joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400bacc0
Capabilities:
Get common file path

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x268
mov rsi, rcx
mov rax, qword [0x14036e038]
xor rax, rsp
mov qword [rsp + 0x260], rax
lea rbx, [rsp + 0x50]
mov r8d, 0x208
mov rcx, rbx
mov dl, 0xaa
call fcn.1401b21d0
mov word [rbx], 0
mov qword [rsp + 0x20], rbx
xor ecx, ecx
mov edx, 5
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov edi, eax
test eax, eax
js 0x1400bad50
lea r14, [rsp + 0x28]
mov qword [r14], rbx
mov rcx, rbx
call fcn.1401d1e74
mov qword [r14 + 8], rax
lea rbx, [rsp + 0x38]
mov rcx, rbx
mov rdx, r14
call fcn.1401635d0
mov rcx, rsi
mov rdx, rbx
call fcn.140163770
mov rcx, rbx
call fcn.140163700
test edi, edi
setns bl
mov rcx, qword [rsp + 0x260]
xor rcx, rsp
call fcn.1401b0080
mov eax, ebx
add rsp, 0x268
pop rbx
pop rdi
pop rsi
pop r14
ret

Function at 0x1400bad80
Capabilities:
Get common file path

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x70
mov rsi, rcx
mov rax, qword [0x14036e038]
xor rax, rsp
mov qword [rsp + 0x68], rax
lea r9, [rsp + 0x60]
mov qword [r9], 0
lea rcx, [0x1402df140]
xor edx, edx
xor r8d, r8d
call sub.SHELL32.dll_SHGetKnownFolderPath
test eax, eax
js 0x1400bae6a
mov rdx, qword [rsp + 0x60]
lea rdi, [rsp + 0x20]
mov rcx, rdi
call fcn.1401e8b40
movzx eax, byte [rdi + 0x17]
test al, al
jns 0x1400bade2
mov rax, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x20]
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rax
test rax, rax
js 0x1400bae57
je 0x1400badf8
test rdi, rdi
je 0x1400bae76
lea rdi, [rsp + 0x48]
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.1401635d0
mov rcx, rsi
mov rdx, rdi
call fcn.140163770
mov rcx, rdi
call fcn.140163700
cmp byte [rsp + 0x37], 0
jns 0x1400bae2e
mov rcx, qword [rsp + 0x20]
call fcn.1401ae9b8
mov bl, 1
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400bae40
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.1401b0080
mov eax, ebx
add rsp, 0x70
pop rbx
pop rdi
pop rsi
ret
lea rcx, [0x1402f4f7c]
lea rdx, str....._third_partylibc_srcinclude_string_view:314:_assertion___len___static_cast_size_type__numeric_limits_difference_type_::max____failed:_string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type_n
call fcn.1401ec0b0
mov rcx, rsi
call fcn.1402504b0
mov ebx, eax
jmp 0x1400bae30
lea rcx, [0x1402f4f7c]
lea rdx, str....._third_partylibc_srcinclude_string_view:316:_assertion___len__0____s___nullptr_failed:_string_view::string_view__CharT___size_t_:_received_nullptr_n
call fcn.1401ec0b0
int3
Function at 0x1400baf40
Capabilities:
Check if file exists
Create directory

Disassembly:
push rsi
push rdi
sub rsp, 0x198
mov rsi, rcx
mov rax, qword [0x14036e038]
xor rax, rsp
mov qword [rsp + 0x190], rax
cmp byte [rcx + 0x17], 0
jns 0x1400baf67
mov rcx, qword [rsi]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1400bafa1
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x1400bafc0
mov rcx, qword [rsp + 0x190]
xor rcx, rsp
call fcn.1401b0080
mov rcx, rsi
add rsp, 0x198
pop rdi
pop rsi
jmp fcn.1400bb0b0
mov sil, 1
mov rcx, qword [rsp + 0x190]
xor rcx, rsp
call fcn.1401b0080
mov eax, esi
add rsp, 0x198
pop rdi
pop rsi
ret
mov ecx, 2
call fcn.140162930
test al, al
jne 0x1400bafd2
xor esi, esi
jmp 0x1400bafa4
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrash_report_database_win.cc
lea rcx, [rsp + 0x50]
mov r8d, 0x265
mov r9d, 2
call fcn.14021aa00
lea rcx, [rsp + 0x60]
lea rdx, str.CreateDirectory
mov r8d, 0x10
call fcn.1401e8d00
mov rdi, rax
movzx eax, byte [rsi + 0x17]
test al, al
jns 0x1400bb021
mov rax, qword [rsi + 8]
mov rsi, qword [rsi]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], rax
test rax, rax
js 0x1400bb088
je 0x1400bb037
test rsi, rsi
je 0x1400bb09b
lea rsi, [rsp + 0x38]
lea rdx, [rsp + 0x28]
mov rcx, rsi
call fcn.14015b4e0
movzx r8d, byte [rsi + 0x17]
test r8b, r8b
jns 0x1400bb05d
mov r8, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x38]
mov rcx, rdi
mov rdx, rsi
call fcn.1401e8d00
cmp byte [rsp + 0x4f], 0
jns 0x1400bb079
mov rcx, qword [rsp + 0x38]
call fcn.1401ae9b8
lea rcx, [rsp + 0x50]
call fcn.14021aa80
jmp 0x1400bafce
lea rcx, [0x1402f4f7c]
lea rdx, str....._third_partylibc_srcinclude_string_view:314:_assertion___len___static_cast_size_type__numeric_limits_difference_type_::max____failed:_string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type_n
call fcn.1401ec0b0
lea rcx, [0x1402f4f7c]
lea rdx, str....._third_partylibc_srcinclude_string_view:316:_assertion___len__0____s___nullptr_failed:_string_view::string_view__CharT___size_t_:_received_nullptr_n
call fcn.1401ec0b0
int3
Function at 0x1400bb0b0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rsi
push rdi
sub rsp, 0x178
mov rsi, rcx
mov rax, qword [0x14036e038]
xor rax, rsp
mov qword [rsp + 0x170], rax
cmp byte [rcx + 0x17], 0
jns 0x1400bb0d7
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400bb115
mov dil, 1
test al, 0x10
je 0x1400bb105
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.1401b0080
mov eax, edi
add rsp, 0x178
pop rdi
pop rsi
ret
mov ecx, 2
call fcn.140162930
test al, al
je 0x1400bb123
jmp 0x1400bb17c
mov ecx, 2
call fcn.140162930
test al, al
jne 0x1400bb127
xor edi, edi
jmp 0x1400bb0e9
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadclientcrash_report_database_win.cc
lea rdi, [rsp + 0x30]
mov rcx, rdi
mov r8d, 0x251
mov r9d, 2
call fcn.14021aa00
lea rcx, [rsp + 0x40]
lea rdx, str.GetFileAttributes
mov r8d, 0x12
call fcn.1401e8d00
mov rcx, rax
mov rdx, rsi
call fcn.14021b9c0
mov rcx, rdi
call fcn.14021aa80
jmp 0x1400bb123
lea rdx, str....._third_partycrashpadcrashpadclientcrash_report_database_win.cc
lea rdi, [rsp + 0x30]
mov rcx, rdi
mov r8d, 0x255
mov r9d, 2
call fcn.1400762b0
lea rcx, [rsp + 0x40]
lea rdx, str.GetFileAttributes
mov r8d, 0x12
call fcn.1401e8d00
mov rcx, rax
mov rdx, rsi
call fcn.14021b9c0
lea rdx, str.:_not_a_directory
mov r8d, 0x11
mov rcx, rax
call fcn.1401e8d00
mov rcx, rdi
call fcn.1400768a0
jmp 0x1400bb123
Function at 0x1400bc5d0
Capabilities:
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x30
mov rdi, rdx
mov rax, qword [0x14036e038]
xor rax, rsp
mov qword [rsp + 0x28], rax
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rsi, [rsp + 0x20]
mov qword [rsi], rax
mov rdx, rsi
call fcn.1400bb270
mov rax, qword [rsi]
test rax, rax
je 0x1400bc714
mov rbx, qword [rax + 0x50]
mov r12, qword [rax + 0x58]
xor esi, esi
cmp rbx, r12
je 0x1400bc62f
mov r13, qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
jmp 0x1400bc673
lea rcx, [rsp + 0x20]
call fcn.1400bbd30
mov rcx, qword [rsp + 0x28]
xor rcx, rsp
call fcn.1401b0080
mov eax, esi
add rsp, 0x30
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rdi
mov rdx, rbx
call fcn.1400bd370
mov r14, rax
mov qword [rdi + 8], r14
add rbx, 0x70
cmp rbx, r12
je 0x1400bc62f
cmp dword [rbx + 0x68], 0
jne 0x1400bc66a
lea r15, [rbx + 0x10]
cmp byte [rbx + 0x27], 0
mov rcx, r15
jns 0x1400bc68a
mov rcx, qword [rbx + 0x10]
call r13
test al, 0x10
jne 0x1400bc66a
mov r14, qword [rdi + 8]
cmp r14, qword [rdi + 0x10]
jae 0x1400bc658
test r14, r14
je 0x1400bc701
movups xmm0, xmmword [rbx]
movups xmmword [r14], xmm0
lea rcx, [r14 + 0x10]
mov rdx, r15
call fcn.140163570
lea rcx, [r14 + 0x28]
cmp byte [rbx + 0x3f], 0
js 0x1400bc6f2
lea rax, [rbx + 0x28]
mov rdx, qword [rax + 0x10]
mov qword [rcx + 0x10], rdx
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
mov rax, qword [rbx + 0x60]
mov qword [r14 + 0x60], rax
movups xmm0, xmmword [rbx + 0x40]
movups xmm1, xmmword [rbx + 0x50]
movups xmmword [r14 + 0x50], xmm1
movups xmmword [r14 + 0x40], xmm0
add r14, 0x68
jmp 0x1400bc666
mov rdx, qword [rbx + 0x28]
mov r8, qword [rbx + 0x30]
call fcn.14014f4f0
jmp 0x1400bc6cf
lea rcx, [0x1402f4f7c]
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h:40:_assertion___location___nullptr_failed:_null_pointer_given_to_construct_at_n
call fcn.1401ec0b0
mov esi, 3
jmp 0x1400bc62f
Function at 0x1400bc720
Capabilities:
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x30
mov rdi, rdx
mov rax, qword [0x14036e038]
xor rax, rsp
mov qword [rsp + 0x28], rax
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rsi, [rsp + 0x20]
mov qword [rsi], rax
mov rdx, rsi
call fcn.1400bb270
mov rax, qword [rsi]
test rax, rax
je 0x1400bc864
mov rbx, qword [rax + 0x50]
mov r12, qword [rax + 0x58]
xor esi, esi
cmp rbx, r12
je 0x1400bc77f
mov r13, qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
jmp 0x1400bc7c3
lea rcx, [rsp + 0x20]
call fcn.1400bbd30
mov rcx, qword [rsp + 0x28]
xor rcx, rsp
call fcn.1401b0080
mov eax, esi
add rsp, 0x30
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rdi
mov rdx, rbx
call fcn.1400bd370
mov r14, rax
mov qword [rdi + 8], r14
add rbx, 0x70
cmp rbx, r12
je 0x1400bc77f
cmp dword [rbx + 0x68], 2
jne 0x1400bc7ba
lea r15, [rbx + 0x10]
cmp byte [rbx + 0x27], 0
mov rcx, r15
jns 0x1400bc7da
mov rcx, qword [rbx + 0x10]
call r13
test al, 0x10
jne 0x1400bc7ba
mov r14, qword [rdi + 8]
cmp r14, qword [rdi + 0x10]
jae 0x1400bc7a8
test r14, r14
je 0x1400bc851
movups xmm0, xmmword [rbx]
movups xmmword [r14], xmm0
lea rcx, [r14 + 0x10]
mov rdx, r15
call fcn.140163570
lea rcx, [r14 + 0x28]
cmp byte [rbx + 0x3f], 0
js 0x1400bc842
lea rax, [rbx + 0x28]
mov rdx, qword [rax + 0x10]
mov qword [rcx + 0x10], rdx
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
mov rax, qword [rbx + 0x60]
mov qword [r14 + 0x60], rax
movups xmm0, xmmword [rbx + 0x40]
movups xmm1, xmmword [rbx + 0x50]
movups xmmword [r14 + 0x50], xmm1
movups xmmword [r14 + 0x40], xmm0
add r14, 0x68
jmp 0x1400bc7b6
mov rdx, qword [rbx + 0x28]
mov r8, qword [rbx + 0x30]
call fcn.14014f4f0
jmp 0x1400bc81f
lea rcx, [0x1402f4f7c]
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h:40:_assertion___location___nullptr_failed:_null_pointer_given_to_construct_at_n
call fcn.1401ec0b0
mov esi, 3
jmp 0x1400bc77f
Function at 0x1400bdd10
Capabilities:
Get system information on windows

Disassembly:
push rsi
push rdi
sub rsp, 0x158
mov rax, qword [0x14036e038]
xor rax, rsp
mov qword [rsp + 0x150], rax
mov eax, dword [0x140384798]
mov ecx, dword [0x14037f078]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400bdd70
lea rsi, [0x140384790]
mov rcx, qword [rsp + 0x150]
xor rcx, rsp
call fcn.1401b0080
mov rax, rsi
add rsp, 0x158
pop rdi
pop rsi
ret
lea rcx, [0x140384798]
call fcn.1401aead0
cmp dword [0x140384798], 0xffffffff
jne 0x1400bdd4c
lea rsi, [rsp + 0x38]
mov r8d, 0x118
mov rcx, rsi
xor edx, edx
call fcn.1401b21d0
mov dword [rsi - 4], 0x11c
lea rsi, [rsp + 0x34]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
lea rdi, [rsp + 0x30]
mov dword [rdi], 0
mov ecx, dword [rsi + 4]
mov edx, dword [rsi + 8]
mov qword [rsp + 0x20], rdi
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_GetProductInfo]
mov ecx, 0x80
call fcn.1401ae97c
mov rsi, rax
mov edi, dword [rdi]
mov eax, dword [0x1403847e0]
mov ecx, dword [0x14037f078]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400bde30
lea r8, [0x1403847b0]
lea rdx, [rsp + 0x34]
mov rcx, rsi
mov r9d, edi
call fcn.1400bdf30
mov qword [0x140384790], rsi
lea rcx, [0x140384798]
call fcn.1401aeb68
jmp 0x1400bdd4c
lea rcx, [0x1403847e0]
call fcn.1401aead0
cmp dword [0x1403847e0], 0xffffffff
jne 0x1400bde01
xorps xmm0, xmm0
movups xmmword [0x1403847d0], xmm0
movups xmmword [0x1403847c0], xmm0
movups xmmword [0x1403847b0], xmm0
lea rcx, [0x1403847b0]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rcx, [0x1403847e0]
call fcn.1401aeb68
jmp 0x1400bde01

Function at 0x1400bde80
Capabilities:
Get system information on windows

Disassembly:
sub rsp, 0x28
mov eax, dword [0x1403847e0]
mov ecx, dword [0x14037f078]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400bdebb
movzx eax, word [0x1403847b0]
cmp eax, 9
jne 0x1400bdf03
mov eax, 1
add rsp, 0x28
ret
lea rcx, [0x1403847e0]
call fcn.1401aead0
cmp dword [0x1403847e0], 0xffffffff
jne 0x1400bdea5
xorps xmm0, xmm0
movups xmmword [0x1403847d0], xmm0
movups xmmword [0x1403847c0], xmm0
movups xmmword [0x1403847b0], xmm0
lea rcx, [0x1403847b0]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
lea rcx, [0x1403847e0]
call fcn.1401aeb68
jmp 0x1400bdea5
test eax, eax
je 0x1400bdeb6
cmp eax, 6
jne 0x1400bdf13
mov eax, 2
jmp 0x1400bdeb6
cmp eax, 0xc
jne 0x1400bdf1f
mov eax, 3
jmp 0x1400bdeb6
mov eax, 4
jmp 0x1400bdeb6
Function at 0x1400be8b0
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
mov rdi, r9
mov r14, r8
mov ebx, edx
mov rsi, rcx
mov rax, qword [0x14036e038]
xor rax, rsp
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x68]
mov qword [rax], 0
mov qword [rsp + 0x20], rax
lea rcx, [0x1402df160]
lea r9, [0x1403119c0]
xor edx, edx
mov r8d, 1
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x1400bea65
mov qword [rsp + 0x60], 0
movzx eax, byte [r14 + 0x17]
test al, al
jns 0x1400be924
mov rax, qword [r14 + 8]
mov r14, qword [r14]
mov r15, qword [rsp + 0x68]
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rax
test rax, rax
js 0x1400bea71
je 0x1400be947
test r14, r14
je 0x1400beab1
lea r14, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, r14
call fcn.1400f0350
mov rdx, qword [r14]
mov rax, qword [r15]
mov rax, qword [rax + 0x18]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x40], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, r15
xor r8d, r8d
xor r9d, r9d
call qword [0x14035cc68]
mov ebp, eax
mov rcx, r14
call fcn.1400f03a0
test ebp, ebp
js 0x1400bea53
test bl, bl
je 0x1400be9e3
mov rcx, qword [rsp + 0x60]
mov eax, 3
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov edx, 0xa
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x1400bea5b
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x60], 0
mov rcx, qword [rdi]
mov qword [rdi], rax
test rcx, rcx
jne 0x1400bea84
mov byte [rsi], 0
xor eax, eax
mov byte [rsi + 4], al
mov rcx, qword [rsp + 0x60]
test rcx, rcx
jne 0x1400bea96
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400bea36
mov qword [rsp + 0x68], 0
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [0x14035cc68]
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.1401b0080
mov rax, rsi
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
mov dword [rsi], 1
jmp 0x1400bea61
mov dword [rsi], 2
mov al, 1
jmp 0x1400bea05
mov dword [rsi], 0
mov byte [rsi + 4], 1
jmp 0x1400bea16
lea rcx, [0x1402f4f7c]
lea rdx, str....._third_partylibc_srcinclude_string_view:314:_assertion___len___static_cast_size_type__numeric_limits_difference_type_::max____failed:_string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type_n
call fcn.1401ec0b0
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [0x14035cc68]
jmp 0x1400bea00
mov qword [rsp + 0x60], 0
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [0x14035cc68]
jmp 0x1400bea16
lea rcx, [0x1402f4f7c]
lea rdx, str....._third_partylibc_srcinclude_string_view:316:_assertion___len__0____s___nullptr_failed:_string_view::string_view__CharT___size_t_:_received_nullptr_n
call fcn.1401ec0b0
int3
Function at 0x1400c5350
Capabilities:
Hash data using sha256

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x50
mov rsi, r9
mov rdi, r8
mov rbx, rdx
mov r15, rcx
mov r13, qword [rsp + 0xb0]
mov rax, qword [0x14036e038]
xor rax, rsp
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
movaps xmmword [rsp + 0x20], xmm0
xor r14d, r14d
test r13, r13
je 0x1400c53c0
mov ecx, dword [r13 + 0x2c]
call fcn.140174220
test rax, rax
je 0x1400c54a1
mov r12, rax
xor ecx, ecx
call fcn.140174280
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r13
mov r14, r12
mov rax, qword [r13 + 0x10]
lea rcx, [0x1402678f0]
cmp rax, rcx
jne 0x1400c5491
xorps xmm0, xmm0
movups xmmword [r14 + 0x5c], xmm0
movups xmmword [r14 + 0x50], xmm0
movups xmmword [r14 + 0x40], xmm0
movups xmmword [r14 + 0x30], xmm0
movups xmmword [r14 + 0x20], xmm0
movaps xmm0, xmmword [0x1403149e0]
movups xmmword [r14], xmm0
movaps xmm0, xmmword [0x1403149f0]
movups xmmword [r14 + 0x10], xmm0
mov dword [r14 + 0x6c], 0x20
lea r14, [rsp + 0x20]
mov rax, qword [r14]
mov rax, qword [rax + 0x18]
mov rcx, r14
mov rdx, r15
mov r8, rbx
call qword [0x14035cc68]
mov rax, qword [r14]
mov rax, qword [rax + 0x20]
mov rcx, r14
mov rdx, rdi
call qword [0x14035cc68]
mov rax, qword [r14]
test rsi, rsi
je 0x1400c544a
mov ecx, dword [rax + 4]
mov dword [rsi], ecx
mov edx, dword [rax + 0x2c]
mov rcx, qword [rsp + 0x28]
call fcn.1401742c0
mov r14d, 1
mov rcx, qword [rsp + 0x28]
call fcn.140174280
mov rax, qword [rsp + 0x38]
test rax, rax
jne 0x1400c54a5
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1401b0080
mov eax, r14d
add rsp, 0x50
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0x20]
call qword [0x14035cc68]
jmp 0x1400c540f
xor ecx, ecx
jmp 0x1400c5462
mov rax, qword [rax]
mov rcx, qword [rsp + 0x30]
call qword [0x14035cc68]
jmp 0x1400c5471

Function at 0x1400c5670
Capabilities:
Hash data using sha256

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rdi, rdx
mov rsi, rcx
cmp qword [rcx], rdx
je 0x1400c56a2
mov ecx, dword [rdi + 0x2c]
call fcn.140174220
test rax, rax
je 0x1400c5701
mov rbx, rax
mov rcx, qword [rsi + 8]
call fcn.140174280
mov qword [rsi + 8], rbx
mov qword [rsi], rdi
mov rax, qword [rdi + 0x10]
lea rcx, [0x1402678f0]
cmp rax, rcx
jne 0x1400c56f6
mov rax, qword [rsi + 8]
xorps xmm0, xmm0
movups xmmword [rax + 0x5c], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x20], xmm0
movaps xmm0, xmmword [0x1403149e0]
movups xmmword [rax], xmm0
movaps xmm0, xmmword [0x1403149f0]
movups xmmword [rax + 0x10], xmm0
mov dword [rax + 0x6c], 0x20
mov eax, 1
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
call qword [0x14035cc68]
jmp 0x1400c56e9
xor eax, eax
jmp 0x1400c56ee
Function at 0x1400c57a0
Capabilities:
Hash data using sha256

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x30
mov rbx, r8
mov rsi, rdx
mov rdi, rcx
cmp qword [rcx + 0x10], 0
jne 0x1400c57d7
mov rcx, qword [rsp + 0x80]
mov rdx, r9
call fcn.1400f1980
mov qword [rdi + 0x10], rax
test rax, rax
je 0x1400c58ea
mov ebp, dword [rsp + 0x88]
lea rcx, [0x1403849d8]
lea rdx, [0x1400c9c80]
call fcn.140186e20
lea rax, [0x1403849e0]
mov qword [rdi + 0x18], rax
mov rcx, qword [rdi + 0x10]
cmp ebp, 1
jne 0x1400c58ee
call fcn.1400f1c80
test eax, eax
je 0x1400c58ea
test rbx, rbx
je 0x1400c582f
mov rcx, qword [rdi + 0x10]
mov rdx, rbx
call fcn.1400e7250
test eax, eax
je 0x1400c58ea
xor eax, eax
test ebp, ebp
setne al
mov rcx, qword [rdi + 0x10]
mov rcx, qword [rcx]
shl eax, 4
cmp qword [rcx + rax + 0x28], 0
je 0x1400c58c1
test rbx, rbx
je 0x1400c58f8
cmp qword [rdi], rbx
je 0x1400c587a
mov ecx, dword [rbx + 0x2c]
call fcn.140174220
test rax, rax
je 0x1400c58ea
mov r14, rax
mov rcx, qword [rdi + 8]
call fcn.140174280
mov qword [rdi + 8], r14
mov qword [rdi], rbx
mov rax, qword [rbx + 0x10]
lea rcx, [0x1402678f0]
cmp rax, rcx
jne 0x1400c58df
mov rax, qword [rdi + 8]
xorps xmm0, xmm0
movups xmmword [rax + 0x5c], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x20], xmm0
movaps xmm0, xmmword [0x1403149e0]
movups xmmword [rax], xmm0
movaps xmm0, xmmword [0x1403149f0]
movups xmmword [rax + 0x10], xmm0
mov dword [rax + 0x6c], 0x20
mov ebx, 1
test rsi, rsi
je 0x1400c58d2
mov rax, qword [rdi + 0x10]
mov qword [rsi], rax
mov eax, ebx
add rsp, 0x30
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov rcx, rdi
call qword [0x14035cc68]
jmp 0x1400c58c1
xor ebx, ebx
jmp 0x1400c58d2
call fcn.14028f950
jmp 0x1400c580e
mov dword [rsp + 0x20], 0x6d
lea r9, str....._third_party_boringssl_srccrypto_fipsmoduledigestsigndigestsign.c
xor ebx, ebx
mov ecx, 6
xor edx, edx
mov r8d, 0x77
call fcn.14028f7e0
jmp 0x1400c58d2
Function at 0x1400c7cc0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x58
mov rax, qword [0x14036e038]
xor rax, rsp
mov qword [rsp + 0x50], rax
cmp r8, 0x30
ja 0x1400c7e09
mov r14, r8
mov r15, rdx
mov rsi, rcx
movaps xmm0, xmmword [0x1402eb060]
lea rdi, [rsp + 0x40]
movaps xmmword [rdi], xmm0
movaps xmmword [rdi - 0x10], xmm0
movaps xmmword [rdi - 0x20], xmm0
lea r12, [rsp + 0x30]
lea rbx, [rcx + 0x108]
mov eax, dword [rcx + 0x114]
bswap eax
inc eax
bswap eax
mov dword [rcx + 0x114], eax
mov rax, qword [rcx + 0xf8]
lea rdx, [rsp + 0x20]
mov rcx, rbx
mov r8, rsi
call qword [0x14035cc68]
mov eax, dword [rsi + 0x114]
bswap eax
inc eax
bswap eax
mov dword [rsi + 0x114], eax
mov rax, qword [rsi + 0xf8]
mov rcx, rbx
mov rdx, r12
mov r8, rsi
call qword [0x14035cc68]
mov eax, dword [rsi + 0x114]
bswap eax
inc eax
bswap eax
mov dword [rsi + 0x114], eax
mov rax, qword [rsi + 0xf8]
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call qword [0x14035cc68]
test r14, r14
je 0x1400c7da3
xor eax, eax
mov cl, byte [r15 + rax]
xor byte [rsp + rax + 0x20], cl
inc rax
cmp r14, rax
jne 0x1400c7d93
mov ecx, 1
call fcn.14016df20
lea rcx, [rsp + 0x20]
mov edx, 0x100
mov r8, rsi
bt eax, 0x19
jae 0x1400c7e0d
call fcn.140002fe0
lea rax, [0x140001d60]
lea rcx, section..text
mov qword [rsi + 0xf8], rcx
mov qword [rsi + 0x100], rax
movups xmm0, xmmword [rdi]
movups xmmword [rbx], xmm0
mov esi, 1
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.1401b0080
mov eax, esi
add rsp, 0x58
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
xor esi, esi
jmp 0x1400c7dec
bt eax, 9
jae 0x1400c7e28
call fcn.1400040d0
lea rax, [0x1400045a0]
lea rcx, [0x1400042a0]
jmp 0x1400c7dd3
call fcn.140253d30
lea rax, [0x140254530]
lea rcx, [0x140253c10]
jmp 0x1400c7dd3