joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140072590
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x48
mov r12, rdx
cmp rdx, r8
je 0x140072687
mov rsi, r8
mov rdi, rcx
mov rax, qword [rcx + 8]
mov qword [rsp + 0x28], rax
mov rdx, qword [rcx + 0x18]
mov rax, qword [r12 + 8]
mov qword [rsp + 0x30], rax
movzx eax, byte [r12 + 0x10]
movabs rcx, 0xcbf29ce484222325
xor rax, rcx
movabs rbp, 0x100000001b3
imul rax, rbp
movzx ecx, byte [r12 + 0x11]
xor rcx, rax
imul rcx, rbp
movzx eax, byte [r12 + 0x12]
xor rax, rcx
imul rax, rbp
movzx ecx, byte [r12 + 0x13]
xor rcx, rax
imul rcx, rbp
and rcx, qword [rdi + 0x30]
lea rax, [rcx + rcx]
lea rbp, [rcx + rcx]
inc rbp
mov qword [rsp + 0x40], rbp
shl rcx, 4
lea r15, [rdx + rcx]
mov rcx, qword [rdx + rcx]
mov qword [rsp + 0x38], rcx
cmp rcx, r12
setne r13b
mov qword [rsp + 0x20], rdx
mov rbp, qword [rdx + rax*8 + 8]
mov r14, r12
nop word [rax + rax]
mov rbx, r14
mov r14, qword [r14]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, rbx
call fcn.140141034
dec qword [rdi + 0x10]
cmp rbx, rbp
je 0x14007268f
cmp r14, rsi
setne al
or al, r13b
cmp al, 1
jne 0x14007275f
cmp r14, rsi
jne 0x140072650
jmp 0x140072762
mov rsi, r12
jmp 0x14007276e
mov rax, qword [rsp + 0x30]
cmp qword [rsp + 0x38], r12
jne 0x1400726a3
mov rax, qword [rsp + 0x28]
mov qword [r15], rax
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x40]
mov qword [rcx + rdx*8], rax
cmp r14, rsi
je 0x140072762
movzx eax, byte [r14 + 0x10]
movabs rcx, 0xcbf29ce484222325
xor rax, rcx
movabs rdx, 0x100000001b3
imul rax, rdx
movzx ecx, byte [r14 + 0x11]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [r14 + 0x12]
xor rax, rcx
imul rax, rdx
movzx r15d, byte [r14 + 0x13]
xor r15, rax
imul r15, rdx
and r15, qword [rdi + 0x30]
lea rax, [r15 + r15]
lea r12, [r15 + r15]
inc r12
shl r15, 4
mov rcx, qword [rsp + 0x20]
add r15, rcx
mov rbp, qword [rcx + rax*8 + 8]
nop
mov rbx, r14
mov r14, qword [r14]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, rbx
call fcn.140141034
dec qword [rdi + 0x10]
cmp rbx, rbp
je 0x140072743
cmp r14, rsi
jne 0x140072720
jmp 0x14007275f
mov rax, qword [rsp + 0x28]
mov qword [r15], rax
mov rcx, qword [rsp + 0x20]
mov qword [rcx + r12*8], rax
cmp r14, rsi
jne 0x1400726ba
jmp 0x140072762
mov qword [r15], rsi
mov rax, qword [rsp + 0x30]
mov qword [rax], rsi
mov qword [rsi + 8], rax
mov rax, rsi
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x140074be0
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x20
movabs rax, 0x800000000000001
cmp rdx, rax
jae 0x140074da8
mov r14, rcx
dec rdx
or rdx, 1
bsr rcx, rdx
xor ecx, 0x3f
neg cl
mov esi, 1
shl rsi, cl
lea rax, [r14 + 0x18]
mov r15, qword [r14 + 8]
mov edx, 2
shl rdx, cl
mov rcx, rax
mov r8, r15
call fcn.1400298f0
lea rax, [rsi - 1]
mov qword [r14 + 0x30], rax
mov qword [r14 + 0x38], rsi
mov rax, qword [r14 + 8]
mov rax, qword [rax]
cmp rax, r15
je 0x140074d9c
xorps xmm0, xmm0
movabs r8, 0xcbf29ce484222325
movabs r9, 0x100000001b3
jmp 0x140074c81
mov qword [rsi + r10*8], rdx
mov qword [rsi + rdi*8], rdx
cmp rax, r15
je 0x140074d9c
mov rdx, rax
movss xmm1, dword [rax + 0x10]
movaps xmm2, xmm1
cmpeqss xmm2, xmm0
andnps xmm2, xmm1
movd ecx, xmm2
movzx eax, cl
xor rax, r8
imul rax, r9
movzx esi, ch
xor rsi, rax
imul rsi, r9
mov eax, ecx
shr eax, 0x10
movzx eax, al
xor rax, rsi
imul rax, r9
shr ecx, 0x18
xor rcx, rax
imul rcx, r9
and rcx, qword [r14 + 0x30]
mov rax, qword [rdx]
mov rsi, qword [r14 + 0x18]
lea r10, [rcx + rcx]
lea rdi, [rcx + rcx]
inc rdi
shl rcx, 4
mov rcx, qword [rsi + rcx]
cmp rcx, r15
je 0x140074c70
mov rbx, qword [rsi + rdi*8]
ucomiss xmm1, dword [rbx + 0x10]
jne 0x140074d00
jnp 0x140074d40
nop word cs:[rax + rax]
cmp rcx, rbx
je 0x140074d72
mov rbx, qword [rbx + 8]
ucomiss xmm1, dword [rbx + 0x10]
jne 0x140074d00
jp 0x140074d00
mov rcx, qword [rbx]
mov rbx, qword [rdx + 8]
mov qword [rbx], rax
mov rdi, qword [rax + 8]
mov qword [rdi], rcx
mov rsi, qword [rcx + 8]
mov qword [rsi], rdx
mov qword [rcx + 8], rdi
mov qword [rax + 8], rbx
mov qword [rdx + 8], rsi
jmp 0x140074c78
mov rcx, qword [rbx]
cmp rcx, rdx
je 0x140074c74
mov r10, qword [rdx + 8]
mov qword [r10], rax
mov rbx, qword [rax + 8]
mov qword [rbx], rcx
mov r11, qword [rcx + 8]
mov qword [r11], rdx
mov qword [rcx + 8], rbx
mov qword [rax + 8], r10
mov qword [rdx + 8], r11
jmp 0x140074c74
mov r11, qword [rdx + 8]
mov qword [r11], rax
mov rdi, qword [rax + 8]
mov qword [rdi], rcx
mov rbx, qword [rcx + 8]
mov qword [rbx], rdx
mov qword [rcx + 8], rdi
mov qword [rax + 8], r11
mov qword [rdx + 8], rbx
mov qword [rsi + r10*8], rdx
jmp 0x140074c78
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
lea rcx, str.invalid_hash_bucket_count
call fcn.1401438a8
int3
Function at 0x14007e1f0
Capabilities:
Hash data with crc32

Disassembly:
not r8d
test rdx, rdx
je 0x14007e251
dec rdx
add rcx, 2
lea r9, [0x14025f0d0]
mov r10d, r8d
jmp 0x14007e231
mov eax, r10d
shr eax, 8
movzx r10d, r10b
xor r10d, r11d
xor eax, dword [r9 + r10*4]
inc rcx
mov r10d, eax
add rdx, 0xffffffffffffffff
jae 0x14007e2ad
movzx r11d, byte [rcx - 2]
cmp r11d, 0x23
jne 0x14007e210
cmp rdx, 2
jb 0x14007e210
cmp byte [rcx - 1], 0x23
jne 0x14007e210
cmp byte [rcx], 0x23
cmove r10d, r8d
jmp 0x14007e210
movzx r10d, byte [rcx]
test r10b, r10b
je 0x14007e2b0
add rcx, 2
lea r9, [0x14025f0d0]
mov edx, r8d
jmp 0x14007e290
movzx r10d, r10b
mov eax, edx
shr eax, 8
movzx edx, dl
xor edx, r10d
xor eax, dword [r9 + rdx*4]
inc rcx
mov r10d, r11d
mov edx, eax
test r11b, r11b
je 0x14007e2ad
movzx r11d, byte [rcx - 1]
cmp r10b, 0x23
jne 0x14007e270
cmp r11b, 0x23
jne 0x14007e270
cmp byte [rcx], 0x23
cmove edx, r8d
mov r11b, reloc.WLDAP32.dll_Ordinal_35
jmp 0x14007e270
not eax
ret
mov eax, r8d
not eax
ret
Function at 0x14007e650
Capabilities:
Read file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov r13d, r9d
mov rdi, r8
test r8, r8
je 0x14007e672
mov qword [rdi], 0
call fcn.14007e2c0
test rax, rax
je 0x14007e6aa
mov rbx, rax
mov rcx, rax
call fcn.1402384d8
cmp eax, 0xffffffff
je 0x14007e6a2
mov esi, eax
mov rcx, rbx
xor edx, edx
mov r8d, 2
call fcn.140230030
test eax, eax
je 0x14007e6c0
mov rcx, rbx
call fcn.140237180
xor esi, esi
mov rax, rsi
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rbx
call fcn.1402384d8
cmp eax, 0xffffffff
je 0x14007e6a2
mov r14d, eax
xor ebp, ebp
mov rcx, rbx
mov edx, esi
xor r8d, r8d
call fcn.140230030
neg eax
sbb ebp, ebp
or ebp, r14d
cmp ebp, 0xffffffff
je 0x14007e6a2
movsxd r14, ebp
movsxd r15, r13d
lea r12, [r14 + r15]
mov rdx, qword [0x14032b520]
mov rcx, r12
call qword [0x140321fb0]
mov rsi, rax
mov rax, qword [0x14032b510]
test rax, rax
je 0x14007e7a5
mov r8d, dword [rax + 0x4098]
movsx rdx, word [rax + 0x6338]
cmp dword [rax + rdx*8 + 0x633c], r8d
jne 0x14007e73e
lea rdx, [rax + rdx*8]
add rdx, 0x633c
jmp 0x14007e787
inc edx
movsxd rdx, edx
imul rbp, rdx, 0x2aaaaaab
mov rcx, rbp
shr rcx, 0x3f
shr rbp, 0x20
add ebp, ecx
add ebp, ebp
lea ecx, [rbp + rbp*2]
sub edx, ecx
mov word [rax + 0x6338], dx
movsxd rcx, edx
lea rdx, [rax + rcx*8]
add rdx, 0x633c
mov dword [rax + rcx*8 + 0x633c], r8d
mov dword [rax + rcx*8 + 0x6340], 0
cmp r12, 0xffffffffffffffff
je 0x14007e799
add rax, 0x6330
inc word [rdx + 4]
jmp 0x14007e7a3
inc word [rdx + 6]
add rax, 0x6334
inc dword [rax]
test rsi, rsi
je 0x14007e6a2
mov edx, 1
mov rcx, rsi
mov r8, r14
mov r9, rbx
call fcn.140238114
cmp rax, r14
jne 0x14007e7f4
test r13d, r13d
jle 0x14007e7db
mov rcx, rsi
add rcx, r14
xor edx, edx
mov r8, r15
call fcn.14021ea60
mov rcx, rbx
call fcn.140237180
test rdi, rdi
je 0x14007e6ac
mov qword [rdi], r14
jmp 0x14007e6ac
mov rcx, rbx
call fcn.140237180
mov rax, qword [0x14032b510]
test rax, rax
je 0x14007e87a
mov ecx, dword [rax + 0x4098]
movsx rdx, word [rax + 0x6338]
cmp dword [rax + rdx*8 + 0x633c], ecx
jne 0x14007e82b
movzx ecx, word [rax + rdx*8 + 0x6342]
inc ecx
jmp 0x14007e86c
inc edx
movsxd rdx, edx
imul rbp, rdx, 0x2aaaaaab
mov rbx, rbp
shr rbx, 0x3f
shr rbp, 0x20
add ebp, ebx
add ebp, ebp
lea ebp, [rbp + rbp*2]
sub edx, ebp
mov word [rax + 0x6338], dx
movsxd rdx, edx
mov dword [rax + rdx*8 + 0x633c], ecx
mov dword [rax + rdx*8 + 0x6340], 0
mov cx, 1
mov word [rax + rdx*8 + 0x6342], cx
inc dword [rax + 0x6334]
mov rdx, qword [0x14032b520]
mov rcx, rsi
call qword [0x140321fb8]
jmp 0x14007e6aa
Function at 0x140087490
Capabilities:
Hash data with crc32

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov r9, r8
mov r8, rdx
mov rax, qword [rcx + 0x138]
movsxd rdx, dword [rcx + 0x130]
mov r10d, dword [rax + rdx*4 - 4]
not r10d
test r9, r9
je 0x140087518
mov rax, r9
sub rax, r8
je 0x140087518
mov rdx, r8
not rdx
add rdx, r9
lea rax, [r8 + 2]
lea r11, [0x14025f0d0]
mov edi, r10d
jmp 0x1400874fa
mov esi, edi
shr esi, 8
movzx edi, dil
xor edi, ebx
xor esi, dword [r11 + rdi*4]
inc rax
mov edi, esi
add rdx, 0xffffffffffffffff
jae 0x140087569
movzx ebx, byte [rax - 2]
cmp ebx, 0x23
jne 0x1400874e0
cmp rdx, 2
jb 0x1400874e0
cmp byte [rax - 1], 0x23
jne 0x1400874e0
cmp byte [rax], 0x23
cmove edi, r10d
jmp 0x1400874e0
movzx edx, byte [r8]
test dl, dl
je 0x140087566
lea rax, [r8 + 2]
lea r11, [0x14025f0d0]
mov edi, r10d
jmp 0x14008754d
movzx edx, dl
mov esi, edi
shr esi, 8
movzx edi, dil
xor edi, edx
xor esi, dword [r11 + rdi*4]
inc rax
mov edx, ebx
mov edi, esi
test bl, bl
je 0x140087569
movzx ebx, byte [rax - 1]
cmp dl, 0x23
jne 0x140087530
cmp bl, 0x23
jne 0x140087530
cmp byte [rax], 0x23
cmove edi, r10d
mov bl, reloc.WLDAP32.dll_Ordinal_35
jmp 0x140087530
mov esi, r10d
not esi
mov rax, qword [rcx]
cmp dword [rax + 0x418c], esi
jne 0x140087582
mov ecx, esi
mov edx, reloc.WS2_32.dll_inet_addr
call fcn.14009f2d0
mov eax, esi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
Function at 0x14009ba80
Capabilities:
Hash data with crc32

Disassembly:
movzx edx, byte [rcx]
test dl, dl
je 0x14009badc
add rcx, 2
mov r8d, 0xffffffff
lea r9, [0x14025f0d0]
mov eax, 0xffffffff
jmp 0x14009babc
movzx r11d, dl
movzx edx, al
shr eax, 8
xor edx, r11d
xor eax, dword [r9 + rdx*4]
inc rcx
mov edx, r10d
test r10b, r10b
je 0x14009bad8
movzx r10d, byte [rcx - 1]
cmp dl, 0x23
jne 0x14009baa0
cmp r10b, 0x23
jne 0x14009baa0
cmp byte [rcx], 0x23
cmove eax, r8d
mov r10b, reloc.WLDAP32.dll_Ordinal_35
jmp 0x14009baa0
not eax
jmp 0x14009bade
xor eax, eax
mov rcx, qword [0x14032b510]
mov r8, qword [rcx + 0x4128]
movsxd r9, dword [rcx + 0x4120]
test r9, r9
je 0x14009bb37
mov r10, r8
mov r11, r9
mov rdx, r9
jmp 0x14009bb18
mov r11, rdx
test rdx, rdx
je 0x14009bb3d
shr rdx, 1
mov rcx, rdx
shl rcx, 4
cmp dword [r10 + rcx], eax
jae 0x14009bb10
not rdx
add rdx, r11
add r10, rcx
add r10, 0x10
jmp 0x14009bb10
xor r9d, r9d
mov r10, r8
shl r9, 4
add r8, r9
cmp r10, r8
je 0x14009bb53
cmp dword [r10], eax
jne 0x14009bb53
mov rax, qword [r10 + 8]
ret
xor eax, eax
ret
Function at 0x14009f500
Capabilities:
Hash data with crc32

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x38
mov r8, rcx
mov rax, qword [0x1403295b8]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov rax, qword [0x14032b510]
mov r14, qword [rax + 0x4140]
mov rax, qword [r14 + 0x138]
movsxd rcx, dword [r14 + 0x130]
mov esi, dword [rax + rcx*4 - 4]
not esi
movzx edx, byte [r8]
test dl, dl
je 0x14009f594
lea rcx, [r8 + 2]
lea r9, [0x14025f0d0]
mov eax, esi
jmp 0x14009f57c
movzx edx, dl
mov edi, eax
shr edi, 8
movzx eax, al
xor eax, edx
xor edi, dword [r9 + rax*4]
inc rcx
mov edx, ebx
mov eax, edi
test bl, bl
je 0x14009f596
movzx ebx, byte [rcx - 1]
cmp dl, 0x23
jne 0x14009f560
cmp bl, 0x23
jne 0x14009f560
cmp byte [rcx], 0x23
cmove eax, esi
mov bl, reloc.WLDAP32.dll_Ordinal_35
jmp 0x14009f560
mov edi, esi
not edi
mov rax, qword [r14]
add r14, 0x130
cmp dword [rax + 0x418c], edi
jne 0x14009f5b9
mov ecx, edi
mov edx, reloc.WS2_32.dll_inet_addr
xor r9d, r9d
call fcn.14009f2d0
mov dword [rsp + 0x2c], edi
lea rdx, [rsp + 0x2c]
mov rcx, r14
call fcn.14007f930
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140141380
nop
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
ret

Function at 0x14009f5f0
Capabilities:
Hash data with crc32

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x38
mov rax, qword [0x1403295b8]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov rax, qword [0x14032b510]
mov r10, qword [rax + 0x4140]
mov esi, ecx
shr esi, 8
mov eax, ecx
shr eax, 0x10
mov r8d, ecx
shr r8d, 0x18
lea r14, [r10 + 0x130]
mov rbx, qword [r10 + 0x138]
movsxd rdx, dword [r10 + 0x130]
mov edx, dword [rbx + rdx*4 - 4]
not edx
mov ebx, edx
shr ebx, 8
xor edx, ecx
movzx edx, dl
lea r9, [0x14025f0d0]
xor ebx, dword [r9 + rdx*4]
mov edx, ebx
shr edx, 8
xor ebx, esi
movzx ebx, bl
xor edx, dword [r9 + rbx*4]
mov edi, edx
shr edi, 8
xor edx, eax
movzx eax, dl
xor edi, dword [r9 + rax*4]
movzx eax, dil
shr edi, 8
xor eax, r8d
xor edi, dword [r9 + rax*4]
mov rax, qword [r10]
not edi
cmp dword [rax + 0x418c], edi
jne 0x14009f6a0
movsxd r8, ecx
mov ecx, edi
mov edx, 4
xor r9d, r9d
call fcn.14009f2d0
mov dword [rsp + 0x2c], edi
lea rdx, [rsp + 0x2c]
mov rcx, r14
call fcn.14007f930
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140141380
nop
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
ret
Function at 0x14009f740
Capabilities:
Hash data with crc32

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov r9, rdx
mov r10, rcx
not r8d
test rdx, rdx
je 0x14009f7b7
mov rax, r9
sub rax, r10
je 0x14009f7b7
mov rcx, r10
not rcx
add rcx, r9
lea rdx, [r10 + 2]
lea r11, [0x14025f0d0]
mov eax, r8d
jmp 0x14009f799
mov esi, eax
shr esi, 8
movzx eax, al
xor eax, edi
xor esi, dword [r11 + rax*4]
inc rdx
mov eax, esi
add rcx, 0xffffffffffffffff
jae 0x14009f808
movzx edi, byte [rdx - 2]
cmp edi, 0x23
jne 0x14009f780
cmp rcx, 2
jb 0x14009f780
cmp byte [rdx - 1], 0x23
jne 0x14009f780
cmp byte [rdx], 0x23
cmove eax, r8d
jmp 0x14009f780
movzx edx, byte [r10]
test dl, dl
je 0x14009f805
lea rax, [r10 + 2]
lea r11, [0x14025f0d0]
mov ecx, r8d
jmp 0x14009f7ec
movzx edx, dl
mov esi, ecx
shr esi, 8
movzx ecx, cl
xor ecx, edx
xor esi, dword [r11 + rcx*4]
inc rax
mov edx, ebx
mov ecx, esi
test bl, bl
je 0x14009f808
movzx ebx, byte [rax - 1]
cmp dl, 0x23
jne 0x14009f7d0
cmp bl, 0x23
jne 0x14009f7d0
cmp byte [rax], 0x23
cmove ecx, r8d
mov bl, reloc.WLDAP32.dll_Ordinal_35
jmp 0x14009f7d0
mov esi, r8d
not esi
mov rax, qword [0x14032b510]
cmp dword [rax + 0x418c], esi
jne 0x14009f828
mov ecx, esi
mov edx, reloc.WS2_32.dll_inet_addr
mov r8, r10
call fcn.14009f2d0
mov eax, esi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret

Function at 0x14009f840
Capabilities:
Hash data with crc32

Disassembly:
push rsi
sub rsp, 0x20
mov esi, ecx
shr esi, 8
mov r9d, ecx
shr r9d, 0x10
mov r8d, ecx
shr r8d, 0x18
not edx
mov eax, edx
shr eax, 8
xor edx, ecx
movzx edx, dl
lea r10, [0x14025f0d0]
xor eax, dword [r10 + rdx*4]
mov edx, eax
shr edx, 8
xor eax, esi
movzx eax, al
xor edx, dword [r10 + rax*4]
mov esi, edx
shr esi, 8
xor edx, r9d
movzx eax, dl
xor esi, dword [r10 + rax*4]
movzx eax, sil
shr esi, 8
xor eax, r8d
xor esi, dword [r10 + rax*4]
not esi
mov rax, qword [0x14032b510]
cmp dword [rax + 0x418c], esi
jne 0x14009f8bd
movsxd r8, ecx
mov ecx, esi
mov edx, 4
xor r9d, r9d
call fcn.14009f2d0
mov eax, esi
add rsp, 0x20
pop rsi
ret

Function at 0x14009f8f0
Capabilities:
Hash data with crc32

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov r8, rcx
mov rax, qword [0x14032b510]
mov r9, qword [rax + 0x4140]
mov rax, qword [r9 + 0x138]
movsxd rcx, dword [r9 + 0x130]
mov r11d, dword [rax + rcx*4 - 4]
not r11d
movzx eax, byte [r8]
test al, al
je 0x14009f974
lea rdx, [r8 + 2]
lea r10, [0x14025f0d0]
mov ecx, r11d
jmp 0x14009f95c
movzx eax, al
mov esi, ecx
shr esi, 8
movzx ecx, cl
xor ecx, eax
xor esi, dword [r10 + rcx*4]
inc rdx
mov eax, ebx
mov ecx, esi
test bl, bl
je 0x14009f977
movzx ebx, byte [rdx - 1]
cmp al, 0x23
jne 0x14009f940
cmp bl, 0x23
jne 0x14009f940
cmp byte [rdx], 0x23
cmove ecx, r11d
mov bl, reloc.WLDAP32.dll_Ordinal_35
jmp 0x14009f940
mov esi, r11d
not esi
mov rax, qword [r9]
cmp dword [rax + 0x418c], esi
jne 0x14009f993
mov ecx, esi
mov edx, reloc.WS2_32.dll_inet_addr
xor r9d, r9d
call fcn.14009f2d0
mov eax, esi
add rsp, 0x28
pop rbx
pop rsi
ret
Function at 0x1400a1a40
Capabilities:
Hash data with crc32

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x40
mov r14d, edx
mov rax, qword [0x1403295b8]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbp, qword [0x14032b510]
cmp byte [rbp + 0x4f35], 0
jne 0x1400a1a77
mov edi, ecx
cmp byte [rbp + 0x4f36], 0
je 0x1400a1ad5
movss xmm0, dword [rbp + 0x3ad0]
unpcklps xmm0, xmm0
mulps xmm0, xmmword [0x140260520]
movsd xmm1, qword [rbp + 0xe48]
addps xmm1, xmm0
movq xmm0, xmm1
movdqu xmmword [rbp + 0x4b54], xmm0
mov dword [rbp + 0x4b44], 1
mov byte [rbp + 0x4b80], 1
movss xmm0, dword [rbp + 0x3b2c]
or byte [rbp + 0x4b40], 0x41
mulss xmm0, dword [0x1402605c8]
movss dword [rbp + 0x4ba8], xmm0
mov edi, 2
movsx r9d, word [rbp + 0x60a0]
lea r8, str.Tooltip__02d
lea rcx, [rsp + 0x20]
mov edx, reloc.WS2_32.dll_recv
call fcn.14007dfd0
test dil, 2
je 0x1400a1c0b
movzx ecx, byte [rsp + 0x20]
test cl, cl
je 0x1400a1b54
mov r8d, 0xffffffff
lea rdx, [rsp + 0x22]
lea rdi, [0x14025f0d0]
mov eax, 0xffffffff
jmp 0x1400a1b37
movzx ecx, cl
movzx esi, al
shr eax, 8
xor esi, ecx
xor eax, dword [rdi + rsi*4]
inc rdx
mov ecx, ebx
test bl, bl
je 0x1400a1b50
movzx ebx, byte [rdx - 1]
cmp cl, 0x23
jne 0x1400a1b20
cmp bl, 0x23
jne 0x1400a1b20
cmp byte [rdx], 0x23
cmove eax, r8d
mov bl, reloc.WLDAP32.dll_Ordinal_35
jmp 0x1400a1b20
not eax
jmp 0x1400a1b56
xor eax, eax
mov rcx, qword [0x14032b510]
mov r8, qword [rcx + 0x4128]
movsxd rcx, dword [rcx + 0x4120]
test rcx, rcx
je 0x1400a1ba6
mov rdx, r8
mov rsi, rcx
mov rdi, rcx
jmp 0x1400a1b88
mov rsi, rdi
test rdi, rdi
je 0x1400a1bab
shr rdi, 1
mov rbx, rdi
shl rbx, 4
cmp dword [rdx + rbx], eax
jae 0x1400a1b80
not rdi
add rdi, rsi
add rdx, rbx
add rdx, 0x10
jmp 0x1400a1b80
xor ecx, ecx
mov rdx, r8
shl rcx, 4
add r8, rcx
cmp rdx, r8
je 0x1400a1c0b
cmp dword [rdx], eax
jne 0x1400a1c0b
mov rax, qword [rdx + 8]
test rax, rax
je 0x1400a1c0b
cmp byte [rax + 0xf3], 0
je 0x1400a1c0b
mov byte [rax + 0xf8], 1
mov byte [rax + 0xfa], 1
mov byte [rax + 0x118], 1
mov eax, dword [rbp + 0x60a0]
inc eax
mov word [rbp + 0x60a0], ax
movsx r9d, ax
lea r8, str.Tooltip__02d
lea rcx, [rsp + 0x20]
mov edx, reloc.WS2_32.dll_recv
call fcn.14007dfd0
or r14d, 0x20b0347
lea rcx, [rsp + 0x20]
xor edx, edx
mov r8d, r14d
call fcn.140091e10
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140141380
mov al, 1
add rsp, 0x40
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
Function at 0x1400a1d00
Capabilities:
Hash data with crc32

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov r14d, edx
mov r12, rcx
mov r15, qword [0x14032b510]
mov rsi, qword [r15 + 0x4140]
mov rax, qword [rsi + 0x138]
movsxd rcx, dword [rsi + 0x130]
mov edi, dword [rax + rcx*4 - 4]
not edi
movzx eax, byte [r12]
test al, al
je 0x1400a1d88
lea rdx, [r12 + 2]
lea rbp, [0x14025f0d0]
mov ecx, edi
jmp 0x1400a1d6e
movzx eax, al
mov ebx, ecx
shr ebx, 8
movzx ecx, cl
xor ecx, eax
xor ebx, dword [rbp + rcx*4]
inc rdx
mov eax, r8d
mov ecx, ebx
test r8b, r8b
je 0x1400a1d8a
movzx r8d, byte [rdx - 1]
cmp al, 0x23
jne 0x1400a1d50
cmp r8b, 0x23
jne 0x1400a1d50
cmp byte [rdx], 0x23
cmove ecx, edi
mov r8b, reloc.WLDAP32.dll_Ordinal_35
jmp 0x1400a1d50
mov ebx, edi
not ebx
mov rax, qword [rsi]
cmp dword [rax + 0x418c], ebx
jne 0x1400a1da9
mov ecx, ebx
mov edx, reloc.WS2_32.dll_inet_addr
mov r8, r12
xor r9d, r9d
call fcn.14009f2d0
test byte [r15 + 0x6294], 4
je 0x1400a1dc5
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
mov rdx, r12
mov r8d, ebx
call fcn.14007faf0
mov ecx, ebx
mov edx, r14d
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.1400a1de0

Function at 0x1400a2460
Capabilities:
Hash data with crc32

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov r8, rcx
mov rax, qword [0x14032b510]
mov ecx, dword [rax + 0x4c48]
cmp ecx, dword [rax + 0x4c58]
jle 0x1400a24f2
mov r14d, edx
mov r9, qword [rax + 0x4140]
mov rax, qword [r9 + 0x138]
movsxd rcx, dword [r9 + 0x130]
mov ebp, dword [rax + rcx*4 - 4]
not ebp
movzx eax, byte [r8]
test al, al
je 0x1400a2509
lea rdx, [r8 + 2]
lea rsi, [0x14025f0d0]
mov ecx, ebp
jmp 0x1400a24db
movzx eax, al
mov edi, ecx
shr edi, 8
movzx ecx, cl
xor ecx, eax
xor edi, dword [rsi + rcx*4]
inc rdx
mov eax, ebx
mov ecx, edi
test bl, bl
je 0x1400a250b
movzx ebx, byte [rdx - 1]
cmp al, 0x23
jne 0x1400a24c0
cmp bl, 0x23
jne 0x1400a24c0
cmp byte [rdx], 0x23
cmove ecx, ebp
mov bl, reloc.WLDAP32.dll_Ordinal_35
jmp 0x1400a24c0
mov dword [rax + 0x4b40], 0
xor eax, eax
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov edi, ebp
or r14d, 0x141
not edi
mov rax, qword [r9]
cmp dword [rax + 0x418c], edi
jne 0x1400a252e
mov ecx, edi
mov edx, reloc.WS2_32.dll_inet_addr
xor r9d, r9d
call fcn.14009f2d0
mov ecx, edi
mov edx, r14d
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
jmp fcn.1400a22e0
Function at 0x1400a2550
Capabilities:
Hash data with crc32

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rdi, qword [0x14032b510]
mov eax, edx
and eax, 0x1f
cmp byte [rdi + rax + 0x388e], 0
je 0x1400a2618
mov r12d, edx
mov r15, rcx
mov r14, qword [rdi + 0x4140]
cmp eax, 0xa
ja 0x1400a25a0
add eax, 0x8f
lea rax, [rax + rax*2]
cmp byte [rdi + rax*4 + 0x4224], 0
jne 0x1400a2618
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140088d40
test al, al
je 0x1400a2618
test r15, r15
je 0x1400a2626
mov rax, qword [r14 + 0x138]
movsxd rcx, dword [r14 + 0x130]
mov esi, dword [rax + rcx*4 - 4]
not esi
movzx edx, byte [r15]
test dl, dl
je 0x1400a262e
lea rcx, [r15 + 2]
lea rdi, [0x14025f0d0]
mov eax, esi
jmp 0x1400a25fd
movzx edx, dl
mov ebx, eax
shr ebx, 8
movzx eax, al
xor eax, edx
xor ebx, dword [rdi + rax*4]
inc rcx
mov edx, r8d
mov eax, ebx
test r8b, r8b
je 0x1400a2630
movzx r8d, byte [rcx - 1]
cmp dl, 0x23
jne 0x1400a25e0
cmp r8b, 0x23
jne 0x1400a25e0
cmp byte [rcx], 0x23
cmove eax, esi
mov r8b, reloc.WLDAP32.dll_Ordinal_35
jmp 0x1400a25e0
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
mov ebx, dword [rdi + 0x4af0]
jmp 0x1400a264f
mov ebx, esi
not ebx
mov rax, qword [r14]
cmp dword [rax + 0x418c], ebx
jne 0x1400a264f
mov ecx, ebx
mov edx, reloc.WS2_32.dll_inet_addr
mov r8, r15
xor r9d, r9d
call fcn.14009f2d0
mov ecx, ebx
mov edx, r12d
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.1400a1de0
Function at 0x1400a4ad0
Capabilities:
Hash data with crc32

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x28
mov r15, rcx
mov rsi, qword [0x14032b510]
cmp byte [rsi + 0x84], 0
jne 0x1400a4b06
lea rdx, [0x1402da807]
mov rcx, r15
call fcn.14021efa4
test rax, rax
cmovne r15, rax
mov rcx, r15
call fcn.14023e390
mov r12, rax
lea rcx, [rsi + 0x61c0]
movsxd rdi, dword [rsi + 0x61c0]
lea ebx, [rax + 0x2c]
and ebx, 0xfffffffc
lea edx, [rbx + rdi]
call fcn.14007f3a0
mov rax, qword [rsi + 0x61c8]
mov dword [rax + rdi], ebx
mov rax, qword [rsi + 0x61c8]
lea r14, [rax + rdi]
add r14, 4
xorps xmm0, xmm0
movups xmmword [rax + rdi + 0x14], xmm0
movups xmmword [rax + rdi + 4], xmm0
mov dword [rax + rdi + 0x24], 0
mov word [rax + rdi + 0x20], 0xffff
test r12, r12
je 0x1400a4bca
lea rax, [r12 - 1]
lea rcx, [r15 + 2]
mov r8d, 0xffffffff
lea rbx, [0x14025f0d0]
mov edx, 0xffffffff
jmp 0x1400a4bac
mov esi, edx
shr esi, 8
movzx edx, dl
xor edx, edi
xor esi, dword [rbx + rdx*4]
inc rcx
mov edx, esi
add rax, 0xffffffffffffffff
jae 0x1400a4c29
movzx edi, byte [rcx - 2]
cmp edi, 0x23
jne 0x1400a4b90
cmp rax, 2
jb 0x1400a4b90
cmp byte [rcx - 1], 0x23
jne 0x1400a4b90
cmp byte [rcx], 0x23
cmove edx, r8d
jmp 0x1400a4b90
movzx ebx, byte [r15]
test bl, bl
je 0x1400a4c24
lea rax, [r15 + 2]
mov r8d, 0xffffffff
lea rdi, [0x14025f0d0]
mov ecx, 0xffffffff
jmp 0x1400a4c0b
movzx ebx, bl
mov esi, ecx
shr esi, 8
movzx ecx, cl
xor ecx, ebx
xor esi, dword [rdi + rcx*4]
inc rax
mov ebx, edx
mov ecx, esi
test dl, dl
je 0x1400a4c29
movzx edx, byte [rax - 1]
cmp bl, 0x23
jne 0x1400a4bf0
cmp dl, 0x23
jne 0x1400a4bf0
cmp byte [rax], 0x23
cmove ecx, r8d
mov dl, reloc.WLDAP32.dll_Ordinal_35
jmp 0x1400a4bf0
mov esi, 0xffffffff
not esi
mov dword [r14], esi
lea rcx, [r14 + 0x24]
inc r12
mov rdx, r15
mov r8, r12
call fcn.14021e3b0
mov rax, r14
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret