joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1802cfd6c
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp], 0xfffffffff191ffaa
sub rsp, 0x18
push 0xffffffffc38da6b3
jmp 0x1802ea451
call fcn.1802c7fab

Function at 0x1802d00a3
Capabilities:
Encode data using base64

Disassembly:
add r10, rcx
mov qword [rsp + rbx - 7], rbp
mov ebp, dword [r8 + rdx*2 - 0xe]
shl di, 0xe
sar edi, 0xdc
mov qword [rsp + rdx*4 - 0x14], rax
mov ebx, dword [r8 + rdx - 3]
movsx r9d, dl
push rdi
cwd
lea r8, [r8 + rdx + 4]
movsx ecx, r9w
add ebp, ebx
sub rdi, qword [rsp + rdx*4 + 0xe]
mov dword [rdx + r8], ebp
jbe 0x1802b5536

Function at 0x1802d00e2
Capabilities:
Encode data using base64

Disassembly:
cpuid
pop rdi
lea r8, [r8 + r9 - 0x4b180008]
bswap rbp
mov dword [r8 + r9 - 0x4b17fff4], eax
jae 0x1802fed29
not bpl
lea rdi, [rbp + 0x7af6bb3]
mov dword [r8 + r9 - 0x4b17fff8], ebx
mov dword [r8 + r9 - 0x4b17fffc], ecx
movsx ebx, bp
mov dword [r8 + rbx*4 - 0x3fc], edx
jae fcn.18030a981
not edx
lea r11, [r11 + rbp - 0x76b6be19]
xor ecx, esi
sar dl, 0x86
mov ebx, ebp
shr dl, 0xc7
not ecx
not rbp
push rbp
cmovbe r9d, ebp
rol ecx, 2
add bp, 0x6526
xor bl, byte [rsp + rbp + 0x76b658f8]
bswap ecx
rol ecx, 1
xor byte [rsp + rbx - 0x76b6befc], r9b
ja 0x1802bc167

Function at 0x1802d0d18
Capabilities:
Encode data using base64

Disassembly:
lea rsp, [rsp + 0x10]
and rsp, 0xfffffffffffffff0
push 0x67986e87
mov qword [rsp], 0xffffffffb532b50d
lea rsp, [rsp + 8]
add rsp, rcx
jmp 0x18031225a
test ebx, ebx
je 0x1802eea52

Function at 0x1802d21be
Capabilities:
Encode data using base64

Disassembly:
movzx ecx, al
mov word [r8 + rbp*2 - 0x642c26f6], di
xadd byte [rsp + rbp*2 - 0x642c26f6], ch
pop rdx
pop rbp
jno fcn.18030a981
lea r9, [rax + rdi*8 + 0x53b93a15]
not cl
dec cl
xor sil, cl
mov qword [rsp + rax - 0x321613db], 0x588a53be
xchg ebp, eax
lea rcx, [rsp + rcx + 8]
mov di, word [rcx + rbp*2 - 0x642c27b6]
push rdx
rol bpl, 0x85
lea r8, [r8 + rbp - 0x3216137d]
jb 0x1802b324c

Function at 0x1802d3310
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
xor dword [rsp + rdi - 0xc242], ebx
mov qword [rsp + rdi*2 - 0x18494], rcx
mov rsi, qword [rsp + rdi - 0xc242]
push rdi
movsxd rbx, ebx
rol r9, cl
adc r10, rbx
lea rbx, [rbp + r9*2 + 0x4eaa25ac]
bts ebp, 0x37
mov ebx, dword [r8 + rdi - 0xc24a]
movsx edx, di
call fcn.180308008
mov edx, 0xb116c3a6
movsx edi, dl
movzx r9d, dil
rdtsc
movzx ebx, r9w
jmp 0x1802bb444
Function at 0x1802d414f
Capabilities:
Encode data using base64

Disassembly:
bswap rbx
not r9w
shl rbp, 0x5f
rol r9w, 1
xor r9w, 0xe58c
shr edx, cl
shr dl, 0xe2
adc r9w, bp
xor si, r9w
xadd bl, bh
adc r9, rsp
mov qword [r9 + rdi - 0x4c], rax
add ebx, dword [rdi + r11 - 0x4c]
movsxd rcx, ecx
call fcn.1802d00a3
push rax
lea r11, [rax*8 + 0x21909c23]
movzx eax, byte [rbp + riz]
add rbp, 1
xor al, r8b
movsx ebx, dx
xor dword [rsp + 3], 0x7d073b01
not al
ror al, 1
sal word [rsp + 6], 0x25
dec al
pop r11
not al
bswap r11d
dec al
lea rcx, [rdx + rdx*8 - 0x64c3b0e1]
push rcx
xor r8b, al
btc dx, 2
neg r11
mov edi, dword [rsp + 1]
lea rax, [rsp + rax + 8]
jo 0x1802b0ad4
xadd dword [rsp + rdi - 0x592e675], ebx
shl r11b, 0x64
mov byte [rax + rbx*2 - 0xb24], r9b
mov r11d, dword [rdi + rbp - 0x592e678]
not bx
sub qword [rsp + rbx*4 - 0x3e9b4], rdi
dec qword [rsp + rdi*2 - 0xb25ccf0]
lea rbp, [rbp + rbx*2 - 0x1f4d6]
je 0x180300d8d
movsx eax, dl
xor r11d, r8d
bt edi, 0x88
dec bx
sbb r11d, 0xc935bebc
ror r11d, 2
mul rbx
adc rax, rcx
neg edi
sbb r11d, edx
lea r9, [rdx + rax*8 - 0x3aec1753]
call fcn.1802c4fe8
lea r8, [r8 + rdx + 6]
mov word [rdi + r8 - 0x7a12780a], r9w
mov qword [rsp + rdx*8], r10
ret 8

Function at 0x1802d421f
Capabilities:
Encode data using base64

Disassembly:
lea rsp, [rsp + 0x20]
jne 0x1802eb30d
mov r9, rax
jmp 0x180307c9b

Function at 0x1802d496c
Capabilities:
Encode data using base64

Disassembly:
call fcn.1802fef40
mov ebx, 0x2736d801
movzx ebp, bx
mov rsp, r8
pop r11
movzx edi, bp
rol bpl, 0x25
pop rax
lea r10, [rdi + rbp*8 + 0x2893cb18]
pop r9
mov ecx, edi
push r10
mov rbp, qword [rsp + rbx - 0x2736d7f9]
push qword [rsp + 0x10]
popfq
mov r15, qword [rsp + rdi*2 - 0x1afea]
mov byte [rsp + rbx - 0x2736d7fa], 0x2d
push r10
mov r8, qword [rsp + rbx - 0x2736d7d9]
jmp 0x1802edc53

Function at 0x1802d5dec
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + r14*2 + 0x31a2e7b8], 0x3b345b85
mov r14, qword [rsp + r14 + 0x18d17400]
call fcn.1802c4380

Function at 0x1802d68e5
Capabilities:
Encode data using base64

Disassembly:
adc r11w, 0x24ac
xor r8w, r11w
dec word [rsp + rdi + 0x70d01985]
sal qword [rsp + rdx - 0x58f8e39a], 0x58
lea r11, [rsp + r11 + 0x18]
mov byte [rdx + r11 - 0x58f8e3a6], cl
mov qword [rsp + rdx - 0x58f8e3a6], rdi
bswap r9d
not bl
mov r11d, dword [rdi + rbp + 0x70d01978]
movzx ecx, dx
lea rbp, [rdx + rbp - 0x58f8e3a2]
mov dword [rsp + rdi + 0x70d01989], edi
pop r9
xor r11d, r8d
bts di, 0x83
or dword [rsp + r9 + 0x70d01979], 0xe0901f32
inc r11d
shr r9d, cl
add bx, dx
push r9
ror r11d, 2
sub r9, qword [rsp + r9 - 0x23cbf91]
jp fcn.18030e13a
neg r11d
dec r9
inc r11d
movzx eax, di
jmp 0x1802b6ff7

Function at 0x1802d7ed1
Capabilities:
Encode data using base64

Disassembly:
jmp 0x1802cfcb0
mov eax, dword [r11]
movsx r9d, di
lea r11, [r11 + r9*2 - 0x9766]
mov ebp, edi
xor eax, esi
mov qword [rsp + r9 - 0x4bb5], rdi
imul r9d, ebp
jo 0x180318fd3
mov r11, qword [rsi]
mov edx, 0x472eec85
mov rdx, qword ss:[rdx + r11 - 0x472eec85]
mov qword [rsi], rdx
mov edx, 0xf1be9fb2
lea r9, [rdx + rdx*8 - 0x1ed75e5c]
mov r9d, dword [rbp + riz]
jmp 0x1802d764f
Function at 0x1802d98ae
Capabilities:
Encode data using base64

Disassembly:
lea rsi, [r9 + rsi - 0x42be6942]
mov dword [rsi + rbx*8], eax
add dil, r9b
and qword [rsp + r9 - 0x42be6936], 0xffffffff9223be3c
push r11
pop rcx
pop rdi
pop r11
jno fcn.180307268
mov r9d, 0x24af06ab
mov ecx, 0x7da521b7
mov ebp, dword [r11 + r9 - 0x24af06ab]
lea r11, [r11 + r9*2 - 0x495e0d52]
xor ebp, esi
sar cl, 1
not ebp
movzx eax, r9b
neg rax
movzx edx, al
dec ebp
not ebp
lea ebp, [rbp + r9*2 - 0x5d0ae505]
not ebp
movsx edi, cl
add dl, al
push r9
mov qword [rsp + r9 - 0x24af06ab], rsi
jne 0x1802f1a2e
call fcn.1802ec01f

Function at 0x1802da62c
Capabilities:
Encode data using base64

Disassembly:
neg di
neg rbx
sub cl, cl
xor r8w, di
add rdi, rsp
lea rax, [r9*8 - 0x2cd787d6]
movzx r9w, byte [rdi + rbx + 7]
jmp 0x1802f3d29
mov qword [rsp], 0xfffffffff78ba01f
lea rsp, [rsp + 8]
and rsp, 0xfffffffffffffff0
call fcn.180315c0b
movzx r9d, word [r11]
mov ecx, 0x72b8d238
lea r11, [r11 + rcx - 0x72b8d236]
movzx ebx, cx
and rcx, rcx
call fcn.1802d4439
mov edi, 0xf600b207
movzx r11d, di
movzx edi, word [rbp + r11*2 - 0x1640e]
movsx edx, r11w
inc edx
lea rbp, [rbp + r11 - 0xb205]
lea r9, [rdx*4 + 0x20b786b3]
xor di, r8w
xor di, 0x293d
movsx ebx, r11b
mov ecx, 0xa3232006
ror di, 1
btc rdx, r11
add r11, rcx
not di
jge 0x1802bc413
movzx ecx, word [rsp + r9*8 + 0x12]
mov r11d, dword [rbp + r9*2 + 2]
mov edx, 0xf686453d
push rcx
sar qword [rsp + r9*2 + 6], 3
lea rbp, [rbp + r9*2 + 6]
sets byte [rsp + r9*2 + 8]
xor r11d, r8d
dec dword [rsp + r9*4 + 0x16]
mov byte [rsp + r9 + 6], 0x9f
xadd word [rsp + rbx*2 + 3], r9w
ror r11d, 3
sal qword [rsp + r9*8 + 0x12], 0xd2
bswap r11d
mov eax, dword [rsp + r9 + 7]
sbb r11d, 0x9f8c2e25
xor r11d, 0x6c0c6fa3
xadd rcx, rax
rol r11d, 3
cbw
and ax, 0x3c3f
mul ebx
mov qword [rsp + r9*4 + 0x14], r8
sal rcx, cl
div qword [rsp + r9 + 1]
xor dword [rsp + r9 + 0x11], r11d
mov r8, qword [rsp + r9 + 0x11]
idiv ecx
movsxd r11, r11d
imul ecx
adc r10, r11
neg ebx
mov edi, ecx
setns bl
pop rcx
pop rcx
pop rbx
jno fcn.180307268
rol r9d, 3
lea rdi, [rbx*4 - 0x1e4b78e1]
lea r9d, [r9 + rbp - 0x60d3cd3b]
sar rbp, 0xa3
neg ax
and dx, 0xa7be
neg r9d
and cx, cx
ror r9d, 1
push rdi
sal ax, 0x8b
cwd
lea r9d, [r9 + rbx + 0x5e884f92]
and rax, 0x3a930f22
ror word [rsp + rbp + 5], 0xf
mov qword [rsp + rbx - 0x4f210999], rsi
xor al, 0x10
xor dword [rsp + rbx - 0x4f210999], r9d
movsx esi, bp
push rdi
imul dword [rsp + rbx - 0x4f210999]
mov rsi, qword [rsp + rbp*4 + 8]
mov qword [rsp + rbp*2 + 8], rcx
ror bx, cl
inc dl
movsxd r9, r9d
xadd dword [rsp + rbx - 0x4f219904], edx
or edx, ebp
neg qword [rsp + rbp + 4]
add r10, r9
xor rdi, rbp
mov eax, dword [rcx + r8 - 0x8008]
dec rbx
bswap rcx
jae 0x180301f26
call fcn.1802b0923
movzx ebx, byte [r11]
add r11, 1
xor bl, sil
call fcn.1802bcee9
Function at 0x1802daa65
Capabilities:
Encode data using base64

Disassembly:
dec dil
mov di, word [r9 + r8 - 0xfffd]
jbe 0x1802d7e47
lea r8, [r8 + r9*2 - 0x1fffc]
mov ebx, edx
or bp, di
lea rdi, [r9 + rdx*4 + 0x700d1794]
cwd
dec cl
xor bp, r9w
sal rdi, 0x88
cwde
btr di, ax
mov word [r8 + r9 - 0xffff], bp
jmp r10
shl rdi, 0xe
mov bp, word [r8 + rdi*2]
jp 0x1802b805b
dec ebx
bts rdx, 0x25
and rax, rax
mov qword [rsp + rdi - 0xb490], rsi
lea rcx, [rcx + 0x4530f836]
xchg rdx, rcx
lea rax, [rdx + 0x54a2b88c]
xor dword [rsp + rdi*8 - 0x5a480], ebx
bt rcx, rcx
pop rsi
div dl
and rbp, 0xd91d93c
sal bp, cl
movsxd rbx, ebx
shl ax, 0x2a
adc r10, rbx
lea rbp, [rcx*8 - 0x6f5c767b]
bt eax, 0xa6
and rdi, 0xda96c1a
mov cx, word [r8 + rdi*4 - 0x9040]
push rdx
lea rbx, [r9 + rdx*8 - 0x18d0385f]
lea r8, [r8 + rdi*8 - 0x1207e]
or r9d, 0xaa2f8333
and byte [rsp + rdx - 0x453dacc0], 0x14
push r9
movzx edx, word [rdi + r11 - 0x2410]
call fcn.180313ec0
shr dx, 0xa7
lea r11, [r9 + r11 - 0x133af98b]
sbb rdx, rdx
xor edi, esi
xor edi, 0x361be53d
lea rbx, [rax*8 + 0x2d2e4ca8]
lea edi, [rdi + rdx*2 - 0x5b3bfc05]
dec ax
xor edi, 0xdb2524b6
neg bx
rol edi, 1
sub ebx, edx
cdq
push rsi
xor dword [rsp + r9 - 0x133af98f], edi
xadd dx, ax
jno 0x1802e453c
call fcn.1802d6f28
mov ebx, dword [r11]
mov eax, 0x84992522
lea rbp, [rax + rax*2 - 0x7a6f9f71]
shl ebp, 0xfb
adc r11, 3
xor ebx, esi
neg ebx
movzx r9d, bpl
inc ebx
movsx edi, r9w
lea rcx, [r9 + rbp*2 - 0x5d42eaf4]
ror edi, cl
rol ebx, 1
neg r9d
setne cl
inc ebx
not r9w
mov edx, eax
bt rdx, 0xbe
neg ebx
sal di, 2
bswap ebx
shr edx, 0xa
push rsi
push rbp
pop rax
sub bp, dx
xor dword [rsp + r9*2 - 0x1fffe], ebx
pop rsi
movsxd rbx, ebx
or rax, 0x713e53b9
adc r10, rbx
jmp 0x1802c7690
pop rsi
and dl, dl
sbb r9b, r9b
movsxd rdi, edi
adc r10, rdi
lea rcx, [rax + r9*8 - 0x647751d1]
cwde
mov r8d, dword [r9 + r8 - 0x133af900]
jmp fcn.18030a981

Function at 0x1802db794
Capabilities:
Encode data using base64

Disassembly:
bts r9w, dx
mov r9d, dword [rbp + r9 - 0x40613c9f]
jb 0x1802e8417
movzx eax, dil
imul eax, edi
lea rbp, [rbp + rdi*2 + 2]
xor r9d, r8d
lea r11, [rax + rbx*8 - 0x1475f9fb]
bswap rdx
neg r9d
bswap rdi
dec ebx
add eax, ebx
sub r9d, ebx
movsx ecx, dil
rol r9d, 1
bts r11, 0x21
rol word [rsp + r9 - 0x3e29fffb], 0x6d
mov word [r8 + r9*2 - 0x7c54001c], dx
mov r9d, dword [r11 + rdi*2 - 0xee1a]
lea r11, [r11 + rdi*2 - 0xee16]
call fcn.1802ee051
mov r11, qword [rsi]
mov ebx, 0xf23d0185
mov rax, qword [rsi + 8]
lea rdx, [rbx + rbx*4 - 0x3c7ef0f7]
dec bl
shl dl, 0xa1
mov cl, byte [rsi + 0x10]
mov r9d, ebx
movzx edi, bx
lea rsi, [rdi + rsi - 0x17a]
rol r9d, 0x8e
and rdi, rbx
sar di, 0xae
shrd r11, rax, cl
shr di, 0x2a
bswap rbx
mov qword [rsi + rdi*8], r11
inc di
jge 0x1802b2599

Function at 0x1802dbd76
Capabilities:
Encode data using base64

Disassembly:
cmp ebx, 1
push 0xffffffffe81c6409
push 0x6e834b9f
lea rsp, [rsp + 0x10]
jne 0x1803143d7
mov rcx, rax
push 0xffffffffdf2c6c85
lea rsp, [rsp + 8]
jmp 0x1802eca51
lea rsp, [rsp + 8]
jne 0x180305f70
mov eax, 0x46125123
jmp 0x1802c41c9
call fcn.1802dcace
mov eax, 0x5e3c1013
bt ax, ax
btr rax, rax
mov rax, qword [rbp + rbx*8]
jb 0x1802bfd00
jmp 0x1802e67ce
Function at 0x1802dd48f
Capabilities:
Encode data using base64

Disassembly:
movsx eax, bl
pop rsi
imul r9b
add r9d, eax
cmovns ebx, eax
movsxd rdi, edi
adc r10, rdi
lea rcx, [rbx*4 - 0x31597dd6]
mov bp, word [rbp + r8 - 0x38aa2931]
movsx edi, cx
idiv bl
sal edx, cl
mov ax, word [rbx + r8 - 0x2002a]
sal r9w, 0xa1
imul rdi, rdx
lea r8, [rbx + r8 - 0x2002a]
not bp
rol bx, 0xd
and bx, 0xf89d
not ax
bts r9, rdx
and bp, ax
shr dil, 0xe1
xor ebx, 0xbd974a80
mov eax, edx
mov word [rcx + r8 + 0x31517d26], bp
push rdi
movsx ebp, al
and r9w, bp
mov qword [rsp + rbp], r10
ret
call fcn.1802fa052
pop rsi
setne dl
movsxd rax, eax
ror edi, 0x3e
or ebx, ebx
push rbx
adc r10, rax
lea rbx, [rbx + rdi*4 - 0x58ecac6c]
mov r9d, dword [r8 + rdx*2 - 0x200002]
sal rdx, 0xd6
mov eax, dword [r8 + rcx*4 + 4]
neg dil
jno 0x1802e8a80
mov edi, dword [r11]
mov ebp, 0x1a9d2222
lea r11, [r11 + rbp*2 - 0x353a4440]
lea rdx, [rbp - 0x50ce74f6]
lea r9, [rbp + rbp - 0x74582851]
neg bp
xor edi, esi
movsx ebx, dl
neg edi
xor bp, dx
inc edi
bts ebx, 0xb1
shr ebp, 0xc1
rol edi, 1
jmp 0x180305b75
imul edi, ebx
lea r8, [r8 + rcx*2 + 4]
neg rbx
not r9d
shl rbx, 0x65
not eax
bt ebp, edx
or qword [rsp + rcx], rdx
or ebx, ebx
or r9d, eax
or ecx, dword [rsp + rcx + 1]
mov dword [rcx + r8 - 0x409f], r9d
js 0x18030b181
lea rdi, [rbx*8 + 0x2d98b727]
or byte [rsp + rcx - 0x409d], 0x94
mov qword [rsp + rcx - 0x409f], r10
ret
inc edi
shl r9b, 0xe3
neg edi
movzx ecx, dx
imul ebp, ebp
bswap edi
push rsi
xor dword [rsp + rbp - 0x38aa2931], edi
jmp 0x1802b7187

Function at 0x1802e0a18
Capabilities:
Encode data using base64

Disassembly:
push 0x6baa108e
push 0x7216f797
mov qword [rbp + riz - 8], rax
lea rsp, [rsp + 0x20]
mov qword [rbp + riz - 0x10], rsp
sub rsp, rcx
and rsp, 0xfffffffffffffff0
push 0xffffffffbf30ea8d
lea rsp, [rsp + 8]
add rsp, rcx
push 0xffffffffac973e90
jmp 0x180305f63
Function at 0x1802e2196
Capabilities:
Encode data using base64

Disassembly:
mov qword [r11 + rsi - 0x2046], rcx
mov r11d, dword [rbp + r11*2 - 0x408c]
dec rbx
bts rdi, rax
lea rbp, [rbp + rdx - 0x3da6289a]
ror rbx, 0xcf
sal dword [rsp + rdx*2 - 0x7b4c512a], 0xa8
xor r11d, r8d
mov qword [rsp + rdx*2 - 0x7b4c513c], rbx
shl rdx, 0x12
and dword [rsp + 0x11], edx
rol r11d, 2
ror dil, 0xa5
ror bl, 0xc1
movsx r9d, di
lea r11d, [r11 + rax - 0x4371609f]
rol r11d, 3
push rdi
and bl, 0x38
not r11d
not r9w
xchg rdx, rax
inc r9w
bswap r11d
mov qword [rsp + r9 - 0x95a0], r8
mov ecx, edi
inc qword [rsp + r9*4 - 0x256df]
not dword [rsp + r9 - 0x95b6]
xor dword [rsp + r9 - 0x95a0], r11d
mov r8, qword [rsp + r9*2 - 0x12b58]
and bl, cl
movsxd r11, r11d
dec r9
or edx, ebx
mov qword [rsp + r9 - 0x959f], 0x77372838
adc r10, r11
xchg qword [rsp + r9 - 0x95aa], rbx
add bx, word [rsp + r9 - 0x95b5]
xchg di, r9w
pop rbx
pop rbx
pop rdx
pop rbx
jbe fcn.180307268
bswap edx
sar eax, 0x78
cwde
btc r9w, bp
push rsi
jae 0x180303e71
mov edi, 0x439b4a1
mov ebx, 0xba2381a1
movzx r9d, byte [rdi + r11 - 0x439b4a1]
neg rdi
lea r11, [r11 + rdi*4 + 0x10e6d285]
mov ecx, edi
xor r9b, sil
inc r9b
lea rbx, [rcx - 0x5c54be45]
not r9b
btr bx, cx
push rbx
adc r9b, 0x39
not r9b
ror r9b, 1
call fcn.180311a9c
neg r9b
not byte [rsp + rax*2 - 0x16ff5]
neg ebx
ror r9b, 1
cwde
imul ebx, dword [rsp + rbx*2 - 0x2da]
sbb r9b, 0xb8
ror ax, 0x8a
xadd cl, r11b
xadd dword [rsp + rbx*2 + 0x1b], ebx
rol r9b, 1
imul eax
sbb r9b, dl
mov qword [rsp + rbx*2 - 0x808], r11
xor r9b, 0x17
push rbx
or word [rsp + rbx*2 - 0x826], di
not r9b
btc dx, ax
xor r8b, r9b
or edi, ecx
sub bx, 0xe796
bswap edi
lea r9, [rsp + r9 + 0x30]
setne byte [rsp + rbx - 0x1c54]
mov cx, word [r9 + rbx*8 - 0xe3f0]
idiv di
push rbx
idiv di
lea rsi, [rbx + rsi - 0x1c80]
mov word [rsi + rbx*2 - 0x38fc], cx
pop r11
pop rbx
pop r9
pop rcx
pop rdx
pop rdx
pop r11
jmp fcn.180307268
Function at 0x1802e3d23
Capabilities:
Encode data using base64

Disassembly:
movsx ebx, dil
mov qword [rsp + r9*8 - 0x71648], r9
bswap ecx
sub byte [rsp + r9*2 - 0x1c591], bl
dec qword [rsp + r9*4 - 0x38b24]
idiv rbx
ror ecx, 1
btr ebx, r11d
adc byte [rsp + r9*4 - 0x38b23], al
lea ecx, [rcx + r9*2 + 0x2f132528]
imul al
inc word [rsp + r9 - 0xe2c7]
mov qword [rsp + r9*2 - 0x1c592], r8
xchg r11, rax
xor dword [rsp + r9*8 - 0x71648], ecx
xchg rdx, rax
movzx r8d, r9w
xor r8, 0xffffffffc4986e86
pop r8
movsxd rcx, ecx
bswap r11d
adc r10, rcx
cdqe
imul ebx
sbb eax, 0x1a9d3392
movzx eax, byte [rbp + r9 - 0xe2c9]
lea r9, [rdx*8 + 0x7211cdae]
neg dl
lea rbp, [rbp + rdi + 0x54452f]
jbe 0x18030f4bf
xadd r9d, ebx
xor al, r8b
rol r11b, 3
xor r11, rbx
cmovb r11, rbx
ror al, 1
mov ecx, 0x7bada7bb
push r11
push r11
sub al, 0
bts ecx, r9d
not dil
not byte [rsp + r9 - 0x7209cd45]
ror al, 1
add al, 0xb6
sar r11, cl
xor r8b, al
lea rax, [rsp + rax + 0x10]
neg ecx
imul rcx, rdx
mov rcx, qword [rax + r9 - 0x7209cd50]
push r9
lea rsi, [rsi + r9 - 0x7209cd58]
mov qword [r9 + rsi - 0x7209cd50], rcx
shr r9w, 0x49
pop rcx
pop rdi
pop r9
jne fcn.180307268

Function at 0x1802e4739
Capabilities:
Encode data using base64
Hash data using murmur3

Disassembly:
xor r9d, 0xcc346f95
bt dx, dx
jae 0x1802c0194
call fcn.1802b12d7
movzx edi, dx
lea rbp, [rbp + rdi - 0x9fae]
xor r9d, r8d
btc edx, edi
movzx ecx, dx
movsx r11d, dx
inc r9d
btr r11d, edx
setb r11b
adc r11b, dl
neg r9d
dec r9d
imul cx, dx
jno 0x1802dc9c5
jo 0x1802c4cb3
sub edi, eax
mov ebp, dword [rdi + r11 - 0x66e149af]
movsx r9d, dil
lea r11, [rdi + r11 - 0x66e149ab]
lea rdx, [r9 + r9*8 - 0x7c6cac5b]
xor ebp, esi
neg ebp
bswap r9d
imul edi
lea ebp, [rbp + rcx*2 + 0x4ea57652]
not ebp
mul edx
bswap ebp
shr ax, cl
rol ebp, 2
push rsi
mul dil
xor dword [rsp + rdi - 0x66e149af], ebp
bts rax, rcx
pop rsi
movsxd rbp, ebp
xchg r9w, cx
sal edx, 0x96
add r10, rbp
jmp 0x1802dcc93
jmp 0x1802cfcab

Function at 0x1802e4a84
Capabilities:
Encode data using base64

Disassembly:
xor edi, r8d
movsx eax, word [rsp + 1]
shl r11b, 4
movsx edx, r11w
dec edi
not edi
shl cl, 0xe1
btr r11d, 0xa6
sbb edi, 0x84a25819
cqo
bswap ebx
imul dx, word [rsp + rbx - 0x20ab2b]
not edi
cqo
and ebx, dword [rsp + rbx*2 - 0x415658]
mov qword [rsp + rbx*8 - 0x15940], r8
xor dword [rsp + rbx*2 - 0x5650], edi
neg edx
movzx r8d, ax
pop r8
neg rax
movsx r9d, bl
movsxd rdi, edi
call fcn.1802b9470
mov ecx, 0xbf97f6ab
mov r11d, ecx
mov edi, dword [rbp + riz]
lea rbx, [rcx + 0x6e132980]
mov qword [rsp], 0x2b38f703
xor bl, bl
adc rbp, 4
jmp 0x1802dbd16
Function at 0x1802e9da5
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp], 0xffffffff9a263204
cmp ebx, 3
lea rsp, [rsp + 8]
jne 0x1803064ab
push 0xfffffffff1254233
push 0x63bcea37
mov r8, rax
lea rsp, [rsp + 0x10]
jmp 0x1802fcd0e

Function at 0x1802ead97
Capabilities:
Encode data using base64

Disassembly:
add r10, rbx
add r9b, byte [r11 + r9*2]
movzx ebp, word [rsp + rdi + 0xa]
shr ecx, 0x70
mov qword [rsp + rdi + 0x10], rcx
lea r11, [r11 + rdi*2 + 1]
dec qword [rsp + rdi*4 + 6]
xor r9b, sil
shl edx, 0x9b
rol qword [rsp + rdi*2 + 0xd], 0xaf
pop rcx
not r9b
lea rbx, [rdi*2 - 0x105dea68]
call fcn.1802c51b9
mov word ss:[rdi + rcx*8 - 0x690f0], dx
movsx edi, r11w
mov qword [rsp + rcx - 0xd21e], r10
ret 0x10
xor edx, edx
test r11, r11
push 0xffffffffc921408b
call fcn.1802dd573
mov r9, qword [rsi]
mov ecx, 0xa826823e
mov r11d, 0x5a2e6892
mov rbx, qword [rsi + r11 - 0x5a2e688a]
movsx edi, r11w
imul rdi, rdi
mov edx, ecx
lea rsi, [r11 + rsi - 0x5a2e6882]
btc edi, r11d
mov qword ss:[rdi + r9 - 0x2ab2f344], rbx
add dl, 0x16
mov r11d, dword [rbp + r11 - 0x5a2e6892]
jle 0x1802e1239
imul rdi, rcx
adc rbp, 4
xor r11d, r8d
movzx eax, dx
jmp 0x1802c0bb3

Function at 0x1802f2229
Capabilities:
Encode data using base64

Disassembly:
jae 0x1802befa5
mov qword [rsp + r9*2 - 0x1a7c0], r8
sbb edx, 0xa0b26a11
xor edx, edi
jge 0x1802ffa7e
add byte [rax], al
add byte [rcx], bl
invalid
xor dword [rsp + r9 - 0xd3e0], ecx
pop r8
sar bx, 0xe8
xadd edi, ebx
btr rbx, 0x99
movsxd rcx, ecx
lea rbx, [r11 + rbx*4 + 0x4cb9e3ab]
sar r11d, 0x86
adc r10, rcx
shl rdx, 0x9d
xadd ax, r11w
add rbx, rbx
mov ecx, dword [rbp + r9*2 - 0x1a7c0]
jnp 0x1802df86d
Function at 0x1802f2c85
Capabilities:
Encode data using base64

Disassembly:
sar bpl, 0x64
push rsi
movsx esi, al
add sil, bpl
xor dword [rsp + rcx], ebx
inc esi
sub al, sil
pop rsi
movsxd rbx, ebx
sar rcx, 0xc7
ja 0x1802fb559
call fcn.1802cf291
ror r9b, 0xe5
cmovb bx, r9w
mov qword [rsp + r9 - 0x10301], rsi
neg rdx
xor dword [rsp + r9*2 - 0x20602], ebp
movzx eax, dx
pop rsi
mov ecx, 0x93927985
rol eax, cl
movsxd rbp, ebp
btr r9w, di
xchg dx, ax
adc r10, rbp
xchg edx, ebx
shr eax, cl
mov rbp, qword [r11 + rbx - 0x56f4ca40]
push r9
or word [rsp + rbx - 0x56f4ca3c], bx
lea r11, [r11 + rbx - 0x56f4ca38]
add r9b, dil
xor rbp, rsi
cwd
dec ax
idiv ax
rol rbp, 2
xchg edi, ebx
not dl
add rbp, rax
neg rbp
shl rax, 0xda
rol rbp, 7
dec rbp
btr rdx, rdi
neg rbp
ror r9w, 0xb
div dil
xor rsi, rbp
lea r8, [r8 + rdi - 0x56f4ca48]
dec dx
sub bx, word [rsp + r9 - 0x175dc]
cdq
mov qword [r8 + rdx*2], rbp
shr cx, 0x28
cwd
pop rdx
jnp fcn.18030a981
mov qword [rsp + rdx*2 - 0x1e], 0x7ba1f315
ror al, 1
push r9
sub al, 0x2d
and ecx, dword [rsp + rdx - 0xd]
pop r9
btr dx, cx
xor sil, al
add cl, 2
inc word [rsp + rdx*2 - 0x1a]
btc dx, 0x92
lea rax, [rsp + rax + 8]
xor dword [rsp + rdx - 7], ecx
sbb byte [rsp + rdx*2 - 0x14], cl
sar ecx, 0x62
mov word [rdx + rax - 0xa], bx
mov ebx, dword [r11 + rdx*4 - 0x28]
lea r11, [r11 + rdx*4 - 0x24]
not edx
add bp, bp
xor ebx, esi
rol word [rsp + rcx*4], 0x8c
movsx eax, cx
movsx edi, cx
rol ebx, 1
pop r9
neg ebx
cdqe
xor ebx, 0xf114d684
bswap rbp
bts eax, edi
sbb ebx, 0xf5b69714
xor ebx, 0x7688b7a8
xadd dil, r9b
jg 0x1802b363b
push rbx
lea ebp, [rbp + r9 - 0x159fce76]
xchg byte [rsp + r9 - 0x10359], r9b
ror dword [rsp + r9 - 0x103a5], 0x4c
bswap ebp
and r9, 0xfffffffffd23df26
lea ebp, [rbp + r9*2 - 0x78167b50]
xor ebp, 0x3a14ab2
jmp 0x1802b429e
adc r10, rcx
rol bl, 0x63
idiv r9b
or rdi, qword [r8 + rbx*2 + 0x6ded8d6e]
shr r9d, 0xa
sub dl, bl
call fcn.1802f6e2b