joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401ac050
Capabilities:
Hash data using sha1

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r13
push r14
push r15
sub rsp, 0x70
mov rax, qword [0x1403dd7c0]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xd0]
xor esi, esi
mov rbp, qword [rsp + 0xd8]
mov rbx, rcx
mov dword [rcx + 0x50], esi
mov r13, r9
mov qword [rcx + 8], rsi
mov r15, r8
mov dword [rcx + 0x54], 0x67452301
mov rdi, rdx
mov dword [rcx + 0x58], 0xefcdab89
mov dword [rcx + 0x5c], 0x98badcfe
mov dword [rcx + 0x60], 0x10325476
mov dword [rcx + 0x64], 0xc3d2e1f0
mov ecx, 0x4e28
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x30], rbp
call fcn.1400b5b50
mov r14, rax
test rax, rax
je 0x1401ac25c
mov qword [rsp + 0x68], r12
mov rcx, rdi
mov r12b, 1
mov dword [rsp + 0x48], esi
call fcn.140191b00
test al, al
jne 0x1401ac23e
nop word [rax + rax]
mov qword [rsp + 0x28], r13
lea r9, [rsp + 0x48]
mov r8d, 0x4e20
mov qword [rsp + 0x20], r15
mov rdx, r14
mov rcx, rdi
call fcn.140191d50
movzx r12d, al
test al, al
je 0x1401ac23e
mov esi, dword [rsp + 0x48]
test esi, esi
je 0x1401ac218
test rbp, rbp
je 0x1401ac14f
mov r8d, esi
mov rdx, r14
mov rcx, rbp
call fcn.1400e2340
mov esi, dword [rsp + 0x48]
mov rbp, r14
cmp esi, 1
jb 0x1401ac1fd
nop dword [rax + rax]
mov edx, dword [rbx + 0x50]
test edx, edx
jne 0x1401ac1a5
cmp esi, 0x40
jb 0x1401ac1a5
movups xmm0, xmmword [rbp]
mov rcx, rbx
movups xmmword [rbx + 0x10], xmm0
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [rbx + 0x20], xmm1
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rbx + 0x30], xmm0
movups xmm1, xmmword [rbp + 0x30]
movups xmmword [rbx + 0x40], xmm1
call fcn.1401aa800
add qword [rbx + 8], 0x200
add rbp, 0x40
add esi, 0xffffffc0
jmp 0x1401ac1ec
mov ecx, 0x40
mov eax, esi
sub ecx, edx
cmp esi, ecx
cmovae eax, ecx
lea rcx, [rbx + 0x10]
add rcx, rdx
mov r8d, eax
mov rdx, rbp
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx + 0x50], edi
add rbp, rdi
sub esi, edi
cmp dword [rbx + 0x50], 0x40
jne 0x1401ac1ec
mov rcx, rbx
call fcn.1401aa800
add qword [rbx + 8], 0x200
mov dword [rbx + 0x50], 0
test esi, esi
jne 0x1401ac160
mov esi, dword [rsp + 0x48]
mov rdi, qword [rsp + 0x38]
test r15, r15
je 0x1401ac213
mov edx, esi
mov r8, r13
mov rcx, r15
call fcn.14016b7e0
test al, al
jne 0x1401ac22a
mov rbp, qword [rsp + 0x30]
mov rcx, rdi
call fcn.140191b00
test al, al
je 0x1401ac100
jmp 0x1401ac23e
mov rax, qword [r13]
lea rdx, str.RIPEMD128_aborted_by_application
mov rcx, r13
call qword [rax + 0x28]
xor r12b, r12b
mov rcx, r14
call fcn.140278f60
mov rdx, qword [rsp + 0x40]
mov rcx, rbx
call fcn.1401ac280
movzx eax, r12b
mov r12, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.140278f40
add rsp, 0x70
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x1401ac4e0
Capabilities:
Hash data using sha1

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
xor eax, eax
mov dword [rcx + 0x54], 0x67452301
mov dword [rcx + 0x50], eax
mov rdi, r9
mov qword [rcx + 8], rax
mov rbx, rcx
mov dword [rcx + 0x58], 0xefcdab89
mov dword [rcx + 0x5c], 0x98badcfe
mov dword [rcx + 0x60], 0x10325476
mov dword [rcx + 0x64], 0xc3d2e1f0
call fcn.1401ac3f0
mov rdx, rdi
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.1401ac280
Function at 0x1401ad710
Capabilities:
Hash data using ripemd256
Hash data with md5

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r13
push r14
push r15
sub rsp, 0x70
mov rax, qword [0x1403dd7c0]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xd0]
mov r13, r9
mov rbp, qword [rsp + 0xd8]
mov r15, r8
mov qword [rsp + 0x38], rdx
mov rdi, rdx
mov qword [rsp + 0x40], rax
mov rbx, rcx
mov qword [rsp + 0x30], rbp
test rax, rax
je 0x1401ad93e
xor esi, esi
mov dword [rcx + 0x54], 0x67452301
mov dword [rcx + 0x50], esi
mov qword [rcx + 8], rsi
mov dword [rcx + 0x58], 0xefcdab89
mov dword [rcx + 0x5c], 0x98badcfe
mov dword [rcx + 0x60], 0x10325476
mov dword [rcx + 0x64], 0x76543210
mov dword [rcx + 0x68], 0xfedcba98
mov dword [rcx + 0x6c], 0x89abcdef
mov dword [rcx + 0x70], 0x1234567
mov ecx, 0x4e28
call fcn.1400b5b50
mov r14, rax
test rax, rax
je 0x1401ad93e
mov qword [rsp + 0x68], r12
mov rcx, rdi
mov r12b, 1
mov dword [rsp + 0x48], esi
call fcn.140191b00
test al, al
jne 0x1401ad91e
nop word [rax + rax]
mov qword [rsp + 0x28], r13
lea r9, [rsp + 0x48]
mov r8d, 0x4e20
mov qword [rsp + 0x20], r15
mov rdx, r14
mov rcx, rdi
call fcn.140191d50
movzx r12d, al
test al, al
je 0x1401ad91e
mov esi, dword [rsp + 0x48]
test esi, esi
je 0x1401ad8f8
test rbp, rbp
je 0x1401ad82f
mov r8d, esi
mov rdx, r14
mov rcx, rbp
call fcn.1400e2340
mov esi, dword [rsp + 0x48]
mov rbp, r14
cmp esi, 1
jb 0x1401ad8dd
nop dword [rax + rax]
mov edx, dword [rbx + 0x50]
test edx, edx
jne 0x1401ad885
cmp esi, 0x40
jb 0x1401ad885
movups xmm0, xmmword [rbp]
mov rcx, rbx
movups xmmword [rbx + 0x10], xmm0
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [rbx + 0x20], xmm1
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rbx + 0x30], xmm0
movups xmm1, xmmword [rbp + 0x30]
movups xmmword [rbx + 0x40], xmm1
call fcn.1401ac5a0
add qword [rbx + 8], 0x200
add rbp, 0x40
add esi, 0xffffffc0
jmp 0x1401ad8cc
mov ecx, 0x40
mov eax, esi
sub ecx, edx
cmp esi, ecx
cmovae eax, ecx
lea rcx, [rbx + 0x10]
add rcx, rdx
mov r8d, eax
mov rdx, rbp
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx + 0x50], edi
add rbp, rdi
sub esi, edi
cmp dword [rbx + 0x50], 0x40
jne 0x1401ad8cc
mov rcx, rbx
call fcn.1401ac5a0
add qword [rbx + 8], 0x200
mov dword [rbx + 0x50], 0
test esi, esi
jne 0x1401ad840
mov esi, dword [rsp + 0x48]
mov rdi, qword [rsp + 0x38]
test r15, r15
je 0x1401ad8f3
mov edx, esi
mov r8, r13
mov rcx, r15
call fcn.14016b7e0
test al, al
jne 0x1401ad90a
mov rbp, qword [rsp + 0x30]
mov rcx, rdi
call fcn.140191b00
test al, al
je 0x1401ad7e0
jmp 0x1401ad91e
mov rax, qword [r13]
lea rdx, str.RIPEMD256_aborted_by_application
mov rcx, r13
call qword [rax + 0x28]
xor r12b, r12b
mov rcx, r14
call fcn.140278f60
mov rdx, qword [rsp + 0x40]
mov rcx, rbx
call fcn.1401ad960
movzx eax, r12b
mov r12, qword [rsp + 0x68]
jmp 0x1401ad940
xor al, al
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.140278f40
add rsp, 0x70
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x1401adc20
Capabilities:
Hash data using ripemd256
Hash data with md5

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
xor eax, eax
mov dword [rcx + 0x54], 0x67452301
mov dword [rcx + 0x50], eax
mov rdi, r9
mov qword [rcx + 8], rax
mov rbx, rcx
mov dword [rcx + 0x58], 0xefcdab89
mov dword [rcx + 0x5c], 0x98badcfe
mov dword [rcx + 0x60], 0x10325476
mov dword [rcx + 0x64], 0x76543210
mov dword [rcx + 0x68], 0xfedcba98
mov dword [rcx + 0x6c], 0x89abcdef
mov dword [rcx + 0x70], 0x1234567
call fcn.1401adb30
mov rdx, rdi
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.1401ad960
Function at 0x1401af600
Capabilities:
Hash data using ripemd320
Hash data using sha1

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r13
push r14
push r15
sub rsp, 0x70
mov rax, qword [0x1403dd7c0]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xd0]
mov r13, r9
mov rbp, qword [rsp + 0xd8]
mov r15, r8
mov qword [rsp + 0x38], rdx
mov rdi, rdx
mov qword [rsp + 0x40], rax
mov rbx, rcx
mov qword [rsp + 0x30], rbp
test rax, rax
je 0x1401af83e
xor esi, esi
mov dword [rcx + 0x54], 0x67452301
mov dword [rcx + 0x50], esi
mov qword [rcx + 8], rsi
mov dword [rcx + 0x58], 0xefcdab89
mov dword [rcx + 0x5c], 0x98badcfe
mov dword [rcx + 0x60], 0x10325476
mov dword [rcx + 0x64], 0xc3d2e1f0
mov dword [rcx + 0x68], 0x76543210
mov dword [rcx + 0x6c], 0xfedcba98
mov dword [rcx + 0x70], 0x89abcdef
mov dword [rcx + 0x74], 0x1234567
mov dword [rcx + 0x78], 0x3c2d1e0f
mov ecx, 0x4e28
call fcn.1400b5b50
mov r14, rax
test rax, rax
je 0x1401af83e
mov qword [rsp + 0x68], r12
mov rcx, rdi
mov r12b, 1
mov dword [rsp + 0x48], esi
call fcn.140191b00
test al, al
jne 0x1401af81e
nop dword [rax]
nop word [rax + rax]
mov qword [rsp + 0x28], r13
lea r9, [rsp + 0x48]
mov r8d, 0x4e20
mov qword [rsp + 0x20], r15
mov rdx, r14
mov rcx, rdi
call fcn.140191d50
movzx r12d, al
test al, al
je 0x1401af81e
mov esi, dword [rsp + 0x48]
test esi, esi
je 0x1401af7f8
test rbp, rbp
je 0x1401af72f
mov r8d, esi
mov rdx, r14
mov rcx, rbp
call fcn.1400e2340
mov esi, dword [rsp + 0x48]
mov rbp, r14
cmp esi, 1
jb 0x1401af7dd
nop dword [rax + rax]
mov edx, dword [rbx + 0x50]
test edx, edx
jne 0x1401af785
cmp esi, 0x40
jb 0x1401af785
movups xmm0, xmmword [rbp]
mov rcx, rbx
movups xmmword [rbx + 0x10], xmm0
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [rbx + 0x20], xmm1
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rbx + 0x30], xmm0
movups xmm1, xmmword [rbp + 0x30]
movups xmmword [rbx + 0x40], xmm1
call fcn.1401adcf0
add qword [rbx + 8], 0x200
add rbp, 0x40
add esi, 0xffffffc0
jmp 0x1401af7cc
mov ecx, 0x40
mov eax, esi
sub ecx, edx
cmp esi, ecx
cmovae eax, ecx
lea rcx, [rbx + 0x10]
add rcx, rdx
mov r8d, eax
mov rdx, rbp
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx + 0x50], edi
add rbp, rdi
sub esi, edi
cmp dword [rbx + 0x50], 0x40
jne 0x1401af7cc
mov rcx, rbx
call fcn.1401adcf0
add qword [rbx + 8], 0x200
mov dword [rbx + 0x50], 0
test esi, esi
jne 0x1401af740
mov esi, dword [rsp + 0x48]
mov rdi, qword [rsp + 0x38]
test r15, r15
je 0x1401af7f3
mov edx, esi
mov r8, r13
mov rcx, r15
call fcn.14016b7e0
test al, al
jne 0x1401af80a
mov rbp, qword [rsp + 0x30]
mov rcx, rdi
call fcn.140191b00
test al, al
je 0x1401af6e0
jmp 0x1401af81e
mov rax, qword [r13]
lea rdx, str.RIPEMD320_aborted_by_application
mov rcx, r13
call qword [rax + 0x28]
xor r12b, r12b
mov rcx, r14
call fcn.140278f60
mov rdx, qword [rsp + 0x40]
mov rcx, rbx
call fcn.1401af860
movzx eax, r12b
mov r12, qword [rsp + 0x68]
jmp 0x1401af840
xor al, al
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.140278f40
add rsp, 0x70
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x1401afb50
Capabilities:
Hash data using ripemd320
Hash data using sha1

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
xor eax, eax
mov dword [rcx + 0x54], 0x67452301
mov dword [rcx + 0x50], eax
mov rdi, r9
mov qword [rcx + 8], rax
mov rbx, rcx
mov dword [rcx + 0x58], 0xefcdab89
mov dword [rcx + 0x5c], 0x98badcfe
mov dword [rcx + 0x60], 0x10325476
mov dword [rcx + 0x64], 0xc3d2e1f0
mov dword [rcx + 0x68], 0x76543210
mov dword [rcx + 0x6c], 0xfedcba98
mov dword [rcx + 0x70], 0x89abcdef
mov dword [rcx + 0x74], 0x1234567
mov dword [rcx + 0x78], 0x3c2d1e0f
call fcn.1401afa60
mov rdx, rdi
mov rcx, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.1401af860

Function at 0x1401afbd0
Capabilities:
Hash data with md5

Disassembly:
lea rax, vtable._ckMd4.0
mov dword [rcx + 8], 0x67452301
mov qword [rcx], rax
xor eax, eax
mov qword [rcx + 0x18], rax
mov rax, rcx
mov dword [rcx + 0xc], 0xefcdab89
mov dword [rcx + 0x10], 0x98badcfe
mov dword [rcx + 0x14], 0x10325476
ret

Function at 0x1401afc40
Capabilities:
Hash data with md5

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
mov rax, qword [0x1403dd7c0]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov r13, qword [rsp + 0xb0]
mov r14, r9
mov rbp, qword [rsp + 0xb8]
mov rsi, r8
mov r15, rdx
mov rdi, rcx
test r13, r13
je 0x1401afd80
mov dword [rcx + 8], 0x67452301
xor r12d, r12d
mov qword [rcx + 0x18], r12
mov dword [rcx + 0xc], 0xefcdab89
mov dword [rcx + 0x10], 0x98badcfe
mov dword [rcx + 0x14], 0x10325476
mov ecx, 0x4e28
call fcn.1400b5b50
mov rbx, rax
test rax, rax
je 0x1401afd80
mov dword [rsp + 0x30], r12d
mov rcx, r15
mov r12b, 1
call fcn.140191b00
test al, al
jne 0x1401afd67
nop word [rax + rax]
mov qword [rsp + 0x28], r14
lea r9, [rsp + 0x30]
mov r8d, 0x4e20
mov qword [rsp + 0x20], rsi
mov rdx, rbx
mov rcx, r15
call fcn.140191d50
test al, al
je 0x1401afd67
mov r8d, dword [rsp + 0x30]
test r8d, r8d
je 0x1401afd46
test rbp, rbp
je 0x1401afd23
mov rdx, rbx
mov rcx, rbp
call fcn.1400e2340
mov r8d, dword [rsp + 0x30]
mov rdx, rbx
mov rcx, rdi
call fcn.1401b0590
test rsi, rsi
je 0x1401afd46
mov edx, dword [rsp + 0x30]
mov r8, r14
mov rcx, rsi
call fcn.14016b7e0
test al, al
jne 0x1401afd54
mov rcx, r15
call fcn.140191b00
test al, al
je 0x1401afce0
jmp 0x1401afd67
mov rax, qword [r14]
lea rdx, str.MD4_aborted_by_application
mov rcx, r14
call qword [rax + 0x28]
xor r12b, r12b
mov rcx, rbx
call fcn.140278f60
mov rdx, r13
mov rcx, rdi
call fcn.1401afda0
movzx eax, r12b
jmp 0x1401afd82
xor al, al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140278f40
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x1401afec0
Capabilities:
Hash data with md5

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x70
mov rax, qword [0x1403dd7c0]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rsi, r8
mov rbx, rdx
mov rdi, rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x20]
call fcn.1400e1cc0
nop
lea r8, [rsp + 0x20]
xor edx, edx
mov rcx, rbx
call fcn.1400a9e30
xor eax, eax
mov qword [rdi + 0x18], rax
mov dword [rdi + 8], 0x67452301
mov dword [rdi + 0xc], 0xefcdab89
mov dword [rdi + 0x10], 0x98badcfe
mov dword [rdi + 0x14], 0x10325476
lea rcx, [rsp + 0x20]
call fcn.1400e6840
mov ebx, eax
lea rcx, [rsp + 0x20]
call fcn.1400e6510
mov rdx, rax
mov r8d, ebx
mov rcx, rdi
call fcn.1401b0590
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.1401afda0
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.1400e2340
nop
lea rcx, [rsp + 0x20]
call fcn.1400e1e70
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.140278f40
add rsp, 0x70
pop rdi
pop rsi
pop rbx
ret
Function at 0x1401b08d0
Capabilities:
Hash data using sha1
Hash data using sha224
Hash data using sha256
Resolve function by parsing pe exports

Disassembly:
cmp dword [rcx + 0x10], 0x100
jle fcn.1401b3350
jmp fcn.1401b54a0

Function at 0x1401b08f0
Capabilities:
Hash data using sha1
Hash data using sha224
Hash data using sha256

Disassembly:
mov edx, dword [rcx + 0x10]
xor r8d, r8d
sub edx, 0xa0
je 0x1401b0a80
sub edx, 0x40
je 0x1401b0992
sub edx, 0x20
je 0x1401b0a40
sub edx, 0x80
je 0x1401b09d0
cmp edx, 0x80
jne 0x1401b0aa7
mov rax, qword [0x14047a8d0]
mov qword [rcx + 0x40], rax
mov rax, qword [0x14047a8d8]
mov qword [rcx + 0x48], rax
mov rax, qword [0x14047a8e0]
mov qword [rcx + 0x50], rax
mov rax, qword [0x14047a8e8]
mov qword [rcx + 0x58], rax
mov rax, qword [0x14047a8f0]
mov qword [rcx + 0x60], rax
mov rax, qword [0x14047a8f8]
mov qword [rcx + 0x68], rax
mov rax, qword [0x14047a900]
mov qword [rcx + 0x70], rax
mov rax, qword [0x14047a908]
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x80], r8
mov qword [rcx + 0x88], r8
mov dword [rcx + 0x14], 0xc1059ed8
mov dword [rcx + 0x18], 0x367cd507
mov dword [rcx + 0x1c], 0x3070dd17
mov dword [rcx + 0x20], 0xf70e5939
mov dword [rcx + 0x24], 0xffc00b31
mov dword [rcx + 0x28], 0x68581511
mov dword [rcx + 0x2c], 0x64f98fa7
mov dword [rcx + 0x30], 0xbefa4fa4
mov qword [rcx + 0x34], r8
ret
mov rax, qword [0x14047a610]
mov qword [rcx + 0x40], rax
mov rax, qword [0x14047a618]
mov qword [rcx + 0x48], rax
mov rax, qword [0x14047a620]
mov qword [rcx + 0x50], rax
mov rax, qword [0x14047a628]
mov qword [rcx + 0x58], rax
mov rax, qword [0x14047a630]
mov qword [rcx + 0x60], rax
mov rax, qword [0x14047a638]
mov qword [rcx + 0x68], rax
mov rax, qword [0x14047a640]
mov qword [rcx + 0x70], rax
mov rax, qword [0x14047a648]
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x80], r8
mov qword [rcx + 0x88], r8
ret
mov dword [rcx + 0x14], 0x6a09e667
mov dword [rcx + 0x18], 0xbb67ae85
mov dword [rcx + 0x1c], 0x3c6ef372
mov dword [rcx + 0x20], 0xa54ff53a
mov dword [rcx + 0x24], 0x510e527f
mov dword [rcx + 0x28], 0x9b05688c
mov dword [rcx + 0x2c], 0x1f83d9ab
mov dword [rcx + 0x30], 0x5be0cd19
mov qword [rcx + 0x34], r8
ret
mov dword [rcx + 0x14], 0x67452301
mov dword [rcx + 0x18], 0xefcdab89
mov dword [rcx + 0x1c], 0x98badcfe
mov dword [rcx + 0x20], 0x10325476
mov dword [rcx + 0x24], 0xc3d2e1f0
mov qword [rcx + 0x34], r8
ret
Function at 0x1401b28b0
Capabilities:
Hash data using sha1
Hash data using sha224
Hash data using sha256

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov edi, ecx
xor esi, esi
mov qword [rsp + 0x38], rsi
mov ecx, 0x110
call fcn.140279230
mov rbx, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1401b2abc
mov rcx, rax
call fcn.1400d3660
nop
lea rax, vtable._ckSha2.0
mov qword [rbx], rax
call fcn.1400b5b00
mov byte [0x1403dafd0], al
call fcn.1401b23c0
test edi, edi
jle 0x1401b2ab7
mov ecx, edi
sub ecx, 0xa0
je 0x1401b2a90
sub ecx, 0x40
je 0x1401b2a50
sub ecx, 0x20
je 0x1401b2a10
sub ecx, 0x80
je 0x1401b29a0
cmp ecx, 0x80
jne 0x1401b2ab7
mov rax, qword [0x14047a8d0]
mov qword [rbx + 0x40], rax
mov rax, qword [0x14047a8d8]
mov qword [rbx + 0x48], rax
mov rax, qword [0x14047a8e0]
mov qword [rbx + 0x50], rax
mov rax, qword [0x14047a8e8]
mov qword [rbx + 0x58], rax
mov rax, qword [0x14047a8f0]
mov qword [rbx + 0x60], rax
mov rax, qword [0x14047a8f8]
mov qword [rbx + 0x68], rax
mov rax, qword [0x14047a900]
mov qword [rbx + 0x70], rax
mov rax, qword [0x14047a908]
jmp 0x1401b29f4
mov rax, qword [0x14047a610]
mov qword [rbx + 0x40], rax
mov rax, qword [0x14047a618]
mov qword [rbx + 0x48], rax
mov rax, qword [0x14047a620]
mov qword [rbx + 0x50], rax
mov rax, qword [0x14047a628]
mov qword [rbx + 0x58], rax
mov rax, qword [0x14047a630]
mov qword [rbx + 0x60], rax
mov rax, qword [0x14047a638]
mov qword [rbx + 0x68], rax
mov rax, qword [0x14047a640]
mov qword [rbx + 0x70], rax
mov rax, qword [0x14047a648]
mov qword [rbx + 0x78], rax
mov qword [rbx + 0x80], rsi
mov qword [rbx + 0x88], rsi
jmp 0x1401b2ab7
mov dword [rbx + 0x14], 0x6a09e667
mov dword [rbx + 0x18], 0xbb67ae85
mov dword [rbx + 0x1c], 0x3c6ef372
mov dword [rbx + 0x20], 0xa54ff53a
mov dword [rbx + 0x24], 0x510e527f
mov dword [rbx + 0x28], 0x9b05688c
mov dword [rbx + 0x2c], 0x1f83d9ab
mov dword [rbx + 0x30], 0x5be0cd19
jmp 0x1401b2ab3
mov dword [rbx + 0x14], 0xc1059ed8
mov dword [rbx + 0x18], 0x367cd507
mov dword [rbx + 0x1c], 0x3070dd17
mov dword [rbx + 0x20], 0xf70e5939
mov dword [rbx + 0x24], 0xffc00b31
mov dword [rbx + 0x28], 0x68581511
mov dword [rbx + 0x2c], 0x64f98fa7
mov dword [rbx + 0x30], 0xbefa4fa4
jmp 0x1401b2ab3
mov dword [rbx + 0x14], 0x67452301
mov dword [rbx + 0x18], 0xefcdab89
mov dword [rbx + 0x1c], 0x98badcfe
mov dword [rbx + 0x20], 0x10325476
mov dword [rbx + 0x24], 0xc3d2e1f0
mov qword [rbx + 0x34], rsi
mov dword [rbx + 0x10], edi
jmp 0x1401b2abf
mov rbx, rsi
mov qword [rsp + 0x38], rbx
mov rax, rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret

Function at 0x1401b2af0
Capabilities:
Hash data using sha1
Hash data using sha224
Hash data using sha256

Disassembly:
mov ecx, 0x100
jmp fcn.1401b28b0
Function at 0x1401b8d90
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x1e0
mov rax, qword [0x1403dd7c0]
xor rax, rsp
mov qword [rsp + 0x1d0], rax
mov rsi, r8
mov edi, edx
mov rbx, rcx
test r8, r8
jne 0x1401b8dc8
xor al, al
jmp 0x1401b8ea0
lea rcx, [rsp + 0x20]
call fcn.1401b82d0
test edi, edi
je 0x1401b8dee
test rbx, rbx
je 0x1401b8dee
mov r9b, reloc.WS2_32.dll_select
lea rcx, [rsp + 0x20]
mov r8d, edi
mov rdx, rbx
call fcn.1401b9680
movzx eax, byte [rsp + 0x1c0]
mov byte [rsp + 0x187], 0
mov byte [rsp + rax + 0xf8], 6
movzx edx, byte [rsp + 0x1c0]
or byte [rsp + 0x187], 0x80
inc dl
cmp dl, 0x8f
jae 0x1401b8e3d
movzx eax, dl
lea rcx, [rsp + 0xf8]
add rcx, rax
mov eax, 0x8f
sub al, dl
xor edx, edx
movzx r8d, al
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x30]
mov edx, reloc.WS2_32.dll_select
nop word [rax + rax]
mov rcx, qword [rax + 0xc8]
xor qword [rax], rcx
lea rax, [rax + 8]
sub rdx, 1
jne 0x1401b8e50
lea rcx, [rsp + 0x30]
call fcn.1401b83d0
mov eax, dword [rsp + 0x48]
lea rcx, [rsp + 0x20]
movaps xmm0, xmmword [rsp + 0x30]
movsd xmm1, qword [rsp + 0x40]
movups xmmword [rsi], xmm0
movsd qword [rsi + 0x10], xmm1
mov dword [rsi + 0x18], eax
lea rax, vtable._ckSha3.0
mov qword [rsp + 0x20], rax
call fcn.1400d3770
mov al, 1
mov rcx, qword [rsp + 0x1d0]
xor rcx, rsp
call fcn.140278f40
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret

Function at 0x1401b8f10
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x1e0
mov rax, qword [0x1403dd7c0]
xor rax, rsp
mov qword [rsp + 0x1d0], rax
mov rsi, r8
mov edi, edx
mov rbx, rcx
test r8, r8
jne 0x1401b8f48
xor al, al
jmp 0x1401b9017
lea rcx, [rsp + 0x20]
call fcn.1401b82d0
test edi, edi
je 0x1401b8f6e
test rbx, rbx
je 0x1401b8f6e
mov r9b, send
lea rcx, [rsp + 0x20]
mov r8d, edi
mov rdx, rbx
call fcn.1401b9680
movzx eax, byte [rsp + 0x1c0]
mov byte [rsp + 0x17f], 0
mov byte [rsp + rax + 0xf8], 6
movzx edx, byte [rsp + 0x1c0]
or byte [rsp + 0x17f], 0x80
inc dl
cmp dl, 0x87
jae 0x1401b8fbd
movzx eax, dl
lea rcx, [rsp + 0xf8]
add rcx, rax
mov eax, 0x87
sub al, dl
xor edx, edx
movzx r8d, al
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x30]
mov edx, send
nop word [rax + rax]
mov rcx, qword [rax + 0xc8]
xor qword [rax], rcx
lea rax, [rax + 8]
sub rdx, 1
jne 0x1401b8fd0
lea rcx, [rsp + 0x30]
call fcn.1401b83d0
movaps xmm0, xmmword [rsp + 0x30]
lea rax, vtable._ckSha3.0
movaps xmm1, xmmword [rsp + 0x40]
lea rcx, [rsp + 0x20]
movups xmmword [rsi], xmm0
mov qword [rsp + 0x20], rax
movups xmmword [rsi + 0x10], xmm1
call fcn.1400d3770
mov al, 1
mov rcx, qword [rsp + 0x1d0]
xor rcx, rsp
call fcn.140278f40
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret