joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14008a470
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
cmp dword [0x1400eefe4], 0
xchg r9, r9
jne 0x14008a57b
xor edx, edx
lea r8, [0x1400eefe0]
nop word [rax + rax]
mov rdi, rdi
mov ecx, edx
lea r8, [r8 + 4]
and ecx, 1
mov eax, edx
xchg r9, r9
shr eax, 1
neg ecx
and ecx, 0xedb88320
inc edx
mov dword [rsp - 0x40], 0xf3b1bf4
xor ecx, eax
mov eax, ecx
shr ecx, 1
mov dword [rsp - 0x14], 0x4972348d
and eax, 1
neg eax
and eax, 0xedb88320
mov rcx, rcx
xor eax, ecx
mov ecx, eax
shr eax, 1
mov dword [rsp - 0x30], esp
and ecx, 1
neg ecx
and ecx, 0xedb88320
xor ecx, eax
xchg r9, r9
mov eax, ecx
shr ecx, 1
and eax, 1
neg eax
mov dword [rsp - 0x34], 0x3fa03467
and eax, 0xedb88320
xor eax, ecx
mov ecx, eax
shr eax, 1
xchg rbx, rbx
and ecx, 1
neg ecx
and ecx, 0xedb88320
xor ecx, eax
xchg rbx, rbx
mov eax, ecx
shr ecx, 1
and eax, 1
xchg rsi, rsi
neg eax
and eax, 0xedb88320
xor eax, ecx
mov dword [rsp - 0x34], ecx
mov ecx, eax
shr eax, 1
and ecx, 1
mov dword [rsp - 0x34], 0x2369ac97
neg ecx
and ecx, 0xedb88320
xor ecx, eax
xchg rsi, rsi
mov eax, ecx
shr ecx, 1
and eax, 1
mov dword [rsp - 0x28], ebp
neg eax
and eax, 0xedb88320
xor eax, ecx
mov dword [r8 - 4], eax
mov dword [rsp - 0x38], 0x2bba74c3
cmp edx, 0x100
jb 0x14008a496
ret
Function at 0x1400915dc
Capabilities:
Encode data using xor

Disassembly:
xchg rdi, rbx
mov qword [rsp + 8], rdi
xchg rdi, rbx
mov qword [rsp + 0x10], rbp
xchg rdi, rsi
mov qword [rsp + 0x18], rdi
xchg rsi, rdi
push rdi
xchg rsp, rsp
nop
sub rsp, 8
mov qword [rsp], r14
nop
mov qword [rsp - 8], r15
sub rsp, 8
sub rsp, 0x20
mov dword [rsp - 0x44], esi
movzx eax, byte [rdx + 1]
xchg r8, r15
mov r8, r15
xchg r15, r8
movzx ebx, byte [rdx]
movzx edi, byte [rdx + 4]
xchg rcx, rcx
mov r8d, dword [rcx + 4]
shl ebx, 2
shl ebx, 5
shl ebx, 1
dec r8d
or ebx, eax
shl edi, 7
shl edi, 1
movzx eax, byte [rdx + 2]
shl ebx, 4
shl ebx, 1
shl ebx, 2
shl ebx, 1
or ebx, eax
movzx eax, byte [rdx + 3]
mov dword [rsp - 0x34], 0x3d3ec357
shl ebx, 4
shl ebx, 2
shl ebx, 2
or ebx, eax
mov rcx, rcx
movzx eax, byte [rdx + 5]
or edi, eax
movzx eax, byte [rdx + 6]
shl edi, 5
shl edi, 2
shl edi, 1
or edi, eax
xchg rbx, rbx
movzx eax, byte [rdx + 7]
shl edi, 8
or edi, eax
test r8d, r8d
mov rsi, rsi
jle 0x140091722
xchg r13, rdx
mov r13, qword [rcx + 8]
xchg rdx, r13
lea r14d, [r8 - 1]
movsxd rax, r8d
mov r8, r8
shr r14d, 1
inc r14d
lea rcx, [rax + rax*2]
lea eax, [r8 - 1]
mov dword [rsp - 0x38], edx
lea rsi, [rdx + rcx*4]
movsxd rcx, eax
lea rax, [rcx + rcx*2]
lea rbp, [rdx + rax*4]
mov dword [rsp - 0x38], ebp
xchg rsi, r11
mov rdx, r11
xchg r11, rsi
mov ecx, edi
call fcn.140091e88
mov rcx, rcx
xor ebx, eax
xchg r12, rdx
mov r12, rbp
xchg r12, rdx
mov ecx, ebx
call fcn.140091e88
mov dword [rsp - 0x1c], 0x5f2493c6
xor edi, eax
nop
sub rsi, 0x2615850d
add rsi, 0x261584f5
add rbp, 0xffffffffffffffe8
mov dword [rsp - 0x40], esi
sub r14, 1
jne 0x1400916d2
lea rax, [r15 + 7]
mov ecx, 0x2cf6b58
add ecx, 0x63b344b3
xor ecx, 0x67a5ded
add ecx, 0xdde002d
sub ecx, 0x6ed6ee0f
mov byte [rax - 4], dil
mov byte [rax], bl
mov dword [rsp - 0x28], 0x3db463f7
dec rax
shr ebx, 6
shr ebx, 1
shr ebx, 1
shr edi, 7
shr edi, 1
sub rcx, 1
mov dword [rsp - 0xc], edi
jne 0x140091743
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
xchg rdx, rdx
xchg rsi, rbx
mov rbx, qword [rsp + 0x50]
xchg rbx, rsi
nop
sub rsp, 0x526dc54c
add rsp, 0x526dc56c
nop
mov r15, qword [rsp]
add rsp, 8
nop
mov r14, qword [rsp]
add rsp, 8
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400917b4
Capabilities:
Encode data using xor

Disassembly:
xchg rsp, rax
mov rsp, rax
xchg rsp, rax
mov qword [rax + 8], rbx
mov dword [rsp - 0x40], ecx
xchg rsp, rbp
mov qword [rax + 0x10], rsp
xchg rsp, rbp
xchg rdi, rsi
mov qword [rax + 0x18], rdi
xchg rdi, rsi
xchg rbp, rdi
mov qword [rax + 0x20], rbp
xchg rbp, rdi
nop
mov qword [rsp - 8], r14
sub rsp, 8
add rsp, 0xffffffffffffffe0
mov r8, r8
movzx eax, byte [rdx + 1]
xchg r12, r8
mov r14, r12
xchg r12, r8
movzx ebx, byte [rdx]
movzx edi, byte [rdx + 4]
shl ebx, 3
shl ebx, 1
shl ebx, 1
shl ebx, 1
shl ebx, 1
shl ebx, 1
or ebx, eax
mov dword [rsp - 0x30], 0x6ecc5fcf
shl edi, 4
shl edi, 2
shl edi, 1
shl edi, 1
movzx eax, byte [rdx + 2]
shl ebx, 1
shl ebx, 5
shl ebx, 1
shl ebx, 1
or ebx, eax
xchg r13, r13
movzx eax, byte [rdx + 3]
shl ebx, 5
shl ebx, 1
shl ebx, 1
shl ebx, 1
or ebx, eax
xchg rdx, rdx
movzx eax, byte [rdx + 5]
or edi, eax
movzx eax, byte [rdx + 6]
shl edi, 8
mov r9, r9
or edi, eax
movzx eax, byte [rdx + 7]
shl edi, 3
shl edi, 4
shl edi, 1
or edi, eax
mov dword [rsp - 0x24], ebp
mov eax, dword [rcx + 4]
test eax, eax
jle 0x1400918d2
mov rcx, rcx
xchg rdi, rsi
mov rdi, qword [rcx + 8]
xchg rsi, rdi
lea ebp, [rax - 1]
shr ebp, 1
mov rsp, rsp
inc ebp
xchg rsi, rdx
mov rsi, rdx
xchg rsi, rdx
mov ecx, edi
call fcn.140091e88
xor ebx, eax
mov r15, r15
lea rdx, [rsi + 0xc]
mov ecx, ebx
call fcn.140091e88
xor edi, eax
mov rsi, rsi
nop
sub rsi, 0x528cdd46
add rsi, 0x528cdd5e
sub rbp, 1
jne 0x140091891
xchg rdi, rdi
lea rax, [r14 + 7]
mov ecx, 0x473fd7af
add ecx, 0x1c351522
sub ecx, 0x176ab686
add ecx, 0x25e4f80
sub ecx, 0x4e6885c7
mov byte [rax - 4], dil
mov dword [rsp - 0x20], ebx
mov byte [rax], bl
dec rax
shr ebx, 6
shr ebx, 1
shr ebx, 1
shr edi, 1
shr edi, 3
shr edi, 2
shr edi, 1
shr edi, 1
sub rcx, 1
mov rbx, rbx
jne 0x1400918f3
mov rbx, qword [rsp + 0x30]
xchg rcx, rbp
mov rcx, qword [rsp + 0x38]
xchg rcx, rbp
xchg rdx, rsi
mov rdx, qword [rsp + 0x40]
xchg rsi, rdx
mov rdi, qword [rsp + 0x48]
nop
sub rsp, 0x4bddce79
add rsp, 0x4bddce99
nop
mov r14, qword [rsp]
add rsp, 8
ret
Function at 0x140091b30
Capabilities:
Encode data using xor

Disassembly:
xchg r9, rbx
mov qword [rsp + 0x10], r9
xchg r9, rbx
mov qword [rsp + 0x18], rsi
nop
sub rsp, 8
mov qword [rsp], rbp
nop
sub rsp, 8
mov qword [rsp], rdi
push r13
mov qword [rsp], r14
lea rbp, [rsp - 0x47]
add rsp, 0x11b3a353
sub rsp, 0x11b3a3f3
movdqa xmm0, xmmword [0x14000bef0]
xor edi, edi
mov dword [rsp - 0x24], 0x6d5a0d60
movdqa xmm1, xmmword [0x14000bf60]
mov rbx, rdx
xchg rsp, rbp
movdqu xmmword [rsp - 0x39], xmm0
xchg rsp, rbp
mov rsi, rcx
mov dword [rsp - 0x28], edx
mov edx, edi
movdqa xmm0, xmmword [0x14000beb0]
mov r8d, edi
xchg rdx, rbp
movdqu xmmword [rdx - 0x29], xmm1
xchg rdx, rbp
movdqa xmm1, xmmword [0x14000bec0]
xchg rbp, rbx
movdqu xmmword [rbx - 0x19], xmm0
xchg rbx, rbp
xchg r13, rbp
movdqu xmmword [r13 - 9], xmm1
xchg r13, rbp
mov ecx, edx
mov dword [rsp - 0x18], edx
lea r8, [r8 + 4]
mov eax, 0x97cef55
add eax, 0x11c878cc
xor eax, 0x333ab5e8
add eax, 0x55619d11
inc rdx
rol eax, cl
xor eax, dword [rbp + r8 - 0x3d]
mov dword [rsp - 0x40], edi
mov dword [rbp + r8 + 3], eax
cmp rdx, 0x10
jb 0x140091bd2
mov dword [rsp - 0x14], esp
cmp dword [rsi + 4], 8
jne 0x140091c8c
lea rdx, [rbp + 0x6d]
mov dword [rsp - 0x24], ebx
movzx ecx, byte [rbx + rdi*2]
movzx eax, byte [rbx + rdi*2 + 1]
inc rdi
mov dword [rsp - 0xc], 0x610f3988
shl cx, 2
shl cx, 3
shl cx, 1
shl cx, 1
shl cx, 1
or cx, ax
mov word [rdx], cx
mov dword [rsp - 0x18], 0x1376d538
lea rdx, [rdx - 2]
cmp rdi, 4
jl 0x140091c23
xchg r10, r10
lea r9, [rbp + 7]
xor r8d, r8d
lea rdx, [rbp + 0x67]
xchg rsi, rsi
xchg rcx, rsi
mov rsi, rcx
xchg rsi, rcx
call fcn.14009195c
mov dword [rsp - 0x3c], ebp
jmp 0x140091d5e
cmp dword [rsi], edi
jle 0x140091d5e
mov dword [rsp - 0x1c], ebp
mov r14d, edi
lea rdx, [rbp + 0x6d]
mov r8d, 0x55d1e045
xor r8d, 0xab21b78
sub r8d, 0x2ee58ba9
add r8d, 0x305d0c7e
sub r8d, 0x60db7c0e
movzx eax, byte [rbx]
movzx ecx, byte [rbx + 1]
mov dword [rsp - 0xc], ebp
nop
add rbx, 0x2f3c3006
sub rbx, 0x2f3c3004
shl ax, 6
shl ax, 1
shl ax, 1
or cx, ax
mov word [rdx], cx
mov dword [rsp - 0x20], esi
lea rdx, [rdx - 2]
sub r8, 1
jne 0x140091cc1
xchg rdi, rdi
lea r9, [rbp + 7]
mov r8d, r14d
lea rdx, [rbp + 0x67]
mov rcx, rsi
xchg r10, r10
call fcn.14009195c
mov r8d, dword [rsi + 4]
lea r9, [rbp + 0x27]
mov dword [rsp - 0x3c], 0x112211da
sub r8d, r14d
lea rdx, [rbp + 0x67]
nop
add r8d, 0x4d0ddb2d
sub r8d, 0x4d0ddb35
xchg r9, rcx
mov r9, rsi
xchg rcx, r9
call fcn.14009195c
inc edi
mov r9, r9
add r14d, 8
cmp edi, dword [rsi]
jl 0x140091c9b
xchg rbp, rbp
xor eax, eax
lea r11, [rsp + 0xa0]
xchg rbx, rdi
mov rdi, qword [r11 + 0x28]
xchg rdi, rbx
lea rdi, [rbp + 7]
xchg r12, r12
mov rsi, qword [r11 + 0x30]
lea ecx, [rax + 0x40]
rep stosb byte [rdi], al
xchg r11, rdi
mov rsp, rdi
xchg r11, rdi
pop r14
mov r8, r8
pop rdi
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x140091e30
Capabilities:
Encode data using xor

Disassembly:
xor r10d, r10d
mov dword [rsp - 0x34], 0x24dea7aa
mov r11d, ecx
test edx, edx
je 0x140091e81
lea ecx, [r11 + r11]
mov dword [rsp - 0x34], 0x551a8fb7
mov r9d, r10d
xor r9d, r11d
mov r11d, ecx
test dl, 1
mov dword [rsp - 0x2c], ebp
cmove r9d, r10d
xor r11d, r8d
cmp ecx, 0x100
mov dword [rsp - 0x14], 0x776350e5
mov r10d, r9d
cmovb r11d, ecx
shr edx, 1
mov r14, r14
jne 0x140091e42
mov eax, r10d
ret
Function at 0x140099720
Capabilities:
Encode data using xor

Disassembly:
mov rax, qword [rcx + 0xf8]
xor r8d, r8d
xchg rdx, r9
mov rdx, r9
xchg r9, rdx
test rax, rax
je 0x140099788
mov ecx, r8d
xchg r12, r12
mov edx, 0x5acb4714
sub edx, 0x1fe323bf
add edx, 0x27e20b88
xor edx, 0x2b2f48d5
add edx, 0x33fc14d2
rol edx, cl
xchg r11, r11
xor dl, byte [rax]
inc rax
mov byte [r8 + r9], dl
inc r8
xchg r13, r13
cmp r8, 0x20
jb 0x14009973c
mov al, 0x6b
sub al, 0x51
xor al, 0x2c
add al, 0x27
xor al, 0x5c
ret
xchg r12, rax
mov r12, qword [rcx + 0x100]
xchg r12, rax
test rax, rax
mov r10, r10
je 0x1400997c8
xchg rcx, rax
movups xmm0, xmmword [rcx]
xchg rcx, rax
xchg rdx, rsi
movups xmmword [rsi], xmm0
xchg rsi, rdx
xchg r14, rax
movups xmm1, xmmword [r14 + 0x10]
xchg r14, rax
xchg r11, rdx
movups xmmword [r11 + 0x10], xmm1
xchg rdx, r11
jmp 0x14009977d
xorps xmm0, xmm0
xor al, al
movups xmmword [rdx], xmm0
xchg r12, r12
xchg r12, rdx
movups xmmword [r12 + 0x10], xmm0
xchg rdx, r12
ret
Function at 0x1400ab0f4
Capabilities:
Encode data using xor

Disassembly:
xchg r15, rsp
mov r11, r15
xchg rsp, r15
xchg rbx, rbp
mov qword [r11 + 8], rbp
xchg rbp, rbx
xchg rbp, rsi
mov qword [r11 + 0x18], rbp
xchg rbp, rsi
xchg rdx, rdi
mov qword [r11 + 0x20], rdx
xchg rdx, rdi
nop
sub rsp, 8
mov qword [rsp], r14
nop
sub rsp, 0x4e7578a9
add rsp, 0x4e757869
mov rdx, qword [0x1400ee4c8]
mov r8, r8
xchg rbx, rcx
mov rcx, rbx
xchg rcx, rbx
movabs rcx, 0x9e65d92a7f952cdf
sub rcx, 0x6fe71944
add rcx, 0x21823832
sub rcx, 0x175782ea
mov dword [rsp + 0x58], 0x5f4d7e5a
xor dword [rsp + 0x58], 0x3b3cac6f
xor dword [rsp + 0x58], 0x4d791d1a
add dword [rsp + 0x58], 0x53aeb02e
sub dword [rsp + 0x58], 0x7cb77f4d
add rdx, rcx
movabs rax, 0xd1347cb8690214f2
sub rax, 0x1a17f46f
xor rax, 0x30a90bfa
sub rax, 0x546513fe
sub rax, 0x10d354a5
ror rdx, 0x19
ror rdx, 6
ror rdx, 1
ror rdx, 1
movabs rcx, 0x2169ee2021b215bb
add rcx, 0x53d89494
xor rcx, 0x6b8871b1
add rcx, 0x277c809b
add rcx, 0x5411dfd7
add rax, rdx
xchg r8, r8
lea rdx, [r11 + 0x10]
xor rax, rcx
lea rcx, [r11 - 0x28]
mov rbx, rbx
not rax
call rax
lea rdi, [rbx + 8]
mov dword [rsp - 0x24], 0x397f2078
xorps xmm0, xmm0
mov qword [rbx], rdi
xor esi, esi
mov dword [rsp - 0x34], ebp
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
mov r12, r12
test eax, eax
jne 0x1400ab23c
xchg rbp, rsi
mov qword [rbx + 0x38], rbp
xchg rbp, rsi
jmp 0x1400ab35f
lea rax, [rsp + 0x20]
mov rdi, rdi
or r14, 0xffffffffffffffff
inc r14
cmp word [rax + r14*2], si
jne 0x1400ab248
xchg rsp, rsp
xchg r14, rcx
mov qword [rbx + 0x38], rcx
xchg r14, rcx
cmp qword [rbx], rdi
je 0x1400ab278
mov rcx, qword [rbx]
mov dword [rsp - 0x28], ecx
call fcn.140092c10
cmp r14, 0x18
jbe 0x1400ab2b7
mov dword [rsp - 0x14], 0x285cfc44
lea rcx, [r14 + r14]
call fcn.140092ed0
xchg r15, rax
mov qword [rbx], r15
xchg r15, rax
test rax, rax
xchg rsp, rsp
jne 0x1400ab2bd
mov qword [rbx], rdi
xchg r11, rsi
mov rcx, r11
xchg rsi, r11
jmp 0x1400ab2da
mov qword [rbx], rdi
mov rax, rdi
xorps xmm0, xmm0
mov dword [rsp - 0x10], esi
xchg r9, rax
movups xmmword [r9], xmm0
xchg r9, rax
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rcx, qword [rbx]
mov rbx, rbx
mov edx, 0x79fd36f6
xor edx, 0x46a8ff91
xor edx, 0x613ba8e5
sub edx, 0xaab251a
xor edx, 0x7ed704a3
cmp qword [rbx + 0x38], rsi
jbe 0x1400ab35f
mov rsi, rsi
lea r8, [rsp + 0x20]
sub r8, rcx
movzx eax, dx
mov rdi, rdi
mov r9d, 0x6f153229
xor r9d, 0x2ed6a8a1
xor r9d, 0x54a8656e
xor r9d, 0x156bff19
and ax, r9w
ror edx, 3
ror edx, 3
ror edx, 1
ror edx, 1
xor ax, word [r8 + rcx]
mov dword [rsp - 0x3c], 0x217f1562
inc rsi
mov word [rcx], ax
lea rcx, [rcx + 2]
mov r11, r11
cmp rsi, qword [rbx + 0x38]
jb 0x1400ab30c
mov rsi, qword [rsp + 0x60]
mov dword [rsp - 0x14], 0x75654f23
mov rax, rbx
mov rbx, qword [rsp + 0x50]
xchg rdi, rdx
mov rdx, qword [rsp + 0x68]
xchg rdi, rdx
add rsp, 0x40
pop r14
ret
Function at 0x1400bed00
Capabilities:
Execute syscall

Disassembly:
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
xchg rcx, r12
mov rbx, r12
xchg rcx, r12
mov rcx, qword [rcx + 0x1a8]
mov rcx, rcx
cmp rcx, 0xffffffffffffffff
je 0x1400bed6a
mov rax, qword [rbx + 0x258]
movabs rdx, 0x88a848914bfab88d
sub rdx, 0x2454cca4
add rdx, 0x5378f3b5
xor rdx, 0x912ba59
rol rax, 0x10
not rax
ror rax, 0x12
ror rax, 1
add rax, rdx
mov dword [rsp - 0x38], 0x141a2417
call rax
xchg rsi, rcx
mov rsi, qword [rbx + 0x198]
xchg rsi, rcx
test rcx, rcx
mov dword [rsp - 0x14], 0x5620a803
je 0x1400bedb9
cmp qword [rbx + 0x1a0], 0
jne 0x1400bedb9
mov dword [rsp - 0x14], edi
mov rcx, qword [rcx + 0x20]
call fcn.140092c10
xchg rcx, rsi
mov rsi, qword [rbx + 0x198]
xchg rsi, rcx
call fcn.140092c10
mov dword [rsp - 0x2c], edi
mov rcx, qword [rbx + 0x1a0]
test rcx, rcx
je 0x1400bee7a
xchg r9, rax
mov r9, qword [rbx + 0x248]
xchg r9, rax
movabs rdx, 0x4bdf153167d9e41c
add rdx, 0x12573a8
sub rdx, 0x2799a606
add rdx, 0x643585ef
ror rax, 5
ror rax, 1
ror rax, 1
sub rax, rdx
mov rsi, rsi
movabs rdx, 0x6d0e3321510383f1
xor rdx, 0x1313daf2
sub rdx, 0x26fab59f
sub rdx, 0x4c0449c
ror rax, 0x20
ror rax, 5
ror rax, 1
ror rax, 4
ror rax, 4
ror rax, 1
sub rax, rdx
xchg r8, r8
movabs rdx, 0x7d8a2e022de7ab82
add rdx, 0x44249e4c
sub rdx, 0x53b3c43d
xor rdx, 0x202fd31d
ror rax, 0x1d
ror rax, 0xb
ror rax, 1
ror rax, 1
ror rax, 1
ror rax, 1
xor rax, rdx
call rax
mov dword [rsp - 0x14], edx
cmp qword [rbx + 0x200], 0
je 0x1400bef56
mov rax, qword [rbx + 0x210]
mov dword [rsp - 0x40], ebx
movabs rcx, 0x392e9906301ced30
xor rcx, 0x262d73d1
add rcx, 0x647b8657
xor rcx, 0x1a503e70
rol rax, 0x1a
rol rax, 6
rol rax, 4
rol rax, 2
rol rax, 1
sub rax, rcx
movabs rcx, 0x269302ed0f511dbd
xor rcx, 0x5857c25c
add rcx, 0x13c7f341
add rcx, 0x5cf7e30c
rol rax, 0x22
rol rax, 2
rol rax, 0xc
rol rax, 7
rol rax, 1
rol rax, 1
rol rax, 1
xor rax, rcx
movabs rcx, 0x6e2b61d34e694c62
sub rcx, 0x12369677
add rcx, 0x2649a50
add rcx, 0xfc2dd2a
add rcx, 0x46ae386a
not rax
sub rax, rcx
mov r8, r8
rol rax, 4
rol rax, 1
call rax
mov dword [rsp - 0x34], ebx
mov rcx, qword [rbx + 0x200]
call fcn.1400889a0
and qword [rbx + 0x200], 0
xchg r10, r10
xchg r12, rcx
mov r12, qword [rbx + 0x1f0]
xchg rcx, r12
add rsp, 0x20
mov r9, r9
nop
mov rbx, qword [rsp]
add rsp, 8
jmp fcn.14005d120
Function at 0x1400c1458
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rdx, rdx
xchg rsi, r12
mov qword [rsp + 0x18], r12
xchg rsi, r12
nop
mov qword [rsp - 8], rbp
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r14
xchg rbp, rsi
mov rsi, rsp
xchg rsi, rbp
add rsp, 0xffffffffffffffb0
xor esi, esi
mov dword [rbp - 0x30], 0x35319176
sub dword [rbp - 0x30], 0x3133b310
xor dword [rbp - 0x30], 0x34347c29
xor dword [rbp - 0x30], 0x56f9703a
sub dword [rbp - 0x30], 0x60e5d1d9
mov dword [rbp - 0x2c], 0x24591d2f
add dword [rbp - 0x2c], 0x4946ac81
sub dword [rbp - 0x2c], 0x1cfc0028
add dword [rbp - 0x2c], 0xe17aab9
sub dword [rbp - 0x2c], 0x5e49741b
xchg rcx, rbx
mov rcx, rbx
xchg rcx, rbx
mov dword [rbp - 0x28], 0x4aa11955
xor dword [rbp - 0x28], 0x285d8b27
xor dword [rbp - 0x28], 0x51502d1a
xor dword [rbp - 0x28], 0x33a6bf90
mov r14d, 0x3033fb34
add r14d, 0x28dd3075
xor r14d, 0x302459
xor r14d, 0x59210ffa
mov dword [rbp - 0x24], 0xc17457
add dword [rbp - 0x24], 0x78981dd7
xor dword [rbp - 0x24], 0xa6bb37e
xor dword [rbp - 0x24], 0x5a93d536
sub dword [rbp - 0x24], 0x2958f42c
mov dword [rbp - 0x20], 0x37c9e6bc
add dword [rbp - 0x20], 0xf9e3c10
xor dword [rbp - 0x20], 0x4764b14b
add dword [rbp - 0x20], 0x476d20
mov qword [rbp + 0x20], rsi
xchg rdi, rax
mov rdi, qword [rbp + 0x20]
xchg rdi, rax
mov rcx, qword [rbp + 0x20]
xchg rdx, rdx
mov rax, qword [rbp + 0x20]
and cl, 3
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x30]
mov rsp, rsp
mov eax, 0x4ea15a78
xor eax, 0x7e29c8
xor eax, 0x75a1eba0
add eax, 0xb6288b9
xor eax, 0x6bf51802
shr eax, cl
mov dword [rsp - 0x18], 0x2e2a8a8a
movzx ecx, al
xchg rsi, rax
mov rsi, qword [rbp + 0x20]
xchg rsi, rax
xor cx, dx
mov word [rbp + rax*2 - 0x1c], cx
mov dword [rsp - 0x10], esp
mov rax, qword [rbp + 0x20]
inc rax
mov qword [rbp + 0x20], rax
xchg rbx, rbx
xchg rsp, rax
mov rsp, qword [rbp + 0x20]
xchg rsp, rax
cmp rax, r14
xchg rcx, rcx
jb 0x1400c1567
xor edx, edx
mov word [rbp - 8], si
mov rbp, rbp
lea rcx, [rbp - 0x1c]
call fcn.140086500
xchg r8, rdx
mov rdx, rax
xchg r8, rdx
xchg r9, rax
mov qword [rbx + 0x200], r9
xchg r9, rax
xor eax, eax
mov dword [rsp - 0x10], 0x4f7a5934
lea rdi, [rbp - 0x1c]
xchg rcx, r9
mov r9, r14
xchg rcx, r9
rep stosb byte [rdi], al
mov dword [rsp - 0x2c], esi
test r8, r8
je 0x1400c167b
lea rdx, [rbx + 0x208]
xchg r14, r14
xchg r11, rcx
mov r11, r8
xchg r11, rcx
call fcn.1400c1d48
test al, al
jne 0x1400c1671
xchg r10, r10
xchg rcx, rdx
mov rdx, qword [rbx + 0x200]
xchg rdx, rcx
call fcn.1400889a0
xor al, al
xchg rsi, r8
mov qword [rbx + 0x200], r8
xchg rsi, r8
jmp 0x1400c167b
mov al, 0x1f
add al, 0x3b
add al, 0x20
sub al, 0x47
xor al, 0x32
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x28]
xchg rbp, rbp
mov rsi, qword [r11 + 0x30]
xchg r11, rsp
mov r11, rsp
xchg r11, rsp
pop r14
mov rsi, rsi
pop rdi
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x1400c6260
Capabilities:
Encrypt data using curve25519

Disassembly:
mov qword [rsp + 8], rbx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
add rsp, 0xffffffffffffff40
mov rcx, rcx
xchg r8, rsi
mov rax, rsi
xchg r8, rsi
xchg rbx, r13
mov r13, rdx
xchg r13, rbx
mov r8, rdx
mov rdi, rcx
mov edx, 0x6d94946b
xor edx, 0x42c89f63
sub edx, 0x20f7e1a3
sub edx, 0xe642945
xchg r13, rax
mov rcx, r13
xchg r13, rax
call fcn.1400c6aa0
mov dword [rsp - 0x28], esp
movzx eax, byte [rbx + 0x1f]
lea rcx, [rsp + 0x20]
and byte [rbx], 0xf8
and al, 0x3f
mov dword [rsp - 0xc], 0x57f11bba
or al, 0x40
xchg rdx, rsi
mov rsi, rbx
xchg rdx, rsi
mov byte [rbx + 0x1f], al
call fcn.1400ca0c0
lea rdx, [rsp + 0x20]
xchg r11, r11
xchg rcx, rsi
mov rsi, rdi
xchg rcx, rsi
call fcn.1400c9ff0
mov rbx, qword [rsp + 0xd0]
neg rsp
add rsp, 0xffffffffffffff40
neg rsp
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400cb6b0
Capabilities:
Authenticate hmac

Disassembly:
xchg rbx, rcx
mov qword [rsp + 8], rcx
xchg rbx, rcx
xchg rbp, r12
mov qword [rsp + 0x10], r12
xchg r12, rbp
xchg rsi, rbx
mov qword [rsp + 0x18], rbx
xchg rsi, rbx
xchg rdi, rbp
mov qword [rsp + 0x20], rbp
xchg rdi, rbp
nop
mov qword [rsp - 8], r14
sub rsp, 8
xor ebp, ebp
xchg rdx, rdi
mov r11, rdi
xchg rdi, rdx
mov r8d, ebp
xchg r10, r10
mov r9d, ebp
xchg r8, rcx
mov r10, r8
xchg r8, rcx
nop dword [rax]
nop dword [rax + rax]
mov rbx, rbx
mov rax, r9
movzx ecx, r8b
shr rax, 1
shr rax, 2
and cl, 7
mov dword [rsp - 0x40], ebp
inc r8d
movzx edx, byte [rax + r11]
shr dl, cl
mov dword [rsp - 0x24], edi
and dl, 1
mov byte [r9 + r10], dl
inc r9
cmp r8d, 0x100
mov r11, r11
jl 0x1400cb712
xchg r14, r15
mov r15, r10
xchg r15, r14
nop
cmp byte [r14], 0
xchg r10, r10
je 0x1400cb895
mov r9d, 0x7f2a8078
sub r9d, 0x7d793db4
xor r9d, 0x1814757a
sub r9d, 0x19a537bd
lea edx, [r9 + rbp]
mov rbx, rbx
cmp edx, 0x100
jge 0x1400cb895
movsxd rsi, edx
mov dword [rsp - 0x44], 0xfd2d422
movsx r8d, byte [rsi + r10]
lea rax, [rsi + r10]
test r8b, r8b
je 0x1400cb884
mov r8, r8
movsx r11d, byte [r14]
mov ecx, r9d
mov edi, r8d
xchg rdi, rdi
mov ebx, r11d
shl edi, cl
lea ecx, [r11 + rdi]
xchg r13, r13
cmp ecx, 0xf
jg 0x1400cb7fa
mov ecx, r9d
shl r8b, cl
xchg r10, r10
add r8b, r11b
mov byte [r14], r8b
mov byte [rax], 0x77
xor byte [rax], 0x71
add byte [rax], 0x36
add byte [rax], 7
sub byte [rax], 0x43
jmp 0x1400cb884
sub ebx, edi
mov r15, r15
cmp ebx, 0xfffffff1
jl 0x1400cb895
mov ecx, r9d
shl r8b, cl
xchg rbx, rbx
sub r11b, r8b
mov byte [r14], r11b
cmp rsi, 0x100
mov r13, r13
jge 0x1400cb884
cmp byte [rax], 0
je 0x1400cb864
mov byte [rax], 0x34
xor byte [rax], 0x26
xor byte [rax], 0x53
sub byte [rax], 0x41
inc edx
inc rax
mov rcx, rax
mov rdx, rdx
sub rcx, r10
cmp rcx, 0x100
jl 0x1400cb827
mov dword [rsp - 0x1c], 0x39c2c2bf
jmp 0x1400cb884
movsxd rax, edx
mov dword [rsp - 0x38], esp
mov byte [rax + r10], 0x1e
add byte [rax + r10], 0x5c
sub byte [rax + r10], 0x3a
add byte [rax + r10], 0xb
xor byte [rax + r10], 0x4a
inc r9d
cmp r9d, 6
mov dword [rsp - 0x1c], esp
jle 0x1400cb782
inc ebp
inc r14
mov dword [rsp - 0x2c], ebx
cmp ebp, 0x100
jl 0x1400cb75a
xchg rcx, rbx
mov rcx, qword [rsp + 0x10]
xchg rcx, rbx
xchg rbp, rdi
mov rdi, qword [rsp + 0x18]
xchg rdi, rbp
mov rsi, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x28]
nop
mov r14, qword [rsp]
add rsp, 8
ret
Function at 0x1400dd630
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rsi, r8
mov qword [rsp + 0x18], r8
xchg rsi, r8
xchg rdi, rbp
mov qword [rsp + 0x20], rbp
xchg rbp, rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
mov rbp, rsp
add rsp, 0xffffffffffffff80
mov dword [rsp - 0x44], edi
xor esi, esi
mov dword [rbp - 0x50], 0x321e6676
add dword [rbp - 0x50], 0x2f9b07a1
sub dword [rbp - 0x50], 0x4efa0437
sub dword [rbp - 0x50], 0x12556945
mov dword [rbp - 0x4c], 0x77ab13a5
xor dword [rbp - 0x4c], 0x5c5df991
xor dword [rbp - 0x4c], 0x2b38ccf2
add dword [rbp - 0x4c], 0x14d19729
sub dword [rbp - 0x4c], 0x1531bd94
mov dword [rbp - 0x48], 0x518192f1
xor dword [rbp - 0x48], 0x56de7265
add dword [rbp - 0x48], 0x31013326
sub dword [rbp - 0x48], 0x3801132c
mov dword [rbp - 0x44], 0x75660e6b
sub dword [rbp - 0x44], 0x5cc177db
xor dword [rbp - 0x44], 0x11b029ba
xor dword [rbp - 0x44], 0x975bf6e
xchg r11, rsi
mov qword [rbp + 0x10], r11
xchg rsi, r11
lea ebx, [rsi + 1]
mov rax, qword [rbp + 0x10]
mov rdi, rdi
mov rcx, qword [rbp + 0x10]
xchg r9, rax
mov r9, qword [rbp + 0x10]
xchg r9, rax
and cl, 3
shl cl, 3
mov r15, r15
movzx edx, word [rbp + rax*2 - 0x50]
mov eax, 0x2b1e3f47
sub eax, 0x260dc6ae
add eax, 0x19f77ef6
add eax, 0x3af290e2
sub eax, 0x2ce64fa6
shr eax, cl
movzx ecx, al
mov dword [rsp - 0x1c], ebx
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x20], cx
mov rsi, rsi
mov rax, qword [rbp + 0x10]
add rax, rbx
xchg rsp, rax
mov qword [rbp + 0x10], rsp
xchg rsp, rax
mov rax, qword [rbp + 0x10]
cmp rax, 8
jb 0x1400dd6ed
mov dword [rsp - 0x18], edx
lea rax, [rbp - 0x20]
mov word [rbp - 0x10], si
xorps xmm0, xmm0
xchg r11, rax
mov qword [rbp - 0x38], r11
xchg r11, rax
lea r9, [rbp - 0x30]
xchg r15, r15
mov dword [rbp - 0x40], 0x6927c2e5
sub dword [rbp - 0x40], 0x5fb3fc47
add dword [rbp - 0x40], 0x4db8a274
add dword [rbp - 0x40], 0xa8b275f
sub dword [rbp - 0x40], 0x61a59061
lea r8, [rbp - 0x40]
mov dword [rsp - 0x14], 0x1530a2f5
mov dword [rsp + 0x20], esi
xor edx, edx
xor ecx, ecx
xchg rbp, r9
movups xmmword [r9 - 0x30], xmm0
xchg rbp, r9
call fcn.1400e32d0
xchg r12, rax
mov rdi, r12
xchg r12, rax
test rax, rax
je 0x1400dd803
mov dword [rsp - 0x28], ebp
xchg rsp, rax
mov rcx, rsp
xchg rsp, rax
call fcn.1400d3934
test al, al
xchg r15, r15
je 0x1400dd803
lea rdx, [rbp - 0x40]
xchg r10, rdi
mov rcx, r10
xchg rdi, r10
call fcn.1400d2888
test al, al
mov dword [rsp - 0x3c], ebp
jne 0x1400dd806
mov bl, sil
xor eax, eax
lea r11, [rsp + 0x80]
mov dword [rsp - 0x40], 0x4732d78d
mov rsi, qword [r11 + 0x20]
lea rdi, [rbp - 0x20]
lea ecx, [rax + 8]
rep stosb byte [rdi], al
xchg r10, r10
mov rdi, qword [r11 + 0x28]
mov al, bl
xchg r12, rbx
mov r12, qword [r11 + 0x18]
xchg rbx, r12
mov rsp, r11
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x1400e32d0
Capabilities:
Execute syscall

Disassembly:
xchg r10, r13
mov r13, rcx
xchg r10, r13
mov eax, dword [0x1400eef64]
mov dword [rsp - 0xc], 0x3b2ca7eb
cmp qword [0x1400eef78], 0
jne 0x14008f330
syscall
ret
jmp 0x14008fe7e