joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401bdfa2
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + rdx - 0xccafff0], r11
xor dword [rsp + rdx*2 - 0x1995fff0], edi
mov r11, qword [rsp + rdx*2 - 0x1995fff0]
xor cx, r10w
push rsi
call fcn.1400a123f
bswap r9d
lea r9d, [r9 + r10 + 0x7794766e]
mov edx, r10d
ror r9d, 2
lea rsi, [rax*4 - 0x7fdd8cd8]
ror rax, 0x74
imul word [rsp + r10*2 - 0x12741]
neg r9d
xor edx, r10d
mov qword [rsp + r10 - 0x93a1], r11
xor dword [rsp + r10*2 - 0x12742], r9d
imul eax, eax
mov r11d, esi
cbw
pop r11
mov ecx, esi
call fcn.140228a2c
mov dx, word [rbp + riz]
mov ebx, 0xfd95a638
add rbp, 2
lea r8, [rbx*8 - 0x3ff220e7]
sub r10, 2
movzx ecx, bx
sal rcx, cl
movzx r11d, word [r10 + riz]
movzx esi, cx
mov eax, ecx
xor r11w, r9w
cdqe
inc si
add r11w, 0x615
xor r11w, 0x1a20
shr si, 0xac
je 0x14014a60e

Function at 0x1401c05bc
Capabilities:
Encode data using base64

Disassembly:
mov rax, qword [r8 + rbx*4 - 0x21c]
movzx esi, bl
lea r8, [r8 + r10 - 0x81]
not rdi
call fcn.14013d421

Function at 0x1401c200e
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + rsi*2 - 0x4e216b2e], r8
btc eax, ebp
movsx ebx, sil
xor dword [rsp + rsi*2 - 0x4e216b2e], edx
pop r8
movsxd rdx, edx
add rdi, rdx
ror rbx, 0xfa
sub ecx, ecx
mov rax, qword [r10 + rsi - 0x2710b597]
movsx edx, bl
call fcn.14021c9f9
mov r10d, 0x979f2ab8
lea rax, [r10 + r10*2 - 0x3fd3726e]
movsx r9d, r10w
mov r10d, dword [rbx + r9*8 - 0x155c0]
jmp 0x14021fa48
mul rax
lea rbx, [rbx + r9 - 0x2ab4]
movzx esi, r9w
movsx ecx, dl
not dl
xor r10d, r11d
neg r10d
xor rcx, rsi
rol r10d, 1
not r10d
neg r10d
cwde
push r11
mov r8d, esi
dec rdx
call fcn.14011d5dd

Function at 0x1401c3ff7
Capabilities:
Encode data using base64

Disassembly:
movsxd r11, r11d
adc edx, edx
adc r9, r11
mov edi, dword [r8 + rdx*2]
ror dx, 0x2d
movsx r11d, cl
mov qword [rsp + rdx], r11
mov ecx, dword [r8 + rdx + 4]
lea r8, [rdx + r8 + 4]
imul sil
jb 0x1400abacb
Function at 0x1401c4033
Capabilities:
Encode data using base64

Disassembly:
jge 0x1400f7d51
push 0xffffffffceb4721c
mov ebx, dword [rsp + 1]
movzx ecx, bl
mov ebx, dword [rcx + r10 - 0x72]
lea r10, [r10 + rcx*8 - 0x38c]
movzx esi, byte [rsp + rcx*4 - 0x1c8]
xchg dword [rsp + rcx*2 - 0xe1], esi
xor ebx, ebp
or rcx, qword [rsp + rcx - 0x72]
inc ebx
jmp 0x14011ff76
and r11d, ebx
sal rsi, cl
push rdx
ror dil, 0xa1
mov dword [r8 + rdx*2 - 0x45a9fffc], r11d
mov qword [rsp + rdx - 0x22d4fffe], r9
ret 8
btr r9, rcx
lea rdi, [rcx + rdi - 0x8693]
lea rax, [rcx + rcx*8 + 0x331341a8]
not r9d
xor r8d, r11d
ror r8d, 1
shr ax, 0xe9
movsx r10d, ax
lea r8d, [r8 + r9*2 - 0x468dbcae]
movsx esi, ax
rol r8d, 3
mul eax
neg r8d
push r11
cwde
xor dword [rsp + r9 - 0x49e37968], r8d
pop r11
movsxd r8, r8d
call fcn.140099635
push r10
xchg r11w, cx
xor dword [rsp + r11 - 0x30854f47], esi
rol ecx, cl
adc r9d, r9d
pop r10
jns 0x1400be6f8
xchg bpl, sil
xor r8b, r9b
imul dl
not edx
shl dil, 0x43
ror r8b, 1
add dl, dh
neg dx
not r8b
sub esi, 0xf90bbb0d
xor ax, 0xbaa0
xor r8b, 0xa3
xor dil, dl
and dx, di
or al, bpl
not r8b
cbw
cqo
dec r8b
xor r9b, r8b
call fcn.1401342c7
pop r8
mul eax
movsxd rcx, ecx
shr esi, 0x6c
adc rdi, rcx
sal ax, 0x43
sub r11, rbp
shl bpl, 0x67
jmp rdi
ror byte [rsp + 3], 0x42
ror ebx, 1
and cl, 0x83
neg cl
adc ebx, 0x629c6e2b
rol ebx, 3
pop rax
dec ax
push rbp
xor cl, cl
xor dword [rsp], ebx
pop rbp
sar rcx, 0xfb
movsx edi, si
push rdi
movsxd rbx, ebx
ror dil, 0x87
mov edx, dword [rsp + rcx*2 + 4]
lea r11, [rdx*4 + 0x98b2698]
add r9, rbx
mul eax
mov r11d, dword [r8 + rcx*4 + 4]
mul ecx
rol rax, 0x8f
mov ebx, dword [rcx + r8 + 5]
lea r8, [r8 + rcx*4 + 8]
rol di, 0x2e
btc di, 0xb2
sub cl, byte [rsp + rcx + 1]
not r11d
btc ecx, 0x95
cwd
not ebx
shl dl, 0x61
jb 0x1400c9da2
mov ebp, 0x16330e97
call fcn.1400fb049
mov rax, qword [rsp + 0x78]
movzx r8d, byte [rsp + 0x3c]
push rsi
lea r14, [r14 - 0x5d5e2873]
mov r8, qword [rsp + r8*2 - 0x176]
bswap r14
mov qword [rsp + 0x88], r14
mov r14, qword [rsp + 0x90]
call fcn.14019f705
inc si
xor r8w, si
lea rsi, [rsp + rsi + 0x10]
sal ebx, 0xf5
push rbx
mov rbx, qword [rsi + r11 - 0x45377d23]
btc cx, 0x99
shl r11b, 0x41
xadd rcx, r11
lea r10, [r10 + r11 - 0x595e50f7]
mov qword [r10 + r11 - 0x595e50ef], rbx
imul ax, cx
or rbp, qword [rsp + r11 - 0x595e50ef]
shr dword [rsp + rax - 0x19d412e4], cl
pop rbp
pop rbp
pop rcx
je fcn.14021d268
mov r9d, 0xb61c8697
mov r10, qword [rbp + riz]
mov si, word [r10 + riz]
movzx ecx, r9w
and rcx, rcx
movsx r8d, r9b
lea rbp, [rbp + rcx*8 - 0x434b2]
mov word [rbp + rcx*2 - 0x10d2e], si
mov r8d, dword [rdi + rcx*2 - 0x10d2e]
ja 0x1400777b1
mov esi, 0xb81b26bb
mov esi, dword [r10 + riz]
mov ebx, 0x46859b2d
lea r10, [r10 + rbx - 0x46859b29]
mov r11d, ebx
xor esi, ebp
movzx edx, r11b
xor esi, 0xd1add38f
movzx edi, r11b
sub esi, 0xcc38aabb
rol r11, 0x7e
not ebx
not esi
lea rax, [rdi + r11*4 + 0x2a01eb7]
cdq
bswap esi
rol esi, 1
shl bl, 0x26
push rbp
rol rdx, 0x5b
xor dword [rsp + r11*4 - 0x46859b2c], esi
xchg rdi, r11
rol rbx, 0x69
cdq
pop rbp
and bx, 0x9daa
bt ebx, 0x1f
lea rcx, [rdx + 0x99ead1f]
movsxd rsi, esi
neg dl
adc r9, rsi
call fcn.140237627
Function at 0x1401ca7a5
Capabilities:
Encode data using base64

Disassembly:
call fcn.14010f9f6
push rsi
jmp 0x1401841bd

Function at 0x1401cded8
Capabilities:
Encode data using base64

Disassembly:
push rdx
pop r8
xor dword [rsp + r11 - 0x7c], eax
mov r9, qword [rsp + r11 - 0x7c]
neg rdi
mov qword [rsp + r11 - 0x7c], rdx
and edi, dword [rsp + r11 - 0x7b]
movsxd rax, eax
adc rbp, rax
and cl, ch
lea r8, [rcx + rdx*8 - 0x1546164a]
xor r8b, 0xa2
lea r10, [r10 + r11*2 - 0x10a]
mov qword [rsp + r8 + 0x153de064], r8
sbb r8, rdi
movzx r8d, word [r10 + r11*4 - 0x210]
sal r11b, 0x84
neg dx
xor r8w, r9w
neg dword [rsp + r11*2 - 0x7b]
dec r8w
xchg ebx, r11d
dec dword [rsp + rbx*4 - 0xf7]
movsx eax, word [rsp + rbx - 0x3c]
neg r8w
neg qword [rsp + rbx - 0x38]
sub r11b, 0x18
inc r8w
pop rdi
mul byte [rsp + rbx - 0x3e]
rol r8w, 1
or word [rsp + rbx*2 - 0x7f], 0x472c
xor r9w, r8w
add al, 0x31
setno dl
lea r8, [rsp + r8 + 8]
add rcx, rdx
mov ecx, dword [r8 + rbx - 0x40]
or edx, ebx
not edx
js 0x1401e628e
lea rsi, [rsi + rbx - 0x44]
setge byte [rsp + rbx - 0x40]
xchg qword [rsp + rax*4 - 0x3f8c8], r11
mov dword [rsi + rbx*2 - 0x80], ecx
mov ecx, dword [rsp + rbx - 0x3d]
add cx, 0x1e28
pop rbx
jno fcn.140158ba3
mov ecx, dword [r10]
mov eax, 0x2a96b999
lea rdi, [rax + rax*8 - 0x63d373d0]
lea r10, [r10 + rax*2 - 0x552d732e]
mov edx, 0xe185ea14
call fcn.1401c1440

Function at 0x1401cef36
Capabilities:
Encode data using base64

Disassembly:
add r8, rdi
mov qword [rsp + rcx - 0x4b800000], rcx
mov qword [rsp + rdx - 0x19c98], r8
ret 0x18
bswap esi
not esi
cwd
setle dl
mov ecx, dword [rsp + 3]
rol esi, 3
not dl
not esi
cdqe
call fcn.1400a1af6
shr rax, 0x11
jp 0x14007eafa
sub r11, rax
mov esi, dword [r10 + riz]
shl rax, 0x25
pop rbx
push r8
xor esi, r9d
xor dx, bx
mul dx
ror dl, 0x84
rol esi, 3
lea esi, [rsi + rbx - 0x1e0c186c]
cbw
ror esi, 1
shr rdx, 0x81
jle 0x140116318

Function at 0x1401d2268
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
add si, si
sar sil, 0x21
rol r11d, 3
mov qword [rsp + rsi - 0xbb26], 0xffffffffe4a40c2b
bswap r11d
movsx edi, ax
cdqe
rol r11d, 1
mov edx, 0x1d9c31ba
shl dx, 0xca
lea r11d, [rsi + r11 - 0x61a9d7b7]
bt bx, di
bswap r11d
sal ax, 0x8e
neg r11d
shr rdi, 0x61
lea r11d, [r11 + rsi*2 - 0x481ec70b]
not r11d
dec r11d
movzx ecx, bx
neg di
neg si
mov qword [rsp + rbx - 0x6f3b5da7], rbp
rol dl, cl
xor dword [rsp + rbx - 0x6f3b5da7], r11d
movsx ebp, di
pop rbp
xor ecx, ebx
bts ecx, ebx
movsxd r11, r11d
bswap esi
xor rdi, 0xffffffffb986be0e
call fcn.1401cfd02

Function at 0x1401d4108
Capabilities:
Encode data using base64

Disassembly:
mov qword [r9 + r10*4], rdx
mov qword [rsp + r10*2], rsi
sub word [rsp + r10*2 + 5], cx
call fcn.14018c028
mov ebx, 0xed394928
movsx r11d, bl
mov ebx, dword [rsi + r11 - 0x28]
jmp 0x1400a5e10
Function at 0x1401d4623
Capabilities:
Encode data using base64

Disassembly:
neg r8
movsxd rcx, ecx
adc rdi, rcx
mov eax, dword [r8 + rbp]
mov r9d, dword [rbp + r8*4 + 4]
lea rbp, [rbp + r8*2 + 4]
mov qword [rsp + r8], r8
movsx ecx, r8w
and eax, r9d
not eax
sub edx, edx
jnp 0x1400bef58
mov qword [rsp + r8 + 0x10], 0x3e030487
mov dword [rbp + r8], eax
neg word [rsp + r8*2 + 0xe]
dec dword [rsp + r8*4 + 9]
adc qword [rsp + r8], rdi
ret 0x10

Function at 0x1401dbe98
Capabilities:
Encode data using base64

Disassembly:
sub r10, 2
mov qword [rsp], rdx
add word [rsp], dx
movzx edx, word [r10 + riz]
mov edi, dword [rsp + 1]
xor word [rsp + rdi*2 - 0x1314f22], di
xor dx, r9w
lea rax, [rdi - 0x25d7ee47]
sal dword [rsp + rdi - 0x98a792], 0x66
shl edi, 0xd1
ror dx, 1
xadd byte [rsp + rax*2 + 0x4a7e8d6b], dil
xor dx, 0xb88f
mov ebp, dword [rsp + rax*2 + 0x4a7e8d6a]
movzx r8d, byte [rsp + rax + 0x253f46b5]
inc dx
rol dx, 1
sal byte [rsp + r8*2 - 0xfb], 0xc6
seta dil
inc dx
rol qword [rsp + rdi - 0x4f240000], 0xdb
btr eax, 0x32
xor r9w, dx
lea r11, [r11 + r8*4 - 0x202]
or r8b, bpl
mov word [rdi + r11 - 0x4f240000], dx
neg qword [rsp + rdi - 0x4f240000]
lea r10, [r10 + rdi - 0x4f240004]
xadd word [rsp + r8*8 - 0x3fd], bp
neg ax
mov esi, dword [r8 + r10 - 0x80]
cdqe
pop r8
bswap edi
xor esi, r9d
rol eax, 0x8e
neg esi
cdqe
jmp 0x14009b274

Function at 0x1401df2f9
Capabilities:
Encode data using base64

Disassembly:
bswap esi
adc bl, 0xb
neg esi
mov word [rsp + r9 - 0x6af6], ax
xchg byte [rsp + r9 - 0x6afa], al
sub r11w, 0x77be
mov qword [rsp + r9 - 0x6af1], r10
movsx r10d, byte [rsp + r9 - 0x6af9]
xor dword [rsp + r9*2 - 0xd5f2], esi
call fcn.1401efbd5
call fcn.1400dcedb
mov qword [rsp + rsi - 0x56839c8e], 0x1a9bd617
neg qword [rsp + rsi - 0x56839c86]
lea rbp, [rsi + rbp - 0x56839c8a]
shld bx, dx, cl
not byte [rsp + rsi - 0x56839c83]
movsx r9d, word [rsp + rsi - 0x56839c87]
mov word [rbp + r9*2 - 0xd600], bx
push rsi
mov ebx, esi
lea rax, [rsi*8 - 0x53c2d0f4]
mov esi, dword [r8 + r9 - 0x6b00]
lea r8, [r9 + r8 - 0x6afc]
inc r9b
bswap rax
cqo
xor esi, r10d
ror esi, 2
not esi
bswap esi
not al
movzx r11d, bl
shl r11, 0x78
dec esi
mov qword [rsp + r9 - 0x6af1], r9
bts r11w, r9w
jae 0x1401ce975

Function at 0x1401df52a
Capabilities:
Encode data using base64

Disassembly:
add sil, 0x1c
not byte [rsp + rdx*2 - 0x7b2326]
xor eax, ebp
lea eax, [rdx + rax + 0x7475063]
lea rbx, [rsi + 0x5725e4bb]
not eax
ror eax, cl
call fcn.14011ec1f
Function at 0x1401df54e
Capabilities:
Encode data using base64

Disassembly:
movsx eax, bx
sub word [rsp + rcx - 0x610fe9a2], 0xda91
mov esi, dword [rcx + r9 - 0x610fe9a5]
setae bl
xor word [rsp + rcx - 0x610fe9a4], 0xefb2
lea r9, [rcx + r9 - 0x610fe9a1]
xor esi, ebp
bt cx, cx
mov r10d, dword [rsp + rbx - 0x610fe8fc]
not esi
shr ebx, cl
movzx edx, ax
xor esi, 0xdb96503
lea rdi, [rdx + r10*8 - 0x4c67c0cc]
pop rcx
lea esi, [rsi + rbx*4 - 0x41b4df36]
cdqe
neg esi
call fcn.1400ac339
mov ecx, ebx
mov byte [rcx + rax - 0x610fe9a5], sil
jne 0x1400772d2
mov qword [rsp + rdx - 0x7e8c], rbp
btr edx, eax
bts si, 0xad
xor dword [rsp + rdx*2 - 0xdd18], edi
pop rbp
ror bx, 0xa
cwd
movsxd rdi, edi
movsx r11d, ax
add r9, rdi
dec al
xadd dx, si
mov edi, 0x48232b27
adc sil, byte [r10 + rdx*2 - 0x4118]
lea r10, [r10 + rdx*4 - 0x822f]
xor sil, bpl
push rbx
rol sil, 1
xor sil, 0x19
neg sil
mul dword [rsp + rdx - 0x2089]
adc sil, 0x3c
cdq
call fcn.140225868
jmp 0x14021df4e
mov qword [rsp + rax*2 - 0x1fe], 0xffffffffc53e0db5
sub si, 0x53a2
rol word [rsp + rax*2 - 0x1f1], 0xaa
cwde
xor r9w, si
shl dword [rsp + rax*4 - 0x3f6], cl
shl cx, 0x22
lea rsi, [rsp + rsi + 0x10]
mov r8d, dword [rsi + rax - 0xff]
shl dword [rsp + rax - 0xf3], cl
idiv dword [rsp + rax*8 - 0x7f0]
sar r11d, 0x69
lea rbp, [rax + rbp - 4]
mov dword [rax + rbp], r8d
call fcn.1401c71bd
mov ebx, 0x610fe9a5
push rbx
mov rax, qword [r11 + rbx - 0x610fe9a5]
mov sil, byte [r11 + rbx - 0x610fe99d]
dec byte [rsp + rbx - 0x610fe9a2]
lea r11, [rbx + r11 - 0x610fe99b]
jg 0x14016ed43
mov ecx, 0x10276824
lea r8, [rcx + rcx*2 + 0x269ef104]
lea r10, [r10 + rcx*4 - 0x409da094]
mov eax, dword [r10 + rcx*4 - 0x409da090]
btr rcx, 0x1b
push r8
xor eax, r9d
lea rsi, [rcx + r8*4 + 0x3ba4a698]
bswap eax
rol eax, 2
movsx ebx, si
and ebx, esi
lea rdx, [r8*4 + 0x7fbf9d27]
lea eax, [rcx + rax + 0x6e8bc0de]
call fcn.14009a7c5
mov edi, dword [r10]
add r10, 4
mov eax, 0xb4b67a8c
xor edi, ebp
bts ax, 0x8a
mov ebx, eax
neg edi
bswap edi
movzx edx, bx
movzx esi, dl
ror edi, 2
push rsi
dec dword [rsp + rsi*4 - 0x22f]
lea edi, [rdx + rdi + 0x1e3d91a0]
ror qword [rsp + rdx - 0x7e8c], 0x85
and si, bx
jae 0x140178dec
mov edi, 0x1f1c7215
movzx dx, byte [r8 + rdi*2 - 0x3e38e42a]
mov sil, byte [rdi + r8 - 0x1f1c7213]
mov ebx, 0xd2232422
movzx eax, dil
mov ecx, edi
lea r8, [rdi + r8 - 0x1f1c7213]
movsx r10d, bx
not r10d
and dl, sil
bt bx, 0x12
neg r10w
not dl
mov word [r8 + rdi*2 - 0x3e38e42a], dx
call fcn.1400b9871
mov r10d, 0x9ebce927
lea rax, [r10 + r10 + 0x5cb7da0c]
mov edi, dword [r9 + riz]
movsx ecx, ax
lea r10, [r10 - 0x784d3eef]
lea r9, [r9 + r10*2 - 0x4cdf546c]
xor edi, ebp
bswap edi
xadd rax, rcx
lea edi, [rdi + r10*2 + 0x1ea70135]
mov esi, ecx
movzx ebx, sil
rol edi, 1
lea rax, [rsi + r10*4 + 0x17962b8a]
lea edi, [rdi + r10 - 0x74224b67]
push rbp
xor dword [rsp + rbx - 0x5a], edi
pop rbp
imul rsi
movsxd rdi, edi
shr eax, cl
xadd edx, ecx
adc r8, rdi
sal r10, 0x8f
cqo
adc edx, dword [rax + r11 - 0x1e]
call fcn.1400dfffe
Function at 0x1401e0852
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + r10*8 - 0x178d0], r11
movsx edx, sil
movabs rdi, 0
movzx r9d, sil
or r9b, sil
mov qword [rsp + r10 - 0x2ee2], rdi
push r9
movsx ebx, r10b
mov r9d, dword [rsp + r10*4 - 0xbbe0]
movzx r11d, word [rsp + r8 - 0x66d5c3bd]
movzx ecx, byte [rsp + r8 - 0x66d5c3be]
inc word [rsp + r8 - 0x66d5c3bd]
lea r9d, [r9 + r10*2 - 0x1bb1c155]
or ebp, dword [rsp + r10*2 - 0x5e31]
pop rax
rol r9d, 1
lea r9d, [r9 + r10 - 0x572b692c]
jmp 0x14007e30c

Function at 0x1401e2376
Capabilities:
Encode data using base64

Disassembly:
push rbx
mov qword [rsp + rdi - 0x1a438], 0xffffffffbebf6ba3
pop rdx
pop rcx
jmp fcn.140158ba3

Function at 0x1401ea482
Capabilities:
Encode data using base64

Disassembly:
setae byte [rsp + rax + 0x67d282d1]
xor dl, r9b
mov qword [rsp + rax + 0x67d282c4], rax
dec dl

Function at 0x1401edab2
Capabilities:
Encode data using base64

Disassembly:
xor bl, r10b
rol bl, 1
neg bl
xor bl, 0x2e
not byte [rsp + r9 - 0x255]
btc rdx, rcx
call fcn.1401512f5
mov rdi, qword [rsp + 0x68]
mov r8, qword [rsp + 0x70]
lea rsp, [rsp + 0x78]
ret
lea r8, [r8 + r9*2 - 0x4af]
mov qword [rsp + r9*4 - 0x960], rdx
jno 0x14016824d
mov r13d, 0x2bb37730
movsx edi, r13b
movsx esi, di
mov rsp, r10
pop r12
movsx r14d, si
call fcn.1400b2a62

Function at 0x1401ef651
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + rax*8 + 8], r9
cdqe
jb 0x14022c88e
xor dword [rsp + rcx - 0x50a02e7c], r8d
mov r9, qword [rsp + rcx - 0x50a02e7c]
ror rbp, cl
bt si, dx
lea rsi, [rdx + rsi*8 + 0x3b300d3f]
movsxd r8, r8d
add rbx, r8
lea r10, [r10 + rdx - 1]
btc dx, dx
setae cl
mov qword [rsp + rcx - 0x50a02e01], 0x5589939d
xor al, byte [r10 + rax*2]
ror rbp, cl
xor al, r9b
xor al, 0xb0
mov qword [rsp + rdx*2 + 6], rcx
mov r8d, dword [rsp + rdx*2 + 7]
jmp 0x1401e57cf

Function at 0x1401f035a
Capabilities:
Encode data using base64

Disassembly:
lea rdi, [rdi + r8 - 0x1d28889d]
xor ax, r11w
xor ax, 0x1d84
rol r8d, 0x27
sbb r8b, 0x90
sbb ax, 0xb633
movzx esi, r10w
xor ax, 0xd0b4
mov edx, esi
jmp 0x140114092
not r8d
rol r8d, 1
bts dx, 0x38
lea r8d, [r8 + rdx*2 - 0x16a57a56]
call fcn.1400a76bb
mov r8d, 0x1d28889f
push r8
mov r10d, dword [rsp + r8 - 0x1d28889d]
movzx eax, word [rdi + r8 - 0x1d28889f]
jmp 0x14015d7ee

Function at 0x1401f4e53
Capabilities:
Encode data using base64

Disassembly:
dec cx
shr r10w, 0xf
xor cx, 0xdcb2
mov qword [rsp + r10], 0xffffffffea87800a
mov eax, dword [rsp + r10 + 9]
movsx esi, r10b
sub cx, ax
cqo
ror cx, 1
ror byte [rsp + rdx*2 + 7], 0x83
pop rbx
xor bp, cx
lea rcx, [rsp + rcx + 8]
shl r10d, 0xcd
jne 0x140081346
bts dx, 0x81
mov word [rcx + rbx*2 + 0x2af0ffec], di
mov ebx, dword [rbx + r9 + 0x15787ff6]
bts si, 0x9d
lea r9, [r9 + rdx*2]
cdq
sub esi, esi
movsx edi, dl
xor ebx, ebp
bswap ebx
div qword [rsp + rdx]
jmp 0x1400ab4e6
Function at 0x1401ffe5d
Capabilities:
Encode data using base64

Disassembly:
btr rax, rsi
mov qword [rsp + rdx], r8
ret 0x10
pop rsi
adc rsi, 0x50115
jmp rsi
pop r10
pop r8
pop rcx
xchg r13d, r11d
lea rax, [r11 + r13 - 0x46558cd3]
jmp 0x1401d7e40
pop r14
xchg r13d, r9d
xchg r12, r13
pop r13
not r9
pop r12
push r11
cwde
mov rbp, qword [rsp + r9 + 0x5d1d]
lea r9, [rax + r11 - 0x52fccc61]
pop r11
mov rbx, qword [rsp + r11*2 - 0x44]
call fcn.1401aa6ef
mov qword [rsi + rbx - 0x7a55e26d], rdi
mov edi, r8d
bts r8, rcx
jb fcn.140158ba3
not r11d
lea r11d, [rsi + r11 - 0xbdf183]
xor r11d, 0x89048ca8
bswap r11d
dec dl
lea r11d, [r11 + rsi - 0x17cbc074]
cwde
cmovle eax, ebx
ror al, 0xe3
push rbp
jb 0x14014bfbc
xor dword [rsp + rbx*2 - 0xf6], r11d
and rdi, rax
pop rbp
sub al, dil
movsxd r11, r11d
lea rcx, [rax + rdx*4 + 0x6197b73e]
adc r9, r11
sal rax, cl
shr cl, 0x21
inc rcx
or rax, r9
jmp rax
sal edx, 0x4e
xor ebx, 0x323acfb5
xchg word [rsp + rdx + 0xc], r10w
inc ebx
ror ebx, 2
inc eax
push rax
mov qword [rsp + rdx*4 + 0x18], rbp
xor edi, 0x9aaa2f0b
xor dword [rsp + rdx*2 + 0x18], ebx
rol r10, 0xaa
mul edi
mov rbp, qword [rsp + rdx*2 + 0x18]
movsxd rbx, ebx
mov qword [rsp + rdx*8 + 8], 0x488dd031
pop rsi
adc esi, dword [rsp + rdx*2 + 0xa]
adc r8, rbx
neg r10w
jbe 0x1401404a9
mov edi, dword [rcx + r8 - 0x6608da2f]
movzx ebx, cl
lea rdx, [rcx + rcx*4 - 0xd73f65c]
mov cl, byte [r8 + rbx - 0x2b]
lea r8, [rbx + r8 - 0x2d]
lea rsi, [rdx + 0xe301b1e]
shr edi, cl
xadd bl, dh
mov r11d, ebx
mov dword [r8 + rbx*2 - 0xf6], edi
adc r11d, edx
lea rax, [rdx + rdx*8 + 0x69b8f2a9]
mov r11d, dword [r10 + rbx - 0x7b]
lea r10, [r10 + rbx*8 - 0x3d4]
xor r11d, ebp
btr esi, ebx
movzx edi, sil
sal edi, 0x50
rol r11d, 1
sub esi, ebx
not rdi
jnp 0x1401ec43b
mov ecx, 0xb7afe2a0
movzx eax, cl
mov esi, dword [r8 + rax*8 - 0x500]
sal ax, 0xc
lea r11, [rax + rax*4 - 0x76d1fa7f]
push r11
lea r8, [r8 + rax + 4]
inc byte [rsp + rax + 5]
movzx r9d, cl
xor esi, r10d
sar rax, 5
neg word [rsp + rax*2 + 4]
bswap esi
not ax
pop rax
lea esi, [rsi + r11 - 0x1c5c23a4]
not rax
dec cx
rol esi, 1
cqo
bt edx, ecx
not edx
sbb esi, edx
cqo
dec al
not esi
lea esi, [rsi + r11*2 - 0xb718941]
shl rdx, cl
dec cl
btc r9d, 0
not esi
bswap esi
and r9b, cl
mul edx
lea esi, [rsi + rcx + 0x36e3d97c]
idiv rcx
call fcn.1401ca793
mov r10d, 0x3dbae226
mov rsp, rbp
movzx r12d, r10b
lea rcx, [r12 + 0x4d333ca3]
popfq
pop rdx
pop rdi
mov r9d, 0x221d5d14
movsx r13d, r12b
pop rsi
pop r15
movzx r11d, r9w
jmp 0x140196205

Function at 0x140201a38
Capabilities:
Encode data using base64

Disassembly:
movzx edi, sil
bswap r10d
imul bx
mov qword [rsp + rsi - 0x60ab832b], 0xfffffffffc945ea3
lea r10d, [r10 + rsi - 0x31a5fa87]
sar byte [rsp + rsi - 0x60ab831f], 7
neg qword [rsp + rsi - 0x60ab8324]
rol r10d, 1
shr qword [rsp + rsi - 0x60ab8323], 0x1d
inc r10d
ror edx, 0xb5
sbb al, 0x1d
inc al
not r10d
shl rbx, 0x76
cbw
shl qword [rsp + rsi - 0x60ab8323], 0x9b
neg r10d
mov qword [rsp + rdx - 0x7fd0ff8], rbp
shl dword [rsp + rdx - 0x7fd0ffe], 0x2e
xor dword [rsp + rsi - 0x60ab8323], r10d
inc sil
inc byte [rsp + rsi - 0x60ab8326]
inc rdx
mov rbp, qword [rsp + rsi - 0x60ab8324]
call fcn.14021a4a0
Function at 0x140207ca9
Capabilities:
Encode data using base64

Disassembly:
lea rsi, [r11 + 0x2836cc19]
or bx, word [rbx + r10]
xadd word [rsp + 2], si
adc r10, 1
xor bx, bp
add bx, si
and r11d, r11d
mov eax, dword [rsp + 2]
xor bx, si
shr si, 0x21
ror r11b, 0xa4
bt si, si
xor bx, 0xe580
neg bx
ror bx, 1
movsx edx, word [rsp + rax*4 - 0x32e87]
cqo
not bx
lea rax, [rsi*2 - 0x65c6e358]
xchg dword [rsp + rdx*8 + 3], r11d
sub rax, 0xd8eb10c
dec bx
xor bp, bx
sar r11d, 0x10
lea rcx, [rsi + rax*8 + 0x319e4a36]
inc edx
lea rbx, [rsp + rbx + 8]
xadd dx, r11w
cmovle eax, esi
idiv ax
mov byte [rbx + r11*2 - 2], dil
mov eax, dword [r10 + r11*2 - 2]
movzx edi, dx
lea r10, [r10 + r11*4]
xor eax, ebp
not dl
call fcn.140119c30
mov qword [rsp], rcx
ror r11w, 1
shr qword [rsp], cl
adc cl, 0x3b
not r11w
movzx ebx, dx
or bx, 0x6cb9
sal rbx, 0x99
adc r11w, 0x6b9f
or dx, 0x3990
not r11w
add word [rsp + 3], 0xd7ba
adc r11w, 0x3507
movsx edi, byte [rsp + 2]
and qword [rsp + rdi*4 - 4], rbx
not r11w
neg r11w
lea rdi, [rbx + rcx*4 - 0x1e7cc746]
shr di, cl
dec rcx
xor r9w, r11w
dec cl
mov word [rsp + 4], cx
xchg r8, rbx
sub rsi, 2
mov word [rsi + riz], r11w
push rdi
xor qword [rsp + 8], 0xffffffffce8f4736
sub r8, rdx
sbb r10, 4
mov ebx, dword [r10 + riz]
xor ebx, r9d
ror ebx, 2
neg qword [rsp + 8]
inc edx
inc ebx
bswap ebx
dec ebx
movsx r11d, r8b
xor ebx, 0xdbbdae8f
lea rax, [r8 + r11*2 + 0x11972127]
dec dword [rsp + rdx - 0x343e39b5]
idiv rcx
mov qword [rsp + r11 - 0x44], r9
xor dword [rsp + r11 - 0x44], ebx
dec cl
mov r9, qword [rsp + r11 - 0x44]
and r11w, dx
mov qword [rsp + r11*2], rdi
movsxd rbx, ebx
xor r8b, byte [rsp + r11*2 - 8]
adc rbp, rbx
neg byte [rsp + r11 + 7]
bts eax, 0x13
pop rax
pop rax
jb fcn.140158ba3
mov edi, 0x29239a07
mov r10w, word [r8 + rdi*2 - 0x5247340e]
mov dx, word [r8 + rdi - 0x29239a05]
xor rdi, 0x7619baa8
movzx ecx, dil
lea rsi, [rcx + rdi*8 + 0x202dbd16]
lea r8, [rdi + r8 - 0x5f3a20ad]
movzx eax, di
rol rsi, cl
add rax, 0x25960219
and r10w, dx
movzx ebx, ax
not r10w
mov word [r8 + rdi - 0x5f3a20af], r10w
call fcn.1402175ff
mov ebx, 0x7b188a8a
movsx r11d, bl
mov di, word [r8 + rbx - 0x7b188a8a]
push r11
lea r8, [r8 + rbx - 0x7b188a88]
shr rbx, 0x66
je 0x1400b9e3a

Function at 0x140209bed
Capabilities:
Encode data using base64

Disassembly:
movzx edx, bx
lea rbp, [rbp + rdx - 0xb026]
jge 0x1401f3653
mov dword [rdx + rbp - 0xb022], eax
jp fcn.1400a6a7c
movzx edx, ax
lea r10, [r10 + rdx*2 - 0x1ed50]
push rsi
movzx r11d, dl
xor ebx, ebp
rol ebx, 1
push rsi
sub dl, byte [rsp + rdx - 0xf6a6]
bt eax, eax
dec ebx
ror ebx, 2
call fcn.14013c2dc
rol dx, 1
sub dx, 0x501c
not dx
rol ecx, 0x62
xor r10w, dx
add rdx, rsp
ror rsi, cl
sbb ebx, esi
mov eax, dword [rdx + rax*2 - 0x3a920000]
lea r9, [rsi + rbx*8 + 0x15bd6438]
jne 0x1401ca707
Function at 0x14020c8e6
Capabilities:
Encode data using base64

Disassembly:
imul r9, rcx
movsxd rax, eax
not r9b
inc r8
lea r10, [r9 + rcx*4 - 0x1444f57]
adc rbx, rax
push rcx
sal r9, 0xe4
xchg word [rsp + r8 - 0x5d6cb402], cx
mov cx, word [rbp + r8 - 0x5d6cb402]
call fcn.140086601
sbb r8d, 0x10104cbf
xor dword [rsp + rax*2 - 0x440002], ecx
movzx r9d, r8w
shl r8b, 0xa7
pop r11
movsxd rcx, ecx
add rbx, rcx
rol r8w, 0x65
xadd r10b, al
jmp rbx
xor edx, r8d
rol bl, 0xe4
shl dword [rsp + rcx*2 - 0x3875d6a4], cl
rol edx, 1
bswap edx
lea r11, [rbp*8 - 0x6bce38ec]
add r11w, ax
dec edx
sub rbx, rbx
xor ax, r11w
sal bp, 0x4a
not edx
mov esi, dword [rsp + rcx - 0x1c3aeb50]
neg edx
shr ax, 0xc8
jne 0x140133a47
sbb r8d, 0xc4938c24
neg rsi
rol r8d, 1
btr rdx, rcx
neg r8d
xadd rax, rdi
push r9
inc cl
lea r9, [rdx + rsi*2 + 0x3b0c4001]
call fcn.140096538
mov r10d, 0x4298be09
movsx esi, r10b
mov eax, dword [r8 + rsi*2 - 0x12]
call fcn.140134c92
adc rsi, rsp
mul ecx
xor bpl, bl
ror bl, 0xa1
mov word [rcx + rsi - 0x1c3aeb53], r11w
lea r9, [r9 + rcx - 0x1c3aeb57]
push rbp
shr dl, 0x25
mov edx, dword [r9 + rcx - 0x1c3aeb53]
jp 0x1401743b0
mov esi, 0x98a11386
movsx eax, sil
movsx edx, sil
mov r10, qword [r11 + riz]
call fcn.1402150a3
pushfq
pop rdi
mov qword [rsp + rsi - 0x70651a8], rdi
movsx edi, si
or sil, sil
mov rsi, rbx
ja 0x140184269
mov ecx, 0x90b1d42d
mov r11w, word [r10 + riz]
add r10, 2
movzx edx, cx
lea r9, [rdx + r9 - 0xd42f]
xchg rdx, rcx
mov esi, 0x400bc125
movzx esi, word [r9 + rcx - 0xd42d]
mov ebx, edx
xor si, r8w
xadd rdx, rcx
movzx ebp, cx
neg si
lea rcx, [rbp*2 + 0x1c3943a1]
rol si, 1
dec si
xor cl, dh
rol si, 1
shl dx, 0xa3
movsx eax, bx
xor r8w, si
and rdx, rax
jnp 0x1401c9dce
jns 0x1401e576c
xor eax, 0x141980af
push r11
xor dword [rsp + r8 - 0x5d6cb401], eax
pop r11
not cx
jmp 0x140167f3f