joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401b1d2c
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x40
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rbx, r9
mov r10, r8
mov r14, rdx
mov rsi, rcx
movabs rax, 0xcbf29ce484222325
mov rdx, r8
lea r9, [r8 + 8]
cmp r9, r8
sbb r8, r8
not r8
and r8d, 8
cmp rdx, r9
ja 0x1401b1d9b
movzx ecx, byte [rdx]
xor rax, rcx
movabs r9, 0x100000001b3
imul rax, r9
inc rdx
mov rcx, rdx
sub rcx, r10
cmp rcx, r8
jne 0x1401b1d79
mov r8, qword [rsi + 0x30]
and r8, rax
add r8, r8
mov rcx, qword [rsi + 0x18]
mov rdi, qword [rsi + 8]
cmp qword [rcx + r8*8], rdi
je 0x1401b1dbb
mov rdi, qword [rcx + r8*8 + 8]
mov rdi, qword [rdi]
mov r9, rdi
cmp r9, qword [rcx + r8*8]
je 0x1401b1e0a
mov rdi, qword [rdi + 8]
mov r9, rdi
mov rax, qword [rdi + 0x10]
cmp qword [r10], rax
jne 0x1401b1dbe
mov rcx, qword [rbx + 8]
mov rax, qword [rbx]
mov qword [rcx], rax
mov rcx, qword [rbx]
mov rax, qword [rbx + 8]
mov qword [rcx + 8], rax
dec qword [rsi + 0x10]
mov edx, 0x28
mov rcx, rbx
call fcn.140356b5c
mov qword [r14], rdi
mov byte [r14 + 8], 0
mov rax, r14
jmp 0x1401b1f2f
mov qword [rsp + 0x80], rbx
mov rax, qword [rbx]
cmp r9, rax
je 0x1401b1e47
mov rcx, qword [rbx + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], r9
mov rcx, qword [r9 + 8]
mov qword [rcx], rbx
mov rdx, qword [r9 + 8]
mov rcx, qword [rax + 8]
mov qword [r9 + 8], rcx
mov rcx, qword [rbx + 8]
mov qword [rax + 8], rcx
mov qword [rbx + 8], rdx
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + r8*8]
cmp rax, qword [rsi + 8]
jne 0x1401b1e64
mov qword [rdx + r8*8], rbx
mov rax, qword [rsi + 0x18]
mov qword [rax + r8*8 + 8], rbx
jmp 0x1401b1e93
cmp rax, r9
jne 0x1401b1e6f
mov qword [rdx + r8*8], rbx
jmp 0x1401b1e93
mov rax, qword [rdx + r8*8 + 8]
mov rcx, qword [rax]
mov qword [rdx + r8*8 + 8], rcx
cmp rcx, rbx
je 0x1401b1e93
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + r8*8 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r8*8 + 8], rcx
mov rax, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x38]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss xmm1, dword [0x1404202fc]
test rax, rax
jns 0x1401b1eb4
addss xmm0, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm2, rdx
test rdx, rdx
jns 0x1401b1ec5
addss xmm2, xmm1
divss xmm0, xmm2
comiss xmm0, dword [rsi]
jbe 0x1401b1f24
cmp rdx, 0x200
jae 0x1401b1edd
shl rdx, 3
jmp 0x1401b1eef
movabs rax, 0xfffffffffffffff
cmp rdx, rax
jae 0x1401b1eef
add rdx, rdx
mov rcx, rsi
call fcn.14005e790
mov rax, qword [rsi + 8]
cmp qword [rax], rax
je 0x1401b1f24
mov r15, qword [rax + 8]
mov rdi, qword [rsi + 8]
mov rdi, qword [rdi]
lea r8, [rdi + 0x10]
mov r9, rdi
lea rdx, [rsp + 0x28]
mov rcx, rsi
call fcn.1401b1d2c
cmp rdi, r15
jne 0x1401b1f04
mov qword [r14], rbx
mov byte [r14 + 8], 1
mov rax, r14
add rsp, 0x40
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret
Function at 0x1401b1f80
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
lea r11, [r8 + 0x10]
mov rsi, rdx
lea r9, [r11 + 8]
mov r10, rcx
cmp r9, r11
movabs rax, 0xcbf29ce484222325
mov rdi, r11
sbb rbx, rbx
not rbx
and ebx, 8
cmp r11, r9
ja 0x1401b1fdd
movzx ecx, byte [rdi]
movabs rdx, 0x100000001b3
xor rax, rcx
inc rdi
mov rcx, rdi
sub rcx, r11
imul rax, rdx
cmp rcx, rbx
jne 0x1401b1fbb
mov rdx, qword [r10 + 0x30]
mov rcx, qword [r10 + 0x18]
and rdx, rax
add rdx, rdx
cmp qword [rcx + rdx*8 + 8], r8
jne 0x1401b2015
cmp qword [rcx + rdx*8], r8
jne 0x1401b200a
mov rax, qword [r10 + 8]
mov qword [rcx + rdx*8], rax
mov rcx, qword [r10 + 0x18]
mov rax, qword [r10 + 8]
jmp 0x1401b200e
mov rax, qword [r8 + 8]
mov qword [rcx + rdx*8 + 8], rax
jmp 0x1401b2022
cmp qword [rcx + rdx*8], r8
jne 0x1401b2022
mov rax, qword [r8]
mov qword [rcx + rdx*8], rax
mov rax, qword [r8 + 8]
mov edx, 0x28
mov rbx, qword [r8]
mov qword [rax], rbx
mov rcx, qword [r8]
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
mov rcx, r8
dec qword [r10 + 0x10]
call fcn.140356b5c
mov qword [rsi], rbx
mov rax, rsi
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x1401b32cc
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
lea r9, [r8 + 0x10]
mov rbx, rdx
cmp qword [r9 + 0x18], 8
mov r10, rcx
mov rdx, qword [r9 + 0x10]
jb 0x1401b32ee
mov r9, qword [r9]
add rdx, rdx
xor edi, edi
movabs rax, 0xcbf29ce484222325
mov r11, r9
lea rcx, [rdx + r9]
cmp r9, rcx
cmova rdx, rdi
test rdx, rdx
je 0x1401b3333
movzx ecx, byte [r11]
movabs rdi, 0x100000001b3
xor rax, rcx
inc r11
mov rcx, r11
sub rcx, r9
imul rax, rdi
cmp rcx, rdx
jne 0x1401b3310
mov rdx, qword [r10 + 0x30]
mov rcx, qword [r10 + 0x18]
and rdx, rax
add rdx, rdx
cmp qword [rcx + rdx*8 + 8], r8
jne 0x1401b336b
cmp qword [rcx + rdx*8], r8
jne 0x1401b3360
mov rax, qword [r10 + 8]
mov qword [rcx + rdx*8], rax
mov rcx, qword [r10 + 0x18]
mov rax, qword [r10 + 8]
jmp 0x1401b3364
mov rax, qword [r8 + 8]
mov qword [rcx + rdx*8 + 8], rax
jmp 0x1401b3378
cmp qword [rcx + rdx*8], r8
jne 0x1401b3378
mov rax, qword [r8]
mov qword [rcx + rdx*8], rax
lea rcx, [r10 + 8]
mov rdx, rbx
call fcn.1401b3398
mov rax, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x1401b38e8
Capabilities:
Encode data using xor
Encrypt data using rc4 prga
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rbx, r9
mov r10, r8
mov rsi, rdx
mov r9, rcx
mov r15, qword [r8 + 0x10]
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x1401b3927
mov rdx, qword [r8]
movabs rax, 0xcbf29ce484222325
mov r11, rdx
lea r8, [r15 + r15]
lea rcx, [rdx + r8]
xor edi, edi
cmp rdx, rcx
cmova r8, rdi
test r8, r8
je 0x1401b396d
movzx ecx, byte [r11]
xor rax, rcx
movabs rdi, 0x100000001b3
imul rax, rdi
inc r11
mov rcx, r11
sub rcx, rdx
cmp rcx, r8
jne 0x1401b394a
mov r8, qword [r9 + 0x30]
and r8, rax
add r8, r8
mov r12, qword [r9 + 0x18]
mov rdi, qword [r9 + 8]
cmp rdi, qword [r12 + r8*8]
je 0x1401b3a1e
mov rdi, qword [r12 + r8*8 + 8]
mov rdi, qword [rdi]
cmp rdi, qword [r12 + r8*8]
je 0x1401b3a1e
mov rdi, qword [rdi + 8]
lea rax, [rdi + 0x10]
mov rcx, rax
cmp qword [rax + 0x18], 8
jb 0x1401b39b0
mov rcx, qword [rax]
mov r11, r10
cmp qword [r10 + 0x18], 8
jb 0x1401b39bd
mov r11, qword [r10]
cmp r15, qword [rax + 0x10]
jne 0x1401b3991
mov r14, r15
test r15, r15
je 0x1401b39fb
movzx eax, word [r11]
movzx edx, word [rcx]
cmp ax, dx
jb 0x1401b3991
sub r11, rcx
cmp ax, dx
ja 0x1401b3991
cmp r14, 1
je 0x1401b39fb
dec r14
add rcx, 2
movzx eax, word [rcx + r11]
movzx edx, word [rcx]
cmp ax, dx
jae 0x1401b39dd
jmp 0x1401b3991
mov r8, rbx
lea rdx, [rsp + 0x80]
lea rcx, [r9 + 8]
call fcn.1401b3398
mov qword [rsi], rdi
mov byte [rsi + 8], 0
mov rax, rsi
jmp 0x1401b3ab2
mov rax, qword [rbx]
cmp rdi, rax
je 0x1401b3a53
mov rcx, qword [rbx + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rdi
mov rcx, qword [rdi + 8]
mov qword [rcx], rbx
mov rdx, qword [rdi + 8]
mov rcx, qword [rax + 8]
mov qword [rdi + 8], rcx
mov rcx, qword [rbx + 8]
mov qword [rax + 8], rcx
mov qword [rbx + 8], rdx
mov rdx, qword [r9 + 0x18]
mov rax, qword [rdx + r8*8]
cmp rax, qword [r9 + 8]
jne 0x1401b3a70
mov qword [rdx + r8*8], rbx
mov rax, qword [r9 + 0x18]
mov qword [rax + r8*8 + 8], rbx
jmp 0x1401b3a9f
cmp rax, rdi
jne 0x1401b3a7b
mov qword [rdx + r8*8], rbx
jmp 0x1401b3a9f
mov rax, qword [rdx + r8*8 + 8]
mov rcx, qword [rax]
mov qword [rdx + r8*8 + 8], rcx
cmp rcx, rbx
je 0x1401b3a9f
mov rdx, qword [r9 + 0x18]
mov rax, qword [rdx + r8*8 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r8*8 + 8], rcx
mov rcx, r9
call fcn.1401b379c
nop
mov qword [rsi], rbx
mov byte [rsi + 8], 1
mov rax, rsi
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
Function at 0x1401b8a04
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x40
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rbx, r9
mov r10, r8
mov r14, rdx
mov rsi, rcx
movabs rax, 0xcbf29ce484222325
lea r9, [r8 + 8]
cmp r9, r8
sbb rdx, rdx
not rdx
and edx, 8
cmp r8, r9
ja 0x1401b8a70
movzx ecx, byte [r8]
xor rax, rcx
movabs r9, 0x100000001b3
imul rax, r9
inc r8
mov rcx, r8
sub rcx, r10
cmp rcx, rdx
jne 0x1401b8a4d
mov r8, qword [rsi + 0x30]
and r8, rax
add r8, r8
mov rcx, qword [rsi + 0x18]
mov rdi, qword [rsi + 8]
cmp qword [rcx + r8*8], rdi
je 0x1401b8a90
mov rdi, qword [rcx + r8*8 + 8]
mov rdi, qword [rdi]
mov r9, rdi
cmp r9, qword [rcx + r8*8]
je 0x1401b8acd
mov rdi, qword [rdi + 8]
mov r9, rdi
mov rax, qword [rdi + 0x10]
cmp qword [r10], rax
jne 0x1401b8a93
mov r8, rbx
lea rdx, [rsp + 0x80]
lea rcx, [rsi + 8]
call fcn.140096458
mov qword [r14], rdi
mov byte [r14 + 8], 0
mov rax, r14
jmp 0x1401b8bf2
mov qword [rsp + 0x80], rbx
mov rax, qword [rbx]
cmp r9, rax
je 0x1401b8b0a
mov rcx, qword [rbx + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], r9
mov rcx, qword [r9 + 8]
mov qword [rcx], rbx
mov rdx, qword [r9 + 8]
mov rcx, qword [rax + 8]
mov qword [r9 + 8], rcx
mov rcx, qword [rbx + 8]
mov qword [rax + 8], rcx
mov qword [rbx + 8], rdx
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + r8*8]
cmp rax, qword [rsi + 8]
jne 0x1401b8b27
mov qword [rdx + r8*8], rbx
mov rax, qword [rsi + 0x18]
mov qword [rax + r8*8 + 8], rbx
jmp 0x1401b8b56
cmp rax, r9
jne 0x1401b8b32
mov qword [rdx + r8*8], rbx
jmp 0x1401b8b56
mov rax, qword [rdx + r8*8 + 8]
mov rcx, qword [rax]
mov qword [rdx + r8*8 + 8], rcx
cmp rcx, rbx
je 0x1401b8b56
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + r8*8 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r8*8 + 8], rcx
mov rax, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x38]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss xmm1, dword [0x1404202fc]
test rax, rax
jns 0x1401b8b77
addss xmm0, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm2, rdx
test rdx, rdx
jns 0x1401b8b88
addss xmm2, xmm1
divss xmm0, xmm2
comiss xmm0, dword [rsi]
jbe 0x1401b8be7
cmp rdx, 0x200
jae 0x1401b8ba0
shl rdx, 3
jmp 0x1401b8bb2
movabs rax, 0xfffffffffffffff
cmp rdx, rax
jae 0x1401b8bb2
add rdx, rdx
mov rcx, rsi
call fcn.14005e790
mov rax, qword [rsi + 8]
cmp qword [rax], rax
je 0x1401b8be7
mov r15, qword [rax + 8]
mov rdi, qword [rsi + 8]
mov rdi, qword [rdi]
lea r8, [rdi + 0x10]
mov r9, rdi
lea rdx, [rsp + 0x28]
mov rcx, rsi
call fcn.1401b8a04
cmp rdi, r15
jne 0x1401b8bc7
mov qword [r14], rbx
mov byte [r14 + 8], 1
mov rax, r14
add rsp, 0x40
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret
Function at 0x1401bbefc
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x40
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rbx, r9
mov r10, r8
mov r14, rdx
mov rsi, rcx
movabs rax, 0xcbf29ce484222325
mov rdx, r8
lea r9, [r8 + 8]
cmp r9, r8
sbb r8, r8
not r8
and r8d, 8
cmp rdx, r9
ja 0x1401bbf6b
movzx ecx, byte [rdx]
xor rax, rcx
movabs r9, 0x100000001b3
imul rax, r9
inc rdx
mov rcx, rdx
sub rcx, r10
cmp rcx, r8
jne 0x1401bbf49
mov r8, qword [rsi + 0x30]
and r8, rax
add r8, r8
mov rcx, qword [rsi + 0x18]
mov rdi, qword [rsi + 8]
cmp qword [rcx + r8*8], rdi
je 0x1401bbf8b
mov rdi, qword [rcx + r8*8 + 8]
mov rdi, qword [rdi]
mov r9, rdi
cmp r9, qword [rcx + r8*8]
je 0x1401bbfe3
mov rdi, qword [rdi + 8]
mov r9, rdi
mov rax, qword [rdi + 0x10]
cmp qword [r10], rax
jne 0x1401bbf8e
mov rcx, qword [rbx + 8]
mov rax, qword [rbx]
mov qword [rcx], rax
mov rcx, qword [rbx]
mov rax, qword [rbx + 8]
mov qword [rcx + 8], rax
dec qword [rsi + 0x10]
lea rcx, [rbx + 0x18]
call fcn.1400662ac
mov edx, 0x58
mov rcx, rbx
call fcn.140356b5c
mov qword [r14], rdi
mov byte [r14 + 8], 0
mov rax, r14
jmp 0x1401bc108
mov qword [rsp + 0x80], rbx
mov rax, qword [rbx]
cmp r9, rax
je 0x1401bc020
mov rcx, qword [rbx + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], r9
mov rcx, qword [r9 + 8]
mov qword [rcx], rbx
mov rdx, qword [r9 + 8]
mov rcx, qword [rax + 8]
mov qword [r9 + 8], rcx
mov rcx, qword [rbx + 8]
mov qword [rax + 8], rcx
mov qword [rbx + 8], rdx
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + r8*8]
cmp rax, qword [rsi + 8]
jne 0x1401bc03d
mov qword [rdx + r8*8], rbx
mov rax, qword [rsi + 0x18]
mov qword [rax + r8*8 + 8], rbx
jmp 0x1401bc06c
cmp rax, r9
jne 0x1401bc048
mov qword [rdx + r8*8], rbx
jmp 0x1401bc06c
mov rax, qword [rdx + r8*8 + 8]
mov rcx, qword [rax]
mov qword [rdx + r8*8 + 8], rcx
cmp rcx, rbx
je 0x1401bc06c
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + r8*8 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r8*8 + 8], rcx
mov rax, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x38]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss xmm1, dword [0x1404202fc]
test rax, rax
jns 0x1401bc08d
addss xmm0, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm2, rdx
test rdx, rdx
jns 0x1401bc09e
addss xmm2, xmm1
divss xmm0, xmm2
comiss xmm0, dword [rsi]
jbe 0x1401bc0fd
cmp rdx, 0x200
jae 0x1401bc0b6
shl rdx, 3
jmp 0x1401bc0c8
movabs rax, 0xfffffffffffffff
cmp rdx, rax
jae 0x1401bc0c8
add rdx, rdx
mov rcx, rsi
call fcn.14005e790
mov rax, qword [rsi + 8]
cmp qword [rax], rax
je 0x1401bc0fd
mov r15, qword [rax + 8]
mov rdi, qword [rsi + 8]
mov rdi, qword [rdi]
lea r8, [rdi + 0x10]
mov r9, rdi
lea rdx, [rsp + 0x28]
mov rcx, rsi
call fcn.1401bbefc
cmp rdi, r15
jne 0x1401bc0dd
mov qword [r14], rbx
mov byte [r14 + 8], 1
mov rax, r14
add rsp, 0x40
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret
Function at 0x1401bc3c4
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
lea r11, [r8 + 0x10]
mov rdi, r8
lea r8, [r11 + 8]
mov rsi, rdx
cmp r8, r11
mov r9, rcx
movabs rax, 0xcbf29ce484222325
mov rbx, r11
sbb r10, r10
not r10
and r10d, 8
cmp r11, r8
ja 0x1401bc425
movzx ecx, byte [rbx]
movabs rdx, 0x100000001b3
xor rax, rcx
inc rbx
mov rcx, rbx
sub rcx, r11
imul rax, rdx
cmp rcx, r10
jne 0x1401bc403
mov rdx, qword [r9 + 0x30]
mov rcx, qword [r9 + 0x18]
and rdx, rax
add rdx, rdx
cmp qword [rcx + rdx*8 + 8], rdi
jne 0x1401bc45d
cmp qword [rcx + rdx*8], rdi
jne 0x1401bc452
mov rax, qword [r9 + 8]
mov qword [rcx + rdx*8], rax
mov rcx, qword [r9 + 0x18]
mov rax, qword [r9 + 8]
jmp 0x1401bc456
mov rax, qword [rdi + 8]
mov qword [rcx + rdx*8 + 8], rax
jmp 0x1401bc46a
cmp qword [rcx + rdx*8], rdi
jne 0x1401bc46a
mov rax, qword [rdi]
mov qword [rcx + rdx*8], rax
mov rax, qword [rdi + 8]
mov rbx, qword [rdi]
mov qword [rax], rbx
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
lea rcx, [r11 + 8]
dec qword [r9 + 0x10]
call fcn.1400662ac
mov edx, 0x58
mov rcx, rdi
call fcn.140356b5c
mov qword [rsi], rbx
mov rax, rsi
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x1401bd70c
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
mov qword [rbp - 0x31], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1405420e0]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov rcx, qword [rdx]
xor r15d, r15d
mov dword [rbp - 0x39], r15d
lea rdx, [rbp - 0x19]
call fcn.1401aef64
mov rsi, qword [rax]
mov rdi, qword [rax + 8]
test rdi, rdi
je 0x1401bd768
lock inc dword [rdi + 8]
mov rdi, qword [rax + 8]
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], rdi
or r14d, 0xffffffff
mov rbx, qword [rbp - 0x11]
test rbx, rbx
je 0x1401bd7b6
mov eax, r14d
lock xadd dword [rbx + 8], eax
add eax, r14d
jne 0x1401bd7b6
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [str.p76_]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
add eax, r14d
jne 0x1401bd7b6
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [str.p76_]
mov rdx, qword [rsi + 0x70]
test rdx, rdx
je 0x1401bd833
add rdx, 0x30
xor r8d, r8d
lea rcx, [rbp + 0x17]
call fcn.14006d604
nop
mov esi, 5
mov dword [rbp - 0x39], esi
lea r8, [rbp + 0x17]
cmp qword [rbp + 0x2f], 8
cmovae r8, qword [rbp + 0x17]
movabs rbx, 0xcbf29ce484222325
mov rdx, r8
mov rax, qword [rbp + 0x27]
lea r9, [rax + rax]
lea rax, [r9 + r8]
cmp r8, rax
cmova r9, r15
test r9, r9
je 0x1401bd8b1
movabs rcx, 0x100000001b3
movzx eax, byte [rdx]
xor rbx, rax
imul rbx, rcx
inc rdx
mov rax, rdx
sub rax, r8
cmp rax, r9
jne 0x1401bd819
jmp 0x1401bd8b1
mov qword [rbp + 7], r15
mov qword [rbp + 0xf], 7
mov word [rbp - 9], r15w
lea rdx, [0x1403cb630]
lea rcx, [rbp - 9]
call fcn.140055574
mov esi, 2
mov dword [rbp - 0x39], esi
lea r8, [rbp - 9]
cmp qword [rbp + 0xf], 8
cmovae r8, qword [rbp - 9]
movabs rbx, 0xcbf29ce484222325
mov rdx, r8
mov rax, qword [rbp + 7]
lea r9, [rax + rax]
lea rax, [r9 + r8]
cmp r8, rax
cmova r9, r15
test r9, r9
je 0x1401bd8b1
movabs rcx, 0x100000001b3
movzx eax, byte [rdx]
xor rbx, rax
imul rbx, rcx
inc rdx
mov rax, rdx
sub rax, r8
cmp rax, r9
jne 0x1401bd899
test sil, 2
je 0x1401bd8c7
and esi, 0xfffffffd
mov dword [rbp - 0x39], esi
lea rcx, [rbp - 9]
call fcn.140055f70
nop
test sil, 1
je 0x1401bd8d7
lea rcx, [rbp + 0x17]
call fcn.140055f70
nop
test rdi, rdi
je 0x1401bd915
mov eax, r14d
lock xadd dword [rdi + 8], eax
add eax, r14d
jne 0x1401bd915
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax]
call qword [str.p76_]
mov eax, r14d
lock xadd dword [rdi + 0xc], eax
add eax, r14d
jne 0x1401bd915
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 8]
call qword [str.p76_]
mov rax, rbx
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.140356560
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
jmp 0x1401bd70c
Function at 0x1401bdc9c
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
mov qword [rbp - 0x31], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1405420e0]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov rcx, qword [rdx]
xor r15d, r15d
mov dword [rbp - 0x39], r15d
lea rdx, [rbp - 0x19]
call fcn.1401aef64
mov rsi, qword [rax]
mov rdi, qword [rax + 8]
test rdi, rdi
je 0x1401bdcf8
lock inc dword [rdi + 8]
mov rdi, qword [rax + 8]
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], rdi
or r14d, 0xffffffff
mov rbx, qword [rbp - 0x11]
test rbx, rbx
je 0x1401bdd46
mov eax, r14d
lock xadd dword [rbx + 8], eax
add eax, r14d
jne 0x1401bdd46
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [str.p76_]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
add eax, r14d
jne 0x1401bdd46
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [str.p76_]
mov rdx, qword [rsi + 0x80]
test rdx, rdx
je 0x1401bddc6
add rdx, 0x30
xor r8d, r8d
lea rcx, [rbp + 0x17]
call fcn.14006d604
nop
mov esi, 5
mov dword [rbp - 0x39], esi
lea r8, [rbp + 0x17]
cmp qword [rbp + 0x2f], 8
cmovae r8, qword [rbp + 0x17]
movabs rbx, 0xcbf29ce484222325
mov rdx, r8
mov rax, qword [rbp + 0x27]
lea r9, [rax + rax]
lea rax, [r9 + r8]
cmp r8, rax
cmova r9, r15
test r9, r9
je 0x1401bde44
movabs rcx, 0x100000001b3
movzx eax, byte [rdx]
xor rbx, rax
imul rbx, rcx
inc rdx
mov rax, rdx
sub rax, r8
cmp rax, r9
jne 0x1401bddac
jmp 0x1401bde44
mov qword [rbp + 7], r15
mov qword [rbp + 0xf], 7
mov word [rbp - 9], r15w
lea rdx, [0x1403cb630]
lea rcx, [rbp - 9]
call fcn.140055574
mov esi, 2
mov dword [rbp - 0x39], esi
lea r8, [rbp - 9]
cmp qword [rbp + 0xf], 8
cmovae r8, qword [rbp - 9]
movabs rbx, 0xcbf29ce484222325
mov rdx, r8
mov rax, qword [rbp + 7]
lea r9, [rax + rax]
lea rax, [r9 + r8]
cmp r8, rax
cmova r9, r15
test r9, r9
je 0x1401bde44
movabs rcx, 0x100000001b3
movzx eax, byte [rdx]
xor rbx, rax
imul rbx, rcx
inc rdx
mov rax, rdx
sub rax, r8
cmp rax, r9
jne 0x1401bde2c
test sil, 2
je 0x1401bde5a
and esi, 0xfffffffd
mov dword [rbp - 0x39], esi
lea rcx, [rbp - 9]
call fcn.140055f70
nop
test sil, 1
je 0x1401bde6a
lea rcx, [rbp + 0x17]
call fcn.140055f70
nop
test rdi, rdi
je 0x1401bdea8
mov eax, r14d
lock xadd dword [rdi + 8], eax
add eax, r14d
jne 0x1401bdea8
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax]
call qword [str.p76_]
mov eax, r14d
lock xadd dword [rdi + 0xc], eax
add eax, r14d
jne 0x1401bdea8
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 8]
call qword [str.p76_]
mov rax, rbx
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.140356560
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
jmp 0x1401bdc9c
Function at 0x1401bff0c
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x40
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rbx, r9
mov r10, r8
mov r14, rdx
mov rsi, rcx
movabs rax, 0xcbf29ce484222325
mov rdx, r8
lea r9, [r8 + 8]
cmp r9, r8
sbb r8, r8
not r8
and r8d, 8
cmp rdx, r9
ja 0x1401bff7b
movzx ecx, byte [rdx]
xor rax, rcx
movabs r9, 0x100000001b3
imul rax, r9
inc rdx
mov rcx, rdx
sub rcx, r10
cmp rcx, r8
jne 0x1401bff59
mov r8, qword [rsi + 0x30]
and r8, rax
add r8, r8
mov rcx, qword [rsi + 0x18]
mov rdi, qword [rsi + 8]
cmp qword [rcx + r8*8], rdi
je 0x1401bff9b
mov rdi, qword [rcx + r8*8 + 8]
mov rdi, qword [rdi]
mov r9, rdi
cmp r9, qword [rcx + r8*8]
je 0x1401bffea
mov rdi, qword [rdi + 8]
mov r9, rdi
mov rax, qword [rdi + 0x10]
cmp qword [r10], rax
jne 0x1401bff9e
mov rcx, qword [rbx + 8]
mov rax, qword [rbx]
mov qword [rcx], rax
mov rcx, qword [rbx]
mov rax, qword [rbx + 8]
mov qword [rcx + 8], rax
dec qword [rsi + 0x10]
mov edx, Compress
mov rcx, rbx
call fcn.140356b5c
mov qword [r14], rdi
mov byte [r14 + 8], 0
mov rax, r14
jmp 0x1401c010f
mov qword [rsp + 0x80], rbx
mov rax, qword [rbx]
cmp r9, rax
je 0x1401c0027
mov rcx, qword [rbx + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], r9
mov rcx, qword [r9 + 8]
mov qword [rcx], rbx
mov rdx, qword [r9 + 8]
mov rcx, qword [rax + 8]
mov qword [r9 + 8], rcx
mov rcx, qword [rbx + 8]
mov qword [rax + 8], rcx
mov qword [rbx + 8], rdx
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + r8*8]
cmp rax, qword [rsi + 8]
jne 0x1401c0044
mov qword [rdx + r8*8], rbx
mov rax, qword [rsi + 0x18]
mov qword [rax + r8*8 + 8], rbx
jmp 0x1401c0073
cmp rax, r9
jne 0x1401c004f
mov qword [rdx + r8*8], rbx
jmp 0x1401c0073
mov rax, qword [rdx + r8*8 + 8]
mov rcx, qword [rax]
mov qword [rdx + r8*8 + 8], rcx
cmp rcx, rbx
je 0x1401c0073
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + r8*8 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r8*8 + 8], rcx
mov rax, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x38]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss xmm1, dword [0x1404202fc]
test rax, rax
jns 0x1401c0094
addss xmm0, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm2, rdx
test rdx, rdx
jns 0x1401c00a5
addss xmm2, xmm1
divss xmm0, xmm2
comiss xmm0, dword [rsi]
jbe 0x1401c0104
cmp rdx, 0x200
jae 0x1401c00bd
shl rdx, 3
jmp 0x1401c00cf
movabs rax, 0xfffffffffffffff
cmp rdx, rax
jae 0x1401c00cf
add rdx, rdx
mov rcx, rsi
call fcn.14005e790
mov rax, qword [rsi + 8]
cmp qword [rax], rax
je 0x1401c0104
mov r15, qword [rax + 8]
mov rdi, qword [rsi + 8]
mov rdi, qword [rdi]
lea r8, [rdi + 0x10]
mov r9, rdi
lea rdx, [rsp + 0x28]
mov rcx, rsi
call fcn.1401bff0c
cmp rdi, r15
jne 0x1401c00e4
mov qword [r14], rbx
mov byte [r14 + 8], 1
mov rax, r14
add rsp, 0x40
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret