joyce8/EMBER2024-capa huggingface dataset:
Function at 0x50a7c0
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x50a99b
push rbp
mov rbp, rsp
sub rsp, 0xa8
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0x60], 0
movups xmmword [rsp + 0x68], xmm15
movups xmmword [rsp + 0x40], xmm15
mov rax, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0xc0]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov byte [rsp + 0x10], 0
nop dword [rax]
call sym.internal_bytealg.IndexByteString.abi0
xorps xmm15, xmm15
mov r14, qword [0x0081bc20]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
cmp rax, 0xffffffffffffffff
jne 0x50a849
jmp 0x50a892
mov qword [rsp + 0x60], 0
movups xmmword [rsp + 0x68], xmm15
lea rdx, [0x006ef460]
mov qword [rsp + 0x40], rdx
lea rdx, [0x006ee848]
mov qword [rsp + 0x48], rdx
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x60]
add rsp, 0xa8
pop rbp
ret
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 0x38], rcx
inc rcx
mov qword [rsp + 0x30], rcx
lea rax, [0x005dd240]
mov rbx, rcx
call sym.runtime.makeslice
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x30]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rdx
mov qword [rsp + 0xa0], rsi
mov rdx, qword [rsp + 0xc0]
mov rsi, qword [rsp + 0xb8]
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rdx
mov rsi, qword [rsp + 0x98]
mov qword [rsp + 0x28], rsi
cmp rsi, rdx
jg 0x50a91b
jmp 0x50a922
mov qword [rsp + 0x28], rdx
jmp 0x50a924
jmp 0x50a924
mov rdx, qword [rsp + 0x90]
cmp qword [rsp + 0x50], rdx
jne 0x50a935
jmp 0x50a953
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x20], rcx
mov rbx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x90]
call sym.runtime.memmove
jmp 0x50a955
jmp 0x50a955
mov rdx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x80]
mov r9, qword [rsp + 0x88]
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], r8
mov qword [rsp + 0x70], r9
movups xmmword [rsp + 0x40], xmm15
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x60]
xor edi, edi
xor esi, esi
add rsp, 0xa8
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.syscall.ByteSliceFromString
Function at 0x50ab60
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x50ad12
push rbp
mov rbp, rsp
sub rsp, 0xa0
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], rbx
mov qword [rsp + 0x58], 0
movups xmmword [rsp + 0x60], xmm15
movups xmmword [rsp + 0x48], xmm15
mov rax, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xb8]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov byte [rsp + 0x10], 0
nop dword [rax]
call sym.internal_bytealg.IndexByteString.abi0
xorps xmm15, xmm15
mov r14, qword [0x0081bc20]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x40], rax
cmp rax, 0xffffffffffffffff
jne 0x50abe9
jmp 0x50ac32
mov qword [rsp + 0x58], 0
movups xmmword [rsp + 0x60], xmm15
lea rdx, [0x006ef460]
mov qword [rsp + 0x48], rdx
lea rdx, [0x006ee848]
mov qword [rsp + 0x50], rdx
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x58]
add rsp, 0xa0
pop rbp
ret
mov rcx, qword [rsp + 0xb8]
mov qword [rsp + 0x40], rcx
inc rcx
lea rax, [0x005dd380]
xor ebx, ebx
call sym.runtime.makeslice
mov rsi, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 0
inc rsi
mov qword [rsp + 0x80], rsi
mov rdx, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0xb8]
mov rcx, rax
xor edi, edi
mov rax, rdx
call sym.syscall.encodeWTF16
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x80], rcx
inc rbx
cmp rcx, rbx
jae 0x50aca7
jmp 0x50aca9
jmp 0x50acbc
mov edi, 1
lea rsi, [0x005dd380]
call sym.runtime.growslice
jmp 0x50acbc
lea rdx, [rax + rbx*2]
lea rdx, [rdx - 2]
mov word [rdx], 0
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rcx
movups xmmword [rsp + 0x48], xmm15
mov rax, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor edi, edi
xor esi, esi
add rsp, 0xa0
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
nop dword [rax]
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.syscall.UTF16FromString
Function at 0x52cac0
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x52cbca
push rbp
mov rbp, rsp
sub rsp, 0x98
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xb0], rbx
movups xmmword [rsp + 0x78], xmm15
movups xmmword [rsp + 0x40], xmm15
movups xmmword [rsp + 0x50], xmm15
lea rax, [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov rbx, qword [rsp + 0xa8]
call sym.crypto_internal_nistec.p256Polynomial
mov qword [rsp + 0x60], rax
movups xmmword [rsp + 0x20], xmm15
movups xmmword [rsp + 0x30], xmm15
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x68], rcx
mov rdx, qword [rsp + 0xb0]
mov qword [rsp], rcx
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], 1
call sym.crypto_internal_nistec.p256Sqr.abi0
xorps xmm15, xmm15
mov r14, qword [0x0081bc20]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
call sym.crypto_internal_nistec.p256Equal
mov qword [rsp + 0x18], rax
cmp rax, 1
jne 0x52cb7b
jmp 0x52cbb7
lea rax, [0x00605ef2]
mov ebx, 0x17
call sym.errors.New
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], rbx
mov rax, qword [rsp + 0x78]
add rsp, 0x98
pop rbp
ret
movups xmmword [rsp + 0x78], xmm15
xor eax, eax
xor ebx, ebx
add rsp, 0x98
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.crypto_internal_nistec.p256CheckOnCurve
Function at 0x539400
Capabilities:
Encode data using xor

Disassembly:
mov rax, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x10]
mov rdx, qword [rsp + 8]
pxor xmm15, xmm15
pcmpeqd xmm14, xmm14
psubd xmm15, xmm14
movd xmm14, eax
pshufd xmm14, xmm14, 0
pxor xmm0, xmm0
pxor xmm1, xmm1
pxor xmm2, xmm2
pxor xmm3, xmm3
pxor xmm4, xmm4
pxor xmm5, xmm5
mov rax, 0x10
movdqu xmm13, xmm15
movdqu xmm12, xmm13
paddd xmm13, xmm15
pcmpeqd xmm12, xmm14
movdqu xmm6, xmmword [rdi]
movdqu xmm7, xmmword [rdi + 0x10]
movdqu xmm8, xmmword [rdi + 0x20]
movdqu xmm9, xmmword [rdi + 0x30]
movdqu xmm10, xmmword [rdi + 0x40]
movdqu xmm11, xmmword [rdi + 0x50]
add rdi, 0x60
pand xmm6, xmm12
pand xmm7, xmm12
pand xmm8, xmm12
pand xmm9, xmm12
pand xmm10, xmm12
pand xmm11, xmm12
pxor xmm0, xmm6
pxor xmm1, xmm7
pxor xmm2, xmm8
pxor xmm3, xmm9
pxor xmm4, xmm10
pxor xmm5, xmm11
dec rax
jne 0x53944d
movdqu xmmword [rdx], xmm0
movdqu xmmword [rdx + 0x10], xmm1
movdqu xmmword [rdx + 0x20], xmm2
movdqu xmmword [rdx + 0x30], xmm3
movdqu xmmword [rdx + 0x40], xmm4
movdqu xmmword [rdx + 0x50], xmm5
ret

Function at 0x5394e0
Capabilities:
Encode data using xor

Disassembly:
mov rax, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x10]
mov rdx, qword [rsp + 8]
pxor xmm15, xmm15
pcmpeqd xmm14, xmm14
psubd xmm15, xmm14
movd xmm14, eax
pshufd xmm14, xmm14, 0
pxor xmm0, xmm0
pxor xmm1, xmm1
pxor xmm2, xmm2
pxor xmm3, xmm3
mov rax, 0x10
movdqu xmm13, xmm15
movdqu xmm12, xmm13
paddd xmm13, xmm15
pcmpeqd xmm12, xmm14
movdqu xmm4, xmmword [rdi]
movdqu xmm5, xmmword [rdi + 0x10]
movdqu xmm6, xmmword [rdi + 0x20]
movdqu xmm7, xmmword [rdi + 0x30]
movdqu xmm8, xmmword [rdi + 0x40]
movdqu xmm9, xmmword [rdi + 0x50]
movdqu xmm10, xmmword [rdi + 0x60]
movdqu xmm11, xmmword [rdi + 0x70]
add rdi, 0x80
pand xmm4, xmm12
pand xmm5, xmm12
pand xmm6, xmm12
pand xmm7, xmm12
movdqu xmm12, xmm13
paddd xmm13, xmm15
pcmpeqd xmm12, xmm14
pand xmm8, xmm12
pand xmm9, xmm12
pand xmm10, xmm12
pand xmm11, xmm12
pxor xmm0, xmm4
pxor xmm1, xmm5
pxor xmm2, xmm6
pxor xmm3, xmm7
pxor xmm0, xmm8
pxor xmm1, xmm9
pxor xmm2, xmm10
pxor xmm3, xmm11
dec rax
jne 0x539525
movdqu xmmword [rdx], xmm0
movdqu xmmword [rdx + 0x10], xmm1
movdqu xmmword [rdx + 0x20], xmm2
movdqu xmmword [rdx + 0x30], xmm3
ret

Function at 0x558580
Capabilities:
Hash data using fnv

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 8
mov qword [rsp + 0x18], rax
mov byte [rsp + 0x20], bl
mov qword [rsp], 0
movzx ecx, byte [rsp + 0x20]
xor rax, rcx
mov qword [rsp + 0x18], rax
movabs rcx, 0x100000001b3
imul rax, rcx
mov qword [rsp + 0x18], rax
mov qword [rsp], rax
add rsp, 8
pop rbp
ret
Function at 0x5585e0
Capabilities:
Hash data using fnv

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x10], 0
mov qword [rsp + 0x18], 0
jmp 0x55860b
mov rdx, qword [rsp + 0x48]
mov qword [rsp + 0x20], rdx
cmp qword [rsp + 0x18], rdx
jl 0x55861e
jmp 0x558663
mov rdx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
cmp rcx, rax
ja 0x558639
jmp 0x558673
add rbx, rax
movzx ebx, byte [rbx]
xor rdx, rbx
mov qword [rsp + 0x38], rdx
movabs rbx, 0x100000001b3
imul rdx, rbx
mov qword [rsp + 0x38], rdx
jmp 0x55865c
inc qword [rsp + 0x18]
jmp 0x55860b
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x10], rax
add rsp, 0x28
pop rbp
ret
call sym.runtime.panicIndex
nop
int3

Function at 0x558680
Capabilities:
Hash data using fnv

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp], 0
mov qword [rsp + 8], 0
jmp 0x5586a5
cmp qword [rsp + 8], 8
jl 0x5586af
jmp 0x5586e9
movzx ecx, byte [rsp + 0x28]
xor rcx, qword [rsp + 0x20]
mov qword [rsp + 0x20], rcx
mov rdx, qword [rsp + 0x28]
shr rdx, 8
mov qword [rsp + 0x28], rdx
movabs rdx, 0x100000001b3
imul rcx, rdx
mov qword [rsp + 0x20], rcx
nop
jmp 0x5586e2
inc qword [rsp + 8]
jmp 0x5586a5
mov rax, qword [rsp + 0x20]
mov qword [rsp], rax
add rsp, 0x10
pop rbp
ret

Function at 0x558700
Capabilities:
Hash data using fnv

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], ebx
mov qword [rsp], 0
mov qword [rsp + 8], 0
jmp 0x558724
cmp qword [rsp + 8], 4
jl 0x55872e
jmp 0x558764
movzx ecx, byte [rsp + 0x28]
xor qword [rsp + 0x20], rcx
mov ecx, dword [rsp + 0x28]
shr ecx, 8
mov dword [rsp + 0x28], ecx
mov rcx, qword [rsp + 0x20]
movabs rdx, 0x100000001b3
imul rcx, rdx
mov qword [rsp + 0x20], rcx
jmp 0x55875d
inc qword [rsp + 8]
jmp 0x558724
mov rax, qword [rsp + 0x20]
mov qword [rsp], rax
add rsp, 0x10
pop rbp
ret
Function at 0x562b60
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x562db3
push rbp
mov rbp, rsp
sub rsp, 0x90
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], r8
mov qword [rsp + 0xd0], r9
mov rdx, qword [rsp + 0xb0]
mov rax, qword [rsp + 0xa0]
cmp r9, rdx
jbe 0x562bcc
jmp 0x562daa
jmp 0x562bce
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], r9
mov qword [rsp + 0x88], rdx
mov rcx, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xb8]
mov r8, qword [rsp + 0xc0]
mov r10, qword [rsp + 0xc8]
mov qword [rsp], rax
mov qword [rsp + 8], r9
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x40], r10
nop
call sym.math_big.addVV.abi0
xorps xmm15, xmm15
mov r14, qword [0x0081bc20]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x50], rax
test rax, rax
jne 0x562c6b
jmp 0x562d8e
mov rcx, qword [rsp + 0xd0]
sar rcx, 1
add rcx, qword [rsp + 0xd0]
mov qword [rsp + 0x58], rcx
mov rax, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0xa0]
nop dword [rax + rax]
cmp rdx, rcx
jae 0x562caa
jmp 0x562da5
cmp rax, rcx
jbe 0x562cb4
jmp 0x562da0
sub rdx, rax
sub rcx, rax
mov rsi, rdx
neg rdx
shl rax, 3
sar rdx, 0x3f
and rax, rdx
lea rdx, [rbx + rax]
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rsi
mov rax, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0xb0]
jmp 0x562d06
cmp rax, rcx
jbe 0x562d10
jmp 0x562d99
sub rbx, rax
sub rcx, rax
mov rsi, rbx
neg rbx
shl rax, 3
sar rbx, 0x3f
and rax, rbx
add rax, rdx
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rsi
mov rdx, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
mov qword [rsp], rbx
mov qword [rsp + 8], rdi
mov qword [rsp + 0x10], r8
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], rdx
call sym.math_big.addVW.abi0
xorps xmm15, xmm15
mov r14, qword [0x0081bc20]
mov r14, qword gs:[r14]
mov r14, qword [r14]
jmp 0x562d90
jmp 0x562d90
add rsp, 0x90
pop rbp
ret
call sym.runtime.panicSliceB
nop
call sym.runtime.panicSliceB
call sym.runtime.panicSliceAcap
mov rcx, r9
call sym.runtime.panicSliceAcap
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
nop
jmp sym.math_big.karatsubaAdd
Function at 0x562e20
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x563073
push rbp
mov rbp, rsp
sub rsp, 0x90
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], r8
mov qword [rsp + 0xd0], r9
mov rdx, qword [rsp + 0xb0]
mov rax, qword [rsp + 0xa0]
cmp r9, rdx
jbe 0x562e8c
jmp 0x56306a
jmp 0x562e8e
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], r9
mov qword [rsp + 0x88], rdx
mov rcx, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xb8]
mov r8, qword [rsp + 0xc0]
mov r10, qword [rsp + 0xc8]
mov qword [rsp], rax
mov qword [rsp + 8], r9
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x40], r10
nop
call sym.math_big.subVV.abi0
xorps xmm15, xmm15
mov r14, qword [0x0081bc20]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x50], rax
test rax, rax
jne 0x562f2b
jmp 0x56304e
mov rcx, qword [rsp + 0xd0]
sar rcx, 1
add rcx, qword [rsp + 0xd0]
mov qword [rsp + 0x58], rcx
mov rax, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0xa0]
nop dword [rax + rax]
cmp rdx, rcx
jae 0x562f6a
jmp 0x563065
cmp rax, rcx
jbe 0x562f74
jmp 0x563060
sub rdx, rax
sub rcx, rax
mov rsi, rdx
neg rdx
shl rax, 3
sar rdx, 0x3f
and rax, rdx
lea rdx, [rbx + rax]
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rsi
mov rax, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0xb0]
jmp 0x562fc6
cmp rax, rcx
jbe 0x562fd0
jmp 0x563059
sub rbx, rax
sub rcx, rax
mov rsi, rbx
neg rbx
shl rax, 3
sar rbx, 0x3f
and rax, rbx
add rax, rdx
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rsi
mov rdx, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
mov qword [rsp], rbx
mov qword [rsp + 8], rdi
mov qword [rsp + 0x10], r8
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], rdx
call sym.math_big.subVW.abi0
xorps xmm15, xmm15
mov r14, qword [0x0081bc20]
mov r14, qword gs:[r14]
mov r14, qword [r14]
jmp 0x563050
jmp 0x563050
add rsp, 0x90
pop rbp
ret
call sym.runtime.panicSliceB
nop
call sym.runtime.panicSliceB
call sym.runtime.panicSliceAcap
mov rcx, r9
call sym.runtime.panicSliceAcap
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
nop
jmp sym.math_big.karatsubaSub
Function at 0x583740
Capabilities:
Hash data using sha224
Hash data using sha256

Disassembly:
mov qword [rsp + 8], rax
test byte [rax], al
cmp byte [rax + 0x70], 0
jne 0x58374f
jmp 0x5837bb
test byte [rax], al
mov dword [rax], 0xc1059ed8
mov rax, qword [rsp + 8]
test byte [rax], al
mov dword [rax + 4], 0x367cd507
mov rax, qword [rsp + 8]
test byte [rax], al
mov dword [rax + 8], 0x3070dd17
mov rax, qword [rsp + 8]
test byte [rax], al
mov dword [rax + 0xc], 0xf70e5939
mov rax, qword [rsp + 8]
test byte [rax], al
mov dword [rax + 0x10], 0xffc00b31
mov rax, qword [rsp + 8]
test byte [rax], al
mov dword [rax + 0x14], 0x68581511
mov rax, qword [rsp + 8]
test byte [rax], al
mov dword [rax + 0x18], 0x64f98fa7
mov rax, qword [rsp + 8]
test byte [rax], al
mov dword [rax + 0x1c], 0xbefa4fa4
jmp 0x583827
test byte [rax], al
mov dword [rax], 0x6a09e667
mov rax, qword [rsp + 8]
test byte [rax], al
mov dword [rax + 4], 0xbb67ae85
mov rax, qword [rsp + 8]
test byte [rax], al
mov dword [rax + 8], 0x3c6ef372
mov rax, qword [rsp + 8]
test byte [rax], al
mov dword [rax + 0xc], 0xa54ff53a
mov rax, qword [rsp + 8]
test byte [rax], al
mov dword [rax + 0x10], 0x510e527f
mov rax, qword [rsp + 8]
test byte [rax], al
mov dword [rax + 0x14], 0x9b05688c
mov rax, qword [rsp + 8]
test byte [rax], al
mov dword [rax + 0x18], 0x1f83d9ab
mov rax, qword [rsp + 8]
test byte [rax], al
mov dword [rax + 0x1c], 0x5be0cd19
jmp 0x583827
mov rax, qword [rsp + 8]
test byte [rax], al
mov qword [rax + 0x60], 0
mov rax, qword [rsp + 8]
test byte [rax], al
mov qword [rax + 0x68], 0
ret
Function at 0x4154a0
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x41562b
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov rcx, qword [sym.imp.kernel32.dll_VirtualFree]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x4000
call fcn.00432a20
xorps xmm15, xmm15
mov r14, qword [0x005e1cb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x20], 0
jne 0x415505
mov rax, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
jmp 0x415514
add rsp, 0x48
pop rbp
ret
sub rcx, rbx
add rax, rbx
mov rbx, rcx
test rbx, rbx
jbe 0x415533
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x40], rax
mov rcx, rbx
jmp 0x415543
cmp rbx, 0x1000
jae 0x41550b
jmp 0x4155ad
add rsp, 0x48
pop rbp
ret
shr rbx, 1
and rbx, 0xfffffffffffff000
mov qword [rsp + 0x38], rbx
cmp rbx, 0x1000
jae 0x415555
xor edx, edx
jmp 0x4155a4
mov rcx, qword [sym.imp.kernel32.dll_VirtualFree]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x4000
call fcn.00432a20
xorps xmm15, xmm15
mov r14, qword [0x005e1cb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x20], 0
sete al
mov rcx, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x38]
mov edx, eax
mov rax, qword [rsp + 0x40]
test dl, dl
jne 0x415539
jmp 0x415528
call fcn.00463020
xorps xmm15, xmm15
mov r14, qword [0x005e1cb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov qword [rsp + 0x30], rax
call fcn.00436ec0
lea rax, [0x004d4277]
mov ebx, 0x18
nop dword [rax]
call fcn.00437740
mov rax, qword [rsp + 0x38]
call fcn.00437480
lea rax, [0x004d4784]
mov ebx, 0x19
nop dword [rax + rax]
call fcn.00437740
mov rax, qword [rsp + 0x30]
call fcn.00437480
call fcn.00437100
call fcn.00436f20
lea rax, [0x004d6890]
mov ebx, 0x21
call fcn.00435520
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.0045f940
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.004154a0
Function at 0x415660
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x415886
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
mov rcx, qword [sym.imp.kernel32.dll_VirtualAlloc]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x1000
mov qword [rsp + 0x20], 4
call fcn.00432aa0
xorps xmm15, xmm15
mov r14, qword [0x005e1cb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x60]
mov rcx, rax
cmp qword [rsp + 0x28], rax
je 0x4156d3
mov rbx, qword [rsp + 0x68]
mov rax, rbx
jmp 0x4156e2
add rsp, 0x50
pop rbp
ret
sub rdx, rbx
add rcx, rbx
mov rbx, rdx
test rbx, rbx
jbe 0x415705
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rcx
mov rdx, rbx
jmp 0x415715
cmp rbx, 0x1000
jae 0x4156d9
nop
jmp 0x415798
add rsp, 0x50
pop rbp
ret
shr rbx, 1
and rbx, 0xfffffffffffff000
mov qword [rsp + 0x38], rbx
nop word [rax + rax]
cmp rbx, 0x1000
jae 0x41572d
xor esi, esi
jmp 0x41578a
mov rax, qword [sym.imp.kernel32.dll_VirtualAlloc]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x1000
mov qword [rsp + 0x20], 4
call fcn.00432aa0
xorps xmm15, xmm15
mov r14, qword [0x005e1cb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x28], 0
sete al
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x38]
mov esi, eax
mov rax, qword [rsp + 0x68]
test sil, sil
jne 0x41570b
jmp 0x4156f6
call fcn.00463020
xorps xmm15, xmm15
mov r14, qword [0x005e1cb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov dword [rsp + 0x34], eax
cmp eax, 8
jne 0x415820
nop dword [rax + rax]
call fcn.00436ec0
lea rax, [0x004d479d]
mov ebx, 0x19
call fcn.00437740
mov rax, qword [rsp + 0x68]
nop dword [rax + rax]
call fcn.00437480
lea rax, [0x004d4784]
mov ebx, 0x19
call fcn.00437740
mov eax, dword [rsp + 0x34]
call fcn.00437480
nop
call fcn.00437100
call fcn.00436f20
lea rax, [0x004d1222]
mov ebx, 0xd
call fcn.00435520
nop dword [rax + rax]
cmp eax, 0x5af
je 0x4157c0
call fcn.00436ec0
lea rax, [0x004d479d]
mov ebx, 0x19
call fcn.00437740
mov rax, qword [rsp + 0x38]
call fcn.00437480
lea rax, [0x004d4784]
mov ebx, 0x19
call fcn.00437740
mov eax, dword [rsp + 0x34]
nop dword [rax]
call fcn.00437480
call fcn.00437100
call fcn.00436f20
lea rax, [0x004d617b]
mov ebx, 0x1f
nop dword [rax + rax]
call fcn.00435520
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.0045f940
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
nop
jmp fcn.00415660