joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1402647b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x18
mov eax, dword [rdx + 0x34]
mov r8d, dword [rdx]
mov r14d, dword [rdx + 4]
mov r15d, dword [rdx + 8]
mov r12d, dword [rdx + 0xc]
mov ebp, dword [rdx + 0x10]
mov r9d, dword [rdx + 0x14]
mov r10d, dword [rdx + 0x18]
mov r11d, dword [rdx + 0x1c]
mov ebx, dword [rdx + 0x20]
mov edi, dword [rdx + 0x24]
mov esi, dword [rdx + 0x28]
mov r13d, dword [rdx + 0x2c]
mov ecx, dword [rdx + 0x30]
mov dword [rsp + 0x68], eax
mov eax, dword [rdx + 0x38]
mov edx, dword [rdx + 0x3c]
mov dword [rsp + 0x70], eax
mov qword [rsp + 8], 0xa
nop dword [rax]
lea eax, [rcx + r8]
ror eax, 0x19
xor ebp, eax
lea eax, [r8 + rbp]
ror eax, 0x17
xor ebx, eax
lea eax, [rbx + rbp]
ror eax, 0x13
xor ecx, eax
lea eax, [rcx + rbx]
ror eax, 0xe
xor r8d, eax
lea eax, [r9 + r14]
ror eax, 0x19
xor edi, eax
lea eax, [rdi + r9]
ror eax, 0x17
xor dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x68]
add eax, edi
ror eax, 0x13
xor r14d, eax
mov eax, dword [rsp + 0x68]
add eax, r14d
ror eax, 0xe
xor r9d, eax
lea eax, [rsi + r10]
ror eax, 0x19
xor dword [rsp + 0x70], eax
mov eax, dword [rsp + 0x70]
add eax, esi
ror eax, 0x17
xor r15d, eax
mov eax, dword [rsp + 0x70]
add eax, r15d
ror eax, 0x13
xor r10d, eax
lea eax, [r10 + r15]
ror eax, 0xe
xor esi, eax
lea eax, [rdx + r13]
ror eax, 0x19
xor r12d, eax
lea eax, [rdx + r12]
ror eax, 0x17
xor r11d, eax
lea eax, [r11 + r12]
ror eax, 0x13
xor r13d, eax
lea eax, [r11 + r13]
ror eax, 0xe
xor edx, eax
lea eax, [r12 + r8]
ror eax, 0x19
xor r14d, eax
mov dword [rsp], r14d
lea eax, [r14 + r8]
ror eax, 0x17
xor r15d, eax
lea eax, [r15 + r14]
ror eax, 0x13
xor r12d, eax
lea eax, [r12 + r15]
ror eax, 0xe
xor r8d, eax
lea eax, [r9 + rbp]
ror eax, 0x19
xor r10d, eax
lea eax, [r10 + r9]
ror eax, 0x17
xor r11d, eax
lea eax, [r11 + r10]
ror eax, 0x13
xor ebp, eax
lea eax, [r11 + rbp]
ror eax, 0xe
xor r9d, eax
lea eax, [rsi + rdi]
ror eax, 0x19
xor r13d, eax
lea eax, [rsi + r13]
mov r14d, dword [rsp + 0x70]
ror eax, 0x17
xor ebx, eax
lea eax, [rbx + r13]
ror eax, 0x13
xor edi, eax
lea eax, [rdi + rbx]
ror eax, 0xe
xor esi, eax
mov eax, dword [rsp + 0x70]
add eax, edx
ror eax, 0x19
xor ecx, eax
lea eax, [rdx + rcx]
ror eax, 0x17
xor dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x68]
add eax, ecx
ror eax, 0x13
xor r14d, eax
mov eax, dword [rsp + 0x68]
add eax, r14d
mov dword [rsp + 0x70], r14d
mov r14d, dword [rsp]
ror eax, 0xe
xor edx, eax
sub qword [rsp + 8], 1
jne 0x140264810
mov rcx, qword [rsp + 0x60]
mov dword [rcx], r8d
mov dword [rcx + 4], r9d
mov dword [rcx + 8], esi
mov dword [rcx + 0xc], edx
mov dword [rcx + 0x10], r10d
mov dword [rcx + 0x14], r11d
mov dword [rcx + 0x18], ebx
mov dword [rcx + 0x1c], edi
add rsp, 0x18
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x140267780
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
sub rsp, 0xe8
mov rax, qword [0x1403531c0]
xor rax, rsp
mov qword [rsp + 0xd0], rax
mov rax, qword [rcx]
mov rbp, r9
mov rsi, r8
mov rdi, rdx
mov rbx, rcx
call qword [rax + 0x20]
test al, al
jne 0x1402677bc
mov rcx, rbx
call fcn.140251df0
mov r9, qword [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rax, r9
mov rcx, qword [rbx + 0x48]
sub rax, rdx
sub rax, rcx
cmp rbp, rax
jb 0x1402679ac
nop word [rax + rax]
sub r9, rcx
mov qword [rsp + 0x50], rsi
sub r9, rdx
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x58], r9
lea r8, [rcx + rdx]
movaps xmm0, xmmword [rsp + 0x50]
mov rax, rdi
mov qword [rsp + 0x70], r8
mov r10, rsi
mov qword [rsp + 0x78], r9
mov rdx, r9
mov qword [rsp + 0x68], r9
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x20], xmm0
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmmword [rsp + 0x30], xmm1
cmp r9, 0x20
jb 0x140267946
nop dword [rax]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x28]
add r9, 0xffffffffffffffe0
mov rax, qword [rdx + 8]
movups xmm1, xmmword [r8]
mov qword [rsp + 0x88], r9
movups xmm3, xmmword [r8 + 0x10]
movups xmmword [rsp + 0xb0], xmm1
xor qword [rsp + 0xb8], rax
mov rax, qword [rdx + 0x18]
movq rcx, xmm1
xor rcx, qword [rdx]
mov qword [rsp + 0xb0], rcx
movq rcx, xmm3
xor rcx, qword [rdx + 0x10]
movups xmm0, xmmword [rsp + 0xb0]
movups xmmword [rsp + 0xc0], xmm3
xor qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0xc0], rcx
mov rcx, qword [rsp + 0x38]
movups xmm1, xmmword [rsp + 0xc0]
add rcx, 0xffffffffffffffe0
lea r10, [rax + 0x20]
movups xmmword [rax], xmm0
mov qword [rsp + 0x98], rcx
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe0
mov qword [rsp + 0x80], r10
movaps xmm0, xmmword [rsp + 0x80]
movdqa xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0xa8], rcx
movups xmmword [rax + 0x10], xmm1
lea rax, [r8 + 0x20]
mov qword [rsp + 0x90], rax
lea r8, [rdx + 0x20]
movaps xmm0, xmmword [rsp + 0x90]
mov qword [rsp + 0xa0], r8
movdqa xmmword [rsp + 0x30], xmm0
movaps xmm0, xmmword [rsp + 0xa0]
movdqa xmmword [rsp + 0x40], xmm0
cmp r9, 0x20
jae 0x140267840
mov rdx, r9
test r9, r9
je 0x140267966
sub r8, rax
sub r10, rax
movzx ecx, byte [rax + r8]
xor cl, byte [rax]
mov byte [rax + r10], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x140267951
mov r8, qword [rbx + 0x38]
mov rcx, rbx
mov rax, qword [rbx + 0x30]
sub rax, r8
sub r8, qword [rbx + 0x30]
sub r8, qword [rbx + 0x48]
add rax, qword [rbx + 0x48]
add rdi, r8
add rsi, r8
add rbp, rax
call fcn.140267a10
mov r9, qword [rbx + 0x38]
mov rcx, qword [rbx + 0x48]
mov rax, r9
mov rdx, qword [rbx + 0x30]
sub rax, rcx
sub rax, rdx
cmp rbp, rax
jae 0x1402677e0
lea r8, [rcx + rdx]
mov r9, rbp
mov rdx, rdi
mov rcx, rsi
call fcn.1402642f0
add qword [rbx + 0x48], rbp
mov rcx, qword [rsp + 0xd0]
xor rcx, rsp
call fcn.1402d55d0
add rsp, 0xe8
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x140267b80
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov r15, rdx
mov rdi, rcx
mov edx, 0x100
add rcx, 0x18
call fcn.140249200
mov edx, 0x100
lea rcx, [rdi + 0x30]
call fcn.140249200
xor ebx, ebx
mov word [rdi + 0x10], 0
mov qword [rdi + 0x48], rbx
mov eax, ebx
nop dword [rax + rax]
mov rcx, qword [rdi + 0x18]
mov byte [rax + rcx], al
inc rax
cmp rax, 0x100
jne 0x140267bd0
mov rbp, qword [r15]
mov r11, rbx
mov r15, qword [r15 + 8]
mov r10, rbx
nop
mov r8, qword [rdi + 0x18]
xor edx, edx
mov rax, r10
div r15
movzx r9d, byte [r8 + r10]
movzx ecx, byte [rdx + rbp]
add rcx, r11
add rcx, r9
movzx r11d, cl
movzx eax, byte [r8 + r11]
mov byte [r8 + r10], al
inc r10
mov byte [r8 + r11], r9b
cmp r10, 0x100
jne 0x140267bf0
mov rcx, rdi
call fcn.140267a10
mov rcx, qword [rdi + 0x38]
sub rcx, qword [rdi + 0x30]
mov rax, qword [rdi + 8]
add rbx, rcx
cmp rbx, rax
jbe 0x140267c28
mov rbx, qword [rsp + 0x40]
xor edx, edx
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
div rcx
add qword [rdi + 0x48], rdx
add rsp, 0x20
pop r15
pop r14
pop rdi
ret
Function at 0x14026a600
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
mov r8d, dword [rcx]
mov r9d, 2
mov edx, dword [rcx + 4]
mov eax, dword [rcx + 8]
mov dword [rsp], eax
mov eax, dword [rcx + 0xc]
mov dword [rsp + 4], eax
mov eax, r8d
xor eax, dword [rcx + 0x10]
mov dword [rsp + 8], eax
mov eax, edx
xor eax, r8d
mov dword [rsp + 0x1c], edx
xor eax, dword [rcx + 0x14]
mov dword [rsp + 0xc], eax
mov eax, edx
xor eax, dword [rcx + 0x18]
mov dword [rsp + 0x10], eax
mov eax, r8d
xor eax, dword [rcx + 0x1c]
mov dword [rsp + 0x14], eax
mov eax, edx
xor eax, r8d
mov edx, r9d
lea r8, [rsp]
mov dword [rsp + 0x18], eax
mov rax, rcx
sub r8, rcx
movdqu xmm1, xmmword [rax + r8]
lea rax, [rax + 0x10]
movdqa xmm2, xmm1
movdqa xmm0, xmm1
psrld xmm2, 0x10
pslld xmm0, 0x10
orps xmm2, xmm0
movdqu xmm0, xmmword [rax - 0x10]
xorps xmm2, xmm0
xorps xmm2, xmm1
movdqu xmmword [rax - 0x10], xmm2
sub rdx, 1
jne 0x14026a660
mov edx, dword [rcx]
mov eax, dword [rcx + 4]
mov dword [rsp], eax
mov eax, dword [rcx + 8]
mov dword [rsp + 4], eax
mov eax, dword [rcx + 0xc]
mov dword [rsp + 8], eax
mov eax, edx
xor eax, dword [rcx + 0x10]
mov dword [rsp + 0xc], eax
mov eax, edx
xor eax, dword [rcx + 0x14]
mov dword [rsp + 0x10], eax
mov eax, dword [rcx + 0x18]
mov dword [rsp + 0x14], eax
mov eax, edx
xor eax, dword [rcx + 0x1c]
mov dword [rsp + 0x18], eax
lea rax, [rsp]
sub rax, rcx
mov dword [rsp + 0x1c], edx
nop dword [rax + rax]
movdqu xmm3, xmmword [rcx]
movdqu xmm1, xmmword [rcx + rax]
lea rcx, [rcx + 0x10]
movdqa xmm0, xmm1
xorps xmm0, xmm3
movdqa xmm2, xmm0
pslld xmm0, 8
psrld xmm2, 0x18
orps xmm2, xmm0
movdqa xmm0, xmm3
pslld xmm0, 0x10
xorps xmm2, xmm1
movdqa xmm1, xmm3
psrld xmm1, 0x10
orps xmm1, xmm0
movdqa xmm0, xmm3
pslld xmm0, 0x18
xorps xmm2, xmm1
psrld xmm3, 8
orps xmm0, xmm3
xorps xmm2, xmm0
movdqu xmmword [rcx - 0x10], xmm2
sub r9, 1
jne 0x14026a6e0
add rsp, 0x28
ret
Function at 0x14026af60
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rax, qword [rcx]
mov rdi, r9
mov rsi, r8
mov rbp, rdx
mov rbx, rcx
call qword [rax + 0x20]
test al, al
jne 0x14026af92
mov rcx, rbx
call fcn.140251df0
lea r9, [rbx + 8]
mov r8, rdi
mov rdx, rsi
mov rcx, rbp
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
jmp 0x14026ba80
Function at 0x14026d5e0
Capabilities:
Encrypt data using blowfish

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
mov rsi, rdx
mov rdi, rcx
mov edx, 0x12
add rcx, 0x20
call fcn.140263df0
mov rcx, qword [rdi + 0x20]
test rcx, rcx
je 0x14026d672
mov r8d, 0x48
lea rdx, [0x140302000]
call fcn.1402f6bc0
mov edx, 0x400
lea rcx, [rdi + 8]
call fcn.140263df0
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14026d672
mov r8d, 0x1000
lea rdx, [0x140302050]
call fcn.1402f6bc0
mov r8, qword [rsi + 8]
xor r9d, r9d
mov rdx, qword [rsi]
mov rcx, rdi
mov qword [rsp + 0x20], 0
call fcn.14026cf10
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
lea r9, str.C:UsersRosalyn_vcpkg_buildtrees_botanx64_windows_static_rel_buildincludepublic_botan_mem_ops.h
mov dword [rsp + 0x20], 0x93
lea r8, str.copy_mem
lea rdx, str.If_n___0_then_args_are_not_null
lea rcx, str.n___0_implies_in___nullptr__out___nullptr
call fcn.140251590
int3
Function at 0x140272a10
Capabilities:
Encode data using xor
Encrypt data using des

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
mov r10d, dword [rcx]
lea rsi, [r8 + 0x78]
mov r11d, dword [rdx]
lea r14, [0x140305800]
mov rbx, rdx
mov rdi, rcx
mov ebp, 8
nop dword [rax]
nop word [rax + rax]
mov edx, r11d
mov r9d, r11d
xor edx, dword [rsi + 4]
mov eax, edx
ror r9d, 4
xor r9d, dword [rsi]
shr eax, 8
and eax, 0x3f
add eax, 0x140
movzx eax, byte [rax + r14]
imul r8d, eax, 0x841018
mov eax, r9d
shr eax, 8
and eax, 0x3f
add eax, 0x100
and r8d, 0x20404010
movzx eax, byte [rax + r14]
imul ecx, eax, 0x912140
mov eax, edx
shr eax, 0x10
and eax, 0x3f
add eax, 0xc0
and ecx, 0x42080100
xor r8d, ecx
movzx eax, byte [rax + r14]
imul ecx, eax, 0x60221
mov eax, edx
shr eax, 0x18
and edx, 0x3f
and eax, 0x3f
add edx, 0x1c0
add eax, 0x40
and ecx, 0x802081
xor r8d, ecx
movzx eax, byte [rax + r14]
imul ecx, eax, 0x2012020
mov eax, r9d
shr eax, 0x10
and eax, 0x3f
sub eax, 0xffffff80
and ecx, 0x80108020
xor r8d, ecx
movzx eax, byte [rax + r14]
imul ecx, eax, 0x901048
mov eax, r9d
shr rax, 0x18
and r9d, 0x3f
and eax, 0x3f
add r9d, 0x180
and ecx, 0x8020208
movzx eax, byte [rax + r14]
xor r8d, ecx
imul ecx, eax, 0x41106
movzx eax, byte [rdx + r14]
and ecx, 0x1010404
xor r8d, ecx
imul ecx, eax, 0x212240
movzx eax, byte [r9 + r14]
and ecx, 0x10041040
xor r8d, ecx
imul ecx, eax, 0x120202
and ecx, 0x4200802
xor r8d, ecx
xor r10d, r8d
mov edx, r10d
mov r9d, r10d
xor edx, dword [rsi - 4]
mov eax, edx
ror r9d, 4
xor r9d, dword [rsi - 8]
shr eax, 8
and eax, 0x3f
add eax, 0x140
movzx eax, byte [rax + r14]
imul r8d, eax, 0x841018
mov eax, r9d
shr eax, 8
and eax, 0x3f
and r8d, 0x20404010
add eax, 0x100
movzx eax, byte [rax + r14]
imul ecx, eax, 0x912140
lea rsi, [rsi - 0x10]
mov eax, edx
shr eax, 0x10
and eax, 0x3f
add eax, 0xc0
and ecx, 0x42080100
xor r8d, ecx
movzx eax, byte [rax + r14]
imul ecx, eax, 0x60221
mov eax, edx
shr eax, 0x18
and edx, 0x3f
and eax, 0x3f
add edx, 0x1c0
add eax, 0x40
and ecx, 0x802081
xor r8d, ecx
movzx eax, byte [rax + r14]
imul ecx, eax, 0x2012020
mov eax, r9d
shr eax, 0x10
and eax, 0x3f
sub eax, 0xffffff80
and ecx, 0x80108020
xor r8d, ecx
movzx eax, byte [rax + r14]
imul ecx, eax, 0x901048
mov eax, r9d
shr rax, 0x18
and r9d, 0x3f
and eax, 0x3f
add r9d, 0x180
and ecx, 0x8020208
movzx eax, byte [rax + r14]
xor r8d, ecx
imul ecx, eax, 0x41106
movzx eax, byte [rdx + r14]
and ecx, 0x1010404
xor r8d, ecx
imul ecx, eax, 0x212240
movzx eax, byte [r9 + r14]
and ecx, 0x10041040
xor r8d, ecx
imul ecx, eax, 0x120202
and ecx, 0x4200802
xor r8d, ecx
xor r11d, r8d
sub rbp, 1
jne 0x140272a50
mov rbp, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x20]
mov dword [rdi], r10d
mov rdi, qword [rsp + 0x28]
mov dword [rbx], r11d
mov rbx, qword [rsp + 0x10]
pop r14
ret
Function at 0x140276770
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
movzx r11d, cx
mov edi, 3
movzx r10d, r11w
mov ebx, r11d
nop word [rax + rax]
xor ecx, ecx
movzx r8d, r10w
imul r8d, r8d
movzx eax, r8w
mov edx, r8d
shr edx, 0x10
cmp eax, edx
lea r9d, [r8 - 1]
not r8d
setb cl
shr r8d, 0x1f
sub cx, dx
shr r9d, 0x1f
and r9w, r8w
add cx, ax
xor r8d, r8d
add r10w, r10w
neg r9w
mov eax, 1
sub ax, r10w
xor ax, cx
and r9w, ax
xor r9w, cx
movzx edx, r9w
imul edx, ebx
movzx eax, dx
mov ecx, edx
shr ecx, 0x10
cmp eax, ecx
lea r10d, [rdx - 1]
not edx
setb r8b
shr edx, 0x1f
sub r8w, cx
shr r10d, 0x1f
add r8w, ax
and r10w, dx
neg r10w
mov eax, 1
sub ax, r9w
sub ax, r11w
xor ax, r8w
and r10w, ax
xor r10w, r8w
xor r8d, r8d
movzx edx, r10w
imul edx, edx
movzx eax, dx
mov ecx, edx
shr ecx, 0x10
cmp eax, ecx
lea r9d, [rdx - 1]
not edx
setb r8b
shr edx, 0x1f
sub r8w, cx
shr r9d, 0x1f
add r8w, ax
and r9w, dx
add r10w, r10w
neg r9w
mov eax, 1
sub ax, r10w
xor ax, r8w
and r9w, ax
xor r9w, r8w
xor r8d, r8d
movzx edx, r9w
imul edx, ebx
movzx eax, dx
mov ecx, edx
shr ecx, 0x10
cmp eax, ecx
lea r10d, [rdx - 1]
not edx
setb r8b
shr r10d, 0x1f
sub r8w, cx
shr edx, 0x1f
add r8w, ax
and r10w, dx
neg r10w
mov eax, 1
sub ax, r9w
sub ax, r11w
xor ax, r8w
and r10w, ax
xor r10w, r8w
xor r8d, r8d
movzx edx, r10w
imul edx, edx
movzx eax, dx
mov ecx, edx
shr ecx, 0x10
cmp eax, ecx
lea r9d, [rdx - 1]
not edx
setb r8b
shr edx, 0x1f
sub r8w, cx
shr r9d, 0x1f
add r8w, ax
and r9w, dx
add r10w, r10w
neg r9w
mov eax, 1
sub ax, r10w
xor ax, r8w
and r9w, ax
xor r9w, r8w
xor r8d, r8d
movzx edx, r9w
imul edx, ebx
movzx eax, dx
mov ecx, edx
shr ecx, 0x10
cmp eax, ecx
lea r10d, [rdx - 1]
not edx
setb r8b
shr edx, 0x1f
sub r8w, cx
shr r10d, 0x1f
add r8w, ax
and r10w, dx
neg r10w
mov eax, 1
sub ax, r9w
sub ax, r11w
xor ax, r8w
and r10w, ax
xor r10w, r8w
xor r8d, r8d
movzx edx, r10w
imul edx, edx
movzx eax, dx
mov ecx, edx
shr ecx, 0x10
cmp eax, ecx
lea r9d, [rdx - 1]
not edx
setb r8b
shr r9d, 0x1f
sub r8w, cx
shr edx, 0x1f
add r8w, ax
and r9w, dx
neg r9w
mov eax, 1
add r10w, r10w
sub ax, r10w
xor ax, r8w
and r9w, ax
xor r9w, r8w
xor r8d, r8d
movzx edx, r9w
imul edx, ebx
mov ecx, edx
movzx eax, dx
shr ecx, 0x10
cmp eax, ecx
setb r8b
sub r8w, cx
lea r10d, [rdx - 1]
add r8w, ax
shr r10d, 0x1f
not edx
mov eax, 1
sub ax, r9w
shr edx, 0x1f
and r10w, dx
sub ax, r11w
xor ax, r8w
neg r10w
and r10w, ax
xor r10w, r8w
xor r8d, r8d
movzx edx, r10w
imul edx, edx
movzx eax, dx
mov ecx, edx
shr ecx, 0x10
cmp eax, ecx
lea r9d, [rdx - 1]
not edx
setb r8b
add r10w, r10w
sub r8w, cx
shr edx, 0x1f
add r8w, ax
shr r9d, 0x1f
and r9w, dx
mov eax, 1
sub ax, r10w
neg r9w
xor ax, r8w
and r9w, ax
xor r9w, r8w
xor r8d, r8d
movzx edx, r9w
imul edx, ebx
movzx eax, dx
mov ecx, edx
shr ecx, 0x10
cmp eax, ecx
lea r10d, [rdx - 1]
not edx
setb r8b
shr r10d, 0x1f
sub r8w, cx
shr edx, 0x1f
and r10w, dx
add r8w, ax
neg r10w
mov ecx, 1
sub cx, r9w
sub cx, r11w
xor cx, r8w
and r10w, cx
xor r10w, r8w
sub rdi, 1
jne 0x140276790
mov rbx, qword [rsp + 8]
movzx eax, r10w
mov rdi, qword [rsp + 0x10]
ret
Function at 0x14028faf0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x80
mov rax, qword [0x1403531c0]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov rax, qword [rcx + 8]
mov rdi, rdx
mov rdx, qword [rdx + 8]
mov rbx, rcx
sub rax, qword [rcx]
sub rdx, qword [rdi]
cmp rax, rdx
jae 0x14028fb2f
call fcn.140249200
mov rax, qword [rbx]
jmp 0x14028fb32
mov rax, qword [rcx]
mov r9, qword [rdi]
mov r8, qword [rdi + 8]
mov r10, r9
sub r8, r9
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], r8
mov r11, r8
movaps xmm0, xmmword [rsp + 0x20]
mov rdx, r8
movdqa xmmword [rsp + 0x20], xmm0
cmp r8, 0x20
jb 0x14028fc1b
nop dword [rax]
nop dword [rax + rax]
mov rdx, qword [rsp + 0x20]
lea r10, [r9 + 0x20]
mov rax, qword [r9 + 8]
mov r11, qword [rsp + 0x28]
add r11, 0xffffffffffffffe0
mov qword [rsp + 0x40], r10
movups xmm1, xmmword [rdx]
mov qword [rsp + 0x38], r11
movups xmm2, xmmword [rdx + 0x10]
movups xmmword [rsp + 0x50], xmm1
xor qword [rsp + 0x58], rax
mov rax, qword [r9 + 0x18]
movq rcx, xmm1
xor rcx, qword [r9]
mov qword [rsp + 0x50], rcx
movq rcx, xmm2
xor rcx, qword [r9 + 0x10]
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rsp + 0x60], xmm2
xor qword [rsp + 0x68], rax
lea rax, [rdx + 0x20]
mov qword [rsp + 0x60], rcx
lea rcx, [r8 - 0x20]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x48], rcx
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdx], xmm0
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x20], xmm0
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x50], xmm0
movups xmmword [rdx + 0x10], xmm1
cmp r11, 0x20
jb 0x14028fc18
mov r8, qword [rsp + 0x58]
mov r9, qword [rsp + 0x50]
jmp 0x14028fb70
mov rdx, r11
test r11, r11
je 0x14028fc41
sub r10, rax
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rax + r10]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x14028fc30
mov rax, rbx
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.1402d55d0
mov rbx, qword [rsp + 0xa0]
add rsp, 0x80
pop rdi
ret
Function at 0x1402929d0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0xc0
mov rax, qword [0x1403531c0]
xor rax, rsp
mov qword [rsp + 0xb8], rax
mov r14, r8
mov r12, rdx
mov rbp, rcx
mov rax, qword [rdx]
mov rsi, qword [rdx + 8]
sub rsi, rax
cmp rsi, r8
jb 0x140292be6
sub rsi, r8
lea rbx, [rax + r8]
mov rax, qword [rcx + 8]
cmp rsi, rax
jb 0x140292c01
sub rsi, rax
je 0x140292a60
mov rcx, qword [rcx + 0x20]
mov rax, qword [rcx]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rsi
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x18]
mov rax, qword [rcx]
mov r9, rsi
mov r8, rbx
mov rdx, rbx
call qword [rax + 0x60]
lea rdi, [rsi + rbx]
lea rdx, [rsp + 0x68]
mov rcx, qword [rbp + 0x20]
call fcn.14025de40
nop
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x68]
call fcn.14028faf0
mov rax, qword [rbp + 0x30]
cmp qword [rbp + 0x28], rax
jne 0x140292af9
mov rbx, qword [rbp + 0x20]
mov rcx, qword [rbp + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9, rbx
mov r8, rax
mov dl, 1
lea rcx, [rsp + 0x50]
call fcn.1402928d0
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.14005a750
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140292af9
mov rdx, qword [rsp + 0x60]
sub rdx, rcx
mov r8d, 1
call fcn.1402456d0
mov qword [rsp + 0x50], 0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x68]
call fcn.14028faf0
mov rdx, qword [rbp + 8]
mov byte [rsp + 0x30], 0
test rdx, rdx
je 0x140292b3c
mov r8, qword [rsp + 0x68]
sub r8, rdi
nop dword [rax]
movzx ecx, byte [rdi + r8]
xor cl, byte [rdi]
movzx eax, byte [rsp + 0x30]
or al, cl
mov byte [rsp + 0x30], al
lea rdi, [rdi + 1]
sub rdx, 1
jne 0x140292b20
movzx eax, byte [rsp + 0x30]
lea ebx, [rax - 1]
not al
and bl, al
lea rdx, [r14 + rsi]
mov rcx, r12
call fcn.140249200
mov rax, qword [rbp + 0x40]
cmp rax, qword [rbp + 0x48]
je 0x140292b62
mov qword [rbp + 0x48], rax
test bl, bl
jns 0x140292ba6
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140292b84
mov rdx, qword [rsp + 0x78]
sub rdx, rcx
mov r8d, 1
call fcn.1402456d0
nop
mov rcx, qword [rsp + 0xb8]
xor rcx, rsp
call fcn.1402d55d0
add rsp, 0xc0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
lea rdx, str.EAX_tag_check_failed
lea rcx, [rsp + 0x50]
call fcn.140246530
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x80]
call fcn.14024f610
lea rdx, [0x1403515c8]
lea rcx, [rsp + 0x80]
call fcn.1402d6228
nop
lea r8, str.C:_Users_Rosalyn_vcpkg_buildtrees_botan_src_3.5.0_2446fa6972.clean_src_lib_modes_aead_eax_eax.cpp
lea rdx, str.finish_msg
lea rcx, str.Offset_is_out_of_range
call fcn.1402516f0
int3
lea r8, str.C:_Users_Rosalyn_vcpkg_buildtrees_botan_src_3.5.0_2446fa6972.clean_src_lib_modes_aead_eax_eax.cpp
lea rdx, str.finish_msg
lea rcx, str.input_did_not_include_the_tag
call fcn.1402516f0
int3
Function at 0x1402938e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
push r14
sub rsp, 0xa8
mov rax, qword [0x1403531c0]
xor rax, rsp
mov qword [rsp + 0x98], rax
mov rax, qword [rdx]
mov rsi, r8
mov rbx, qword [rdx + 8]
mov r14, rdx
sub rbx, rax
mov rdi, rcx
cmp r8, rbx
ja 0x140293a6a
mov qword [rsp + 0xa0], rbp
sub rbx, r8
lea rbp, [rax + r8]
mov rax, qword [rcx + 8]
cmp rbx, rax
jb 0x140293a85
sub rbx, rax
je 0x140293972
mov rcx, qword [rcx + 0x38]
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x38], rbx
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
call fcn.1402cf730
mov rcx, qword [rdi + 0x30]
mov r9, rbx
mov r8, rbp
mov rdx, rbp
mov rax, qword [rcx]
call qword [rax + 0x60]
mov rcx, qword [rdi + 0x38]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
mov rax, qword [rdi + 8]
xorps xmm0, xmm0
mov qword [rsp + 0x38], rax
movups xmmword [rsp + 0x50], xmm0
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
call fcn.1402ce6d0
mov r8, qword [r14]
lea r10, [rsi + rbx]
mov r9, qword [rdi + 8]
add r8, r10
xor edx, edx
mov byte [rsp + 0x20], 0
test r9, r9
je 0x1402939f2
lea rax, [rsp + 0x50]
sub r8, rax
nop dword [rax + rax]
lea rax, [rsp + 0x50]
add rax, rdx
inc rdx
movzx ecx, byte [rax + r8]
xor cl, byte [rax]
movzx eax, byte [rsp + 0x20]
or cl, al
mov byte [rsp + 0x20], cl
cmp rdx, r9
jne 0x1402939d0
movzx ecx, byte [rsp + 0x20]
lea eax, [rcx - 1]
not cl
test cl, al
jge 0x140293a30
mov rdx, r10
mov rcx, r14
call fcn.140249200
mov rbp, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x98]
xor rcx, rsp
call fcn.1402d55d0
add rsp, 0xa8
pop r14
pop rdi
pop rsi
pop rbx
ret
lea rdx, str.GCM_tag_check_failed
lea rcx, [rsp + 0x40]
call fcn.140246530
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x30], xmm0
call fcn.14024f610
lea rdx, [0x1403515c8]
lea rcx, [rsp + 0x60]
call fcn.1402d6228
int3
lea r8, str.C:_Users_Rosalyn_vcpkg_buildtrees_botan_src_3.5.0_2446fa6972.clean_src_lib_modes_aead_gcm_gcm.cpp
lea rdx, str.finish_msg
lea rcx, str.Invalid_offset
call fcn.1402516f0
int3
lea r8, str.C:_Users_Rosalyn_vcpkg_buildtrees_botan_src_3.5.0_2446fa6972.clean_src_lib_modes_aead_gcm_gcm.cpp
lea rdx, str.finish_msg
lea rcx, str.input_did_not_include_the_tag
call fcn.1402516f0
int3