joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140dafeda
Capabilities:
Authenticate hmac

Disassembly:
xor r10d, r11d
sub r10d, 0xf535f194
push rbp
lea rbx, [rdx + rbp*4 - 0x176a89e9]
pop rbx
bswap r10d
lea r10d, [r10 + rdx*2 - 0x60a4a65c]
lea r8, [rdx + rbp*8 + 0x47ab1c31]
jmp 0x140dc5333
mov qword [rsp + rax - 0x5107502a], 0x3813b69e
pop r10
jno fcn.140e0aedf
imul r10w, cx
lea rdx, [rbp*4 - 0x3e8ae45]
mov ecx, dword [rdi + r10 - 0xc1bf]
lea rdi, [rdi + r10 - 0xc1bf]
xor ecx, r11d
movsx r8d, r10w
rol ecx, 2
xor ecx, 0xb8110a08
ror ecx, 1
xor bpl, r8b
bswap r10
push rbx
neg ecx
push rbx
neg word [rsp + rbx - 0x318f20]
xadd byte [rsp + rbx - 0x318f2b], r10b
bswap ecx
sub ebx, 0x11b33a1
jl 0x140de1976
bswap r10d
mov eax, ebp
sub r8d, ebp
ror r10d, 1
bswap r10d
jmp 0x140e0709b
sub byte [rsp + 8], 0xa9
xor ecx, 0x2c036a98
dec r10w
shr byte [rsp + 0xe], 0x25
mov qword [rsp + 8], r11
xor dword [rsp + 8], ecx
btc rbp, 0x1f
mov r11, qword [rsp + 8]
jae 0x140df6a46
sub word [rsp + rbp - 0x67], bp
dec r8d
movzx eax, bp
shl rbp, 0x7e
and byte [rsp + rbp*4 + 6], 0x86
neg r8d
pop r10
ror byte [rsp + rbp*2], 0x82
movsx edx, byte [rsp + rbp*4 + 2]
not r8d
setae dl
and bp, bp
bt bx, bx
mov qword [rsp + r10 - 0x72099713], r11
jb 0x140e01733
sbb rbx, rax
imul ax, cx
xor dword [rsp + rbp*8], r8d
ror bp, 0xc1
add ebp, 0x64b5579f
lea r11, [rcx + rdx*2 - 0x6d41d746]
pop r11
btr ebp, ebp
jae 0x140e0ee8e
lea rcx, [rdx + rdx + 0x591951b6]
lea rdi, [rdi + rdx - 0x652483bf]
mov r10d, dword [rdi + rdx - 0x652483bb]
lea rbp, [rdx + rdx*4 + 0x59b7cd16]
jmp 0x140daf626
movsxd rcx, ecx
adc rsi, rcx
pop rdx
pop rcx
jmp rsi
lea r10d, [r10 + rdx - 0x2e3a4a53]
call fcn.140e19000
mov ebx, 0x8ab46ab5
mov r8d, ebx
movzx ecx, bx
mov r8, qword [rcx + r9 - 0x6ab5]
movzx ax, byte ss:[rcx + r8 - 0x6ab5]
lea r8, [rcx + 0x38b0e0a7]
movsx ebp, r8w
sar r8d, cl
lea r9, [r9 + rcx*2 - 0xd564]
mov word [rcx + r9 - 0x6ab5], ax
lea rdi, [rcx + rdi - 0x6ab9]
push rcx
xadd bpl, r8b
lea r10, [rcx + rcx*8 - 0x1075aa67]
mov ebx, dword [rcx + rdi - 0x6ab5]
movzx edx, word [rsp + rcx*2 - 0xd568]
setns dl
add rbp, rcx
xor ebx, r11d
rol byte [rsp + rcx - 0x6ab4], 0x41
xor ebx, 0x488a7c91
bswap ebx
bts edx, r10d
jae 0x140e11664
push r11
movsx r11d, cl
btr r11d, ebx
sbb r11b, 8
xor dword [rsp + rdx - 0x652483bb], r10d
cdqe
pop r11
dec edx
movsxd r10, r10d
add rsi, r10
movzx cx, byte [rdx + r9 - 0x652483ba]
mov r10b, byte [r9 + rdx - 0x652483b8]
cqo
lea rbp, [rax + rdx - 0x65589169]
lea r9, [r9 + rdx*2 + 2]
sub bpl, 6
sal bp, 0xe
or cl, r10b
not cl
xor r8d, 0x7c2fb19b
mov word [r9 + rbp*4 + 0x47aa0000], cx
add r8d, r8d
lea rcx, [rdx*4 - 0x51cb16ec]
add rdx, rsi
jmp rdx
movsxd r8, r8d
xor ebx, eax
btc bx, cx
add rsi, r8
jmp fcn.140e0aedf
sal byte [rsp + rcx - 0x6ab1], 0xe3
not ebx
lea ebx, [rbx + r10*8 - 0x5b9fd03e]
movsx eax, r8b
dec byte [rsp + rcx - 0x6ab0]
not ebx
mov qword [rsp + r8*2 - 0x2b8], r11
call fcn.140dc6ab6

Function at 0x140daff68
Capabilities:
Authenticate hmac

Disassembly:
shr r8, 0xc5
call fcn.140e15468
Function at 0x140db0612
Capabilities:
Authenticate hmac

Disassembly:
push 0xffffffffae2d913f
not qword [rsp]
cmp ebx, 4
call fcn.140dccb9a
not r10b
adc qword [rsp + rbp - 0x4e3c8eb7], r11
btc eax, eax
jae 0x140ded40f
mov rdx, qword [r9]
mov ecx, 0xbc8c3627
movzx r10d, cl
mov rbp, qword [r10 + r9 - 0x1f]
mov eax, r10d
rol ecx, 0x5b
lea r8, [rax + rcx - 0x4dd0ad0]
add rdx, rbp
mov rax, rdx
mov edx, ecx
neg dx
mov cl, byte [r9 + r10*2 - 0x3e]
sal rax, cl
movsx ecx, r8b
mov ebx, r8d
lea rbx, [r8 + r10*4 - 0x7b46a1f8]
mov qword [r9 + r10*4 - 0x92], rax
lea r9, [r9 + r10*4 - 0x92]
imul ecx, r10d
mov ecx, dword [r10 + rdi - 0x2b]
imul r8d, r10d
movzx ebp, bx
lea rdi, [rdi + r10 - 0x2b]
not bp
xor ecx, r11d
sal r10w, 0x4c
call fcn.140df5fd7
ror eax, 0x58
jae fcn.140e0aedf

Function at 0x140db15d0
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
mov qword [rsp], 0x73819898
sbb rsp, 0x10
call rax
jmp 0x140e09f44
mov ecx, 0xa0bb870a
mov rsp, qword [rbp + riz - 0x10]
movzx r11d, cx
dec rcx
lea rdx, [r11 - 0x4d34580]
mov rbp, qword [rbp + rdx*2 + 0x9a57ce4]
mov r9d, r11d
mov qword [rbp + r11*2 - 0x10e14], rax
jg 0x140dfd55a
mov eax, 0x5392ea34
btc rax, 0x93
mov rdx, qword [r9 + rax - 0x539aea34]
lea rbx, [rax + rax*8 - 0x4b749d61]
movsx ecx, al
lea r10, [rsp + rax - 0x539ae8fc]
mov qword [r10 + rcx - 0x34], rdx
call fcn.140e0b9eb
mov rax, qword [r9]
mov ebx, 0xb1a1f988
mov r10b, byte [r9 + riz + 8]
add r9, 0xa
mov byte es:[rax + riz], r10b
sub rdi, 4
mov eax, dword [rdi + riz]
lea rbp, [rbx + rbx - 0x1a679067]
mov r8d, 0xf1a951bb
xor eax, r11d
dec bpl
dec eax
ror r8d, 0x2c
dec bx
neg eax
jmp 0x140e1b0a3
Function at 0x140db45a5
Capabilities:
Authenticate hmac

Disassembly:
mov r11, qword [rsp + r8*2 - 0x84e4]
xchg r10d, ecx
bswap rdx
movsxd rax, eax
sub bl, bpl
adc rsi, rax
mov qword [rsp + r8 - 0x426e], rbp
mov rcx, qword [rdi + r8 - 0x4282]
xor rcx, r11
mov qword [rsp + r8 - 0x4276], 0xffffffffd7a11e02
and byte [rsp + r8 - 0x4270], r8b
bswap r10
bswap rcx
bts bp, bx
ror r8d, 0x81
sub r10b, r8b
lea rcx, [rcx + r8*8 - 0x2e48b138]
neg rcx
shl r10w, 0x24
lea rax, [r10*8 - 0xf6ad8fb]
bswap rcx
not r10d
neg rcx
xor r11, rcx
ror r10b, 0xa1
and r10w, word [rsp + r8 - 0x2130]
mov qword [r9 + r8 - 0x2143], rcx
movsx ecx, ax
shr dword [rsp + r8 - 0x2131], cl
push rbx
movzx eax, byte [r8 + rdi - 0x2148]
lea rdi, [rdi + r8*4 - 0x84f9]
sar r8b, 0xa5
setne byte [rsp + r8*2 - 0x41f8]
pop rbx
xor al, r11b
add al, 0x20
push rdx
ror al, 1
sub al, 0x94
not al
xor r11b, al
shr bl, cl
neg qword [rsp + r8 - 0x20f7]
add dword [rsp + r8 - 0x20ee], edx
lea rax, [rsp + rax + 0x18]
jle 0x140df2a81
mov byte [rsp + r8 - 0x20eb], dl
movzx cx, byte [rax + r8*2 - 0x4202]
jle 0x140df82dd
btc r10d, 0xa0
mov word [r8 + r9 - 0x210b], cx
imul ebx, r8d
adc qword [rsp + r8*8 - 0x10805], rbx
lea r9, [r9 + r8 - 0x210b]
movsx eax, word [rsp + r8 - 0x20ff]
inc qword [rsp + r8 - 0x20f1]
pop rbp
pop rax
pop rbx
jnp fcn.140e0aedf
sal bl, cl
mov word [r9 + r10 - 0xa3e], bx
movzx eax, r10b
movzx ebx, al
call fcn.140dc41be
rol edx, 3
bswap edx
movzx r8d, cx
bswap eax
ror edx, 1
movsx ebp, bx
inc cl
lea edx, [rdx + rcx - 0x2ec9153]
cdqe
not dword [rsp + rcx - 0x539d6801]
cdqe
xor edx, 0x883cdc3a
rol byte [rsp + rcx - 0x539d6800], 6
bswap rcx
rol edx, 2
and rcx, qword [rsp + rbx]
xor edx, 0x23b19121
mov qword [rsp + rcx], r11
imul ebp, r8d
xor dword [rsp + rcx*2], edx
shr rbx, 0x25
mov r11d, eax
pop r11
seta bl
movsxd rdx, edx
sete r10b
lea rcx, [rbx + rax*2 + 0x732705a0]
adc rsi, rdx
push r8
xor rbp, qword [rsp + rbx]
push r8
pop r10
pop r8
jg fcn.140e0aedf
sal r8d, 0xd0
sar ebx, 0x47
or r10d, dword [rdi + rdx*2]
xor r10d, r11d
pop rbx
neg ebp
mul r8w
bswap r10d
dec r10d
not ebx
xor r10d, 0xa51e123d
not r10d
movsx ecx, bp
mov qword [rsp + rdx], r11
btr edx, edx
ror cl, cl
xor dword [rsp + rdx*8], r10d
neg r8d
and ecx, edx
je 0x140dd0441
bswap ebx
not cl
adc rsi, rax
sub ebp, r10d
movzx bx, byte [r10 + r9 - 0xa40]
mov cl, byte [r10 + r9 - 0xa3e]
js 0x140de8205
bswap eax
pop rbp
imul rdx, rbp
dec eax
xor eax, 0x983a1c27
inc r8d
xchg dx, r10w
inc r10d
lea eax, [rax + r10 + 0x512df6f3]
and r8, rbp
push r11
add bl, 0xb4
mov r11d, 0x24b506a8
lea rcx, [r11 + r11*2 - 0x15ea9e54]
xor dword [rsp + r10*4 - 0x56bc], eax
push rcx
mov r11, qword [rsp + r10*2 - 0x2b56]
movsxd rax, eax
xor byte [rsp + r10*8 - 0xad72], r10b
adc rsi, rax
mov qword [rsp + r10 - 0x15af], rsi
ret 8
mul qword [rsp + rax*2 - 0x433bbe51]
mov ecx, r10d
adc r8b, 0xb3
lea rdx, [r10 + rdx - 0x6e677ffe]
bt cx, dx
xor r8b, 0xb8
or rax, rax
dec r8b
xor ax, 0xb705
imul qword [rsp + rdx - 0x76ba8eb5]
ror r8b, 1
xor r11b, r8b
xadd ax, cx
sub byte [rsp + 0xd], ah
sbb rcx, r10
lea r8, [rsp + r8 + 0x10]
sal cl, 7
not ecx
xor ax, 0x13b9
mov dword [r8 + rcx*2 - 0x73fe], ebx
cdqe
mov qword [rsp + rax*4 - 0xaa74], rsi
ret 8
Function at 0x140db47ed
Capabilities:
Authenticate hmac

Disassembly:
mov qword [rsp], 0xffffffffd1050d27
add word [rsp + 2], 0x45a9
dec ebx
lea rsp, [rsp + 8]
jne 0x140db4eab

Function at 0x140db4f8e
Capabilities:
Authenticate hmac
Parse pe header

Disassembly:
mov qword [rsp + rbp - 0x422aee50], rbp
lea rdi, [rdi + rbp - 0x422aee60]
add bp, 0x328d
setle r8b
xor edx, r11d
shr rax, cl
shr dword [rsp + rcx + 0x4762bd1f], 0x5b
lea edx, [rdx + r8 + 0x28517647]
call fcn.140e12d1f

Function at 0x140db5180
Capabilities:
Authenticate hmac

Disassembly:
mov ebp, 0x93338e0c
lea rax, [rbp + rbp*8 - 0x52c5cd6e]
mov ebp, dword [rdi + riz]
lea r10, [rax + rax*8 + 0x1ba33b99]
movsx r8d, r10b
xor ebp, r11d
movsx ecx, r8w
add ebp, 0x598b53b9
and r8d, ecx
xor ebp, 0x3f3b8ea7
mov qword [rsp], 0x530fb7a0
movzx edx, cl
lea rbx, [r8*2 - 0x2261f573]
neg ebp
ror ebp, 1
div bx
rol byte [rsp + rdx*8 - 0x3e7], cl
push rdx
mov qword [rsp + rdx*2 - 0xf2], r11
mov dword [rsp + rdx - 0x7c], 0xa8141d98
or ecx, 0xb9995caa
xor dword [rsp + rdx*2 - 0xf2], ebp
sal r8w, 0x41
call fcn.140dde11c

Function at 0x140db7d52
Capabilities:
Authenticate hmac

Disassembly:
push 0xffffffffe8106e9f
mov ecx, 0x22b33028
mov rcx, rax
push 0xfffffffff4b8ce95
jmp 0x140dbe043
push 0x61857196
lea rsp, [rsp + 0x20]
jmp 0x140e0f1d7

Function at 0x140db92e6
Capabilities:
Authenticate hmac

Disassembly:
neg rbp
mov qword [rsp + rdx - 0x7209b819], rdx
neg word [rsp + rdx - 0x7209b810]
jge 0x140dba961
mov rax, qword [r9]
mov ebp, 0xc4ad97a3
movsx ebx, bpl
imul bx, bx
mov cl, byte [r9 + riz + 8]
adc r9, 2
mov r8d, 0x772a8d35
shr rax, cl
mov qword [r9 + r8 - 0x772a8d35], rax
bt rbx, r8
lea r8, [rbx + rbx*4 + 0x2b24d3b9]
bswap r8
sbb rdi, 4
jmp 0x140e1cc11

Function at 0x140db9710
Capabilities:
Authenticate hmac

Disassembly:
add rsi, rbp
and word [rsp + rcx*2 - 0x3c5c8b07], 0xc337
cqo
inc word [rsp + rcx*2 - 0x3c5c8b02]
pop rcx
pop rcx
pop r8
pop rcx
jae fcn.140e0aedf
xor dl, dh
ror ebp, 1
movzx r8d, dx
sub r8d, r8d
movsx ecx, dx
not ebp
sbb r8d, edx
bswap ebp
movzx r10d, dx
push r11
xor dword [rsp + rdx - 0x102166ea], ebp
rol dl, 1
pop r11
seto dl
push r8
movsxd rbp, ebp
add rsi, rbp
shr word [rsp + rdx*2 - 0x2042cbff], cl
push r8
lea rdi, [rdi + rdx*2 - 0x2042cc04]
or r8w, 0x5b1e
btc r10, rdx
mov r10d, dword [rdi + rdx*4 - 0x40859800]
rol r8w, cl
movzx eax, cx
call fcn.140db82fb
sub rdi, 4
mov r10d, 0x1010798
mov edx, dword [r10 + rdi - 0x1010798]
xor edx, r11d
xor edx, 0x6718b889
movsx ebx, r10w
rol edx, 2
sal r10w, 0xeb
neg edx
imul bx, bx
movsx eax, r10b
movsx ebp, bx
lea edx, [r10 + rdx - 0x7eac1d2d]
movsx r8d, bl
push r11
call fcn.140e173b3
Function at 0x140dbab8c
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
xor r8d, r11d
mov qword [rsp], 0x2eb6d78e
mov ebp, 0xd5236125
lea r10, [rbp + rbp + 0x15094d8c]
ror r8d, 3
push r10
lea rdx, [r10*2 - 0x48d6b9d3]
inc r8d
lea rbx, [rdx + rbp*2 - 0x4a6175f8]
not bl
not r8d
xor r8d, 0x89b00300
xchg qword [rsp + 1], rdx
mov qword [rsp + 8], r11
xor word [rsp + 4], bp
xor dword [rsp + 8], r8d
mov r11, qword [rsp + 8]
sub byte [rsp + 1], 0x96
movsxd r8, r8d
jae 0x140dbb68e
inc bl
xor bpl, r11b
inc bpl
movzx edx, r8b
or r10w, r8w
xor bpl, 0x8a
lea rax, [rdx + r8*2 - 0x666b4ef5]
ror bl, 0x21
cwd
rol bpl, 1
shl r10, 0x3f
adc bpl, dl
or r10w, 0x1a3d
shr r8b, 0x45
xor r11b, bpl
bswap ecx
shr r10, cl
adc rbp, rsp
lea r10, [rbx*8 - 0x25febee7]
movzx dx, byte [rbx + rbp - 0x2dc2]
movsx ebp, ax
lea r9, [r9 + rcx - 0x7c9f]
sub r10b, r8b
dec cx
jg 0x140de7c7f
adc rsi, r8
or r10d, edx
sbb rdi, 2
mov qword [rsp + 8], r10
movsx eax, bp
movzx r8d, word [rdi + rax - 0x6125]
and r10w, bp
xor r8w, r11w
pop rax
dec byte [rsp + 3]
movsx ecx, ax
not r8w
mov word [rbx + r9 - 0x2dc2], dx
jae fcn.140e0aedf

Function at 0x140dbb504
Capabilities:
Authenticate hmac

Disassembly:
btr bp, cx
call fcn.140de8299
movzx bx, byte [r9]
mov r8d, 0xb91dac0f
mov al, byte [r9 + riz + 2]
lea rbp, [r8*8 + 0x6383c139]
mov edx, ebp
lea r9, [rdx + r9 - 0x2c7121af]
sub r8, rbp
jbe 0x140e0d807

Function at 0x140dbf5ee
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
shr rbx, 0xfb
xor dword [rsp + rbx + 8], r10d
mov qword [rsp + rbx], 0x1d9f3339
mov r11, qword [rsp + rbx*2 + 8]
rol qword [rsp + rbx], 0xa1
add rbx, 0xfffffffffd163c88
movsxd r10, r10d
imul rdx, qword [rsp + rbx + 0x2e9c378]
mul rax
add rsi, r10
mov rdx, qword [r9 + rbx*8 + 0x174e1bc0]
movsx r10d, byte [rsp + rbx*4 + 0xba70de0]
movzx eax, byte [rbx + rdi + 0x2e9c373]
jmp 0x140e0aafc
lea r8, [r8 + rcx - 0x1eeb5561]
lea rdi, [rbx + rdi + 0x2e9c373]
mov qword [rsp + rbx + 0x2e9c380], r10
xor al, r11b
inc al
not al
dec ebp
or cl, 0
shr word [rsp + rbx + 0x2e9c383], 0xee
sbb al, 0xae
neg word [rsp + rbx + 0x2e9c37a]
or byte [rsp + rbx*2 + 0x5d386f9], bpl
mov dword [rsp + rbx + 0x2e9c381], ebp
not al
pop r8
shr bp, 2
xor r11b, al
call fcn.140e1e327
Function at 0x140dc15be
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
lea rdi, [rdi + rax*4 - 0x1897521c]
push r10
not word [rsp + rax - 0x625d480]
cdqe
mov r10, qword [rdi + rax*2 - 0xc4ba90a]
jmp 0x140dcbc4f
call fcn.140dff9e5
mov ebp, 0x51309b0b
lea rdi, [rdi + rbp - 0x51309b0f]
movzx ebx, bp
shl rbx, 0x54
mov r10d, dword [rdi + rbp - 0x51309b0b]
sal rbx, 0x2e
movsx r8d, bp
xor r10d, r11d
mov edx, 0x92b5713b
ror bl, 7
lea r10d, [r10 + rbx*2 + 0x598b53b9]
and bx, bp
jae 0x140e119f1
xor r10, r11
lea r10, [r10 + rax*8 - 0x6a78cda8]
mul byte [rsp + rax - 0x625d484]
movsx r8d, al
neg r10
movzx ebp, r8b
ror r10, 5
movsx ebx, r8b
or r8b, byte [rsp + rax*2 - 0xc4adc48]
add byte [rsp + rax*8 - 0x312b7120], 0x35
not r10
lea rdx, [rax - 0x22635d74]
movsx ecx, r8b
or byte [rsp + rax - 0x6256e22], 0xb2
rol r10, 5
bswap r10
sub cl, 0xae
ror r8d, 0x47
imul dx
xor r11, r10
and qword [rsp + rax*2 - 0xc4bf180], 0x2c990f07
xor word [rsp + rax*8 - 0x312fc5fa], bp
or ax, dx
lea r9, [r9 + rax*2 - 0xc4bffe2]
shr qword [rsp + rax - 0x625ffed], cl
xchg bh, bl
mov qword [r9 + rax*2 - 0xc4bffda], r10
push r8
shl ecx, 0x4f
lea rdi, [rax + rdi - 0x625fff1]
xchg cx, ax
mov r8d, dword [rdi + rax - 0x6258000]
xor r8d, r11d
ror ecx, cl
not r8d
imul rbp, rax
dec bpl
pop rax
dec r8d
lea rbp, [rax + rdx*4 + 0x75817d00]
sal dx, 0x4f
div bpl
neg r8d
mul bx
pop rax
sal rdx, 0x49
not r8d
add ecx, ebp
sar cl, 0x42
cbw
push r11
mul cl
xor dword [rsp + rax*2], r8d
sar eax, 0x8f
xor ebx, ecx
pop r11
movsxd r8, r8d
sar al, cl
mov r10d, eax
adc rsi, r8
rol cl, cl
jae fcn.140e0aedf
mov rax, qword [rdi + rbx*2 - 0x7164b120]
pop rbp
lea rdi, [rdi + rbx*2 - 0x7164b120]
movsx r10d, cx
xadd byte [rsp + rbx*2 - 0x7164b10b], r10b
xadd r8, r10
xor rax, r11
mov dword [rsp + rbx - 0x38b2587d], 0xba97ada1
add r8d, 0x168f3fbb
shr qword [rsp + rbx*2 - 0x7164b107], 0x2d
rol rax, 5
shl rcx, cl
not rax
jb 0x140deeb82
push rbx
bswap rax
ror rbp, 0xb8
xor rax, 0x6d96f13d
ror rax, 4
neg rax
and bp, cx
mov word [rsp + rbx - 0x38b2587c], r10w
xor rax, 0xffffffff8da44aba
sub bl, 0xc
sub cx, bx
neg rax
xor r11, rax
xor bpl, dl
xadd dx, bx
mov qword [r9 + rbx*2 - 0x71660002], rax
neg byte [rsp + rbx*2 - 0x7165ffd7]
shl dword [rsp + rbx*2 - 0x7165ffde], cl
sar edx, cl
lea r9, [r9 + rbx - 0x38b30003]
call fcn.140de3d4c
add bx, bp
xor r10d, 0x3f3b8ea7
ror rbx, 0xfa
dec bl
neg r10d
ror r10d, 1
dec r8b
rol bx, 0x65
push r11
imul rdx, rdx
xor dword [rsp + rbx - 0x2657f8], r10d
bts r8d, 0xa8
xadd rdx, r8
neg dl
pop r11
movsxd r10, r10d
add rsi, r10
call fcn.140dbc87e
sub rdi, 4
mov ecx, 0xe99a4f8b
lea rbx, [rcx + rcx*4 + 0x6994698a]
mov ebp, dword [rdi + riz]
sar rbx, 0x42
xor ebp, r11d
movsx eax, bx
sar ebx, cl
lea rbx, [rbx + rax*8 - 0x375771f8]
ror ebp, 3
lea r10, [rax + rcx*2 - 0xbd50778]
bswap ebp
bt cx, r10w
sar rcx, cl
jnp 0x140df2d36
mov eax, 0x625d485
mov r10d, eax
jmp 0x140db3f66
Function at 0x140dc195c
Capabilities:
Authenticate hmac

Disassembly:
xor dword [rsp + rbp*2 - 0x1b2], ebx
neg byte [rsp + rbp*4 - 0x374]
mov r11, qword [rsp + rbp - 0xd5]
movsxd rbx, ebx
mov dword [rsp + rbp*2 - 0x1b9], 0xf3089331
add rsi, rbx
mov qword [rsp + rbp - 0xd5], rbp
xchg dword [rsp + rbp - 0xd2], ebp
mov qword [rsp + rbp*2], rsi
ret 8
mov qword [rsp + r10 - 0x5ab7c6aa], 0xc0eae14
neg edx
ror edx, 1
xor r10b, bl
mov qword [rsp + r10 - 0x5ab7c66a], r11
call fcn.140db15e7
mov ecx, 0x6192d1a3
mov rdx, qword [rcx + r9 - 0x6192d1a3]
lea r10, [rcx*4 - 0x3260074d]
mov cl, byte [r9 + rcx - 0x6192d19b]
add r9, 2
bt r10d, 0x1c
lea r8, [r10 + r10*2 + 0x6c97f181]
shr rdx, cl
call fcn.140dd2b5d
sub rdi, 4
mov ebp, dword [rdi]
mov ebx, 0x6a2922bc
movsx edx, bl
lea rcx, [rbx*4 - 0x7fdcee47]
xor ebp, r11d
jmp 0x140e02727
sar ebp, 0xf7
xor ebx, 0x3f3b8ea7
neg ebx
ror ebx, 1
mov qword [rsp + rbp - 0xdd], rdx
lea rcx, [rdx + rdx*4 - 0x276f5742]
sal dword [rsp + rbp - 0xd9], 0x78
mov qword [rsp + rbp*2 - 0x1b2], r11
jns 0x140daf139
jmp fcn.140e1bfb0
lea ebp, [rbp + rbx*2 - 0x4027b2d9]
neg ebp
inc ebp
lea r10, [rdx*8 + 0x5895f3a7]
sub r10b, r10b
rol ebp, 2
movzx r8d, bx
neg rdx
bswap ebp
lea ebp, [rbx + rbp - 0x2528ef9c]
jns 0x140dd79f1
lea rdx, [rbx + r8*8 - 0x43c64e67]
sbb edx, r10d
push r11
lea rax, [r10 + rcx*4 - 0x60d5735e]
movzx r11d, cx
btr r11, r8
xor dword [rsp + rbx - 0x6a2922bd], ebp
bt ax, bx
pop r11
sar r10d, cl
movsxd rbp, ebp
add rsi, rbp
call fcn.140e14497
mov edx, 0xf1a9ba8f
mov rbp, qword [r9 + riz]
sub dl, dl
mov eax, edx
push rdx
mov bx, word [rbp + riz]
lea r8, [rdx + rdx - 0x4c6e93e7]
movsx ebp, byte [rsp + 2]
mov ecx, edx
adc r9, 6
xor ecx, 0x6e1c4f9b
mov word [r9 + riz], bx
sbb rdi, 4
dec word [rsp]
sar qword [rsp], 0xbc
cbw
mov r8d, dword [rdi + riz]
neg ax
mov qword [rsp + rbp - 0x175ef41b], rsi
ret
inc ebx
jne 0x140deb488
pop r11
neg r10w
movsxd rcx, ecx
shr bpl, 0x41
ja 0x140e09541
and r10w, bx
adc rsi, rcx
push rbp
jmp 0x140e004ac
Function at 0x140dc65a7
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
add rsi, rbx
xadd cl, dl
cdq
mov r10, qword [r9 + r10*2 - 0xa0c8]
movzx ebx, byte [rdi + r8*2 - 0x3c5c0015]
xor bl, r11b
dec ax
add ax, 0xe7be
sal rcx, cl
rol bl, 1
dec dx
setns r8b
bts r8w, dx
dec bl
dec cx
btc rcx, rcx
push rbp
rol bl, 1
dec bl
xor r8w, word [rsp + r8 - 0x1e2e3ffa]
xor r11b, bl
lea rbx, [rsp + rbx + 8]
mul dword [rsp + r8 - 0x1e2e3fff]
mov qword [rbx + rax*2 - 0x7129b78], r10
dec word [rsp + rax - 0x3894db9]
xor ebp, r8d
sal rax, cl
movzx ecx, byte [rbp + rdi - 0x1e2fcc1a]
add dl, r8b
inc dl
imul ebp, dword [rsp + r8*4 - 0x78b90000]
lea rdi, [rdi + r8 - 0x1e2e4006]
xor cl, r11b
push rbp
add eax, ebp
add qword [rsp + rbp - 0x376ae18e], 0x5bb17713
xor cl, 0x9e
neg cl
inc cl
neg cl
rol ax, 0x4f
xor r11b, cl
movsx ebx, byte [rsp + r8 - 0x1e2e3ff6]
lea rcx, [rsp + rcx + 0x10]
div eax
dec qword [rsp + rax - 0x17a]
call fcn.140dea3a1
sub rdi, 4
mov eax, 0xa28c0e25
lea rbx, [rax*4 - 0xbf77a66]
mov edx, dword [rdi + riz]
lea rcx, [rbx*8 + 0x43248910]
mov ebp, 0x521573a9
shr cl, 0xa6
xor edx, r11d
inc ecx
mov r8d, 0x5dabd513
not edx
bswap edx
neg edx
dec edx
shr bl, 0xc4
cwde
sub rbx, r8
rol edx, 1
or r8, rcx
bt rax, 0x3b
mov r10d, ebp
push r11
xor dword [rsp + rax - 0xe25], edx
pop r11
push r8
movsxd rdx, edx
add rsi, rdx
shr bx, cl
mov r9, qword [r9 + rax - 0xe25]
movzx edx, r10b
pop rbp
jne fcn.140e0aedf
sub rdi, 4
mov r8d, 0x7494e89b
movzx eax, bp
xor ecx, r11d
rol r10b, 0x84
bswap ecx
mul bl
div ebx
sal rbx, 0x7b
neg ecx
sub bl, r10b
add rbx, r10
mul dl
sbb ecx, ebx
sub ebp, ebx
call fcn.140df18fe
btr bp, bp
lea rcx, [rbp*2 - 0x73d044e2]
xor al, r11b
mov qword [rsp], rcx
movzx edx, cl
rol al, 1
mov qword [rsp + rdx - 0x5c], rdx
or cl, ch
je 0x140dc1322
dec al
rol al, 1
xchg qword [rsp + rdx - 0x5c], rdx
bt rbp, rcx
dec al
xor r11b, al
add edx, dword [rsp + rdx - 0x59]
movsx r8d, dl
lea rax, [rsp + rax + 0x10]
push r8
ror rdx, cl
mov qword [rax + r8*4 - 0x190], rbx
call fcn.140df6cbc
sar r8w, cl
shr edx, 0x3e
xor dword [rsp + r10*4 - 0x63050], ebx
xchg r10, rbp
imul eax, ebp
pop r11
movsxd rbx, ebx
jno 0x140dd1317
neg rdx
jl 0x140db8192
Function at 0x140dc8b08
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
push r11
lea r11, [rcx + rax - 0x18dc41e7]
sal r11d, 0x3e
xor dword [rsp + rax - 0x39], edx
btr ebx, ebx
btr rbp, 0x8c
movsx r10d, r11w
pop r11
ror r10b, 0x25
rol cl, 0xc7
movsxd rdx, edx
cmovb cx, bp
cwde
adc al, ch
adc rsi, rdx
mov r8, qword [rax + r9 - 0x39]
sal bx, 0x84
mov ax, word [rax + rdi - 0x3f]
xor ax, r11w
bt rbp, 0x87
and rbp, r10
sal ecx, 0xed
ror ax, 1
lea rbp, [rbp + rbp*2 - 0x447f30c7]
dec ax
bt ebx, 0x8d
dec cx
jae 0x140e0dfc1
jae 0x140db598a
pop r10
inc eax
sar rbp, 0x3a
not eax
lea rbx, [r8*8 - 0x405a3255]
xchg byte [rsp + r8*2 + 4], r8b
sal bx, 0x4e
neg eax
mov qword [rsp + r8], r11
xor dword [rsp + r8*2], eax
mov edx, 0x541c0d03
shl r8d, 0x70
mov r10d, ebx
pop r11
inc r8d
btc rbp, r8
xor dx, bx
movsxd rax, eax
adc rsi, rax
call fcn.140db026b
mov r8d, 0xb29e1f13
mov rdx, qword [r9 + riz]
movsx eax, r8w
mov r10d, r8d
lea rbp, [rax + rax - 0x357e107a]
mov rcx, qword [r9 + rax*2 - 0x3e1e]
btr ax, r10w
lea rbx, [rax + r8*2 + 0x4215fd21]
adc rdx, rcx
rol r10w, 8
sbb r8w, r10w
mov rcx, rdx
jne 0x140e1afc5
mov eax, 0x1530142d
movsx r8d, ax
lea rdi, [rdi + rax - 0x15301431]
sal r8b, 0x87
cdqe
mov ebx, dword [rdi + r8*2 - 0x2900]
movzx ebp, ax
movzx edx, al
call fcn.140de28cb
mov edx, 0xbcab6a39
movsx eax, dl
mov edx, dword [rdi + rax*2 - 0x76]
movzx ebp, ax
movzx ecx, bp
movsx ebx, bp
xor edx, r11d
xor ebx, ebp
shr rbp, cl
ror edx, 1
bswap edx
xor edx, 0xcdbf4a1c
neg edx
xadd ebp, ecx
jne 0x140dba44b
shl r10b, 0x42
lea rdx, [r8*8 - 0x137dbad1]
mov bx, word [rax + rcx - 0x1f13]
mov word [r9 + rbp*2 + 0x6afba4b6], bx
inc eax
idiv bpl
lea r9, [r9 + rax - 0x3c94]
mov ecx, dword [rax + rdi - 0x3ca6]
mul r8w
dec edx
lea rbx, [rdx*2 - 0x59c6b7fd]
lea rdi, [rax + rdi - 0x83ca]
xor ecx, r11d
dec r8
xchg r10d, edx
lea ecx, [rcx + rax*4 - 0x5c8b6452]
jno 0x140df91ca
mov ecx, 0xf4b8ceb0
mov eax, ecx
movzx ebp, ax
lea rdi, [rbp + rdi - 0xceb4]
sal ecx, cl
movsx r10d, cx
mov ecx, dword [rdi + rbp*4 - 0x33ac0]
xor ecx, r11d
Function at 0x140dcea6a
Capabilities:
Authenticate hmac

Disassembly:
jmp 0x140de9b1d
push 0x4b30ee88
lea rsp, [rsp + 0x10]
sbb rsp, rcx
jmp 0x140dba68f

Function at 0x140dcf7e6
Capabilities:
Authenticate hmac
Encode data using base64

Disassembly:
movsxd r10, r10d
add rsi, r10
mov qword [rsp + rbp - 0x7a8e1f0f], 0x7021ca33
xor edx, eax
shr byte [rsp + rdx - 0x4d60c186], 0x41
pop rbx
jbe fcn.140e0aedf
mov r10d, dword [r9]
mov ebx, 0x42386383
movzx ebp, byte [rdi + rbx - 0x42386384]
lea rdx, [rbx + rbx*2 - 0x4c7c0b4e]
bswap rdx
xor bpl, r11b
inc bpl
lea rax, [rbx + rdx*2 + 0x22af5104]
movzx r8d, ax
ror bpl, 1
shr rdx, 0x8c
adc bpl, 0xb4
xor bpl, 0xb8
dec bpl
xchg edx, ebx
ror bpl, 1
sar r8, 0x1b
js 0x140e122a8
shr rdx, 0x23
xor r11b, bpl
push rbx
jmp 0x140dea4b1
lea rbp, [rsp + rbp + 8]
xchg bh, bl
mul word [rsp + rdx + 4]
dec dword [rsp + rdx + 2]
mov dword [rbp + rdx*2], r10d
mov rbp, qword [r9 + rdx + 4]
js 0x140e18920
xor ax, word [r9 + rdx*4 + 0xc]
lea r9, [r9 + rdx*2 + 0xe]
shr rdx, 0x54
mov word [rbp + rdx*2], ax
xor edx, dword [rdx + rdi - 5]
or r8b, bl
lea rdi, [rdi + r8*2 - 5]
mov r10d, dword [rsp + r8 + 1]
xor edx, r11d
mov ecx, r8d
jmp 0x140e03947
lea r10d, [r10 + rcx + 0x3aba238]
cmovs rdx, r8
sar rax, 0xa5
bswap r10d
ror al, 0x87
xadd byte [rsp + rbp + 0x44d71861], cl
xchg qword [rsp + rcx], rbp
neg r10d
cdq
sub qword [rsp + rdx*2], 0xfffffffffcb6e3ac
mov qword [rsp + rdx], r11
lea r11, [rdx + rdx*2 + 0x6110c130]
movsx ebx, dl
xor dword [rsp + rcx*2], r10d
pop r11
bts r8d, ecx
or r8d, ebx
movsxd r10, r10d
shr dx, 0xa9
sar bl, 0x41
imul rbx, rbx
adc rsi, r10
add rdx, rsi
jmp rdx

Function at 0x140dcffe6
Capabilities:
Authenticate hmac

Disassembly:
rol cl, 1
xor r11b, cl
inc byte [rsp + rax*2 - 0x51e6]
mov qword [rsp + rax - 0x28f8], rax
lea rcx, [rsp + rcx + 0x20]
xchg dword [rsp + rax*2 - 0x51ed], r8d
jne 0x140e0cf21
xor eax, r11d
sar r10d, 0xb4
ror eax, 1
xchg r10w, r8w
movzx ebx, bpl
push rbp
bswap eax
call fcn.140dc8b08
sal rdx, 0x31
mov word [rcx + rax - 0x2900], r10w
mov qword [rsp + rax*2 - 0x5200], rsi
ret 0x18