joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400a2240
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rdi, r9
mov rsi, r8
mov r12, rdx
mov r15, rcx
mov r14, qword [r8 + 0x10]
mov r9, qword [r8 + 0x18]
cmp r9, 0x10
jb 0x1400a227f
mov r8, qword [r8]
movabs rdx, 0xcbf29ce484222325
xor ecx, ecx
test r14, r14
je 0x1400a22b4
movabs r10, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [rcx + r8]
xor rdx, rax
imul rdx, r10
inc rcx
cmp rcx, r14
jb 0x1400a22a0
mov r8, qword [r15 + 0x30]
and r8, rdx
shl r8, 4
mov qword [rsp + 0x80], r8
mov r13, qword [r15 + 0x18]
add r13, r8
mov rbx, qword [r15 + 8]
cmp rbx, qword [r13]
je 0x1400a2354
mov rbx, qword [r13 + 8]
mov rbx, qword [rbx]
nop
cmp rbx, qword [r13]
je 0x1400a2354
mov rbx, qword [rbx + 8]
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1400a22fc
mov rdx, qword [rdx]
mov rcx, rsi
cmp r9, 0x10
jb 0x1400a2308
mov rcx, qword [rsi]
cmp r14, rax
jne 0x1400a22e0
mov r8, r14
call fcn.1401fc380
test eax, eax
mov r9, qword [rsi + 0x18]
jne 0x1400a22e0
lea rcx, [r15 + 8]
mov rdx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rdx], rax
mov rdx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rdx + 8], rax
dec qword [rcx + 8]
mov rdx, rdi
call fcn.1400b34e0
mov qword [r12], rbx
mov byte [r12 + 8], 0
mov rax, r12
jmp 0x1400a23f1
mov rax, qword [rdi]
cmp rbx, rax
je 0x1400a2389
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rdx, qword [r15 + 0x18]
mov r8, qword [rsp + 0x80]
add rdx, r8
mov rax, qword [rdx]
cmp rax, qword [r15 + 8]
jne 0x1400a23af
mov qword [rdx], rdi
mov rax, qword [r15 + 0x18]
mov qword [rax + r8 + 8], rdi
jmp 0x1400a23db
cmp rax, rbx
jne 0x1400a23b9
mov qword [rdx], rdi
jmp 0x1400a23db
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x1400a23db
mov rdx, qword [r15 + 0x18]
mov rax, qword [rdx + r8 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r8 + 8], rcx
mov rcx, r15
call fcn.1400b1060
nop
mov qword [r12], rdi
mov byte [r12 + 8], 1
mov rax, r12
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
Function at 0x1400a4db0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x38
mov r12, qword [r8 + 0x18]
mov rsi, r8
mov r14, qword [r8 + 0x10]
mov rbp, rcx
mov r10, r8
cmp r12, 0x10
jb 0x1400a4de4
mov r10, qword [r8]
xor r8d, r8d
movabs r9, 0xcbf29ce484222325
test r14, r14
je 0x1400a4e14
movabs rcx, 0x100000001b3
movzx eax, byte [r8 + r10]
inc r8
xor r9, rax
imul r9, rcx
cmp r8, r14
jb 0x1400a4e00
mov rax, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x30]
mov rdi, qword [rbp + 8]
and rcx, r9
shl rcx, 4
mov r13, qword [rcx + rax]
add rax, 8
add rax, rcx
mov rbx, r13
mov qword [rsp + 0x90], rax
nop dword [rax]
cmp r13, rdi
jne 0x1400a4e4a
mov rax, rdi
jmp 0x1400a4e50
mov rax, qword [rax]
mov rax, qword [rax]
cmp rbx, rax
je 0x1400a4ec6
lea rcx, [rbx + 0x10]
mov rdx, rsi
cmp r12, 0x10
jb 0x1400a4e65
mov rdx, qword [rsi]
mov r15, qword [rcx + 0x18]
mov rbp, qword [rcx + 0x10]
cmp r15, 0x10
jb 0x1400a4e76
mov rcx, qword [rcx]
cmp rbp, r14
jne 0x1400a4e87
mov r8, rbp
call fcn.1401fc380
test eax, eax
je 0x1400a4e94
mov rbx, qword [rbx]
mov rax, qword [rsp + 0x90]
jmp 0x1400a4e40
lea rdx, [rbx + 0x10]
cmp r15, 0x10
jb 0x1400a4ea1
mov rdx, qword [rdx]
mov rcx, rsi
cmp r12, 0x10
jb 0x1400a4ead
mov rcx, qword [rsi]
cmp r14, rbp
jne 0x1400a4ebe
mov r8, r14
call fcn.1401fc380
test eax, eax
je 0x1400a4ec1
mov rbx, rdi
mov rax, rbx
jmp 0x1400a4ecc
mov rbx, rdi
mov rax, rdi
cmp rax, rdi
jne 0x1400a4f69
mov rbx, qword [rdi]
lea rax, [rsp + 0x90]
mov rbp, qword [rsp + 0x80]
lea r9, [0x14025be80]
mov qword [rsp + 0x28], rax
mov rdx, rbx
lea rax, [rsp + 0x98]
mov qword [rsp + 0x98], rsi
mov rdi, qword [rbx + 8]
mov r8, rdi
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 8]
call fcn.14009ece0
mov rdx, rax
movabs rcx, 0x3fffffffffffffe
mov rax, qword [rbp + 0x10]
sub rcx, rax
cmp rcx, 1
jb 0x1400a4f8d
inc rax
mov rcx, rbp
mov qword [rbp + 0x10], rax
mov qword [rbx + 8], rdx
mov qword [rdi], rdx
mov r9, qword [rbp + 8]
mov rdx, qword [rsp + 0x88]
mov r9, qword [r9]
lea r8, [r9 + 0x10]
call fcn.1400a1d90
mov rax, qword [rsp + 0x88]
jmp 0x1400a4f7c
mov r15, qword [rsp + 0x88]
mov rax, r15
mov qword [r15], rbx
mov byte [r15 + 8], 0
add rsp, 0x38
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
lea rcx, str.list_T__too_long
call fcn.1401bd45c
int3
Function at 0x1400a8db0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
cmp qword [r8 + 0x28], 0x10
lea r11, [r8 + 0x10]
mov rbx, qword [r11 + 0x10]
mov rsi, rdx
mov rdi, rcx
jb 0x1400a8dd7
mov r11, qword [r11]
xor r9d, r9d
movabs r10, 0xcbf29ce484222325
test rbx, rbx
je 0x1400a8e14
movabs rcx, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9 + r11]
inc r9
xor r10, rax
imul r10, rcx
cmp r9, rbx
jb 0x1400a8e00
mov rdx, qword [rdi + 0x30]
mov rcx, qword [rdi + 0x18]
and rdx, r10
shl rdx, 4
add rcx, rdx
mov rax, qword [rcx]
cmp qword [rcx + 8], r8
jne 0x1400a8e54
cmp rax, r8
jne 0x1400a8e4a
mov rax, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rdi + 0x18]
mov rax, qword [rdi + 8]
mov qword [rdx + rcx + 8], rax
jmp 0x1400a8e5f
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
jmp 0x1400a8e5f
cmp rax, r8
jne 0x1400a8e5f
mov rax, qword [r8]
mov qword [rcx], rax
mov rax, qword [r8 + 8]
lea rcx, [rdi + 8]
mov rbx, qword [r8]
mov qword [rax], rbx
mov rdx, qword [r8]
mov rax, qword [r8 + 8]
mov qword [rdx + 8], rax
mov rdx, r8
dec qword [rcx + 8]
call fcn.1400b3470
mov qword [rsi], rbx
mov rax, rsi
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret

Function at 0x1400a8ea0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
movzx r9d, byte [r8 + 0x10]
mov r10, rcx
movabs rcx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r9, rax
mov rdi, rdx
movzx eax, byte [r8 + 0x11]
mov rdx, qword [r10 + 0x30]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x12]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x13]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x14]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x15]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x16]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x17]
imul r9, rcx
xor r9, rax
imul r9, rcx
mov rcx, qword [r10 + 0x18]
and rdx, r9
shl rdx, 4
add rcx, rdx
mov rax, qword [rcx]
cmp qword [rcx + 8], r8
jne 0x1400a8f64
cmp rax, r8
jne 0x1400a8f5a
mov rax, qword [r10 + 8]
mov qword [rcx], rax
mov rcx, qword [r10 + 0x18]
mov rax, qword [r10 + 8]
mov qword [rdx + rcx + 8], rax
jmp 0x1400a8f6f
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
jmp 0x1400a8f6f
cmp rax, r8
jne 0x1400a8f6f
mov rax, qword [r8]
mov qword [rcx], rax
mov rax, qword [r8 + 8]
mov edx, 0x20
mov rbx, qword [r8]
mov qword [rax], rbx
mov rcx, qword [r8]
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
mov rcx, r8
dec qword [r10 + 0x10]
call fcn.1401de460
mov qword [rdi], rbx
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x1400af7e0
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
mov r15, rdx
lea r14, [rdx - 1]
mov rsi, rcx
xor r12d, r12d
nop word [rax + rax]
mov rdi, r12
mov rbp, r12
test r14, r14
je 0x1400af9f6
mov rdx, qword [rsi + 8]
nop dword [rax]
nop word [rax + rax]
lea ecx, [rdx + 0xff]
shl rdi, cl
add rdi, rdi
nop dword [rax]
mov r10, qword [rsi]
mov ecx, dword [r10]
cmp ecx, 0x270
jne 0x1400af8a4
lea rax, [r10 + 8]
mov r9d, ecx
nop word [rax + rax]
mov r8d, dword [rax - 4]
xor r8d, dword [rax]
lea rax, [rax + 4]
btr r8d, 0x1f
xor r8d, dword [rax - 8]
mov ecx, r8d
and cl, 1
neg cl
sbb edx, edx
shr r8d, 1
and edx, 0x9908b0df
xor edx, dword [rax + 0x62c]
xor edx, r8d
mov dword [rax + 0x9b8], edx
sub r9, 1
jne 0x1400af860
mov ecx, dword [r10]
jmp 0x1400af987
cmp ecx, 0x4e0
jb 0x1400af987
lea r11, [r10 + 0x9c4]
mov ebx, 0xe3
mov eax, dword [r11]
nop
mov edx, eax
lea r8, [r11 + 4]
xor edx, dword [r8]
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
mov eax, dword [r8]
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r11 + 0x634]
xor ecx, edx
mov dword [r11 - 0x9c0], ecx
lea r11, [r8]
sub rbx, 1
jne 0x1400af8c0
lea r11, [r10 + 0xd50]
mov ebx, 0x18c
mov eax, dword [r11]
nop word [rax + rax]
mov edx, eax
lea r8, [r11 + 4]
xor edx, dword [r8]
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
mov eax, dword [r8]
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r11 - 0xd4c]
xor ecx, edx
mov dword [r11 - 0x9c0], ecx
lea r11, [r8]
sub rbx, 1
jne 0x1400af910
mov edx, dword [r10 + 0x1380]
xor edx, dword [r10 + 4]
btr edx, 0x1f
xor edx, dword [r10 + 0x1380]
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r10 + 0x634]
xor ecx, edx
mov dword [r10 + 0x9c0], ecx
mov ecx, r12d
mov dword [r10], r12d
mov eax, ecx
mov edx, dword [r10 + rax*4 + 4]
lea eax, [rcx + 1]
mov dword [r10], eax
mov ecx, edx
mov eax, dword [r10 + 0x1384]
mov r8, qword [rsi + 0x10]
shr ecx, 0xb
and eax, ecx
xor edx, eax
mov eax, edx
and eax, 0xff3a58ad
shl eax, 7
xor edx, eax
mov eax, edx
and edx, 0xffffdf8c
shl edx, 0xf
mov ecx, edx
xor rcx, rax
mov rax, rcx
shr rax, 0x12
xor rax, rcx
cmp rax, r8
ja 0x1400af840
mov rdx, qword [rsi + 8]
or rdi, rax
lea ecx, [rdx + 0xff]
shl rbp, cl
add rbp, rbp
or rbp, r8
cmp rbp, r14
jb 0x1400af830
xor edx, edx
mov rax, rbp
div r15
mov rcx, rax
mov r8, rdx
xor edx, edx
mov rax, rdi
div r15
cmp rax, rcx
jb 0x1400afa1a
cmp r8, r14
jne 0x1400af810
mov rbx, qword [rsp + 0x20]
mov rax, rdi
mov rbp, qword [rsp + 0x28]
xor edx, edx
mov rsi, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
div r15
mov rax, rdx
pop r15
pop r14
pop r12
ret
Function at 0x1400b3550
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
mov rax, qword [rcx + 8]
xor r14d, r14d
mov edi, r14d
mov ebp, r14d
mov rsi, rcx
nop word [rax + rax]
lea ecx, [rax + 0xff]
shl rdi, cl
add rdi, rdi
nop dword [rax]
mov r10, qword [rsi]
mov ecx, dword [r10]
cmp ecx, 0x270
jne 0x1400b35f4
lea rax, [r10 + 8]
mov r9d, ecx
nop word [rax + rax]
mov r8d, dword [rax - 4]
xor r8d, dword [rax]
lea rax, [rax + 4]
btr r8d, 0x1f
xor r8d, dword [rax - 8]
mov ecx, r8d
and cl, 1
neg cl
sbb edx, edx
shr r8d, 1
and edx, 0x9908b0df
xor edx, dword [rax + 0x62c]
xor edx, r8d
mov dword [rax + 0x9b8], edx
sub r9, 1
jne 0x1400b35b0
mov ecx, dword [r10]
jmp 0x1400b36d7
cmp ecx, 0x4e0
jb 0x1400b36d7
lea r11, [r10 + 0x9c4]
mov ebx, 0xe3
mov eax, dword [r11]
nop
mov edx, eax
lea r8, [r11 + 4]
xor edx, dword [r8]
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
mov eax, dword [r8]
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r11 + 0x634]
xor ecx, edx
mov dword [r11 - 0x9c0], ecx
lea r11, [r8]
sub rbx, 1
jne 0x1400b3610
lea r11, [r10 + 0xd50]
mov ebx, 0x18c
mov eax, dword [r11]
nop word [rax + rax]
mov edx, eax
lea r8, [r11 + 4]
xor edx, dword [r8]
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
mov eax, dword [r8]
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r11 - 0xd4c]
xor ecx, edx
mov dword [r11 - 0x9c0], ecx
lea r11, [r8]
sub rbx, 1
jne 0x1400b3660
mov edx, dword [r10 + 0x1380]
xor edx, dword [r10 + 4]
btr edx, 0x1f
xor edx, dword [r10 + 0x1380]
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r10 + 0x634]
xor ecx, edx
mov dword [r10 + 0x9c0], ecx
mov ecx, r14d
mov dword [r10], r14d
mov eax, ecx
mov edx, dword [r10 + rax*4 + 4]
lea eax, [rcx + 1]
mov ecx, edx
mov dword [r10], eax
mov eax, dword [r10 + 0x1384]
shr ecx, 0xb
and eax, ecx
xor edx, eax
mov eax, edx
and eax, 0xff3a58ad
shl eax, 7
xor edx, eax
mov eax, edx
and edx, 0xffffdf8c
shl edx, 0xf
mov ecx, edx
xor rcx, rax
mov rdx, rcx
shr rdx, 0x12
xor rdx, rcx
cmp rdx, qword [rsi + 0x10]
ja 0x1400b3590
mov rax, qword [rsi + 8]
or rdi, rdx
add rbp, rax
cmp rbp, 0x40
jb 0x1400b3580
mov rbx, qword [rsp + 0x10]
mov rax, rdi
mov rdi, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x20]
pop r14
ret
Function at 0x1400bb800
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r11, qword [r8 + 0x18]
mov r14, r8
mov rbp, qword [r8 + 0x10]
mov r12, rdx
mov rdi, rcx
mov r10, r8
cmp r11, 0x10
jb 0x1400bb834
mov r10, qword [r8]
xor r8d, r8d
movabs r9, 0xcbf29ce484222325
test rbp, rbp
je 0x1400bb864
movabs rcx, 0x100000001b3
movzx eax, byte [r8 + r10]
inc r8
xor r9, rax
imul r9, rcx
cmp r8, rbp
jb 0x1400bb850
mov rax, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x30]
mov rdi, qword [rdi + 8]
and rcx, r9
add rcx, rcx
mov qword [rsp + 0x50], rsi
mov r15, qword [rax + rcx*8]
lea r13, [rax + rcx*8]
mov rbx, r15
cmp r15, rdi
jne 0x1400bb890
mov rax, rdi
jmp 0x1400bb897
mov rax, qword [r13 + 8]
mov rax, qword [rax]
cmp rbx, rax
je 0x1400bb933
lea rcx, [rbx + 0x10]
mov rdx, r14
cmp r11, 0x10
jb 0x1400bb8b0
mov rdx, qword [r14]
cmp qword [rcx + 0x18], 0x10
mov r8, qword [rcx + 0x10]
jb 0x1400bb8be
mov rcx, qword [rcx]
cmp r8, rbp
jne 0x1400bb8d0
call fcn.1401fc380
test eax, eax
je 0x1400bb8d5
mov r11, qword [r14 + 0x18]
mov rbx, qword [rbx]
jmp 0x1400bb886
mov rsi, rbx
cmp r15, rdi
jne 0x1400bb8e2
mov rax, rdi
jmp 0x1400bb8e9
mov rax, qword [r13 + 8]
mov rax, qword [rax]
cmp rbx, rax
je 0x1400bb923
cmp qword [rbx + 0x28], 0x10
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
jb 0x1400bb900
mov rdx, qword [rdx]
cmp qword [r14 + 0x18], 0x10
mov rcx, r14
jb 0x1400bb90d
mov rcx, qword [r14]
cmp rbp, rax
jne 0x1400bb923
mov r8, rbp
call fcn.1401fc380
test eax, eax
jne 0x1400bb923
mov rbx, qword [rbx]
jmp 0x1400bb8d8
cmp rsi, rbx
je 0x1400bb933
mov qword [r12], rsi
mov qword [r12 + 8], rbx
jmp 0x1400bb93c
mov qword [r12], rdi
mov qword [r12 + 8], rdi
mov rsi, qword [rsp + 0x50]
mov rax, r12
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1400bb960
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
cmp qword [r8 + 0x28], 0x10
lea r11, [r8 + 0x10]
mov rbx, qword [r11 + 0x10]
mov rsi, rdx
mov rdi, rcx
jb 0x1400bb987
mov r11, qword [r11]
xor r9d, r9d
movabs r10, 0xcbf29ce484222325
test rbx, rbx
je 0x1400bb9c4
movabs rcx, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9 + r11]
inc r9
xor r10, rax
imul r10, rcx
cmp r9, rbx
jb 0x1400bb9b0
mov rdx, qword [rdi + 0x30]
mov rcx, qword [rdi + 0x18]
and rdx, r10
shl rdx, 4
add rcx, rdx
mov rax, qword [rcx]
cmp qword [rcx + 8], r8
jne 0x1400bba04
cmp rax, r8
jne 0x1400bb9fa
mov rax, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rdi + 0x18]
mov rax, qword [rdi + 8]
mov qword [rdx + rcx + 8], rax
jmp 0x1400bba0f
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
jmp 0x1400bba0f
cmp rax, r8
jne 0x1400bba0f
mov rax, qword [r8]
mov qword [rcx], rax
mov rax, qword [r8 + 8]
lea rcx, [rdi + 8]
mov rbx, qword [r8]
mov qword [rax], rbx
mov rdx, qword [r8]
mov rax, qword [r8 + 8]
mov qword [rdx + 8], rax
mov rdx, r8
dec qword [rcx + 8]
call fcn.1400b34e0
mov qword [rsi], rbx
mov rax, rsi
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret

Function at 0x1400bd240
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
movzx r9d, byte [r8]
mov r10, rcx
movabs rcx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r9, rax
mov rbx, rdx
movzx eax, byte [r8 + 1]
mov r11, r8
mov rdx, qword [r10 + 0x30]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 2]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 3]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 4]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 5]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 6]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 7]
mov r8, qword [r10 + 8]
imul r9, rcx
xor r9, rax
mov rax, qword [r10 + 0x18]
imul r9, rcx
and rdx, r9
add rdx, rdx
mov r9, qword [rax + rdx*8]
lea r10, [rax + rdx*8]
mov rcx, r9
nop
cmp r9, r8
jne 0x1400bd2ea
mov rax, r8
jmp 0x1400bd2f1
mov rax, qword [r10 + 8]
mov rax, qword [rax]
cmp rcx, rax
je 0x1400bd310
mov rax, qword [r11]
cmp qword [rcx + 0x10], rax
je 0x1400bd304
mov rcx, qword [rcx]
jmp 0x1400bd2e0
mov qword [rbx], rcx
mov rax, rbx
mov rbx, qword [rsp + 8]
ret
mov qword [rbx], r8
mov rax, rbx
mov rbx, qword [rsp + 8]
ret
Function at 0x1400c1040
Capabilities:
Hash data using fnv

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rdx
push rsi
push rdi
push r14
sub rsp, 0x1d0
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rbp
mov rbx, rdx
mov rdi, rcx
add rcx, 0xffffffffffffffe8
call fcn.1400cb790
lea rcx, [rdi - 0x18]
call fcn.1400cb830
lea rsi, [rdi + 0x200]
lea rax, [rsi + 0x60]
mov ecx, 0x78
test rsi, rsi
cmove rax, rcx
cmp qword [rax], rbx
jbe 0x1400c1248
movzx ecx, bl
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movabs rdx, 0x100000001b3
imul rcx, rdx
movzx eax, byte [rsp + 0x1f9]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [rsp + 0x1fa]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [rsp + 0x1fb]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [rsp + 0x1fc]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [rsp + 0x1fd]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [rsp + 0x1fe]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [rsp + 0x1ff]
xor rcx, rax
imul rcx, rdx
mov rdx, qword [rdi + 0x2b0]
and rdx, rcx
add rdx, rdx
mov rcx, qword [rdi + 0x298]
mov r9, qword [rcx + rdx*8]
mov rax, r9
mov r8, qword [rdi + 0x288]
lea r10, [rcx + rdx*8]
cmp r9, r8
jne 0x1400c1152
mov rcx, r8
jmp 0x1400c1159
mov rcx, qword [r10 + 8]
mov rcx, qword [rcx]
cmp rax, rcx
je 0x1400c1169
cmp qword [rax + 0x10], rbx
je 0x1400c116c
mov rax, qword [rax]
jmp 0x1400c1148
mov rax, r8
cmp rax, r8
je 0x1400c117a
movzx eax, byte [rax + 0x18]
jmp 0x1400c1223
mov rax, qword [rdi + 0x258]
mov r8, qword [rax + rbx*8]
lea rdx, [r8 - 0xa8]
xor eax, eax
test r8, r8
cmove rdx, rax
lea rcx, [rdi - 0x18]
call fcn.1400c0be0
mov byte [rsp + 0x1f0], al
lea rsi, [rdi + 0x280]
mov rax, qword [rsi + 8]
mov rdi, qword [rax]
mov r14, qword [rdi + 8]
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1f8]
mov r8, r14
mov rdx, rdi
lea rcx, [rsi + 8]
call fcn.14009ebf0
mov rdx, rax
mov rax, qword [rsi + 0x10]
movabs rcx, 0x7fffffffffffffe
sub rcx, rax
cmp rcx, 1
jb 0x1400c123b
inc rax
mov qword [rsi + 0x10], rax
mov qword [rdi + 8], rdx
mov qword [r14], rdx
mov r9, qword [rsi + 8]
mov r9, qword [r9]
lea r8, [r9 + 0x10]
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.1400a1ff0
movzx eax, byte [rsp + 0x1f0]
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
lea rcx, str.list_T__too_long
call fcn.1401bd45c
int3
lea rcx, [rdi + 0x20]
lea r9, [0x140349370]
mov r8d, 1
lea rdx, [rsp + 0x88]
call fcn.1401663b0
nop
lea rdx, str.Failed_to_check_transaction:_invalid_index
mov rcx, rax
call fcn.14009e4b0
mov rcx, rax
lea rdx, [rsp + 0x1f8]
call fcn.14009e770
mov rcx, rax
lea rdx, str.._Number_of_transactions:
call fcn.14009e4b0
mov rbx, rax
mov rcx, rsi
call fcn.1400cac10
mov qword [rsp + 0x1f8], rax
lea rdx, [rsp + 0x1f8]
mov rcx, rbx
call fcn.14009e770
nop
lea rcx, [rsp + 0x88]
call fcn.1400afa40
mov edx, reloc.WS2_32.dll_send
lea rcx, [rsp + 0x50]
call fcn.1400c39b0
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.140043550
lea rdx, [0x14033f7e0]
lea rcx, [rsp + 0x60]
call fcn.1401fbcb4
int3
Function at 0x1400f7d80
Capabilities:
Resolve dns

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdx
push rdi
sub rsp, 0x4d0
mov rcx, qword [rcx + 8]
lea r8, [rax + 0x10]
mov rbx, rdx
mov dword [rax + 0x10], 0x80
lea rdx, [rsp + 0x40]
call qword [sym.imp.WS2_32.dll_getpeername]
xor edi, edi
test eax, eax
jne 0x1400f7e2b
mov edx, dword [rsp + 0x4e8]
lea r8, [rsp + 0xc0]
mov dword [rsp + 0x30], 2
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x28], edi
mov r9d, 0x401
mov qword [rsp + 0x20], rdi
call qword [sym.imp.WS2_32.dll_getnameinfo]
test eax, eax
jne 0x1400f7e2b
mov qword [rbx + 0x10], rdi
lea rax, [rsp + 0xc0]
mov qword [rbx + 0x18], setsockopt
mov r8, 0xffffffffffffffff
mov byte [rbx], dil
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x1400f7e10
lea rdx, [rsp + 0xc0]
mov rcx, rbx
call fcn.140024bb0
jmp 0x1400f7e3a
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], setsockopt
mov byte [rbx], dil
mov rax, rbx
mov rbx, qword [rsp + 0x4e0]
add rsp, 0x4d0
pop rdi
ret

Function at 0x1400f9d30
Capabilities:
Get socket status
Receive data
Receive data on socket

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
push rdi
sub rsp, 0x240
mov rax, qword [rcx + 8]
mov rbx, rcx
mov qword [rsp + 0x38], rax
mov rdi, r8
mov rsi, rdx
mov dword [rsp + 0x30], 1
xor r9d, r9d
mov qword [r11 + 8], 0x1e
lea ecx, [rax + 1]
xor r8d, r8d
lea rax, [r11 + 8]
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call qword [sym.imp.WS2_32.dll_select]
test eax, eax
jne 0x1400f9d8d
mov eax, 0xffffffff
jmp 0x1400f9da2
js 0x1400f9da2
mov rcx, qword [rbx + 8]
xor r9d, r9d
mov r8d, edi
mov rdx, rsi
call qword [sym.imp.WS2_32.dll_recv]
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret