joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180010ef0
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
push rbx
push rbp
push rsi
push r12
push r15
sub rsp, 0x90
mov rax, qword [0x18003db28]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov rsi, qword [rsp + 0xe0]
xor eax, eax
mov r12, r9
mov qword [rsp + 0x30], rax
mov qword [r11 - 0x80], rax
mov qword [r11 - 0x78], rax
mov qword [r11 - 0x70], rax
mov qword [r11 - 0x68], rax
mov qword [r11 - 0x60], rax
mov qword [r11 - 0x58], rax
mov qword [r11 - 0x50], rax
mov dword [rsp + 0x20], eax
mov rax, qword [rsi]
mov r15, r8
mov rbp, rdx
mov rbx, rcx
test rdx, rdx
je 0x180011060
mov qword [r11 - 0x30], rdi
mov qword [r11 - 0x38], r14
mov r14d, dword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rsi]
cmp rbp, r14
mov rdi, r14
cmovb rdi, rbp
test rax, rax
je 0x180010fcc
mov rcx, qword [rsi + 8]
call qword [rax + 0x18]
mov rax, qword [rsi]
test rax, rax
je 0x180010fcc
mov rcx, qword [rsi + 8]
mov r8, r12
mov rdx, r15
call qword [rax + 0x20]
mov rax, qword [rsi]
test rax, rax
je 0x180010fcc
mov rcx, qword [rsi + 8]
lea rdx, [rsp + 0x20]
mov r8d, 4
call qword [rax + 0x20]
mov rax, qword [rsi]
test rax, rax
je 0x180010fcc
mov rcx, qword [rsi + 8]
lea rdx, [rsp + 0x30]
call qword [rax + 0x28]
xor eax, eax
test rdi, rdi
je 0x180011043
cmp rdi, 0x10
jb 0x180011020
lea rdx, [rbx - 1]
lea rcx, [rsp + rdi + 0x2f]
add rdx, rdi
cmp rbx, rcx
ja 0x180010ff4
lea rcx, [rsp + 0x30]
cmp rdx, rcx
jae 0x180011020
mov rcx, rdi
mov rdx, rdi
and ecx, 0xf
sub rdx, rcx
movdqu xmm0, xmmword [rbx]
movdqu xmm1, xmmword [rsp + rax + 0x30]
add rax, 0x10
add rbx, 0x10
pxor xmm1, xmm0
movdqu xmmword [rbx - 0x10], xmm1
cmp rax, rdx
jb 0x180011000
cmp rax, rdi
jae 0x180011043
nop word [rax + rax]
movzx ecx, byte [rsp + rax + 0x30]
inc rax
inc rbx
xor byte [rbx - 1], cl
cmp rax, rdi
jb 0x180011030
inc byte [rsp + 0x23]
sub rbp, rdi
jne 0x180010f70
mov r14, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.180023020
add rsp, 0x90
pop r15
pop r12
pop rsi
pop rbp
pop rbx
ret
Function at 0x180011410
Capabilities:
Encode data using xor

Disassembly:
push r12
push r15
sub rsp, 0x4a8
mov rax, qword [0x18003db28]
xor rax, rsp
mov qword [rsp + 0x480], rax
cmp dword [rcx + 0x148], 1
mov r15, qword [rsp + 0x4f0]
mov r9, qword [rsp + 0x4f8]
mov r12, qword [rsp + 0x500]
mov r10, rcx
je 0x180011458
mov eax, 0xffffbf80
jmp 0x1800114a4
mov qword [rsp + 0x4d8], rbp
mov rbp, qword [rcx + 8]
lea rax, [rbp - 0x10]
cmp rax, 0x3f0
ja 0x1800116ab
mov ecx, dword [rcx + 0x14c]
mov qword [rsp + 0x4c8], rbx
call fcn.1800171e0
mov rbx, rax
test rax, rax
jne 0x1800114c0
mov eax, 0xffffbf80
mov rbx, qword [rsp + 0x4c8]
mov rbp, qword [rsp + 0x4d8]
mov rcx, qword [rsp + 0x480]
xor rcx, rsp
call fcn.180023020
add rsp, 0x4a8
pop r15
pop r12
ret
lea rax, [rsp + 0x80]
mov rcx, r10
mov qword [rsp + 0x20], rax
call fcn.180010840
test eax, eax
jne 0x180011494
xor eax, eax
mov qword [rsp + 0x4a0], rsi
mov qword [rsp + 0x498], rdi
mov qword [rsp + 0x490], r14
