joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14002b23b
Capabilities:
Delete file

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x60
mov rax, qword [0x1401ea088]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov rsi, qword [rcx + 8]
test rsi, rsi
je 0x14002b2e1
mov rbx, qword [rcx]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r14, qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ecx, 0xfde9
xor edx, edx
mov r8, rbx
mov r9d, esi
call r14
mov ebp, eax
movsxd r8, eax
xorps xmm0, xmm0
lea rdi, [rsp + 0x30]
movaps xmmword [rdi], xmm0
movaps xmmword [rdi + 0x10], xmm0
mov rcx, rdi
xor edx, edx
call fcn.140008ac6
cmp qword [rdi + 0x18], 8
mov rax, rdi
jb 0x14002b2b9
mov rax, qword [rsp + 0x30]
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], rax
mov ecx, 0xfde9
xor edx, edx
mov r8, rbx
mov r9d, esi
call r14
cmp qword [rsp + 0x48], 8
jb 0x14002b2fc
mov rdi, qword [rsp + 0x30]
jmp 0x14002b2fc
xorps xmm0, xmm0
lea rdi, [rsp + 0x30]
movaps xmmword [rdi], xmm0
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], 7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, eax
mov rax, qword [rsp + 0x48]
cmp rax, 8
jb 0x14002b324
mov rcx, qword [rsp + 0x30]
lea rdx, [rax*2 + 2]
call fcn.140002b34
test esi, esi
setne bl
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.14015c2e0
mov eax, ebx
add rsp, 0x60
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret

Function at 0x14002c640
Capabilities:
Check if file exists
Create udp socket

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov edi, r8d
mov ebx, edx
mov rsi, rcx
mov rax, qword [rcx]
mov rax, qword [rax + 0x58]
call qword [case.0x140031f00.0]
mov ecx, ebx
mov edx, edi
xor r8d, r8d
call qword [sym.imp.WS2_32.dll_socket]
mov qword [rsi + 0x158], rax
cmp edi, 2
sete byte [rsi + 0x160]
mov dword [rsi + 0x164], ebx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsi]
mov r8, qword [rcx + 0x68]
mov rcx, rsi
mov edx, eax
mov rax, r8
call qword [case.0x140031f00.0]
cmp byte [rsi + 0x160], 0
je 0x14002c6b9
mov rax, qword [rsi]
mov rax, qword [rax + 0xb0]
mov rcx, rsi
mov dl, 3
call qword [case.0x140031f00.0]
cmp qword [rsi + 0x158], 0xffffffffffffffff
setne al
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
Function at 0x14002cdb6
Capabilities:
Connect socket

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xb0
mov rdi, rdx
mov rsi, rcx
mov rax, qword [0x1401ea088]
xor rax, rsp
mov qword [rsp + 0xa8], rax
cmp qword [rcx + 0x158], 0xffffffffffffffff
jne 0x14002ce0b
mov edx, dword [rdi + 0x28]
mov rax, qword [rsi]
mov rax, qword [rax + 0x90]
mov rcx, rsi
mov r8d, 1
call qword [case.0x140031f00.0]
mov ebx, 0xffffffff
test al, al
je 0x14002cec7
movaps xmm0, xmmword [section..rdata]
lea rbx, [rsp + 0x20]
movaps xmmword [rbx + 0x70], xmm0
movaps xmmword [rbx + 0x60], xmm0
movaps xmmword [rbx + 0x50], xmm0
movaps xmmword [rbx + 0x40], xmm0
movaps xmmword [rbx + 0x30], xmm0
movaps xmmword [rbx + 0x20], xmm0
movaps xmmword [rbx + 0x10], xmm0
movaps xmmword [rbx], xmm0
mov rcx, rdi
mov rdx, rbx
call fcn.14005e036
mov rcx, qword [rsi + 0x158]
mov rdx, rbx
mov r8d, eax
call qword [sym.imp.WS2_32.dll_connect]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsi]
mov r8, qword [rcx + 0x68]
mov rcx, rsi
mov edx, eax
mov rax, r8
call qword [case.0x140031f00.0]
test edi, edi
je 0x14002cea5
mov rax, qword [rsi]
mov rax, qword [rax + 0x60]
mov rcx, rsi
call qword [case.0x140031f00.0]
mov dl, 7
mov ecx, 1
lea r8d, [rax - 0x2733]
cmp r8d, 2
jb 0x14002ceac
mov ebx, 0xffffffff
cmp eax, 0xb
je 0x14002ceac
jmp 0x14002cec7
mov dl, 3
mov ecx, 2
mov dword [rsi + 0x194], ecx
mov rax, qword [rsi]
mov rax, qword [rax + 0xb8]
mov rcx, rsi
call qword [case.0x140031f00.0]
xor ebx, ebx
mov rcx, qword [rsp + 0xa8]
xor rcx, rsp
call fcn.14015c2e0
mov eax, ebx
add rsp, 0xb0
pop rbx
pop rdi
pop rsi
ret

Function at 0x14002d516
Capabilities:
Receive data
Receive data on socket

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0xc8
mov r14, qword [rsp + 0x110]
mov rax, qword [0x1401ea088]
xor rax, rsp
mov qword [rsp + 0xc0], rax
movaps xmm0, xmmword [section..rdata]
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x3c], 0x80
mov rcx, qword [rcx + 0x158]
test r9, r9
je 0x14002d5ba
mov rsi, r9
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x28], rax
lea rbx, [rsp + 0x40]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_recvfrom]
mov edi, eax
mov rcx, rbx
mov rdx, rsi
call fcn.14005e04e
jmp 0x14002d5c5
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_recv]
mov edi, eax
test r14, r14
je 0x14002d5d1
mov qword [r14], 0xffffffffffffffff
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.14015c2e0
mov eax, edi
add rsp, 0xc8
pop rbx
pop rdi
pop rsi
pop r14
ret
Function at 0x14002dae0
Capabilities:
Set socket configuration

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x30
mov rsi, rcx
mov rax, qword [0x1401ea088]
xor rax, rsp
mov qword [rsp + 0x28], rax
call fcn.14002c640
mov ebx, eax
test al, al
je 0x14002db54
lea rdi, [rsi - 8]
lea r8, [rsp + 0x24]
mov dword [r8], 1
mov rcx, qword [rsi + 0x158]
mov edx, 0x8004667e
call qword [sym.imp.WS2_32.dll_ioctlsocket]
mov rcx, qword [rsi + 0x150]
mov rdx, rdi
call fcn.14002d9ba
mov eax, dword [0x1401ed288]
inc eax
mov ecx, eax
mov eax, 1
test ecx, ecx
je 0x14002db3d
mov dword [0x1401ed288], ecx
mov dword [rsi + 0x1a8], ecx
mov rcx, qword [rsp + 0x28]
xor rcx, rsp
call fcn.14015c2e0
mov eax, ebx
add rsp, 0x30
pop rbx
pop rdi
pop rsi
ret

Function at 0x14002e430
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rsi
push rdi
sub rsp, 0x38
mov r8, rdx
mov rax, qword [0x1401ea088]
xor rax, rsp
mov qword [rsp + 0x30], rax
movabs r9, 0xcbf29ce484222325
xor eax, eax
movabs rdx, 0x100000001b3
movzx r10d, byte [r8 + rax]
xor r9, r10
imul r9, rdx
inc rax
cmp rax, 8
jne 0x14002e45e
lea rsi, [rsp + 0x20]
mov rdx, rsi
call fcn.14002ff6a
xor edi, edi
cmp qword [rsi + 8], 0
setne dil
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.14015c2e0
mov rax, rdi
add rsp, 0x38
pop rdi
pop rsi
ret

Function at 0x14002e4a2
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x48
mov r15, r9
mov r12, r8
mov rsi, rdx
mov rdi, rcx
mov rax, qword [0x1401ea088]
xor rax, rsp
mov qword [rsp + 0x40], rax
movabs rbx, 0xcbf29ce484222325
xor eax, eax
movabs rcx, 0x100000001b3
movzx edx, byte [r12 + rax]
xor rbx, rdx
imul rbx, rcx
inc rax
cmp rax, 8
jne 0x14002e4e0
movaps xmm0, xmmword [section..rdata]
lea r14, [rsp + 0x30]
movaps xmmword [r14], xmm0
mov rcx, rdi
mov rdx, r14
mov r8, r12
mov r9, rbx
call fcn.14002ff6a
mov rax, qword [r14 + 8]
test rax, rax
je 0x14002e526
xor ecx, ecx
jmp 0x14002e5f3
movabs rax, 0x7ffffffffffffff
cmp qword [rdi + 0x10], rax
je 0x14002e617
mov ecx, 0x20
call fcn.14015c21c
mov r14, rax
mov rax, qword [r12]
mov qword [r14 + 0x10], rax
mov rax, qword [r15]
mov qword [r14 + 0x18], rax
mov rcx, qword [rdi + 0x10]
mov rax, qword [rdi + 0x38]
inc rcx
js 0x14002e56d
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
jmp 0x14002e585
mov rdx, rcx
shr rdx, 1
and ecx, 1
or rcx, rdx
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
test rax, rax
js 0x14002e591
cvtsi2ss xmm1, rax
jmp 0x14002e5a6
mov rcx, rax
shr rcx, 1
and eax, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
ucomiss xmm0, dword [rdi]
jbe 0x14002e5de
mov r15, r14
add r15, 0x10
mov rcx, rdi
call fcn.14002ffc0
lea r12, [rsp + 0x20]
mov rcx, rdi
mov rdx, r12
mov r8, r15
mov r9, rbx
call fcn.14002ff6a
movups xmm0, xmmword [r12]
movaps xmmword [rsp + 0x30], xmm0
mov r8, qword [rsp + 0x30]
mov rcx, rdi
mov rdx, rbx
mov r9, r14
call fcn.14003005a
mov cl, 1
mov qword [rsi], rax
mov byte [rsi + 8], cl
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.14015c2e0
mov rax, rsi
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
lea rcx, str.unordered_map_set_too_long
call fcn.14015cc38
int3
Function at 0x14002e624
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x48
mov r15, r9
mov r12, r8
mov rsi, rdx
mov rdi, rcx
mov rax, qword [0x1401ea088]
xor rax, rsp
mov qword [rsp + 0x40], rax
movabs rbx, 0xcbf29ce484222325
xor eax, eax
movabs rcx, 0x100000001b3
movzx edx, byte [r12 + rax]
xor rbx, rdx
imul rbx, rcx
inc rax
cmp rax, 8
jne 0x14002e662
movaps xmm0, xmmword [section..rdata]
lea r14, [rsp + 0x30]
movaps xmmword [r14], xmm0
mov rcx, rdi
mov rdx, r14
mov r8, r12
mov r9, rbx
call fcn.14002ff6a
mov rax, qword [r14 + 8]
test rax, rax
je 0x14002e6a8
xor ecx, ecx
jmp 0x14002e775
movabs rax, 0x7ffffffffffffff
cmp qword [rdi + 0x10], rax
je 0x14002e799
mov ecx, 0x20
call fcn.14015c21c
mov r14, rax
mov rax, qword [r12]
mov qword [r14 + 0x10], rax
mov rax, qword [r15]
mov qword [r14 + 0x18], rax
mov rcx, qword [rdi + 0x10]
mov rax, qword [rdi + 0x38]
inc rcx
js 0x14002e6ef
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
jmp 0x14002e707
mov rdx, rcx
shr rdx, 1
and ecx, 1
or rcx, rdx
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
test rax, rax
js 0x14002e713
cvtsi2ss xmm1, rax
jmp 0x14002e728
mov rcx, rax
shr rcx, 1
and eax, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
ucomiss xmm0, dword [rdi]
jbe 0x14002e760
mov r15, r14
add r15, 0x10
mov rcx, rdi
call fcn.14003023a
lea r12, [rsp + 0x20]
mov rcx, rdi
mov rdx, r12
mov r8, r15
mov r9, rbx
call fcn.14002ff6a
movups xmm0, xmmword [r12]
movaps xmmword [rsp + 0x30], xmm0
mov r8, qword [rsp + 0x30]
mov rcx, rdi
mov rdx, rbx
mov r9, r14
call fcn.14003005a
mov cl, 1
mov qword [rsi], rax
mov byte [rsi + 8], cl
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.14015c2e0
mov rax, rsi
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
lea rcx, str.unordered_map_set_too_long
call fcn.14015cc38
int3

Function at 0x14002e7a6
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rsi
sub rsp, 0x40
mov r8, rdx
mov rax, qword [0x1401ea088]
xor rax, rsp
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [section..rdata]
movaps xmmword [rsp + 0x20], xmm0
movabs r9, 0xcbf29ce484222325
xor eax, eax
movabs rdx, 0x100000001b3
movzx r10d, byte [r8 + rax]
xor r9, r10
imul r9, rdx
inc rax
cmp rax, 8
jne 0x14002e7df
lea rsi, [rsp + 0x20]
mov rdx, rsi
call fcn.14002ff6a
mov rsi, qword [rsi + 8]
test rsi, rsi
je 0x14002e824
add rsi, 0x18
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14015c2e0
mov rax, rsi
add rsp, 0x40
pop rsi
ret
lea rcx, str.invalid_unordered_map_K__T__key
call fcn.14015cc5c
int3
Function at 0x14002ffc0
Capabilities:
Hash data using fnv

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
mov rax, qword [rcx + 0x10]
mov rdi, qword [rcx + 0x38]
inc rax
js 0x14002ffdd
cvtsi2ss xmm0, rax
jmp 0x14002fff2
mov rcx, rax
shr rcx, 1
and eax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [rsi]
call fcn.14017af28
cvttss2si rax, xmm0
mov rcx, rax
subss xmm0, dword [0x1401995d4]
cvttss2si rdx, xmm0
sar rcx, 0x3f
and rdx, rcx
or rdx, rax
cmp rdx, 9
mov eax, 8
cmovae rax, rdx
cmp rdi, rax
jae 0x140030049
lea rcx, [rdi*8]
cmp rcx, rax
cmovb rcx, rax
cmp rdi, 0x200
cmovae rcx, rax
mov rdi, rcx
mov rcx, rsi
mov rdx, rdi
add rsp, 0x28
pop rdi
pop rsi
jmp 0x1400300ac
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x20
movabs rax, 0x800000000000001
cmp rdx, rax
jae 0x14003022c
mov rsi, rcx
dec rdx
or rdx, 1
bsr rcx, rdx
xor ecx, 0x3f
neg cl
mov ebx, 1
shl rbx, cl
lea rax, [rsi + 0x18]
mov rdi, qword [rsi + 8]
mov edx, 2
shl rdx, cl
mov rcx, rax
mov r8, rdi
call fcn.14002fed4
lea rax, [rbx - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rbx
mov rax, qword [rsi + 8]
mov rax, qword [rax]
cmp rax, rdi
je 0x140030220
movabs rcx, 0xcbf29ce484222325
movabs rdx, 0x100000001b3
mov r8, rax
mov rax, qword [rax]
mov r9d, reloc.WS2_32.dll_recv
mov r11, rcx
movzx r10d, byte [r8 + r9]
xor r11, r10
imul r11, rdx
inc r9
cmp r9, 0x18
jne 0x14003013f
and r11, qword [rsi + 0x30]
mov r9, qword [rsi + 0x18]
lea r10, [r11 + r11]
mov r14, r11
shl r14, 4
lea rbx, [r11*2 + 1]
mov r11, qword [r9 + r14]
cmp r11, rdi
je 0x1400301e6
mov r14, qword [r9 + rbx*8]
mov r15, qword [r8 + 0x10]
cmp r15, qword [r14 + 0x10]
jne 0x1400301b1
mov r10, qword [r14]
cmp r10, r8
je 0x1400301ea
mov r11, qword [r8 + 8]
mov qword [r11], rax
mov r14, qword [rax + 8]
mov qword [r14], r10
mov r15, qword [r10 + 8]
mov qword [r15], r8
mov qword [r10 + 8], r14
mov qword [rax + 8], r11
mov qword [r8 + 8], r15
jmp 0x1400301ea
cmp r11, r14
je 0x1400301f9
mov r14, qword [r14 + 8]
cmp r15, qword [r14 + 0x10]
jne 0x1400301b1
mov r9, qword [r14]
mov r10, qword [r8 + 8]
mov qword [r10], rax
mov r11, qword [rax + 8]
mov qword [r11], r9
mov rbx, qword [r9 + 8]
mov qword [rbx], r8
mov qword [r9 + 8], r11
mov qword [rax + 8], r10
mov qword [r8 + 8], rbx
jmp 0x1400301ee
mov qword [r9 + r10*8], r8
mov qword [r9 + rbx*8], r8
cmp rax, rdi
jne 0x140030130
jmp 0x140030220
mov rbx, qword [r8 + 8]
mov qword [rbx], rax
mov r14, qword [rax + 8]
mov qword [r14], r11
mov r15, qword [r11 + 8]
mov qword [r15], r8
mov qword [r11 + 8], r14
mov qword [rax + 8], rbx
mov qword [r8 + 8], r15
mov qword [r9 + r10*8], r8
jmp 0x1400301ee
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
lea rcx, str.invalid_hash_bucket_count
call fcn.14015cc38
int3
Function at 0x1400300ac
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
mov rax, qword [rcx + 0x10]
mov rdi, qword [rcx + 0x38]
inc rax
js 0x14002ffdd
cvtsi2ss xmm0, rax
jmp 0x14002fff2
mov rcx, rax
shr rcx, 1
and eax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [rsi]
call fcn.14017af28
cvttss2si rax, xmm0
mov rcx, rax
subss xmm0, dword [0x1401995d4]
cvttss2si rdx, xmm0
sar rcx, 0x3f
and rdx, rcx
or rdx, rax
cmp rdx, 9
mov eax, 8
cmovae rax, rdx
cmp rdi, rax
jae 0x140030049
lea rcx, [rdi*8]
cmp rcx, rax
cmovb rcx, rax
cmp rdi, 0x200
cmovae rcx, rax
mov rdi, rcx
mov rcx, rsi
mov rdx, rdi
add rsp, 0x28
pop rdi
pop rsi
jmp 0x1400300ac
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x20
movabs rax, 0x800000000000001
cmp rdx, rax
jae 0x14003022c
mov rsi, rcx
dec rdx
or rdx, 1
bsr rcx, rdx
xor ecx, 0x3f
neg cl
mov ebx, 1
shl rbx, cl
lea rax, [rsi + 0x18]
mov rdi, qword [rsi + 8]
mov edx, 2
shl rdx, cl
mov rcx, rax
mov r8, rdi
call fcn.14002fed4
lea rax, [rbx - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rbx
mov rax, qword [rsi + 8]
mov rax, qword [rax]
cmp rax, rdi
je 0x140030220
movabs rcx, 0xcbf29ce484222325
movabs rdx, 0x100000001b3
mov r8, rax
mov rax, qword [rax]
mov r9d, reloc.WS2_32.dll_recv
mov r11, rcx
movzx r10d, byte [r8 + r9]
xor r11, r10
imul r11, rdx
inc r9
cmp r9, 0x18
jne 0x14003013f
and r11, qword [rsi + 0x30]
mov r9, qword [rsi + 0x18]
lea r10, [r11 + r11]
mov r14, r11
shl r14, 4
lea rbx, [r11*2 + 1]
mov r11, qword [r9 + r14]
cmp r11, rdi
je 0x1400301e6
mov r14, qword [r9 + rbx*8]
mov r15, qword [r8 + 0x10]
cmp r15, qword [r14 + 0x10]
jne 0x1400301b1
mov r10, qword [r14]
cmp r10, r8
je 0x1400301ea
mov r11, qword [r8 + 8]
mov qword [r11], rax
mov r14, qword [rax + 8]
mov qword [r14], r10
mov r15, qword [r10 + 8]
mov qword [r15], r8
mov qword [r10 + 8], r14
mov qword [rax + 8], r11
mov qword [r8 + 8], r15
jmp 0x1400301ea
cmp r11, r14
je 0x1400301f9
mov r14, qword [r14 + 8]
cmp r15, qword [r14 + 0x10]
jne 0x1400301b1
mov r9, qword [r14]
mov r10, qword [r8 + 8]
mov qword [r10], rax
mov r11, qword [rax + 8]
mov qword [r11], r9
mov rbx, qword [r9 + 8]
mov qword [rbx], r8
mov qword [r9 + 8], r11
mov qword [rax + 8], r10
mov qword [r8 + 8], rbx
jmp 0x1400301ee
mov qword [r9 + r10*8], r8
mov qword [r9 + rbx*8], r8
cmp rax, rdi
jne 0x140030130
jmp 0x140030220
mov rbx, qword [r8 + 8]
mov qword [rbx], rax
mov r14, qword [rax + 8]
mov qword [r14], r11
mov r15, qword [r11 + 8]
mov qword [r15], r8
mov qword [r11 + 8], r14
mov qword [rax + 8], rbx
mov qword [r8 + 8], r15
mov qword [r9 + r10*8], r8
jmp 0x1400301ee
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
lea rcx, str.invalid_hash_bucket_count
call fcn.14015cc38
int3
Function at 0x14003023a
Capabilities:
Hash data using fnv

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
mov rax, qword [rcx + 0x10]
mov rdi, qword [rcx + 0x38]
inc rax
js 0x140030257
cvtsi2ss xmm0, rax
jmp 0x14003026c
mov rcx, rax
shr rcx, 1
and eax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [rsi]
call fcn.14017af28
cvttss2si rax, xmm0
mov rcx, rax
subss xmm0, dword [0x1401995d4]
cvttss2si rdx, xmm0
sar rcx, 0x3f
and rdx, rcx
or rdx, rax
cmp rdx, 9
mov eax, 8
cmovae rax, rdx
cmp rdi, rax
jae 0x1400302c3
lea rcx, [rdi*8]
cmp rcx, rax
cmovb rcx, rax
cmp rdi, 0x200
cmovae rcx, rax
mov rdi, rcx
mov rcx, rsi
mov rdx, rdi
add rsp, 0x28
pop rdi
pop rsi
jmp 0x1400302d4
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x20
movabs rax, 0x800000000000001
cmp rdx, rax
jae 0x140030452
mov rsi, rcx
dec rdx
or rdx, 1
bsr rcx, rdx
xor ecx, 0x3f
neg cl
mov ebx, 1
shl rbx, cl
lea rax, [rsi + 0x18]
mov rdi, qword [rsi + 8]
mov edx, 2
shl rdx, cl
mov rcx, rax
mov r8, rdi
call fcn.14002fed4
lea rax, [rbx - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rbx
mov rax, qword [rsi + 8]
mov rax, qword [rax]
cmp rax, rdi
je 0x140030446
movabs rcx, 0xcbf29ce484222325
movabs rdx, 0x100000001b3
mov r8, rax
mov rax, qword [rax]
mov r9d, reloc.WS2_32.dll_recv
mov r11, rcx
movzx r10d, byte [r8 + r9]
xor r11, r10
imul r11, rdx
inc r9
cmp r9, 0x18
jne 0x140030367
and r11, qword [rsi + 0x30]
mov r9, qword [rsi + 0x18]
lea r10, [r11 + r11]
mov r14, r11
shl r14, 4
lea rbx, [r11*2 + 1]
mov r11, qword [r9 + r14]
cmp r11, rdi
je 0x1400303e3
mov r14, qword [r9 + rbx*8]
mov r15, qword [r8 + 0x10]
cmp r15, qword [r14 + 0x10]
je 0x1400303e9
cmp r11, r14
je 0x140030418
mov r14, qword [r14 + 8]
cmp r15, qword [r14 + 0x10]
jne 0x1400303ae
mov r9, qword [r14]
mov r10, qword [r8 + 8]
mov qword [r10], rax
mov r11, qword [rax + 8]
mov qword [r11], r9
mov rbx, qword [r9 + 8]
mov qword [rbx], r8
mov qword [r9 + 8], r11
mov qword [rax + 8], r10
mov qword [r8 + 8], rbx
jmp 0x14003043d
mov qword [r9 + r10*8], r8
jmp 0x140030412
mov r10, qword [r14]
cmp r10, r8
je 0x140030412
mov r11, qword [r8 + 8]
mov qword [r11], rax
mov r14, qword [rax + 8]
mov qword [r14], r10
mov r15, qword [r10 + 8]
mov qword [r15], r8
mov qword [r10 + 8], r14
mov qword [rax + 8], r11
mov qword [r8 + 8], r15
mov qword [r9 + rbx*8], r8
jmp 0x14003043d
mov rbx, qword [r8 + 8]
mov qword [rbx], rax
mov r14, qword [rax + 8]
mov qword [r14], r11
mov r15, qword [r11 + 8]
mov qword [r15], r8
mov qword [r11 + 8], r14
mov qword [rax + 8], rbx
mov qword [r8 + 8], r15
mov qword [r9 + r10*8], r8
cmp rax, rdi
jne 0x140030358
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
lea rcx, str.invalid_hash_bucket_count
call fcn.14015cc38
int3
Function at 0x1400302d4
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
mov rax, qword [rcx + 0x10]
mov rdi, qword [rcx + 0x38]
inc rax
js 0x140030257
cvtsi2ss xmm0, rax
jmp 0x14003026c
mov rcx, rax
shr rcx, 1
and eax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [rsi]
call fcn.14017af28
cvttss2si rax, xmm0
mov rcx, rax
subss xmm0, dword [0x1401995d4]
cvttss2si rdx, xmm0
sar rcx, 0x3f
and rdx, rcx
or rdx, rax
cmp rdx, 9
mov eax, 8
cmovae rax, rdx
cmp rdi, rax
jae 0x1400302c3
lea rcx, [rdi*8]
cmp rcx, rax
cmovb rcx, rax
cmp rdi, 0x200
cmovae rcx, rax
mov rdi, rcx
mov rcx, rsi
mov rdx, rdi
add rsp, 0x28
pop rdi
pop rsi
jmp 0x1400302d4
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x20
movabs rax, 0x800000000000001
cmp rdx, rax
jae 0x140030452
mov rsi, rcx
dec rdx
or rdx, 1
bsr rcx, rdx
xor ecx, 0x3f
neg cl
mov ebx, 1
shl rbx, cl
lea rax, [rsi + 0x18]
mov rdi, qword [rsi + 8]
mov edx, 2
shl rdx, cl
mov rcx, rax
mov r8, rdi
call fcn.14002fed4
lea rax, [rbx - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rbx
mov rax, qword [rsi + 8]
mov rax, qword [rax]
cmp rax, rdi
je 0x140030446
movabs rcx, 0xcbf29ce484222325
movabs rdx, 0x100000001b3
mov r8, rax
mov rax, qword [rax]
mov r9d, reloc.WS2_32.dll_recv
mov r11, rcx
movzx r10d, byte [r8 + r9]
xor r11, r10
imul r11, rdx
inc r9
cmp r9, 0x18
jne 0x140030367
and r11, qword [rsi + 0x30]
mov r9, qword [rsi + 0x18]
lea r10, [r11 + r11]
mov r14, r11
shl r14, 4
lea rbx, [r11*2 + 1]
mov r11, qword [r9 + r14]
cmp r11, rdi
je 0x1400303e3
mov r14, qword [r9 + rbx*8]
mov r15, qword [r8 + 0x10]
cmp r15, qword [r14 + 0x10]
je 0x1400303e9
cmp r11, r14
je 0x140030418
mov r14, qword [r14 + 8]
cmp r15, qword [r14 + 0x10]
jne 0x1400303ae
mov r9, qword [r14]
mov r10, qword [r8 + 8]
mov qword [r10], rax
mov r11, qword [rax + 8]
mov qword [r11], r9
mov rbx, qword [r9 + 8]
mov qword [rbx], r8
mov qword [r9 + 8], r11
mov qword [rax + 8], r10
mov qword [r8 + 8], rbx
jmp 0x14003043d
mov qword [r9 + r10*8], r8
jmp 0x140030412
mov r10, qword [r14]
cmp r10, r8
je 0x140030412
mov r11, qword [r8 + 8]
mov qword [r11], rax
mov r14, qword [rax + 8]
mov qword [r14], r10
mov r15, qword [r10 + 8]
mov qword [r15], r8
mov qword [r10 + 8], r14
mov qword [rax + 8], r11
mov qword [r8 + 8], r15
mov qword [r9 + rbx*8], r8
jmp 0x14003043d
mov rbx, qword [r8 + 8]
mov qword [rbx], rax
mov r14, qword [rax + 8]
mov qword [r14], r11
mov r15, qword [r11 + 8]
mov qword [r15], r8
mov qword [r11 + 8], r14
mov qword [rax + 8], rbx
mov qword [r8 + 8], r15
mov qword [r9 + r10*8], r8
cmp rax, rdi
jne 0x140030358
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
lea rcx, str.invalid_hash_bucket_count
call fcn.14015cc38
int3
Function at 0x140030460
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
mov r8, rdx
mov rsi, rcx
mov rax, qword [0x1401ea088]
xor rax, rsp
mov qword [rsp + 0x38], rax
movabs rdi, 0xcbf29ce484222325
xor eax, eax
movabs rcx, 0x100000001b3
movzx edx, byte [r8 + rax]
xor rdi, rdx
imul rdi, rcx
inc rax
cmp rax, 8
jne 0x140030492
lea rbx, [rsp + 0x28]
mov rcx, rsi
mov rdx, rbx
mov r9, rdi
call fcn.14002ff6a
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400304ef
and rdi, qword [rsi + 0x30]
mov rax, qword [rsi + 0x18]
lea rdx, [rdi + rdi]
mov r8, rdi
shl r8, 4
mov r9, qword [rax + r8]
cmp qword [rax + rdx*8 + 8], rcx
je 0x1400304f3
cmp r9, rcx
jne 0x140030516
mov r8, qword [rcx]
mov qword [rax + rdx*8], r8
jmp 0x140030516
xor esi, esi
jmp 0x14003053b
lea r8, [rdi*2 + 1]
cmp r9, rcx
je 0x14003050a
mov rdx, qword [rcx + 8]
mov qword [rax + r8*8], rdx
jmp 0x140030516
mov r9, qword [rsi + 8]
mov qword [rax + rdx*8], r9
mov qword [rax + r8*8], r9
mov rax, qword [rcx]
dec qword [rsi + 0x10]
mov rdx, qword [rcx + 8]
mov qword [rdx], rax
mov rdx, qword [rcx + 8]
mov qword [rax + 8], rdx
mov edx, 0x20
call fcn.14015c260
mov esi, 1
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14015c2e0
mov rax, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret