joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140751ec8
Capabilities:
Decompress data using aplib

Disassembly:
call 0x14075204f
push r10
mov r10, rsp
push r10
mov rsi, qword [r10 + 0x10]
mov rdi, qword [r10 + 0x20]
cld
mov dl, 0x80
mov al, byte [rsi]
inc rsi
mov byte [rdi], al
inc rdi
mov ebx, 2
add dl, dl
jne 0x140751ef9
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x140751edf
add dl, dl
jne 0x140751f06
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x140751f66
xor eax, eax
add dl, dl
jne 0x140751f15
mov dl, byte [rsi]
inc rsi
adc dl, dl
jae 0x14075201d
add dl, dl
jne 0x140751f26
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x140751f33
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x140751f40
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x140751f4d
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
je 0x140751f5a
push rdi
mov eax, eax
sub rdi, rax
mov al, byte [rdi]
pop rdi
mov byte [rdi], al
inc rdi
mov ebx, 2
jmp 0x140751eee
mov eax, 1
add dl, dl
jne 0x140751f76
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc eax, eax
add dl, dl
jne 0x140751f83
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x140751f6b
sub eax, ebx
mov ebx, 1
jne 0x140751fbc
mov ecx, 1
add dl, dl
jne 0x140751f9e
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x140751fab
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x140751f93
push rsi
mov rsi, rdi
sub rsi, rbp
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x140751eee
dec eax
shl eax, 8
mov al, byte [rsi]
inc rsi
mov ebp, eax
mov ecx, 1
add dl, dl
jne 0x140751fd8
mov dl, byte [rsi]
inc rsi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0x140751fe5
mov dl, byte [rsi]
inc rsi
adc dl, dl
jb 0x140751fcd
cmp eax, 0x7d00
jae 0x14075200b
cmp eax, 0x500
jb 0x140752006
inc ecx
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x140751eee
cmp eax, 0x7f
ja 0x14075200e
add ecx, 2
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
jmp 0x140751eee
mov al, byte [rsi]
inc rsi
xor ecx, ecx
shr al, 1
je 0x140752042
adc ecx, 2
mov ebp, eax
push rsi
mov rsi, rdi
sub rsi, rax
rep movsb byte [rdi], byte [rsi]
pop rsi
mov ebx, 1
jmp 0x140751eee
pop r10
sub rdi, qword [r10 + 0x20]
mov eax, edi
pop r10
ret 0x20
Function at 0x140001e10
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov rdi, rcx
mov ecx, dword [rcx + 0xc0]
test ecx, ecx
je 0x14000202d
movabs rsi, 0xcbf29ce484222325
movabs rbx, 0x100000001b3
cmp byte [rdi + 0xd0], 0
jne 0x14000202d
mov rax, qword [rdi + 0xc8]
mov rbp, qword [rax]
add rax, 8
mov qword [rdi + 0xc8], rax
lea eax, [rcx - 1]
mov dword [rdi + 0xc0], eax
cmp byte [rbp], 0x2d
je 0x140001ea3
mov rcx, qword [rdi + 0xb8]
test rcx, rcx
je 0x140001ea3
mov qword [rsp + 0x70], rbp
lea rdx, [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x14000201f
mov qword [rsp + 0x20], 0
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0xf
inc r8
cmp byte [r8 + rbp], 0
jne 0x140001ec5
mov rdx, rbp
lea rcx, [rsp + 0x20]
call fcn.140001ad0
mov r13, qword [rsp + 0x38]
lea r8, [rsp + 0x20]
mov r15, qword [rsp + 0x20]
cmp r13, 0x10
mov rdx, rsi
mov rsi, qword [rsp + 0x30]
cmovae r8, r15
xor ecx, ecx
test rsi, rsi
je 0x140001f24
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rcx + r8]
inc rcx
xor rdx, rax
imul rdx, rbx
cmp rcx, rsi
jb 0x140001f10
mov rcx, qword [rdi + 0x30]
mov rax, qword [rdi + 0x18]
and rcx, rdx
mov r12, qword [rdi + 8]
add rcx, rcx
mov rbx, qword [rax + rcx*8 + 8]
cmp rbx, r12
je 0x140001f90
mov r14, qword [rax + rcx*8]
nop dword [rax]
nop dword [rax + rax]
cmp qword [rbx + 0x28], 0x10
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
jb 0x140001f62
mov rdx, qword [rdx]
cmp r13, 0x10
lea rcx, [rsp + 0x20]
cmovae rcx, r15
cmp rsi, rax
jne 0x140001f80
mov r8, rsi
call fcn.140118a40
test eax, eax
je 0x140001f8b
cmp rbx, r14
je 0x140001f90
mov rbx, qword [rbx + 8]
jmp 0x140001f50
test rbx, rbx
jne 0x140001f93
mov rbx, r12
cmp r13, 0x10
jb 0x140001fca
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140001fc2
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002097
mov rcx, r15
call fcn.140116b70
cmp rbx, qword [rdi + 8]
jne 0x140001ff5
cmp byte [rdi + 0xd1], 0
je 0x14000204d
mov rcx, qword [rdi + 0xb8]
mov qword [rsp + 0x70], rbp
test rcx, rcx
je 0x14000208b
lea rdx, [rsp + 0x70]
jmp 0x140002005
mov rcx, qword [rbx + 0x68]
test rcx, rcx
je 0x140002091
mov rdx, rdi
mov rax, qword [rcx]
call qword [rax + 0x10]
movabs rsi, 0xcbf29ce484222325
movabs rbx, 0x100000001b3
mov ecx, dword [rdi + 0xc0]
test ecx, ecx
jne 0x140001e51
mov al, 1
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, 2
call fcn.140121190
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Invalid_argument._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121190
mov rcx, rax
call fcn.14012154c
mov rcx, qword [rdi + 0x78]
test rcx, rcx
je 0x140002087
mov rax, qword [rcx]
call qword [rax + 0x10]
xor al, al
jmp 0x14000202f
call fcn.140113b14
int3
call fcn.140113b14
int3
call fcn.14011d1bc
int3
Function at 0x1400058b0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x30
cmp qword [rdx + 0x18], 0x10
mov r10, rdx
mov r11, qword [rdx + 0x10]
jb 0x1400058c7
mov r10, qword [rdx]
xor ebx, ebx
movabs r9, 0xcbf29ce484222325
mov r8d, ebx
test r11, r11
je 0x140005909
mov qword [rsp + 0x40], rdi
movabs rdi, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [r8 + r10]
inc r8
xor r9, rax
imul r9, rdi
cmp r8, r11
jb 0x1400058f0
mov rdi, qword [rsp + 0x40]
mov r8, rdx
lea rdx, [rsp + 0x20]
call fcn.1400051c0
cmp qword [rax + 8], rbx
setne bl
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x140006720
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
xor r9d, r9d
test r8, r8
je 0x140006754
movabs r10, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9 + rdx]
inc r9
xor rcx, rax
imul rcx, r10
cmp r9, r8
jb 0x140006740
mov rax, rcx
ret

Function at 0x140006760
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x140006943
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x40], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.140001960
mov qword [rsi + 0x38], rdi
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x140006908
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + 0x11]
movzx r9d, byte [rcx + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rdx, qword [rdx]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x12]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x13]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x14]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x15]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x16]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x17]
imul r9, rdi
xor r9, rax
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r10, qword [r11]
cmp r10, rbx
jne 0x14000687c
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x1400068f7
mov rax, qword [r11 + 8]
mov r9, qword [rcx + 0x10]
cmp r9, qword [rax + 0x10]
jne 0x1400068b9
mov r10, qword [rax]
cmp r10, rcx
je 0x1400068b3
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x1400068f7
mov r8, rax
cmp r10, rax
je 0x1400068d3
mov rax, qword [rax + 8]
mov r8, rax
cmp r9, qword [rax + 0x10]
je 0x14000691d
cmp r10, rax
jne 0x1400068c1
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x140006800
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov r10, qword [rax]
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
jmp 0x1400068f7
lea rcx, str.invalid_hash_bucket_count
call fcn.140113b58
int3
Function at 0x14000ac30
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
mov eax, dword [rdx + 0x10]
mov rdi, rdx
mov rbx, qword [rcx]
test eax, 0xdfffff28
je 0x14000ac57
xor al, al
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
cmp byte [rbx + 0xfd1], 0
je 0x14000ac6d
mov al, 1
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
bt eax, 0x1d
jae 0x14000ac7c
cmp dword [rbx + 0xc08], 0
je 0x14000ac4a
test al, 0x10
je 0x14000ac89
cmp dword [rbx + 0x48], 0x401000
jb 0x14000ac4a
add rdx, 0x18
mov qword [rsp + 0x30], rsi
mov rcx, rbx
call fcn.140013130
test al, al
je 0x14000acae
lea rdx, [rdi + 0x18]
mov rcx, rbx
call fcn.140012d50
test al, al
jne 0x14000acc0
mov rsi, qword [rsp + 0x30]
xor al, al
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov rdx, qword [rdi + 8]
mov rcx, rbx
mov rsi, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.1400102e0
Function at 0x140012c90
Capabilities:
Hash data using fnv

Disassembly:
mov eax, dword [rdx + 0x10]
mov rcx, qword [rcx]
test eax, 0xfffffffb
je 0x140012ca0
xor al, al
ret
cmp byte [rcx + 0xfd1], 0
je 0x140012cac
mov al, 1
ret
test al, 4
je 0x140012cb9
cmp dword [rcx + 0xc28], 0
je 0x140012c9d
mov rdx, qword [rdx + 8]
jmp fcn.1400102e0

Function at 0x140012ce0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
cmp dword [rdx + 0x10], 0
mov rbx, rdx
je 0x140012cf7
xor al, al
add rsp, 0x20
pop rbx
ret
mov qword [rsp + 0x30], rdi
mov rdi, qword [rcx]
cmp byte [rdi + 0xfd1], 0
je 0x140012d15
mov rdi, qword [rsp + 0x30]
mov al, 1
add rsp, 0x20
pop rbx
ret
mov r8, qword [rdx + 0x18]
mov rcx, rdi
mov rdx, qword [rdx + 0x20]
call fcn.140013400
test al, al
jne 0x140012d34
mov rdi, qword [rsp + 0x30]
add rsp, 0x20
pop rbx
ret
mov rdx, qword [rbx + 8]
mov rcx, rdi
mov rdi, qword [rsp + 0x30]
add rsp, 0x20
pop rbx
jmp fcn.1400102e0
Function at 0x140013200
Capabilities:
Hash data using fnv

Disassembly:
mov rcx, qword [rcx]
jmp 0x140013210
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
mov rbp, rcx
mov rsi, rdx
add rcx, 0xfd8
call fcn.140113e88
test eax, eax
jne 0x1400133f2
movzx eax, byte [rsp + 0x39]
movabs r10, 0x100000001b3
mov r8, qword [rbp + 0x1058]
movabs r11, 0xcbf29ce484222325
mov r9, qword [rbp + 0x1040]
mov rdx, qword [rbp + 0x1030]
movzx ecx, sil
xor rcx, r11
mov qword [rsp + 0x30], rbx
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3a]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3b]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3c]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3d]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3e]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3f]
imul rcx, r10
xor rcx, rax
mov rax, r8
imul rcx, r10
and rax, rcx
add rax, rax
mov rbx, qword [r9 + rax*8 + 8]
cmp rbx, rdx
je 0x1400133d2
mov rax, qword [r9 + rax*8]
cmp rsi, qword [rbx + 0x10]
je 0x140013303
nop dword [rax]
cmp rbx, rax
je 0x1400133d2
mov rbx, qword [rbx + 8]
cmp rsi, qword [rbx + 0x10]
jne 0x1400132f0
test rbx, rbx
cmove rbx, rdx
cmp rbx, rdx
je 0x1400133d2
movzx eax, byte [rbx + 0x11]
movzx ecx, byte [rbx + 0x10]
xor rcx, r11
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x12]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x13]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x14]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x15]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x16]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x17]
imul rcx, r10
xor rcx, rax
imul rcx, r10
and r8, rcx
add r8, r8
mov rax, qword [r9 + r8*8]
cmp qword [r9 + r8*8 + 8], rbx
jne 0x140013397
cmp rax, rbx
jne 0x14001338c
mov qword [r9 + r8*8], rdx
mov qword [r9 + r8*8 + 8], rdx
jmp 0x1400133a3
mov rdx, qword [rbx + 8]
mov qword [r9 + r8*8 + 8], rdx
jmp 0x1400133a3
cmp rax, rbx
jne 0x1400133a3
mov rax, qword [rbx]
mov qword [r9 + r8*8], rax
mov rcx, qword [rbx]
dec qword [rbp + 0x1038]
mov rax, qword [rbx + 8]
mov qword [rax], rcx
mov rax, qword [rbx + 8]
mov qword [rcx + 8], rax
lea rcx, [rbx + 0x18]
call fcn.140006bd0
mov edx, 0x30
mov rcx, rbx
call fcn.140116b70
lea rcx, [rbp + 0xfd8]
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
jmp fcn.140113eac
mov ecx, eax
call fcn.140113fb8
int3
Function at 0x140013210
Capabilities:
Hash data using fnv

Disassembly:
mov rcx, qword [rcx]
jmp 0x140013210
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
mov rbp, rcx
mov rsi, rdx
add rcx, 0xfd8
call fcn.140113e88
test eax, eax
jne 0x1400133f2
movzx eax, byte [rsp + 0x39]
movabs r10, 0x100000001b3
mov r8, qword [rbp + 0x1058]
movabs r11, 0xcbf29ce484222325
mov r9, qword [rbp + 0x1040]
mov rdx, qword [rbp + 0x1030]
movzx ecx, sil
xor rcx, r11
mov qword [rsp + 0x30], rbx
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3a]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3b]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3c]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3d]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3e]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3f]
imul rcx, r10
xor rcx, rax
mov rax, r8
imul rcx, r10
and rax, rcx
add rax, rax
mov rbx, qword [r9 + rax*8 + 8]
cmp rbx, rdx
je 0x1400133d2
mov rax, qword [r9 + rax*8]
cmp rsi, qword [rbx + 0x10]
je 0x140013303
nop dword [rax]
cmp rbx, rax
je 0x1400133d2
mov rbx, qword [rbx + 8]
cmp rsi, qword [rbx + 0x10]
jne 0x1400132f0
test rbx, rbx
cmove rbx, rdx
cmp rbx, rdx
je 0x1400133d2
movzx eax, byte [rbx + 0x11]
movzx ecx, byte [rbx + 0x10]
xor rcx, r11
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x12]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x13]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x14]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x15]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x16]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x17]
imul rcx, r10
xor rcx, rax
imul rcx, r10
and r8, rcx
add r8, r8
mov rax, qword [r9 + r8*8]
cmp qword [r9 + r8*8 + 8], rbx
jne 0x140013397
cmp rax, rbx
jne 0x14001338c
mov qword [r9 + r8*8], rdx
mov qword [r9 + r8*8 + 8], rdx
jmp 0x1400133a3
mov rdx, qword [rbx + 8]
mov qword [r9 + r8*8 + 8], rdx
jmp 0x1400133a3
cmp rax, rbx
jne 0x1400133a3
mov rax, qword [rbx]
mov qword [r9 + r8*8], rax
mov rcx, qword [rbx]
dec qword [rbp + 0x1038]
mov rax, qword [rbx + 8]
mov qword [rax], rcx
mov rax, qword [rbx + 8]
mov qword [rcx + 8], rax
lea rcx, [rbx + 0x18]
call fcn.140006bd0
mov edx, 0x30
mov rcx, rbx
call fcn.140116b70
lea rcx, [rbp + 0xfd8]
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
jmp fcn.140113eac
mov ecx, eax
call fcn.140113fb8
int3
Function at 0x140017fc0
Capabilities:
Hash data using fnv

Disassembly:
movzx r8d, byte [rdx]
mov r9, rcx
movabs rcx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r8, rax
mov r10, rdx
movzx eax, byte [rdx + 1]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 2]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 3]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 4]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 5]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 6]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 7]
mov rdx, qword [r9 + 0x30]
imul r8, rcx
xor r8, rax
imul r8, rcx
and rdx, r8
xor r8d, r8d
shl rdx, 4
add rdx, qword [r9 + 0x18]
mov rax, qword [rdx + 8]
cmp rax, qword [r9 + 8]
je 0x14001807a
mov rcx, qword [r10]
mov rdx, qword [rdx]
cmp rcx, qword [rax + 0x10]
je 0x14001807d
nop word [rax + rax]
cmp rax, rdx
je 0x14001807a
mov rax, qword [rax + 8]
cmp rcx, qword [rax + 0x10]
jne 0x140018060
test rax, rax
setne r8b
mov rax, r8
ret
mov rax, r8
test rax, rax
setne r8b
mov rax, r8
ret

Function at 0x140018090
Capabilities:
Hash data using fnv

Disassembly:
movzx r9d, byte [r8]
mov r10, rcx
movabs rcx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r9, rax
mov r11, rdx
movzx eax, byte [r8 + 1]
mov rdx, qword [r10 + 0x30]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 2]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 3]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 4]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 5]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 6]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 7]
imul r9, rcx
xor r9, rax
imul r9, rcx
and rdx, r9
mov r9, qword [r10 + 8]
shl rdx, 4
add rdx, qword [r10 + 0x18]
mov rax, qword [rdx + 8]
cmp rax, r9
je 0x14001814e
mov rcx, qword [r8]
mov rdx, qword [rdx]
cmp rcx, qword [rax + 0x10]
je 0x140018150
cmp rax, rdx
je 0x14001814e
mov rax, qword [rax + 8]
cmp rcx, qword [rax + 0x10]
jne 0x140018131
test rax, rax
cmove rax, r9
mov qword [r11], rax
mov rax, r11
ret
xor eax, eax
test rax, rax
cmove rax, r9
mov qword [r11], rax
mov rax, r11
ret
Function at 0x14001b440
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov r8, qword [rcx + 0x10]
mov r9, rcx
mov eax, dword [rcx + 0x18]
movabs r10, 0x100000001b3
movabs rcx, 0xaf63bd4c8601b7df
xor rax, rcx
mov edx, dword [r9 + 0x2c]
mov ecx, dword [r9 + 0x28]
imul rax, r10
xor rax, rdx
imul rax, r10
xor rax, rcx
imul rax, r10
test r8, r8
je 0x14001b4a8
movzx ecx, byte [r8]
xor rax, 0xff
inc r8
test cl, cl
je 0x14001b4a8
imul rax, r10
movzx ecx, cl
lea r8, [r8 + 1]
xor rax, rcx
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x14001b491
mov rdx, qword [r9 + 0x20]
imul rax, r10
test rdx, rdx
je 0x14001b4e6
movzx ecx, byte [rdx]
xor rax, 0xff
inc rdx
test cl, cl
je 0x14001b4e6
nop word [rax + rax]
imul rax, r10
movzx ecx, cl
lea rdx, [rdx + 1]
xor rax, rcx
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14001b4d0
ret
Function at 0x14001b830
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x20
mov rbp, r8
mov rbx, rdx
mov rdx, rbp
mov r8d, 0x10
call fcn.14001b250
xor edi, edi
mov rsi, rax
mov r9, rax
test rbp, rbp
je 0x14001ba1b
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r15
lea r15d, [rdi + 0x3f]
nop
movsx ecx, byte [rbx]
mov r14, r9
test cl, cl
je 0x14001ba0e
movsx edx, byte [rbx + 1]
test dl, dl
je 0x14001ba0e
movsx r11d, byte [rbx + 2]
test r11b, r11b
je 0x14001ba0e
movsx r10d, byte [rbx + 3]
add rbx, 4
test r10b, r10b
je 0x14001ba0e
lea eax, [rcx - 0x41]
cmp al, 0x19
ja 0x14001b8b6
lea eax, [rcx - 0x41]
jmp 0x14001b8e3
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x14001b8c2
lea eax, [rcx - 0x47]
jmp 0x14001b8e3
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x14001b8ce
lea eax, [rcx + 4]
jmp 0x14001b8e3
cmp cl, 0x2b
jne 0x14001b8da
mov eax, 0x3e
jmp 0x14001b8e3
xor eax, eax
cmp cl, 0x2f
cmove eax, r15d
lea ecx, [rdx - 0x41]
cmp cl, 0x19
ja 0x14001b8f1
lea r8d, [rdx - 0x41]
jmp 0x14001b924
lea ecx, [rdx - 0x61]
cmp cl, 0x19
ja 0x14001b8ff
lea r8d, [rdx - 0x47]
jmp 0x14001b924
lea ecx, [rdx - 0x30]
cmp cl, 9
ja 0x14001b90d
lea r8d, [rdx + 4]
jmp 0x14001b924
cmp dl, 0x2b
jne 0x14001b91a
mov r8d, 0x3e
jmp 0x14001b924
xor r8d, r8d
cmp dl, 0x2f
cmove r8d, r15d
lea ecx, [r11 - 0x41]
cmp cl, 0x19
ja 0x14001b933
lea edx, [r11 - 0x41]
jmp 0x14001b968
lea ecx, [r11 - 0x61]
cmp cl, 0x19
ja 0x14001b942
lea edx, [r11 - 0x47]
jmp 0x14001b968
lea ecx, [r11 - 0x30]
cmp cl, 9
ja 0x14001b951
lea edx, [r11 + 4]
jmp 0x14001b968
cmp r11b, 0x2b
jne 0x14001b95e
mov edx, 0x3e
jmp 0x14001b968
xor edx, edx
cmp r11b, 0x2f
cmove edx, r15d
lea ecx, [r10 - 0x41]
cmp cl, 0x19
ja 0x14001b977
lea ecx, [r10 - 0x41]
jmp 0x14001b9ac
lea ecx, [r10 - 0x61]
cmp cl, 0x19
ja 0x14001b986
lea ecx, [r10 - 0x47]
jmp 0x14001b9ac
lea ecx, [r10 - 0x30]
cmp cl, 9
ja 0x14001b995
lea ecx, [r10 + 4]
jmp 0x14001b9ac
cmp r10b, 0x2b
jne 0x14001b9a2
mov ecx, 0x3e
jmp 0x14001b9ac
xor ecx, ecx
cmp r10b, 0x2f
cmove ecx, r15d
shl eax, 6
or eax, r8d
shl eax, 6
or eax, edx
shl eax, 6
or eax, ecx
cmp r11b, 0x3d
jne 0x14001b9d4
cmp r10b, r11b
jne 0x14001b9d4
shr eax, 0x10
mov byte [r9], al
mov eax, 1
jmp 0x14001b9ff
inc r9
mov ecx, eax
shr ecx, 0x10
mov byte [r14], cl
mov ecx, eax
shr ecx, 8
mov byte [r9], cl
cmp r10b, 0x3d
jne 0x14001b9f4
mov eax, 2
jmp 0x14001b9ff
inc r9
mov byte [r9], al
mov eax, 3
add rdi, rax
inc r9
cmp rdi, rbp
jb 0x14001b870
mov r14, qword [rsp + 0x40]
mov rax, rsi
mov r15, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
add rsp, 0x20
pop rdi
pop rsi
pop rbp
ret

Function at 0x14001ba90
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, qword [rcx]
lea rcx, [rbx + 8]
call fcn.14001b380
lea rcx, [rbx + 0x48]
call fcn.14001b380
lea rcx, [rbx + 0x88]
call fcn.14001b380
lea rcx, [rbx + 0xc8]
call fcn.14001b380
lea rcx, [rbx + 0x108]
call fcn.14001b380
lea rcx, [rbx + 0x148]
call fcn.14001b380
lea rcx, [rbx + 0x188]
call fcn.14001b380
lea rcx, [rbx + 0x1c8]
add rsp, 0x20
pop rbx
jmp fcn.14001b380