joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14008f540
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
cmp dword [0x140144084], 0
jne 0x14008f656
mov dword [rsp - 0x28], edx
xor edx, edx
lea r8, [0x140144080]
nop word [rax + rax]
mov ecx, edx
mov dword [rsp - 0x24], 0x5a98e2d0
lea r8, [r8 + 4]
and ecx, 1
mov eax, edx
shr eax, 1
mov dword [rsp - 0x24], ebx
neg ecx
and ecx, 0xedb88320
inc edx
xor ecx, eax
xchg rdi, rdi
mov eax, ecx
shr ecx, 1
and eax, 1
mov r8, r8
neg eax
and eax, 0xedb88320
xor eax, ecx
mov dword [rsp - 0x2c], 0x23d7855f
mov ecx, eax
shr eax, 1
and ecx, 1
neg ecx
mov r8, r8
and ecx, 0xedb88320
xor ecx, eax
mov eax, ecx
mov dword [rsp - 0x24], 0x900ee98
shr ecx, 1
and eax, 1
neg eax
and eax, 0xedb88320
mov dword [rsp - 0x24], ebp
xor eax, ecx
mov ecx, eax
shr eax, 1
and ecx, 1
mov dword [rsp - 0x14], 0x24ba67ca
neg ecx
and ecx, 0xedb88320
xor ecx, eax
mov eax, ecx
mov dword [rsp - 0x3c], 0x53bcfe7
shr ecx, 1
and eax, 1
neg eax
and eax, 0xedb88320
mov r13, r13
xor eax, ecx
mov ecx, eax
shr eax, 1
mov dword [rsp - 0x18], 0x2ce97247
and ecx, 1
neg ecx
and ecx, 0xedb88320
xchg r14, r14
xor ecx, eax
mov eax, ecx
shr ecx, 1
mov dword [rsp - 0x38], 0x6858c04c
and eax, 1
neg eax
and eax, 0xedb88320
mov rdx, rdx
xor eax, ecx
mov dword [r8 - 4], eax
cmp edx, 0x100
jb 0x14008f564
mov dword [rsp - 0x18], esp
ret
Function at 0x140094c04
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r15
mov qword [rsp + 8], r15
xchg r15, rbx
xchg r15, rbp
mov qword [rsp + 0x10], r15
xchg rbp, r15
mov qword [rsp + 0x18], rsi
mov dword [rsp - 0x24], ecx
push rdi
nop
sub rsp, 8
mov qword [rsp], r14
nop
sub rsp, 8
mov qword [rsp], r15
sub rsp, 0x20
mov dword [rsp - 0x38], 0x2573ebb7
movzx eax, byte [rdx + 1]
xchg r8, rsi
mov r15, rsi
xchg rsi, r8
movzx ebx, byte [rdx]
movzx edi, byte [rdx + 4]
mov dword [rsp - 0x14], 0x5288fe4d
mov r8d, dword [rcx + 4]
shl ebx, 1
shl ebx, 1
shl ebx, 5
shl ebx, 1
dec r8d
or ebx, eax
mov rdx, rdx
shl edi, 8
movzx eax, byte [rdx + 2]
shl ebx, 7
shl ebx, 1
or ebx, eax
mov rdx, rdx
movzx eax, byte [rdx + 3]
shl ebx, 1
shl ebx, 1
shl ebx, 1
shl ebx, 1
shl ebx, 1
shl ebx, 3
or ebx, eax
movzx eax, byte [rdx + 5]
mov dword [rsp - 0x38], edx
or edi, eax
movzx eax, byte [rdx + 6]
shl edi, 8
or edi, eax
mov dword [rsp - 0xc], ecx
movzx eax, byte [rdx + 7]
shl edi, 4
shl edi, 2
shl edi, 2
or edi, eax
xchg r12, r12
test r8d, r8d
jle 0x140094d60
xchg rdx, rbx
mov rbx, qword [rcx + 8]
xchg rdx, rbx
lea r14d, [r8 - 1]
movsxd rax, r8d
shr r14d, 1
mov rdx, rdx
inc r14d
lea rcx, [rax + rax*2]
lea eax, [r8 - 1]
lea rsi, [rdx + rcx*4]
mov dword [rsp - 0x2c], 0x2ab8c8cb
movsxd rcx, eax
lea rax, [rcx + rcx*2]
lea rbp, [rdx + rax*4]
mov rdi, rdi
xchg rdx, r12
mov r12, rsi
xchg r12, rdx
mov ecx, edi
mov r14, r14
call fcn.140095480
xor ebx, eax
xchg rdx, rbp
mov rbp, rdx
xchg rdx, rbp
mov ecx, ebx
mov dword [rsp - 0x30], 0x3402ecb6
call fcn.140095480
xor edi, eax
nop
sub rsi, 0x1b54b1a4
add rsi, 0x1b54b18c
nop
sub rbp, 0x608a7a03
add rbp, 0x608a79eb
sub r14, 1
mov dword [rsp - 0x24], edi
jne 0x140094d05
lea rax, [r15 + 7]
mov ecx, 0xdcefa89
add ecx, 0x64a8f1e1
add ecx, 0xb44a190
sub ecx, 0x7dbc8df6
mov byte [rax - 4], dil
mov byte [rax], bl
mov rcx, rcx
dec rax
shr ebx, 2
shr ebx, 6
shr edi, 5
shr edi, 2
shr edi, 1
sub rcx, 1
xchg rcx, rcx
jne 0x140094d7b
mov rbx, qword [rsp + 0x40]
xchg rbp, rsi
mov rsi, qword [rsp + 0x48]
xchg rsi, rbp
mov rsi, qword [rsp + 0x50]
mov rdi, rdi
sub rsp, 0xffffffffffffffe0
pop r15
nop
add rsp, 8
mov r14, qword [rsp - 8]
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x140094dd8
Capabilities:
Encode data using xor

Disassembly:
xchg rsp, rax
mov rsp, rax
xchg rsp, rax
xchg rbx, rsi
mov qword [rax + 8], rsi
xchg rsi, rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
xchg r14, r14
xchg rdi, r15
mov qword [rax + 0x20], r15
xchg r15, rdi
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
sub rsp, 0x6a670df0
add rsp, 0x6a670dd0
movzx eax, byte [rdx + 1]
mov rbx, rbx
xchg r14, r8
mov r8, r14
xchg r8, r14
movzx ebx, byte [rdx]
movzx edi, byte [rdx + 4]
xchg r10, r10
shl ebx, 6
shl ebx, 1
shl ebx, 1
or ebx, eax
xchg r11, r11
shl edi, 8
movzx eax, byte [rdx + 2]
shl ebx, 7
shl ebx, 1
or ebx, eax
movzx eax, byte [rdx + 3]
xchg rcx, rcx
shl ebx, 2
shl ebx, 1
shl ebx, 2
shl ebx, 3
or ebx, eax
movzx eax, byte [rdx + 5]
or edi, eax
mov dword [rsp - 0x3c], 0x6b73d9bc
movzx eax, byte [rdx + 6]
shl edi, 7
shl edi, 1
or edi, eax
movzx eax, byte [rdx + 7]
shl edi, 6
shl edi, 1
shl edi, 1
or edi, eax
mov eax, dword [rcx + 4]
test eax, eax
mov dword [rsp - 0x40], ebp
jle 0x140094eee
xchg r15, rsi
mov r15, qword [rcx + 8]
xchg rsi, r15
lea ebp, [rax - 1]
shr ebp, 1
inc ebp
xchg r10, r10
xchg rcx, rsi
mov rdx, rcx
xchg rcx, rsi
mov ecx, edi
mov rsp, rsp
call fcn.140095480
xor ebx, eax
lea rdx, [rsi + 0xc]
mov dword [rsp - 0x1c], 0x2a81c531
mov ecx, ebx
call fcn.140095480
xor edi, eax
nop
add rsi, 0x4db8c7bc
sub rsi, 0x4db8c7a4
sub rbp, 1
xchg r13, r13
jne 0x140094ea8
lea rax, [r14 + 7]
mov ecx, 0x178c3a0
add ecx, 0x759558ea
xor ecx, 0x11f18073
sub ecx, 0x57c3b9e
sub ecx, 0x61836157
mov byte [rax - 4], dil
mov rbp, rbp
mov byte [rax], bl
dec rax
shr ebx, 8
xchg rsi, rsi
shr edi, 6
shr edi, 1
shr edi, 1
sub rcx, 1
jne 0x140094f0f
mov rbx, qword [rsp + 0x30]
mov r15, r15
xchg rdi, rbp
mov rdi, qword [rsp + 0x38]
xchg rbp, rdi
mov rsi, qword [rsp + 0x40]
xchg r10, r10
mov rdi, qword [rsp + 0x48]
nop
add rsp, 0x1bac25af
sub rsp, 0x1bac258f
pop r14
ret
Function at 0x14009512c
Capabilities:
Encode data using xor

Disassembly:
xchg rcx, rbx
mov qword [rsp + 0x10], rcx
xchg rbx, rcx
xchg rsi, r13
mov qword [rsp + 0x18], r13
xchg r13, rsi
push rbp
push rdi
xchg rdi, rdi
push r13
mov qword [rsp], r14
lea rbp, [rsp - 0x47]
xchg rsi, rsi
sub rsp, 0x37f056db
add rsp, 0x37f0563b
movdqa xmm0, xmmword [0x140001dd0]
mov dword [rsp - 0x28], 0x39ace1ec
xor edi, edi
movdqa xmm1, xmmword [0x140001e50]
mov rbx, rdx
mov dword [rsp - 0x28], ebx
movdqu xmmword [rbp - 0x39], xmm0
xchg rbp, rcx
mov rsi, rbp
xchg rbp, rcx
mov edx, edi
movdqa xmm0, xmmword [0x140001e60]
mov r8d, edi
mov rbp, rbp
movdqu xmmword [rbp - 0x29], xmm1
movdqa xmm1, xmmword [0x140001e40]
xchg r13, rbp
movdqu xmmword [r13 - 0x19], xmm0
xchg rbp, r13
movdqu xmmword [rbp - 9], xmm1
xchg rsp, rsp
mov ecx, edx
lea r8, [r8 + 4]
mov eax, 0x3115104
xor eax, 0x71987d0c
add eax, 0x7e816cf
sub eax, 0xa88ddea
xor eax, 0x2fbc7939
inc rdx
mov dword [rsp - 0xc], edi
rol eax, cl
xor eax, dword [rbp + r8 - 0x3d]
mov dword [rbp + r8 + 3], eax
mov dword [rsp - 0x1c], 0x37a27c3c
cmp rdx, 0x10
jb 0x1400951c3
cmp dword [rsi + 4], 8
jne 0x140095273
xchg rbp, rbp
lea rdx, [rbp + 0x6d]
movzx ecx, byte [rbx + rdi*2]
movzx eax, byte [rbx + rdi*2 + 1]
mov dword [rsp - 0x18], 0x668236c0
inc rdi
shl cx, 7
shl cx, 1
or cx, ax
mov dword [rsp - 0x24], esi
mov word [rdx], cx
lea rdx, [rdx - 2]
cmp rdi, 4
mov rdx, rdx
jl 0x140095218
lea r9, [rbp + 7]
xor r8d, r8d
lea rdx, [rbp + 0x67]
mov rcx, rcx
xchg rcx, rsi
mov rsi, rcx
xchg rsi, rcx
call fcn.140094f64
mov dword [rsp - 0x44], ebx
jmp 0x140095347
cmp dword [rsi], edi
jle 0x140095347
mov dword [rsp - 0x34], ebx
mov r14d, edi
lea rdx, [rbp + 0x6d]
mov r8d, 0x7baeb712
xor r8d, 0x58a7c2bf
add r8d, 0x477bdf8
xor r8d, 0x1d59e6e0
xor r8d, 0x3ad8d541
movzx eax, byte [rbx]
mov dword [rsp - 0x38], 0x571bb6c0
movzx ecx, byte [rbx + 1]
sub rbx, 0xfffffffffffffffe
shl ax, 3
shl ax, 5
or cx, ax
mov word [rdx], cx
mov r12, r12
lea rdx, [rdx - 2]
sub r8, 1
jne 0x1400952a8
lea r9, [rbp + 7]
xchg rbp, rbp
mov r8d, r14d
lea rdx, [rbp + 0x67]
xchg rsi, r14
mov rcx, r14
xchg rsi, r14
call fcn.140094f64
mov dword [rsp - 0x10], 0x60c07a99
mov r8d, dword [rsi + 4]
lea r9, [rbp + 0x27]
sub r8d, r14d
mov dword [rsp - 0x34], 0x9e5058
lea rdx, [rbp + 0x67]
nop
add r8d, 0x28ccb847
sub r8d, 0x28ccb84f
mov rcx, rsi
mov dword [rsp - 0x34], ebx
call fcn.140094f64
inc edi
neg r14d
add r14d, 0xfffffff8
neg r14d
cmp edi, dword [rsi]
xchg rsp, rsp
jl 0x140095282
xor eax, eax
lea r11, [rsp + 0xa0]
mov dword [rsp - 0x30], 0x50e3d42b
xchg rcx, rbx
mov rcx, qword [r11 + 0x28]
xchg rbx, rcx
lea rdi, [rbp + 7]
mov rdx, rdx
mov rsi, qword [r11 + 0x30]
lea ecx, [rax + 0x40]
rep stosb byte [rdi], al
mov r12, r12
xchg r11, r15
mov rsp, r15
xchg r11, r15
nop
mov r14, qword [rsp]
add rsp, 8
pop rdi
mov r10, r10
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x140095434
Capabilities:
Encode data using xor

Disassembly:
xor r10d, r10d
mov r11d, ecx
mov dword [rsp - 0xc], ecx
test edx, edx
je 0x140095479
lea ecx, [r11 + r11]
mov r9d, r10d
mov dword [rsp - 0x2c], esi
xor r9d, r11d
mov r11d, ecx
test dl, 1
cmove r9d, r10d
xchg r12, r12
xor r11d, r8d
cmp ecx, 0x100
mov r10d, r9d
cmovb r11d, ecx
mov dword [rsp - 0x20], 0x2409c134
shr edx, 1
jne 0x140095442
mov eax, r10d
ret
Function at 0x14009b1a0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x10
xchg r10, rbx
mov qword [rsp], rbx
xchg r10, rbx
mov qword [rsp + 8], r11
mov dword [rsp - 0x20], 0x55dc0fa0
xor r11, r11
lea r10, [rsp + 0x18]
sub r10, rax
cmovb r10, r11
mov dword [rsp - 0x28], 0xa2e3a04
mov r11, qword gs:[0x10]
cmp r10, r11
bnd jae 0x14009b20b
mov r9, r9
and r10w, 0xf000
lea r11, [r11 - 0x1000]
mov byte [r11], 0x18
add byte [r11], 0x36
sub byte [r11], 0x37
add byte [r11], 8
xor byte [r11], 0x1f
cmp r10, r11
bnd jne 0x14009b1ea
xchg r10, r8
mov r8, qword [rsp]
xchg r8, r10
mov r11, qword [rsp + 8]
mov rbp, rbp
nop
sub rsp, 0x3e24402c
add rsp, 0x3e24403c
bnd ret
Function at 0x1400a05b4
Capabilities:
Encode data using xor

Disassembly:
mov rax, qword [rcx + 0xf8]
xor r8d, r8d
xchg r14, rdx
mov r9, r14
xchg rdx, r14
test rax, rax
mov dword [rsp - 0x40], 0x1179a232
je 0x1400a0620
mov ecx, r8d
mov edx, 0x478c7aec
xor edx, 0x785d2cee
xor edx, 0xb67398a
add edx, 0xb9dae4c
rol edx, cl
xor dl, byte [rax]
inc rax
mov dword [rsp - 0x28], 0x2ea16ea6
mov byte [r8 + r9], dl
inc r8
cmp r8, 0x20
xchg r14, r14
jb 0x1400a05d8
mov al, 0x5c
xor al, 0x1b
xor al, 0x4d
xor al, 0x48
sub al, 0x41
ret
xchg r9, rax
mov r9, qword [rcx + 0x100]
xchg r9, rax
test rax, rax
xchg r9, r9
je 0x1400a0661
xchg r14, rax
movups xmm0, xmmword [r14]
xchg r14, rax
xchg rdx, rdi
movups xmmword [rdi], xmm0
xchg rdi, rdx
xchg r14, rax
movups xmm1, xmmword [r14 + 0x10]
xchg r14, rax
xchg rdx, r13
movups xmmword [r13 + 0x10], xmm1
xchg rdx, r13
jmp 0x1400a0615
xorps xmm0, xmm0
mov dword [rsp - 0x14], ecx
xor al, al
xchg r11, rdx
movups xmmword [r11], xmm0
xchg r11, rdx
xchg rdx, r12
movups xmmword [r12 + 0x10], xmm0
xchg rdx, r12
ret
Function at 0x1400dac98
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rbp, rbp
xchg r10, rsi
mov qword [rsp + 0x18], r10
xchg rsi, r10
mov qword [rsp + 0x20], rdi
mov rdx, rdx
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rsp, rbp
mov rsp, rbp
xchg rsp, rbp
nop
add rsp, 0x12f1e1df
sub rsp, 0x12f1e22f
xor esi, esi
mov dword [rbp - 0x30], 0x2f84c359
sub dword [rbp - 0x30], 0x14434ccf
xor dword [rbp - 0x30], 0x63330e85
sub dword [rbp - 0x30], 0x783b77b6
mov dword [rbp - 0x2c], 0x40d0d9b1
add dword [rbp - 0x2c], 0x1556edf1
xor dword [rbp - 0x2c], 0x7173e767
xor dword [rbp - 0x2c], 0x2fc0c3fa
xor dword [rbp - 0x2c], 0x8fbe340
xchg r14, rbx
mov r14, rcx
xchg rbx, r14
mov dword [rbp - 0x28], 0x17bf7314
add dword [rbp - 0x28], 0x656e561f
xor dword [rbp - 0x28], 0x7516b7bb
add dword [rbp - 0x28], 0x485bcbf1
xor dword [rbp - 0x28], 0x50e14a44
mov dword [rbp - 0x24], 0x75e995ed
sub dword [rbp - 0x24], 0x669483a0
add dword [rbp - 0x24], 0x35fb28a1
sub dword [rbp - 0x24], 0x44fc3a8b
mov dword [rbp - 0x20], 0x3a660f53
xor dword [rbp - 0x20], 0x6757f85f
xor dword [rbp - 0x20], 0x47a6f6eb
sub dword [rbp - 0x20], 0x1a6f0185
mov qword [rbp + 0x10], rsi
mov r10, r10
xchg rsi, rax
mov rsi, qword [rbp + 0x10]
xchg rsi, rax
mov rcx, qword [rbp + 0x10]
mov r13, r13
mov rax, qword [rbp + 0x10]
and cl, 3
shl cl, 3
mov rbx, rbx
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x2263dead
add eax, 0x4dd31ada
sub eax, 0x2d85c7ef
sub eax, 0x1263ed8a
shr eax, cl
mov dword [rsp - 0x38], esp
movzx ecx, al
xchg r10, rax
mov r10, qword [rbp + 0x10]
xchg r10, rax
xor cx, dx
mov word [rbp + rax*2 - 0x1c], cx
mov dword [rsp - 0x14], 0x711cdd98
xchg rdx, rax
mov rdx, qword [rbp + 0x10]
xchg rdx, rax
inc rax
mov dword [rsp - 0x30], 0x65fbb922
xchg r15, rax
mov qword [rbp + 0x10], r15
xchg r15, rax
xchg r14, rax
mov r14, qword [rbp + 0x10]
xchg r14, rax
cmp rax, 0xa
xchg r9, r9
jb 0x1400dad89
xor edx, edx
mov word [rbp - 8], si
lea rcx, [rbp - 0x1c]
mov dword [rsp - 0xc], 0x4ac2196e
call fcn.14008c080
xchg rbx, rax
mov r8, rbx
xchg rbx, rax
mov qword [rbx + 0x200], rax
xor eax, eax
lea rdi, [rbp - 0x1c]
mov dword [rsp - 0x20], 0x29f78709
lea ecx, [rax + 0xa]
rep stosb byte [rdi], al
test r8, r8
je 0x1400daea7
mov dword [rsp - 0x1c], 0x7589849f
lea rdx, [rbx + 0x208]
xchg r8, rcx
mov r8, rcx
xchg rcx, r8
call fcn.1400db500
mov dword [rsp - 0x14], 0x3474d803
test al, al
jne 0x1400dae9d
xchg r12, rcx
mov r12, qword [rbx + 0x200]
xchg r12, rcx
call fcn.14008e5a0
mov dword [rsp - 0x30], 0x5cc3d1aa
xor al, al
mov qword [rbx + 0x200], rsi
jmp 0x1400daea7
mov al, 0x4a
xor al, 0x39
sub al, 0x34
sub al, 0x2e
sub al, 0x10
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov r9, r9
xchg rbp, rdi
mov rbp, qword [rsp + 0x78]
xchg rbp, rdi
neg rsp
add rsp, 0xffffffffffffffb0
neg rsp
pop rbp
ret
Function at 0x1400db31c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp - 0x20], 0xc5ee96b
push rdi
sub rsp, 0x1046fa8a
add rsp, 0x1046f94a
xchg r8, rdx
mov rdi, rdx
xchg r8, rdx
xchg rdx, rcx
mov rbx, rdx
xchg rdx, rcx
mov r8d, 0x24449813
add r8d, 0x122e4748
sub r8d, 0x357821f4
xor r8d, 0xfabc67
lea rcx, [rsp + 0x40]
xchg r12, r12
xor edx, edx
call fcn.14009a370
mov rax, qword [rbx + 0x238]
mov dword [rsp - 0x18], esp
lea r8, [rsp + 0x40]
mov edx, dword [rdi + 0x10]
movabs rcx, 0x5356538c4aa102a0
add rcx, 0x11852ebd
sub rcx, 0x2fe5edf
add rcx, 0x660fc544
add rax, rcx
mov dword [rsp - 0x44], ecx
mov dword [rsp + 0x30], 0x545259c8
sub dword [rsp + 0x30], 0x3f50eba6
xor dword [rsp + 0x30], 0x2b2459ef
xor dword [rsp + 0x30], 0x3e2537cf
and dword [rsp + 0x28], 0
not rax
xchg rbp, rbp
mov rcx, qword [rdi + 0x20]
mov r9d, 0x2f0ccd29
add r9d, 0x13392ee7
sub r9d, 0x313e231c
xor r9d, 0x62bad58b
sub r9d, 0x73bd0c7f
and qword [rsp + 0x20], 0
ror rax, 0x12
ror rax, 0xe
not rax
rol rax, 0xa
rol rax, 3
rol rax, 2
rol rax, 3
call rax
test eax, eax
mov dword [rsp - 0x14], 0x2855612
jne 0x1400db4d9
or eax, 0xffffffff
lea rbx, [rsp + 0x40]
mov dword [rsp - 0x18], 0x42233c63
cmp byte [rsp + 0x40], 0
mov dword [rsp + 0x150], eax
je 0x1400db4af
mov rbp, rbp
xchg rdx, r14
mov r14, rbx
xchg rdx, r14
lea rcx, [rsp + 0x150]
mov dword [rsp - 0x2c], 0x48b062c
mov r8d, 0x12d224c9
add r8d, 0x49cdf23c
xor r8d, 0x1bdbb5c8
add r8d, 0x1ea3bd78
sub r8d, 0x661f6044
inc rbx
call fcn.14008f1d0
xchg rsi, rsi
cmp byte [rbx], 0
jne 0x1400db456
mov eax, dword [rsp + 0x150]
mov r8, r8
not eax
cmp eax, 0xa2ca6717
je 0x1400db4cc
xchg rsi, rsi
cmp eax, 0xd7b7e7a8
sete al
jmp 0x1400db4e3
mov al, 8
add al, 0xc
add al, 0x69
xor al, 0x7c
jmp 0x1400db4e3
xor al, al
mov dword [rsp - 0x44], 0x5e512521
xchg rcx, rbx
mov rcx, qword [rsp + 0x158]
xchg rcx, rbx
neg rsp
add rsp, 0xfffffffffffffec0
neg rsp
pop rdi
ret
Function at 0x1400dfb10
Capabilities:
Encrypt data using curve25519

Disassembly:
xchg rbx, r14
mov qword [rsp + 8], r14
xchg r14, rbx
nop
push r8
mov qword [rsp], rdi
add rsp, 0x7f1be51e
sub rsp, 0x7f1be5de
xchg r8, rax
mov r8, rax
xchg r8, rax
xchg rbx, rdx
mov rdx, rbx
xchg rdx, rbx
xchg rcx, rdx
mov r8, rcx
xchg rcx, rdx
xchg rcx, rdi
mov rcx, rdi
xchg rcx, rdi
mov edx, 0x569cefa
add edx, 0x75b3cd60
sub edx, 0x3d938f9c
sub edx, 0x3d8a0c9e
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.1400e0350
mov dword [rsp - 0x28], ecx
movzx eax, byte [rbx + 0x1f]
lea rcx, [rsp + 0x20]
and byte [rbx], 0xf8
and al, 0x3f
xchg r13, r13
or al, 0x40
xchg rsi, rbx
mov rdx, rsi
xchg rbx, rsi
mov byte [rbx + 0x1f], al
call fcn.1400e3a20
mov dword [rsp - 0x30], ebp
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.1400e3950
mov dword [rsp - 0x38], 0x74fa5744
mov rbx, qword [rsp + 0xd0]
sub rsp, 0x6e20db45
add rsp, 0x6e20dc05
pop rdi
mov r12, r12
ret
Function at 0x1400f40f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
add rsp, 0x401c0e8f
sub rsp, 0x401c0f3f
mov rsi, rcx
lea rdx, [rcx + 0x298]
lea rcx, [rsp + 0x20]
call fcn.140074970
or ebx, 0xffffffff
mov dword [rsp + 0xc0], ebx
mov rdi, qword [rax]
cmp byte [rdi], 0
je 0x1400f4171
mov rdx, rdi
lea rcx, [rsp + 0xc0]
mov r8d, 0x4d3a03a9
sub r8d, 0x43cc81f8
add r8d, 0xe47a068
xor r8d, 0x17b52218
inc rdi
call fcn.14008f1d0
cmp byte [rdi], 0
jne 0x1400f4133
mov ebx, dword [rsp + 0xc0]
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
not ebx
cmp rcx, rax
jne 0x1400f41a5
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x1cdc8ed5
xor ecx, 0x1cc7a616
xor ecx, 0x1b2843
rep stosb byte [rdi], al
jmp 0x1400f41aa
call fcn.140099d90
mov eax, dword [rsi + 0x2f0]
lea r11, [rsp + 0xb0]
xor eax, 0x3839
shl eax, 0x10
or eax, dword [rsi + 0x2d8]
mov rsi, qword [r11 + 0x20]
xor eax, ebx
mov rbx, qword [r11 + 0x18]
xor eax, 2
mov rsp, r11
pop rdi
ret

Function at 0x1400f42f0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0xe857841
add r10d, 0x627f7a4d
xor r10d, 0x71a3902b
add r10d, 0x62e2d594
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r9d, r9d
add r8d, r8d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x9d912e6
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
mov al, byte [rdx]
cvtdq2ps xmm2, xmm2
test al, al
je 0x1400f438d
mov r10, qword [rcx + 0x300]
movzx eax, al
inc rdx
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140148620]
mov al, byte [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test al, al
jne 0x1400f4351
mov eax, r9d
ret

Function at 0x1400f4484
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
mov r10d, 0x5f08cb6d
sub r10d, 0x3ff3f212
xor r10d, 0x49683889
xor r10d, 0x35f6d9eb
mov r8d, dword [rcx + 0x2f4]
xor eax, r10d
xor r8d, r10d
xor r11d, r11d
add r8d, r8d
mov r9d, r11d
movd xmm2, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x9d912e6
mov dword [rsp + 8], eax
movss xmm3, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm2, xmm2
test ax, ax
je 0x1400f4534
mov r10, qword [rcx + 0x300]
movzx eax, ax
nop
sub rdx, 0x4cadcbcd
add rdx, 0x4cadcbcf
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
xorps xmm0, xmmword [0x140148620]
movzx eax, word [rdx]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm2
addss xmm1, xmm3
cvttss2si ecx, xmm1
sub ecx, r8d
add r9d, ecx
test ax, ax
jne 0x1400f44ea
mov eax, r9d
ret
Function at 0x1400f4538
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
add rsp, 0xffffffffffffff60
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x1400f45d1
mov edx, dword [rcx + 0x2ec]
mov ecx, 0x37109afb
add ecx, 0x1d5d8917
xor ecx, 0x17818e6e
add ecx, 0x1f9a8dbd
mov eax, dword [rdi + 0x2e8]
xor edx, ecx
xor eax, ecx
lea rcx, [rbx - 1]
imul edx, eax
lea eax, [rbx + 4]
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.140099c50
test rsi, rsi
jle 0x1400f45ee
mov rcx, qword [rdi + 0x2f8]
mov edx, dword [rcx + rbx*4]
xor edx, 0x476b3605
mov dword [rax + rbx*4], edx
inc rbx
cmp rbx, rsi
jl 0x1400f45ad
jmp 0x1400f45ee
lea rdx, [rsp + 0xb0]
call fcn.1400f474c
test al, al
je 0x1400f4639
mov rax, qword [rsp + 0xb0]
lea rcx, [0x14000bb80]
mov qword [rsp + 0x98], 0x2df9ab62
add qword [rsp + 0x98], 0xc03c85b
sub qword [rsp + 0x98], 0x39fd73a5
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov rcx, qword [rdi + 0x318]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call fcn.1400f3698
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1400f8fd0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x60
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.140017a7c
mov edi, 0x20da270e
xor edi, 0x654b96d0
sub edi, 0x16e03040
xor edi, 0x1efcc590
mov r9, rax
mov ecx, edi
mov r15d, 0x5a0e10b1
add r15d, 0x863b725
sub r15d, 0x6271c6d7
test rbp, rbp
je 0x1400f9095
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x1400f9074
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x1400f90e0
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x1400f90e0
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x1400f90c0
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff56b97983
sub rdx, 0x1b8a824c
add rdx, 0x19f99b94
add rdx, 0x7fffffff
xor rdx, 0x2ad76d35
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x1400f9124
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.140017a7c
cmp qword [r14 + 0x38], rbx
jbe 0x1400f9170
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x1400f914c
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x1400f91a2
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x27e5c26b
sub ecx, 0x241b35ff
sub ecx, 0x3ca8c3c
rep stosb byte [rdi], al
jmp 0x1400f91a7
call fcn.140099d90
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret