joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4206e0
Capabilities:
Get system information on windows
Read file via mapping

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x24
mov al, byte [0x53e868]
mov edi, dword [esp + 0x44]
mov esi, dword [esp + 0x40]
mov ebx, dword [esp + 0x3c]
test al, al
je 0x4207a5
push dword [0x53e864]
push dword [0x53e860]
push edi
push esi
call fcn.004ba820
add esp, 0x10
mov edi, eax
push ebx
call dword [sym.imp.msvcrt.dll__get_osfhandle]
add esp, 4
mov ecx, dword [esp + 0x4c]
and ecx, 2
add ecx, 2
push 0
push 0
push 0
push ecx
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
xor ebx, ebx
test eax, eax
je 0x420797
mov ebp, eax
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
sub esi, edi
mov edx, 4
lea eax, [edi + eax]
test cl, 2
mov ecx, 0xf001f
cmovne edx, ecx
push eax
push esi
push 0
push edx
push ebp
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
test eax, eax
je 0x420790
mov esi, eax
push 0x10
call fcn.00493b40
add esp, 4
mov ecx, dword [esp + 0x48]
mov ebx, eax
mov dword [eax], esi
mov dword [ebx + 4], ecx
mov dword [ebx + 8], edi
mov dword [ebx + 0xc], ebp
jmp 0x420797
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x38]
mov dword [eax], ebx
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret
push 0x53e868
call fcn.00479440
add esp, 4
test eax, eax
je 0x420700
mov eax, esp
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [esp + 0x1c]
mov dword [0x53e864], 0
mov dword [0x53e860], eax
push 0x53e868
call fcn.004794d0
add esp, 4
jmp 0x420700

Function at 0x4227d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
push edi
push esi
sub esp, 0x404
mov eax, dword [esp + 0x41c]
test eax, eax
je 0x422804
lea ecx, [esp + 0x420]
lea edx, [esp + 4]
mov dword [esp], ecx
push ecx
push eax
push 0x400
push edx
call fcn.004c5e50
add esp, 0x10
jmp 0x422866
mov eax, dword [esp + 0x414]
test eax, eax
je 0x422829
lea ecx, [esp + 4]
push eax
push str.Assertion_failed:__s
push 0x400
push ecx
call fcn.004226a0
add esp, 0x10
jmp 0x422866
mov byte [esp + 0x20], 0
mov dword [esp + 0x1c], 0x64656c69
mov dword [esp + 0x18], 0x6166206e
mov dword [esp + 0x14], 0x6f697472
mov dword [esp + 0x10], 0x65737361
mov dword [esp + 0xc], 0x20646569
mov dword [esp + 8], 0x66696365
mov dword [esp + 4], 0x70736e55
mov esi, dword [esp + 0x418]
mov ebx, dword [sym.imp.msvcrt.dll__errno]
lea edi, [esp + 4]
nop word [eax + eax]
push edi
call sub.msvcrt.dll_strlen
add esp, 4
push eax
push edi
push 2
call sub.msvcrt.dll__write_1
add esp, 0xc
cmp eax, 0xffffffff
jne 0x4228b0
call ebx
cmp dword [eax], 4
je 0x422880
nop word cs:[eax + eax]
nop dword [eax + eax]
push 1
push 0x520561
push 2
call sub.msvcrt.dll__write_1
add esp, 0xc
cmp eax, 0xffffffff
jne 0x4228cd
call ebx
cmp dword [eax], 4
je 0x4228b0
push edi
push esi
push 7
call fcn.00422550
add esp, 0xc
call sub.msvcrt.dll_abort
nop
sub esp, 0x10
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x14]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, esp
push 2
push eax
push 2
call dword [0x519298]
add esp, 0x1c
ret
Function at 0x433140
Capabilities:
Encode data using xor
Encrypt data using aes
Reference aes constants

Disassembly:
push ebp
push ebx
push edi
push esi
mov esi, dword [esp + 0x1c]
push esi
push dword [esp + 0x1c]
push dword [esp + 0x1c]
call sym.fastboot.exe_AES_set_encrypt_key
add esp, 0xc
test eax, eax
js 0x433354
mov ecx, dword [esi + 0xf0]
lea eax, [ecx*4]
test eax, eax
jle 0x4331ce
mov ecx, 4
nop word [eax + eax]
mov edx, dword [esi + ecx*4 - 0x10]
mov edi, dword [esi + eax*4]
mov dword [esi + ecx*4 - 0x10], edi
mov dword [esi + eax*4], edx
mov edx, dword [esi + ecx*4 - 0xc]
mov edi, dword [esi + eax*4 + 4]
mov dword [esi + ecx*4 - 0xc], edi
mov dword [esi + eax*4 + 4], edx
mov edx, dword [esi + ecx*4 - 8]
mov edi, dword [esi + eax*4 + 8]
mov dword [esi + ecx*4 - 8], edi
mov dword [esi + eax*4 + 8], edx
mov edx, dword [esi + ecx*4 - 4]
mov edi, dword [esi + eax*4 + 0xc]
mov dword [esi + ecx*4 - 4], edi
mov dword [esi + eax*4 + 0xc], edx
add eax, 0xfffffffc
cmp ecx, eax
lea ecx, [ecx + 4]
jl 0x433180
mov ecx, dword [esi + 0xf0]
xor eax, eax
cmp ecx, 2
jl 0x433354
lea ecx, [esi + 0x1c]
mov eax, 1
nop word cs:[eax + eax]
nop dword [eax + eax]
mov ebx, dword [ecx - 0xc]
inc eax
mov edi, ebx
movzx ebp, bh
movzx edx, bl
shr ebx, 0x18
shr edi, 0xe
movzx ebx, byte [ebx*4 + 0x5277f0]
movzx ebp, byte [ebp*4 + 0x5277f0]
movzx edx, byte [edx*4 + 0x5277f0]
and edi, 0x3fc
movzx edi, byte [edi + 0x5277f0]
mov edi, dword [edi*4 + 0x5287f0]
xor edi, dword [ebx*4 + 0x5283f0]
mov ebx, dword [ecx - 8]
xor edi, dword [ebp*4 + 0x528bf0]
movzx ebp, bl
xor edi, dword [edx*4 + 0x528ff0]
mov edx, ebx
shr edx, 0xe
and edx, 0x3fc
movzx edx, byte [edx + 0x5277f0]
mov dword [ecx - 0xc], edi
movzx edi, bh
shr ebx, 0x18
movzx ebx, byte [ebx*4 + 0x5277f0]
movzx edi, byte [edi*4 + 0x5277f0]
mov edx, dword [edx*4 + 0x5287f0]
xor edx, dword [ebx*4 + 0x5283f0]
xor edx, dword [edi*4 + 0x528bf0]
movzx edi, byte [ebp*4 + 0x5277f0]
xor edx, dword [edi*4 + 0x528ff0]
mov dword [ecx - 8], edx
mov ebx, dword [ecx - 4]
mov edx, ebx
movzx edi, bh
movzx ebp, bl
shr ebx, 0x18
shr edx, 0xe
movzx ebx, byte [ebx*4 + 0x5277f0]
movzx edi, byte [edi*4 + 0x5277f0]
and edx, 0x3fc
movzx edx, byte [edx + 0x5277f0]
mov edx, dword [edx*4 + 0x5287f0]
xor edx, dword [ebx*4 + 0x5283f0]
xor edx, dword [edi*4 + 0x528bf0]
movzx edi, byte [ebp*4 + 0x5277f0]
xor edx, dword [edi*4 + 0x528ff0]
mov dword [ecx - 4], edx
mov ebx, dword [ecx]
mov edx, ebx
movzx edi, bh
movzx ebp, bl
shr ebx, 0x18
shr edx, 0xe
movzx ebx, byte [ebx*4 + 0x5277f0]
movzx edi, byte [edi*4 + 0x5277f0]
and edx, 0x3fc
movzx edx, byte [edx + 0x5277f0]
mov edx, dword [edx*4 + 0x5287f0]
xor edx, dword [ebx*4 + 0x5283f0]
xor edx, dword [edi*4 + 0x528bf0]
movzx edi, byte [ebp*4 + 0x5277f0]
xor edx, dword [edi*4 + 0x528ff0]
mov dword [ecx], edx
add ecx, 0x10
cmp eax, dword [esi + 0xf0]
jl 0x4331f0
xor eax, eax
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x433360
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x20
mov edi, dword [esp + 0x44]
lea eax, [edi - 0x10]
cmp eax, 0x7fffffe7
mov eax, 0xffffffff
ja 0x43344d
mov ecx, edi
and ecx, 7
jne 0x43344d
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov esi, 0x525c80
test eax, eax
cmovne esi, eax
lea eax, [ecx + 8]
push edi
push dword [esp + 0x44]
mov dword [esp + 0x1c], eax
push eax
call sub.msvcrt.dll_memmove
add esp, 0xc
movsd xmm0, qword [esi]
shr edi, 3
xor eax, eax
mov ebx, 1
mov esi, esp
mov dword [esp + 0x10], edi
movsd qword [esp], xmm0
nop dword [eax]
mov ebp, dword [esp + 0x14]
test edi, edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ebx
je 0x433425
movsd xmm0, qword [ebp]
movsd qword [esp + 8], xmm0
push dword [esp + 0x34]
push esi
push esi
call sym.fastboot.exe_AES_encrypt
add esp, 0xc
mov eax, ebx
xor byte [esp + 7], bl
xor byte [esp + 6], bh
shr eax, 0x10
xor byte [esp + 5], al
mov eax, ebx
inc ebx
shr eax, 0x18
xor byte [esp + 4], al
movsd xmm0, qword [esp + 8]
movsd qword [ebp], xmm0
add ebp, 8
dec edi
jne 0x4333e0
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
inc eax
add ebx, edi
cmp eax, 6
jne 0x4333d0
movsd xmm0, qword [esp]
mov eax, dword [esp + 0x3c]
movsd qword [eax], xmm0
mov eax, dword [esp + 0x44]
add eax, 8
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret

Function at 0x433460
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x28
mov esi, dword [esp + 0x4c]
mov eax, 0xffffffff
cmp esi, 0x18
jb 0x433574
mov ecx, esi
and ecx, 0x80000007
jne 0x433574
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x40]
mov edi, dword [esp + 0x44]
mov edx, 0x525c80
movsd xmm0, qword [eax]
test ecx, ecx
cmovne edx, ecx
lea ecx, [esi - 8]
add eax, 8
mov dword [esp], edx
mov dword [esp + 4], ecx
movsd qword [esp + 0x18], xmm0
push ecx
push eax
push edi
call sub.msvcrt.dll_memmove
add esp, 0xc
shr esi, 3
lea eax, [esi + esi*2]
lea ebx, [eax + eax - 6]
mov eax, 1
sub eax, esi
mov dword [esp + 0xc], eax
lea eax, [esi - 1]
lea esi, [esp + 0x18]
mov dword [esp + 8], eax
mov eax, 5
nop word cs:[eax + eax]
nop
mov ebp, dword [esp + 8]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
test ebp, ebp
je 0x433544
mov eax, ebx
xor byte [esp + 0x1f], bl
xor byte [esp + 0x1e], bh
shr eax, 0x10
xor byte [esp + 0x1d], al
mov eax, ebx
shr eax, 0x18
xor byte [esp + 0x1c], al
movsd xmm0, qword [edi + ebp*8 - 8]
movsd qword [esp + 0x20], xmm0
push dword [esp + 0x3c]
push esi
push esi
call sym.fastboot.exe_AES_decrypt
add esp, 0xc
movsd xmm0, qword [esp + 0x20]
dec ebx
movsd qword [edi + ebp*8 - 8], xmm0
dec ebp
jne 0x433500
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
add ebx, dword [esp + 0xc]
dec eax
cmp eax, 6
jb 0x4334f0
push 8
push dword [esp + 4]
push esi
call sym.fastboot.exe_CRYPTO_memcmp
add esp, 0xc
mov ecx, eax
xor eax, eax
cmp ecx, 1
sbb eax, eax
not eax
or eax, dword [esp + 4]
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x433900
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
cmp dword [esp + 0x10], 1
jne 0x43391c
push dword [esp + 0xc]
push dword [esp + 0xc]
push dword [esp + 0xc]
call sym.fastboot.exe_AES_encrypt
add esp, 0xc
ret
jmp sym.fastboot.exe_AES_decrypt
Function at 0x4342e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x28]
mov esi, dword [edi]
test eax, eax
je 0x43432d
test esi, esi
je 0x43432d
nop word cs:[eax + eax]
nop
movzx ecx, byte [edx + esi]
inc esi
xor cl, byte [ebp]
inc ebp
mov byte [ebx], cl
inc ebx
lea ecx, [eax - 1]
and esi, 0xf
je 0x43432f
cmp eax, 1
mov eax, ecx
jne 0x434310
jmp 0x43432f
mov ecx, eax
cmp ecx, 0x10
jb 0x43439e
mov edi, ecx
mov dword [esp], ecx
nop dword [eax]
sub esp, 0xc
mov eax, dword [esp + 0x40]
mov dword [esp + 4], edx
mov dword [esp], edx
mov dword [esp + 8], eax
call sym.fastboot.exe_AES_encrypt
mov edx, dword [esp + 0x44]
add esp, 0xc
cmp esi, 0xf
ja 0x434382
nop word cs:[eax + eax]
nop dword [eax]
mov eax, dword [edx + esi]
xor eax, dword [ebp + esi]
mov dword [ebx + esi], eax
add esi, 4
cmp esi, 0x10
jb 0x434370
add edi, 0xfffffff0
add ebx, 0x10
add ebp, 0x10
xor esi, esi
cmp edi, 0xf
ja 0x434340
mov ecx, dword [esp]
mov edi, dword [esp + 0x3c]
xor esi, esi
and ecx, 0xf
test ecx, ecx
je 0x4344c1
push dword [esp + 0x34]
push edx
push edx
mov edi, edx
mov dword [esp + 0xc], ecx
call sym.fastboot.exe_AES_encrypt
mov ecx, dword [esp + 0xc]
add esp, 0xc
cmp ecx, 0x20
jae 0x4343d0
mov edx, edi
mov edi, dword [esp + 0x3c]
mov eax, ecx
jmp 0x4344b0
lea eax, [ebx + esi]
lea ecx, [ecx + esi]
lea edx, [ebp + esi]
mov dword [esp + 0xc], eax
lea eax, [ebx + ecx]
mov dword [esp + 8], edx
mov dword [esp + 0x10], eax
lea eax, [ebp + ecx]
add ecx, edi
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
cmp eax, dword [esp + 4]
setb byte [esp + 4]
cmp dword [esp + 8], edx
setb byte [esp + 8]
cmp eax, ecx
lea ecx, [edi + esi]
mov ah, byte [esp + 8]
setb al
cmp ecx, edx
setb cl
test byte [esp + 4], ah
jne 0x4344a5
and al, cl
jne 0x4344a5
mov eax, dword [esp]
lea ecx, [ebp + esi + 0x10]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x38]
mov edx, eax
and edx, 0xffffffe0
lea ecx, [ecx + esi + 0x10]
mov dword [esp + 0xc], ecx
lea ecx, [ebx + esi + 0x10]
sub eax, edx
mov dword [esp + 4], edx
lea esi, [esi + edx]
xor edx, edx
nop word [eax + eax]
mov edi, dword [esp + 8]
movups xmm0, xmmword [edi + edx - 0x10]
movups xmm1, xmmword [edi + edx]
mov edi, dword [esp + 0xc]
movups xmm2, xmmword [edi + edx - 0x10]
movups xmm3, xmmword [edi + edx]
xorps xmm2, xmm0
xorps xmm3, xmm1
movups xmmword [ecx + edx - 0x10], xmm2
movups xmmword [ecx + edx], xmm3
add edx, 0x20
cmp dword [esp + 4], edx
jne 0x434460
mov ecx, dword [esp + 4]
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
cmp dword [esp], ecx
jne 0x4344b0
jmp 0x4344c1
mov eax, dword [esp]
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
movzx ecx, byte [edx + esi]
xor cl, byte [ebp + esi]
dec eax
mov byte [ebx + esi], cl
lea esi, [esi + 1]
jne 0x4344b0
mov dword [edi], esi
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x434c40
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov esi, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, dword [eax + 4]
mov edi, dword [eax]
cmp ecx, edx
mov ebx, edx
mov dword [esp + 8], ecx
mov dword [esp], esi
mov dword [esp + 4], edi
cmovb ebx, ecx
test ebx, ebx
je 0x434cba
xor eax, eax
xor ebp, ebp
nop word cs:[eax + eax]
nop dword [eax]
mov ecx, dword [esp]
mov esi, dword [esp + 4]
mov ecx, dword [ecx + ebp*4]
mov edi, dword [esi + ebp*4]
mov esi, ecx
sub esi, edi
xor edi, ecx
xor esi, ecx
or esi, edi
xor esi, ecx
sar esi, 0x1f
mov ecx, esi
not ecx
and ecx, 1
or ecx, esi
mov esi, edi
dec edi
xor esi, 0x80000000
test edi, esi
cmovns eax, ecx
inc ebp
cmp ebp, ebx
jb 0x434c80
jmp 0x434cbc
xor eax, eax
mov ecx, dword [esp + 8]
mov edi, dword [esp + 4]
mov ebx, ecx
sub ebx, edx
jae 0x434d4b
mov ebx, edx
xor esi, esi
sub ebx, ecx
cmp ebx, 7
jbe 0x434d28
mov ebp, ebx
lea esi, [edi + ecx*4 + 0x10]
pxor xmm0, xmm0
pxor xmm1, xmm1
and ebp, 0xfffffff8
add ecx, ebp
mov dword [esp], ebp
nop
movdqu xmm2, xmmword [esi - 0x10]
movdqu xmm3, xmmword [esi]
add esi, 0x20
add ebp, 0xfffffff8
por xmm0, xmm2
por xmm1, xmm3
jne 0x434cf0
por xmm1, xmm0
cmp ebx, dword [esp]
pshufd xmm0, xmm1, 0x4e
por xmm0, xmm1
pshufd xmm1, xmm0, 0xe5
por xmm1, xmm0
movd esi, xmm1
je 0x434d38
sub edx, ecx
lea ecx, [edi + ecx*4]
nop dword [eax]
or esi, dword [ecx]
add ecx, 4
dec edx
jne 0x434d30
mov ecx, esi
dec esi
not ecx
and esi, ecx
sar esi, 0x1f
not esi
or eax, esi
jmp 0x434ddf
cmp edx, ecx
jae 0x434ddf
mov esi, dword [esp]
xor edi, edi
cmp ebx, 7
jbe 0x434dba
mov ebp, ebx
lea edi, [esi + edx*4 + 0x10]
pxor xmm0, xmm0
pxor xmm1, xmm1
and ebp, 0xfffffff8
add edx, ebp
mov esi, ebp
nop word cs:[eax + eax]
nop dword [eax]
movdqu xmm2, xmmword [edi - 0x10]
movdqu xmm3, xmmword [edi]
add edi, 0x20
add ebp, 0xfffffff8
por xmm0, xmm2
por xmm1, xmm3
jne 0x434d80
por xmm1, xmm0
cmp ebx, esi
mov esi, dword [esp]
pshufd xmm0, xmm1, 0x4e
por xmm0, xmm1
pshufd xmm1, xmm0, 0xe5
por xmm1, xmm0
movd edi, xmm1
je 0x434dc8
sub ecx, edx
lea edx, [esi + edx*4]
nop
or edi, dword [edx]
add edx, 4
dec ecx
jne 0x434dc0
mov ecx, edi
dec edi
not ecx
and edi, ecx
sar edi, 0x1f
mov ecx, edi
and edi, eax
not ecx
and ecx, 1
or ecx, edi
mov eax, ecx
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x437110
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 8
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
xor edi, edi
mov ebx, dword [eax + 4]
mov edx, dword [ecx + 4]
mov eax, ebx
sub eax, edx
mov dword [esp], eax
jge 0x4371a9
mov eax, dword [esp + 0x20]
mov ecx, edx
xor edi, edi
mov esi, ebx
sub ecx, ebx
cmp ecx, 7
mov ebp, dword [eax]
jbe 0x4371a0
mov eax, ecx
lea edi, [ebp + ebx*4 + 0x10]
pxor xmm0, xmm0
pxor xmm1, xmm1
and eax, 0xfffffff8
lea esi, [ebx + eax]
mov dword [esp + 4], eax
nop dword [eax + eax]
movdqu xmm2, xmmword [edi - 0x10]
movdqu xmm3, xmmword [edi]
add edi, 0x20
add eax, 0xfffffff8
por xmm0, xmm2
por xmm1, xmm3
jne 0x437160
por xmm1, xmm0
cmp ecx, dword [esp + 4]
pshufd xmm0, xmm1, 0x4e
por xmm0, xmm1
pshufd xmm1, xmm0, 0xe5
por xmm1, xmm0
movd edi, xmm1
je 0x4371a9
nop dword [eax]
or edi, dword [ebp + esi*4]
inc esi
cmp esi, edx
jl 0x4371a0
cmp edx, ebx
jge 0x437228
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp]
mov esi, dword [eax]
cmp ecx, 7
ja 0x4371bf
mov ebp, edx
jmp 0x437218
and ecx, 0xfffffff8
movd xmm1, edi
lea edi, [esi + edx*4 + 0x10]
pxor xmm0, xmm0
lea ebp, [edx + ecx]
mov eax, ecx
nop word cs:[eax + eax]
nop dword [eax]
movdqu xmm2, xmmword [edi - 0x10]
movdqu xmm3, xmmword [edi]
add edi, 0x20
add eax, 0xfffffff8
por xmm1, xmm2
por xmm0, xmm3
jne 0x4371e0
por xmm0, xmm1
cmp dword [esp], ecx
pshufd xmm1, xmm0, 0x4e
por xmm1, xmm0
pshufd xmm0, xmm1, 0xe5
por xmm0, xmm1
movd edi, xmm0
je 0x437228
mov eax, ebx
lea ecx, [esi + ebp*4]
sub eax, ebp
nop
or edi, dword [ecx]
add ecx, 4
dec eax
jne 0x437220
mov ebp, dword [esp + 0x1c]
cmp ebx, edx
cmovle edx, ebx
test edx, edx
jle 0x43729d
mov eax, dword [esp + 0x20]
mov esi, dword [ebp]
mov ebx, dword [eax]
xor eax, eax
cmp edx, 3
jbe 0x437290
mov eax, edx
movd xmm0, edi
xor ecx, ecx
and eax, 0xfffffffc
movdqu xmm1, xmmword [esi + ecx*4]
movdqu xmm2, xmmword [ebx + ecx*4]
add ecx, 4
cmp eax, ecx
pxor xmm2, xmm1
por xmm0, xmm2
jne 0x437250
pshufd xmm1, xmm0, 0x4e
cmp edx, eax
por xmm1, xmm0
pshufd xmm0, xmm1, 0xe5
por xmm0, xmm1
movd edi, xmm0
je 0x43729d
nop word cs:[eax + eax]
nop dword [eax]
mov ecx, dword [ebx + eax*4]
xor ecx, dword [esi + eax*4]
inc eax
or edi, ecx
cmp eax, edx
jl 0x437290
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0xc]
xor eax, eax
xor ecx, dword [ebp + 0xc]
or ecx, edi
sete al
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x443d70
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov eax, dword [edx + 4]
test eax, eax
je 0x443e13
mov ebp, ecx
mov ecx, dword [edx]
mov edi, edx
xor edx, edx
cmp eax, 8
mov esi, 0
jb 0x443de7
mov edx, eax
lea esi, [ecx + 0x10]
pxor xmm0, xmm0
pxor xmm1, xmm1
and edx, 0xfffffff8
mov ebx, edx
nop word cs:[eax + eax]
movdqu xmm2, xmmword [esi - 0x10]
movdqu xmm3, xmmword [esi]
add esi, 0x20
add ebx, 0xfffffff8
por xmm0, xmm2
por xmm1, xmm3
jne 0x443db0
por xmm1, xmm0
cmp eax, edx
pshufd xmm0, xmm1, 0x4e
por xmm0, xmm1
pshufd xmm1, xmm0, 0xe5
por xmm1, xmm0
movd esi, xmm1
je 0x443df8
mov ebx, eax
sub ebx, edx
lea edx, [ecx + edx*4]
nop
or esi, dword [edx]
add edx, 4
dec ebx
jne 0x443df0
test esi, esi
je 0x443e13
test eax, eax
jle 0x443e05
test byte [ecx], 1
jne 0x443e35
push 0xb0
push str.external_boringssl_src_crypto_fipsmodule_bn_montgomery.c
push 0x68
jmp 0x443e1f
push 0xac
push str.external_boringssl_src_crypto_fipsmodule_bn_montgomery.c
push 0x69
push 0
push 3
call sym.fastboot.exe_ERR_put_error
add esp, 0x14
xor eax, eax
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
cmp dword [edi + 0xc], 0
je 0x443e49
push 0xb4
push str.external_boringssl_src_crypto_fipsmodule_bn_montgomery.c
push 0x6d
jmp 0x443e1f
lea ebx, [ebp + 0x14]
cmp ebx, edi
je 0x443e87
push eax
push ebx
call fcn.004350a0
add esp, 8
test eax, eax
je 0x443ec8
mov eax, dword [edi + 4]
lea ecx, [eax*4]
test ecx, ecx
je 0x443e7c
push ecx
push dword [edi]
push dword [ebx]
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [edi + 4]
mov dword [ebp + 0x18], eax
mov ecx, dword [edi + 0xc]
mov dword [ebp + 0x20], ecx
jmp 0x443e8a
mov eax, dword [ebp + 0x18]
mov dword [esp + 4], ebp
nop
test eax, eax
jle 0x443eb6
mov ecx, dword [ebx]
lea edx, [eax - 1]
cmp dword [ecx + eax*4 - 4], 0
mov eax, edx
je 0x443e90
inc edx
mov dword [ebp + 0x18], edx
cmp edx, 2
mov eax, dword [ecx]
jl 0x443ed9
mov edx, dword [ecx + 4]
mov ecx, eax
mov eax, edx
jmp 0x443edd
mov dword [ebp + 0x18], eax
jne 0x443ec2
mov dword [ebp + 0x20], 0
mov eax, dword [ebx]
mov ecx, dword [eax]
jmp 0x443edb
push 0xba
push str.external_boringssl_src_crypto_fipsmodule_bn_montgomery.c
push 0x44
jmp 0x443e1f
mov ecx, eax
xor eax, eax
mov esi, 1
xor edi, edi
xor ebx, ebx
mov dword [esp + 8], 0x40
mov dword [esp], 0
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], eax
mov ebp, esi
nop
mov eax, dword [esp + 0xc]
and ebp, 1
mov edx, 0
neg ebp
sbb edx, edx
and ebp, ecx
and eax, edx
mov ecx, eax
and eax, edi
xor ecx, edi
mov edi, ebp
and ebp, esi
xor edi, esi
shrd edi, ecx, 1
shr ecx, 1
add ebp, edi
adc eax, ecx
shrd dword [esp], ebx, 1
and edx, 0x80000000
shr ebx, 1
mov ecx, dword [esp + 0x10]
mov esi, ebp
or ebx, edx
dec dword [esp + 8]
mov edi, eax
jne 0x443f00
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [eax + 0x28], ecx
mov dword [eax + 0x2c], ebx
mov eax, 1
jmp 0x443e2d
Function at 0x451f90
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
push eax
mov edi, dword [esp + 0x20]
cmp dword [edi + 0xc], 0
je 0x451fd9
push 0x13c
push str.external_boringssl_src_crypto_fipsmodule_bn_bn.c
push 0x6d
push 0
push 3
call sym.fastboot.exe_ERR_put_error
add esp, 0x14
push 0x1c
push str.external_boringssl_src_crypto_fipsmodule_ec_scalar.c
push 0x85
push 0
push 0xf
call sym.fastboot.exe_ERR_put_error
add esp, 0x14
xor eax, eax
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
mov esi, dword [esp + 0x18]
mov ebx, dword [edi + 4]
mov eax, dword [esi + 0xc]
mov ebp, ebx
sub ebp, eax
jbe 0x452093
mov edx, dword [edi]
xor ecx, ecx
cmp ebp, 8
mov edi, eax
jb 0x45205e
mov ecx, edx
mov edx, ebp
pxor xmm0, xmm0
pxor xmm1, xmm1
and edx, 0xfffffff8
mov dword [esp], ecx
lea ecx, [ecx + eax*4 + 0x10]
lea edi, [eax + edx]
mov esi, edx
nop word cs:[eax + eax]
nop dword [eax]
movdqu xmm2, xmmword [ecx - 0x10]
movdqu xmm3, xmmword [ecx]
add ecx, 0x20
add esi, 0xfffffff8
por xmm0, xmm2
por xmm1, xmm3
jne 0x452020
por xmm1, xmm0
cmp ebp, edx
mov esi, dword [esp + 0x18]
mov edx, dword [esp]
pshufd xmm0, xmm1, 0x4e
por xmm0, xmm1
pshufd xmm1, xmm0, 0xe5
por xmm1, xmm0
movd ecx, xmm1
je 0x452078
sub ebx, edi
lea edx, [edx + edi*4]
nop word cs:[eax + eax]
nop dword [eax]
or ecx, dword [edx]
add edx, 4
dec ebx
jne 0x452070
mov edi, dword [esp + 0x20]
test ecx, ecx
mov ebx, eax
je 0x452093
push 0x143
push str.external_boringssl_src_crypto_fipsmodule_bn_bn.c
push 0x66
jmp 0x451fab
mov ecx, dword [esp + 0x1c]
shl eax, 2
test eax, eax
je 0x4520ae
push eax
push 0
push ecx
mov ebp, ecx
call sub.msvcrt.dll_memset
mov ecx, ebp
add esp, 0xc
shl ebx, 2
test ebx, ebx
je 0x4520c5
push ebx
push dword [edi]
push ecx
mov edi, ecx
call sub.msvcrt.dll_memcpy
mov ecx, edi
add esp, 0xc
mov edx, dword [esi + 0xc]
test edx, edx
je 0x451fb7
mov eax, dword [esi + 8]
xor esi, esi
mov dword [esp], eax
mov eax, ecx
xor ecx, ecx
nop dword [eax]
mov edi, dword [esp]
mov ebp, dword [eax + esi*4]
mov ebx, dword [edi + esi*4]
mov edi, ebp
sub edi, ebx
xor ebx, ebp
xor edi, ebp
or edi, ebx
xor edi, ebp
sar edi, 0x1f
mov ebp, edi
not ebp
and ebp, 1
or ebp, edi
mov edi, ebx
dec ebx
xor edi, 0x80000000
test ebx, edi
cmovns ecx, ebp
inc esi
cmp edx, esi
jne 0x4520e0
test ecx, ecx
jns 0x451fb7
mov eax, 1
jmp 0x451fd1