joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14008f0f0
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
cmp dword [0x140142084], 0
jne 0x14008f1e6
mov rcx, rcx
xor edx, edx
lea r8, [0x140142080]
nop word [rax + rax]
mov ecx, edx
mov rbp, rbp
lea r8, [r8 + 4]
and ecx, 1
mov eax, edx
xchg rcx, rcx
shr eax, 1
neg ecx
and ecx, 0xedb88320
inc edx
mov dword [rsp - 0x44], esi
xor ecx, eax
mov eax, ecx
shr ecx, 1
and eax, 1
mov dword [rsp - 0x18], edi
neg eax
and eax, 0xedb88320
xor eax, ecx
mov ecx, eax
mov r14, r14
shr eax, 1
and ecx, 1
neg ecx
mov r15, r15
and ecx, 0xedb88320
xor ecx, eax
mov eax, ecx
shr ecx, 1
mov rsi, rsi
and eax, 1
neg eax
and eax, 0xedb88320
xor eax, ecx
xchg rsp, rsp
mov ecx, eax
shr eax, 1
and ecx, 1
mov dword [rsp - 0x2c], 0x147396af
neg ecx
and ecx, 0xedb88320
xor ecx, eax
mov eax, ecx
mov rsi, rsi
shr ecx, 1
and eax, 1
neg eax
and eax, 0xedb88320
mov r13, r13
xor eax, ecx
mov ecx, eax
shr eax, 1
and ecx, 1
mov dword [rsp - 0x34], ebx
neg ecx
and ecx, 0xedb88320
xor ecx, eax
mov eax, ecx
mov dword [rsp - 0x14], ebx
shr ecx, 1
and eax, 1
neg eax
mov dword [rsp - 0x34], esp
and eax, 0xedb88320
xor eax, ecx
mov dword [r8 - 4], eax
xchg rdx, rdx
cmp edx, 0x100
jb 0x14008f113
ret
Function at 0x1400942e0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r11, r11
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r15
nop
sub rsp, 0x3f2124d8
add rsp, 0x3f2124b8
movzx eax, byte [rdx + 1]
xchg r8, r15
mov r8, r15
xchg r8, r15
movzx ebx, byte [rdx]
xchg rsi, rsi
movzx edi, byte [rdx + 4]
mov r8d, dword [rcx + 4]
shl ebx, 3
shl ebx, 3
shl ebx, 1
shl ebx, 1
dec r8d
or ebx, eax
mov dword [rsp - 0x24], 0x39d8bcd9
shl edi, 3
shl edi, 3
shl edi, 2
movzx eax, byte [rdx + 2]
shl ebx, 2
shl ebx, 6
or ebx, eax
movzx eax, byte [rdx + 3]
mov dword [rsp - 0x40], esp
shl ebx, 4
shl ebx, 3
shl ebx, 1
or ebx, eax
xchg rdx, rdx
movzx eax, byte [rdx + 5]
or edi, eax
movzx eax, byte [rdx + 6]
shl edi, 5
shl edi, 2
shl edi, 1
or edi, eax
mov dword [rsp - 0x18], 0x280939fc
movzx eax, byte [rdx + 7]
shl edi, 3
shl edi, 2
shl edi, 2
shl edi, 1
or edi, eax
test r8d, r8d
jle 0x140094430
mov dword [rsp - 0x30], ecx
mov rdx, qword [rcx + 8]
lea r14d, [r8 - 1]
movsxd rax, r8d
mov dword [rsp - 0x28], edx
shr r14d, 1
inc r14d
lea rcx, [rax + rax*2]
lea eax, [r8 - 1]
mov rsp, rsp
lea rsi, [rdx + rcx*4]
movsxd rcx, eax
lea rax, [rcx + rcx*2]
mov r12, r12
lea rbp, [rdx + rax*4]
xchg rdx, rsi
mov rsi, rdx
xchg rsi, rdx
mov ecx, edi
call fcn.140094b30
mov dword [rsp - 0x1c], 0x24edbc8e
xor ebx, eax
xchg rbp, rdx
mov rbp, rdx
xchg rbp, rdx
mov ecx, ebx
call fcn.140094b30
mov dword [rsp - 0x40], 0x3785db56
xor edi, eax
add rsi, 0xffffffffffffffe8
add rbp, 0xffffffffffffffe8
sub r14, 1
mov dword [rsp - 0x28], edi
jne 0x1400943e6
lea rax, [r15 + 7]
mov ecx, 0x206c6e1
add ecx, 0x610bbf11
add ecx, 0xad018fb
sub ecx, 0x6de29ee9
mov byte [rax - 4], dil
mov byte [rax], bl
mov dword [rsp - 0x38], 0x44afea35
dec rax
shr ebx, 2
shr ebx, 3
shr ebx, 2
shr ebx, 1
shr edi, 4
shr edi, 2
shr edi, 1
shr edi, 1
sub rcx, 1
jne 0x14009444b
mov rbx, qword [rsp + 0x40]
mov dword [rsp - 0x38], edx
xchg rbx, rbp
mov rbx, qword [rsp + 0x48]
xchg rbp, rbx
xchg rsi, rbp
mov rbp, qword [rsp + 0x50]
xchg rsi, rbp
add rsp, 0x20
mov dword [rsp - 0x14], 0x21c5415a
pop r15
nop
mov r14, qword [rsp]
add rsp, 8
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400944bc
Capabilities:
Encode data using xor

Disassembly:
xchg rsp, r10
mov rax, r10
xchg rsp, r10
xchg rbx, rdi
mov qword [rax + 8], rdi
xchg rdi, rbx
mov qword [rax + 0x10], rbp
mov dword [rsp - 0x20], esp
xchg rsi, r14
mov qword [rax + 0x18], r14
xchg r14, rsi
mov qword [rax + 0x20], rdi
mov r14, r14
push r14
sub rsp, 0x20
movzx eax, byte [rdx + 1]
xchg r14, r8
mov r8, r14
xchg r14, r8
movzx ebx, byte [rdx]
mov dword [rsp - 0xc], esi
movzx edi, byte [rdx + 4]
shl ebx, 1
shl ebx, 1
shl ebx, 6
or ebx, eax
shl edi, 3
shl edi, 1
shl edi, 4
movzx eax, byte [rdx + 2]
shl ebx, 5
shl ebx, 1
shl ebx, 1
shl ebx, 1
or ebx, eax
movzx eax, byte [rdx + 3]
shl ebx, 7
shl ebx, 1
or ebx, eax
movzx eax, byte [rdx + 5]
mov dword [rsp - 0x14], ecx
or edi, eax
movzx eax, byte [rdx + 6]
shl edi, 5
shl edi, 1
shl edi, 1
shl edi, 1
or edi, eax
mov dword [rsp - 0x3c], esi
movzx eax, byte [rdx + 7]
shl edi, 8
or edi, eax
mov eax, dword [rcx + 4]
mov dword [rsp - 0xc], 0x7e350f18
test eax, eax
jle 0x1400945bf
xchg rsi, rsp
mov rsp, qword [rcx + 8]
xchg rsp, rsi
lea ebp, [rax - 1]
mov dword [rsp - 0x2c], 0x6a22b61a
shr ebp, 1
inc ebp
mov rdx, rsi
mov ecx, edi
xchg rsp, rsp
call fcn.140094b30
xor ebx, eax
lea rdx, [rsi + 0xc]
mov ecx, ebx
mov rcx, rcx
call fcn.140094b30
xor edi, eax
nop
sub rsi, 0x356f841e
add rsi, 0x356f8436
sub rbp, 1
mov dword [rsp - 0x10], edi
jne 0x140094583
lea rax, [r14 + 7]
mov ecx, 0x700db87f
add ecx, 0x5ada704
sub ecx, 0x189fa28e
sub ecx, 0x5bf3cf43
xor ecx, 0x127edb6
mov byte [rax - 4], dil
xchg rsp, rsp
mov byte [rax], bl
dec rax
shr ebx, 4
shr ebx, 3
shr ebx, 1
shr edi, 3
shr edi, 5
sub rcx, 1
jne 0x1400945e0
mov dword [rsp - 0x40], 0x65bf47ff
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov dword [rsp - 0x40], 0x47205004
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
nop
mov r14, qword [rsp]
add rsp, 8
ret
Function at 0x1400947fc
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp - 0x44], edi
xchg rsi, rbx
mov qword [rsp + 0x18], rbx
xchg rsi, rbx
nop
sub rsp, 8
mov qword [rsp], rbp
push rcx
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r14
lea rbp, [rsp - 0x47]
add rsp, 0xffffffffffffff60
movdqa xmm0, xmmword [0x140001e30]
mov rcx, rcx
xor edi, edi
movdqa xmm1, xmmword [0x140001dc0]
xchg rdi, rbx
mov rdi, rdx
xchg rbx, rdi
xchg rsi, rbp
movdqu xmmword [rsi - 0x39], xmm0
xchg rsi, rbp
xchg rcx, r8
mov rsi, r8
xchg rcx, r8
mov edx, edi
xchg r10, r10
movdqa xmm0, xmmword [0x140001dd0]
mov r8d, edi
movdqu xmmword [rbp - 0x29], xmm1
xchg rsp, rsp
movdqa xmm1, xmmword [0x140001db0]
xchg rsp, rbp
movdqu xmmword [rsp - 0x19], xmm0
xchg rsp, rbp
xchg rbp, r15
movdqu xmmword [r15 - 9], xmm1
xchg rbp, r15
mov ecx, edx
mov dword [rsp - 0x40], 0x20adae60
lea r8, [r8 + 4]
mov eax, 0x25d2323e
add eax, 0x53ad489
add eax, 0x175beabe
add eax, 0x2caeb03b
sub eax, 0x52e37d18
inc rdx
rol eax, cl
xor eax, dword [rbp + r8 - 0x3d]
mov dword [rsp - 0x34], ecx
mov dword [rbp + r8 + 3], eax
cmp rdx, 0x10
jb 0x14009489d
mov dword [rsp - 0x28], edi
cmp dword [rsi + 4], 8
jne 0x14009494a
lea rdx, [rbp + 0x6d]
movzx ecx, byte [rbx + rdi*2]
xchg r10, r10
movzx eax, byte [rbx + rdi*2 + 1]
inc rdi
shl cx, 5
shl cx, 2
shl cx, 1
or cx, ax
mov word [rdx], cx
mov dword [rsp - 0x38], ebx
lea rdx, [rdx - 2]
cmp rdi, 4
jl 0x1400948f3
mov dword [rsp - 0x3c], esi
lea r9, [rbp + 7]
xor r8d, r8d
lea rdx, [rbp + 0x67]
xchg rbp, rcx
mov rbp, rsi
xchg rcx, rbp
call fcn.14009463c
mov r14, r14
jmp 0x140094a20
cmp dword [rsi], edi
jle 0x140094a20
mov dword [rsp - 0x28], 0x2c7c4ff9
mov r14d, edi
lea rdx, [rbp + 0x6d]
mov r8d, 0x6aacdc41
sub r8d, 0x43cbfdae
sub r8d, 0x2ffdb6a
xor r8d, 0x76e4f9f5
sub r8d, 0x5505fad8
movzx eax, byte [rbx]
movzx ecx, byte [rbx + 1]
mov rbx, rbx
nop
add rbx, 0x505da339
sub rbx, 0x505da337
shl ax, 1
shl ax, 4
shl ax, 2
shl ax, 1
or cx, ax
mov word [rdx], cx
mov dword [rsp - 0x3c], 0x5844033c
lea rdx, [rdx - 2]
sub r8, 1
jne 0x140094983
lea r9, [rbp + 7]
mov r14, r14
mov r8d, r14d
lea rdx, [rbp + 0x67]
mov rcx, rsi
call fcn.14009463c
mov dword [rsp - 0x18], ecx
mov r8d, dword [rsi + 4]
lea r9, [rbp + 0x27]
sub r8d, r14d
lea rdx, [rbp + 0x67]
mov rcx, rcx
neg r8d
sub r8d, 0xfffffff8
neg r8d
mov rcx, rsi
call fcn.14009463c
xchg r12, r12
inc edi
nop
add r14d, 0x1271156f
sub r14d, 0x12711567
cmp edi, dword [rsi]
jl 0x14009495d
xor eax, eax
mov dword [rsp - 0x34], 0x7d0da3de
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x28]
lea rdi, [rbp + 7]
mov rsi, qword [r11 + 0x30]
mov dword [rsp - 0x2c], 0x61c54f15
lea ecx, [rax + 0x40]
rep stosb byte [rdi], al
xchg r8, r11
mov rsp, r8
xchg r11, r8
pop r14
xchg r11, r11
pop rdi
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x140094ae4
Capabilities:
Encode data using xor

Disassembly:
xor r10d, r10d
mov r11d, ecx
mov dword [rsp - 0x10], edi
test edx, edx
je 0x140094b2c
lea ecx, [r11 + r11]
mov dword [rsp - 0x20], 0x38317cf2
mov r9d, r10d
xor r9d, r11d
mov r11d, ecx
mov dword [rsp - 0x14], ebp
test dl, 1
cmove r9d, r10d
xor r11d, r8d
mov rdi, rdi
cmp ecx, 0x100
mov r10d, r9d
cmovb r11d, ecx
shr edx, 1
mov rsp, rsp
jne 0x140094af2
mov eax, r10d
ret
Function at 0x14009fe30
Capabilities:
Encode data using xor

Disassembly:
xchg rdx, rax
mov rdx, qword [rcx + 0xf8]
xchg rdx, rax
xor r8d, r8d
mov dword [rsp - 0x30], 0x50b9c902
mov r9, rdx
test rax, rax
je 0x14009fe98
mov ecx, r8d
mov rcx, rcx
mov edx, 0x4d126b5d
sub edx, 0x836eb38
xor edx, 0x7fd64984
sub edx, 0x1ed9a4f9
rol edx, cl
xor dl, byte [rax]
inc rax
mov dword [rsp - 0x1c], esi
mov byte [r8 + r9], dl
inc r8
cmp r8, 0x20
mov dword [rsp - 0x34], ecx
jb 0x14009fe52
mov al, 0x6b
sub al, 0x5e
xor al, 0x1a
xor al, 0x16
ret
mov rax, qword [rcx + 0x100]
test rax, rax
je 0x14009fed6
mov dword [rsp - 0x14], 0xc827bfb
xchg rdx, rax
movups xmm0, xmmword [rdx]
xchg rdx, rax
movups xmmword [rdx], xmm0
mov rsi, rsi
xchg rsi, rax
movups xmm1, xmmword [rsi + 0x10]
xchg rsi, rax
movups xmmword [rdx + 0x10], xmm1
mov dword [rsp - 0x30], 0x689fa395
jmp 0x14009fe8f
xorps xmm0, xmm0
xchg r9, r9
xor al, al
xchg rdx, rsi
movups xmmword [rsi], xmm0
xchg rsi, rdx
xchg rsp, rdx
movups xmmword [rsp + 0x10], xmm0
xchg rdx, rsp
ret
Function at 0x1400b68e8
Capabilities:
Encode data using xor

Disassembly:
xchg rdi, rsp
mov r11, rdi
xchg rsp, rdi
xchg r14, rbx
mov qword [r11 + 8], r14
xchg rbx, r14
mov qword [r11 + 0x18], rsi
mov dword [rsp - 0x40], 0x40560bc0
xchg rdi, rsp
mov qword [r11 + 0x20], rsp
xchg rsp, rdi
push r14
mov rdi, rdi
add rsp, 0xffffffffffffffc0
mov rax, qword [0x1401414c8]
lea rdx, [r11 + 0x10]
xchg r11, r11
not rax
mov dword [rsp + 0x58], 0x39bcec0a
xor dword [rsp + 0x58], 0x42f00336
sub dword [rsp + 0x58], 0x2d7061b8
xor dword [rsp + 0x58], 0x4ddc8d94
rol rax, 3
rol rax, 6
mov rbx, rcx
xchg rcx, rcx
movabs rcx, 0x239750de058a72bc
add rcx, 0x3bf4848e
xor rcx, 0x77080b33
add rcx, 0x6d95c2a2
sub rax, rcx
movabs rcx, 0x4a9219cf66e8155d
xor rcx, 0x772bb3ac
add rcx, 0x78e313d
add rcx, 0x7fffffff
add rcx, 0x59334c5a
ror rax, 5
ror rax, 6
ror rax, 2
ror rax, 5
ror rax, 2
ror rax, 1
ror rax, 1
not rax
mov rbp, rbp
rol rax, 0x12
rol rax, 3
rol rax, 1
rol rax, 2
rol rax, 1
rol rax, 1
add rax, rcx
lea rcx, [r11 - 0x28]
call rax
mov dword [rsp - 0x18], 0x1b49d095
lea rdi, [rbx + 8]
xorps xmm0, xmm0
xchg rdi, r14
mov qword [rbx], r14
xchg rdi, r14
xor esi, esi
xchg rdi, rcx
movups xmmword [rcx], xmm0
xchg rdi, rcx
movups xmmword [rdi + 0x10], xmm0
xchg rdi, rcx
movups xmmword [rcx + 0x20], xmm0
xchg rdi, rcx
test eax, eax
mov dword [rsp - 0x14], 0x35ac1323
jne 0x1400b6a2f
xchg r10, rsi
mov qword [rbx + 0x38], r10
xchg r10, rsi
jmp 0x1400b6b70
lea rax, [rsp + 0x20]
or r14, 0xffffffffffffffff
mov dword [rsp - 0x38], edx
inc r14
cmp word [rax + r14*2], si
jne 0x1400b6a3c
mov qword [rbx + 0x38], r14
mov dword [rsp - 0x14], 0x6e636c09
cmp qword [rbx], rdi
je 0x1400b6a6d
xchg rcx, r12
mov r12, qword [rbx]
xchg rcx, r12
call fcn.140099570
cmp r14, 0x18
mov dword [rsp - 0xc], 0x67c37781
jbe 0x1400b6aae
lea rcx, [r14 + r14]
call fcn.140099820
mov qword [rbx], rax
mov rsi, rsi
test rax, rax
jne 0x1400b6abe
xchg rsi, rdi
mov qword [rbx], rsi
xchg rdi, rsi
xchg rcx, r11
mov r11, rsi
xchg r11, rcx
jmp 0x1400b6ae3
xchg rsp, rdi
mov qword [rbx], rsp
xchg rsp, rdi
mov rax, rdi
mov dword [rsp - 0x28], ecx
xorps xmm0, xmm0
xchg r9, rax
movups xmmword [r9], xmm0
xchg r9, rax
xchg rdx, rax
movups xmmword [rdx + 0x10], xmm0
xchg rdx, rax
xchg r14, rax
movups xmmword [r14 + 0x20], xmm0
xchg r14, rax
xchg rcx, r12
mov r12, qword [rbx]
xchg rcx, r12
mov edx, 0x17b1edd2
add edx, 0x4e767fad
sub edx, 0x176735e5
sub edx, 0x4d0df929
cmp qword [rbx + 0x38], rsi
xchg rbx, rbx
jbe 0x1400b6b70
lea r8, [rsp + 0x20]
sub r8, rcx
mov dword [rsp - 0x1c], 0x4b732627
movzx eax, dx
mov r9d, 0xc60b507
xor r9d, 0x1f02dc13
xor r9d, 0x635ba6d2
sub r9d, 0x7039cec7
and ax, r9w
mov dword [rsp - 0x38], 0x141a960a
ror edx, 3
ror edx, 3
ror edx, 1
ror edx, 1
xor ax, word [r8 + rcx]
inc rsi
mov dword [rsp - 0x1c], ebx
mov word [rcx], ax
lea rcx, [rcx + 2]
cmp rsi, qword [rbx + 0x38]
mov dword [rsp - 0x40], 0x6f5dca67
jb 0x1400b6b17
mov rsi, qword [rsp + 0x60]
xchg r8, rax
mov r8, rbx
xchg r8, rax
mov rbx, qword [rsp + 0x50]
mov dword [rsp - 0x20], ecx
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
nop
mov r14, qword [rsp]
add rsp, 8
ret
Function at 0x1400d9f20
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov rbx, rbx
mov qword [rsp + 0x20], rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rsp, rcx
mov rbp, rcx
xchg rsp, rcx
sub rsp, 0x50
mov rbx, rbx
xor esi, esi
mov dword [rbp - 0x30], 0x181ab71a
add dword [rbp - 0x30], 0x15e6a97b
xor dword [rbp - 0x30], 0x24eef6
sub dword [rbp - 0x30], 0x2dd88e3d
mov dword [rbp - 0x2c], 0x16e56c6e
xor dword [rbp - 0x2c], 0x7e066e97
sub dword [rbp - 0x2c], 0x2e502fa9
sub dword [rbp - 0x2c], 0x3a34d2cf
mov rbx, rcx
mov rcx, rcx
mov dword [rbp - 0x28], 0x7ac3ef48
xor dword [rbp - 0x28], 0x4dd01619
sub dword [rbp - 0x28], 0x33150021
add dword [rbp - 0x28], 0xccf025
sub dword [rbp - 0x28], 0x4bfe913
mov dword [rbp - 0x24], 0x7b28c74e
xor dword [rbp - 0x24], 0xf1a2a83
sub dword [rbp - 0x24], 0x16052504
add dword [rbp - 0x24], 0x1cc93201
sub dword [rbp - 0x24], 0x7a91fa2d
mov dword [rbp - 0x20], 0x44e6c228
xor dword [rbp - 0x20], 0x2a5a4804
xor dword [rbp - 0x20], 0x6aef8f7e
xor dword [rbp - 0x20], 0x7212bbdb
sub dword [rbp - 0x20], 0x75efbe6c
mov qword [rbp + 0x10], rsi
mov dword [rsp - 0x10], 0x1bce3458
xchg r11, rax
mov r11, qword [rbp + 0x10]
xchg r11, rax
xchg rcx, r14
mov r14, qword [rbp + 0x10]
xchg r14, rcx
xchg rbx, rax
mov rbx, qword [rbp + 0x10]
xchg rbx, rax
and cl, 3
mov dword [rsp - 0x14], 0x54fcbaa2
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov r8, r8
mov eax, 0x34baf29e
xor eax, 0x3623746f
add eax, 0x694fbc5c
sub eax, 0x6a3604dc
shr eax, cl
xchg r11, r11
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov dword [rsp - 0x44], ecx
mov word [rbp + rax*2 - 0x1c], cx
xchg r8, rax
mov r8, qword [rbp + 0x10]
