joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140095046
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
jle 0x140098805
cmp r12, 0xc988606
jl 0x1400b048f
mov qword [rsp + 0x38], r14
add byte [rsp + 0x38], 0xa0
add qword [rsp + 0x18], 0x48d1
lea rax, [rax + 0x272c1d1e]
push rdx
mov rdx, r12
push rdx
shr r14, 0x31
jbe 0x1400afe37
push 0xffffffffbe9622a1
lea rsi, [rsi + 0x659fa6bf]
test ecx, ecx
call fcn.1400b06f6

Function at 0x140095082
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
jbe 0x14009b2cb
movabs rax, 0xe110ec9f6598e60d
push r14
push rdi
mov rax, qword [rsp + 0x30]
mov rax, qword [rax]
mov r14, r12
call fcn.140095046

Function at 0x1400950f6
Capabilities:
Encrypt data using speck

Disassembly:
xchg qword [rsp + r8 - 0xcd70], rsi
mov r10, qword [rsp + r8 - 0xcd80]
and r8, r8
jns 0x140096572

Function at 0x14009521e
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
add qword [rsp + 8], 0xffffffffbff6b3db
test byte [rsp + 0x40], 0xab
call fcn.14009d2ce

Function at 0x140095242
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
call fcn.140095d2f
mov rdx, qword [rsp + 0x18]
shl dword [rsp + rdx*2 + 0x6cfcf2aa], 0xe1
jae 0x140096631
jns fcn.14009a740
cmp dword [rsp + rdx + 0x367e7961], edx
push rdi
lea rdi, [rdi + 0x550bb91c]
call fcn.140098111
add qword [rsp + 8], 0xa86
nop
call fcn.140094aea
call fcn.140057fc3
call fcn.140097154
mov qword [rsp + rdx*2 + 0x6cfcf2b2], rdx
lea rdx, [rdx*8 - 0x57dfdce]
jns fcn.140096d78
xchg qword [rsp + 0x48], rdi
mov rdx, qword [rsp + 0x30]
xor qword [rsp + 0x40], 0x289c37b4
jg 0x14009d0d5
cmp qword [rsp + 0x40], 0x4790e4a5
jb 0x1400948b9
push qword [rsp + 0x38]
popfq
lea rsp, [rsp + 0x48]
ret 8
lea rbx, [rbx + rcx - 0x1a65c953]
call fcn.1400af29e

Function at 0x140095374
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
shr word [rsp + 0x20], 0xc3
call fcn.140096064

Function at 0x140095384
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
mov rcx, qword [rsp + 0x20]
mov rcx, qword [rcx]
mov r8, r13
sub r13d, 0x7a87ec80
mov qword [rsp + r8*2 - 0x630030e0], r14
mov r13w, r14w
jge 0x1400ae35f
call fcn.14009fe23

Function at 0x140095459
Capabilities:
Encode data using base64
Encrypt data using speck

Disassembly:
shl rdx, 0x26
jae 0x14009a0ca
mov rdx, qword [rsp + 0x10]

Function at 0x1400955b3
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
add qword [rsp], 0xffffffffbff6b7d1
call fcn.14009a29c
Function at 0x1400955c1
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
call fcn.140098d63
mov qword [rsp + r12 + 0x310e0038], rcx
or cl, byte [rsp + r12*2 + 0x621c003d]
call fcn.1400965b4
mov rbx, qword [rsp + 0x10]
xchg qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
add qword [rsp + 0x18], 0x12991
mov qword [rsp + 0x10], 0x623d3fac
add qword [rsp], 0xfffffffffffe780e
movabs rbx, 0x86b02b9f252bce21
mov bl, 0x85
shl byte [rsp + 0x10], 0x26
add bl, 0x3c
mov rbx, qword [rsp + 0x18]
mov rbx, qword [rbx]
jo 0x140094999
add word [rsp + 0x10], 0xf31d
jns 0x14009ac86
sub byte [rsp + 0x10], 0xa4
jo 0x14009acb5
mov qword [rsp + 0x18], 0xffffffff84934923
ret
cmp r12, 0x72849208
mov rax, qword [rsp + 8]
mov rax, qword [rax]
setns r12b
call fcn.1400b03a7

Function at 0x1400956e4
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
sub r11, 0xffffffffec1c10a7
lea rdi, [rdi + r11 - 0x7fae051e]
add r11w, 0x958e
add r11d, r11d
cmp r11w, 0xdd10
jae 0x140096247

Function at 0x140095886
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], 0xffffffffc9ad0791
not qword [rsp + 0x18]
jne 0x14009d528
call fcn.1400aeaa8

Function at 0x1400958d5
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
shr r8, 0x49
lea rdi, [rdi + r15 - 0x61cfcd73]
jbe 0x1400af6c7

Function at 0x140095af1
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
and r15b, 0x37
or r15b, 0x20
mov rdi, qword [rsp + 0x10]
mov rdi, qword [rdi + r15 - 0x6cb50020]
jg 0x14009af2e
mov rdx, rbp
neg rbp
cmp bp, 0x4c24
mov qword [rsp + r15 - 0x6cb50010], rdx
lea rdi, [rdi + r15 - 0x7af477]
movzx r15w, bpl
push rbp
push rdi
je 0x14009d3bb
push r12
cmp edx, dword [rsp + 0x13]
xchg qword [rsp + 0x50], rdi
mov rdx, qword [rsp + 0x20]
call fcn.14009627e

Function at 0x140095c6a
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
add r13w, 0xa21e
bswap r13d
neg r9d
jb 0x14009cb14

Function at 0x140095c82
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
push r8
call fcn.1400ae73d
not r8w
ja 0x1400afea6
mov r8, qword [rsp + r8*8 + 8]
call fcn.140098f84

Function at 0x140095f88
Capabilities:
Encrypt data using speck

Disassembly:
call fcn.14009902b
lea rbx, [rbx + 0x4f35ac91]
setb byte [rsp + 0x10]
call fcn.14009a86e

Function at 0x1400961ca
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
lea r13, [r14 + r13 + 0x5196459e]
call fcn.14009871f
Function at 0x14009622f
Capabilities:
Encrypt data using speck

Disassembly:
add qword [rsp], 0xffffffffffff76f8
movabs rbp, 0x810d4ba46fac0326
call fcn.14009f4b2
mov qword [rsp + 0x18], r11
xor r11d, dword [rsp + 0x18]
xchg qword [rsp + r11 + 0x30], rdi
mov r11, qword [rsp + r11 + 0x28]
jl fcn.14009c9a1
cmp dword [rsp + 0x18], 0x4697eaab
not word [rsp + 0x18]
sete byte [rsp + 0x18]
call fcn.14009b231

Function at 0x140096297
Capabilities:
Encrypt data using speck

Disassembly:
pushfq
add qword [rsp + 8], 0xffffffffbff6ab7c
call fcn.140094ab0

Function at 0x1400962a6
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
mov r15, qword [rsp + r15*2 - 0x60482612]
jne 0x14009701e
or dword [rsp + 0x20], 0x7894c424

Function at 0x140096472
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
pushfq
cmp word [rsp + 0x30], 0xae29
call fcn.1400b13da

Function at 0x14009648d
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
mov r15, qword [rsp + rbx - 0x3fff5fe8]
shr bl, 0x35
cmp r15, rbx
ja fcn.1400940ef
lea rsi, [rsi - 0x6e73dc44]
jns 0x140099968
add bl, 0x2f
shr ebx, 2
not ebx
mov bx, 0x9700
or bx, 0x9ea4
push r15
nop
not ebx
setb bl
movabs rsi, 0x9911b1168a4e12d
cmp rsi, 0xffffffffa4a66c0a
lea rsi, [rbx + rsi*4 - 0x2560d77d]
mov rsi, qword [rsp + 0x18]
mov rsi, qword [rsi + rbx*2 - 0x7ffec000]
mov qword [rsp + rbx - 0x3fff5fe8], rbx
jno 0x140095cc7

Function at 0x140096560
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
mov rbx, qword [rsp + 0x30]
neg esi
jle 0x14009d23b
call fcn.1400b1036
mov r8b, byte [rsp + 0x27]
cmp r8d, 0x3e02dbba
call fcn.140095f88
push rbx
mov rbx, rsi
mov rbx, qword [rsp]
lea rbx, [rbx + 2]
movsx rsi, si
add si, 0x4f12
mov qword [rsp], rsi
test r12, rsi
call fcn.1400956ae
movabs r12, 0xda048208f99e0d1b
jbe 0x14009889e

Function at 0x140096590
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
setb byte [rsp + 0x20]
jbe 0x14009b32c
push qword [rsp + 0x18]
popfq
lea rsp, [rsp + 0x28]
ret
and r15d, r15d
mov r15, qword [rsp + r15 - 0x19c57b]
jo 0x1400962bc
jle 0x14009622a
call fcn.140095445
adc dl, cl
pushfq
mov eax, dword [rdi]
clc
xchg ebp, eax
invalid
Function at 0x14009663b
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
call fcn.140095d2f
mov rdx, qword [rsp + 0x18]
shl dword [rsp + rdx*2 + 0x6cfcf2aa], 0xe1
jae 0x140096631
jns fcn.14009a740
cmp dword [rsp + rdx + 0x367e7961], edx
push rdi
lea rdi, [rdi + 0x550bb91c]
call fcn.140098111
add qword [rsp + 8], 0xa86
nop
call fcn.140094aea
call fcn.140057fc3
call fcn.140097154
mov qword [rsp + rdx*2 + 0x6cfcf2b2], rdx
lea rdx, [rdx*8 - 0x57dfdce]
jns fcn.140096d78
xchg qword [rsp + 0x48], rdi
mov rdx, qword [rsp + 0x30]
xor qword [rsp + 0x40], 0x289c37b4
jg 0x14009d0d5
cmp qword [rsp + 0x40], 0x4790e4a5
jb 0x1400948b9
push qword [rsp + 0x38]
popfq
lea rsp, [rsp + 0x48]
ret 8
lea rbx, [rbx + rcx - 0x1a65c953]
call fcn.1400af29e

Function at 0x1400966cb
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
add qword [rsp], 0xffffffffbff4e938
or bp, 0x8a9
shl ebp, 0x8a
not bpl
jbe 0x14009911c
lea rsi, [rsi + rbp*2 + 0x15ea1ba7]
mov qword [rsp + rbp*2 - 0x45d9f6], rbp
shl byte [rsp + rbp*8 - 0x11767f0], 0x4f
add bpl, 0xa2
lea rbp, [rbp + rbp*8 - 0x39ea36d7]
xchg qword [rsp + rbp*2 + 0x715fca7c], rsi
mov rbp, qword [rsp + rbp*2 + 0x715fca74]
or qword [rsp + 8], 0x3895fb9
add qword [rsp + 8], 0xffffffff9a005a18
add byte [rsp + 8], 6
call fcn.1400b06c8
mov bl, byte [rsi]
movabs eax, dword [0xce0f49c2b716013e]
je 0x1400af6a5
lea rbp, [rbp + rdx + 0x398bbb8]
jbe 0x1400b16f1
mov rsi, qword [rsp + 8]
mov rsi, qword [rsi]
jge 0x1400948ef
cmp r13b, byte [rsp + 0x19]
lea rcx, [rcx + 0x73820c82]
push rsi
sets byte [rsp + 0x18]
mov rsi, qword [rsp + 0x20]
test r13, 0xffffffffc38acf22
xchg qword [rsp + 0x38], rcx
mov r13, qword [rsp + 0x10]
call fcn.1400b0190
not r8
mov r15, qword [rsp + r8 + 0xcd5d]
jge 0x1400adaae
shl r8b, 0x4f
xor r8, r8
cmp r8w, 0xfc07
pop r8
mov qword [rsp + 0x48], r14
or r14d, r8d
shr rsi, 0x2a
call fcn.1400948ac

Function at 0x140096942
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
xchg qword [rsp + r11 - 0x2221502c], rcx
add r11w, r11w
push r14
movzx r11w, r11b
xor r11, r11
call fcn.14009cc92
Function at 0x14009695d
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
push r11
pushfq
movabs r11, 0xdb069b09e92816ad
shr r11b, 0xc2
not r11w
mov qword [rsp + 0x10], rdi
cmp r11d, 0x7f1c038d
not r11d
movzx r11, r11b
lea r11, [r11 + r11*4 - 0x28502054]
movsxd r11, r11d
movsxd r11, r11d
push r11
lea r11, [r11 + r11*2 + 0x22b13a1e]
mov r11, qword [rsp + r11 + 0x563f2469]
mov qword [rsp + 0x10], rbx
jne 0x1400aea05
or byte [rsp], 0xb7
sub byte [rsp], 0xb1
or byte [rsp], 0x15
mov rbx, qword [rsp + 0x18]
not byte [rsp]
push rbp
mov rbp, qword [rsp + 8]
setbe byte [rsp + rbp*2 + 0x50a03e38]
xor dword [rsp + rbp + 0x28501f20], 0x3534c903
add word [rsp + rbp + 0x28501f20], bp
add qword [rsp + rbp + 0x28501f20], 0xffffffffae0c9fac
lea rbx, [rbx + rbp*2 + 0x50a03e31]
push r13
movsx rbp, word [rsp + rbp*2 + 0x50a03e40]
push 0x5d0d9239

Function at 0x140096a6d
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
shr qword [rsp + 0x20], 0x2c
movzx esi, sil
movzx esi, sil
mov rsi, qword [rsp + rsi + 0x2f]
setae byte [rsp + 0x48]
jb 0x1400b0bba
or bl, cl
add qword [rsp], 0xfffffffffffeec9c
or word [rsp + rbx*2 - 0xbe], 0x692c
cmp dl, 0x1a
jl 0x14009bbe9
movabs rcx, 0xa2a18a1f2f97eb3c
mov dx, word [rsp + 0xb]
mov qword [rsp + rbx - 0x4b], rbx
or cl, byte [rsp + 9]
mov rcx, qword [rsp + rbx - 0x63]
mov rcx, qword [rcx + rbx - 0x63]
sub word [rsp + rbx - 0x4b], 0xac83
jo 0x140096894
neg edx
neg dx
jle 0x14009e15b
lea rcx, [rcx + rbx*2 - 0x196db8a3]
call fcn.1400b1510
add dword [rcx - 0x535474d8], esp
and byte [rbx + 0xf], dl
xchg byte [rbp + 0x66ffffbc], bh
and dword [rsp + 0x40], 0x81486f95
and al, 0x40
add bh, byte [rbx + 0x5cf7922a]
and al, 0x40
push qword [rsp + 0x50]
popfq
lea rsp, [rsp + 0x58]
ret
add dword [rsp + 0x20], 0x95a4a0b1
and r11d, dword [rsp + 0x22]
setae byte [rsp + 0x30]
call fcn.1400947d6

Function at 0x140096b6d
Capabilities:
Encrypt data using speck

Disassembly:
jg 0x14009a8f3
add word [rsp + 0x50], 0x33a9
mov r14, qword [rsp + r14*2 + 0x40]
add rcx, rcx
setge r9b
add qword [rsp], 0xffffffffbff4e8d8
call fcn.14009ae88
syscall
push r14
mov qword [rsp], 0x43e7eea7
call fcn.1400c9c24
jg 0x140095f8d
not qword [rsp + 0x18]
add qword [rsp + 0x10], 0x3128
call fcn.1400ae658
call fcn.14009f275

Function at 0x140096c56
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
jbe 0x14009a94e
mov word [rsp + 0x20], 0x58a0
push qword [rsp + 0x38]
popfq
lea rsp, [rsp + 0x40]
ret 8

Function at 0x14009711b
Capabilities:
Encrypt data using speck

Disassembly:
jae 0x14009b33d
call fcn.14009accd
mov rbx, qword [rsp + rbx*8 - 0x490]
xchg qword [rsp + 0x10], rbx
call fcn.140095432
call fcn.14009ac9b
sub edi, 0x67a26cbb
lea r8, [rsi + rdi*4 + 0x69be30b5]
movabs r15, 0x1eaf482e833633b1
jo 0x14009af6b
call fcn.14009e3ac
Function at 0x140097166
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
pushfq
add qword [rsp + 8], 0xfffffffffffbfb0c
cmp r9d, 0x8b1e6c39
push rcx
mov rdx, qword [rsp + 0x10]
mov rdx, qword [rdx]
setns r9b
mov rcx, r9
mov r9d, 0xe08e8a1f
shl cx, 0x7a
je 0x14009abad
add qword [rsp + 0x20], 0xffffffffbff50d6f
not qword [rsp + 0x60]
neg byte [rsp + 0x48]
push qword [rsp + 0x68]
popfq
lea rsp, [rsp + 0x78]
ret
mov r13, r9
or cl, 0x94
lea rdx, [rdx + 0x1db6f120]
lea r13, [rcx + rcx*2 + 0x1e27c712]
test cl, r13b
not r13
bswap ecx
xchg qword [rsp + 0x28], rdx
mov r9, qword [rsp + 0x20]
call fcn.1400adc39

Function at 0x1400971b4
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
push r10
bswap r11
mov rax, qword [rsp + 0x28]
push r12
mov r12, r11
movabs r10, 0x8d1c8093a92e5620
push rbx
lea r10, [r11*2 - 0x74d5016d]
bswap r11d
neg r12
and r10w, 0xa42a
movabs rbx, 0xe836d7ab2c964e80
lea rax, [rax + 1]
not r12
cmp r12d, 0xb2faabe
push r8
call fcn.14009b3e5

Function at 0x1400972fe
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
push rdx
call fcn.14009d088
cmpsd dword [rsi], dword [rdi]
sbb byte [r11 + rsi*4 + 0x48fe128e], r11b
add qword [rsp], 0x1a1e9
call fcn.14009ccda

Function at 0x1400973cf
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
mov rbp, qword [rsp + 0x38]
mov rbp, qword [rbp + riz]
lea r9, [rbx*4 + 0xb3d268b]
js 0x14009a0d1
shl rbx, 0x70
shr r10, 0x61
lea rbp, [rbp + rbx - 0x34e4944a]
shr r10b, 0x3c
cmp r10, 0x7eb69ebe
call fcn.1400afec1

Function at 0x1400978ed
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
mov r13, qword [rsp + 0x30]
xor dword [rsp + rdi*2 - 0x9bce], 0x4183ce04
jo 0x14009ec98
shr rdi, 0x19
js 0x14009fe88
jns 0x1400b19f3
push rbx
call 0x14009793c
movabs r15, 0x73bf6e08debcf2b9
pushfq
mov r15w, 0xb29a
xor r15d, 0xc1addead
xchg qword [rsp + r15*4 - 0x7c45b0c4], rdi
shl r15d, 0x7d
push rbp
add r15, 0x469582b6
neg r15
jne 0x1400b1728

Function at 0x14009793c
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
pushfq
movabs rcx, 0xa8b83d1ea805b235
shl rcx, cl
jbe fcn.1400980f0
mov rcx, qword [rsp + 0x10]
xchg qword [rsp + 0x20], rcx
call fcn.14009b925
pushfq
push r11
add qword [rsp + 0x10], 0x38d6
movabs rbx, 0x5406bea994884b96
cmp ebx, 0x820c64a4

Function at 0x140098246
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
test rbp, r9
jg 0x1400b1587
mov r11b, 0x30
lea r11, [r11 + riz + 0x9ad6291]
bswap rax
push rbx
mov rax, qword [rsp + 0x18]
mov rax, qword [rax]
not r11
call fcn.14009c943
mov rbp, rsi
test di, 0xa1b6
ja 0x14009b25f
xor r12b, byte [rsp + rdi + 0x53]
and r12d, r14d
js 0x1400afd87
not di
cmp r14w, word [rsp + r14*2 + 0x5bf4]
mov rsi, qword [rsp + 0x70]
mov r9, qword [rsp + r12 - 0x7f9c0220]
call fcn.1400ae497
call fcn.140099136
Function at 0x1400983ae
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
pop rsi
push rcx
movabs rcx, 0x45285d1c7b904a03
bswap ecx
pushfq
add rcx, rcx
xor ecx, ecx
not cl
xchg qword [rsp + rcx - 0xef], rsi
and rcx, 0xffffffff8c28c21c
push r10
push r15
call fcn.140095660

Function at 0x1400984f5
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck

Disassembly:
or r14b, byte [rsp + 0x2d]
add dword [rsp + 0x10], 0xb2898213
js 0x1400ae7a5

Function at 0x140098508
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck

Disassembly:
mov rdx, qword [rdx]
ja 0x1400ae3ed
lea rdx, [rdx + 0x1eaf5e38]
jbe 0x1400ad9d3
and r12d, 0xefa2b73e
add r12b, byte [rsp + 0x43]
neg r15
jge 0x140095468
call fcn.1400aedef
or dword [0x16d1a3bd3], edx
add al, 0x2f

Function at 0x1400986ec
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
not byte [rsp + 0x38]
mov qword [rsp + 0x38], 0xfffffffff81c299a
jg 0x1400b0014
setae byte [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
call fcn.1400960ee
syscall
push rdx
mov qword [rsp], 0x4405f467
call fcn.1400c9c24

Function at 0x14009871f
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
js 0x1400989f2
jge 0x1400ae5ad
shr r8b, 0xfb
cmp rdi, qword [rsp + 0x28]
add qword [rsp + 0x20], 0xf340
add qword [rsp + 0x30], 0xffffffffbff6446d
mov rbx, r8
test qword [rsp + 0x28], rbx
test rdx, 0xffffffffe223f230
mov rdx, qword [rsp + rdx - 0x81]
cmovo ecx, dword [rsp + rcx - 0x1b8f74fd]
jno 0x140096522
Function at 0x140098954
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
call fcn.140098dc0
add qword [rsp + rcx - 0x1b8f7538], 0xffffffffbff6354d
add qword [rsp + rcx - 0x1b8f7548], 0xffffffffbff6a339
mov rcx, qword [rsp + rcx*4 - 0x6e3dd508]
or dword [rsp + 0x48], 0x87b0f294
shl word [rsp + 0x48], 0x41
shl word [rsp + 0x48], 2
not word [rsp + 0x48]
call fcn.140097416
mov rdi, qword [rsp + r14 + 0x2e48]
cmovle r12d, r14d
not r12
shl byte [rsp + r14*4 + 0xb7a0], 8
mov r14, qword [rsp + r14 + 0x2e40]
or dword [rsp + 0x60], 0x5c9c008b
cmovle r12w, word [rsp + 0x60]
jl 0x14009651d

Function at 0x1400989bd
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
mov r11, qword [rsp + r11 + 0x2d]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + rcx*2 + 0x22]
lea rcx, [rcx*8 + 0x1b8f74b0]
mov dl, byte [rsp + rdx*2 + 0x28]
jo fcn.14009c851
or dl, 0x89
shr qword [rsp + rdx*8 - 0x400], cl

Function at 0x140098a18
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
push rcx
push rsi
push r12
push rbx
movabs rbx, 0x461e6933bf023821
pushfq
movabs rsi, 0x2c3b3798570cd014
cmp esi, 0xe2a83c3e
mov rcx, qword [rsp + 0x28]
jl 0x140099b67
mov r12, rbx
neg rbx
sub esi, 0x5302ec1d
lea rcx, [rcx + rsi*2 - 0x813c7ed]
jbe fcn.1400b1b07
jl 0x14009afa5
call fcn.14009a251
cmp byte [rsp + 0x28], 1
push r9
call fcn.14009f42b
popfq
lea rsp, [rsp + 0x50]
ret 8

Function at 0x140098a68
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
lea r8, [r8 + r8*8 - 0x265e44d7]
call fcn.1400afeac

Function at 0x140098a75
Capabilities:
Encrypt data using speck

Disassembly:
mov qword [rsp + rbx - 0x49a435a], rbx
jae 0x140095ca1
push r11
lea rax, [rax + rdx + 0x7f83db9b]
jae 0x14009b1e9
shl ebx, 0x2e
call fcn.1400adb7f

Function at 0x140098ac1
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
bswap r9d
or r9w, 0x45a2
mov r9, qword [rsp + r9 - 0x7b004d4f]
xor dword [rsp + 0x60], 0x2bb4ef9b
ja 0x14009712f
sub byte [rsp + 0x60], 0x85
push qword [rsp + 0x68]
popfq
lea rsp, [rsp + 0x78]
ret
mov r9b, byte [rsp + 0x61]
setns byte [rsp + 0x60]
cmp r9b, 0x3f
mov rbp, qword [rsp + 0x20]
ja 0x1400970fc

Function at 0x140098d84
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
setl r10b
and r11d, 0x348da608
add r10b, 2
movzx r11d, r10w
xor r11w, 0xd620
xchg qword [rsp + r11*2 - 0x13e0c], rbp
mov r10, qword [rsp + 0x20]
sub r11w, 0xfdb3
jl 0x14009d225

Function at 0x140098f70
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
neg si
mov rcx, rdx
lea rsi, [rcx*8 + 0xf9fe22c]
jb 0x14009c1db