joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14050074f
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + rcx*4 - 0x244], rcx
xor dword [rsp + rax - 0x5fb0dcee], r9d
mul cx
cmovb eax, dword [rsp + rax - 0x5fb02bd9]
jb 0x140538c94
mov dword [rsp + rax - 0x4426fffa], ebp
call fcn.1404ac60d
mov rbp, qword [rsp + rax - 0x6efffff0]
mov qword [rsp + rcx - 0x81], 0x59247320
div r10b
movsxd r9, r9d
pop rdx
call fcn.14058edda

Function at 0x1405034ea
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
movsxd r9, r9d
cwde
cdq
add r11, r9
mov rbp, qword [rsi + r8 - 0x8030]
inc cx
mov r9w, word [rsi + r8*2 - 0x10058]
lea rsi, [r8 + rsi - 0x8026]
call fcn.14059ae63
mov r10d, 0x44b00f1d
lea rax, [r10*2 - 0x3eeee4c2]
sal al, 4
lea rbp, [r10 + rbp - 0x44b00f21]
mov eax, dword [rax + rbp - 0x4a713980]
shl r10w, 0x28
movsx ecx, r10w
jb 0x14051ac21
mov esi, 0x2320680a
lea rdi, [rsi - 0x534a80d2]
mov edx, dword [rsi + r10 - 0x2320680a]
mov esi, 0x1e0eb48b
xor edi, r8d
mov qword [rsp + rsi - 0x1e0eb48b], rsi
xor edi, 0xd6bf5791
lea rbx, [rsi - 0x3af6924c]
lea edi, [rdi + rbx*4 + 0x17e8c245]
bswap edi
neg edi
and si, word [rsp + rsi*4 - 0x783ad21e]
inc esi
mov qword [rsp + rsi - 0x1e0dfff9], r8
adc qword [rsp + rbx + 0x1ce7ddc1], 0x4a3e2815
shr ebx, 0x4d
shl rbx, 0x98
xor dword [rsp + rsi*2 - 0x3c1bfffa], edi
sal word [rsp + rsi*2 - 0x3c1c0001], 0x63
xchg byte [rsp + rsi - 0x1e0dfffd], bl
mov r8, qword [rsp + rsi*2 - 0x3c1bfffa]
movsxd rdi, edi
mov qword [rsp + rsi*2 - 0x3c1bfffa], 0xffffffffab8a573e
pop rbp
adc r11, rdi
push rbp
mov rax, qword [r9 + rsi*2 - 0x3c1c0002]
push rbx
or byte [rsp + rsi - 0x1e0e0000], 0x34
movsx ecx, word [rsp + rsi - 0x1e0dfff1]
mov rdi, qword [r9 + rsi - 0x1e0dfff9]
mov edx, 0xc7267e18
dec rbx
imul bx, si
lea r9, [r9 + rsi*2 - 0x3c1bfff2]
xor dx, 0x7096
mov qword [rax + rsi*2 - 0x3c1c0002], rdi
call fcn.1405fecf7
xor r9d, 0x9da48dad
lea r9d, [r9 + r8 - 0x308a71af]
rol r8w, 0x25
pop rdi
rol r9d, cl
xor dx, cx
push r10
xor dword [rsp + r8*2 - 0x10060], r9d
pop r10
movsx ebp, cl
lea rax, [rdi*8 + 0x7dad8e13]
jmp 0x1404e9223
xor eax, r11d
dec eax
neg eax
dec eax
bswap eax
movzx esi, cx
lea r9, [r10*4 - 0x508276]
neg eax
lea r9, [rsi*8 - 0x7d61bce]
lea rsi, [r10 + r9*4 + 0x6a22f994]
dec rsi
dec eax
mov edi, r9d
btr r9d, ecx
neg eax
xchg r9b, sil
and cl, r10b
inc eax
xor cx, 0x3b2
shl si, 0x25
push r11
xor dword [rsp + r10 - 0x44b01d00], eax
neg r9d
lea r11, [r10 + r10*2 - 0x8444e60]
pop r11
movsxd rax, eax
rol esi, 0x4b
ror rsi, cl
adc rbx, rax
xadd r10, rsi
dec r10b
mov ecx, dword [r8 + rcx - 0x1eb2]
mov eax, dword [r8 + r9*2 - 0xfaa6746]
lea rsi, [r9 + 0x543a0c92]
inc r9b
imul ecx
call fcn.1405520f9
Function at 0x140515439
Capabilities:
Authenticate hmac

Disassembly:
mov qword [rsp + rax - 1], r10
ret 8
mov word [rdi + rdx - 1], bx
ja 0x1404d84eb
sub r8, 4
mov edx, dword [r8]
mov r10d, 0x8295218b
movzx eax, r10w
xor edx, ebp
neg edx
rol edx, 1
movzx esi, ax
not si
mov ecx, 0x6132da0c
xor edx, 0x3eb698bb
movsx r9d, ax
movzx edi, r9w
neg edx
ror si, cl
push rbp
btc di, 0x2f
jae 0x1405f3403

Function at 0x14051605c
Capabilities:
Encode data using base64

Disassembly:
movzx ecx, word [rbp + rsi*2 - 0x30154c46]
setae bl
lea rbp, [rbp + rsi*2 - 0x30154c44]
xor cx, r9w
btc r8d, esi
dec cx
xadd rsi, r8
ror cx, 1
cdqe
dec cx
mov qword [rsp + r8*2 - 0x30154c46], r11
not cx
call fcn.140664100
movsxd rax, eax
call fcn.1406415b3

Function at 0x140517bd2
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
call fcn.1404cfd61
mov ecx, 0xcfb4f39a
jmp 0x140556dbd
movsx r10d, cx
sub rbp, 4
lea rdi, [rcx*2 + 0x353ec008]
mov esi, dword [rbp + riz]
shl di, 0xce
lea r9, [r10 + rdi*4 - 0x7adc34f3]
not r9
xor esi, r11d
sub esi, 0xa735009f
lea rdi, [r10 + r9*4 + 0x2af3b32]
inc r9w
movsx edx, r10w
xor esi, 0xea8264b5
not esi
shl edi, 0xc3
movzx eax, dx
inc dx
dec esi
call fcn.14053e885
or r11w, bp
rol ecx, 1
xadd r9w, r11w
movsx eax, r9w
call fcn.1404df2f6

Function at 0x14051a17f
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + rdi - 0x3d247431], 0x272f7e93
sar rdx, 0xb0
mov word [r8 + rdi*2 - 0x7a48e862], bp
imul dx, di
movzx r9d, r10w
lea rbx, [rdi + rbx - 0x3d247435]
jno 0x1405de7c4
lea rbp, [rdx + rdi*2 + 0x4aa8db6]
push rdi
not r9d
dec r9d
bswap r9d
inc r9d
movsx ecx, bp
or word [rsp + rdi*2 - 0x7a48e85b], dx
mov qword [rsp + rdi - 0x3d247429], rsi
xor dword [rsp + rdi - 0x3d247429], r9d
mov esi, 0xbb956a96
mov rsi, qword [rsp + rdx + 6]
shl dword [rsp + rdi*2 - 0x7a48e862], cl
sal dx, 0xe4
movsxd r9, r9d
imul dx, cx
sbb bpl, 0x8a
add r11, r9
rol qword [rsp + rdi*2 - 0x7a48e862], 0xba
btc rdx, 0xae
mov qword [rsp + rdi - 0x3d247431], r11
ret 8
mov r9d, dword [rdi + rbx - 0x3d247431]
xor r9d, esi
btc dx, r10w
bswap r9d
jae 0x14055dc6a
Function at 0x14051ad25
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
mov r9d, 0xee8471b2
mov r9d, dword [rbx]
add rbx, 4
mov ebp, 0xdea46c30
neg ebp
mov edi, 0xfa0ec923
xor r9d, r10d
mov qword [rsp + rbp - 0x215b93d0], rdi
and ebp, 0xab909511
not r9d
jne 0x1405e0f21
call fcn.1405d5d53
shr dil, 0x81
dec r9d
movsx eax, dil
div dil
neg r9d
cqo
xor dword [rsp + rbp*2 - 0x4221221c], eax
or bpl, dil
bswap r9d
add byte [rsp + rax], al
xor r9d, 0x90b38118
sub rdx, rdi
mov qword [rsp + rbp - 0x21109111], r10
bts rax, rbp
movzx ecx, dl
xor dword [rsp + rbp - 0x21109111], r9d
mov r10d, 0xa9a4742e
inc ebp
add ax, ax
pop r10
movsxd r9, r9d
movsx r8d, dx
adc r11, r9
btr r8, r8
mov rdi, qword [rbp + rsi - 0x21109112]
mov r8w, word ss:[rdi + rax*2 - 0x40004]
lea rsi, [rbp + rsi - 0x2110910c]
mov r9d, ecx
mov edi, ecx
mov word [rsi + rbp - 0x21109112], r8w
movsx r8d, dil
xadd r8w, dx
jg 0x1405fed96
sub r10, 4
mov ebx, dword [r10]
mov ecx, 0x8d3033a9
xor ebx, r11d
xor ebx, 0x91bb0d88
movsx ebp, cx
lea rdx, [rcx + rbp*8 - 0x797c5be1]
inc ebx
lea rdx, [rbp*8 + 0xa8e1723]
bswap ebx
mov edi, edx
btc bp, di
push rbp
rol ebx, 3
mov qword [rsp + rbp - 0x3ba9], r11
btr ecx, 0x89
lea rax, [rdi + rcx - 0x314dfb77]
xor dword [rsp + rbp - 0x3ba9], ebx
movzx r11d, cl
pop r11
movzx r8d, di
lea rsi, [rsi + rbp*4 - 0xeea8]
mov dword [rbp + rsi - 0x3ba9], ebx
shr dil, 0x42
lea rax, [rdi*4 - 0x95c8379]
jp 0x140670232
lea r10, [rbp + r10 - 0x3bad]
rol bpl, 0xa6
mov edx, dword [r10 + rbp*2 - 0x76d4]
lea rbx, [rdi + rax*8 + 0x538ec6aa]
xor edx, r11d
call fcn.1405df231
push 0x2336b6b2
call fcn.14059eae2
jmp r11
pop rdi
pop rsi
jmp fcn.14054f807

Function at 0x140524b50
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + rdi*8 - 0x7fff8], rcx
rol r9w, 8
ror rdx, 3
xadd word [rsp + rdi*2 - 0x1fffd], ax
bswap rdx
sal r8, cl
xor r10, rdx
lea rsi, [rsi + rdi*4 - 0x40004]
mov qword [rsp + rdi*4 - 0x3ffdc], rax
mov qword [rsi + rdi*8 - 0x7fff8], rdx
ror rbp, cl
lea rdx, [rcx + 0x20051222]
pop rdx
pop rcx
pop rdi
pop rbp
pop rbp
jae fcn.140621ffc

Function at 0x14052b5f6
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
xor r11b, dil
lea rdi, [rsp + rdi + 0x28]
mov sil, byte [rdi + rax*2]
lea r8, [r8 + rax*2 - 2]
mov word [r8 + rax*2], si
mov dword [rsp + rax + 9], r9d
pop rdx
pop rcx
pop r10
pop rdx
pop r10
jmp fcn.1404cedee
Function at 0x14052d997
Capabilities:
Encode data using base64

Disassembly:
mov byte [rdi + rcx*2 - 0x16a7e], bpl
lea rbx, [rax + rbx - 0x17]
sar r10, cl
mov ebp, eax
mov ebp, dword [rbx + rax*4 - 0x4c]
xor ebp, esi
sal word [rsp + rax*2 - 0x18], 0x6f
cdqe
neg ebp
jmp 0x14064c65e
dec ebp
movzx edi, dx
xor ebp, 0x6b015330
shr r10d, cl
inc byte [rsp + rax*2 - 0x19]
lea ebp, [rbp + r10*2 + 0x2f168cb8]
ror word [rsp + rax*2 - 0x25], 0xa7
add qword [rsp + rax + 5], r9
not ebp
or byte [rsp + rax + 7], dl
mov qword [rsp + rax*4 - 0x34], rsi
xor dword [rsp + rax + 5], ebp
mov rsi, qword [rsp + r10 + 0x18]
movsxd rbp, ebp
xchg word [rsp + rax*4 - 0x39], di
add r11, rbp
mov qword [rsp + rax*2 - 0x26], r11
ret 0x18
dec dil
neg r10w
xor dil, 0x26
and ax, r10w
rol dil, 1
ror r10w, 0x41
xor dil, 0x9e
mov qword [rsp + rax - 0x13], 0xffffffffc31932b4
sub byte [rsp + rax - 0xa], r9b
shr dx, 0xaf
xor sil, dil
or r10b, r10b
movzx ecx, r10w
adc byte [rsp + rax*2 - 0x22], 0x9b
lea rdi, [rsp + rdi + 0x10]
push rdx
jne 0x1404cbc36
lea r8, [rcx + 0x2841512]
xor dword [rsp], edi
ror rcx, cl
sub bp, bp
pop r8
bt bp, 0x8f
dec cx
movsxd rdi, edi
adc r11, rdi
lea rsi, [rbp + rbx*4 - 0x345b7443]
lea rdx, [rbp*4 + 0x6e8de939]
lea rdx, [rbp*8 + 0x7db7602e]
jmp fcn.14054f807
not ebp
push rcx
and rdx, rax
jle 0x14050dae0

Function at 0x140536fc5
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
or word [rsp + rdx - 0x18399536], cx
adc rbx, rax
mov r9d, 0x2a2ae895
dec dl
mov rcx, r8
lea r8, [r10 + r8 - 0xe2fbe90]
mov dword [r10 + r8 - 0xe2fbe8c], ecx
add esi, 0x8c88993b
mov qword [rsp + r10*2 - 0x1c5f7d08], rsi
pop rdx
pop r9
pop rdi
jnp fcn.1404cedee

Function at 0x14053a557
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + r11*2 - 0x74], rdx
mov esi, dword [r11 + r8 - 0x3a]
mov ebp, dword [r8 + r11 - 0x36]
bswap ecx
lea r8, [r8 + r11 - 0x36]
bt eax, 0x1c
jae 0x1405ca7ca
xor ebx, r11d
xchg dl, dil
rol ebx, 1
bt r10w, ax
div eax
lea ebx, [rbx + rdx*2 + 0x5e919736]
xor edx, ecx
shr eax, cl
not ebx
xor ebx, 0xb32430a8
jmp 0x14063e08e
not esi
jae 0x1406117e5
xor dword [rsp + rdx - 0x3a172181], ebp
movsx r11d, dil
pop r11
movsxd rbp, ebp
add r9, rbp
ror cl, 0xc3
inc dl
jp fcn.14064d800
not rax
and r8, rax
mov qword [rsi + rbx*4 - 0x2c], r8
movzx eax, r10w
not al
cdq
mov ebx, dword [rbp + rdx]
add r10b, dl
lea rbp, [r10 + rbp - 0x64051633]
sal ax, cl
jns 0x1405c1da9
mov eax, 0xfa3a1391
xor ax, 0x5c25
call fcn.140646f69
imul cx
not ebp
or esi, ebp
ror dword [rsp + r11 - 0x39], 0x81
mov dword [r8 + r11*4 - 0xe8], esi
not rcx
mov qword [rsp + r11 - 0x3a], rdi
ret 0x18
call fcn.14052c623
Function at 0x14054e3f9
Capabilities:
Manually build aes constants

Disassembly:
lea edi, [rdi + rax + 0x6a1b526e]
neg edi
mov qword [rsp + rax - 0x10168a7], rax
movzx ecx, word [rsp + rax*4 - 0x405a29b]
sub edi, 0x89a4deb4
mov r9d, 0x5d85d700
not rbp
mov dword [rsp + rax*4 - 0x405a299], 0xa19d83bf
ror edi, 2
and rdx, r10
adc r9, rdx
mov qword [rsp + rax - 0x10168a7], rsi
rol r9d, 8
xor dword [rsp + rax*2 - 0x202d14e], edi
pop rsi
movsxd rdi, edi
add r11, rdi
xadd rcx, rax
sbb dx, r9w
mov eax, dword [r8 + rax*2 - 0x2d0]
and cl, 0x8a
jge 0x1405eb0c5
push r11
mov eax, r8d
xor dword [rsp + rcx*2 - 0x1f014], ebx
movzx r11d, cx
pop r11
sar dl, 0xa3
or rdx, rcx
movsxd rbx, ebx
adc r9, rbx
and bp, 0x6992
adc edx, 0x4f8cb88c
mov r8, rsi
jle 0x140601047
push rbp
lea rsi, [rsi + rbp - 0x559a2002]
shr cl, 0xa1
inc qword [rsp + rcx*2 - 0x1f00a]
mov word [rcx + rsi - 0xf805], r8w
lea r8, [rdx + rbp*8 - 0x647eaa56]
btr r8d, 0x1b
movzx edi, bpl
pop r8
jae fcn.14064d800
xor r11d, 0xba13449b
jmp 0x1405b4842
ror r11d, 1
shl bx, 0xc4
btc rbx, rsi
movzx edx, bl
bswap r11d
cmovb ecx, esi
ror r11d, 1
push r9
xor dword [rsp + rbp], r11d
pop r9
lea rcx, [rbx*2 + 0x2e88fc35]
xor ebp, 0xbb192c97
movsxd r11, r11d
xor cx, dx
call fcn.14060363a

Function at 0x140553aa8
Capabilities:
Encode data using base64

Disassembly:
lea rbx, [rbx + rdi - 0x68004]
jb 0x1404e8a89
rol dil, 0x45
mov dword [rbx + rdi - 0x68000], r10d
xor dx, 0xba8e
setns r9b
pop rdi
pop rdx
pop rdx
jno fcn.140666d61
mov ebx, dword [r10]
mov edx, 0xba128b93
add r10, 4
lea rbp, [rdx + 0x2f2f60ac]
movsx ecx, bp
xor ebx, r9d
movsx r11d, bpl
dec cx
neg r11
bswap ebx
xor ebx, 0x9e363bbb
neg r11d
dec dx
not ebx
sal bp, 0xec
ror r11w, 0xaa
dec ebx
mov eax, 0x4f0af88a
sub edx, r11d
push r9
xor dword [rsp + r11*2 - 0x1f80], ebx
bswap rbp
pop r9
movsxd rbx, ebx
rol edx, cl
adc rdi, rbx
bts rbp, rbp
mov ecx, dword [r8 + r11*2 - 0x1f80]
mov eax, dword [r8 + r11*2 - 0x1f7c]
jb 0x140622016
shl rdx, 0x88
lea r8, [r11 + r8 - 0xfbc]
sub dx, 0xcc2e
lea rbx, [rdx*2 - 0x5ce4127a]
lea rbx, [r11 + rbx*4 - 0x704aa0d8]
or ecx, eax
not ecx
lea rax, [rbx + rdx + 0x4e32bba2]
mov dword [r8 + r11 - 0xfc0], ecx
call fcn.140522a68
Function at 0x14055b56a
Capabilities:
Encode data using base64

Disassembly:
lea rbx, [rax + 0x3d0480b8]
mov ecx, dword [r9]
add r9, 4
movzx esi, ax
ror sil, 0x67
bt rax, rsi
movzx edx, byte [r10 + rsi*2 - 0x1bce2]
neg si
lea r10, [r10 + rsi - 0x218e]
shr rax, 0x64
ror rbx, 0x36
xor dl, r8b
sub dl, 0x87
mov ebp, ebx
call fcn.140608fad
movzx r8d, dl
call fcn.14057c87e
not edx
mov qword [rsp + rax - 0x17], rsi
sub word [rsp + rax - 0x17], di
ror dword [rsp + rax - 0xf], 0x29
sbb edx, 0xc51b859b
rol byte [rsp + rax - 0x17], 0x61
not edx
jno 0x140582946
movsxd rcx, ecx
add r11, rcx
pop r10
lea rax, [rdi - 0x215aaafc]
mov qword [rsp + rdx*2 - 0x162], r9
lea r8, [rdx + r8 - 0xb3]
movzx ecx, word [r8 + rdx - 0xb1]
sal al, 0x22
xor cx, bp
not edi
lea r9, [rdi + rsi*2 - 0x79d32577]
neg qword [rsp + rdi - 0x5f1a7d46]
xor cx, 0xeebb
dec cx
shl rax, 0x54
idiv si
neg r10b
xor cx, 0xdba1
sal qword [rsp + rdi - 0x5f1a7d46], 0xd8
btc r9, r9
ror word [rsp + rdi - 0x5f1a7d40], 0x8e
adc cx, 0x6daa
xor bp, cx
pop r9
xadd dx, r10w
adc rcx, rsp
sub r9b, dl
mul dl
mov r9w, word [rcx + rdx*4 - 0xa508]
lea rbx, [rbx + rdx - 0x2944]
sar dil, 2
ror al, 0xc7
setbe dl
mov word [rbx + rdi - 0x5f1a7d11], r9w
lea rcx, [rdx*2 - 0xe8524b]
jne fcn.140666d61
sub al, dil
xor edx, 0x54252b2d
inc edx
add ax, word [rsp + rax + 0xd]
sub dword [rsp + rax + 5], eax
not edx
dec rdi
sbb edx, 0xb8bce2be
neg edx
push rsi
not r9w
xor dword [rsp + rax*8 + 1], r9d
inc edx
call fcn.1405455cb
mov ecx, dword [rbx]
mov edx, 0x731f99ad
lea rax, [rdx*4 + 0x1bbfd89f]
movsx r9d, al
lea rbx, [rdx + rbx - 0x731f99a9]
xor ecx, r10d
div al
sub ecx, 0x9a22f395
lea rdi, [rdx + rdx*8 + 0x2a1f707]
movzx r8d, dil
bswap ecx
shl dl, 0xc4
dec ecx
neg ecx
call fcn.1405143a1
mov eax, 0x840cdeb8
jmp 0x1404cf2a2

Function at 0x14055b68d
Capabilities:
Encode data using base64

Disassembly:
sub di, 0x2638
mov dword [rbx + r10 - 0x9f], eax
sub r10, rdi
pop rdi
pop rcx
pop rdx
jmp r11
mov qword [rsp + r10*8 - 0x4f0], rdi
movsxd rdx, edx
neg r9
jo 0x1405c77d6
add r11, rdx
lea rdx, [rax + r10*2 + 0x61219806]
mov qword [rsp + r10 - 0x9f], 0xffffffff9724db12
mov eax, dword [rbx + r10*8 - 0x4f8]
mov cl, byte [rbx + r10 - 0x9b]
lea rbx, [rbx + r10 - 0x9d]
xchg byte [rsp + r10 - 0x95], dl
ror r9d, 0x34
shr eax, cl
jmp 0x1405554cc

Function at 0x14055de5d
Capabilities:
Encode data using base64

Disassembly:
adc r9b, bpl
bt cx, r9w
movsxd r8, r8d
add al, r9b
pop rdi
cbw
add r11, r8
mov esi, dword [rdx + rsi - 0x341]
pop rdi
sal rbp, 0x5b
cwde
pop rbp
jbe fcn.140621ffc

Function at 0x14056577d
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
xor al, ch
rol r11d, 3
idiv word [rsp + rcx*2 + 0xf]
mov r8d, 0x7c23b51b
neg r11d
dec r11d
mov qword [rsp + rcx + 0x10], rbx
jmp 0x1405b01b1
shl ecx, 0x3c
not r8w
not dx
dec byte [rsp + rcx + 9]
or r8w, dx
cbw
mov qword [rsp + rcx], rcx
mov word [rcx + rsi], r8w
cqo
push rdx
mov r11d, dword [rcx + rdi]
lea rdi, [rdi + rcx*2 + 4]
sub byte [rsp + rcx + 2], al
xor r11d, ebx
cdq
lea r11d, [r11 + rcx + 0x2a8c1b85]
jmp 0x1405cb92e
jmp 0x1404a057c
Function at 0x140578034
Capabilities:
Encode data using base64

Disassembly:
idiv bx
ror ebp, 2
lea ebp, [rsi + rbp - 0x6195c625]
ror ebp, 1
xor rsi, rsi
mov qword [rsp + rsi*2], 0x42ae0114
not ebp
mul sil
setae sil
jae 0x1404ba1dc

Function at 0x140584693
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
mov qword [rsp], 0x2b65394
mov rsi, qword [r8]
shr byte [rsp + 5], 0xc4
mov rcx, qword [r8 + 8]
adc r8, 8
add rsi, rcx
mov qword [r8], rsi
rol dword [rsp + 2], 0xa1
mov ebx, 0x6d2a7b98
mov esi, dword [r10 + rbx - 0x6d2a7b98]
pop rax
lea rbp, [rax + rbx*8 + 0x1081232a]
lea r10, [rax + r10 - 0x56c5390]
movsx ecx, bl
lea rdx, [rax*4 + 0x3e277387]
mov r11d, 0x7a8bab92
xor esi, r9d
jmp 0x1405af46b
and r11w, 0xaa85
dec esi
btc bp, 0x2c
bswap r11
xor esi, 0x811fe113
sal r11, cl
call fcn.1404cfb1a
mov rdi, rsi
call fcn.14059dd7a

Function at 0x140586edc
Capabilities:
Encode data using base64

Disassembly:
mov edx, r8d
lea rcx, [rbp*2 - 0x3951526d]
mov r9d, dword [r8 + rdi]
call fcn.1404c26d5
jmp 0x140618bb4
rol r10d, 3
not r10d
shr ecx, 0xe5
jne 0x14054657a
mov edi, dword [rsi]
mov ebx, 0x8338e31c
mov r8d, dword [rsi + 4]
bts ebx, 0x88
adc rsi, 3
lea rcx, [rbx*4 - 0x5cc5cef9]
movzx edx, bx
add edi, r8d
mov dword [rsi + rdx*8 - 0x718e0], edi
ror ecx, 0xf2
and rcx, 0xea3bd20
mov r10d, dword [rcx + rbp - 0xe01ac00]
js 0x1405fe7f6
lea rbp, [rbp + rcx - 0xe01abfc]
mov eax, edx
and ecx, 0xb483903e
xor r10d, r11d
add eax, ebx
sal rcx, 0x45
bswap r10d
jne 0x1405b6a8c
mov edi, 0x9785d58e
movzx ebp, dil
mov eax, dword [rbx + rbp*8 - 0x470]
lea rbx, [rbp + rbx - 0x8a]
mov edx, ebp
xor eax, r10d
push rdx
rol eax, 1
call fcn.140644be3
mov ebx, 0xf0177aba
mov esi, dword [rbp + riz]
add rbp, 4
mov eax, ebx
mov r8d, ebx
xor esi, r9d
call fcn.140513468

Function at 0x14058908b
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
xor dword [rsp + rax + 8], r8d
sar eax, 0xc
adc rdx, rax
mov r9, qword [rsp + rax + 8]
mov qword [rsp + rax*4], r11
xor al, dl
jle 0x1404fa12e

Function at 0x140599847
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
bts edx, eax
movsxd rcx, ecx
mov qword [rsp + r9*4 - 0x177cb4], 0xfffffffff928c8a4
add rbx, rcx
pop rsi
pop rcx
jmp fcn.1404cedee
rol ecx, 1
add r10d, 0x6b211181
mov qword [rsp + r9 - 0x5df27], r11
mov qword [rsp + r9*2 - 0xbbe5e], 0x428b9a82
xor dword [rsp + r9*2 - 0xbbe56], ecx
mov r11, qword [rsp + r9 - 0x5df27]
jmp 0x1404e3852

Function at 0x140599c92
Capabilities:
Encode data using base64

Disassembly:
push qword [rsp + 0x10]
popfq
mov rsi, qword [rsp + 0x18]
lea rsp, [rsp + 0x20]

Function at 0x1405a1ca8
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
movsxd rsi, esi
adc rdi, rsi
call fcn.1404fd04f

Function at 0x1405a7ce6
Capabilities:
Encode data using base64

Disassembly:
add r9, rbp
xor cl, 0xa0
call fcn.140503b8a
Function at 0x1405ac9b8
Capabilities:
Encode data using base64

Disassembly:
inc bpl
cwd
rol ebx, 2
cqo
dec ebx
call fcn.140671bf0
sub r8, 2
mov esi, 0x8c88a530
lea rax, [rsi + rsi*2 + 0x7a840f03]
movzx esi, word [r8]
mov edx, 0x271346a0
cwde
xor si, bp
mov r9d, eax
cbw
rol si, 1
push r9
not r9b
xor si, 0xe630
and word [rsp + rdx - 0x2713469c], r9w
jp 0x140551bbe
sbb si, 0x8109
not byte [rsp + rdx - 0x27134699]
shr dword [rsp + rdx - 0x2713469f], 0xb0
xor si, 0xfb2d
sub byte [rsp + rdx - 0x271346a0], al
xor bp, si
inc qword [rsp + rdx*2 - 0x4e268d40]
lea rsi, [rsp + rsi + 8]
movzx r10d, ax
rol r10, 0x20
mov eax, dword [rsi + rdx - 0x271346a0]
lea rbx, [rbx + rdx*2 - 0x4e268d44]
bswap edx
call fcn.14057a806
bswap r11d
mov qword [rsp + rcx*2 + 0x20], rbx
xor dword [rsp + rcx + 0x20], r11d
mov qword [rsp + rcx], r9
mov rbx, qword [rsp + rcx + 0x20]
sub r9, qword [rsp + rcx + 1]
jp 0x1406459c1
movsxd r11, r11d
xor edx, 0x8786702e
shl byte [rsp + rcx*8 + 0x10], 0xc2
add r10, r11
call fcn.140636df7
not edi
rol edi, 2
mov esi, 0x1a91e009
not edi
sar cl, 0x47
push r11
xor dword [rsp + rdx - 0x173c], edi
sar eax, 0x61
sar r9, 0x28
pop r11
dec rdx
movsxd rdi, edi
sar r10b, 0xc7
xadd cx, dx
adc rbx, rdi
mov r8w, word [r8 + rdx*8 - 0x42000]
mul edx
add dx, si
bt rax, rax
jae fcn.1404cedee
mov ebx, dword [rbx + r10 - 0x2a944ce1]
lea r10, [rdi + r10 - 0x36]
xadd dil, bpl
neg dil
idiv bpl
xor ebx, r8d
mul bpl
neg ebx
xchg rdi, rdx
lea ebx, [rbp + rbx - 0x6f03fe87]
jmp 0x1404a7111

Function at 0x1405ae259
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
mov r11, qword [rsp + r10 - 0x14]
pop rdx
movsxd rax, eax
movzx edx, cl
add rbx, rax
and dl, 0x94
mov r8w, word [r8 + r10 - 0x1c]
pop r10
jp fcn.1404cedee

Function at 0x1405b6a35
Capabilities:
Encode data using base64

Disassembly:
mov dx, word [r8 + r11*2 - 0x9c]
btc rbx, r11
mov r11w, word [r8 + r11 - 0x4c]
adc rbx, 0x5b361cb0
call fcn.1404c6a8f

Function at 0x1405c7353
Capabilities:
Encode data using base64

Disassembly:
mov cl, byte [rbp + rsi - 0x50046e34]
or bpl, bpl
lea r9, [rbp*4 - 0x2e7a8c53]
movzx edi, bpl
lea rsi, [rdi + rsi - 0x3a]
sal ebp, 0xd7
shr r8, cl
mov qword [rsp + rbp - 0x1dfffff8], rbp
call fcn.140563c89

Function at 0x1405c77df
Capabilities:
Encode data using base64

Disassembly:
btc r9, 0x2b
mov dword [rbx + r10*4], esi
mov esi, r10d
jae fcn.140666d61
btc rcx, 0x32
sar r9d, cl
xor esi, ebp
mov qword [rsp + r10*2 - 0x1015e], rcx
mov eax, r9d
inc rcx
xor esi, 0xd88549a0
mul cl
dec esi
ror esi, 2
xor esi, 0xbd270da0
bswap esi
neg esi
mov qword [rsp + r10*2 - 0x1015e], rbp
shr r10, 9
xor dword [rsp + r10 - 0x40], esi
xor ecx, 0xfb978430
pop rbp
bswap r10
lea rbx, [rbx + r10*8 - 4]
jle 0x1404db94b
mov edi, 0x7118899d
movzx ax, byte [r8 + rdi - 0x7118899d]
push rdi
call fcn.140549d7e
mov ecx, dword [r9 + rbx - 0x48abb4cd]
mov r9d, dword [rbx + rsi*4 - 0x1f8a3b48]
xchg byte [rsp + rsi*4 - 0x1f8a3b46], r10b
neg word [rsp + rsi*2 - 0xfc51da3]
sal di, 0x68
lea rbx, [rbx + rsi - 0x7e28ecf]
cqo
push rdi
not si
add ecx, r9d
mov dword [rbx + rsi*2 - 0xfc4e258], ecx
sal edx, 0xc1
movzx ecx, sil
mov qword [rsp + rsi*8 - 0x3f138960], r11
ret 8
Function at 0x1405c7eb3
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
mov dword [r8 + r9*8 - 0x5f088], edi
mov qword [rsp + r9 - 0xbe11], rax
lea rbx, [rbx + r10 - 0x15]
call fcn.14053c8e2

Function at 0x1405cb900
Capabilities:
Encode data using base64

Disassembly:
mov word [rsi + rdx*8 - 0xac68], bx
pop r8
pop r8
pop r8
jp fcn.14064d800
mov eax, 0xe7a6f024
sub rbx, 4
lea rbp, [rax + 0x4ea4d81f]
call fcn.14061aed4
mov r9d, dword [r8]
mov cl, byte [r8 + 4]
mov eax, 0x423a37a4
movzx esi, al
xor eax, 0x953d9e02
lea r8, [r8 + rsi*8 - 0x51e]
call fcn.140525cc9
mov qword [rsp + rbp*4], rcx
xor al, 0x1b
neg al
ror dl, 0x25
lea rbp, [rbx + rbp - 0x6ecdc37c]
sbb byte [rsp + rdi - 0x71a415ba], 0x8a
xor al, 0xf
dec al
and dword [rsp + rbp + 0x6ecdaddb], edi
xor r11b, al
jmp 0x140658768
and dil, bl
lea rax, [rsp + rax + 0x18]
movzx bx, byte [rax + rdx - 0x158d]
not byte [rsp + rdx*2 - 0x2b04]
shl word [rsp + rdi - 0x71a41573], 0xc9
movzx r8d, bp
lea rsi, [rdx + rsi - 0x158f]
jae 0x1404ad96b

Function at 0x1405ce8a5
Capabilities:
Hash data using murmur3

Disassembly:
lea rsi, [rsi + rax*2 - 0xdd22]
mov qword [rsp + rax - 0x6e92], rax
not bp
not r11w
or bp, r11w
push rax
mov word [rsi + rax*8 - 0x37490], bp
mov r11d, dword [rax + rdi - 0x6e92]
call fcn.14056db11