movzx r14d, byte [rbx + 0x10]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
call qword [rbx + 0x68]
mov qword [rsp + 0x38], rax
test rax, rax
je 0x18001151a
mov rcx, rax
mov qword [rsp + 0x30], rbx
call qword [rbx + 0x18]
lea r8, [rsp + 0x40]
xor edx, edx
xor ecx, ecx
call qword [rbx + 0x30]
lea rax, [rsp + 0x30]
mov rbx, rbp
lea rdi, [rsp + 0x81]
sub rbx, r14
lea rcx, [rsp + 0x81]
add rdi, r14
lea r9, [rbx - 1]
mov rdx, r14
mov r8, rdi
mov qword [rsp + 0x20], rax
call fcn.180010ef0
lea rax, [rsp + 0x30]
lea r8, [rsp + 0x81]
lea rdx, [rbx - 1]
mov r9, r14
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.180010ef0
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x18001158b
mov rax, qword [rsp + 0x30]
call qword [rax + 0x70]
mov eax, 0x10
lea rcx, [rsp + 0x30]
nop word [rax + rax]
mov byte [rcx], 0
lea rcx, [rcx + 1]
dec rax
jne 0x1800115a0
movzx r10d, byte [rsp + 0x80]
xor r8d, r8d
lea rdx, [rsp + 0x81]
add rdx, r14
mov ecx, r8d
test r14d, r14d
je 0x1800115e6
nop dword [rax + rax]
movzx eax, byte [rsp + rcx + 0x40]
inc rcx
inc rdx
xor al, byte [rdx - 1]
or r10b, al
cmp rcx, r14
jb 0x1800115d0
lea ecx, [r14 + r14]
mov r14, qword [rsp + 0x490]
mov rsi, rbp
sub rsi, rcx
xor r9b, r9b
mov r11, r8
add rsi, 0xfffffffffffffffe
mov rbx, r8
mov rcx, r8
cmp rsi, 2
jb 0x180011636
lea rdi, [rsi - 1]
or r9b, byte [rdx + rcx]
mov rax, r8
sete al
add r11, rax
or r9b, byte [rdx + rcx + 1]
mov rax, r8
sete al
add rcx, 2
add rbx, rax
cmp rcx, rdi
jb 0x180011612
mov rdi, qword [rsp + 0x498]
cmp rcx, rsi
mov rsi, qword [rsp + 0x4a0]
jae 0x180011656
movzx eax, byte [rcx + rdx]
or al, r9b
sete r8b
lea rax, [rbx + r11]
add rax, r8
add rdx, rax
inc rdx
movzx eax, byte [rdx - 1]
xor al, 1
or r10b, al
je 0x180011678
mov eax, 0xffffbf00
jmp 0x180011494
sub rbp, rdx
lea r8, [rsp + 0x80]
add r8, rbp
cmp r8, 0x80
jbe 0x180011699
mov eax, 0xffffbc00
jmp 0x180011494
mov rcx, r12
mov qword [r15], r8
call fcn.18001cfc0
xor eax, eax
jmp 0x180011494
mov eax, 0xffffbf80
jmp 0x18001149c
Function at 0x180011e60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
push rdi
push r14
sub rsp, 0x150
mov rax, qword [0x18003db28]
xor rax, rsp
mov qword [rsp + 0x140], rax
mov r14, rcx
mov rbx, rdx
mov esi, 0x120
lea rcx, [rsp + 0x20]
xor edx, edx
mov r8d, esi
call fcn.18001cca0
lea rdi, [r14 + 0x10]
lea rcx, [rsp + 0x20]
mov rdx, rbx
mov qword [r14 + 8], rdi
call fcn.180011b90
mov ebx, eax
test eax, eax
jne 0x180011fa6
mov ecx, dword [rsp + 0x20]
add rdi, 0x10
mov dword [r14], ecx
lea ecx, [rcx*4]
movsxd rdx, ecx
mov rcx, qword [rsp + 0x28]
lea rcx, [rcx + rdx*4]
sub rcx, 0x10
mov edx, dword [rcx + 0x10]
mov dword [rdi - 0x10], edx
mov edx, dword [rcx + 0x14]
mov dword [rdi - 0xc], edx
mov eax, dword [rcx + 0x18]
mov dword [rdi - 8], eax
mov eax, dword [rcx + 0x1c]
mov dword [rdi - 4], eax
mov r10d, dword [r14]
dec r10d
test r10d, r10d
jle 0x180011f90
lea r14, [0x180000000]
nop dword [rax + rax]
mov r11d, 4
nop word [rax + rax]
movzx eax, byte [rcx]
add rdi, 4
add rcx, 4
movzx r8d, byte [rax + r14 + 0x43940]
movzx eax, byte [rcx - 1]
movzx edx, byte [rax + r14 + 0x43940]
movzx eax, byte [rcx - 2]
mov r9d, dword [r14 + r8*4 + 0x42910]
xor r9d, dword [r14 + rdx*4 + 0x43540]
movzx edx, byte [rax + r14 + 0x43940]
movzx eax, byte [rcx - 3]
xor r9d, dword [r14 + rdx*4 + 0x43140]
movzx edx, byte [rax + r14 + 0x43940]
xor r9d, dword [r14 + rdx*4 + 0x42d10]
mov dword [rdi - 4], r9d
dec r11
jne 0x180011f20
dec r10d
sub rcx, 0x20
test r10d, r10d
jg 0x180011f10
mov eax, dword [rcx]
mov dword [rdi], eax
mov eax, dword [rcx + 4]
mov dword [rdi + 4], eax
mov eax, dword [rcx + 8]
mov dword [rdi + 8], eax
mov eax, dword [rcx + 0xc]
mov dword [rdi + 0xc], eax
lea rax, [rsp + 0x20]
nop dword [rax + rax]
mov byte [rax], 0
lea rax, [rax + 1]
dec rsi
jne 0x180011fb0
mov eax, ebx
mov rcx, qword [rsp + 0x140]
xor rcx, rsp
call fcn.180023020
mov rbx, qword [rsp + 0x180]
add rsp, 0x150
pop r14
pop rdi
pop rsi
ret
Function at 0x180012ab0
Capabilities:
Hash data using sha224
Hash data using sha256

Disassembly:
xor eax, eax
mov dword [rcx + 0xe8], edx
mov qword [rcx], rax
test edx, edx
jne 0x180012af8
mov dword [rcx + 8], 0x6a09e667
mov dword [rcx + 0xc], 0xbb67ae85
mov dword [rcx + 0x10], 0x3c6ef372
mov dword [rcx + 0x14], 0xa54ff53a
mov dword [rcx + 0x18], 0x510e527f
mov dword [rcx + 0x1c], 0x9b05688c
mov dword [rcx + 0x20], 0x1f83d9ab
mov dword [rcx + 0x24], 0x5be0cd19
ret
mov dword [rcx + 8], 0xc1059ed8
mov dword [rcx + 0xc], 0x367cd507
mov dword [rcx + 0x10], 0x3070dd17
mov dword [rcx + 0x14], 0xf70e5939
mov dword [rcx + 0x18], 0xffc00b31
mov dword [rcx + 0x1c], 0x68581511
mov dword [rcx + 0x20], 0x64f98fa7
mov dword [rcx + 0x24], 0xbefa4fa4
ret
Function at 0x180015450
Capabilities:
Hash data using sha224
Hash data using sha256

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x120
mov rax, qword [0x18003db28]
xor rax, rsp
mov qword [rsp + 0x110], rax
mov r14, rcx
mov rbp, r8
mov rdi, rdx
mov ebx, 0xec
lea rcx, [rsp + 0x20]
xor edx, edx
mov r8d, ebx
mov esi, r9d
call fcn.18001cca0
xor eax, eax
mov qword [rsp + 0x20], rax
test esi, esi
jne 0x1800154dd
mov dword [rsp + 0x28], 0x6a09e667
mov dword [rsp + 0x2c], 0xbb67ae85
mov dword [rsp + 0x30], 0x3c6ef372
mov dword [rsp + 0x34], 0xa54ff53a
mov dword [rsp + 0x38], 0x510e527f
mov dword [rsp + 0x3c], 0x9b05688c
mov dword [rsp + 0x40], 0x1f83d9ab
mov dword [rsp + 0x44], 0x5be0cd19
jmp 0x18001551d
mov dword [rsp + 0x28], 0xc1059ed8
mov dword [rsp + 0x2c], 0x367cd507
mov dword [rsp + 0x30], 0x3070dd17
mov dword [rsp + 0x34], 0xf70e5939
mov dword [rsp + 0x38], 0xffc00b31
mov dword [rsp + 0x3c], 0x68581511
mov dword [rsp + 0x40], 0x64f98fa7
mov dword [rsp + 0x44], 0xbefa4fa4
mov dword [rsp + 0x108], esi
test rdi, rdi
je 0x180015539
lea rcx, [rsp + 0x20]
mov r8, rdi
mov rdx, r14
call fcn.1800150f0
lea rcx, [rsp + 0x20]
mov rdx, rbp
call fcn.1800151c0
lea rax, [rsp + 0x20]
nop dword [rax + rax]
mov byte [rax], 0
lea rax, [rax + 1]
dec rbx
jne 0x180015550
mov rcx, qword [rsp + 0x110]
xor rcx, rsp
call fcn.180023020
add rsp, 0x120
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x180015830
Capabilities:
Hash data using sha224
Hash data using sha256

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x18003db28]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov esi, r9d
mov r11, r8
mov r10, rdx
mov rbx, rcx
mov edi, 0x20
cmp r8, 0x40
jbe 0x180015881
lea r8, [rsp + 0x20]
mov rdx, r11
mov rcx, r10
call fcn.180015450
mov r11d, edi
mov eax, 0x1c
test esi, esi
lea r10, [rsp + 0x20]
cmovne r11d, eax
movabs rax, 0x3636363636363636
lea rdx, [rbx + 0x68]
mov qword [rdx], rax
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rax
mov qword [rdx + 0x20], rax
mov qword [rdx + 0x28], rax
mov qword [rdx + 0x30], rax
mov qword [rdx + 0x38], rax
movabs rax, 0x5c5c5c5c5c5c5c5c
mov qword [rbx + 0xa8], rax
mov qword [rbx + 0xb0], rax
mov qword [rbx + 0xb8], rax
mov qword [rbx + 0xc0], rax
mov qword [rbx + 0xc8], rax
mov qword [rbx + 0xd0], rax
mov qword [rbx + 0xd8], rax
mov qword [rbx + 0xe0], rax
test r11, r11
je 0x18001592c
mov rax, rbx
sub rax, r10
lea rcx, [rax + 0x68]
lea r8, [rax + 0xa8]
nop word [rax + rax]
movzx eax, byte [r10]
lea r10, [r10 + 1]
xor byte [rcx + r10 - 1], al
movzx eax, byte [r10 - 1]
xor byte [r8 + r10 - 1], al
dec r11
jne 0x180015910
xor eax, eax
mov qword [rbx], rax
test esi, esi
jne 0x18001596f
mov dword [rbx + 8], 0x6a09e667
mov dword [rbx + 0xc], 0xbb67ae85
mov dword [rbx + 0x10], 0x3c6ef372
mov dword [rbx + 0x14], 0xa54ff53a
mov dword [rbx + 0x18], 0x510e527f
mov dword [rbx + 0x1c], 0x9b05688c
mov dword [rbx + 0x20], 0x1f83d9ab
mov dword [rbx + 0x24], 0x5be0cd19
jmp 0x1800159a7
mov dword [rbx + 8], 0xc1059ed8
mov dword [rbx + 0xc], 0x367cd507
mov dword [rbx + 0x10], 0x3070dd17
mov dword [rbx + 0x14], 0xf70e5939
mov dword [rbx + 0x18], 0xffc00b31
mov dword [rbx + 0x1c], 0x68581511
mov dword [rbx + 0x20], 0x64f98fa7
mov dword [rbx + 0x24], 0xbefa4fa4
mov rcx, rbx
mov dword [rbx + 0xe8], esi
mov dword [rbx], 0x40
call fcn.180012b40
lea rax, [rsp + 0x20]
mov byte [rax], 0
lea rax, [rax + 1]
dec rdi
jne 0x1800159c0
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.180023020
add rsp, 0x50
pop rdi
pop rsi
pop rbx
ret
Function at 0x180015aa0
Capabilities:
Hash data using sha224
Hash data using sha256

Disassembly:
mov r11, rsp
push rbp
push rsi
lea rbp, [rsp - 0x78]
sub rsp, 0x178
mov rax, qword [0x18003db28]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov qword [r11 - 0x18], rbx
mov qword [r11 - 0x20], rdi
mov qword [r11 - 0x30], r13
mov r13, qword [rbp + 0xb0]
mov qword [r11 - 0x38], r14
mov rbx, rcx
mov qword [r11 - 0x40], r15
mov rdi, rdx
mov r15, r8
mov esi, 0xec
lea rcx, [rsp + 0x20]
xor edx, edx
mov r8d, esi
mov r14, r9
call fcn.18001cca0
mov r9d, dword [rbp + 0xb8]
lea rcx, [rsp + 0x20]
mov r8, rdi
mov rdx, rbx
call fcn.180015830
test r14, r14
je 0x180015b26
lea rcx, [rsp + 0x20]
mov r8, r14
mov rdx, r15
call fcn.1800150f0
mov edi, dword [rbp + 8]
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x20]
mov ebx, 0x20
mov r15d, 0x1c
test edi, edi
cmove r15d, ebx
call fcn.1800151c0
mov dword [rsp + 0x24], 0
test edi, edi
jne 0x180015b96
mov dword [rsp + 0x28], 0x6a09e667
mov dword [rsp + 0x2c], 0xbb67ae85
mov dword [rsp + 0x30], 0x3c6ef372
mov dword [rsp + 0x34], 0xa54ff53a
mov dword [rsp + 0x38], 0x510e527f
mov dword [rsp + 0x3c], 0x9b05688c
mov dword [rsp + 0x40], 0x1f83d9ab
mov dword [rsp + 0x44], 0x5be0cd19
jmp 0x180015bd6
mov dword [rsp + 0x28], 0xc1059ed8
mov dword [rsp + 0x2c], 0x367cd507
mov dword [rsp + 0x30], 0x3070dd17
mov dword [rsp + 0x34], 0xf70e5939
mov dword [rsp + 0x38], 0xffc00b31
mov dword [rsp + 0x3c], 0x68581511
mov dword [rsp + 0x40], 0x64f98fa7
mov dword [rsp + 0x44], 0xbefa4fa4
lea rdx, [rbp - 0x38]
lea rcx, [rsp + 0x20]
mov r14d, 0x40
mov dword [rbp + 8], edi
mov dword [rsp + 0x20], r14d
call fcn.180012b40
movsxd r15, r15d
lea rdi, [rbp + 0x10]
test r15, r15
je 0x180015cb9
mov eax, dword [rsp + 0x20]
mov qword [rsp + 0x160], r12
mov r12d, eax
add eax, r15d
and r12d, 0x3f
mov dword [rsp + 0x20], eax
sub r14d, r12d
cmp eax, r15d
jae 0x180015c28
inc dword [rsp + 0x24]
test r12d, r12d
je 0x180015c65
cmp r15, r14
jb 0x180015c65
mov eax, r12d
lea rcx, [rsp + 0x48]
lea rdx, [rbp + 0x10]
add rcx, rax
mov r8, r14
call fcn.18001cfc0
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x20]
call fcn.180012b40
lea rdi, [rbp + 0x10]
sub r15, r14
add rdi, r14
xor r12d, r12d
cmp r15, 0x40
jb 0x180015c96
mov r14, r15
shr r14, 6
imul rax, r14, 0xffffffffffffffc0
add r15, rax
nop dword [rax]
lea rcx, [rsp + 0x20]
mov rdx, rdi
call fcn.180012b40
add rdi, 0x40
dec r14
jne 0x180015c80
test r15, r15
je 0x180015cb1
mov eax, r12d
lea rcx, [rsp + 0x48]
mov r8, r15
add rcx, rax
mov rdx, rdi
call fcn.18001cfc0
mov r12, qword [rsp + 0x160]
lea rcx, [rsp + 0x20]
mov rdx, r13
call fcn.1800151c0
mov r15, qword [rsp + 0x148]
mov r14, qword [rsp + 0x150]
mov r13, qword [rsp + 0x158]
mov rdi, qword [rsp + 0x168]
lea rax, [rbp + 0x10]
nop word [rax + rax]
mov byte [rax], 0
lea rax, [rax + 1]
dec rbx
jne 0x180015cf0
mov rbx, qword [rsp + 0x170]
lea rax, [rsp + 0x20]
nop dword [rax]
mov byte [rax], 0
lea rax, [rax + 1]
dec rsi
jne 0x180015d10
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.180023020
add rsp, 0x178
pop rsi
pop rbp
ret
Function at 0x180015d40
Capabilities:
Hash data using sha384
Hash data using sha512

Disassembly:
xor eax, eax
mov qword [rcx], rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x1d0], edx
test edx, edx
jne 0x180015dc4
movabs rax, 0x6a09e667f3bcc908
mov qword [rcx + 0x10], rax
movabs rax, 0xbb67ae8584caa73b
mov qword [rcx + 0x18], rax
movabs rax, 0x3c6ef372fe94f82b
mov qword [rcx + 0x20], rax
movabs rax, 0xa54ff53a5f1d36f1
mov qword [rcx + 0x28], rax
movabs rax, 0x510e527fade682d1
mov qword [rcx + 0x30], rax
movabs rax, 0x9b05688c2b3e6c1f
mov qword [rcx + 0x38], rax
movabs rax, 0x1f83d9abfb41bd6b
mov qword [rcx + 0x40], rax
movabs rax, 0x5be0cd19137e2179
mov qword [rcx + 0x48], rax
ret
movabs rax, 0xcbbb9d5dc1059ed8
mov qword [rcx + 0x10], rax
movabs rax, 0x629a292a367cd507
mov qword [rcx + 0x18], rax
movabs rax, 0x9159015a3070dd17
mov qword [rcx + 0x20], rax
movabs rax, 0x152fecd8f70e5939
mov qword [rcx + 0x28], rax
movabs rax, 0x67332667ffc00b31
mov qword [rcx + 0x30], rax
movabs rax, 0x8eb44a8768581511
mov qword [rcx + 0x38], rax
movabs rax, 0xdb0c2e0d64f98fa7
mov qword [rcx + 0x40], rax
movabs rax, 0x47b5481dbefa4fa4
mov qword [rcx + 0x48], rax
ret
Function at 0x180016bb0
Capabilities:
Authenticate hmac

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x250
mov rax, qword [0x18003db28]
xor rax, rsp
mov qword [rsp + 0x240], rax
mov r15d, r9d
mov rbp, r8
mov rbx, rdx
mov r14, rcx
mov edi, 0x40
cmp r8, 0x80
jbe 0x180016c63
mov esi, 0x1d8
lea rcx, [rsp + 0x20]
xor edx, edx
mov r8d, esi
call fcn.18001cca0
lea rcx, [rsp + 0x20]
mov edx, r15d
call fcn.180015d40
lea rcx, [rsp + 0x20]
mov r8, rbp
mov rdx, rbx
call fcn.1800163d0
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x20]
call fcn.1800164b0
lea rax, [rsp + 0x20]
nop word [rax + rax]
mov byte [rax], 0
lea rax, [rax + 1]
dec rsi
jne 0x180016c40
mov rbp, rdi
mov eax, gethostbyname
test r15d, r15d
cmovne rbp, rax
lea rbx, [rsp + 0x200]
mov edx, gethostname
lea rsi, [r14 + 0xd0]
lea r8d, [rdx + 0x4a]
mov rcx, rsi
call fcn.18001cca0
mov edx, 0x5c
lea rcx, [r14 + 0x150]
lea r8d, [rdx + 0x24]
call fcn.18001cca0
test rbp, rbp
je 0x180016cc8
mov rax, r14
sub rax, rbx
lea rcx, [rax + 0xd0]
lea rdx, [rax + 0x150]
nop dword [rax]
movzx eax, byte [rbx]
lea rbx, [rbx + 1]
xor byte [rcx + rbx - 1], al
movzx eax, byte [rbx - 1]
xor byte [rdx + rbx - 1], al
dec rbp
jne 0x180016cb0
mov edx, r15d
mov rcx, r14
call fcn.180015d40
mov r15d, dword [r14]
sub qword [r14], 0xffffffffffffff80
mov ebp, 0x80
and r15d, 0x7f
mov ebx, ebp
sub ebx, r15d
cmp qword [r14], rbp
jae 0x180016cf1
inc qword [r14 + 8]
test r15d, r15d
je 0x180016d2e
cmp rbx, rbp
ja 0x180016d2e
mov eax, r15d
lea rcx, [r14 + 0x50]
mov r8, rbx
add rcx, rax
mov rdx, rsi
call fcn.18001cfc0
lea rdx, [r14 + 0x50]
mov rcx, r14
call fcn.180015e40
sub rbp, rbx
add rsi, rbx
xor r15d, r15d
cmp rbp, 0x80
jb 0x180016d54
mov rbx, rbp
shr rbx, 7
imul rax, rbx, 0xffffffffffffff80
add rbp, rax
nop dword [rax]
mov rdx, rsi
mov rcx, r14
call fcn.180015e40
sub rsi, 0xffffffffffffff80
dec rbx
jne 0x180016d40
test rbp, rbp
je 0x180016d6e
mov eax, r15d
lea rcx, [r14 + 0x50]
mov r8, rbp
add rcx, rax
mov rdx, rsi
call fcn.18001cfc0
lea rax, [rsp + 0x200]
nop word [rax + rax]
mov byte [rax], 0
lea rax, [rax + 1]
dec rdi
jne 0x180016d80
mov rcx, qword [rsp + 0x240]
xor rcx, rsp
call fcn.180023020
mov rbx, qword [rsp + 0x298]
add rsp, 0x250
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
Function at 0x1800188e0
Capabilities:
Hash data using sha1

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
sub rsp, 0x110
mov rax, qword [0x18003db28]
xor rax, rsp
mov qword [rsp + 0x100], rax
mov rbp, rcx
mov rsi, r8
mov rdi, rdx
mov ebx, 0xdc
lea rcx, [rsp + 0x20]
xor edx, edx
mov r8d, ebx
call fcn.18001cca0
xor eax, eax
mov dword [rsp + 0x28], 0x67452301
mov dword [rsp + 0x2c], 0xefcdab89
mov dword [rsp + 0x30], 0x98badcfe
mov dword [rsp + 0x34], 0x10325476
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x38], 0xc3d2e1f0
test rdi, rdi
je 0x180018962
lea rcx, [rsp + 0x20]
mov r8, rdi
mov rdx, rbp
call fcn.1800185f0
lea rcx, [rsp + 0x20]
mov rdx, rsi
call fcn.1800186c0
lea rax, [rsp + 0x20]
mov byte [rax], 0
lea rax, [rax + 1]
dec rbx
jne 0x180018974
mov rcx, qword [rsp + 0x100]
xor rcx, rsp
call fcn.180023020
mov rbx, qword [rsp + 0x148]
add rsp, 0x110
pop rdi
pop rsi
pop rbp
ret

Function at 0x180018c00
Capabilities:
Hash data using sha1

Disassembly:
mov qword [rsp + 0x20], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x18003db28]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov r10, r8
mov r9, rdx
mov rdi, rcx
mov ebx, 0x14
cmp r8, 0x40
jbe 0x180018c45
lea r8, [rsp + 0x20]
mov rdx, r10
mov rcx, r9
call fcn.1800188e0
mov r10d, ebx
lea r9, [rsp + 0x20]
movabs rax, 0x3636363636363636
lea rdx, [rdi + 0x5c]
mov qword [rdx], rax
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rax
mov qword [rdx + 0x20], rax
mov qword [rdx + 0x28], rax
mov qword [rdx + 0x30], rax
mov qword [rdx + 0x38], rax
movabs rax, 0x5c5c5c5c5c5c5c5c
mov qword [rdi + 0x9c], rax
mov qword [rdi + 0xa4], rax
mov qword [rdi + 0xac], rax
mov qword [rdi + 0xb4], rax
mov qword [rdi + 0xbc], rax
mov qword [rdi + 0xc4], rax
mov qword [rdi + 0xcc], rax
mov qword [rdi + 0xd4], rax
test r10, r10
je 0x180018cec
mov rax, rdi
sub rax, r9
lea rcx, [rax + 0x5c]
lea r8, [rax + 0x9c]
nop word [rax + rax]
movzx eax, byte [r9]
lea r9, [r9 + 1]
xor byte [rcx + r9 - 1], al
movzx eax, byte [r9 - 1]
xor byte [r8 + r9 - 1], al
dec r10
jne 0x180018cd0
mov rcx, rdi
mov dword [rdi + 4], 0
mov dword [rdi + 8], 0x67452301
mov dword [rdi + 0xc], 0xefcdab89
mov dword [rdi + 0x10], 0x98badcfe
mov dword [rdi + 0x14], 0x10325476
mov dword [rdi + 0x18], 0xc3d2e1f0
mov dword [rdi], 0x40
call fcn.180017260
lea rax, [rsp + 0x20]
nop dword [rax]
mov byte [rax], 0
lea rax, [rax + 1]
dec rbx
jne 0x180018d30
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.180023020
mov rbx, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret
Function at 0x180018d60
Capabilities:
Hash data using sha1

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x40
mov rax, qword [0x18003db28]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov r12, rdx
lea rdx, [rsp + 0x20]
mov r14, rcx
call fcn.1800186c0
mov ebx, 0x40
lea rdx, [r14 + 0x9c]
mov r8d, ebx
mov rcx, r14
mov qword [r14], 0
mov dword [r14 + 8], 0x67452301
mov dword [r14 + 0xc], 0xefcdab89
mov dword [r14 + 0x10], 0x98badcfe
mov dword [r14 + 0x14], 0x10325476
mov dword [r14 + 0x18], 0xc3d2e1f0
call fcn.1800185f0
mov eax, dword [r14]
mov edi, 0x14
lea rsi, [rsp + 0x20]
mov r15d, eax
add eax, edi
mov ebp, edi
and r15d, 0x3f
mov dword [r14], eax
sub ebx, r15d
cmp eax, edi
jae 0x180018e01
inc dword [r14 + 4]
test r15d, r15d
je 0x180018e69
cmp rbx, rdi
ja 0x180018e69
mov eax, r15d
lea rcx, [r14 + 0x1c]
lea rdx, [rsp + 0x20]
add rcx, rax
mov r8, rbx
call fcn.18001cfc0
lea rdx, [r14 + 0x1c]
mov rcx, r14
call fcn.180017260
lea rsi, [rsp + 0x20]
sub rbp, rbx
add rsi, rbx
xor r15d, r15d
cmp rbp, 0x40
jb 0x180018e64
mov rbx, rbp
shr rbx, 6
imul rax, rbx, 0xffffffffffffffc0
add rbp, rax
mov rdx, rsi
mov rcx, r14
call fcn.180017260
add rsi, 0x40
dec rbx
jne 0x180018e50
test rbp, rbp
je 0x180018e7e
mov eax, r15d
lea rcx, [r14 + 0x1c]
mov r8, rbp
add rcx, rax
mov rdx, rsi
call fcn.18001cfc0
mov rdx, r12
mov rcx, r14
call fcn.1800186c0
lea rax, [rsp + 0x20]
nop
mov byte [rax], 0
lea rax, [rax + 1]
dec rdi
jne 0x180018e90
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.180023020
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
Function at 0x18001a450
Capabilities:
Hash data with md5

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
sub rsp, 0x110
mov rax, qword [0x18003db28]
xor rax, rsp
mov qword [rsp + 0x100], rax
mov rbp, rcx
mov rsi, r8
mov rdi, rdx
mov ebx, 0xd8
lea rcx, [rsp + 0x20]
xor edx, edx
mov r8d, ebx
call fcn.18001cca0
xor eax, eax
mov dword [rsp + 0x28], 0x67452301
mov dword [rsp + 0x2c], 0xefcdab89
mov dword [rsp + 0x30], 0x98badcfe
mov dword [rsp + 0x34], 0x10325476
mov qword [rsp + 0x20], rax
test rdi, rdi
je 0x18001a4ca
lea rcx, [rsp + 0x20]
mov r8, rdi
mov rdx, rbp
call fcn.18001a180
lea rcx, [rsp + 0x20]
mov rdx, rsi
call fcn.18001a250
lea rax, [rsp + 0x20]
nop dword [rax]
mov byte [rax], 0
lea rax, [rax + 1]
dec rbx
jne 0x18001a4e0
mov rcx, qword [rsp + 0x100]
xor rcx, rsp
call fcn.180023020
mov rbx, qword [rsp + 0x148]
add rsp, 0x110
pop rdi
pop rsi
pop rbp
ret

Function at 0x18001a750
Capabilities:
Encode data using xor
Hash data with md5

Disassembly:
mov qword [rsp + 0x20], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x18003db28]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov r10, r8
mov r9, rdx
mov rdi, rcx
mov ebx, 0x10
cmp r8, 0x40
jbe 0x18001a795
lea r8, [rsp + 0x20]
mov rdx, r10
mov rcx, r9
call fcn.18001a450
mov r10d, ebx
lea r9, [rsp + 0x20]
movabs rax, 0x3636363636363636
lea rdx, [rdi + 0x58]
mov qword [rdx], rax
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rax
mov qword [rdx + 0x20], rax
mov qword [rdx + 0x28], rax
mov qword [rdx + 0x30], rax
mov qword [rdx + 0x38], rax
movabs rax, 0x5c5c5c5c5c5c5c5c
mov qword [rdi + 0x98], rax
mov qword [rdi + 0xa0], rax
mov qword [rdi + 0xa8], rax
mov qword [rdi + 0xb0], rax
mov qword [rdi + 0xb8], rax
mov qword [rdi + 0xc0], rax
mov qword [rdi + 0xc8], rax
mov qword [rdi + 0xd0], rax
test r10, r10
je 0x18001a83c
mov rax, rdi
sub rax, r9
lea rcx, [rax + 0x58]
lea r8, [rax + 0x98]
nop word [rax + rax]
movzx eax, byte [r9]
lea r9, [r9 + 1]
xor byte [rcx + r9 - 1], al
movzx eax, byte [r9 - 1]
xor byte [r8 + r9 - 1], al
dec r10
jne 0x18001a820
mov rcx, rdi
mov dword [rdi + 4], 0
mov dword [rdi + 8], 0x67452301
mov dword [rdi + 0xc], 0xefcdab89
mov dword [rdi + 0x10], 0x98badcfe
mov dword [rdi + 0x14], 0x10325476
mov dword [rdi], 0x40
call fcn.180019790
lea rax, [rsp + 0x20]
mov byte [rax], 0
lea rax, [rax + 1]
dec rbx
jne 0x18001a872
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.180023020
mov rbx, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret