joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140073de0
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140006243
push rbp
mov rbp, rsp
sub rsp, 0x18
mov rdx, qword [rax]
mov rcx, qword [rax + 8]
mov rax, rdx
call fcn.14000cf40
add rsp, 0x18
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.140071fe0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp 0x140006220
cmp byte [0x14041f28b], 0
je 0x140073df5
mov rcx, qword [rax + 8]
mov rax, qword [rax]
jmp 0x140071020
jmp 0x140006220

Function at 0x140073e00
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14000d3a1
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [rsp + 0x28], rbx
call fcn.14000d460
movabs rcx, 0xe7037ed1a0b428db
xor rcx, rax
mov rbx, qword [rsp + 0x28]
xor rbx, rax
xor rbx, qword [0x14041f7a0]
movabs rdx, 0xa0761d6478bd642f
xor rbx, rdx
mov rax, rcx
call fcn.14000d440
mov rbx, rax
movabs rax, 0x1d8e4e27c47d124b
call fcn.14000d440
add rsp, 0x10
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.140071fe0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp 0x14000d340
cmp byte [0x14041f28b], 0
je 0x140073e35
movq xmm0, rbx
pinsrd xmm0, dword [rax], 2
aesenc xmm0, xmmword [0x14041fac0]
aesenc xmm0, xmmword [0x14041fad0]
aesenc xmm0, xmmword [0x14041fae0]
movq rax, xmm0
ret
jmp 0x14000d340

Function at 0x140073e40
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14000d421
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [rsp + 0x28], rbx
call fcn.14000d4a0
movabs rcx, 0xe7037ed1a0b428db
xor rcx, rax
mov rbx, qword [rsp + 0x28]
xor rbx, rax
xor rbx, qword [0x14041f7a0]
movabs rdx, 0xa0761d6478bd642f
xor rbx, rdx
mov rax, rcx
call fcn.14000d440
mov rbx, rax
movabs rax, 0x1d8e4e27c47d1247
call fcn.14000d440
add rsp, 0x10
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.140071fe0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp 0x14000d3c0
cmp byte [0x14041f28b], 0
je 0x140073e76
movq xmm0, rbx
pinsrq xmm0, qword [rax], 1
aesenc xmm0, xmmword [0x14041fac0]
aesenc xmm0, xmmword [0x14041fad0]
aesenc xmm0, xmmword [0x14041fae0]
movq rax, xmm0
ret
jmp 0x14000d3c0
Function at 0x140091cc0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
xor edx, edx
jmp 0x140091cd8
movzx esi, byte [rbx + rdx]
imul eax, eax, 0x1000193
inc rdx
xor eax, esi
cmp rcx, rdx
jg 0x140091cc9
ret

Function at 0x1400b2320
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400b23ea
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0
call fcn.140005620
xorps xmm15, xmm15
mov r14, qword [0x14041f678]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
jne 0x1400b23cf
mov rcx, qword [rsp + 0x60]
lea rdx, [rcx + 1]
mov qword [rsp + 0x40], rdx
lea rax, [0x140252700]
xor ebx, ebx
mov rcx, rdx
call fcn.1400571c0
mov rbx, qword [rsp + 0x60]
mov rcx, rax
xor edi, edi
mov rsi, qword [rsp + 0x40]
mov rax, qword [rsp + 0x58]
nop dword [rax]
call fcn.1400b3340
inc rbx
cmp rcx, rbx
jae 0x1400b23be
mov edi, 1
lea rsi, [0x140252700]
call fcn.140057280
mov word [rax + rbx*2 - 2], 0
xor edi, edi
xor esi, esi
add rsp, 0x48
pop rbp
ret
xor eax, eax
xor ebx, ebx
mov rcx, rbx
lea rdi, [0x14029a000]
lea rsi, [0x140298b30]
add rsp, 0x48
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.140071fe0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.1400b2320
Function at 0x1400cd4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400cd715
push rbp
mov rbp, rsp
sub rsp, 0x60
mov qword [rsp + 0x70], rax
xor ecx, ecx
xor edx, edx
xor esi, esi
xor edi, edi
xor r8d, r8d
jmp 0x1400cd520
dec rbx
mov r10, rbx
neg r10
sar r10, 0x3f
and r10d, 1
add rax, r10
mov rcx, r9
nop dword [rax + rax]
test rbx, rbx
je 0x1400cd6ed
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rax
mov byte [rsp + 0x46], r8b
movzx r9d, byte [rax]
mov byte [rsp + 0x47], r9b
cmp r9b, 0x20
jbe 0x1400cd649
cmp r9b, 0x22
je 0x1400cd565
cmp r9b, 0x5c
jne 0x1400cd65a
lea r9, [rcx + 1]
nop
jmp 0x1400cd6ac
mov qword [rsp + 0x48], rcx
mov r8, rcx
shr rcx, 0x3f
lea r9, [r8 + rcx]
sar r9, 1
mov rax, rdi
mov rbx, rsi
mov rcx, rdx
mov rdi, r9
call fcn.1400cd440
mov rdx, qword [rsp + 0x48]
bt edx, 0
jb 0x1400cd605
movzx edx, byte [rsp + 0x46]
test dl, dl
je 0x1400cd5f6
mov r8, qword [rsp + 0x50]
cmp r8, 1
jle 0x1400cd5ef
mov r9, qword [rsp + 0x58]
cmp byte [r9 + 1], 0x22
jne 0x1400cd5ea
inc rbx
cmp rcx, rbx
jae 0x1400cd5dc
mov edi, 1
lea rsi, [0x140252680]
call fcn.140057280
movzx edx, byte [rsp + 0x46]
mov r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x58]
mov byte [rbx + rax - 1], 0x22
lea rsi, [r9 + 1]
dec r8
jmp 0x1400cd600
mov rsi, r9
jmp 0x1400cd600
mov rsi, qword [rsp + 0x58]
jmp 0x1400cd600
mov r8, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
xor edx, 1
jmp 0x1400cd632
inc rbx
cmp rcx, rbx
jae 0x1400cd61e
mov edi, 1
lea rsi, [0x140252680]
call fcn.140057280
mov byte [rbx + rax - 1], 0x22
mov r8, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
movzx edx, byte [rsp + 0x46]
xor r9d, r9d
mov rdi, rax
mov rax, rsi
mov rsi, rbx
mov rbx, r8
mov r8d, edx
mov rdx, rcx
jmp 0x1400cd6ac
cmp r9b, 9
je 0x1400cd655
cmp r9b, 0x20
jne 0x1400cd65a
test r8b, r8b
je 0x1400cd6b8
mov rax, rdi
mov rbx, rsi
mov rdi, rcx
mov rcx, rdx
call fcn.1400cd440
inc rbx
cmp rcx, rbx
jae 0x1400cd685
mov edi, 1
lea rsi, [0x140252680]
nop
call fcn.140057280
movzx r10d, byte [rsp + 0x47]
mov byte [rbx + rax - 1], r10b
mov rdx, rcx
mov rsi, rbx
xor r9d, r9d
mov rdi, rax
movzx r8d, byte [rsp + 0x46]
mov rbx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x58]
cmp rbx, 1
jae 0x1400cd504
jmp 0x1400cd708
mov rax, rdi
mov rbx, rsi
mov rdi, rcx
mov rcx, rdx
call fcn.1400cd440
mov rsi, qword [rsp + 0x50]
dec rsi
mov rdx, rsi
neg rdx
sar rdx, 0x3f
and edx, 1
mov r8, qword [rsp + 0x58]
lea rdi, [rdx + r8]
add rsp, 0x60
pop rbp
ret
mov rax, rdi
mov rbx, rsi
mov rdi, rcx
mov rcx, rdx
call fcn.1400cd440
xor edi, edi
xor esi, esi
add rsp, 0x60
pop rbp
ret
mov eax, 1
xor ecx, ecx
call fcn.1400743a0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
nop
call fcn.140071fe0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.1400cd4e0
Function at 0x1400cf8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400cfa94
push rbp
mov rbp, rsp
sub rsp, 0x20
mov qword [rsp + 0x30], rax
nop word [rax + rax]
cmp rbx, 2
jl 0x1400cf989
movzx edx, byte [rax]
cmp byte [rax + 1], 0x3a
jne 0x1400cf8fa
lea esi, [rdx - 0x30]
cmp sil, 9
jbe 0x1400cf8ef
lea esi, [rdx - 0x61]
nop
cmp sil, 0x19
jbe 0x1400cf8ef
lea esi, [rdx - 0x41]
cmp sil, 0x19
ja 0x1400cf8fa
mov ebx, 2
add rsp, 0x20
pop rbp
ret
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rax
cmp rbx, 5
jge 0x1400cf90e
xor ecx, ecx
jmp 0x1400cf921
mov eax, edx
call fcn.1400cf700
mov rbx, qword [rsp + 0x38]
mov ecx, eax
mov rax, qword [rsp + 0x30]
test cl, cl
jne 0x1400cf929
xor ecx, ecx
jmp 0x1400cf940
movzx ecx, byte [rax + 1]
mov eax, ecx
call fcn.1400cf700
mov rbx, qword [rsp + 0x38]
mov ecx, eax
mov rax, qword [rsp + 0x30]
test cl, cl
je 0x1400cf96a
cmp rbx, 2
jbe 0x1400cfa86
movzx ecx, byte [rax + 2]
mov eax, ecx
call fcn.1400cf700
xor eax, 1
mov rbx, qword [rsp + 0x38]
mov ecx, eax
mov rax, qword [rsp + 0x30]
jmp 0x1400cf96c
xor ecx, ecx
test cl, cl
je 0x1400cf993
cmp rbx, 2
jbe 0x1400cfa79
cmp byte [rax + 2], 0x2e
nop
je 0x1400cf993
mov ecx, 3
jmp 0x1400cf9af
xor eax, eax
xor ebx, ebx
add rsp, 0x20
pop rbp
ret
xor eax, eax
xor ebx, ebx
add rsp, 0x20
pop rbp
ret
mov rcx, qword [rsp + 0x10]
inc rcx
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x38]
lea rdx, [rbx - 1]
cmp rcx, rdx
jge 0x1400cf993
mov qword [rsp + 0x10], rcx
movzx edx, byte [rax + rcx]
mov eax, edx
call fcn.1400cf700
test al, al
je 0x1400cf99d
mov rax, qword [rsp + 0x10]
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x38]
nop word [rax + rax]
cmp rcx, rdx
jbe 0x1400cfa71
mov qword [rsp + 0x18], rdx
mov rcx, qword [rsp + 0x30]
movzx edx, byte [rcx + rax + 1]
mov eax, edx
call fcn.1400cf700
nop
test al, al
jne 0x1400cf993
mov rsi, qword [rsp + 0x10]
mov rax, qword [rsp + 0x30]
movzx esi, byte [rax + rsi + 1]
cmp sil, 0x2e
je 0x1400cf993
mov rcx, qword [rsp + 0x18]
jmp 0x1400cfa31
mov rcx, qword [rsp + 0x10]
inc rcx
mov rax, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
cmp rdx, rcx
jle 0x1400cfa61
mov qword [rsp + 0x10], rcx
movzx edx, byte [rcx + rax]
mov eax, edx
call fcn.1400cf700
test al, al
je 0x1400cfa24
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x10]
cmp rdx, rcx
mov rax, qword [rsp + 0x30]
jb 0x1400cfa6c
mov rbx, rcx
add rsp, 0x20
pop rbp
ret
call fcn.140074320
mov rax, rdx
call fcn.1400742e0
mov eax, 2
mov rcx, rax
call fcn.1400742e0
mov eax, 2
mov rcx, rax
call fcn.1400742e0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
nop
call fcn.140071fe0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.1400cf8a0
Function at 0x1400f6250
Capabilities:
Encode data using xor

Disassembly:
mov rbx, qword [rsp + 8]
mov rsi, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x20]
test rdx, 0xf
jne 0x1400f62ca
mov rax, 0
nop word [rax + rax]
nop dword [rax]
movdqu xmm0, xmmword [rsi + rax]
movdqu xmm1, xmmword [rcx + rax]
pxor xmm0, xmm1
movdqu xmmword [rbx + rax], xmm0
add rax, 0x10
cmp rdx, rax
jne 0x1400f6280
ret
sub rdx, 1
mov dil, byte [rsi + rdx]
mov al, byte [rcx + rdx]
xor dil, al
mov byte [rbx + rdx], dil
test rdx, 7
jne 0x1400f62a0
cmp rdx, 0
je 0x1400f62ec
test rdx, 0xf
je 0x1400f626d
test rdx, 7
jne 0x1400f62a0
sub rdx, 8
mov rdi, qword [rsi + rdx]
mov rax, qword [rcx + rdx]
xor rdi, rax
mov qword [rbx + rdx], rdi
cmp rdx, 0x10
jge 0x1400f626d
ret
Function at 0x1400f9400
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400f9519
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x68], r8
mov qword [rsp + 0x70], r9
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rbx
call fcn.1400f7aa0
mov rax, qword [rsp + 0x68]
nop
cmp rax, 0x10
jl 0x1400f9505
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jl 0x1400f94ee
mov rax, qword [rsp + 0x48]
mov ebx, 0x10
mov rcx, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
mov rsi, rbx
mov r8, qword [rsp + 0x70]
call fcn.1400f5fc0
test al, al
jne 0x1400f94db
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rdx + 8]
test rbx, rbx
jbe 0x1400f94d1
mov rax, qword [rdx]
shr rbx, 2
lea rcx, [rbx - 1]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x18], rax
call fcn.1400f96c0
xorps xmm15, xmm15
mov r14, qword [0x14041f678]
mov r14, qword gs:[r14]
mov r14, qword [r14]
add rsp, 0x30
pop rbp
ret
xor eax, eax
mov rcx, rax
call fcn.1400742e0
lea rax, [0x140252600]
lea rbx, [0x140299980]
call fcn.140040c00
lea rax, [0x140252600]
lea rbx, [0x140299970]
nop dword [rax]
call fcn.140040c00
lea rax, [0x140252600]
lea rbx, str.Lx__
call fcn.140040c00
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
nop dword [rax]
call fcn.140071fe0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
jmp fcn.1400f9400

Function at 0x1400f96c0
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
mov rcx, qword [rsp + 8]
mov rax, qword [rsp + 0x10]
mov rdx, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x20]
movups xmm1, xmmword [rax]
movups xmm0, xmmword [rbx]
add rax, 0x10
pxor xmm0, xmm1
sub rcx, 0xc
je 0x1400f96ff
jb 0x1400f9714
movups xmm1, xmmword [rax]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x10]
aesenc xmm0, xmm1
add rax, 0x20
movups xmm1, xmmword [rax]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x10]
aesenc xmm0, xmm1
add rax, 0x20
movups xmm1, xmmword [rax]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x10]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x20]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x30]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x40]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x50]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x60]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x70]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x80]
aesenc xmm0, xmm1
movups xmm1, xmmword [rax + 0x90]
aesenclast xmm0, xmm1
movups xmmword [rdx], xmm0
ret
Function at 0x1400f9780
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
push rbp
mov rbp, rsp
mov rcx, qword [rsp + 0x10]
mov rax, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x28]
movups xmm0, xmmword [rax]
movups xmmword [rbx], xmm0
add rbx, 0x10
pxor xmm4, xmm4
cmp ecx, 0xc
je 0x1400f9854
jb 0x1400f98b3
movups xmm2, xmmword [rax + 0x10]
movups xmmword [rbx], xmm2
add rbx, 0x10
aeskeygenassist xmm1, xmm2, 1
call fcn.1400f9660
aeskeygenassist xmm1, xmm0, 1
call fcn.1400f9680
aeskeygenassist xmm1, xmm2, 2
call fcn.1400f9660
aeskeygenassist xmm1, xmm0, 2
call fcn.1400f9680
aeskeygenassist xmm1, xmm2, 4
call fcn.1400f9660
aeskeygenassist xmm1, xmm0, 4
call fcn.1400f9680
aeskeygenassist xmm1, xmm2, 8
call fcn.1400f9660
aeskeygenassist xmm1, xmm0, 8
call fcn.1400f9680
aeskeygenassist xmm1, xmm2, 0x10
call fcn.1400f9660
aeskeygenassist xmm1, xmm0, 0x10
call fcn.1400f9680
aeskeygenassist xmm1, xmm2, 0x20
call fcn.1400f9660
aeskeygenassist xmm1, xmm0, 0x20
call fcn.1400f9680
aeskeygenassist xmm1, xmm2, 0x40
call fcn.1400f9660
jmp 0x1400f9921
movq xmm2, qword [rax + 0x10]
aeskeygenassist xmm1, xmm2, 1
call fcn.1400f95c0
aeskeygenassist xmm1, xmm2, 2
call fcn.1400f9620
aeskeygenassist xmm1, xmm2, 4
call fcn.1400f95c0
aeskeygenassist xmm1, xmm2, 8
call fcn.1400f9620
aeskeygenassist xmm1, xmm2, 0x10
call fcn.1400f95c0
aeskeygenassist xmm1, xmm2, 0x20
call fcn.1400f9620
aeskeygenassist xmm1, xmm2, 0x40
call fcn.1400f95c0
aeskeygenassist xmm1, xmm2, 0x80
call fcn.1400f9620
jmp 0x1400f9921
aeskeygenassist xmm1, xmm0, 1
call fcn.1400f9580
aeskeygenassist xmm1, xmm0, 2
call fcn.1400f9580
aeskeygenassist xmm1, xmm0, 4
call fcn.1400f9580
aeskeygenassist xmm1, xmm0, 8
call fcn.1400f9580
aeskeygenassist xmm1, xmm0, 0x10
call fcn.1400f9580
aeskeygenassist xmm1, xmm0, 0x20
call fcn.1400f9580
aeskeygenassist xmm1, xmm0, 0x40
call fcn.1400f9580
aeskeygenassist xmm1, xmm0, 0x80
call fcn.1400f9580
aeskeygenassist xmm1, xmm0, 0x1b
call fcn.1400f9580
aeskeygenassist xmm1, xmm0, 0x36
call fcn.1400f9580
sub rbx, 0x10
movups xmm1, xmmword [rbx]
movups xmmword [rdx], xmm1
dec rcx
movups xmm1, xmmword [rbx - 0x10]
aesimc xmm0, xmm1
movups xmmword [rdx + 0x10], xmm0
sub rbx, 0x10
add rdx, 0x10
dec rcx
jne 0x1400f992e
movups xmm0, xmmword [rbx - 0x10]
movups xmmword [rdx + 0x10], xmm0
pop rbp
ret
Function at 0x1400f9a60
Capabilities:
Encode data using xor
Encrypt data using aes via x86 extensions

Disassembly:
mov rdi, qword [rsp + 8]
mov rsi, qword [rsp + 0x10]
mov rdx, qword [rsp + 0x18]
shr rdx, 2
dec rdx
movdqu xmm15, xmmword [0x140298d20]
movdqu xmm14, xmmword [0x140298d30]
movdqu xmm0, xmmword [rsi]
movdqu xmm11, xmmword [rsi + 0x10]
aesenc xmm0, xmm11
movdqu xmm11, xmmword [rsi + 0x20]
aesenc xmm0, xmm11
movdqu xmm11, xmmword [rsi + 0x30]
aesenc xmm0, xmm11
movdqu xmm11, xmmword [rsi + 0x40]
aesenc xmm0, xmm11
movdqu xmm11, xmmword [rsi + 0x50]
aesenc xmm0, xmm11
movdqu xmm11, xmmword [rsi + 0x60]
aesenc xmm0, xmm11
movdqu xmm11, xmmword [rsi + 0x70]
aesenc xmm0, xmm11
movdqu xmm11, xmmword [rsi + 0x80]
aesenc xmm0, xmm11
movdqu xmm11, xmmword [rsi + 0x90]
aesenc xmm0, xmm11
movdqu xmm11, xmmword [rsi + 0xa0]
cmp rdx, 0xc
jb 0x1400f9b4b
aesenc xmm0, xmm11
movdqu xmm11, xmmword [rsi + 0xb0]
aesenc xmm0, xmm11
movdqu xmm11, xmmword [rsi + 0xc0]
je 0x1400f9b4b
aesenc xmm0, xmm11
movdqu xmm11, xmmword [rsi + 0xd0]
aesenc xmm0, xmm11
movdqu xmm11, xmmword [rsi + 0xe0]
aesenclast xmm0, xmm11
pshufb xmm0, xmm15
pshufd xmm11, xmm0, 0xff
movdqu xmm12, xmm0
psrad xmm11, 0x1f
pand xmm11, xmm14
psrld xmm12, 0x1f
pslldq xmm12, 4
pslld xmm0, 1
pxor xmm0, xmm11
pxor xmm0, xmm12
movdqu xmmword [rdi + 0xe0], xmm0
pshufd xmm1, xmm0, 0x4e
pxor xmm1, xmm0
movdqu xmmword [rdi + 0xf0], xmm1
movdqu xmm2, xmm0
movdqu xmm3, xmm1
mov rax, 7
movdqu xmm11, xmm2
movdqu xmm12, xmm2
movdqu xmm13, xmm3
pclmulqdq xmm11, xmm0, 0
pclmulqdq xmm12, xmm0, 0x11
pclmulqdq xmm13, xmm1, 0
pxor xmm13, xmm11
pxor xmm13, xmm12
movdqu xmm4, xmm13
pslldq xmm4, 8
psrldq xmm13, 8
pxor xmm11, xmm4
pxor xmm12, xmm13
movdqu xmm2, xmm14
pclmulqdq xmm2, xmm11, 1
pshufd xmm11, xmm11, 0x4e
pxor xmm11, xmm2
movdqu xmm2, xmm14
pclmulqdq xmm2, xmm11, 1
pshufd xmm11, xmm11, 0x4e
pxor xmm2, xmm11
pxor xmm2, xmm12
movdqu xmmword [rdi + 0xc0], xmm2
pshufd xmm3, xmm2, 0x4e
pxor xmm3, xmm2
movdqu xmmword [rdi + 0xd0], xmm3
dec rax
lea rdi, [rdi - 0x20]
jne 0x1400f9bb0
ret
Function at 0x14010b560
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14010b786
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x60], rbx
call fcn.1400f7aa0
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x58]
add qword [rcx + 0x68], rax
mov rdx, qword [rcx + 0x60]
nop dword [rax]
test rdx, rdx
jle 0x14010b695
cmp rdx, 0x40
ja 0x14010b773
lea rsi, [rdx - 0x40]
mov rdi, rsi
neg rsi
sar rdi, 0x3f
and rdi, rdx
lea rdx, [rcx + rdi]
lea rdx, [rdx + 0x20]
cmp rax, rsi
cmovl rsi, rax
mov qword [rsp + 0x28], rsi
mov rbx, qword [rsp + 0x60]
nop dword [rax]
cmp rbx, rdx
je 0x14010b604
mov rax, rdx
mov rcx, rsi
call fcn.140074c80
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x28]
mov rdx, qword [rcx + 0x60]
add rdx, rsi
mov qword [rcx + 0x60], rdx
cmp rdx, 0x40
jne 0x14010b66c
mov qword [rsp], rcx
lea rax, [rcx + 0x20]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], 0x40
mov qword [rsp + 0x18], 0x40
call fcn.14010bb40
xorps xmm15, xmm15
mov r14, qword [0x14041f678]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x58]
mov qword [rax + 0x60], 0
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x28]
cmp rax, rsi
jb 0x14010b768
mov rdi, qword [rsp + 0x70]
sub rdi, rsi
mov rdx, rdi
neg rdx
sar rdx, 0x3f
and rdx, rsi
mov r8, rax
sub r8, rsi
add rbx, rdx
jmp 0x14010b6a2
mov r8, rax
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x70]
cmp r8, 0x40
jl 0x14010b720
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], rdi
mov qword [rsp], rcx
mov qword [rsp + 8], rbx
and r8, 0xffffffffffffffc0
mov qword [rsp + 0x20], r8
mov qword [rsp + 0x10], r8
mov qword [rsp + 0x18], rdi
call fcn.14010bb40
xorps xmm15, xmm15
mov r14, qword [0x14041f678]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x30]
mov rdx, rax
sub rax, rcx
sar rax, 0x3f
mov r8, qword [rsp + 0x38]
and rax, r8
and rax, 0xffffffffffffffc0
mov rcx, qword [rsp + 0x40]
lea rbx, [rcx + rax]
sub r8, rdx
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x58]
test r8, r8
je 0x14010b75e
lea rdx, [rcx + 0x20]
cmp r8, 0x40
mov esi, 0x40
cmovl rsi, r8
cmp rbx, rdx
je 0x14010b75a
mov qword [rsp + 0x38], rsi
mov rax, rdx
mov rcx, rsi
call fcn.140074c80
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x38]
mov qword [rcx + 0x60], rsi
xor ebx, ebx
xor ecx, ecx
add rsp, 0x48
pop rbp
ret
mov rcx, rax
mov rax, rsi
call fcn.1400743a0
mov rax, rdx
mov ecx, 0x40
nop dword [rax + rax]
call fcn.1400743a0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
call fcn.140071fe0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
jmp fcn.14010b560
Function at 0x14010f840
Capabilities:
Hash data using sha384
Hash data using sha512

Disassembly:
mov rcx, qword [rax + 0xd0]
cmp rcx, 6
jne 0x14010f8c5
movabs rcx, 0xcbbb9d5dc1059ed8
mov qword [rax], rcx
movabs rcx, 0x629a292a367cd507
mov qword [rax + 8], rcx
movabs rcx, 0x9159015a3070dd17
mov qword [rax + 0x10], rcx
movabs rcx, 0x152fecd8f70e5939
mov qword [rax + 0x18], rcx
movabs rcx, 0x67332667ffc00b31
mov qword [rax + 0x20], rcx
movabs rcx, 0x8eb44a8768581511
mov qword [rax + 0x28], rcx
movabs rcx, 0xdb0c2e0d64f98fa7
mov qword [rax + 0x30], rcx
movabs rcx, 0x47b5481dbefa4fa4
mov qword [rax + 0x38], rcx
nop dword [rax]
jmp 0x14010fa26
cmp rcx, 0xe
jne 0x14010f940
movabs rcx, 0x8c3d37c819544da2
mov qword [rax], rcx
movabs rcx, 0x73e1996689dcd4d6
mov qword [rax + 8], rcx
movabs rcx, 0x1dfab7ae32ff9c82
mov qword [rax + 0x10], rcx
movabs rcx, 0x679dd514582f9fcf
mov qword [rax + 0x18], rcx
movabs rcx, 0xf6d2b697bd44da8
mov qword [rax + 0x20], rcx
movabs rcx, 0x77e36f7304c48942
mov qword [rax + 0x28], rcx
movabs rcx, 0x3f9d85a86a1d36c8
mov qword [rax + 0x30], rcx
movabs rcx, 0x1112e6ad91d692a1
mov qword [rax + 0x38], rcx
jmp 0x14010fa26
cmp rcx, 0xf
jne 0x14010f9b7
movabs rcx, 0x22312194fc2bf72c
mov qword [rax], rcx
movabs rcx, 0x9f555fa3c84c64c2
mov qword [rax + 8], rcx
movabs rcx, 0x2393b86b6f53b151
mov qword [rax + 0x10], rcx
movabs rcx, 0x963877195940eabd
mov qword [rax + 0x18], rcx
movabs rcx, 0x96283ee2a88effe3
mov qword [rax + 0x20], rcx
movabs rcx, 0xbe5e1e2553863992
mov qword [rax + 0x28], rcx
movabs rcx, 0x2b0199fc2c85b8aa
mov qword [rax + 0x30], rcx
movabs rcx, 0xeb72ddc81c52ca2
mov qword [rax + 0x38], rcx
jmp 0x14010fa26
movabs rcx, 0x6a09e667f3bcc908
mov qword [rax], rcx
movabs rcx, 0xbb67ae8584caa73b
mov qword [rax + 8], rcx
movabs rcx, 0x3c6ef372fe94f82b
mov qword [rax + 0x10], rcx
movabs rcx, 0xa54ff53a5f1d36f1
mov qword [rax + 0x18], rcx
movabs rcx, 0x510e527fade682d1
mov qword [rax + 0x20], rcx
movabs rcx, 0x9b05688c2b3e6c1f
mov qword [rax + 0x28], rcx
movabs rcx, 0x1f83d9abfb41bd6b
mov qword [rax + 0x30], rcx
movabs rcx, 0x5be0cd19137e2179
mov qword [rax + 0x38], rcx
movups xmmword [rax + 0xc0], xmm15
ret