joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14007a4f0
Capabilities:
Hash data using sha256

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x68
mov rax, qword [rcx + 0x40]
mov rbx, rcx
mov ecx, dword [rcx + 0x78]
mov rsi, rdx
lea edx, [rax*8]
mov ebp, dword [rbx + 0x7c]
mov byte [rsp + rax + 0x20], pe_nt_image_headers64
lea edi, [rdx + rcx]
test rax, rax
jne 0x14007a600
mov rcx, qword [0x14032bbe0]
mov qword [rbx + 0x78], rcx
mov r12d, 0x40
lea rcx, [rsp + rax + 0x21]
lea r13, [rsp + rax + 0x20]
sub r12, rax
cmp edx, 0x1be
ja 0x14007a620
mov r8d, 0x37
xor edx, edx
sub r8, rax
call sym.memset
or byte [rsp + 0x57], 1
bswap ebp
mov dword [rsp + 0x58], ebp
bswap edi
mov r8, r12
mov rdx, r13
mov rcx, rbx
mov dword [rsp + 0x5c], edi
call sym.blake32_1
mov eax, dword [rbx + 0x48]
bswap eax
mov dword [rsi], eax
mov eax, dword [rbx + 0x4c]
bswap eax
mov dword [rsi + 4], eax
mov eax, dword [rbx + 0x50]
bswap eax
mov dword [rsi + 8], eax
mov eax, dword [rbx + 0x54]
bswap eax
mov dword [rsi + 0xc], eax
mov eax, dword [rbx + 0x58]
bswap eax
mov dword [rsi + 0x10], eax
mov eax, dword [rbx + 0x5c]
bswap eax
mov dword [rsi + 0x14], eax
mov eax, dword [rbx + 0x60]
bswap eax
mov dword [rsi + 0x18], eax
mov eax, dword [rbx + 0x64]
bswap eax
vmovdqu ymm1, ymmword [0x14032bbc0]
mov dword [rsi + 0x1c], eax
mov qword [rbx + 0x68], 0
mov qword [rbx + 0x70], 0
mov qword [rbx + 0x78], 0
mov qword [rbx + 0x40], 0
vmovdqu ymmword [rbx + 0x48], ymm1
vzeroupper
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
lea r8d, [rdi - 0x200]
mov dword [rbx + 0x78], r8d
test ecx, ecx
jne 0x14007a52f
lea ecx, [rbp - 1]
mov dword [rbx + 0x7c], ecx
jmp 0x14007a52f
mov r8d, 0x3f
xor edx, edx
sub r8, rax
call sym.memset
mov r8, r12
mov rdx, r13
mov rcx, rbx
call sym.blake32_1
mov rax, qword [0x14032bbe0]
vpxor xmm0, xmm0, xmm0
vmovdqu8 ymmword [rsp + 0x20], ymm0
vmovdqu8 ymmword [rsp + 0x38], ymm0
mov byte [rsp + 0x57], 1
mov qword [rbx + 0x78], rax
bswap ebp
mov dword [rsp + 0x58], ebp
bswap edi
mov r8d, 0x40
lea rdx, [rsp + 0x20]
mov rcx, rbx
mov dword [rsp + 0x5c], edi
vzeroupper
call sym.blake32_1
jmp 0x14007a57d
Function at 0x1400a5270
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbp
push rdi
push rsi
push rbx
mov r10d, dword [rcx]
mov ebx, dword [rcx + 8]
lea rax, [0x14032e4e0]
mov r9d, dword [rcx + 4]
vmovdqu xmm3, xmmword [r8]
mov rdi, rdx
mov edx, dword [rcx + 0xc]
movzx r11d, r10b
movzx ebp, bl
vmovd xmm1, dword [rax + rbp*4]
vmovd xmm0, dword [rax + r11*4]
movzx ecx, r9b
mov ebp, r9d
vpinsrd xmm0, xmm0, dword [rax + rcx*4], 1
shr ebp, 0x18
mov ecx, r10d
shr ecx, 0x18
movzx esi, dl
mov r11d, edx
vpinsrd xmm1, xmm1, dword [rax + rsi*4], 1
shr r11d, 0x18
mov esi, ebx
shr esi, 0x18
vpunpcklqdq xmm2, xmm0, xmm1
vmovd xmm1, dword [rax + rbp*4 + 0xc00]
vmovd xmm0, dword [rax + r11*4 + 0xc00]
vpinsrd xmm1, xmm1, dword [rax + rsi*4 + 0xc00], 1
vpinsrd xmm0, xmm0, dword [rax + rcx*4 + 0xc00], 1
mov ecx, r9d
shr r9d, 0x10
movzx esi, ch
movzx ecx, bh
shr ebx, 0x10
movzx r9d, r9b
mov r8d, esi
mov ebp, ecx
movzx esi, dh
mov ecx, r10d
mov esi, esi
movzx ecx, ch
shr r10d, 0x10
movzx ebx, bl
mov r11d, ecx
shr edx, 0x10
movzx r10d, r10b
movzx edx, dl
vpunpcklqdq xmm0, xmm0, xmm1
vmovdqu xmm1, xmm0
vmovd xmm0, dword [rax + r8*4 + 0x400]
vpternlogd xmm1, xmm3, xmm2, 0x96
vmovd xmm2, dword [rax + rsi*4 + 0x400]
vpinsrd xmm0, xmm0, dword [rax + rbp*4 + 0x400], 1
vpinsrd xmm2, xmm2, dword [rax + r11*4 + 0x400], 1
vmovd xmm3, dword [rax + r10*4 + 0x800]
vpinsrd xmm3, xmm3, dword [rax + r9*4 + 0x800], 1
vpunpcklqdq xmm2, xmm0, xmm2
vmovd xmm0, dword [rax + rbx*4 + 0x800]
vpinsrd xmm0, xmm0, dword [rax + rdx*4 + 0x800], 1
vpunpcklqdq xmm0, xmm0, xmm3
vpternlogd xmm0, xmm2, xmm1, 0x96
vmovdqu xmmword [rdi], xmm0
pop rbx
pop rsi
pop rdi
pop rbp
ret
Function at 0x1400b22e0
Capabilities:
Hash data using sha256

Disassembly:
mov rax, r8
mov r8, rdx
mov rdx, rcx
mov rcx, rax
jmp sym.blake256_hash

Function at 0x1400b2bd0
Capabilities:
Hash data using sha256

Disassembly:
mov rax, r8
mov r8, rdx
mov rdx, rcx
mov rcx, rax
jmp sym.blake256_hash

Function at 0x1400b34c0
Capabilities:
Hash data using sha256

Disassembly:
mov rax, r8
mov r8, rdx
mov rdx, rcx
mov rcx, rax
jmp sym.blake256_hash

Function at 0x1400b3db0
Capabilities:
Hash data using sha256

Disassembly:
mov rax, r8
mov r8, rdx
mov rdx, rcx
mov rcx, rax
jmp sym.blake256_hash

Function at 0x1400b4700
Capabilities:
Hash data using sha256

Disassembly:
mov rax, r8
mov r8, rdx
mov rdx, rcx
mov rcx, rax
jmp sym.blake256_hash

Function at 0x1400b4ff0
Capabilities:
Hash data using sha256

Disassembly:
mov rax, r8
mov r8, rdx
mov rdx, rcx
mov rcx, rax
jmp sym.blake256_hash

Function at 0x1400b5940
Capabilities:
Hash data using sha256

Disassembly:
mov rax, r8
mov r8, rdx
mov rdx, rcx
mov rcx, rax
jmp sym.blake256_hash

Function at 0x1400b6230
Capabilities:
Hash data using sha256

Disassembly:
mov rax, r8
mov r8, rdx
mov rdx, rcx
mov rcx, rax
jmp sym.blake256_hash
Function at 0x1400b6b10
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov rsi, rcx
test rcx, rcx
je 0x1400b6dbc
mov rax, qword [rcx]
test rax, rax
je 0x1400b6dab
mov edi, 2
shrx rdx, qword [rax], rdi
mov qword [rax + 0x28], rdx
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x28]
add rax, 7
mov qword [rdx + 0x20], rax
mov rdx, qword [rcx]
mov eax, 4
shlx rax, qword [rdx + 0x20], rax
mov qword [rdx + 0x10], rax
mov rbx, qword [rcx]
mov edx, 1
mov rcx, qword [rbx + 0x10]
call sym.calloc
mov qword [rbx + 0x18], rax
mov rax, qword [rsi]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x1400b6db2
mov rdx, qword [rax + 8]
mov r8, qword [rax]
call sym.memcpy
mov rax, qword [rsi]
mov rdi, qword [rax + 0x20]
mov rcx, qword [rax + 0x28]
lea rdx, [rdi*4]
cmp rcx, rdx
jae 0x1400b6d30
lea r8, [rcx*4 - 4]
mov r9, rcx
lea r14, [0x140330720]
lea r15, [0x140330820]
jmp 0x1400b6c80
movzx eax, bh
mov r13d, ebx
mov r11d, eax
mov eax, ebx
shr r13d, 0x18
shr eax, 0x10
mov edi, r13d
mov ebp, eax
cmp r9, 6
jbe 0x1400b6c07
cmp rdx, 4
je 0x1400b6d50
mov rax, rcx
mov rbx, rcx
sub rax, r9
xor r10b, byte [r12 + rax*4]
mov byte [r12 + rcx*4], r10b
mov rdx, qword [rsi]
sub rbx, qword [rdx + 0x28]
mov rax, qword [rdx + 0x18]
xor r11b, byte [rax + rbx*4 + 1]
mov rbx, rcx
mov byte [rax + r8 + 5], r11b
mov rdx, qword [rsi]
sub rbx, qword [rdx + 0x28]
mov rax, qword [rdx + 0x18]
xor bpl, byte [rax + rbx*4 + 2]
mov rbx, rcx
inc rcx
mov byte [rax + r8 + 6], bpl
mov rdx, qword [rsi]
sub rbx, qword [rdx + 0x28]
mov rax, qword [rdx + 0x18]
xor dil, byte [rax + rbx*4 + 3]
mov byte [rax + r8 + 7], dil
mov rax, qword [rsi]
add r8, 4
mov rdi, qword [rax + 0x20]
lea rdx, [rdi*4]
cmp rcx, rdx
jae 0x1400b6d30
mov r9, qword [rax + 0x28]
mov r12, qword [rax + 0x18]
xor edx, edx
mov rax, rcx
div r9
mov ebx, dword [r12 + r8]
mov dword [rsp + 0x28], ebx
mov r10d, ebx
test rdx, rdx
jne 0x1400b6be0
movzx edx, word [rsp + 0x29]
mov byte [rsp + 0x2f], bl
mov word [rsp + 0x2c], dx
movzx edx, byte [rsp + 0x2b]
mov byte [rsp + 0x2e], dl
mov edx, dword [rsp + 0x2c]
movzx edi, dh
mov r10d, edi
mov r11, r10
and r10d, 0xf0
add r10, r14
and r11d, 0xf
movzx r11d, byte [r10 + r11]
mov r10d, edx
shr r10d, 0x10
mov ebx, r10d
and r10d, 0xf0
and ebx, 0xf
add r10, r14
movzx ebp, byte [r10 + rbx]
mov r10d, edx
shr r10d, 0x18
mov ebx, r10d
and r10d, 0xf0
add r10, r14
and ebx, 0xf
movzx edi, byte [r10 + rbx]
mov r10d, edx
and edx, 0xf0
and r10d, 0xf
add rdx, r14
movzx r10d, byte [rdx + r10]
xor r10b, byte [r15 + rax - 1]
jmp 0x1400b6c07
xor eax, eax
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
lea rdx, [0x140330720]
mov r10d, ebx
and ebx, 0xf0
add rbx, rdx
and r10d, 0xf
movzx r10d, byte [rbx + r10]
mov rbx, r11
and r11d, 0xf0
and ebx, 0xf
add r11, rdx
movzx r11d, byte [r11 + rbx]
mov ebx, eax
and eax, 0xf0
add rax, rdx
and ebx, 0xf
movzx ebp, byte [rax + rbx]
mov eax, r13d
and r13d, 0xf0
and eax, 0xf
add rdx, r13
movzx edi, byte [rdx + rax]
jmp 0x1400b6c07
mov eax, 7
jmp 0x1400b6d32
mov eax, 8
jmp 0x1400b6d32
mov eax, 2
jmp 0x1400b6d32
Function at 0x1400b9f00
Capabilities:
Encrypt data using aes
Reference aes constants

Disassembly:
test rcx, rcx
je 0x1400b9f0f
test rdx, rdx
je 0x1400b9f15
jmp sym.oaes_encryption_round.part.0
mov eax, 2
ret
mov eax, 3
ret
Function at 0x1400dd170
Capabilities:
Resolve function by parsing pe exports

Disassembly:
vmovdqu64 zmm1, zmmword [0x14033ae00]
vpxor xmm0, xmm0, xmm0
vmovdqu8 zmmword [rcx + 0xc], zmm0
vmovdqu8 xmmword [rcx + 0x4c], xmm0
mov qword [rcx], 0
mov dword [rcx + 8], 0
mov qword [rcx + 0xa0], 0
vmovdqu64 zmmword [rcx + 0x5c], zmm1
vzeroupper
ret
Function at 0x1401340c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval3_close

Function at 0x140134120
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval4_close

Function at 0x140134180
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval5_close

Function at 0x1401341e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval3_close

Function at 0x140134240
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval4_close

Function at 0x1401342a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval5_close

Function at 0x140134300
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval3_close

Function at 0x140134360
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval4_close

Function at 0x1401343c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval5_close

Function at 0x140134420
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval3_close

Function at 0x140134480
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval4_close

Function at 0x1401344e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval5_close

Function at 0x140134540
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval3_close

Function at 0x1401345a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval4_close

Function at 0x140134600
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.haval5_close

Function at 0x140167d90
Capabilities:
Encode data using xor

Disassembly:
mov r9d, 0x48
jmp sym.keccak_core
Function at 0x140191e60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.luffa4_close
Function at 0x140193770
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor r8d, r8d
mov r9, rdx
xor edx, edx
jmp sym.luffa5_close
Function at 0x14019db90
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
lea rcx, [0x1403221e0]
call sym.__emutls_get_address
vmovdqu64 zmm0, zmmword [0x1403b1180]
mov r8d, 0x40
mov rdx, rbx
mov rcx, rax
vmovdqu64 zmmword [rax], zmm0
vmovdqu64 zmm1, zmmword [0x1403b11c0]
vmovdqu64 zmmword [rax + 0x40], zmm1
vzeroupper
add rsp, 0x20
pop rbx
jmp sym.sph_blake256
Function at 0x1401c3410
Capabilities:
Hash data using sha256

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x7b8
vmovups xmmword [rsp + 0x790], xmm6
vmovups xmmword [rsp + 0x7a0], xmm7
mov eax, dword [rcx + 0x8c]
vmovdqu64 zmm0, zmmword [rcx + 0x40]
movsxd rbp, dword [r9]
mov r10, qword [rcx + 0x80]
mov r11, qword [rcx + 0x88]
lea ebx, [rax - 1]
mov rax, qword [0x1403873f0]
lea rsi, [rsp + 0x9f]
mov r15, rcx
and rsi, 0xffffffffffffffc0
mov r12, rbp
mov edi, edx
shl rbp, 7
mov qword [rsp + 0x810], r8
vmovq xmm6, r9
lea r14, [rsi + 0x500]
add rbp, qword [rax]
mov rax, rsi
nop
vmovdqu64 zmmword [rax], zmm0
mov qword [rax + 0x40], r10
mov qword [rax + 0x48], r11
add rax, 0x50
cmp r14, rax
jne 0x1401c3490
lea rax, [rsp + 0x40]
lea r8, [0x140368200]
mov rdx, rsi
lea r13d, [rdi - 0x10]
mov rcx, rax
vmovq xmm7, rax
vzeroupper
call sym.sph_sha256_transform_le
mov rax, r14
mov r14, rbp
vmovq r8, xmm7
mov rbp, rax
jmp 0x1401c34f5
cmp ebx, r13d
jae 0x1401c3632
movzx eax, byte [r14]
test al, al
jne 0x1401c3632
lea eax, [rbx + 1]
mov rdx, rbp
mov rcx, rsi
mov qword [rsp + 0x38], r8
mov dword [rsi + 0x4c], eax
lea eax, [rbx + 2]
mov dword [rsi + 0x9c], eax
lea eax, [rbx + 3]
mov dword [rsi + 0xec], eax
lea eax, [rbx + 4]
mov dword [rsi + 0x13c], eax
lea eax, [rbx + 5]
mov dword [rsi + 0x18c], eax
lea eax, [rbx + 6]
mov dword [rsi + 0x1dc], eax
lea eax, [rbx + 7]
mov dword [rsi + 0x22c], eax
lea eax, [rbx + 8]
mov dword [rsi + 0x27c], eax
lea eax, [rbx + 9]
mov dword [rsi + 0x2cc], eax
lea eax, [rbx + 0xa]
mov dword [rsi + 0x31c], eax
lea eax, [rbx + 0xb]
mov dword [rsi + 0x36c], eax
lea eax, [rbx + 0xc]
mov dword [rsi + 0x3bc], eax
lea eax, [rbx + 0xd]
mov dword [rsi + 0x40c], eax
lea eax, [rbx + 0xe]
mov dword [rsi + 0x45c], eax
lea eax, [rbx + 0xf]
add ebx, 0x10
mov dword [rsi + 0x4ac], eax
mov rax, qword [0x140386cc0]
mov dword [rsi + 0x4fc], ebx
mov r9d, dword [rax]
mov dword [rsp + 0x20], r12d
call sym.scrypt_N_1_1_256_16way
mov r8, qword [rsp + 0x38]
test eax, eax
je 0x1401c34e0
xor edi, edi
mov dword [rsp + 0x38], ebx
vmovq xmm7, r8
jmp 0x1401c35c9
inc rdi
cmp rdi, 0x10
je 0x1401c3620
mov rbx, rdi
mov rdx, r15
shl rbx, 5
add rbx, rbp
mov rcx, rbx
call sym.valid_hash
test al, al
je 0x1401c35c0
mov rax, qword [0x140386c50]
cmp byte [rax], 0
jne 0x1401c35c0
lea rax, [rdi + rdi*4]
vmovq r8, xmm6
mov rdx, rbx
mov rcx, r15
shl rax, 4
inc rdi
mov eax, dword [rsi + rax + 0x4c]
mov dword [r15 + 0x8c], eax
call sym.submit_solution
cmp rdi, 0x10
jne 0x1401c35c9
nop word [rax + rax]
mov ebx, dword [rsp + 0x38]
vmovq r8, xmm7
cmp ebx, r13d
jb 0x1401c34e9
mov eax, ebx
sub eax, dword [r15 + 0x8c]
mov rcx, qword [rsp + 0x810]
mov qword [rcx], rax
mov dword [r15 + 0x8c], ebx
vmovups xmm6, xmmword [rsp + 0x790]
vmovups xmm7, xmmword [rsp + 0x7a0]
xor eax, eax
add rsp, 0x7b8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x1401ccff0
Capabilities:
Encode data using xor

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rbx, rcx
mov r9, rdx
test r8d, r8d
je 0x1401cd133
mov r10d, r8d
lea r13, [rcx + 0x80]
mov rax, rdx
shl r10, 8
add r10, rdx
nop
vmovdqu ymm0, ymmword [rbx]
mov rdx, r13
mov rcx, rbx
vmovntdq ymmword [rax], ymm0
vmovdqu ymm1, ymmword [rbx + 0x20]
vmovntdq ymmword [rax + 0x20], ymm1
vmovdqu ymm2, ymmword [rbx + 0x40]
vmovntdq ymmword [rax + 0x40], ymm2
vmovdqu ymm3, ymmword [rbx + 0x60]
vmovntdq ymmword [rax + 0x60], ymm3
vmovdqu ymm4, ymmword [rbx + 0x80]
vmovntdq ymmword [rax + 0x80], ymm4
vmovdqu ymm5, ymmword [rbx + 0xa0]
vmovntdq ymmword [rax + 0xa0], ymm5
vmovdqu ymm0, ymmword [rbx + 0xc0]
vmovntdq ymmword [rax + 0xc0], ymm0
vmovdqu ymm1, ymmword [rbx + 0xe0]
vmovntdq ymmword [rax + 0xe0], ymm1
vzeroupper
call sym.salsa8_simd128_2way
add rax, 0x100
mov rdx, rbx
mov rcx, r13
call sym.salsa8_simd128_2way
cmp r10, rax
jne 0x1401cd020
lea edi, [r8 - 1]
xor esi, esi
lea r12, [rbx + 0x100]
movabs rbp, 0xffffffff00000000
nop word cs:[rax + rax]
mov r11, qword [rbx + 0x80]
mov edx, edi
mov rax, rbx
and edx, r11d
shr r11, 0x20
and r11d, edi
shl edx, 5
shl r11d, 5
sub r11d, edx
lea ecx, [r11 + rdx]
mov r10, qword [r9 + rcx*8]
and r10, rbp
mov rcx, r10
mov r10d, edx
inc edx
mov r10d, dword [r9 + r10*8]
or rcx, r10
xor qword [rax], rcx
add rax, 8
cmp rax, r12
jne 0x1401cd0f0
mov rdx, r13
mov rcx, rbx
inc esi
call sym.salsa8_simd128_2way
mov rdx, rbx
mov rcx, r13
call sym.salsa8_simd128_2way
cmp esi, r8d
jne 0x1401cd0d0
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
Function at 0x140201590
Capabilities:
Hash data using sha256

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
movsxd r8, r8d
call sym.sph_sha256_full
mov r8d, 0x20
mov rdx, rbx
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp sym.sph_sha256_full
Function at 0x140207d40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
vmovdqu ymm0, ymmword [0x140369040]
vmovdqu64 zmm1, zmmword [0x140369000]
movabs rax, 0x22af50dc14ce5a45
movabs rdx, 0xeb21b74aeffdbc6b
vmovdqu64 zmm2, zmmword [0x140368fc0]
mov qword [rcx + 0x68], rax
mov rax, qword [0x140369060]
mov qword [rcx + 0x70], rdx
mov qword [rcx + 0x40], 0
vmovdqu ymmword [rcx + 0x48], ymm0
vmovdqu64 zmmword [rcx + 0x78], zmm1
mov qword [rcx + 0xf8], rax
vmovdqu64 zmmword [rcx + 0xb8], zmm2
vzeroupper
ret

Function at 0x140207e00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
vmovdqu ymm0, ymmword [0x140369080]
vmovdqu64 zmm1, zmmword [0x140368f80]
movabs rax, 0x8bd14410be0cae40
movabs rdx, 0x28acab7f76d2adac
vmovdqu64 zmm2, zmmword [0x140368f40]
mov qword [rcx + 0x68], rax
mov rax, qword [0x140369060]
mov qword [rcx + 0x70], rdx
mov qword [rcx + 0x40], 0
vmovdqu ymmword [rcx + 0x48], ymm0
vmovdqu64 zmmword [rcx + 0x78], zmm1
mov qword [rcx + 0xf8], rax
vmovdqu64 zmmword [rcx + 0xb8], zmm2
vzeroupper
ret
Function at 0x1402193f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x30
vmovups xmmword [rsp + 0x20], xmm6
mov eax, dword [rcx + 0xc8]
vmovd xmm1, dword [rcx + 0xd0]
vpinsrd xmm6, xmm1, dword [rcx + 0xd4], 1
mov rsi, rdx
mov rdx, qword [rcx + 0xc0]
mov rbx, rcx
lea eax, [rax + rdx*8]
vmovd xmm2, eax
vpinsrd xmm0, xmm2, dword [rcx + 0xcc], 1
mov dword [rcx + 0xc8], eax
vpunpcklqdq xmm6, xmm0, xmm6
test rdx, rdx
je 0x140219520
lea rax, [rcx + rdx]
lea r9, [rdx + 1]
lea rcx, [rcx + rdx + 1]
mov byte [rax], pe_nt_image_headers64
cmp rdx, 0x6d
jbe 0x1402194f0
mov r8d, pe_nt_image_headers64
xor edx, edx
sub r8, r9
call sym.memset
mov rdx, rbx
mov rcx, rbx
call sym.c512
vpxor xmm0, xmm0, xmm0
vmovdqu8 zmmword [rbx], zmm0
vmovdqu8 zmmword [rbx + 0x2e], zmm0
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [rbx + 0xc8], xmm0
vzeroupper
movzx eax, word [0x140369100]
mov rdx, rbx
vmovdqu xmmword [rbx + 0x6e], xmm6
mov rcx, rbx
mov word [rbx + 0x7e], ax
call sym.c512
lea rdx, [rbx + 0x84]
mov rax, rsi
sub rax, rdx
cmp rax, 0x38
jbe 0x140219580
vmovdqu32 zmm0, zmmword [rbx + 0x80]
vmovdqu32 zmmword [rsi], zmm0
vzeroupper
vmovups xmm6, xmmword [rsp + 0x20]
add rsp, 0x30
pop rbx
pop rsi
pop rdi
ret
mov eax, 0x6e
sub rax, r9
cmp eax, 8
jae 0x140219550
test al, 4
jne 0x14021961d
test eax, eax
je 0x14021949e
mov byte [rcx], 0
test al, 2
je 0x14021949e
mov eax, eax
mov word [rcx + rax - 2], 0
jmp 0x14021949e
vpxor xmm0, xmm0, xmm0
mov byte [rcx], pe_nt_image_headers64
vmovdqu8 zmmword [rcx + 1], zmm0
vmovdqu8 zmmword [rcx + 0x2e], zmm0
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [rcx + 0xc8], xmm0
vzeroupper
jmp 0x14021949e
lea rdi, [rcx + 8]
mov edx, eax
mov qword [rcx], 0
and rdi, 0xfffffffffffffff8
mov qword [rcx + rdx - 8], 0
sub rcx, rdi
add ecx, eax
xor eax, eax
shr ecx, 3
rep stosq qword [rdi], rax
jmp 0x14021949e
mov eax, dword [rbx + 0x80]
mov dword [rsi], eax
mov eax, dword [rbx + 0x84]
mov dword [rsi + 4], eax
mov eax, dword [rbx + 0x88]
mov dword [rsi + 8], eax
mov eax, dword [rbx + 0x8c]
mov dword [rsi + 0xc], eax
mov eax, dword [rbx + 0x90]
mov dword [rsi + 0x10], eax
mov eax, dword [rbx + 0x94]
mov dword [rsi + 0x14], eax
mov eax, dword [rbx + 0x98]
mov dword [rsi + 0x18], eax
mov eax, dword [rbx + 0x9c]
mov dword [rsi + 0x1c], eax
mov eax, dword [rbx + 0xa0]
mov dword [rsi + 0x20], eax
mov eax, dword [rbx + 0xa4]
mov dword [rsi + 0x24], eax
mov eax, dword [rbx + 0xa8]
mov dword [rsi + 0x28], eax
mov eax, dword [rbx + 0xac]
mov dword [rsi + 0x2c], eax
mov eax, dword [rbx + 0xb0]
mov dword [rsi + 0x30], eax
mov eax, dword [rbx + 0xb4]
mov dword [rsi + 0x34], eax
mov eax, dword [rbx + 0xb8]
mov dword [rsi + 0x38], eax
mov eax, dword [rbx + 0xbc]
mov dword [rsi + 0x3c], eax
vmovups xmm6, xmmword [rsp + 0x20]
add rsp, 0x30
pop rbx
pop rsi
pop rdi
ret
mov eax, eax
mov dword [rcx], 0
mov dword [rcx + rax - 4], 0
jmp 0x14021949e
Function at 0x14022e0e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
vmovdqu64 zmm0, zmmword [0x140369700]
mov qword [rcx + 0x88], 0
mov qword [rcx + 0x40], 0
vmovdqu64 zmmword [rcx + 0x48], zmm0
vzeroupper
ret

Function at 0x14022ed40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rax, qword [rcx + 0x80]
mov rbx, rcx
mov ebp, edx
mov edi, r8d
mov rsi, r9
test rax, rax
jne 0x14022ee00
test r8d, r8d
jne 0x14022ee00
mov rdx, qword [rbx + 0x80]
mov ecx, 0xa
shlx eax, dword [rbx + 0x108], ecx
add edi, eax
vpxor xmm0, xmm0, xmm0
shr eax, 0x16
vmovdqu8 zmmword [rbx + 8], zmm0
vmovdqu8 zmmword [rbx + 0x40], zmm0
lea edi, [rdi + rdx*8]
shlx edx, dword [rbx + 0x10c], ecx
add eax, edx
mov rcx, rbx
vmovd xmm0, edi
mov edx, 1
vpinsrd xmm0, xmm0, eax, 1
vmovq qword [rbx], xmm0
vzeroupper
call sym.compress_big_2
lea rdx, [rbx + 0x8c]
mov rax, rsi
sub rax, rdx
cmp rax, 0x38
jbe 0x14022ee40
vmovdqu32 zmm0, zmmword [rbx + 0x88]
vmovdqu32 zmmword [rsi], zmm0
vzeroupper
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov r8d, pe_nt_image_headers64
lea rcx, [rbx + rax]
xor edx, edx
sub r8, rax
call sym.memset
mov rcx, qword [rbx + 0x80]
mov edx, 8
mov eax, 0xff
sub edx, edi
shlx eax, eax, edx
xor edx, edx
and eax, ebp
mov byte [rbx + rcx], al
mov rcx, rbx
call sym.compress_big_2
jmp 0x14022ed6c
mov eax, dword [rbx + 0x88]
mov dword [rsi], eax
mov eax, dword [rbx + 0x8c]
mov dword [rsi + 4], eax
mov eax, dword [rbx + 0x90]
mov dword [rsi + 8], eax
mov eax, dword [rbx + 0x94]
mov dword [rsi + 0xc], eax
mov eax, dword [rbx + 0x98]
mov dword [rsi + 0x10], eax
mov eax, dword [rbx + 0x9c]
mov dword [rsi + 0x14], eax
mov eax, dword [rbx + 0xa0]
mov dword [rsi + 0x18], eax
mov eax, dword [rbx + 0xa4]
mov dword [rsi + 0x1c], eax
mov eax, dword [rbx + 0xa8]
mov dword [rsi + 0x20], eax
mov eax, dword [rbx + 0xac]
mov dword [rsi + 0x24], eax
mov eax, dword [rbx + 0xb0]
mov dword [rsi + 0x28], eax
mov eax, dword [rbx + 0xb4]
mov dword [rsi + 0x2c], eax
mov eax, dword [rbx + 0xb8]
mov dword [rsi + 0x30], eax
mov eax, dword [rbx + 0xbc]
mov dword [rsi + 0x34], eax
mov eax, dword [rbx + 0xc0]
mov dword [rsi + 0x38], eax
mov eax, dword [rbx + 0xc4]
mov dword [rsi + 0x3c], eax
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret