joyce8/EMBER2024-capa huggingface dataset:
Function at 0x306a8
Capabilities:
Hash data using sha1

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rcx
mov rcx, qword [rcx + 0xf8]
test rcx, rcx
je 0x306c4
call fcn.00030fa8
jmp 0x306d6
mov ecx, 0x180
call qword [0x00083fc0]
mov qword [rbx + 0xf8], rax
mov rcx, qword [rbx + 0xd0]
test rcx, rcx
je 0x306e9
call fcn.000310dc
jmp 0x306fb
mov ecx, 0x98
call qword [0x00083fc0]
mov qword [rbx + 0xd0], rax
mov rcx, qword [rbx + 0xd8]
test rcx, rcx
je 0x3070e
call fcn.00030ffc
jmp 0x30720
mov ecx, 0xa80
call qword [0x00083fc0]
mov qword [rbx + 0xd8], rax
mov rcx, qword [rbx + 0xd8]
test rcx, rcx
je 0x30886
cmp qword [rbx + 0xf8], 0
je 0x30886
cmp qword [rbx + 0xd0], 0
je 0x30886
xor edx, edx
mov r8d, 0xa80
call fcn.000554c0
mov rcx, qword [rbx + 0xf8]
xor edx, edx
mov r8d, 0x180
call fcn.000554c0
mov rcx, qword [rbx + 0xd0]
xor edx, edx
mov r8d, 0x98
call fcn.000554c0
mov r11, qword [rbx + 0xd8]
mov edx, 0x98badcfe
and dword [r11 + 0x388], 0
and dword [r11 + 0x38c], 0
mov dword [r11 + 0x398], edx
mov ecx, 0x10325476
mov r9d, 0x67452301
mov r8d, 0xefcdab89
mov dword [r11 + 0x39c], ecx
mov dword [r11 + 0x390], r9d
mov dword [r11 + 0x394], r8d
mov rax, qword [rbx + 0xd8]
and dword [rax + 0x460], 0
and dword [rax + 0x464], 0
mov dword [rax + 0x470], edx
mov dword [rax + 0x474], ecx
mov dword [rax + 0x468], r9d
mov dword [rax + 0x46c], r8d
mov dword [rax + 0x478], 0xc3d2e1f0
mov rcx, qword [rbx + 0xd8]
xor edx, edx
add rcx, 0x53c
call fcn.00031de4
mov rcx, qword [rbx + 0xd8]
mov edx, 1
add rcx, 0x628
call fcn.00035f2c
mov rcx, qword [rbx + 0xd8]
lea rax, [0x0002f694]
mov qword [rcx + 0x800], rax
mov rax, qword [rbx + 0xd8]
xor edx, edx
mov dword [rax], 2
mov rcx, qword [rbx + 0xd8]
mov r8d, 0x268
add rcx, 0x108
call fcn.000554c0
mov rax, qword [rbx + 0x190]
mov r11, qword [rbx + 0xd8]
mov qword [r11 + 0x378], rax
xor eax, eax
jmp 0x308b6
lea rcx, str.malloc___of_ssl_sub_contexts_failed
call fcn.0003f5b0
lea r8, str.d:code20210715_kernelsslpcmonitorpolarssl2_ssl_tls.c
mov r9d, 0xcb2
mov edx, 1
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.0003f5f8
mov eax, 0xffff8100
add rsp, 0x30
pop rbx
ret

Function at 0x31de4
Capabilities:
Hash data using sha224
Hash data using sha256

Disassembly:
and dword [rcx], 0
and dword [rcx + 4], 0
test edx, edx
jne 0x31e29
mov dword [rcx + 8], 0x6a09e667
mov dword [rcx + 0xc], 0xbb67ae85
mov dword [rcx + 0x10], 0x3c6ef372
mov dword [rcx + 0x14], 0xa54ff53a
mov dword [rcx + 0x18], 0x510e527f
mov dword [rcx + 0x1c], 0x9b05688c
mov dword [rcx + 0x20], 0x1f83d9ab
mov dword [rcx + 0x24], 0x5be0cd19
jmp 0x31e61
mov dword [rcx + 8], 0xc1059ed8
mov dword [rcx + 0xc], 0x367cd507
mov dword [rcx + 0x10], 0x3070dd17
mov dword [rcx + 0x14], 0xf70e5939
mov dword [rcx + 0x18], 0xffc00b31
mov dword [rcx + 0x1c], 0x68581511
mov dword [rcx + 0x20], 0x64f98fa7
mov dword [rcx + 0x24], 0xbefa4fa4
mov dword [rcx + 0xe8], edx
ret
Function at 0x348b4
Capabilities:
Authenticate hmac
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x50
mov rax, qword [0x00065100]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov r14d, 0x40
mov r12d, r9d
mov rbx, r8
mov rsi, rdx
mov rbp, rcx
cmp r8, r14
jbe 0x3490f
lea r8, [rsp + 0x20]
mov rdx, rbx
mov rcx, rsi
call fcn.00034844
mov r11d, r12d
lea rsi, [rsp + 0x20]
neg r11d
sbb rbx, rbx
and rbx, 0xfffffffffffffffc
add rbx, 0x20
lea rcx, [rbp + 0x68]
mov r8, r14
mov edx, 0x36
call fcn.000554c0
lea rdi, [rbp + 0xa8]
mov r8, r14
mov rcx, rdi
mov edx, 0x5c
call fcn.000554c0
test rbx, rbx
je 0x34951
mov al, byte [rsi]
xor byte [rdi - 0x40], al
mov al, byte [rsi]
inc rsi
xor byte [rdi], al
inc rdi
sub rbx, 1
jne 0x3493c
mov edx, r12d
mov rcx, rbp
call fcn.00031de4
lea rdx, [rbp + 0x68]
mov r8, r14
call fcn.000345b0
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.00055060
add rsp, 0x50
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x35ddc
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
movaps xmmword [rsp + 0x30], xmm6
mov rax, qword [0x00065100]
xor rax, rsp
mov qword [rsp + 0x20], rax
mov rbx, qword [rsp + 0x98]
mov r14, r9
mov r13d, edx
mov r15, rcx
test r8b, 0xf
je 0x35e28
mov eax, 0xffffffde
jmp 0x35ef9
test edx, edx
jne 0x35e8c
test r8, r8
je 0x35ef7
mov r12, qword [rsp + 0x90]
lea rdi, [r8 - 1]
mov rsi, r9
shr rdi, 4
sub rsi, rbx
inc rdi
movdqu xmm6, xmmword [r12]
mov r9, rbx
mov r8, r12
xor edx, edx
mov rcx, r15
call fcn.00035318
mov ecx, 0x10
mov al, byte [rsi + rbx]
xor byte [rbx], al
inc rbx
sub rcx, 1
jne 0x35e69
add r12, 0x10
sub rsi, 0x10
sub rdi, 1
movdqu xmmword [r14], xmm6
jne 0x35e4e
jmp 0x35ef7
test r8, r8
je 0x35ef7
mov rsi, qword [rsp + 0x90]
lea rdi, [r8 - 1]
mov r12, r9
shr rdi, 4
sub r12, rsi
inc rdi
mov rdx, rbx
mov rcx, rsi
mov r8d, 0x10
sub rdx, rsi
mov al, byte [r12 + rcx]
xor al, byte [rcx]
mov byte [rdx + rcx], al
inc rcx
sub r8, 1
jne 0x35eb9
mov r9, rbx
mov r8, rbx
mov edx, r13d
mov rcx, r15
call fcn.00035318
add rsi, 0x10
sub r12, 0x10
movdqu xmm5, xmmword [rbx]
add rbx, 0x10
sub rdi, 1
movdqu xmmword [r14], xmm5
jne 0x35eaa
xor eax, eax
mov rcx, qword [rsp + 0x20]
xor rcx, rsp
call fcn.00055060
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [rsp + 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret

Function at 0x35f2c
Capabilities:
Hash data using sha384
Hash data using sha512

Disassembly:
and qword [rcx], 0
and qword [rcx + 8], 0
test edx, edx
jne 0x35fa7
movabs rax, 0x6a09e667f3bcc908
mov qword [rcx + 0x10], rax
movabs rax, 0xbb67ae8584caa73b
mov qword [rcx + 0x18], rax
movabs rax, 0x3c6ef372fe94f82b
mov qword [rcx + 0x20], rax
movabs rax, 0xa54ff53a5f1d36f1
mov qword [rcx + 0x28], rax
movabs rax, 0x510e527fade682d1
mov qword [rcx + 0x30], rax
movabs rax, 0x9b05688c2b3e6c1f
mov qword [rcx + 0x38], rax
movabs rax, 0x1f83d9abfb41bd6b
mov qword [rcx + 0x40], rax
movabs rax, 0x5be0cd19137e2179
jmp 0x36013
movabs rax, 0xcbbb9d5dc1059ed8
mov qword [rcx + 0x10], rax
movabs rax, 0x629a292a367cd507
mov qword [rcx + 0x18], rax
movabs rax, 0x9159015a3070dd17
mov qword [rcx + 0x20], rax
movabs rax, 0x152fecd8f70e5939
mov qword [rcx + 0x28], rax
movabs rax, 0x67332667ffc00b31
mov qword [rcx + 0x30], rax
movabs rax, 0x8eb44a8768581511
mov qword [rcx + 0x38], rax
movabs rax, 0xdb0c2e0d64f98fa7
mov qword [rcx + 0x40], rax
movabs rax, 0x47b5481dbefa4fa4
mov qword [rcx + 0x48], rax
mov dword [rcx + 0x1d0], edx
ret
Function at 0x36a28
Capabilities:
Authenticate hmac
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x70
mov rax, qword [0x00065100]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov r14d, 0x80
mov r12d, r9d
mov rbx, r8
mov rsi, rdx
mov rbp, rcx
cmp r8, r14
jbe 0x36a83
lea r8, [rsp + 0x20]
mov rdx, rbx
mov rcx, rsi
call fcn.000369b8
mov r11d, r12d
lea rsi, [rsp + 0x20]
neg r11d
sbb rbx, rbx
and rbx, 0xfffffffffffffff0
add rbx, 0x40
lea rcx, [rbp + 0xd0]
mov r8, r14
mov edx, 0x36
call fcn.000554c0
lea rdi, [rbp + 0x150]
mov r8, r14
mov rcx, rdi
mov edx, 0x5c
call fcn.000554c0
test rbx, rbx
je 0x36ac8
mov al, byte [rsi]
xor byte [rdi - 0x80], al
mov al, byte [rsi]
inc rsi
xor byte [rdi], al
inc rdi
sub rbx, 1
jne 0x36ab3
mov edx, r12d
mov rcx, rbp
call fcn.00035f2c
lea rdx, [rbp + 0xd0]
mov r8, r14
call fcn.00036570
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.00055060
add rsp, 0x70
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x3dab8
Capabilities:
Hash data with md5

Disassembly:
push rbx
sub rsp, 0x110
mov rax, qword [0x00065100]
xor rax, rsp
mov qword [rsp + 0x100], rax
and dword [rsp + 0x20], 0
and dword [rsp + 0x24], 0
mov rbx, r8
mov r8, rdx
mov rdx, rcx
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x28], 0x67452301
mov dword [rsp + 0x2c], 0xefcdab89
mov dword [rsp + 0x30], 0x98badcfe
mov dword [rsp + 0x34], 0x10325476
call fcn.0003d89c
lea rcx, [rsp + 0x20]
mov rdx, rbx
call fcn.0003d974
mov rcx, qword [rsp + 0x100]
xor rcx, rsp
call fcn.00055060
add rsp, 0x110
pop rbx
ret

Function at 0x3db3c
Capabilities:
Authenticate hmac
Encode data using xor
Hash data with md5

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x40
mov rax, qword [0x00065100]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov r13d, 0x40
mov rdi, r8
mov rsi, rdx
mov rbx, rcx
cmp r8, r13
jbe 0x3db88
lea r8, [rsp + 0x20]
mov rdx, rdi
mov rcx, rsi
call fcn.0003dab8
lea edi, [r13 - 0x30]
lea rsi, [rsp + 0x20]
lea rcx, [rbx + 0x58]
mov r8, r13
mov edx, 0x36
call fcn.000554c0
lea rbp, [rbx + 0x98]
mov r8, r13
mov rcx, rbp
mov edx, 0x5c
call fcn.000554c0
test rdi, rdi
je 0x3dbcb
mov al, byte [rsi]
xor byte [rbp - 0x40], al
mov al, byte [rsi]
inc rsi
xor byte [rbp], al
inc rbp
sub rdi, 1
jne 0x3dbb5
and dword [rbx], 0
and dword [rbx + 4], 0
lea rdx, [rbx + 0x58]
mov r8, r13
mov rcx, rbx
mov dword [rbx + 8], 0x67452301
mov dword [rbx + 0xc], 0xefcdab89
mov dword [rbx + 0x10], 0x98badcfe
mov dword [rbx + 0x14], 0x10325476
call fcn.0003d89c
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.00055060
mov rbx, qword [rsp + 0x88]
add rsp, 0x40
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret

Function at 0x3dc24
Capabilities:
Hash data with md5

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x00065100]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov rdi, rdx
lea rdx, [rsp + 0x20]
mov rbx, rcx
call fcn.0003d974
and dword [rbx], 0
and dword [rbx + 4], 0
lea rdx, [rbx + 0x98]
mov r8d, 0x40
mov rcx, rbx
mov dword [rbx + 8], 0x67452301
mov dword [rbx + 0xc], 0xefcdab89
mov dword [rbx + 0x10], 0x98badcfe
mov dword [rbx + 0x14], 0x10325476
call fcn.0003d89c
lea rdx, [rsp + 0x20]
mov r8d, 0x10
mov rcx, rbx
call fcn.0003d89c
mov rdx, rdi
mov rcx, rbx
call fcn.0003d974
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.00055060
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret

Function at 0x3f2d8
Capabilities:
Hash data using sha1

Disassembly:
push rbx
sub rsp, 0x110
mov rax, qword [0x00065100]
xor rax, rsp
mov qword [rsp + 0x100], rax
and dword [rsp + 0x20], 0
and dword [rsp + 0x24], 0
mov rbx, r8
mov r8, rdx
mov rdx, rcx
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x28], 0x67452301
mov dword [rsp + 0x2c], 0xefcdab89
mov dword [rsp + 0x30], 0x98badcfe
mov dword [rsp + 0x34], 0x10325476
mov dword [rsp + 0x38], 0xc3d2e1f0
call fcn.0003f09c
lea rcx, [rsp + 0x20]
mov rdx, rbx
call fcn.0003f174
mov rcx, qword [rsp + 0x100]
xor rcx, rsp
call fcn.00055060
add rsp, 0x110
pop rbx
ret
Function at 0x3f364
Capabilities:
Authenticate hmac
Encode data using xor
Hash data using sha1

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x40
mov rax, qword [0x00065100]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov r13d, 0x40
mov rdi, r8
mov rsi, rdx
mov rbx, rcx
cmp r8, r13
jbe 0x3f3b0
lea r8, [rsp + 0x20]
mov rdx, rdi
mov rcx, rsi
call fcn.0003f2d8
lea edi, [r13 - 0x2c]
lea rsi, [rsp + 0x20]
lea rcx, [rbx + 0x5c]
mov r8, r13
mov edx, 0x36
call fcn.000554c0
lea rbp, [rbx + 0x9c]
mov r8, r13
mov rcx, rbp
mov edx, 0x5c
call fcn.000554c0
test rdi, rdi
je 0x3f3f3
mov al, byte [rsi]
xor byte [rbp - 0x40], al
mov al, byte [rsi]
inc rsi
xor byte [rbp], al
inc rbp
sub rdi, 1
jne 0x3f3dd
and dword [rbx], 0
and dword [rbx + 4], 0
lea rdx, [rbx + 0x5c]
mov r8, r13
mov rcx, rbx
mov dword [rbx + 8], 0x67452301
mov dword [rbx + 0xc], 0xefcdab89
mov dword [rbx + 0x10], 0x98badcfe
mov dword [rbx + 0x14], 0x10325476
mov dword [rbx + 0x18], 0xc3d2e1f0
call fcn.0003f09c
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.00055060
mov rbx, qword [rsp + 0x88]
add rsp, 0x40
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret

Function at 0x3f454
Capabilities:
Hash data using sha1

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x00065100]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rdi, rdx
lea rdx, [rsp + 0x20]
mov rbx, rcx
call fcn.0003f174
and dword [rbx], 0
and dword [rbx + 4], 0
lea rdx, [rbx + 0x9c]
mov r8d, 0x40
mov rcx, rbx
mov dword [rbx + 8], 0x67452301
mov dword [rbx + 0xc], 0xefcdab89
mov dword [rbx + 0x10], 0x98badcfe
mov dword [rbx + 0x14], 0x10325476
mov dword [rbx + 0x18], 0xc3d2e1f0
call fcn.0003f09c
lea rdx, [rsp + 0x20]
mov r8d, 0x14
mov rcx, rbx
call fcn.0003f09c
mov rdx, rdi
mov rcx, rbx
call fcn.0003f174
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.00055060
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret

Function at 0x40554
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x80
mov rax, qword [0x00065100]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov rdi, qword [rsp + 0xe0]
mov rsi, rdx
xor edx, edx
mov r13, r8
mov rbp, rcx
lea r8d, [rdx + 0x40]
lea rcx, [rsp + 0x30]
mov r14, r9
call fcn.000554c0
mov rax, qword [rdi]
xor r11d, r11d
mov dword [rsp + 0x20], r11d
test rsi, rsi
je 0x40627
mov r12d, dword [rax + 0x10]
mov rbx, r12
cmp rsi, r12
mov rcx, rdi
cmovb rbx, rsi
call fcn.00034b94
mov r11, qword [rdi]
test r11, r11
je 0x40605
mov rcx, qword [rdi + 8]
mov r8, r14
mov rdx, r13
call qword [r11 + 0x20]
mov r11, qword [rdi]
test r11, r11
je 0x40605
mov rcx, qword [rdi + 8]
lea rdx, [rsp + 0x20]
mov r8d, 4
call qword [r11 + 0x20]
mov r11, qword [rdi]
test r11, r11
je 0x40605
mov rcx, qword [rdi + 8]
lea rdx, [rsp + 0x30]
call qword [r11 + 0x28]
xor ecx, ecx
test rbx, rbx
je 0x4061e
mov al, byte [rsp + rcx + 0x30]
inc rcx
xor byte [rbp], al
inc rbp
cmp rcx, rbx
jb 0x4060c
inc byte [rsp + 0x23]
sub rsi, rbx
jne 0x405ad
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.00055060
add rsp, 0x80
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x408d4
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x290
mov rax, qword [0x00065100]
xor rax, rsp
mov qword [rsp + 0x280], rax
cmp dword [rcx + 0x148], 1
mov r12, qword [rsp + 0x300]
mov r9, qword [rsp + 0x308]
mov r13, qword [rsp + 0x310]
mov r10, rcx
jne 0x40a7d
mov rsi, qword [rcx + 8]
lea rax, [rsi - 0x10]
cmp rax, 0x1f0
ja 0x40a7d
mov ecx, dword [rcx + 0x14c]
call fcn.00034ab0
mov rbx, rax
test rax, rax
je 0x40a7d
lea rax, [rsp + 0x80]
mov rcx, r10
mov qword [rsp + 0x20], rax
call fcn.000401f8
test eax, eax
jne 0x40a82
movzx r14d, byte [rbx + 0x10]
lea rcx, [rsp + 0x30]
mov rdx, rbx
call fcn.00034b08
lea r8, [rsp + 0x40]
xor edx, edx
xor ecx, ecx
call qword [rbx + 0x30]
lea rax, [rsp + 0x30]
mov rbx, rsi
sub rbx, r14
lea rdi, [rsp + r14 + 0x81]
lea rcx, [rsp + 0x81]
dec rbx
mov rdx, r14
mov r8, rdi
mov r9, rbx
mov qword [rsp + 0x20], rax
call fcn.00040554
lea r11, [rsp + 0x30]
lea r8, [rsp + 0x81]
mov r9, r14
mov rdx, rbx
mov rcx, rdi
mov qword [rsp + 0x20], r11
call fcn.00040554
lea rcx, [rsp + 0x30]
call fcn.00034b5c
mov r11b, byte [rsp + 0x80]
xor ecx, ecx
lea rdx, [rsp + r14 + 0x81]
test r14d, r14d
je 0x40a0c
mov al, byte [rsp + rcx + 0x40]
inc rcx
xor al, byte [rdx]
inc rdx
or r11b, al
cmp rcx, r14
jb 0x409f8
lea ecx, [r14 + r14]
mov r8, rsi
xor r10d, r10d
sub r8, rcx
xor bl, bl
xor r9d, r9d
sub r8, 2
je 0x40a3b
or bl, byte [r9 + rdx]
mov eax, 0
sete al
inc r9
add r10, rax
cmp r9, r8
jb 0x40a24
add rdx, r10
mov al, byte [rdx]
inc rdx
xor al, 1
or r11b, al
je 0x40a51
mov eax, 0xffffbf00
jmp 0x40a82
sub rsi, rdx
lea r8, [rsp + rsi + 0x80]
cmp r8, qword [rsp + 0x318]
jbe 0x40a6d
mov eax, 0xffffbc00
jmp 0x40a82
mov rcx, r13
mov qword [r12], r8
call fcn.000550e0
xor eax, eax
jmp 0x40a82
mov eax, 0xffffbf80
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.00055060
add rsp, 0x290
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x41f24
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
cmp dword [rcx + 4], 0
mov r9, r8
mov rbx, rcx
jne 0x41f64
cmp r8, 1
jne 0x41f4d
cmp byte [rdx], 0
jne 0x41f4d
mov dword [rcx + 0x260], r8d
jmp 0x41fdb
lea rcx, str.non_zero_length_renegotiated_connection_field
call fcn.0003f5b0
mov r9d, 0x26e
jmp 0x41ff1
mov r8, qword [rcx + 0x268]
lea rcx, [r8 + r8]
lea rax, [rcx + 1]
cmp r9, rax
jne 0x41fdf
movzx eax, byte [rdx]
cmp rax, rcx
jne 0x41fdf
xor r9b, r9b
lea rcx, [rdx + 1]
lea r10, [rbx + 0x270]
test r8, r8
je 0x41fb0
sub r10, rcx
mov r11, r8
mov al, byte [r10 + rcx]
xor al, byte [rcx]
inc rcx
or r9b, al
sub r11, 1
jne 0x41f99
test r9b, r9b
jne 0x41fdf
lea rcx, [r8 + rdx + 1]
xor dl, dl
lea r9, [rbx + 0x294]
test r8, r8
je 0x41fdb
sub r9, rcx
mov al, byte [r9 + rcx]
xor al, byte [rcx]
inc rcx
or dl, al
sub r8, 1
jne 0x41fc6
test dl, dl
jne 0x41fdf
xor eax, eax
jmp 0x42023
lea rcx, str.non_matching_renegotiated_connection_field
call fcn.0003f5b0
mov r9d, 0x282
lea r8, str.d:code20210715_kernelsslpcmonitorpolarssl2_ssl_cli.c
mov edx, 1
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.0003f5f8
mov r8b, 0x28
mov dl, 2
mov rcx, rbx
call fcn.0002eaac
mov ecx, 0xffff8680
test eax, eax
cmovne ecx, eax
mov eax, ecx
add rsp, 0x30
pop rbx
ret
Function at 0x454d4
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
cmp dword [rcx + 4], 0
mov r9, r8
mov rbx, rcx
jne 0x4550e
cmp r8, 1
jne 0x454fa
cmp byte [rdx], 0
jne 0x454fa
mov dword [rcx + 0x260], r8d
jmp 0x45550
lea rcx, str.non_zero_length_renegotiated_connection_field
call fcn.0003f5b0
mov r9d, 0x18b
jmp 0x45566
mov r8, qword [rcx + 0x268]
lea rax, [r8 + 1]
cmp r9, rax
jne 0x45554
movzx eax, byte [rdx]
cmp rax, r8
jne 0x45554
lea rcx, [rdx + 1]
xor dl, dl
lea r9, [rbx + 0x294]
test r8, r8
je 0x45550
sub r9, rcx
mov al, byte [r9 + rcx]
xor al, byte [rcx]
inc rcx
or dl, al
sub r8, 1
jne 0x4553b
test dl, dl
jne 0x45554
xor eax, eax
jmp 0x45598
lea rcx, str.non_matching_renegotiated_connection_field
call fcn.0003f5b0
mov r9d, 0x19d
lea r8, str.d:code20210715_kernelsslpcmonitorpolarssl2_ssl_srv.c
mov edx, 1
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.0003f5f8
mov r8b, 0x28
mov dl, 2
mov rcx, rbx
call fcn.0002eaac
mov ecx, 0xffff8700
test eax, eax
cmovne ecx, eax
mov eax, ecx
add rsp, 0x30
pop rbx
ret

Function at 0x487dc
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
mov r10, qword [rcx + 0xa8]
mov r9, r8
mov rsi, rdx
mov rbx, rcx
test r10, r10
jne 0x48859
cmp qword [rcx + 0x230], r10
je 0x48824
cmp qword [rcx + 0x240], r10
je 0x48824
cmp qword [rcx + 0x248], r10
je 0x48824
cmp qword [rcx + 0x238], r10
jne 0x48859
lea rcx, str.got_no_pre_shared_key
call fcn.0003f5b0
lea r8, str.d:code20210715_kernelsslpcmonitorpolarssl2_ssl_srv.c
mov r9d, 0x984
mov edx, 1
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.0003f5f8
mov eax, 0xffff8a00
jmp 0x48986
mov rcx, qword [rdx]
lea r8, [rcx + 2]
cmp r8, r9
jbe 0x4887c
lea rcx, str.bad_client_key_exchange_message
call fcn.0003f5b0
mov r9d, 0x98d
jmp 0x48968
movzx eax, byte [rcx]
mov qword [rdx], r8
shl eax, 8
movsxd rdi, eax
movzx eax, byte [rcx + 1]
or rdi, rax
lea rax, [rdi - 1]
cmp rax, 0xfffe
ja 0x48956
lea rax, [r8 + rdi]
cmp rax, r9
ja 0x48956
test r10, r10
je 0x488c5
mov rcx, qword [rbx + 0xb0]
mov r9, rdi
mov rdx, rbx
call r10
test eax, eax
jne 0x48908
cmp rdi, qword [rbx + 0x248]
jne 0x48908
mov rcx, qword [rbx + 0x240]
mov r8, qword [rsi]
xor dl, dl
test rdi, rdi
je 0x488fd
mov r9, r8
mov r10, rdi
sub r9, rcx
mov al, byte [r9 + rcx]
xor al, byte [rcx]
inc rcx
or dl, al
sub r10, 1
jne 0x488e8
test dl, dl
jne 0x48908
lea rax, [r8 + rdi]
mov qword [rsi], rax
xor eax, eax
jmp 0x48986
mov rax, qword [rsi]
mov qword [rsp + 0x30], rdi
lea r8, str.d:code20210715_kernelsslpcmonitorpolarssl2_ssl_srv.c
mov qword [rsp + 0x28], rax
lea rax, str.Unknown_PSK_identity
mov r9d, 0x9ad
mov edx, 3
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.0003f71c
mov r8b, 0x73
mov dl, 2
mov rcx, rbx
call fcn.0002eaac
mov ecx, 0xffff9380
test eax, eax
cmovne ecx, eax
mov eax, ecx
jmp 0x48986
lea rcx, str.bad_client_key_exchange_message
call fcn.0003f5b0
mov r9d, 0x996
lea r8, str.d:code20210715_kernelsslpcmonitorpolarssl2_ssl_srv.c
mov edx, 1
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.0003f5f8
mov eax, 0xffff8400
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret
Function at 0x4a540
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
push rdi
sub rsp, 0x50
mov rax, qword [0x00065100]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rbx, rcx
xor ecx, ecx
xor edi, edi
mov qword [r11 - 0x20], rcx
mov rdx, rcx
mov qword [r11 - 0x18], rcx
mov qword [r11 - 0x28], rdi
cmp rbx, rdi
je 0x4a59e
lea rax, [r11 - 0x28]
lea r9, [r11 - 0x20]
lea r8d, [rdi + 0x10]
lea rdx, [r11 - 0x20]
mov rcx, rbx
mov qword [r11 - 0x38], rax
call fcn.000315dc
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x38]
jmp 0x4a5a3
mov eax, 0xffff9f00
cmp eax, edi
jne 0x4a708
movzx eax, byte [rsp + 0x39]
movzx r8d, cl
movzx ecx, byte [rsp + 0x3c]
shl r8d, 8
movzx edx, dl
shl ecx, 8
or r8d, eax
movzx eax, byte [rsp + 0x3a]
shl edx, 8
shl r8d, 8
mov qword [rbx + 0xd8], rdi
mov qword [rbx + 0x58], rdi
or r8d, eax
movzx eax, byte [rsp + 0x3b]
mov r9d, 4
shl r8d, 8
or r8, rax
movzx eax, byte [rsp + 0x3d]
or ecx, eax
movzx eax, byte [rsp + 0x3e]
shl r8, 0x20
shl ecx, 8
or eax, ecx
movzx ecx, byte [rsp + 0x44]
shl eax, 8
shl ecx, 8
or r8, rax
movzx eax, byte [rsp + 0x3f]
or r8, rax
movzx eax, byte [rsp + 0x41]
or edx, eax
movzx eax, byte [rsp + 0x42]
mov qword [rbx + 0x118], r8
shl edx, 8
or edx, eax
movzx eax, byte [rsp + 0x43]
shl edx, 8
or rdx, rax
movzx eax, byte [rsp + 0x45]
or ecx, eax
movzx eax, byte [rsp + 0x46]
shl rdx, 0x20
shl ecx, 8
or eax, ecx
shl eax, 8
or rdx, rax
movzx eax, byte [rsp + 0x47]
or rdx, rax
mov qword [rbx + 0x98], rdx
mov ecx, edx
mov rax, r8
shr rdx, 1
shl rax, 0x3f
and ecx, 1
or rdx, rax
mov rax, r8
shr rax, 1
imul ecx, ecx, 0xe1000000
shl rcx, 0x20
mov r8, rcx
xor r8, rax
movsxd rax, r9d
sar r9d, 1
cmp r9d, edi
mov qword [rbx + rax*8 + 0x58], rdx
mov qword [rbx + rax*8 + 0xd8], r8
jg 0x4a66a
mov ecx, 2
movsxd rax, ecx
cmp rax, 1
lea r10, [rbx + rax*8 + 0x58]
lea rdx, [rbx + rax*8 + 0xd8]
mov r11, qword [rdx]
mov rdi, qword [r10]
jle 0x4a6ff
lea r8, [r10 + 8]
sub rdx, r10
lea r9, [rbx + 0x60]
lea r10, [rax - 1]
mov rax, qword [r9 + 0x80]
xor rax, r11
mov qword [rdx + r8], rax
mov rax, rdi
xor rax, qword [r9]
add r9, 8
mov qword [r8], rax
add r8, 8
sub r10, 1
jne 0x4a6da
add ecx, ecx
cmp ecx, 0x10
jl 0x4a6af
xor eax, eax
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.00055060
mov rbx, qword [rsp + 0x68]
add rsp, 0x50
pop rdi
ret