joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400768b0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rcx
mov qword [rsp + 8], rcx
xchg rbx, rcx
mov qword [rsp + 0x10], rbp
xchg r11, rsi
mov qword [rsp + 0x18], r11
xchg rsi, r11
nop
sub rsp, 8
mov qword [rsp], rdi
push r14
nop
mov qword [rsp - 8], r15
sub rsp, 8
sub rsp, 0x20
movzx eax, byte [rdx + 1]
xchg rdi, rdi
xchg rsi, r8
mov r15, rsi
xchg rsi, r8
movzx ebx, byte [rdx]
mov r15, r15
movzx edi, byte [rdx + 4]
mov r8d, dword [rcx + 4]
shl ebx, 5
shl ebx, 2
shl ebx, 1
dec r8d
or ebx, eax
xchg rdi, rdi
shl edi, 6
shl edi, 1
shl edi, 1
movzx eax, byte [rdx + 2]
xchg rdi, rdi
shl ebx, 4
shl ebx, 3
shl ebx, 1
or ebx, eax
mov dword [rsp - 0xc], esp
movzx eax, byte [rdx + 3]
shl ebx, 3
shl ebx, 5
or ebx, eax
mov dword [rsp - 0x14], 0x2a11fefe
movzx eax, byte [rdx + 5]
or edi, eax
movzx eax, byte [rdx + 6]
shl edi, 4
shl edi, 1
shl edi, 2
shl edi, 1
or edi, eax
movzx eax, byte [rdx + 7]
shl edi, 7
shl edi, 1
or edi, eax
test r8d, r8d
mov dword [rsp - 0x40], 0x7509576a
jle 0x1400769fa
xchg rdx, rdi
mov rdi, qword [rcx + 8]
xchg rdi, rdx
lea r14d, [r8 - 1]
movsxd rax, r8d
mov dword [rsp - 0x14], 0x42430a
shr r14d, 1
inc r14d
lea rcx, [rax + rax*2]
xchg r11, r11
lea eax, [r8 - 1]
lea rsi, [rdx + rcx*4]
movsxd rcx, eax
lea rax, [rcx + rcx*2]
mov dword [rsp - 0x24], edx
lea rbp, [rdx + rax*4]
xchg rdx, r13
mov r13, rsi
xchg r13, rdx
mov ecx, edi
call fcn.140077120
mov rbp, rbp
xor ebx, eax
mov rdx, rbp
mov ecx, ebx
call fcn.140077120
xchg r15, r15
xor edi, eax
add rsi, 0xffffffffffffffe8
nop
sub rbp, 0x26d5f0ca
add rbp, 0x26d5f0b2
sub r14, 1
mov dword [rsp - 0x44], 0x558c11cb
jne 0x1400769b1
lea rax, [r15 + 7]
mov ecx, 0x6db770
add ecx, 0x775f8fdb
xor ecx, 0x187d31d6
sub ecx, 0x6fb07699
mov byte [rax - 4], dil
mov byte [rax], bl
mov r14, r14
dec rax
shr ebx, 6
shr ebx, 1
shr ebx, 1
shr edi, 3
shr edi, 3
shr edi, 1
shr edi, 1
sub rcx, 1
jne 0x140076a15
xchg r8, r8
xchg rcx, rbx
mov rcx, qword [rsp + 0x40]
xchg rbx, rcx
xchg rbp, r8
mov r8, qword [rsp + 0x48]
xchg rbp, r8
xchg rsi, r14
mov r14, qword [rsp + 0x50]
xchg r14, rsi
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
nop
add rsp, 8
mov r15, qword [rsp - 8]
nop
add rsp, 8
mov r14, qword [rsp - 8]
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x140076a8c
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
xchg r14, rax
mov r14, rsp
xchg r14, rax
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov dword [rsp - 0x34], 0x2d29c0bb
xchg rdi, r9
mov qword [rax + 0x20], r9
xchg r9, rdi
push r14
mov r9, r9
add rsp, 0xffffffffffffffe0
movzx eax, byte [rdx + 1]
xchg r14, r8
mov r8, r14
xchg r8, r14
movzx ebx, byte [rdx]
mov rcx, rcx
movzx edi, byte [rdx + 4]
shl ebx, 8
or ebx, eax
xchg rdi, rdi
shl edi, 7
shl edi, 1
movzx eax, byte [rdx + 2]
mov r10, r10
shl ebx, 6
shl ebx, 1
shl ebx, 1
or ebx, eax
movzx eax, byte [rdx + 3]
mov rcx, rcx
shl ebx, 8
or ebx, eax
movzx eax, byte [rdx + 5]
mov dword [rsp - 0x30], ebp
or edi, eax
movzx eax, byte [rdx + 6]
shl edi, 8
xchg r9, r9
or edi, eax
movzx eax, byte [rdx + 7]
shl edi, 5
shl edi, 2
shl edi, 1
or edi, eax
mov dword [rsp - 0x44], 0x1d7749ac
mov eax, dword [rcx + 4]
test eax, eax
jle 0x140076b7c
mov rsi, qword [rcx + 8]
mov dword [rsp - 0x30], 0xd190ba9
lea ebp, [rax - 1]
shr ebp, 1
inc ebp
xchg rsi, r11
mov rdx, r11
xchg rsi, r11
mov ecx, edi
mov rbx, rbx
call fcn.140077120
xor ebx, eax
lea rdx, [rsi + 0xc]
mov dword [rsp - 0x3c], ebp
mov ecx, ebx
call fcn.140077120
xor edi, eax
add rsi, 0x18
mov dword [rsp - 0x38], ebp
sub rbp, 1
jne 0x140076b44
lea rax, [r14 + 7]
mov ecx, 0x286de53c
sub ecx, 0xbff7e8e
sub ecx, 0x774309e
xor ecx, 0x14fa3614
mov byte [rax - 4], dil
mov byte [rax], bl
mov r10, r10
dec rax
shr ebx, 6
shr ebx, 1
shr ebx, 1
shr edi, 1
shr edi, 3
shr edi, 1
shr edi, 1
shr edi, 1
shr edi, 1
sub rcx, 1
jne 0x140076b97
xchg r13, r13
xchg r13, rbx
mov r13, qword [rsp + 0x30]
xchg r13, rbx
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
xchg r12, rdi
mov r12, qword [rsp + 0x48]
xchg rdi, r12
nop
add rsp, 0x46762326
sub rsp, 0x46762306
pop r14
ret
Function at 0x140076dcc
Capabilities:
Encode data using xor

Disassembly:
xchg r15, rbx
mov qword [rsp + 0x10], r15
xchg rbx, r15
xchg rsi, rdx
mov qword [rsp + 0x18], rdx
xchg rsi, rdx
push rbp
nop
push 0x3e59e8c0
mov qword [rsp], rdi
push r14
mov rcx, rcx
lea rbp, [rsp - 0x47]
neg rsp
sub rsp, 0xffffffffffffff60
neg rsp
movdqa xmm0, xmmword [0x14000ba10]
mov dword [rsp - 0x34], 0x57c838b5
xor edi, edi
movdqa xmm1, xmmword [0x14000b990]
xchg rdi, rdx
mov rbx, rdi
xchg rdx, rdi
movdqu xmmword [rbp - 0x39], xmm0
mov rsi, rcx
mov edx, edi
xchg r14, r14
movdqa xmm0, xmmword [0x14000b980]
mov r8d, edi
xchg r12, rbp
movdqu xmmword [r12 - 0x29], xmm1
xchg r12, rbp
movdqa xmm1, xmmword [0x14000b970]
xchg rbp, r11
movdqu xmmword [r11 - 0x19], xmm0
xchg rbp, r11
xchg rcx, rbp
movdqu xmmword [rcx - 9], xmm1
xchg rcx, rbp
mov ecx, edx
mov rdx, rdx
lea r8, [r8 + 4]
mov eax, 0x76d7361e
sub eax, 0x641f2291
xor eax, 0x197c2a0
xor eax, 0x4c8dfed1
xor eax, 0x6ca1082
inc rdx
rol eax, cl
xor eax, dword [rbp + r8 - 0x3d]
mov dword [rsp - 0x20], esi
mov dword [rbp + r8 + 3], eax
cmp rdx, 0x10
jb 0x140076e6b
cmp dword [rsi + 4], 8
mov dword [rsp - 0x1c], ecx
jne 0x140076f22
lea rdx, [rbp + 0x6d]
movzx ecx, byte [rbx + rdi*2]
mov dword [rsp - 0x20], 0xf50ce6d
movzx eax, byte [rbx + rdi*2 + 1]
inc rdi
shl cx, 3
shl cx, 3
shl cx, 1
shl cx, 1
or cx, ax
mov dword [rsp - 0x34], 0x675f2c66
mov word [rdx], cx
lea rdx, [rdx - 2]
cmp rdi, 4
mov dword [rsp - 0x18], 0x4ebb967
jl 0x140076ebc
lea r9, [rbp + 7]
xor r8d, r8d
lea rdx, [rbp + 0x67]
mov dword [rsp - 0x44], 0x4e9f3b62
