joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1800019a0
Capabilities:
Create thread

Disassembly:
push rbx
sub rsp, 0x40
cmp edx, 1
jne 0x180001a43
call fcn.180001890
test al, al
jne 0x180001a4e
xor ecx, ecx
mov eax, 0x40000000
cpuid
mov r10d, ecx
mov r8d, eax
xor ecx, ecx
mov r9d, edx
mov r11d, ebx
mov eax, 1
cpuid
xor ecx, ecx
cpuid
cmp eax, r8d
jne 0x180001a4e
cmp ebx, r11d
jne 0x180001a4e
cmp ecx, r10d
jne 0x180001a4e
cmp edx, r9d
jne 0x180001a4e
xor ecx, ecx
mov eax, 0x4201337
cpuid
mov r8d, eax
mov r10d, ecx
xor ecx, ecx
mov eax, 0x40000000
mov r9d, edx
mov r11d, ebx
cpuid
cmp r8d, eax
jne 0x180001a4e
cmp r11d, ebx
jne 0x180001a4e
cmp r10d, ecx
jne 0x180001a4e
cmp r9d, edx
jne 0x180001a4e
xor eax, eax
lea r8, [0x180001220]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, 1
add rsp, 0x40
pop rbx
ret
xor eax, eax
add rsp, 0x40
pop rbx
ret

Function at 0x180674058
Capabilities:
Decompress data using aplib

Disassembly:
call 0x1806741df
push r10
mov r10, rsp
push r10
mov rsi, qword [r10 + 0x10]
mov rdi, qword [r10 + 0x20]
cld
mov dl, 0x80
mov al, byte [rsi]
inc rsi
mov byte [rdi], al
inc rdi
mov ebx, 2
add dl, dl
jne 0x180674089
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x18067406f
add dl, dl
jne 0x180674096
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x1806740f6
xor eax, eax
add dl, dl
jne 0x1806740a5
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x1806741ad
add dl, dl
jne 0x1806740b6
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x1806740c3
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x1806740d0
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x1806740dd
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
je 0x1806740ea
push rdi
mov eax, eax
sub rdi, rax
mov al, byte [rdi]
pop rdi
mov byte [rdi], al
inc rdi
mov ebx, 2
jmp 0x18067407e
mov eax, 1
add dl, dl
jne 0x180674106
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x180674113
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x1806740fb
sub eax, ebx
mov ebx, 1
jne 0x18067414c
mov ecx, 1
add dl, dl
jne 0x18067412e
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x18067413b
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x180674123
push rsi
mov rsi, rdi
sub rsi, rbp
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x18067407e
dec eax
shl eax, 8
mov al, byte [rsi]
inc rsi
mov ebp, eax
mov ecx, 1
add dl, dl
jne 0x180674168
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x180674175
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x18067415d
cmp eax, 0x7d00
jae 0x18067419b
cmp eax, 0x500
jb 0x180674196
inc ecx
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x18067407e
cmp eax, 0x7f
ja 0x18067419e
add ecx, 2
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x18067407e
mov al, byte [rsi]
inc rsi
xor ecx, ecx
shr al, 1
je 0x1806741d2
adc ecx, 2
mov ebp, eax
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
mov ebx, 1
jmp 0x18067407e
pop r10
sub rdi, qword [r10 + 0x20]
mov eax, edi
pop r10
ret 0x20
Function at 0x140029470
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x20
mov rsi, rcx
movabs rax, 0xfffffffffffffff
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x140029632
lea rax, [rdx - 1]
or rax, rdi
bsr rcx, rax
inc ecx
shl rdi, cl
mov rbx, qword [rsi + 8]
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
mov r8, rbx
call fcn.1400289f0
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rdi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x1400295f0
movabs rbp, 0x100000001b3
movabs r14, 0xcbf29ce484222325
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [rdx]
movzx r8d, byte [rcx + 0x10]
xor r8, r14
imul r8, rbp
movzx eax, byte [rcx + 0x11]
xor r8, rax
imul r8, rbp
movzx eax, byte [rcx + 0x12]
xor r8, rax
imul r8, rbp
movzx eax, byte [rcx + 0x13]
xor r8, rax
imul r8, rbp
and r8, qword [rsi + 0x30]
mov r11, r8
shl r11, 4
add r11, qword [rsi + 0x18]
add r8, r8
mov rax, qword [rsi + 0x18]
lea rdi, [rax + r8*8]
cmp qword [r11], rbx
jne 0x140029568
mov qword [r11], rcx
mov qword [rdi + 8], rcx
jmp 0x1400295e4
mov rax, qword [rdi + 8]
mov r8d, dword [rax + 0x10]
cmp dword [rcx + 0x10], r8d
jne 0x1400295a5
mov r8, qword [rax]
cmp r8, rcx
je 0x14002959f
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov rax, qword [rdx + 8]
mov qword [rax], r8
mov r9, qword [r8 + 8]
mov qword [r9], rcx
mov qword [r8 + 8], rax
mov qword [rdx + 8], r10
mov qword [rcx + 8], r9
mov qword [rdi + 8], rcx
jmp 0x1400295e4
cmp qword [r11], rax
je 0x1400295c0
mov r9d, dword [rcx + 0x10]
mov r8, qword [r11]
mov rax, qword [rax + 8]
cmp r9d, dword [rax + 0x10]
je 0x14002960c
cmp r8, rax
jne 0x1400295b1
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov qword [rax + 8], r8
mov qword [rdx + 8], r10
mov qword [rcx + 8], r9
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x140029510
mov qword [rsp + 0x48], 0
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x50]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret
mov rax, qword [rax]
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov qword [rax + 8], r8
mov qword [rdx + 8], r10
mov qword [rcx + 8], r9
jmp 0x1400295e4
lea rcx, str.invalid_hash_bucket_count
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3
Function at 0x1400299f0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x68
mov rbp, r8
mov r14, rdx
mov r10, rcx
cmp rdx, r8
je 0x140029b35
mov rax, qword [rcx + 8]
mov qword [rsp + 0xc0], rax
mov r11, qword [rcx + 0x18]
mov qword [rsp + 0x28], r11
lea r12, [rcx + 8]
mov qword [rsp + 0x40], r12
mov rax, qword [rdx + 8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rdx
mov rax, qword [rdx + 8]
mov qword [rsp + 0x20], rax
lea r8, [rdx + 0x10]
mov r9, qword [r8 + 0x10]
cmp qword [r8 + 0x18], 0x10
jb 0x140029a63
mov r8, qword [r8]
movabs rdx, 0xcbf29ce484222325
xor ecx, ecx
movabs rbx, 0x100000001b3
test r9, r9
je 0x140029a94
nop
movzx eax, byte [rcx + r8]
xor rdx, rax
imul rdx, rbx
inc rcx
cmp rcx, r9
jb 0x140029a80
mov rax, qword [r10 + 0x30]
and rax, rdx
mov r15, rax
shl r15, 4
add r15, r11
add rax, rax
inc rax
lea rax, [r11 + rax*8]
mov qword [rsp + 0xb8], rax
cmp qword [r15], r14
sete r13b
mov rax, qword [rax]
mov qword [rsp + 0xc8], rax
nop dword [rax]
cmp r14, rax
sete sil
mov rdi, r14
mov r14, qword [r14]
mov qword [rsp + 0x50], r14
lea rbx, [rdi + 0x10]
mov qword [rsp + 0x38], rbx
lea rcx, [rbx + 0x20]
call fcn.140021f90
nop
mov rcx, rbx
call fcn.140021f90
mov edx, 0x50
mov rcx, rdi
call fcn.140233b10
dec qword [r12 + 8]
test sil, sil
jne 0x140029b49
cmp r14, rbp
mov rax, qword [rsp + 0xc8]
jne 0x140029ad0
test r13b, r13b
je 0x140029b29
mov qword [r15], r14
mov rax, qword [rsp + 0x30]
mov qword [rax], r14
mov qword [r14 + 8], rax
mov rax, rbp
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rax, qword [rsp + 0xb8]
test r13b, r13b
je 0x140029b63
mov rcx, qword [rsp + 0xc0]
mov qword [r15], rcx
jmp 0x140029b68
mov rcx, qword [rsp + 0x20]
cmp r14, rbp
mov qword [rax], rcx
je 0x140029b29
lea r8, [r14 + 0x10]
mov r9, qword [r8 + 0x10]
cmp qword [r8 + 0x18], 0x10
jb 0x140029b82
mov r8, qword [r8]
movabs rdx, 0xcbf29ce484222325
xor eax, eax
test r9, r9
je 0x140029bb9
movabs r12, 0x100000001b3
nop dword [rax]
movzx ecx, byte [rax + r8]
xor rdx, rcx
imul rdx, r12
inc rax
cmp rax, r9
jb 0x140029ba0
mov r12, qword [rsp + 0x40]
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax + 0x30]
and rax, rdx
mov r15, rax
shl r15, 4
mov rcx, qword [rsp + 0x28]
add r15, rcx
add rax, rax
inc rax
lea rax, [rcx + rax*8]
mov qword [rsp + 0xb8], rax
mov r13, qword [rax]
nop dword [rax]
cmp r14, r13
sete sil
mov rdi, r14
mov r14, qword [r14]
mov qword [rsp + 0x50], r14
lea rbx, [rdi + 0x10]
mov qword [rsp + 0xc8], rbx
lea rcx, [rbx + 0x20]
call fcn.140021f90
nop
mov rcx, rbx
call fcn.140021f90
mov edx, 0x50
mov rcx, rdi
call fcn.140233b10
dec qword [r12 + 8]
test sil, sil
jne 0x140029c42
cmp r14, rbp
je 0x140029b26
jmp 0x140029bf0
mov rcx, qword [rsp + 0xc0]
mov qword [r15], rcx
mov rax, qword [rsp + 0xb8]
jmp 0x140029b68
Function at 0x140029c60
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x58
mov rbx, r8
mov r14, rdx
mov rdx, rcx
cmp r14, r8
je 0x140029d8b
mov r13, qword [rcx + 8]
mov r8, qword [rcx + 0x18]
mov qword [rsp + 0x20], r8
lea rbp, [rcx + 8]
mov qword [rsp + 0x38], rbp
mov rax, qword [r14 + 8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], r14
mov rax, qword [r14 + 8]
mov qword [rsp + 0xb8], rax
movzx ecx, byte [r14 + 0x10]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movabs r9, 0x100000001b3
imul rcx, r9
movzx eax, byte [r14 + 0x11]
xor rcx, rax
imul rcx, r9
movzx eax, byte [r14 + 0x12]
xor rcx, rax
imul rcx, r9
movzx eax, byte [r14 + 0x13]
xor rcx, rax
imul rcx, r9
mov rax, qword [rdx + 0x30]
and rax, rcx
mov r12, rax
shl r12, 4
add r12, r8
add rax, rax
inc rax
lea rax, [r8 + rax*8]
mov qword [rsp + 0xb0], rax
cmp qword [r12], r14
sete byte [rsp + 0xa8]
mov r15, qword [rax]
cmp r14, r15
sete sil
mov rdi, r14
mov r14, qword [r14]
mov qword [rsp + 0x48], r14
lea rcx, [rdi + 0x10]
mov qword [rsp + 0x30], rcx
add rcx, 8
call fcn.140021f90
mov edx, gethostname
mov rcx, rdi
call fcn.140233b10
dec qword [rbp + 8]
test sil, sil
jne 0x140029d9f
cmp r14, rbx
jne 0x140029d32
cmp byte [rsp + 0xa8], sil
je 0x140029d7f
mov qword [r12], r14
mov rax, qword [rsp + 0x28]
mov qword [rax], r14
mov qword [r14 + 8], rax
mov rax, rbx
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rax, qword [rsp + 0xb0]
cmp byte [rsp + 0xa8], 0
je 0x140029dba
mov qword [r12], r13
mov qword [rax], r13
jmp 0x140029dc5
mov rcx, qword [rsp + 0xb8]
mov qword [rax], rcx
cmp r14, rbx
je 0x140029d7f
movzx ecx, byte [r14 + 0x10]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movabs rdx, 0x100000001b3
imul rcx, rdx
movzx eax, byte [r14 + 0x11]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [r14 + 0x12]
xor rcx, rax
imul rcx, rdx
movzx eax, byte [r14 + 0x13]
xor rcx, rax
imul rcx, rdx
mov rax, qword [rsp + 0xa0]
mov rax, qword [rax + 0x30]
and rax, rcx
mov r12, rax
shl r12, 4
mov rcx, qword [rsp + 0x20]
add r12, rcx
add rax, rax
inc rax
lea rax, [rcx + rax*8]
mov qword [rsp + 0xa8], rax
mov r15, qword [rax]
cmp r14, r15
sete sil
mov rdi, r14
mov r14, qword [r14]
mov qword [rsp + 0x48], r14
lea rcx, [rdi + 0x10]
mov qword [rsp + 0xb0], rcx
add rcx, 8
call fcn.140021f90
mov edx, gethostname
mov rcx, rdi
call fcn.140233b10
dec qword [rbp + 8]
test sil, sil
jne 0x140029e89
cmp r14, rbx
je 0x140029d7b
jmp 0x140029e41
mov qword [r12], r13
mov rax, qword [rsp + 0xa8]
mov qword [rax], r13
jmp 0x140029dc5
Function at 0x14003b8b0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x20
mov rsi, rcx
movabs rax, 0xfffffffffffffff
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x14003ba72
lea rax, [rdx - 1]
or rax, rdi
bsr rcx, rax
inc ecx
shl rdi, cl
mov rbx, qword [rsi + 8]
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
mov r8, rbx
call fcn.1400289f0
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rdi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x14003ba30
movabs rbp, 0x100000001b3
movabs r14, 0xcbf29ce484222325
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [rdx]
movzx r8d, byte [rcx + 0x10]
xor r8, r14
imul r8, rbp
movzx eax, byte [rcx + 0x11]
xor r8, rax
imul r8, rbp
movzx eax, byte [rcx + 0x12]
xor r8, rax
imul r8, rbp
movzx eax, byte [rcx + 0x13]
xor r8, rax
imul r8, rbp
and r8, qword [rsi + 0x30]
mov r11, r8
shl r11, 4
add r11, qword [rsi + 0x18]
add r8, r8
mov rax, qword [rsi + 0x18]
lea rdi, [rax + r8*8]
cmp qword [r11], rbx
jne 0x14003b9a8
mov qword [r11], rcx
mov qword [rdi + 8], rcx
jmp 0x14003ba24
mov rax, qword [rdi + 8]
mov r8d, dword [rax + 0x10]
cmp dword [rcx + 0x10], r8d
jne 0x14003b9e5
mov r8, qword [rax]
cmp r8, rcx
je 0x14003b9df
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov rax, qword [rdx + 8]
mov qword [rax], r8
mov r9, qword [r8 + 8]
mov qword [r9], rcx
mov qword [r8 + 8], rax
mov qword [rdx + 8], r10
mov qword [rcx + 8], r9
mov qword [rdi + 8], rcx
jmp 0x14003ba24
cmp qword [r11], rax
je 0x14003ba00
mov r9d, dword [rcx + 0x10]
mov r8, qword [r11]
mov rax, qword [rax + 8]
cmp r9d, dword [rax + 0x10]
je 0x14003ba4c
cmp r8, rax
jne 0x14003b9f1
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov qword [rax + 8], r8
mov qword [rdx + 8], r10
mov qword [rcx + 8], r9
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x14003b950
mov qword [rsp + 0x48], 0
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x50]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret
mov rax, qword [rax]
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov qword [rax + 8], r8
mov qword [rdx + 8], r10
mov qword [rcx + 8], r9
jmp 0x14003ba24
lea rcx, str.invalid_hash_bucket_count
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3
Function at 0x140055410
Capabilities:
Hash data using fnv

Disassembly:
mov r9, rdx
movabs rax, 0xcbf29ce484222325
mov rdx, rcx
movabs rcx, 0x100000001b3
movzx r8d, byte [r9]
xor r8, rax
movzx eax, byte [r9 + 1]
imul r8, rcx
xor r8, rax
movzx eax, byte [r9 + 2]
imul r8, rcx
xor r8, rax
movzx eax, byte [r9 + 3]
imul r8, rcx
xor r8, rax
movzx eax, byte [r9 + 4]
imul r8, rcx
xor r8, rax
movzx eax, byte [r9 + 5]
imul r8, rcx
xor r8, rax
movzx eax, byte [r9 + 6]
imul r8, rcx
xor r8, rax
movzx eax, byte [r9 + 7]
imul r8, rcx
xor r8, rax
imul r8, rcx
mov rcx, qword [rdx + 0x30]
and rcx, r8
mov r8, qword [rdx + 0x18]
mov rdx, qword [rdx + 8]
mov rax, rcx
add rax, rax
add rcx, rcx
mov rax, qword [r8 + rax*8]
mov r10, qword [r8 + rcx*8]
lea r11, [r8 + rcx*8]
nop dword [rax]
cmp r10, rdx
jne 0x1400554ba
mov rcx, rdx
jmp 0x1400554c1
mov rcx, qword [r11 + 8]
mov rcx, qword [rcx]
cmp rax, rcx
je 0x1400554de
mov rcx, qword [r9]
cmp qword [rax + 0x10], rcx
je 0x1400554d4
mov rax, qword [rax]
jmp 0x1400554b0
cmp rax, rdx
je 0x1400554de
mov rax, qword [rax + 0x18]
ret
xor eax, eax
ret
Function at 0x140055a40
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x50], rsi
mov rdi, r9
mov rsi, rdx
mov r10, rcx
movzx r9d, byte [r8]
movabs rax, 0xcbf29ce484222325
xor r9, rax
movabs rcx, 0x100000001b3
imul r9, rcx
movzx eax, byte [r8 + 1]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 2]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 3]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 4]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 5]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 6]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 7]
xor r9, rax
imul r9, rcx
mov r11, qword [r10 + 0x30]
and r11, r9
mov rbx, qword [r10 + 8]
mov rdx, r11
add rdx, rdx
mov rax, qword [r10 + 0x18]
mov rcx, qword [rax + rdx*8]
cmp rbx, rcx
je 0x140055b4b
mov rbx, qword [rax + rdx*8 + 8]
mov rbx, qword [rbx]
cmp rbx, rcx
je 0x140055b4b
mov rbx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
cmp qword [r8], rax
jne 0x140055b04
mov rcx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rcx], rax
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
dec qword [r10 + 0x10]
mov edx, 0x20
mov rcx, rdi
call fcn.140233b10
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
jmp 0x140055be1
mov rax, qword [rdi]
cmp rbx, rax
je 0x140055b80
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
shl r11, 4
mov rdx, qword [r10 + 0x18]
add rdx, r11
mov rax, qword [rdx]
cmp rax, qword [r10 + 8]
jne 0x140055ba2
mov qword [rdx], rdi
mov rax, qword [r10 + 0x18]
mov qword [rax + r11 + 8], rdi
jmp 0x140055bce
cmp rax, rbx
jne 0x140055bac
mov qword [rdx], rdi
jmp 0x140055bce
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x140055bce
mov rdx, qword [r10 + 0x18]
mov rax, qword [rdx + r11 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r11 + 8], rcx
mov rcx, r10
call fcn.140058ca0
nop
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
Function at 0x140055de0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rcx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rsi
mov rsi, rdx
mov r14, rcx
movzx r9d, byte [r8]
movabs rax, 0xcbf29ce484222325
xor r9, rax
movabs rcx, 0x100000001b3
imul r9, rcx
movzx eax, byte [r8 + 1]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 2]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 3]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 4]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 5]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 6]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 7]
xor r9, rax
imul r9, rcx
mov r12, qword [r14 + 0x30]
and r12, r9
mov rdi, qword [r14 + 8]
mov rbx, r12
add rbx, rbx
mov rax, qword [r14 + 0x18]
mov rcx, qword [rax + rbx*8]
cmp rcx, rdi
jne 0x140055ea1
mov rbx, rdi
jmp 0x140055eb0
mov rbx, qword [rax + rbx*8 + 8]
mov rbx, qword [rbx]
nop dword [rax]
cmp rbx, rcx
je 0x140055ed1
mov rbx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
cmp qword [r8], rax
jne 0x140055eb0
mov qword [rdx], rbx
mov byte [rdx + 8], 0
mov rax, rsi
jmp 0x140055fbc
mov rdi, qword [rdi]
mov r13, qword [rdi + 8]
mov r9, r8
mov r8, r13
mov rdx, rdi
lea rcx, [r14 + 8]
call fcn.1400557a0
mov rdx, rax
mov rax, qword [r14 + 0x10]
movabs rcx, 0x7fffffffffffffe
sub rcx, rax
cmp rcx, 1
jb 0x140055fd4
inc rax
mov qword [r14 + 0x10], rax
mov qword [rdi + 8], rdx
mov qword [r13], rdx
mov rcx, qword [r14 + 8]
mov rdi, qword [rcx]
mov qword [rsp + 0x20], rdi
mov rax, qword [rdi]
cmp rbx, rax
je 0x140055f5c
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rcx, qword [r14 + 8]
shl r12, 4
mov rdx, qword [r14 + 0x18]
add rdx, r12
mov rax, qword [rdx]
cmp rax, rcx
jne 0x140055f7d
mov qword [rdx], rdi
mov rax, qword [r14 + 0x18]
mov qword [rax + r12 + 8], rdi
jmp 0x140055fa9
cmp rax, rbx
jne 0x140055f87
mov qword [rdx], rdi
jmp 0x140055fa9
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x140055fa9
mov rdx, qword [r14 + 0x18]
mov rax, qword [rdx + r12 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r12 + 8], rcx
mov rcx, r14
call fcn.140058ca0
nop
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rcx, [0x14036d7b0]
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3
Function at 0x1400560b0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
movzx r9d, byte [r8 + 0x10]
mov r10, rcx
movabs rcx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r9, rax
mov rdi, rdx
movzx eax, byte [r8 + 0x11]
mov rdx, qword [r10 + 0x30]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x12]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x13]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x14]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x15]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x16]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x17]
imul r9, rcx
xor r9, rax
imul r9, rcx
mov rcx, qword [r10 + 0x18]
and rdx, r9
shl rdx, 4
add rcx, rdx
mov rax, qword [rcx]
cmp qword [rcx + 8], r8
jne 0x140056174
cmp rax, r8
jne 0x14005616a
mov rax, qword [r10 + 8]
mov qword [rcx], rax
mov rcx, qword [r10 + 0x18]
mov rax, qword [r10 + 8]
mov qword [rdx + rcx + 8], rax
jmp 0x14005617f
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
jmp 0x14005617f
cmp rax, r8
jne 0x14005617f
mov rax, qword [r8]
mov qword [rcx], rax
mov rax, qword [r8 + 8]
mov edx, 0x20
mov rbx, qword [r8]
mov qword [rax], rbx
mov rcx, qword [r8]
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
mov rcx, r8
dec qword [r10 + 0x10]
call fcn.140233b10
mov qword [rdi], rbx
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x14005da70
Capabilities:
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x28
mov rdi, rcx
mov ebp, r9d
mov rcx, qword [rcx + 8]
mov rbx, r8
mov rsi, rdx
cmp qword [r8 + 0x50], rcx
je 0x14005daa5
lea r9, str.Field_does_not_match_message_type.
mov rdx, rbx
lea r8, str.GetRepeatedEnumValue
call fcn.14005fdd0
cmp dword [rbx + 0x3c], 3
je 0x14005dac5
mov rcx, qword [rdi + 8]
lea r9, str.Field_is_singular__the_method_requires_a_repeated_field.
lea r8, str.GetRepeatedEnumValue
mov rdx, rbx
call fcn.14005fdd0
mov rcx, rbx
call fcn.1400592d0
movsxd rcx, eax
lea rax, [0x140371910]
cmp dword [rax + rcx*4], 8
je 0x14005daf6
mov rcx, qword [rdi + 8]
lea r8, str.GetRepeatedEnumValue
mov r9d, 8
mov rdx, rbx
call fcn.14005fec0
cmp byte [rbx + 0x42], 0
je 0x14005db11
mov ecx, dword [rdi + 0x30]
mov r8d, ebp
mov edx, dword [rbx + 0x44]
add rcx, rsi
call fcn.140075650
mov edi, eax
jmp 0x14005db2b
mov r8, rbx
mov rdx, rsi
mov rcx, rdi
call fcn.140059410
mov rcx, rax
mov edx, ebp
call fcn.140070fc0
mov edi, dword [rax]
mov rcx, rbx
call fcn.1400aa750
mov rcx, rax
mov edx, edi
add rsp, 0x28
pop rdi
pop rsi
pop rbp
pop rbx
jmp 0x14009c1c0