joyce8/EMBER2024-capa huggingface dataset:
Function at 0x93ca3f
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using aes mixcolumns step

Disassembly:
btr eax, 0xb0
rol edx, 0x41
xor ecx, 0xa407de26
dec ecx
sar al, 0x85
sar word [esp + edx - 0x3fb], 0x66
rol ecx, 1
lea ecx, [ecx + edx*8 - 0x3195287]
mov dword [esp + edx*2 - 0x800], eax
push edx
bswap ecx
xchg dword [esp + edx - 0x3fe], edx
neg edx
dec ecx
and eax, dword [esp + edx*4 + 7]
xor ebx, ecx
xchg word [esp + edx*2 + 3], dx
mov dword [esi + edx - 6], ecx
neg byte [esp + edx*4 - 0xb]
jo 0x76bad9
jl 0x9b5099
lea ecx, [esi + edx*4 - 0x12]
adc dword [esp + edx*4 - 8], 0x73b0773a
mov dword [esi + edx - 0xa], ecx
lea esi, [esi + edx - 0xa]
ror eax, 0x5f
call fcn.00890142
mov edx, 0x8a1d841a
sub ebp, 4
movsx ecx, dx
or cx, cx
imul cx, cx
mov eax, dword [ebp]
xadd dl, ch
push ecx
and dx, word [esp + 1]
xor eax, ebx
sar dword [esp], 0x99
neg cx
sar dword [esp], cl
rol eax, 2
sub eax, 0x2d926e0c
bswap eax
bt edx, 8
lea eax, [edx + eax + 0x22153630]
ror cl, 0x85
neg eax
sar cx, cl
sal edx, 0x6c
inc eax
inc word [esp + 2]
rol dx, 0xc3
neg eax
xor ebx, eax
sal word [esp + 2], 0xa1
adc edi, eax
movsx eax, dl
mov cl, byte [eax + esi - 4]
xadd dword [esp + eax*4 - 0x10], edx
push eax
mov al, byte [esi + edx*4 - 0x3fffa]
call fcn.00977201
movzx edx, word [esp + 4]
dec eax
not ecx
not ecx
btr ecx, ecx
xor ebx, eax
lea edx, [ecx*8 - 0x606adf46]
add edi, eax
movsx eax, dl
mov eax, dword [ebp]
mov ecx, dword ss:[eax]
xadd byte [esp + 1], dl
xor dword [esp + 4], edx
mov dword [ebp], ecx
lea eax, [edx + edx + 0x69b14bb0]
or dl, byte [esp + eax - 0x78088d49]
mov dword [esp + eax - 0x78088d50], edi
ret 4

Function at 0x9403d0
Capabilities:
Encode data using base64

Disassembly:
lea ebp, [edx + ebp - 0xf9bf]
sete al
push eax
xor ecx, ebx
shl eax, 0xc4
not ecx
ror ecx, 1
mov dword [esp + edx*4 - 0x3e708], 0x5e3f2816
mov dword [esp + edx - 0xf9c3], edx
dec byte [esp + edx - 0xf9b0]
inc ecx
ror dl, 0xa1
sal ax, 0x47
rol ecx, 3
shr dword [esp + edx*2 - 0x1f3b2], 0xa2
xor ecx, 0x4ca49038
or dx, ax
cwde
call fcn.0095ac13

Function at 0x9422ad
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
dec ebx
lea edx, [eax + eax*4 + 0x609cdebf]
inc edi
movzx eax, byte [eax + ebx - 0x1121df32]
jmp fcn.009af391
mov eax, dword [ebp + eax - 0x82d2315]
mov dword [esp], 0xc7a4268c
add ebp, 4
mov edx, 0xd928bb05
xor eax, ebx
xor edx, 0x709656a1
movsx ecx, word [esp]
inc ecx
lea eax, [eax + ecx*2 - 0x7a149727]
bswap eax
sal cx, cl
inc eax
neg dl
rol eax, 1
btc cx, cx
lea ecx, [edx*8 - 0x6dc47e5f]
shl ecx, 0x15
xor ebx, eax
xchg edx, ecx
add edi, eax
or ecx, dword [esp]
mov esi, dword [esi]
pop eax
jl fcn.009542f2
inc ecx
mov eax, 0x1121df32
jmp 0x7c0786

Function at 0x948ad8
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
xadd word [esp + edx - 0x18e], ax
adc cl, 0xd
mov dword [esp + edx - 0x192], edx
add dl, dl
neg cl
cdq
div dword [esp + edx*4 + 4]
sub cl, 0x1d
shr ax, 0x8a
not cl
xor bl, cl
xor eax, eax
or ax, 0x62ab
mov word [edi + edx - 0x6f93c3d6], cx
mov ecx, 0xf20abfa6
xchg dword [esp + edx - 0x6f93c3cb], eax
inc dl
lea edi, [edi + edx - 0x6f93c3d7]
pop eax
pop edx
pop ecx
jne fcn.0087275e
Function at 0x9499f6
Capabilities:
Encode data using base64

Disassembly:
mov dword [esp + 0x14], 0x5d24521c
lea edx, [edx + edx*4 + 0x483d3400]
mov edx, dword [esp + 0x20]
call fcn.00c82c1d

Function at 0x951c56
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
dec eax
mov edi, dword [ecx + eax - 0x17042000]
dec ecx
bswap eax
dec eax
lea esi, [esi + eax*2 - 0x2e084008]
dec eax
mov dword [esi + eax*2 - 0x2e084000], edi
inc ecx
pop esp
jnp fcn.0073c0e6

Function at 0x951c79
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
xchg byte [esp + 3], dl
inc ecx
movsx eax, byte [esp]
rol ecx, 1
inc byte [esp]
sar dword [esp], 0x81
sbb ecx, 0xba06c7a7
idiv dl
xor ebx, ecx
neg word [esp + 1]
mov dword [edi - 4], ecx
push edx
mov cx, 8
shr eax, 0x38
dec dword [esp + eax - 0xfb]
jg 0xcc3f6b
mov word [edi + eax*2 - 0x204], cx
inc edx
lea edi, [edi + eax*4 - 0x402]
mul dl
mov eax, dword [esi + eax - 0x9572]
movzx ecx, dx
not ecx
jo 0xd07602
call fcn.007521d2
push edx
shl dl, 0xc5
ror ecx, 2
jmp 0x78e78a
dec ebx
push 0xfa94239d
call fcn.00c8537c
sal ecx, 0x1a
pop ecx
xor ebx, edx
add esi, edx
push eax
mov dword [esp + ecx - 0x462cd928], esi
ret 8
sbb esi, 7
xor eax, ebx
xchg edx, ecx
rol eax, 2
sub cl, byte [esp + 4]
add dword [esp], 0x56971c33
xor eax, 0x400c8e31
xchg word [esp], dx
dec eax
shl edx, 0xd1
call fcn.00861186

Function at 0x952096
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
adc esi, ecx
pop ecx
jmp fcn.00c9bff2
sbb edi, 8
mov dword [edi + 0xc], eax
pop eax
push 0x499ff296
mov dword [edi + 8], ebx
mov ebx, dword [esp]
sub bx, word [esp + ebx - 0x499ff295]
lea eax, [ebx + ebx*2 + 0x570fe2bc]
mov dword [edi + eax*2 - 0x67dbb54c], ecx
mov dword [edi + eax*2 - 0x67dbb550], edx
and dword [esp + eax - 0x33eddaa8], 0x712b7d39
mov ebx, dword [esp + eax*2 - 0x67dbb548]
inc dword [esp + eax - 0x33eddaa8]
mov dword [esp + eax*2 - 0x67dbb548], eax
mov ecx, eax
lea ebp, [ebp + eax*2 - 0x67dbb554]
mov ecx, dword [ebp + eax*2 - 0x67dbb550]
adc eax, eax
setno byte [esp + eax - 0x67dbb54f]
movsx edx, word [esp + eax - 0x67dbb548]
xor ecx, ebx
pop edx
ror ecx, 1
add edx, dword [esp + eax - 0x67dbb54c]
xor ecx, 0x3cb6240c
mov dword [esp + edx - 0x74f8dbb9], 0x5fab5f13
cwd
inc ecx
not al
bswap ecx
cwde
not ax
xor ebx, ecx
or eax, 0xce22fe22
pop edx
js 0x886621
push 0xdc05be9c
sub esi, 4
mov eax, dword [esi]
xor eax, ebx
rol eax, 3
push 0x726f607
shl byte [esp + 1], 0xe2
mov ecx, 0x12d4527
dec eax
add cx, cx
not eax
lea eax, [eax + ecx + 0x4df7b7ee]
xor ebx, eax
mov edx, dword [esp + ecx - 0x12d8a4a]
add edi, eax
mov eax, 0x681f5f92
imul dx
btr edx, ecx
mov cx, word [ebp + ecx - 0x12d8a4e]
sar al, 0xe3
sal dword [esp + eax - 0x681f98fe], 0x47
mov dx, word [ebp + eax - 0x681f98fd]
call fcn.008744c7

Function at 0x954654
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
dec eax
mov dword [esp + eax - 0x3f27eb00], eax
dec bx
not word [esp + eax*2 - 0x7e4fd5fc]
and dword [esp + eax*2 - 0x7e4fd5ff], ecx
pop ecx
Function at 0x954779
Capabilities:
Encode data using base64

Disassembly:
inc ebp
xor cl, al
inc si
sub edi, dword [esp + ebp*8 - 0x213]
dec esi
lea eax, [esp + eax + 0x10]
inc ecx
pop esi
inc edx
xor dword [esp + ebp - 0x42], ecx
dec eax
mul eax
dec edi
mov dword [eax + ebp - 0x44], edx
call int.009b909f

Function at 0x9563ba
Capabilities:
Authenticate hmac

Disassembly:
inc sp
xor ecx, ecx
inc cx
mov dword [esi + esi - 0x94], ecx
inc edx
rol byte [esp + esi - 0x87], 0xc1
dec edx
lea esi, [esi + esi - 0x94]
mov eax, edi
inc dx
xchg dword [esp + esi - 0x81], ebx
mov ecx, eax
inc ecx
pop esp
pop eax
jae fcn.0073c0e6
mov ecx, 0x882c983
lea eax, [ecx + ecx + 0x71092f8c]
mov edx, ecx
mov eax, dword [ecx + esi - 0x882c983]
sar ecx, 0x70
ror edx, 0xf3
adc ecx, edx
mov ecx, dword [ecx + esi - 0x5930698e]
adc edx, edx
push ebx
lea ebx, [edx*2 - 0x71429853]
cpuid
push 0x1492b706
mov dword [esp], 0xb2b774a8
sbb esi, 8
jmp 0x83c37a
inc cx
xor ecx, ecx
rol cx, 1
xor cx, 0x909f
ror cx, 1
dec esp
bts ebx, ebp
inc esi
or byte [esp + ebp*2 - 0x1dd7], al
inc ebp
cmovg ebp, eax
inc cx
inc edx
dec byte [esp + ebp*2 - 0x1dd1]
inc ecx
sal ebp, 0xfa
jne 0x7a93b9
pop edx
mov eax, dword [ebp + ecx*2]
sal dl, 0xa1
bts edx, edx
lea ebp, [ebp + ecx*8 + 4]
xor eax, ebx
shl cx, 0xe3
adc cx, cx
neg eax
imul dx, cx
lea eax, [eax + ecx*4 + 0x512e4b10]
bswap eax
adc edx, ecx
ror dx, 2
inc eax
xor ebx, eax
push edx
btc edx, 0x2d
adc edi, eax
add dword [esp + ecx], edi
ret
dec eax
inc sp
sub ebp, ebx
and bx, 0x3f01
dec esi
mov dword [esp + ebp - 0xee3], ecx
inc ebp
movzx esi, dl
inc edx
xor dword [esp + ebp - 0xee3], eax
dec esi
mov ecx, dword [esp + ebp - 0xee3]
dec ecx
inc edx
dec esi
mov dword [esp + ebp*8 - 0x7758], ebp
inc dx
and dword [esp + ebp*2 - 0x1dd5], ebx
dec eax
arpl ax, ax
dec eax
adc ebp, eax
dec esi
mov dword [esp + ebp*2 - 0x1dce], esi
inc ebx
movzx ecx, word [ebx + ebp - 0xee7]
inc cx
shl edx, 0x41
inc cx
inc ebp
dec edi
lea edx, [edx + eax*2 + 0x719031ae]
dec edi
lea ebx, [ebx + ebp - 0xee6]
jno 0x93a5e8

Function at 0x957826
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
inc ecx
shr dl, 0x21
inc cx
sal esi, 0x44
inc ebp
xor eax, ecx
dec ecx
xor esi, 0xd481c613
inc esp
movzx edi, bh
dec eax
lea ecx, [ecx + edi + 0x3d25df01]
inc ecx
neg eax
call fcn.00752bea
xor ebx, ecx
not eax
mov dword [esp], eax
shl al, 0xc1
adc esi, ecx
shr byte [esp], 0x21
movzx ax, byte [ebp]
call fcn.008b44f7
inc ecx
mov ebp, 0x48214304
inc ecx
mov esp, 0x171a7638
dec ecx
mov ebx, dword [ebp + esi - 0x48214304]
inc ebp
movzx esi, ah
inc ebp
mov ebp, dword [ebp + esi - 0x482142fc]
inc ecx
movsx edi, si
dec edx
lea esi, [esi - 0x5c69d8d4]
inc bp
imul esp, esp
inc esp
mov edx, edi
inc esi
mov dword [ebx - 0x171aac40], ebp
mov ecx, 0x5f3f18b4
dec di
shr ecx, cl
inc edi
mov eax, dword [esp + ebx - 0x171aac40]
jp 0x87d8eb
Function at 0x95ac3c
Capabilities:
Authenticate hmac

Disassembly:
push eax
mov eax, dword [esi + 4]
mov cl, byte [esi + 8]
add word [esp], 0xd634
push 0x7b8ca6a2
push 0x2d12b590
adc esi, 5
dec dword [esp + 8]
call fcn.00976fa9
mov dword [esp], edx
rol edx, 0x41
adc eax, 0x4e15793d
pop edx
push edx
movzx ecx, dl
bswap eax
pop ecx
lea eax, [eax + ecx + 0xe189818]
imul cx, dx
neg eax
xor ebx, eax
add edi, eax
pop ecx
lea eax, [edx + edx - 0x7c7f66f6]
mov edx, dword [eax + esi - 0x5ca04c30]
shl eax, 0x64
jp 0x870fd4

Function at 0x95c978
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
add dword [esp + 4], 0x15215eaa
sbb ecx, 0xfd83549b
shl dword [esp + 2], 0x78
dec word [esp]
push 0x1da57f38
xor ebx, ecx
push 0x968b34ac
add ebp, ecx
lea esp, [esp + 0x10]
call fcn.00737863
mov ax, word [esi]
mov ecx, 0x5122b01c
movzx edx, cx
mov cl, byte [esi + ecx - 0x5122b01a]
lea esi, [esi + edx - 0xb01a]
shr dl, 0x46
shr edx, 0x81
imul edx, edx
shr ax, cl
bswap edx
push edx
mov word [esi + edx - 0x401e], ax
sub dword [esp + edx - 0x401e], 0x43b88396
movzx ecx, byte [esp + edx*4 - 0x10078]
sar byte [esp + edx - 0x401b], 0xc1
mov eax, dword [ebp + ecx - 0x88]
lea edx, [ecx*8 + 0x4a105e25]
xor ecx, 0xbf27bbb0
lea ebp, [edx + ebp - 0x4a106261]
xor eax, ebx
neg eax
bswap eax
not eax
lea edx, [ecx*2 - 0x716c375a]
and cl, 0x10
bswap eax
lea edx, [ecx*4 - 0x735fe3fd]
call fcn.0079a40e
push eax
neg edx
ror eax, 0x86
inc edx
shr al, 0xc7
sar eax, cl
bswap edx
mov dword [esp + eax*8 - 0x421fd4], 0x56177706
dec edx
neg edx
inc eax
ror edx, 3
pop eax
cwde
shl ecx, cl
xor ebx, edx
add ebp, edx
sar eax, 0xb5
call fcn.00c6d0a5
xor ecx, 0x3600bda8
not dword [esp + 4]
jmp 0x8b8a28
Function at 0x95deb4
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
mov ax, word [edx]
sub edi, 2
mov edx, 0x30ae01b9
rol edx, 0xf6
sbb dx, 0x51b9
mov word [edi + edx - 0x6e4cd9c7], ax
lea ebp, [ebp + edx - 0x6e4cd9cb]
movzx ecx, dx
mov eax, ecx
mov edx, dword [edx + ebp - 0x6e4cd9c7]
mov dword [esp + ecx - 0xd9c3], 0xb79f410f
xor edx, ebx
add al, al
sar eax, cl
sub al, al
xor edx, 0xbe080b1d
ror edx, 3
shl ecx, cl
neg edx
add ecx, dword [esp + ecx - 0x6ce37c]
sar word [esp + eax - 0xfc], 0xca
cwde
not edx
neg edx
shr byte [esp + eax - 0xfb], 0x23
shr ecx, 0x67
mov dword [esp + ecx - 0x1701849], 0x3b1e310d
xor ebx, edx
inc eax
rol cx, 0xe4
inc word [esp + ecx*8 - 0xb842482]
add esi, edx
pop edx
pop eax
jmp fcn.00c9bff2

Function at 0x95fac1
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
lea ebp, [ebp + edx*2 - 0x59818005]
mov dword [esp + edx - 0x2cc0c000], edx
xor cl, bl
movzx eax, dx
xchg byte [esp + eax - 0xc000], dl
cwd
xor cl, 0x9c
neg dword [esp + eax - 0xbffc]
btr ax, 0x89
adc cl, 0x84
shl byte [esp + edx - 0x2cc0fffa], 0xe3
xadd byte [esp + edx - 0x2cc0ffff], dl
rol cl, 1
add cl, 4
imul eax
xor cl, 0x26
sub cl, 0x8b
and ax, ax
xor bl, cl
sar dl, 0x47
inc dword [esp + edx + 4]
lea ecx, [esp + ecx + 8]
add dl, byte [edx + ecx]
mov ecx, 0x89ca5a5
inc ecx
cbw
mov cx, dx
call fcn.00836de2

Function at 0x964e82
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
dec esi
lea edi, [edi*2 + 0x488a3d89]
inc ecx
ror eax, 3
mov edi, 0xea06091
inc ecx
not eax
call fcn.00c432c2

Function at 0x9666bb
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
shl edx, 1
neg al
mov dword [esp], edx
xor bl, al
mov dword [esp + 4], edx
call fcn.009994fb
Function at 0x96928f
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
xor edx, ebx
push eax
sar ax, cl
bswap edx
xor cx, cx
cwde
ror eax, 0xbf
xor edx, 0x2c228206
btc ecx, ecx
inc dword [esp + ecx - 0x2fef0001]
lea edx, [edx + ecx + 0x4effbd]
pop eax
bt ecx, 0x86
inc ecx
neg edx
call fcn.00cdfb03
mov eax, 0x7a1b438e
movzx edx, al
mov es, word [ebx + 0x1b]
jp 0x84f9f7
mov dh, 0xd0
cwd
mov eax, dword [edi + edx*8]
movzx ecx, dl
lea ecx, [edx + edx*4 + 0x6a8cb01c]
xchg ch, dl
lea edi, [edi + edx*2 - 0x15c]
sub cx, 0x35a1
not edx
btc edx, edx
xor eax, ebx
xor cx, cx
inc eax
btr edx, ecx
and edx, ecx
xor eax, 0xd9029a24
btc dx, cx
sbb ecx, edx
neg eax
sub eax, 0x2da9133f
inc cx
shl dx, 0xa1
or dx, dx
not eax
neg eax
btr dx, dx
call fcn.00771c90
inc ecx
bswap esp
inc ebp
add al, dl
inc ebp
btr eax, eax
inc ecx
dec esp
shr bx, 0x8f
inc ecx
dec bh
inc ecx
xor edi, eax
inc ecx
push ecx
inc esp
movzx ebp, bx
inc esp
xor dword [esp + edx*4 - 0x17f84], esp
inc ecx
mul ebp
inc ecx
pop ecx
dec ebp
arpl sp, sp
mov word [edx - 0x7a], gs
aad 0x8d
mov esp, 0xfffea457
jmp dword [esi - 0x7f]
movsb byte es:[edi], byte [esi]
xchg esp, eax
jl 0x84f9e3
invalid
inc cx
xchg edi, eax
dec ecx
adc ebp, esp
call fcn.007a87c9
rcl byte [edx - 8], 1
and ch, byte [ebp - 0x52]
mov edx, 0xaa8fed00
scasb al, byte es:[edi]
mov edx, 0xda358d00
xor eax, 0xa100baae
cmp eax, 0xbaaefd72
add byte [0x51bca2cd], ah
mov ecx, edi
ja 0x84fa5f
iretd
xchg ebp, eax
sti
xor edx, dword [edi + 0x2cd625c1]
xlatb
push 0xfffffffe
push ds
int 0x96
adc eax, dword [edx - 0x59]
and al, 0xa2
sub al, 0x96
jecxz 0x84fac6
dec edx
cmp dl, byte [ecx + 0x76]
sar dword [esi], 0x20
push ebp
jbe 0x84fa9c
dec edx
fisttp dword [ebp - 0x14]
in al, dx
jno 0x84fb3f
mov ah, bh
fucomp st(4)
jno 0x84fb45
push es
jae 0x84faff
in al, dx
jno 0x84fb4b
salc
invalid
adc cx, cx
xor eax, 0x61b23aa7
call fcn.00cc9bc9
or esp, dword [eax + 0xf]
das
popfd
push eax
or byte [eax + 0x27], bl
add dword [ecx], eax
sal dword [ecx + 0x12b60631], 0xa4
bound ebp, qword [eax]
test byte [ebp + 0x6cc53e5f], dl
invalid
mov dh, 0x1c
mov esi, 0xb74d0c51
enter 0x7d9a, 0xffffffffffffffb0
dec ebp
mov bh, 0xc8
lcall 0xb870, 0x6fbfb07d
xor bh, cl
mov edi, 0x32b8706f
stc
inc eax
mov edi, 0xb6114345
invalid
jg 0xcfb163
and eax, edx
mov dword [esi + 4], eax
not ecx
lea eax, [ecx + ecx*8 + 0x7215a30a]
mov edx, dword [ebp + ecx - 0x2fef62c7]
jmp 0x84f9af
mov eax, 0x761079a8
inc ax
mov eax, dword [ebp + ebx*4]
call fcn.0096928f
dec ebx
lea esp, [esp + 4]
jne 0xcb3ea0
mov eax, 0xafbdca00
cbw
push eax
mov eax, dword [ebp]
lea esp, [esp + 4]
call eax
mov edi, 0x353e002f
sal edi, 0xa1
lea esi, [edi + edi*4 - 0x2d974dd]
mov ebp, dword [ebp + edi - 0x6a7c0062]
mov dword [esi + ebp - 0x11928cf9], eax
lea edx, [esi + 0x1a36eabb]
lea ecx, [esi*4 - 0x2277e7c3]
btr ecx, 0xb5
pop ebx
bts cx, cx
not ecx
pop esi
not edi
pop edi
sub dx, cx
jmp esi
mov dword [esp], 0x551749a0
mov dword [esp], eax
push 0xa238eaae
setns byte [esp]
jno 0xce6560
dec edx
mov dword [esi + edx*2 - 0x1fffc], ebx
inc ecx
mov edi, edi
inc esp
mov esp, ecx
inc ecx
push esi
dec edx
add dword [esp + edx - 0xfffe], ebp
ret
Function at 0x96b833
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
ror cl, 1
mov dword [esp + edx*2 - 0x20000000], 0xf0119f92
not cl
xor bl, cl
not byte [esp + edx - 0xfffffff]
lea ecx, [esp + ecx + 4]
shl dword [esp + edx*8 - 0x80000000], 0x48
seta al
mov al, byte [edx + ecx - 0x10000000]
movzx ecx, dx
dec ecx
mov word [edi + edx*4 - 0x3ffffffe], ax
xor dl, ch
jae 0x765844

Function at 0x96e814
Capabilities:
Authenticate hmac

Disassembly:
and eax, edx
mov dword [ebp + ecx - 0x7ffffffc], eax
lea eax, [ecx*8 - 0x3bdeb6e5]
lea edx, [eax*8 + 0x303caaaa]
movzx ecx, byte [edi + edx - 0x5146f37e]
cwde
cwd
lea edi, [edi + eax - 0x4916]
sar edx, 0xad
xor cl, bl
inc cl
add eax, edx
push edx
neg cl
cwde
inc cl
mul byte [esp + edx*2 - 0x5145b]
ror cl, 1
call fcn.007b677e
mov eax, dword [edx + ebp - 0x933d7c]
sal ecx, 0x3f
push ecx
jnp 0xc8281c
mov edx, dword [ebp + edx*4 - 0x24cf5ec]
not eax
not edx
shl cl, 0xe2
mov dword [esp + ecx - 0x7ffffffc], 0x11935abe
je 0x8237a4
xor ebx, eax
add esi, eax
sar edx, 0x47
jnp 0x92275c
add ebp, ecx
cwd
mov ecx, edx
rol dx, 0xe1
jmp ebp
Function at 0x970074
Capabilities:
Authenticate hmac

Disassembly:
imul edx, edx
xor ebx, eax
lea ecx, [edx + 0x40358b8f]
btr edx, ecx
lea edx, [edx + edx*4 + 0x759938b5]
mov dword [ecx + ebp - 0x40358b97], eax
mov eax, dword [ebp + edx - 0x759938bd]
shr ecx, 0xe4
lea ecx, [ecx*4 + 0x3e283f2a]
mov ecx, dword [ecx + ebp - 0x4e35a20e]
sbb dl, dh
rol word [esp + edx - 0x75993879], 0xc8
shr dword [esp + edx - 0x75993878], 0x58
adc eax, ecx
mov dword [ebp + edx - 0x75993880], eax
xor dl, byte [esp + edx - 0x75993875]
lea ebp, [ebp + edx - 0x75993880]
ror dword [esp + edx - 0x7599387a], 0x42
ror edx, 0x18
push edx
pop edx
pop eax
pop edx
jns fcn.00882a69
adc ebp, 3
jmp 0x8e05b0
neg dx
lea eax, [edx + eax - 0x1cfb11bf]
setnp dl
pop edx
not eax
lea eax, [eax + ecx*2 - 0x4da4e9df]
xor ecx, 0x83af4899
xchg dword [esp + ecx - 0x1000e4e1], ecx
rol eax, 1
sub ecx, 0x4f937d07
mov edx, dword [esp + ecx - 0x6c1781f5]
shr dword [esp + ecx - 0x6c1781f9], cl
lea eax, [eax + ecx - 0x28e3984e]
bswap eax
shl edx, cl
jbe 0x799f57
mov eax, 0xcd01df25
mov ecx, eax
push ecx
mov ax, word [esi]
sar word [esp], cl
or cx, 0x28aa
lea ecx, [esp + 0x28]
mov edx, 0x8725d5a6
sbb edx, edx
add edx, edx
mov byte [ecx + edx], al
mov eax, dword [edx + ebp]
not dword [esp + edx]
seto dl
rol dl, 0x43
lea ebp, [ebp + edx*4 + 4]
lea ecx, [edx*2 - 0x6668e8f8]
sal dx, cl
ror word [esp + edx + 1], cl
xor eax, ebx
neg ecx
or ecx, ecx
push ecx
ror eax, 1
xadd dword [esp + edx*4 + 2], ecx
jg 0xc742b9
mov al, byte [0xaa01eba9]
add eax, 0x9500a955
inc edi
adc bh, byte [ebp + 0x3d00a955]
fidiv word [edx - 0x63]
push ebp
test eax, 0x6a356900
movsd dword es:[edi], dword [esi]
push ebp
test eax, 0x32275500
dec esp
stosb byte es:[edi], al
cwde
iretd
push 0x6f8e120a
neg byte [esp]
sbb esi, 7
sub word [esp], 0x50c
call int.0080c8b3
lea edi, [edi + eax*2 + 4]
xor ecx, ebx
dec ecx
not ecx
add eax, 0xca981429
neg ecx
not al
bswap ecx
lea ecx, [eax + ecx - 0x5061c321]
cdq
xor edx, edx
bswap ecx
xor ebx, ecx
sal edx, 0xfc
call fcn.0076ecd3
xor eax, 0x9438961d
not eax
push ecx
lea eax, [eax + edx - 0x2d9ecca0]
ror byte [esp + edx*2 + 6], 4
not eax
pop edx
xor ebx, eax
or dl, 0x1b
adc edi, eax
ror ecx, cl
sub byte [esp + ecx - 0x68fe0661], cl
sar edx, 0x1c
lea edx, [esp + ecx - 0x68fe063a]
call fcn.009492f4
add dx, dx
push ebx
jo 0xc5141d
cpuid
jno 0x98afd3
add edi, edx
call fcn.00973454

Function at 0x972398
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
mov dword [esp], 0xe18cbe30
adc esi, 3
dec dword [esp]
shld dx, ax, cl
mov eax, 0xc1bc3e95
xchg word [esp + 1], ax
sub eax, 0x2cb1799e
mov word [esi], dx
movzx ecx, byte [esp]
mov edx, eax
mov edx, dword [ebp + ecx - 0x2f]
or eax, ecx
ja 0xc79c6a
mov eax, 0xf618040e
mov eax, dword [edi]
mov edx, 0xd4a60bb6
xor edx, edx
xor dl, byte ss:[eax + edx]
add edi, 2
mov word [edi], dx
mov eax, 0x4d1a6e9c
lea ebp, [ebp + eax - 0x4d1a6ea0]
bt eax, 0x23
movzx edx, ax
mov ecx, dword [eax + ebp - 0x4d1a6e9c]
xor ecx, ebx
or eax, eax
setb al
rol ecx, 2
xor ecx, 0x6783df90
neg ax
sbb eax, eax
ror ecx, 3
sub dx, 0xfaa
ror eax, 3
sbb eax, eax
neg ecx
mul dx
xor ebx, ecx
add esi, ecx
lea ecx, [eax + edx*8 - 0x6d5951c9]
shl eax, cl
jmp esi
Function at 0x973459
Capabilities:
Encode data using base64

Disassembly:
inc ecx
xor eax, ecx
inc esp
movzx esp, dx
dec eax
inc sp
and edx, edi
ror eax, 1
dec eax
dec ebp
lea esi, [esp - 0x125f4264]
dec esi
lea eax, [0xb9953932]
inc esp
mov ebp, edi
not eax
bswap eax
dec ecx
sar esp, 0x4c
dec esi
lea edi, [esi*8 + 0x409a34aa]
inc ecx
push ecx
dec eax
not edi
inc ebp
movzx ecx, sp
inc edx
xor dword [esp + edx], eax
inc ecx
pop ecx
jmp 0xcd50f8
sbb ebp, 4
btc edx, ecx
jb 0x92d68d
mov dword [ebp], eax
bt edx, 0x1d
and dword [esp], edx
neg word [esp + 5]
pop edx
pop eax
jp fcn.00754c95
bswap edx
xor ebx, edx
btc eax, 0xbc
add edi, edx
push eax
pop edx
pop eax
pop ecx
pop eax
jmp edi
or word [esp + 1], dx
shr eax, cl
mov dword [ebp], eax
mov edx, dword [edi]
add edi, 4
mov eax, 0xdbffdbf
lea ecx, [eax + 0x21258733]
jmp fcn.00909f05
rol ecx, 0x6a
bt ecx, ecx
xor edx, 0x32be80b0
ror edx, 2
sal al, 0x47
or ecx, ecx
rol ecx, 0x6e
bswap edx
bts eax, eax
sub ecx, ecx
xor ebx, edx
idiv al
add esi, edx
cwde
mov ebp, dword [ebp + ecx*8]
push ecx
pop ecx
jmp fcn.00882a69
dec ecx
bswap eax
dec ecx
add ebp, esp
sal di, 0x81
xor ax, 0x6087
dec ecx
inc ebp
dec esp
mov edx, dword [esi + edx]
dec eax
bt edi, 0x28
jae 0xccb6e7
mov ecx, eax
lea edi, [edi + eax*2 - 0xed16]
call fcn.00cd8476
inc ecx
mov edi, 0xf218481f
dec ecx
lea edx, [edi + 0x60a2a05]
inc ecx
mov edi, edi
dec eax
mov ecx, dword [esi]
inc esp
mov bh, byte [esi + 8]
rol di, 0xe8
dec eax
adc esi, 0xa
inc esp
movzx edx, dl
ror dx, 0xac
inc esi
mov byte [ecx + edx*2 - 0x48], bh
inc ebx
mov eax, dword [ebx + edx*2 - 0x48]
dec ecx
shr edx, 0x47
dec edi
lea ebx, [edx + ebx + 4]
jns 0x78d027
mov eax, 0x2bb3f0af
lea esi, [eax + esi - 0x2bb3f0b3]
btr eax, eax
jb 0xd05c7b
mov eax, 0x64ba6715
mov edx, 0xffbcbab3
mov edx, ebp
mov dword [ebp + eax - 0x64ba6719], edx
mov eax, dword [ebp + eax - 0x64ba6719]
push 0x35374f2b
mov edx, dword [esp]
mov cx, word ss:[eax + edx*2 - 0x6a6e9e56]
sub dword [esp + edx*2 - 0x6a6e9e56], edx
jl fcn.008deb48
jp 0x885c6a
mov eax, 0x5cb8d533
mov edx, eax
mov edx, dword [edi + edx - 0x5cb8d533]
lea edi, [edi + eax - 0x5cb8d52f]
movsx ecx, ax
lea eax, [eax*4 - 0x23c90142]
ror eax, 0x5f
xor edx, ebx
or ax, cx
rol edx, 1
jmp 0x94b1b5
dec eax
arpl ax, ax
dec ecx
lea ecx, [ebp + edi*2 - 0x505ed756]
inc ecx
rol dh, 0xc7
dec eax
add ebp, eax
inc cx
btc edx, 0x9b
jmp ebp
mov eax, dword [esi + eax - 0x2bb370af]
xor eax, ebx
push 0xb81d2f19
push 0x342d5e92
mov edx, dword [esp + 4]
bswap eax
mov ecx, dword [esp + 4]
ror eax, 2
neg eax
shr edx, 0x59
ror dword [esp + edx*8 - 0x2dc], 0x29
lea edx, [ecx + edx*2 + 0x5f9a212e]
bswap eax
ror edx, cl
xor ebx, eax
xchg dword [esp + 4], ecx
add edi, eax
not ecx
shl word [esp + ecx - 0x7323f165], cl
sub ecx, dword [esp + ecx - 0x7323f164]
mov eax, ebp
sar byte [esp + 2], 0x27
jae 0x7df62e

Function at 0x97b221
Capabilities:
Encode data using base64

Disassembly:
mov edx, dword [ebp + ecx - 0x3c9fbd21]
lea ebp, [ebp + ecx*2 - 0x793f7a3e]
xor edx, ebx
add ecx, ecx