mov rcx, rsi
call fcn.140076bf8
jmp 0x140076ffb
cmp dword [rsi], edi
jle 0x140076ffb
mov r14d, edi
mov dword [rsp - 0x14], edi
lea rdx, [rbp + 0x6d]
mov r8d, 0x5d88d58d
xor r8d, 0x3ec665b4
sub r8d, 0x5fd8488c
add r8d, 0x413a030b
sub r8d, 0x44b06ab4
movzx eax, byte [rbx]
mov rsp, rsp
movzx ecx, byte [rbx + 1]
nop
add rbx, 0x4a244c7
sub rbx, 0x4a244c5
shl ax, 2
shl ax, 2
shl ax, 1
shl ax, 2
shl ax, 1
or cx, ax
mov dword [rsp - 0x18], ebp
mov word [rdx], cx
lea rdx, [rdx - 2]
sub r8, 1
jne 0x140076f57
mov r11, r11
lea r9, [rbp + 7]
mov r8d, r14d
lea rdx, [rbp + 0x67]
mov dword [rsp - 0x1c], ebx
xchg rsi, r12
mov rcx, r12
xchg r12, rsi
call fcn.140076bf8
mov r8d, dword [rsi + 4]
lea r9, [rbp + 0x27]
mov rbp, rbp
sub r8d, r14d
lea rdx, [rbp + 0x67]
add r8d, 0xfffffff8
mov dword [rsp - 0x40], ebp
xchg r12, rsi
mov rcx, r12
xchg r12, rsi
call fcn.140076bf8
mov dword [rsp - 0x40], 0xba09ea2
inc edi
sub r14d, 0xfffffff8
cmp edi, dword [rsi]
mov r14, r14
jl 0x140076f31
xor eax, eax
lea r11, [rsp + 0xa0]
xchg r15, r15
mov rbx, qword [r11 + 0x28]
lea rdi, [rbp + 7]
mov rsi, qword [r11 + 0x30]
mov dword [rsp - 0x3c], edx
lea ecx, [rax + 0x40]
rep stosb byte [rdi], al
xchg r11, rdx
mov rsp, rdx
xchg rdx, r11
pop r14
mov dword [rsp - 0x2c], 0x419e37a8
nop
mov rdi, qword [rsp]
add rsp, 8
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x1400770d4
Capabilities:
Encode data using xor

Disassembly:
xor r10d, r10d
mov r11d, ecx
mov dword [rsp - 0x2c], ebp
test edx, edx
je 0x14007711c
lea ecx, [r11 + r11]
mov r9d, r10d
mov dword [rsp - 0x1c], ebp
xor r9d, r11d
mov r11d, ecx
test dl, 1
xchg rsi, rsi
cmove r9d, r10d
xor r11d, r8d
cmp ecx, 0x100
mov rdi, rdi
mov r10d, r9d
cmovb r11d, ecx
shr edx, 1
jne 0x1400770e2
mov dword [rsp - 0xc], 0x4a26938e
mov eax, r10d
ret
Function at 0x140077810
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov r12, r12
mov qword [rsp + 0x10], rbp
xchg r8, rsi
mov qword [rsp + 0x18], r8
xchg rsi, r8
nop
sub rsp, 8
mov qword [rsp], rdi
add rsp, 0xffffffffffffff70
mov dword [rsp - 0x14], 0x43fb9be1
lea rbx, [section..text]
mov esi, 0x1abf698f
xor esi, 0x1da41bda
xor esi, 0x3f6d65b5
xor esi, 0x3876179f
lea rdi, [0x140001040]
cmp rbx, rdi
mov dword [rsp - 0x10], 0x7b087ead
jae 0x1400778ad
nop
xchg r10, rax
mov r10, qword [rbx]
xchg r10, rax
test rax, rax
mov dword [rsp - 0x28], edi
je 0x14007788d
call rax
nop
sub rbx, 0xe7be0e5
add rbx, 0xe7be0ed
cmp rbx, rdi
mov dword [rsp - 0x30], 0x2a869a8c
jb 0x140077877
call fcn.14006fba0
lea rcx, [0x1400c8100]
xchg rdi, rdi
call fcn.1400c7b50
movabs rbp, 0x5073338f05ae8a83
xor rbp, 0x73a98078
sub rbp, 0x24237f6c
xor rbp, 0x2c3b94f
test al, al
mov r13, r13
je 0x1400779b2
call 0x1400c7510
test al, al
mov dword [rsp - 0x44], ebx
je 0x14007799e
call fcn.1400c73c0
test al, al
je 0x14007799e
mov dword [rsp - 0xc], ebx
call fcn.1400c76c0
test al, al
je 0x14007799e
call 0x1400c7ab0
mov dword [rsp - 0x2c], ebx
test al, al
je 0x14007799e
mov rax, qword [0x1400c8170]
mov dword [rsp - 0x3c], ebp
lea rcx, [rsp + 0x20]
xor rax, rbp
call rax
test byte [rsp + 0x5c], 1
mov dword [rsp - 0x38], ebp
movzx ebx, word [rsp + 0x60]
jne 0x140077971
mov ebx, 0x1db31cd8
xor ebx, 0x39b147bb
add ebx, 0x506c48
add ebx, 0x506b02a9
xor ebx, 0x74bdca5e
mov rax, qword [0x1400c8160]
xor rax, rbp
mov dword [rsp - 0x18], ecx
call rax
mov r9d, ebx
lea rcx, [0x140000000]
xchg r8, rax
mov rax, r8
xchg r8, rax
xor edx, edx
mov rcx, rcx
call fcn.1400165f4
mov esi, eax
lea rcx, [0x1400c8100]
mov dword [rsp - 0x1c], 0x6ca1b9c6
call fcn.140079710
mov rcx, qword [0x1400c8050]
lea rax, [0x1400c8010]
xchg r9, r9
xor edi, edi
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
test rcx, rcx
mov rcx, rcx
cmove rbx, rdi
je 0x1400779e4
lea rdi, [rax + rcx*8]
mov dword [rsp - 0x24], edi
cmp rbx, rdi
je 0x140077a0e
nop dword [rax + rax]
mov rax, qword [rbx]
mov dword [rsp - 0x28], edx
xor rax, rbp
call rax
sub rbx, 0xfffffffffffffff8
mov rdi, rdi
cmp rbx, rdi
jne 0x1400779f2
mov rax, qword [0x1400c81a0]
mov dword [rsp - 0xc], ebp
mov ecx, esi
xor rax, rbp
call rax
lea r11, [rsp + 0x90]
mov dword [rsp - 0x30], edx
mov eax, esi
xchg rbx, r15
mov r15, qword [r11 + 0x10]
xchg r15, rbx
mov rbp, qword [r11 + 0x18]
xchg r8, rsi
mov r8, qword [r11 + 0x20]
xchg r8, rsi
xchg r10, r11
mov rsp, r10
xchg r11, r10
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x14007d41c
Capabilities:
Encode data using xor

Disassembly:
xchg r14, rax
mov r14, qword [rcx + 0xf8]
xchg r14, rax
xor r8d, r8d
xchg r9, rsp
mov rsp, rdx
xchg r9, rsp
test rax, rax
je 0x14007d487
xchg rdi, rdi
mov ecx, r8d
mov edx, 0x2a7af7f3
sub edx, 0xa43cf36
xor edx, 0x7b9031ec
add edx, 0x13d24965
sub edx, 0x16112338
rol edx, cl
mov dword [rsp - 0x1c], edi
xor dl, byte [rax]
inc rax
mov byte [r8 + r9], dl
inc r8
xchg r13, r13
cmp r8, 0x20
jb 0x14007d43f
mov al, 0x2d
add al, 0x4b
sub al, 0x57
sub al, 0x20
ret
mov rax, qword [rcx + 0x100]
test rax, rax
je 0x14007d4be
mov dword [rsp - 0xc], 0x72147316
xchg r10, rax
movups xmm0, xmmword [r10]
xchg r10, rax
xchg rdx, r14
movups xmmword [r14], xmm0
xchg r14, rdx
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
jmp 0x14007d47e
xorps xmm0, xmm0
xor al, al
mov dword [rsp - 0x30], 0x4bed7945
xchg rdx, r13
movups xmmword [r13], xmm0
xchg rdx, r13
xchg rdx, rsi
movups xmmword [rsi + 0x10], xmm0
xchg rdx, rsi
ret
Function at 0x14009d5d4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdx, rsi
mov qword [rsp + 0x10], rdx
xchg rdx, rsi
nop
push r9
mov qword [rsp], rbp
nop
sub rsp, 8
mov qword [rsp], rdi
nop
push 0x633ea537
mov qword [rsp], r14
lea rbp, [rsp - 0x47]
mov dword [rsp - 0x40], ebp
add rsp, 0xffffffffffffff20
xor ebx, ebx
mov dword [rbp - 0x79], 0x7fdc01a8
sub dword [rbp - 0x79], 0x3f90045f
sub dword [rbp - 0x79], 0x3d5de897
xor dword [rbp - 0x79], 0x24433b30
xor dword [rbp - 0x79], 0x26892f3d
mov dword [rbp - 0x75], 0x39c2eef
add dword [rbp - 0x75], 0x7429235f
xor dword [rbp - 0x75], 0x11973a7f
xor dword [rbp - 0x75], 0x6625682a
mov r14, rdx
mov dword [rbp - 0x71], 0x721e456c
xor dword [rbp - 0x71], 0x77596217
xor dword [rbp - 0x71], 0x10d58ce1
xor dword [rbp - 0x71], 0x15b1ab31
mov dword [rbp - 0x6d], 0x4289a323
add dword [rbp - 0x6d], 0xfdb4aed
xor dword [rbp - 0x6d], 0x214b3aa1
sub dword [rbp - 0x6d], 0x23fb47d1
xor dword [rbp - 0x6d], 0x4f468ca6
mov dword [rbp - 0x69], 0x25ebf603
add dword [rbp - 0x69], 0x2ef158ab
add dword [rbp - 0x69], 0x1263a3f1
add dword [rbp - 0x69], 0x43f4913
xor dword [rbp - 0x69], 0x6ba63b05
mov qword [rbp + 0x77], rbx
xchg rdi, rdi
mov rax, qword [rbp + 0x77]
xchg r8, rcx
mov r8, qword [rbp + 0x77]
xchg rcx, r8
mov edx, 0x4c738870
sub edx, 0x44c1e1cd
add edx, 0x6297af6b
sub edx, 0x6990110
sub edx, 0x4d480a23
mov rax, qword [rbp + 0x77]
mov dword [rsp - 0x40], 0xe135be6
and cl, 3
shl cl, 3
shr edx, cl
movzx ecx, dl
xchg r11, r11
xor cx, word [rbp + rax*2 - 0x79]
xchg r15, rax
mov r15, qword [rbp + 0x77]
xchg r15, rax
mov word [rbp + rax*2 - 0x65], cx
mov rax, qword [rbp + 0x77]
mov rbp, rbp
inc rax
mov qword [rbp + 0x77], rax
mov rax, qword [rbp + 0x77]
cmp rax, 0xa
mov dword [rsp - 0x20], esi
jb 0x14009d6bf
xor edx, edx
mov word [rbp - 0x51], bx
lea rcx, [rbp - 0x65]
xchg rsi, rsi
call fcn.14006af20
xchg rsi, rdi
mov rdi, rax
xchg rdi, rsi
lea rdi, [rbp - 0x65]
xor eax, eax
mov r14, r14
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
test rsi, rsi
mov dword [rsp - 0x2c], edx
je 0x14009d82b
mov edx, 0x4ac51f20
xor edx, 0x3416f01f
xor edx, 0x2a357565
add edx, 0x36b29b47
xchg rsi, r8
mov rcx, r8
xchg rsi, r8
call fcn.140065030
xchg rsp, rsp
mov rdi, rax
test rax, rax
je 0x14009d815
xchg r9, rdx
mov r9, r14
xchg rdx, r9
lea rcx, [rbp - 0x49]
call fcn.140035bc0
mov rdi, rdi
xchg rcx, r14
mov r14, qword [rbp - 0x49]
xchg r14, rcx
call rdi
mov dword [rsp - 0x38], 0x357804c0
xchg rcx, rsi
mov rsi, qword [rbp - 0x49]
xchg rsi, rcx
cmp eax, 1
xchg r8, r8
lea rax, [rbp - 0x41]
sete bl
cmp rcx, rax
mov dword [rsp - 0x40], ecx
jne 0x14009d810
lea rdi, [rbp - 0x41]
xor eax, eax
xchg rsp, rsp
mov ecx, 0x55fc6a04
add ecx, 0x175f021d
sub ecx, 0xcddf0d0
sub ecx, 0x607d7ad1
rep stosb byte [rdi], al
jmp 0x14009d815
call fcn.140077cf0
xchg rsi, rcx
mov rsi, rcx
xchg rsi, rcx
call fcn.14006d330
mov dword [rsp - 0x38], 0x16f61ed6
lea r11, [rsp + 0xe0]
mov al, bl
mov rbx, qword [r11 + 0x20]
mov dword [rsp - 0x24], 0x4442136a
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop r14
nop
add rsp, 8
mov rdi, qword [rsp - 8]
pop rbp
mov dword [rsp - 0x20], 0x7666cfe
ret
Function at 0x14009fdb0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
xchg rdx, rdx
sub rsp, 0x140
xchg r8, rcx
mov rbx, rcx
xchg rcx, r8
xchg rcx, r10
mov rdi, r10
xchg rcx, r10
mov r8d, 0x53bb62f6
sub r8d, 0xeafdb1d
xor r8d, 0x14803256
sub r8d, 0x3891c617
sub r8d, 0x18f9ee78
lea rcx, [rsp + 0x40]
xchg rdx, rdx
xor edx, edx
call fcn.140078110
xchg r13, rax
mov r13, qword [rdi + 0x268]
xchg r13, rax
lea r8, [rsp + 0x40]
mov dword [rsp - 0x20], 0x3484fe86
mov edx, dword [rbx + 0x10]
movabs rcx, 0x5073338f37e44189
xor rcx, 0x1601c100
sub rcx, 0xc5bfe8b
xor rcx, 0x46a9b33e
xor edi, edi
mov rsp, rsp
mov dword [rsp + 0x30], 0x49c06fb
xor dword [rsp + 0x30], 0x182defe1
add dword [rsp + 0x30], 0xa72ad2b
sub dword [rsp + 0x30], 0x27249643
xor rax, rcx
mov dword [rsp + 0x28], edi
xchg rbx, rbx
mov rcx, qword [rbx + 0x20]
mov r9d, 0x6f4ac366
xor r9d, 0x5e3a4c7b
add r9d, 0x4012fee9
sub r9d, 0x2b4fd805
sub r9d, 0x4633b501
xchg r13, rdi
mov qword [rsp + 0x20], r13
xchg rdi, r13
call rax
test eax, eax
mov dword [rsp - 0x34], 0x123c9fa6
jne 0x14009ff4f
or eax, 0xffffffff
lea rbx, [rsp + 0x40]
mov r14, r14
mov dword [rsp + 0x150], eax
cmp byte [rsp + 0x40], dil
je 0x14009ff24
mov dword [rsp - 0x38], ebx
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
lea rcx, [rsp + 0x150]
mov rdi, rdi
mov r8d, 0x4e6ba3d1
sub r8d, 0x415c3fa3
add r8d, 0x6b5f039e
xor r8d, 0x3801e712
xor r8d, 0x406f80df
inc rbx
xchg rcx, rcx
call fcn.14006f850
cmp byte [rbx], dil
jne 0x14009fed0
mov r11, r11
mov eax, dword [rsp + 0x150]
not eax
cmp eax, 0xa2ca6717
je 0x14009ff42
mov dword [rsp - 0x10], ecx
cmp eax, 0xd7b7e7a8
sete al
jmp 0x14009ff54
mov al, 0x7c
xor al, 0x21
sub al, 0x42
xor al, 0x1a
jmp 0x14009ff54
xor al, al
mov rbp, rbp
xchg rbx, r12
mov r12, qword [rsp + 0x158]
xchg r12, rbx
sub rsp, 0x3bc6ab1f
add rsp, 0x3bc6ac5f
pop rdi
ret

Function at 0x1400a36c0
Capabilities:
Encrypt data using curve25519

Disassembly:
mov qword [rsp + 8], rbx
push rdi
add rsp, 0xffffffffffffff40
mov rdx, rdx
xchg r13, rax
mov r13, r8
xchg r13, rax
mov rbx, rdx
mov dword [rsp - 0x38], ebp
xchg rdx, r8
mov rdx, r8
xchg rdx, r8
xchg rdi, rbp
mov rbp, rcx
xchg rdi, rbp
mov edx, 0x6b25655e
sub edx, 0xb2c599c
add edx, 0x484b245
sub edx, 0x1bcbc2fd
sub edx, 0x48b1faea
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.1400a3f00
movzx eax, byte [rbx + 0x1f]
mov rcx, rcx
lea rcx, [rsp + 0x20]
and byte [rbx], 0xf8
and al, 0x3f
mov dword [rsp - 0x20], 0x1e95c52c
or al, 0x40
mov rdx, rbx
mov byte [rbx + 0x1f], al
call fcn.1400a72b0
mov dword [rsp - 0x38], 0x264cc9c2
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.1400a71e0
mov rcx, rcx
xchg r9, rbx
mov r9, qword [rsp + 0xd0]
xchg rbx, r9
add rsp, 0xc0
xchg r9, r9
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400b94ac
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg r12, r12
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
nop
sub rsp, 8
mov qword [rsp], rbp
mov rbp, rsp
sub rsp, 0x80
mov dword [rsp - 0x18], ebx
xor esi, esi
mov dword [rbp - 0x50], 0x2d1d8b65
add dword [rbp - 0x50], 0x872155d
add dword [rbp - 0x50], 0x107cab17
add dword [rbp - 0x50], 0x1d0c4a7e
xor dword [rbp - 0x50], 0x630096dc
mov dword [rbp - 0x4c], 0x4421186c
xor dword [rbp - 0x4c], 0x4713111c
add dword [rbp - 0x4c], 0x5b073dbb
xor dword [rbp - 0x4c], 0x5e6c470c
mov dword [rbp - 0x48], 0x38fb9792
add dword [rbp - 0x48], 0x287ffe5b
sub dword [rbp - 0x48], 0x260b11a3
sub dword [rbp - 0x48], 0xd87d0d3
sub dword [rbp - 0x48], 0x2dd6b2d9
mov dword [rbp - 0x44], 0x5ea6a8fd
add dword [rbp - 0x44], 0x1601f7cc
xor dword [rbp - 0x44], 0x21dada92
sub dword [rbp - 0x44], 0x40eb9ca2
sub dword [rbp - 0x44], 0x142cdd81
mov qword [rbp + 0x10], rsi
lea ebx, [rsi + 1]
mov dword [rsp - 0xc], 0x186591d0
xchg r12, rax
mov r12, qword [rbp + 0x10]
xchg r12, rax
xchg rcx, rsp
mov rsp, qword [rbp + 0x10]
xchg rcx, rsp
mov edx, 0x603ad9ad
xor edx, 0x44ca7821
sub edx, 0x2277a1a
sub edx, 0x16900f0d
add edx, 0xa2f3276
mov rax, qword [rbp + 0x10]
and cl, 3
mov dword [rsp - 0x14], esi
shl cl, 3
shr edx, cl
movzx ecx, dl
xor cx, word [rbp + rax*2 - 0x50]
xchg rsp, rsp
mov rax, qword [rbp + 0x10]
mov word [rbp + rax*2 - 0x20], cx
xchg rsp, rax
mov rsp, qword [rbp + 0x10]
xchg rsp, rax
add rax, rbx
mov qword [rbp + 0x10], rax
mov dword [rsp - 0x30], edi
mov rax, qword [rbp + 0x10]
cmp rax, 8
jb 0x1400b9573
mov dword [rsp - 0x3c], 0xaa739c9
lea rax, [rbp - 0x20]
mov word [rbp - 0x10], si
xorps xmm0, xmm0
mov dword [rsp - 0x14], 0x648d1ecc
mov qword [rbp - 0x38], rax
lea r9, [rbp - 0x30]
mov dword [rbp - 0x40], 0x3ba1e27
xor dword [rbp - 0x40], 0x35d665f
xor dword [rbp - 0x40], 0x74d98dd9
sub dword [rbp - 0x40], 0x742cf591
lea r8, [rbp - 0x40]
mov dword [rsp + 0x20], esi
mov dword [rsp - 0x18], 0x3d333287
xor edx, edx
xor ecx, ecx
xchg rbx, rbp
movups xmmword [rbx - 0x30], xmm0
xchg rbx, rbp
call fcn.1400be990
test rax, rax
mov rcx, rcx
je 0x1400b966a
lea rdx, [rbp - 0x40]
xchg r12, rcx
mov r12, rax
xchg r12, rcx
call fcn.1400afa58
test al, al
xchg rdi, rdi
jne 0x1400b966d
mov bl, sil
xor eax, eax
mov r14, r14
lea r11, [rsp + 0x80]
mov rsi, qword [r11 + 0x20]
lea rdi, [rbp - 0x20]
mov dword [rsp - 0x10], 0x4761997b
lea ecx, [rax + 8]
rep stosb byte [rdi], al
xchg r15, rdi
mov r15, qword [r11 + 0x28]
xchg r15, rdi
mov al, bl
xchg rbp, rbx
mov rbp, qword [r11 + 0x18]
xchg rbp, rbx
xchg rdi, rsp
mov rdi, r11
xchg rsp, rdi
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x1400be696
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rdi
mov dword [rsp - 0x44], ebx
nop
push 0x425d394a
mov qword [rsp], r12
push r14
xchg r15, r15
nop
sub rsp, 8
mov qword [rsp], r15
add rsp, 0xffffffffffffff40
mov r14, rcx
xor ebp, ebp
mov dword [rsp - 0x3c], 0x2fa2a815
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x20], ebp
mov edi, r9d
mov r15d, r8d
mov dword [rsp - 0x1c], 0x227769ea
mov r12d, edx
call fcn.1400bef70
mov edx, edi
lea rcx, [rsp + 0x60]
mov dword [rsp - 0x18], ecx
call fcn.1400bf0b0
test al, al
jne 0x1400be5f1
mov dword [rsp - 0x28], 0x3855001e
xor dil, dil
jmp 0x1400be7eb
mov qword [rsp + 0xe0], rbx
mov rbx, qword [r14 + 0x38]
test rbx, rbx
mov dword [rsp - 0x18], ecx
je 0x1400be717
xorps xmm0, xmm0
mov qword [rsp + 0xe8], rsi
xchg rsi, r13
mov r13, qword [r14]
xchg rsi, r13
lea rax, [rsp + 0x30]
mov dword [rsp - 0x40], ebp
lea rdx, [rbx + 1]
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x28]
xchg rsp, r10
movups xmmword [r10 + 0x30], xmm0
xchg rsp, r10
xchg rbp, rsp
movups xmmword [rbp + 0x40], xmm0
xchg rsp, rbp
movups xmmword [rsp + 0x50], xmm0
call fcn.14001653c
mov edx, 0xc224cab
sub edx, 0x9aa3df9
add edx, 0x22fa1c2b
sub edx, 0xf09e002
test rbx, rbx
xchg r9, r9
je 0x1400be6d0
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
sub rsi, rax
mov r8, rbx
mov r9d, 0x14b0177e
xor r9d, 0x535afc0c
sub r9d, 0x12a5622
sub r9d, 0x46c09451
nop
mov dword [rsp - 0x44], 0x1e88c9ab
movzx ecx, dx
lea rdi, [rdi + 2]
and cx, r9w
ror edx, 3
ror edx, 5
xor cx, word [rsi + rdi - 2]
mov word [rdi - 2], cx
mov r10, r10
sub r8, 1
jne 0x1400be6a9
xchg rsi, rcx
mov rcx, qword [rsp + 0xe8]
xchg rcx, rsi
mov word [rax + rbx*2], bp
mov dword [rsp - 0x40], 0x21ae755a
mov ebp, 0x54543004
xor ebp, 0x27f3d631
xor ebp, 0x6bdd67d0
xor ebp, 0x545e78ca
sub ebp, 0x4c24f92e
xchg rbx, r12
mov r12, qword [rsp + 0x28]
xchg r12, rbx
jmp 0x1400be71a
mov rbx, rbp
lea rcx, [rsp + 0x60]
call fcn.1400bf0a0
xchg rcx, rcx
mov rdi, qword [0x1400c8b00]
movabs rcx, 0x5073338f0f634fcd
add rcx, 0x5ae69380
sub rcx, 0x40357ed9
sub rcx, 0x180cf62e
xor rcx, 0x41275c86
xor rdi, rcx
xchg rbx, r9
mov rbx, r9
xchg r9, rbx
xchg rcx, r15
mov r15, rax
xchg rcx, r15
mov r8d, r15d
mov edx, r12d
xchg rsp, rsp
call rdi
xchg r11, rbx
mov r11, qword [rsp + 0xe0]
xchg r11, rbx
xchg r15, rax
mov qword [r14 + 0x40], r15
xchg r15, rax
test bpl, 1
xchg r12, r12
je 0x1400be7da
mov rcx, qword [rsp + 0x28]
lea rax, [rsp + 0x30]
mov rbx, rbx
cmp rcx, rax
jne 0x1400be7d5
lea rdi, [rsp + 0x30]
xor eax, eax
mov rsp, rsp
mov ecx, 0x2832b910
xor ecx, 0x304c648f
add ecx, 0x1bc008be
sub ecx, 0x343ee62d
rep stosb byte [rdi], al
jmp 0x1400be7da
call fcn.140077cf0
cmp qword [r14 + 0x40], 0
setne dil
mov dword [rsp - 0x10], 0x3109e644
lea rcx, [rsp + 0x60]
call fcn.1400befc0
lea r11, [rsp + 0xc0]
movzx eax, dil
mov dword [rsp - 0x18], esi
mov rbp, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
xchg r11, r9
mov rsp, r9
xchg r11, r9
nop
mov r15, qword [rsp]
add rsp, 8
nop
mov r14, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov r12, qword [rsp - 8]
ret