*2 - 0x43e15b46]
adc di, 0xfe10
ror di, 1
cwde
shl rdx, 0xda
sbb di, 0x4234
inc rdx
not dx
btc rbx, r11
not di
not rbx
call fcn.140c2aef4

Function at 0x140c08315
Capabilities:
Encode data using base64

Disassembly:
not edx
pop rdi
mov qword [rsp + rbx - 0xc0], r10
ror ebx, cl
shl ebx, cl
xor dword [rsp + r11 - 0x2cd96944], eax
neg edx
seto dl
ror r11d, 0xea
pop r10
sar cl, 0x61
jp 0x140c21962
call fcn.140c0b1d2

Function at 0x140c0a26a
Capabilities:
Authenticate hmac

Disassembly:
lea rsp, [rsp + 0x18]
jbe 0x140c0a28e
mov edx, 0x5391a0b1
lea edx, [rdx - 0x5391a0ad]
mov ecx, 0x9318aa20
movsx eax, cl
xchg cl, al
lea ecx, [rax + rbx - 0x24]
mov eax, 0xf986ef86
sub ax, 0x38a4
sal rax, 0xcb
shl ecx, 3
rol ax, 0x41
sub al, 0x1a
cdqe
sal edx, 3
shl ax, 0x8b
sete al
sal al, 0xe4
mov rax, rbp
push 0xffffffffd726d019
je 0x140c208a4
add ecx, 0xc928743a
mov qword [rsp], 0xffffffff879c2500
not ecx
shr qword [rsp + 1], 0xdd
setns byte [rsp + 6]
mov qword [rsp + 0x10], r10
jne 0x140c29fe9
adc rax, rdx
not word [rsp + 6]
mov qword [rbp + riz - 8], rax
call fcn.140c0edad
xor dword [rsp + 0x10], ecx
call fcn.140c2af0c

Function at 0x140c0d38f
Capabilities:
Encode data using base64
Manually build aes constants

Disassembly:
lea rsp, [rsp + 8]
call rax
mov r8d, 0x442cd1af
mov r9d, r8d
movzx esi, r8w
mov rsp, qword [rbp + r8 - 0x442cd1bf]
call fcn.140c0386a
add rdx, qword [rsp + rdx*2 - 0x1dc54]
sbb r8d, 0xbb153433
call fcn.140c0b8cf
mov qword [rsp], 0x43a074bc
jmp 0x140bf4a01

Function at 0x140c106f6
Capabilities:
Manually build aes constants

Disassembly:
push 0xffffffff9fa67aa7
call fcn.140befd4d

Function at 0x140c1102b
Capabilities:
Authenticate hmac

Disassembly:
xor dword [rsp + rbx - 0x5e29ffa7], edi
add cl, 0x11
mov r10, qword [rsp + rbx - 0x5e29ffa7]
shl rax, 0x98
sub r8w, dx
rol al, 0x82
movsxd rdi, edi
adc rbp, rdi
mov qword [rsp + rdx + 8], rax
mov di, word [rbx + r9 - 0x5e29ffb1]
push rdx
btc ax, 0x14
movzx ecx, byte [rdx + rsi - 6]
or r8b, 0x3b
idiv rax
sar r8b, 0x64
lea rsi, [rsi + rbx - 0x5e29ffb5]
xor cl, r10b
imul ax, word [rsp + rax + 0x10]
mov qword [rsp + rax*8 + 8], rbx
seto byte [rsp + rbx - 0x5e29ffa7]
inc cl
ror r11w, 0x6a
pop r8
not cl
dec r11b
adc word [rsp + rbx - 0x5e29ffac], r8w
adc cl, 0x94
xchg r11, r8
shr r11d, 0xef
rol cl, 1
neg r8w
call fcn.140bf02ad
Function at 0x140c11815
Capabilities:
Authenticate hmac

Disassembly:
push 0x6d297d32
jmp 0x140c001f8
lea rsp, [rsp + 8]
call rax
mov rsp, qword [rbp + riz - 0x10]
mov edi, 0xf2bad8b7
mov rbp, qword [rbp + riz - 8]
mov qword [rbp + riz], rax
lea r9, [rdi*2 - 0x3a737cd2]
mov r9, rbp
mov ebp, edi
jmp 0x140c26d82
sbb rsp, 0x18
jmp 0x140bfd7a2
adc rbp, rbx
ror eax, 0x73
add rcx, rbp
jmp rcx
pop r10
movsx eax, di
pop rbp
movzx edx, al
rol ax, 1
pop rsi
mov r8d, eax
or dl, 0x86
cwde
lea rsi, [rsi + rdx - 0xbb]
movsx ecx, ax
mov ebx, dword [rsi + rdx - 0xb7]
xor ebx, r10d
mov r11d, edx
bswap edi
sub ebx, 0xbd84c42a
not ebx
btr ax, r8w
shl r8b, 0xa7
xadd dil, dl
xor ebx, 0x43a86e0b
not ebx
btr r8d, 0xc
sal r8, cl
rol ebx, 1
dec ebx
not ebx
lea ebx, [rdi + rbx - 0x563182a3]
lea rax, [rax + r11*8 - 0x79c465f2]
btc r8, rdx
ror ebx, 3
xor r11, rax
sar rcx, cl
push r10
cmovae edi, r11d
div di
xor dword [rsp + rdx*2 - 0x125ca], ebx
movzx r10d, dl
dec r8b
pop r10
rol cx, 0x6e
movsxd rbx, ebx
ja 0x140c14fb9
lea ecx, [rax + rcx - 0x11e5929e]
shl al, 0x66
mov edi, r8d
push r10
bt r11w, r11w
xor dword [rsp + r8 - 0x16974e2e], ecx
btc ax, r8w

Function at 0x140c1328c
Capabilities:
Authenticate hmac

Disassembly:
jnp 0x140bff968
sbb rsp, 0x20
push 0x470e9c17
lea rsp, [rsp + 8]
call rax
mov edi, 0xbe81b3b9
jmp 0x140bfbf6f
lea rsp, [rsp + 0x18]
jne 0x140c1f0a2
mov eax, 0xc019508
and ax, ax
mov rax, qword [rax + rbp - 0xc019508]
jno 0x140bf92ed
push 0xfffffffff0a65436
mov ecx, 0xa223413c
movzx r11d, byte [rsi + riz - 1]
movzx eax, cx
xor r11b, r10b
movzx r8d, cl
not r11b
xchg byte [rsp + rax - 0x4135], al
rol r11b, 1
xor r11b, 0xaf
movsx edi, ax
movsx edx, dil
rol r11b, 1
shr dword [rsp + rax - 0x41fd], cl
movsx ebx, di
sbb r11b, 0xb7
bts rdx, rcx
and r8w, word [rsp + rax*2 - 0x83fd]
ror r11b, 1
xor r10b, r11b
xadd qword [rsp + rax - 0x41ff], rdi
xchg r8b, al
setns byte [rsp + rax*2 - 0x8222]
lea r11, [rsp + r11 + 8]
btr ebx, 0x80
sbb byte [rsp + rax*2 - 0x8226], 0xaf
pop r8
mov ecx, dword [rax + r11 - 0x4114]
jp 0x140c12e39
mov rax, qword [rbp + rbx*8]
call fcn.140c1efca
Function at 0x140c1714d
Capabilities:
Encode data using base64
Manually build aes constants

