joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400041e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
movabs rax, 0xcbf29ce484222325
mov r9d, 0
sub r8, rdx
je 0x140004214
movabs r10, 0x100000001b3
nop
movzx ecx, byte [r9 + rdx]
inc r9
xor rax, rcx
imul rax, r10
cmp r9, r8
jb 0x140004200
ret

Function at 0x140005fc0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rdi
push r14
push r15
sub rsp, 0x40
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rsi
mov rdi, r9
mov r14, rdx
mov rsi, rcx
movzx ecx, byte [r8]
mov eax, ecx
movabs rdx, 0xcbf29ce484222325
xor rax, rdx
movabs rdx, 0x100000001b3
imul rax, rdx
mov r8, qword [rsi + 0x30]
and r8, rax
add r8, r8
mov rdx, qword [rsi + 0x18]
mov rbx, qword [rsi + 8]
mov rax, qword [rdx + r8*8]
cmp rbx, rax
je 0x14000605c
mov rbx, qword [rdx + r8*8 + 8]
mov rbx, qword [rbx]
cmp rbx, rax
je 0x14000605c
mov rbx, qword [rbx + 8]
cmp cl, byte [rbx + 0x10]
jne 0x140006033
mov rdx, rdi
mov rcx, rsi
call fcn.140012b80
mov qword [r14], rbx
mov byte [r14 + 8], 0
mov rax, r14
jmp 0x14000618b
mov qword [rsp + 0x20], rdi
mov rax, qword [r9]
cmp rbx, rax
je 0x140006096
mov rcx, qword [r9 + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [r9 + 8]
mov qword [rax + 8], rcx
mov qword [r9 + 8], rdx
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + r8*8]
cmp rax, qword [rsi + 8]
jne 0x1400060b3
mov qword [rdx + r8*8], rdi
mov rax, qword [rsi + 0x18]
mov qword [rax + r8*8 + 8], rdi
jmp 0x1400060e2
cmp rax, rbx
jne 0x1400060be
mov qword [rdx + r8*8], rdi
jmp 0x1400060e2
mov rax, qword [rdx + r8*8 + 8]
mov rcx, qword [rax]
mov qword [rdx + r8*8 + 8], rcx
cmp rcx, rdi
je 0x1400060e2
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + r8*8 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r8*8 + 8], rcx
mov rax, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x38]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss xmm1, dword [0x14006e768]
test rax, rax
jns 0x140006103
addss xmm0, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm2, rdx
test rdx, rdx
jns 0x140006114
addss xmm2, xmm1
divss xmm0, xmm2
comiss xmm0, dword [rsi]
jbe 0x140006180
cmp rdx, 0x200
jae 0x140006130
lea rdx, [rdx*8]
jmp 0x140006142
movabs rax, 0xfffffffffffffff
cmp rdx, rax
jae 0x140006142
add rdx, rdx
mov rcx, rsi
call fcn.140015440
mov rax, qword [rsi + 8]
cmp qword [rax], rax
je 0x140006180
mov r15, qword [rax + 8]
nop word [rax + rax]
mov rbx, qword [rsi + 8]
mov rbx, qword [rbx]
lea r8, [rbx + 0x10]
mov r9, rbx
lea rdx, [rsp + 0x30]
mov rcx, rsi
call fcn.140005fc0
cmp rbx, r15
jne 0x140006160
mov qword [r14], rdi
mov byte [r14 + 8], 1
mov rax, r14
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x40
pop r15
pop r14
pop rdi
ret
Function at 0x140006400
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x40
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rdi, r9
mov r14, rdx
mov rsi, rcx
mov rdx, qword [r8]
movzx r8d, dl
movabs rax, 0xcbf29ce484222325
xor r8, rax
movabs r9, 0x100000001b3
imul r8, r9
mov rax, rdx
shr rax, 8
movzx ecx, al
xor r8, rcx
imul r8, r9
mov rax, rdx
shr rax, 0x10
movzx ecx, al
xor r8, rcx
imul r8, r9
mov rax, rdx
shr rax, 0x18
movzx ecx, al
xor r8, rcx
imul r8, r9
mov rax, rdx
shr rax, 0x20
movzx ecx, al
xor r8, rcx
imul r8, r9
mov rax, rdx
shr rax, 0x28
movzx ecx, al
xor r8, rcx
imul r8, r9
mov rax, rdx
shr rax, 0x30
movzx ecx, al
xor r8, rcx
imul r8, r9
mov rax, rdx
shr rax, 0x38
xor r8, rax
imul r8, r9
mov r9, qword [rsi + 0x30]
and r9, r8
add r9, r9
mov rcx, qword [rsi + 0x18]
mov rbx, qword [rsi + 8]
mov rax, qword [rcx + r9*8]
cmp rbx, rax
je 0x14000652e
mov rbx, qword [rcx + r9*8 + 8]
mov rbx, qword [rbx]
cmp rbx, rax
je 0x14000652e
mov rbx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
jne 0x1400064e0
mov rcx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rcx], rax
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
dec qword [rsi + 0x10]
lea rcx, [rdi + 0x10]
call fcn.14000e250
mov edx, 0x38
mov rcx, rdi
call fcn.14004033c
mov qword [r14], rbx
mov byte [r14 + 8], 0
mov rax, r14
jmp 0x14000665b
mov qword [rsp + 0x80], rdi
mov rax, qword [rdi]
cmp rbx, rax
je 0x14000656b
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + r9*8]
cmp rax, qword [rsi + 8]
jne 0x140006588
mov qword [rdx + r9*8], rdi
mov rax, qword [rsi + 0x18]
mov qword [rax + r9*8 + 8], rdi
jmp 0x1400065b7
cmp rax, rbx
jne 0x140006593
mov qword [rdx + r9*8], rdi
jmp 0x1400065b7
mov rax, qword [rdx + r9*8 + 8]
mov rcx, qword [rax]
mov qword [rdx + r9*8 + 8], rcx
cmp rcx, rdi
je 0x1400065b7
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + r9*8 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r9*8 + 8], rcx
mov rax, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x38]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss xmm1, dword [0x14006e768]
test rax, rax
jns 0x1400065d8
addss xmm0, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm2, rdx
test rdx, rdx
jns 0x1400065e9
addss xmm2, xmm1
divss xmm0, xmm2
comiss xmm0, dword [rsi]
jbe 0x140006650
cmp rdx, 0x200
jae 0x140006605
lea rdx, [rdx*8]
jmp 0x140006617
movabs rax, 0xfffffffffffffff
cmp rdx, rax
jae 0x140006617
add rdx, rdx
mov rcx, rsi
call fcn.140015440
mov rax, qword [rsi + 8]
cmp qword [rax], rax
je 0x140006650
mov r15, qword [rax + 8]
nop dword [rax]
mov rbx, qword [rsi + 8]
mov rbx, qword [rbx]
lea r8, [rbx + 0x10]
mov r9, rbx
lea rdx, [rsp + 0x28]
mov rcx, rsi
call fcn.140006400
cmp rbx, r15
jne 0x140006630
mov qword [r14], rdi
mov byte [r14 + 8], 1
mov rax, r14
add rsp, 0x40
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret
Function at 0x140008c60
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
sub rsp, 0x30
mov r10, qword [r8]
mov rbp, rcx
movabs rcx, 0xcbf29ce484222325
mov rbx, rdx
movabs rdx, 0x100000001b3
mov rax, r10
shr rax, 8
mov rdi, r8
mov r8, qword [rbp + 0x30]
movzx r9d, al
movzx eax, r10b
xor rax, rcx
imul rax, rdx
xor r9, rax
mov rax, r10
imul r9, rdx
shr rax, 0x10
movzx ecx, al
mov rax, r10
xor r9, rcx
shr rax, 0x18
imul r9, rdx
movzx ecx, al
mov rax, r10
xor r9, rcx
shr rax, 0x20
imul r9, rdx
movzx ecx, al
mov rax, r10
xor r9, rcx
shr rax, 0x28
imul r9, rdx
movzx ecx, al
mov rax, r10
xor r9, rcx
shr rax, 0x30
imul r9, rdx
movzx ecx, al
mov rax, r10
xor r9, rcx
shr rax, 0x38
mov rcx, qword [rbp + 0x18]
imul r9, rdx
xor r9, rax
imul r9, rdx
mov rdx, qword [rbp + 8]
and r8, r9
add r8, r8
mov r9, qword [rcx + r8*8]
lea r11, [rcx + r8*8]
mov rax, r9
nop dword [rax]
cmp r9, rdx
jne 0x140008d3a
mov rcx, rdx
jmp 0x140008d41
mov rcx, qword [r11 + 8]
mov rcx, qword [rcx]
cmp rax, rcx
je 0x140008d6d
cmp qword [rax + 0x10], r10
je 0x140008d51
mov rax, qword [rax]
jmp 0x140008d30
cmp rax, rdx
je 0x140008d6d
mov qword [rbx], rax
mov rax, rbx
mov byte [rbx + 8], 0
mov rbx, qword [rsp + 0x68]
add rsp, 0x30
pop rdi
pop rsi
pop rbp
ret
mov qword [rsp + 0x60], rdi
lea rax, [rsp + 0x50]
mov rdi, qword [rdx]
lea r9, [0x14006d4b0]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 8]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x58], r14
mov rdx, rdi
mov qword [rsp + 0x20], rax
mov r14, qword [rdi + 8]
mov r8, r14
call fcn.140005010
mov rdx, rax
movabs rcx, 0x492492492492491
mov rax, qword [rbp + 0x10]
sub rcx, rax
cmp rcx, 1
jb 0x140008dfb
inc rax
mov rcx, rbp
mov qword [rbp + 0x10], rax
mov qword [rdi + 8], rdx
mov qword [r14], rdx
mov rdx, rbx
mov r9, qword [rbp + 8]
mov r9, qword [r9]
lea r8, [r9 + 0x10]
call fcn.140006400
mov r14, qword [rsp + 0x58]
mov rax, rbx
mov rbx, qword [rsp + 0x68]
add rsp, 0x30
pop rdi
pop rsi
pop rbp
ret
lea rcx, str.list_T__too_long
call fcn.14003d36c
int3

Function at 0x140009570
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
movzx eax, byte [r8 + 0x10]
mov r9, rcx
movabs rcx, 0xcbf29ce484222325
mov rbx, rdx
xor rax, rcx
movabs rcx, 0x100000001b3
imul rax, rcx
mov r10, qword [r9 + 0x30]
mov rcx, qword [r9 + 0x18]
and r10, rax
shl r10, 4
add rcx, r10
mov rax, qword [rcx]
cmp qword [rcx + 8], r8
jne 0x1400095fc
cmp rax, r8
jne 0x1400095e2
mov rax, qword [r9 + 8]
mov qword [rcx], rax
mov rcx, qword [r9 + 0x18]
mov rax, qword [r9 + 8]
mov qword [r10 + rcx + 8], rax
lea rcx, [r9 + 8]
call fcn.14001ae00
mov rax, rbx
add rsp, 0x20
pop rbx
ret
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
lea rcx, [r9 + 8]
call fcn.14001ae00
mov rax, rbx
add rsp, 0x20
pop rbx
ret
cmp rax, r8
jne 0x140009607
mov rax, qword [r8]
mov qword [rcx], rax
lea rcx, [r9 + 8]
call fcn.14001ae00
mov rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x140009620
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
cmp qword [r8 + 0x28], 0x10
lea r11, [r8 + 0x10]
mov rbx, qword [r11 + 0x10]
mov rsi, rdx
mov rdi, rcx
jb 0x140009647
mov r11, qword [r11]
xor r9d, r9d
movabs r10, 0xcbf29ce484222325
test rbx, rbx
je 0x140009684
movabs rcx, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9 + r11]
inc r9
xor r10, rax
imul r10, rcx
cmp r9, rbx
jb 0x140009670
mov rdx, qword [rdi + 0x30]
mov rcx, qword [rdi + 0x18]
and rdx, r10
shl rdx, 4
add rcx, rdx
mov rax, qword [rcx]
cmp qword [rcx + 8], r8
jne 0x1400096c4
cmp rax, r8
jne 0x1400096ba
mov rax, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rdi + 0x18]
mov rax, qword [rdi + 8]
mov qword [rdx + rcx + 8], rax
jmp 0x1400096cf
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
jmp 0x1400096cf
cmp rax, r8
jne 0x1400096cf
mov rax, qword [r8]
mov qword [rcx], rax
mov rax, qword [r8 + 8]
lea rcx, [rdi + 8]
mov rbx, qword [r8]
mov qword [rax], rbx
mov rdx, qword [r8]
mov rax, qword [r8 + 8]
mov qword [rdx + 8], rax
mov rdx, r8
dec qword [rcx + 8]
call fcn.140015210
mov qword [rsi], rbx
mov rax, rsi
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret

Function at 0x140009710
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov r10, rcx
mov rsi, rdx
movabs rdx, 0x100000001b3
mov rdi, r8
mov r8, qword [r8 + 0x10]
movabs rcx, 0xcbf29ce484222325
mov rax, r8
shr rax, 8
movzx r9d, al
movzx eax, r8b
xor rax, rcx
imul rax, rdx
xor r9, rax
mov rax, r8
imul r9, rdx
shr rax, 0x10
movzx ecx, al
mov rax, r8
xor r9, rcx
shr rax, 0x18
imul r9, rdx
movzx ecx, al
mov rax, r8
xor r9, rcx
shr rax, 0x20
imul r9, rdx
movzx ecx, al
mov rax, r8
xor r9, rcx
shr rax, 0x28
imul r9, rdx
movzx ecx, al
mov rax, r8
xor r9, rcx
shr rax, 0x30
imul r9, rdx
movzx ecx, al
xor r9, rcx
shr r8, 0x38
mov rcx, qword [r10 + 0x18]
imul r9, rdx
xor r9, r8
imul r9, rdx
mov rdx, qword [r10 + 0x30]
and rdx, r9
shl rdx, 4
add rcx, rdx
mov rax, qword [rcx]
cmp qword [rcx + 8], rdi
jne 0x1400097fd
cmp rax, rdi
jne 0x1400097f3
mov rax, qword [r10 + 8]
mov qword [rcx], rax
mov rcx, qword [r10 + 0x18]
mov rax, qword [r10 + 8]
mov qword [rdx + rcx + 8], rax
jmp 0x140009808
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
jmp 0x140009808
cmp rax, rdi
jne 0x140009808
mov rax, qword [rdi]
mov qword [rcx], rax
mov rax, qword [rdi + 8]
lea rcx, [rdi + 0x10]
mov rbx, qword [rdi]
mov qword [rax], rbx
mov rdx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rdx + 8], rax
dec qword [r10 + 0x10]
call fcn.14000e250
mov edx, 0x38
mov rcx, rdi
call fcn.14004033c
mov qword [rsi], rbx
mov rax, rsi
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x140015310
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
cmp qword [rdx + 0x18], 0x10
mov r10, qword [rdx + 0x10]
jb 0x14001531e
mov rdx, qword [rdx]
xor r9d, r9d
movabs r8, 0xcbf29ce484222325
test r10, r10
je 0x140015354
movabs r11, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [r9 + rdx]
inc r9
xor r8, rax
imul r8, r11
cmp r9, r10
jb 0x140015340
mov rax, qword [rcx + 0x30]
and rax, r8
ret

Function at 0x1400195a0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x98], rbx
mov rax, rdx
mov r14, rcx
mov rdi, qword [rcx + 0x20]
cmp rdi, qword [rcx + 0x10]
je 0x140019735
movabs r11, 0x100000001b3
movabs rax, 0xcbf29ce484222325
mov r10, qword [r14]
mov r12, qword [rdi + 0x10]
mov r8, rdi
mov r9, qword [rdi + 0x18]
cmp r9, 0x10
jb 0x140019604
mov r8, qword [rdi]
mov rdx, rax
xor eax, eax
test r12, r12
je 0x140019624
nop
movzx ecx, byte [rax + r8]
xor rdx, rcx
imul rdx, r11
inc rax
cmp rax, r12
jb 0x140019610
mov rax, qword [r10 + 0x30]
and rax, rdx
shl rax, 4
mov rcx, qword [r10 + 0x18]
mov qword [rsp + 0x80], rcx
mov r13, qword [rcx + rax]
mov rbx, r13
add rax, 8
mov qword [rsp + 0x90], rax
mov rbp, qword [r10 + 8]
cmp r13, rbp
jne 0x14001965c
mov rax, rbp
jmp 0x140019663
mov rax, qword [rax + rcx]
mov rax, qword [rax]
cmp rbx, rax
je 0x1400196de
lea rcx, [rbx + 0x10]
mov rdx, rdi
cmp r9, 0x10
jb 0x140019678
mov rdx, qword [rdi]
mov rsi, qword [rcx + 0x10]
mov r15, qword [rcx + 0x18]
cmp r15, 0x10
jb 0x140019689
mov rcx, qword [rcx]
cmp rsi, r12
jne 0x14001969e
mov r8, rsi
call fcn.140041c50
test eax, eax
je 0x1400196b3
mov r9, qword [rdi + 0x18]
mov rbx, qword [rbx]
mov rcx, qword [rsp + 0x80]
mov rax, qword [rsp + 0x90]
jmp 0x140019652
lea rdx, [rbx + 0x10]
cmp r15, 0x10
jb 0x1400196c0
mov rdx, qword [rdx]
cmp qword [rdi + 0x18], 0x10
jb 0x1400196ca
mov rdi, qword [rdi]
cmp r12, rsi
jne 0x1400196de
mov r8, r12
mov rcx, rdi
call fcn.140041c50
test eax, eax
je 0x1400196e1
mov rbx, rbp
mov rax, qword [r14]
cmp rbx, qword [rax + 8]
je 0x14001971a
lea rcx, [r14 + 0x68]
lea r8, [rbx + 0x30]
lea rdx, [rsp + 0x28]
call fcn.140008c60
mov rdi, qword [rsp + 0x28]
mov rax, qword [rbx + 0x30]
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x28]
test al, al
jne 0x140019781
cmp qword [rdi + 0x30], 0
je 0x140019757
add qword [r14 + 0x20], 0x20
mov rdi, qword [r14 + 0x20]
cmp rdi, qword [r14 + 0x10]
jne 0x1400195d9
mov rax, qword [rsp + 0x88]
mov rcx, rax
call fcn.14000de90
xor al, al
mov rbx, qword [rsp + 0x98]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r8, qword [rsp + 0x88]
mov rdx, qword [r14 + 0x20]
mov rcx, r14
call fcn.140017d40
add qword [r14 + 0x20], 0x20
mov rcx, qword [rsp + 0x88]
call fcn.14000de90
mov al, 1
jmp 0x14001973f
mov r8, qword [rsp + 0x88]
mov rdx, qword [r14 + 0x20]
mov rcx, r14
call fcn.140017d40
nop
mov rcx, qword [rsp + 0x88]
call fcn.14000de90
mov al, 1
jmp 0x14001973f
Function at 0x14001b090
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x20
mov r11, qword [r8 + 0x18]
mov rdi, r8
mov r14, qword [r8 + 0x10]
mov r12, rdx
mov rsi, rcx
mov r10, r8
cmp r11, 0x10
jb 0x14001b0be
mov r10, qword [r8]
xor r8d, r8d
movabs r9, 0xcbf29ce484222325
test r14, r14
je 0x14001b0f4
movabs rcx, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [r8 + r10]
inc r8
xor r9, rax
imul r9, rcx
cmp r8, r14
jb 0x14001b0e0
mov rax, qword [rsi + 0x18]
mov rcx, qword [rsi + 0x30]
mov rsi, qword [rsi + 8]
and rcx, r9
shl rcx, 4
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], r15
mov r13, qword [rcx + rax]
add rax, 8
add rax, rcx
mov rbx, r13
mov qword [rsp + 0x50], rax
cmp r13, rsi
jne 0x14001b12e
mov rax, rsi
jmp 0x14001b134
mov rax, qword [rax]
mov rax, qword [rax]
cmp rbx, rax
je 0x14001b1ad
lea rcx, [rbx + 0x10]
mov rdx, rdi
cmp r11, 0x10
jb 0x14001b149
mov rdx, qword [rdi]
mov r15, qword [rcx + 0x18]
mov rbp, qword [rcx + 0x10]
cmp r15, 0x10
jb 0x14001b15a
mov rcx, qword [rcx]
cmp rbp, r14
jne 0x14001b16f
mov r8, rbp
call fcn.140041c50
test eax, eax
je 0x14001b179
mov r11, qword [rdi + 0x18]
mov rbx, qword [rbx]
mov rax, qword [rsp + 0x50]
jmp 0x14001b124
lea rdx, [rbx + 0x10]
cmp r15, 0x10
jb 0x14001b186
mov rdx, qword [rdx]
cmp qword [rdi + 0x18], 0x10
jb 0x14001b190
mov rdi, qword [rdi]
cmp r14, rbp
jne 0x14001b1a4
mov r8, r14
mov rcx, rdi
call fcn.140041c50
test eax, eax
je 0x14001b1a7
mov rbx, rsi
mov qword [r12], rbx
jmp 0x14001b1b1
mov qword [r12], rsi
mov r15, qword [rsp + 0x60]
mov rax, r12
mov rbp, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x68]
add rsp, 0x20
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret
Function at 0x140022250
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
movdqu xmm3, xmmword [rcx + 0x10]
movdqu xmm1, xmmword [rcx]
movdqu xmmword [rdx + 0x10], xmm3
movdqa xmm2, xmm1
movdqu xmmword [rdx], xmm1
pslldq xmm2, 4
movdqa xmm0, xmm2
pslldq xmm2, 4
pxor xmm0, xmm1
movdqa xmm4, xmm2
pxor xmm4, xmm0
pslldq xmm2, 4
pxor xmm4, xmm2
aeskeygenassist xmm0, xmm3, 1
pshufd xmm1, xmm0, 0xff
pxor xmm4, xmm1
movdqa xmm1, xmm3
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [rdx + 0x20], xmm4
pslldq xmm1, 4
pxor xmm0, xmm3
movdqa xmm2, xmm1
pslldq xmm1, 4
pxor xmm2, xmm0
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm4, 0
pshufd xmm1, xmm0, 0xaa
pxor xmm2, xmm1
movdqa xmm1, xmm4
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [rdx + 0x30], xmm2
pslldq xmm1, 4
pxor xmm0, xmm4
movdqa xmm3, xmm1
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm2, 2
pshufd xmm1, xmm0, 0xff
pxor xmm3, xmm1
movdqa xmm1, xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [rdx + 0x40], xmm3
pxor xmm0, xmm2
pslldq xmm1, 4
movdqa xmm2, xmm1
pslldq xmm1, 4
pxor xmm2, xmm0
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 0
pshufd xmm1, xmm0, 0xaa
pxor xmm2, xmm1
movdqa xmm1, xmm3
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [rdx + 0x50], xmm2
pslldq xmm1, 4
pxor xmm0, xmm3
movdqa xmm3, xmm1
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm2, 4
pshufd xmm1, xmm0, 0xff
pxor xmm3, xmm1
movdqa xmm1, xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [rdx + 0x60], xmm3
pxor xmm0, xmm2
pslldq xmm1, 4
movdqa xmm2, xmm1
pslldq xmm1, 4
pxor xmm2, xmm0
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 0
pshufd xmm1, xmm0, 0xaa
pxor xmm2, xmm1
movdqa xmm1, xmm3
movdqu xmmword [rdx + 0x70], xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
pslldq xmm1, 4
movdqa xmm4, xmm1
pxor xmm0, xmm3
pslldq xmm1, 4
pxor xmm4, xmm0
pxor xmm4, xmm1
aeskeygenassist xmm0, xmm2, 8
pshufd xmm1, xmm0, 0xff
pxor xmm4, xmm1
movdqa xmm1, xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [rdx + 0x80], xmm4
pxor xmm0, xmm2
pslldq xmm1, 4
movdqa xmm3, xmm1
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm4, 0
pshufd xmm1, xmm0, 0xaa
pxor xmm3, xmm1
movdqa xmm1, xmm4
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [rdx + 0x90], xmm3
pslldq xmm1, 4
pxor xmm0, xmm4
movdqa xmm2, xmm1
pslldq xmm1, 4
pxor xmm2, xmm0
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 0x10
pshufd xmm1, xmm0, 0xff
pxor xmm2, xmm1
movdqu xmmword [rdx + 0xa0], xmm2
ret
Function at 0x140034020
Capabilities:
Encode data using xor

Disassembly:
mov r8d, 2
jmp sym.Cryptotest.exe_argon2_verify_ctx

Function at 0x140034b90
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
mov r14, rcx
mov rsi, r8
mov r8, rdx
movabs rax, 0xaaaaaaaaaaaaaaab
mul r9
mov rcx, r9
mov rdi, r9
shr rdx, 1
lea rax, [rdx + rdx*2]
sub rcx, rax
lea rbp, [rdx*4]
sub rcx, 1
je 0x140034bde
cmp rcx, 1
jne 0x140034be2
inc rbp
add rbp, 2
cmp r8, rbp
ja 0x140034c00
mov rax, 0xffffffffffffffff
mov rbp, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x28]
pop r14
ret
xor edx, edx
mov qword [rsp + 0x10], rbx
mov ebx, edx
test r9, r9
je 0x140034d52
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rsi]
lea rsi, [rsi + 1]
shl edx, 8
dec rdi
add edx, eax
add ebx, 8
cmp ebx, 6
jb 0x140034ccb
nop dword [rax + rax]
add ebx, 0xfffffffa
mov r11d, edx
mov ecx, ebx
shr r11d, cl
and r11d, 0x3f
mov r9d, r11d
mov eax, r11d
xor r9d, 0x3e
xor eax, 0x3f
neg r9d
neg eax
shr r9d, 8
lea ecx, [r11 - 0x3e]
shr eax, 8
lea r8d, [r11 - 0x34]
not r9b
shr ecx, 8
and r9b, 0xfb
shr r8d, 8
not al
lea r10d, [r11 - 0x1a]
or r9b, al
shr r10d, 8
lea eax, [r11 - 4]
and r9b, 0x2f
and cl, al
movzx eax, r8b
not al
and cl, al
movzx eax, r10b
or r9b, cl
not al
lea ecx, [r11 + 0x47]
add r11b, 0x41
and cl, al
and r11b, r10b
and cl, r8b
or r9b, cl
or r9b, r11b
mov byte [r14], r9b
inc r14
cmp ebx, 6
jae 0x140034c40
test rdi, rdi
jne 0x140034c20
test ebx, ebx
je 0x140034d52
mov ecx, 6
sub ecx, ebx
shl edx, cl
and edx, 0x3f
mov r9d, edx
mov eax, edx
xor r9d, 0x3e
xor eax, 0x3f
neg r9d
neg eax
shr r9d, 8
lea ecx, [rdx - 0x3e]
shr eax, 8
lea r8d, [rdx - 0x34]
not r9b
shr ecx, 8
and r9b, 0xfb
shr r8d, 8
not al
lea r10d, [rdx - 0x1a]
or r9b, al
shr r10d, 8
lea eax, [rdx - 4]
and r9b, 0x2f
and cl, al
movzx eax, r8b
not al
and cl, al
movzx eax, r10b
or r9b, cl
not al
lea ecx, [rdx + 0x47]
add dl, 0x41
and cl, al
and dl, r10b
and cl, r8b
or r9b, cl
or r9b, dl
mov byte [r14], r9b
inc r14
mov rbx, qword [rsp + 0x10]
mov rax, rbp
mov rbp, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x28]
mov byte [r14], 0
pop r14
ret