joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140138030
Capabilities:
Encode data using xor

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
push rbx
push rbp
push r14
push r15
sub rsp, 0x498
mov rbp, rcx
mov r15d, edx
mov ecx, r9d
call fcn.14010eb40
mov ebx, eax
test eax, eax
js 0x1401382cc
lea r14d, [rbx + rbx]
lea eax, [r14 + 2]
cmp r15d, eax
jb 0x1401382cc
mov qword [rsp + 0x490], rdi
lea rcx, [rsp + 0x70]
mov r8d, r15d
mov qword [rsp + 0x480], r13
xor edx, edx
call fcn.14014d290
mov r13d, dword [rsp + 0x4e0]
lea edx, [rbx + 1]
mov edi, r15d
mov dword [rsp + 0x20], ebx
sub edi, ebx
lea r9, [rsp + 0x70]
dec edi
add rdx, rbp
mov r8d, edi
mov ecx, r13d
call fcn.1401388c0
test eax, eax
jne 0x14013812c
mov qword [rsp + 0x4c0], rsi
lea rdx, [rbp + 1]
mov r8d, ebx
mov qword [rsp + 0x488], r12
lea rcx, [rsp + 0x70]
call fcn.140138e10
lea r12, [rsp + 0x70]
mov dword [rsp + 0x20], edi
add r12, rbx
lea rdx, [rsp + 0x70]
mov r9, r12
mov r8d, ebx
mov ecx, r13d
mov esi, ebx
call fcn.1401388c0
test eax, eax
je 0x14013814a
lea rcx, [rsp + 0x70]
test ebx, ebx
je 0x14013811c
nop dword [rax + rax]
mov byte [rcx], 0
lea rcx, [rcx + 1]
add ebx, 0xffffffff
jne 0x140138110
mov r12, qword [rsp + 0x488]
mov rsi, qword [rsp + 0x4c0]
mov rdi, qword [rsp + 0x490]
mov r13, qword [rsp + 0x480]
add rsp, 0x498
pop r15
pop r14
pop rbp
pop rbx
ret
lea rcx, [rbp + 1]
mov r8d, edi
add rcx, rbx
mov rdx, r12
call fcn.140138e10
lea rcx, [rsp + 0x70]
mov eax, r15d
test r15d, r15d
je 0x14013817c
nop dword [rax]
mov byte [rcx], 0
lea rcx, [rcx + 1]
add eax, 0xffffffff
jne 0x140138170
xor edi, edi
lea r13d, [r15 - 1]
inc r14d
mov r9d, 1
mov r10d, edi
mov r11d, edi
mov edx, r9d
cmp r14d, r13d
jae 0x140138226
mov eax, r13d
mov r8d, r14d
sub eax, r14d
cmp eax, 2
jb 0x14013820c
mov eax, r13d
sub eax, r14d
sub eax, 2
shr eax, 1
inc eax
mov r12d, eax
lea eax, [r14 + rax*2]
mov dword [rsp + 0x4f0], eax
nop word [rax + rax]
movzx ecx, byte [r8 + rbp]
mov eax, r9d
neg ecx
shr ecx, 0x1f
sub eax, ecx
movzx ecx, byte [r8 + rbp + 1]
and edx, eax
neg ecx
shr ecx, 0x1f
add r10d, edx
mov eax, r9d
add r8, 2
sub eax, ecx
and edx, eax
add r11d, edx
sub r12, r9
jne 0x1401381d0
cmp dword [rsp + 0x4f0], r13d
jae 0x14013821f
movzx eax, byte [r8 + rbp]
neg eax
shr eax, 0x1f
sub r9d, eax
and r9d, edx
add r14d, r9d
lea eax, [r11 + r10]
add r14d, eax
mov ecx, dword [rsp + 0x4d8]
lea r9, [rsp + 0x30]
xor r8d, r8d
mov dword [rsp + 0x20], ebx
xor edx, edx
call fcn.14010e7f0
test eax, eax
jne 0x14013811c
test ebx, ebx
jle 0x140138277
lea rcx, [rsp + 0x30]
mov r8, rbx
sub r8, rcx
lea rdx, [rsp + 0x30]
add r8, rbp
nop
movzx ecx, byte [r8 + rdx + 1]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
xor ecx, eax
or edi, ecx
sub rsi, 1
jne 0x140138260
movzx edx, byte [r14 + rbp]
movzx ecx, byte [rbp]
xor edx, 1
add edx, edi
add edx, ecx
lea eax, [rdx - 1]
not edx
shr eax, 0x1f
neg al
shr edx, 0x1f
movsx r8d, al
neg dl
movsx eax, dl
mov rdx, qword [rsp + 0x4d0]
and r8d, eax
lea eax, [r14 + 1]
