joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14007c4b0
Capabilities:
Hash data using sha1
Hash data using sha256
Hash data using sha384
Hash data using sha512

Disassembly:
xor r8d, r8d
sub edx, 3
je 0x14007c694
sub edx, 1
je 0x14007c656
sub edx, 2
je 0x14007c5ff
sub edx, 1
je 0x14007c57f
cmp edx, 1
jne 0x14007c699
test rcx, rcx
je 0x14007c699
mov qword [rcx + 0xd8], r8
movabs rax, 0x6a09e667f3bcc908
mov qword [rcx], rax
movabs rax, 0xbb67ae8584caa73b
mov qword [rcx + 8], rax
movabs rax, 0x3c6ef372fe94f82b
mov qword [rcx + 0x10], rax
movabs rax, 0xa54ff53a5f1d36f1
mov qword [rcx + 0x18], rax
movabs rax, 0x510e527fade682d1
mov qword [rcx + 0x20], rax
movabs rax, 0x9b05688c2b3e6c1f
mov qword [rcx + 0x28], rax
movabs rax, 0x1f83d9abfb41bd6b
mov qword [rcx + 0x30], rax
movabs rax, 0x5be0cd19137e2179
mov qword [rcx + 0x38], rax
mov eax, r8d
mov dword [rcx + 0xc0], r8d
mov qword [rcx + 0xc8], r8
mov qword [rcx + 0xd0], r8
mov qword [rcx + 0x220], r8
ret
test rcx, rcx
je 0x14007c699
mov qword [rcx + 0xd8], r8
movabs rax, 0xcbbb9d5dc1059ed8
mov qword [rcx], rax
movabs rax, 0x629a292a367cd507
mov qword [rcx + 8], rax
movabs rax, 0x9159015a3070dd17
mov qword [rcx + 0x10], rax
movabs rax, 0x152fecd8f70e5939
mov qword [rcx + 0x18], rax
movabs rax, 0x67332667ffc00b31
mov qword [rcx + 0x20], rax
movabs rax, 0x8eb44a8768581511
mov qword [rcx + 0x28], rax
movabs rax, 0xdb0c2e0d64f98fa7
mov qword [rcx + 0x30], rax
movabs rax, 0x47b5481dbefa4fa4
jmp 0x14007c55b
test rcx, rcx
je 0x14007c699
mov dword [rcx], 0x6a09e667
mov eax, r8d
mov dword [rcx + 4], 0xbb67ae85
mov dword [rcx + 8], 0x3c6ef372
mov dword [rcx + 0xc], 0xa54ff53a
mov dword [rcx + 0x10], 0x510e527f
mov dword [rcx + 0x14], 0x9b05688c
mov dword [rcx + 0x18], 0x1f83d9ab
mov dword [rcx + 0x1c], 0x5be0cd19
mov dword [rcx + 0x68], r8d
mov qword [rcx + 0x70], r8
mov qword [rcx + 0x60], r8
mov qword [rcx + 0x220], r8
ret
test rcx, rcx
je 0x14007c699
mov dword [rcx + 0x5c], 0xc3d2e1f0
mov dword [rcx + 8], r8d
mov eax, r8d
mov qword [rcx], r8
mov dword [rcx + 0x58], 0x10325476
mov dword [rcx + 0x54], 0x98badcfe
mov dword [rcx + 0x50], 0xefcdab89
mov dword [rcx + 0x4c], 0x67452301
mov qword [rcx + 0x60], r8
mov qword [rcx + 0x220], r8
ret
test rcx, rcx
jne 0x14007c662
mov eax, 0xffffff53
mov qword [rcx + 0x220], r8
ret
Function at 0x14007d710
Capabilities:
Hash data using sha256

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x90]
sub rsp, 0x190
mov rax, qword [0x140121218]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov rsi, rdx
mov r14, r9
mov edx, dword [rbp + 0x100]
mov rdi, rcx
sub edx, 4
je 0x14007d858
cmp edx, 1
je 0x14007d75e
mov eax, 0xffffff18
jmp 0x14007d924
movdqa xmm0, xmmword [0x14010e960]
xor ebx, ebx
mov rax, qword [rcx + 0xa8]
xor r8d, r8d
movdqa xmm1, xmmword [0x14010ecf0]
lea rcx, [rbp - 0x60]
mov qword [rsp + 0x1c0], r12
xor edx, edx
movdqa xmmword [rbp - 0x50], xmm0
movabs r12, 0x629a292a367cd507
movdqa xmm0, xmmword [0x14010ec80]
mov qword [rsp + 0x1d0], r15
movabs r15, 0xcbbb9d5dc1059ed8
movdqa xmmword [rbp - 0x30], xmm0
mov qword [rbp + 0x78], rax
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r12
movdqa xmmword [rbp - 0x40], xmm1
mov dword [rbp + 0x60], ebx
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], rbx
call fcn.1400a0b20
test eax, eax
jne 0x14007d83e
lea rcx, [rbp - 0x60]
call fcn.1400a1580
test eax, eax
jne 0x14007d83e
movaps xmm0, xmmword [rbp - 0x60]
mov eax, ebx
movaps xmm1, xmmword [rbp - 0x50]
movaps xmmword [rsp + 0x60], xmm0
movaps xmm0, xmmword [rbp - 0x40]
movaps xmmword [rbp - 0x80], xmm0
movdqa xmm0, xmmword [0x14010e960]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm0, xmmword [0x14010ec80]
movaps xmmword [rsp + 0x70], xmm1
movdqa xmm1, xmmword [0x14010ecf0]
movdqa xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r12
movdqa xmmword [rbp - 0x40], xmm1
mov dword [rbp + 0x60], ebx
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], rbx
mov r15, qword [rsp + 0x1d0]
mov edx, 0x30
mov r12, qword [rsp + 0x1c0]
lea ecx, [rdx - 0x29]
jmp 0x14007d8b8
mov rax, qword [rcx + 0xa8]
lea rdx, [rsp + 0x60]
xor ebx, ebx
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x60]
mov qword [rbp], rbx
mov dword [rbp + 8], ebx
mov dword [rbp - 0x60], 0x6a09e667
mov dword [rbp - 0x5c], 0xbb67ae85
mov dword [rbp - 0x58], 0x3c6ef372
mov dword [rbp - 0x54], 0xa54ff53a
mov dword [rbp - 0x50], 0x510e527f
mov dword [rbp - 0x4c], 0x9b05688c
mov dword [rbp - 0x48], 0x1f83d9ab
mov dword [rbp - 0x44], 0x5be0cd19
call fcn.1400ad0c0
lea edx, [rbx + 0x20]
lea ecx, [rbx + 6]
test eax, eax
jne 0x14007d924
movzx eax, byte [rdi + 0x2f9]
cmp al, 4
je 0x14007d8e4
cmp al, 0xfc
jne 0x14007d8dd
test byte [rdi + 0x4c6], 8
je 0x14007d8dd
lea rax, str.dtls13
jmp 0x14007d8eb
mov eax, 0xfffffeba
jmp 0x14007d924
lea rax, str.tls13
mov dword [rsp + 0x50], ecx
mov r9d, edx
mov dword [rsp + 0x48], edx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x40], rcx
mov r8, r14
lea rcx, str.derived
mov dword [rsp + 0x38], 7
mov qword [rsp + 0x30], rcx
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.1400b9600
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.1400bf510
add rsp, 0x190
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
Function at 0x140081600
Capabilities:
Hash data using sha256

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x140121218]
xor rax, rsp
mov qword [rbp], rax
mov r9, rdx
mov rdi, rcx
mov edx, dword [rbp + 0x50]
mov ecx, 0xffffff53
sub edx, 4
je 0x1400817d0
sub edx, 1
je 0x140081710
cmp edx, 1
jne 0x140081854
movdqa xmm0, xmmword [0x14010ed20]
xor ebx, ebx
movdqa xmm1, xmmword [0x14010ed10]
movabs rax, 0x6a09e667f3bcc908
mov qword [rsp + 0x20], rax
movabs rax, 0xbb67ae8584caa73b
movdqa xmmword [rsp + 0x30], xmm0
movdqa xmm0, xmmword [0x14010ec90]
mov qword [rsp + 0x28], rax
movdqa xmmword [rsp + 0x50], xmm0
mov qword [rbp - 8], rbx
movdqa xmmword [rsp + 0x40], xmm1
mov dword [rbp - 0x20], ebx
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rbx
test r9, r9
jne 0x1400816aa
test r8d, r8d
jne 0x140081706
mov rdx, r9
lea rcx, [rsp + 0x20]
call fcn.1400a0b20
mov ecx, eax
test eax, eax
jne 0x140081706
test rdi, rdi
je 0x140081701
lea rcx, [rsp + 0x20]
call fcn.1400a1580
mov ecx, eax
test eax, eax
jne 0x140081706
movaps xmm0, xmmword [rsp + 0x20]
mov ecx, ebx
movaps xmm1, xmmword [rsp + 0x30]
mov eax, 0x40
movups xmmword [rdi], xmm0
movaps xmm0, xmmword [rsp + 0x40]
movups xmmword [rdi + 0x10], xmm1
movaps xmm1, xmmword [rsp + 0x50]
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm1
jmp 0x140081850
mov ecx, 0xffffff53
mov eax, 0x40
jmp 0x140081850
movdqa xmm0, xmmword [0x14010e960]
xor ebx, ebx
movdqa xmm1, xmmword [0x14010ecf0]
movabs rax, 0xcbbb9d5dc1059ed8
mov qword [rsp + 0x20], rax
movabs rax, 0x629a292a367cd507
movdqa xmmword [rsp + 0x30], xmm0
movdqa xmm0, xmmword [0x14010ec80]
mov qword [rsp + 0x28], rax
movdqa xmmword [rsp + 0x50], xmm0
mov qword [rbp - 8], rbx
movdqa xmmword [rsp + 0x40], xmm1
mov dword [rbp - 0x20], ebx
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rbx
test r9, r9
jne 0x140081773
test r8d, r8d
jne 0x1400817c6
mov rdx, r9
lea rcx, [rsp + 0x20]
call fcn.1400a0b20
mov ecx, eax
test eax, eax
jne 0x1400817c6
test rdi, rdi
je 0x1400817c1
lea rcx, [rsp + 0x20]
call fcn.1400a1580
mov ecx, eax
test eax, eax
jne 0x1400817c6
movaps xmm0, xmmword [rsp + 0x20]
mov ecx, ebx
movaps xmm1, xmmword [rsp + 0x30]
mov eax, 0x30
movups xmmword [rdi], xmm0
movaps xmm0, xmmword [rsp + 0x40]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi + 0x20], xmm0
jmp 0x140081850
mov ecx, 0xffffff53
mov eax, 0x30
jmp 0x140081850
xor ebx, ebx
mov dword [rsp + 0x20], 0x6a09e667
mov dword [rsp + 0x24], 0xbb67ae85
mov dword [rsp + 0x28], 0x3c6ef372
mov dword [rsp + 0x2c], 0xa54ff53a
mov dword [rsp + 0x30], 0x510e527f
mov dword [rsp + 0x34], 0x9b05688c
mov dword [rsp + 0x38], 0x1f83d9ab
mov dword [rsp + 0x3c], 0x5be0cd19
mov qword [rbp - 0x80], rbx
mov dword [rbp - 0x78], ebx
mov qword [rbp - 0x70], rbx
test r9, r9
jne 0x140081829
test r8d, r8d
je 0x14008183c
jmp 0x14008184b
mov rdx, r9
lea rcx, [rsp + 0x20]
call fcn.1400ac650
mov ecx, eax
test eax, eax
jne 0x14008184b
mov rdx, rdi
lea rcx, [rsp + 0x20]
call fcn.1400ad0c0
mov ecx, eax
mov eax, 0x20
test ecx, ecx
je 0x140081856
mov eax, ecx
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.1400bf510
add rsp, 0x110
pop rdi
pop rbx
pop rbp
ret
Function at 0x14009a1a0
Capabilities:
Hash data with md5

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x47]
sub rsp, 0xa0
mov rax, qword [0x140121218]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor edi, edi
mov dword [rbp + 0x13], 0x67452301
mov rbx, r8
mov qword [rbp + 0x27], rdi
mov r8d, edx
mov dword [rbp + 0x17], 0xefcdab89
mov rdx, rcx
mov dword [rbp + 0x1b], 0x98badcfe
lea rcx, [rbp - 0x39]
mov dword [rbp + 0x1f], 0x10325476
mov qword [rbp - 0x39], rdi
mov dword [rbp - 0x31], edi
call fcn.1400b1bb0
test eax, eax
jne 0x14009a2ac
test rbx, rbx
je 0x14009a2a7
mov eax, dword [rbp - 0x39]
mov byte [rbp + rax - 0x2d], 0x80
mov ecx, dword [rbp - 0x39]
inc ecx
mov dword [rbp - 0x39], ecx
cmp ecx, 0x38
jbe 0x14009a251
mov eax, ecx
mov r8d, 0x40
sub r8d, ecx
xor edx, edx
lea rcx, [rbp - 0x2d]
add rcx, rax
call fcn.1400c2270
lea rdx, [rbp - 0x2d]
mov dword [rbp - 0x39], 0x40
lea rcx, [rbp - 0x39]
call fcn.1400b13c0
mov ecx, edi
mov dword [rbp - 0x39], edi
mov eax, ecx
mov r8d, 0x38
sub r8d, ecx
xor edx, edx
lea rcx, [rbp - 0x2d]
add rcx, rax
call fcn.1400c2270
mov r9d, dword [rbp - 0x35]
mov edx, r9d
mov ecx, dword [rbp - 0x31]
shr edx, 0x1d
shl r9d, 3
mov dword [rbp - 0x35], r9d
mov dword [rbp + 0xb], r9d
lea r8d, [rdx + rcx*8]
lea rdx, [rbp - 0x2d]
mov dword [rbp - 0x31], r8d
lea rcx, [rbp - 0x39]
mov dword [rbp + 0xf], r8d
call fcn.1400b13c0
movups xmm0, xmmword [rbp + 0x13]
mov eax, edi
movups xmmword [rbx], xmm0
jmp 0x14009a2ac
mov eax, 0xffffff53
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1400bf510
add rsp, 0xa0
pop rdi
pop rbx
pop rbp
ret

Function at 0x14009a2d0
Capabilities:
Hash data using sha1

Disassembly:
push rbx
sub rsp, 0xa0
mov rax, qword [0x140121218]
xor rax, rsp
mov qword [rsp + 0x90], rax
xor eax, eax
mov dword [rsp + 0x6c], 0x67452301
mov rbx, r8
mov qword [rsp + 0x80], rax
mov r8d, edx
mov dword [rsp + 0x70], 0xefcdab89
mov rdx, rcx
mov dword [rsp + 0x74], 0x98badcfe
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x78], 0x10325476
mov dword [rsp + 0x7c], 0xc3d2e1f0
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], eax
call fcn.14009d9b0
test eax, eax
jne 0x14009a34a
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14009deb0
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.1400bf510
add rsp, 0xa0
pop rbx
ret

Function at 0x14009a370
Capabilities:
Hash data using sha256

Disassembly:
mov r11, rsp
push rbx
sub rsp, 0xb0
mov rax, qword [0x140121218]
xor rax, rsp
mov qword [rsp + 0xa0], rax
xor eax, eax
mov dword [rsp + 0x20], 0x6a09e667
mov dword [rsp + 0x24], 0xbb67ae85
mov rbx, r8
mov dword [rsp + 0x28], 0x3c6ef372
mov dword [rsp + 0x2c], 0xa54ff53a
mov dword [rsp + 0x30], 0x510e527f
mov dword [rsp + 0x34], 0x9b05688c
mov dword [rsp + 0x38], 0x1f83d9ab
mov dword [rsp + 0x3c], 0x5be0cd19
mov qword [r11 - 0x38], rax
mov dword [r11 - 0x30], eax
mov qword [r11 - 0x28], rax
test rcx, rcx
jne 0x14009a3ee
test edx, edx
je 0x14009a402
mov eax, 0xffffff53
jmp 0x14009a40f
mov r8d, edx
mov rdx, rcx
lea rcx, [rsp + 0x20]
call fcn.1400ac650
test eax, eax
jne 0x14009a40f
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.1400ad0c0
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.1400bf510
add rsp, 0xb0
pop rbx
ret
Function at 0x14009e3c0
Capabilities:
Encode data using xor

Disassembly:
push rbx
mov eax, r8d
mov r9, rdx
or al, cl
mov r10, rcx
or al, dl
test al, 7
jne 0x14009e4b3
shr r8d, 3
xor eax, eax
test r8d, r8d
je 0x14009e5c1
cmp r8d, 8
jb 0x14009e490
lea ecx, [r8 - 1]
lea r11, [r10 + rcx*8]
lea rcx, [rdx + rcx*8]
cmp r10, rcx
ja 0x14009e40a
cmp r11, rdx
jae 0x14009e490
mov r11d, r8d
and r11d, 0xfffffff8
mov ebx, 4
nop word [rax + rax]
movdqu xmm0, xmmword [r10 + rax*8]
lea ecx, [rbx - 2]
movdqu xmm1, xmmword [rdx + rax*8]
pxor xmm1, xmm0
movdqu xmmword [r10 + rax*8], xmm1
add eax, 8
movdqu xmm0, xmmword [r10 + rcx*8]
movdqu xmm1, xmmword [rdx + rcx*8]
pxor xmm1, xmm0
movdqu xmmword [r10 + rcx*8], xmm1
mov ecx, ebx
movdqu xmm0, xmmword [r10 + rcx*8]
movdqu xmm1, xmmword [rdx + rcx*8]
pxor xmm1, xmm0
movdqu xmmword [r10 + rcx*8], xmm1
lea ecx, [rbx + 2]
add ebx, 8
movdqu xmm0, xmmword [r10 + rcx*8]
movdqu xmm1, xmmword [rdx + rcx*8]
pxor xmm1, xmm0
movdqu xmmword [r10 + rcx*8], xmm1
cmp eax, r11d
jb 0x14009e420
cmp eax, r8d
jae 0x14009e5c1
sub r9, r10
lea rdx, [r10 + rax*8]
sub r8d, eax
mov ecx, r8d
nop dword [rax]
mov rax, qword [r9 + rdx]
xor qword [rdx], rax
lea rdx, [rdx + 8]
sub rcx, 1
jne 0x14009e4a0
pop rbx
ret
xor eax, eax
test r8d, r8d
je 0x14009e5c1
cmp r8d, 8
jb 0x14009e5a2
lea ecx, [r8 - 1]
lea r11, [rcx + r10]
add rcx, rdx
cmp r10, rcx
ja 0x14009e4e1
cmp r11, r9
jae 0x14009e5a2
cmp r8d, 0x40
jb 0x14009e575
mov qword [rsp + 0x10], rdi
mov ebx, r8d
and ebx, 0x3f
mov edi, r8d
sub edi, ebx
mov r11d, 0x20
movdqu xmm0, xmmword [rax + r10]
lea ecx, [r11 - 0x10]
movdqu xmm1, xmmword [rax + rdx]
pxor xmm1, xmm0
movdqu xmmword [rax + r10], xmm1
add eax, 0x40
movdqu xmm0, xmmword [rcx + r10]
movdqu xmm1, xmmword [rcx + rdx]
pxor xmm1, xmm0
movdqu xmmword [rcx + r10], xmm1
mov ecx, r11d
movdqu xmm0, xmmword [rcx + r10]
movdqu xmm1, xmmword [rcx + rdx]
pxor xmm1, xmm0
movdqu xmmword [rcx + r10], xmm1
lea ecx, [r11 + 0x10]
add r11d, 0x40
movdqu xmm0, xmmword [rcx + r10]
movdqu xmm1, xmmword [rcx + rdx]
pxor xmm1, xmm0
movdqu xmmword [rcx + r10], xmm1
cmp eax, edi
jb 0x14009e501
mov rdi, qword [rsp + 0x10]
cmp ebx, 8
jb 0x14009e59d
mov edx, r8d
and edx, 0xfffffff8
nop dword [rax + rax]
movq xmm0, qword [rax + r10]
movq xmm1, qword [rax + r9]
pxor xmm1, xmm0
movq qword [rax + r10], xmm1
add eax, 8
cmp eax, edx
jb 0x14009e580
cmp eax, r8d
jae 0x14009e5c1
mov edx, eax
sub r9, r10
add rdx, r10
sub r8d, eax
mov ecx, r8d
movzx eax, byte [rdx + r9]
xor byte [rdx], al
lea rdx, [rdx + 1]
sub rcx, 1
jne 0x14009e5b0
pop rbx
ret
Function at 0x1400a2370
Capabilities:
Hash data using sha512

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, rdx
mov rbx, rcx
test rcx, rcx
je 0x1400a244d
test rdx, rdx
je 0x1400a244d
call fcn.1400a1580
test eax, eax
jne 0x1400a2452
movups xmm0, xmmword [rbx]
movabs rax, 0x6a09e667f3bcc908
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [rdi + 0x20], xmm0
movups xmm1, xmmword [rbx + 0x30]
movups xmmword [rdi + 0x30], xmm1
mov qword [rbx], rax
movabs rax, 0xbb67ae8584caa73b
mov qword [rbx + 8], rax
movabs rax, 0x3c6ef372fe94f82b
mov qword [rbx + 0x10], rax
movabs rax, 0xa54ff53a5f1d36f1
mov qword [rbx + 0x18], rax
movabs rax, 0x510e527fade682d1
mov qword [rbx + 0x20], rax
movabs rax, 0x9b05688c2b3e6c1f
mov qword [rbx + 0x28], rax
movabs rax, 0x1f83d9abfb41bd6b
mov qword [rbx + 0x30], rax
movabs rax, 0x5be0cd19137e2179
mov qword [rbx + 0x38], rax
xor eax, eax
mov dword [rbx + 0xc0], eax
mov qword [rbx + 0xc8], rax
mov qword [rbx + 0xd0], rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov eax, 0xffffff53
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x1400a5990
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x438
mov rax, qword [0x140121218]
xor rax, rsp
mov qword [rsp + 0x410], rax
mov r11d, r9d
mov r10, rdx
neg r11d
mov rdx, rcx
cmp r8d, 0x101
jle 0x1400a59db
mov eax, 0xfffffffd
mov rcx, qword [rsp + 0x410]
xor rcx, rsp
call fcn.1400bf510
add rsp, 0x438
ret
mov qword [rsp + 0x450], rbx
mov ebx, dword [rcx]
mov eax, ebx
xor eax, dword [r10]
and eax, r11d
mov qword [rsp + 0x428], rdi
mov edi, dword [rcx + 8]
mov ecx, edi
xor ecx, dword [r10 + 8]
and ecx, r11d
movsxd r8, r8d
mov dword [rsp], eax
mov dword [rsp + 8], ecx
test r8, r8
jle 0x1400a5ad2
mov qword [rsp + 0x430], rsi
lea rcx, [rdx + 0xc]
mov qword [rsp + 0x420], r14
mov rsi, r10
sub rsi, rdx
lea r14, [rsp]
sub r14, rdx
mov r9, r8
nop dword [rax + rax]
mov eax, dword [rsi + rcx]
xor eax, dword [rcx]
lea rcx, [rcx + 4]
and eax, r11d
mov dword [r14 + rcx - 4], eax
sub r9, 1
jne 0x1400a5a40
xor edi, dword [rsp + 8]
lea r9, [rsp]
mov r11d, dword [rsp]
lea rcx, [rdx + 0xc]
mov r14, qword [rsp + 0x420]
xor ebx, r11d
mov rsi, qword [rsp + 0x430]
sub r9, rdx
mov dword [rdx], ebx
mov dword [rdx + 8], edi
mov rdx, r8
nop word [rax + rax]
mov eax, dword [rcx + r9]
xor dword [rcx], eax
lea rcx, [rcx + 4]
sub rdx, 1
jne 0x1400a5a90
xor dword [r10], r11d
lea r9, [rsp]
sub r9, r10
mov dword [r10 + 8], edx
lea rcx, [r10 + 0xc]
nop dword [rax]
nop word [rax + rax]
mov edx, dword [r9 + rcx]
xor dword [rcx], edx
lea rcx, [rcx + 4]
sub r8, 1
jne 0x1400a5ac0
jmp 0x1400a5ae6
xor ebx, eax
xor edi, ecx
mov dword [rdx], ebx
mov dword [rdx + 8], edi
xor dword [r10], eax
mov dword [r10 + 8], 0
mov rbx, qword [rsp + 0x450]
xor eax, eax
mov rdi, qword [rsp + 0x428]
mov rcx, qword [rsp + 0x410]
xor rcx, rsp
call fcn.1400bf510
add rsp, 0x438
ret
Function at 0x1400ad0c0
Capabilities:
Hash data using sha256

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, rdx
mov rbx, rcx
test rcx, rcx
je 0x1400ad21e
test rdx, rdx
je 0x1400ad21e
call fcn.1400acb50
test eax, eax
jne 0x1400ad223
mov eax, dword [rbx]
mov ecx, eax
ror ecx, 8
and ecx, 0xff00ff00
rol eax, 8
and eax, 0xff00ff
or ecx, eax
mov eax, dword [rbx + 4]
mov dword [rbx], ecx
mov ecx, eax
ror ecx, 8
and ecx, 0xff00ff00
rol eax, 8
and eax, 0xff00ff
or ecx, eax
mov eax, dword [rbx + 8]
mov dword [rbx + 4], ecx
mov ecx, eax
ror ecx, 8
and ecx, 0xff00ff00
rol eax, 8
and eax, 0xff00ff
or ecx, eax
mov eax, dword [rbx + 0xc]
mov dword [rbx + 8], ecx
mov ecx, eax
ror ecx, 8
and ecx, 0xff00ff00
rol eax, 8
and eax, 0xff00ff
or ecx, eax
mov eax, dword [rbx + 0x10]
mov dword [rbx + 0xc], ecx
mov ecx, eax
ror ecx, 8
and ecx, 0xff00ff00
rol eax, 8
and eax, 0xff00ff
or ecx, eax
mov eax, dword [rbx + 0x14]
mov dword [rbx + 0x10], ecx
mov ecx, eax
ror ecx, 8
and ecx, 0xff00ff00
rol eax, 8
and eax, 0xff00ff
or ecx, eax
mov eax, dword [rbx + 0x18]
mov dword [rbx + 0x14], ecx
mov ecx, eax
ror ecx, 8
rol eax, 8
and ecx, 0xff00ff00
and eax, 0xff00ff
or ecx, eax
mov eax, dword [rbx + 0x1c]
mov dword [rbx + 0x18], ecx
mov ecx, eax
ror ecx, 8
rol eax, 8
and ecx, 0xff00ff00
and eax, 0xff00ff
or ecx, eax
mov dword [rbx + 0x1c], ecx
xor eax, eax
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov dword [rbx], 0x6a09e667
mov dword [rbx + 4], 0xbb67ae85
mov dword [rbx + 8], 0x3c6ef372
mov dword [rbx + 0xc], 0xa54ff53a
mov dword [rbx + 0x10], 0x510e527f
mov dword [rbx + 0x14], 0x9b05688c
mov dword [rbx + 0x18], 0x1f83d9ab
mov dword [rbx + 0x1c], 0x5be0cd19
mov qword [rbx + 0x60], rax
mov dword [rbx + 0x68], eax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov eax, 0xffffff53
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x1400ad2f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
mov eax, r9d
mov r11, rdx
or al, cl
mov r10, rcx
or al, dl
or al, r8b
test al, 7
jne 0x1400ad40c
shr r9d, 3
xor eax, eax
test r9d, r9d
je 0x1400ad545
cmp r9d, 8
jb 0x1400ad3d3
lea ecx, [r9 - 1]
mov edx, ecx
lea rbx, [r10 + rcx*8]
lea rcx, [r8 + rcx*8]
cmp r10, rcx
ja 0x1400ad343
cmp rbx, r8
jae 0x1400ad3d3
lea rcx, [r11 + rdx*8]
cmp r10, rcx
ja 0x1400ad355
cmp rbx, r11
jae 0x1400ad3d3
mov ebx, r9d
and ebx, 0xfffffff8
mov edi, 4
movdqu xmm0, xmmword [r8 + rax*8]
lea ecx, [rdi - 2]
movdqu xmm1, xmmword [r11 + rax*8]
pxor xmm1, xmm0
movdqu xmm0, xmmword [r11 + rcx*8]
movdqu xmmword [r10 + rax*8], xmm1
add eax, 8
movdqu xmm1, xmmword [r8 + rcx*8]
pxor xmm1, xmm0
movdqu xmmword [r10 + rcx*8], xmm1
mov ecx, edi
movdqu xmm0, xmmword [r11 + rcx*8]
movdqu xmm1, xmmword [r8 + rcx*8]
pxor xmm1, xmm0
movdqu xmmword [r10 + rcx*8], xmm1
lea ecx, [rdi + 2]
add edi, 8
movdqu xmm1, xmmword [r8 + rcx*8]
movdqu xmm0, xmmword [r11 + rcx*8]
pxor xmm1, xmm0
movdqu xmmword [r10 + rcx*8], xmm1
cmp eax, ebx
jb 0x1400ad360
cmp eax, r9d
jae 0x1400ad545
sub r11, r8
lea rdx, [r8 + rax*8]
sub r10, r8
sub r9d, eax
mov ecx, r9d
nop dword [rax]
nop word [rax + rax]
mov rax, qword [r11 + rdx]
xor rax, qword [rdx]
mov qword [r10 + rdx], rax
lea rdx, [rdx + 8]
sub rcx, 1
jne 0x1400ad3f0
mov rbx, qword [rsp + 0x18]
pop rdi
ret
xor eax, eax
test r9d, r9d
je 0x1400ad545
cmp r9d, 8
jb 0x1400ad512
lea ecx, [r9 - 1]
mov edx, ecx
lea rbx, [rcx + r10]
add rcx, r11
cmp r10, rcx
ja 0x1400ad43c
cmp rbx, r11
jae 0x1400ad512
lea rcx, [rdx + r8]
cmp r10, rcx
ja 0x1400ad44e
cmp rbx, r8
jae 0x1400ad512
cmp r9d, 0x40
jb 0x1400ad4e4
mov qword [rsp + 0x10], rsi
mov edi, r9d
and edi, 0x3f
mov esi, r9d
sub esi, edi
mov ebx, 0x20
nop dword [rax]
movdqu xmm0, xmmword [rax + r8]
lea ecx, [rbx - 0x10]
movdqu xmm1, xmmword [rax + r11]
pxor xmm1, xmm0
movdqu xmm0, xmmword [rcx + r8]
movdqu xmmword [rax + r10], xmm1
add eax, 0x40
movdqu xmm1, xmmword [rcx + r11]
pxor xmm1, xmm0
movdqu xmmword [rcx + r10], xmm1
mov ecx, ebx
movdqu xmm0, xmmword [rcx + r8]
movdqu xmm1, xmmword [rcx + r11]
pxor xmm1, xmm0
movdqu xmmword [rcx + r10], xmm1
lea ecx, [rbx + 0x10]
add ebx, 0x40
movdqu xmm1, xmmword [rcx + r11]
movdqu xmm0, xmmword [rcx + r8]
pxor xmm1, xmm0
movdqu xmmword [rcx + r10], xmm1
cmp eax, esi
jb 0x1400ad470
mov rsi, qword [rsp + 0x10]
cmp edi, 8
jb 0x1400ad50d
mov edx, r9d
and edx, 0xfffffff8
nop word [rax + rax]
movq xmm1, qword [rax + r11]
movq xmm0, qword [rax + r8]
pxor xmm1, xmm0
movq qword [rax + r10], xmm1
add eax, 8
cmp eax, edx
jb 0x1400ad4f0
cmp eax, r9d
jae 0x1400ad545
mov edx, eax
sub r8, r11
add rdx, r11
sub r10, r11
sub r9d, eax
mov ecx, r9d
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
xor al, byte [rdx]
mov byte [r10 + rdx], al
lea rdx, [rdx + 1]
sub rcx, 1
jne 0x1400ad530
mov rbx, qword [rsp + 0x18]
pop rdi
ret
Function at 0x1400b0650
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov r9, qword [rcx]
xor eax, eax
mov r10, qword [rcx + 8]
mov rsi, rdx
mov qword [rsp], rax
mov rdi, rcx
mov qword [rsp + 8], rax
movabs rbp, 0xe100000000000000
movdqu xmm2, xmmword [rsp]
mov qword [rsp + 0x10], r9
mov qword [rsp + 0x18], r10
nop word [rax + rax]
mov r11, qword [rsi + rax*8]
mov ebx, 0x40
nop dword [rax]
movdqu xmm0, xmmword [rsp + 0x10]
mov r8, r10
mov rdx, r9
and r8d, 1
shl rdx, 0x3f
mov rcx, r11
neg r8
shr rcx, 0x3f
and r8, rbp
neg rcx
add r11, r11
movq xmm1, rcx
mov rcx, r10
shr rcx, 1
mov r10, rdx
or r10, rcx
punpcklqdq xmm1, xmm1
mov rcx, r9
mov qword [rsp + 0x18], r10
shr rcx, 1
mov r9, r8
xor r9, rcx
pand xmm1, xmm0
mov qword [rsp + 0x10], r9
pxor xmm1, xmm2
movdqa xmm2, xmm1
sub rbx, 1
jne 0x1400b06b0
inc rax
movdqu xmmword [rsp], xmm1
cmp rax, 2
jl 0x1400b06a0
mov rax, qword [rsp]
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov qword [rdi], rax
mov rax, qword [rsp + 8]
mov qword [rdi + 8], rax
add rsp, 0x20
pop rdi
ret