joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140028cc0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x48
mov rax, qword [0x14018a028]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov r13, qword [r8 + 0x18]
mov rdi, r8
mov r15, qword [r8 + 0x10]
mov r12, rdx
mov rsi, rcx
cmp r13, 0x10
jb 0x140028cf7
mov r8, qword [r8]
xor ecx, ecx
movabs rdx, 0xcbf29ce484222325
test r15, r15
je 0x140028d34
movabs r9, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rcx + r8]
inc rcx
xor rdx, rax
imul rdx, r9
cmp rcx, r15
jb 0x140028d20
mov rcx, qword [rsi + 0x18]
mov rax, qword [rsi + 0x30]
mov rsi, qword [rsi + 8]
and rax, rdx
mov rbx, rax
mov qword [rsp + 0x98], rbp
add rax, rax
mov qword [rsp + 0x40], r14
add rbx, rbx
mov rdx, qword [rcx + rax*8]
inc rax
mov rbx, qword [rcx + rbx*8]
mov qword [rsp + 0x20], rdx
lea rax, [rcx + rax*8]
mov qword [rsp + 0x28], rax
cmp rdx, rsi
jne 0x140028d7c
mov rax, rsi
jmp 0x140028d82
mov rax, qword [rax]
mov rax, qword [rax]
cmp rbx, rax
je 0x140028dfc
mov rdx, rdi
cmp r13, 0x10
jb 0x140028d93
mov rdx, qword [rdi]
mov r14, qword [rbx + 0x28]
lea rcx, [rbx + 0x10]
cmp r14, 0x10
jb 0x140028da5
mov rcx, qword [rbx + 0x10]
mov rbp, qword [rbx + 0x20]
cmp rbp, r15
jne 0x140028dba
mov r8, rbp
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140028dc9
mov rbx, qword [rbx]
mov rdx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x28]
jmp 0x140028d72
lea rdx, [rbx + 0x10]
cmp r14, 0x10
jb 0x140028dd6
mov rdx, qword [rdx]
cmp r13, 0x10
jb 0x140028ddf
mov rdi, qword [rdi]
cmp r15, rbp
jne 0x140028df3
mov r8, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140028df6
mov rbx, rsi
mov qword [r12], rbx
jmp 0x140028e00
mov qword [r12], rsi
mov r14, qword [rsp + 0x40]
mov rax, r12
mov rbp, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.14008f1d0
add rsp, 0x48
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
Function at 0x14002d160
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
sub rsp, 0x60
mov qword [rsp + 0xa8], r13
mov rsi, r8
mov r13, qword [r8 + 0x18]
mov r12, rdx
mov qword [rsp + 0x50], r15
mov rbp, rcx
mov r15, qword [r8 + 0x10]
mov qword [rsp + 0x30], rcx
cmp r13, 0x10
jb 0x14002d197
mov r8, qword [r8]
xor ecx, ecx
movabs rdx, 0xcbf29ce484222325
test r15, r15
je 0x14002d1d4
movabs r9, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rcx + r8]
inc rcx
xor rdx, rax
imul rdx, r9
cmp rcx, r15
jb 0x14002d1c0
mov rcx, qword [rbp + 0x18]
mov rax, qword [rbp + 0x30]
mov rdi, qword [rbp + 8]
and rax, rdx
mov rbx, rax
mov qword [rsp + 0x58], r14
add rax, rax
add rbx, rbx
mov rdx, qword [rcx + rax*8]
inc rax
mov rbx, qword [rcx + rbx*8]
mov qword [rsp + 0x40], rdx
lea rax, [rcx + rax*8]
mov qword [rsp + 0x38], rax
nop word [rax + rax]
cmp rdx, rdi
jne 0x14002d21a
mov rax, rdi
jmp 0x14002d220
mov rax, qword [rax]
mov rax, qword [rax]
cmp rbx, rax
je 0x14002d2b0
mov rdx, rsi
cmp r13, 0x10
jb 0x14002d235
mov rdx, qword [rsi]
mov r14, qword [rbx + 0x28]
lea rcx, [rbx + 0x10]
cmp r14, 0x10
jb 0x14002d247
mov rcx, qword [rbx + 0x10]
mov rbp, qword [rbx + 0x20]
cmp rbp, r15
jne 0x14002d25c
mov r8, rbp
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14002d26b
mov rbx, qword [rbx]
mov rdx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x38]
jmp 0x14002d210
lea rdx, [rbx + 0x10]
cmp r14, 0x10
jb 0x14002d278
mov rdx, qword [rdx]
mov rcx, rsi
cmp r13, 0x10
jb 0x14002d284
mov rcx, qword [rsi]
cmp r15, rbp
jne 0x14002d2a3
mov r8, r15
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14002d2a3
mov rbp, qword [rsp + 0x30]
mov rax, rbx
mov rdi, qword [rbp + 8]
jmp 0x14002d2bb
mov rbp, qword [rsp + 0x30]
mov rbx, rdi
mov rax, rbx
jmp 0x14002d2bb
mov rbp, qword [rsp + 0x30]
mov rbx, rdi
mov rax, rdi
mov r15, qword [rsp + 0x50]
mov r14, qword [rsp + 0x58]
mov r13, qword [rsp + 0xa8]
cmp rax, rdi
jne 0x14002d34a
mov rbx, qword [rdi]
lea rax, [rsp + 0x38]
mov rdx, rbx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x20], rax
mov rdi, qword [rbx + 8]
mov r8, rdi
call fcn.14002f1c0
mov rdx, qword [rbp + 0x10]
movabs rcx, 0x249249249249248
sub rcx, rdx
cmp rcx, 1
jae 0x14002d318
lea rcx, str.list_T__too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rdx
mov rcx, rbp
mov qword [rbp + 0x10], rdx
mov rdx, r12
mov qword [rbx + 8], rax
mov qword [rdi], rax
mov r9, qword [rbp + 8]
mov r9, qword [r9]
lea r8, [r9 + 0x10]
call fcn.14002e9e0
mov rax, r12
add rsp, 0x60
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov qword [r12], rbx
mov rax, r12
mov byte [r12 + 8], 0
add rsp, 0x60
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x14002d370
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
sub rsp, 0x60
mov qword [rsp + 0xa8], r13
mov rsi, r8
mov r13, qword [r8 + 0x18]
mov r12, rdx
mov qword [rsp + 0x50], r15
mov rbp, rcx
mov r15, qword [r8 + 0x10]
mov qword [rsp + 0x30], rcx
cmp r13, 0x10
jb 0x14002d3a7
mov r8, qword [r8]
xor ecx, ecx
movabs rdx, 0xcbf29ce484222325
test r15, r15
je 0x14002d3e4
movabs r9, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rcx + r8]
inc rcx
xor rdx, rax
imul rdx, r9
cmp rcx, r15
jb 0x14002d3d0
mov rcx, qword [rbp + 0x18]
mov rax, qword [rbp + 0x30]
mov rdi, qword [rbp + 8]
and rax, rdx
mov rbx, rax
mov qword [rsp + 0x58], r14
add rax, rax
add rbx, rbx
mov rdx, qword [rcx + rax*8]
inc rax
mov rbx, qword [rcx + rbx*8]
mov qword [rsp + 0x40], rdx
lea rax, [rcx + rax*8]
mov qword [rsp + 0x38], rax
nop word [rax + rax]
cmp rdx, rdi
jne 0x14002d42a
mov rax, rdi
jmp 0x14002d430
mov rax, qword [rax]
mov rax, qword [rax]
cmp rbx, rax
je 0x14002d4c0
mov rdx, rsi
cmp r13, 0x10
jb 0x14002d445
mov rdx, qword [rsi]
mov r14, qword [rbx + 0x28]
lea rcx, [rbx + 0x10]
cmp r14, 0x10
jb 0x14002d457
mov rcx, qword [rbx + 0x10]
mov rbp, qword [rbx + 0x20]
cmp rbp, r15
jne 0x14002d46c
mov r8, rbp
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14002d47b
mov rbx, qword [rbx]
mov rdx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x38]
jmp 0x14002d420
lea rdx, [rbx + 0x10]
cmp r14, 0x10
jb 0x14002d488
mov rdx, qword [rdx]
mov rcx, rsi
cmp r13, 0x10
jb 0x14002d494
mov rcx, qword [rsi]
cmp r15, rbp
jne 0x14002d4b3
mov r8, r15
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14002d4b3
mov rbp, qword [rsp + 0x30]
mov rax, rbx
mov rdi, qword [rbp + 8]
jmp 0x14002d4cb
mov rbp, qword [rsp + 0x30]
mov rbx, rdi
mov rax, rbx
jmp 0x14002d4cb
mov rbp, qword [rsp + 0x30]
mov rbx, rdi
mov rax, rdi
mov r15, qword [rsp + 0x50]
mov r14, qword [rsp + 0x58]
mov r13, qword [rsp + 0xa8]
cmp rax, rdi
jne 0x14002d55a
mov rbx, qword [rdi]
lea rax, [rsp + 0x38]
mov rdx, rbx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x20], rax
mov rdi, qword [rbx + 8]
mov r8, rdi
call fcn.14002f320
mov rdx, qword [rbp + 0x10]
movabs rcx, 0x333333333333332
sub rcx, rdx
cmp rcx, 1
jae 0x14002d528
lea rcx, str.list_T__too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rdx
mov rcx, rbp
mov qword [rbp + 0x10], rdx
mov rdx, r12
mov qword [rbx + 8], rax
mov qword [rdi], rax
mov r9, qword [rbp + 8]
mov r9, qword [r9]
lea r8, [r9 + 0x10]
call fcn.14002e610
mov rax, r12
add rsp, 0x60
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov qword [r12], rbx
mov rax, r12
mov byte [r12 + 8], 0
add rsp, 0x60
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x14002d580
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
sub rsp, 0x60
mov qword [rsp + 0xa8], r13
mov rsi, r8
mov r13, qword [r8 + 0x18]
mov r12, rdx
mov qword [rsp + 0x50], r15
mov rbp, rcx
mov r15, qword [r8 + 0x10]
mov qword [rsp + 0x30], rcx
cmp r13, 0x10
jb 0x14002d5b7
mov r8, qword [r8]
xor ecx, ecx
movabs rdx, 0xcbf29ce484222325
test r15, r15
je 0x14002d5f4
movabs r9, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rcx + r8]
inc rcx
xor rdx, rax
imul rdx, r9
cmp rcx, r15
jb 0x14002d5e0
mov rcx, qword [rbp + 0x18]
mov rax, qword [rbp + 0x30]
mov rdi, qword [rbp + 8]
and rax, rdx
mov rbx, rax
mov qword [rsp + 0x58], r14
add rax, rax
add rbx, rbx
mov rdx, qword [rcx + rax*8]
inc rax
mov rbx, qword [rcx + rbx*8]
mov qword [rsp + 0x40], rdx
lea rax, [rcx + rax*8]
mov qword [rsp + 0x38], rax
nop word [rax + rax]
cmp rdx, rdi
jne 0x14002d63a
mov rax, rdi
jmp 0x14002d640
mov rax, qword [rax]
mov rax, qword [rax]
cmp rbx, rax
je 0x14002d6d0
mov rdx, rsi
cmp r13, 0x10
jb 0x14002d655
mov rdx, qword [rsi]
mov r14, qword [rbx + 0x28]
lea rcx, [rbx + 0x10]
cmp r14, 0x10
jb 0x14002d667
mov rcx, qword [rbx + 0x10]
mov rbp, qword [rbx + 0x20]
cmp rbp, r15
jne 0x14002d67c
mov r8, rbp
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14002d68b
mov rbx, qword [rbx]
mov rdx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x38]
jmp 0x14002d630
lea rdx, [rbx + 0x10]
cmp r14, 0x10
jb 0x14002d698
mov rdx, qword [rdx]
mov rcx, rsi
cmp r13, 0x10
jb 0x14002d6a4
mov rcx, qword [rsi]
cmp r15, rbp
jne 0x14002d6c3
mov r8, r15
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14002d6c3
mov rbp, qword [rsp + 0x30]
mov rax, rbx
mov rdi, qword [rbp + 8]
jmp 0x14002d6db
mov rbp, qword [rsp + 0x30]
mov rbx, rdi
mov rax, rbx
jmp 0x14002d6db
mov rbp, qword [rsp + 0x30]
mov rbx, rdi
mov rax, rdi
mov r15, qword [rsp + 0x50]
mov r14, qword [rsp + 0x58]
mov r13, qword [rsp + 0xa8]
cmp rax, rdi
jne 0x14002d76a
mov rbx, qword [rdi]
lea rax, [rsp + 0x38]
mov rdx, rbx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x20], rax
mov rdi, qword [rbx + 8]
mov r8, rdi
call fcn.14002f370
mov rdx, qword [rbp + 0x10]
movabs rcx, 0x333333333333332
sub rcx, rdx
cmp rcx, 1
jae 0x14002d738
lea rcx, str.list_T__too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rdx
mov rcx, rbp
mov qword [rbp + 0x10], rdx
mov rdx, r12
mov qword [rbx + 8], rax
mov qword [rdi], rax
mov r9, qword [rbp + 8]
mov r9, qword [r9]
lea r8, [r9 + 0x10]
call fcn.14002e610
mov rax, r12
add rsp, 0x60
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov qword [r12], rbx
mov rax, r12
mov byte [r12 + 8], 0
add rsp, 0x60
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x14002d790
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
sub rsp, 0x60
mov qword [rsp + 0xa8], r13
mov rsi, r8
mov r13, qword [r8 + 0x18]
mov r12, rdx
mov qword [rsp + 0x50], r15
mov rbp, rcx
mov r15, qword [r8 + 0x10]
mov qword [rsp + 0x30], rcx
cmp r13, 0x10
jb 0x14002d7c7
mov r8, qword [r8]
xor ecx, ecx
movabs rdx, 0xcbf29ce484222325
test r15, r15
je 0x14002d804
movabs r9, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rcx + r8]
inc rcx
xor rdx, rax
imul rdx, r9
cmp rcx, r15
jb 0x14002d7f0
mov rcx, qword [rbp + 0x18]
mov rax, qword [rbp + 0x30]
mov rdi, qword [rbp + 8]
and rax, rdx
mov rbx, rax
mov qword [rsp + 0x58], r14
add rax, rax
add rbx, rbx
mov rdx, qword [rcx + rax*8]
inc rax
mov rbx, qword [rcx + rbx*8]
mov qword [rsp + 0x40], rdx
lea rax, [rcx + rax*8]
mov qword [rsp + 0x38], rax
nop word [rax + rax]
cmp rdx, rdi
jne 0x14002d84a
mov rax, rdi
jmp 0x14002d850
mov rax, qword [rax]
mov rax, qword [rax]
cmp rbx, rax
je 0x14002d8e0
mov rdx, rsi
cmp r13, 0x10
jb 0x14002d865
mov rdx, qword [rsi]
mov r14, qword [rbx + 0x28]
lea rcx, [rbx + 0x10]
cmp r14, 0x10
jb 0x14002d877
mov rcx, qword [rbx + 0x10]
mov rbp, qword [rbx + 0x20]
cmp rbp, r15
jne 0x14002d88c
mov r8, rbp
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14002d89b
mov rbx, qword [rbx]
mov rdx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x38]
jmp 0x14002d840
lea rdx, [rbx + 0x10]
cmp r14, 0x10
jb 0x14002d8a8
mov rdx, qword [rdx]
mov rcx, rsi
cmp r13, 0x10
jb 0x14002d8b4
mov rcx, qword [rsi]
cmp r15, rbp
jne 0x14002d8d3
mov r8, r15
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14002d8d3
mov rbp, qword [rsp + 0x30]
mov rax, rbx
mov rdi, qword [rbp + 8]
jmp 0x14002d8eb
mov rbp, qword [rsp + 0x30]
mov rbx, rdi
mov rax, rbx
jmp 0x14002d8eb
mov rbp, qword [rsp + 0x30]
mov rbx, rdi
mov rax, rdi
mov r15, qword [rsp + 0x50]
mov r14, qword [rsp + 0x58]
mov r13, qword [rsp + 0xa8]
cmp rax, rdi
jne 0x14002d97a
mov rbx, qword [rdi]
lea rax, [rsp + 0x38]
mov rdx, rbx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x20], rax
mov rdi, qword [rbx + 8]
mov r8, rdi
call fcn.14002f3d0
mov rdx, qword [rbp + 0x10]
movabs rcx, 0x38e38e38e38e38d
sub rcx, rdx
cmp rcx, 1
jae 0x14002d948
lea rcx, str.list_T__too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rdx
mov rcx, rbp
mov qword [rbp + 0x10], rdx
mov rdx, r12
mov qword [rbx + 8], rax
mov qword [rdi], rax
mov r9, qword [rbp + 8]
mov r9, qword [r9]
lea r8, [r9 + 0x10]
call fcn.14002ec30
mov rax, r12
add rsp, 0x60
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov qword [r12], rbx
mov rax, r12
mov byte [r12 + 8], 0
add rsp, 0x60
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x14002eee0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov r9, qword [r8 + 0x20]
mov rdi, r8
add r8, 0x10
mov rsi, rdx
mov r10, rcx
cmp qword [rdi + 0x28], 0x10
jb 0x14002ef0b
mov r8, qword [rdi + 0x10]
xor ecx, ecx
movabs rdx, 0xcbf29ce484222325
test r9, r9
je 0x14002ef44
movabs rbx, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [rcx + r8]
inc rcx
xor rdx, rax
imul rdx, rbx
cmp rcx, r9
jb 0x14002ef30
mov r8, qword [r10 + 0x30]
mov rcx, qword [r10 + 0x18]
and r8, rdx
shl r8, 4
add rcx, r8
mov rax, qword [rcx]
cmp qword [rcx + 8], rdi
jne 0x14002ef84
cmp rax, rdi
jne 0x14002ef7a
mov rax, qword [r10 + 8]
mov qword [rcx], rax
mov rcx, qword [r10 + 0x18]
mov rax, qword [r10 + 8]
mov qword [r8 + rcx + 8], rax
jmp 0x14002ef8f
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
jmp 0x14002ef8f
cmp rax, rdi
jne 0x14002ef8f
mov rax, qword [rdi]
mov qword [rcx], rax
mov rdx, qword [rdi + 8]
lea rcx, [rdi + 0x10]
mov rbx, qword [rdi]
mov qword [rdx], rbx
mov r8, qword [rdi]
mov rdx, qword [rdi + 8]
mov qword [r8 + 8], rdx
dec qword [r10 + 0x10]
call fcn.140019a20
mov edx, 0x38
mov rcx, rdi
call fcn.14008f5b4
mov qword [rsi], rbx
mov rax, rsi
mov rsi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret

Function at 0x14002efe0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
push rdi
push r14
sub rsp, 0x20
mov r9, qword [r8 + 0x20]
mov rdi, r8
add r8, 0x10
mov r14, rdx
mov r10, rcx
cmp qword [rdi + 0x28], 0x10
jb 0x14002f009
mov r8, qword [rdi + 0x10]
xor ecx, ecx
movabs rdx, 0xcbf29ce484222325
test r9, r9
je 0x14002f044
movabs r11, 0x100000001b3
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + r8]
inc rcx
xor rdx, rax
imul rdx, r11
cmp rcx, r9
jb 0x14002f030
mov r8, qword [r10 + 0x30]
mov rcx, qword [r10 + 0x18]
and r8, rdx
shl r8, 4
add rcx, r8
mov rax, qword [rcx]
cmp qword [rcx + 8], rdi
jne 0x14002f084
cmp rax, rdi
jne 0x14002f07a
mov rax, qword [r10 + 8]
mov qword [rcx], rax
mov rcx, qword [r10 + 0x18]
mov rax, qword [r10 + 8]
mov qword [r8 + rcx + 8], rax
jmp 0x14002f08f
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
jmp 0x14002f08f
cmp rax, rdi
jne 0x14002f08f
mov rax, qword [rdi]
mov qword [rcx], rax
mov rax, qword [rdi + 8]
lea rcx, [rdi + 0x30]
mov rbx, qword [rdi]
mov qword [rax], rbx
mov r8, qword [rdi]
mov rdx, qword [rdi + 8]
mov qword [r8 + 8], rdx
dec qword [r10 + 0x10]
call fcn.140019a20
lea rcx, [rdi + 0x10]
call fcn.140019a20
mov edx, 0x50
mov rcx, rdi
call fcn.14008f5b4
mov qword [r14], rbx
mov rax, r14
mov rbx, qword [rsp + 0x50]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret
Function at 0x14002f220
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
push rdi
push r14
sub rsp, 0x20
mov r9, qword [r8 + 0x20]
mov rdi, r8
add r8, 0x10
mov r14, rdx
mov r10, rcx
cmp qword [rdi + 0x28], 0x10
jb 0x14002f249
mov r8, qword [rdi + 0x10]
xor ecx, ecx
movabs rdx, 0xcbf29ce484222325
test r9, r9
je 0x14002f284
movabs r11, 0x100000001b3
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + r8]
inc rcx
xor rdx, rax
imul rdx, r11
cmp rcx, r9
jb 0x14002f270
mov r8, qword [r10 + 0x30]
mov rcx, qword [r10 + 0x18]
and r8, rdx
shl r8, 4
add rcx, r8
mov rax, qword [rcx]
cmp qword [rcx + 8], rdi
jne 0x14002f2c4
cmp rax, rdi
jne 0x14002f2ba
mov rax, qword [r10 + 8]
mov qword [rcx], rax
mov rcx, qword [r10 + 0x18]
mov rax, qword [r10 + 8]
mov qword [r8 + rcx + 8], rax
jmp 0x14002f2cf
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
jmp 0x14002f2cf
cmp rax, rdi
jne 0x14002f2cf
mov rax, qword [rdi]
mov qword [rcx], rax
mov rax, qword [rdi + 8]
lea rcx, [rdi + 0x30]
mov rbx, qword [rdi]
mov qword [rax], rbx
mov r8, qword [rdi]
mov rdx, qword [rdi + 8]
mov qword [r8 + 8], rdx
dec qword [r10 + 0x10]
call fcn.140024770
lea rcx, [rdi + 0x10]
call fcn.140019a20
mov edx, 0x70
mov rcx, rdi
call fcn.14008f5b4
mov qword [r14], rbx
mov rax, r14
mov rbx, qword [rsp + 0x50]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret

Function at 0x14002f430
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
push rdi
push r14
sub rsp, 0x20
mov r9, qword [r8 + 0x20]
mov rdi, r8
add r8, 0x10
mov r14, rdx
mov r10, rcx
cmp qword [rdi + 0x28], 0x10
jb 0x14002f459
mov r8, qword [rdi + 0x10]
xor ecx, ecx
movabs rdx, 0xcbf29ce484222325
test r9, r9
je 0x14002f494
movabs r11, 0x100000001b3
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + r8]
inc rcx
xor rdx, rax
imul rdx, r11
cmp rcx, r9
jb 0x14002f480
mov r8, qword [r10 + 0x30]
mov rcx, qword [r10 + 0x18]
and r8, rdx
shl r8, 4
add rcx, r8
mov rax, qword [rcx]
cmp qword [rcx + 8], rdi
jne 0x14002f4d4
cmp rax, rdi
jne 0x14002f4ca
mov rax, qword [r10 + 8]
mov qword [rcx], rax
mov rcx, qword [r10 + 0x18]
mov rax, qword [r10 + 8]
mov qword [r8 + rcx + 8], rax
jmp 0x14002f4df
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
jmp 0x14002f4df
cmp rax, rdi
jne 0x14002f4df
mov rax, qword [rdi]
mov qword [rcx], rax
mov rax, qword [rdi + 8]
lea rcx, [rdi + 0x30]
mov rbx, qword [rdi]
mov qword [rax], rbx
mov r8, qword [rdi]
mov rdx, qword [rdi + 8]
mov qword [r8 + 8], rdx
dec qword [r10 + 0x10]
call fcn.140028e30
lea rcx, [rdi + 0x10]
call fcn.140019a20
mov edx, 0x48
mov rcx, rdi
call fcn.14008f5b4
mov qword [r14], rbx
mov rax, r14
mov rbx, qword [rsp + 0x50]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret
Function at 0x14003e850
Capabilities:
Hash data using fnv

Disassembly:
push rdi
sub rsp, 0x40
movzx r8d, byte [rdx]
mov rdi, rcx
movabs rcx, 0x100000001b3
mov qword [rsp + 0x60], rbx
movabs rax, 0xcbf29ce484222325
mov qword [rsp + 0x68], rsi
xor r8, rax
mov r9, rdx
movzx eax, byte [rdx + 1]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 2]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 3]
mov rdx, qword [rdi + 8]
imul r8, rcx
xor r8, rax
imul r8, rcx
mov rcx, qword [rdi + 0x30]
and rcx, r8
mov r8, qword [rdi + 0x18]
mov rax, rcx
add rax, rax
add rcx, rcx
mov rax, qword [r8 + rax*8]
mov r10, qword [r8 + rcx*8]
lea r11, [r8 + rcx*8]
nop word [rax + rax]
cmp r10, rdx
jne 0x14003e8da
mov rcx, rdx
jmp 0x14003e8e1
mov rcx, qword [r11 + 8]
mov rcx, qword [rcx]
cmp rax, rcx
je 0x14003e8f8
mov ecx, dword [r9]
cmp dword [rax + 0x10], ecx
je 0x14003e8f3
mov rax, qword [rax]
jmp 0x14003e8d0
cmp rax, rdx
jne 0x14003e96c
mov rbx, qword [rdx]
lea rax, [rsp + 0x30]
mov rdx, rbx
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x20], rax
mov rsi, qword [rbx + 8]
mov r8, rsi
call fcn.1400475f0
mov rdx, rax
movabs rcx, 0x492492492492491
mov rax, qword [rdi + 0x10]
sub rcx, rax
cmp rcx, 1
jae 0x14003e941
lea rcx, str.list_T__too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rax
mov rcx, rdi
mov qword [rdi + 0x10], rax
mov qword [rbx + 8], rdx
mov qword [rsi], rdx
lea rdx, [rsp + 0x30]
mov r9, qword [rdi + 8]
mov r9, qword [r9]
lea r8, [r9 + 0x10]
call fcn.1400449f0
mov rax, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x68]
add rax, 0x18
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret

Function at 0x14003eb60
Capabilities:
Hash data using fnv

Disassembly:
sub rsp, 0x28
mov r9, rdx
movabs rax, 0xcbf29ce484222325
mov rdx, rcx
movabs rcx, 0x100000001b3
movzx r8d, byte [r9]
xor r8, rax
movzx eax, byte [r9 + 1]
imul r8, rcx
xor r8, rax
movzx eax, byte [r9 + 2]
imul r8, rcx
xor r8, rax
movzx eax, byte [r9 + 3]
imul r8, rcx
xor r8, rax
imul r8, rcx
mov rcx, qword [rdx + 0x30]
and rcx, r8
mov r8, qword [rdx + 0x18]
mov rdx, qword [rdx + 8]
mov rax, rcx
add rax, rax
add rcx, rcx
mov rax, qword [r8 + rax*8]
mov r10, qword [r8 + rcx*8]
lea r11, [r8 + rcx*8]
cmp r10, rdx
jne 0x14003ebdb
mov rcx, rdx
jmp 0x14003ebe2
mov rcx, qword [r11 + 8]
mov rcx, qword [rcx]
cmp rax, rcx
je 0x14003ec02
mov ecx, dword [r9]
cmp dword [rax + 0x10], ecx
je 0x14003ebf4
mov rax, qword [rax]
jmp 0x14003ebd1
cmp rax, rdx
je 0x14003ec02
add rax, 0x14
add rsp, 0x28
ret
lea rcx, str.invalid_unordered_map_K__T__key
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_]
int3
Function at 0x14003ec10
Capabilities:
Hash data using fnv

Disassembly:
push rdi
sub rsp, 0x40
movzx r8d, byte [rdx]
mov rdi, rcx
movabs rcx, 0x100000001b3
mov qword [rsp + 0x60], rbx
movabs rax, 0xcbf29ce484222325
mov qword [rsp + 0x68], rsi
xor r8, rax
mov r9, rdx
movzx eax, byte [rdx + 1]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 2]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 3]
mov rdx, qword [rdi + 8]
imul r8, rcx
xor r8, rax
imul r8, rcx
mov rcx, qword [rdi + 0x30]
and rcx, r8
mov r8, qword [rdi + 0x18]
mov rax, rcx
add rax, rax
add rcx, rcx
mov rax, qword [r8 + rax*8]
mov r10, qword [r8 + rcx*8]
lea r11, [r8 + rcx*8]
nop word [rax + rax]
cmp r10, rdx
jne 0x14003ec9a
mov rcx, rdx
jmp 0x14003eca1
mov rcx, qword [r11 + 8]
mov rcx, qword [rcx]
cmp rax, rcx
je 0x14003ecb8
mov ecx, dword [r9]
cmp dword [rax + 0x10], ecx
je 0x14003ecb3
mov rax, qword [rax]
jmp 0x14003ec90
cmp rax, rdx
jne 0x14003ed2c
mov rbx, qword [rdx]
lea rax, [rsp + 0x30]
mov rdx, rbx
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x20], rax
mov rsi, qword [rbx + 8]
mov r8, rsi
call fcn.140047620
mov rdx, rax
movabs rcx, 0xaaaaaaaaaaaaaa9
mov rax, qword [rdi + 0x10]
sub rcx, rax
cmp rcx, 1
jae 0x14003ed01
lea rcx, str.list_T__too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
inc rax
mov rcx, rdi
mov qword [rdi + 0x10], rax
mov qword [rbx + 8], rdx
mov qword [rsi], rdx
lea rdx, [rsp + 0x30]
mov r9, qword [rdi + 8]
mov r9, qword [r9]
lea r8, [r9 + 0x10]
call fcn.140044c10
mov rax, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x68]
add rax, 0x14
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret

Function at 0x14003f710
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x10
mov rax, qword [0x14018a028]
xor rax, rsp
mov qword [rsp], rax
mov r10, rdx
mov r9, rcx
movzx edx, byte [r8]
movabs rcx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
mov r11, r8
xor rdx, rax
movzx eax, byte [r8 + 1]
imul rdx, rcx
xor rdx, rax
movzx eax, byte [r8 + 2]
imul rdx, rcx
xor rdx, rax
movzx eax, byte [r8 + 3]
mov r8, qword [r9 + 0x18]
imul rdx, rcx
xor rdx, rax
imul rdx, rcx
mov rcx, qword [r9 + 0x30]
and rcx, rdx
mov rdx, qword [r9 + 8]
mov rax, rcx
add rax, rax
add rcx, rcx
mov rax, qword [r8 + rax*8]
mov rbx, qword [r8 + rcx*8]
lea r9, [r8 + rcx*8]
cmp rbx, rdx
jne 0x14003f79e
mov rcx, rdx
jmp 0x14003f7a5
mov rcx, qword [r9 + 8]
mov rcx, qword [rcx]
cmp rax, rcx
je 0x14003f7bc
mov ecx, dword [r11]
cmp dword [rax + 0x10], ecx
je 0x14003f7b7
mov rax, qword [rax]
jmp 0x14003f794
mov qword [r10], rax
jmp 0x14003f7bf
mov qword [r10], rdx
mov rax, r10
mov rcx, qword [rsp]
xor rcx, rsp
call fcn.14008f1d0
add rsp, 0x10
pop rbx
ret