joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401722d0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x140264330]
xor rax, rsp
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x60]
mov r13, qword [rbp + 0x68]
mov r14d, r8d
movzx r10d, byte [rax]
movzx r8d, byte [rax + 4]
mov ebx, dword [r13]
lea rdi, [rax + 1]
mov qword [rbp - 0x18], rax
shl r10d, 0x18
movzx eax, byte [rdi]
mov rsi, rcx
movzx ecx, byte [rdi + 5]
shl eax, 0x10
shl r8d, 0x18
shl ecx, 8
or r10d, eax
movzx eax, byte [rdi + 1]
mov r12, rdx
shl eax, 8
lea rdx, [rdi + 5]
xor r15d, r15d
or r10d, eax
movzx eax, byte [rdi + 2]
mov qword [rbp - 0x28], r9
or r10d, eax
movzx eax, byte [rdi + 4]
mov qword [rbp - 0x20], r13
shl eax, 0x10
mov dword [rbp - 0x30], r10d
mov byte [rbp - 0xd], r10b
or r8d, eax
movzx eax, byte [rdx + 1]
or ecx, eax
mov eax, r10d
shr eax, 0x18
or r8d, ecx
mov byte [rbp - 0x10], al
mov eax, r10d
mov dword [rbp - 0x2c], r8d
shr eax, 0x10
mov byte [rbp - 9], r8b
mov byte [rbp - 0xf], al
mov eax, r10d
shr eax, 8
mov byte [rbp - 0xe], al
mov eax, r8d
shr eax, 0x18
mov byte [rbp - 0xc], al
mov eax, r8d
shr eax, 0x10
mov byte [rbp - 0xb], al
mov eax, r8d
shr eax, 8
mov byte [rbp - 0xa], al
test r14d, r14d
je 0x14017248a
mov r13, qword [rbp - 0x28]
sub r12, rsi
movzx edx, r8b
movzx r9d, r10b
dec r14d
test ebx, ebx
jne 0x140172427
lea rcx, [rbp - 0x30]
mov rdx, r13
call fcn.140171510
mov r10d, dword [rbp - 0x30]
mov r8d, dword [rbp - 0x2c]
mov eax, r10d
movzx edx, r8b
movzx r9d, r10b
shr eax, 0x18
mov byte [rbp - 0xd], r10b
mov byte [rbp - 9], dl
mov byte [rbp - 0x10], al
mov eax, r10d
shr eax, 0x10
mov byte [rbp - 0xf], al
mov eax, r10d
shr eax, 8
mov byte [rbp - 0xe], al
mov eax, r8d
shr eax, 0x18
mov byte [rbp - 0xc], al
mov eax, r8d
shr eax, 0x10
mov byte [rbp - 0xb], al
mov eax, r8d
shr eax, 8
inc r15d
mov byte [rbp - 0xa], al
movsxd rax, ebx
inc rsi
movzx ecx, byte [rbp + rax - 0x10]
xor cl, byte [rsi - 1]
inc ebx
mov byte [r12 + rsi - 1], cl
and ebx, 7
test r14d, r14d
jne 0x1401723c4
mov r13, qword [rbp - 0x20]
test r15d, r15d
je 0x14017248a
mov rcx, qword [rbp - 0x18]
mov eax, r10d
shr eax, 0x18
mov byte [rcx], al
mov eax, r10d
shr r10d, 8
shr eax, 0x10
mov byte [rdi], al
mov byte [rdi + 1], r10b
mov byte [rdi + 2], r9b
mov eax, r8d
shr eax, 0x18
mov byte [rdi + 3], al
mov eax, r8d
shr eax, 0x10
shr r8d, 8
mov byte [rdi + 4], al
mov byte [rdi + 5], r8b
mov byte [rdi + 6], dl
mov dword [r13], ebx
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1401bb2c0
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x1401733c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x140264330]
xor rax, rsp
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x60]
mov r13, qword [rbp + 0x68]
mov r14d, r8d
movzx r10d, byte [rax]
movzx r8d, byte [rax + 4]
mov ebx, dword [r13]
lea rdi, [rax + 1]
mov qword [rbp - 0x18], rax
shl r10d, 0x18
movzx eax, byte [rdi]
mov rsi, rcx
movzx ecx, byte [rdi + 5]
shl eax, 0x10
shl r8d, 0x18
shl ecx, 8
or r10d, eax
movzx eax, byte [rdi + 1]
mov r12, rdx
shl eax, 8
lea rdx, [rdi + 5]
xor r15d, r15d
or r10d, eax
movzx eax, byte [rdi + 2]
mov qword [rbp - 0x28], r9
or r10d, eax
movzx eax, byte [rdi + 4]
mov qword [rbp - 0x20], r13
shl eax, 0x10
mov dword [rbp - 0x30], r10d
mov byte [rbp - 0xd], r10b
or r8d, eax
movzx eax, byte [rdx + 1]
or ecx, eax
mov eax, r10d
shr eax, 0x18
or r8d, ecx
mov byte [rbp - 0x10], al
mov eax, r10d
mov dword [rbp - 0x2c], r8d
shr eax, 0x10
mov byte [rbp - 9], r8b
mov byte [rbp - 0xf], al
mov eax, r10d
shr eax, 8
mov byte [rbp - 0xe], al
mov eax, r8d
shr eax, 0x18
mov byte [rbp - 0xc], al
mov eax, r8d
shr eax, 0x10
mov byte [rbp - 0xb], al
mov eax, r8d
shr eax, 8
mov byte [rbp - 0xa], al
test r14d, r14d
je 0x14017357a
mov r13, qword [rbp - 0x28]
sub r12, rsi
movzx edx, r8b
movzx r9d, r10b
dec r14d
test ebx, ebx
jne 0x140173517
lea rcx, [rbp - 0x30]
mov rdx, r13
call fcn.1401724c0
mov r10d, dword [rbp - 0x30]
mov r8d, dword [rbp - 0x2c]
mov eax, r10d
movzx edx, r8b
movzx r9d, r10b
shr eax, 0x18
mov byte [rbp - 0xd], r10b
mov byte [rbp - 9], dl
mov byte [rbp - 0x10], al
mov eax, r10d
shr eax, 0x10
mov byte [rbp - 0xf], al
mov eax, r10d
shr eax, 8
mov byte [rbp - 0xe], al
mov eax, r8d
shr eax, 0x18
mov byte [rbp - 0xc], al
mov eax, r8d
shr eax, 0x10
mov byte [rbp - 0xb], al
mov eax, r8d
shr eax, 8
inc r15d
mov byte [rbp - 0xa], al
movsxd rax, ebx
inc rsi
movzx ecx, byte [rbp + rax - 0x10]
xor cl, byte [rsi - 1]
inc ebx
mov byte [r12 + rsi - 1], cl
and ebx, 7
test r14d, r14d
jne 0x1401734b4
mov r13, qword [rbp - 0x20]
test r15d, r15d
je 0x14017357a
mov rcx, qword [rbp - 0x18]
mov eax, r10d
shr eax, 0x18
mov byte [rcx], al
mov eax, r10d
shr r10d, 8
shr eax, 0x10
mov byte [rdi], al
mov byte [rdi + 1], r10b
mov byte [rdi + 2], r9b
mov eax, r8d
shr eax, 0x18
mov byte [rdi + 3], al
mov eax, r8d
shr eax, 0x10
shr r8d, 8
mov byte [rdi + 4], al
mov byte [rdi + 5], r8b
mov byte [rdi + 6], dl
mov dword [r13], ebx
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1401bb2c0
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x14018d440
Capabilities:
Check for software breakpoints

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x460
mov rax, qword [0x140264330]
xor rax, rsp
mov qword [rsp + 0x450], rax
mov rsi, rcx
mov rbx, r8
mov rdi, rdx
lea rcx, [rsp + 0x151]
xor edx, edx
mov r8d, 0xff
mov byte [rsp + 0x150], 0
call sub.MSVCR120.dll_memset
lea rcx, [rsp + 0x51]
xorps xmm0, xmm0
xor edx, edx
mov r8d, 0xff
movdqu xmmword [rsp + 0x38], xmm0
mov byte [rsp + 0x50], 0
call sub.MSVCR120.dll_memset
cmp dword [0x1402d4cd4], 0
je 0x14018d4bc
mov edx, 0x50
mov rcx, rbx
call fcn.140046d80
lea rax, [rdi + 0x308]
lea rcx, [rdi + 0x288]
lea r9, [rdi + 0x48]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, str._s_miner_header_address_sworker_s
lea rcx, [rsp + 0x250]
mov edx, 0x200
call sub.MSVCR120.dll__snprintf
cmp dword [0x1402d4cd4], 0
je 0x14018d50b
mov edx, 0x29
mov rcx, rsi
lea r8d, [rdx - 0x28]
call fcn.1400acfa0
lea r8, [rsp + 0x250]
mov edx, 0x2712
mov rcx, rsi
call fcn.1400acfa0
lea r8, [0x1401de1a2]
mov edx, 0x2776
mov rcx, rsi
call fcn.1400acfa0
xor r8d, r8d
mov rcx, rsi
lea edx, [r8 + 0x2d]
call fcn.1400acfa0
mov edx, 0x63
mov rcx, rsi
lea r8d, [rdx - 0x62]
call fcn.1400acfa0
mov edx, 0x79
mov rcx, rsi
lea r8d, [rdx - 0x78]
call fcn.1400acfa0
lea r8, [rsp + 0x150]
mov edx, 0x271a
mov rcx, rsi
call fcn.1400acfa0
mov edx, 0x34
mov rcx, rsi
lea r8d, [rdx - 0x33]
call fcn.1400acfa0
mov edx, reloc.WS2_32.dll_listen
mov rcx, rsi
lea r8d, [rdx - 3]
call fcn.1400acfa0
lea r8, [rsp + 0x38]
mov edx, 0x2711
mov rcx, rsi
call fcn.1400acfa0
lea r8, [0x14018d130]
mov edx, 0x4e2b
mov rcx, rsi
call fcn.1400acfa0
mov edx, 0x2f
mov rcx, rsi
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
lea r8d, [rdx - 0x2e]
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmm1, xmmword [rbx + 0x30]
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x80], xmm1
movups xmm0, xmmword [rbx + 0x40]
movaps xmmword [rsp + 0x90], xmm0
call fcn.1400acfa0
mov edx, 0x3c
lea r8d, [rdx + 0x14]
mov rcx, rsi
call fcn.1400acfa0
lea r8, [rsp + 0x50]
mov edx, 0x271f
mov rcx, rsi
call fcn.1400acfa0
lea rdx, [0x140249b90]
xor ecx, ecx
call fcn.1400acc80
lea rdx, [0x140249b98]
mov rcx, rax
call fcn.1400acc80
lea rdx, str.User_Agent:_Sia_Agent
mov rcx, rax
call fcn.1400acc80
mov edx, 0x2727
mov rcx, rsi
mov r8, rax
mov rbp, rax
call fcn.1400acfa0
mov rcx, rsi
call fcn.1400ad270
xor r14d, r14d
test eax, eax
mov edi, r14d
lea r8, [rsp + 0x30]
mov edx, 0x200002
mov rcx, rsi
sete dil
call fcn.1400ad280
mov r8d, dword [rsp + 0x30]
cmp r8d, 0xcc
je 0x14018d6ce
lea rcx, [rsp + 0x150]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r14b
jne 0x14018d6a7
test rax, rax
je 0x14018d6cb
lea r9, [rsp + 0x150]
lea rdx, str.submit_err__ld__s
xor ecx, ecx
call fcn.140041b60
mov edi, r14d
mov r9, qword [rsp + 0x38]
movzx edx, byte [rbx + 0x1cc]
movsd xmm2, qword [rbx + 0x1b8]
test edi, edi
mov ecx, edi
cmovne r9, r14
call fcn.140030ff0
mov rcx, rbp
call fcn.1400acce0
mov eax, 1
mov rcx, qword [rsp + 0x450]
xor rcx, rsp
call fcn.1401bb2c0
add rsp, 0x460
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x14018da70
Capabilities:
Hash data using sha256

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rdi
sub rsp, 0x50
xor edi, edi
lea r9, str._Z18skeincoin_gpu_hashjjPjj
lea r8, str._Z18skeincoin_gpu_hashjjPjj
mov qword [rax - 0x10], rdi
mov qword [rax - 0x18], rdi
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], rdi
mov qword [rax - 0x30], rdi
lea rdx, [0x14018dc50]
mov dword [rax - 0x38], 0xffffffff
mov rbx, rcx
mov qword [0x1402be658], rcx
mov qword [0x1402be168], rcx
call fcn.140003990
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, str.c_message16
lea r8, str.c_message16
lea rdx, [0x1402be270]
mov rcx, rbx
mov dword [rsp + 0x28], reloc.WS2_32.dll_recv
mov dword [rsp + 0x20], edi
call fcn.140003850
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, str.c_buffer
lea r8, str.c_buffer
lea rdx, [0x1402be280]
mov rcx, rbx
mov dword [rsp + 0x28], 0x1c0
mov dword [rsp + 0x20], edi
call fcn.140003850
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, [0x1401c3aa4]
lea r8, [0x1401c3aa4]
lea rdx, reloc.WS2_32.dll_htonl
mov rcx, rbx
mov dword [rsp + 0x28], 0x28
mov dword [rsp + 0x20], edi
call fcn.140003850
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, str.c_add
lea r8, str.c_add
lea rdx, reloc.WS2_32.dll_accept
mov rcx, rbx
mov dword [rsp + 0x28], __WSAFDIsSet
mov dword [rsp + 0x20], edi
call fcn.140003850
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, str.sha256_hashTable
lea r8, str.sha256_hashTable
lea rdx, [0x1401c3a00]
mov rcx, rbx
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], edi
call fcn.140003850
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, str.sha256_endingTable
lea r8, str.sha256_endingTable
lea rdx, [0x1402be440]
mov rcx, rbx
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], edi
call fcn.140003850
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, str.sha256_constantTable
lea r8, str.sha256_constantTable
lea rdx, [0x1402be540]
mov rcx, rbx
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], edi
call fcn.140003850
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rdi
ret
Function at 0x140194480
Capabilities:
Hash data using sha512

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rdi
sub rsp, 0x50
xor edi, edi
lea r9, str._Z26quark_blake512_gpu_hash_80jjP6uint28
lea r8, str._Z26quark_blake512_gpu_hash_80jjP6uint28
mov qword [rax - 0x10], rdi
mov qword [rax - 0x18], rdi
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], rdi
mov qword [rax - 0x30], rdi
lea rdx, [fcn.140195520]
mov dword [rax - 0x38], 0xffffffff
mov rbx, rcx
mov qword [0x1402c7e00], rcx
mov qword [0x1402c7858], rcx
call fcn.140003990
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
lea r9, str._Z26quark_blake512_gpu_hash_64jPKjP5uint2
lea r8, str._Z26quark_blake512_gpu_hash_64jPKjP5uint2
lea rdx, [fcn.1401954b0]
mov rcx, rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0xffffffff
call fcn.140003990
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, [0x1401c4e5c]
lea r8, [0x1401c4e5c]
lea rdx, [0x1402c7860]
mov rcx, rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], edi
call fcn.140003850
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, [0x1401c3934]
lea r8, [0x1401c3934]
lea rdx, [0x1402c78e0]
mov rcx, rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], edi
call fcn.140003850
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, [0x1401c4e60]
lea r8, [0x1401c4e60]
lea rdx, [0x1402c7960]
mov rcx, rbx
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], edi
call fcn.140003850
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, [0x1401c4e64]
lea r8, [0x1401c4e64]
lea rdx, [0x1402c7d60]
mov rcx, rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], edi
call fcn.140003850
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, [0x1401c4e68]
lea r8, [0x1401c4e68]
lea rdx, [0x1401c4ca0]
mov rcx, rbx
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], edi
call fcn.140003850
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, str.BMW512_IV
lea r8, str.BMW512_IV
lea rdx, [0x1401c4ce0]
mov rcx, rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], edi
call fcn.140003850
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, str.BMW512_FINAL
lea r8, str.BMW512_FINAL
lea rdx, [0x1401c4d60]
mov rcx, rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], edi
call fcn.140003850
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rdi
ret
Function at 0x1401aac60
Capabilities:
Hash data using sha512

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rdi
sub rsp, 0x50
xor edi, edi
lea r9, [0x1401cab40]
lea r8, [0x1401cab40]
mov qword [rax - 0x10], rdi
mov qword [rax - 0x18], rdi
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], rdi
mov qword [rax - 0x30], rdi
lea rdx, [0x1401ab180]
mov dword [rax - 0x38], 0xffffffff
mov rbx, rcx
mov qword [0x1402cccb0], rcx
mov qword [0x1402ccc70], rcx
call fcn.140003990
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
lea r9, str._Z19lyra2_gpu_hash_32_2j
lea r8, str._Z19lyra2_gpu_hash_32_2j
lea rdx, [0x1401ab140]
mov rcx, rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0xffffffff
call fcn.140003990
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
lea r9, str._Z19lyra2_gpu_hash_32_1jPK5uint2
lea r8, str._Z19lyra2_gpu_hash_32_1jPK5uint2
lea rdx, [0x1401ab0f0]
mov rcx, rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0xffffffff
call fcn.140003990
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
lea r9, str._Z17lyra2_gpu_hash_32jP5uint2
lea r8, str._Z17lyra2_gpu_hash_32jP5uint2
lea rdx, [0x1401ab0a0]
mov rcx, rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0xffffffff
call fcn.140003990
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, str.blake2b_IV
lea r8, str.blake2b_IV
lea rdx, [0x1401cab00]
mov rcx, rbx
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], edi
call fcn.140003850
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], edi
lea r9, str.DMatrix
lea r8, str.DMatrix
lea rdx, [0x1402ccc78]
mov rcx, rbx
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], edi
call fcn.140003850
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rdi
ret
Function at 0x1401ab990
Capabilities:
Hash data using sha512

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rdi
sub rsp, 0x50
xor edi, edi
lea r9, str._Z21lyra2v2_gpu_hash_32_3jPK5uint2PS_
lea r8, str._Z21lyra2v2_gpu_hash_32_3jPK5uint2PS_
mov qword [rax - 0x10], rdi
mov qword [rax - 0x18], rdi
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], rdi
mov qword [rax - 0x30], rdi
lea rdx, [fcn.1401abd30]
mov dword [rax - 0x38], 0xffffffff
mov rbx, rcx
mov qword [0x1402cce60], rcx
mov qword [0x1402cce30], rcx
call fcn.140003990
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
lea r9, str._Z21lyra2v2_gpu_hash_32_2jP5uint2
lea r8, str._Z21lyra2v2_gpu_hash_32_2jP5uint2
lea rdx, [0x1401abce0]
mov rcx, rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0xffffffff
call fcn.140003990
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
lea r9, str._Z21lyra2v2_gpu_hash_32_1jP5uint2PKS_
lea r8, str._Z21lyra2v2_gpu_hash_32_1jP5uint2PKS_
lea rdx, [fcn.1401abc70]
mov rcx, rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0xffffffff
call fcn.140003990
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, str.blake2b_IV
lea r8, str.blake2b_IV
lea rdx, [0x1401cac00]
mov rcx, rbx
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], edi
call fcn.140003850
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
lea r9, str.Mask
lea r8, str.Mask
lea rdx, [0x1401cac40]
mov rcx, rbx
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], edi
call fcn.140003850
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rdi
ret
Function at 0x1401b5dc0
Capabilities:
Get thread local storage value

Disassembly:
xor r8d, r8d
jmp 0x1401b8250
mov qword [rsp + 0x20], rbx
push rbp
push r14
push r15
sub rsp, 0x50
xor ebp, ebp
mov r15, r8
mov r14, rdx
mov rbx, rcx
mov dword [rsp + 0x70], ebp
test rcx, rcx
je 0x1401b8394
mov rax, qword [rcx]
test rax, rax
je 0x1401b8394
cmp rax, 0xffffffffffffffff
jne 0x1401b8298
call fcn.1401b8120
mov dword [rsp + 0x70], eax
test eax, 0xffffffef
jne 0x1401b82cf
mov qword [rsp + 0x80], rdi
mov rdi, qword [rbx]
lea rcx, [rdi + 0x18]
call fcn.1401b9c70
test eax, eax
jne 0x1401b82bf
inc dword [rdi]
lea rcx, [rdi + 0x18]
call fcn.1401b99b0
test eax, eax
je 0x1401b82e1
call qword [sym.imp.MSVCR120.dll__errno]
mov eax, dword [rax]
mov rdi, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x88]
add rsp, 0x50
pop r15
pop r14
pop rbp
ret
lea rax, [rsp + 0x70]
mov qword [rsp + 0x78], rsi
mov rsi, qword [0x1402d2898]
mov qword [rsp + 0x30], rax
lea rax, [0x1401b84f0]
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x20]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x40], rax
test rsi, rsi
je 0x1401b833e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [rsi]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, ebx
mov rbp, rax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rsi, qword [0x1402d2898]
lea rdx, [rsp + 0x38]
mov rcx, rsi
mov qword [rsp + 0x48], rbp
call fcn.1401b70f0
mov rcx, r14
call fcn.1401b6e60
mov rsi, qword [rsp + 0x78]
mov dword [rsp + 0x70], eax
test eax, eax
jne 0x1401b8381
lea rcx, [rdi + 0x10]
mov rdx, r15
call fcn.1401b9b30
test eax, eax
je 0x1401b8381
call qword [sym.imp.MSVCR120.dll__errno]
mov ecx, dword [rax]
mov dword [rsp + 0x70], ecx
mov ecx, 1
call fcn.1401b89c0
mov eax, dword [rsp + 0x70]
jmp 0x1401b82c7
mov eax, reloc.WS2_32.dll_shutdown
mov rbx, qword [rsp + 0x88]
add rsp, 0x50
pop r15
pop r14
pop rbp
ret
Function at 0x1401b5dd0
Capabilities:
Create thread
Resume thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x80
xor eax, eax
movaps xmmword [rsp + 0x70], xmm6
mov r14, r9
mov r12, r8
mov r13, rcx
mov ebx, reloc.WS2_32.dll_inet_addr
mov esi, eax
mov dword [rcx + 8], eax
test rdx, rdx
je 0x1401b5e0d
mov rdi, qword [rdx]
jmp 0x1401b5e10
mov rdi, rax
lea rcx, [rsp + 0x50]
mov qword [rsp + 0xb0], r15
call fcn.1401b88d0
movups xmm6, xmmword [rax]
movq rbp, xmm6
test rbp, rbp
je 0x1401b5f0d
mov r15d, dword [rbp + 0x188]
mov ecx, 0x20
call qword [sym.imp.MSVCR120.dll_malloc]
mov rsi, rax
test rax, rax
je 0x1401b5f0d
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r14
movups xmmword [rax], xmm6
test rdi, rdi
je 0x1401b5f05
mov eax, dword [rdi + 0x18]
mov r14d, dword [rdi + 0x10]
mov dword [rbp + 0x184], eax
cmp dword [rdi + 0x20], 0
mov r15d, dword [rdi + 0x1c]
jne 0x1401b5e90
lea rcx, [rsp + 0x60]
call fcn.1401b6fb0
mov rax, qword [rax]
mov r15d, dword [rax + 0x188]
xor r12d, r12d
lea rax, [rbp + 0x198]
lea r8, [0x1401b9410]
mov r9, rsi
mov qword [rsp + 0x28], rax
mov edx, r14d
xor ecx, ecx
mov dword [rbp + 0x28], r12d
mov qword [rbp + 0x58], r12
mov dword [rsp + 0x20], 4
call qword [sym.imp.MSVCR120.dll__beginthreadex]
mov r14, rax
mov qword [rbp + 8], rax
test rax, rax
je 0x1401b5ef3
test rdi, rdi
je 0x1401b5eea
lea rcx, [rsp + 0x30]
mov r8d, r15d
xor edx, edx
movdqa xmmword [rsp + 0x30], xmm6
call fcn.1401b8ee0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ResumeThread]
test r14, r14
cmovne ebx, r12d
test ebx, ebx
jne 0x1401b5f0d
movups xmmword [r13], xmm6
jmp 0x1401b5f2b
xor r12d, r12d
mov r14d, r12d
jmp 0x1401b5e93
lea rcx, [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm6
call fcn.1401b9090
test rsi, rsi
je 0x1401b5f2b
mov rcx, rsi
call qword [sym.imp.MSVCR120.dll_free]
mov r15, qword [rsp + 0xb0]
movaps xmm6, xmmword [rsp + 0x70]
lea r11, [rsp + 0x80]
mov rbp, qword [r11 + 0x40]
mov eax, ebx
mov rbx, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret
Function at 0x1401b6fb0
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x70
mov rdi, qword [0x1402d2890]
xor r15d, r15d
movaps xmmword [rsp + 0x60], xmm6
mov rsi, rcx
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x48], r15d
test rdi, rdi
je 0x1401b7012
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [rdi]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, ebx
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test rdi, rdi
je 0x1401b7012
movups xmm6, xmmword [rdi + 0x10]
jmp 0x1401b70c4
lea rcx, [rsp + 0x50]
call fcn.1401b88d0
movups xmm6, xmmword [rax]
movq rbp, xmm6
test rbp, rbp
je 0x1401b70c4
or dword [rbp + 0x194], 1
mov dword [rbp + 0x184], 1
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rbp + 0x198], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rsp + 0x30], 2
lea r9, [rbp + 8]
mov r8, rdi
mov rdx, rbx
mov rcx, rax
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
jne 0x1401b70a5
lea rcx, [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm6
call fcn.1401b92b0
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rsi], xmm0
jmp 0x1401b70c7
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov rdx, rbp
mov dword [rbp + 0x188], eax
mov rcx, qword [0x1402d2890]
call fcn.1401b70f0
movups xmmword [rsi], xmm6
movaps xmm6, xmmword [rsp + 0x60]
lea r11, [rsp + 0x70]
mov rax, rsi
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret