joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140074d20
Capabilities:
Hash data with md5

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x47]
sub rsp, 0xa0
mov rax, qword [0x140104100]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor ebx, ebx
mov dword [rbp + 0x13], 0x67452301
mov rdi, r8
mov qword [rbp + 0x27], rbx
mov r8d, edx
mov dword [rbp + 0x17], 0xefcdab89
mov rdx, rcx
mov dword [rbp + 0x1b], 0x98badcfe
lea rcx, [rbp - 0x39]
mov dword [rbp + 0x1f], 0x10325476
mov qword [rbp - 0x39], rbx
mov dword [rbp - 0x31], ebx
call fcn.1400a1ca0
test eax, eax
jne 0x140074e29
test rdi, rdi
je 0x140074e22
mov eax, dword [rbp - 0x39]
mov byte [rbp + rax - 0x2d], 0x80
mov ecx, dword [rbp - 0x39]
inc ecx
mov dword [rbp - 0x39], ecx
cmp ecx, 0x38
jbe 0x140074dd1
mov eax, ecx
mov r8d, 0x40
sub r8d, ecx
xor edx, edx
lea rcx, [rbp - 0x2d]
add rcx, rax
call fcn.1400cebf0
lea rdx, [rbp - 0x2d]
mov dword [rbp - 0x39], 0x40
lea rcx, [rbp - 0x39]
call fcn.1400a14b0
mov ecx, ebx
mov dword [rbp - 0x39], ebx
mov eax, ecx
mov r8d, 0x38
sub r8d, ecx
xor edx, edx
lea rcx, [rbp - 0x2d]
add rcx, rax
call fcn.1400cebf0
mov r8d, dword [rbp - 0x35]
mov ecx, r8d
mov eax, dword [rbp - 0x31]
shr ecx, 0x1d
shl r8d, 3
mov dword [rbp - 0x35], r8d
mov dword [rbp + 0xb], r8d
lea edx, [rcx + rax*8]
mov dword [rbp - 0x31], edx
lea rcx, [rbp - 0x39]
mov dword [rbp + 0xf], edx
lea rdx, [rbp - 0x2d]
call fcn.1400a14b0
movups xmm0, xmmword [rbp + 0x13]
movups xmmword [rdi], xmm0
jmp 0x140074e27
mov ebx, 0xffffff53
mov eax, ebx
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1400a3910
add rsp, 0xa0
pop rdi
pop rbx
pop rbp
ret

Function at 0x140074e40
Capabilities:
Hash data using sha1

Disassembly:
push rbx
sub rsp, 0xa0
mov rax, qword [0x140104100]
xor rax, rsp
mov qword [rsp + 0x90], rax
xor eax, eax
mov dword [rsp + 0x6c], 0x67452301
mov rbx, r8
mov qword [rsp + 0x80], rax
mov r8d, edx
mov dword [rsp + 0x70], 0xefcdab89
mov rdx, rcx
mov dword [rsp + 0x74], 0x98badcfe
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x78], 0x10325476
mov dword [rsp + 0x7c], 0xc3d2e1f0
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], eax
call fcn.140093a80
test eax, eax
jne 0x140074eba
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.140093f20
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.1400a3910
add rsp, 0xa0
pop rbx
ret

Function at 0x140074ee0
Capabilities:
Hash data using sha256

Disassembly:
mov r11, rsp
push rbx
sub rsp, 0xb0
mov rax, qword [0x140104100]
xor rax, rsp
mov qword [rsp + 0xa0], rax
xor eax, eax
mov rbx, r8
mov qword [r11 - 0x28], rax
mov dword [rsp + 0x20], 0x6a09e667
mov dword [rsp + 0x24], 0xbb67ae85
mov dword [rsp + 0x28], 0x3c6ef372
mov dword [rsp + 0x2c], 0xa54ff53a
mov dword [rsp + 0x30], 0x510e527f
mov dword [rsp + 0x34], 0x9b05688c
mov dword [rsp + 0x38], 0x1f83d9ab
mov dword [rsp + 0x3c], 0x5be0cd19
mov qword [r11 - 0x38], rax
mov dword [r11 - 0x30], eax
test rcx, rcx
jne 0x140074f5e
test edx, edx
je 0x140074f72
mov eax, 0xffffff53
jmp 0x140074f7f
mov r8d, edx
mov rdx, rcx
lea rcx, [rsp + 0x20]
call fcn.140090b30
test eax, eax
jne 0x140074f7f
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.140091390
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.1400a3910
add rsp, 0xb0
pop rbx
ret
Function at 0x140086e70
Capabilities:
Hash data using sha256

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x90]
sub rsp, 0x190
mov rax, qword [0x140104100]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov rsi, rdx
mov r14, r9
mov edx, dword [rbp + 0x100]
mov rdi, rcx
sub edx, 4
je 0x140086fba
cmp edx, 1
je 0x140086ebe
mov eax, 0xffffff18
jmp 0x140087066
movdqa xmm0, xmmword [0x1400ef7d0]
xor ebx, ebx
mov rax, qword [rcx + 0xa8]
xor r8d, r8d
movdqa xmm1, xmmword [0x1400ef8c0]
lea rcx, [rbp - 0x60]
mov qword [rsp + 0x1c0], r12
xor edx, edx
movdqa xmmword [rbp - 0x50], xmm0
movabs r12, 0x629a292a367cd507
movdqa xmm0, xmmword [0x1400ef830]
mov qword [rsp + 0x1d0], r15
movabs r15, 0xcbbb9d5dc1059ed8
movdqa xmmword [rbp - 0x30], xmm0
mov qword [rbp + 0x78], rax
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r12
movdqa xmmword [rbp - 0x40], xmm1
mov dword [rbp + 0x60], ebx
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], rbx
call fcn.14008ed80
test eax, eax
jne 0x140086f9e
lea rcx, [rbp - 0x60]
call fcn.14008ef20
test eax, eax
jne 0x140086f9e
movaps xmm0, xmmword [rbp - 0x60]
mov eax, ebx
movaps xmm1, xmmword [rbp - 0x50]
movaps xmmword [rsp + 0x60], xmm0
movaps xmm0, xmmword [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
movdqa xmm0, xmmword [0x1400ef7d0]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm0, xmmword [0x1400ef830]
movaps xmmword [rsp + 0x70], xmm1
movdqa xmm1, xmmword [0x1400ef8c0]
movdqa xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r12
movdqa xmmword [rbp - 0x40], xmm1
mov dword [rbp + 0x60], ebx
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], rbx
mov r15, qword [rsp + 0x1d0]
mov edx, 0x30
mov r12, qword [rsp + 0x1c0]
mov ecx, 7
jmp 0x14008701e
mov rax, qword [rcx + 0xa8]
lea rdx, [rsp + 0x60]
xor ebx, ebx
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x60]
mov qword [rbp], rbx
mov dword [rbp + 8], ebx
mov dword [rbp - 0x60], 0x6a09e667
mov dword [rbp - 0x5c], 0xbb67ae85
mov dword [rbp - 0x58], 0x3c6ef372
mov dword [rbp - 0x54], 0xa54ff53a
mov dword [rbp - 0x50], 0x510e527f
mov dword [rbp - 0x4c], 0x9b05688c
mov dword [rbp - 0x48], 0x1f83d9ab
mov dword [rbp - 0x44], 0x5be0cd19
call fcn.140091390
mov edx, 0x20
mov ecx, 6
test eax, eax
jne 0x140087066
cmp byte [rdi + 0x319], 4
je 0x140087032
mov eax, 0xfffffeba
jmp 0x140087066
mov dword [rsp + 0x50], ecx
lea rax, [rsp + 0x60]
mov dword [rsp + 0x48], edx
mov r9d, edx
mov qword [rsp + 0x40], rax
mov r8, r14
lea rax, str.derived
mov dword [rsp + 0x38], 7
mov rcx, rsi
mov qword [rsp + 0x30], rax
call fcn.140086d60
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.1400a3910
add rsp, 0x190
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
Function at 0x140088390
Capabilities:
Hash data using sha256

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x140104100]
xor rax, rsp
mov qword [rbp], rax
mov r9, rdx
mov rdi, rcx
mov edx, dword [rbp + 0x50]
mov ecx, 0xffffff53
sub edx, 4
je 0x140088560
sub edx, 1
je 0x1400884a0
cmp edx, 1
jne 0x1400885e4
movdqa xmm0, xmmword [0x1400ef8e0]
xor ebx, ebx
movdqa xmm1, xmmword [0x1400ef8d0]
movabs rax, 0x6a09e667f3bcc908
mov qword [rsp + 0x20], rax
movabs rax, 0xbb67ae8584caa73b
movdqa xmmword [rsp + 0x30], xmm0
movdqa xmm0, xmmword [0x1400ef840]
mov qword [rsp + 0x28], rax
movdqa xmmword [rsp + 0x50], xmm0
mov qword [rbp - 8], rbx
movdqa xmmword [rsp + 0x40], xmm1
mov dword [rbp - 0x20], ebx
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rbx
test r9, r9
jne 0x14008843a
test r8d, r8d
jne 0x140088496
mov rdx, r9
lea rcx, [rsp + 0x20]
call fcn.14008ed80
mov ecx, eax
test eax, eax
jne 0x140088496
test rdi, rdi
je 0x140088491
lea rcx, [rsp + 0x20]
call fcn.14008ef20
mov ecx, eax
test eax, eax
jne 0x140088496
movaps xmm0, xmmword [rsp + 0x20]
mov ecx, ebx
movaps xmm1, xmmword [rsp + 0x30]
mov eax, 0x40
movups xmmword [rdi], xmm0
movaps xmm0, xmmword [rsp + 0x40]
movups xmmword [rdi + 0x10], xmm1
movaps xmm1, xmmword [rsp + 0x50]
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm1
jmp 0x1400885e0
mov ecx, 0xffffff53
mov eax, 0x40
jmp 0x1400885e0
movdqa xmm0, xmmword [0x1400ef7d0]
xor ebx, ebx
movdqa xmm1, xmmword [0x1400ef8c0]
movabs rax, 0xcbbb9d5dc1059ed8
mov qword [rsp + 0x20], rax
movabs rax, 0x629a292a367cd507
movdqa xmmword [rsp + 0x30], xmm0
movdqa xmm0, xmmword [0x1400ef830]
mov qword [rsp + 0x28], rax
movdqa xmmword [rsp + 0x50], xmm0
mov qword [rbp - 8], rbx
movdqa xmmword [rsp + 0x40], xmm1
mov dword [rbp - 0x20], ebx
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rbx
test r9, r9
jne 0x140088503
test r8d, r8d
jne 0x140088556
mov rdx, r9
lea rcx, [rsp + 0x20]
call fcn.14008ed80
mov ecx, eax
test eax, eax
jne 0x140088556
test rdi, rdi
je 0x140088551
lea rcx, [rsp + 0x20]
call fcn.14008ef20
mov ecx, eax
test eax, eax
jne 0x140088556
movaps xmm0, xmmword [rsp + 0x20]
mov ecx, ebx
movaps xmm1, xmmword [rsp + 0x30]
mov eax, 0x30
movups xmmword [rdi], xmm0
movaps xmm0, xmmword [rsp + 0x40]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi + 0x20], xmm0
jmp 0x1400885e0
mov ecx, 0xffffff53
mov eax, 0x30
jmp 0x1400885e0
xor ebx, ebx
mov dword [rsp + 0x20], 0x6a09e667
mov qword [rbp - 0x70], rbx
mov dword [rsp + 0x24], 0xbb67ae85
mov dword [rsp + 0x28], 0x3c6ef372
mov dword [rsp + 0x2c], 0xa54ff53a
mov dword [rsp + 0x30], 0x510e527f
mov dword [rsp + 0x34], 0x9b05688c
mov dword [rsp + 0x38], 0x1f83d9ab
mov dword [rsp + 0x3c], 0x5be0cd19
mov qword [rbp - 0x80], rbx
mov dword [rbp - 0x78], ebx
test r9, r9
jne 0x1400885b9
test r8d, r8d
je 0x1400885cc
jmp 0x1400885db
mov rdx, r9
lea rcx, [rsp + 0x20]
call fcn.140090b30
mov ecx, eax
test eax, eax
jne 0x1400885db
mov rdx, rdi
lea rcx, [rsp + 0x20]
call fcn.140091390
mov ecx, eax
mov eax, 0x20
test ecx, ecx
je 0x1400885e6
mov eax, ecx
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.1400a3910
add rsp, 0x110
pop rdi
pop rbx
pop rbp
ret
Function at 0x14008c310
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 8
xor eax, eax
mov r10, rcx
mov ecx, eax
test r8d, r8d
jle 0x14008c3df
cmp r8d, 8
jb 0x14008c3df
mov qword [rsp + 0x10], rbx
mov r11, r10
movsxd r9, r8d
sub r11, rdx
and r9, 0xfffffffffffffff8
mov qword [rsp], rdi
mov rbx, 0xfffffffffffffffc
lea rdi, [rdx + 4]
sub rbx, rdx
xorps xmm4, xmm4
xorps xmm3, xmm3
nop dword [rax + rax]
movd xmm2, dword [r11 + rdi - 4]
xorps xmm0, xmm0
movd xmm1, dword [rdi - 4]
lea rdi, [rdi + 8]
punpcklbw xmm2, xmm0
lea rax, [rbx + rdi]
punpcklwd xmm2, xmm0
add ecx, 8
punpcklbw xmm1, xmm0
punpcklwd xmm1, xmm0
xorps xmm2, xmm1
movd xmm1, dword [rdi - 8]
punpcklbw xmm1, xmm0
orps xmm4, xmm2
movd xmm2, dword [r11 + rdi - 8]
punpcklbw xmm2, xmm0
punpcklwd xmm2, xmm0
punpcklwd xmm1, xmm0
xorps xmm2, xmm1
orps xmm3, xmm2
cmp rax, r9
jl 0x14008c360
mov rdi, qword [rsp]
orps xmm3, xmm4
mov rbx, qword [rsp + 0x10]
movdqa xmm0, xmm3
psrldq xmm0, 8
orps xmm3, xmm0
movdqa xmm0, xmm3
psrldq xmm0, 4
orps xmm3, xmm0
movd eax, xmm3
movsxd r11, ecx
movsxd r9, r8d
cmp r11, r9
jge 0x14008c418
sub r10, rdx
lea rcx, [r11 + rdx]
sub r9, r11
nop dword [rax]
nop dword [rax + rax]
movzx r8d, byte [rcx + r10]
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
xor r8d, edx
or eax, r8d
sub r9, 1
jne 0x14008c400
add rsp, 8
ret
Function at 0x14008c420
Capabilities:
Hash data using sha256

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0xf0
mov rax, qword [0x140104100]
xor rax, rsp
mov qword [rbp - 9], rax
mov rax, qword [rbp + 0x67]
mov ecx, 0x1b8
mov r12, qword [rbp + 0x77]
mov rdi, rdx
mov r13d, dword [rbp + 0x7f]
mov esi, 0x37
mov qword [rsp + 0x38], rax
mov r15d, 2
mov eax, ecx
mov byte [rsp + 0x28], r9b
rol ecx, 8
ror eax, 8
xor ecx, eax
mov byte [rsp + 0x20], 1
and ecx, 0xff00ff
xor ecx, eax
mov dword [rsp + 0x30], ecx
xor r14d, r14d
mov r8d, 1
mov qword [rbp - 0x39], r14
lea rdx, [rsp + 0x20]
mov dword [rsp + 0x40], 0x6a09e667
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x44], 0xbb67ae85
mov dword [rsp + 0x48], 0x3c6ef372
mov dword [rsp + 0x4c], 0xa54ff53a
mov dword [rsp + 0x50], 0x510e527f
mov dword [rsp + 0x54], 0x9b05688c
mov dword [rsp + 0x58], 0x1f83d9ab
mov dword [rsp + 0x5c], 0x5be0cd19
mov qword [rbp - 0x49], r14
mov dword [rbp - 0x41], r14d
call fcn.140090b30
mov ebx, eax
test eax, eax
jne 0x14008c5cf
mov r8d, 4
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.140090b30
mov ebx, eax
test eax, eax
jne 0x14008c5cf
cmp byte [rsp + 0x28], 4
je 0x14008c541
mov r8d, 1
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x40]
call fcn.140090b30
mov ebx, eax
test eax, eax
jne 0x14008c5cf
mov rax, qword [rsp + 0x38]
test rax, rax
jne 0x14008c558
cmp dword [rbp + 0x6f], r14d
jbe 0x14008c56f
mov ebx, 0xffffff53
jmp 0x14008c5cf
mov r8d, dword [rbp + 0x6f]
lea rcx, [rsp + 0x40]
mov rdx, rax
call fcn.140090b30
mov ebx, eax
test eax, eax
jne 0x14008c5cf
test r12, r12
je 0x14008c58f
test r13d, r13d
je 0x14008c58f
mov r8d, r13d
lea rcx, [rsp + 0x40]
mov rdx, r12
call fcn.140090b30
mov ebx, eax
test eax, eax
jne 0x14008c5cf
lea rdx, [rbp - 0x29]
lea rcx, [rsp + 0x40]
call fcn.140091390
mov ebx, eax
test eax, eax
jne 0x14008c5cf
cmp esi, 0x20
jbe 0x14008c5c0
movups xmm0, xmmword [rbp - 0x29]
add esi, 0xffffffe0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm1
add rdi, 0x20
jmp 0x14008c5cf
mov r8d, esi
lea rdx, [rbp - 0x29]
mov rcx, rdi
call fcn.1400ce550
inc byte [rsp + 0x20]
sub r15, 1
jne 0x14008c491
mov ecx, 0x20
lea rdx, [rbp - 0x29]
nop word [rax + rax]
mov byte [rdx], r14b
lea rdx, [rdx + 1]
add ecx, 0xffffffff
jne 0x14008c5f0
test ebx, ebx
setne r14b
mov eax, r14d
mov rcx, qword [rbp - 9]
xor rcx, rsp
call fcn.1400a3910
mov rbx, qword [rsp + 0x130]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x14008d180
Capabilities:
Generate random numbers via winapi

Disassembly:
push rsi
sub rsp, 0xa0
mov rax, qword [0x140104100]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rsi, rcx
test rcx, rcx
jne 0x14008d1aa
mov eax, 0xffffff53
jmp 0x14008d3a1
mov qword [rcx + 8], r9
mov qword [rsp + 0xb8], rbx
mov qword [rsp + 0xc0], rbp
xor ebp, ebp
mov qword [rcx + 0x10], rbp
mov byte [rcx + 0x18], bpl
xor ecx, ecx
call fcn.14008d830
test eax, eax
jne 0x14008d386
mov rax, qword [0x140107638]
mov ecx, 0x78
mov qword [rsp + 0xc8], rdi
test rax, rax
je 0x14008d1f4
call rax
jmp 0x14008d1f9
call fcn.1400b5720
mov qword [rsi + 0x10], rax
mov edi, 0x34
test rax, rax
jne 0x14008d211
mov ebx, 0xffffff83
jmp 0x14008d341
mov ebx, 1
mov dword [rsp + 0x20], 0xf0000000
mov r9d, ebx
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
je 0x14008d31f
mov rcx, qword [rsi]
lea r8, [rsp + 0x40]
mov edx, edi
call qword [sym.imp.ADVAPI32.dll_CryptGenRandom]
test eax, eax
je 0x14008d31f
mov rcx, qword [rsi]
xor edx, edx
mov qword [rsp + 0x98], r12
mov qword [rsp + 0x90], r13
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x80], r15
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov r12d, 4
mov ebx, ebp
mov r8d, r12d
mov r14d, ebp
mov r15, rbp
mov r13d, 3
nop dword [rax]
nop word [rax + rax]
mov eax, r8d
lea rdx, [rsp + 0x40]
add rax, r15
lea rcx, [rsp + 0x40]
add rdx, rax
add rcx, r15
call fcn.14008c310
test eax, eax
mov r8d, edi
cmove ebx, r13d
add r14d, r12d
sub r8d, r14d
add r15, r12
cmp r8d, r12d
cmova r8d, r12d
cmp r14d, 0x30
jb 0x14008d2a0
mov r15, qword [rsp + 0x80]
mov r14, qword [rsp + 0x88]
mov r13, qword [rsp + 0x90]
mov r12, qword [rsp + 0x98]
test ebx, ebx
jne 0x14008d31f
mov rcx, qword [rsi + 0x10]
lea rdx, [rsp + 0x44]
xor r9d, r9d
mov dword [rsp + 0x20], ebp
mov r8d, 0x30
call fcn.14008d0d0
mov ebx, eax
test eax, eax
je 0x14008d341
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x14008d33d
mov rax, qword [0x1401075e8]
test rax, rax
je 0x14008d338
call rax
jmp 0x14008d33d
call fcn.1400b0cd0
mov qword [rsi + 0x10], rbp
lea rax, [rsp + 0x40]
nop word [rax + rax]
mov byte [rax], bpl
lea rax, [rax + 1]
add edi, 0xffffffff
jne 0x14008d350
mov rdi, qword [rsp + 0xc8]
test ebx, ebx
jne 0x14008d36e
mov byte [rsi + 0x18], 1
jmp 0x14008d38f
cmp ebx, 3
je 0x14008d386
cmp ebx, 1
mov byte [rsi + 0x18], 2
mov eax, 0xffffff39
cmove ebx, eax
mov ebp, ebx
jmp 0x14008d38f
mov byte [rsi + 0x18], 3
mov ebp, 0xffffff2f
mov rbx, qword [rsp + 0xb8]
mov eax, ebp
mov rbp, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.1400a3910
add rsp, 0xa0
pop rsi
ret
Function at 0x140091390
Capabilities:
Hash data using sha256

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, rdx
mov rbx, rcx
test rcx, rcx
je 0x1400914d6
test rdx, rdx
je 0x1400914d6
call fcn.140090fd0
test eax, eax
jne 0x1400914db
mov ecx, dword [rbx]
mov eax, ecx
rol ecx, 8
ror eax, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx], ecx
mov ecx, dword [rbx + 4]
mov eax, ecx
rol ecx, 8
ror eax, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx + 4], ecx
mov ecx, dword [rbx + 8]
mov eax, ecx
rol ecx, 8
ror eax, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx + 8], ecx
mov ecx, dword [rbx + 0xc]
mov eax, ecx
rol ecx, 8
ror eax, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx + 0xc], ecx
mov ecx, dword [rbx + 0x10]
mov eax, ecx
rol ecx, 8
ror eax, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx + 0x10], ecx
mov ecx, dword [rbx + 0x14]
mov eax, ecx
rol ecx, 8
ror eax, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx + 0x14], ecx
mov ecx, dword [rbx + 0x18]
mov eax, ecx
rol ecx, 8
ror eax, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx + 0x18], ecx
mov ecx, dword [rbx + 0x1c]
mov eax, ecx
ror eax, 8
rol ecx, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx + 0x1c], ecx
xor eax, eax
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov dword [rbx], 0x6a09e667
mov dword [rbx + 4], 0xbb67ae85
mov dword [rbx + 8], 0x3c6ef372
mov dword [rbx + 0xc], 0xa54ff53a
mov dword [rbx + 0x10], 0x510e527f
mov dword [rbx + 0x14], 0x9b05688c
mov dword [rbx + 0x18], 0x1f83d9ab
mov dword [rbx + 0x1c], 0x5be0cd19
mov qword [rbx + 0x60], rax
mov dword [rbx + 0x68], eax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov eax, 0xffffff53
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x1400943c0
Capabilities:
Encode data using xor

Disassembly:
push rbx
mov eax, r8d
mov r9, rdx
or al, cl
mov r10, rcx
or al, dl
test al, 7
jne 0x1400944a3
shr r8d, 3
xor eax, eax
test r8d, r8d
je 0x1400945b1
cmp r8d, 8
jb 0x14009447e
lea ecx, [r8 - 1]
lea r11, [r10 + rcx*8]
lea rcx, [rdx + rcx*8]
cmp r10, rcx
ja 0x140094406
cmp r11, rdx
jae 0x14009447e
mov r11d, r8d
and r11d, 0xfffffff8
mov ebx, 4
movdqu xmm0, xmmword [r10 + rax*8]
lea ecx, [rbx - 2]
movdqu xmm1, xmmword [rdx + rax*8]
xorps xmm1, xmm0
movdqu xmmword [r10 + rax*8], xmm1
add eax, 8
movdqu xmm0, xmmword [r10 + rcx*8]
movdqu xmm1, xmmword [rdx + rcx*8]
xorps xmm1, xmm0
movdqu xmmword [r10 + rcx*8], xmm1
mov ecx, ebx
movdqu xmm0, xmmword [r10 + rcx*8]
movdqu xmm1, xmmword [rdx + rcx*8]
xorps xmm1, xmm0
movdqu xmmword [r10 + rcx*8], xmm1
lea ecx, [rbx + 2]
add ebx, 8
movdqu xmm0, xmmword [r10 + rcx*8]
movdqu xmm1, xmmword [rdx + rcx*8]
xorps xmm1, xmm0
movdqu xmmword [r10 + rcx*8], xmm1
cmp eax, r11d
jb 0x140094412
cmp eax, r8d
jae 0x1400945b1
sub r9, r10
lea rdx, [r10 + rax*8]
sub r8d, eax
mov ecx, r8d
nop dword [rax + rax]
mov rax, qword [r9 + rdx]
xor qword [rdx], rax
lea rdx, [rdx + 8]
sub rcx, 1
jne 0x140094490
pop rbx
ret
xor eax, eax
test r8d, r8d
je 0x1400945b1
cmp r8d, 8
jb 0x140094591
lea ecx, [r8 - 1]
lea r11, [rcx + r10]
add rcx, rdx
cmp r10, rcx
ja 0x1400944d1
cmp r11, r9
jae 0x140094591
cmp r8d, 0x40
jb 0x14009455f
mov qword [rsp + 0x10], rdi
mov r11d, r8d
and r11d, 0x3f
mov edi, r8d
sub edi, r11d
mov ebx, 0x20
movdqu xmm0, xmmword [rax + r10]
lea ecx, [rbx - 0x10]
movdqu xmm1, xmmword [rdx + rax]
xorps xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
add eax, 0x40
movdqu xmm0, xmmword [rcx + r10]
movdqu xmm1, xmmword [rdx + rcx]
xorps xmm1, xmm0
movdqu xmmword [rcx + r10], xmm1
mov ecx, ebx
movdqu xmm0, xmmword [rcx + r10]
movdqu xmm1, xmmword [rdx + rcx]
xorps xmm1, xmm0
movdqu xmmword [rcx + r10], xmm1
lea ecx, [rbx + 0x10]
add ebx, 0x40
movdqu xmm0, xmmword [rcx + r10]
movdqu xmm1, xmmword [rdx + rcx]
xorps xmm1, xmm0
movdqu xmmword [rcx + r10], xmm1
cmp eax, edi
jb 0x1400944f2
mov rdi, qword [rsp + 0x10]
cmp r11d, 8
jb 0x14009458c
mov edx, r8d
and edx, 0xfffffff8
nop word [rax + rax]
movq xmm0, qword [rax + r10]
movq xmm1, qword [r9 + rax]
xorps xmm1, xmm0
movq qword [rax + r10], xmm1
add eax, 8
cmp eax, edx
jb 0x140094570
cmp eax, r8d
jae 0x1400945b1
mov edx, eax
sub r9, r10
add rdx, r10
sub r8d, eax
mov ecx, r8d
nop
movzx eax, byte [r9 + rdx]
xor byte [rdx], al
lea rdx, [rdx + 1]
sub rcx, 1
jne 0x1400945a0
pop rbx
ret
Function at 0x140096a00
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0xa8
mov rax, qword [0x140104100]
xor rax, rsp
mov qword [rbp - 0x11], rax
mov r15, qword [rbp + 0x7f]
mov eax, r9d
mov r9, qword [rbp + 0x6f]
mov esi, eax
mov r13d, eax
shr esi, 4
and r13d, 0xf
mov dword [rbp - 0x5d], eax
mov eax, dword [rbp + 0x77]
mov r12, rcx
mov rcx, qword [rbp + 0x8f]
xorps xmm0, xmm0
mov qword [rbp - 0x51], rdx
xorps xmm1, xmm1
mov qword [rbp - 0x59], r15
mov rbx, r8
mov qword [rbp - 0x49], rcx
mov r14, rdx
movups xmmword [rbp - 0x21], xmm0
movups xmmword [rbp - 0x41], xmm1
cmp eax, 0xc
jne 0x140096a8a
movsd xmm0, qword [r9]
mov eax, dword [r9 + 8]
movsd qword [rbp - 0x21], xmm0
mov dword [rbp - 0x19], eax
mov byte [rbp - 0x12], 1
jmp 0x140096aac
lea rcx, [rbp - 0x21]
mov dword [rsp + 0x30], reloc.WS2_32.dll_recv
mov qword [rsp + 0x28], rcx
xor r8d, r8d
mov rcx, r12
mov dword [rsp + 0x20], eax
xor edx, edx
call fcn.140096330
movaps xmm0, xmmword [rbp - 0x21]
mov edi, recv
movdqa xmmword [rbp - 0x31], xmm0
test esi, esi
je 0x140096b80
lea r15, [rbp - 0x32]
neg r15
nop dword [rax]
dec esi
mov rcx, rdi
add byte [rbp + rcx - 0x31], 1
jne 0x140096ae5
dec rcx
cmp rcx, 0xc
jge 0x140096ad5
lea r8, [rbp - 0x41]
mov rcx, r12
lea rdx, [rbp - 0x31]
call fcn.1400945c0
lea rcx, [rbp - 0x41]
mov rax, rbx
or rax, rcx
test al, 7
jne 0x140096b14
mov rax, qword [rbx]
xor qword [rbp - 0x41], rax
mov rax, qword [rbx + 8]
xor qword [rbp - 0x39], rax
jmp 0x140096b64
lea rcx, [rbx + 0xf]
lea rax, [rbp - 0x41]
cmp rax, rcx
ja 0x140096b53
lea rax, [rbp - 0x32]
cmp rax, rbx
jb 0x140096b53
lea rax, [rbp - 0x41]
mov edx, reloc.WS2_32.dll_recv
lea r8, [rcx + r15]
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x140096b40
jmp 0x140096b64
movdqu xmm0, xmmword [rbp - 0x41]
movdqu xmm1, xmmword [rbx]
xorps xmm1, xmm0
movdqu xmmword [rbp - 0x41], xmm1
movups xmm0, xmmword [rbp - 0x41]
add rbx, 0x10
movups xmmword [r14], xmm0
add r14, 0x10
test esi, esi
jne 0x140096ad0
mov r15, qword [rbp - 0x59]
test r13d, r13d
je 0x140096bc3
add byte [rbp + rdi - 0x31], 1
jne 0x140096b95
dec rdi
cmp rdi, 0xc
jge 0x140096b85
lea r8, [rbp - 0x41]
mov rcx, r12
lea rdx, [rbp - 0x31]
call fcn.1400945c0
mov r8d, r13d
lea rcx, [rbp - 0x41]
mov rdx, rbx
call fcn.1400943c0
mov r8d, r13d
lea rdx, [rbp - 0x41]
mov rcx, r14
call fcn.1400ce550
test r15, r15
je 0x140096c14
mov eax, dword [rbp - 0x5d]
mov rcx, r12
mov ebx, dword [rbp + 0x87]
mov r9, qword [rbp - 0x51]
mov r8d, dword [rbp + 0x97]
mov rdx, qword [rbp - 0x49]
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
call fcn.140096330
lea r8, [rbp - 0x41]
mov rcx, r12
lea rdx, [rbp - 0x21]
call fcn.1400945c0
mov r8d, ebx
lea rdx, [rbp - 0x41]
mov rcx, r15
call fcn.1400943c0
xor eax, eax
mov rcx, qword [rbp - 0x11]
xor rcx, rsp
call fcn.1400a3910
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret