joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140dd268a
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
xor bx, 0xe737
xor r11w, bx
lea r8, [rbp + rcx + 0xeb8431a]
push r8
lea rbx, [rsp + rbx + 0x20]
mov qword [rbx + riz], r10
lea rdx, [rbp + rbp*8 + 0x5298120e]
add qword [rsp], 0x2ebbac03
mov ebx, dword [r9 + riz + 8]
mov qword [rsp + 8], 0x20a196ba
lea rbp, [r8*2 - 0x51e2ceca]
adc r9, 0xc
movzx r8d, byte [rdi + riz - 7]
sub rdi, 7
xor bp, 0x4bb0
xor word [rsp + 0x1d], 0xc7b5
xor r8b, r11b
not rbp
lea rax, [rcx + rbp*2 - 0x3fe83dd]
lea r10, [rcx + rax*2 - 0x2545f8d8]
sub r8b, 0x3c
not r8b
push rdx
ror r8b, 1
shl qword [rsp + 0x1b], 0xc5
not r10d
and ebp, dword [rsp + r10 - 0x52233291]
neg r8b
ror dl, 2
xor bpl, r10b
ror r8b, 1
and dword [rsp + rbp*2 - 0x1800344], 0xccab7787
inc r8b
dec r10b
ror r8b, 1
btc cx, 0xad
btr rbp, rdx
push rcx
not r8b
mul dword [rsp + rbp*4 - 0x30006b9]
imul r10
xor r11b, r8b
shr r10d, cl
mul r10b
call fcn.140dbda7a
mov qword [rsp + rax - 0x77], r11
and r10d, eax
lea r11, [r8 + r10*2 + 0x2bdc00]
xor dword [rsp + rax*8 - 0x3b8], edx
bts r8, 0x3c
sal r8d, 0x18
pop r11
movsxd rdx, edx
push rbp
adc rsi, rdx
lea rax, [rsp + rax*4 - 0xa4]
inc bp
mov edx, dword [rax + r8 - 0x77000000]
movsx eax, byte [rsp + rbp*2 - 0xec]
push rax
and byte [rsp + r8 - 0x76ffffff], bpl
mov dword [rbp + r9 - 0x7c], edx
movsx ebx, r8b
not qword [rsp + r8 - 0x76fffff8]
movzx edx, word [rdi + r10*4 - 6]
lea rdi, [rdi + rbp - 0x7e]
xor dx, r11w
movzx ecx, al
shr r8, 0x22
inc dx
mov word [rsp + r8*2 + 0xa], cx
not dx
call fcn.140e103da

Function at 0x140dd34a2
Capabilities:
Authenticate hmac

Disassembly:
bswap ebp
sub ebp, 0xa51c8d25
ror ebp, 3
mov qword [rsp + 0x10], r11
mov r11d, 0x1eb80f8e
xor dword [rsp + r11 - 0x1eb80f7e], ebp
mov qword [rsp + r11 - 0x1eb80f86], r11
sal qword [rsp + r11*2 - 0x3d701f14], 0x15
mov r11, qword [rsp + r11*4 - 0x7ae03e28]
movsxd rbp, ebp
push 0xfffffffff4ada4b0
jne 0x140dc347d

Function at 0x140dd40b2
Capabilities:
Authenticate hmac

Disassembly:
mov word [rsp + rcx*2 - 0x19ed8df2], 0x18b5
and word [rsp + rcx*4 - 0x33db1bfb], bp
mul r8d
shr byte [rsp + rcx - 0xcf6c6fc], 0xe3
mov dword [rcx + r9 - 0xcf6c700], edx
xchg word [rsp + rcx - 0xcf6c6ff], bx
mov dword [r9 + rcx*2 - 0x19ed8dfc], eax
xor r10b, 0x15
call fcn.140df42a4
ror eax, 2
pop r10
lea r10, [rbx + r8*8 + 0x3d9409bf]
neg cx
lea eax, [rax + rbx*4 - 0x19c8464]
push r8
not word [rsp + rbx - 0x3b08e7fa]
neg eax
shl dword [rsp + rbx*2 - 0x7611d000], 0x63
mov qword [rsp + rbx - 0x3b08e7f8], r11
xor dword [rsp + rbx - 0x3b08e7f8], eax
dec bx
mov r11, qword [rsp + rbx - 0x3b08e7f7]
neg ebx
movsxd rax, eax
shl rbp, 0xe3
sar r8d, 4
adc rsi, rax
mov qword [rsp + r8 - 0x3d0c6a3], rbp
not qword [rsp + r8 - 0x3d0c6a9]
mov r8d, dword [r9 + rcx*4 - 0x33db1c00]
xor r10b, bpl
sal byte [rsp + rcx*2 - 0x19ed8df2], 0xc2
mov eax, dword [r9 + rcx - 0xcf6c6fc]
jp 0x140dc20fe

Function at 0x140dd6c80
Capabilities:
Authenticate hmac
Encode data using base64
Parse pe header

Disassembly:
lea rsp, [rsp + 0x28]
jne 0x140e18eda
mov eax, 0x102aad89
pop r9
Function at 0x140dd76a1
Capabilities:
Authenticate hmac

Disassembly:
dec ebx
dec rdx
neg ebx
mov qword [rsp + rcx - 0x78a00000], r10
ror dword [rsp + r8*2 + 2], 0x7c
bts edx, ecx
not ebx
mov ebp, 0x34923602
cwde
mov qword [rsp + r8], r11
xor dword [rsp + rcx - 0x78a00000], ebx
mul r8d
xadd dl, bpl
xor r8w, r10w
pop r11
shr r8, 0x17
movsxd rbx, ebx
cdqe
adc rsi, rbx
lea rbx, [r10 + rcx*2 - 0xc54167d]
dec r8d
mov rbp, qword [rdi + rcx - 0x78a0000e]
lea rdi, [rdi + rax*2 - 0xe]
xchg r10, rbx
xor rbp, r11
sal ax, 0x49
ror rbp, 1
push rbx
btr r8d, r10d
bswap rbp
shl cl, 3
sub r10d, dword [rsp + rcx - 0x78a00000]
ror rbp, 1
imul cl
jno 0x140de871a
push rbx
xor rbp, 0xffffffffe81a491c
neg cl
sete cl
ror word [rsp + rdx + 5], 0xae
lea rbp, [rbp + rax*4 - 0x399ffe21]
call fcn.140ddf1b4
movzx r10w, byte [rbx + rbp - 0x23023f]
imul r8
lea r9, [rbp + r9 - 0x230241]
idiv dword [rsp + rbp*8 - 0x11811f2]
not dx
mov word [r9 + rbp - 0x23023f], r10w
rol word [rsp + rbp - 0x230237], 0xc1
cqo
lea rbx, [rbp*2 - 0x10db036c]
pop r8
pop r8
jno fcn.140e0aedf

Function at 0x140dd7728
Capabilities:
Authenticate hmac

Disassembly:
push 0x3a0a069d
push 0xffffffffdf8b930e
pushfq
pop qword [rsp + 8]
call fcn.140e1a67f

Function at 0x140dd8e61
Capabilities:
Authenticate hmac

Disassembly:
push 0xfffffffff83c3cb2
dec ebx
jmp 0x140e15009

Function at 0x140dda43c
Capabilities:
Authenticate hmac

Disassembly:
dec r10b
rol dl, 1
sar eax, cl
or bl, 0x2e
xor r11b, dl
shr r8d, 0xd
mov word [r9 + r8*8 - 0x324708], dx
mov ebp, dword [rdi + r8*2 - 0xc91c7]
sal rax, 0x61
lea rdi, [r8 + rdi - 0x648e6]
or ax, cx
lea rdx, [rbx*4 + 0x4c836d10]
rol rax, cl
xor ebp, r11d
lea ebp, [r8 + rbp + 0x771379a7]
xor ebp, 0xc624ef0b
idiv ebx
lea rax, [rbx - 0x3173c351]
sub ebp, 0xffb607a0
bt dx, 4
dec rbx
ror ebp, 1
xor ebp, 0xe799c717
lea ebp, [rbp + rdx - 0x11086ccd]
push rcx
inc r8d
shl r8b, cl
mov qword [rsp + r8 - 0x64840], r11
mov r11d, 0x5a874009
sbb rbx, rdx
dec cx
xor dword [rsp + r8 - 0x64840], ebp
rol ecx, 0xee
sbb ax, bx
jge 0x140dba9a3
pop r11
bts rax, rbx
movsxd rbp, ebp
call fcn.140db7700
mov r8d, dword [rdi - 4]
xor r8d, r11d
mov ebx, 0x9ca57a93
lea rax, [rbx + rbx - 0x50d2fee5]
sub r8d, 0x42a6dfb9
movzx ebp, al
neg eax
lea rdx, [rbx + rax*4 - 0x5871e2e5]
bswap r8d
lea rcx, [rbx*2 - 0x5df31bf5]
and cl, 0xa6
xor r8d, 0x70eab82
bt cx, cx
dec rbx
rol r8d, 1
rol rcx, 0x9e
xor r8d, 0xafbdd29c
mov r10d, ecx
neg r8d
xor ax, cx
cqo
ror r8d, 1
xor r8d, 0xaf06a310
div rcx
idiv bx
cwd
push r11
xor dword [rsp + rax - 0x145b], r8d
pop r11
shr cl, 0x64
idiv bp
ror r10, 0x4b
movsxd r8, r8d
adc rsi, r8
lea rdx, [rcx*4 + 0x4106321e]
cdqe
sar al, 0x44
movzx r8d, word [rdi + rax*4 - 0x1a]
xor r8w, r11w
bswap rcx
add ebp, ebp
ror r8w, 1
lea rbp, [rcx + rdx*8 + 0x160dcd0b]
bswap ecx
or eax, ebp
not r8w
call fcn.140df3403
mov qword [rsp + rcx + 0x2246092], r11
mov word [r9 + riz + 2], bx
mov qword [rsp], r10
lea rbx, [r10 + rcx - 0x49f117df]
movzx edx, byte [rdi + riz - 1]
movsx eax, bx
and r10b, byte [rsp + 3]
xor dl, r11b
jmp 0x140dea233
lea r8, [rbx*8 + 0x12b900a1]
add dl, 0x27
pop rcx
rol dl, 1
ror r8d, cl
not dl
and r8, rax
neg dl
not r10w
sub dl, 0x8f
jmp 0x140dc6058
Function at 0x140ddabe8
Capabilities:
Authenticate hmac

Disassembly:
mov word [rdx + r9 - 0x34be7c17], bx
mov qword [rsp + rdx - 0x34be7c19], rbp
dec dx
movzx r8d, byte [rsp + rdx*2 - 0x697cf82d]
mov ecx, dword [rdx + rdi - 0x34be7c1c]
sets byte [rsp + rdx - 0x34be7c14]
movsx eax, byte [rsp + rdx*2 - 0x697cf82c]
btc rdx, 0x38
xor ecx, r11d
lea rbx, [rbp + 0x17195fa9]
mov r10d, 0x6db4c787
lea ecx, [rcx + r8 - 0x42a6e090]
xchg byte [rsp + r8*2 - 0x1aa], r10b
inc r10
bswap ecx
xor ecx, 0x70eab82
dec qword [rsp + r8 - 0xd7]
mul dl
imul r10b
rol ecx, 1
inc r8b
xor ecx, 0xafbdd29c
sub bl, r8b
cqo
cwde
neg ecx
jmp 0x140df817c
bt rdx, rbp
dec qword [rsp + rdx*4]
ror ecx, 1
push r8
call fcn.140dbe482

Function at 0x140ddd2f4
Capabilities:
Authenticate hmac

Disassembly:
sub ecx, 0xffb607a0
ror ecx, 1
mov qword [rsp + rdx*8 - 0x410], rdx
xor ecx, 0xe799c717
mov qword [rsp + rax - 0x7f788a58], rbp
sar word [rsp + rax - 0x7f788a5d], 0x61
lea ecx, [rcx + rax*2 - 0x35d214bc]
and qword [rsp + rdx - 0x7a], r8
xor qword [rsp + rax - 0x7f788a58], r11
ror r8, 0x1d
mov r11d, edx
jb 0x140de29b2
xor dword [rsp + rbx - 0x6fe6cd37], ecx
cbw
mov r11, qword [rsp + rbx - 0x6fe6cd37]
mul bx
add r8w, r10w
movsxd rcx, ecx
xor bp, bp
mov qword [rsp + rdx - 0x44], 0xffffffff91a3c18a
adc rsi, rcx
ror word [rsp + rdx - 0x4a], 0xa3
pop rax
pop rax
jae fcn.140e0aedf
mov eax, 0x4ca82313
movzx ecx, al
movsx edx, al
movzx r10w, byte [r9 + rcx*2 - 0x26]
shl dx, 0xae
mov al, byte [rdx + r9 - 0xbffe]
rol dl, 0xe6
movsx ebp, dl
not r10b
call fcn.140ddde9c
Function at 0x140ddf634
Capabilities:
Authenticate hmac

Disassembly:
push rbx
shr bl, cl
not rdx
mov ebp, eax
lea r8, [rbp*4 - 0x627676ff]
sal byte [rsp + rax*8 - 0x47d], cl
or r10, rdx
sub word [rsp + rax - 0x87], 0x43d
mov qword [r9 + rax*2 - 0x120], r10
lea rdi, [rdi + rax*8 - 0x484]
pop rbp
jae 0x140dd0b84
ror ebp, 1
neg ebp
sub al, al
and rbx, rcx
sub r10d, r10d
mov qword [rsp + rbx*8 - 0x24087248], r11
xadd rdx, rcx
xor dword [rsp + rbx - 0x4810e49], ebp
inc r10b
btc eax, 7
add cx, 0xd5b7
pop r11
adc bl, 0x1f
and rdx, rbx
movsxd rbp, ebp
setp r10b
adc rsi, rbp
movzx r8d, ax
jmp rsi
xchg bl, al
mov r10d, dword [rax + rdi - 9]
sar bl, 0x85
cbw
xor r10d, r11d
rol word [rsp + rax - 6], cl
cmovb bx, word [rsp + rax - 7]
dec bx
dec r10d
not qword [rsp + r8 + 0x627674bf]
xor r8b, cl
idiv al
xor r10d, 0x69ce313
mov byte [rsp + rax*4 - 4], bpl
bswap r10d
dec r8
sub rbp, rbp
jbe 0x140de4462
jmp fcn.140dc2adc
not qword [rsp + r8*8 + 0x10]
lea rax, [rsp + rax + 0x18]
ror ebx, 0x8c
mov qword [rsp + rbx*2 - 0xb1e978a], rbp
shr r8, 0x8f
mov word [r10 + rax - 0x4a000000], cx
call fcn.140dda849
jmp 0x140dd6fcd
mov qword [rsp + rcx - 0x2a076e26], r11
bswap rax
cbw
mov r11d, 0x7a913f0f
xor dword [rsp + rcx*2 - 0x540edc4c], r10d
pop r11
mov r8d, ebx
sub dl, 0x91
or cl, bpl
movsxd r10, r10d
sbb r8, r8
adc rsi, r10
ror rdx, 0x7e
xadd ebp, r8d
jl 0x140dd79b9
mov rax, qword [rbp + r9 - 0x32597f60]
mov r10d, edx
mov r10, qword [r9 + rcx*2 - 0x540edcc4]
call fcn.140df611f
mov ebx, 0x3102c63b
mov r8w, word [r9 + rbx*2 - 0x62058c76]
lea r9, [rbx + r9 - 0x3102c639]
movsx r10d, bx
lea rdi, [rbx + rdi - 0x3102c63c]
sub r10, r10
movzx eax, byte [rdi + r10*4]
lea rcx, [rbx*2 + 0x249bb118]
not ebx
xor al, r11b
neg r10
shr r10, 0x47
dec r10d
adc al, r10b
add rbx, rbx
lea rdx, [rcx*8 - 0x56eda456]
rol al, 1
lea rbp, [rcx*8 + 0x3ebc1a23]
sub al, 0x1f
xadd cl, ch
rol al, 1
xor r11b, al
sub ebx, 0x3929542f
bts rcx, rcx
jae 0x140db5329
add rax, rsp
btr rdx, r10
mov word [rbx + rax - 0x64d11f59], r8w
lea rdi, [rbx + rdi - 0x64d11f5d]
not dx
push rdx
mov eax, 0xd732f383
mov ebp, dword [rdi + rbx - 0x64d11f59]
jb 0x140e0c6c5
neg byte [rsp + rbx - 0x64d11f54]
xor ebp, r11d
xor ebp, 0x24a38b81
cbw
sub ebp, r10d
inc dx
imul byte [rsp + rbx - 0x64d11f56]
jo 0x140db9e84
mov r11d, r10d
mov r11, qword [rsp + rbx - 0xe117fef]
shl ebx, 0xbd
jb 0x140db8d2d
call fcn.140ddea20
mov eax, 0xac016e3b
shr eax, 0xd
mov r8, qword [r9 + rax*8 - 0x2b0058]
movzx r10d, word [rdi + rax*8 - 0x2b005a]
xor r10w, r11w
dec eax
movsx ebp, ax
sub r10w, 0x652d
lea rdx, [rbp*8 + 0x232993a5]
movzx ecx, ax
not r10w
call fcn.140de9286
rol r10d, 1
cbw
mov qword [rsp + rax - 1], r11
cbw
dec ax
xor dword [rsp + rax], r10d
inc cl
sub r8b, cl
movsx edx, r8b
pop r11
movsxd r10, r10d
adc rsi, r10
or ebp, 0x7cbe301a
neg ecx
or rax, rsi
jmp rax

Function at 0x140de08a4
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
xor r11b, dl
neg cl
shl r8w, cl
lea rdx, [rsp + rdx + 8]
mov rbx, qword [rdx + r8*2 - 0x20000]
mov qword [rsp + rbp], 0xffffffffa4962f05
setae byte [rsp + rbp*2 + 5]
mov qword [rbp + r9 - 0xa], rbx
sar byte [rsp + rbp], 0xa2
lea r9, [r9 + rbp - 0xa]
pop rbx
jnp fcn.140e0aedf
Function at 0x140de1030
Capabilities:
Authenticate hmac

Disassembly:
call fcn.140dfbfa3
xor r11b, dl
xchg rbx, rax
mov qword [rsp + rbp - 0x81], 0xffffffffa88422b7
sub ebx, eax
lea rdx, [rsp + rdx + 0x10]
dec r8b
rol rbx, 0xfc
rol ebx, cl
movzx bx, byte [rdx + rax - 0x83]
cmovb r10, qword [rsp + rax*4 - 0x204]
or r10, r10
mov word [r9 + rax - 0x83], bx
not eax
imul qword [rsp + rbp - 0x80]
mov edx, dword [rdi + rbp - 0x88]
lea rdi, [rbp + rdi - 0x88]
push rbp
ror cx, 0x81
jo 0x140e0806e
xor edx, r11d
not edx
mov ebx, ecx
inc cx
inc edx
xchg byte [rsp + rbp - 0x6a], al
jmp 0x140dbe47d

Function at 0x140de1597
Capabilities:
Authenticate hmac

Disassembly:
neg dword [rsp + rbp - 0x60139878]
pop r8
xor r11w, r10w
btc bp, ax
dec word [rsp + rax - 0x20d782ec]
mov word [r9 + rax*2 - 0x41af05f8], r10w
shl cl, 0xe2
lea r9, [r9 + rax - 0x20d782ff]
adc rbp, rcx
movzx r8d, cl
pop rdx
pop rcx
jbe fcn.140e0aedf

Function at 0x140de2085
Capabilities:
Authenticate hmac

Disassembly:
mov qword [rsp + rdx*2 + 8], 0x2f2e489e
adc rsi, r8
xadd ax, dx
pop rbp
jle 0x140db5d2b
pop r10
pop rbx
pop r8
pop r10
jns fcn.140e0aedf
Function at 0x140de20db
Capabilities:
Authenticate hmac

Disassembly:
shr rax, cl
dec word [rsp + r8 - 0x44316a17]
mov qword [rsp + r8 - 0x44316a22], r8
mov qword [r9 + r8 - 0x44316a20], rax
sub byte [rsp + r8 - 0x44316a1c], 0xa5
mov rcx, qword [r9 + r8 - 0x44316a20]
lea r10, [rdx*8 - 0x59f8c245]
add r8, r8
lea r9, [r9 + rdx - 0x4431d43a]
mov eax, r10d
mul r8b
movsx ebp, r8w
movzx eax, byte [rdi + rdx - 0x4431d445]
xor al, r11b
movzx ebx, r8w
sar r10w, 0x2f
adc al, 0xa9
inc r8d
rol al, 1
xadd r8, rbx
jno 0x140e0623f
sal r10, 0x33
inc eax
lea rcx, [r9 + rbx*2 + 0x63bddeb4]
mov qword [rbx + r9 + 0x31deef4e], rcx
lea r9, [r9 + rbx*2 + 0x63bddeac]
jne 0x140e12b1e
xor dword [rsp + rax - 0x4a42040], r10d
sub dl, 0x18
pop r11
rol ecx, cl
xor ebx, 0x272df8bf
movsxd r10, r10d
adc rsi, r10
xchg rcx, r8
mov cx, word [r9 + rax - 0x4a42040]
bt r8w, 0x18
mov bx, word [r9 + rax - 0x4a4203e]
shl bpl, 0xa5
mul ax
lea r9, [r9 + rax - 0x4a40ffe]
dec qword [rsp + rdx - 0x4431d43c]
neg al
lea r10, [rbx + rdx - 0x184e8fe1]
rol al, 1
not dword [rsp + rdx - 0x4431d43d]
and r8, 0x22a90d30
xor al, 0xa0
shl word [rsp + r8*2 - 0x420ff6], 0x8b
rol word [rsp + r8 - 0x2107f9], 0xcd
xadd r8w, r10w
xor r11b, al
or word [rsp + rdx - 0x4431d436], 0xb307
lea rax, [rsp + rax + 0x10]
jne 0x140e10f09
xor r11b, r10b
add dx, 0xcd8a
or rbx, qword [rsp + rbx - 0x5e2a8901]
lea r10, [rsp + r10 + 8]
bts bx, r8w
pop rcx
mov eax, ecx
mov bx, word [rax + r10 - 0x80000000]
lea r10, [rbp + 0x7f31c12f]
bt ebp, ebp
mov word [r9 + riz - 2], bx
mov r10d, dword [rdi + riz - 5]
btr rcx, 0x19
imul eax, eax
lea rdi, [rax + rdi - 5]
shl ebp, 0x2a
neg ebp
xor r10d, r11d
movsx ebx, cl
sar ax, 6
not r10d
btc ax, 0x8c
shl al, 0xe6
inc r10d
rol r10d, 3
cqo
xor r10d, 0x1e3f04a8
bts bp, 0x90
dec r10d
ror edx, 0x35
not r10d
call fcn.140df3351
mov edx, 0x86bef42a
mov rax, qword [r9 + riz]
mov rbx, qword [rax + riz]
movsx ecx, dl
mov qword [r9 + rcx*2 - 0x54], rbx
lea rdi, [rdi + rcx - 0x2e]
movsx r10d, dx
lea rbx, [rdx + 0x4fa04704]
not bl
mov ecx, dword [rdi + rcx - 0x2a]
bt ebx, ebx
movsx eax, bx
call fcn.140deab57
push r10
xchg qword [rsp + rdx*2 - 0xf2], r10
pop rcx
jns fcn.140e0aedf
Function at 0x140de2fb6
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
mov qword [rsp + rbx - 0x14], r11
js 0x140ded984
mov r10d, 0x7f3174ab
push r10
movzx edx, word [rsp + r10 - 0x7f3174a7]
mov r10, qword [r9 + rdx]
movsx eax, dl
lea r8, [rax + rax + 0x1304ac24]
lea r9, [r9 + rdx + 8]
ror qword [rsp + rdx], 3
lea rdi, [rdx + rdi - 1]
ror word [rsp + rdx + 1], 0x63
movzx r8d, byte [rdx + rdi]
movsx ebx, al
xor dl, ah
xor r8b, r11b
lea rdx, [rax*4 - 0x5165ab7c]
movzx ecx, word [rsp + rdx + 0x5165ab7e]
rol r8b, 1
dec r8b
rol r8b, 1
dec r8b
call fcn.140dfda54
btc ax, 0x8e
lea r9, [rbp + r9 + 0x447f30b2]
sub qword [rsp + rax*2 - 0x8000], rbp
mov qword [rsp + rbx - 0x1000000], rsi
ret
mov r8d, ebx
movsxd rdx, edx
add rsi, rdx
bts eax, ebx
movsx ecx, bx
jmp rsi
movsx eax, bp
shl dword [rsp + rcx - 0x76713f40], cl
mov r11, qword [rsp + rbx - 0x4011]
inc rcx
jae 0x140e0dfb3
div rbp
movsxd r10, r10d
add rsi, r10
push rcx
mov rcx, qword [r9 + rbx - 0x4021]
neg rbx
add r8b, 0xb3
lea r9, [r9 + rbx*4 + 0x100b4]
adc ebx, edx
movzx r10d, word [rdi + rbx - 0x2dbf434f]
lea rdi, [rdi + rbx*2 - 0x5b7e8697]
xor r8d, dword [rsp + rax - 0x1f3d0cd7]
xor r10w, r11w
inc rdx
xchg qword [rsp + 8], r8
add r8, 0x2ab12
jmp r8
btc bp, 0x94
xor dword [rsp + rbx - 0x14], edx
neg bx
pop r11
js 0x140dd58b4
sal word [rsp + rdx - 0x733fef15], 0x6f
xor r11b, bpl
lea rbp, [rsp + rbp + 8]
rol rdx, 7
xadd rax, r8
mov dword [rbp + r8 - 0x733fef15], r10d
and qword [rsp + r8 - 0x733fef15], rbx
mov ebp, dword [rdi + r8 - 0x733fef1a]
lea rdi, [rdi + r8 - 0x733fef1a]
xor ebp, r11d
neg r8b
rol ebp, 1
sub byte [rsp + r8 - 0x733fefe4], dl
shr eax, 0xb2
inc ebp
btc rdx, rax
rol ebp, 1
cwde
imul dword [rsp + rax - 0x399c]
movzx r10d, dl
sbb ebp, 0x99a24a00
call fcn.140e0357d
adc rax, rsp
mov qword [rbp + rax + 0x447f30c7], r8
or r10b, byte [rbp + rdi + 0x447f30c0]
imul rdx, rdx
sar ebx, 0xd6
neg cx
lea rdi, [rdi + rbx - 7]
shr dl, 2
sal bx, 0x43
movsx eax, bl
xor r10b, r11b
shl rcx, 0xa1
xor r10b, 0xf
movzx r8d, bl
shl r8b, 0x84
not r10b
sbb r10b, 0x98
rol dl, 0xc5
rol r10b, 1
xor r10b, 0x35
bts rbx, rax
sal r8d, 0xc5
adc r10b, 0x8a
bswap ebx
shr bl, 0x24
push rax
xor r11b, r10b
cdq
shr qword [rsp + rbx*2 - 0x2000000], 0x39
inc word [rsp + rbx*4 - 0x4000000]
lea r10, [rsp + r10 + 8]
or edx, dword [r10 + rbp + 0x447f30c7]
imul cx, bx
adc bpl, r8b
add bpl, 0x19
mov dword [r9 + rbx*4 - 0x3fffffc], edx
jnp 0x140dbd651
sal rdx, 0x1c
movzx r10w, byte [rdx + r9 - 2]
shr cl, 0x41
mov bpl, byte [rdx + r9]
xor qword [rsp + rdx], 0x2bb5d533
inc rbx
and r10b, bpl
not r10b
pop rax
neg rbx
call fcn.140ddbd3f
mov eax, 0xc1bc77a0
dec ax
movzx ebp, ax
lea rdi, [rdi + rbp*4 - 0x1de80]
mov r8d, dword [rdi + rbp - 0x779f]
push rbp
pop rdx
xor r8d, r11d
div bpl
btr rdx, rax
movsx ecx, al
not r8d
lea rbx, [rcx + rdx + 0x1d01a9a2]
and bpl, bl
ror rdx, 0xc6
dec r8d
neg r8d
not r8d
jmp 0x140ddf399
mov qword [rsp + r10 - 0x1537d7ec], rbx
jle 0x140dbb620
xor ax, 0x41a8
not ecx
btr ebx, 0x96
adc ax, 0x10
sar r10w, 0xa8
movzx edx, cx
xadd ebx, r10d
xor r11w, ax
shl dx, 0x23
jp 0x140df1a73
Function at 0x140de3585
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
xor ax, r11w
xor rbp, qword [rsp + rcx*2 + 5]
pop rdx
xchg byte [rsp + rcx + 5], r8b
adc ax, 0x4fab
movsx ebx, bpl
not ax
pop r10
sub ax, 0x2589
add dl, 0x19
neg ax
sal rbx, 4
not rbp
xor r11w, ax
imul rbp, rcx
bt r8, 0x29
dec dx
adc rax, rsp
btc dx, bx
xor rbp, qword [rcx + rax]
sar rcx, 0xfe
mov qword [r9 + rcx*2 - 0x10], rbp
lea r9, [r9 + rcx*2 - 0x10]
jp fcn.140e0aedf
mov edx, 0xca347894
movzx eax, dl
mov r8d, dword [rdi + rax*8 - 0x4a4]
sal edx, 0x3d
mov ebp, eax
sbb rbp, 0xabb0203
xor r8d, r11d
not r8d
ror ax, 0x2d
btc ebp, ebp
and al, al
inc r8d
movsx ecx, bpl
xor r8d, 0x121c2701
rol r8d, 1
mov r10d, 0xe2250b23
and dl, ch
inc dx
push r11
lea rbx, [r10 - 0x214b0fcf]
xor dword [rsp + rax - 0x4a0], r8d
cwde
inc bx
pop r11
ror rbp, 0x8e
movsxd r8, r8d
lea r10, [r10 + rcx*2 + 0xa3df93]
cqo
adc dl, cl
adc rsi, r8
lea rbx, [rbx + rbp - 0x61cddf49]
movzx r8d, bp
movzx eax, byte [rdi + rdx*4 - 0x24d]
neg rbp
adc dx, bp
btc r8d, 0x29
xor al, r11b
xor al, 0x3e
dec edx
or r10d, 0xc8983326
ror al, 1
rol cx, 0x89
push r10
adc al, 0xa6
rol al, 1
call fcn.140db672c
sub qword [rsp + rcx + 8], 0xffffffffb3392997
mov qword [rsp + rcx + 8], r11
mov qword [rsp + rcx*4], 0xffffffffab04b5b7
sub bpl, al
rol byte [rsp + rcx + 7], 0x61
xor dword [rsp + rcx + 8], ebx
push rcx
pop r8
mov r11, qword [rsp + rcx*2 + 8]
movsxd rbx, ebx
add rsi, rbx
movzx eax, word [rdi + rcx - 6]
mov qword [rsp + rcx + 8], 0xffffffffef05fb10
lea rdi, [rcx + rdi - 6]
mov r10d, edx
sal dl, 0x66
jae 0x140ddf268

Function at 0x140de4c30
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
sbb r10d, 0xffb6079f
mov qword [rsp + rdx*2 - 0x8002], rbp
lea rcx, [rdx*8 + 0x3dba9b13]
ror r10d, 1
xor r10d, 0xe799c717
xchg byte [rsp + rdx*4 - 0xfff0], bpl
lea r10d, [r10 + rbx*2 - 0x194b0150]
xchg ebp, eax
mul r8
idiv ebx
mov qword [rsp + rax*2 + 0x10], r11
shl ecx, 0xc4
adc edx, r8d
xor dword [rsp + rax + 0x10], r10d
lea r11, [r8 + rbp*4 - 0xc725b57]
mov r11, qword [rsp + rdx - 0x17251c84]
btc bp, bx
jb 0x140e0db57
movsxd r10, r10d
adc rsi, r10
pop rbx
pop rbp
pop rdx
jmp fcn.140e0aedf
mov eax, 0xc620f18b
ror ax, 0x29
sbb rdi, 3
mov r8d, dword [rdi + riz]
movzx ecx, al
bts cx, 0x9e
movsx ebx, al
xor r8d, r11d
ror r8d, 1
movsx r10d, cx
bswap r8d
xor r8d, 0xcdbf4a1c
lea rdx, [rax*8 - 0x4771f75]
neg r8d
jmp fcn.140df3f10

Function at 0x140de4e7e
Capabilities:
Authenticate hmac

Disassembly:
call fcn.140e142d1
jmp 0x140dcad08
lea rsp, [rsp + 8]
jne 0x140de0cde
mov r8, rax
call fcn.140dcca9b
Function at 0x140de5976
Capabilities:
Authenticate hmac

Disassembly:
neg ecx
sar dl, 0xe7
dec edx
xchg r8w, ax
mov qword [rsp + rdx - 0x17ffffef], r11
cdqe
xor dword [rsp + rdx*2 - 0x2fffffee], ecx
and rax, r8
ror r8d, 0x13
movsx r11d, al
mov r11, qword [rsp + rdx*2 - 0x2fffffee]
mov qword [rsp + rdx*2 - 0x2ffffffe], 0xfffffffff8374f8f
movsxd rcx, ecx
add rsi, rcx
mov r8, qword [rdx + r9 - 0x17fffff7]
rol bx, 0xe
lea r9, [r9 + rdx*2 - 0x2fffffee]
shl bp, 0x86
lea r10, [rbp*8 + 0x3a8c13]
sub word [rsp + rdx*4 - 0x5ffffff9], r10w
movzx ecx, word [rdi + rdx*2 - 0x30000006]
cmovg r10, qword [rsp + rdx - 0x17fffff7]
lea rdi, [rdi + rdx - 0x18000007]
sal rax, 0x16
xor cx, r11w
mov qword [rsp + rdx*2 - 0x2fffffee], 0xffffffffff8978b9
sub r10, 0x4f0959a0
bswap r10d
adc cx, dx
xor cx, dx
cdqe
sub cx, 0xc509
xor cx, dx
xor cx, 0xe737
xor r11w, cx
ror ebx, 0x30
lea rcx, [rsp + rcx + 0x18]
call fcn.140dd8bab

Function at 0x140de723a
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
movsxd r10, r10d
cmovb rbx, r8
call fcn.140ddeda6
mov r10d, 0xeaa5d1b3
movzx edx, r10w
movsx ebp, dl
mov rdx, r9
sub r9, 2
mov r8d, 0xd491640a
btc r10w, bp
movsx ecx, r10w
mov word [r9 + riz], dx
sbb rdi, 4
neg r8w
movzx edx, r10b
mov ebx, dword [rdx + rdi - 0xbb]
lea rax, [rbp*8 - 0xcf518f8]
btr r8, rdx
sal bpl, 0xc5
xor ebx, r11d
jmp 0x140dbe2ff
xchg r10w, ax
lea rdx, [rax + rbp*4 + 0x6e9468a4]
rol ebx, 3
cbw
bts r8w, r10w
imul r10d
bswap ebx
rol r10, 0x70
ror ebx, 1
inc rdx
neg cl
sbb edx, r10d
lea ebx, [rdx + rbx + 0x4f9d18c9]
sal cl, 0x26
add r8b, r8b
xor ebx, 0x883cdc3a
or r8d, eax
rol ebx, 2
bt dx, bp
rol rbp, 0x44
xor ebx, 0x23b19121
cdqe
push r11
lea rdx, [r10 - 0x22d1e7d3]
xor dword [rsp + rax - 0x742960e0], ebx
bts rbp, r10
xchg bpl, r10b
pop r11
movsxd rbx, ebx
adc rsi, rbx
cdqe
bts rdx, r10
movzx ebx, al
jae fcn.140e0aedf
sub rdi, 4
mov ecx, dword [rdi]
mov ebx, 0x3b3e4ebe
xor ecx, r11d
call fcn.140dca2dc
btc rbx, r8
pop r11
add dx, 0xa105
jne 0x140dbdf5b
lea rbp, [rdx + rdx*2 - 0x2c69a75]
inc r8w
lea r10d, [r10 + r8 - 0xef4ff4e]
sal rcx, 0x17
mov qword [rsp + rbx - 0xf0a0], r11
xor dword [rsp + rbx - 0xf0a0], r10d
ror bp, 0x6c
jb 0x140de506b

Function at 0x140de7c2a
Capabilities:
Authenticate hmac

Disassembly:
xor dword [rsp + rbx - 0xf7], ebp
neg r8w
sal r8d, cl
rol cx, cl
mov r11, qword [rsp + rbx - 0xf7]
movsxd rbp, ebp
adc ebx, ecx
ror eax, 0x8d
sar rbx, 0xc1
add rsi, rbp
shl r10d, cl
btr rdx, rdx
mov r9w, word [r10 + r9 - 0x77b7d4c0]
mov qword [rsp + r10 - 0x77b7d4c0], 0x5f892d85
lea rbp, [rdx + rcx - 0x3252b6e1]
pop r8
pop rbx
jae fcn.140e0aedf
Function at 0x140de99c9
Capabilities:
Authenticate hmac

Disassembly:
mov qword [rsp + rcx], 0xffffffffe8b65135
mul dx
lea rbp, [rsp + rbp + 8]
not dword [rsp + rcx + 1]
or rcx, qword [rbp + rcx*2]
mov ebp, ebx
sal r8w, 0x2f
mov qword [r9 + riz - 0xc], rcx
sbb bx, bp
jno 0x140dfde63
mov edx, dword [r9 + r8*4 - 0x6a61d6e4]
mov r10d, ecx
inc r10w
call fcn.140de6545
mov rdx, r9
mov eax, 0x1b0385b2
mov r8d, 0xcb328b17
mov qword [rax + r9 - 0x1b0385ba], rdx
mov edx, eax
movsx ebx, al
mov eax, dword [rdi + rax - 0x1b0385b6]
movsx r10d, r8w
xor r8, 0x2f30cb23
xor eax, r11d
movzx ebp, r8w
shr r10, 0x21
not eax
lea rbx, [rdx*4 + 0x382436a8]
inc bpl
inc eax
xor rbp, r8
rol eax, 3
xor eax, 0x1e3f04a8
imul rbx, r8
adc r8b, bl
lea r8, [r10 + rdx*8 - 0x53effce2]
dec eax
shr r10d, 0xef
not eax
push r11
ror r10, 0x9b
xor dword [rsp + rdx - 0x1b0385b2], eax
pop r11
movsxd rax, eax
add rsi, rax
neg r10b
xor r10, 0xd966129
movzx ebp, byte [rdx + rdi - 0x1b0385b7]
imul r10w, r8w
lea rdi, [rdi + rdx*4 - 0x6c0e16cd]
movzx ecx, bx
xor bpl, r11b
dec rbx
and dx, r10w
inc bpl
push r10
or r10, 0xffffffff9412b9a7
and edx, 0x7036528f
neg bpl
mov eax, edx
add bpl, r10b
bts r8d, r10d
xadd dword [rsp + rdx*2 - 0x20040104], edx
xor bpl, 0xb4
xor r8b, dl
ror bpl, 1
btc edx, 0x81
xor r11b, bpl
not al
mov word [r9 + rdx*2 - 0x1b2d73c2], bp
neg word [rsp + rdx*4 - 0x365ae76c]
shr ebx, 0x57
btr r10d, ecx
lea r9, [rdx + r9 - 0xd96b9e6]
setb r10b
pop rbx
movzx ebp, r8b
jb fcn.140e0aedf
push 0xffffffffb7356aab
lea rsp, [rsp + 8]
and rsp, 0xfffffffffffffff0
call fcn.140de0cd9
ror cl, 1
shl dx, 2
pop rax
inc cl
bts r8d, edx
cbw
neg cl
rol dx, 0xad
movzx ebx, dx
xor r11b, cl
lea rbx, [rax + r10*4 - 0x35c910cf]
xadd rax, rbx
jae 0x140de161f
je 0x140de10dc
adc r9, 0xfffffffffffffff3
dec dword [rsp + r8 - 0x7ffffffc]
call fcn.140e0f69f