joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140143880
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov r8, qword [rcx + 8]
mov al, 1
test r8, r8
je 0x14014398e
mov rcx, qword [rcx]
movzx r9d, byte [rcx]
mov r10, qword [rdx]
movzx r10d, byte [r10]
not r10b
test r9b, r10b
jne 0x14014398e
mov r10, qword [rdx + 0x10]
test r10, r10
je 0x140143998
mov rdx, qword [rdx + 8]
xor byte [rdx], r9b
mov r11d, 1
cmp r10, 1
je 0x140143988
lea rbx, [r8 - 1]
lea rdi, [r10 - 2]
cmp rbx, rdi
mov rsi, rdi
cmovb rsi, rbx
lea r9, [rdx + 1]
inc rsi
cmp rsi, 0x10
jbe 0x14014395e
cmp rbx, rdi
cmovb rdi, rbx
lea rbx, [rcx + rdi]
add rbx, 2
cmp r9, rbx
jae 0x140143919
add rdi, rdx
add rdi, 2
lea rbx, [rcx + 1]
cmp rbx, rdi
jb 0x14014395e
mov r11d, esi
and r11d, 0xf
mov r14d, 0x10
cmovne r14, r11
mov rdi, rsi
sub rdi, r14
lea rbx, [r9 + rdi]
neg r14
lea r11, [rsi + r14]
inc r11
xor esi, esi
movups xmm0, xmmword [rcx + rsi + 1]
movups xmm1, xmmword [r9 + rsi]
xorps xmm1, xmm0
movups xmmword [r9 + rsi], xmm1
add rsi, 0x10
cmp rdi, rsi
jne 0x140143940
mov r9, rbx
add rdx, r10
nop word cs:[rax + rax]
cmp r8, r11
je 0x14014398e
movzx r10d, byte [rcx + r11]
xor byte [r9], r10b
inc r11
inc r9
cmp r9, rdx
jne 0x140143970
cmp r11, r8
setne al
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret
lea r8, str._home_kali_.cargo_registry_src_index.crates.io_6f17d22bba15001f_ring_0.17.8_src_rsa_padding_pss.rs
xor ecx, ecx
xor edx, edx
call sym.core::panicking::panic_bounds_check::hf065bc95f1c7a8f7
int3

Function at 0x140147440
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x68
mov rbx, qword [rcx]
mov rax, qword [rcx + 8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], r8
cmp rax, r8
jne 0x140147520
mov rsi, r8
test r8, r8
je 0x14014754b
mov rdi, rdx
mov r14, rsi
shl r14, 6
cmp rsi, 4
jae 0x140147483
xor eax, eax
jmp 0x1401474c0
mov rax, rsi
and rax, 0xfffffffffffffffc
xor edx, edx
pcmpeqd xmm0, xmm0
movdqu xmm1, xmmword [rbx + rdx*8]
movdqu xmm2, xmmword [rbx + rdx*8 + 0x10]
pxor xmm1, xmm0
pxor xmm2, xmm0
movdqu xmmword [rdi + rdx*8], xmm1
movdqu xmmword [rdi + rdx*8 + 0x10], xmm2
add rdx, 4
cmp rax, rdx
jne 0x140147490
cmp rax, rsi
je 0x1401474d7
nop dword [rax]
mov rdx, qword [rbx + rax*8]
not rdx
mov qword [rdi + rax*8], rdx
lea rdx, [rax + 1]
mov rax, rdx
cmp rsi, rdx
jne 0x1401474c0
or byte [rdi], 1
sub r14, qword [rcx + 0x20]
je 0x140147516
mov rax, qword [rdi + rsi*8 - 8]
mov ecx, r14d
shl rax, cl
shr rax, cl
mov qword [rdi + rsi*8 - 8], rax
cmp r14, 1
adc r14, 0
nop dword [rax + rax]
mov rcx, rdi
mov rdx, rdi
mov r8, rbx
mov r9, rsi
call sym.ring_core_0_17_8_LIMBS_shl_mod
dec r14
jne 0x140147500
add rsp, 0x68
pop rbx
pop rdi
pop rsi
pop r14
ret
mov qword [rsp + 0x38], 0
lea rax, [0x14036ac80]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x28]
lea r8, [rsp + 0x30]
lea r9, [rsp + 0x38]
xor ecx, ecx
call sym.core::panicking::assert_failed::h06db76d16401f47b
lea r8, str._home_kali_.cargo_registry_src_index.crates.io_6f17d22bba15001f_ring_0.17.8_src_limb.rs
xor ecx, ecx
xor edx, edx
call sym.core::panicking::panic_bounds_check::hf065bc95f1c7a8f7
int3
Function at 0x14014b350
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
cmp rdx, r9
cmovb r9, rdx
test r9, r9
je 0x14014b3c7
cmp r9, 4
jae 0x14014b36a
xor eax, eax
jmp 0x14014b3b0
mov rax, r9
and rax, 0xfffffffffffffffc
xor r10d, r10d
pcmpeqd xmm0, xmm0
nop dword [rax + rax]
movdqu xmm1, xmmword [r8 + r10*8]
movdqu xmm2, xmmword [r8 + r10*8 + 0x10]
pxor xmm1, xmm0
pxor xmm2, xmm0
movdqu xmmword [rcx + r10*8], xmm1
movdqu xmmword [rcx + r10*8 + 0x10], xmm2
add r10, 4
cmp rax, r10
jne 0x14014b380
cmp r9, rax
je 0x14014b3c7
mov r10, qword [r8 + rax*8]
not r10
mov qword [rcx + rax*8], r10
lea r10, [rax + 1]
mov rax, r10
cmp r9, r10
jne 0x14014b3b0
test rdx, rdx
je 0x14014b3d4
or byte [rcx], 1
add rsp, 0x28
ret
lea r8, str._home_kali_.cargo_registry_src_index.crates.io_6f17d22bba15001f_ring_0.17.8_src_limb.rs
xor ecx, ecx
xor edx, edx
call sym.core::panicking::panic_bounds_check::hf065bc95f1c7a8f7
int3
Function at 0x140154b10
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
aesenc xmm2, xmm1
aesenc xmm3, xmm1
aesenc xmm4, xmm1
aesenc xmm5, xmm1
aesenc xmm6, xmm1
aesenc xmm7, xmm1
movups xmm1, xmmword [rcx + rax]
add rax, 0x20
aesenc xmm2, xmm0
aesenc xmm3, xmm0
aesenc xmm4, xmm0
aesenc xmm5, xmm0
aesenc xmm6, xmm0
aesenc xmm7, xmm0
movups xmm0, xmmword [rcx + rax - 0x10]
jne fcn.140154b10
aesenc xmm2, xmm1
aesenc xmm3, xmm1
aesenc xmm4, xmm1
aesenc xmm5, xmm1
aesenc xmm6, xmm1
aesenc xmm7, xmm1
aesenclast xmm2, xmm0
aesenclast xmm3, xmm0
aesenclast xmm4, xmm0
aesenclast xmm5, xmm0
aesenclast xmm6, xmm0
aesenclast xmm7, xmm0
ret

Function at 0x140154c1a
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
aesenc xmm2, xmm1
aesenc xmm3, xmm1
aesenc xmm4, xmm1
aesenc xmm5, xmm1
aesenc xmm6, xmm1
aesenc xmm7, xmm1
aesenc xmm8, xmm1
aesenc xmm9, xmm1
movups xmm1, xmmword [rcx + rax]
add rax, 0x20
aesenc xmm2, xmm0
aesenc xmm3, xmm0
aesenc xmm4, xmm0
aesenc xmm5, xmm0
aesenc xmm6, xmm0
aesenc xmm7, xmm0
aesenc xmm8, xmm0
aesenc xmm9, xmm0
movups xmm0, xmmword [rcx + rax - 0x10]
jne 0x140154bf0
aesenc xmm2, xmm1
aesenc xmm3, xmm1
aesenc xmm4, xmm1
aesenc xmm5, xmm1
aesenc xmm6, xmm1
aesenc xmm7, xmm1
aesenc xmm8, xmm1
aesenc xmm9, xmm1
aesenclast xmm2, xmm0
aesenclast xmm3, xmm0
aesenclast xmm4, xmm0
aesenclast xmm5, xmm0
aesenclast xmm6, xmm0
aesenclast xmm7, xmm0
aesenclast xmm8, xmm0
aesenclast xmm9, xmm0
ret
Function at 0x14015643d
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rdi
mov qword [rsp + 0x10], rsi
mov rax, rsp
mov rdi, rcx
mov rsi, rdx
mov rdx, r8
mov rcx, r9
mov r8, qword [rsp + 0x28]
xchg rcx, rdx
test rcx, rcx
je 0x1401565b1
lea rsp, [rsp - 0xb8]
movaps xmmword [rsp + 0x10], xmm6
movaps xmmword [rsp + 0x20], xmm7
movaps xmmword [rsp + 0x30], xmm8
movaps xmmword [rsp + 0x40], xmm9
movaps xmmword [rsp + 0x50], xmm10
movaps xmmword [rsp + 0x60], xmm11
movaps xmmword [rsp + 0x70], xmm12
movaps xmmword [rsp + 0x80], xmm13
movaps xmmword [rsp + 0x90], xmm14
movaps xmmword [rsp + 0xa0], xmm15
movdqu xmm0, xmmword [r8]
movdqa xmm8, xmmword [0x14036ce60]
sub rsi, rdi
call fcn.1401565c0
movdqa xmm6, xmm0
pshufb xmm6, xmmword [0x14036ce50]
test rcx, 1
je 0x1401564fa
movdqu xmm7, xmmword [rdi]
call fcn.140155c40
pxor xmm0, xmm7
paddd xmm6, xmm8
movdqu xmmword [rsi + rdi], xmm0
sub rcx, 1
lea rdi, [rdi + 0x10]
je 0x140156566
movdqa xmm14, xmm6
movdqa xmm15, xmm6
paddd xmm15, xmm8
movdqa xmm1, xmmword [0x14036ce50]
movdqa xmm0, xmm14
movdqa xmm6, xmm15
pshufb xmm0, xmm1
pshufb xmm6, xmm1
call fcn.140155da0
movdqu xmm1, xmmword [rdi]
movdqu xmm2, xmmword [rdi + 0x10]
movdqa xmm3, xmmword [0x14036ce70]
pxor xmm0, xmm1
pxor xmm6, xmm2
paddd xmm14, xmm3
paddd xmm15, xmm3
movdqu xmmword [rsi + rdi], xmm0
movdqu xmmword [rsi + rdi + 0x10], xmm6
sub rcx, 2
lea rdi, [rdi + 0x20]
jne 0x140156509
movaps xmm6, xmmword [rsp + 0x10]
movaps xmm7, xmmword [rsp + 0x20]
movaps xmm8, xmmword [rsp + 0x30]
movaps xmm9, xmmword [rsp + 0x40]
movaps xmm10, xmmword [rsp + 0x50]
movaps xmm11, xmmword [rsp + 0x60]
movaps xmm12, xmmword [rsp + 0x70]
movaps xmm13, xmmword [rsp + 0x80]
movaps xmm14, xmmword [rsp + 0x90]
movaps xmm15, xmmword [rsp + 0xa0]
lea rsp, [rsp + 0xb8]
mov rdi, qword [rsp + 8]
mov rsi, qword [rsp + 0x10]
ret
Function at 0x14015b540
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
vmovdqu xmm4, xmmword [r9 - 0x80]
vmovdqu xmm2, xmmword [r11 + 0x20]
lea r13, [r10 - 1]
vmovups xmm15, xmmword [r9 - 0x70]
lea r12, [r9 - 0x60]
vpxor xmm9, xmm1, xmm4
add ebx, 0x6000000
jb 0x14015b660
vpaddb xmm10, xmm1, xmm2
vpaddb xmm11, xmm10, xmm2
vpxor xmm10, xmm10, xmm4
vpaddb xmm12, xmm11, xmm2
vpxor xmm11, xmm11, xmm4
vpaddb xmm13, xmm12, xmm2
vpxor xmm12, xmm12, xmm4
vpaddb xmm14, xmm13, xmm2
vpxor xmm13, xmm13, xmm4
vpaddb xmm1, xmm14, xmm2
vpxor xmm14, xmm14, xmm4
jmp 0x14015b5a0
vaesenc xmm9, xmm9, xmm15
vaesenc xmm10, xmm10, xmm15
vaesenc xmm11, xmm11, xmm15
vaesenc xmm12, xmm12, xmm15
vaesenc xmm13, xmm13, xmm15
vaesenc xmm14, xmm14, xmm15
vmovups xmm15, xmmword [r12]
lea r12, [r12 + 0x10]
dec r13d
jne 0x14015b5a0
vmovdqu xmm3, xmmword [r12]
vaesenc xmm9, xmm9, xmm15
vpxor xmm4, xmm3, xmmword [rcx]
vaesenc xmm10, xmm10, xmm15
vpxor xmm5, xmm3, xmmword [rcx + 0x10]
vaesenc xmm11, xmm11, xmm15
vpxor xmm6, xmm3, xmmword [rcx + 0x20]
vaesenc xmm12, xmm12, xmm15
vpxor xmm8, xmm3, xmmword [rcx + 0x30]
vaesenc xmm13, xmm13, xmm15
vpxor xmm2, xmm3, xmmword [rcx + 0x40]
vaesenc xmm14, xmm14, xmm15
vpxor xmm3, xmm3, xmmword [rcx + 0x50]
lea rcx, [rcx + 0x60]
vaesenclast xmm9, xmm9, xmm4
vaesenclast xmm10, xmm10, xmm5
vaesenclast xmm11, xmm11, xmm6
vaesenclast xmm12, xmm12, xmm8
vaesenclast xmm13, xmm13, xmm2
vaesenclast xmm14, xmm14, xmm3
vmovups xmmword [rdx], xmm9
vmovups xmmword [rdx + 0x10], xmm10
vmovups xmmword [rdx + 0x20], xmm11
vmovups xmmword [rdx + 0x30], xmm12
vmovups xmmword [rdx + 0x40], xmm13
vmovups xmmword [rdx + 0x50], xmm14
lea rdx, [rdx + 0x60]
ret
vpshufb xmm6, xmm1, xmm0
vmovdqu xmm5, xmmword [r11 + 0x30]
vpaddd xmm10, xmm6, xmmword [r11 + 0x40]
vpaddd xmm11, xmm6, xmm5
vpaddd xmm12, xmm10, xmm5
vpshufb xmm10, xmm10, xmm0
vpaddd xmm13, xmm11, xmm5
vpshufb xmm11, xmm11, xmm0
vpxor xmm10, xmm10, xmm4
vpaddd xmm14, xmm12, xmm5
vpshufb xmm12, xmm12, xmm0
vpxor xmm11, xmm11, xmm4
vpaddd xmm1, xmm13, xmm5
vpshufb xmm13, xmm13, xmm0
vpxor xmm12, xmm12, xmm4
vpshufb xmm14, xmm14, xmm0
vpxor xmm13, xmm13, xmm4
vpshufb xmm1, xmm1, xmm0
vpxor xmm14, xmm14, xmm4
jmp 0x14015b5a0
Function at 0x14015f4c0
Capabilities:
Encode data using xor

Disassembly:
xor r10, r10
xor r11, r11
xor r12, r12
cmp r8, 0xd
jne 0x14015f56e
mov r10, qword [rcx]
mov r11, qword [rcx + 5]
shr r11, 0x18
mov r12d, 1
mov rax, qword [rbp + 0xa0]
mov r15, rax
mul r10
mov r13, rax
mov r14, rdx
mov rax, qword [rbp + 0xa0]
mul r11
imul r15, r12
add r14, rax
adc r15, rdx
mov rax, qword [rbp + 0xa8]
mov r9, rax
mul r10
add r14, rax
adc rdx, 0
mov r10, rdx
mov rax, qword [rbp + 0xa8]
mul r11
add r15, rax
adc rdx, 0
imul r9, r12
add r15, r10
adc r9, rdx
mov r10, r13
mov r11, r14
mov r12, r15
and r12, 3
mov r13, r15
and r13, 0xfffffffffffffffc
mov r14, r9
shrd r15, r9, 2
shr r9, 2
add r15, r13
adc r9, r14
add r10, r15
adc r11, r9
adc r12, 0
ret
cmp r8, 0x10
jb 0x14015f619
add r10, qword [rcx]
adc r11, qword [rcx + 8]
adc r12, 1
mov rax, qword [rbp + 0xa0]
mov r15, rax
mul r10
mov r13, rax
mov r14, rdx
mov rax, qword [rbp + 0xa0]
mul r11
imul r15, r12
add r14, rax
adc r15, rdx
mov rax, qword [rbp + 0xa8]
mov r9, rax
mul r10
add r14, rax
adc rdx, 0
mov r10, rdx
mov rax, qword [rbp + 0xa8]
mul r11
add r15, rax
adc rdx, 0
imul r9, r12
add r15, r10
adc r9, rdx
mov r10, r13
mov r11, r14
mov r12, r15
and r12, 3
mov r13, r15
and r13, 0xfffffffffffffffc
mov r14, r9
shrd r15, r9, 2
shr r9, 2
add r15, r13
adc r9, r14
add r10, r15
adc r11, r9
adc r12, 0
lea rcx, [rcx + 0x10]
sub r8, 0x10
jmp 0x14015f56e
cmp r8, 0
je 0x14015f6df
xor r13, r13
xor r14, r14
xor r15, r15
add rcx, r8
shld r14, r13, 8
shl r13, 8
movzx r15, byte [rcx - 1]
xor r13, r15
dec rcx
dec r8
jne 0x14015f62f
add r10, r13
adc r11, r14
adc r12, 1
mov rax, qword [rbp + 0xa0]
mov r15, rax
mul r10
mov r13, rax
mov r14, rdx
mov rax, qword [rbp + 0xa0]
mul r11
imul r15, r12
add r14, rax
adc r15, rdx
mov rax, qword [rbp + 0xa8]
mov r9, rax
mul r10
add r14, rax
adc rdx, 0
mov r10, rdx
mov rax, qword [rbp + 0xa8]
mul r11
add r15, rax
adc rdx, 0
imul r9, r12
add r15, r10
adc r9, rdx
mov r10, r13
mov r11, r14
mov r12, r15
and r12, 3
mov r13, r15
and r13, 0xfffffffffffffffc
mov r14, r9
shrd r15, r9, 2
shr r9, 2
add r15, r13
adc r9, r14
add r10, r15
adc r11, r9
adc r12, 0
ret
Function at 0x140184b50
Capabilities:
Hash data with crc32

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, rdx
mov rdi, rcx
mov rbx, qword [0x14031e670]
mov rax, qword [rbx]
test rax, rax
je 0x140184b93
test al, 2
je 0x140184b7f
mov rax, qword [rbx]
test rax, rax
je 0x140184b9e
test eax, 0x400
jne 0x140184baa
xor ecx, ecx
mov rdx, rdi
mov r8, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp sym.crc32fast::baseline::update_fast_16::h42a4f1e5ae79febd
call sym.std_detect::detect::cache::detect_and_initialize::h995d4eec2ccd2cf1
test al, 2
jne 0x140184b70
jmp 0x140184b7f
call sym.std_detect::detect::cache::detect_and_initialize::h995d4eec2ccd2cf1
test eax, 0x400
je 0x140184b7f
xor ecx, ecx
mov rdx, rdi
mov r8, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp sym.crc32fast::specialized::pclmulqdq::calculate::hf9532c4ac331affc
Function at 0x140185270
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
sub rsp, 0x48
movdqa xmmword [rsp + 0x30], xmm9
movdqa xmmword [rsp + 0x20], xmm8
movdqa xmmword [rsp + 0x10], xmm7
movdqa xmmword [rsp], xmm6
cmp r8, 0x80
jb 0x14018548d
movdqu xmm4, xmmword [rdx]
movdqu xmm3, xmmword [rdx + 0x10]
movdqu xmm2, xmmword [rdx + 0x20]
movdqu xmm1, xmmword [rdx + 0x30]
not ecx
movd xmm0, ecx
pxor xmm0, xmm4
add rdx, 0x40
add r8, 0xffffffffffffffc0
movabs rax, 0x154442bd4
movq xmm4, rax
movdqa xmm5, xmmword [0x1403716f0]
nop word cs:[rax + rax]
movdqa xmm6, xmm0
pclmulqdq xmm6, xmm4, 0
movdqa xmm7, xmm0
pclmulqdq xmm7, xmm5, 0x11
movdqu xmm0, xmmword [rdx]
pxor xmm0, xmm6
pxor xmm0, xmm7
movdqu xmm6, xmmword [rdx + 0x10]
movdqu xmm7, xmmword [rdx + 0x20]
movdqu xmm8, xmmword [rdx + 0x30]
movdqa xmm9, xmm3
pclmulqdq xmm9, xmm4, 0
pxor xmm9, xmm6
pclmulqdq xmm3, xmm5, 0x11
pxor xmm3, xmm9
movdqa xmm6, xmm2
pclmulqdq xmm6, xmm4, 0
pxor xmm6, xmm7
pclmulqdq xmm2, xmm5, 0x11
pxor xmm2, xmm6
movdqa xmm6, xmm1
pclmulqdq xmm6, xmm4, 0
pxor xmm6, xmm8
pclmulqdq xmm1, xmm5, 0x11
pxor xmm1, xmm6
add rdx, 0x40
add r8, 0xffffffffffffffc0
cmp r8, 0x3f
ja 0x1401852e0
movabs rax, 0x1751997d0
movq xmm4, rax
movdqa xmm6, xmm0
pclmulqdq xmm6, xmm4, 0
movdqa xmm5, xmmword [0x140371700]
pclmulqdq xmm0, xmm5, 0x11
pxor xmm0, xmm6
pxor xmm0, xmm3
movdqa xmm3, xmm0
pclmulqdq xmm3, xmm4, 0
pclmulqdq xmm0, xmm5, 0x11
pxor xmm0, xmm3
pxor xmm0, xmm2
movdqa xmm2, xmm0
pclmulqdq xmm2, xmm4, 0
pclmulqdq xmm0, xmm5, 0x11
pxor xmm0, xmm2
pxor xmm0, xmm1
cmp r8, 0x10
jb 0x14018540a
nop word cs:[rax + rax]
movdqu xmm1, xmmword [rdx]
add r8, 0xfffffffffffffff0
add rdx, 0x10
movdqa xmm2, xmm0
pclmulqdq xmm2, xmm4, 0
pxor xmm2, xmm1
pclmulqdq xmm0, xmm5, 0x11
pxor xmm0, xmm2
cmp r8, 0xf
ja 0x1401853e0
movdqa xmm1, xmmword [0x140371700]
pclmulqdq xmm1, xmm0, 1
psrldq xmm0, 8
pxor xmm0, xmm1
pxor xmm1, xmm1
pxor xmm2, xmm2
pblendw xmm2, xmm0, 3
movabs rax, 0x163cd6124
movq xmm3, rax
pclmulqdq xmm3, xmm2, 0
psrldq xmm0, 4
pxor xmm0, xmm3
pxor xmm2, xmm2
pblendw xmm2, xmm0, 3
pclmulqdq xmm2, xmmword [0x140371710], 0x10
pblendw xmm2, xmm1, 0xfc
movabs rax, 0x1db710641
movq xmm1, rax
pclmulqdq xmm1, xmm2, 0
pxor xmm1, xmm0
pextrd ecx, xmm1, 1
not ecx
test r8, r8
je 0x1401854ab
movaps xmm6, xmmword [rsp]
movaps xmm7, xmmword [rsp + 0x10]
movaps xmm8, xmmword [rsp + 0x20]
movaps xmm9, xmmword [rsp + 0x30]
add rsp, 0x48
jmp sym.crc32fast::baseline::update_fast_16::h42a4f1e5ae79febd
mov eax, ecx
movaps xmm6, xmmword [rsp]
movaps xmm7, xmmword [rsp + 0x10]
movaps xmm8, xmmword [rsp + 0x20]
movaps xmm9, xmmword [rsp + 0x30]
add rsp, 0x48
ret
Function at 0x140192b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
mov rax, rcx
xor r10d, r10d
movzx r11d, byte [rsp + 0x58]
mov esi, 0x2600
xor ecx, ecx
mov rdi, rdx
jmp 0x140192ba8
inc rdi
cmp ebx, 0xd
ja 0x140192c40
mov r14d, 0x110000
bt esi, ebx
jae 0x140192c40
cmp r14d, 0x110000
jne 0x140192c50
cmp rdi, r8
je 0x140192c9e
movzx ebx, byte [rdi]
test bl, bl
jns 0x140192b80
mov ebp, ebx
and ebp, 0x1f
movzx r15d, byte [rdi + 1]
and r15d, 0x3f
cmp bl, 0xdf
jbe 0x140192c0d
movzx r14d, byte [rdi + 2]
shl r15d, 6
and r14d, 0x3f
or r14d, r15d
cmp bl, 0xf0
jb 0x140192c24
movzx ebx, byte [rdi + 3]
and ebp, 7
shl ebp, 0x12
shl r14d, 6
and ebx, 0x3f
or ebx, r14d
or ebx, ebp
cmp ebx, 0x110000
je 0x140192c9e
add rdi, 4
cmp ebx, 0xd
jbe 0x140192b8c
jmp 0x140192c40
add rdi, 2
shl ebp, 6
or ebp, r15d
mov ebx, ebp
cmp ebx, 0xd
jbe 0x140192b8c
jmp 0x140192c40
add rdi, 3
shl ebp, 0xc
or r14d, ebp
mov ebx, r14d
cmp ebx, 0xd
jbe 0x140192b8c
nop word [rax + rax]
mov r14d, ebx
cmp r14d, 0x110000
je 0x140192ba8
lea ebx, [r14 - 0x30]
cmp ebx, 0xa
jae 0x140192c7f
lea ecx, [rcx + rcx*4]
lea ecx, [rbx + rcx*2]
mov r10b, 1
mov rdx, rdi
cmp ecx, 0xffff
jbe 0x140192ba8
mov byte [rax + 2], 2
mov word [rax], 2
jmp 0x140192d88
test r11b, r11b
jne 0x140192c9e
add r14d, 0xffffffdd
cmp r14d, 0x39
ja 0x140192c71
movabs r11, 0x200000010001001
bt r11, r14
jae 0x140192c71
test r10b, 1
je 0x140192ce5
mov r11, qword [r9 + 8]
mov r10w, 0x15
add r11, 0xfffffffffffffffe
cmp r11, 3
ja case.default.0x140192cc8
mov r9, qword [r9]
lea rsi, [0x14037747c]
movsxd r11, dword [rsi + r11*4]
add r11, rsi
jmp r11
movzx r9d, word [r9]
cmp r9d, 0x7377
jne case.default.0x140192cc8
mov r9b, 1
mov r10w, 0x50
jmp 0x140192d65
xor r9d, r9d
jmp 0x140192d78
cmp dword [r9], 0x70747468
je 0x140192cd8
xor r9d, r9d
jmp 0x140192d65
mov r10d, 0x70747468
xor r10d, dword [r9]
movzx r9d, byte [r9 + 4]
xor r9d, 0x73
or r9d, r10d
sete r9b
mov r11d, 0x1bb
mov r10d, 0x15
cmove r10d, r11d
jmp 0x140192d65
movzx r11d, word [r9]
xor r11d, 0x7377
movzx esi, byte [r9 + 2]
xor esi, 0x73
or si, r11w
je 0x140192d5d
movzx r11d, word [r9]
xor r11d, 0x7466
movzx r9d, byte [r9 + 2]
xor r9d, 0x70
or r9w, r11w
sete r9b
jmp 0x140192d65
mov r9b, 1
mov r10w, 0x1bb
cmp r10w, cx
setne r10b
xor r9b, 1
or r9b, r10b
movzx r9d, r9b
mov word [rax], r9w
mov word [rax + 2], cx
mov qword [rax + 8], rdx
mov qword [rax + 0x10], r8
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
Function at 0x1401b6650
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
mov rsi, qword [rdx + 0x20]
mov r11, qword [rdx + 0x28]
lea r10, [r11 + 1]
mov qword [rdx + 0x28], r10
mov al, 1
cmp r10, rsi
jae 0x1401b6690
mov rax, qword [rdx + 0x18]
movzx edi, byte [rax + r10]
mov al, 1
cmp edi, 0x2b
je 0x1401b6685
cmp edi, 0x2d
jne 0x1401b6690
xor eax, eax
add r11, 2
mov qword [rdx + 0x28], r11
mov r10, r11
cmp r10, rsi
jae 0x1401b6824
mov rdi, qword [rdx + 0x18]
movzx r11d, byte [rdi + r10]
lea rbx, [r10 + 1]
mov qword [rdx + 0x28], rbx
add r11b, 0xd0
cmp r11b, 0xa
jae 0x1401b682f
movzx r11d, r11b
cmp rbx, rsi
jae 0x1401b672d
mov ebx, 1
sub rbx, rsi
add r10, 2
jmp 0x1401b66ec
movzx esi, sil
lea r11d, [r11 + r11*4]
lea r11d, [rsi + r11*2]
lea rsi, [rbx + r10]
inc rsi
inc r10
cmp rsi, 2
je 0x1401b672d
movzx esi, byte [rdi + r10 - 1]
add sil, 0xd0
cmp sil, 0xa
jae 0x1401b672d
mov qword [rdx + 0x28], r10
cmp r11d, 0xccccccb
jle 0x1401b66d0
cmp r11d, 0xccccccc
jne 0x1401b6718
cmp sil, 7
jbe 0x1401b66d0
test r9, r9
sete r9b
mov byte [rsp + 0x20], al
call sym.serde_json::de::Deserializer_R_::parse_exponent_overflow::h2a27e0e0cd64f2d4
jmp 0x1401b6811
mov r10d, dword [rsp + 0x80]
test al, al
je 0x1401b674a
lea eax, [r10 + r11]
sar eax, 0x1f
add eax, 0x80000000
add r10d, r11d
jmp 0x1401b675a
xor eax, eax
cmp r10d, r11d
setns al
add eax, 0x7fffffff
sub r10d, r11d
cmovo r10d, eax
movq xmm1, r9
punpckldq xmm1, xmmword [0x1403b3d80]
subpd xmm1, xmmword [0x1403b3d90]
movapd xmm0, xmm1
unpckhpd xmm0, xmm1
addsd xmm0, xmm1
mov eax, r10d
neg eax
cmovs eax, r10d
cmp eax, 0x135
jb 0x1401b67cc
xorpd xmm1, xmm1
movsd xmm2, qword [0x1403b3da0]
nop dword [rax + rax]
ucomisd xmm0, xmm1
jne 0x1401b67a8
jnp 0x1401b67fa
test r10d, r10d
jns 0x1401b6858
divsd xmm0, xmm2
add r10d, 0x134
mov eax, r10d
neg eax
cmovs eax, r10d
cmp eax, 0x135
jae 0x1401b67a0
mov eax, eax
lea r9, [0x1403b3f38]
movsd xmm1, qword [r9 + rax*8]
test r10d, r10d
js 0x1401b6819
mulsd xmm0, xmm1
movapd xmm1, xmmword [0x1403b3db0]
andpd xmm1, xmm0
ucomisd xmm1, qword [0x1403b3dc0]
jae 0x1401b6858
test r8b, r8b
jne 0x1401b6807
xorpd xmm0, xmmword [0x1403b3dd0]
movsd qword [rcx + 8], xmm0
xor eax, eax
mov qword [rcx], rax
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
divsd xmm0, xmm1
test r8b, r8b
je 0x1401b67ff
jmp 0x1401b6807
mov qword [rsp + 0x28], 5
jmp 0x1401b6838
mov qword [rsp + 0x28], 0xd
lea rax, [rsp + 0x28]
mov rsi, rcx
mov rcx, rdx
mov rdx, rax
call sym.serde_json::de::Deserializer_R_::error::hf66cbedce772ade0
mov qword [rsi + 8], rax
mov qword [rsi], 1
jmp 0x1401b6811
mov qword [rsp + 0x28], 0xe
lea rax, [rsp + 0x28]
mov rsi, rcx
mov rcx, rdx
mov rdx, rax
call sym.serde_json::de::Deserializer_R_::error::hf66cbedce772ade0
mov rcx, rsi
mov qword [rsi + 8], rax
mov eax, 1
jmp 0x1401b680e
Function at 0x1401c5190
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp r8, r9
jae 0x1401c5336
mov r10, r9
sub r10, r8
cmp r10, 0xf
ja 0x1401c51cb
mov eax, 1
nop word [rax + rax]
cmp r9, r8
jbe 0x1401c5230
movzx r10d, byte [r9 - 1]
dec r9
cmp r10b, cl
je 0x1401c51c7
cmp r10b, dl
jne 0x1401c51b0
mov rdx, r9
ret
movzx eax, cl
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
movzx eax, dl
movd xmm1, eax
punpcklbw xmm1, xmm1
pshuflw xmm1, xmm1, 0
pshufd xmm1, xmm1, 0
movdqu xmm2, xmmword [r9 - 0x10]
movdqa xmm3, xmm0
pcmpeqb xmm3, xmm2
pcmpeqb xmm2, xmm1
por xmm2, xmm3
pmovmskb eax, xmm2
test eax, eax
je 0x1401c5236
add r9, 0xfffffffffffffff0
movzx eax, ax
bsr eax, eax
xor eax, 0xffffffe0
add eax, 0x21
lea rdx, [r9 + rax]
dec rdx
mov eax, 1
ret
xor eax, eax
mov rdx, r9
ret
mov rax, r9
and rax, 0xfffffffffffffff0
cmp r10, 0x20
jb 0x1401c52b3
lea rcx, [r8 + 0x20]
cmp rax, rcx
jb 0x1401c52b3
mov eax, r9d
and eax, 0xf
sub r9, rax
add r9, 0xffffffffffffffdf
nop dword [rax]
movdqa xmm2, xmmword [r9 + 1]
movdqa xmm3, xmmword [r9 + 0x11]
movdqa xmm4, xmm0
pcmpeqb xmm4, xmm2
movdqa xmm5, xmm0
pcmpeqb xmm5, xmm3
pcmpeqb xmm2, xmm1
por xmm2, xmm4
pcmpeqb xmm3, xmm1
por xmm3, xmm5
movdqa xmm4, xmm3
por xmm4, xmm2
pmovmskb eax, xmm4
test eax, eax
jne 0x1401c533c
lea rax, [r9 - 0x20]
inc r9
cmp r9, rcx
mov r9, rax
jae 0x1401c5260
add rax, 0x21
lea rcx, [r8 + 0x10]
nop word [rax + rax]
cmp rax, rcx
jb 0x1401c52ff
movdqu xmm2, xmmword [rax - 0x10]
add rax, 0xfffffffffffffff0
movdqa xmm3, xmm0
pcmpeqb xmm3, xmm2
pcmpeqb xmm2, xmm1
por xmm2, xmm3
pmovmskb edx, xmm2
test edx, edx
je 0x1401c52c0
movzx ecx, dx
bsr ecx, ecx
xor ecx, 0xffffffe0
add ecx, 0x21
lea rdx, [rax + rcx]
dec rdx
mov eax, 1
ret
cmp rax, r8
jbe 0x1401c5336
movdqu xmm2, xmmword [r8]
pcmpeqb xmm0, xmm2
pcmpeqb xmm1, xmm2
por xmm1, xmm0
pmovmskb eax, xmm1
test eax, eax
je 0x1401c5336
movzx eax, ax
bsr eax, eax
xor eax, 0xffffffe0
add eax, 0x21
lea rdx, [r8 + rax]
dec rdx
mov eax, 1
ret
xor eax, eax
mov rdx, r9
ret
pmovmskb eax, xmm3
test eax, eax
je 0x1401c535e
movzx eax, ax
bsr eax, eax
xor eax, 0xffffffe0
add eax, 0x21
lea rdx, [r9 + rax]
add rdx, 0x10
mov eax, 1
ret
psllw xmm2, 7
pmovmskb edx, xmm2
mov eax, 0x20
mov ecx, 0x20
test edx, edx
je 0x1401c537b
bsr ecx, edx
xor ecx, 0x1f
sub eax, ecx
add r9, rax
mov eax, 1
mov rdx, r9
ret
Function at 0x1401c8210
Capabilities:
Query or enumerate registry key

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
mov eax, 0x1060
call sym.___chkstk_ms
sub rsp, rax
mov rdi, rdx
mov rsi, rcx
mov rax, qword [rdx]
mov ebx, dword [rdx + 8]
mov r14, qword [rax]
mov dword [rsp + 0x44], 0x800
lea r15, [rsp + 0x60]
mov r8d, 0x1000
mov rcx, r15
xor edx, edx
call sub.msvcrt.dll_memset
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x20], xmm0
lea r9, [rsp + 0x44]
mov rcx, r14
mov edx, ebx
mov r8, r15
call sub.advapi32.dll_RegEnumKeyExW
test eax, eax
je 0x1401c828d
cmp eax, 0x103
jne 0x1401c82c5
movabs rax, 0x8000000000000000
or rax, 1
mov qword [rsi], rax
jmp 0x1401c82f8
mov r8d, dword [rsp + 0x44]
cmp r8, 0x801
jae 0x1401c830a
lea rcx, [rsp + 0x48]
lea rdx, [rsp + 0x60]
call sym.alloc::string::String::from_utf16::h92bc63552228ad98
mov rcx, qword [rsp + 0x48]
movabs rax, 0x8000000000000000
cmp rcx, rax
je 0x1401c82d9
mov rax, qword [rsp + 0x50]
jmp 0x1401c82e3
movabs rcx, 0x8000000000000000
shl rax, 0x20
or rax, 2
jmp 0x1401c82e8
movabs rax, 0x900000002
mov rdx, qword [rsp + 0x58]
inc ebx
mov dword [rdi + 8], ebx
mov qword [rsi], rcx
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rdx
mov rax, rsi
add rsp, 0x1060
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
lea rax, str._home_kali_.cargo_registry_src_index.crates.io_6f17d22bba15001f_winreg_0.11.0_src_reg_key.rs
mov edx, 0x800
mov rcx, r8
mov r8, rax
call sym.core::slice::index::slice_end_index_len_fail::hdaa9bbd2fcad4cbb
int3