xchg r8, rax
inc rax
xchg rsi, rax
mov qword [rbp + 0x10], rsi
xchg rsi, rax
xchg rbx, rax
mov rbx, qword [rbp + 0x10]
xchg rbx, rax
cmp rax, 0xa
mov r13, r13
jb 0x1400da009
xor edx, edx
mov word [rbp - 8], si
mov dword [rsp - 0x40], ebx
lea rcx, [rbp - 0x1c]
call fcn.14008bba0
mov r8, rax
xchg r8, r8
xchg r14, rax
mov qword [rbx + 0x200], r14
xchg r14, rax
xor eax, eax
mov rcx, rcx
lea rdi, [rbp - 0x1c]
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
xchg r11, r11
test r8, r8
je 0x1400da118
lea rdx, [rbx + 0x208]
mov dword [rsp - 0x24], 0x4187e6c6
xchg rcx, r9
mov r9, r8
xchg rcx, r9
call fcn.1400da75c
xchg rdi, rdi
test al, al
jne 0x1400da110
mov rcx, qword [rbx + 0x200]
call fcn.14008e150
xchg rbp, rbp
xor al, al
xchg rsi, rbp
mov qword [rbx + 0x200], rbp
xchg rsi, rbp
jmp 0x1400da118
mov al, 0x3d
add al, 0x2f
xor al, 4
sub al, 0x67
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
mov dword [rsp - 0x28], 0x2fe38c37
nop
add rsp, 0xdbf92ac
sub rsp, 0xdbf925c
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x1400da574
Capabilities:
Encode data using xor

Disassembly:
xchg r15, rbx
mov qword [rsp + 0x10], r15
xchg rbx, r15
nop
sub rsp, 8
mov qword [rsp], rdi
add rsp, 0x7f8e60cb
sub rsp, 0x7f8e620b
xchg r14, rdi
mov r14, r8
xchg r14, rdi
mov rbx, rcx
mov r8d, 0x10e17139
add r8d, 0x54411662
sub r8d, 0xe603f58
xor r8d, 0xb99664
xor r8d, 0x567bdf27
lea rcx, [rsp + 0x40]
xor edx, edx
mov dword [rsp - 0x34], ecx
call fcn.140099b40
xchg r11, rax
mov r11, qword [rbx + 0x238]
xchg r11, rax
lea r8, [rsp + 0x40]
xchg r12, r12
mov edx, dword [rdi + 0x10]
not rax
rol rax, 4
rol rax, 5
rol rax, 1
rol rax, 1
movabs rcx, 0xcc7da0ca4b7854c9
sub rcx, 0x1100099e
xor rcx, 0x4caf2e09
xor rcx, 0x4f60f9d
sub rcx, 0x63be4bc5
xor rax, rcx
mov dword [rsp + 0x30], 0x1a902c9
add dword [rsp + 0x30], 0x7d55584
xor dword [rsp + 0x30], 0x48d981f1
xor dword [rsp + 0x30], 0x775dfd15
sub dword [rsp + 0x30], 0x36fa24a7
and dword [rsp + 0x28], 0
mov r9d, 0x39eba552
add r9d, 0x1836273b
add r9d, 0x6515fb4
sub r9d, 0x3c1a1136
sub r9d, 0x1c591a0b
mov rcx, qword [rdi + 0x20]
and qword [rsp + 0x20], 0
xchg r11, r11
ror rax, 0x12
ror rax, 1
ror rax, 1
ror rax, 1
call rax
test eax, eax
mov dword [rsp - 0x20], esp
jne 0x1400da735
or eax, 0xffffffff
lea rbx, [rsp + 0x40]
cmp byte [rsp + 0x40], 0
mov dword [rsp - 0x28], edi
mov dword [rsp + 0x150], eax
je 0x1400da700
xchg rdx, r12
mov r12, rbx
xchg r12, rdx
lea rcx, [rsp + 0x150]
mov r8d, 0x22de1585
add r8d, 0x39d9928c
xor r8d, 0x11eade3a
sub r8d, 0x4d5d762a
inc rbx
call fcn.14008ed90
mov r13, r13
cmp byte [rbx], 0
jne 0x1400da6b9
mov eax, dword [rsp + 0x150]
not eax
mov dword [rsp - 0x2c], ecx
cmp eax, 0xa2ca6717
je 0x1400da726
cmp eax, 0xd7b7e7a8
sete al
mov dword [rsp - 0x40], 0x53970671
jmp 0x1400da73b
mov al, 0x5d
sub al, 0x10
sub al, 9
sub al, 0x3a
xor al, 0xb
jmp 0x1400da73b
xor al, al
mov dword [rsp - 0x38], esp
mov rbx, qword [rsp + 0x158]
sub rsp, 0x31bfea46
add rsp, 0x31bfeb86
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x1400ded90
Capabilities:
Encrypt data using curve25519

Disassembly:
mov qword [rsp + 8], rbx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
add rsp, 0xffffffffffffff40
mov dword [rsp - 0x24], ebx
xchg r10, rax
mov r10, r8
xchg r10, rax
xchg rdx, rbx
mov rdx, rbx
xchg rbx, rdx
xchg rbx, rdx
mov r8, rbx
xchg rbx, rdx
xchg r11, rdi
mov r11, rcx
xchg r11, rdi
mov edx, 0x5914f721
xor edx, 0x5267ca4d
xor edx, 0x63d84f0a
sub edx, 0x68ab7246
xchg rbx, rax
mov rcx, rbx
xchg rbx, rax
call fcn.1400df5b0
movzx eax, byte [rbx + 0x1f]
mov r12, r12
lea rcx, [rsp + 0x20]
and byte [rbx], 0xf8
and al, 0x3f
or al, 0x40
mov r11, r11
mov rdx, rbx
mov byte [rbx + 0x1f], al
call fcn.1400e2be0
xchg r13, r13
lea rdx, [rsp + 0x20]
xchg rsp, rdi
mov rcx, rsp
xchg rdi, rsp
call fcn.1400e2b10
xchg rbx, rbp
mov rbp, qword [rsp + 0xd0]
xchg rbx, rbp
neg rsp
add rsp, 0xffffffffffffff40
neg rsp
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400f1714
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
nop
add rsp, 0x1d8190a3
sub rsp, 0x1d8190d3
mov dword [rcx + 8], 0x6f819099
xor dword [rcx + 8], 0x6d643e87
xor dword [rcx + 8], 0x2e5ae1f
lea r14, [rcx + 0x298]
xorps xmm0, xmm0
lea rax, [0x14000ba78]
mov qword [rcx], rax
mov rbp, rdx
lea rax, [r14 + 8]
mov rbx, rcx
mov qword [r14], rax
xor edi, edi
mov qword [rcx + 0x290], rdi
mov rsi, r8
movups xmmword [rax], xmm0
mov rcx, r14
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rdx, qword [r8 + 0x38]
mov qword [r14 + 0x38], rdx
call fcn.14001781c
mov r8d, edi
cmp qword [r14 + 0x38], rdi
jbe 0x1400f17bb
mov rcx, qword [rsi]
movzx edx, word [rcx + r8*2]
mov word [rax + r8*2], dx
inc r8
cmp r8, qword [r14 + 0x38]
jb 0x1400f17a1
mov ecx, dword [rsi + 0x40]
mov edx, 0x177ed316
xor edx, 0x73dea387
sub edx, 0x4c2f0e84
xor edx, 0x55743bf9
mov qword [rbx + 0x2e0], rdi
bts ecx, 0xe
mov dword [rbx + 0x2d8], ecx
mov r15d, 0x5d04e938
sub r15d, 0xfe1ad97
xor r15d, 0x2c2258cc
xor r15d, 0x143873b7
mov eax, dword [rsi + 0x54]
and ecx, 0x2000
xor eax, edx
mov dword [rbx + 0x2e8], eax
mov eax, dword [rsi + 0x58]
xor eax, edx
mov dword [rbx + 0x2ec], eax
mov eax, dword [rsi + 0x44]
xor eax, edx
mov dword [rbx + 0x2f0], eax
mov eax, dword [rsi + 0x48]
xor eax, edx
mov dword [rbx + 0x2f4], eax
mov rax, qword [rsi + 0x60]
mov qword [rbx + 0x2f8], rax
mov eax, dword [rsi + 0x4c]
xor eax, r15d
mov dword [rbx + 0x308], eax
mov eax, dword [rsi + 0x50]
xor eax, edx
mov byte [rbx + 0x310], dil
neg ecx
mov dword [rbx + 0x30c], eax
pushf
mov edx, 0x7012d616
xor edx, 0x723f7360
xor edx, 0x22da566
popf
mov qword [rbx + 0x318], rbp
sbb r14, r14
and r14, 0xffffffffffff0100
add r14, 0x246f39b7
sub r14, 0x246e39b8
mov rcx, r14
shl rcx, 4
call fcn.140099410
mov rcx, rax
mov rdx, r14
movaps xmm0, xmmword [0x140146620]
movups xmmword [rcx], xmm0
lea rcx, [rcx + 0x10]
sub rdx, 1
jne 0x1400f18a4
mov qword [rbx + 0x300], rax
mov rdx, rdi
mov rax, qword [rsi + 0x68]
inc rdi
mov ecx, dword [rax + rdx]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x20], xmm0
mov ecx, dword [rax + rdx + 4]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x24], xmm0
mov ecx, dword [rax + rdx + 8]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x28], xmm0
mov ecx, dword [rax + rdx + 0xc]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rbx + 0x300]
movss dword [rsp + 0x2c], xmm0
movups xmm1, xmmword [rsp + 0x20]
xorps xmm1, xmmword [0x140146620]
movups xmmword [rdx + rax], xmm1
lea rdx, [rdx + 0x10]
cmp rdi, r14
jl 0x1400f18c6
lea rcx, [rbp + 0xa0]
mov qword [rsp + 0x50], rbx
lea rdx, [rsp + 0x50]
call fcn.1400f13cc
mov rbp, qword [rsp + 0x60]
mov rax, rbx
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
nop
sub rsp, 0x40e9a3cc
add rsp, 0x40e9a3fc
pop r15
pop r14
pop rdi
ret
Function at 0x1400f31b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
neg rsp
sub rsp, 0xffffffffffffff50
neg rsp
mov rsi, rcx
lea rdx, [rcx + 0x298]
lea rcx, [rsp + 0x20]
call fcn.140074e80
or ebx, 0xffffffff
mov dword [rsp + 0xc0], ebx
mov rdi, qword [rax]
cmp byte [rdi], 0
je 0x1400f3229
mov rdx, rdi
lea rcx, [rsp + 0xc0]
mov r8d, 0x35fd09cb
xor r8d, 0x437db70d
sub r8d, 0x7680bec5
inc rdi
call fcn.14008ed90
cmp byte [rdi], 0
jne 0x1400f31f2
mov ebx, dword [rsp + 0xc0]
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
not ebx
cmp rcx, rax
jne 0x1400f325d
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x4ee7d0fc
sub ecx, 0x3753ec4c
sub ecx, 0x1793e430
rep stosb byte [rdi], al
jmp 0x1400f3262
call fcn.140099570
mov eax, dword [rsi + 0x2f0]
lea r11, [rsp + 0xb0]
xor eax, 0x59f4
shl eax, 0x10
or eax, dword [rsi + 0x2d8]
mov rsi, qword [r11 + 0x20]
xor eax, ebx
mov rbx, qword [r11 + 0x18]
xor eax, 2
mov rsp, r11
pop rdi
ret

Function at 0x1400f33a0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x7b882009
sub r10d, 0x408cf6b3
xor r10d, 0x1f512949
xor r10d, 0x68af59eb
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x753910da
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x1400f343d
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140146620]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x1400f3401
mov eax, r9d
ret

Function at 0x1400f3534
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x6a89edfe
add r10d, 0x12f538b3
sub r10d, 0x1baeaae7
sub r10d, 0x14cb21d6
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x753910da
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x1400f35d9
mov r10, qword [rcx + 0x300]
movzx eax, ax
add rdx, 2
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140146620]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x1400f359a
mov eax, r9d
ret