joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140093704
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp - 0x1c], esi
xchg rbp, r12
mov qword [rsp + 0x10], r12
xchg rbp, r12
xchg rcx, rsi
mov qword [rsp + 0x18], rcx
xchg rsi, rcx
push rdi
mov dword [rsp - 0x18], esi
nop
push 0x3d420637
mov qword [rsp], r14
nop
sub rsp, 8
mov qword [rsp], r15
sub rsp, 0x20
mov dword [rsp - 0x10], 0x77285986
movzx eax, byte [rdx + 1]
xchg r15, r13
mov r13, r8
xchg r13, r15
movzx ebx, byte [rdx]
movzx edi, byte [rdx + 4]
mov dword [rsp - 0x1c], 0x71249109
mov r8d, dword [rcx + 4]
shl ebx, 1
shl ebx, 5
shl ebx, 1
shl ebx, 1
dec r8d
or ebx, eax
mov r15, r15
shl edi, 1
shl edi, 3
shl edi, 3
shl edi, 1
movzx eax, byte [rdx + 2]
shl ebx, 2
shl ebx, 6
or ebx, eax
mov dword [rsp - 0x34], 0x7bd14289
movzx eax, byte [rdx + 3]
shl ebx, 8
or ebx, eax
mov dword [rsp - 0x28], 0x429708a0
movzx eax, byte [rdx + 5]
or edi, eax
movzx eax, byte [rdx + 6]
shl edi, 6
shl edi, 1
shl edi, 1
or edi, eax
mov dword [rsp - 0x34], 0x77ce7569
movzx eax, byte [rdx + 7]
shl edi, 1
shl edi, 6
shl edi, 1
or edi, eax
test r8d, r8d
xchg r10, r10
jle 0x14009385e
xchg rdx, rbp
mov rbp, qword [rcx + 8]
xchg rdx, rbp
lea r14d, [r8 - 1]
movsxd rax, r8d
shr r14d, 1
xchg r15, r15
inc r14d
lea rcx, [rax + rax*2]
lea eax, [r8 - 1]
mov dword [rsp - 0x14], 0x52ca2566
lea rsi, [rdx + rcx*4]
movsxd rcx, eax
lea rax, [rcx + rcx*2]
mov rbp, rbp
lea rbp, [rdx + rax*4]
xchg r9, rsi
mov rdx, r9
xchg rsi, r9
mov ecx, edi
call fcn.140093f7c
xchg rbp, rbp
xor ebx, eax
xchg rdx, r13
mov r13, rbp
xchg r13, rdx
mov ecx, ebx
call fcn.140093f7c
mov dword [rsp - 0x2c], 0x349150e6
xor edi, eax
sub rsi, 0x18
neg rbp
sub rbp, 0xffffffffffffffe8
neg rbp
sub r14, 1
jne 0x140093817
lea rax, [r15 + 7]
mov dword [rsp - 0x40], 0x48e58db3
mov ecx, 0x765f2765
sub ecx, 0x40816798
sub ecx, 0x47365bb
xor ecx, 0x316a5a16
mov byte [rax - 4], dil
mov dword [rsp - 0x18], ebx
mov byte [rax], bl
dec rax
shr ebx, 2
shr ebx, 1
shr ebx, 4
shr ebx, 1
shr edi, 7
shr edi, 1
sub rcx, 1
jne 0x140093881
mov dword [rsp - 0x34], esi
xchg r15, rbx
mov r15, qword [rsp + 0x40]
xchg rbx, r15
mov rbp, qword [rsp + 0x48]
mov rdi, rdi
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
nop
mov r15, qword [rsp]
add rsp, 8
nop
mov r14, qword [rsp]
add rsp, 8
pop rdi
mov dword [rsp - 0x1c], ebp
ret
Function at 0x1400938e0
Capabilities:
Encode data using xor

Disassembly:
xchg r9, rax
mov r9, rsp
xchg r9, rax
mov qword [rax + 8], rbx
xchg rbp, r13
mov qword [rax + 0x10], r13
xchg rbp, r13
mov qword [rax + 0x18], rsi
mov r11, r11
mov qword [rax + 0x20], rdi
push r14
nop
sub rsp, 0x40ed9d7a
add rsp, 0x40ed9d5a
movzx eax, byte [rdx + 1]
mov r14, r8
mov dword [rsp - 0x28], 0xe8b9f91
movzx ebx, byte [rdx]
movzx edi, byte [rdx + 4]
shl ebx, 3
shl ebx, 1
shl ebx, 3
shl ebx, 1
or ebx, eax
shl edi, 6
shl edi, 2
movzx eax, byte [rdx + 2]
xchg rbp, rbp
shl ebx, 5
shl ebx, 2
shl ebx, 1
or ebx, eax
mov rsi, rsi
movzx eax, byte [rdx + 3]
shl ebx, 6
shl ebx, 1
shl ebx, 1
or ebx, eax
movzx eax, byte [rdx + 5]
xchg r12, r12
or edi, eax
movzx eax, byte [rdx + 6]
shl edi, 3
shl edi, 3
shl edi, 1
shl edi, 1
or edi, eax
xchg rbp, rbp
movzx eax, byte [rdx + 7]
shl edi, 7
shl edi, 1
or edi, eax
xchg rsp, rsp
mov eax, dword [rcx + 4]
test eax, eax
jle 0x1400939d8
xchg rbx, rsi
mov rbx, qword [rcx + 8]
xchg rsi, rbx
lea ebp, [rax - 1]
shr ebp, 1
xchg r15, r15
inc ebp
mov rdx, rsi
mov ecx, edi
mov dword [rsp - 0xc], 0x455bdd0d
call fcn.140093f7c
xor ebx, eax
lea rdx, [rsi + 0xc]
mov ecx, ebx
xchg rbx, rbx
call fcn.140093f7c
xor edi, eax
sub rsi, 0xffffffffffffffe8
sub rbp, 1
mov rsi, rsi
jne 0x1400939a3
lea rax, [r14 + 7]
mov ecx, 0xd5a6528
xor ecx, 0x2fff4713
add ecx, 0x1dde516f
sub ecx, 0x408373a6
mov byte [rax - 4], dil
mov byte [rax], bl
mov r11, r11
dec rax
shr ebx, 8
shr edi, 2
shr edi, 6
sub rcx, 1
jne 0x1400939f3
mov rbx, qword [rsp + 0x30]
mov dword [rsp - 0x30], 0x11fc62ae
xchg r8, rbp
mov r8, qword [rsp + 0x38]
xchg r8, rbp
xchg rsi, r14
mov r14, qword [rsp + 0x40]
xchg r14, rsi
xchg rdi, rbp
mov rbp, qword [rsp + 0x48]
xchg rbp, rdi
nop
add rsp, 0x3ccc1d60
sub rsp, 0x3ccc1d40
nop
mov r14, qword [rsp]
add rsp, 8
ret
Function at 0x140093c58
Capabilities:
Encode data using xor

Disassembly:
xchg r14, rbx
mov qword [rsp + 0x10], r14
xchg rbx, r14
xchg rsi, r15
mov qword [rsp + 0x18], r15
xchg rsi, r15
nop
sub rsp, 8
mov qword [rsp], rbp
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r14
lea rbp, [rsp - 0x47]
mov r10, r10
add rsp, 0xffffffffffffff60
movdqa xmm0, xmmword [0x140001df0]
xor edi, edi
xchg rdx, rdx
movdqa xmm1, xmmword [0x140001e60]
xchg rcx, rdx
mov rbx, rcx
xchg rcx, rdx
movdqu xmmword [rbp - 0x39], xmm0
xchg rsp, rcx
mov rsi, rsp
xchg rcx, rsp
mov edx, edi
mov dword [rsp - 0x24], 0x4d6c042f
movdqa xmm0, xmmword [0x140001dc0]
mov r8d, edi
xchg r12, rbp
movdqu xmmword [r12 - 0x29], xmm1
xchg rbp, r12
movdqa xmm1, xmmword [0x140001db0]
movdqu xmmword [rbp - 0x19], xmm0
mov rdi, rdi
xchg r13, rbp
movdqu xmmword [r13 - 9], xmm1
xchg rbp, r13
mov ecx, edx
xchg rbp, rbp
lea r8, [r8 + 4]
mov eax, 0x3170b2b1
xor eax, 0x8c96784
sub eax, 0x22d1431e
add eax, 0x467cadfb
xor eax, 0x18874ec9
inc rdx
rol eax, cl
xor eax, dword [rbp + r8 - 0x3d]
mov dword [rsp - 0x1c], 0x23d7a4b1
mov dword [rbp + r8 + 3], eax
cmp rdx, 0x10
jb 0x140093d03
mov rbp, rbp
cmp dword [rsi + 4], 8
jne 0x140093da9
lea rdx, [rbp + 0x6d]
movzx ecx, byte [rbx + rdi*2]
mov dword [rsp - 0x20], ecx
movzx eax, byte [rbx + rdi*2 + 1]
inc rdi
shl cx, 8
mov dword [rsp - 0x20], edx
or cx, ax
mov word [rdx], cx
lea rdx, [rdx - 2]
xchg r13, r13
cmp rdi, 4
jl 0x140093d57
lea r9, [rbp + 7]
mov dword [rsp - 0x30], 0x2ec0551b
xor r8d, r8d
lea rdx, [rbp + 0x67]
mov rcx, rsi
xchg rdi, rdi
call fcn.140093a5c
jmp 0x140093e65
cmp dword [rsi], edi
jle 0x140093e65
xchg rdi, rdi
mov r14d, edi
lea rdx, [rbp + 0x6d]
mov r8d, 0x71d60c27
xor r8d, 0xa02cb57
xor r8d, 0x61d52324
sub r8d, 0x1a01e450
movzx eax, byte [rbx]
mov rsp, rsp
movzx ecx, byte [rbx + 1]
add rbx, 2
shl ax, 2
shl ax, 6
or cx, ax
mov word [rdx], cx
xchg r13, r13
lea rdx, [rdx - 2]
sub r8, 1
jne 0x140093dd6
lea r9, [rbp + 7]
xchg r9, r9
mov r8d, r14d
lea rdx, [rbp + 0x67]
mov rcx, rsi
call fcn.140093a5c
xchg r13, r13
mov r8d, dword [rsi + 4]
lea r9, [rbp + 0x27]
sub r8d, r14d
xchg r9, r9
lea rdx, [rbp + 0x67]
neg r8d
sub r8d, 0xfffffff8
neg r8d
xchg rsi, r11
mov rcx, r11
xchg r11, rsi
call fcn.140093a5c
inc edi
mov rbp, rbp
nop
sub r14d, 0x657d5d4
add r14d, 0x657d5dc
cmp edi, dword [rsi]
xchg r14, r14
jl 0x140093db7
xor eax, eax
lea r11, [rsp + 0xa0]
mov rsp, rsp
mov rbx, qword [r11 + 0x28]
lea rdi, [rbp + 7]
xchg rsi, rsp
mov rsp, qword [r11 + 0x30]
xchg rsi, rsp
lea ecx, [rax + 0x40]
mov r13, r13
rep stosb byte [rdi], al
xchg rsi, rsp
mov rsi, r11
xchg rsi, rsp
nop
mov r14, qword [rsp]
add rsp, 8
pop rdi
mov dword [rsp - 0x44], 0x6d34c80
pop rbp
ret

Function at 0x140093f30
Capabilities:
Encode data using xor

Disassembly:
xor r10d, r10d
mov r11d, ecx
mov dword [rsp - 0x38], esp
test edx, edx
je 0x140093f77
lea ecx, [r11 + r11]
mov r9d, r10d
mov dword [rsp - 0x40], 0x22cb8fcb
xor r9d, r11d
mov r11d, ecx
test dl, 1
xchg r8, r8
cmove r9d, r10d
xor r11d, r8d
cmp ecx, 0x100
xchg r10, r10
mov r10d, r9d
cmovb r11d, ecx
shr edx, 1
xchg r8, r8
jne 0x140093f3e
mov eax, r10d
ret
Function at 0x14009efbc
Capabilities:
Encode data using xor

Disassembly:
xchg rsp, rax
mov rsp, qword [rcx + 0xf8]
xchg rsp, rax
xor r8d, r8d
xchg rsp, rdx
mov r9, rsp
xchg rdx, rsp
test rax, rax
xchg r14, r14
je 0x14009f032
mov ecx, r8d
mov edx, 0x1dc90399
add edx, 0x1b3e5444
add edx, 0x1c21a84a
sub edx, 0x48ae3796
add edx, 0x3967464a
rol edx, cl
xor dl, byte [rax]
mov dword [rsp - 0xc], 0x38efbb97
inc rax
mov byte [r8 + r9], dl
inc r8
cmp r8, 0x20
mov dword [rsp - 0x18], 0x248480e4
jb 0x14009efdf
mov al, 0x27
xor al, 0x5b
sub al, 0x29
xor al, 0x1f
xor al, 0x4d
ret
xchg r13, rax
mov r13, qword [rcx + 0x100]
xchg r13, rax
test rax, rax
je 0x14009f068
mov dword [rsp - 0x1c], ebx
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
xchg r9, rax
movups xmm1, xmmword [r9 + 0x10]
xchg r9, rax
xchg rdx, rbp
movups xmmword [rbp + 0x10], xmm1
xchg rbp, rdx
jmp 0x14009f027
xorps xmm0, xmm0
xor al, al
xchg rdi, rdx
movups xmmword [rdi], xmm0
xchg rdi, rdx
xchg rdx, r13
movups xmmword [r13 + 0x10], xmm0
xchg r13, rdx
ret
Function at 0x1400b5a20
Capabilities:
Encode data using xor

Disassembly:
xchg rsp, r11
mov rsp, r11
xchg r11, rsp
xchg rbx, rsi
mov qword [r11 + 8], rsi
xchg rsi, rbx
mov qword [r11 + 0x18], rsi
mov r13, r13
xchg rdi, rsp
mov qword [r11 + 0x20], rsp
xchg rsp, rdi
nop
mov qword [rsp - 8], r14
sub rsp, 8
neg rsp
sub rsp, 0xffffffffffffffc0
neg rsp
mov rax, qword [0x1401414c8]
lea rdx, [r11 + 0x10]
mov dword [rsp - 0x1c], 0x4330a734
xchg rbx, rsp
mov rsp, rcx
xchg rbx, rsp
mov dword [rsp + 0x58], 0x35a537b1
sub dword [rsp + 0x58], 0x13c53f8
xor dword [rsp + 0x58], 0x73fa2949
sub dword [rsp + 0x58], 0x53c3658
sub dword [rsp + 0x58], 0x42569488
movabs rcx, 0x3acbb2a63db81440
sub rcx, 0x91bc55b
xor rcx, 0x3f7cc4d7
add rcx, 0x603c7be
xor rax, rcx
movabs rcx, 0x1d606c8e1ec42863
xor rcx, 0x19115c61
xor rcx, 0x2e9743b8
sub rcx, 0x236a95ca
ror rax, 0xd
ror rax, 0xa
ror rax, 5
ror rax, 1
add rax, rcx
mov dword [rsp - 0x38], esi
lea rcx, [r11 - 0x28]
ror rax, 0x15
ror rax, 2
ror rax, 0xa
ror rax, 1
ror rax, 2
ror rax, 1
call rax
lea rdi, [rbx + 8]
mov dword [rsp - 0x24], 0x2ff611e0
xorps xmm0, xmm0
mov qword [rbx], rdi
xor esi, esi
mov dword [rsp - 0x44], 0x14d427e
movups xmmword [rdi], xmm0
xchg r13, rdi
movups xmmword [r13 + 0x10], xmm0
xchg r13, rdi
xchg rbp, rdi
movups xmmword [rbp + 0x20], xmm0
xchg rdi, rbp
test eax, eax
jne 0x1400b5b5a
xchg r14, rsi
mov qword [rbx + 0x38], r14
xchg rsi, r14
jmp 0x1400b5c90
lea rax, [rsp + 0x20]
mov dword [rsp - 0x24], 0x6cbd5bbc
or r14, 0xffffffffffffffff
inc r14
cmp word [rax + r14*2], si
mov rbp, rbp
jne 0x1400b5b6b
mov qword [rbx + 0x38], r14
cmp qword [rbx], rdi
mov dword [rsp - 0x40], 0x733b15e
je 0x1400b5b9f
xchg rcx, rdi
mov rdi, qword [rbx]
xchg rdi, rcx
call fcn.140098770
cmp r14, 0x18
jbe 0x1400b5bdc
xchg rbp, rbp
lea rcx, [r14 + r14]
call fcn.1400989f0
xchg r12, rax
mov qword [rbx], r12
xchg r12, rax
test rax, rax
jne 0x1400b5bea
xchg rdi, r9
mov qword [rbx], r9
xchg r9, rdi
xchg rcx, rbp
mov rbp, rsi
xchg rbp, rcx
jmp 0x1400b5c0c
mov qword [rbx], rdi
mov dword [rsp - 0x44], edx
xchg rdx, rax
mov rdx, rdi
xchg rdx, rax
xorps xmm0, xmm0
mov rbp, rbp
movups xmmword [rax], xmm0
xchg r10, rax
movups xmmword [r10 + 0x10], xmm0
xchg r10, rax
xchg r9, rax
movups xmmword [r9 + 0x20], xmm0
xchg r9, rax
mov rcx, qword [rbx]
mov dword [rsp - 0x3c], edx
mov edx, 0xc1ad534
add edx, 0x96fca2e
add edx, 0x46566f27
sub edx, 0x41e097dd
xor edx, 0x5561285c
cmp qword [rbx + 0x38], rsi
mov dword [rsp - 0x1c], 0x3f6bed2
jbe 0x1400b5c90
lea r8, [rsp + 0x20]
sub r8, rcx
movzx eax, dx
mov rdi, rdi
mov r9d, 0x3eb7526f
sub r9d, 0x3398915e
add r9d, 0x4ba7b21f
sub r9d, 0x56c67231
and ax, r9w
ror edx, 5
ror edx, 2
ror edx, 1
xor ax, word [r8 + rcx]
mov rdx, rdx
inc rsi
mov word [rcx], ax
lea rcx, [rcx + 2]
mov dword [rsp - 0x34], ebp
cmp rsi, qword [rbx + 0x38]
jb 0x1400b5c43
xchg r15, rsi
mov r15, qword [rsp + 0x60]
xchg r15, rsi
mov rax, rbx
mov dword [rsp - 0x1c], 0x3ffbdc9c
mov rbx, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x68]
nop
sub rsp, 0x67cfc846
add rsp, 0x67cfc886
nop
add rsp, 8
mov r14, qword [rsp - 8]
ret
Function at 0x1400d1a10
Capabilities:
Hash data using murmur3

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
mov dword [rsp - 0x38], 0x63e004f1
nop
sub rsp, 0x56306136
add rsp, 0x56306116
xchg rdx, rdi
jmp 0x1400d1c08
sub rax, 0x66ef3712
ror rcx, 9
ror rcx, 0x16
jmp 0x1400d1adf
xor edx, edx
xchg rcx, r11
mov r11, rax
xchg r11, rcx
jmp 0x1400d1a58
call fcn.140055ec0
cmp eax, 0x102
jne 0x1400d1a89
mov r11, r11
mov rcx, qword [0x140141430]
movabs rax, 0xe66d07937f396cb7
xor rax, 0xace6602
jmp 0x1400d1c7b
call rax
xchg rcx, r12
mov r12, rbx
xchg r12, rcx
call fcn.140055c70
mov dword [rsp - 0x3c], 0x40befd99
mov rbx, qword [rsp + 0x38]
jmp 0x1400d1acf
add rcx, 0x2569d065
add rcx, 0x7fffffff
add rcx, 0x3a190d32
rol rax, 0xf
rol rax, 3
rol rax, 0x17
jmp 0x1400d1bd6
mov rax, rdi
nop
sub rsp, 0x23b6a229
jmp 0x1400d1b53
ror rcx, 3
ror rcx, 7
ror rcx, 1
ror rcx, 1
mov edx, 0x46f603a7
sub edx, 0x3b60b849
xor edx, 0x62ebc78c
jmp 0x1400d1c1d
xor qword [rsp + 0x30], 0x5360fc07
sub qword [rsp + 0x30], 0x2c180697
add qword [rsp + 0x30], 0x7fffffff
add qword [rsp + 0x30], 0x31006bb0
jmp 0x1400d1a48
call fcn.140088750
xchg r10, rax
mov rbx, r10
xchg r10, rax
jmp 0x1400d1c4b
mov r9, r9
rol rax, 0x15
rol rax, 1
rol rax, 0xd
rol rax, 1
jmp 0x1400d1b8f
add rsp, 0x23b6a249
nop
mov rdi, qword [rsp]
add rsp, 8
ret
add rcx, 0x1e477c9d
xor rcx, 0x62175e47
add rcx, 0x1c929cf1
add rcx, 0x7fffffff
add rcx, 0x304dd406
not rax
jmp 0x1400d1b3d
add rax, rcx
movabs rcx, 0x177c22ef07e7da93
add rcx, 0x5d4d7c18
sub rcx, 0x6c2bdd
sub rcx, 0x61dd5a6d
jmp 0x1400d1aa9
xor qword [rsp + 0x30], 0x6d62130f
xor qword [rsp + 0x30], 0x70058644
sub qword [rsp + 0x30], 0x13d21a61
jmp 0x1400d1b03
rol rax, 1
rol rax, 1
rol rax, 2
rol rax, 1
add rax, rcx
mov rcx, rbx
mov dword [rsp - 0x1c], esp
jmp 0x1400d1a87
xchg r8, rcx
mov rcx, r8
xchg r8, rcx
or rcx, 0xffffffffffffffff
mov dword [rsp - 0x38], ebx
jmp 0x1400d1b2c
mov rdx, rcx
xchg rdi, rdx
lea rdx, [0x1400d0598]
mov r8, r8
jmp 0x1400d1bf2
xor edx, 0x14913a95
xor edx, 0x72c0d315
xor edx, 0xf2f6553
add rax, rcx
mov r13, r13
movabs rcx, 0x7b8ae1b20b3ece2f
xor rcx, 0x46c57591
jmp 0x1400d1b64
test rax, rax
mov dword [rsp - 0xc], ebx
je 0x1400d1a9f
lea r8, [rsp + 0x30]
mov dword [rsp + 0x34], 0xffffffff
mov dword [rsp + 0x30], 0x7b481d7c
xor qword [rsp + 0x30], 0x5add9ae7
jmp 0x1400d1bb6
sub rax, 0x343e4450
sub rax, 0x1d593a3
sub rax, 0x2883f29a
sub rax, 0xa6e9da3
xor rax, 0x2e07f933
add rax, 0x46fd5c07
jmp 0x1400d1a35
Function at 0x1400d917c
Capabilities:
Encode data using xor

Disassembly:
xchg r8, rbx
mov qword [rsp + 0x10], r8
xchg r8, rbx
xchg r8, rsi
mov qword [rsp + 0x18], r8
xchg r8, rsi
xchg rdi, rsi
mov qword [rsp + 0x20], rsi
xchg rdi, rsi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rsp, r15
mov rbp, r15
xchg r15, rsp
neg rsp
sub rsp, 0xffffffffffffffb0
neg rsp
xor esi, esi
mov dword [rbp - 0x30], 0x692d3fe2
sub dword [rbp - 0x30], 0x21b01765
sub dword [rbp - 0x30], 0x3371c43a
sub dword [rbp - 0x30], 0x13de639c
mov dword [rbp - 0x2c], 0x755215d6
sub dword [rbp - 0x2c], 0x3a703a70
add dword [rbp - 0x2c], 0x116506b3
sub dword [rbp - 0x2c], 0x10d571d2
sub dword [rbp - 0x2c], 0x3b616ff4
xchg rcx, r10
mov rbx, r10
xchg rcx, r10
mov dword [rbp - 0x28], 0x4eb4eee0
sub dword [rbp - 0x28], 0x21387a83
sub dword [rbp - 0x28], 0x4a2ff9b
sub dword [rbp - 0x28], 0x286d73ff
mov dword [rbp - 0x24], 0x4951d0d3
xor dword [rbp - 0x24], 0x1076fd8b
sub dword [rbp - 0x24], 0x51b5ffde
xor dword [rbp - 0x24], 0x75a2d35
mov dword [rbp - 0x20], 0x6d8cddd9
sub dword [rbp - 0x20], 0x672817c9
add dword [rbp - 0x20], 0x413773e3
sub dword [rbp - 0x20], 0x476a3957
mov qword [rbp + 0x10], rsi
xchg rdi, rdi
mov rax, qword [rbp + 0x10]
xchg rcx, rsi
mov rsi, qword [rbp + 0x10]
xchg rsi, rcx
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x3c], esp
and cl, 3
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov dword [rsp - 0x40], 0x3041923e
mov eax, 0x7995ed5e
sub eax, 0xe63fdde
sub eax, 0x4d29ed37
add eax, 0x31595ca7
shr eax, cl
movzx ecx, al
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x10], ebx
xor cx, dx
mov word [rbp + rax*2 - 0x1c], cx
xchg r9, rax
mov r9, qword [rbp + 0x10]
xchg r9, rax
inc rax
mov qword [rbp + 0x10], rax
mov dword [rsp - 0x38], 0x44a61ef1
mov rax, qword [rbp + 0x10]
cmp rax, 0xa
jb 0x1400d9263
xor edx, edx
mov r9, r9
mov word [rbp - 8], si
lea rcx, [rbp - 0x1c]
call fcn.14008add0
xchg r8, rax
mov rax, r8
xchg r8, rax
xchg r10, rax
mov qword [rbx + 0x200], r10
xchg r10, rax
xor eax, eax
mov rcx, rcx
lea rdi, [rbp - 0x1c]
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
mov rbx, rbx
test r8, r8
je 0x1400d9364
lea rdx, [rbx + 0x208]
xchg rcx, r15
mov r15, r8
xchg r15, rcx
call fcn.1400d9a64
mov dword [rsp - 0x24], ecx
test al, al
jne 0x1400d935a
mov rcx, qword [rbx + 0x200]
xchg rcx, rcx
call fcn.14008d330
xor al, al
xchg rcx, rsi
mov qword [rbx + 0x200], rcx
xchg rsi, rcx
jmp 0x1400d9364
mov al, 0x39
sub al, 0x26
sub al, 0xf
add al, 0x21
xor al, 0x24
mov rbx, qword [rsp + 0x68]
mov r8, r8
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
neg rsp
add rsp, 0xffffffffffffffb0
neg rsp
pop rbp
ret
Function at 0x1400d9800
Capabilities:
Encode data using xor

Disassembly:
xchg r8, rbx
mov qword [rsp + 0x10], r8
xchg rbx, r8
push rdi
xchg r14, r14
neg rsp
sub rsp, 0xfffffffffffffec0
neg rsp
mov rdi, r8
xchg rbx, r8
mov r8, rcx
xchg rbx, r8
mov r8d, 0x51557adb
xor r8d, 0x7b019adb
add r8d, 0x6a6e3a7
add r8d, 0x24f22a44
xor r8d, 0x55edeceb
lea rcx, [rsp + 0x40]
xor edx, edx
mov rdi, rdi
call fcn.140098d20
xchg r9, rax
mov r9, qword [rbx + 0x238]
xchg r9, rax
lea r8, [rsp + 0x40]
mov edx, dword [rdi + 0x10]
mov dword [rsp - 0x24], ecx
movabs rcx, 0x8530fce0baad9db
xor rcx, 0x6ad7042c
sub rcx, 0x28acd8a7
sub rcx, 0x1870f08e
xor rcx, 0x5915e9f0
sub rax, rcx
mov r13, r13
mov dword [rsp + 0x30], 0x5456e023
add dword [rsp + 0x30], 0x1df9e1e5
sub dword [rsp + 0x30], 0xa6bed10
xor dword [rsp + 0x30], 0x67e4d4fa
and dword [rsp + 0x28], 0
xchg r13, r13
movabs rcx, 0x4432fa9d19d7030a
xor rcx, 0x32221fbd
add rcx, 0xe8878ab
add rcx, 0x7fffffff
xor rcx, 0x48c35a3f
and qword [rsp + 0x20], 0
xor rax, rcx
mov dword [rsp - 0x20], esp
ror rax, 1
ror rax, 2
ror rax, 8
ror rax, 2
ror rax, 1
ror rax, 1
movabs rcx, 0x3f5f76e60beb988
sub rcx, 0x3afe5ade
add rcx, 0x54bcb0ea
xor rcx, 0x5a26d3c6
sub rax, rcx
mov r9d, 0x3157f42a
add r9d, 0x5ce4308
xor r9d, 0x4ae24648
xor r9d, 0x1e595a98
xor r9d, 0x639d2ae2
rol rax, 6
rol rax, 5
rol rax, 1
movabs rcx, 0x2401b0760f87662f
add rcx, 0x51239060
xor rcx, 0x1e59d31f
sub rcx, 0x755acfdf
add rcx, 0x6b2ead94
not rax
mov r10, r10
sub rax, rcx
xchg rcx, rbp
mov rbp, qword [rdi + 0x20]
xchg rbp, rcx
call rax
test eax, eax
jne 0x1400d9a44
mov dword [rsp - 0x2c], 0x8b5d262
or eax, 0xffffffff
lea rbx, [rsp + 0x40]
cmp byte [rsp + 0x40], 0
xchg rsp, rsp
mov dword [rsp + 0x150], eax
je 0x1400d9a17
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
lea rcx, [rsp + 0x150]
mov rbx, rbx
mov r8d, 0x3b7ef1c7
xor r8d, 0x3829aff7
xor r8d, 0x29aa1a87
add r8d, 0x4bf59fe8
sub r8d, 0x76f2e49e
inc rbx
xchg rsp, rsp
call fcn.14008dff0
cmp byte [rbx], 0
jne 0x1400d99c3
mov r13, r13
mov eax, dword [rsp + 0x150]
not eax
cmp eax, 0xa2ca6717
je 0x1400d9a35
mov dword [rsp - 0x1c], ecx
cmp eax, 0xd7b7e7a8
sete al
jmp 0x1400d9a4a
mov al, 0x54
sub al, 0x13
xor al, 0x7f
xor al, 0x49
sub al, 0x76
jmp 0x1400d9a4a
xor al, al
mov dword [rsp - 0x3c], ecx
mov rbx, qword [rsp + 0x158]
sub rsp, 0xfffffffffffffec0
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400ddfb0
Capabilities:
Encrypt data using curve25519

Disassembly:
xchg rbx, r9
mov qword [rsp + 8], r9
xchg r9, rbx
push rdi
mov qword [rsp], rdi
sub rsp, 0xc0
mov dword [rsp - 0x2c], 0x1a882445
xchg r8, rax
mov r8, rax
xchg r8, rax
mov rbx, rdx
mov dword [rsp - 0x44], edx
xchg rdx, r13
mov r8, r13
xchg rdx, r13
mov rdi, rcx
mov edx, 0x4df10a33
sub edx, 0x3c1e8c81
xor edx, 0x5b0318bc
sub edx, 0x4ad164ee
mov rcx, rax
call fcn.1400de7f0
mov dword [rsp - 0x3c], 0x3e4f72ca
movzx eax, byte [rbx + 0x1f]
lea rcx, [rsp + 0x20]
and byte [rbx], 0xf8
xchg rdx, rdx
and al, 0x3f
or al, 0x40
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
mov byte [rbx + 0x1f], al
call fcn.1400e1d60
mov dword [rsp - 0x28], 0x438ba1a0
lea rdx, [rsp + 0x20]
xchg rcx, r14
mov r14, rdi
xchg r14, rcx
call fcn.1400e1cb0
xchg rcx, rbx
mov rcx, qword [rsp + 0xd0]
xchg rbx, rcx
sub rsp, 0xffffffffffffff40
mov dword [rsp - 0x3c], 0x34707a63
pop rdi
ret
Function at 0x1400ed688
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
add rsp, 0x4e272cac
sub rsp, 0x4e272d5c
mov r14, rdx
movabs rdx, 0x618d4120230d0fa5
xor rdx, 0x45fa2948
xor rdx, 0x3a387dd
xor rdx, 0x6a6efa2e
cmp qword [rcx + 0x538], rdx
jne 0x1400ed96b
xorps xmm0, xmm0
mov rax, r14
xor rax, rdx
mov qword [rcx + 0x538], rax
lea rax, [rbp - 0x41]
mov rsi, qword [rcx + 0x578]
mov rbx, qword [rcx + 0x540]
lea rcx, [rbp - 0x49]
mov qword [rbp - 0x49], rax
movups xmmword [rbp - 0x41], xmm0
lea rdx, [rsi + 1]
movups xmmword [rbp - 0x31], xmm0
movups xmmword [rbp - 0x21], xmm0
call fcn.140017984
xor r15d, r15d
mov edx, 0x7cb068b3
xor edx, 0x75d6678b
add edx, 0x524708ad
sub edx, 0xc4bb8f5
test rsi, rsi
je 0x1400ed782
mov rdi, rax
sub rbx, rax
mov r8, rsi
movzx ecx, dx
mov r9d, 0x2b39c994
xor r9d, 0x33facb74
add r9d, 0x135cb898
sub r9d, 0x2c1fba79
and cx, r9w
ror edx, 8
xor cx, word [rbx + rdi]
mov word [rdi], cx
lea rdi, [rdi + 2]
sub r8, 1
jne 0x1400ed748
mov word [rax + rsi*2], r15w
movabs rcx, 0xe1e212946051a4fe
sub rcx, 0x2c7461b8
xor rcx, 0x1e97e6c2
add rcx, 0xb174b21
lea rax, [0x1400ed9a0]
mov qword [rbp + 7], r15
mov qword [rbp - 1], rax
mov edx, 0x750e419
xor edx, 0x7dd3d6b2
sub edx, 0x4149943e
xor edx, 0x3939e16d
mov rax, qword [0x140141158]
add rax, rcx
mov qword [rbp + 0x17], r15
rol rax, 0x21
movabs rcx, 0x4905bebc6751abb0
add rcx, 0xa59f1e4
add rcx, 0x7fffffff
sub rcx, 0x347af576
xor rax, rcx
mov qword [rbp + 0x2f], r15
not rax
mov qword [rbp + 0x3f], r15
movabs rcx, 0x45e876d02f28f539
xor rcx, 0x5f24ded5
add rcx, 0x7fffffff
sub rcx, 0x52b05f2e
mov dword [rbp - 9], 0x2b49ad3
xor dword [rbp - 9], 0x1eea5966
xor dword [rbp - 9], 0x1c5ec3e5
sub rax, rcx
mov dword [rbp - 5], 0x76de74b5
sub dword [rbp - 5], 0x3656a9c8
sub dword [rbp - 5], 0x4087caea
xor ecx, ecx
mov qword [rbp + 0xf], r14
call rax
mov qword [rbp + 0x1f], rax
movabs rcx, 0x28ebf9982eb44cbe
xor rcx, 0x411ed8e7
xor rcx, 0x7696770c
mov rax, qword [0x140141730]
ror rax, 0xb
not rax
ror rax, 0x37
not rax
rol rax, 0x23
add rax, rcx
xor ecx, ecx
call rax
mov qword [rbp + 0x27], rax
movabs rcx, 0x74c9846143d58a44
xor rcx, 0x7c44ec99
add rcx, 0x7fffffff
sub rcx, 0x309077ea
mov rax, qword [rbp - 0x49]
mov qword [rbp + 0x37], rax
mov rax, qword [0x140141020]
not rax
sub rax, rcx
movabs rcx, 0xa7be1eab680c0d2e
sub rcx, 0x126d8e12
sub rcx, 0x41ae9362
not rax
ror rax, 0x3d
add rax, rcx
movabs rcx, 0x407e05cc42d76cea
sub rcx, 0x1546e3eb
add rcx, 0x3aa165ce
sub rcx, 0x28a0ef92
xor rax, rcx
movabs rcx, 0x595b713b35d7246d
add rcx, 0x140ea247
sub rcx, 0x337c90fe
sub rax, rcx
lea rcx, [rbp - 9]
call rax
mov rcx, qword [rbp - 0x49]
test ax, ax
lea rax, [rbp - 0x41]
setne bl
cmp rcx, rax
jne 0x1400ed95f
xor eax, eax
lea rdi, [rbp - 0x41]
lea ecx, [rax + 0x30]
rep stosb byte [rdi], al
jmp 0x1400ed964
call fcn.140098770
mov al, bl
jmp 0x1400ed96d
xor al, al
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret