joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14004a370
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x14004a553
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x40], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.140049e40
mov rcx, qword [rsi + 8]
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rdi
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x14004a518
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + 0x11]
movzx r9d, byte [rcx + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rdx, qword [rdx]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x12]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x13]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x14]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x15]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x16]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x17]
imul r9, rdi
xor r9, rax
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r10, qword [r11]
cmp r10, rbx
jne 0x14004a48c
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x14004a507
mov rax, qword [r11 + 8]
mov r9, qword [rcx + 0x10]
cmp r9, qword [rax + 0x10]
jne 0x14004a4c9
mov r10, qword [rax]
cmp r10, rcx
je 0x14004a4c3
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x14004a507
mov r8, rax
cmp r10, rax
je 0x14004a4e3
mov rax, qword [rax + 8]
mov r8, rax
cmp r9, qword [rax + 0x10]
je 0x14004a52d
cmp r10, rax
jne 0x14004a4d1
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x14004a410
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov r10, qword [rax]
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
jmp 0x14004a507
lea rcx, str.invalid_hash_bucket_count
call fcn.1401e106c
int3
Function at 0x14004ec60
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0xa0
mov rbx, r8
mov rbp, rdx
mov rdi, rcx
lea rsi, [rcx + 0x20]
mov qword [rsp + 0x40], rsi
mov byte [rsp + 0x48], 0
mov rcx, rsi
call fcn.1401e139c
test eax, eax
jne 0x14004edad
mov byte [rsp + 0x48], 1
cmp dword [rdi + 0x18], eax
jne 0x14004edb5
lea rcx, [rdi + 0xf8]
cmp rcx, rbx
je 0x14004ecce
mov rdx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14004ecc5
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
call fcn.14000f0e0
mov dword [rdi + 0x18], 2
lea rcx, [rdi + 0x540]
call fcn.140054ca0
lea rax, [0x14004b4c0]
mov qword [rsp + 0x50], rax
xor ebx, ebx
mov dword [rsp + 0x58], ebx
lea ecx, [rbx + 0x20]
call fcn.140205df8
test rax, rax
je 0x14004ed12
mov qword [rax], rbp
mov qword [rax + 8], rdi
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rax + 0x10], xmm0
jmp 0x14004ed15
mov rax, rbx
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140043c30]
xor edx, edx
xor ecx, ecx
call fcn.140210fd0
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14004ed9e
cmp dword [rsp + 0x38], 0
je 0x14004eded
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.1401e2cc4
test eax, eax
jne 0x14004ed96
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x30], xmm0
mov rcx, rsi
call fcn.1401e13c0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret
mov ecx, eax
call fcn.1401e34b8
nop
mov dword [rsp + 0x38], ebx
mov ecx, 6
call fcn.1401e34f4
nop
mov ecx, eax
call fcn.1401e34b8
nop
mov edx, 2
lea rcx, [rsp + 0x60]
call fcn.14004f750
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140048650
lea rdx, [0x1403370c0]
lea rcx, [rsp + 0x70]
call fcn.140207de0
nop
mov ecx, 1
call fcn.1401e34f4
int3
Function at 0x140050430
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0xa0
movzx esi, r9b
movzx ebp, r8b
mov r14, rdx
mov rbx, rcx
cmp byte [rcx + 0x130], 0
je 0x1400504a0
mov dword [rsp + 0x40], reloc.WS2_32.dll_ntohl
lea rax, [0x14034ffd8]
mov qword [rsp + 0x48], rax
add rcx, 0x5e0
lea r8, [rsp + 0x40]
lea rdx, [fcn.140049c38]
call fcn.140046bd0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
lea rdi, [rcx + 0x20]
mov qword [rsp + 0x40], rdi
mov byte [rsp + 0x48], 0
mov rcx, rdi
call fcn.1401e139c
test eax, eax
jne 0x140050593
mov byte [rsp + 0x48], 1
cmp dword [rbx + 0x18], 1
jne 0x14005059b
mov dword [rbx + 0x18], 3
mov rcx, rdi
call fcn.1401e13c0
lea rcx, [rbx + 0x540]
call fcn.140054ca0
lea rax, [0x14004be30]
mov qword [rsp + 0x40], rax
xor edi, edi
mov dword [rsp + 0x48], edi
lea ecx, [rdi + 0x28]
call fcn.140205df8
test rax, rax
je 0x140050521
mov byte [rax], sil
mov byte [rax + 1], bpl
mov qword [rax + 8], r14
mov qword [rax + 0x10], rbx
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rax + 0x18], xmm0
jmp 0x140050524
mov rax, rdi
mov qword [rsp + 0xc0], rax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140043c70]
xor edx, edx
xor ecx, ecx
call fcn.140210fd0
mov qword [rsp + 0x30], rax
test rax, rax
je 0x140050584
cmp dword [rsp + 0x38], 0
je 0x1400505d3
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.1401e2cc4
test eax, eax
jne 0x14005057c
jmp 0x140050488
mov ecx, eax
call fcn.1401e34b8
nop
mov dword [rsp + 0x38], edi
mov ecx, 6
call fcn.1401e34f4
nop
mov ecx, eax
call fcn.1401e34b8
nop
mov edx, 3
lea rcx, [rsp + 0x60]
call fcn.14004f750
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140048650
lea rdx, [0x1403370c0]
lea rcx, [rsp + 0x70]
call fcn.140207de0
nop
mov ecx, 1
call fcn.1401e34f4
int3
Function at 0x14005c4f0
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
mov rax, qword [rcx + 8]
xor r14d, r14d
mov edi, r14d
mov ebp, r14d
mov rsi, rcx
nop word [rax + rax]
lea ecx, [rax + 0xff]
shl rdi, cl
add rdi, rdi
nop dword [rax]
mov r10, qword [rsi]
mov ecx, dword [r10]
cmp ecx, 0x270
jne 0x14005c594
lea rax, [r10 + 8]
mov r9d, ecx
nop word [rax + rax]
mov r8d, dword [rax - 4]
xor r8d, dword [rax]
lea rax, [rax + 4]
btr r8d, 0x1f
xor r8d, dword [rax - 8]
mov ecx, r8d
and cl, 1
neg cl
sbb edx, edx
shr r8d, 1
and edx, 0x9908b0df
xor edx, dword [rax + 0x62c]
xor edx, r8d
mov dword [rax + 0x9b8], edx
sub r9, 1
jne 0x14005c550
mov ecx, dword [r10]
jmp 0x14005c677
cmp ecx, 0x4e0
jb 0x14005c677
lea r11, [r10 + 0x9c4]
mov ebx, 0xe3
mov eax, dword [r11]
nop
mov edx, dword [r11 + 4]
lea r8, [r11 + 4]
xor edx, eax
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
mov eax, dword [r8]
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r11 + 0x634]
xor ecx, edx
mov dword [r11 - 0x9c0], ecx
lea r11, [r8]
sub rbx, 1
jne 0x14005c5b0
lea r11, [r10 + 0xd50]
mov ebx, 0x18c
mov eax, dword [r11]
nop dword [rax + rax]
mov edx, eax
lea r8, [r11 + 4]
xor edx, dword [r8]
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
mov eax, dword [r8]
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r11 - 0xd4c]
xor ecx, edx
mov dword [r11 - 0x9c0], ecx
lea r11, [r8]
sub rbx, 1
jne 0x14005c600
mov edx, dword [r10 + 0x1380]
xor edx, dword [r10 + 4]
btr edx, 0x1f
xor edx, dword [r10 + 0x1380]
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r10 + 0x634]
xor ecx, edx
mov dword [r10 + 0x9c0], ecx
mov ecx, r14d
mov dword [r10], r14d
mov eax, ecx
mov edx, dword [r10 + rax*4 + 4]
lea eax, [rcx + 1]
mov ecx, edx
mov dword [r10], eax
mov eax, dword [r10 + 0x1384]
shr ecx, 0xb
and eax, ecx
xor edx, eax
mov eax, edx
and eax, 0xff3a58ad
shl eax, 7
xor edx, eax
mov eax, edx
and edx, 0xffffdf8c
shl edx, 0xf
mov ecx, edx
xor rcx, rax
mov rdx, rcx
shr rdx, 0x12
xor rdx, rcx
cmp rdx, qword [rsi + 0x10]
ja 0x14005c530
mov rax, qword [rsi + 8]
or rdi, rdx
add rbp, rax
cmp rbp, 0x40
jb 0x14005c520
mov rbx, qword [rsp + 0x10]
mov rax, rdi
mov rdi, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x20]
pop r14
ret
Function at 0x14006b460
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov esi, r8d
mov ebx, edx
xor edx, edx
mov r8d, 0x400
movzx ebp, r9b
mov r14, rcx
call fcn.140208560
lea r15d, [rbx - 1]
xor r12d, r12d
mov ecx, r15d
mov r13d, 1
mov edi, r13d
movzx r11d, r12w
shl rdi, cl
mov ecx, 0x20
sub ecx, ebx
mov ebx, 0xffffffff
shr ebx, cl
mov ecx, 0x80
nop dword [rax]
nop word [rax + rax]
mov edx, r12d
movzx r9d, r11w
movzx eax, r13w
nop dword [rax + rax]
movzx r10d, cx
or r10w, ax
movzx r8d, r10w
and r8w, r9w
cmp r8w, cx
je 0x14006b4fc
cmp r8w, ax
jne 0x14006b500
xor r9w, r10w
shr cx, 1
add ax, ax
cmp cx, ax
ja 0x14006b4e0
mov r8d, 8
test r13b, r9b
mov eax, r12d
mov ecx, r12d
cmovne eax, edi
xor edx, eax
test edx, edi
cmovne ecx, esi
shr r9w, 1
lea eax, [rdx + rdx]
mov edx, ecx
xor edx, eax
sub r8d, r13d
jne 0x14006b511
and edx, ebx
test bpl, bpl
je 0x14006b5ad
mov ecx, r15d
mov eax, r13d
shl eax, cl
mov r8d, r13d
cmp eax, r13d
jbe 0x14006b571
nop dword [rax + rax]
mov r9d, eax
or r9d, r8d
mov ecx, r9d
and ecx, edx
cmp ecx, eax
je 0x14006b564
cmp ecx, r8d
jne 0x14006b567
xor edx, r9d
shr eax, 1
add r8d, r8d
cmp eax, r8d
ja 0x14006b550
movzx r10d, r11w
movzx eax, r13w
mov ecx, 0x80
nop
movzx r9d, cx
or r9w, ax
movzx r8d, r9w
and r8w, r10w
cmp r8w, cx
je 0x14006b59c
cmp r8w, ax
jne 0x14006b5a0
xor r10w, r9w
shr cx, 1
add ax, ax
cmp cx, ax
ja 0x14006b580
jmp 0x14006b5b1
movzx r10d, r11w
movzx eax, r10w
inc r11w
mov dword [r14 + rax*4], edx
mov eax, 0x100
lea ecx, [rax - 0x80]
cmp r11w, ax
jb 0x14006b4d0
mov rbx, qword [rsp + 0x50]
mov rax, r14
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1400e6cf0
Capabilities:
Create thread

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x90
mov rdi, rdx
mov rsi, rcx
lea rbx, [rcx + 0x30]
mov qword [rsp + 0xc0], rbx
mov rcx, rbx
call fcn.1401e139c
test eax, eax
jne 0x1400e6e94
cmp dword [rsi + 0x2c], eax
je 0x1400e6d61
mov dword [rsp + 0x30], 2
lea rax, [0x140350230]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x1400e6e9c
mov rax, qword [rcx]
lea rdx, [rsp + 0x30]
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x1400e6e69
mov dword [rsi + 0x2c], 1
mov rcx, rsi
call fcn.1400e73f0
mov qword [rsp + 0x40], rsi
lea rax, [rsp + 0x48]
mov qword [rsp + 0xd0], rax
xor r14d, r14d
mov qword [rsp + 0x80], r14
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x1400e6da8
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
call qword [rax]
mov qword [rsp + 0x80], rax
mov ecx, 0x48
call fcn.140205df8
mov rdi, rax
mov qword [rsp + 0xd0], rax
test rax, rax
je 0x1400e6df5
mov rax, qword [rsp + 0x40]
mov qword [rdi], rax
lea rbp, [rdi + 8]
mov qword [rsp + 0xd8], rbp
mov qword [rbp + 0x38], r14
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x1400e6df3
mov rax, qword [rcx]
mov rdx, rbp
call qword [rax]
mov qword [rbp + 0x38], rax
jmp 0x1400e6df8
mov rdi, r14
mov qword [rsp + 0xd0], rdi
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov r9, rdi
lea r8, [0x1400d5d90]
xor edx, edx
xor ecx, ecx
call fcn.140210fd0
mov qword [rsp + 0x30], rax
test rax, rax
je 0x1400e6e84
cmp dword [rsi + 0xd0], 0
jne 0x1400e6e7e
xorps xmm0, xmm0
movaps xmm1, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movups xmmword [rsi + 0xc8], xmm1
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x1400e6e69
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
nop
mov rcx, rbx
add rsp, 0x90
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
jmp fcn.1401e13c0
call fcn.140210a28
nop
mov dword [rsp + 0x38], r14d
mov ecx, 6
call fcn.1401e34f4
nop
mov ecx, eax
call fcn.1401e34b8
nop
call fcn.1401e1028
int3
Function at 0x1400f1ee0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
mov rbx, rcx
lea rsi, [rcx + 0x80]
lea r9, [0x140350ef0]
mov r8d, 3
lea rdx, [rbp - 0x78]
mov rcx, rsi
call fcn.1401b6a70
nop
lea rcx, [rax + 0x68]
lea rdx, str.Starting...
call fcn.140043080
nop
lea rcx, [rbp - 0x78]
call fcn.1401b6490
nop
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x60], rax
lea rcx, [rbp + 0x60]
call fcn.1401e1d10
nop
cmp qword [rbx + 0xb0], 0
je 0x1400f20a4
lea rax, vtable.std::_Func_impl_no_alloc_class__lambda_beadbddf90bb3d880f5f57621fa649d4___bool___.0
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
lea rax, [rsp + 0x48]
mov qword [rbp - 0x80], rax
lea rdi, [rbx + 0x180]
mov qword [rsp + 0x30], rdi
mov byte [rsp + 0x38], 0
mov rcx, rdi
call fcn.1401e139c
test eax, eax
jne 0x1400f2104
mov byte [rsp + 0x38], 1
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400f210c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test al, al
je 0x1400f1fd4
mov dword [rbx + 0x104], 3
lea rcx, [rbx + 0x1d0]
call fcn.1401e2ef4
nop
mov rcx, rdi
call fcn.1401e13c0
xor dil, dil
jmp 0x1400f1fdf
mov rcx, rdi
call fcn.1401e13c0
mov dil, 1
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400f1ff9
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
test dil, dil
jne 0x1400f2112
mov ecx, reloc.WS2_32.dll_recv
call fcn.140205df8
mov rdi, rax
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x1400f2066
mov ecx, 8
call fcn.140205df8
test rax, rax
je 0x1400f202d
mov qword [rax], rbx
mov qword [rbp + 0xe8], rax
lea rsi, [rdi + 8]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x1400e96e0]
xor edx, edx
xor ecx, ecx
call fcn.140210fd0
mov qword [rdi], rax
test rax, rax
je 0x1400f2172
jmp 0x1400f2068
xor edi, edi
mov rcx, qword [rbx + 0x108]
mov qword [rbx + 0x108], rdi
test rcx, rcx
je 0x1400f208b
cmp dword [rcx + 8], 0
jne 0x1400f209e
mov edx, reloc.WS2_32.dll_recv
call fcn.140205dc4
mov rbx, qword [rsp + 0x1f0]
add rsp, 0x1c0
pop rdi
pop rsi
pop rbp
ret
call fcn.140210a28
int3
lea rbx, str.Failed_to_start:_no_consumers
mov qword [rbp + 0xe0], rbx
lea r9, [0x140350eb0]
mov r8d, 1
lea rdx, [rbp - 0x78]
mov rcx, rsi
call fcn.1401b6a70
nop
lea rdx, [rbp + 0xe0]
mov rcx, rax
call fcn.1400e8f70
nop
lea rcx, [rbp - 0x78]
call fcn.140011fe0
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140008df0
lea rdx, [0x140336d50]
lea rcx, [rsp + 0x30]
call fcn.140207de0
nop
mov ecx, eax
call fcn.1401e34b8
nop
call fcn.1401e1028
nop
lea rbx, str.Failed_to_start:_already_started
mov qword [rbp + 0xe0], rbx
lea r9, [0x140350eb0]
mov r8d, 1
lea rdx, [rbp - 0x78]
mov rcx, rsi
call fcn.1401b6a70
nop
lea rdx, [rbp + 0xe0]
mov rcx, rax
call fcn.1400e8f70
nop
lea rcx, [rbp - 0x78]
call fcn.140011fe0
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140008df0
lea rdx, [0x140336d50]
lea rcx, [rsp + 0x30]
call fcn.140207de0
nop
mov dword [rsi], 0
mov ecx, 6
call fcn.1401e34f4
int3
Function at 0x140127960
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r9, r8
mov r12, rdx
movabs rdx, 0x100000001b3
mov r8, rcx
mov rcx, qword [rcx + 0x50]
movabs rax, 0xcbf29ce484222325
dec rcx
xor r13d, r13d
movzx edi, byte [r9]
xor rdi, rax
mov r15, qword [r8 + 0x38]
movzx eax, byte [r9 + 1]
imul rdi, rdx
mov qword [rsp + 0x78], rcx
lea r14, [r13 - 1]
xor rdi, rax
movzx eax, byte [r9 + 2]
imul rdi, rdx
xor rdi, rax
movzx eax, byte [r9 + 3]
imul rdi, rdx
xor rdi, rax
movzx eax, byte [r9 + 4]
imul rdi, rdx
xor rdi, rax
movzx eax, byte [r9 + 5]
imul rdi, rdx
xor rdi, rax
movzx eax, byte [r9 + 6]
imul rdi, rdx
xor rdi, rax
movzx eax, byte [r9 + 7]
imul rdi, rdx
xor rdi, rax
movabs rax, 0xaaaaaaaaaaaaaaab
imul rdi, rdx
and rdi, rcx
mul rdi
movzx r9d, di
mov rbx, rdx
mov edx, 1
shr rbx, 5
movzx eax, bx
mov rsi, rbx
add ax, ax
shl rsi, 4
lea ecx, [rax + rbx]
shl cx, 4
sub r9w, cx
movzx eax, r9w
shr rax, 3
add rax, r15
movzx ecx, r9w
and ecx, 7
shl dx, cl
movzx eax, byte [rax + rsi + 0xa]
test al, dl
je 0x140127b79
movzx ebp, di
nop
cmp qword [r8 + 0x30], 0
je 0x140127ad7
movzx eax, r9w
mov r8d, 1
shr rax, 3
add rax, r15
movzx ecx, r9w
and ecx, 7
shl r8w, cl
movzx eax, byte [rax + rsi + 0xa]
test al, r8b
je 0x140127ad7
lea rcx, [r15 + 0xa]
movzx edx, r9w
add rcx, rsi
call fcn.14012cf70
mov r8, qword [rsp + 0x60]
movzx ecx, ax
mov rax, qword [r15 + rsi]
shl rcx, 5
mov rcx, qword [rcx + rax]
cmp qword [r8 + 0x28], rcx
jne 0x140127ad7
cmp r14, 0xffffffffffffffff
mov rax, rdi
cmovne rax, r14
mov r14, rax
jmp 0x140127b14
movzx eax, bx
lea rcx, [r15 + 0xa]
add bx, bx
add rcx, rsi
add ax, bx
shl ax, 4
sub bp, ax
movzx edx, bp
call fcn.14012cf70
movzx ecx, ax
mov rax, qword [r15 + rsi]
shl rcx, 5
mov rcx, qword [rcx + rax]
mov rax, qword [rsp + 0x70]
cmp qword [rax], rcx
je 0x140127b8e
mov r8, qword [rsp + 0x60]
inc r13
movabs rax, 0xaaaaaaaaaaaaaaab
add rdi, r13
and rdi, qword [rsp + 0x78]
mul rdi
movzx r9d, di
movzx ebp, di
mov rbx, rdx
mov edx, 1
shr rbx, 5
movzx eax, bx
mov rsi, rbx
add ax, ax
shl rsi, 4
lea ecx, [rax + rbx]
shl cx, 4
sub r9w, cx
movzx eax, r9w
shr rax, 3
add rax, r15
movzx ecx, r9w
and ecx, 7
shl dx, cl
movzx eax, byte [rax + rsi + 0xa]
test al, dl
jne 0x140127a70
mov qword [r12], 0xffffffffffffffff
cmp r14, 0xffffffffffffffff
jne 0x140127b9d
mov qword [r12 + 8], rdi
jmp 0x140127ba2
mov qword [r12], rdi
mov qword [r12 + 8], 0xffffffffffffffff
jmp 0x140127ba2
mov qword [r12 + 8], r14
mov rbx, qword [rsp + 0x68]
mov rax, r12
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x140158ab0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r9, r8
mov r12, rdx
movabs rdx, 0x100000001b3
mov r8, rcx
mov rcx, qword [rcx + 0x50]
movabs rax, 0xcbf29ce484222325
dec rcx
xor r13d, r13d
movzx edi, byte [r9]
xor rdi, rax
mov r15, qword [r8 + 0x38]
movzx eax, byte [r9 + 1]
imul rdi, rdx
mov qword [rsp + 0x78], rcx
lea r14, [r13 - 1]
xor rdi, rax
movzx eax, byte [r9 + 2]
imul rdi, rdx
xor rdi, rax
movzx eax, byte [r9 + 3]
imul rdi, rdx
xor rdi, rax
movzx eax, byte [r9 + 4]
imul rdi, rdx
xor rdi, rax
movzx eax, byte [r9 + 5]
imul rdi, rdx
xor rdi, rax
movzx eax, byte [r9 + 6]
imul rdi, rdx
xor rdi, rax
movzx eax, byte [r9 + 7]
imul rdi, rdx
xor rdi, rax
movabs rax, 0xaaaaaaaaaaaaaaab
imul rdi, rdx
and rdi, rcx
mul rdi
movzx r9d, di
mov rbx, rdx
mov edx, 1
shr rbx, 5
movzx eax, bx
mov rsi, rbx
add ax, ax
shl rsi, 4
lea ecx, [rax + rbx]
shl cx, 4
sub r9w, cx
movzx eax, r9w
shr rax, 3
add rax, r15
movzx ecx, r9w
and ecx, 7
shl dx, cl
movzx eax, byte [rax + rsi + 0xa]
test al, dl
je 0x140158cc9
movzx ebp, di
nop
cmp qword [r8 + 0x30], 0
je 0x140158c27
movzx eax, r9w
mov r8d, 1
shr rax, 3
add rax, r15
movzx ecx, r9w
and ecx, 7
shl r8w, cl
movzx eax, byte [rax + rsi + 0xa]
test al, r8b
je 0x140158c27
lea rcx, [r15 + 0xa]
movzx edx, r9w
add rcx, rsi
call fcn.140163550
mov r8, qword [rsp + 0x60]
movzx ecx, ax
mov rax, qword [r15 + rsi]
shl rcx, 5
mov rcx, qword [rcx + rax]
cmp qword [r8 + 0x28], rcx
jne 0x140158c27
cmp r14, 0xffffffffffffffff
mov rax, rdi
cmovne rax, r14
mov r14, rax
jmp 0x140158c64
movzx eax, bx
lea rcx, [r15 + 0xa]
add bx, bx
add rcx, rsi
add ax, bx
shl ax, 4
sub bp, ax
movzx edx, bp
call fcn.140163550
movzx ecx, ax
mov rax, qword [r15 + rsi]
shl rcx, 5
mov rcx, qword [rcx + rax]
mov rax, qword [rsp + 0x70]
cmp qword [rax], rcx
je 0x140158cde
mov r8, qword [rsp + 0x60]
inc r13
movabs rax, 0xaaaaaaaaaaaaaaab
add rdi, r13
and rdi, qword [rsp + 0x78]
mul rdi
movzx r9d, di
movzx ebp, di
mov rbx, rdx
mov edx, 1
shr rbx, 5
movzx eax, bx
mov rsi, rbx
add ax, ax
shl rsi, 4
lea ecx, [rax + rbx]
shl cx, 4
sub r9w, cx
movzx eax, r9w
shr rax, 3
add rax, r15
movzx ecx, r9w
and ecx, 7
shl dx, cl
movzx eax, byte [rax + rsi + 0xa]
test al, dl
jne 0x140158bc0
mov qword [r12], 0xffffffffffffffff
cmp r14, 0xffffffffffffffff
jne 0x140158ced
mov qword [r12 + 8], rdi
jmp 0x140158cf2
mov qword [r12], rdi
mov qword [r12 + 8], 0xffffffffffffffff
jmp 0x140158cf2
mov qword [r12 + 8], r14
mov rbx, qword [rsp + 0x68]
mov rax, r12
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret