joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140053ad0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x50], rsi
mov rdi, r9
mov rsi, rdx
mov r10, rcx
movzx r9d, byte [r8]
movabs rax, 0xcbf29ce484222325
xor r9, rax
movabs rcx, 0x100000001b3
imul r9, rcx
movzx eax, byte [r8 + 1]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 2]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 3]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 4]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 5]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 6]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 7]
xor r9, rax
imul r9, rcx
mov r11, qword [r10 + 0x30]
and r11, r9
mov rbx, qword [r10 + 8]
mov rdx, r11
add rdx, rdx
mov rax, qword [r10 + 0x18]
mov rcx, qword [rax + rdx*8]
cmp rbx, rcx
je 0x140053bdb
mov rbx, qword [rax + rdx*8 + 8]
mov rbx, qword [rbx]
cmp rbx, rcx
je 0x140053bdb
mov rbx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
cmp qword [r8], rax
jne 0x140053b94
mov rcx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rcx], rax
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
dec qword [r10 + 0x10]
mov edx, 0x20
mov rcx, rdi
call fcn.140047a18
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
jmp 0x140053c71
mov rax, qword [rdi]
cmp rbx, rax
je 0x140053c10
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
shl r11, 4
mov rdx, qword [r10 + 0x18]
add rdx, r11
mov rax, qword [rdx]
cmp rax, qword [r10 + 8]
jne 0x140053c32
mov qword [rdx], rdi
mov rax, qword [r10 + 0x18]
mov qword [rax + r11 + 8], rdi
jmp 0x140053c5e
cmp rax, rbx
jne 0x140053c3c
mov qword [rdx], rdi
jmp 0x140053c5e
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x140053c5e
mov rdx, qword [r10 + 0x18]
mov rax, qword [rdx + r11 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r11 + 8], rcx
mov rcx, r10
call fcn.1400565d0
nop
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
Function at 0x140053e70
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rcx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rsi
mov rsi, rdx
mov r14, rcx
movzx r9d, byte [r8]
movabs rax, 0xcbf29ce484222325
xor r9, rax
movabs rcx, 0x100000001b3
imul r9, rcx
movzx eax, byte [r8 + 1]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 2]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 3]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 4]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 5]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 6]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 7]
xor r9, rax
imul r9, rcx
mov r12, qword [r14 + 0x30]
and r12, r9
mov rdi, qword [r14 + 8]
mov rbx, r12
add rbx, rbx
mov rax, qword [r14 + 0x18]
mov rcx, qword [rax + rbx*8]
cmp rcx, rdi
jne 0x140053f31
mov rbx, rdi
jmp 0x140053f40
mov rbx, qword [rax + rbx*8 + 8]
mov rbx, qword [rbx]
nop dword [rax]
cmp rbx, rcx
je 0x140053f61
mov rbx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
cmp qword [r8], rax
jne 0x140053f40
mov qword [rdx], rbx
mov byte [rdx + 8], 0
mov rax, rsi
jmp 0x14005404c
mov rdi, qword [rdi]
mov r13, qword [rdi + 8]
mov r9, r8
mov r8, r13
mov rdx, rdi
lea rcx, [r14 + 8]
call fcn.140053870
mov rdx, rax
mov rax, qword [r14 + 0x10]
movabs rcx, 0x7fffffffffffffe
sub rcx, rax
cmp rcx, 1
jb 0x140054064
inc rax
mov qword [r14 + 0x10], rax
mov qword [rdi + 8], rdx
mov qword [r13], rdx
mov rcx, qword [r14 + 8]
mov rdi, qword [rcx]
mov qword [rsp + 0x20], rdi
mov rax, qword [rdi]
cmp rbx, rax
je 0x140053fec
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rcx, qword [r14 + 8]
shl r12, 4
mov rdx, qword [r14 + 0x18]
add rdx, r12
mov rax, qword [rdx]
cmp rax, rcx
jne 0x14005400d
mov qword [rdx], rdi
mov rax, qword [r14 + 0x18]
mov qword [rax + r12 + 8], rdi
jmp 0x140054039
cmp rax, rbx
jne 0x140054017
mov qword [rdx], rdi
jmp 0x140054039
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x140054039
mov rdx, qword [r14 + 0x18]
mov rax, qword [rdx + r12 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r12 + 8], rcx
mov rcx, r14
call fcn.1400565d0
nop
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rcx, str.list_T__too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3
Function at 0x140054140
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
movzx r9d, byte [r8 + 0x10]
mov r10, rcx
movabs rcx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r9, rax
mov rdi, rdx
movzx eax, byte [r8 + 0x11]
mov rdx, qword [r10 + 0x30]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x12]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x13]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x14]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x15]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x16]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x17]
imul r9, rcx
xor r9, rax
imul r9, rcx
mov rcx, qword [r10 + 0x18]
and rdx, r9
shl rdx, 4
add rcx, rdx
mov rax, qword [rcx]
cmp qword [rcx + 8], r8
jne 0x140054204
cmp rax, r8
jne 0x1400541fa
mov rax, qword [r10 + 8]
mov qword [rcx], rax
mov rcx, qword [r10 + 0x18]
mov rax, qword [r10 + 8]
mov qword [rdx + rcx + 8], rax
jmp 0x14005420f
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
jmp 0x14005420f
cmp rax, r8
jne 0x14005420f
mov rax, qword [r8]
mov qword [rcx], rax
mov rax, qword [r8 + 8]
mov edx, 0x20
mov rbx, qword [r8]
mov qword [rax], rbx
mov rcx, qword [r8]
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
mov rcx, r8
dec qword [r10 + 0x10]
call fcn.140047a18
mov qword [rdi], rbx
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x140066de0
Capabilities:
Encrypt data using rc4 prga
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov r10, qword [rdx + 8]
xor r8d, r8d
mov r11, rcx
mov r9, r10
movzx eax, byte [r10]
test al, al
je 0x140066e27
nop dword [rax]
nop dword [rax + rax]
movsx rax, al
lea r8, [r8 + r8*4]
add r8, rax
lea r9, [r9 + 1]
movzx eax, byte [r9]
test al, al
jne 0x140066e10
mov rbx, qword [rdx]
mov rdx, qword [r11 + 0x18]
imul rcx, rbx, 0x1000193
xor rcx, r8
and rcx, qword [r11 + 0x30]
mov r11, qword [r11 + 8]
mov rax, rcx
add rax, rax
add rcx, rcx
mov rax, qword [rdx + rax*8]
mov rdi, qword [rdx + rcx*8]
lea rsi, [rdx + rcx*8]
cmp rdi, r11
jne 0x140066e5f
mov rcx, r11
jmp 0x140066e66
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
cmp rax, rcx
je 0x140066ecc
cmp qword [rax + 0x10], rbx
jne 0x140066e9a
mov rcx, qword [rax + 0x18]
mov r9, r10
sub r9, rcx
nop dword [rax + rax]
movzx r8d, byte [rcx]
movzx edx, byte [rcx + r9]
sub r8d, edx
jne 0x140066e95
inc rcx
test edx, edx
jne 0x140066e80
test r8d, r8d
je 0x140066e9f
mov rax, qword [rax]
jmp 0x140066e55
mov r8, qword [rax + 0x18]
sub r8, r10
nop word [rax + rax]
movzx edx, byte [r10]
movzx ecx, byte [r10 + r8]
sub edx, ecx
jne 0x140066ec4
inc r10
test ecx, ecx
jne 0x140066eb0
test edx, edx
cmovne rax, r11
jmp 0x140066ecf
mov rax, r11
cmp rax, r11
jne 0x140066ee6
xor eax, eax
mov rbx, qword [rsp + 8]
mov rsi, qword [rsp + 0x10]
mov rdi, qword [rsp + 0x18]
ret
mov rax, qword [rax + 0x20]
mov rbx, qword [rsp + 8]
mov rsi, qword [rsp + 0x10]
mov rdi, qword [rsp + 0x18]
ret
Function at 0x1400688f0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rdi, r9
mov rsi, rdx
mov r9, rcx
movsxd rdx, dword [r8 + 8]
mov r10, qword [r8]
imul r8, rdx, 0x1000193
imul rax, r10, 0x100011b
xor r8, rax
and r8, qword [rcx + 0x30]
mov rbx, qword [rcx + 8]
mov r11, r8
shl r11, 4
add r11, qword [rcx + 0x18]
mov rax, qword [r11]
cmp rbx, rax
je 0x140068999
mov rbx, qword [r11 + 8]
mov rbx, qword [rbx]
nop dword [rax]
cmp rbx, rax
je 0x140068999
mov rbx, qword [rbx + 8]
cmp r10, qword [rbx + 0x10]
jne 0x140068950
cmp edx, dword [rbx + 0x18]
jne 0x140068950
mov rcx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rcx], rax
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
dec qword [r9 + 0x10]
mov edx, 0x28
mov rcx, rdi
call fcn.140047a18
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
jmp 0x140068a2f
mov rax, qword [rdi]
cmp rbx, rax
je 0x1400689ce
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
shl r8, 4
mov rdx, qword [r9 + 0x18]
add rdx, r8
mov rax, qword [rdx]
cmp rax, qword [r9 + 8]
jne 0x1400689f0
mov qword [rdx], rdi
mov rax, qword [r9 + 0x18]
mov qword [r8 + rax + 8], rdi
jmp 0x140068a1c
cmp rax, rbx
jne 0x1400689fa
mov qword [rdx], rdi
jmp 0x140068a1c
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x140068a1c
mov rdx, qword [r9 + 0x18]
mov rax, qword [rdx + r8 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r8 + 8], rcx
mov rcx, r9
call fcn.140094070
nop
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
add rsp, 0x30
pop rdi
pop rsi
pop rbx
ret
Function at 0x140068a40
Capabilities:
Encrypt data using rc4 prga
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rdi, r9
mov r14, r8
mov rsi, rdx
mov r11, rcx
mov r10, qword [r8 + 8]
xor r9d, r9d
movzx eax, byte [r10]
test al, al
je 0x140068a97
nop dword [rax]
lea r9, [r9 + r9*4]
movsx rax, al
add r9, rax
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x140068a80
mov r15, qword [r8]
imul r10, r15, 0x1000193
xor r10, r9
and r10, qword [rcx + 0x30]
mov rbx, qword [rcx + 8]
shl r10, 4
mov rcx, qword [rcx + 0x18]
mov rax, qword [rcx + r10]
cmp rbx, rax
je 0x140068b2e
mov rbx, qword [rcx + r10 + 8]
mov rbx, qword [rbx]
cmp rbx, rax
je 0x140068b2e
mov rbx, qword [rbx + 8]
cmp r15, qword [rbx + 0x10]
jne 0x140068ac5
mov rcx, qword [r14 + 8]
mov r9, qword [rbx + 0x18]
sub r9, rcx
nop
movzx r8d, byte [rcx]
movzx edx, byte [rcx + r9]
sub r8d, edx
jne 0x140068af5
inc rcx
test edx, edx
jne 0x140068ae0
test r8d, r8d
jne 0x140068ac5
mov rcx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rcx], rax
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
dec qword [r11 + 0x10]
lea edx, [r8 + 0x28]
mov rcx, rdi
call fcn.140047a18
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
jmp 0x140068bc0
mov rax, qword [rdi]
cmp rbx, rax
je 0x140068b63
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rdx, qword [r11 + 0x18]
add rdx, r10
mov rax, qword [rdx]
cmp rax, qword [r11 + 8]
jne 0x140068b81
mov qword [rdx], rdi
mov rax, qword [r11 + 0x18]
mov qword [r10 + rax + 8], rdi
jmp 0x140068bad
cmp rax, rbx
jne 0x140068b8b
mov qword [rdx], rdi
jmp 0x140068bad
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x140068bad
mov rdx, qword [r11 + 0x18]
mov rax, qword [rdx + r10 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r10 + 8], rcx
mov rcx, r11
call fcn.140094110
nop
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
add rsp, 0x30
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret
Function at 0x140068bd0
Capabilities:
Encrypt data using rc4 prga
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rdi, r9
mov r14, r8
mov rsi, rdx
mov r11, rcx
mov r10, qword [r8 + 8]
xor r9d, r9d
movzx eax, byte [r10]
test al, al
je 0x140068c27
nop dword [rax]
lea r9, [r9 + r9*4]
movsx rax, al
add r9, rax
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x140068c10
mov r15, qword [r8]
imul r10, r15, 0x1000193
xor r10, r9
and r10, qword [rcx + 0x30]
mov rbx, qword [rcx + 8]
shl r10, 4
mov rcx, qword [rcx + 0x18]
mov rax, qword [rcx + r10]
cmp rbx, rax
je 0x140068cbe
mov rbx, qword [rcx + r10 + 8]
mov rbx, qword [rbx]
cmp rbx, rax
je 0x140068cbe
mov rbx, qword [rbx + 8]
cmp r15, qword [rbx + 0x10]
jne 0x140068c55
mov rcx, qword [r14 + 8]
mov r9, qword [rbx + 0x18]
sub r9, rcx
nop
movzx r8d, byte [rcx]
movzx edx, byte [rcx + r9]
sub r8d, edx
jne 0x140068c85
inc rcx
test edx, edx
jne 0x140068c70
test r8d, r8d
jne 0x140068c55
mov rcx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rcx], rax
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
dec qword [r11 + 0x10]
lea edx, [r8 + 0x30]
mov rcx, rdi
call fcn.140047a18
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
jmp 0x140068d50
mov rax, qword [rdi]
cmp rbx, rax
je 0x140068cf3
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rdx, qword [r11 + 0x18]
add rdx, r10
mov rax, qword [rdx]
cmp rax, qword [r11 + 8]
jne 0x140068d11
mov qword [rdx], rdi
mov rax, qword [r11 + 0x18]
mov qword [r10 + rax + 8], rdi
jmp 0x140068d3d
cmp rax, rbx
jne 0x140068d1b
mov qword [rdx], rdi
jmp 0x140068d3d
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x140068d3d
mov rdx, qword [r11 + 0x18]
mov rax, qword [rdx + r10 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r10 + 8], rcx
mov rcx, r11
call fcn.1400941b0
nop
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
add rsp, 0x30
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret
Function at 0x140068d60
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rdi, r9
mov r12, r8
mov r15, rcx
mov r13, qword [r8 + 0x10]
mov r9, qword [r8 + 0x18]
cmp r9, 0x10
jb 0x140068da1
mov r8, qword [r8]
movabs rdx, 0xcbf29ce484222325
xor ecx, ecx
test r13, r13
je 0x140068dd4
movabs r10, 0x100000001b3
nop dword [rax]
movzx eax, byte [rcx + r8]
xor rdx, rax
imul rdx, r10
inc rcx
cmp rcx, r13
jb 0x140068dc0
mov r14, qword [r15 + 0x30]
and r14, rdx
mov rbx, qword [r15 + 8]
add r14, r14
mov rax, qword [r15 + 0x18]
mov rsi, qword [rax + r14*8]
cmp rbx, rsi
je 0x140068e69
mov rbx, qword [rax + r14*8 + 8]
mov rbx, qword [rbx]
cmp rbx, rsi
je 0x140068e69
mov rbx, qword [rbx + 8]
lea rdx, [rbx + 0x10]
cmp qword [rbx + 0x28], 0x10
jb 0x140068e0f
mov rdx, qword [rbx + 0x10]
mov rcx, r12
cmp r9, 0x10
jb 0x140068e1c
mov rcx, qword [r12]
cmp r13, qword [rbx + 0x20]
jne 0x140068df7
mov r8, r13
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
mov r9, qword [r12 + 0x18]
jne 0x140068df7
lea rcx, [r15 + 8]
mov rdx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rdx], rax
mov rdx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rdx + 8], rax
dec qword [rcx + 8]
mov rdx, rdi
call fcn.140094b70
mov rax, qword [rsp + 0x78]
mov qword [rax], rbx
mov byte [rax + 8], 0
jmp 0x140068f6c
mov rax, qword [rdi]
cmp rbx, rax
je 0x140068e9e
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rdx, qword [r15 + 0x18]
mov rax, qword [rdx + r14*8]
cmp rax, qword [r15 + 8]
jne 0x140068ebb
mov qword [rdx + r14*8], rdi
mov rax, qword [r15 + 0x18]
mov qword [rax + r14*8 + 8], rdi
jmp 0x140068eea
cmp rax, rbx
jne 0x140068ec6
mov qword [rdx + r14*8], rdi
jmp 0x140068eea
mov rax, qword [rdx + r14*8 + 8]
mov rcx, qword [rax]
mov qword [rdx + r14*8 + 8], rcx
cmp rcx, rdi
je 0x140068eea
mov rdx, qword [r15 + 0x18]
mov rax, qword [rdx + r14*8 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r14*8 + 8], rcx
mov rax, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x38]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss xmm1, dword [0x1400e103c]
test rax, rax
jns 0x140068f0b
addss xmm0, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm2, rdx
test rdx, rdx
jns 0x140068f1c
addss xmm2, xmm1
divss xmm0, xmm2
comiss xmm0, dword [r15]
jbe 0x140068f5c
cmp rdx, 0x200
jae 0x140068f39
lea rdx, [rdx*8]
jmp 0x140068f4b
movabs rax, 0xfffffffffffffff
cmp rdx, rax
jae 0x140068f4b
add rdx, rdx
mov rcx, r15
call fcn.1400566c0
mov rcx, r15
call fcn.140094f60
nop
mov r9, qword [rsp + 0x78]
mov qword [r9], rdi
mov byte [r9 + 8], 1
mov rax, r9
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
Function at 0x140069500
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x50], rsi
mov rdi, r9
mov rsi, rdx
mov r10, rcx
movzx r9d, byte [r8]
movabs rax, 0xcbf29ce484222325
xor r9, rax
movabs rcx, 0x100000001b3
imul r9, rcx
movzx eax, byte [r8 + 1]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 2]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 3]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 4]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 5]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 6]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 7]
xor r9, rax
imul r9, rcx
mov r11, qword [r10 + 0x30]
and r11, r9
mov rbx, qword [r10 + 8]
mov rdx, r11
add rdx, rdx
mov rax, qword [r10 + 0x18]
mov rcx, qword [rax + rdx*8]
cmp rbx, rcx
je 0x14006960b
mov rbx, qword [rax + rdx*8 + 8]
mov rbx, qword [rbx]
cmp rbx, rcx
je 0x14006960b
mov rbx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
cmp qword [r8], rax
jne 0x1400695c4
mov rcx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rcx], rax
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
dec qword [r10 + 0x10]
mov edx, 0x18
mov rcx, rdi
call fcn.140047a18
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
jmp 0x1400696a1
mov rax, qword [rdi]
cmp rbx, rax
je 0x140069640
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
shl r11, 4
mov rdx, qword [r10 + 0x18]
add rdx, r11
mov rax, qword [rdx]
cmp rax, qword [r10 + 8]
jne 0x140069662
mov qword [rdx], rdi
mov rax, qword [r10 + 0x18]
mov qword [r11 + rax + 8], rdi
jmp 0x14006968e
cmp rax, rbx
jne 0x14006966c
mov qword [rdx], rdi
jmp 0x14006968e
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x14006968e
mov rdx, qword [r10 + 0x18]
mov rax, qword [rdx + r11 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r11 + 8], rcx
mov rcx, r10
call fcn.140094250
nop
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
Function at 0x1400696c0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rcx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x78], rsi
mov rsi, rdx
mov r14, rcx
movsxd rdx, dword [r8 + 8]
mov r9, qword [r8]
imul r15, rdx, 0x1000193
imul rax, r9, 0x100011b
xor r15, rax
and r15, qword [rcx + 0x30]
mov rdi, qword [rcx + 8]
mov rbx, r15
shl rbx, 4
add rbx, qword [rcx + 0x18]
mov rax, qword [rbx]
cmp rax, rdi
jne 0x140069723
mov rbx, rdi
jmp 0x140069730
mov rbx, qword [rbx + 8]
mov rbx, qword [rbx]
nop word [rax + rax]
cmp rbx, rax
je 0x140069753
mov rbx, qword [rbx + 8]
cmp r9, qword [rbx + 0x10]
jne 0x140069730
cmp edx, dword [rbx + 0x18]
jne 0x140069730
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
jmp 0x14006983e
mov rdi, qword [rdi]
mov r13, qword [rdi + 8]
mov r9, r8
mov r8, r13
mov rdx, rdi
add rcx, 8
call fcn.140067010
mov rdx, rax
mov rax, qword [r14 + 0x10]
movabs rcx, 0x666666666666665
sub rcx, rax
cmp rcx, 1
jb 0x140069856
inc rax
mov qword [r14 + 0x10], rax
mov qword [rdi + 8], rdx
mov qword [r13], rdx
mov rcx, qword [r14 + 8]
mov rdi, qword [rcx]
mov qword [rsp + 0x70], rdi
mov rax, qword [rdi]
cmp rbx, rax
je 0x1400697de
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rcx, qword [r14 + 8]
shl r15, 4
mov rdx, qword [r14 + 0x18]
add rdx, r15
mov rax, qword [rdx]
cmp rax, rcx
jne 0x1400697ff
mov qword [rdx], rdi
mov rax, qword [r14 + 0x18]
mov qword [r15 + rax + 8], rdi
jmp 0x14006982b
cmp rax, rbx
jne 0x140069809
mov qword [rdx], rdi
jmp 0x14006982b
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x14006982b
mov rdx, qword [r14 + 0x18]
mov rax, qword [rdx + r15 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r15 + 8], rcx
mov rcx, r14
call fcn.140094070
nop
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rcx, str.list_T__too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3