joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140071300
Capabilities:
Hash data using fnv

Disassembly:
mov rdx, qword [rcx + 0x10]
mov r9, rcx
add rdx, 1
mov r8, qword [rcx + 0x38]
vxorps xmm0, xmm0, xmm0
js 0x14007126c
vcvtsi2ss xmm0, xmm0, rdx
jmp 0x140071281
mov rax, rdx
and edx, 1
shr rax, 1
or rax, rdx
vcvtsi2ss xmm0, xmm0, rax
vaddss xmm0, xmm0, xmm0
vdivss xmm0, xmm0, dword [rcx]
vxorps xmm1, xmm1, xmm1
vroundss xmm1, xmm1, xmm0, 2
vmovss xmm0, dword [0x140217c08]
xor ecx, ecx
vcomiss xmm1, xmm0
jb 0x1400712b6
vsubss xmm1, xmm1, xmm0
vcomiss xmm1, xmm0
jae 0x1400712b6
movabs rax, 0x8000000000000000
mov rcx, rax
vcvttss2si rax, xmm1
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp r8, rcx
jae 0x1400712e8
cmp r8, 0x200
jae 0x1400712e5
lea r8, [r8*8]
cmp r8, rcx
jae 0x1400712e8
mov r8, rcx
mov rdx, r8
mov rcx, r9
jmp 0x140071300
mov qword [rsp + 0x20], rbx
push rsi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov ebx, 1
mov eax, ebx
shl rax, cl
cmp rdx, rax
jbe 0x140071338
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x38], rdi
mov rdi, qword [rsi + 8]
or rax, rbx
bsr rcx, rax
mov r8, rdi
mov qword [rsp + 0x40], r14
inc ecx
shl rbx, cl
lea rcx, [rsi + 0x18]
lea rdx, [rbx + rbx]
call fcn.140028e00
mov qword [rsi + 0x38], rbx
lea rax, [rbx - 1]
mov qword [rsi + 0x30], rax
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
cmp rcx, rdi
je 0x140071476
mov qword [rsp + 0x30], rbp
mov rax, rcx
movabs rbp, 0xcbf29ce484222325
movabs rbx, 0x100000001b3
nop
movzx edx, byte [rax + 0x11]
movzx r9d, byte [rax + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rcx, qword [rcx]
imul r9, rbx
xor r9, rdx
movzx edx, byte [rax + 0x12]
imul r9, rbx
xor r9, rdx
movzx edx, byte [rax + 0x13]
imul r9, rbx
xor r9, rdx
imul r9, rbx
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r9, qword [r11]
cmp r9, rdi
jne 0x1400713f0
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x140071465
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x14007142d
mov r10, qword [rdx]
cmp r10, rax
je 0x140071427
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x140071465
cmp r9, rdx
je 0x140071441
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x14007148b
cmp r9, rdx
jne 0x140071432
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rdi
jne 0x1400713a0
mov rbp, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x20
pop rsi
ret
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x140071465
Function at 0x140073be0
Capabilities:
Reference sql statements

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x14025e2c0]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov ebx, ecx
xor esi, esi
call fcn.14000e160
mov rdi, rax
mov dword [rbp - 0x19], ebx
vmovups xmm0, xmmword [rbp - 0x19]
vmovdqa xmmword [rbp + 7], xmm0
mov qword [rbp - 0x29], 2
lea rax, [rbp + 7]
mov qword [rbp - 0x21], rax
lea rax, str.SELECT__account_id__FROM__players__WHERE__id___:d
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x11], 0x34
vmovups xmm0, xmmword [rbp - 0x29]
vmovdqa xmmword [rbp - 0x29], xmm0
vmovups xmm1, xmmword [rbp - 0x19]
vmovdqa xmmword [rbp - 0x19], xmm1
lea r8, [rbp - 0x29]
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 0x27]
call qword [sym.imp.fmt.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_fmt::v11::vformat_class_fmt::v11::basic_string_view_char___class_fmt::v11::basic_format_args_class_fmt::v11::context__]
nop
lea r8, [rbp + 0x27]
lea rdx, [rbp - 0x29]
mov rcx, rdi
call fcn.14003e8a0
nop
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0xf
jbe 0x140073cbc
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073cb7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073cb7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d177c
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x140073d55
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 7], xmm0
vmovdqu xmm1, xmmword [0x140217ff0]
vmovdqu xmmword [rbp + 0x17], xmm1
vmovsd xmm0, qword [str.account_id]
vmovsd qword [rbp + 7], xmm0
movzx eax, word [0x1401fb370]
mov word [rbp + 0xf], ax
mov byte [rbp + 0x11], 0
lea rdx, [rbp + 7]
call fcn.14000f2d0
mov esi, eax
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x140073d44
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073d3f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073d3f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d177c
vmovdqu xmm0, xmmword [0x140217f50]
vmovdqu xmmword [rbp + 0x17], xmm0
mov byte [rbp + 7], 0
mov rcx, qword [rbp - 0x21]
test rcx, rcx
je 0x140073d8f
mov edi, 0xffffffff
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140073d8f
mov rbx, qword [rbp - 0x21]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x140073d8f
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov eax, esi
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1401d1730
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
Function at 0x140074500
Capabilities:
Reference sql statements

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x90
mov rax, qword [0x14025e2c0]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov ebx, edx
mov rsi, rcx
call fcn.14000e160
mov rdi, rax
mov dword [rsp + 0x30], ebx
vmovups xmm0, xmmword [rsp + 0x30]
vmovdqa xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x20], 2
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, str.SELECT__id____name____account_id____group_id____sex____profession____experience____level____health____healthmax____blessings____lookbody____lookfeet____lookhead____looklegs____looktype____lookaddons____posx____posy____posz____cap____lastlogin____lastlogout____lastip____conditions____skulltime____skull____town_id____balance____stamina____skill_fishing____skill_fishing_tries____direction__FROM__players__WHERE__id___:d
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 0x1a6
vmovups xmm0, xmmword [rsp + 0x20]
vmovdqa xmmword [rsp + 0x20], xmm0
vmovups xmm1, xmmword [rsp + 0x30]
vmovdqa xmmword [rsp + 0x30], xmm1
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call qword [sym.imp.fmt.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_fmt::v11::vformat_class_fmt::v11::basic_string_view_char___class_fmt::v11::basic_format_args_class_fmt::v11::context__]
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.14003e8a0
mov rdx, rax
mov rcx, rsi
call fcn.140074b30
movzx ebx, al
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400745f7
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400745f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400745f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d177c
movzx eax, bl
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.1401d1730
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x140074620
Capabilities:
Reference sql statements

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0xb0
mov rax, qword [0x14025e2c0]
xor rax, rsp
mov qword [rsp + 0xa0], rax
mov rbx, rdx
mov rsi, rcx
call fcn.14000e160
mov rdi, rax
mov r9d, dword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x140074660
mov rbx, qword [rbx]
mov r8, rbx
lea rdx, [rsp + 0x60]
mov rcx, rdi
call fcn.14003eb40
nop
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x20], reloc.WS2_32.dll_listen
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, str.SELECT__id____name____account_id____group_id____sex____profession____experience____level____health____healthmax____blessings____lookbody____lookfeet____lookhead____looklegs____looktype____lookaddons____posx____posy____posz____cap____lastlogin____lastlogout____lastip____conditions____skulltime____skull____town_id____balance____stamina____skill_fishing____skill_fishing_tries____direction__FROM__players__WHERE__name___:s
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 0x1a8
vmovups xmm0, xmmword [rsp + 0x20]
vmovdqa xmmword [rsp + 0x20], xmm0
vmovups xmm1, xmmword [rsp + 0x30]
vmovdqa xmmword [rsp + 0x30], xmm1
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x80]
call qword [sym.imp.fmt.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_fmt::v11::vformat_class_fmt::v11::basic_string_view_char___class_fmt::v11::basic_format_args_class_fmt::v11::context__]
nop
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.14003e8a0
mov rdx, rax
mov rcx, rsi
call fcn.140074b30
movzx ebx, al
mov rdx, qword [rsp + 0x98]
cmp rdx, 0xf
jbe 0x140074753
inc rdx
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007474e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007474e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d177c
vmovdqu xmm0, xmmword [0x140217f50]
vmovdqu xmmword [rsp + 0x90], xmm0
mov byte [rsp + 0x80], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400747ac
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400747a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400747a7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d177c
movzx eax, bl
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.1401d1730
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret
Function at 0x14007f7e0
Capabilities:
Validate payment card number using luhn algorithm

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov esi, edx
mov dword [rcx + 0x74], 0
mov rbx, rcx
mov edi, 0x7fffffff
movsx ecx, byte [rbx + 0x78]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x14007f8a5
lea r8d, [rcx - 0x30]
cmp r8d, 0xffffffff
je 0x14007f8a5
mov r9d, dword [rbx + 0x74]
mov ecx, 0x7fffffff
sub ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp r9d, edx
jg 0x14007f8be
lea eax, [r9 + r9*4]
dec edi
lea ecx, [r8 + rax*2]
mov rax, qword [rbx + 0x10]
mov dword [rbx + 0x74], ecx
mov rcx, qword [rbx]
cmp rcx, rax
je 0x14007f895
cmp byte [rcx], 0x5c
jne 0x14007f88e
lea rdx, [rcx + 1]
cmp rdx, rax
je 0x14007f88e
mov r8d, dword [rbx + 0x80]
test r8b, 8
jne 0x14007f87c
movzx eax, byte [rdx]
sub al, 0x28
cmp al, 1
jbe 0x14007f88b
test r8b, 0x10
jne 0x14007f88e
movzx eax, byte [rdx]
sub al, 0x7b
test al, 0xfd
jne 0x14007f88e
mov rcx, rdx
lea rax, [rcx + 1]
mov qword [rbx], rax
mov rcx, rbx
call fcn.14007c470
test edi, edi
jne 0x14007f800
mov rbx, qword [rsp + 0x30]
cmp edi, 0x7fffffff
mov rsi, qword [rsp + 0x38]
setne al
add rsp, 0x20
pop rdi
ret
mov edx, esi
call fcn.14007c460
int3

Function at 0x140081cd0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
movabs rax, 0xcbf29ce484222325
mov r9d, 0
sub r8, rdx
je 0x140081d04
movabs r10, 0x100000001b3
nop
movzx ecx, byte [rdx + r9]
inc r9
xor rax, rcx
imul rax, r10
cmp r9, r8
jb 0x140081cf0
ret
Function at 0x14008a2f0
Capabilities:
Reference sql statements

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x14025e2c0]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov ebx, ecx
xor esi, esi
call fcn.14000e160
mov rdi, rax
mov dword [rbp - 0x19], ebx
vmovups xmm0, xmmword [rbp - 0x19]
vmovdqa xmmword [rbp + 7], xmm0
mov qword [rbp - 0x29], 2
lea rax, [rbp + 7]
mov qword [rbp - 0x21], rax
lea rax, str.SELECT_COUNT___AS__count__FROM__market_offers__WHERE__player_id___:d
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x11], 0x48
vmovups xmm0, xmmword [rbp - 0x29]
vmovdqa xmmword [rbp - 0x29], xmm0
vmovups xmm1, xmmword [rbp - 0x19]
vmovdqa xmmword [rbp - 0x19], xmm1
lea r8, [rbp - 0x29]
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 0x27]
call qword [sym.imp.fmt.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_fmt::v11::vformat_class_fmt::v11::basic_string_view_char___class_fmt::v11::basic_format_args_class_fmt::v11::context__]
nop
lea r8, [rbp + 0x27]
lea rdx, [rbp - 0x29]
mov rcx, rdi
call fcn.14003e8a0
nop
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0xf
jbe 0x14008a3cc
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008a3c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008a3c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d177c
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x14008a460
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 7], xmm0
vmovdqu xmm1, xmmword [0x140217fa0]
vmovdqu xmmword [rbp + 0x17], xmm1
mov eax, dword [str.count]
mov dword [rbp + 7], eax
movzx eax, byte [reloc.WS2_32.dll_WSACleanup]
mov byte [rbp + 0xb], al
mov byte [rbp + 0xc], 0
lea rdx, [rbp + 7]
call fcn.1400410c0
mov esi, eax
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14008a44f
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008a44a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008a44a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d177c
vmovdqu xmm0, xmmword [0x140217f50]
vmovdqu xmmword [rbp + 0x17], xmm0
mov byte [rbp + 7], 0
mov rcx, qword [rbp - 0x21]
test rcx, rcx
je 0x14008a49a
mov edi, 0xffffffff
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14008a49a
mov rbx, qword [rbp - 0x21]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x14008a49a
mov rcx, qword [rbp - 0x21]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov eax, esi
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1401d1730
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
Function at 0x14008bf10
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r15
sub rsp, 0x80
mov rax, qword [0x14025e2c0]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov rbx, rdx
call fcn.140048760
mov rbp, rax
test rax, rax
je 0x14008c0cf
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.14000dbd0
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140192920
mov r10, rax
mov rdx, rax
cmp qword [rax + 0x18], 0xf
mov r8, qword [rax + 0x10]
jbe 0x14008bf6f
mov rdx, qword [rax]
xor edi, edi
movabs rsi, 0xcbf29ce484222325
mov r9, rsi
mov ecx, edi
movabs r15, 0x100000001b3
test r8, r8
je 0x14008bfa3
nop
movzx eax, byte [rdx + rcx]
inc rcx
xor r9, rax
imul r9, r15
cmp rcx, r8
jb 0x14008bf90
mov r8, r10
lea rdx, [rsp + 0x20]
mov rcx, rbp
call fcn.140067960
mov rbx, qword [rax + 8]
test rbx, rbx
jne 0x14008bfc0
mov rbx, qword [rbp + 8]
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14008c000
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008bffb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008bffb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d177c
mov r8, qword [rbp + 8]
mov byte [rsp + 0x50], dil
vmovdqu xmm0, xmmword [0x140217f50]
vmovdqu xmmword [rsp + 0x60], xmm0
cmp rbx, r8
je 0x14008c0cf
cmp qword [rbx + 0x28], 0xf
lea rcx, [rbx + 0x10]
mov rdx, qword [rbx + 0x20]
mov qword [rsp + 0xc0], r14
jbe 0x14008c03b
mov rcx, qword [rbx + 0x10]
test rdx, rdx
je 0x14008c053
movzx eax, byte [rcx + rdi]
inc rdi
xor rsi, rax
imul rsi, r15
cmp rdi, rdx
jb 0x14008c040
mov rdx, qword [rbp + 0x30]
and rdx, rsi
shl rdx, 4
add rdx, qword [rbp + 0x18]
mov rax, qword [rdx]
cmp qword [rdx + 8], rbx
jne 0x14008c083
cmp rax, rbx
jne 0x14008c079
mov qword [rdx], r8
mov qword [rdx + 8], r8
jmp 0x14008c08e
mov r8, qword [rbx + 8]
mov qword [rdx + 8], r8
jmp 0x14008c08e
cmp rax, rbx
jne 0x14008c08e
mov rax, qword [rbx]
mov qword [rdx], rax
mov rdx, qword [rbx]
lea rcx, [rbx + 0x30]
dec qword [rbp + 0x10]
mov rax, qword [rbx + 8]
mov qword [rax], rdx
mov rax, qword [rbx + 8]
mov qword [rdx + 8], rax
call fcn.140012f60
lea rcx, [rbx + 0x10]
call fcn.14000e0a0
mov edx, 0x58
mov rcx, rbx
call fcn.1401d177c
mov r14, qword [rsp + 0xc0]
mov al, 1
jmp 0x14008c0d1
xor al, al
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.1401d1730
add rsp, 0x80
pop r15
pop rdi
pop rsi
pop rbp
pop rbx
ret

Function at 0x14008d380
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
call fcn.14009c260
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x14008d3cb
mov eax, dword [rcx + 0x18]
shr eax, 1
test al, 1
je 0x14008d3cb
mov rax, qword [rcx]
mov rcx, qword [rcx + 8]
cmp rax, rcx
je 0x14008d3bf
nop dword [rax]
cmp dword [rax + 8], 2
je 0x14008d3d1
add rax, 0x10
cmp rax, rcx
jne 0x14008d3b0
xor edx, edx
add rsp, 0x20
pop rbx
jmp fcn.140063fe0
add rsp, 0x20
pop rbx
ret
test rax, rax
je 0x14008d3bf
mov rdx, qword [rax]
add rsp, 0x20
pop rbx
jmp fcn.140063fe0
Function at 0x140091c00
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov rax, qword [rdx + 0x10]
cmp qword [rcx + 0x10], rax
jne 0x140091d9d
mov rdi, qword [rcx + 8]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x140091d99
mov r10, qword [rdx + 0x18]
movabs rax, 0xcbf29ce484222325
mov r11, qword [rdx + 8]
movabs rsi, 0x100000001b3
mov r13, qword [rdx + 0x30]
mov qword [rsp + 0x68], r10
mov qword [rsp + 0x70], r11
nop dword [rax]
cmp qword [rbx + 0x28], 0xf
lea r14, [rbx + 0x10]
mov r9, qword [r14 + 0x10]
mov r8, r14
jbe 0x140091c75
mov r8, qword [r14]
xor edx, edx
mov rcx, rax
test r9, r9
je 0x140091c94
nop
movzx eax, byte [r8 + rdx]
inc rdx
xor rcx, rax
imul rcx, rsi
cmp rdx, r9
jb 0x140091c80
mov rax, r13
and rax, rcx
add rax, rax
mov rsi, qword [r10 + rax*8 + 8]
cmp rsi, r11
je 0x140091cfa
mov r15, qword [r10 + rax*8]
mov rbp, r9
mov r12, qword [r14 + 0x18]
nop dword [rax]
nop word [rax + rax]
cmp qword [rsi + 0x28], 0xf
lea rdx, [rsi + 0x10]
mov rax, qword [rdx + 0x10]
jbe 0x140091cd2
mov rdx, qword [rdx]
mov rcx, r14
cmp r12, 0xf
jbe 0x140091cde
mov rcx, qword [r14]
cmp rbp, rax
jne 0x140091cef
mov r8, rbp
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140091cfc
cmp rsi, r15
je 0x140091cfa
mov rsi, qword [rsi + 8]
jmp 0x140091cc0
xor esi, esi
test rsi, rsi
je 0x140091d9d
cmp qword [rsi + 0x28], 0xf
lea rdx, [rsi + 0x10]
jbe 0x140091d14
mov rdx, qword [rsi + 0x10]
cmp qword [r14 + 0x18], 0xf
mov rcx, r14
mov r8, qword [r14 + 0x10]
jbe 0x140091d25
mov rcx, qword [r14]
cmp r8, qword [rsi + 0x20]
jne 0x140091d9d
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140091d9d
mov eax, dword [rsi + 0x30]
lea rcx, [rsi + 0x30]
mov r8d, dword [r14 + 0x20]
add r14, 0x20
test eax, eax
mov edx, eax
not edx
cmovns edx, eax
test r8d, r8d
mov eax, r8d
not eax
cmovns eax, r8d
cmp eax, edx
jne 0x140091d9d
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x60], r14
call fcn.140091540
test al, al
je 0x140091d9d
mov rbx, qword [rbx]
movabs rsi, 0x100000001b3
mov r10, qword [rsp + 0x68]
movabs rax, 0xcbf29ce484222325
mov r11, qword [rsp + 0x70]
cmp rbx, rdi
jne 0x140091c60
mov al, 1
jmp 0x140091d9f
xor al, al
mov rbx, qword [rsp + 0x78]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x140092420
Capabilities:
Hash data using fnv

Disassembly:
mov rdx, qword [rcx + 0x10]
mov r9, rcx
add rdx, 1
mov r8, qword [rcx + 0x38]
vxorps xmm0, xmm0, xmm0
js 0x14009243c
vcvtsi2ss xmm0, xmm0, rdx
jmp 0x140092451
mov rax, rdx
and edx, 1
shr rax, 1
or rax, rdx
vcvtsi2ss xmm0, xmm0, rax
vaddss xmm0, xmm0, xmm0
vdivss xmm0, xmm0, dword [rcx]
vxorps xmm1, xmm1, xmm1
vroundss xmm1, xmm1, xmm0, 2
vmovss xmm0, dword [0x140217c08]
xor ecx, ecx
vcomiss xmm1, xmm0
jb 0x140092486
vsubss xmm1, xmm1, xmm0
vcomiss xmm1, xmm0
jae 0x140092486
movabs rax, 0x8000000000000000
mov rcx, rax
vcvttss2si rax, xmm1
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp r8, rcx
jae 0x1400924b8
cmp r8, 0x200
jae 0x1400924b5
lea r8, [r8*8]
cmp r8, rcx
jae 0x1400924b8
mov r8, rcx
mov rdx, r8
mov rcx, r9
jmp fcn.1400928a0
Function at 0x140097410
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov r11, rsp
push rbx
push rbp
push r12
sub rsp, 0x80
mov rax, qword [0x14025e2c0]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov qword [r11 + 8], rsi
lea rcx, [r11 - 0x70]
mov qword [r11 + 0x18], rdi
mov qword [r11 - 0x28], r15
call fcn.14000dbd0
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140192920
mov rdi, rax
mov r8, rax
mov r15, qword [rax + 0x18]
mov rsi, qword [rax + 0x10]
cmp r15, 0xf
jbe 0x140097466
mov r8, qword [rax]
xor r12d, r12d
movabs rdx, 0xcbf29ce484222325
mov ecx, r12d
test rsi, rsi
je 0x1400974a4
movabs r9, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [r8 + rcx]
inc rcx
xor rdx, rax
imul rdx, r9
cmp rcx, rsi
jb 0x140097490
mov rcx, qword [0x14026e860]
mov rax, qword [0x14026e848]
and rcx, rdx
mov rbp, qword [0x14026e838]
add rcx, rcx
mov rbx, qword [rax + rcx*8]
cmp rbx, rbp
jne 0x1400974cd
mov rbx, rbp
jmp 0x14009751e
mov qword [rsp + 0x78], r14
mov r14, qword [rax + rcx*8 + 8]
nop word [rax + rax]
lea rcx, [rbx + 0x10]
mov rdx, rdi
cmp r15, 0xf
jbe 0x1400974f0
mov rdx, qword [rdi]
cmp qword [rcx + 0x18], 0xf
mov r8, qword [rcx + 0x10]
jbe 0x1400974fe
mov rcx, qword [rcx]
cmp r8, rsi
jne 0x14009750c
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140097519
cmp rbx, r14
je 0x140097516
mov rbx, qword [rbx]
jmp 0x1400974e0
mov rbx, rbp
mov r14, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x60]
mov r15, qword [rsp + 0x70]
mov rdi, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0xa0]
cmp rdx, 0xf
jbe 0x14009757a
mov rcx, qword [rsp + 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009756e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009756e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d177c
mov rbp, qword [0x14026e838]
mov byte [rsp + 0x48], r12b
movzx eax, r12w
vmovdqu xmm0, xmmword [0x140217f50]
vmovdqu xmmword [rsp + 0x58], xmm0
cmp rbx, rbp
je 0x14009759a
movzx eax, word [rbx + 0x30]
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.1401d1730
add rsp, 0x80
pop r12
pop rbp
pop rbx
ret