joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140094684
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rcx
mov qword [rsp + 8], rcx
xchg rbx, rcx
xchg r9, rbp
mov qword [rsp + 0x10], r9
xchg r9, rbp
xchg r14, rsi
mov qword [rsp + 0x18], r14
xchg rsi, r14
push rdi
mov dword [rsp - 0x40], 0x2139f32
nop
push 0x7c57aca1
mov qword [rsp], r14
nop
sub rsp, 8
mov qword [rsp], r15
add rsp, 0xffffffffffffffe0
movzx eax, byte [rdx + 1]
mov dword [rsp - 0x24], 0x3d9450f2
mov r15, r8
movzx ebx, byte [rdx]
movzx edi, byte [rdx + 4]
mov r8d, dword [rcx + 4]
xchg rbx, rbx
shl ebx, 8
dec r8d
or ebx, eax
shl edi, 3
shl edi, 1
shl edi, 4
movzx eax, byte [rdx + 2]
xchg rdx, rdx
shl ebx, 8
or ebx, eax
movzx eax, byte [rdx + 3]
xchg rsi, rsi
shl ebx, 8
or ebx, eax
movzx eax, byte [rdx + 5]
mov rdx, rdx
or edi, eax
movzx eax, byte [rdx + 6]
shl edi, 2
shl edi, 2
shl edi, 1
shl edi, 2
shl edi, 1
or edi, eax
movzx eax, byte [rdx + 7]
mov r15, r15
shl edi, 6
shl edi, 1
shl edi, 1
or edi, eax
mov dword [rsp - 0x1c], 0x1f396a00
test r8d, r8d
jle 0x1400947cb
mov rdx, qword [rcx + 8]
mov dword [rsp - 0x38], 0x7543f9bd
lea r14d, [r8 - 1]
movsxd rax, r8d
shr r14d, 1
mov dword [rsp - 0x3c], ebx
inc r14d
lea rcx, [rax + rax*2]
lea eax, [r8 - 1]
xchg r12, r12
lea rsi, [rdx + rcx*4]
movsxd rcx, eax
lea rax, [rcx + rcx*2]
lea rbp, [rdx + rax*4]
mov rbp, rbp
mov rdx, rsi
mov ecx, edi
call fcn.140094ef0
mov r14, r14
xor ebx, eax
xchg rsp, rbp
mov rdx, rsp
xchg rbp, rsp
mov ecx, ebx
mov dword [rsp - 0x18], 0x17b732a0
call fcn.140094ef0
xor edi, eax
add rsi, 0xffffffffffffffe8
nop
sub rbp, 0x615dcf6a
add rbp, 0x615dcf52
sub r14, 1
mov dword [rsp - 0x18], esi
jne 0x140094781
lea rax, [r15 + 7]
mov ecx, 0x6875b2ac
sub ecx, 0x15f8b83d
sub ecx, 0x462385e4
xor ecx, 0x4d31fa6c
sub ecx, 0x41688ee3
mov byte [rax - 4], dil
mov byte [rax], bl
dec rax
mov dword [rsp - 0x10], ecx
shr ebx, 5
shr ebx, 2
shr ebx, 1
shr edi, 5
shr edi, 1
shr edi, 1
shr edi, 1
sub rcx, 1
mov rbp, rbp
jne 0x1400947ec
mov rbx, qword [rsp + 0x40]
xchg r9, rbp
mov r9, qword [rsp + 0x48]
xchg rbp, r9
xchg rsi, rbx
mov rbx, qword [rsp + 0x50]
xchg rbx, rsi
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
nop
add rsp, 8
mov r15, qword [rsp - 8]
nop
mov r14, qword [rsp]
add rsp, 8
pop rdi
ret
Function at 0x140094854
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
xchg rsp, rax
mov rsp, rax
xchg rsp, rax
xchg rsi, rbx
mov qword [rax + 8], rsi
xchg rbx, rsi
mov qword [rax + 0x10], rbp
mov dword [rsp - 0x28], 0x483b4e69
xchg rsi, r11
mov qword [rax + 0x18], r11
xchg rsi, r11
xchg rdi, r8
mov qword [rax + 0x20], r8
xchg rdi, r8
push r14
mov dword [rsp - 0x2c], ebx
add rsp, 0xffffffffffffffe0
movzx eax, byte [rdx + 1]
xchg rdx, r14
mov rdx, r8
xchg rdx, r14
movzx ebx, byte [rdx]
mov dword [rsp - 0x20], ebx
movzx edi, byte [rdx + 4]
shl ebx, 2
shl ebx, 2
shl ebx, 4
or ebx, eax
mov dword [rsp - 0x10], 0x6b93e11f
shl edi, 1
shl edi, 3
shl edi, 2
shl edi, 1
shl edi, 1
movzx eax, byte [rdx + 2]
xchg rsp, rsp
shl ebx, 5
shl ebx, 3
or ebx, eax
movzx eax, byte [rdx + 3]
mov dword [rsp - 0x38], ebx
shl ebx, 2
shl ebx, 5
shl ebx, 1
or ebx, eax
mov dword [rsp - 0x30], 0x4efd552c
movzx eax, byte [rdx + 5]
or edi, eax
movzx eax, byte [rdx + 6]
mov dword [rsp - 0x28], 0x1aea3afe
shl edi, 4
shl edi, 4
or edi, eax
movzx eax, byte [rdx + 7]
mov rbp, rbp
shl edi, 5
shl edi, 1
shl edi, 1
shl edi, 1
or edi, eax
mov eax, dword [rcx + 4]
mov rcx, rcx
test eax, eax
jle 0x140094974
mov rsi, qword [rcx + 8]
lea ebp, [rax - 1]
mov dword [rsp - 0x34], ebp
shr ebp, 1
inc ebp
xchg r8, rdx
mov r8, rsi
xchg rdx, r8
mov ecx, edi
mov dword [rsp - 0x20], ebp
call fcn.140094ef0
xor ebx, eax
lea rdx, [rsi + 0xc]
mov ecx, ebx
xchg rcx, rcx
call fcn.140094ef0
xor edi, eax
add rsi, 0x18
sub rbp, 1
mov dword [rsp - 0x3c], 0x7c85abdf
jne 0x140094938
lea rax, [r14 + 7]
mov ecx, 0x556cb419
xor ecx, 0x9c945f8
sub ecx, 0x39a4bc51
sub ecx, 0x2301358c
mov byte [rax - 4], dil
mov rbx, rbx
mov byte [rax], bl
dec rax
shr ebx, 4
shr ebx, 1
shr ebx, 1
shr ebx, 1
shr ebx, 1
shr edi, 6
shr edi, 1
shr edi, 1
sub rcx, 1
jne 0x14009498f
mov dword [rsp - 0x10], edx
mov rbx, qword [rsp + 0x30]
xchg rbp, r8
mov r8, qword [rsp + 0x38]
xchg rbp, r8
mov rsi, qword [rsp + 0x40]
xchg r10, r10
xchg rdi, r13
mov r13, qword [rsp + 0x48]
xchg r13, rdi
add rsp, 0x20
xchg r15, r15
nop
mov r14, qword [rsp]
add rsp, 8
ret
Function at 0x140094bc4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp - 0x10], ebp
xchg rsi, rdi
mov qword [rsp + 0x18], rdi
xchg rsi, rdi
push rbp
mov dword [rsp - 0x10], 0x27539ebd
nop
sub rsp, 8
mov qword [rsp], rdi
push r14
lea rbp, [rsp - 0x47]
add rsp, 0xffffffffffffff60
mov dword [rsp - 0x10], 0x3ec210f1
movdqa xmm0, xmmword [0x140001e00]
xor edi, edi
movdqa xmm1, xmmword [0x140001da0]
xchg rbx, rbx
xchg rdx, rbx
mov rdx, rbx
xchg rdx, rbx
xchg rdi, rbp
movdqu xmmword [rdi - 0x39], xmm0
xchg rdi, rbp
xchg rcx, rbx
mov rsi, rbx
xchg rbx, rcx
mov edx, edi
mov dword [rsp - 0x20], 0x4d6f6ce3
movdqa xmm0, xmmword [0x140001e50]
mov r8d, edi
movdqu xmmword [rbp - 0x29], xmm1
mov dword [rsp - 0x44], esi
movdqa xmm1, xmmword [0x140001e40]
xchg r12, rbp
movdqu xmmword [r12 - 0x19], xmm0
xchg rbp, r12
xchg rbp, r14
movdqu xmmword [r14 - 9], xmm1
xchg rbp, r14
mov ecx, edx
lea r8, [r8 + 4]
mov eax, 0x4f54e0c1
sub eax, 0x228b40c5
add eax, 0x1c835678
sub eax, 0x3f6b0b78
add eax, 0x64f51e36
inc rdx
rol eax, cl
xor eax, dword [rbp + r8 - 0x3d]
xchg r9, r9
mov dword [rbp + r8 + 3], eax
cmp rdx, 0x10
jb 0x140094c71
mov r9, r9
cmp dword [rsi + 4], 8
jne 0x140094d0f
lea rdx, [rbp + 0x6d]
mov r8, r8
movzx ecx, byte [rbx + rdi*2]
movzx eax, byte [rbx + rdi*2 + 1]
inc rdi
shl cx, 4
shl cx, 3
shl cx, 1
or cx, ax
mov rsp, rsp
mov word [rdx], cx
lea rdx, [rdx - 2]
cmp rdi, 4
mov r10, r10
jl 0x140094cc0
lea r9, [rbp + 7]
xor r8d, r8d
xchg r14, r14
lea rdx, [rbp + 0x67]
mov rcx, rsi
call fcn.1400949f0
xchg rbx, rbx
jmp 0x140094ddb
cmp dword [rsi], edi
mov dword [rsp - 0x18], ecx
jle 0x140094ddb
mov r14d, edi
lea rdx, [rbp + 0x6d]
mov r8d, 0x4c2a9c26
sub r8d, 0x491e0de0
xor r8d, 0x1f06e63
sub r8d, 0x2fce021
movzx eax, byte [rbx]
xchg rsp, rsp
movzx ecx, byte [rbx + 1]
neg rbx
add rbx, 0xfffffffffffffffe
neg rbx
shl ax, 2
shl ax, 5
shl ax, 1
or cx, ax
mov word [rdx], cx
xchg rbp, rbp
lea rdx, [rdx - 2]
sub r8, 1
jne 0x140094d3d
lea r9, [rbp + 7]
xchg rsi, rsi
mov r8d, r14d
lea rdx, [rbp + 0x67]
xchg r10, rcx
mov r10, rsi
xchg rcx, r10
call fcn.1400949f0
mov r8d, dword [rsi + 4]
mov dword [rsp - 0x14], ecx
lea r9, [rbp + 0x27]
sub r8d, r14d
lea rdx, [rbp + 0x67]
xchg rsi, rsi
nop
add r8d, 0x57a6fc48
sub r8d, 0x57a6fc50
mov rcx, rsi
xchg rdi, rdi
call fcn.1400949f0
inc edi
nop
add r14d, 0x1c8dabcd
sub r14d, 0x1c8dabc5
cmp edi, dword [rsi]
mov r15, r15
jl 0x140094d1e
xor eax, eax
lea r11, [rsp + 0xa0]
xchg rdi, rbx
mov rdi, qword [r11 + 0x28]
xchg rdi, rbx
lea rdi, [rbp + 7]
xchg rsp, rsi
mov rsp, qword [r11 + 0x30]
xchg rsp, rsi
lea ecx, [rax + 0x40]
rep stosb byte [rdi], al
mov dword [rsp - 0x34], esp
mov rsp, r11
pop r14
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret

Function at 0x140094ea8
Capabilities:
Encode data using xor

Disassembly:
xor r10d, r10d
xchg r9, r9
mov r11d, ecx
test edx, edx
je 0x140094eea
xchg r12, r12
lea ecx, [r11 + r11]
mov r9d, r10d
xor r9d, r11d
mov r11d, ecx
mov dword [rsp - 0x34], edx
test dl, 1
cmove r9d, r10d
xor r11d, r8d
mov r12, r12
cmp ecx, 0x100
mov r10d, r9d
cmovb r11d, ecx
shr edx, 1
mov r12, r12
jne 0x140094eb8
mov eax, r10d
ret
Function at 0x14009ace0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x10
mov qword [rsp], r10
mov dword [rsp - 0x34], 0x59971ef6
xchg rsi, r11
mov qword [rsp + 8], rsi
xchg rsi, r11
xor r11, r11
mov rcx, rcx
lea r10, [rsp + 0x18]
sub r10, rax
cmovb r10, r11
mov r11, qword gs:[0x10]
xchg r9, r9
cmp r10, r11
bnd jae 0x14009ad51
and r10w, 0xf000
lea r11, [r11 - 0x1000]
mov dword [rsp - 0x3c], 0x132812a0
mov byte [r11], 0x39
sub byte [r11], 0x33
sub byte [r11], 2
xor byte [r11], 0x6a
sub byte [r11], 0x6e
cmp r10, r11
mov r15, r15
bnd jne 0x14009ad25
xchg r10, r9
mov r9, qword [rsp]
xchg r9, r10
xchg r11, r13
mov r13, qword [rsp + 8]
xchg r11, r13
add rsp, 0x10
bnd ret

Function at 0x1400a014c
Capabilities:
Encode data using xor

Disassembly:
mov rax, qword [rcx + 0xf8]
xor r8d, r8d
mov r9, rdx
mov dword [rsp - 0x24], ebp
test rax, rax
je 0x1400a01ad
mov ecx, r8d
xchg rsi, rsi
mov edx, 0x4cbf9614
add edx, 0xd1de4a8
xor edx, 0x3484c7
xor edx, 0x373ef749
rol edx, cl
xor dl, byte [rax]
inc rax
mov dword [rsp - 0x28], ebp
mov byte [r8 + r9], dl
inc r8
cmp r8, 0x20
mov rbx, rbx
jb 0x1400a0166
mov al, 7
add al, 0x13
add al, 0x60
sub al, 0x16
sub al, 0x63
ret
xchg r13, rax
mov r13, qword [rcx + 0x100]
xchg r13, rax
test rax, rax
je 0x1400a01ec
xchg rdx, rax
movups xmm0, xmmword [rdx]
xchg rdx, rax
xchg rcx, rdx
movups xmmword [rcx], xmm0
xchg rcx, rdx
movups xmm1, xmmword [rax + 0x10]
mov dword [rsp - 0x1c], 0xf1aee18
xchg rdi, rdx
movups xmmword [rdi + 0x10], xmm1
xchg rdi, rdx
jmp 0x1400a01a2
xorps xmm0, xmm0
xor al, al
movups xmmword [rdx], xmm0
mov r8, r8
movups xmmword [rdx + 0x10], xmm0
ret
Function at 0x1400b6d10
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov rbx, rbx
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
push r14
neg rsp
sub rsp, 0xffffffffffffffc0
neg rsp
mov r8, qword [0x1401424c8]
lea rdx, [r11 + 0x10]
xchg r9, rcx
mov rbx, r9
xchg rcx, r9
mov dword [rsp + 0x58], 0x31b91ce8
add dword [rsp + 0x58], 0xc0359ca
sub dword [rsp + 0x58], 0x3ba20c8d
xor dword [rsp + 0x58], 0x21a6a35
movabs rcx, 0xabd475a63df0d589
xor rcx, 0x907f2ac
add rcx, 0x48a85d04
xor rcx, 0x71ed9e4d
add rcx, 0x7fffffff
add rcx, 0x396f0c6a
movabs rax, 0x35bc5f4d16bb8939
add rax, 0xeba772
add rax, 0x3eb5dda2
add rax, 0x90c67b6
add rax, 0x68e58a26
add r8, rcx
lea rcx, [r11 - 0x28]
xor r8, rax
xchg rdx, rdx
movabs rax, 0x2bc4e2c54b10ec77
sub rax, 0x23c62600
xor rax, 0x3f93595d
sub rax, 0x1787bc71
add rax, 0x16090cb4
ror r8, 0xc
ror r8, 4
ror r8, 5
ror r8, 1
xor r8, rax
xchg r10, r10
ror r8, 0xc
ror r8, 0x2e
ror r8, 1
call r8
mov dword [rsp - 0xc], ebp
lea rdi, [rbx + 8]
xorps xmm0, xmm0
xchg r11, rdi
mov qword [rbx], r11
xchg r11, rdi
xor esi, esi
xchg r11, r11
xchg r13, rdi
movups xmmword [r13], xmm0
xchg r13, rdi
xchg rdi, r14
movups xmmword [r14 + 0x10], xmm0
xchg rdi, r14
movups xmmword [rdi + 0x20], xmm0
xchg rbp, rbp
test eax, eax
jne 0x1400b6e50
xchg rdi, rsi
mov qword [rbx + 0x38], rdi
xchg rdi, rsi
jmp 0x1400b6f6b
lea rax, [rsp + 0x20]
or r14, 0xffffffffffffffff
inc r14
mov dword [rsp - 0x30], 0x29c14a77
cmp word [rax + r14*2], si
jne 0x1400b6e59
mov qword [rbx + 0x38], r14
cmp qword [rbx], rdi
mov r14, r14
je 0x1400b6e87
mov rcx, qword [rbx]
call fcn.140099810
cmp r14, 0x18
mov dword [rsp - 0x1c], ecx
jbe 0x1400b6ebc
lea rcx, [r14 + r14]
call fcn.140099aa0
mov qword [rbx], rax
mov dword [rsp - 0x30], esp
test rax, rax
jne 0x1400b6ecc
mov qword [rbx], rdi
xchg rbx, rbx
mov rcx, rsi
jmp 0x1400b6ee5
mov qword [rbx], rdi
mov dword [rsp - 0x24], esi
xchg rdi, r12
mov rax, r12
xchg r12, rdi
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rsp - 0x10], 0x41e00422
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rcx, qword [rbx]
mov edx, 0x7614f8da
xor edx, 0x6c7f2222
add edx, 0x226af28a
sub edx, 0xc78ab3a
cmp qword [rbx + 0x38], rsi
xchg r14, r14
jbe 0x1400b6f6b
lea r8, [rsp + 0x20]
sub r8, rcx
movzx eax, dx
mov dword [rsp - 0x34], ebp
mov r9d, 0x3e94ed1c
xor r9d, 0x1bd75d97
add r9d, 0x38ea256f
sub r9d, 0x2eca2288
xor r9d, 0x2f63b38d
and ax, r9w
mov rbx, rbx
ror edx, 4
ror edx, 1
ror edx, 1
ror edx, 1
ror edx, 1
xor ax, word [r8 + rcx]
inc rsi
xchg r9, r9
mov word [rcx], ax
lea rcx, [rcx + 2]
cmp rsi, qword [rbx + 0x38]
jb 0x1400b6f11
xchg r9, r9
mov rsi, qword [rsp + 0x60]
xchg r15, rax
mov r15, rbx
xchg r15, rax
xchg rbx, rdi
mov rdi, qword [rsp + 0x50]
xchg rbx, rdi
xchg r10, rdi
mov r10, qword [rsp + 0x68]
xchg r10, rdi
add rsp, 0x40
mov rdi, rdi
nop
mov r14, qword [rsp]
add rsp, 8
ret
Function at 0x1400c8d68
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov rcx, rcx
xchg r11, rsi
mov qword [rsp + 0x18], r11
xchg rsi, r11
nop
sub rsp, 8
mov qword [rsp], rdi
push r12
nop
mov qword [rsp - 8], r13
sub rsp, 8
push rax
mov qword [rsp], r14
push r15
mov dword [rsp - 0xc], 0x4182dfcb
nop
add rsp, 0x49000ef0
sub rsp, 0x49000f10
movzx esi, word [rdx + 0x14]
xchg rdi, rdi
lea rbx, [rdx + 0x18]
movzx eax, word [rdx + 6]
xchg rcx, rsp
mov r13, rsp
xchg rcx, rsp
add rbx, rsi
mov rdx, rdx
mov ecx, 0xe422277
add ecx, 0x1c325312
add ecx, 0x1dd4234b
sub ecx, 0x484898d3
xchg r9, r15
mov r9, r15
xchg r15, r9
xchg rsp, r8
mov r12, rsp
xchg r8, rsp
xchg rdx, r14
mov rdi, r14
xchg rdx, r14
cmp cx, ax
mov r8, r8
jae 0x1400c8e60
lea rbp, [rdx + 0x40]
add rbp, rsi
sub ax, cx
mov dword [rsp - 0x40], 0xa16f841
movzx r14d, ax
mov rdx, rbp
mov rcx, r13
call fcn.1400c9b04
mov dword [rsp - 0x28], ebx
test al, al
xchg rbp, r11
mov rcx, r11
xchg r11, rbp
cmove rcx, rbx
add rbp, 0x28
mov r13, r13
xchg rsi, rcx
mov rbx, rsi
xchg rcx, rsi
sub r14, 1
mov r9, r9
jne 0x1400c8e25
mov eax, dword [rsi + rdi + 0x24]
xchg rbp, rdx
mov rbp, rbx
xchg rbp, rdx
xchg rdi, r10
mov rcx, r10
xchg rdi, r10
mov dword [r12], eax
mov rbp, rbp
call fcn.1400861b0
add eax, dword [rbx + 0xc]
mov rbx, qword [rsp + 0x50]
mov dword [rsp - 0x28], 0x17e584ba
xchg rbp, r11
mov r11, qword [rsp + 0x58]
xchg r11, rbp
xchg rsi, r12
mov r12, qword [rsp + 0x60]
xchg r12, rsi
mov dword [r15], eax
mov r10, r10
nop
add rsp, 0xd125f85
sub rsp, 0xd125f65
nop
add rsp, 8
mov r15, qword [rsp - 8]
nop
add rsp, 8
mov r14, qword [rsp - 8]
pop r13
mov rsp, rsp
pop r12
pop rdi
ret
Function at 0x1400da0c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rsi, r14
mov qword [rsp + 0x18], r14
xchg rsi, r14
mov qword [rsp + 0x20], rdi
mov dword [rsp - 0x30], 0xd770cd7
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rdi, rsp
mov rbp, rdi
xchg rsp, rdi
nop
add rsp, 0xd528880
sub rsp, 0xd5288d0
xor esi, esi
mov dword [rsp - 0x3c], esi
mov dword [rbp - 0x30], 0x21423d61
xor dword [rbp - 0x30], 0x5e0fcf18
sub dword [rbp - 0x30], 0xe9fb30b
sub dword [rbp - 0x30], 0x705d3f4f
mov dword [rbp - 0x2c], 0x4f84fa7f
sub dword [rbp - 0x2c], 0x40795524
add dword [rbp - 0x2c], 0x2467fddc
sub dword [rbp - 0x2c], 0x3304a2cb
xchg rcx, rbx
mov rcx, rbx
xchg rcx, rbx
mov dword [rbp - 0x28], 0x28d3d068
sub dword [rbp - 0x28], 0x27aadc0a
add dword [rbp - 0x28], 0xfe43fad
sub dword [rbp - 0x28], 0x10fd3390
mov dword [rbp - 0x24], 0x77a2f620
sub dword [rbp - 0x24], 0x720fe300
xor dword [rbp - 0x24], 0x171e13bf
sub dword [rbp - 0x24], 0xb3a5bfc
xor dword [rbp - 0x24], 0x706a4d3
mov dword [rbp - 0x20], 0x495244da
sub dword [rbp - 0x20], 0x54ed8a6
add dword [rbp - 0x20], 0x37d5a029
sub dword [rbp - 0x20], 0xbe582a2
sub dword [rbp - 0x20], 0x6fa58997
mov qword [rbp + 0x10], rsi
xchg r8, rax
mov r8, qword [rbp + 0x10]
xchg r8, rax
mov rcx, qword [rbp + 0x10]
xchg rcx, rax
mov rcx, qword [rbp + 0x10]
xchg rcx, rax
and cl, 3
shl cl, 1
shl cl, 2
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x1244779d
add eax, 0x60d823c6
sub eax, 0x493e576c
add eax, 0x67fde51
shr eax, cl
movzx ecx, al
xchg r12, r12
xchg r9, rax
mov r9, qword [rbp + 0x10]
xchg r9, rax
xor cx, dx
mov dword [rsp - 0x24], 0x150efcde
mov word [rbp + rax*2 - 0x1c], cx
mov rax, qword [rbp + 0x10]
inc rax
mov dword [rsp - 0x24], 0x305c2120
xchg r13, rax
mov qword [rbp + 0x10], r13
xchg r13, rax
xchg rbx, rax
mov rbx, qword [rbp + 0x10]
xchg rbx, rax
cmp rax, 0xa
mov dword [rsp - 0x28], 0x75076aab
jb 0x1400da1b4
xor edx, edx
mov word [rbp - 8], si
lea rcx, [rbp - 0x1c]
mov r13, r13
call fcn.14008bbd0
mov r8, rax
xchg rcx, rax
mov qword [rbx + 0x200], rcx
xchg rcx, rax
xor eax, eax
mov r10, r10
lea rdi, [rbp - 0x1c]
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
xchg rdi, rdi
test r8, r8
je 0x1400da2bc
lea rdx, [rbx + 0x208]
mov dword [rsp - 0x44], esp
xchg rdx, rcx
mov rdx, r8
xchg rdx, rcx
call fcn.1400da980
test al, al
mov rdi, rdi
jne 0x1400da2b4
mov rcx, qword [rbx + 0x200]
call fcn.14008e130
xor al, al
mov dword [rsp - 0x34], esi
xchg r9, rsi
mov qword [rbx + 0x200], r9
xchg rsi, r9
jmp 0x1400da2bc
mov al, 0x11
xor al, 0x26
xor al, 0x45
sub al, 0x71
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov dword [rsp - 0x10], 0x2b8ae8a1
mov rdi, qword [rsp + 0x78]
nop
sub rsp, 0x9fe2471
add rsp, 0x9fe24c1
pop rbp
ret
Function at 0x1400dee40
Capabilities:
Encrypt data using curve25519

Disassembly:
xchg rcx, rbx
mov qword [rsp + 8], rcx
xchg rbx, rcx
nop
sub rsp, 8
mov qword [rsp], rdi
add rsp, 0x78cda939
sub rsp, 0x78cda9f9
mov rax, r8
mov dword [rsp - 0x2c], 0x59aa2d87
xchg rdx, rbp
mov rbx, rbp
xchg rbp, rdx
xchg r14, r8
mov r14, rdx
xchg r8, r14
xchg r10, rdi
mov r10, rcx
xchg r10, rdi
mov edx, 0xc283399
add edx, 0x19ffc482
xor edx, 0x477d3beb
sub edx, 0x3b49b95c
sub edx, 0x26110a74
mov rcx, rax
mov dword [rsp - 0x34], esp
call fcn.1400df6c0
movzx eax, byte [rbx + 0x1f]
lea rcx, [rsp + 0x20]
and byte [rbx], 0xf8
mov dword [rsp - 0x10], ebp
and al, 0x3f
or al, 0x40
mov rdx, rbx
mov dword [rsp - 0x2c], edx
mov byte [rbx + 0x1f], al
call fcn.1400e2cd0
lea rdx, [rsp + 0x20]
xchg r10, r10
xchg rdi, rcx
mov rdi, rcx
xchg rcx, rdi
call fcn.1400e2c00
xchg rdx, rdx
mov rbx, qword [rsp + 0xd0]
add rsp, 0x75dbd467
sub rsp, 0x75dbd3a7
pop rdi
ret
Function at 0x1400f1830
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov dword [rcx + 8], 0x10bedfea
add dword [rcx + 8], 0x110bf22b
xor dword [rcx + 8], 0x21cad214
lea r14, [rcx + 0x298]
xorps xmm0, xmm0
lea rax, [0x14000ba68]
mov qword [rcx], rax
mov rbp, rdx
lea rax, [r14 + 8]
mov rbx, rcx
mov qword [r14], rax
xor edi, edi
mov qword [rcx + 0x290], rdi
mov rsi, r8
movups xmmword [rax], xmm0
mov rcx, r14
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rdx, qword [r8 + 0x38]
mov qword [r14 + 0x38], rdx
call fcn.140017bb4
mov r8d, edi
cmp qword [r14 + 0x38], rdi
jbe 0x1400f18cc
mov rcx, qword [rsi]
movzx edx, word [rcx + r8*2]
mov word [rax + r8*2], dx
inc r8
cmp r8, qword [r14 + 0x38]
jb 0x1400f18b2
mov ecx, dword [rsi + 0x40]
mov edx, 0x6ad0618d
xor edx, 0x47ee5591
xor edx, 0x514f73c
add edx, 0x1d0c4b3a
mov qword [rbx + 0x2e0], rdi
bts ecx, 0xe
mov dword [rbx + 0x2d8], ecx
mov r15d, 0x63d08771
sub r15d, 0x1e35435
sub r15d, 0x428a2eef
mov eax, dword [rsi + 0x54]
and ecx, 0x2000
xor eax, edx
mov dword [rbx + 0x2e8], eax
mov eax, dword [rsi + 0x58]
xor eax, edx
mov dword [rbx + 0x2ec], eax
mov eax, dword [rsi + 0x44]
xor eax, edx
mov dword [rbx + 0x2f0], eax
mov eax, dword [rsi + 0x48]
xor eax, edx
mov dword [rbx + 0x2f4], eax
mov rax, qword [rsi + 0x60]
mov qword [rbx + 0x2f8], rax
mov eax, dword [rsi + 0x4c]
xor eax, r15d
mov dword [rbx + 0x308], eax
mov eax, dword [rsi + 0x50]
xor eax, edx
mov byte [rbx + 0x310], dil
neg ecx
mov dword [rbx + 0x30c], eax
pushf
mov edx, 0x4724bab8
sub edx, 0x1677061a
xor edx, 0x245e3a0d
sub edx, 0x14f38e83
popf
mov qword [rbx + 0x318], rbp
sbb r14, r14
and r14, 0xffffffffffff0100
add r14, 0x1e7a632c
sub r14, 0x1e79632d
mov rcx, r14
shl rcx, 4
call fcn.140099740
mov rcx, rax
mov rdx, r14
movaps xmm0, xmmword [0x140147580]
movups xmmword [rcx], xmm0
lea rcx, [rcx + 0x10]
sub rdx, 1
jne 0x1400f19b4
mov qword [rbx + 0x300], rax
mov rdx, rdi
mov rax, qword [rsi + 0x68]
inc rdi
mov ecx, dword [rax + rdx]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x20], xmm0
mov ecx, dword [rax + rdx + 4]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x24], xmm0
mov ecx, dword [rax + rdx + 8]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rsi + 0x68]
movss dword [rsp + 0x28], xmm0
mov ecx, dword [rax + rdx + 0xc]
xor ecx, r15d
mov dword [rsp + 0x50], ecx
movss xmm0, dword [rsp + 0x50]
mov rax, qword [rbx + 0x300]
movss dword [rsp + 0x2c], xmm0
movups xmm1, xmmword [rsp + 0x20]
xorps xmm1, xmmword [0x140147580]
movups xmmword [rdx + rax], xmm1
lea rdx, [rdx + 0x10]
cmp rdi, r14
jl 0x1400f19d6
lea rcx, [rbp + 0xa0]
mov qword [rsp + 0x50], rbx
lea rdx, [rsp + 0x50]
call fcn.1400eb448
mov rbp, qword [rsp + 0x60]
mov rax, rbx
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
add rsp, 0x30
pop r15
pop r14
pop rdi
ret
Function at 0x1400f35d0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x59a1fda1
xor r10d, 0x6fd545de
xor r10d, 0x7343b625
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x1f63044d
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x1400f3666
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140147580]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x1400f362a
mov eax, r9d
ret

Function at 0x1400f375c
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x52745bc0
sub r10d, 0x1f149e9e
add r10d, 0x287bcd6c
sub r10d, 0x16a47c34
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x1f63044d
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x1400f3807
mov r10, qword [rcx + 0x300]
movzx eax, ax
neg rdx
add rdx, 0xfffffffffffffffe
neg rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140147580]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x1400f37c2
mov eax, r9d
ret

Function at 0x1400f380c
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
add rsp, 0xffffffffffffff60
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x1400f389f
mov edx, dword [rcx + 0x2ec]
mov ecx, 0x286be8eb
sub ecx, 0x168c922e
add ecx, 0x3357b79d
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.1400996c0
test rsi, rsi
jle 0x1400f38bc
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0x200d358f
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x1400f387b
jmp 0x1400f38bc
lea rdx, [rsp + 0xb0]
call fcn.1400f3a24
test al, al
je 0x1400f3913
mov rax, qword [rsp + 0xb0]
lea rcx, [0x14000bb68]
mov qword [rsp + 0x98], 0x2e063e01
xor qword [rsp + 0x98], 0x2519d323
add qword [rsp + 0x98], 0x4898863f
sub qword [rsp + 0x98], 0x53b87349
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.1400f28e4
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret