joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4035ac
Capabilities:
Generate random numbers using the delphi lcg

Disassembly:
push ebx
xor ebx, ebx
imul edx, dword [ebx + 0x590008], 0x8088405
inc edx
mov dword [ebx + 0x590008], edx
mul edx
mov eax, edx
pop ebx
ret

Function at 0x41d254
Capabilities:
Decompress data using aplib

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff4
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push ebp
mov esi, dword [ebp - 4]
mov edi, dword [ebp - 8]
cld
mov dl, 0x80
mov al, byte [esi]
add esi, 1
mov byte [edi], al
add edi, 1
mov ebx, 2
add dl, dl
jne 0x41d285
mov dl, byte [esi]
inc esi
adc dl, dl
jae 0x41d26d
add dl, dl
jne 0x41d290
mov dl, byte [esi]
inc esi
adc dl, dl
jae 0x41d2e1
xor eax, eax
add dl, dl
jne 0x41d29d
mov dl, byte [esi]
inc esi
adc dl, dl
jae 0x41d37e
add dl, dl
jne 0x41d2ac
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x41d2b7
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x41d2c2
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x41d2cd
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
je 0x41d2d7
mov ebx, edi
sub ebx, eax
mov al, byte [ebx]
mov byte [edi], al
inc edi
mov ebx, 2
jmp 0x41d27c
mov eax, 1
add dl, dl
jne 0x41d2ef
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x41d2fa
mov dl, byte [esi]
inc esi
adc dl, dl
jb 0x41d2e6
sub eax, ebx
mov ebx, 1
jne 0x41d32d
mov ecx, 1
add dl, dl
jne 0x41d313
mov dl, byte [esi]
inc esi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x41d31e
mov dl, byte [esi]
inc esi
adc dl, dl
jb 0x41d30a
push esi
mov esi, edi
sub esi, ebp
rep movsb byte es:[edi], byte [esi]
pop esi
jmp 0x41d27c
dec eax
shl eax, 8
mov al, byte [esi]
inc esi
mov ebp, eax
mov ecx, 1
add dl, dl
jne 0x41d344
mov dl, byte [esi]
inc esi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x41d34f
mov dl, byte [esi]
inc esi
adc dl, dl
jb 0x41d33b
cmp eax, 0x7d00
sbb ecx, 0xffffffff
cmp eax, 0x500
sbb ecx, 0xffffffff
cmp eax, 0x80
adc ecx, 0
cmp eax, 0x80
adc ecx, 0
push esi
mov esi, edi
sub esi, eax
rep movsb byte es:[edi], byte [esi]
pop esi
jmp 0x41d27c
mov al, byte [esi]
inc esi
xor ecx, ecx
shr al, 1
je 0x41d39f
adc ecx, 2
mov ebp, eax
push esi
mov esi, edi
sub esi, eax
rep movsb byte es:[edi], byte [esi]
pop esi
mov ebx, 1
jmp 0x41d27c
pop ebp
sub edi, dword [ebp - 8]
mov dword [ebp - 0xc], edi
pop edi
pop esi
pop ebx
mov eax, dword [ebp - 0xc]
mov esp, ebp
pop ebp
ret
Function at 0x41f3b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov ebx, edx
xor edx, edx
push ebp
push 0x57389e
push dword fs:[edx]
mov dword fs:[edx], esp
xor edx, edx
mov dword [ebp - 8], edx
mov esi, ebx
xor ecx, ecx
cmp byte [eax + 0x6a], 0
je 0x41f3ff
mov eax, ebx
xor edx, edx
push edx
push eax
mov eax, dword [esi + 0x3c]
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov edx, dword [eax + 0x88]
test edx, edx
je 0x41f41e
mov ecx, edx
add ecx, ebx
jmp 0x41f41e
mov eax, ebx
xor edx, edx
push edx
push eax
mov eax, dword [esi + 0x3c]
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov edx, dword [eax + 0x78]
test edx, edx
je 0x41f41e
mov ecx, edx
add ecx, ebx
test ecx, ecx
je 0x41f490
mov esi, dword [ecx + 0x18]
mov eax, dword [ecx + 0x1c]
add eax, ebx
mov dword [ebp - 0x10], eax
mov edi, dword [ecx + 0x20]
add edi, ebx
mov eax, dword [ecx + 0x24]
add eax, ebx
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
cmp eax, 0xffff
jbe 0x41f479
test esi, esi
jbe 0x41f490
mov eax, dword [edi]
add eax, ebx
mov edx, dword [ebp - 4]
call fcn.004088f4
test eax, eax
jne 0x41f46b
mov eax, dword [ebp - 0xc]
movzx eax, word [eax]
shl eax, 2
add eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov dword [ebp - 8], eax
jmp 0x41f490
add dword [ebp - 0xc], 2
add edi, 4
dec esi
test esi, esi
ja 0x41f448
jmp 0x41f490
mov edx, eax
sub edx, dword [ecx + 0x10]
cmp edx, dword [ecx + 0x14]
jae 0x41f490
mov eax, edx
shl eax, 2
add eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov dword [ebp - 8], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5738a5
ret
Function at 0x4205fc
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], ebx
mov word [ebp - 4], cx
mov byte [ebp - 1], dl
xor eax, eax
push ebp
push 0x574c17
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 8]
call fcn.00404cd0
xor ebx, ebx
mov eax, ebx
and eax, 0x80000001
jns 0x420637
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x420650
lea eax, [ebp - 0x10]
mov edx, dword [0x5925f0]
mov edx, dword [edx]
mov edx, dword [edx + 0x14]
call fcn.00404d30
jmp 0x420663
lea eax, [ebp - 0x10]
mov edx, dword [0x5925f0]
mov edx, dword [edx]
mov edx, dword [edx + 0x18]
call fcn.00404d30
lea eax, [ebp - 0x10]
mov edx, ebx
sar edx, 1
jns 0x42066f
adc edx, 0
mov edx, dword [edx*4 + 0x5913fc]
call fcn.00404f20
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
mov eax, dword [ebp - 0x10]
call fcn.00404f04
push eax
call fcn.00406b1c
mov esi, eax
cmp esi, 0xffffffff
je 0x4207e9
mov eax, 0x40
call fcn.00403268
mov edi, eax
push 0
lea eax, [ebp - 8]
push eax
push 0x40
push edi
push esi
call fcn.00406d8c
test eax, eax
je 0x4207dc
mov eax, edi
cmp word [eax], 0x5a4d
jne 0x4207dc
push 0
push 0
mov eax, dword [eax + 0x3c]
push eax
push esi
call fcn.00406dec
mov eax, edi
call fcn.00403288
mov eax, 0x18
call fcn.00403268
mov edi, eax
push 0
lea eax, [ebp - 8]
push eax
push 0x18
push edi
push esi
call fcn.00406d8c
test eax, eax
je 0x4207dc
mov eax, edi
cmp dword [eax], 0x4550
jne 0x4207dc
add eax, 4
mov dword [ebp - 0xc], eax
cmp byte [ebp - 1], 0
je 0x42077a
mov eax, dword [ebp - 0xc]
cmp word [eax], 0x8664
jne 0x42077a
mov eax, edi
call fcn.00403288
mov eax, 0xf0
call fcn.00403268
mov edi, eax
push 0
lea eax, [ebp - 8]
push eax
push 0xf0
push edi
push esi
call fcn.00406d8c
test eax, eax
je 0x42077a
mov eax, edi
mov dx, word [eax + 0x44]
cmp dx, word [ebp - 4]
jne 0x42077a
mov eax, dword [eax + 0x10]
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x10]
call fcn.00404d0c
cmp byte [ebp - 1], 0
jne 0x4207dc
mov eax, dword [ebp - 0xc]
cmp word [eax], 0x14c
jb 0x4207dc
mov eax, dword [ebp - 0xc]
cmp word [eax], 0x150
ja 0x4207dc
mov eax, edi
call fcn.00403288
mov eax, 0xe0
call fcn.00403268
mov edi, eax
push 0
lea eax, [ebp - 8]
push eax
push 0xe0
push edi
push esi
call fcn.00406d8c
test eax, eax
je 0x4207dc
mov eax, edi
mov dx, word [eax + 0x44]
cmp dx, word [ebp - 4]
jne 0x4207dc
mov eax, dword [eax + 0x10]
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x10]
call fcn.00404d0c
mov eax, edi
call fcn.00403288
push esi
call fcn.00406ad4
mov eax, dword [ebp + 8]
mov eax, dword [eax]
xor edx, edx
call fcn.0040502c
jne 0x420801
inc ebx
cmp ebx, 0x19
jne 0x420629
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x574c1e
lea eax, [ebp - 0x10]
call fcn.00404cd0
ret
Function at 0x430000
Capabilities:
Encode data using xor

Disassembly:
pushal
nop
nop
nop
nop
nop
call 0x43000c
nop
pop eax
nop
nop
nop
nop
nop
add eax, 0x403daa
sub eax, 0x403d50
nop
nop
mov ebx, dword [eax]
nop
nop
nop
mov ecx, dword [eax + 4]
nop
nop
nop
nop
nop
nop
mov edx, dword [eax + 8]
nop
xor dword [ebx], edx
nop
nop
nop
add ebx, 4
nop
nop
nop
nop
nop
nop
cmp ebx, ecx
nop
nop
nop
nop
nop
jl 0x430030
nop
nop
add eax, 0xc
nop
nop
cmp dword [eax], 0
nop
nop
nop
nop
nop
jne 0x43001e
nop
nop
popal
nop
nop
nop
nop
jmp fcn.00401219
Function at 0x12458e0
Capabilities:
Authenticate hmac

Disassembly:
repne scasb al, byte es:[edi]
mov byte [esp + 4], dh
mov byte [esp + 8], 0x40
lea esp, [esp + 0x10]
jne 0x1ee4247
movzx eax, cl
bswap ax
mov byte [edi - 1], 0
cwde
bswap ax
push ebx
lea eax, [eax*8 - 0x3afbfb9f]
lea eax, [0x21a9cb5]
pushal
mov dword [esp + 0x1c], 0x1ee79ef
push 0xac75c7d1
jmp 0x1edc97a
mov dword [esp + 0x1c], eax
mov dword [esp + 4], ebx
pushal
pushfd
push dword [esp + 4]
push dword [esp + 0x44]
ret 0x48

Function at 0x12464a4
Capabilities:
Authenticate hmac

Disassembly:
lea esp, [esp + 0x30]
je 0x21ac8c1
cmp al, bl
sub al, 0x30
push esi
cmp al, 9
mov byte [esp], 0x67
pushal
pushfd
lea esp, [esp + 0x28]
ja 0x1ee4247
cmc
call fcn.021a8d92

Function at 0x12465b3
Capabilities:
Authenticate hmac

Disassembly:
pushfd
lea esp, [esp + 0x4c]
and al, 0x4c
jne fcn.01ee3e1e
xadd cx, si
neg si
mov ecx, edi
cmp dl, 0xed
bt sp, sp
adc si, bx
inc si
sub ecx, ebx
btc esi, 0x19
mov esi, esp
bt bp, 4
push ecx
push 0x3e597313
push 0xfeb9baf5
sub edi, 4
mov ecx, 0x4ef83fe
stc
call fcn.021b1fc8
pop esi
cmp eax, 0x593e66e6
aad 0xdc
rol edx, cl
push edi
jns 0x124661f
adc edx, eax
and byte [ebp - 0x195275c5], bh
or edi, edx
dec eax
inc dword [esi + edx*4 + 0x42ba9845]
jae 0x12465ea
cmp eax, dword [esi - 0xc]
jbe 0x12465b5
idiv byte [ecx - 0x24ad14e2]
out 0xcd, al
pop ecx
ficom dword [edx + 0x11]
jmp 0x82588080
push ds
jmp 0x1246674
push 0x64b76c9b
xlatb
push 0x888b68cb
ret

Function at 0x1edbea2
Capabilities:
Authenticate hmac

Disassembly:
mov byte [edi - 1], 0
cwde
bswap eax
pop eax
call fcn.01245a0b

Function at 0x1edbeaf
Capabilities:
Authenticate hmac

Disassembly:
repne scasb al, byte es:[edi]
push edx
lea esp, [esp + 0x30]
jne fcn.01ee3e1e
not si
btc si, 0xb
sar cl, cl
mov ecx, edi
adc si, sp
ror esi, cl
bsf esi, edx
sub ecx, ebx
clc
xor si, 0xb8c8
test esi, eax
mov esi, esp
push eax
jmp 0x21ac7ba
sub edi, 4
stc
cmc
mov byte [esp], 0x3c
push dword [edi]
pop dword [esp]
pushal
cmp edi, ebx
mov word [esp], cx
push edx
pushal
lea esp, [esp + 0x44]
ja 0x21a9f73
pushfd
setns al
sets al
neg al
sub ebx, edi
cmc
cmc
cmc
sub esp, 0xfffffffc
add ebx, esp
bsr edi, edx
sbb di, 0xcff8
shld di, si, cl
bsr di, si
mov edi, ebx
rcl al, cl
cmc
adc al, 0x93
mov al, 0x2e
test ecx, edi
test di, di
repne scasb al, byte es:[edi]
call fcn.01edcb1e
sbb dword [edi + ebx*4 - 0x2b9d2453], ebx
xchg ebp, eax
invalid

Function at 0x1edc94e
Capabilities:
Authenticate hmac

Disassembly:
xor al, al
stc
repne scasb al, byte es:[edi]
mov byte [esp + 8], 0x2a
jmp 0x21a9f49

Function at 0x1edc973
Capabilities:
Authenticate hmac

Disassembly:
mov dword [eax], ebx
jmp 0x21abd29
mov dword [esp + 0x20], ebx
setle ah
lea eax, [ebp - 4]
push 0x6683461f
call fcn.01ee0ade
xchg dword [esp + 0x24], eax
movzx eax, al
lahf
cwde
jmp 0x1ee09b5
Function at 0x1edcb1e
Capabilities:
Authenticate hmac

Disassembly:
jmp 0x21aa92b
lea esp, [esp + 4]
jne 0x1ee4247
pushfd
mov byte [esp], 0xd
mov byte [edi - 1], 0
pop eax
not al
lea eax, [ebx*4 - 0x58a148de]
not al
push ebx
call fcn.01edf41c
push esi
lahf
mov esp, 0xd462fa90
div byte [ecx]
pushfd
inc esp
inc ecx
salc
std
push ebp
inc esi
jp 0x21aa9a5
movsd dword es:[edi], dword [esi]
invalid
sub esp, eax
push ebp
cdq
mov cl, 0xaa
mov bl, 0x9d
xchg edi, eax
jmp 0x89fb23a5
push ss
xor esp, dword [edx]
loopne 0x21aaa0d
out 0x70, eax
in al, 0x14
push cs
loopne 0x21aa9ba
les esp, [edx - 0x4983c7d5]
mov bh, 0x80
stosd dword es:[edi], eax
jl 0x21aa96c
xchg esi, eax
frstor dword [eax]
xor al, 0x7f
imul esp
xchg esi, eax
inc ebp
out 0x4d, al
out 0x4d, al
add al, 0x4b
push 0x21
aaa
or eax, 0xabc500ae
cld
invalid
xor dword [ecx - 0x47], ebp
cmp dh, bl
and eax, 0x2e892798
hlt

Function at 0x1edcc8c
Capabilities:
Authenticate hmac

Disassembly:
pushal
lea esp, [esp + 0x24]
jae fcn.01ee3e1e
push ebp
mov byte [esp], bl
pushal
lea esp, [esp + 0x24]
jmp 0x21a5196

Function at 0x1edd09b
Capabilities:
Authenticate hmac

Disassembly:
mov dword [esp + 0x44], 0x21b3c15
push dword [esp + 8]
call fcn.01ee1111

Function at 0x1ede475
Capabilities:
Authenticate hmac

Disassembly:
mov byte [esp], ch
lea esp, [esp + 4]
je fcn.01ee3e1e
jmp 0x21a5e06
lea esp, [esp + 4]
jae fcn.01ee3e1e
pushal
mov word [esp], 0xfdbc
pushal
lea esp, [esp + 0x40]
jmp 0x21a5196
lea esp, [esp + 0x2c]
jbe 0x21afd59
bt bx, 0xb
mov edi, dword [edx + 0x24]
rcr ch, 4
add bx, ax
sal cl, cl
call fcn.01ee2c3a
xchg edi, eax
mov bl, 0x9c
mov al, 0xbf
invalid
lea edi, [eax*2 - 0x200214bd]
shld di, si, 0xd
and edi, 0x87a00f19
mov edi, dword [edx + 0x1c]
clc
jle 0x21b2def
add edi, eax
pushfd
mov edi, dword [edi + ecx*4]
stc
jmp 0x21abd20
cmp dh, dl
clc
add eax, edi
pushfd
push 0x2823e4b9
pushfd
cmp eax, edx
push esi
lea esp, [esp + 0x10]
jb 0x1ee3e2d
push ecx
cmc
cmc
cmp eax, dword [ebp - 0x10]
call fcn.01edf0b6
cmc
push ebx
cmp ecx, dword [edx + 0x14]
jmp 0x1edbc19
clc
test edi, edi
pushal
jmp fcn.021a94ce
pushal
test cl, bh
clc
cmp dh, 0xc3
sub ecx, dword [edx + 0x10]
clc
lea esp, [esp + 0x20]
ja 0x21a85dd
cmc
cmp ecx, dword [edx + 0x14]
call fcn.01edcc8c
stc
add edi, eax
cmp cl, 0x2c
mov edi, dword [edi + ecx*4]
pushfd
cmc
clc
test edi, edi
jmp 0x12479f0
Function at 0x1ede946
Capabilities:
Authenticate hmac

Disassembly:
repne scasb al, byte es:[edi]
call 0x1edfd72
pop ebp
sub bl, ch
popal
ror byte [edi - 0x1d2c462c], cl
not dword [ebx]
mov ebp, 0xd311d418
or ch, bl
clc
mov ebx, 0x13a6c86b
mov dl, bl
fld xword [edx - 0x76]
ja 0x1edd1b6
or edx, dword [ebp - 0x7b]
jge 0x1edd1be
sbb eax, 0xa2c53a33
mov ss, edx
inc eax
add dword [eax - 0x4b], ecx
push eax
fiadd dword [esi]
mov edi, 0xf4ff3c6f
adc ecx, ebx
out 0xbe, eax
pushal
arpl ax, bx
jb 0x1edd17d
pushfd
rol byte [ecx - 0x2f], 1
push edx
sal edx, 0x38
fisub word [0xf4188e70]
push edi
jg 0x1edd210
mov bh, 0x36
clc
xor edx, dword [ecx + edi]
aam 0x86
stosd dword es:[edi], eax
mov ecx, 0x713eb9ec
jl 0x1edd22f
mov ecx, 0x747c713e
dec ecx
out 0x3d, al
fimul word [ebp - 0x73]
or ch, al
iretd
xchg ecx, eax
push ds
jp 0x1edd284
mov byte fs:[0x80ee45de], bh
cmp eax, 0x80ee45de
ja 0x1edd279
test byte [ecx + 0x67d97ac9], cl
invalid
popfd
inc eax
pop ecx
inc esp
outsd dx, dword [esi]
sub ebx, esi
adc eax, 0x1407a51e
pop eax
xor dword [ecx + ecx*2 - 0x3b], esp
xchg ch, al
xchg dword [ecx - 0x2f], esi
loope 0x1edd215
adc ebx, edx
jnp 0x1edd20f
invalid
sbb ecx, dword [ecx]
nop
cmp ebp, dword [esi + 0x75a0bd9c]
cmp bl, byte [ebx + 0x12]
dec esp
out 0x2c, al
adc eax, 0x310348cb
push cs
or eax, 0x5300956f
pop ecx
fsubr qword [edi - 0x6b]
add byte [edx + 0x57], dl
mov esi, 0x26bdcdde
lodsb al, byte [esi]
mov dword [0x6818f2da], eax
mov cl, 0xa0
sub al, 0xf1
mov ebp, 0xdaa3ac26
sbb byte [eax - 0x4f], ch
mov al, byte [0xcb74f12c]
int1
je 0x1edd252
rcl dword [edi + 0x8102933], cl
pop ebx
jne 0x1edd2b0
sub al, 0xf9
push 0x22
sbb dword [ecx + ebp*8 + 0x21d0bceb], edx
loop 0x1edd264
cmp bl, byte [edi + 0x7f289014]
mov esi, 0x8abe7a15
adc edi, dword [eax - 0x9c42fc6]
cmp bl, byte [eax]
dec edi
or cl, cl
salc
pushfd
das
rcl byte [ebx]
cmp ah, ah
add ebx, dword [esi - 0x38]
mov byte [ebx - 0x15b4a752], al
xor dword [eax + 0x25], edx
mov esi, esp
cmp eax, 0x68be5db6
stosd dword es:[edi], eax
je 0x1edd348
nop
mov ebx, 0x5037877c
mov byte [esi - 0x5d4e9547], 0xa1
mov edx, 0x60f0f0ad
or bl, byte [edx]
scasd eax, dword es:[edi]
pcmpeqw mm2, qword [eax - 0x14]
pop edi
sub eax, 0xa95b8924
movsd dword es:[edi], dword ds:[esi]
inc ecx
test al, 0x97
and bh, bh
xor al, 0x24
pushfd
pushal
lea esp, [esp + 0x2c]
jne 0x21a9fa3
sbb cx, 0xd89
bsr cx, dx
cmp dl, 0x64
mov ecx, dword [ebx]
pushfd
jmp 0x1edeaef
jbe 0x1edd34b
sub ebp, dword [ebx - 0x3a]
cmp eax, 0xda03caa1
push eax
imul eax, esi, 0x3d
mov eax, dword [0x50da03ca]
ret 0x85f8
bt dx, 2
sub ebx, edi
sub di, 0x82f5
setl al
add di, 0xf45f
sub esp, 0xfffffff8
add ebx, esp
jmp 0x21abc06
mov edi, ebx
rol al, cl
and al, 0x9c
inc al
mov al, 0x2e
pushal
mov byte [esp], dh
jmp 0x1edd150

Function at 0x1edebac
Capabilities:
Authenticate hmac

Disassembly:
cmp al, 9
push 0xc5b58097
pushal
mov word [esp + 4], bx
mov byte [esp + 4], al
lea esp, [esp + 0x28]
ja 0x1ee4247
pushal
stc
cmc
pushal
imul edx, edx, 0xa
clc
cmp ebx, 0xcd9b9f73
add edx, eax
mov word [esp + 8], 0xd647
pushfd
push 0xe56055c0
pushfd
lea esp, [esp + 0x4c]
jmp 0x1ee2f65
Function at 0x1edf33c
Capabilities:
Authenticate hmac

Disassembly:
lea esp, [esp + 0x2c]
jbe fcn.01ee3e1e
xadd esi, edi
movsx esi, al
add si, 0x64d7
xadd di, si
sub ecx, 1
add di, 0x2ac7
adc di, si
xor di, 0xb481
bt bp, 4
mov dword [ebp - 4], ecx

Function at 0x1edfbc3
Capabilities:
Authenticate hmac

Disassembly:
lea esp, [esp + 0x24]
jne fcn.01ee3e1e
and ch, 0xad
mov ecx, edi
btc si, 0xf
shld si, ax, 0xb
sbb esi, 0x2130b42e
sub ecx, ebx
and si, bx
sar esi, 0xb
movzx si, dl
call fcn.01ee1b15
jmp 0x1edf9dc

Function at 0x1edfd61
Capabilities:
Authenticate hmac

Disassembly:
cmp eax, dword [ebp - 0x10]
pushal
lea esp, [esp + 0x20]
jae 0x1ee3e2d
inc bl
mov ebx, eax
setnp ch
mov edi, eax
btr cx, cx
clc
or ch, 0x93
mov ecx, 0x104
test dl, 0xb1
sub al, al
pushal
push dword [esp]
pushal
repne scasb al, byte es:[edi]
mov byte [esp + 0x1c], ch
call fcn.012465b3
clc
test edi, esp
movzx ecx, word [edi + ecx*2]
sub di, 0xb95e
jmp 0x21b31a7
lea esp, [esp + 0x24]
jb 0x1ee3e2d
jmp 0x1edfd28
pushal
add eax, edi
mov byte [esp + 4], bl
cmc
mov byte [esp + 4], cl
stc
cmp eax, edx
pushfd
jmp 0x1ee0541
pushal
mov byte [esp], bl
lea esp, [esp + 0x20]
je fcn.01ee3e1e
test cx, 0x82e0
jmp 0x21a8d0f
insb byte es:[edi], dx
mov byte [ebx - 0x60], dh
inc ecx
mov edi, dword [edi + ecx*4]
cmp ch, 0x32
mov byte [esp + 8], 0xbd
clc
cmp bl, bl
test edi, edi
lea esp, [esp + 0x50]
js 0x21aaac6
pushal
pushal
push dword [esp + 0x10]
lea esp, [esp + 0x44]
je fcn.01ee3e1e
pushal
mov byte [esp + 4], 0x39
call fcn.012475e3
push ecx
jl 0x21b1c11
mov dword [edi - 0x52462b9e], eax
lea ebp, [ebx + 0x2a]
mov byte [0xd5ecb933], al
xor eax, 0x7b42ba98
shr bl, 1
jmp 0x11e90564
mov edi, dword [edx + 0x1c]
bt esp, 0x18
cmp cl, 0x56
add edi, eax
jmp 0x21b1c16

Function at 0x1ee0ade
Capabilities:
Authenticate hmac

Disassembly:
mov word [esp + 4], 0x3a0f
mov dword [esp + 0x24], eax
mov word [esp + 4], 0x19a3
lea eax, [ecx*4 + 0x3513850c]
seta al
movzx ax, cl
mov dword [esp + 0x20], 0xb
cwde
pushfd
bswap ax
lea eax, [0x21b385e]
pushal
call fcn.01edd09b

Function at 0x1ee0b17
Capabilities:
Authenticate hmac

Disassembly:
cmp bl, dl
sub al, 0x30
mov byte [esp], bh
cmp al, 9
push 0x4d13c492
lea esp, [esp + 8]
ja 0x1ee4247
pushfd
mov byte [esp], 0x59
jmp 0x1ee2142
pushfd
imul edx, edx, 0xa
mov dword [esp + 4], ecx
mov byte [esp], 0xa4
lea esp, [esp + 8]
jmp 0x21ac927

Function at 0x1ee1b15
Capabilities:
Authenticate hmac

Disassembly:
call 0x1ee6aca
jmp 0x21acbc4
lea esi, [esp + 4]
test cl, 0xea
cmp bx, 0xed02
stc
cmp dh, 0xff
sub edi, 4
cmc
push dword [edi]
pop dword [esp]
pushfd
lea esp, [esp + 4]
jg 0x1edc459
bt ebx, ebx
cmp edi, ebx
pushal
pushal
lea esp, [esp + 0x40]
ja 0x21a9f73
jmp 0x1edef09
Function at 0x1ee22fe
Capabilities:
Authenticate hmac

Disassembly:
imul edx, edx, 0xa
push 0xe643f75d
pushal
lea esp, [esp + 0x44]
jmp 0x21ac927
lea esp, [esp + 0x30]
je 0x21ac8c1
cmp dh, dl
cmp si, 0xaeb8
pushfd
clc
sub al, 0x30
bt esp, ecx
cmp al, 9
pushal
mov dword [esp + 4], esp
push dword [esp + 4]
push edi
lea esp, [esp + 0x2c]
ja 0x1ee4247
pushal
jmp 0x1edea6c
sar al, cl
add edi, 1
test bp, 0xd53b
mov al, byte [edi]
clc
test al, al
pushfd
call fcn.021b2369
setp al
sete al
mov edi, edx
inc al
movzx cx, al
shr cx, 8
cmc
mov ecx, edi
sbb al, 0x44
cmc
mov al, byte [ecx]
bt ax, dx
test cl, ch
cmp ah, 0xa4
mov ah, al
call fcn.021a6ed8
cmp dl, dl
stc
add edx, eax
pushfd
mov byte [esp], 0xab
pushal
lea esp, [esp + 0x24]
jmp 0x1ee2f65

Function at 0x1ee69d0
Capabilities:
Authenticate hmac

Disassembly:
setbe bh
lea edi, [edi*8 + 0x2852a1d6]
pop edi
xchg si, bx
pop esi
pushal
mov ebx, dword [esp + 0x20]
push dword [esp + 4]
mov esp, ebp
lea ebp, [ebp*4 + 0x4a8c69d8]
lea ebp, [eax*4 - 0x7b04f10b]
movzx bp, bl
not bp
pop ebp
push 0x21d1eec
pushal
mov byte [esp + 4], bl
pushfd
push dword [esp + 0x28]
ret 0x30
lea esi, [esi + edx + 0x1c]
lea edi, [eax*2 + 0x3b3ae9ca]
mov edi, dword [ebp + 8]
mov word [esp], ax
lea esp, [esp + 8]
call fcn.0124566d
pushfd
mov byte [esp], bh
lea esp, [esp + 4]
jne 0x1ee0fe4
mov al, 0x42
mov eax, dword [edx + 8]
pushfd
push dword [esp]
push 0x5d20c49
lea esp, [esp + 0xc]
jmp 0x21a601c
je 0x21a8c28
stc
cmp bh, ah
or ebx, ebx
call int.01edd764
add byte [eax - 0x25], dh
add dword [eax + 0x60], esp
mov dword [esp], 0xd34ab88f
mov dword [esp + 0x3c], 0x9015a520
call fcn.01edf59e
dec ecx
jmp 0x655dc8ba
test bl, 0x46
clc
test ebx, ebx
or ebx, ebx
push esp
push ecx
lea esp, [esp + 8]
je 0x1ee4134
push 0x217f8c17
pop esi
call int.021a7bff
cmpsd dword [esi], dword es:[edi]
hlt
Function at 0x1ee6aca
Capabilities:
Authenticate hmac

Disassembly:
lea esp, [esp + 4]
jne 0x1ee4247
cwde
pushfd
not ax
call fcn.01edbea2
lea esp, [esp + 0x24]
jle 0x21a6edd
mov esp, esi
pushal
mov word [esp], cx
push edx
lea esp, [esp + 0x24]
jmp fcn.01ee3e1e
pushal
mov word [esp], si
push dword [esp + 0x20]
ret 0x24
lea ebp, [esp + 4]
and ax, 0xfb30
dec al
sal ax, 1
aas
sub esp, 4
sal ah, cl
push ebx
setbe ah
lahf
movsx ax, al
bswap eax
push esi
cmc
btc ax, 1
btc ax, bx
dec ah
push edi
test bh, dl
mov ax, di
bswap ax
xor ebx, ebx
movzx ax, cl
movzx ax, cl
push 0x83759b62
sete ah
lea eax, [ebp - 8]
lea esp, [esp + 4]
jno 0x1ee6ac3
pushal
push 0xde495c59
pushfd
mov dword [eax], ebx
pushfd
mov dword [esp + 0x28], eax
lahf
call fcn.01246c57
pushal
mov dword [esp + 0x1c], 0x6f2d5023
jmp 0x21a59cc
pushal
pushfd
jmp 0x1246be3
pushfd
pushal
call fcn.01edc973
cmp edi, ebx
pushal
lea esp, [esp + 0x24]
ja 0x21a9f73
not al
bt sp, bp
call fcn.01246883
stc
pushal
mov byte [esp + 8], al
or ah, ah
pushal
call fcn.01246d70
cmp ah, 0x62
add dl, 0xbf
pushfd
mov dword [esp + 4], ebp
xor dl, 0xc9
jmp 0x21b0f3a
call fcn.021b2f57
pushfd
push 0xf7dadfbe
pushal
call fcn.01edfbef
stc
test cl, 0xf0
add ah, 0x20
clc
cmp cx, dx
stc
or al, al
pushal
pushal
pushfd
lea esp, [esp + 0x44]
je 0x21b3704
bt sp, 6
jp 0x21a5b1f
pushal
cmp al, ah
mov word [esp], 0x3f6c
lea esp, [esp + 0x20]
jne 0x1edee35
pushal
push 0x83cc066b
pushfd
inc esi
push dword [esp]
mov word [esp], di
push edi
inc edi
mov byte [esp], 0x3e
lea esp, [esp + 0x30]
jmp fcn.0124566d
bt eax, ecx
pushfd
call fcn.021a997c
shrd si, bx, 5
or dl, ah
push edi
btc si, ax
pushfd
mov dword [esp], ebx
not di
shrd esi, ecx, 0xd
and dl, cl
shr esi, cl
mov esi, dword [esp + 0x14]
shrd di, cx, cl
adc edi, 0x921c3d48
mov edi, dword [esp + 0x18]
rcr al, cl
dec al
sar dl, 4
mov dl, 0x80
inc al
xor ebx, ebx
jmp 0x21b28ba
pushfd
pushfd
pushfd
mov esp, esi
pushal
mov byte [esp + 4], al
pushal
lea esp, [esp + 0x40]
jmp fcn.01ee3e1e
test dx, 0xd709
sub edi, 4
cmp cl, 0x4a
jmp 0x21ab06d
push dword [edi]
stc
cmp edi, ebx
pushal
jmp 0x21b2b4f
mov word [esp], 0xbf6b
dec dl
pushfd
stc
push edx
push word [esp + 0x3e]
popf
mov byte [esp + 4], al
call fcn.01ee71f0
lodsb al, byte [esi]
not bl
ror al, 5
pushfd
jmp fcn.021b0f55
lea esp, [esp + 0x20]
ja 0x21a9f73
sub al, cl
neg al
sal al, 6
clc
sub ebx, edi
shr di, cl
ror al, cl
setae al
add ebx, esp
inc di
mov edi, ebx
cmc
push ebx
or al, 0x78
stc
mov al, 0x2e
cmc
clc
clc
cmc
repne scasb al, byte es:[edi]
mov word [esp], 0x3e64
jmp 0x124659f
clc
cmc
jle 0x21a514f
or ah, ah
jmp fcn.01edee21

Function at 0x1ee731e
Capabilities:
Authenticate hmac

Disassembly:
test di, bx
pushfd
cmp edi, ebx
jmp 0x21a9fa8