mov ecx, r8d
and eax, r8d
not ecx
and ecx, r15d
or ecx, eax
mov eax, ecx
add rax, rbp
sub r15d, ecx
mov qword [rdx], rax
mov eax, r15d
jmp 0x14013811c
mov eax, 0xffffff53
add rsp, 0x498
pop r15
pop r14
pop rbp
pop rbx
ret
Function at 0x140138e10
Capabilities:
Encode data using xor

Disassembly:
push rbx
mov r9, rdx
xor r11d, r11d
mov rax, r9
mov rdx, rcx
and eax, 7
and edx, 7
cmp rdx, rax
jne 0x140138f1d
test rdx, rdx
je 0x140138e48
test r8d, r8d
je 0x140138e48
movzx eax, byte [r9]
inc r9
xor byte [rcx], al
inc rcx
dec r8d
jmp 0x140138e32
mov r10d, r8d
mov ebx, r11d
shr r10d, 3
test r10d, r10d
je 0x140138f19
mov qword [rsp + 0x10], rdi
cmp r10d, 8
jb 0x140138eed
lea eax, [r10 - 1]
lea rdi, [rcx + rax*8]
lea rax, [r9 + rax*8]
cmp rcx, rax
ja 0x140138e80
cmp rdi, r9
jae 0x140138eed
mov eax, r10d
and eax, 0xfffffff8
nop word [rax + rax]
movdqu xmm0, xmmword [rcx]
add ebx, 8
movdqu xmm1, xmmword [r9]
xorps xmm1, xmm0
movdqu xmmword [rcx], xmm1
movdqu xmm0, xmmword [rcx + 0x10]
movdqu xmm1, xmmword [r9 + 0x10]
xorps xmm1, xmm0
movdqu xmmword [rcx + 0x10], xmm1
movdqu xmm0, xmmword [rcx + 0x20]
movdqu xmm1, xmmword [r9 + 0x20]
xorps xmm1, xmm0
movdqu xmmword [rcx + 0x20], xmm1
movdqu xmm0, xmmword [rcx + 0x30]
movdqu xmm1, xmmword [r9 + 0x30]
add r9, 0x40
xorps xmm1, xmm0
movdqu xmmword [rcx + 0x30], xmm1
add rcx, 0x40
cmp ebx, eax
jb 0x140138e90
cmp ebx, r10d
jae 0x140138f14
sub r10d, ebx
mov edx, r10d
nop dword [rax]
nop word [rax + rax]
mov rax, qword [r9]
add r9, 8
xor qword [rcx], rax
add rcx, 8
sub rdx, 1
jne 0x140138f00
mov rdi, qword [rsp + 0x10]
and r8d, 7
test r8d, r8d
je 0x140138fe1
cmp r8d, 0x40
jb 0x140138fb8
lea eax, [r8 - 1]
lea r10, [rax + rcx]
add rax, r9
cmp rcx, rax
ja 0x140138f45
cmp r10, r9
jae 0x140138fb8
mov r10d, r8d
and r10d, 0xffffffc0
mov ebx, 0x20
movdqu xmm0, xmmword [r11 + rcx]
lea eax, [rbx - 0x10]
movdqu xmm1, xmmword [r11 + r9]
xorps xmm1, xmm0
movdqu xmmword [r11 + rcx], xmm1
add r11d, 0x40
movdqu xmm0, xmmword [rax + rcx]
movdqu xmm1, xmmword [rax + r9]
xorps xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
mov eax, ebx
movdqu xmm0, xmmword [rax + rcx]
movdqu xmm1, xmmword [rax + r9]
xorps xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
lea eax, [rbx + 0x10]
add ebx, 0x40
movdqu xmm0, xmmword [rax + rcx]
movdqu xmm1, xmmword [rax + r9]
xorps xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
cmp r11d, r10d
jb 0x140138f51
cmp r11d, r8d
jae 0x140138fe1
sub r9, rcx
mov edx, r11d
add rdx, rcx
sub r8d, r11d
mov ecx, r8d
nop word [rax + rax]
movzx eax, byte [r9 + rdx]
xor byte [rdx], al
lea rdx, [rdx + 1]
sub rcx, 1
jne 0x140138fd0
pop rbx
ret
Function at 0x14013b960
Capabilities:
Hash data using sha256

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, rdx
mov rbx, rcx
test rcx, rcx
je 0x14013baa6
test rdx, rdx
je 0x14013baa6
call fcn.14013a860
test eax, eax
jne 0x14013baab
mov ecx, dword [rbx]
mov eax, ecx
rol ecx, 8
ror eax, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx], ecx
mov ecx, dword [rbx + 4]
mov eax, ecx
rol ecx, 8
ror eax, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx + 4], ecx
mov ecx, dword [rbx + 8]
mov eax, ecx
rol ecx, 8
ror eax, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx + 8], ecx
mov ecx, dword [rbx + 0xc]
mov eax, ecx
rol ecx, 8
ror eax, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx + 0xc], ecx
mov ecx, dword [rbx + 0x10]
mov eax, ecx
rol ecx, 8
ror eax, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx + 0x10], ecx
mov ecx, dword [rbx + 0x14]
mov eax, ecx
rol ecx, 8
ror eax, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx + 0x14], ecx
mov ecx, dword [rbx + 0x18]
mov eax, ecx
rol ecx, 8
ror eax, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx + 0x18], ecx
mov ecx, dword [rbx + 0x1c]
mov eax, ecx
ror eax, 8
rol ecx, 8
xor ecx, eax
and ecx, 0xff00ff
xor ecx, eax
mov dword [rbx + 0x1c], ecx
xor eax, eax
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov dword [rbx], 0x6a09e667
mov dword [rbx + 4], 0xbb67ae85
mov dword [rbx + 8], 0x3c6ef372
mov dword [rbx + 0xc], 0xa54ff53a
mov dword [rbx + 0x10], 0x510e527f
mov dword [rbx + 0x14], 0x9b05688c
mov dword [rbx + 0x18], 0x1f83d9ab
mov dword [rbx + 0x1c], 0x5be0cd19
mov qword [rbx + 0x60], rax
mov dword [rbx + 0x68], eax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov eax, 0xffffff53
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x14013fbf0
Capabilities:
Encode data using xor

Disassembly:
push rbx
mov r9, rdx
xor r11d, r11d
mov rax, r9
mov rdx, rcx
and eax, 7
and edx, 7
cmp rdx, rax
jne 0x14013fcfd
test rdx, rdx
je 0x14013fc28
test r8d, r8d
je 0x14013fc28
movzx eax, byte [r9]
inc r9
xor byte [rcx], al
inc rcx
dec r8d
jmp 0x14013fc12
mov r10d, r8d
mov ebx, r11d
shr r10d, 3
test r10d, r10d
je 0x14013fcf9
mov qword [rsp + 0x10], rdi
cmp r10d, 8
jb 0x14013fccd
lea eax, [r10 - 1]
lea rdi, [rcx + rax*8]
lea rax, [r9 + rax*8]
cmp rcx, rax
ja 0x14013fc60
cmp rdi, r9
jae 0x14013fccd
mov eax, r10d
and eax, 0xfffffff8
nop word [rax + rax]
movdqu xmm0, xmmword [rcx]
add ebx, 8
movdqu xmm1, xmmword [r9]
xorps xmm1, xmm0
movdqu xmmword [rcx], xmm1
movdqu xmm0, xmmword [rcx + 0x10]
movdqu xmm1, xmmword [r9 + 0x10]
xorps xmm1, xmm0
movdqu xmmword [rcx + 0x10], xmm1
movdqu xmm0, xmmword [rcx + 0x20]
movdqu xmm1, xmmword [r9 + 0x20]
xorps xmm1, xmm0
movdqu xmmword [rcx + 0x20], xmm1
movdqu xmm0, xmmword [rcx + 0x30]
movdqu xmm1, xmmword [r9 + 0x30]
add r9, 0x40
xorps xmm1, xmm0
movdqu xmmword [rcx + 0x30], xmm1
add rcx, 0x40
cmp ebx, eax
jb 0x14013fc70
cmp ebx, r10d
jae 0x14013fcf4
sub r10d, ebx
mov edx, r10d
nop dword [rax]
nop word [rax + rax]
mov rax, qword [r9]
add r9, 8
xor qword [rcx], rax
add rcx, 8
sub rdx, 1
jne 0x14013fce0
mov rdi, qword [rsp + 0x10]
and r8d, 7
test r8d, r8d
je 0x14013fdc1
cmp r8d, 0x40
jb 0x14013fd98
lea eax, [r8 - 1]
lea r10, [rax + rcx]
add rax, r9
cmp rcx, rax
ja 0x14013fd25
cmp r10, r9
jae 0x14013fd98
mov r10d, r8d
and r10d, 0xffffffc0
mov ebx, 0x20
movdqu xmm0, xmmword [r11 + rcx]
lea eax, [rbx - 0x10]
movdqu xmm1, xmmword [r11 + r9]
xorps xmm1, xmm0
movdqu xmmword [r11 + rcx], xmm1
add r11d, 0x40
movdqu xmm0, xmmword [rax + rcx]
movdqu xmm1, xmmword [rax + r9]
xorps xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
mov eax, ebx
movdqu xmm0, xmmword [rax + rcx]
movdqu xmm1, xmmword [rax + r9]
xorps xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
lea eax, [rbx + 0x10]
add ebx, 0x40
movdqu xmm0, xmmword [rax + rcx]
movdqu xmm1, xmmword [rax + r9]
xorps xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
cmp r11d, r10d
jb 0x14013fd31
cmp r11d, r8d
jae 0x14013fdc1
sub r9, rcx
mov edx, r11d
add rdx, rcx
sub r8d, r11d
mov ecx, r8d
nop word [rax + rax]
movzx eax, byte [r9 + rdx]
xor byte [rdx], al
lea rdx, [rdx + 1]
sub rcx, 1
jne 0x14013fdb0
pop rbx
ret
Function at 0x14013fe10
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
mov rax, rcx
mov r10, rdx
and eax, 7
and edx, 7
xor ebx, ebx
cmp rax, rdx
jne 0x14013ff54
mov rax, r8
and eax, 7
cmp rdx, rax
jne 0x14013ff54
test rdx, rdx
je 0x14013fe61
test r9d, r9d
je 0x14013fe61
movzx eax, byte [r8]
dec r9d
xor al, byte [r10]
inc r8
mov byte [rcx], al
inc r10
inc rcx
test r10b, 7
jne 0x14013fe41
mov r11d, r9d
mov edi, ebx
shr r11d, 3
test r11d, r11d
je 0x14013ff50
mov qword [rsp + 0x10], rsi
cmp r11d, 8
jb 0x14013ff25
lea eax, [r11 - 1]
mov edx, eax
lea rsi, [rcx + rax*8]
lea rax, [r10 + rax*8]
cmp rcx, rax
ja 0x14013fe9e
cmp rsi, r10
jae 0x14013ff25
lea rax, [r8 + rdx*8]
cmp rcx, rax
ja 0x14013feac
cmp rsi, r8
jae 0x14013ff25
mov eax, r11d
and eax, 0xfffffff8
nop dword [rax]
nop word [rax + rax]
movdqu xmm0, xmmword [r10]
add edi, 8
movdqu xmm1, xmmword [r8]
xorps xmm1, xmm0
movdqu xmm0, xmmword [r10 + 0x10]
movdqu xmmword [rcx], xmm1
movdqu xmm1, xmmword [r8 + 0x10]
xorps xmm1, xmm0
movdqu xmm0, xmmword [r10 + 0x20]
movdqu xmmword [rcx + 0x10], xmm1
movdqu xmm1, xmmword [r8 + 0x20]
xorps xmm1, xmm0
movdqu xmm0, xmmword [r10 + 0x30]
add r10, 0x40
movdqu xmmword [rcx + 0x20], xmm1
movdqu xmm1, xmmword [r8 + 0x30]
add r8, 0x40
xorps xmm1, xmm0
movdqu xmmword [rcx + 0x30], xmm1
add rcx, 0x40
cmp edi, eax
jb 0x14013fec0
cmp edi, r11d
jae 0x14013ff4b
sub r11d, edi
mov edx, r11d
nop dword [rax + rax]
mov rax, qword [r8]
add r8, 8
xor rax, qword [r10]
add r10, 8
mov qword [rcx], rax
add rcx, 8
sub rdx, 1
jne 0x14013ff30
mov rsi, qword [rsp + 0x10]
and r9d, 7
test r9d, r9d
je 0x140140034
cmp r9d, 0x40
jb 0x140140008
lea eax, [r9 - 1]
mov edx, eax
lea r11, [rax + rcx]
add rax, r10
cmp rcx, rax
ja 0x14013ff82
cmp r11, r10
jae 0x140140008
lea rax, [rdx + r8]
cmp rcx, rax
ja 0x14013ff90
cmp r11, r8
jae 0x140140008
mov r11d, r9d
and r11d, 0xffffffc0
mov edi, 0x20
nop dword [rax]
movdqu xmm0, xmmword [rbx + r10]
lea eax, [rdi - 0x10]
movdqu xmm1, xmmword [rbx + r8]
xorps xmm1, xmm0
movdqu xmm0, xmmword [rax + r10]
movdqu xmmword [rbx + rcx], xmm1
add ebx, 0x40
movdqu xmm1, xmmword [rax + r8]
xorps xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
mov eax, edi
movdqu xmm0, xmmword [rax + r10]
movdqu xmm1, xmmword [rax + r8]
xorps xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
lea eax, [rdi + 0x10]
add edi, 0x40
movdqu xmm1, xmmword [rax + r8]
movdqu xmm0, xmmword [rax + r10]
xorps xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
cmp ebx, r11d
jb 0x14013ffa0
cmp ebx, r9d
jae 0x140140034
sub r8, r10
mov edx, ebx
add rdx, r10
sub rcx, r10
sub r9d, ebx
mov r10d, r9d
nop dword [rax]
movzx eax, byte [r8 + rdx]
xor al, byte [rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
sub r10, 1
jne 0x140140020
mov rbx, qword [rsp + 0x18]
pop rdi
ret
Function at 0x140140fb0
Capabilities:
Hash data with md5

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
sub rsp, 0x20
mov rsi, rdx
mov rbx, rcx
test rcx, rcx
je 0x1401410ba
test rdx, rdx
je 0x1401410ba
mov eax, dword [rcx]
mov qword [rsp + 0x38], rdi
lea rdi, [rcx + 0xc]
cmp eax, 0x3f
jbe 0x140140ff7
mov rdi, qword [rsp + 0x38]
mov eax, 0xffffff7c
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
ret
mov byte [rax + rdi], 0x80
mov ecx, dword [rcx]
inc ecx
mov qword [rsp + 0x30], rbp
xor ebp, ebp
mov dword [rbx], ecx
cmp ecx, 0x38
jbe 0x140141035
mov r8d, 0x40
xor edx, edx
sub r8d, ecx
add rcx, rdi
call fcn.14014d290
mov rdx, rdi
mov dword [rbx], 0x40
mov rcx, rbx
call fcn.140140770
mov ecx, ebp
mov dword [rbx], ebp
mov r8d, 0x38
xor edx, edx
sub r8d, ecx
add rcx, rdi
call fcn.14014d290
mov r8d, dword [rbx + 4]
mov rdx, rdi
mov eax, dword [rbx + 8]
mov ecx, r8d
shr ecx, 0x1d
lea ecx, [rcx + rax*8]
mov dword [rbx + 8], ecx
lea eax, [r8*8]
mov dword [rbx + 4], eax
mov rcx, rbx
mov dword [rdi + 0x38], eax
mov eax, dword [rbx + 8]
mov dword [rdi + 0x3c], eax
call fcn.140140770
movups xmm0, xmmword [rbx + 0x4c]
mov rdi, qword [rsp + 0x38]
xor eax, eax
movups xmmword [rsi], xmm0
mov qword [rbx], rbp
mov dword [rbx + 8], ebp
mov rbp, qword [rsp + 0x30]
mov dword [rbx + 0x4c], 0x67452301
mov dword [rbx + 0x50], 0xefcdab89
mov dword [rbx + 0x54], 0x98badcfe
mov dword [rbx + 0x58], 0x10325476
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
ret
mov rbx, qword [rsp + 0x40]
mov eax, 0xffffff53
add rsp, 0x20
pop rsi
ret
Function at 0x140142b80
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rsi
push r12
push r14
sub rsp, 0x20
mov esi, r9d
mov r12, r8
shr esi, 3
mov rbx, rdx
mov r14, rcx
test esi, esi
je 0x140142d13
mov qword [rsp + 0x40], rbp
mov rbp, rcx
and ebp, 7
mov qword [rsp + 0x50], r15
sub r12, rdx
mov qword [rsp + 0x48], rdi
nop dword [rax]
mov rax, qword [r12 + rbx]
lea rdx, [r14 + 8]
mov r8, rbx
mov qword [r14 + 8], rax
mov rcx, r14
dec esi
call fcn.140141440
mov rcx, rbx
mov r9d, 8
and ecx, 7
mov rax, rbx
mov r8, r14
cmp rcx, rbp
jne 0x140142cda
test rcx, rcx
je 0x140142c16
nop dword [rax]
test r9d, r9d
je 0x140142c16
movzx ecx, byte [r8]
inc r8
xor byte [rax], cl
inc rax
dec r9d
jmp 0x140142c00
mov r10d, r9d
xor r11d, r11d
shr r10d, 3
test r10d, r10d
je 0x140142cd4
cmp r10d, 8
jb 0x140142caf
lea ecx, [r10 - 1]
lea rdi, [rax + rcx*8]
lea rcx, [r8 + rcx*8]
cmp rax, rcx
ja 0x140142c49
cmp rdi, r8
jae 0x140142caf
mov ecx, r10d
and ecx, 0xfffffff8
nop
movdqu xmm0, xmmword [rax]
add r11d, 8
movdqu xmm1, xmmword [r8]
xorps xmm1, xmm0
movdqu xmmword [rax], xmm1
movdqu xmm0, xmmword [rax + 0x10]
movdqu xmm1, xmmword [r8 + 0x10]
xorps xmm1, xmm0
movdqu xmmword [rax + 0x10], xmm1
movdqu xmm0, xmmword [rax + 0x20]
movdqu xmm1, xmmword [r8 + 0x20]
xorps xmm1, xmm0
movdqu xmmword [rax + 0x20], xmm1
movdqu xmm0, xmmword [rax + 0x30]
movdqu xmm1, xmmword [r8 + 0x30]
add r8, 0x40
xorps xmm1, xmm0
movdqu xmmword [rax + 0x30], xmm1
add rax, 0x40
cmp r11d, ecx
jb 0x140142c50
cmp r11d, r10d
jae 0x140142cd4
sub r10d, r11d
mov edx, r10d
nop word [rax + rax]
mov rcx, qword [r8]
add r8, 8
xor qword [rax], rcx
add rax, 8
sub rdx, 1
jne 0x140142cc0
and r9d, 7
jbe 0x140142cf1
sub r8, rax
mov edx, r9d
movzx ecx, byte [r8 + rax]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x140142ce0
mov rax, qword [r14 + 8]
add rbx, 8
mov qword [r14], rax
test esi, esi
jne 0x140142bc0
mov r15, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
xor eax, eax
add rsp, 0x20
pop r14
pop r12
pop rsi
ret
Function at 0x140142de0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push r12
sub rsp, 0x20
mov esi, r9d
mov r12, r8
mov rbx, rdx
mov rbp, rcx
test rcx, rcx
je 0x140142faa
test rdx, rdx
je 0x140142faa
test r8, r8
je 0x140142faa
shr esi, 3
test esi, esi
je 0x140142f9a
mov qword [rsp + 0x48], r14
sub r12, rdx
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x40], rdi
mov rax, qword [r12 + rbx]
lea rdx, [rbp + 0x188]
mov r8, rbx
mov qword [rbp + 0x188], rax
mov rcx, rbp
dec esi
call fcn.140141290
mov rdx, rbx
lea rcx, [rbp + 0x180]
and edx, 7
lea r8, [rbp + 0x180]
and ecx, 7
mov r9d, 8
mov rax, rbx
cmp rdx, rcx
jne 0x140142f5a
test rdx, rdx
je 0x140142e96
nop
test r9d, r9d
je 0x140142e96
movzx ecx, byte [r8]
inc r8
xor byte [rax], cl
inc rax
dec r9d
jmp 0x140142e80
mov r10d, r9d
xor r11d, r11d
shr r10d, 3
test r10d, r10d
je 0x140142f54
cmp r10d, 8
jb 0x140142f2f
lea ecx, [r10 - 1]
lea rdi, [rax + rcx*8]
lea rcx, [r8 + rcx*8]
cmp rax, rcx
ja 0x140142ec9
cmp rdi, r8
jae 0x140142f2f
mov ecx, r10d
and ecx, 0xfffffff8
nop
movdqu xmm0, xmmword [rax]
add r11d, 8
movdqu xmm1, xmmword [r8]
xorps xmm1, xmm0
movdqu xmmword [rax], xmm1
movdqu xmm0, xmmword [rax + 0x10]
movdqu xmm1, xmmword [r8 + 0x10]
xorps xmm1, xmm0
movdqu xmmword [rax + 0x10], xmm1
movdqu xmm0, xmmword [rax + 0x20]
movdqu xmm1, xmmword [r8 + 0x20]
xorps xmm1, xmm0
movdqu xmmword [rax + 0x20], xmm1
movdqu xmm0, xmmword [rax + 0x30]
movdqu xmm1, xmmword [r8 + 0x30]
add r8, 0x40
xorps xmm1, xmm0
movdqu xmmword [rax + 0x30], xmm1
add rax, 0x40
cmp r11d, ecx
jb 0x140142ed0
cmp r11d, r10d
jae 0x140142f54
sub r10d, r11d
mov edx, r10d
nop word [rax + rax]
mov rcx, qword [r8]
add r8, 8
xor qword [rax], rcx
add rax, 8
sub rdx, 1
jne 0x140142f40
and r9d, 7
jbe 0x140142f71
sub r8, rax
mov edx, r9d
movzx ecx, byte [r8 + rax]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x140142f60
mov rax, qword [rbp + 0x188]
add rbx, 8
mov qword [rbp + 0x180], rax
test esi, esi
jne 0x140142e31
mov r15, qword [rsp + 0x50]
mov r14, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
xor eax, eax
mov rbx, qword [rsp + 0x58]
add rsp, 0x20
pop r12
pop rsi
pop rbp
ret
mov rbx, qword [rsp + 0x58]
mov eax, 0xffffff53
add rsp, 0x20
pop r12
pop rsi
pop rbp
ret
Function at 0x140142fd0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
push r14
push r15
sub rsp, 0x20
mov esi, r9d
mov rbx, r8
mov r14, rdx
mov r15, rcx
test rcx, rcx
je 0x140143189
test rdx, rdx
je 0x140143189
test rbx, rbx
je 0x140143189
shr esi, 3
test esi, esi
je 0x140143178
mov qword [rsp + 0x48], rdi
sub r14, rbx
mov qword [rsp + 0x40], rbp
nop dword [rax]
lea rdx, [r15 + 0x180]
mov rcx, rbx
and edx, 7
lea rax, [r15 + 0x180]
and ecx, 7
dec esi
mov r9d, 8
mov r8, rbx
cmp rdx, rcx
jne 0x14014312a
test rdx, rdx
je 0x140143066
test r9d, r9d
je 0x140143066
movzx ecx, byte [r8]
inc r8
xor byte [rax], cl
inc rax
dec r9d
jmp 0x140143050
mov r10d, r9d
xor r11d, r11d
shr r10d, 3
test r10d, r10d
je 0x140143124
cmp r10d, 8
jb 0x1401430ff
lea ecx, [r10 - 1]
lea rbp, [rax + rcx*8]
lea rcx, [r8 + rcx*8]
cmp rax, rcx
ja 0x140143099
cmp rbp, r8
jae 0x1401430ff
mov ecx, r10d
and ecx, 0xfffffff8
nop
movdqu xmm0, xmmword [rax]
add r11d, 8
movdqu xmm1, xmmword [r8]
xorps xmm1, xmm0
movdqu xmmword [rax], xmm1
movdqu xmm0, xmmword [rax + 0x10]
movdqu xmm1, xmmword [r8 + 0x10]
xorps xmm1, xmm0
movdqu xmmword [rax + 0x10], xmm1
movdqu xmm0, xmmword [rax + 0x20]
movdqu xmm1, xmmword [r8 + 0x20]
xorps xmm1, xmm0
movdqu xmmword [rax + 0x20], xmm1
movdqu xmm0, xmmword [rax + 0x30]
movdqu xmm1, xmmword [r8 + 0x30]
add r8, 0x40
xorps xmm1, xmm0
movdqu xmmword [rax + 0x30], xmm1
add rax, 0x40
cmp r11d, ecx
jb 0x1401430a0
cmp r11d, r10d
jae 0x140143124
sub r10d, r11d
mov edx, r10d
nop word [rax + rax]
mov rcx, qword [r8]
add r8, 8
xor qword [rax], rcx
add rax, 8
sub rdx, 1
jne 0x140143110
and r9d, 7
jbe 0x140143141
sub r8, rax
mov edx, r9d
movzx ecx, byte [r8 + rax]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x140143130
lea r8, [r15 + 0x180]
mov rcx, r15
lea rdx, [r15 + 0x180]
call fcn.140141290
mov rax, qword [r15 + 0x180]
mov qword [r14 + rbx], rax
add rbx, 8
test esi, esi
jne 0x140143020
mov rdi, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
xor eax, eax
mov rbx, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop rsi
ret
mov rbx, qword [rsp + 0x50]
mov eax, 0xffffff53
add rsp, 0x20
pop r15
pop r14
pop rsi
ret
Function at 0x140143b60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
xor ebx, ebx
lea edi, [rdx - 4]
xor r11d, r11d
mov esi, edx
mov rbp, rcx
test edi, edi
je 0x140143beb
mov qword [rsp + 0x10], r14
mov r14d, 4
cmp edi, r14d
mov r8d, r14d
cmovbe r8d, edi
xor r9d, r9d
test r8d, r8d
jle 0x140143bcc
mov eax, r11d
add rax, rbp
mov r10d, r8d
nop word [rax + rax]
movzx edx, byte [r10 + rax]
movzx ecx, byte [rax]
lea rax, [rax + 1]
xor edx, ecx
or r9d, edx
sub r8, 1
jne 0x140143bb0
test r9d, r9d
jne 0x140143bd1
mov ebx, 3
add r11d, r14d
mov r8d, esi
sub r8d, r11d
cmp r8d, r14d
cmova r8d, r14d
cmp r11d, edi
jb 0x140143b96
mov r14, qword [rsp + 0x10]
mov rbp, qword [rsp + 0x20]
mov eax, ebx
mov rbx, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x28]
pop rdi
ret
Function at 0x140144740
Capabilities:
Hash data using sha256

Disassembly:
push rbp
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov r15, rdx
mov r14d, 1
test rcx, rcx
jne 0x140144770
mov eax, r14d
add rsp, 0x110
pop r15
pop r14
pop rbp
ret
movups xmm0, xmmword [r9]
mov qword [rsp + 0x130], rbx
test r8d, r8d
movups xmm1, xmmword [r9 + 0x10]
mov qword [rsp + 0x138], rsi
mov esi, 0
mov qword [rsp + 0x140], rdi
mov edi, r14d
cmovne edi, r8d
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x100], r13
test dil, 0x1f
mov r13d, esi
lea ebx, [rsi + 0x37]
setne r13b
mov eax, edi
shr eax, 5
mov r12d, esi
add r13d, eax
mov eax, dword [r9 + 0x30]
mov dword [rsp + 0x50], eax
movzx eax, word [r9 + 0x34]
movups xmmword [rsp + 0x20], xmm0
mov word [rsp + 0x54], ax
movups xmm0, xmmword [r9 + 0x20]
movzx eax, byte [r9 + 0x36]
mov byte [rsp + 0x56], al
movups xmmword [rsp + 0x30], xmm1
movups xmmword [rsp + 0x40], xmm0
je 0x1401448fc
nop
mov r8d, ebx
mov dword [rbp - 0x80], 0x6a09e667
lea rdx, [rsp + 0x20]
mov dword [rbp - 0x7c], 0xbb67ae85
lea rcx, [rbp - 0x80]
mov dword [rbp - 0x78], 0x3c6ef372
mov dword [rbp - 0x74], 0xa54ff53a
mov dword [rbp - 0x70], 0x510e527f
mov dword [rbp - 0x6c], 0x9b05688c
mov dword [rbp - 0x68], 0x1f83d9ab
mov dword [rbp - 0x64], 0x5be0cd19
mov qword [rbp - 0x20], rsi
mov dword [rbp - 0x18], esi
mov qword [rbp - 0x10], rsi
call fcn.14013ac30
mov r14d, eax
test eax, eax
jne 0x1401448fc
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x80]
call fcn.14013b960
mov r14d, eax
test eax, eax
jne 0x1401448fc
test r15, r15
je 0x1401448f0
test edi, edi
je 0x1401448f0
cmp edi, 0x20
jb 0x1401448de
movups xmm0, xmmword [rsp + 0x58]
add edi, 0xffffffe0
lea rcx, [rsp + 0x54]
movups xmm1, xmmword [rsp + 0x68]
mov edx, 0x36
lea rax, [rsp + 0x54]
movups xmmword [r15], xmm0
movups xmmword [r15 + 0x10], xmm1
add r15, 0x20
sub rdx, rcx
add byte [rax + 2], 1
jne 0x1401448f0
add byte [rax + 1], 1
jne 0x1401448f0
add byte [rax], 1
jne 0x1401448f0
add byte [rax - 1], 1
jne 0x1401448f0
add byte [rax - 2], 1
jne 0x1401448f0
sub rax, 5
lea rcx, [rdx + rax]
test rcx, rcx
jns 0x1401448b2
jmp 0x1401448f0
mov r8d, edi
lea rdx, [rsp + 0x58]
mov rcx, r15
call fcn.14014cbf0
mov edi, esi
inc r12d
cmp r12d, r13d
jb 0x140144800
mov r13, qword [rsp + 0x100]
lea rcx, [rsp + 0x20]
mov r12, qword [rsp + 0x108]
mov rdi, qword [rsp + 0x140]
nop dword [rax]
mov byte [rcx], sil
lea rcx, [rcx + 1]
add ebx, 0xffffffff
jne 0x140144920
mov rbx, qword [rsp + 0x130]
test r14d, r14d
setne sil
mov eax, esi
mov rsi, qword [rsp + 0x138]
add rsp, 0x110
pop r15
pop r14
pop rbp
ret