joyce8/EMBER2024-capa huggingface dataset:
Function at 0xce8867
Capabilities:
Authenticate hmac

Disassembly:
cwde
inc ecx
ror esp, 3
inc ecx
neg esp
shl bx, 1
dec esi
mov dword [esp + eax*4 - 0x4cdbb268], ebp
inc dx
sal dword [esp + eax*2 - 0x266dd932], 0x29
inc esi
xor dword [esp + eax*2 - 0x266dd930], esp
bts bx, 0xb9
dec esi
mov ebp, dword [esp + eax - 0x1336ec94]
inc ecx
mov edi, 0xc91b540c
not bp
dec ebp
lea edx, [edx + esi*4 - 0xc830]
jae 0xce01e2
inc edi
mov dword [edx + eax*2 - 0x266dd938], esp
sar al, 0x22
inc ecx
pop ecx
pop esi
jae fcn.00cccd16
dec ecx
btr eax, 0x93
inc edi
lea esp, [esp + eax - 0x70e0c85b]
dec eax
mov dword [esp + esi*4 - 0xc82c], 0x988c54a9
inc ecx
xor esp, 0xe983febd
push eax
inc ecx
neg esp
inc dx
div dword [esp + eax - 0x1336ec99]
inc edx
xchg dword [esp + eax - 0x1336ec91], ebp
inc ecx
bswap esp
inc ecx
inc esp
inc ecx
movsx ebx, al
jmp 0xc9f9c7

Function at 0xcf71ce
Capabilities:
Authenticate hmac

Disassembly:
adc bl, 0xb9
jmp 0xcc9cda
inc eax
and dh, ch
xor bl, 0xb7
and byte [esp + edx*4 - 0x14], 0x3b
inc ebp
movzx edi, cl
not bl
inc ebp
add esp, esp
dec esp
lea esi, [edx*2 + 0x2263c12]
dec bl
dec esp
add ecx, ecx
dec ecx
ror esp, 0x86
inc esp
xor ch, bl
dec eax
lea ebx, [esp + ebx + 0x10]
ror si, cl
add al, byte [ebx + edx*8 - 0x28]
inc edx
or byte [esp + ecx + 0x17b3e764], dh
inc ecx
inc esi
dec ebp
lea edx, [edx + edx*2 - 0xc]
shl byte [esp + edx*2 + 3], 0x83
inc cx
mov dword [edx + edx*4 - 0x14], eax
dec edx
inc dword [esp + ecx*4 + 0x5ecf9d5d]
call fcn.00c990df
xor ecx, ebx
jmp 0x14e91ed
dec ebp
add ebx, edi
dec eax
lea edi, [edi + edx*2 - 1]
dec esp
mov dword [esp + edx], eax
movzx ebx, byte [edi + edx*2]
bts cx, cx
dec eax
inc dword [esp + edx*4]
idiv cx
inc ecx
xor bl, ch
ror byte [esp + edx*8 - 0x28], 1
push eax
jae 0xc9754a
dec eax
lea eax, [ebx - 0x6f46a359]
adc ebp, 0xbf29253b
neg ebp
inc ecx
movsx esi, dh
xor ebp, 0x50358790
btc bx, si
jae 0xcfb87e
mov ah, 8
xchg ebx, eax
dec esi
push eax
sbb al, 0x6c
adc byte [eax + 0x247cb224], bl
or byte [eax + 0x6de5b224], bl
and byte [eax + 0x15dcb224], bl
cwde
cwde
and al, 0xb2
inc ebp
lds edi, [eax - 0x5a4ddb68]
cld
adc byte [eax + 0x6d64b224], bl
rcr byte [eax + 0x279cb224], 0x3a
pop es
xchg edi, eax
sub byte [esi - 0x13ff20a], ah
pop ebp
push 0x72f9e45b
mov cl, 0x99
das
cld
sub eax, 0x8ea80af0
retf 0x1fea
call fcn.00d38cfb
lea ebp, [ebp + eax - 0x1d854d86]
inc eax
cbw
or dl, 0x89
mov dword [ebp + eax*4 - 0x7617fe0c], ecx
js 0x152a428
neg ecx
mov eax, 0xb836c91f
cbw
not ecx
sub ecx, 0x1d33e22b
neg ecx
xor ax, ax
rol ecx, 1
shl eax, 0xee
or eax, edx
xor ebx, ecx
add esi, ecx
movsx ecx, al
or ax, 0x990
sbb edi, 1
push edx
movzx eax, byte [edi]
inc ecx
xor al, bl
rol al, 1
sal dx, 0x67
inc edx
dec al
neg ecx
and cl, ch
pop ecx
not al
and cl, ch
sbb dx, cx
neg dl
sbb al, 0x80
shr ecx, 0xc9
btr cx, cx
rol al, 1
xor bl, al
xadd edx, ecx
adc eax, esp
lea edx, [ecx*4 - 0x2f4dc3d9]
mov ecx, dword [eax]
mov eax, 0x1d854d82
jmp 0xd2759f
jno fcn.01508028
invalid
Function at 0xcfb883
Capabilities:
Encode data using base64

Disassembly:
rol dl, 1
pop eax
not dl
rol dl, 1
bt eax, eax
sbb cx, 0x9e9c
or cx, ax
xor dl, 0x30
shl eax, 0x78
neg ax
sub cl, 0x3f
xor bl, dl
imul ax, ax
push eax
lea edx, [esp + edx + 4]
mov cx, word [ecx + edx - 0x6940666f]
lea edx, [eax + eax - 0x5956bafd]
sal word [esp], 0x28
btc eax, edx
mov word [ebp - 4], cx
cdq
jae 0x14ebfb3
xor ebx, eax
jmp 0x14be91a
mov dword fs:[edx + eax - 0x29d96c03], ecx
movzx edx, al
lea edi, [edi + eax - 0x29d96c07]
lea eax, [eax*4 - 0x258da5a]
mov eax, dword [edi + edx - 3]
lea ecx, [edx*2 - 0x535001dc]
xor eax, ebx
bts ecx, ecx
lea ecx, [ecx + edx + 0x5b9bb98d]
shl ecx, cl
not eax
bswap eax
dec eax
xadd dl, ch
ror eax, 3
and ecx, ecx
xor ebx, eax
add esi, eax
jmp esi
mov dword [esp + edx*8 - 0x280], 0x961be93b
xor eax, ebx
inc byte [esp + edx - 0x4e]
cmovns edx, ecx
setle cl
dec eax
and dword [esp + ecx - 0x44334a00], edx
xchg dword [esp + ecx - 0x44334a00], ecx
not eax
inc dword [esp + edx - 0x44334a00]
rol cl, 0x21
pop ecx
neg eax
ror ecx, 0x93
shr dx, 0x4e
not eax
push edx
bswap eax
ror edx, 0x3c
and byte [esp + edx - 0x43300012], ch
xor eax, 0xdfa663b7
sal byte [esp + ecx - 0x69402886], 1
dec eax
sal cx, 0xca
jne 0xcc9dfb
mov ecx, dword [edi - 4]
xor ecx, ebx
mov eax, 0x6a1da8b7
rol ecx, 1
cdq
neg ecx
inc ecx
xor edx, eax
bts eax, eax
bt edx, 0x3d
xor ecx, 0x6c844415
cwde
xor edx, eax
btr eax, edx
not ecx
or edx, 0xb9913a9b
cbw
xor ebx, ecx
mov dword [ebp - 4], ecx
and eax, eax
mov ecx, dword [edi - 8]
xor ecx, ebx
imul dl
sar edx, 0x30
dec ecx
lea eax, [eax + eax*4 + 0x28aec905]
ror edx, 0xe1
sub edx, eax
not ecx
neg ecx
cwd
call fcn.0151781d
adc esi, ecx
mov ecx, eax
mov ax, word [eax + ebp - 0x40ab48a5]
or cl, dh
neg edx
mov cl, byte [ebp + ecx - 0x40ab48b3]
sal dl, 0x85
sar edx, 0x16
adc ebp, 1
sub edx, 0xc62a6514
rol edx, 0x2b
shr ax, cl
call fcn.00d00b0c
dec eax
sub edi, 4
mov ecx, 0xebaa1015
inc esp
mov edi, dword [edi]
dec esp
lea ecx, [ecx + ecx*8 - 0x1e65c1d5]
jmp 0xd348d8
inc ebp
xor edi, ebp
inc ecx
mov ebp, ecx
xor ecx, ebp
inc ecx
ror edi, 2
inc ecx
inc edi
call fcn.00ccf064
dec esi
mov ebp, dword [esp + edi*2 - 0xbe74]
inc ecx
sal esi, cl
inc cx
xor esi, 0x634d34b7
leave
dec ebp
adc ebx, ecx
push esi
inc ecx
pop ecx
pop ecx
pop esi
inc ecx
pop ecx
pop ebx
jmp fcn.00cccd16
add esi, eax
movzx edx, byte [edi + ecx - 0x69401806]
shr cx, 0xa5
lea edi, [edi + ecx - 0x694000c6]
inc cx
jb 0xcf970b
xor dl, bl
ror dword [esp + ecx - 0x694000c1], 0x77
inc ecx
jne 0xca8da1
or ax, ax
adc ebp, 0xfffffffc
mul edx
dec word [esp + eax - 0x77fffff6]
pop ecx
jbe fcn.01508028
add byte [eax], al
inc edi
je 0x14ec016
imul ebp, dword [ebp + 0x54], 0x656c7469
inc ecx
add bh, dh
neg ecx
adc al, 8
push esi
xor ecx, ebx
pop eax
add eax, 0xfffff399
jmp eax
stosd dword es:[edi], eax
xchg esi, eax
xchg ebp, eax
jae 0x14ebff6
xor ecx, dword [ebx]
invalid
Function at 0xcfe184
Capabilities:
Authenticate hmac

Disassembly:
add ecx, eax
movzx eax, dx
cwd
not dword [esp + eax*8 - 0x71244]
mov dword [eax + ebp - 0xe245], ecx
neg eax
mov ecx, dword [esp + 4]
movzx eax, byte [edi - 5]
not ecx
and cx, word [esp + ecx*2 - 0x368]
lea edi, [ecx + edi - 0x1bc]
call fcn.00d97dbe
sub edi, 4
push 0x40ab48a6
mov ecx, dword [edi]
xor ecx, ebx
mov eax, 0x1112bd17
lea edx, [eax + eax - 0x42f9fb5b]
pop eax
rol ecx, 2
bswap ecx
push edx
pop edx
xor ecx, 0x2f895a08
dec eax
not ecx
not edx
neg ecx
xor ebx, ecx
btc edx, edx
jae 0xcfb93f

Function at 0xd07184
Capabilities:
Encode data using xor

Disassembly:
xor edx, ebx
lea eax, [ecx + ecx*4 - 0x1b6b1cc2]
or cl, 5
dec edx
mov dword [esp + ecx*2 - 0x17a], ecx
jmp 0xd31cbb

Function at 0xd24206
Capabilities:
Authenticate hmac

Disassembly:
ror edx, 1
pop ecx
inc edx
btc ax, 0xb0
bt ax, ax
ror edx, 1
call fcn.014c3baa
mov edx, 0x9d359cab
lea eax, [edx*4 + 0x649f5096]
xchg edx, eax
mov ecx, dword [ebp]
mov ax, word [ebp + 4]
mov word ss:[ecx], ax
call fcn.00cf9e4d
inc edx
lea ecx, [ecx + 0x56c1e6e9]
neg ecx
inc bp
add eax, esp
dec ecx
inc ebp
bts esp, esp
neg ecx
inc esp
movsx esi, ch
inc ecx
push ebp
inc ebp
movsx ebp, si
inc edx
xor dword [esp - 0x1538eb13], ecx
inc sp
imul eax, ebp
inc bp
sbb esp, ebp
inc ecx
pop ebp
je 0xcea0f2
dec ebx
lea eax, [esi + 0x3889bba6]
dec eax
and eax, 0x153f7e1f
dec eax
arpl cx, cx
inc ebp
cmovbe esi, esp
inc cx
and esp, 0x134c0eb0
fldenv [esi + 0x45]
bt eax, eax
inc ebp
movsx ecx, si
inc ecx
shl al, 0xc1
dec ebx
mov ebx, dword [esp + edx - 0x15380a90]
mov cx, word ss:[ebx + ebp*2 - 0x647aa46a]
inc ecx
movsx edx, ah
dec edi
lea edx, [esp + edx - 0x15380a8a]
cdq
inc cx
add esi, 0x43662fb2
mov dword [edx - 0x2a701520], ecx
inc ebp
xor ah, al
inc ecx
inc ecx
inc ecx
shl esi, 0xfe
dec ecx
xor edx, ebx
jmp edx
Function at 0xd27904
Capabilities:
Encode data using xor

Disassembly:
inc ecx
xor esp, 0x8119262d
inc ecx
neg esp
call fcn.00d949c6
shr byte [edi + 0x78], cl
dec ebx
pop esp
or dword [esi - 0x46d79020], ebp
mov esp, 0xf669a1c
mov edi, 0x348d4cd9
lea eax, [ebx + eax*2 - 0x72b741c6]
mov esp, 0x65e34339
cdq
inc ebp
bts esi, esi
dec eax
lea edx, [ecx + ebx*2 - 0x334f247b]
inc esp
movsx ecx, cl
movzx eax, byte [ecx + edi - 0x669a1cbc]
inc esp
mov edi, edx
inc ecx
movzx esi, cx
dec ecx
sal ecx, cl
inc ecx
xor al, ch
dec al
dec ecx
xchg edi, ecx
not al
inc cx
btr ecx, ebx
call fcn.00d8b428
or byte gs:[0x64d879af], dl
mov eax, dword [0x59b97df7]
sub byte [ebp - 0x15], cl
jge 0xd27936
pop ecx
xor al, 0x39
iretd
Function at 0xd334bb
Capabilities:
Authenticate hmac

Disassembly:
not cl
mov dword [esp], edx
and al, cl
mov word [ebp], ax
lea eax, [edx*8 + 0x33a85823]
sub al, 0x82
jb 0x154bdb3

Function at 0xd8e289
Capabilities:
Authenticate hmac

Disassembly:
xor eax, ebp
dec eax
ror dword [esp + 8], 0x2c
jb 0xcd2fea
jae 0x14bea5c
mov ebp, 0x91a37916
dec ebp
mov esp, dword [edx]
dec ecx
mov edx, dword [edx + 8]
inc esp
movsx esi, ch
mov ecx, 0xe0ad319e
dec edi
lea edx, [edx + esi - 6]
and eax, 0xff
call fcn.015465ec

Function at 0xd952b5
Capabilities:
Authenticate hmac

Disassembly:
not edx
bswap edx
adc ax, ax
shl eax, 0x15
not edx
bts ecx, ecx
xor ebx, edx
pop eax
xadd cl, ch
add esi, edx
and ecx, ecx
add eax, eax
mov edx, dword [ebp + ecx*2 - 0x62955908]
mov cl, byte [ebp + ecx - 0x314aac80]
sal eax, 0x33
lea ebp, [ebp + eax*2 - 0x17fffffe]
shr edx, cl
call fcn.00cfe211
mov dword [esp + ecx - 0x314ac8ac], eax
xor dword [esp + ecx - 0x314ac8ac], 0x9e264e3f
bswap edx
add byte [esp + ecx - 0x314ac8aa], 0xa5
ja 0xd3489e
Function at 0x14c5ecc
Capabilities:
Authenticate hmac

Disassembly:
and byte [esp + edx - 0x6f0000], dh
mov dword [ebp + edx*2 - 0xddfffe], eax
pop ecx
mov eax, dword [edi + edx - 0x6f0004]
neg dx
lea edi, [edi + edx - 0x6f0004]
xor eax, ebx
call fcn.015528c9
call fcn.014fa91f
not edx
rol edx, 1
add ax, cx
bswap edx
btc eax, ecx
ror edx, 1
xor ebx, edx
not eax
btr ecx, 0xb5
sbb ax, 0xef1c
add esi, edx
cdq
jmp 0x14c52ff
or edx, dword [edi + edx*4 - 9]
lea edi, [edi + eax*2 - 0x3b31]
and cl, ch
ja 0x151678d
inc ebp
xor ch, al
mov ebx, 0xc0845f3d
call fcn.015238d6
sal byte [eax + 0x69], cl
jge 0x14c5f46
jno 0x14c5ee8
test eax, 0xd58118ce
add al, byte [eax]
add byte [eax], al
add al, ch
mov ebp, 0x41ff86b7
inc ecx
call fcn.00d316ab
pop esp
xchg di, ax
dec esp
mov ecx, dword [esp + eax*2 - 0x4001ff32]
dec eax
mov eax, dword [esp + eax - 0x2000ff85]
dec esp
mov esp, dword [esp + 0x28]
pop esi
call fcn.01538cae
push 0x87a670b7
shr word [esp + 2], 0xea
mov eax, 0xd487b583
mov eax, dword [ebp]
not byte [esp + 2]
rol word [esp + 1], 0x4f
adc byte [esp + 1], 0
mov cl, byte [ebp + 4]
mov edx, dword [esp]
xor dx, dx
shr eax, cl
and dx, word [esp + edx - 0x6f0000]
je 0xcb5874
sub bh, cl
jle 0x14c5f49
jmp dword [esi - 0x75]
mov dx, word [edx + ecx - 0x21797c00]
mov ecx, 0x86a417af
imul cx, cx
mov word [ebp - 2], dx
mov edx, dword [edi - 5]
movsx eax, cx
xor edx, ebx
or cl, 0x2c
ja 0xcc9d3d
shl cx, 0xe
xor edx, ebx
lea edx, [eax + edx - 0x22b32a3e]
xadd ecx, eax
shr eax, cl
neg edx
call fcn.00d8ec11
imul edx, dword [esp + ecx - 0x47687ff6]
ror eax, 3
pop ecx
xor ebx, eax
ror cl, 0x24
neg edx
add esi, eax
bswap edx
add edx, 0xd411d42f
mov edx, dword [ebp]
mov eax, dword [ebp + 4]
imul ecx, ecx
adc ebp, 7
not cl
mov dword fs:[edx], eax
mov eax, ecx
lea edx, [eax + 0x4daed308]
sar dl, 0x82
jmp esi

Function at 0x14eea32
Capabilities:
Authenticate hmac

Disassembly:
push edi
sub eax, eax
push esi
inc eax
push ebx
sal eax, 0x64
cwde
mov ebx, eax
mov ebx, edx
mov edx, eax
mov edx, ebx
sbb eax, eax
jp 0x14eb5b1
sbb ax, 0x3230
ja 0xd2e62b
inc dl
bt eax, 0x23
ror dl, 1
and ax, ax
add eax, eax
xor bl, dl
and al, al
bts eax, 0x18
jae 0xcd5e73
sal edx, 2
sub eax, eax
add eax, ebp
push 0xe817c17
add eax, edx
inc byte [esp]
mov dword [ebp - 4], eax
call fcn.00c981bc
xor ebx, eax
imul ecx, ecx
sal edx, cl
mov dword [esp + ecx - 0x20d], 0x611c4a24
add esi, eax
shl edx, 0xee
mov eax, 0xcb38e482
je 0x14f804e
lea ecx, [edx + ebp - 0x7ffffffe]
rol byte [esp + edx - 0x7ffffff8], 0x85
mov dword [ebp - 2], ecx
lea ecx, [edx*8 + 0x2b3ab016]
shl dl, 0x24
lea ebp, [ebp + ecx - 0x2b3ab018]
pop ecx
pop edx
pop edx
jae fcn.01508028
not dl
jbe 0xcffc55
shl dword [ecx + 0x7b], cl
jp 0x14eeaff
push eax
xor esp, dword [edx + 0x2c497dfd]
xchg dword [ecx + 0x37741494], ecx
mov dword [esp + edx - 0x35b1c88c], edx
xor eax, ebx
shl dword [esi - 0x3f], 0xc2
xor dword [edx + ebp], 0x2366d123
ror dword [edi], 1
cdq
ret 0xc8d0
sal word [esp + 2], 0x22
sbb ebp, 1
shr ecx, 0x6d
mov word [ebp + ecx*4 - 0x1ffffc], ax
pop ecx
pop eax
pop ecx
pop ecx
pop edx
jb fcn.01508028
xor ebx, edx
pop eax
add esi, edx
movsx edx, ax
push edx
mov dword [esp + edx*2 - 0xed98], esi
ret 4
Function at 0x14f2d0e
Capabilities:
Encode data using xor

Disassembly:
inc eax
movsx ecx, dl
mov dword [esp + eax*4 - 8], esi
ret 4
inc ecx
add esi, edx
xadd dword [esp + eax*2 + 4], ecx
btr ax, ax
rol dword [esp + eax*2 + 4], 0x98
mov cx, word [eax + ebp + 2]
movsx edx, ax
xor ax, word [ebp + eax*4 + 4]
mov dword [esp + edx + 4], edx
not byte [esp + edx*4 + 7]
add cx, ax
mov dword [esp + edx], 0xc411b613
movzx eax, dx
cwde
mov word [ebp + edx*4 + 4], cx
not edx
btc eax, eax
lea ebp, [ebp + eax + 3]
jae 0xcbda2a
dec cl
mov eax, 0x1c87620c
xor bl, cl
add ecx, esp
bt eax, eax
mov dword [eax + ecx - 0x1c87620c], edx
jae 0x150248e
mov edx, dword [edi + eax*4 - 0x721d8835]
movzx ecx, al
xor edx, ebx
ror ecx, 0xb7
dec edx
neg al
not edx
and ax, cx
xchg ecx, eax
rol edx, 1
not edx
bt eax, 0x15
cwde
and cl, ch
xor edx, 0x61b26c92
sub edx, 0xdd8c5626
imul ecx, eax
xor ebx, edx
cbw
add esi, edx
or cx, word [eax + ebp + 4]
lea edx, [eax + eax*8 - 0x337f5052]
lea ebp, [ebp + eax + 6]
sub eax, 0x882f278d
ja 0x14fbec1
movzx eax, byte [edi + eax - 0x77d0d879]
add edx, 0x139e97a5
adc edi, 0xfffffffa
ror dl, 0x23
sub edx, edx
rol edx, 0xc6
xor al, bl
btr edx, edx
ror al, 1
lea edx, [edx - 0x617863d1]
rol edx, 0x21
inc al
ror edx, 0xf1
not al
sbb edx, edx
sbb al, 0x32
xor bl, al
shr edx, 0xb4
add eax, esp
call fcn.00cbf6c8
sysenter
push edx
pushfd
mov edx, 0x3387f20
shr edx, 0x17
mov edx, dword [esp + edx*8 - 0x2c]
mov dword [esp + 4], 0x75d2943d
push dword [esp]
popfd
lea esp, [esp + 4]
call fcn.014e03d6
xor al, bl
not al
lea ecx, [edx + edx*4 + 0x3f37170e]
xor al, 2
xchg byte [esp + edx*8 - 0x2b5408], dh
neg byte [esp + edx*4 - 0x140a04]
sbb edx, edx
xor al, dl
dec cx
sub al, dl
inc ecx
or dword [esp + ecx - 0x3f522b93], ecx
xor al, 3
lea edx, [edx + ecx*4 + 0x3d80bba3]
dec ecx
push ecx
dec al
call fcn.014e0801
je 0x1502561
cld
cmc
jmp 0x1502564
call [ebx]
sal byte [edx], cl
ret 0xff66
dec ebx
add eax, esp
mov gs, edx
aaa
pop ecx
mov esi, 0x6b868ec7
sub eax, 0xf28ec7be
ffreep st(5)
sbb ecx, esi
cmp dl, bh
jl 0x15025cf
mov esi, 0xc5fc1737
sub al, 0x6f
wait
fprem
sbb bh, 0x54
and byte [edi + 0x1fe1c021], bh
mov ch, byte [ebp + 0x45425079]
sub ch, byte [ebx + 0x6c3b6650]
and eax, 0x8debe6fc
invalid
scasd eax, dword es:[edi]
dec ecx
iretd

Function at 0x14f5d6f
Capabilities:
Authenticate hmac

Disassembly:
mov eax, dword [eax + edi - 0x2cd0ab31]
add ecx, edx
sal dl, 0xc2
setae cl
xor eax, ebx
xor dl, 9
sub ecx, dword [esp + ecx*2 - 0x35e037fe]
neg word [esp + 6]
bswap eax
call fcn.015380ad

Function at 0x150076e
Capabilities:
Authenticate hmac

Disassembly:
xadd dl, dh
not ecx
call fcn.00ca469b
invalid
Function at 0x15007eb
Capabilities:
Authenticate hmac

Disassembly:
dec esp
lea edi, [esi + esi*8 - 0x575434e2]
pop ebx
inc ecx
add dh, 0x80
btc bp, si
inc ebp
xor dh, ah
dec eax
mov dword [esp + ecx*4 - 0x7c78], ebp
inc ecx
not edi
inc ecx
xor dh, 0x8d
inc ebp
xor dh, ah
inc eax
add al, dh
inc ebp
xor ch, dh
dec esi
lea esi, [esp + esi + 8]
cwde
dec eax
sar dword [esp + eax*2 - 0xb4dc], 0xf8
inc bp
mov ecx, dword [esi + eax*4 - 0x169b8]
movsx edx, word [esp + eax - 0x5a6a]
dec esi
lea edx, [eax + edx - 0x5a70]
inc si
mov dword [eax + edx - 0x5a6e], ecx
ror cx, 0xa1
pop eax
jle fcn.00cccd16
dec eax
mov dword [esp + ecx - 0x1f1e], ebp
inc edx
not edx
dec eax
ror eax, 0xa1
dec esp
mov dword [esp + ecx - 0x1f16], ecx
inc edx
inc eax
movzx ebx, dh
ror edx, 3
dec esp
mov dword [esp + ecx*2 - 0x3e34], ebp
xadd word [esp + ecx*2 - 0x3e3c], bp
xor dword [esp + ecx*4 - 0x7c70], edx
dec esp
mov ebp, dword [esp + ecx - 0x1f16]
inc eax
xadd byte [esp + ecx*8 - 0xf8eb], ch
inc ebp
movsx esi, cl
dec eax
arpl dx, dx
dec esp
add ebx, edx
dec eax
shr esi, cl
inc esp
mov esp, dword [esp + esi + 4]
inc sp
or esi, ecx
dec eax
lea edi, [edi + ecx - 0x1f1f]
dec eax
and dword [esp + ecx*2 - 0x3e3c], ecx
inc esp
movzx esi, byte [edi + ecx - 0x1f1e]
jns 0x1518fa8
dec eax
bswap eax
inc ebp
xor dh, ch
jmp 0xd2b800
Function at 0x150fb0e
Capabilities:
Authenticate hmac

Disassembly:
adc ecx, ecx
jmp 0xcfa696
rep stosw word es:[edi], ax
btr ax, sp
cmp di, 0x1604
mov ecx, dword [ebp + 8]
lea eax, [ecx - 1]
test si, bp
mov dword [ebp - 0x40], eax
test si, dx
clc
sub esi, esi
or eax, 0xffffffff
cmp sp, di
sub edi, edi
cmc
cmp edi, esi
clc
stc
or eax, edx
shr ecx, 1
jmp 0x152561a
mov dword [esp + 4], eax
mul word [esp + 6]
rol cx, 1
call fcn.00cf2b93
enter 0x616a, 0x7b
jne 0x150fb79
or esp, dword [ebx + 0x3a6b7df5]
out dx, al
jo 0x150fac3
invalid
xor eax, ebx
shl dx, 0xea
not dl
sbb cl, 0x81
not eax
btc edx, ecx
sar cl, 0xe5
jne 0xc96dc2
lea edx, [edx*2 + 0x52107e08]
inc dl
add ecx, esp
imul edx, edx
and dx, dx
btr dx, dx
mov byte [ecx + edx - 0x34f8ce51], al
movzx ecx, dl
btr dx, 0x99
lea eax, [ecx*2 + 0x102d6027]
movzx edx, word [ecx + edi - 0x54]
xor dx, bx
xor dx, 0x790a
add ax, cx
shr al, 0x63
bts cx, ax
ror dx, 1
neg dx
not cx
neg eax
sbb dx, 0xd01d
xor bx, dx
sub ax, ax
mov word [ebp + ecx - 0xffa6], dx
mov eax, dword [edi + ecx*4 - 0x3fe9f]
mov edx, ecx
bt edx, edx
lea edi, [ecx + edi - 0xffad]
or cl, dh
xor eax, ebx
neg eax
lea edx, [ecx + edx*2 - 0x17428de5]
btc dx, dx
call fcn.00d2b0eb
rep stosd dword es:[edi], eax
jmp 0xcbf162
Function at 0x151825b
Capabilities:
Authenticate hmac

Disassembly:
inc ecx
jmp ebx
not ecx
jb 0x14c57b7
shr byte [esp + edx - 0xe480], 0x25
inc byte [esp + edx - 0xe485]
inc edx
lea ecx, [ecx - 0x766ed770]
not ecx
sar dword [esp + edx*2 - 0x1c91c], 0x96
inc esp
mov ecx, dword [esp + edx - 0xe488]
inc esp
movzx eax, word [esp + edx - 0xe489]
dec esp
mov dword [esp + edx - 0xe486], ebp
inc ebp
adc al, al
jne 0x1522d62
push 0xd63c7789
sub edi, 4
sar dword [esp], 0x2d
mov eax, 0x79f3ca5
mov eax, dword [edi + eax*2 - 0xf3e794a]
xor eax, ebx
or byte [esp + 3], 0xc
dec eax
pop edx
movzx ecx, dx
not eax
call fcn.01515176
xor eax, ebx
bts edx, 0x8b
xadd dword [esp], edx
add edx, dword [esp + edx*2 - 0x6eacbf14]
not eax
sub edx, 0x2d974116
neg eax
xor eax, 0xc588f516
mov ecx, 0x1a16408c
and dword [esp + ecx*4 - 0x68590230], ecx
neg edx
sbb eax, 0xb780b217
sar ecx, cl
call fcn.00d9cf38
pushfd
test word [esp + 8], 0xd69c
jbe 0x1518269
xor byte [esp + 8], 0x3b
and word [esp + 8], 0x8d1f
mov dword [esp + 8], 0x75d2216c
push dword [esp]
popfd
lea esp, [esp + 8]
call fcn.014e03d6
not ecx
movzx ebp, si
mov ebx, dword [esp + esi - 0x991e00]
dec esp
lea eax, [ebp + esi*8 - 0x2edda749]
xor ecx, 0x9597083a
bswap ecx
dec esi
mov dword [esp + eax*2 + 0x54293292], ebp
inc ecx
btr eax, 0xba
dec eax
lea edx, [esi + ebx*8 - 0x564c7573]
inc eax
or dl, ch
xor dword [esp + esi*2 - 0x1323c00], ecx
inc ecx
pop ebp
inc ebp
mov esi, eax
inc esp
mov edi, esi
dec eax
arpl cx, cx
inc cx
shl ecx, 0xe3
dec ecx
xadd esi, ebp
je 0x1528c82
dec esp
adc ebx, ecx
dec eax
inc ebp
shr ebx, 0xa7
inc cx
mov eax, dword [edx + esi - 0x991dfe]
inc cx
mov esi, dword [edx + esi - 0x991dfc]
dec ecx
or edx, edi
inc ecx
movzx ecx, dh
adc ax, si
inc ecx
movsx esi, al
dec ecx
rol esi, 0x84
inc dl
inc cx
mov dword [edx + ebx - 0x3bfd], eax
sal ecx, cl
xadd bp, cx
sub edx, 0x8a849980
dec esi
lea edx, [ebx + edx - 0x3bfd]
bt ecx, 0x2f
dec eax
ror edx, cl
jae 0xda37da
inc ecx
mov esi, 0x338c160b
xor dword [esp + edx - 0xe486], ecx
dec esp
or dword [esp + edx*2 - 0x1c91c], eax
dec esp
mov ebp, dword [esp + edx*2 - 0x1c914]
dec eax
sbb dword [esp + edx*4 - 0x39238], 0x9308851c
dec ecx
shr ecx, 7
dec esp
mov dword [esp + edx*8 - 0x72468], edi
dec eax
arpl cx, cx
inc cx
add esp, 0xff415a23
invalid
inc ecx
movzx edx, di
mov ecx, dword [edi + edx*8 - 0x72470]
inc ecx
xor ecx, ebp
push edx
lea ecx, [ecx + edx*2 + 0x570343e6]
inc ecx
push edi
ror word [esp + edx*8 - 0x72463], 0x89
inc esp
movsx esp, dl
ror ecx, 1
neg word [esp + edx*2 - 0x1c915]
ror word [esp + edx*4 - 0x3922a], 0x22
jne 0x14c3af5
cmovge edx, dword [esp + ecx*4 - 0x80005]
xor eax, ebx
not eax
bswap eax
lea ecx, [edx + edx*8 + 0x71b88698]
or dx, word [esp + ecx - 0x6d1da493]
dec eax
sub byte [esp + ecx - 0x6d1da494], cl
ror eax, 1
xor ebx, eax
inc edx
je 0xcda96b
add esi, eax
pop edx
pop edx
pop ecx
jmp fcn.01508028
Function at 0x151f75d
Capabilities:
Authenticate hmac

Disassembly:
movzx ecx, byte [edi + ecx - 0x7ad18ae]
mov eax, edx
cdq
sal eax, 0x6b
xor cl, bl
ror cl, 1
neg edx
neg ax
or edx, 0xc1af9b99
xor cl, 0x83
div eax
or al, 0x92
add eax, 0xd2b84084
neg cl
mul edx
sbb cl, 0x9c
rol cl, 1
mul eax
rol edx, 0x5b
jb 0x1557813
inc cx
bts esp, 0xb7
dec eax
lea ecx, [esp + ecx + 0x18]
inc edx
movsx esi, word [esp - 0x75b45270]
inc si
mov dword [ecx - 0x75b45281], ecx
dec edx
lea edi, [edi - 0x75b45285]
inc edx
mov esi, dword [edi - 0x75b45281]
inc ecx
movsx ecx, di
dec edx
mov dword [esp - 0x75b45281], ecx
inc ecx
xor esi, ebp
dec esp
lea ecx, [ebx*8 + 0x5396d10a]
inc ebp
movzx esi, bh
inc sp
xadd ecx, esi
sbb esi, 0xb8baeca2
dec ecx
sub ebx, esp
xor esi, 0x649d0103
inc ecx
sar ecx, 0x2e
lea esi, [ebx + esi - 0x72cdde90]
inc edx
setbe byte [esp + ecx - 0x14e55]
dec ecx
shr esp, 0x10
dec esp
xchg dword [esp + ebx - 0x6a4bad75], edi
rol esi, 3
inc si
xchg dword [esp - 0x1d6c6], eax
xor dword [esp + ebx - 0x6a4bad70], 0x5aa0e69c
not esi
mov ebp, 0xba0c6a05
dec esi
inc ecx
movzx eax, si
inc ecx
shr esi, cl
rol esi, 1
inc ecx
idiv cl
mul dword [esp + ebx - 0x6a4bad73]
dec ecx
inc eax
dec esi
mov dword [esp - 0x75a4], ebp
dec ecx
shl eax, cl
jbe 0xc96e04
mov edx, 0xa3bd3d11
lea ecx, [edx + edx*8 + 0x4605f314]
jmp 0xcc5294

Function at 0x152280e
Capabilities:
Authenticate hmac

Disassembly:
inc ecx
mov esi, 0x309ddf38
inc ecx
shl esi, 0x58
dec edx
lea edi, [edi + esi*2 - 0x70000004]
inc ecx
mov ebx, dword [esi + edi - 0x38000000]
jns 0x14f35c4
inc cx
sub esi, 0xcbc18c8d
add ch, al
mov ebp, 0x890084c4
jge 0xcc1cf2
inc ecx
neg esi
inc ecx
movsx ecx, dh
inc ecx
xor ebx, ebp
push ecx
lea ebx, [ebx + ecx*4 + 0x2c077294]
pop ecx
jmp 0xcc1d15
lea edx, [edx + ecx + 0x1cbdebbb]
call fcn.00d24199
fcomp qword [ebp]
sub edi, 4
mov eax, dword [edi]
mov edx, 0x7702fb2d
xor eax, ebx
ror dl, 0xa6
call fcn.00c96308
jmp 0x14fbf44
je 0x1514c19
rol eax, 0xa5
lea ebp, [ebp + eax - 0x7d8986]
pop eax
pop eax
jns fcn.01508028
jmp 0xcac002
Function at 0x15343fe
Capabilities:
Encode data using xor

Disassembly:
sub edx, dword [esp + 4]
ror edx, 0x2a
mov dword [edx + ebp + 2], eax
sbb edx, dword [esp + edx*4 + 4]
sbb byte [esp + edx - 0x777ca33f], dh
mov dword [esp + edx - 0x777ca343], 0x3a12159b
mov edx, dword [edi + edx - 0x777ca347]
mov eax, 0x690cb41e
cbw
setb al
lea edi, [edi + eax - 0x690c0004]
xor edx, ebx
mov ecx, eax
lea edx, [eax + edx + 0x27dc9ab]
call fcn.014f6c91
mov eax, 0xcbb9f30c
and ax, 0x57a3
movsx ecx, ax
lea edi, [ecx + edi - 0x5304]
ror ax, 0x24
cdq
mov edx, dword [edi + ecx - 0x5300]
sbb ecx, ecx
or cl, cl
inc ecx
xor edx, ebx
lea edx, [edx + eax - 0x1912bf88]
btc eax, eax
ror edx, 3
add edx, ecx
cbw
ror al, cl
ror edx, 2
xor ebx, edx
btc cx, ax
adc ax, cx
jae 0x154a9b5
pushfd
mov dword [esp], 0xf5d212e4
call fcn.014e03d6
invalid
adc esi, edx
and ecx, ecx
shl eax, cl
mov edx, dword [ecx + ebp - 0x101]
sal eax, 0xff
btr ecx, ecx
add eax, dword [ebp + eax + 4]
sal ecx, 0x81
sbb ecx, ecx
sal ecx, 0x41
lea ebp, [ebp + ecx + 8]
lea ecx, [ecx*4 - 0x254d09db]
sar ecx, cl
inc cx
mov dword [edx], eax
mov edx, ecx
movzx eax, dl
bt edx, edx
jmp esi