Disassembly:
lea rsp, [rsp + 8]
mov qword [rbp + riz - 0x10], rsp
ja 0x140bf39ad
mov ecx, 0x829c6f8b
sub rsi, 1
movzx eax, cx
cqo
movzx r8d, byte [rsi + rdx*2]
jmp 0x140c244d1
ja 0x140bf459e
sbb rsp, rcx
and rsp, 0xfffffffffffffff0
jmp 0x140c223a2
push 0x19276ab2
ror dword [rsp + 3], 0xcc
sbb word [rsp + 4], 0x2d98
sal ecx, 3
sal edx, 3
mov eax, dword [rsp]
neg ax
mov rax, rbp
add dword [rsp + 4], 0xeda828ac
jno 0x140c2498c
sub rsi, 4
mov edi, dword [rsi]
mov r8d, 0x5f0c730d
mov r11d, 0x1c833a07
mov ecx, 0x2d048890
xor edi, r10d
mov edx, 0xd689da1e
xadd r8w, r11w
sbb edi, 0xbb153433
xadd r8, r11
and r11w, r8w
call fcn.140bf8e7d
lea rsi, [r11 + rsi - 0x34bc]
mov r8d, dword [rsi + r11 - 0x34b8]
sar r11w, 0x44
xor r8d, r10d
dec byte [rsp + r11*2 - 0x690]
movzx eax, dx
neg qword [rsp + r11*2 - 0x696]
dec r8d
neg dword [rsp + r11 - 0x34b]
lea rdx, [rdx*2 - 0x15506143]
inc eax
bswap r8d
imul dl
neg r8d
xadd r11b, dl
rol dx, 0x4f
xor byte [rsp + r11 - 0x375], bl
inc r8d
or bx, 0xde81
jp 0x140c2be63
lea r8d, [r8 + rbx*8 + 0x61a6d686]
ror r8d, 3
add bx, 0xc8a
adc bl, 0xa0
not dx
mov qword [rsp + rbx*8 - 0xc2d0], r10
shr dl, 0xa1
btr rdx, rbx
lea r10, [rdx*2 - 0x3ac60964]
xor dword [rsp + rbx - 0x185a], r8d
lea r10, [r10 + 0x2935dc9a]
and ebx, r10d
pop r10
movsxd r8, r8d
shl bx, 1
rol rbx, 0x74
add rbp, r8
lea r8, [rbx*8 - 0x39e95c55]
neg rbx
sbb rsi, 0
btr edx, edx
add dl, r8b
movzx r8d, byte [rsi + riz]
dec bx
rol rbx, 0x70
sbb bx, bx
xor r8b, r10b
xadd dx, bx
xor r8b, 0x28
btr bx, 0x34
btc edx, 0xa5
inc r8b
add rbx, rdx
not rbx
shl dx, 3
xor r8b, 0x93
inc bx
dec r8b
xor r8b, 0x95
shr rdx, 0x50
xor r10b, r8b
neg bl
push rsi
push rbp
movzx ebp, dl
xadd bp, dx
push r10
mov rbp, r9
sbb bx, bx
mov ebx, r8d
not rdx
mov edx, ebx
push 0x2eabf4be
xor ecx, ecx
cmp ebx, 4
lea rsp, [rsp + 8]
jbe 0x140bf6ccd
call fcn.140c28f2b
mov edx, 0x9a1334b7
movzx r11w, byte [r9 + riz]
mov cl, byte [r9 + riz + 2]
movsx ebx, dl
add r9, 2
push rbx
lea r8, [rbx + rbx*8 - 0x545f2367]
jmp 0x140c2547b
adc rax, rdx
shr dword [rsp + 3], 0xe8
mov qword [rbp + riz - 8], rax
jne 0x140bf2940
shl r11b, cl
mov word [r9 + riz], r11w
movzx r11d, dx
inc r11d
jp 0x140bfbe24
sbb r11b, al
mov qword [rsp + rax - 0xf3e8], r10
lea r10, [rbx*2 - 0x7c535fd9]
xor dword [rsp + r11*2 - 0x71c], r8d
pop r10
rol rbx, 0x7f
imul rdx
movzx ecx, bx
movsxd r8, r8d
btr ax, 0xe
mul rbx
add edx, ecx
adc rbp, r8
movsx edi, dl
jmp rbp
Function at 0x140c173f4
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
adc rbp, r11
and ax, r8w
jg fcn.140bf30a1
mov r11d, 0xc301bf00
movzx ecx, r11b
lea rsi, [rsi + rcx*8 - 4]
mov r8d, dword [rsi + rcx*4]
add r11d, 0x72192a94
movsx edi, r11w
jg 0x140c1d523
mov r8d, 0x41922693
mov r11, qword [r9 + r8 - 0x41922693]
mov ecx, r8d
movzx ebx, cl
mov edx, ecx
mov ax, word es:[rcx + r11 - 0x41922693]
lea r9, [r8 + r9 - 0x4192268d]
xadd dl, bl
mov word [r8 + r9 - 0x41922693], ax
lea rcx, [r8 + rdx - 0x3564a956]
mov eax, ecx
xor ax, dx
lea rsi, [rsi + rcx - 0x4dbfa367]
cmovae rax, r8
sal rax, 0xb4
mov edx, dword [rsi + rbx*2 - 0x126]
cwde
xor edx, r10d
and bl, r8b
shr ecx, cl
xor edx, 0x408cb1bc
call fcn.140c1ef08
movzx ebx, byte [rsi + r11 + 0x17df6468]
btr dx, dx
or rcx, r8
xor bl, r10b
sub rdx, qword [rsp + r11 + 0x17df6470]
shr rdi, cl
mov qword [rsp + r11 + 0x17df6468], rdx
not bl
mov dword [rsp + r11 + 0x17df646d], 0xdd9b2394
cwd
rol bl, 1
ror edx, 0xfa
sar qword [rsp + r8 - 0x3a263a71], cl
setp cl
xor bl, 0xaf
rol bl, 1
imul r11d, dword [rsp + r11 + 0x17df646e]
ror r11w, 0x43
not dil
sbb bl, 0xb8
ror bl, 1
sar dil, 2
push rdi
xor r10b, bl
lea rbx, [rsp + rbx + 0x18]
not r8w
mov r8d, dword [rbx + r11 - 0x67df0c8d]
and dl, dil
sar ax, 0xe2
lea r9, [r9 + r11 - 0x67df0c91]
mov dword [r9 + r11 - 0x67df0c8d], r8d
pop rcx
pop rbx
pop r8
jbe fcn.140bf30a1
mov edi, 0x8bb10dbb
movzx ebx, byte [rsi + riz - 1]
movzx edx, di
xor bl, r10b
lea r8, [rdx + 0x6098af9b]
rol bl, 1
bt edx, edi
lea rcx, [rdi + rdx*2 + 0x268dfaa5]
movsx r11d, r8w
dec bl
btr edi, edi
not bl
mov eax, r11d
or r11, 0xffffffffb887b298
xor bl, 0x9d
ror rdx, cl
xor rdx, r11
sbb bl, 0x3f
xor r8w, ax
xor bl, 0xa
or r11, 0x302f3fa1
call fcn.140c22ef5
mov r11d, dword [rsi + r11 - 0xd3]
mov r8d, edx
sbb rax, 0x2e204cb2
setl dil
xor r11d, r10d
btc rax, rcx
cbw
rol r11d, 1
or rax, rdx
not r11d
neg r11d
lea r11d, [r11 + rcx*2 - 0x6f15b62b]
xadd dl, cl
imul rdx
push r10
rol bx, cl
shl bx, cl
sub rdx, rax
xor dword [rsp + rdi*4 - 0x3a004], r11d
or edi, 0xb364422
btr ecx, edx
pop r10
dec rcx
jno 0x140c2c04a
xor r8d, r10d
xor rdi, 0xffffffffa1b42194
movzx ebx, r11w
xor r8d, 0x3d1969b8
sar rcx, 0x86
and r11w, 0xde03
lea r8d, [r8 + r11*2 + 0x2974d5a2]
rol r8d, 1
movsx edx, di
xadd ecx, edx
and rcx, r11
xor r8d, 0x809dc9ba
or dx, cx
shl edx, 0xa8
push r11
mov qword [rsp + rcx - 0x351ac800], r10
xor dword [rsp + r11*2 - 0x6a359000], r8d
mov r10d, 0xf2bf2812
call fcn.140c16b2c
movsxd r11, r11d
jno 0x140bf3910
call fcn.140c27e6f
mov r11d, 0x6637e4b4
movzx edi, r11b
lea rsi, [rsi + r11 - 0x6637e4b8]
lea rbx, [r11*8 - 0x72e4c3e2]
mov r11d, dword [rsi + rdi - 0xb4]
xor r11d, r10d
not edi
dec r11d
call fcn.140bf32c4
Function at 0x140c1828a
Capabilities:
Authenticate hmac

Disassembly:
movzx edx, ax
lea rsi, [rsi + rax - 0x588780a2]
xor bl, r10b
neg bl
btc ax, cx
not bl
mov qword [rsp + rax - 0x5887808c], rdi
bts rax, 0xa4
neg bl
inc di
inc bl
xor r10b, bl
cdq
lea rbx, [rsp + rbx + 8]
cbw
sal al, cl
or rax, 0xffffffffb9bc3222
mov cl, byte [rax + rbx + 0x640001e]
js 0x140bfee6b

Function at 0x140c1dab3
Capabilities:
Encode data using base64

Disassembly:
lea r9, [r9 + r11*2 - 0x14b7ac22]
shl r8, 0x96
push rdx
mov qword [r9 + r11*2 - 0x14b7ac1a], rcx
sar word [rsp + r11 - 0xa5bd5f6], 0xa7
mul byte [rsp + r11 - 0xa5bd5f8]
jae 0x140c09b44
pop r8
pop rcx
pop rbx
pop rbx
pop rdi
jo fcn.140bf30a1
mov dword [r8 + r9 - 0x2e37082c], edx
lea r11, [rbx + rdi*2 - 0x73c43b4f]
movsx eax, r8b
xchg r11w, di
lea rsi, [rdi + rsi - 0x403cdf7b]
ror rax, 0x96
mov r11d, dword [rsi + r8 - 0x2e37082c]
btr r8, 0xb
mov ecx, edi
setae r8b
xor r11d, r10d
neg r11d
movsx edx, ax
bswap r11d
xor rcx, rbx
je 0x140bf3a4c
push rax
neg r11d
lea r11d, [r11 + rdi - 0x58559d1e]
and dword [rsp + rdx*2 + 1], r8d
imul al
ror r11d, 1
sar dil, 0xe2
mov qword [rsp + rdi - 0x403cdf1d], r10
movsx r10d, al
shr eax, cl
xor dword [rsp + rdi - 0x403cdf1d], r11d
btc rax, 0x2c
pop r10
bts ebx, 3
movsxd r11, r11d
push rdi
ror word [rsp + rdi - 0x403cdf1a], 0x61
adc rbp, r11
mov qword [rsp + rdi - 0x403cdf1d], rbp
ret

Function at 0x140c1f097
Capabilities:
Authenticate hmac

Disassembly:
lea rsp, [rsp + 0x18]
je 0x140c13297

Function at 0x140c1f621
Capabilities:
Manually build aes constants

Disassembly:
sbb rsp, 0x17
push 0xffffffffd52dc5a0
call fcn.140c1157e

Function at 0x140c1fe06
Capabilities:
Encode data using base64
Manually build aes constants

Disassembly:
lea rsp, [rsp + 0x30]
jne 0x140c101f1
jmp 0x140bfdb86
Function at 0x140c21f21
Capabilities:
Encode data using base64

Disassembly:
sar r8w, 0xa9
rol bx, 1
dec rcx
neg bx
add bx, r11w
xor r10w, bx
jmp 0x140c16c00
dec r8w
cmove cx, dx
sbb bx, 0x2a01
jmp 0x140bf1743
inc r8
movzx edi, r8w
add rbx, rsp
imul r11w, r11w
jo 0x140bf3e1a
mov ecx, dword [rbx + rcx - 0x7baccd96]
push r11
lea r9, [rdx + r9 - 0x391c6958]
mov eax, r11d
sar r8w, 0x81
mov dword [r9 + rdx - 0x391c6954], ecx
pop rbx
js fcn.140bf30a1
mov r8d, 0x7d991ba3
movsx r11d, r8b
mov r8d, dword [r8 + rsi - 0x7d991ba3]
xor r8d, r10d
mov edi, r11d
ror r8d, 3
lea rcx, [rdi*8 - 0x6e7d95d5]
xor dil, 0x92
push rdi
lea r8d, [r8 + rdi - 0x57d96929]
mov qword [rsp + 8], 0x730f9e81
shr byte [rsp + 9], 0xa2
neg r8d
sar dword [rsp + 9], cl
xor r8d, 0x19ac5417
bswap r8d
add r8d, 0x7f1bb685
lea rcx, [r11 + rcx*8 - 0x65e5cd58]
sal r11b, 0xc6
call fcn.140c0b36c
mov r11d, dword [rsi - 4]
mov eax, 0xb9317035
sar al, 2
mov ebx, eax
xor r11d, r10d
movzx ecx, ax
ror r11d, 2
lea rdx, [rcx + rcx*2 + 0x78320a23]
bswap rdx
inc r11d
sal dx, cl
adc cx, cx
bswap ecx
xor r11d, 0x788151b9
movzx edi, bl
lea r11d, [r11 + rax - 0x707bb276]
and dil, bl
sbb cx, 0x95a9
inc edi
not r11d
push r10
and dx, cx
btc edx, ebx
xor dword [rsp + rcx - 0x1ae06a57], r11d
bts rcx, 4
pop r10
rol rbx, 0xb
mov dword [rcx + r9 - 0x1ae06a5b], r11d
adc rcx, rdi
ror di, cl
dec ebx
mov eax, dword [rcx + rsi - 0x1ae06a6d]
lea rsi, [rsi + rcx - 0x1ae06a6d]
xor eax, r10d
lea r8, [rdx*2 + 0x5235c53b]
dec eax
lea r11, [rdi + 0x601ebe27]
btr r8w, bx
xchg bl, dil
bswap eax
shl rbx, cl
bts r8d, ecx
xadd cl, bl
lea eax, [rax + rcx*2 + 0x3eecb573]
not eax
push r10
xor dword [rsp + rcx - 0x1ae06a65], eax
sar edx, cl
je 0x140c1119d
pop r10
imul dx, di
and dil, dl
sbb r8d, 0xaa3aaf8a
movsxd rax, eax
add rbp, rax
call fcn.140c243b1

Function at 0x140c22c62
Capabilities:
Manually build aes constants

Disassembly:
mov rcx, qword [rsi + rdi*4 - 0x4cfc]
jb 0x140c051d2
mov ebx, r8d
sub r11b, 0x3b
xor rcx, r10
shl edx, 0xa3
lea rax, [rdi*2 + 0x25061bbb]
inc rcx
xor rdx, rax
adc r8w, r8w
neg rcx
bswap rcx
dec rcx
neg rcx
sar rdi, 0x8c
sub eax, 0xd326088b
rol rcx, 7
call fcn.140c0b918
xor cx, dx
mov qword [rsp + rcx - 0x45b6], r10
btr r8d, r8d
movzx edi, al
sub r8b, 0x2e
xor dword [rsp + rcx*8 - 0x22db0], r11d
movzx r10d, dl
pop r10
sal dil, 0x42
movsxd r11, r11d
adc rbp, r11
call fcn.140bf1eaf
mov rbx, qword [r9]
mov r11d, 0x1422ffa0
mov rdi, qword [r9 + r11*2 - 0x2845ff38]
lea r9, [r9 + r11*4 - 0x508bfe78]
sar r11, 0x7c
sar r11w, 0x46
or rbx, rdi
not rbx
call fcn.140c26578
mov r8d, 0xe6afed9a
movzx r11d, r8w
movzx edx, r8b
lea rsi, [r11 + rsi - 0xed9e]
or r8d, edx
mov r8d, dword [r11 + rsi - 0xed9a]
bts r11w, dx
xor r8d, r10d
inc r8d
xor r8d, 0x9f3f752c
dec r8d
lea rdi, [r11*8 - 0x40ea2447]
not r8d
xchg rdi, rdx
neg r8d
ror edi, 0x7b
btr edi, 0xb9
push r10
lea r11, [r11 + r11*2 - 0x68f18057]
xor dword [rsp + r11 + 0x68eeb789], r8d
dec dil
mov ecx, r11d
pop r10
movsxd r8, r8d
and r11d, edx
adc rbp, r8
lea r8, [r11 + 0x380a57a6]
rol ecx, 0x38
lea rsi, [rdx + rsi + 0x40e2b76f]
jae 0x140bf4ea6
Function at 0x140c23185
Capabilities:
Manually build aes constants

Disassembly:
xor dword [rsp + rdx - 0xfb7c], r8d
btr dx, di
adc rbx, rbx
bt r11w, 0x8f
mov r10, qword [rsp + rdx*2 - 0x1f700]
bt r11w, cx
xadd bl, r11b
xchg edx, eax
movsxd r8, r8d
bts rdx, rax
mov qword [rsp + rdx - 0xe79], r11
adc rbp, r8
cwde
mov edx, dword [rdx + r9 - 0xe79]
neg byte [rsp]
sub qword [rsp], 0xffffffffb39287bf
ja 0x140bf4f62
movzx r8d, byte [rsi + riz - 5]
add ebx, 0x6d36baab
shr dword [rsp + rbx - 0x6d36ba36], cl
xor dword [rsp + rbx - 0x6d36ba35], eax
xor r8b, r10b
mov qword [rsp + rbx - 0x6d36ba2f], rcx
neg r11w
cwde
add r8b, cl
sar dil, cl
ror r8b, cl
add r11w, r11w
neg r11b
adc al, r11b
adc r8b, cl
shl ebx, 0x39
call fcn.140c0d303

Function at 0x140c26465
Capabilities:
Authenticate hmac

Disassembly:
dec rax
sub ebx, 0xa18acea5
mov qword [rsp + r11 - 0x41], 0x6d957e16
add ecx, dword [rsp + rdx - 0x641b8f33]
bt eax, r8d
rol ebx, 1
not ebx
cdq
push rax
add ebx, edx
rol ebx, 2
lea ebx, [rbx + r11 - 0x4593f3f5]
dec qword [rsp + r11 - 0x40]
call fcn.140c0d0cf
mov edi, dword [rsi + rdx*8 - 0x15b0bc3c]
lea rcx, [rdx + rdx*4 - 0x47ee534f]
lea r11, [rdx*8 + 0x5192b5ad]
call fcn.140c03928

Function at 0x140c27c22
Capabilities:
Authenticate hmac

Disassembly:
imul ebx, edi
lea rsi, [rbx + rsi - 0x1addae3a]
mov qword [rsp + rbx - 0x1addae36], rbx
sub ebx, ebx
mov eax, edi
mov ecx, dword [rdi + rsi - 0x5925268e]
xor ecx, r10d
mov word [rsp + rax - 0x5925268c], dx
sub bl, 0x94
not ecx
and eax, edx
imul bx
inc ecx
mov r8d, ebx
cwd
neg ecx
btc bx, dx
bt ax, dx
inc rdx
inc ecx
shl r8w, 0x88
btc r8w, 0x9f
not ecx
add dil, 0x86
dec word [rsp + rdi - 0x59252614]
not r8
mov qword [rsp + rbx*2 - 0x100d8], r10
btc rax, rbx
xor dword [rsp + rdi - 0x59252614], ecx
sal r11, 0x9a
pop r10
shl rdi, 0x5e
movsxd rcx, ecx
not di
shr bx, 0x23
call fcn.140c0e316

Function at 0x140c27e6f
Capabilities:
Authenticate hmac

Disassembly:
or ebx, 0xa20e661f
sub bl, 0x95
sbb ecx, 0xa18acea4
bt rbx, 0xb6
rol ecx, 1
or rbx, rbx
adc bx, 0x603e
sar ebx, 0xb0
not ecx
add ebx, ebx
dec ecx
imul bx, bx
inc bl
neg bl
rol ecx, 2
ror ebx, 0x21
jo 0x140c1bccc
sbb ecx, 0x4593f3b3
shr bx, 0xc6
bts ebx, ebx
sal ebx, 0x50
rol ecx, 2
ror bx, 0x41
jno 0x140c2741f
mov qword [rsp + rdx*2 + 2], rbp
ret
jmp 0x140befcec
xor ecx, r10d
dec bl
imul ebx, ebx
ror bl, 0xa7
ror ecx, 3
jmp 0x140c0465a
adc ebx, ebx
neg ecx
push rbx
lea rbx, [rbx + 0x58961e39]
bswap rbx
not ecx
mov qword [rsp], r10
rol bx, 0xeb
jae 0x140c10636
mov r8d, 0x62920baa
movsx ebx, r8w
lea rsi, [rsi + r8 - 0x62920bab]
movzx r8d, byte [rsi + r8 - 0x62920baa]
mov edx, ebx
movzx edi, bx
lea rcx, [rdi*4 - 0x48d6fc72]
xor r8b, r10b
rol r8b, 1
xchg edx, ebx
dec r8b
not rbx
ror r8b, 1
and edi, ebx
bswap rdi
sub cl, 0x95
xor r8b, 0xb1
mov eax, 0xfe38099a
cdqe
xor r10b, r8b
add r8, rsp
lea r11, [rcx*8 - 0x76c28b48]
mov rcx, qword [r8 + rbx*4 + 0x2eac]
mul dil
lea r8, [r11 + rdi*2 - 0x5264dd59]
lea r9, [r9 + rbx*4 + 0x2ea4]
call fcn.140bf0fe6
lea rsp, [rsp + 0x10]
jne 0x140c15a14
mov rdx, rax
call fcn.140c1c68a
lea rsp, [rsp + 0x20]
mov ecx, 0x508efc19
bswap rcx
neg cl
sbb rsi, 4
movsx ebx, cl
xor ecx, dword [rsi + rbx*8]
not bl
jmp 0x140c1c626
Function at 0x140c297ec
Capabilities:
Encode data using base64

Disassembly:
mov di, word [r9 + rax*2 - 0x1e20]
sar r8b, 0xe1
mov r11d, 0x8b07349c
lea r9, [rax + r9 - 0xf0a]
mov ecx, edx
jp 0x140bfd62c
or rdx, rax
ror ebx, 0x28
movzx eax, dil
bswap rcx
not rdx
dec di
adc r11b, 0x3c
mov qword [rsp + rdi - 0xffff], 0x4c102c80
or rax, rdx
sar bl, 0xe4
mov r11, qword [r9 + rdi*4 - 0x3ffec]
add rax, r11
xadd word [rsp + rdi - 0xfffd], di
sar dword [rsp + rdi*2 - 0x981d], 0x3f
mov qword [rdi + r9 - 0x4c00], rax
movzx eax, bx
sar byte [rsp + rdi - 0x4c0c], 0xc2
lea r9, [rdi + r9 - 0x4c00]
movzx edx, byte [rsp + rdi - 0x4c10]
xadd rcx, rax
inc rdi
mov qword [rsp + rdi*8 - 0x26088], rbp
ret