joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400990d2
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
push rdx
push 0x7d063a3c
push rdi
pushfq
sub byte [rsp + 0x10], 0x2b
mov rdi, qword [rsp + 0x10]
jg 0x1400b16c8

Function at 0x14009925f
Capabilities:
Encrypt data using speck

Disassembly:
jns 0x1400b11a1
xor r8d, dword [rsp + 0x61]
cmp byte [rsp + 0x60], 0
jb 0x14009b76f
mov r14, qword [rsp + rdx - 0xbf]
jns 0x1400951cc
neg r8b
call fcn.1400981d3
push rbx
call 0x1400af7b4
jns 0x14009486d
lea r12, [rsi + rbx*4 + 0x4316cf36]
sub dword [rsp + 0x10], 0x4c118c21
xchg qword [rsp + 0x48], rcx
mov rsi, qword [rsp + 0x40]
sub word [rsp + 0x20], 0x583b
xor ebx, dword [rsp + rbx - 0x33c1f]
test word [rsp + 0x20], 0xb112
mov dword [rsp + 0x20], 0x28b0bb32
call fcn.1400ae19d
call fcn.14009892a

Function at 0x1400992f6
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
add qword [rsp], 0xffffffffffffb97d
mov rbp, rsi
bswap rsi
xor bpl, 0xaf
jno 0x1400ad4eb

Function at 0x140099767
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
mov dword [rsp + 0x10], r15d
setg byte [rsp + 0x10]
mov r15, qword [rsp + 8]
test r14w, 0x21c
mov r14b, 0xbb
not r14d
call fcn.14009ac06

Function at 0x140099787
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
jne 0x1400ae437
push qword [rsp + 0x10]
popfq
lea rsp, [rsp + 0x28]
ret

Function at 0x14009978d
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
mov si, 0xc22d
mov esi, 0x672b6f02
mov rsi, qword [rsp + rsi - 0x672b6ef2]
mov qword [rsp + 0x10], rdi
push rbx
push rcx
movabs rcx, 0xb2b9ec1d5f183c1b
jg 0x14009cad4

Function at 0x140099828
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
and rsi, 0xffffffffe3284b15
mov qword [rsp + 0x40], rcx
add qword [rsp + 8], 0xffffffffbff509fb
movabs rdx, 0x1502961cf005b003
add esi, 0x4eac49b7
jno 0x1400afd53
movabs rsi, 0xc230eda3a8358e22
push rdx
jne 0x140098d05

Function at 0x14009984f
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
and byte [rsp + 8], 0xa4
push rbp
movabs rbp, 0x5b3396964430ef8e
jle 0x14009a92d

Function at 0x1400998cb
Capabilities:
Encrypt data using speck

Disassembly:
add qword [rsp + 0x18], 0xffffffffbff66e57
not byte [rsp + 0x90]
mov rbx, qword [rsp + 0x78]
mov rbp, qword [rsp + r11*2 + 0x8a]
lea rbp, [r9*4 - 0x1049b779]
add r15, 0xffffffffc4396994

Function at 0x1400999b9
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
and qword [rsp + 8], 0xffffffffe721772b
mov qword [rsp + 0x10], r9
call fcn.14009647f
mov rax, qword [rsp + 0x10]
mov rax, qword [rax]
jno 0x14009462d
Function at 0x1400999c7
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
test ecx, 0x78a55607
setg dil
lea rdi, [rdi*2 - 0x78eddb72]
mov rdi, qword [rsp + 8]
mov rdi, qword [rdi]
sub cx, 0xec95
mov cx, 0xebb1
sub cl, 0x2c
call fcn.1400ae93e

Function at 0x1400999f2
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
xchg qword [rsp + r13 - 0xd7], rcx
mov r13, qword [rsp + r13*2 - 0x1de]
not byte [rsp + 0x10]
mov byte [rsp + 0x10], 0x94
shr byte [rsp + 0x10], 0x79
add qword [rsp + 8], 0xffffffffbff6076d
shr byte [rsp + 0x10], 9
jne 0x1400aed70
neg dword [rsp + 0x10]
xor qword [rsp + 0x10], 0x55a18e31
push qword [rsp + 0x18]
popfq
lea rsp, [rsp + 0x28]
ret
mov rbp, qword [rsp + r14 + 0x30]
call fcn.1400ad8fd

Function at 0x140099ae1
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
xchg qword [rsp + r8 - 0x7e91ce9b], rdx
mov r8, qword [rsp + r8 - 0x7e91ceeb]
call fcn.1400b184b

Function at 0x140099bee
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
add qword [rsp + 0x20], 0xffffffffffffd6df
mov r9b, 0x27
add qword [rsp + 0x30], 0xffffffffbff696cc
movabs r10, 0xb89bc00f58a99127
not r10d
xor r9d, dword [rsp + 0x13]
movabs rcx, 0x3839221fd83cc23e
cmp qword [rsp + 0x10], 0xffffffffd3319910
jge 0x1400aeacb
or qword [rsp + 0x28], 0xffffffff910e6328
push qword [rsp + 0x20]
popfq
lea rsp, [rsp + 0x38]
ret 8

Function at 0x14009a0f1
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
lea r8, [rbx*4 - 0x67fdbce4]
jno 0x14009438b
jle 0x1400992e8

Function at 0x14009a164
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
movabs r13, 0xf3042007e710eab4
and bl, 0xa3
mov rdi, r13
add di, 0x152b
add rdi, 0x1c3f3a05
movzx r14w, dil
shr r14w, 0x68
mov r14d, 0x180a7d81
lea rdx, [rdx + 0x1eaf5e38]
seta bl
jb 0x1400aeb8c

Function at 0x14009a1a0
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
not word [rsp + r14 - 0x6e6fa9aa]
setae byte [rsp + 8]
shl ecx, 0x41
xchg qword [rsp + 0x40], rbx
mov rdi, qword [rsp + 0x28]
add qword [rsp + r14 - 0x6e6fa992], 0x259d2734
add rbp, 0xffffffff86891d91
mov ebp, dword [rsp + 0x23]
add r13d, dword [rsp + 8]
or bp, word [rsp + 0x26]
shr word [rsp + 8], 0xa7
jne 0x1400afef5
or r15b, r15b
jg 0x1400957cd
mov r15, qword [rsp + 0x30]
mov byte [rsp + 0x38], 0x12
setg byte [rsp + 0x38]
shl qword [rsp + 0x38], 0x8b
push qword [rsp + 0x40]
popfq
lea rsp, [rsp + 0x50]
ret 8

Function at 0x14009a95e
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov rdx, qword [rsp + 0x18]
mov rdx, qword [rdx]
jl 0x14009e0aa
and qword [rsp + rsi - 0x62175cc9], 0x5e03e331
setb sil
sub r14, r8
call fcn.1400b1b96
call fcn.14009bb2b
Function at 0x14009aafb
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
push rcx
push rdx
movabs rdx, 0x8c38f1a3fc1a3725
pushfq
shl edx, 0x2e
mov rcx, qword [rsp + 0x18]
call fcn.14009dc52
lea rdi, [rdi - 0x5cc9ab56]
call fcn.14009db45
not qword [rsp + 0x38]
shl qword [rsp + 0x50], 0x1d
mov rbp, qword [rsp + 0x38]
test rbp, rbp
mov rbp, qword [rsp + rbp + 0xc613312]
jge 0x14009e0e2
and word [rsp + 0x50], 0xa6bd
neg dword [rsp + 0x50]
xor dword [rsp + 0x38], 0x83b5cb2
test dword [rsp + 0x50], 0x5db8de31
push qword [rsp + 0x40]
popfq
lea rsp, [rsp + 0x60]
ret 8

Function at 0x14009ac06
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
setae r14b
movsxd r14, dword [rsp + 0x18]
js 0x14009eac0
mov r14, qword [rsp + r14 - 0x6f90b9c0]
call fcn.140095c7c
call fcn.14009a25b
add ebp, ebx
cwde
invalid

Function at 0x14009ae94
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
call fcn.14009d397
mov rbx, r10
neg dword [rsp + 0x30]
setne bl
je 0x14009e480
xchg qword [rsp + 0x40], rcx
mov r15, qword [rsp + 0x18]
jb 0x1400b053b
mov rcx, qword [rsp + rcx - 0x53a3a562]
mov rcx, qword [rcx + r15 - 0x53a3a58a]
sub r15b, byte [rsp + r15 - 0x53a3a559]
xor word [rsp + r15 - 0x53a3a5b5], 0xf73e
cmovo r15d, r10d
add dword [rsp + r15 - 0x53a3a5b5], 0x593941ae
shr r15b, 0xe9
lea rcx, [rcx + r10*2 - 0x41a7a455]
not r10d
jns 0x140098d43
xor r13d, dword [rsp + 0xb]
xchg qword [rsp + 0x40], rax
mov r13, qword [rsp]
sets r10b
cmp dword [rsp + 8], 0xe8a22693
jno 0x1400948a7

Function at 0x14009b136
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
movabs rdi, 0x7991321b7b814a31
or r15b, 2
mov rdi, qword [rsp + 0x30]
mov rdi, qword [rdi + r15 + 0x1408f7dd]
sub r8b, 0xb0
and r8b, 0xb4
movsx r15w, r15b
call fcn.1400958d5

Function at 0x14009b207
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
add dword [rsp + 0x30], 0x672a7737
or r12, r12
and byte [rsp + 0xa0], 0x3b
jge 0x140096f2b

Function at 0x14009b360
Capabilities:
Encrypt data using speck

Disassembly:
call fcn.140094cbb
dec dword [rax - 0x77]
int 0xff
ror dword [rax + 0x63], cl
or al, ch
in al, 0xf3
invalid
neg word [rsp + 0x20]
mov r14b, 0x19
setns byte [rsp + 0x20]
xchg qword [rsp + 0x30], rdx
shl r12, 0x62
mov rdx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x10]
mov rdx, qword [rdx]
sub r11d, r12d
jno 0x14009edb0
xor r10b, r12b
jb 0x14009ecda
setbe r10b
jne 0x1400ad560
add qword [rsp + r11 - 0x57318522], 0xfffffffffffe6b19
lea rdx, [rdx + r11*2 - 0x4228feab]
neg r11
jns 0x140002b79
lea r11, [r12*8 + 0x3fac7207]
neg r12w
js fcn.1400b02aa
xchg qword [rsp + 0x40], rdx
mov r12, qword [rsp + 0x30]
jb 0x140098e91
cmp word [rsp + 0x20], r10w
lea r11, [r11 + r11*4 - 0x577e2244]
call fcn.14009a2a6
Function at 0x14009b83a
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
add qword [rsp + 0x18], 0xfffffffffffbf9e6
shl dil, 0xfa
add edi, 0xf7b437b8
add edi, 0x623de511
add qword [rsp], 0xffffffffffffdf40
add di, 0x552b
seta r14b
movzx r14d, r14b
mov rdx, qword [rsp + r14*4 - 4]
mov rdx, qword [rdx]
test r14w, 0x57a3
jb 0x140095b3c
cmp dil, 0xab
setge r14b
lea r14, [r14 + rdi - 0x341b3ef]
setae r14b
neg r14d
lea rdx, [rdx + r14 - 0x40eb6c69]
shl dil, 0xf0
bswap rdi
or di, r14w
mov qword [rsp + r14 - 0x2928deff], rdi
push r15
movabs r15, 0xf534588d6f90ba9e
xchg qword [rsp + r14*2 - 0x5251bdc6], rdx
mov rdi, qword [rsp + r14 - 0x2928deef]
je 0x1400b15fc
call fcn.140099767

Function at 0x14009b9f5
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
pushfq
add qword [rsp + 8], 0xfcae
movabs rax, 0x660916821f3cfdb8
call fcn.14009b9b2
test r10, 0x67850c8a
jl 0x1400aff32
nop
bswap r10d
push rbp
push rdi
mov rbp, rsi
mov rdi, rdx
lea rsi, [rsi*4 - 0x7ef1e4ee]
sub rbp, 0x56b0b788
mov rcx, qword [rsp + 0x28]
mov rcx, qword [rcx]
not r10d
mov qword [rsp + 0x28], r12
push r11
xor rdx, rdx
cmp word [rsp + rdx + 0x30], dx
push r14
mov r14, qword [rsp + rdx + 0x38]
movabs r11, 0x5b0ef486328bd609
cmovb r11w, word [rsp + 0x3a]
lea rcx, [rcx - 0x2a57b6e0]
cmp dl, 0x15
lea rdi, [r10 + r14*8 + 0x13c2929]
bswap r12d
bswap r11
mov rbx, rcx
jb 0x1400943e6
jle 0x140096df7

Function at 0x14009bb3e
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
pushfq
shr r14w, 1
jb 0x14009f699
add qword [rsp + 8], 0xffffffffffffe0d9
mov rdx, r14
not r14w
test r14b, r14b
jae 0x14009f756
mov rdx, qword [rsp + rdx - 0x3624b796]
mov r12, qword [rsp + 0x28]
je 0x14009c724

Function at 0x14009c16e
Capabilities:
Encrypt data using speck
Packed with generic packer

Disassembly:
shl si, cl
mov rcx, qword [rsp + 0x20]
mov rcx, qword [rcx]
cmp r12d, 0x1e86f60c
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x10], rbx
cmovne rsi, qword [rsp + 0x10]
add qword [rsp + 0x18], 0xffffffffffffe74c
lea rcx, [rcx + 0x659fa6bf]
shr rbx, 0xae
and dword [rsp + 0x10], ebx
cmp r12w, si
js 0x140099265

Function at 0x14009c5de
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
xchg qword [rsp], rdi
call fcn.14009695d

Function at 0x14009c5e7
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
xchg qword [rsp + r10 - 0x58a990b1], rcx
mov r14, qword [rsp + r10 - 0x58a990b9]

Function at 0x14009c8ed
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
mov r9, qword [rsp + r9 - 0x391ffe8]
setne byte [rsp + 0x48]
jne 0x140096e93

Function at 0x14009c943
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
call fcn.14009ca8d
jae 0x14009f634
Function at 0x14009c9ac
Capabilities:
Encrypt data using speck

Disassembly:
not edx
mov r8, qword [rsp + rdx*8 - 0x270bbda0]
mov qword [rsp + 0x30], rax
push 0xffffffffda0ce9a2
add word [rsp + rdx*2 - 0x9c2ef74], dx
setb dl
push r13
sub dword [rsp + rdx*2 - 0x9c2edd2], 0x3db1bf3d
jno 0x1400afda2
jge 0x14009cd69

Function at 0x14009ca8d
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
shr r11, 0xb8
mov rbx, r11
mov qword [rsp + r11 + 0x15], rbx
push rcx

Function at 0x14009cb8b
Capabilities:
Encrypt data using speck

Disassembly:
je fcn.1400adadb
xchg qword [rsp + rdi - 0x462ac88f], rcx
mov rdi, qword [rsp + rdi - 0x462ac8af]
mov r10, qword [rsp + 0x30]

Function at 0x14009ccfe
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
setns bl
je fcn.1400b0313
push r14
jb 0x140096697
jo 0x1400949b8
add qword [rsp + 0x18], 0xfffffffffffff87a
mov qword [rsp + 0x20], rsi
lea rbx, [rbx + rbx - 0x75d463fc]
shl rbx, 0x78
movabs r14, 0x4faa8ea140950f15
neg ebx
and r14b, 0xa2
seta byte [rsp + rdi*2 - 0x4d06c312]
mov rdi, qword [rsp + rdi - 0x26836185]
sub r15d, r15d
or word [rsp + r15*2 + 0x38], r15w
and r15d, dword [rsp + r15*4 + 0x3a]
mov r15, qword [rsp + r15*4 + 0x48]
add byte [rsp + 0x38], 0x18
add qword [rsp + 0x38], 0xffffffff8faf6a30
and dword [rsp + 0x38], 0xbbb60980
setno byte [rsp + 0x38]
not dword [rsp + 0x38]
push qword [rsp + 0x40]
popfq
lea rsp, [rsp + 0x50]
ret
mov word [rsp + 0x80], 0x8110
mov rdi, qword [rsp + 0x30]
and word [rsp + 0x20], 0x7a1
ret
push r12
lea rax, [rax + 1]
movabs r12, 0xa58f0c2f848b700f
mov rsi, r15
sub r12b, r12b
xor r12b, 0x83
mov qword [rsp + 0x28], rax
call fcn.1400b0313
shl r9d, 0xdd
xor r9w, word [rsp + 0x20]
mov r12, qword [rsp + 0x58]
jns 0x140096164
sub r9w, word [rsp + 0x13]
je 0x14009b31b
mov r15, qword [rsp + 0x50]
bswap r9d
cmp byte [rsp + 8], 0xb9
call fcn.14009afe2
ret 8
test word [rsp + 0x18], 0x4bbb
mov byte [rsp + 0x18], 0x2b
lea rdx, [rdx + 0x319001bd]
jne 0x1400962e6

Function at 0x14009d268
Capabilities:
Encrypt data using speck

Disassembly:
xchg qword [rsp + 8], rdi
pushfq
add qword [rsp + 8], 0xffffffffbff6588a
mov qword [rsp + 8], rdi
call fcn.140099b73

Function at 0x14009d281
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
jge 0x14009872b
shr r15b, 2
push rdi
mov r15, qword [rsp + 0x28]
mov qword [rsp + 0x28], rdx
movabs r14, 0xd218471f34839628
movabs rdi, 0xba060f3780266315
call fcn.14009b83a

Function at 0x14009d68c
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
movabs r15, 0xa5b2d6259d94d682
call fcn.14009589a
test ebx, 0x97237bad
mov rbx, qword [rsp]
call fcn.1400b178e
Function at 0x14009d6ab
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
lea r15, [r14*8 + 0x250e68b7]
lea rbp, [rbp + 0x2b88f913]
lea r14, [rdx + r14 - 0x7848fac3]
setb byte [rsp]
add qword [rsp + 0x38], 0xffffffffbff5025e
push r14
call fcn.1400984f5
sub r14w, 0x89b0
movabs rbp, 0x2f0bce1ef517d70e
shr word [rsp + 0x60], 0x44
js fcn.14009e3e7
mov bpl, 0xf
mov rbp, qword [rsp + 8]
je 0x140095f4e
movabs r14, 0x14a1571a08b3fa1b
js 0x14009e274
shl dword [rsp + 0x60], 0x6e
shr word [rsp + 0x60], 0x6e
jne 0x140095d07
mov r14, qword [rsp + 0x30]
sub dword [rsp + 0x60], 0x872b0717
setl byte [rsp + 0x60]
seta byte [rsp + 0x60]
not qword [rsp + 0x60]
mov dword [rsp + 0x60], 0xe99a4ca9
neg qword [rsp + 0x60]
neg dword [rsp + 0x60]
mov qword [rsp + 0x60], 0xffffffff9d2a92ab
push qword [rsp + 0x40]
popfq
lea rsp, [rsp + 0x68]
ret 8
js 0x14009b1e9
lea rbx, [rbx + 0x578bc88c]
bswap r9d
and dword [rsp + 8], 0x49309f3d
jno 0x14009cab3

Function at 0x14009d739
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
cmp byte [rsp + 0x40], 0xa2
not di
mov rdi, qword [rsp + 0x38]
jns 0x14009c9de

Function at 0x14009db35
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
and r11d, 0x26375e95
add r11b, 0x38

Function at 0x14009db69
Capabilities:
Encrypt data using speck

Disassembly:
add qword [rsp + r9*4 - 0x5c1ffbc8], 0xffffffffbffa7ff6
or qword [rsp + r9*4 - 0x5c1ffbd8], 0xffffffff949b9f0d
and dword [rsp + r9*2 - 0x2e0ffdcc], 0xb335d8b0
movsx r9d, r9b
call fcn.14009a1e3

Function at 0x14009dbb7
Capabilities:
Encrypt data using speck
Packed with generic packer

Disassembly:
xor r9d, 0xfda78089
sub qword [rsp + 0x18], r9
or r15b, byte [rsp + 0x1e]
neg dword [rsp + 0x18]
movabs r15, 0xc305090a7412e93e
xchg qword [rsp + 0x38], rbx
mov r9, qword [rsp + 0x10]
shl byte [rsp + 0x18], 0x48
shr word [rsp + 0x18], 0xbf
xor byte [rsp + 0x18], r15b
add r15d, dword [rsp + 0x1a]
lea r15, [r15 + r15 - 0x6e7d53c3]
jb fcn.1400ae5c2
mov r15, qword [rsp + 0x28]
jno 0x1400af1e2
not qword [rsp + 0x18]
call fcn.140096c56
popfq
lea rsp, [rsp + 0x30]
ret 8

Function at 0x14009e08c
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
bswap edi
lea r8, [rdi + r8*8 + 0x26aa3718]
call fcn.140096f1b
cmp bh, byte [rcx]
nop dword [rax + rax]
mov rbx, qword [rsp + 0x40]
mov rbx, qword [rbx]
mov dl, 0xb1
ja 0x140057f42

Function at 0x14009e10b
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
add r15d, 0xb4b95385
setb r15b
add qword [rsp + 0x20], 0x1aa69
shr r14, 0xd0
movabs rcx, 0xcab2698089a77489
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx]
movabs r9, 0x4992493569277a83
mov r13, r9
jae 0x1400ad8dc
Function at 0x14009e19f
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer

Disassembly:
ret 8
add qword [rsp + rdx - 0x48a807b0], 0x15046
mov rdi, qword [rsp + r10*2 - 0x2febfe6]
mov rdi, qword [rdi + rdx - 0x48a80800]
mov qword [rsp + r10*2 - 0x2febfe6], r10
add word [rsp + r10*2 - 0x2febfce], 0xa9a7
lea rdi, [rdi + r10*2 + 0x288a3915]
jns 0x14009715e
je 0x1400ae343
movabs rdx, 0x90b7701e20917184
and r10d, 0x682e71b5
jb fcn.140061a38
movabs rsi, 0x9baceab64e02be9b
shr si, 0x35
add sil, 0x9a
movabs r11, 0x42376ba7851f0a3f

Function at 0x14009e20d
Capabilities:
Authenticate hmac
Encrypt data using speck
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
movabs r9, 0xce09112b502897b2
push r9
not r9b
pushfq
neg qword [rsp + 8]
mov qword [rsp + 0x30], rbx
xor dword [rsp + 8], 0xba7089c
test word [rsp + 8], r9w
jl 0x140098817
add qword [rsp + 0x28], 0xfffffffffffef4b2
mov rbx, r9
shl bx, 0x93
shr ebx, 0x7a
cmovne rbx, qword [rsp + rbx - 0xc]
mov rbx, qword [rsp + 0x28]
mov rbx, qword [rbx]
shl dword [rsp + 8], 0x37
add qword [rsp + 0x18], 0xffffffffbff4e8f2
and r9b, r9b
not r9w

Function at 0x14009e297
Capabilities:
Encrypt data using speck

Disassembly:
neg byte [rsp + rbx - 0x4417ffe8]
bswap ebx
lea rsi, [rsi + rbx - 0x3dcfc73c]
add byte [rsp + rbx*2 - 0x3070], 0x9b
shl bl, 0xa2
test dword [rsp + rbx*2 - 0x3008], 0x3d123f03
movzx ebx, bx
xchg qword [rsp + rbx - 0x17d0], rsi
mov rbx, qword [rsp + rbx*4 - 0x6020]
jb 0x1400b179e
mov byte [rsp + 0x18], 0x90
neg byte [rsp + 0x18]
jl 0x1400992ab
call fcn.1400b1850
ficom dword [rbx - 0x721189f8]
jns 0x14009e354
push rdi
scasb al, byte [rdi]
or dword [rax + 0x21], eax
xchg byte [rdi], ch
scasb al, byte [rdi]
or dword [rax + 0x61], eax
cwde
out dx, eax
scasb al, byte [rdi]
or dword [rax - 0x3f], eax
nop
xchg dword [rsi + 0x77994009], ebp
invalid
test r10b, dl
push 0x4b
invalid

Function at 0x14009e3ba
Capabilities:
Encrypt data using speck

Disassembly:
add qword [rsp + 0x10], 0xfffffffffffe2f72
movabs rsi, 0x1b3f4e8b3b0a4fbd
shl si, 0x4a
jns 0x140099089
je 0x14009d1bd
shr sil, 0xfd
push rcx
call fcn.1400ae166

Function at 0x14009edf7
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
lea rsi, [rdi + rdi - 0x442386e]
mov rdi, qword [rsp + 0x48]
not dword [rsp + 0x40]
movzx esi, byte [rsp + 0x43]
mov qword [rsp + rsi*2 - 0x132], 0x7a88603b
lea rsi, [rsi + rsi*4 + 0x2e8b1d94]
not qword [rsp + rsi - 0x2e8b20dd]
je 0x14009f7c6
bswap esi
mov rsi, qword [rsp + rsi - 0x1d218ace]
jo 0x1400ae3c0
setno byte [rsp + 0x40]
shr dword [rsp + 0x40], 0x5d
not byte [rsp + 0x38]
add word [rsp + 0x38], 0x328d

Function at 0x14009f2c9
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
pop rdi
call fcn.14009fe86
setbe byte [rsp + 0x38]
test bl, r12b
jns 0x14009ba53
not dl
jns 0x14009ad57
lea rbp, [rbp + 0x3fad1292]
shl qword [rsp + 0x58], 0x30
xor di, r8w
ja 0x1400b1a23
Function at 0x14009f455
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
neg r13b
shr r14w, 0xdb
mov r14b, 0x13
js 0x1400ad88d
lea rdi, [rdi + 0x7bb1e81e]
test r14d, 0xca3b84a2
jbe 0x14009d448
and r13b, r13b
lea r13, [r13 + riz + 0x3a29f0bc]
mov qword [rsp + 0x20], r13
and r13, r13
xchg qword [rsp + 0x48], rdi
mov r14, qword [rsp + 8]
sub r13b, byte [rsp + 0x22]
and r13, qword [rsp + 0x20]
shl qword [rsp + 0x20], 0x93
shl qword [rsp + 0x20], 0x61
call fcn.14009b564

Function at 0x14009f4b2
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
shr r13w, 0xcf
shl r13b, 0x44
mov rbp, qword [rsp + r13 - 0x3582fff8]
mov rbp, qword [rbp + r13 - 0x35830000]
xor r13d, r13d
add r13w, 0x892
lea r13, [r13 + r13*8 - 0x4dde74f8]
test r13, r13
lea rbp, [rbp + r13 + 0x677a3c7c]
lea r13, [r13*8 + 0x39a83c2c]
lea r13, [r13 + riz - 0x284333cb]
movsx r13w, r13b
jl 0x1400af536

Function at 0x14009f502
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
add byte [r8], r8b
add r14w, word [rsp + rsi - 0x7ffffe6]
call fcn.14009687c
sbb byte [rcx], al
and eax, 0x99022764
adc byte [rdi + 0x48], 0xbf
push rdi
invalid
mov edi, 0xe099ca14
invalid
scasd eax, dword [rdi]
cmp byte [rsi], al
call fcn.1400956b3
movzx bx, r11b
xchg qword [rsp + r11 + 0x35], rax
mov rbx, qword [rsp + rbx*2 + 2]
test dword [rsp + r11*2 + 0x1a], 0xe3b9708f
call fcn.1400989bd
mov r13, qword [rsp + 0x20]
shl r11b, 0xfb
add qword [rsp + 0x10], 0xffffffffbff4ee5f
mov r9, qword [rsp + 0x28]
shl r11b, 0x63
or r9d, dword [rsp + 0x2b]
add r13d, 0x10de08
jbe 0x140095ca1
mov r13, qword [rsp + 0x30]
jge 0x14009ec74
neg byte [rsp + 0x40]
je 0x140094a9a
and qword [rsp + 0x40], 0x21144ca0
push qword [rsp + 0x48]
popfq
lea rsp, [rsp + 0x58]
ret 8

Function at 0x14009f67a
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp], 0x43f6c887
call fcn.1400c9c24

Function at 0x14009fd36
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + rbx - 0x4fcbff5b], r14
lea rcx, [rcx - 0x35f333dc]
jo 0x14009e2e0
jae 0x1400ae85e

Function at 0x14009fdd8
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
sets sil
lea rbp, [rbp + r14 - 0x365ca3dc]
lea r14, [r14 + r14*8 - 0x3e6bd4d1]
and qword [rsp + rsi*8 + 0x40], 0x480be709
sub r14b, 0x1a
sub r14b, byte [rsp + rsi + 0x47]
add rsi, r14
jns fcn.1400945a3
sub r14d, r14d
call fcn.140094986