joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1800e3a20
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x50
mov rax, qword [0x180153040]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1800e3a62
movzx ecx, byte [0x180157c47]
call fcn.18003dfe0
mov ecx, 0x75
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1800e3a76
call fcn.18003e130
cmp byte [0x180157c43], 0
je 0x1800e3ab0
mov rax, qword [0x180157e78]
test rax, rax
je 0x1800e3ab0
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x1800e3ab0
mov rax, qword [rcx + 0x298]
test rax, rax
je 0x1800e3ab0
movss xmm0, dword [0x180157c54]
movss dword [rax + 0x3c8], xmm0
mov rax, qword [0x180157e80]
cmp byte [0x180157c44], 0
je 0x1800e3aec
mov edx, dword [0x180157c5c]
test rax, rax
je 0x1800e3aec
mov rcx, qword [rax + 0x628]
test rcx, rcx
je 0x1800e3aec
cmp dword [rcx + 0x130], edx
je 0x1800e3aec
mov dword [rcx + 0x130], edx
mov rax, qword [0x180157e80]
cmp byte [0x180157c45], 0
je 0x1800e3b21
mov edx, dword [0x180157c60]
test rax, rax
je 0x1800e3b21
mov rcx, qword [rax + 0x628]
test rcx, rcx
je 0x1800e3b21
cmp dword [rcx + 0x130], edx
je 0x1800e3b21
mov dword [rcx + 0x130], edx
mov rax, qword [0x180157e80]
cmp byte [0x180157c46], 0
je 0x1800e3c31
test rax, rax
je 0x1800e3b44
mov rcx, qword [rax + 0x628]
test rcx, rcx
je 0x1800e3b44
call fcn.1800f1dd0
call fcn.18003a7a0
mov rcx, qword [rax + 0x30]
movups xmm0, xmmword [rcx + 0x98]
movups xmmword [rsp + 0x20], xmm0
xor r15d, r15d
mov ebx, r15d
mov ebp, dword [rcx + 0xa0]
test ebp, ebp
jle 0x1800e3c2a
mov r14, qword [rsp + 0x20]
nop dword [rax]
nop word [rax + rax]
mov esi, ebx
mov rdi, qword [r14 + rsi*8]
test rdi, rdi
je 0x1800e3c20
cmp qword [0x180165bc8], 0
jne 0x1800e3bde
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r15
mov r8d, 0xc
lea rdx, str.PalCharacter
lea rcx, [rsp + 0x20]
call fcn.18003bfe0
nop
lea rcx, [rsp + 0x20]
call fcn.1800f2bd0
mov qword [0x180165bc8], rax
lea rcx, [rsp + 0x20]
call fcn.18003c120
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x1800e3c20
cmp rax, qword [0x180165bc8]
je 0x1800e3bfb
mov rax, qword [rax + 0x40]
test rax, rax
jne 0x1800e3be7
jmp 0x1800e3c20
mov rdi, qword [r14 + rsi*8]
mov rcx, qword [rdi + 0x628]
test rcx, rcx
je 0x1800e3c20
call fcn.1800f1eb0
test al, al
je 0x1800e3c20
mov rcx, qword [rdi + 0x628]
call fcn.1800f1dd0
inc ebx
cmp ebx, ebp
jl 0x1800e3b80
mov rax, qword [0x180157e80]
cmp byte [0x180157c48], 0
je 0x1800e3c60
test rax, rax
je 0x1800e3c84
mov rax, qword [rax + 0x800]
test rax, rax
je 0x1800e3c84
mov rax, qword [rax + 0x470]
test rax, rax
je 0x1800e3c84
mov byte [rax + 0x362], 0
jmp 0x1800e3c84
test rax, rax
je 0x1800e3c84
mov rax, qword [rax + 0x800]
test rax, rax
je 0x1800e3c84
mov rax, qword [rax + 0x470]
test rax, rax
je 0x1800e3c84
mov byte [rax + 0x362], 1
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.1800f3c50
mov rbx, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x50
pop r15
pop r14
pop rdi
ret
Function at 0x1400b0fa0
Capabilities:
Access peb ldr_data

Disassembly:
push r12
push r14
push r15
sub r12, r12
add r12, 0x60
mov r14, qword gs:[r12]
push r11
mov r11, qword [r14 + 0x10]
add r14, 0x18
mov r15, qword [r14]
mov r12, r15
add r12, 0x10
mov r14, qword [r12]
push rax
mov r12, qword [r14 + 0x30]
cmp r12, 0
je 0x1400b0ffa
mov r15, qword [r14 + 0x60]
mov rax, qword [r15]
and eax, 0xdf00df
mov r15, qword [r15 + 0xb]
add r15d, eax
shr r15d, 2
sub r15d, 0xc914cd2
cmp r15, 0
je 0x1400b1002
mov r14, qword [r14]
jmp 0x1400b0fcb
mov r14d, dword [r12 + 0x3c]
add r14, r12
add r14, 0x10
mov r15d, dword [r14 + 0x78]
add r15, r12
push r10
mov eax, dword [r15 + 0x20]
add rax, r12
mov r10d, dword [rax]
add r10, r12
mov r14d, dword [r10 + 0xb]
sub r14d, 0x746365
cmp r14d, 0
jne 0x1400b1037
jmp 0x1400b1045
inc rax
inc rax
inc rax
inc rax
jmp 0x1400b101e
mov r14d, dword [r15 + 0x20]
sub rax, r14
sub rax, r12
shr eax, 1
mov r14d, dword [r15 + 0x24]
add r14, rax
add r14, r12
mov eax, dword [r14]
mov r14d, dword [r15 + 0x1c]
mov esi, dword [rdi + 0x1c]
shl eax, 0x10
shr eax, 0xe
add r14, r12
add r14, rax
mov eax, dword [r14]
add rax, r12
mov r14d, 0x21a000
invalid
and dword [rax], eax
add r14, r11
add esi, ebx
push r12

Function at 0x1400bee64
Capabilities:
Parse pe header

Disassembly:
xor r8d, r8d
xor edx, edx
jmp 0x1400befb8
Function at 0x1400dd020
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x20
mov rsi, rcx
test rcx, rcx
jne 0x1400dd052
call fcn.1400c1f58
mov dword [rax], 0x16
call fcn.1400c38c0
jmp 0x1400dd171
mov eax, dword [rcx + 0x14]
shr eax, 0xd
test al, 1
je 0x1400dd171
mov eax, dword [rcx + 0x14]
shr eax, 0xc
test al, 1
jne 0x1400dd171
mov eax, dword [rcx + 0x14]
shr eax, 1
test al, 1
je 0x1400dd081
lock or dword [rcx + 0x14], 0x10
jmp 0x1400dd171
lock or dword [rcx + 0x14], 1
mov eax, dword [rcx + 0x14]
test eax, 0x4c0
jne 0x1400dd095
call fcn.1400de3fc
mov rdi, qword [rsi + 8]
mov rcx, rsi
mov ebx, dword [rsi + 0x20]
mov qword [rsi], rdi
call fcn.1400c2310
mov r8d, ebx
mov rdx, rdi
mov ecx, eax
call fcn.1400c4014
mov dword [rsi + 0x10], eax
lea ecx, [rax + 1]
cmp ecx, 1
jbe 0x1400dd15f
mov eax, dword [rsi + 0x14]
or edi, 0xffffffff
test al, 6
jne 0x1400dd12a
mov rcx, rsi
call fcn.1400c2310
cmp eax, edi
je 0x1400dd115
mov rcx, rsi
call fcn.1400c2310
cmp eax, 0xfffffffe
je 0x1400dd115
mov rcx, rsi
call fcn.1400c2310
movsxd rbx, eax
lea r14, [0x140193850]
mov rcx, rsi
sar rbx, 6
call fcn.1400c2310
and eax, 0x3f
lea rcx, [rax + rax*8]
mov rax, qword [r14 + rbx*8]
lea rdx, [rax + rcx*8]
jmp 0x1400dd11c
lea rdx, [0x140183510]
mov al, byte [rdx + 0x38]
and al, 0x82
cmp al, 0x82
jne 0x1400dd12a
lock or dword [rsi + 0x14], 0x20
cmp dword [rsi + 0x20], 0x200
jne 0x1400dd14e
mov eax, dword [rsi + 0x14]
shr eax, 6
test al, 1
je 0x1400dd14e
mov eax, dword [rsi + 0x14]
shr eax, 8
test al, 1
jne 0x1400dd14e
mov dword [rsi + 0x20], 0x1000
mov rax, qword [rsi]
add dword [rsi + 0x10], edi
movzx edi, byte [rax]
inc rax
mov qword [rsi], rax
jmp 0x1400dd174
neg eax
sbb eax, eax
and eax, 8
add eax, 8
lock or dword [rsi + 0x14], eax
and dword [rsi + 0x10], 0
or edi, 0xffffffff
mov rbx, qword [rsp + 0x30]
mov eax, edi
mov rdi, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop r14
ret
Function at 0x1400e4690
Capabilities:
Encrypt data using rc4 prga

Disassembly:
xor edx, edx
jmp 0x1400e47c0
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov ebx, edx
mov rsi, rcx
mov rax, qword [0x140183028]
xor rax, rsp
mov qword [rsp + 0x60], rax
cmp byte [rcx + 0x60], 0
je 0x1400e481c
mov edi, dword [rsi + 0x5c]
test bl, bl
je 0x1400e47fc
mov dword [rsi + 0x5c], 0xffffffff
mov byte [rsi + 0x60], 0
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1400b0a80
mov eax, edi
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movabs rdi, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x58], rdi
mov eax, dword [rsi + 0x58]
cmp eax, 2
mov r14d, 1
cmovge r14d, eax
xor r15d, r15d
mov rcx, qword [rsi + 0x40]
call fcn.1400cb1bc
cmp eax, 0xffffffff
je 0x1400e489e
mov byte [rsp + r15 + 0x58], al
inc r15
cmp r14, r15
jne 0x1400e483e
mov byte [rsp + 0x57], 0xaa
cmp byte [rsi + 0x61], 0
je 0x1400e48a8
mov al, byte [rsp + 0x58]
mov byte [rsp + 0x57], al
test bl, bl
je 0x1400e487a
movzx edi, byte [rsp + 0x57]
mov dword [rsi + 0x5c], edi
jmp 0x1400e47fc
mov edi, r14d
test rdi, rdi
jle 0x1400e494e
mov rdx, qword [rsi + 0x40]
dec rdi
mov eax, edi
movzx ecx, byte [rsp + rax + 0x58]
call fcn.1400ce304
cmp eax, 0xffffffff
jne 0x1400e487d
mov edi, 0xffffffff
jmp 0x1400e47fc
lea r15, [rsp + 0x48]
mov qword [r15], rdi
lea r12, [rsp + 0x40]
mov qword [r12], rdi
mov rcx, qword [rsi + 0x48]
mov rdx, qword [rsi + 0x50]
mov r13d, dword [rdx]
movzx ebp, word [rdx + 4]
movzx edi, word [rdx + 6]
lea r9, [rsp + r14 + 0x58]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x38], r12
lea r8, [rsp + 0x58]
mov qword [rsp + 0x30], r8
lea r8, [rsp + 0x57]
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], r15
lea r8, [rsp + 0x58]
call qword [0x1401ab008]
cmp eax, 1
jne 0x1400e4937
mov rax, qword [rsi + 0x50]
mov dword [rax], r13d
mov word [rax + 4], bp
mov word [rax + 6], di
cmp r14d, 8
je 0x1400e489e
mov rcx, qword [rsi + 0x40]
call fcn.1400cb1bc
cmp eax, 0xffffffff
je 0x1400e489e
mov byte [rsp + r14 + 0x58], al
inc r14
jmp 0x1400e48b9
cmp eax, 2
je 0x1400e489e
cmp eax, 3
je 0x1400e4864
jmp 0x1400e486c
movzx edi, byte [rsp + 0x57]
jmp 0x1400e47fc
Function at 0x1400e4c70
Capabilities:
Encrypt data using rc4 prga

Disassembly:
xor edx, edx
jmp 0x1400e4da0
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov ebx, edx
mov rsi, rcx
mov rax, qword [0x140183028]
xor rax, rsp
mov qword [rsp + 0x60], rax
cmp byte [rcx + 0x5e], 0
je 0x1400e4dfc
movzx edi, word [rsi + 0x5c]
test bl, bl
je 0x1400e4ddc
mov word [rsi + 0x5c], 0xffff
mov byte [rsi + 0x5e], 0
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1400b0a80
mov eax, edi
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movabs rdi, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x58], rdi
mov eax, dword [rsi + 0x58]
cmp eax, 2
mov r14d, 1
cmovge r14d, eax
xor r15d, r15d
mov rcx, qword [rsi + 0x40]
call fcn.1400cb1bc
cmp eax, 0xffffffff
je 0x1400e4e89
mov byte [rsp + r15 + 0x58], al
inc r15
cmp r14, r15
jne 0x1400e4e1e
mov word [rsp + 0x56], 0xaaaa
cmp byte [rsi + 0x5f], 0
je 0x1400e4e92
movsx eax, byte [rsp + 0x58]
mov word [rsp + 0x56], ax
test bl, bl
je 0x1400e4e62
movzx edi, word [rsp + 0x56]
mov word [rsi + 0x5c], di
jmp 0x1400e4ddc
mov edi, r14d
test rdi, rdi
jle 0x1400e4f38
mov rdx, qword [rsi + 0x40]
dec rdi
mov eax, edi
movsx eax, byte [rsp + rax + 0x58]
movzx ecx, ax
call fcn.1400ce304
cmp eax, 0xffffffff
jne 0x1400e4e65
mov di, 0xffff
jmp 0x1400e4ddc
lea r15, [rsp + 0x48]
mov qword [r15], rdi
lea r12, [rsp + 0x40]
mov qword [r12], rdi
mov rcx, qword [rsi + 0x48]
mov rdx, qword [rsi + 0x50]
mov r13d, dword [rdx]
movzx ebp, word [rdx + 4]
movzx edi, word [rdx + 6]
lea r9, [rsp + r14 + 0x58]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x38], r12
lea r8, [rsp + 0x58]
mov qword [rsp + 0x30], r8
lea r8, [rsp + 0x56]
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], r15
lea r8, [rsp + 0x58]
call qword [0x1401ab008]
cmp eax, 1
jne 0x1400e4f21
mov rax, qword [rsi + 0x50]
mov dword [rax], r13d
mov word [rax + 4], bp
mov word [rax + 6], di
cmp r14d, 8
je 0x1400e4e89
mov rcx, qword [rsi + 0x40]
call fcn.1400cb1bc
cmp eax, 0xffffffff
je 0x1400e4e89
mov byte [rsp + r14 + 0x58], al
inc r14
jmp 0x1400e4ea3
cmp eax, 2
je 0x1400e4e89
cmp eax, 3
je 0x1400e4e46
jmp 0x1400e4e50
movzx edi, word [rsp + 0x56]
jmp 0x1400e4ddc

Function at 0x1400e51d0
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
cmp rdx, r8
je 0x1400e5207
movabs rcx, 0xf000000000000000
shl rax, 4
movsx r9, byte [rdx]
add r9, rax
mov r10, r9
and r10, rcx
mov rax, r10
shr rax, 0x38
or rax, r10
xor rax, r9
inc rdx
cmp rdx, r8
jne 0x1400e51e1
ret

Function at 0x1400e5270
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
cmp rdx, r8
je 0x1400e52a8
movabs rcx, 0xf000000000000000
shl rax, 4
movzx r9d, word [rdx]
add r9, rax
mov r10, r9
and r10, rcx
mov rax, r10
shr rax, 0x38
or rax, r10
xor rax, r9
add rdx, 2
cmp rdx, r8
jne 0x1400e5281
ret
Function at 0x1400fa8c0
Capabilities:
Create thread

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x30
mov rsi, r8
mov rdi, rdx
mov rbx, rcx
mov ecx, 0x10
call fcn.1400af654
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r8, [0x1400fa930]
xor ecx, ecx
xor edx, edx
mov r9, rax
call fcn.1400bec44
mov qword [rbx], rax
test rax, rax
je 0x1400fa917
xor eax, eax
add rsp, 0x30
pop rbx
pop rdi
pop rsi
ret
add rsp, 0x30
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_GetLastError]
Function at 0x1401126d0
Capabilities:
Encode data using xor

Disassembly:
push rsi
movsxd r9, dword [rcx + 8]
movsxd rax, dword [rdx + 8]
cmp r9d, eax
jge 0x1401126f5
mov r10, qword [rdx]
xor r8d, r8d
mov r11, r9
or r8, qword [r10 + r11*8]
inc r11
cmp rax, r11
jne 0x1401126e7
jmp 0x1401126f8
xor r8d, r8d
cmp eax, r9d
jge 0x14011270f
mov r10, qword [rcx]
mov r11, rax
or r8, qword [r10 + r11*8]
inc r11
cmp r9, r11
jne 0x140112703
cmp r9d, eax
cmovl eax, r9d
test eax, eax
jle 0x140112738
mov r9, qword [rcx]
mov r10, qword [rdx]
mov eax, eax
xor r11d, r11d
mov rsi, qword [r10 + r11*8]
xor rsi, qword [r9 + r11*8]
or r8, rsi
inc r11
cmp rax, r11
jne 0x140112725
mov eax, dword [rdx + 0x10]
xor eax, dword [rcx + 0x10]
movsxd rcx, eax
xor eax, eax
or rcx, r8
sete al
pop rsi
ret
Function at 0x14011a590
Capabilities:
Hash data using sha512

Disassembly:
push rsi
push rdi
sub rsp, 0x108
mov rsi, r8
mov r8, rdx
mov rdx, rcx
mov rax, qword [0x140183028]
xor rax, rsp
mov qword [rsp + 0x100], rax
movaps xmm0, xmmword [0x14015f250]
lea rdi, [rsp + 0x28]
movups xmmword [rdi + 0xc0], xmm0
movups xmmword [rdi + 0xb0], xmm0
movups xmmword [rdi + 0xa0], xmm0
movups xmmword [rdi + 0x90], xmm0
movups xmmword [rdi + 0x80], xmm0
movups xmmword [rdi + 0x70], xmm0
movups xmmword [rdi + 0x60], xmm0
movups xmmword [rdi + 0x50], xmm0
movabs rax, 0x6a09e667f3bcc908
mov qword [rdi], rax
movabs rax, 0xbb67ae8584caa73b
mov qword [rdi + 8], rax
movabs rax, 0x3c6ef372fe94f82b
mov qword [rdi + 0x10], rax
movabs rax, 0xa54ff53a5f1d36f1
mov qword [rdi + 0x18], rax
movabs rax, 0x510e527fade682d1
mov qword [rdi + 0x20], rax
movabs rax, 0x9b05688c2b3e6c1f
mov qword [rdi + 0x28], rax
movabs rax, 0x1f83d9abfb41bd6b
mov qword [rdi + 0x30], rax
movabs rax, 0x5be0cd19137e2179
mov qword [rdi + 0x38], rax
movabs rax, 0x4000000000
mov qword [rdi + 0xd0], rax
xorps xmm0, xmm0
movups xmmword [rdi + 0x40], xmm0
mov rcx, rdi
call fcn.14004db80
mov edx, dword [rdi + 0xd4]
mov rcx, rsi
mov r8, rdi
call fcn.140051720
mov edx, 0xd8
mov rcx, rdi
call fcn.1400928c0
mov rcx, qword [rsp + 0x100]
xor rcx, rsp
call fcn.1400b0a80
mov rax, rsi
add rsp, 0x108
pop rdi
pop rsi
ret
Function at 0x14011b110
Capabilities:
Hash data using sha512

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1c8
movaps xmmword [rsp + 0x1b0], xmm6
mov rsi, rdx
mov rdi, rcx
mov rax, qword [0x140183028]
xor rax, rsp
mov qword [rsp + 0x1a8], rax
mov rax, qword [r8 + 0x28]
test rax, rax
je 0x14011b177
cmp qword [rax + 0x28], 0
je 0x14011b177
mov dword [rsp + 0x20], 0x136
lea r9, str....._third_party_boringssl_srccrypto_fipsmoduleecdsaecdsa.c
xor r12d, r12d
mov ecx, 0x1a
xor edx, edx
mov r8d, 0x67
jmp 0x14011b36b
mov rbx, qword [r8]
test rbx, rbx
je 0x14011b34c
mov r14, qword [r8 + 0x10]
test r14, r14
je 0x14011b34c
add r14, 0x18
movaps xmm6, xmmword [0x14015f250]
lea r12, [rsp + 0xd0]
movups xmmword [r12 + 0xc0], xmm6
movups xmmword [r12 + 0xb0], xmm6
movups xmmword [r12 + 0xa0], xmm6
movups xmmword [r12 + 0x90], xmm6
movups xmmword [r12 + 0x80], xmm6
movups xmmword [r12 + 0x70], xmm6
movups xmmword [r12 + 0x60], xmm6
movups xmmword [r12 + 0x50], xmm6
lea r15, [rsp + 0x90]
movaps xmmword [r15 + 0x30], xmm6
movaps xmmword [r15 + 0x20], xmm6
movaps xmmword [r15 + 0x10], xmm6
movaps xmmword [r15], xmm6
movabs rax, 0x6a09e667f3bcc908
mov qword [r12], rax
movabs rax, 0xbb67ae8584caa73b
mov qword [r12 + 8], rax
movabs rax, 0x3c6ef372fe94f82b
mov qword [r12 + 0x10], rax
movabs rax, 0xa54ff53a5f1d36f1
mov qword [r12 + 0x18], rax
movabs rax, 0x510e527fade682d1
mov qword [r12 + 0x20], rax
movabs rax, 0x9b05688c2b3e6c1f
mov qword [r12 + 0x28], rax
movabs rax, 0x1f83d9abfb41bd6b
mov qword [r12 + 0x30], rax
movabs rax, 0x5be0cd19137e2179
mov qword [r12 + 0x38], rax
mov dword [r12 + 0xd0], 0
xorps xmm0, xmm0
movups xmmword [r12 + 0x40], xmm0
mov dword [r12 + 0xd4], 0x40
movsxd r8, dword [rbx + 0x18]
shl r8, 3
mov rcx, r12
mov rdx, r14
call fcn.14004db80
mov rcx, r12
mov rdx, rdi
mov r8, rsi
call fcn.14004db80
mov edx, dword [r12 + 0xd4]
mov rcx, r15
mov r8, r12
call fcn.140051720
movabs rbp, 0xaaaaaaaaaaaaaaaa
lea r13, [rsp + 0x40]
mov qword [rsp + 0x80], rbp
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm6
movaps xmmword [rsp + 0x50], xmm6
movaps xmmword [rsp + 0x40], xmm6
movsxd r9, dword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
mov qword [rsp + 0x20], r15
mov edx, 1
mov rcx, r13
call fcn.140118d50
test eax, eax
je 0x14011b39f
mov dword [rsp + 0x3c], 0xaaaaaaaa
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rdi
mov rcx, rbx
lea rdx, [rsp + 0x3c]
mov r8, r14
mov r9, r13
call fcn.14011adc0
mov r12, rax
test rax, rax
jne 0x14011b370
cmp dword [rsp + 0x3c], 0
jne 0x14011b2d8
jmp 0x14011b370
mov dword [rsp + 0x20], 0x13c
lea r9, str....._third_party_boringssl_srccrypto_fipsmoduleecdsaecdsa.c
xor r12d, r12d
mov ecx, 0x1a
xor edx, edx
mov r8d, 0x43
call fcn.140139cc0
mov rcx, qword [rsp + 0x1a8]
xor rcx, rsp
call fcn.1400b0a80
mov rax, r12
movaps xmm6, xmmword [rsp + 0x1b0]
add rsp, 0x1c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor r12d, r12d
jmp 0x14011b370
Function at 0x140143e60
Capabilities:
Encrypt data using curve25519

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x110
mov rbx, r8
mov rsi, rdx
mov rdi, rcx
mov rax, qword [0x140183028]
xor rax, rsp
mov qword [rsp + 0x108], rax
movaps xmm0, xmmword [0x14015f250]
lea r14, [rsp + 0xc0]
movaps xmmword [r14 + 0x30], xmm0
movaps xmmword [r14 + 0x20], xmm0
movaps xmmword [r14 + 0x10], xmm0
movaps xmmword [r14], xmm0
mov edx, 0x20
mov rcx, r8
mov r8, r14
call fcn.14011a590
and byte [r14], 0xf8
mov al, byte [r14 + 0x1f]
and al, 0x3f
or al, 0x40
mov byte [r14 + 0x1f], al
lea r15, [rsp + 0x20]
mov r8d, 0xa0
mov rcx, r15
mov dl, 0xaa
call fcn.1400b2bb0
lea r8, [0x140171a50]
mov rcx, r15
mov rdx, r14
call fcn.1400a3100
mov rcx, rdi
mov rdx, r15
call fcn.140142f80
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsi + 0x20], xmm0
movups xmmword [rsi + 0x30], xmm1
mov rcx, qword [rsp + 0x108]
xor rcx, rsp
call fcn.1400b0a80
nop
add rsp, 0x110
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
Function at 0x140001ce0
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 0x17]
inc r8d
xor byte [rdx], al
inc rdx
cmp r8d, 0x17
jb 0x140001ce6
mov rax, rcx
ret

Function at 0x140001cfc
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 0x13]
inc r8d
xor byte [rdx], al
inc rdx
cmp r8d, 0x13
jb 0x140001d02
mov rax, rcx
ret

Function at 0x140001d18
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 0xe]
inc r8d
xor byte [rdx], al
inc rdx
cmp r8d, 0xe
jb 0x140001d1e
mov rax, rcx
ret

Function at 0x140001d34
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 0x12]
inc r8d
xor byte [rdx], al
inc rdx
cmp r8d, 0x12
jb 0x140001d3a
mov rax, rcx
ret

Function at 0x140001d50
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 0x11]
inc r8d
xor byte [rdx], al
inc rdx
cmp r8d, 0x11
jb 0x140001d56
mov rax, rcx
ret

Function at 0x140001d6c
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 0x10]
inc r8d
xor byte [rdx], al
inc rdx
cmp r8d, 0x10
jb 0x140001d72
mov rax, rcx
ret

Function at 0x140001d88
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 0x15]
inc r8d
xor byte [rdx], al
inc rdx
cmp r8d, 0x15
jb 0x140001d8e
mov rax, rcx
ret

Function at 0x140001da4
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 0x14]
inc r8d
xor byte [rdx], al
inc rdx
cmp r8d, 0x14
jb 0x140001daa
mov rax, rcx
ret

Function at 0x140001dc0
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 9]
inc r8d
xor byte [rdx], al
inc rdx
cmp r8d, 9
jb 0x140001dc6
mov rax, rcx
ret

Function at 0x140001ddc
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 0xc]
inc r8d
xor byte [rdx], al
inc rdx
cmp r8d, 0xc
jb 0x140001de2
mov rax, rcx
ret

Function at 0x140001df8
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 0xd]
inc r8d
xor byte [rdx], al
inc rdx
cmp r8d, 0xd
jb 0x140001dfe
mov rax, rcx
ret

Function at 0x140001e14
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 0x12]
inc r8d
xor al, byte [rdx]
movsx eax, al
mov word [rdx], ax
lea rdx, [rdx + 2]
cmp r8d, 9
jb 0x140001e1a
mov rax, rcx
ret

Function at 0x140001e38
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 2]
inc r8d
xor byte [rdx], al
inc rdx
cmp r8d, 2
jb 0x140001e3e
mov rax, rcx
ret

Function at 0x1400037b0
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 5]
inc r8d
xor byte [rdx], al
inc rdx
cmp r8d, 5
jb 0x1400037b6
mov rax, rcx
ret

Function at 0x1400037cc
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 0x4a]
inc r8d
xor al, byte [rdx]
movsx eax, al
mov word [rdx], ax
lea rdx, [rdx + 2]
cmp r8d, 0x25
jb 0x1400037d2
mov rax, rcx
ret
Function at 0x1400037f0
Capabilities:
Encode data using xor

Disassembly:
xor r8d, r8d
mov rdx, rcx
mov al, byte [rdx + 8]
inc r8d
xor al, byte [rdx]
movsx eax, al
mov word [rdx], ax
lea rdx, [rdx + 2]
cmp r8d, 4
jb 0x1400037f6
mov rax, rcx
ret