joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14009b976
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbp
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x70
lea rbp, [rsp + 0x70]
mov qword [rbp - 8], 0xfffffffffffffffe
mov r12, r8
mov r14, rdx
mov r15, rcx
mov rax, qword [r8 + 0x10]
cmp qword [r8 + 0x18], 0x10
mov rcx, r8
jb 0x14009b9ac
mov rcx, qword [r12]
test rax, rax
je 0x14009b9df
movabs rsi, 0xcbf29ce484222325
xor edx, edx
movabs rdi, 0x100000001b3
movzx ebx, byte [rcx + rdx]
xor rbx, rsi
imul rbx, rdi
inc rdx
mov rsi, rbx
cmp rax, rdx
jne 0x14009b9c7
jmp 0x14009b9e9
movabs rbx, 0xcbf29ce484222325
lea rdi, [rbp - 0x30]
mov rcx, r15
mov rdx, rdi
mov r8, r12
mov r9, rbx
call fcn.140009690
mov rax, qword [rdi + 8]
test rax, rax
je 0x14009ba14
mov qword [r14], rax
mov byte [r14 + 8], 0
jmp 0x14009baf6
movabs rax, 0x3ffffffffffffff
cmp qword [r15 + 0x10], rax
je 0x14009bb08
lea r9, [rbp - 0x40]
mov qword [r9], r12
lea rdx, [r15 + 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
lea r8, [0x140114e98]
lea rcx, [rbp - 0x20]
call fcn.14009bb46
mov rcx, qword [r15 + 0x10]
mov rax, qword [r15 + 0x38]
inc rcx
js 0x14009ba60
cvtsi2ss xmm0, rcx
jmp 0x14009ba75
mov rdx, rcx
shr rdx, 1
and ecx, 1
or rcx, rdx
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
test rax, rax
js 0x14009ba81
cvtsi2ss xmm1, rax
jmp 0x14009ba96
mov rcx, rax
shr rcx, 1
and eax, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
ucomiss xmm0, dword [r15]
jbe 0x14009bac7
mov rcx, r15
call fcn.1400097a8
mov r8, qword [rbp - 0x18]
add r8, 0x10
lea rdx, [rbp - 0x40]
mov rcx, r15
mov r9, rbx
call fcn.140009690
movups xmm0, xmmword [rbp - 0x40]
movaps xmmword [rbp - 0x30], xmm0
lea rsi, [rbp - 0x20]
mov r9, qword [rsi + 8]
mov qword [rsi + 8], 0
mov r8, qword [rbp - 0x30]
mov rcx, r15
mov rdx, rbx
call fcn.14000984c
mov qword [r14], rax
mov byte [r14 + 8], 1
mov rcx, rsi
call fcn.14009bbd0
mov rax, r14
add rsp, 0x70
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
pop rbp
ret
lea rcx, str.unordered_map_set_too_long
call fcn.1400e8940
int3
Function at 0x14009bd2c
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbp
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x70
lea rbp, [rsp + 0x70]
mov qword [rbp - 8], 0xfffffffffffffffe
mov r12, r8
mov r14, rdx
mov r15, rcx
mov rax, qword [r8 + 0x10]
cmp qword [r8 + 0x18], 0x10
mov rcx, r8
jb 0x14009bd62
mov rcx, qword [r12]
test rax, rax
je 0x14009bd95
movabs rsi, 0xcbf29ce484222325
xor edx, edx
movabs rdi, 0x100000001b3
movzx ebx, byte [rcx + rdx]
xor rbx, rsi
imul rbx, rdi
inc rdx
mov rsi, rbx
cmp rax, rdx
jne 0x14009bd7d
jmp 0x14009bd9f
movabs rbx, 0xcbf29ce484222325
lea rdi, [rbp - 0x30]
mov rcx, r15
mov rdx, rdi
mov r8, r12
mov r9, rbx
call fcn.140009690
mov rax, qword [rdi + 8]
test rax, rax
je 0x14009bdca
mov qword [r14], rax
mov byte [r14 + 8], 0
jmp 0x14009beac
movabs rax, 0x3ffffffffffffff
cmp qword [r15 + 0x10], rax
je 0x14009bebe
lea r9, [rbp - 0x40]
mov qword [r9], r12
lea rdx, [r15 + 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
lea r8, [0x140114e98]
lea rcx, [rbp - 0x20]
call fcn.14009bb46
mov rcx, qword [r15 + 0x10]
mov rax, qword [r15 + 0x38]
inc rcx
js 0x14009be16
cvtsi2ss xmm0, rcx
jmp 0x14009be2b
mov rdx, rcx
shr rdx, 1
and ecx, 1
or rcx, rdx
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
test rax, rax
js 0x14009be37
cvtsi2ss xmm1, rax
jmp 0x14009be4c
mov rcx, rax
shr rcx, 1
and eax, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
ucomiss xmm0, dword [r15]
jbe 0x14009be7d
mov rcx, r15
call fcn.1400097a8
mov r8, qword [rbp - 0x18]
add r8, 0x10
lea rdx, [rbp - 0x40]
mov rcx, r15
mov r9, rbx
call fcn.140009690
movups xmm0, xmmword [rbp - 0x40]
movaps xmmword [rbp - 0x30], xmm0
lea rsi, [rbp - 0x20]
mov r9, qword [rsi + 8]
mov qword [rsi + 8], 0
mov r8, qword [rbp - 0x30]
mov rcx, r15
mov rdx, rbx
call fcn.14000984c
mov qword [r14], rax
mov byte [r14 + 8], 1
mov rcx, rsi
call fcn.140022952
mov rax, r14
add rsp, 0x70
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
pop rbp
ret
lea rcx, str.unordered_map_set_too_long
call fcn.1400e8940
int3
Function at 0x14009c110
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
cmp rdx, r8
je 0x14009c13e
mov r15, r8
mov rax, qword [rdx + 0x20]
cmp qword [rdx + 0x28], 0x10
jb 0x14009c146
mov rbx, qword [rdx + 0x10]
jmp 0x14009c14a
mov r15, rdx
jmp 0x14009c30a
lea rbx, [rdx + 0x10]
movabs r9, 0xcbf29ce484222325
mov qword [rbp - 0x20], rcx
mov r8, qword [rcx + 0x18]
mov rsi, r9
test rax, rax
je 0x14009c189
movabs r10, 0x100000001b3
xor edi, edi
mov rcx, r9
movzx esi, byte [rbx + rdi]
xor rsi, rcx
imul rsi, r10
inc rdi
mov rcx, rsi
cmp rax, rdi
jne 0x14009c173
mov rbx, qword [rbp - 0x20]
lea rax, [rbx + 8]
mov qword [rbp - 0x28], rax
mov rax, qword [rbx + 8]
mov qword [rbp - 0x10], rax
mov rax, qword [rdx + 8]
mov qword [rbp - 0x18], rax
and rsi, qword [rbx + 0x30]
lea rax, [rsi + rsi]
mov rcx, rsi
shl rcx, 4
lea rdi, [r8 + rcx]
mov qword [rbp], rdi
lea rdi, [rsi + rsi]
inc rdi
mov qword [rbp - 0x38], rdi
mov rcx, qword [r8 + rcx]
mov qword [rbp - 0x30], rcx
cmp rcx, rdx
setne r13b
mov qword [rbp - 8], r8
mov r12, qword [r8 + rax*8 + 8]
mov rsi, rdx
mov r14, rdx
mov rdi, r14
mov r14, qword [r14]
mov rcx, qword [rbp - 0x28]
mov rdx, rdi
call fcn.1400224e0
dec qword [rbx + 0x10]
cmp rdi, r12
je 0x14009c21b
cmp r14, r15
setne al
or al, r13b
cmp al, 1
jne 0x14009c2f8
cmp r14, r15
jne 0x14009c1e5
jmp 0x14009c2ff
mov rax, qword [rbp - 0x18]
cmp qword [rbp - 0x30], rsi
jne 0x14009c230
mov rax, qword [rbp - 0x10]
mov rcx, qword [rbp]
mov qword [rcx], rax
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp - 0x38]
mov qword [rcx + rdx*8], rax
cmp r14, r15
je 0x14009c2ff
movabs r12, 0x100000001b3
cmp qword [r14 + 0x28], 0x10
jb 0x14009c25c
mov rax, qword [r14 + 0x10]
jmp 0x14009c260
lea rax, [r14 + 0x10]
movabs rsi, 0xcbf29ce484222325
mov r8, qword [rbp - 8]
mov rcx, qword [r14 + 0x20]
mov rdx, rsi
test rcx, rcx
je 0x14009c292
xor edi, edi
movzx edx, byte [rax + rdi]
xor rdx, rsi
imul rdx, r12
inc rdi
mov rsi, rdx
cmp rcx, rdi
jne 0x14009c27c
mov rsi, qword [rbp - 0x20]
and rdx, qword [rsi + 0x30]
lea rax, [rdx + rdx]
mov rbx, rdx
shl rbx, 4
add rbx, r8
lea rcx, [rdx + rdx]
inc rcx
mov qword [rbp], rcx
mov r13, qword [r8 + rax*8 + 8]
mov rdi, r14
mov r14, qword [r14]
mov rcx, qword [rbp - 0x28]
mov rdx, rdi
call fcn.1400224e0
dec qword [rsi + 0x10]
cmp rdi, r13
je 0x14009c2da
cmp r14, r15
jne 0x14009c2b8
jmp 0x14009c2fc
mov rcx, qword [rbp - 0x10]
mov qword [rbx], rcx
mov rax, qword [rbp - 8]
mov rdx, qword [rbp]
mov qword [rax + rdx*8], rcx
cmp r14, r15
jne 0x14009c24f
jmp 0x14009c2ff
mov rbx, qword [rbp]
mov qword [rbx], r15
mov rax, qword [rbp - 0x18]
mov qword [rax], r15
mov qword [r15 + 8], rax
mov rax, r15
add rsp, 0x68
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
Function at 0x14009c370
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x88
lea rbp, [rsp + 0x80]
mov rbx, rdx
mov rax, qword [0x140196d40]
xor rax, rbp
mov qword [rbp], rax
cmp rdx, r8
je 0x14009c472
mov rsi, r8
movabs rdx, 0xcbf29ce484222325
movabs r13, 0x100000001b3
lea rax, [rcx + 8]
mov rdi, qword [rcx + 8]
mov qword [rbp - 0x30], rdi
mov r8, qword [rcx + 0x18]
mov qword [rbp - 0x20], rax
mov rax, qword [rbx + 8]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], rbx
mov rax, qword [rbx + 0x10]
mov qword [rbp - 8], rax
xor edi, edi
mov rax, rdx
movzx edx, byte [rbp + rdi - 8]
xor rax, rdx
imul rax, r13
inc rdi
cmp rdi, 8
jne 0x14009c3ed
mov qword [rbp - 0x58], rcx
and rax, qword [rcx + 0x30]
lea rcx, [rax + rax]
mov rdx, rax
shl rdx, 4
lea rdi, [r8 + rdx]
mov qword [rbp - 0x28], rdi
add rax, rax
inc rax
mov qword [rbp - 0x48], rax
mov rax, qword [r8 + rdx]
mov qword [rbp - 0x40], rax
cmp rax, rbx
setne r14b
mov qword [rbp - 0x38], r8
mov r15, qword [r8 + rcx*8 + 8]
lea rdi, [rbp - 0x20]
mov r12, rbx
mov rcx, rdi
call fcn.14009c56c
cmp r12, r15
je 0x14009c47a
mov r12, qword [rbp - 0x10]
cmp r12, rsi
setne al
or al, r14b
cmp al, 1
jne 0x14009c533
cmp r12, rsi
jne 0x14009c446
jmp 0x14009c53a
mov rsi, rbx
jmp 0x14009c549
cmp qword [rbp - 0x40], rbx
mov rcx, qword [rbp - 0x50]
jne 0x14009c492
mov rax, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x28]
mov qword [rcx], rax
mov rcx, rax
mov rax, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x48]
mov qword [rax + rdx*8], rcx
mov rdi, qword [rbp - 0x10]
cmp rdi, rsi
je 0x14009c53a
lea r12, [rbp - 0x20]
mov r15, qword [rbp - 0x38]
mov rax, qword [rdi + 0x10]
mov qword [rbp - 8], rax
xor ecx, ecx
movabs rax, 0xcbf29ce484222325
movzx edx, byte [rbp + rcx - 8]
xor rax, rdx
imul rax, r13
inc rcx
cmp rcx, 8
jne 0x14009c4c7
mov rcx, qword [rbp - 0x58]
and rax, qword [rcx + 0x30]
lea rcx, [rax + rax]
mov r14, rax
shl r14, 4
add r14, r15
add rax, rax
inc rax
mov qword [rbp - 0x28], rax
mov rbx, qword [r15 + rcx*8 + 8]
mov rcx, r12
call fcn.14009c56c
cmp rdi, rbx
je 0x14009c519
mov rdi, qword [rbp - 0x10]
cmp rdi, rsi
jne 0x14009c501
jmp 0x14009c537
mov rax, qword [rbp - 0x30]
mov qword [r14], rax
mov rcx, qword [rbp - 0x28]
mov qword [r15 + rcx*8], rax
mov rdi, qword [rbp - 0x10]
cmp rdi, rsi
jne 0x14009c4b3
jmp 0x14009c53a
mov r14, qword [rbp - 0x28]
mov qword [r14], rsi
mov rax, qword [rbp - 0x18]
mov rcx, qword [rbp - 0x10]
mov qword [rax], rcx
mov qword [rcx + 8], rax
mov rcx, qword [rbp]
xor rcx, rbp
call fcn.1400e77c0
mov rax, rsi
add rsp, 0x88
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
Function at 0x14009c5ba
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
cmp rdx, r8
je 0x14009c5e8
mov r15, r8
mov rax, qword [rdx + 0x20]
cmp qword [rdx + 0x28], 0x10
jb 0x14009c5f0
mov rbx, qword [rdx + 0x10]
jmp 0x14009c5f4
mov r15, rdx
jmp 0x14009c7b4
lea rbx, [rdx + 0x10]
movabs r9, 0xcbf29ce484222325
mov qword [rbp - 0x20], rcx
mov r8, qword [rcx + 0x18]
mov rsi, r9
test rax, rax
je 0x14009c633
movabs r10, 0x100000001b3
xor edi, edi
mov rcx, r9
movzx esi, byte [rbx + rdi]
xor rsi, rcx
imul rsi, r10
inc rdi
mov rcx, rsi
cmp rax, rdi
jne 0x14009c61d
mov rbx, qword [rbp - 0x20]
lea rax, [rbx + 8]
mov qword [rbp - 0x28], rax
mov rax, qword [rbx + 8]
mov qword [rbp - 0x10], rax
mov rax, qword [rdx + 8]
mov qword [rbp - 0x18], rax
and rsi, qword [rbx + 0x30]
lea rax, [rsi + rsi]
mov rcx, rsi
shl rcx, 4
lea rdi, [r8 + rcx]
mov qword [rbp], rdi
lea rdi, [rsi + rsi]
inc rdi
mov qword [rbp - 0x38], rdi
mov rcx, qword [r8 + rcx]
mov qword [rbp - 0x30], rcx
cmp rcx, rdx
setne r13b
mov qword [rbp - 8], r8
mov r12, qword [r8 + rax*8 + 8]
mov rsi, rdx
mov r14, rdx
mov rdi, r14
mov r14, qword [r14]
mov rcx, qword [rbp - 0x28]
mov rdx, rdi
call fcn.140099b78
dec qword [rbx + 0x10]
cmp rdi, r12
je 0x14009c6c5
cmp r14, r15
setne al
or al, r13b
cmp al, 1
jne 0x14009c7a2
cmp r14, r15
jne 0x14009c68f
jmp 0x14009c7a9
mov rax, qword [rbp - 0x18]
cmp qword [rbp - 0x30], rsi
jne 0x14009c6da
mov rax, qword [rbp - 0x10]
mov rcx, qword [rbp]
mov qword [rcx], rax
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp - 0x38]
mov qword [rcx + rdx*8], rax
cmp r14, r15
je 0x14009c7a9
movabs r12, 0x100000001b3
cmp qword [r14 + 0x28], 0x10
jb 0x14009c706
mov rax, qword [r14 + 0x10]
jmp 0x14009c70a
lea rax, [r14 + 0x10]
movabs rsi, 0xcbf29ce484222325
mov r8, qword [rbp - 8]
mov rcx, qword [r14 + 0x20]
mov rdx, rsi
test rcx, rcx
je 0x14009c73c
xor edi, edi
movzx edx, byte [rax + rdi]
xor rdx, rsi
imul rdx, r12
inc rdi
mov rsi, rdx
cmp rcx, rdi
jne 0x14009c726
mov rsi, qword [rbp - 0x20]
and rdx, qword [rsi + 0x30]
lea rax, [rdx + rdx]
mov rbx, rdx
shl rbx, 4
add rbx, r8
lea rcx, [rdx + rdx]
inc rcx
mov qword [rbp], rcx
mov r13, qword [r8 + rax*8 + 8]
mov rdi, r14
mov r14, qword [r14]
mov rcx, qword [rbp - 0x28]
mov rdx, rdi
call fcn.140099b78
dec qword [rsi + 0x10]
cmp rdi, r13
je 0x14009c784
cmp r14, r15
jne 0x14009c762
jmp 0x14009c7a6
mov rcx, qword [rbp - 0x10]
mov qword [rbx], rcx
mov rax, qword [rbp - 8]
mov rdx, qword [rbp]
mov qword [rax + rdx*8], rcx
cmp r14, r15
jne 0x14009c6f9
jmp 0x14009c7a9
mov rbx, qword [rbp]
mov qword [rbx], r15
mov rax, qword [rbp - 0x18]
mov qword [rax], r15
mov qword [r15 + 8], rax
mov rax, r15
add rsp, 0x68
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
Function at 0x14009c81a
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x20
lea rbp, [rsp + 0x20]
mov r8, qword [rdx + 0x20]
cmp qword [rdx + 0x28], 0x10
jb 0x14009c837
mov r9, qword [rdx + 0x10]
jmp 0x14009c83b
lea r9, [rdx + 0x10]
movabs r10, 0xcbf29ce484222325
test r8, r8
je 0x14009c86f
xor esi, esi
movabs r11, 0x100000001b3
movzx edi, byte [r9 + rsi]
xor rdi, r10
imul rdi, r11
inc rsi
mov r10, rdi
cmp r8, rsi
jne 0x14009c856
jmp 0x14009c872
mov rdi, r10
and rdi, qword [rcx + 0x30]
mov rsi, qword [rcx + 0x18]
lea r8, [rdi + rdi]
mov rax, rdi
shl rax, 4
mov r9, qword [rsi + rax]
cmp qword [rsi + r8*8 + 8], rdx
je 0x14009c89e
cmp r9, rdx
jne 0x14009c8bc
mov rax, qword [rdx]
mov qword [rsi + r8*8], rax
jmp 0x14009c8bc
lea rax, [rdi + rdi]
inc rax
cmp r9, rdx
je 0x14009c8b0
mov rdi, qword [rdx + 8]
jmp 0x14009c8b8
mov rdi, qword [rcx + 8]
mov qword [rsi + r8*8], rdi
mov qword [rsi + rax*8], rdi
mov rsi, qword [rdx]
dec qword [rcx + 0x10]
add rcx, 8
mov rax, qword [rdx + 8]
mov qword [rax], rsi
mov qword [rsi + 8], rax
call fcn.140099b78
mov rax, rsi
add rsp, 0x20
pop rdi
pop rsi
pop rbp
ret
Function at 0x14009ce2c
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbp
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x70
lea rbp, [rsp + 0x70]
mov qword [rbp - 8], 0xfffffffffffffffe
mov r12, r8
mov r14, rdx
mov r15, rcx
mov rax, qword [r8 + 0x10]
cmp qword [r8 + 0x18], 0x10
mov rcx, r8
jb 0x14009ce62
mov rcx, qword [r12]
test rax, rax
je 0x14009ce95
movabs rsi, 0xcbf29ce484222325
xor edx, edx
movabs rdi, 0x100000001b3
movzx ebx, byte [rcx + rdx]
xor rbx, rsi
imul rbx, rdi
inc rdx
mov rsi, rbx
cmp rax, rdx
jne 0x14009ce7d
jmp 0x14009ce9f
movabs rbx, 0xcbf29ce484222325
lea rdi, [rbp - 0x30]
mov rcx, r15
mov rdx, rdi
mov r8, r12
mov r9, rbx
call fcn.140009690
mov rax, qword [rdi + 8]
test rax, rax
je 0x14009ceca
mov qword [r14], rax
mov byte [r14 + 8], 0
jmp 0x14009cfac
movabs rax, 0x492492492492492
cmp qword [r15 + 0x10], rax
je 0x14009cfbe
lea r9, [rbp - 0x40]
mov qword [r9], r12
lea rdx, [r15 + 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
lea r8, [0x140114e98]
lea rcx, [rbp - 0x20]
call fcn.14009cffc
mov rcx, qword [r15 + 0x10]
mov rax, qword [r15 + 0x38]
inc rcx
js 0x14009cf16
cvtsi2ss xmm0, rcx
jmp 0x14009cf2b
mov rdx, rcx
shr rdx, 1
and ecx, 1
or rcx, rdx
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
test rax, rax
js 0x14009cf37
cvtsi2ss xmm1, rax
jmp 0x14009cf4c
mov rcx, rax
shr rcx, 1
and eax, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
ucomiss xmm0, dword [r15]
jbe 0x14009cf7d
mov rcx, r15
call fcn.1400097a8
mov r8, qword [rbp - 0x18]
add r8, 0x10
lea rdx, [rbp - 0x40]
mov rcx, r15
mov r9, rbx
call fcn.140009690
movups xmm0, xmmword [rbp - 0x40]
movaps xmmword [rbp - 0x30], xmm0
lea rsi, [rbp - 0x20]
mov r9, qword [rsi + 8]
mov qword [rsi + 8], 0
mov r8, qword [rbp - 0x30]
mov rcx, r15
mov rdx, rbx
call fcn.14000984c
mov qword [r14], rax
mov byte [r14 + 8], 1
mov rcx, rsi
call fcn.14009d09c
mov rax, r14
add rsp, 0x70
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
pop rbp
ret
lea rcx, str.unordered_map_set_too_long
call fcn.1400e8940
int3

Function at 0x14009ecec
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbp
push rsi
push rdi
push rbx
sub rsp, 0x38
lea rbp, [rsp + 0x30]
mov rsi, rdx
mov rdi, rcx
mov rax, qword [0x140196d40]
xor rax, rbp
mov qword [rbp], rax
mov rax, qword [r8]
mov qword [rbp - 0x10], rax
movabs r9, 0xcbf29ce484222325
xor eax, eax
movabs rcx, 0x100000001b3
movzx edx, byte [rbp + rax - 0x10]
xor r9, rdx
imul r9, rcx
inc rax
cmp rax, 8
jne 0x14009ed2a
lea rbx, [rbp - 0x10]
mov rcx, rdi
mov rdx, rbx
call fcn.14009b462
mov rax, qword [rbx + 8]
test rax, rax
jne 0x14009ed5b
mov rax, qword [rdi + 8]
mov qword [rsi], rax
mov rcx, qword [rbp]
xor rcx, rbp
call fcn.1400e77c0
mov rax, rsi
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400b0a7a
Capabilities:
Parse pe header

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0x170
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xe8], 0xfffffffffffffffe
mov r14, r8
mov rbx, rdx
mov rsi, rcx
lea rdi, [rcx + 0x20]
mov rcx, rdi
call fcn.1400b1078
lea r9, [rbp - 0x58]
mov r8d, 0x40
mov rcx, rsi
mov rdx, rax
call fcn.1400c9fe6
test al, al
je 0x1400b0b21
movzx eax, word [rbp - 0x58]
cmp eax, 0x5a4d
jne 0x1400b0b76
mov rcx, rdi
call fcn.1400b1078
movsxd rdi, dword [rbp - 0x1c]
add rdi, rax
mov r8d, 0x108
mov rcx, rsi
mov rdx, rdi
mov r9, rbx
call fcn.1400c9fe6
test al, al
je 0x1400b0bcb
cmp dword [rbx], 0x4550
jne 0x1400b0c1d
mov al, 1
test r14, r14
je 0x1400b0c78
mov qword [r14], rdi
jmp 0x1400b0c78
mov dword [rsp + 0x20], 1
lea rdx, str.bool___cdecl_crashpad::PEImageReader::ReadNtHeaders_NtHeadersType___crashpad::WinVMAddress___const__NtHeadersType___IMAGE_NT_HEADERS64_
lea r8, str.xplat_third_partycrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rbp - 0x18]
mov rcx, rdi
mov r9d, 0x154
call fcn.1400366da
lea rdx, str.could_not_read_dos_header_from
mov rcx, rdi
call fcn.14000345f
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x1400b0b66
mov rsi, qword [rsi]
mov rcx, rax
mov rdx, rsi
call fcn.140004e8c
jmp 0x1400b0c6d
mov dword [rsp + 0x20], 1
lea rdx, str.bool___cdecl_crashpad::PEImageReader::ReadNtHeaders_NtHeadersType___crashpad::WinVMAddress___const__NtHeadersType___IMAGE_NT_HEADERS64_
lea r8, str.xplat_third_partycrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rbp - 0x18]
mov rcx, rdi
mov r9d, 0x15a
call fcn.1400366da
lea rdx, str.invalid_e_magic_in_dos_header_of
mov rcx, rdi
call fcn.14000345f
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x1400b0bbb
mov rsi, qword [rsi]
mov rcx, rax
mov rdx, rsi
call fcn.140004e8c
jmp 0x1400b0c6d
mov dword [rsp + 0x20], 1
lea rdx, str.bool___cdecl_crashpad::PEImageReader::ReadNtHeaders_NtHeadersType___crashpad::WinVMAddress___const__NtHeadersType___IMAGE_NT_HEADERS64_
lea r8, str.xplat_third_partycrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rbp - 0x18]
mov rcx, rdi
mov r9d, 0x162
call fcn.1400366da
lea rdx, str.could_not_read_nt_headers_from
mov rcx, rdi
call fcn.14000345f
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x1400b0c10
mov rsi, qword [rsi]
mov rcx, rax
mov rdx, rsi
call fcn.140004e8c
jmp 0x1400b0c6d
mov dword [rsp + 0x20], 1
lea rdx, str.bool___cdecl_crashpad::PEImageReader::ReadNtHeaders_NtHeadersType___crashpad::WinVMAddress___const__NtHeadersType___IMAGE_NT_HEADERS64_
lea r8, str.xplat_third_partycrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rbp - 0x18]
mov rcx, rdi
mov r9d, 0x168
call fcn.1400366da
lea rdx, str.invalid_signature_in_nt_headers_of
mov rcx, rdi
call fcn.14000345f
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x1400b0c62
mov rsi, qword [rsi]
mov rcx, rax
mov rdx, rsi
call fcn.140004e8c
lea rcx, [rbp - 0x18]
call fcn.140036d3a
xor eax, eax
add rsp, 0x170
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret
Function at 0x1400b0d36
Capabilities:
Parse pe header

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0x170
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xe8], 0xfffffffffffffffe
mov r14, r8
mov rbx, rdx
mov rsi, rcx
lea rdi, [rcx + 0x20]
mov rcx, rdi
call fcn.1400b1078
lea r9, [rbp - 0x58]
mov r8d, 0x40
mov rcx, rsi
mov rdx, rax
call fcn.1400c9fe6
test al, al
je 0x1400b0ddd
movzx eax, word [rbp - 0x58]
cmp eax, 0x5a4d
jne 0x1400b0e32
mov rcx, rdi
call fcn.1400b1078
movsxd rdi, dword [rbp - 0x1c]
add rdi, rax
mov r8d, 0xf8
mov rcx, rsi
mov rdx, rdi
mov r9, rbx
call fcn.1400c9fe6
test al, al
je 0x1400b0e87
cmp dword [rbx], 0x4550
jne 0x1400b0ed9
mov al, 1
test r14, r14
je 0x1400b0f34
mov qword [r14], rdi
jmp 0x1400b0f34
mov dword [rsp + 0x20], 1
lea rdx, str.bool___cdecl_crashpad::PEImageReader::ReadNtHeaders_NtHeadersType___crashpad::WinVMAddress___const__NtHeadersType___IMAGE_NT_HEADERS_
lea r8, str.xplat_third_partycrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rbp - 0x18]
mov rcx, rdi
mov r9d, 0x154
call fcn.1400366da
lea rdx, str.could_not_read_dos_header_from
mov rcx, rdi
call fcn.14000345f
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x1400b0e22
mov rsi, qword [rsi]
mov rcx, rax
mov rdx, rsi
call fcn.140004e8c
jmp 0x1400b0f29
mov dword [rsp + 0x20], 1
lea rdx, str.bool___cdecl_crashpad::PEImageReader::ReadNtHeaders_NtHeadersType___crashpad::WinVMAddress___const__NtHeadersType___IMAGE_NT_HEADERS_
lea r8, str.xplat_third_partycrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rbp - 0x18]
mov rcx, rdi
mov r9d, 0x15a
call fcn.1400366da
lea rdx, str.invalid_e_magic_in_dos_header_of
mov rcx, rdi
call fcn.14000345f
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x1400b0e77
mov rsi, qword [rsi]
mov rcx, rax
mov rdx, rsi
call fcn.140004e8c
jmp 0x1400b0f29
mov dword [rsp + 0x20], 1
lea rdx, str.bool___cdecl_crashpad::PEImageReader::ReadNtHeaders_NtHeadersType___crashpad::WinVMAddress___const__NtHeadersType___IMAGE_NT_HEADERS_
lea r8, str.xplat_third_partycrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rbp - 0x18]
mov rcx, rdi
mov r9d, 0x162
call fcn.1400366da
lea rdx, str.could_not_read_nt_headers_from
mov rcx, rdi
call fcn.14000345f
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x1400b0ecc
mov rsi, qword [rsi]
mov rcx, rax
mov rdx, rsi
call fcn.140004e8c
jmp 0x1400b0f29
mov dword [rsp + 0x20], 1
lea rdx, str.bool___cdecl_crashpad::PEImageReader::ReadNtHeaders_NtHeadersType___crashpad::WinVMAddress___const__NtHeadersType___IMAGE_NT_HEADERS_
lea r8, str.xplat_third_partycrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rbp - 0x18]
mov rcx, rdi
mov r9d, 0x168
call fcn.1400366da
lea rdx, str.invalid_signature_in_nt_headers_of
mov rcx, rdi
call fcn.14000345f
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x1400b0f1e
mov rsi, qword [rsi]
mov rcx, rax
mov rdx, rsi
call fcn.140004e8c
lea rcx, [rbp - 0x18]
call fcn.140036d3a
xor eax, eax
add rsp, 0x170
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret