joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4428a0
Capabilities:
Encode data using xor
Encrypt data using aes
Reference aes constants

Disassembly:
push ebp
push ebx
push edi
push esi
mov esi, dword [esp + 0x1c]
push esi
push dword [esp + 0x1c]
push dword [esp + 0x1c]
call sym.adb.exe_AES_set_encrypt_key
add esp, 0xc
test eax, eax
js 0x442ab4
mov ecx, dword [esi + 0xf0]
lea eax, [ecx*4]
test eax, eax
jle 0x44292e
mov ecx, 4
nop word [eax + eax]
mov edx, dword [esi + ecx*4 - 0x10]
mov edi, dword [esi + eax*4]
mov dword [esi + ecx*4 - 0x10], edi
mov dword [esi + eax*4], edx
mov edx, dword [esi + ecx*4 - 0xc]
mov edi, dword [esi + eax*4 + 4]
mov dword [esi + ecx*4 - 0xc], edi
mov dword [esi + eax*4 + 4], edx
mov edx, dword [esi + ecx*4 - 8]
mov edi, dword [esi + eax*4 + 8]
mov dword [esi + ecx*4 - 8], edi
mov dword [esi + eax*4 + 8], edx
mov edx, dword [esi + ecx*4 - 4]
mov edi, dword [esi + eax*4 + 0xc]
mov dword [esi + ecx*4 - 4], edi
mov dword [esi + eax*4 + 0xc], edx
add eax, 0xfffffffc
cmp ecx, eax
lea ecx, [ecx + 4]
jl 0x4428e0
mov ecx, dword [esi + 0xf0]
xor eax, eax
cmp ecx, 2
jl 0x442ab4
lea ecx, [esi + 0x1c]
mov eax, 1
nop word cs:[eax + eax]
nop dword [eax + eax]
mov ebx, dword [ecx - 0xc]
inc eax
mov edi, ebx
movzx ebp, bh
movzx edx, bl
shr ebx, 0x18
shr edi, 0xe
movzx ebx, byte [ebx*4 + 0x58ef00]
movzx ebp, byte [ebp*4 + 0x58ef00]
movzx edx, byte [edx*4 + 0x58ef00]
and edi, 0x3fc
movzx edi, byte [edi + 0x58ef00]
mov edi, dword [edi*4 + 0x58ff00]
xor edi, dword [ebx*4 + 0x58fb00]
mov ebx, dword [ecx - 8]
xor edi, dword [ebp*4 + 0x590300]
movzx ebp, bl
xor edi, dword [edx*4 + 0x590700]
mov edx, ebx
shr edx, 0xe
and edx, 0x3fc
movzx edx, byte [edx + 0x58ef00]
mov dword [ecx - 0xc], edi
movzx edi, bh
shr ebx, 0x18
movzx ebx, byte [ebx*4 + 0x58ef00]
movzx edi, byte [edi*4 + 0x58ef00]
mov edx, dword [edx*4 + 0x58ff00]
xor edx, dword [ebx*4 + 0x58fb00]
xor edx, dword [edi*4 + 0x590300]
movzx edi, byte [ebp*4 + 0x58ef00]
xor edx, dword [edi*4 + 0x590700]
mov dword [ecx - 8], edx
mov ebx, dword [ecx - 4]
mov edx, ebx
movzx edi, bh
movzx ebp, bl
shr ebx, 0x18
shr edx, 0xe
movzx ebx, byte [ebx*4 + 0x58ef00]
movzx edi, byte [edi*4 + 0x58ef00]
and edx, 0x3fc
movzx edx, byte [edx + 0x58ef00]
mov edx, dword [edx*4 + 0x58ff00]
xor edx, dword [ebx*4 + 0x58fb00]
xor edx, dword [edi*4 + 0x590300]
movzx edi, byte [ebp*4 + 0x58ef00]
xor edx, dword [edi*4 + 0x590700]
mov dword [ecx - 4], edx
mov ebx, dword [ecx]
mov edx, ebx
movzx edi, bh
movzx ebp, bl
shr ebx, 0x18
shr edx, 0xe
movzx ebx, byte [ebx*4 + 0x58ef00]
movzx edi, byte [edi*4 + 0x58ef00]
and edx, 0x3fc
movzx edx, byte [edx + 0x58ef00]
mov edx, dword [edx*4 + 0x58ff00]
xor edx, dword [ebx*4 + 0x58fb00]
xor edx, dword [edi*4 + 0x590300]
movzx edi, byte [ebp*4 + 0x58ef00]
xor edx, dword [edi*4 + 0x590700]
mov dword [ecx], edx
add ecx, 0x10
cmp eax, dword [esi + 0xf0]
jl 0x442950
xor eax, eax
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x442ac0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x20
mov edi, dword [esp + 0x44]
lea eax, [edi - 0x10]
cmp eax, 0x7fffffe7
mov eax, 0xffffffff
ja 0x442bad
mov ecx, edi
and ecx, 7
jne 0x442bad
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov esi, 0x58d390
test eax, eax
cmovne esi, eax
lea eax, [ecx + 8]
push edi
push dword [esp + 0x44]
mov dword [esp + 0x1c], eax
push eax
call sub.msvcrt.dll_memmove
add esp, 0xc
movsd xmm0, qword [esi]
shr edi, 3
xor eax, eax
mov ebx, 1
mov esi, esp
mov dword [esp + 0x10], edi
movsd qword [esp], xmm0
nop dword [eax]
mov ebp, dword [esp + 0x14]
test edi, edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ebx
je 0x442b85
movsd xmm0, qword [ebp]
movsd qword [esp + 8], xmm0
push dword [esp + 0x34]
push esi
push esi
call sym.adb.exe_AES_encrypt
add esp, 0xc
mov eax, ebx
xor byte [esp + 7], bl
xor byte [esp + 6], bh
shr eax, 0x10
xor byte [esp + 5], al
mov eax, ebx
inc ebx
shr eax, 0x18
xor byte [esp + 4], al
movsd xmm0, qword [esp + 8]
movsd qword [ebp], xmm0
add ebp, 8
dec edi
jne 0x442b40
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
inc eax
add ebx, edi
cmp eax, 6
jne 0x442b30
movsd xmm0, qword [esp]
mov eax, dword [esp + 0x3c]
movsd qword [eax], xmm0
mov eax, dword [esp + 0x44]
add eax, 8
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret

Function at 0x442bc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x28
mov esi, dword [esp + 0x4c]
mov eax, 0xffffffff
cmp esi, 0x18
jb 0x442cd4
mov ecx, esi
and ecx, 0x80000007
jne 0x442cd4
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x40]
mov edi, dword [esp + 0x44]
mov edx, 0x58d390
movsd xmm0, qword [eax]
test ecx, ecx
cmovne edx, ecx
lea ecx, [esi - 8]
add eax, 8
mov dword [esp], edx
mov dword [esp + 4], ecx
movsd qword [esp + 0x18], xmm0
push ecx
push eax
push edi
call sub.msvcrt.dll_memmove
add esp, 0xc
shr esi, 3
lea eax, [esi + esi*2]
lea ebx, [eax + eax - 6]
mov eax, 1
sub eax, esi
mov dword [esp + 0xc], eax
lea eax, [esi - 1]
lea esi, [esp + 0x18]
mov dword [esp + 8], eax
mov eax, 5
nop word cs:[eax + eax]
nop
mov ebp, dword [esp + 8]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
test ebp, ebp
je 0x442ca4
mov eax, ebx
xor byte [esp + 0x1f], bl
xor byte [esp + 0x1e], bh
shr eax, 0x10
xor byte [esp + 0x1d], al
mov eax, ebx
shr eax, 0x18
xor byte [esp + 0x1c], al
movsd xmm0, qword [edi + ebp*8 - 8]
movsd qword [esp + 0x20], xmm0
push dword [esp + 0x3c]
push esi
push esi
call sym.adb.exe_AES_decrypt
add esp, 0xc
movsd xmm0, qword [esp + 0x20]
dec ebx
movsd qword [edi + ebp*8 - 8], xmm0
dec ebp
jne 0x442c60
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
add ebx, dword [esp + 0xc]
dec eax
cmp eax, 6
jb 0x442c50
push 8
push dword [esp + 4]
push esi
call sym.adb.exe_CRYPTO_memcmp
add esp, 0xc
mov ecx, eax
xor eax, eax
cmp ecx, 1
sbb eax, eax
not eax
or eax, dword [esp + 4]
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x443060
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
cmp dword [esp + 0x10], 1
jne 0x44307c
push dword [esp + 0xc]
push dword [esp + 0xc]
push dword [esp + 0xc]
call sym.adb.exe_AES_encrypt
add esp, 0xc
ret
jmp sym.adb.exe_AES_decrypt
Function at 0x443a40
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x28]
mov esi, dword [edi]
test eax, eax
je 0x443a8d
test esi, esi
je 0x443a8d
nop word cs:[eax + eax]
nop
movzx ecx, byte [edx + esi]
inc esi
xor cl, byte [ebp]
inc ebp
mov byte [ebx], cl
inc ebx
lea ecx, [eax - 1]
and esi, 0xf
je 0x443a8f
cmp eax, 1
mov eax, ecx
jne 0x443a70
jmp 0x443a8f
mov ecx, eax
cmp ecx, 0x10
jb 0x443afe
mov edi, ecx
mov dword [esp], ecx
nop dword [eax]
sub esp, 0xc
mov eax, dword [esp + 0x40]
mov dword [esp + 4], edx
mov dword [esp], edx
mov dword [esp + 8], eax
call sym.adb.exe_AES_encrypt
mov edx, dword [esp + 0x44]
add esp, 0xc
cmp esi, 0xf
ja 0x443ae2
nop word cs:[eax + eax]
nop dword [eax]
mov eax, dword [edx + esi]
xor eax, dword [ebp + esi]
mov dword [ebx + esi], eax
add esi, 4
cmp esi, 0x10
jb 0x443ad0
add edi, 0xfffffff0
add ebx, 0x10
add ebp, 0x10
xor esi, esi
cmp edi, 0xf
ja 0x443aa0
mov ecx, dword [esp]
mov edi, dword [esp + 0x3c]
xor esi, esi
and ecx, 0xf
test ecx, ecx
je 0x443c21
push dword [esp + 0x34]
push edx
push edx
mov edi, edx
mov dword [esp + 0xc], ecx
call sym.adb.exe_AES_encrypt
mov ecx, dword [esp + 0xc]
add esp, 0xc
cmp ecx, 0x20
jae 0x443b30
mov edx, edi
mov edi, dword [esp + 0x3c]
mov eax, ecx
jmp 0x443c10
lea eax, [ebx + esi]
lea ecx, [ecx + esi]
lea edx, [ebp + esi]
mov dword [esp + 0xc], eax
lea eax, [ebx + ecx]
mov dword [esp + 8], edx
mov dword [esp + 0x10], eax
lea eax, [ebp + ecx]
add ecx, edi
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
cmp eax, dword [esp + 4]
setb byte [esp + 4]
cmp dword [esp + 8], edx
setb byte [esp + 8]
cmp eax, ecx
lea ecx, [edi + esi]
mov ah, byte [esp + 8]
setb al
cmp ecx, edx
setb cl
test byte [esp + 4], ah
jne 0x443c05
and al, cl
jne 0x443c05
mov eax, dword [esp]
lea ecx, [ebp + esi + 0x10]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x38]
mov edx, eax
and edx, 0xffffffe0
lea ecx, [ecx + esi + 0x10]
mov dword [esp + 0xc], ecx
lea ecx, [ebx + esi + 0x10]
sub eax, edx
mov dword [esp + 4], edx
lea esi, [esi + edx]
xor edx, edx
nop word [eax + eax]
mov edi, dword [esp + 8]
movups xmm0, xmmword [edi + edx - 0x10]
movups xmm1, xmmword [edi + edx]
mov edi, dword [esp + 0xc]
movups xmm2, xmmword [edi + edx - 0x10]
movups xmm3, xmmword [edi + edx]
xorps xmm2, xmm0
xorps xmm3, xmm1
movups xmmword [ecx + edx - 0x10], xmm2
movups xmmword [ecx + edx], xmm3
add edx, 0x20
cmp dword [esp + 4], edx
jne 0x443bc0
mov ecx, dword [esp + 4]
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
cmp dword [esp], ecx
jne 0x443c10
jmp 0x443c21
mov eax, dword [esp]
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
movzx ecx, byte [edx + esi]
xor cl, byte [ebp + esi]
dec eax
mov byte [ebx + esi], cl
lea esi, [esi + 1]
jne 0x443c10
mov dword [edi], esi
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x4443a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov esi, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, dword [eax + 4]
mov edi, dword [eax]
cmp ecx, edx
mov ebx, edx
mov dword [esp + 8], ecx
mov dword [esp], esi
mov dword [esp + 4], edi
cmovb ebx, ecx
test ebx, ebx
je 0x44441a
xor eax, eax
xor ebp, ebp
nop word cs:[eax + eax]
nop dword [eax]
mov ecx, dword [esp]
mov esi, dword [esp + 4]
mov ecx, dword [ecx + ebp*4]
mov edi, dword [esi + ebp*4]
mov esi, ecx
sub esi, edi
xor edi, ecx
xor esi, ecx
or esi, edi
xor esi, ecx
sar esi, 0x1f
mov ecx, esi
not ecx
and ecx, 1
or ecx, esi
mov esi, edi
dec edi
xor esi, 0x80000000
test edi, esi
cmovns eax, ecx
inc ebp
cmp ebp, ebx
jb 0x4443e0
jmp 0x44441c
xor eax, eax
mov ecx, dword [esp + 8]
mov edi, dword [esp + 4]
mov ebx, ecx
sub ebx, edx
jae 0x4444ab
mov ebx, edx
xor esi, esi
sub ebx, ecx
cmp ebx, 7
jbe 0x444488
mov ebp, ebx
lea esi, [edi + ecx*4 + 0x10]
pxor xmm0, xmm0
pxor xmm1, xmm1
and ebp, 0xfffffff8
add ecx, ebp
mov dword [esp], ebp
nop
movdqu xmm2, xmmword [esi - 0x10]
movdqu xmm3, xmmword [esi]
add esi, 0x20
add ebp, 0xfffffff8
por xmm0, xmm2
por xmm1, xmm3
jne 0x444450
por xmm1, xmm0
cmp ebx, dword [esp]
pshufd xmm0, xmm1, 0x4e
por xmm0, xmm1
pshufd xmm1, xmm0, 0xe5
por xmm1, xmm0
movd esi, xmm1
je 0x444498
sub edx, ecx
lea ecx, [edi + ecx*4]
nop dword [eax]
or esi, dword [ecx]
add ecx, 4
dec edx
jne 0x444490
mov ecx, esi
dec esi
not ecx
and esi, ecx
sar esi, 0x1f
not esi
or eax, esi
jmp 0x44453f
cmp edx, ecx
jae 0x44453f
mov esi, dword [esp]
xor edi, edi
cmp ebx, 7
jbe 0x44451a
mov ebp, ebx
lea edi, [esi + edx*4 + 0x10]
pxor xmm0, xmm0
pxor xmm1, xmm1
and ebp, 0xfffffff8
add edx, ebp
mov esi, ebp
nop word cs:[eax + eax]
nop dword [eax]
movdqu xmm2, xmmword [edi - 0x10]
movdqu xmm3, xmmword [edi]
add edi, 0x20
add ebp, 0xfffffff8
por xmm0, xmm2
por xmm1, xmm3
jne 0x4444e0
por xmm1, xmm0
cmp ebx, esi
mov esi, dword [esp]
pshufd xmm0, xmm1, 0x4e
por xmm0, xmm1
pshufd xmm1, xmm0, 0xe5
por xmm1, xmm0
movd edi, xmm1
je 0x444528
sub ecx, edx
lea edx, [esi + edx*4]
nop
or edi, dword [edx]
add edx, 4
dec ecx
jne 0x444520
mov ecx, edi
dec edi
not ecx
and edi, ecx
sar edi, 0x1f
mov ecx, edi
and edi, eax
not ecx
and ecx, 1
or ecx, edi
mov eax, ecx
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x446870
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 8
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
xor edi, edi
mov ebx, dword [eax + 4]
mov edx, dword [ecx + 4]
mov eax, ebx
sub eax, edx
mov dword [esp], eax
jge 0x446909
mov eax, dword [esp + 0x20]
mov ecx, edx
xor edi, edi
mov esi, ebx
sub ecx, ebx
cmp ecx, 7
mov ebp, dword [eax]
jbe 0x446900
mov eax, ecx
lea edi, [ebp + ebx*4 + 0x10]
pxor xmm0, xmm0
pxor xmm1, xmm1
and eax, 0xfffffff8
lea esi, [ebx + eax]
mov dword [esp + 4], eax
nop dword [eax + eax]
movdqu xmm2, xmmword [edi - 0x10]
movdqu xmm3, xmmword [edi]
add edi, 0x20
add eax, 0xfffffff8
por xmm0, xmm2
por xmm1, xmm3
jne 0x4468c0
por xmm1, xmm0
cmp ecx, dword [esp + 4]
pshufd xmm0, xmm1, 0x4e
por xmm0, xmm1
pshufd xmm1, xmm0, 0xe5
por xmm1, xmm0
movd edi, xmm1
je 0x446909
nop dword [eax]
or edi, dword [ebp + esi*4]
inc esi
cmp esi, edx
jl 0x446900
cmp edx, ebx
jge 0x446988
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp]
mov esi, dword [eax]
cmp ecx, 7
ja 0x44691f
mov ebp, edx
jmp 0x446978
and ecx, 0xfffffff8
movd xmm1, edi
lea edi, [esi + edx*4 + 0x10]
pxor xmm0, xmm0
lea ebp, [edx + ecx]
mov eax, ecx
nop word cs:[eax + eax]
nop dword [eax]
movdqu xmm2, xmmword [edi - 0x10]
movdqu xmm3, xmmword [edi]
add edi, 0x20
add eax, 0xfffffff8
por xmm1, xmm2
por xmm0, xmm3
jne 0x446940
por xmm0, xmm1
cmp dword [esp], ecx
pshufd xmm1, xmm0, 0x4e
por xmm1, xmm0
pshufd xmm0, xmm1, 0xe5
por xmm0, xmm1
movd edi, xmm0
je 0x446988
mov eax, ebx
lea ecx, [esi + ebp*4]
sub eax, ebp
nop
or edi, dword [ecx]
add ecx, 4
dec eax
jne 0x446980
mov ebp, dword [esp + 0x1c]
cmp ebx, edx
cmovle edx, ebx
test edx, edx
jle 0x4469fd
mov eax, dword [esp + 0x20]
mov esi, dword [ebp]
mov ebx, dword [eax]
xor eax, eax
cmp edx, 3
jbe 0x4469f0
mov eax, edx
movd xmm0, edi
xor ecx, ecx
and eax, 0xfffffffc
movdqu xmm1, xmmword [esi + ecx*4]
movdqu xmm2, xmmword [ebx + ecx*4]
add ecx, 4
cmp eax, ecx
pxor xmm2, xmm1
por xmm0, xmm2
jne 0x4469b0
pshufd xmm1, xmm0, 0x4e
cmp edx, eax
por xmm1, xmm0
pshufd xmm0, xmm1, 0xe5
por xmm0, xmm1
movd edi, xmm0
je 0x4469fd
nop word cs:[eax + eax]
nop dword [eax]
mov ecx, dword [ebx + eax*4]
xor ecx, dword [esi + eax*4]
inc eax
or edi, ecx
cmp eax, edx
jl 0x4469f0
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0xc]
xor eax, eax
xor ecx, dword [ebp + 0xc]
or ecx, edi
sete al
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x4534d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov eax, dword [edx + 4]
test eax, eax
je 0x453573
mov ebp, ecx
mov ecx, dword [edx]
mov edi, edx
xor edx, edx
cmp eax, 8
mov esi, 0
jb 0x453547
mov edx, eax
lea esi, [ecx + 0x10]
pxor xmm0, xmm0
pxor xmm1, xmm1
and edx, 0xfffffff8
mov ebx, edx
nop word cs:[eax + eax]
movdqu xmm2, xmmword [esi - 0x10]
movdqu xmm3, xmmword [esi]
add esi, 0x20
add ebx, 0xfffffff8
por xmm0, xmm2
por xmm1, xmm3
jne 0x453510
por xmm1, xmm0
cmp eax, edx
pshufd xmm0, xmm1, 0x4e
por xmm0, xmm1
pshufd xmm1, xmm0, 0xe5
por xmm1, xmm0
movd esi, xmm1
je 0x453558
mov ebx, eax
sub ebx, edx
lea edx, [ecx + edx*4]
nop
or esi, dword [edx]
add edx, 4
dec ebx
jne 0x453550
test esi, esi
je 0x453573
test eax, eax
jle 0x453565
test byte [ecx], 1
jne 0x453595
push 0xb0
push str.external_boringssl_src_crypto_fipsmodule_bn_montgomery.c
push 0x68
jmp 0x45357f
push 0xac
push str.external_boringssl_src_crypto_fipsmodule_bn_montgomery.c
push 0x69
push 0
push 3
call sym.adb.exe_ERR_put_error
add esp, 0x14
xor eax, eax
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
cmp dword [edi + 0xc], 0
je 0x4535a9
push 0xb4
push str.external_boringssl_src_crypto_fipsmodule_bn_montgomery.c
push 0x6d
jmp 0x45357f
lea ebx, [ebp + 0x14]
cmp ebx, edi
je 0x4535e7
push eax
push ebx
call fcn.00444800
add esp, 8
test eax, eax
je 0x453628
mov eax, dword [edi + 4]
lea ecx, [eax*4]
test ecx, ecx
je 0x4535dc
push ecx
push dword [edi]
push dword [ebx]
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [edi + 4]
mov dword [ebp + 0x18], eax
mov ecx, dword [edi + 0xc]
mov dword [ebp + 0x20], ecx
jmp 0x4535ea
mov eax, dword [ebp + 0x18]
mov dword [esp + 4], ebp
nop
test eax, eax
jle 0x453616
mov ecx, dword [ebx]
lea edx, [eax - 1]
cmp dword [ecx + eax*4 - 4], 0
mov eax, edx
je 0x4535f0
inc edx
mov dword [ebp + 0x18], edx
cmp edx, 2
mov eax, dword [ecx]
jl 0x453639
mov edx, dword [ecx + 4]
mov ecx, eax
mov eax, edx
jmp 0x45363d
mov dword [ebp + 0x18], eax
jne 0x453622
mov dword [ebp + 0x20], 0
mov eax, dword [ebx]
mov ecx, dword [eax]
jmp 0x45363b
push 0xba
push str.external_boringssl_src_crypto_fipsmodule_bn_montgomery.c
push 0x44
jmp 0x45357f
mov ecx, eax
xor eax, eax
mov esi, 1
xor edi, edi
xor ebx, ebx
mov dword [esp + 8], 0x40
mov dword [esp], 0
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], eax
mov ebp, esi
nop
mov eax, dword [esp + 0xc]
and ebp, 1
mov edx, 0
neg ebp
sbb edx, edx
and ebp, ecx
and eax, edx
mov ecx, eax
and eax, edi
xor ecx, edi
mov edi, ebp
and ebp, esi
xor edi, esi
shrd edi, ecx, 1
shr ecx, 1
add ebp, edi
adc eax, ecx
shrd dword [esp], ebx, 1
and edx, 0x80000000
shr ebx, 1
mov ecx, dword [esp + 0x10]
mov esi, ebp
or ebx, edx
dec dword [esp + 8]
mov edi, eax
jne 0x453660
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [eax + 0x28], ecx
mov dword [eax + 0x2c], ebx
mov eax, 1
jmp 0x45358d
Function at 0x4616f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
push eax
mov edi, dword [esp + 0x20]
cmp dword [edi + 0xc], 0
je 0x461739
push 0x13c
push str.external_boringssl_src_crypto_fipsmodule_bn_bn.c
push 0x6d
push 0
push 3
call sym.adb.exe_ERR_put_error
add esp, 0x14
push 0x1c
push str.external_boringssl_src_crypto_fipsmodule_ec_scalar.c
push 0x85
push 0
push 0xf
call sym.adb.exe_ERR_put_error
add esp, 0x14
xor eax, eax
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
mov esi, dword [esp + 0x18]
mov ebx, dword [edi + 4]
mov eax, dword [esi + 0xc]
mov ebp, ebx
sub ebp, eax
jbe 0x4617f3
mov edx, dword [edi]
xor ecx, ecx
cmp ebp, 8
mov edi, eax
jb 0x4617be
mov ecx, edx
mov edx, ebp
pxor xmm0, xmm0
pxor xmm1, xmm1
and edx, 0xfffffff8
mov dword [esp], ecx
lea ecx, [ecx + eax*4 + 0x10]
lea edi, [eax + edx]
mov esi, edx
nop word cs:[eax + eax]
nop dword [eax]
movdqu xmm2, xmmword [ecx - 0x10]
movdqu xmm3, xmmword [ecx]
add ecx, 0x20
add esi, 0xfffffff8
por xmm0, xmm2
por xmm1, xmm3
jne 0x461780
por xmm1, xmm0
cmp ebp, edx
mov esi, dword [esp + 0x18]
mov edx, dword [esp]
pshufd xmm0, xmm1, 0x4e
por xmm0, xmm1
pshufd xmm1, xmm0, 0xe5
por xmm1, xmm0
movd ecx, xmm1
je 0x4617d8
sub ebx, edi
lea edx, [edx + edi*4]
nop word cs:[eax + eax]
nop dword [eax]
or ecx, dword [edx]
add edx, 4
dec ebx
jne 0x4617d0
mov edi, dword [esp + 0x20]
test ecx, ecx
mov ebx, eax
je 0x4617f3
push 0x143
push str.external_boringssl_src_crypto_fipsmodule_bn_bn.c
push 0x66
jmp 0x46170b
mov ecx, dword [esp + 0x1c]
shl eax, 2
test eax, eax
je 0x46180e
push eax
push 0
push ecx
mov ebp, ecx
call sub.msvcrt.dll_memset
mov ecx, ebp
add esp, 0xc
shl ebx, 2
test ebx, ebx
je 0x461825
push ebx
push dword [edi]
push ecx
mov edi, ecx
call sub.msvcrt.dll_memcpy
mov ecx, edi
add esp, 0xc
mov edx, dword [esi + 0xc]
test edx, edx
je 0x461717
mov eax, dword [esi + 8]
xor esi, esi
mov dword [esp], eax
mov eax, ecx
xor ecx, ecx
nop dword [eax]
mov edi, dword [esp]
mov ebp, dword [eax + esi*4]
mov ebx, dword [edi + esi*4]
mov edi, ebp
sub edi, ebx
xor ebx, ebp
xor edi, ebp
or edi, ebx
xor edi, ebp
sar edi, 0x1f
mov ebp, edi
not ebp
and ebp, 1
or ebp, edi
mov edi, ebx
dec ebx
xor edi, 0x80000000
test ebx, edi
cmovns ecx, ebp
inc esi
cmp edx, esi
jne 0x461840
test ecx, ecx
jns 0x461717
mov eax, 1
jmp 0x461731
Function at 0x46bc80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x30
mov ebx, dword [ebp + 0x10]
xor eax, eax
cmp dword [ecx + 8], ebx
jne 0x46bdf0
mov esi, edx
mov edx, dword [ebp + 0x18]
mov eax, dword [ecx]
mov edi, dword [ebp + 0x14]
mov dword [esp + 0xc], ecx
cmp edx, 0x10
mov dword [esp + 4], eax
jb 0x46bd08
mov dword [esp + 8], esi
lea ebx, [esi + 0x10]
mov esi, edx
nop word [eax + eax]
movsd xmm0, qword [edi]
movsd xmm1, qword [edi + 8]
movsd qword [esp + 0x18], xmm1
movsd qword [esp + 0x10], xmm0
movups xmm0, xmmword [ebx]
xorps xmm0, xmmword [esp + 0x10]
movups xmmword [ebx], xmm0
push dword [ebp + 8]
push ebx
push ebx
call dword [esp + 0x10]
add esp, 0xc
add esi, 0xfffffff0
add edi, 0x10
cmp esi, 0xf
ja 0x46bcc0
mov edx, dword [ebp + 0x18]
mov esi, dword [esp + 8]
mov ebx, dword [ebp + 0x10]
mov ecx, dword [esp + 0xc]
and edx, 0xf
test edx, edx
je 0x46bda3
xor eax, eax
cmp edx, 0x1f
ja 0x46bd1f
mov ebx, edx
mov edx, dword [esp + 4]
jmp 0x46bd82
mov ebx, edx
lea ecx, [esi + 0x10]
lea edx, [edi + edx]
cmp edx, ecx
mov edx, dword [esp + 4]
jbe 0x46bd37
lea ecx, [esi + ebx + 0x10]
cmp edi, ecx
jb 0x46bd82
mov eax, ebx
xor ecx, ecx
mov dword [esp + 8], ebx
and eax, 0xffffffe0
nop word cs:[eax + eax]
nop dword [eax]
movups xmm0, xmmword [edi + ecx]
movups xmm2, xmmword [esi + ecx + 0x10]
movups xmm1, xmmword [edi + ecx + 0x10]
movups xmm3, xmmword [esi + ecx + 0x20]
xorps xmm2, xmm0
xorps xmm3, xmm1
movups xmmword [esi + ecx + 0x10], xmm2
movups xmmword [esi + ecx + 0x20], xmm3
add ecx, 0x20
cmp eax, ecx
jne 0x46bd50
mov ebx, dword [esp + 8]
cmp ebx, eax
je 0x46bd8f
movzx ecx, byte [edi + eax]
xor byte [esi + eax + 0x10], cl
inc eax
cmp ebx, eax
jne 0x46bd82
lea eax, [esi + 0x10]
push dword [ebp + 8]
push eax
push eax
call edx
add esp, 0xc
mov ecx, dword [esp + 0xc]
mov ebx, dword [ebp + 0x10]
cmp dword [ecx + 0xc], 0
je 0x46bdba
lea eax, [esi + 0xf]
xor edx, edx
nop
mov byte [eax], 0
inc edx
dec eax
cmp edx, dword [ecx + 0xc]
jb 0x46bdb0
lea eax, [esp + 0x10]
push dword [ebp + 8]
push eax
push esi
call dword [esp + 0x10]
add esp, 0xc
movups xmm0, xmmword [esi + 0x10]
test ebx, ebx
xorps xmm0, xmmword [esp + 0x10]
movups xmmword [esi + 0x10], xmm0
je 0x46bdeb
add esi, 0x10
push ebx
push esi
push dword [ebp + 0xc]
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x46edb0
Capabilities:
Encode data using xor

Disassembly:
push ebx
push edi
push esi
sub esp, 0x30
mov ecx, dword [esp + 0x4c]
xor eax, eax
cmp ecx, 0x30
ja 0x46eef7
mov eax, dword [esp + 0x44]
mov esi, dword [esp + 0x40]
test ecx, ecx
movsd xmm0, qword [eax + 0x28]
movsd qword [esp + 0x28], xmm0
movsd xmm0, qword [eax + 0x20]
movsd qword [esp + 0x20], xmm0
movsd xmm0, qword [eax + 0x18]
movsd qword [esp + 0x18], xmm0
movsd xmm0, qword [eax + 0x10]
movsd qword [esp + 0x10], xmm0
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esp + 8], xmm1
movsd qword [esp], xmm0
je 0x46ee6c
mov eax, dword [esp + 0x48]
xor edx, edx
cmp ecx, 0x1f
jbe 0x46ee60
mov edx, ecx
xor edi, edi
and edx, 0xffffffe0
nop word cs:[eax + eax]
nop dword [eax]
movups xmm0, xmmword [eax + edi]
movups xmm2, xmmword [esp + edi]
movups xmm1, xmmword [eax + edi + 0x10]
movups xmm3, xmmword [esp + edi + 0x10]
xorps xmm2, xmm0
xorps xmm3, xmm1
movups xmmword [esp + edi], xmm2
movups xmmword [esp + edi + 0x10], xmm3
add edi, 0x20
cmp edx, edi
jne 0x46ee30
cmp edx, ecx
je 0x46ee6c
nop dword [eax]
movzx ebx, byte [eax + edx]
xor byte [esp + edx], bl
inc edx
cmp ecx, edx
jne 0x46ee60
movups xmm0, xmmword [esp]
movups xmm1, xmmword [esp + 0x10]
mov eax, esp
xorps xmm0, xmmword [0x58ce80]
xorps xmm1, xmmword [0x58ce90]
movups xmmword [esp], xmm0
movups xmmword [esp + 0x10], xmm1
movups xmm0, xmmword [esp + 0x20]
xorps xmm0, xmmword [0x58cea0]
movups xmmword [esp + 0x20], xmm0
push esi
push 0x100
push eax
call sym.adb.exe_AES_set_encrypt_key
add esp, 0xc
mov dword [esi + 0xf4], sym.adb.exe_AES_encrypt
mov dword [esi + 0xf8], 0
mov eax, 1
movsd xmm0, qword [esp + 0x20]
movsd xmm1, qword [esp + 0x28]
movsd qword [esi + 0x104], xmm1
movsd qword [esi + 0xfc], xmm0
mov dword [esi + 0x114], 0
mov dword [esi + 0x110], 1
add esp, 0x30
pop esi
pop edi
pop ebx
ret