joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140bff888
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
imul edx
lea r11, [r11 + r9*2 - 0x2232]
jb 0x140bfbb04
adc byte [rsp + r9 - 0x1112], dl
mov word [rsi + r11 - 0x18], cx
shl byte [rsp + r9 - 0x1114], 0x26
xchg byte [rsp + r9 - 0x1111], r9b
dec dl
lea rbx, [r9 + rbx - 0x1104]
or qword [rsp + r9 - 0x1100], rdx
shr rbp, 0xc2
mov edi, dword [rbx + r9*2 - 0x2200]
cwde
shr dword [rsp + rbp*2 - 0x6576f771], 0x4d
mul rax
xor edi, r10d
not dword [rsp + rbp - 0x32bb7bb7]
mul sil
inc esi
sbb edi, 0xc2b48dbb
dec bpl
cwd
xor rbp, rax
not edi
cwde
xchg rbp, rax
bswap edi
lea rcx, [rdx*4 - 0x54cdff00]
jns 0x140c0161b
sub rbx, 4
mov edx, dword [rbx + riz]
xor edx, r10d
movzx eax, sil
lea rcx, [rax*2 - 0x3e605af1]
not edx
movsx edi, cl
xadd rax, rdi
movzx r9d, sil
neg edx
movsx ebp, al
xor r9d, 0x1582d796
not edx
sbb sil, 0xae
rol edx, 1
div al
dec si
lea rcx, [rax + rax*4 + 0x7318c724]
push r10
and cx, bp
xor dword [rsp + rdi*2 - 0xda], edx
lea rax, [r9*8 + 0x73b9cd3b]
inc sil
pop r10
movsxd rdx, edx
sar rcx, 0xed
adc r8, rdx
push r9
sal word [rsp + rcx + 3], 0xce
inc rax
mov rdi, qword [r11 + rcx*2]
xor rcx, qword [r11 + rcx + 8]
sal r9, 0x2e
lea r11, [rbp + r11 - 0x4e]
and r9d, eax
ror r9w, 1
not rdi
lea rdx, [r9*2 + 0x4d21969f]
not rcx
adc dword [rsp + r9*2 + 1], 0x4ba57812
or rdi, rcx
mov qword [r11 + r9*4], rdi
mov qword [rsp + r9*8], r8
ret
sal bpl, 0x61
mov qword [rsp + rdx*4], r10
push rcx
xor dword [rsp + rdx*2 + 8], esi
mov r10, qword [rsp + rdx + 8]
cdqe
mov qword [rsp + rax*4 + 0x40000008], rdi
or byte [rsp + rax*4 + 0x4000000e], 0x32
lea r11, [r11 + rdx*2 - 4]
mov dword [r11 + rax + 0x10000000], esi
lea rsi, [rax*4 + 0x5e857820]
call fcn.140bf9066
pop rdi
pop rax
ja fcn.140c195b3
sub rbx, 2
movzx edi, word [rbx]
xor di, r10w
xor di, 0x6d22
mov ebp, 0x35121118
sub di, 0xca5
movsx r9d, bp
movzx esi, bpl
not di
not ebp
ror di, 1
xor r10w, di
movsx edx, r9b
or si, dx
movzx eax, bpl
adc rdi, rsp
push rsi
shl dword [rsp + r9*4 - 0x4460], 0x9f
movzx cx, byte [rdi + r9*2 - 0x2230]
sets dl
je 0x140bf7411
neg edi
lea edi, [rdi + rax*4 - 0x14c970b6]
rol edi, 1
xchg qword [rsp + rbp], r9
cdqe
bts rsi, 0x80
neg edi
rol edi, 1
xchg word [rsp + rbp*4 + 4], si
not edi
call fcn.140c0c4dc
mov esi, 0x28a76f2b
movsx eax, si
mov ecx, eax
lea rbx, [rbx + rsi*2 - 0x514ede5a]
btc rax, rax
shl cx, 0xc6
mov edi, 0x7c3e9635
mov ecx, dword [rbx + rsi - 0x28a76f2b]
movsx edx, ax
bts edx, edi
xor ecx, r10d
xor ecx, 0xfe0e413d
movsx ebp, ax
dec ecx
rol ecx, 2
not ecx
push r10
or esi, 0xa9907a86
mul edx
call fcn.140c31d0a
Function at 0x140c03c5e
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
dec edi
xor edx, r10d
btc rbp, rdi
inc edx
lea r11, [rdi + r11 - 0x3f9a2e1c]
pop rbp
btc edi, 0x85
or esi, esi
mov dword [rdi + r11 - 0x3f9a2e00], edx
lea rbx, [rbx + rdi*2 - 0x7f345c04]
mov eax, edi
mov ecx, dword [rax + rbx - 0x3f9a2e00]
sub si, 0x3911
xor r9d, 0x72a41a8d
xor ecx, r10d
movzx ebp, r9b
shr ebp, 0x15
rol rsi, 0x4d
not ecx
inc ecx
neg ecx
bt ebp, r9d
xor ecx, 0x6696e904
lea ecx, [rcx + rdi*2 + 0x78d6fca8]
push rsi
cqo
and byte [rsp + rdi - 0x3f9a2dff], bpl
mov qword [rsp + rdi*2 - 0x7f345c00], r10
neg rsi
btr r9w, 2
xor dword [rsp + rdi - 0x3f9a2e00], ecx
not r9b
xor esi, 0x9c01b2b4
pop r10
btr si, ax
sal rsi, 0xd8
movsxd rcx, ecx
lea rdi, [rax + rsi*8 + 0x64a572b2]
adc r8, rcx
shl sil, 0x23
ja 0x140bf48c7
add dl, ah
add rbp, r8
jmp rbp

Function at 0x140c04f12
Capabilities:
Authenticate hmac
Encode data using base64
Execute anti-debugging instructions

Disassembly:
mov ebp, 0x6d9a2727
lea rbx, [rbx + rbp - 0x6d9a272b]
mov eax, dword [rbx + rbp - 0x6d9a2727]
mov qword [rsp + rbp - 0x6d9a271f], rbp
mov qword [rsp + rbp - 0x6d9a2727], 0x1f8a62b8
movzx esi, word [rsp + rbp - 0x6d9a271c]
xor eax, r10d
xchg byte [rsp + rbp - 0x6d9a2718], sil
lea eax, [rsi + rax + 0x2115231a]
btr esi, 0x1c
movsx r9d, word [rsp + rsi*4 + 1]
jae 0x140bf8a69

Function at 0x140c051f8
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
lea rsp, [rsp + 8]
jmp 0x140c1a905

Function at 0x140c05a77
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
lea rdx, [rsp + rdx + 0x20]
rol di, cl
bts cx, di
not si
mov r9w, word [rbp + rdx - 0x74eb96f9]
setae bpl
xor ecx, eax
lea r11, [rbp + r11 - 0x74eb9603]
mov word [r11 + rax*4 - 0x48f0], r9w
pop r9
pop rsi
pop rax
pop rax
jae fcn.140c195b3

Function at 0x140c05b0d
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
mov ebp, edx
xor al, cl
xadd r9d, ebp
ror sil, 6
mov word [r11 + rdx - 0x16160000], ax
adc r9d, 0x95314c2e
mov ebp, dword [rdx + rbx - 0x16160005]
lea rsi, [r9*4 - 0x7de77265]
lea rbx, [rdx + rbx - 0x16160005]
movzx eax, byte [rsp + rdx*4 - 0x5857fff2]
mov edi, r9d
xor ebp, r10d
neg ebp
shr rcx, cl
mov qword [rsp + rcx], 0xffffffffafa0b980
dec ebp
pop rcx
xadd qword [rsp + rcx + 0x505f4684], rdi
rol ebp, 1
shl word [rsp + rdx - 0x1615ffff], 6
jbe 0x140bf8b5c
mov rbp, qword [r11]
mov edi, 0x168d70b7
mov rcx, qword [r11 + rdi*4 - 0x5a35c2d4]
lea r11, [r11 + rdi*2 - 0x2d1ae15e]
mov qword [rbp + rdi - 0x168d70b7], rcx
mov eax, edi
lea rbx, [rbx + rdi*2 - 0x2d1ae172]
movzx esi, al
movsx edx, di
mov ecx, dword [rbx + rdi*2 - 0x2d1ae16e]
sub dl, 0x83
rol al, 0x64
movsx r9d, di
xor ecx, r10d
inc edi
or eax, eax
inc ecx
bswap r9d
and sil, sil
lea rbp, [rdx*8 - 0x71d00cf8]
bswap ecx
sbb r9w, dx
lea ecx, [rcx + rdi - 0x10ea6c20]
or ax, 0x1592
not ecx
or rax, 0xffffffff850423b4
call fcn.140bfd22b
Function at 0x140c0911e
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
xchg qword [rsp + rdx + 8], rsi
mov dword [rax + r11 - 0x7c0dfff7], ebp
sub si, 0x8f0e
lea rbx, [rax + rbx - 0x7c0dfffb]
xchg dword [rsp + rdx + 0xc], eax
mov qword [rsp + rax*2 - 2], rdx
mov edi, dword [rbx + rax*2 - 2]
sbb dl, ch
bswap ecx
xor edi, r10d
push rdx
add ax, 0xd801
btc esi, 0x15
xor edi, 0xe0263e16
call fcn.140c1fc49
xor ecx, ecx
rol qword [rsp], 0xdc
jae 0x140c1228e
xor dil, al
mov ecx, dword [rbx + rdi - 0x398c]
neg ebp
adc di, di
bswap rbp
lea rbx, [rbx + rdi*8 - 0x3987d]
lea r9, [r9 + 0x43887c94]
xor ecx, r10d
dec rbp
shl di, 3
not dl
xor ecx, ebp
mul esi
cwd
jae 0x140c3554e
call fcn.140c2aa73
or edi, 0x42278512
xor dword [rsp + rdx - 0x37370000], ecx
cqo
pop r10
movsxd rcx, ecx
lea rdi, [rdx*2 + 0x280dba04]
add r8, rcx
dec bp
call fcn.140bfb49c
neg ecx
xchg rbp, rdx
sub di, di
or r9w, di
xor ecx, edx
cwde
rol ecx, 1
bswap rsi
xor rsi, 0xffffffff8400ad3c
push r10
adc dx, dx
rol dl, 0x43
xor dword [rsp + rax*2], ecx
pop r10
movsxd rcx, ecx
call fcn.140c180af
mov ecx, 0x9a1e599e
push rcx
mov ecx, dword [r11 + riz]
mov edi, dword [rsp + 4]
mov ebp, dword [rsp + rdi*2 + 1]
mov edx, dword [r11 + rdi*8 + 4]
push rbp
mov esi, dword [rsp + rdi + 1]
lea r11, [r11 + rdi*2 + 4]
shl si, 0xa1
adc rdi, 0xffffffffafbac10e
or ecx, edx
call fcn.140c27b2b

Function at 0x140c0cfd5
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
lea rsp, [rsp + 0x28]
jne 0x140c2a414
mov r9d, 0xc7323585
call fcn.140c34b07
mov edi, dword [r11]
mov ecx, 0xa99450f
lea r9, [rcx*2 + 0x75961124]
movsx esi, r9w
mov esi, dword [r11 + rcx - 0xa99450b]
movzx ebp, r9b
mov cl, byte [r11 + rcx*2 - 0x15328a16]
mov edx, 0xf305d01f
lea r11, [r11 + rbp*8 - 0x20a]
xor dl, 0x35
movsx eax, bp
shrd edi, esi, cl
mov dword [rbp + r11 - 0x42], edi
movzx edi, dx
cbw
or dl, bpl
lea rbx, [rbx + rbp*8 - 0x214]
push rbp
movsx esi, r9b
xchg r9d, ebp
mov edx, dword [r9 + rbx - 0x42]
btc rdi, r9
xor edx, r10d
bts r9, 0x13
cwde
and ax, 0xf399
inc edx
xor qword [rsp + r9 - 0x80042], rbp
jge 0x140c2605e
not edx
jp 0x140c0a3e9
mov eax, 0xcb3ff928
neg al
call fcn.140c2f4a9
mov eax, 0xb28ea42f
ror rax, 5
jb 0x140c1e475
mov rax, qword [rbp + rbx*8 + 0x20]
push rax

Function at 0x140c1196a
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
mov r9d, 0x6fb3d91f
mov qword [rsp + r9 - 0x6fb3d91f], 0xffffffffb8b683a8
mov rsi, qword [r11 + r9 - 0x6fb3d91f]
mov di, word [r11 + r9 - 0x6fb3d917]
mov ebp, 0x2901ca81
movzx eax, r9b
pop rbp
lea r11, [r11 + rbp + 0x47497c62]
imul eax, eax
sbb rbp, r9
inc r9
mov word [rsi + r9 - 0x6fb3d920], di
movsx edi, ax
cmovns r9w, ax
lea rbx, [rax + rbx - 0x3c5]
seta r9b
mov eax, dword [rbx + r9 - 0x6fb30301]
movzx edx, bp
add r9w, r9w
xor eax, r10d
movsx esi, dx
mov ecx, 0xdeaea63f
shl rdi, cl
inc eax
inc cl
sar esi, 0x19
bswap eax
xchg rdx, r9
xor eax, 0x461203b6
xadd r9d, edi
inc cx
bswap eax
not cx
shl r9b, 0xe5
jns 0x140c216da
Function at 0x140c17d1c
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
push 0xffffffffa188230d
push 0x2da9400d
mov qword [rbp + riz - 8], rax
lea rsp, [rsp + 0x10]
mov qword [rbp + riz - 0x10], rsp
call fcn.140c1d8a7
lea rsp, [rsp + 0x18]
jbe 0x140c17d35
mov edx, 0x5d8f29b6
lea edx, [rdx - 0x5d8f29b2]
lea ecx, [rbx - 4]
sal ecx, 3
shl edx, 3
mov eax, 0x193f969d
bt eax, eax
adc al, ah
mov rax, rbp
add rax, rdx
jmp 0x140c02e06

Function at 0x140c184bb
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
push rax
lea r11, [r11 + rdi*2 - 0x18fae]
sal dl, 0xc6
sub qword [rsp + rdi - 0xc7d5], rax
call fcn.140c0f856

Function at 0x140c1b3da
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
movzx r9d, sil
rol al, 1
movzx edx, bp
mov qword [rsp + rbp - 0x5509], rdx
mov qword [rsp + rdi - 0x4aa45501], rbp
xor r10b, al
sub dx, 0x8b05
not si
xadd word [rsp + rdi - 0x4aa454fe], cx
lea rax, [rsp + rax + 0x10]
or dword [rsp + rdi - 0x4aa45509], 0x433f2aae
mov esi, dword [rbp + rax - 0x5509]
xchg qword [rsp + rdi - 0x4aa45505], rdx
sbb byte [rsp + rbp*4 - 0x15415], dil
mov eax, dword [r11 + rbp - 0x5509]
sbb qword [rsp + rbp - 0x5501], rbp
adc esi, eax
mov eax, dword [rsp + rdi - 0x4aa45500]
mov dword [r11 + rbp*2 - 0xaa12], esi
sar byte [rsp + rbp - 0x5507], 0xc5
div qword [rsp + rcx*2 - 0x5d0dfff8]
mov eax, dword [rbx + rdi - 0x4aa4550e]
lea rbx, [rbp + rbx - 0x550e]
add edi, 0x4582a41a
xchg byte [rsp + rbp*2 - 0xaa03], r9b
ror word [rsp + rbp*4 - 0x1541a], 0xcd
xor eax, r10d
not word [rsp + rbp*4 - 0x15420]
and qword [rsp + rbp*2 - 0xaa0a], rcx
not eax
lea eax, [rdi + rax - 0x8fde9a2]
shr bp, 0x64
sub byte [rsp + rbp*8 - 0x2a80], 0xa7
push rdx
not eax
rol dword [rsp + rbp - 0x541], 0x13
push rdi
jnp 0x140c2b163
lea eax, [rax + r9*8 + 0x27a1324d]
ja 0x140c197af
mov edx, 0x44245ba4
mov edi, edx
call fcn.140c19913
add r8, rdi
xchg sil, dl
or rcx, rcx
mov r11w, word [rdx + r11 - 0xee]
ja fcn.140c195b3
Function at 0x140c1c97f
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
setb r9b
dec cx
xor ebp, r10d
cdqe
and si, cx
shr si, 0x2b
inc ebp
neg ebp
jmp 0x140c19b73
push rax
sub ebp, 0xa134b812
mov edi, 0x66093909
rol ebp, 3
cdq
dec edx
pop rdx
push r10
idiv di
xor dword [rsp + rax - 0x28f], ebp
push rcx
mov r10, qword [rsp + rax*4 - 0xa34]
movsxd rbp, ebp
add r8, rbp
sub r9b, al
call fcn.140c10d4f
mov esi, 0x879b3a2f
sub rbx, 4
movsx edx, sil
mov edi, 0x359ba430
inc edx
mov eax, dword [rdx + rbx - 0x30]
xor eax, r10d
movzx ebp, dil
lea rcx, [rdx - 0x7355dc5e]
call fcn.140c281dd
inc cx
ror cx, 1
mov qword [rsp + rbp - 0x23a59f91], 0x73b0240c
xor esi, esi
sbb cx, 0xa804
xor rsi, qword [rsp + rax*2 - 0x2554fbd8]
sar bpl, 0x21
xor cx, 0x1631
rol cx, 1
xor cx, 0xdfb9
movsx r9d, word [rsp + rax*2 - 0x2554fbd7]
not cx
rol cx, 1
bts ax, 0x27
sbb cx, 0x192f
shr dword [rsp + rbp*2 - 0x474b3f8d], 9
xor r10w, cx
xor esi, 0xf90a1cad
lea rcx, [rsp + rcx + 8]
xchg byte [rsp + rbp - 0x23a59fc8], sil
inc qword [rsp + rbp*2 - 0x474b3f90]
mov edi, eax
mov byte [rcx + rbp*2 - 0x474b3f90], dl
sub qword [rsp + rbp - 0x23a59fc8], rbp
movsx ecx, byte [rsp + rbp - 0x23a59fc6]
lea rbp, [rcx*2 + 0x1c97bc20]
mov edi, dword [rbx + rcx*2 - 0x1a]
xor edi, r10d
rol dword [rsp + rbp - 0x1c97bc31], 0xef
xor edi, 0xdd0f0ab5
dec r9w
lea edi, [rdi + rbp*2 - 0x130ce05f]
sal cl, 0x25
imul rsi
sar dx, 0xe5
bswap edi
cqo
lea edi, [rdi + rsi + 0x317fcb12]
shl qword [rsp + rbp - 0x1c97bc34], 6
add esi, esi
mov qword [rsp + rbp - 0x1c97bc34], r10
jg 0x140c1f82e
call fcn.140c11452
mov r9d, 0xe53ae781
lea rcx, [r9 + r9*2 - 0x4a70b4f1]
mov edi, dword [r11 + riz]
movzx eax, cl
mov ebp, dword [r11 + rax*8 - 0x48c]
add edi, ebp
btc r9w, r9w
lea rsi, [r9*8 - 0x6473d1c1]
mov dword [r11 + rax - 0x8e], edi
rol r9d, cl
mov ebp, dword [rax + rbx - 0x96]
jb 0x140bf7652
not r9b
setb al
and dl, r9b
mov word [r11 + rsi - 0xe], dx
sub rdi, rdi
imul eax
mov qword [rsp + rsi - 0xe], r8
ret
Function at 0x140c1dde0
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
lea ebp, [rbp + rdx + 0x618ee816]
adc cl, ah
call fcn.140c3236f
cqo
mov qword [rsp + rdx], r10
bswap rax
cqo
btc r9, rbp
xor dword [rsp + rdx*8], ecx
pop r10
mul edi
setae sil
movsxd rcx, ecx
jae 0x140c20256
mov edx, 0xc020c9b1
call fcn.140c07f1e
ror byte [rsp + rsi*8 - 0x2e1874d], 0xe5
xor dl, r10b
xchg dword [rsp + rsi*4 - 0x170c3a9], esi
inc rcx
shr esi, 0xcc
xor dl, 0xc
or ecx, esi
adc dl, 0xa0
not dl
bswap eax
and rax, rsi
neg dl
xor r10b, dl
call fcn.140c0da0f
movzx r9d, al
xor ebp, r10d
pop rsi
movsx ecx, dx
movsx esi, di
xor ebp, 0xdd0f0ab5
lea ebp, [rbp + rax + 0x26229801]
shl rsi, 0xb3
bswap ebp
jbe 0x140bfc679
mov ecx, 0x59a77b1
lea rdx, [rcx + rcx*4 - 0x30d3d9c5]
lea rbx, [rcx + rbx - 0x59a77b5]
mov edi, dword [rcx + rbx - 0x59a77b1]
movzx esi, cx
xor edi, r10d
not edi
mov ebp, esi
mov r9d, ecx
and bpl, 0xac
neg edi
or ecx, edx
lea edi, [rdi + rdx - 0x72cbb53e]
sar esi, 0x29
xchg rdx, rsi
not edi
bswap edi
movzx eax, bpl
sar edx, 0xe6
shl dx, 0xc
push r10
mul dx
sbb sil, sil
push rax
xor dword [rsp + rdx + 8], edi
btc esi, 0x2d
mov r10, qword [rsp + rdx + 8]
mov qword [rsp + rdx*2 + 8], rbp
xadd qword [rsp + rdx*4 + 8], rdx
movsxd rdi, edi
cmovl bp, dx
adc r8, rdi
mov bp, word [r11 + rdx*4 - 0x1de80]
movsx edi, word [rsp + rdx*4 - 0x1de76]
bt rsi, rsi
bswap esi
lea r11, [r11 + rdx*4 - 0x1de7e]
lea rbx, [rbx + rdx*4 - 0x1de81]
movzx edx, byte [rbx + rdx*2 - 0xef40]
shl byte [rsp + rsi*2 - 0xb861c8], 0xc1
jp 0x140c13aef

Function at 0x140c1f864
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
pop rdx
pop rax
pop rax
pop rsi
pop r9
pop rcx
jle fcn.140c195b3
Function at 0x140c20b90
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
dec ebx
lea rsp, [rsp + 8]
jne 0x140c00cd7
Function at 0x140c244f0
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
setae bpl
add r8, rcx
mov rax, qword [rdx + r11]
lea rdi, [r9 + r9 + 0x1e163b16]
btc r9, 0xd
push rdx
lea r11, [rdx + r11 + 8]
push rsi
jae 0x140c2d020
call fcn.140c1b308
mov edi, 0xf40bf5a5
lea rbp, [rdi - 0x30f550c3]
movzx eax, word [rbx + riz - 2]
movsx edx, di
xor rbp, rbp
sub bpl, bpl
xor ax, r10w
dec ax
xor di, 0xa8af
xor ax, 0xe5b9
dec edx
lea r9, [rdx*4 - 0xe4fcbd5]
not ax
bts ebp, edi
inc ax
btc r9w, r9w
neg di
bswap edi
not ax
movzx esi, bp
movzx ecx, si
dec ax
xor r10w, ax
add rax, rsp
xadd rcx, rbp
sal edi, 0xab
xadd r9b, cl
mov rcx, qword [rax + rdi*4 - 0x417e8000]
dec edx
ror dl, 0x86
ja 0x140c1a6e4
mov qword [rdi + r11 - 0x105fa008], rcx
movzx esi, byte [rbx + rdi*4 - 0x417e8003]
xor sil, r10b
not sil
push rbp
xor word [rsp + rdi - 0x105f9fff], 0xbfb8
xor sil, 0x9c
not sil
movsx eax, dx
xor sil, 0x1a
rol sil, 1
mov ecx, 0x1521143c
mov qword [rsp + rcx - 0x1521143c], rcx
add sil, 0xf
xor r10b, sil
shr qword [rsp + rdi - 0x105fa000], 0xf7
sal r9b, 0xe3
lea rbp, [rdi + rbp*4 + 0x6d88e22e]
lea rsi, [rsp + rsi + 8]
mov rcx, qword [rdi + rsi - 0x105fa000]
mov qword [r11 + rdi - 0x105fa010], rcx
lea r11, [r11 + rdi*2 - 0x20bf4010]
push rdi
mov esi, dword [rbx + rdi*2 - 0x20bf4007]
movzx ecx, dx
mov qword [rsp + rdi - 0x105fa000], rdx
lea rbx, [rbx + rdi - 0x105fa007]
inc byte [rsp + rdi*2 - 0x20bf3ffd]
add qword [rsp + rdi - 0x105f9ffe], 0x799abbf
xor esi, r10d
not esi
idiv cl
div r9b
inc esi
cdq
or qword [rsp + rdi*2 - 0x20bf3ff8], 0xffffffffdb3bc636
bswap esi
neg edx
ror rcx, cl
rol edi, 0x84
lea esi, [rsi + rdi - 0x379c8db8]
or eax, eax
mov qword [rsp + rdi*4 - 0x17e7fffc], r10
rol bpl, cl
xor dword [rsp + rdi*2 - 0xbf3fffa], esi
neg word [rsp + rdi*4 - 0x17e7fffe]
mov r10, qword [rsp + rdi - 0x5f9fff9]
jbe 0x140c120ce
mov ecx, 0x86b3c39a
movzx edx, cl
lea rbx, [rbx + rdx - 0x9e]
mov edi, dword [rbx + rdx - 0x9a]
jmp 0x140bf7855
call fcn.140c31736
jb 0x140bf7b45
lea rsp, [rsp + 0x10]
jne 0x140c02820
mov edx, 0x7300043a
lea rdx, [rdx + rdx*8 - 0x387b0673]
mov rdx, rax
jmp 0x140c2700b
sal di, 0xa8
lea rbx, [rbx + rdx - 2]
rol bp, 0xc2
dec byte [rsp + rdx*2 + 0xe]
rol r9, 0xe6
movzx ebp, word [rbx + rdx*2]
xor bp, r10w
neg r9b
xor bp, 0x970b
mov ecx, 0x31243282
lea rsi, [r9*4 - 0x2de744e6]
rol bp, 1
sal ecx, cl
mov word [rsp + rdx*2 + 7], 0x5e3c
lea rsi, [r9*4 - 0x2a5574d7]
xor bp, 0x2b91
shl dx, cl
ror rcx, cl
not bp
jp 0x140c2ddc3
movzx ebp, dil
mov ecx, 0x479cf1b1
rol eax, 3
rol dword [rsp + rdi*2 - 0x4554072d], 0x14
inc eax
neg rdi
pop r9
bswap eax
not eax
neg eax
mov qword [rsp + r9*2 - 0x45540736], r10
and r9d, 0x2593d094
xor dword [rsp + r9*2 - 0x41040120], eax
bts r9w, cx
pop r10
movsxd rax, eax
mov edx, 0x1ab9d495
adc r8, rax
ror r9b, 0x22
sbb edi, 0x29a83f14
mov rsi, r11
movsx eax, r9w
sal ax, 0x85
push r9
lea r11, [r11 + r9*2 - 0x41040150]
bt edi, ebp
bt rdx, 0xb6
cqo
mov qword [r9 + r11 - 0x208200a4], rsi
pop rax
jae fcn.140c195b3
dec bp
inc dword [rsp + rdi*4 - 0x785857fb]
xor r10w, bp
btr esi, 0xa3
push r9
lea rbp, [rsp + rbp + 0x18]
mov qword [rbp + rdx], rax
pop rdi
mov qword [rsp + rdx*4], r8
ret 8
Function at 0x140c24aba
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
inc edx
lea rcx, [rcx + 0x2958ba8]
xor ecx, esi
ror edx, 2
bts rcx, 0x30
push r10
btr rdi, rdi
lea rbp, [rsi*8 + 0x7dbd8f1b]
xor dword [rsp + rax*2 - 0xa], edx
xchg rbp, rdi
sal rsi, 0x6a
xchg sil, cl
pop r10
inc r9d
inc di
lea r11, [r11 + rax*2 - 0xe]
mov dword [r11 + rax - 5], edx
movsx edx, cl
lea rbp, [rdx*4 - 0x69635152]
lea rbx, [rbx + rax*2 - 0xe]
add r9d, ebp
mov ebp, dword [rbx + rax - 5]
div rdi
xor si, ax
xor ebp, r10d
cdq
bswap ebp
dec al
setge sil
call fcn.140bffdb3
dec edi
xor edi, 0x6737f98a
lea edi, [rdi + rdx + 0x380efb84]
mov qword [rsp + r9 - 0xcd0], rdx
add qword [rsp + r9 - 0xcc8], r10
bt rcx, rdx
xor dword [rsp + r9*4 - 0x3338], edi
call fcn.140c0e0a3
mov ecx, 0x8d938005
sub rbx, 4
movzx eax, cl
lea r9, [rax*8 + 0x7436a515]
mov edx, dword [rbx + rax*4 - 0x14]
movsx edi, cl
movsx ebp, cl
xor edx, r10d
xor rdi, rdi
sbb bp, ax
ror edx, 3
ror cx, cl
movzx esi, r9w
rol esi, 0x2e
xor edx, 0xdc2b5481
jmp 0x140c0a4ad
Function at 0x140c2739a
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
xor edx, r10d
not edx
bts eax, 0xb
inc edx
imul rbp, rbp
cdqe
mov edi, ecx
bswap edx
xor r9, rdi
xadd r9, rdi
lea edx, [rdx + rsi - 0x60308413]
push rbp
jg 0x140c14ae1
xor ebp, edi
inc qword [rsp + 8]
inc r9
inc word [rsp + 6]
jle 0x140c1ac2a
neg dword [rsp + rcx - 0x66e32bc5]
mov qword [rsp + rax*2 - 0x5d1bfcb0], r10
and ax, 0xfb33
call fcn.140c265ba
call fcn.140c22398
mov ebp, 0x2c314499
mov ecx, 0x29ba142f
lea rbx, [rbx + rbp*2 - 0x58628936]
movzx esi, bp
lea r9, [rbp - 0x7a7c394d]
mov r9d, dword [rbx + rcx*2 - 0x5374285e]
jmp 0x140c20bf4
ror ebp, 2
shr rdi, 0x41
mov qword [rsp + rsi*2 - 0x382c40], rdi
movzx edx, word [rsp + rsi - 0x1c1618]
inc ebp
sar qword [rsp + rdi - 0x70588055], 0x10
not dil
not ebp
push rdx
sub word [rsp + rdi - 0x70588098], ax
inc ebp
ror qword [rsp + rdi - 0x70588093], 0x60
imul qword [rsp + rax - 0x16]
xor eax, dword [rsp + rsi - 0x1c160f]
ror ebp, 3
lea rax, [rdi*2 + 0x3b1b5829]
imul qword [rsp + rsi*2 - 0x382c35]
mov qword [rsp + rdi - 0x70588092], r10
shl dword [rsp + rsi*4 - 0x705874], 0x15
xor dword [rsp + rdi - 0x70588092], ebp
or word [rsp + rdi - 0x705880a0], si
cdq
lea rcx, [rsi*2 - 0x4cc8f3f9]
mov r10, qword [rsp + rsi*4 - 0x705870]
dec ecx
mov r9d, edx
xadd edi, eax
movsxd rbp, ebp
xor di, ax
bt rax, rdx
setb cl
adc r8, rbp
push rdi
call fcn.140c29289
ror esi, 1
sar edi, 0x45
sbb esi, 0x9d0c3f24
sal rcx, 0xdc
sar word [rsp + rax*2 + 6], 0x6f
rol esi, 3
pop rax
mov qword [rsp + rax], r10
dec bp
xor dword [rsp + rax], esi
bt ebp, r9d
pop r10
lea r9, [r9 + rcx*4 - 0x7af5d2fe]
btr rbp, rdx
neg cx
movsxd rsi, esi
cwde
and edi, r9d
adc r8, rsi
call fcn.140c0e685
movzx eax, byte [rbx - 1]
mov r9d, 0xa7a6c331
add r9d, r9d
xor al, r10b
movsx esi, r9w
dec al
or r9, rsi
lea rsi, [rsi + r9*4 + 0x2e90398b]
lea rbp, [r9 + rsi*8 + 0x1385271f]
not al
sbb r9w, 0xce09
lea rcx, [rsi*8 + 0x3f02ca1f]
ror al, 1
sar si, 0x22
seta bpl
sbb al, 0x30
sal r9w, 0x27
ror cl, 0xa1
xor r10b, al
add ecx, ecx
bts esi, 0x22
add rax, rsp
mov r9, qword [rax + rsi - 0x2e8df65d]
dec si
mov eax, esi
mov qword [rax + r11 - 0x2e8df664], r9
movzx r9d, cl
push rax
mov edx, dword [rsi + rbx - 0x2e8df661]
jle 0x140c2b008
lea rbx, [rsi + rbx - 0x2e8df661]
lea r9, [rcx*4 - 0x46469679]
and qword [rsp + rcx - 0x66e32bc6], rcx
jno 0x140c08147
Function at 0x140c2c1d0
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
pushfq
push r10
lea rdx, [r11 + r11*4 - 0x1a59dc44]
xchg edx, r8d
movzx edi, r8w
movabs r8, 0
add rbp, 0x64926f00
mov r10d, ecx
mov qword [rsp + r9 - 0xba], r8
bt r9d, r11d
setb cl
mov ebx, dword [rsp + r9*2 - 0xf4]
bt edi, 0xa9
ror ebx, 2
bswap edi
not cx
dec ebx
bswap ebx
sub ebx, 0x8c1649bf
add rdx, 0x2f0913b8
btc dx, 0xbb
not ebx
jae 0x140c32253
mov qword [rsp + r9*2 - 0x174], rbx
movzx r8d, r11w
jmp 0x140c27ec1
shl di, 0x43
dec ebx
xchg r11b, r10b
add rbx, r8
and r11, 0xfffffffff1977085
movsx eax, bpl
shl r10d, 0x8c
lea ebp, [rcx - 0x338690ff]
cdqe
cwde
sal rbp, 0x18
bt rdx, 0xa
adc rbx, rbp
lea r8, [rdx + r11*2 - 0x13675afa]
sub r11, rdi
mov qword [rsp + rcx*2 - 0x670d2386], rsi
xor di, 0xdabe
mov qword [rsp + r9 - 0x3a], r12
mov r11, rsp
bts r9d, edx
lea rdi, [r11 + r9*8 - 0x4820]
movzx esi, dl
jae 0x140c2fe0c

Function at 0x140c2d0fc
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
cmp ebx, 1
push 0x52b94b9b
push 0x3111a0b4
jmp 0x140c1c0d8
jmp 0x140bf4ec1

Function at 0x140c34c47
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
not ebp
dec si
sbb rsi, 0xffffffffae119d06
jno 0x140c20179
bswap ebp
bt di, 0xac
sal rsi, 0x20
not ebp
push r10
xor dil, 0x29
btr edi, eax
sal rdi, 9
xor dword [rsp + rax - 0x7a810000], ebp
movsx ecx, dx
mul al
pop r10
lea rcx, [rdi + rdi*8 - 0x7c4141c8]
movsxd rbp, ebp
xadd rdx, rsi
sub edx, eax
seto dl
add r8, rbp
xor dl, dh
cwd
rol rax, cl
xor rsi, r8
jmp rsi
mov qword [rsp + 8], r15
mov ebp, 0xea14e3ba
mov qword [rsp], r9
push rdi
call fcn.140c332cd
mov eax, 0x7a85cf32
mov rsi, qword [r11 + rax - 0x7a85cf32]
movzx dx, byte [rsi + rax - 0x7a85cf32]
btc eax, eax
lea r11, [r11 + rax - 0x7a81cf2c]
mov ebp, 0xea267191
lea rsi, [rax*2 - 0x454ebb5d]
mov word [r11 + rax - 0x7a81cf32], dx
setb al
xadd sil, bpl
lea rdx, [rax + rbp*4 - 0x537a6e80]
lea rbx, [rbx + rax - 0x7a81cf05]
cdq
cbw
shr rsi, 0xda
mov ebp, dword [rbx + rsi - 0x2b]
sar ax, 0xe1
xor ebp, r10d
bswap ebp
cbw
dec ebp
bt rdx, rdx
movsx edi, si
jae 0x140c1f4ae