joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14006b160
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push rsi
sub rsp, 0x30
movss xmm3, dword [rcx + 0x18]
mov rsi, rcx
mov rcx, qword [rcx + 0x10]
mov r8, rdx
xorps xmm1, xmm1
test rcx, rcx
js 0x14006b188
cvtsi2ss xmm1, rcx
jmp 0x14006b19d
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
movss xmm2, dword [0x1400deb28]
movaps xmm0, xmm1
divss xmm0, xmm3
xor eax, eax
comiss xmm0, xmm2
jb 0x14006b1c9
subss xmm0, xmm2
comiss xmm0, xmm2
jae 0x14006b1c9
movabs rcx, 0x8000000000000000
mov rax, rcx
cvttss2si rdx, xmm0
xorps xmm0, xmm0
add rdx, rax
js 0x14006b1dd
cvtsi2ss xmm0, rdx
jmp 0x14006b1f5
mov rax, rdx
mov rcx, rdx
shr rcx, 1
and eax, 1
or rcx, rax
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
mulss xmm0, xmm3
lea rax, [rdx + 1]
mov ebx, 8
comiss xmm1, xmm0
cmovbe rax, rdx
cmp rax, r8
cmovb rax, r8
cmp rbx, rax
jae 0x14006b21d
add rbx, rbx
cmp rbx, rax
jb 0x14006b215
cmp rbx, qword [rsi]
jne 0x14006b22d
cmp qword [rsi + 8], 0
jne 0x14006b33b
movzx eax, byte [str..PEAU__chained_hash_node_U__pair___CBU__pair_PEBVEnumDescriptor_protobuf_google__H_blz__PEBVEnumValueDescriptor_protobuf_google___blz___blz__]
lea rcx, [0x1401274a1]
mov qword [rsp + 0x40], rbp
mov r9d, 0x811c9dc5
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], r14
test eax, eax
je 0x14006b276
nop dword [rax]
nop dword [rax + rax]
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006b260
xor edi, edi
lea rbp, [rbx*8]
mov dword [rsp + 0x28], edi
lea r8, str..PEAU__chained_hash_node_U__pair___CBU__pair_PEBVEnumDescriptor_protobuf_google__H_blz__PEBVEnumValueDescriptor_protobuf_google___blz___blz__
mov rcx, rbp
mov dword [rsp + 0x20], 0xfffffffa
lea edx, [rdi + 0xb]
call fcn.140025e30
mov r14, rax
test rbx, rbx
je 0x14006b2b7
and rbp, 0xfffffffffffffff8
xor edx, edx
mov r8, rbp
mov rcx, rax
call fcn.1400be550
mov rax, qword [rsi + 8]
mov rbp, qword [rsp + 0x40]
mov rcx, rax
test rax, rax
je 0x14006b317
cmp qword [rsi], rdi
jbe 0x14006b317
nop dword [rax]
mov r8, qword [rax + rdi*8]
mov rcx, rax
test r8, r8
je 0x14006b30c
lea r9, [rbx - 1]
imul rax, qword [r8 + 8], 0xffff
movsxd rdx, dword [r8 + 0x10]
mov rcx, qword [r8]
add rdx, rax
and rdx, r9
mov rax, qword [r14 + rdx*8]
mov qword [r8], rax
mov qword [r14 + rdx*8], r8
mov r8, rcx
test rcx, rcx
jne 0x14006b2e0
mov rcx, qword [rsi + 8]
inc rdi
mov rax, rcx
cmp rdi, qword [rsi]
jb 0x14006b2d0
xor r9d, r9d
lea rdx, str..PEAU__chained_hash_node_U__pair___CBU__pair_PEBVEnumDescriptor_protobuf_google__H_blz__PEBVEnumValueDescriptor_protobuf_google___blz___blz__
lea r8d, [r9 - 6]
call fcn.140025f00
mov rdi, qword [rsp + 0x48]
mov qword [rsi + 8], r14
mov r14, qword [rsp + 0x50]
mov qword [rsi], rbx
mov rbx, qword [rsp + 0x58]
add rsp, 0x30
pop rsi
ret
Function at 0x14006b350
Capabilities:
Encode data using xor
Encrypt data using rc4 prga
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x30
mov r8, qword [rcx + 0x10]
mov r9, rdx
movss xmm3, dword [rcx + 0x18]
mov rsi, rcx
xorps xmm1, xmm1
test r8, r8
js 0x14006b378
cvtsi2ss xmm1, r8
jmp 0x14006b38e
mov rax, r8
and r8d, 1
shr rax, 1
or rax, r8
cvtsi2ss xmm1, rax
addss xmm1, xmm1
movss xmm2, dword [0x1400deb28]
movaps xmm0, xmm1
divss xmm0, xmm3
xor eax, eax
comiss xmm0, xmm2
jb 0x14006b3ba
subss xmm0, xmm2
comiss xmm0, xmm2
jae 0x14006b3ba
movabs rcx, 0x8000000000000000
mov rax, rcx
cvttss2si rdx, xmm0
xorps xmm0, xmm0
add rdx, rax
js 0x14006b3ce
cvtsi2ss xmm0, rdx
jmp 0x14006b3e6
mov rax, rdx
mov rcx, rdx
shr rcx, 1
and eax, 1
or rcx, rax
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
mulss xmm0, xmm3
lea rax, [rdx + 1]
mov edi, 8
comiss xmm1, xmm0
cmovbe rax, rdx
cmp rax, r9
cmovb rax, r9
cmp rdi, rax
jae 0x14006b40e
add rdi, rdi
cmp rdi, rax
jb 0x14006b406
cmp rdi, qword [rsi]
jne 0x14006b41e
cmp qword [rsi + 8], 0
jne 0x14006b548
movzx eax, byte [str..PEAU__chained_hash_node_U__pair___CBU__pair_PEBXPEBD_blz__PEBVFieldDescriptor_protobuf_google___blz___blz__]
lea rcx, [0x140127241]
mov qword [rsp + 0x40], rbx
mov r9d, 0x811c9dc5
mov qword [rsp + 0x48], r14
test eax, eax
je 0x14006b456
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006b440
lea rbx, [rdi*8]
mov dword [rsp + 0x28], 0
mov rcx, rbx
mov dword [rsp + 0x20], 0xfffffffa
lea r8, str..PEAU__chained_hash_node_U__pair___CBU__pair_PEBXPEBD_blz__PEBVFieldDescriptor_protobuf_google___blz___blz__
mov edx, ntohs
call fcn.140025e30
mov r14, rax
test rdi, rdi
je 0x14006b49b
and rbx, 0xfffffffffffffff8
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.1400be550
mov rax, qword [rsi + 8]
mov rbx, qword [rsp + 0x40]
mov rcx, rax
test rax, rax
je 0x14006b529
xor r9d, r9d
cmp qword [rsi], r9
jbe 0x14006b529
nop dword [rax + rax]
mov r8, qword [rax + r9*8]
mov rcx, rax
test r8, r8
je 0x14006b51e
lea r10, [rdi - 1]
mov rdx, qword [r8 + 0x10]
xor ecx, ecx
movzx eax, byte [rdx]
test al, al
je 0x14006b4f6
nop dword [rax]
movsx rax, al
lea rcx, [rcx + rcx*4]
add rcx, rax
lea rdx, [rdx + 1]
movzx eax, byte [rdx]
test al, al
jne 0x14006b4e0
imul rdx, qword [r8 + 8], 0xffff
add rdx, rcx
mov rcx, qword [r8]
and rdx, r10
mov rax, qword [r14 + rdx*8]
mov qword [r8], rax
mov qword [r14 + rdx*8], r8
mov r8, rcx
test rcx, rcx
jne 0x14006b4d0
mov rcx, qword [rsi + 8]
inc r9
mov rax, rcx
cmp r9, qword [rsi]
jb 0x14006b4c0
xor r9d, r9d
lea rdx, str..PEAU__chained_hash_node_U__pair___CBU__pair_PEBXPEBD_blz__PEBVFieldDescriptor_protobuf_google___blz___blz__
lea r8d, [r9 - 6]
call fcn.140025f00
mov qword [rsi + 8], r14
mov r14, qword [rsp + 0x48]
mov qword [rsi], rdi
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
Function at 0x14006b560
Capabilities:
Encode data using xor
Encrypt data using rc4 prga
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x30
mov r8, qword [rcx + 0x10]
mov r9, rdx
movss xmm3, dword [rcx + 0x18]
mov rsi, rcx
xorps xmm1, xmm1
test r8, r8
js 0x14006b588
cvtsi2ss xmm1, r8
jmp 0x14006b59e
mov rax, r8
and r8d, 1
shr rax, 1
or rax, r8
cvtsi2ss xmm1, rax
addss xmm1, xmm1
movss xmm2, dword [0x1400deb28]
movaps xmm0, xmm1
divss xmm0, xmm3
xor eax, eax
comiss xmm0, xmm2
jb 0x14006b5ca
subss xmm0, xmm2
comiss xmm0, xmm2
jae 0x14006b5ca
movabs rcx, 0x8000000000000000
mov rax, rcx
cvttss2si rdx, xmm0
xorps xmm0, xmm0
add rdx, rax
js 0x14006b5de
cvtsi2ss xmm0, rdx
jmp 0x14006b5f6
mov rax, rdx
mov rcx, rdx
shr rcx, 1
and eax, 1
or rcx, rax
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
mulss xmm0, xmm3
lea rax, [rdx + 1]
mov edi, 8
comiss xmm1, xmm0
cmovbe rax, rdx
cmp rax, r9
cmovb rax, r9
cmp rdi, rax
jae 0x14006b61e
add rdi, rdi
cmp rdi, rax
jb 0x14006b616
cmp rdi, qword [rsi]
jne 0x14006b62e
cmp qword [rsi + 8], 0
jne 0x14006b758
movzx eax, byte [str..PEAU__chained_hash_node_U__pair___CBU__pair_PEBXPEBD_blz__USymbol__A0xdbaf4b5f_protobuf_google___blz___blz__]
lea rcx, [0x140127141]
mov qword [rsp + 0x40], rbx
mov r9d, 0x811c9dc5
mov qword [rsp + 0x48], r14
test eax, eax
je 0x14006b666
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006b650
lea rbx, [rdi*8]
mov dword [rsp + 0x28], 0
mov rcx, rbx
mov dword [rsp + 0x20], 0xfffffffa
lea r8, str..PEAU__chained_hash_node_U__pair___CBU__pair_PEBXPEBD_blz__USymbol__A0xdbaf4b5f_protobuf_google___blz___blz__
mov edx, ntohs
call fcn.140025e30
mov r14, rax
test rdi, rdi
je 0x14006b6ab
and rbx, 0xfffffffffffffff8
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.1400be550
mov rax, qword [rsi + 8]
mov rbx, qword [rsp + 0x40]
mov rcx, rax
test rax, rax
je 0x14006b739
xor r9d, r9d
cmp qword [rsi], r9
jbe 0x14006b739
nop dword [rax + rax]
mov r8, qword [rax + r9*8]
mov rcx, rax
test r8, r8
je 0x14006b72e
lea r10, [rdi - 1]
mov rdx, qword [r8 + 0x10]
xor ecx, ecx
movzx eax, byte [rdx]
test al, al
je 0x14006b706
nop dword [rax]
movsx rax, al
lea rcx, [rcx + rcx*4]
add rcx, rax
lea rdx, [rdx + 1]
movzx eax, byte [rdx]
test al, al
jne 0x14006b6f0
imul rdx, qword [r8 + 8], 0xffff
add rdx, rcx
mov rcx, qword [r8]
and rdx, r10
mov rax, qword [r14 + rdx*8]
mov qword [r8], rax
mov qword [r14 + rdx*8], r8
mov r8, rcx
test rcx, rcx
jne 0x14006b6e0
mov rcx, qword [rsi + 8]
inc r9
mov rax, rcx
cmp r9, qword [rsi]
jb 0x14006b6d0
xor r9d, r9d
lea rdx, str..PEAU__chained_hash_node_U__pair___CBU__pair_PEBXPEBD_blz__USymbol__A0xdbaf4b5f_protobuf_google___blz___blz__
lea r8d, [r9 - 6]
call fcn.140025f00
mov qword [rsi + 8], r14
mov r14, qword [rsp + 0x48]
mov qword [rsi], rdi
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
Function at 0x14006b770
Capabilities:
Encode data using xor
Encrypt data using rc4 prga
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x30
mov r8, qword [rcx + 0x10]
mov r9, rdx
movss xmm3, dword [rcx + 0x18]
mov r14, rcx
xorps xmm1, xmm1
test r8, r8
js 0x14006b799
cvtsi2ss xmm1, r8
jmp 0x14006b7af
mov rax, r8
and r8d, 1
shr rax, 1
or rax, r8
cvtsi2ss xmm1, rax
addss xmm1, xmm1
movss xmm2, dword [0x1400deb28]
movaps xmm0, xmm1
divss xmm0, xmm3
xor eax, eax
comiss xmm0, xmm2
jb 0x14006b7db
subss xmm0, xmm2
comiss xmm0, xmm2
jae 0x14006b7db
movabs rcx, 0x8000000000000000
mov rax, rcx
cvttss2si rdx, xmm0
xorps xmm0, xmm0
add rdx, rax
js 0x14006b7ef
cvtsi2ss xmm0, rdx
jmp 0x14006b807
mov rax, rdx
mov rcx, rdx
shr rcx, 1
and eax, 1
or rcx, rax
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
mulss xmm0, xmm3
lea rax, [rdx + 1]
mov edi, 8
comiss xmm1, xmm0
cmovbe rax, rdx
cmp rax, r9
cmovb rax, r9
cmp rdi, rax
jae 0x14006b82f
add rdi, rdi
cmp rdi, rax
jb 0x14006b827
cmp rdi, qword [r14]
jne 0x14006b83f
cmp qword [r14 + 8], 0
jne 0x14006b961
movzx eax, byte [str..PEAU__chained_hash_node_V__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz___blz__]
lea rcx, [0x140126ed1]
mov qword [rsp + 0x40], rbx
mov r9d, 0x811c9dc5
mov qword [rsp + 0x48], rsi
test eax, eax
je 0x14006b877
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006b861
lea rbx, [rdi*8]
mov dword [rsp + 0x28], 0
mov rcx, rbx
mov dword [rsp + 0x20], 0xfffffffa
lea r8, str..PEAU__chained_hash_node_V__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz___blz__
mov edx, ntohs
call fcn.140025e30
mov rsi, rax
test rdi, rdi
je 0x14006b8bc
and rbx, 0xfffffffffffffff8
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.1400be550
mov rax, qword [r14 + 8]
mov rbx, qword [rsp + 0x40]
mov rcx, rax
test rax, rax
je 0x14006b942
xor r9d, r9d
cmp qword [r14], r9
jbe 0x14006b942
nop word [rax + rax]
mov r8, qword [rax + r9*8]
mov rcx, rax
test r8, r8
je 0x14006b937
nop dword [rax]
mov rdx, qword [r8 + 8]
xor ecx, ecx
movzx eax, byte [rdx]
test al, al
je 0x14006b916
nop dword [rax]
movsx rax, al
lea rcx, [rcx + rcx*4]
add rcx, rax
lea rdx, [rdx + 1]
movzx eax, byte [rdx]
test al, al
jne 0x14006b900
lea rdx, [rdi - 1]
and rdx, rcx
mov rcx, qword [r8]
mov rax, qword [rsi + rdx*8]
mov qword [r8], rax
mov qword [rsi + rdx*8], r8
mov r8, rcx
test rcx, rcx
jne 0x14006b8f0
mov rcx, qword [r14 + 8]
inc r9
mov rax, rcx
cmp r9, qword [r14]
jb 0x14006b8e0
xor r9d, r9d
lea rdx, str..PEAU__chained_hash_node_V__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz___blz__
lea r8d, [r9 - 6]
call fcn.140025f00
mov qword [r14 + 8], rsi
mov rsi, qword [rsp + 0x48]
mov qword [r14], rdi
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop r14
ret
Function at 0x14006b970
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rsi
sub rsp, 0x30
mov rbx, rcx
movabs rsi, 0x7fffffffffffffff
mov rcx, qword [rcx + 0x10]
mov r8, rdx
mov rax, rcx
and rax, rsi
cmp rdx, rax
jbe 0x14006ba8c
mov rdx, rcx
mov qword [rsp + 0x40], rdi
shr rdx, 1
movabs r9, 0x3fffffffffffffff
and rdx, r9
mov r9d, 0x811c9dc5
add rdx, rax
mov rax, rcx
cmp rdx, r8
cmovb rdx, r8
xor rax, rdx
and rax, rsi
xor rax, rcx
lea rcx, [0x1401262b9]
mov qword [rbx + 0x10], rax
movzx eax, byte [0x1401262b8]
test eax, eax
je 0x14006ba06
nop word [rax + rax]
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006b9f0
lea rcx, [rdx*4]
mov dword [rsp + 0x28], 0
mov edx, ntohs
mov dword [rsp + 0x20], 0xfffffffa
lea r8, [0x1401262b8]
call fcn.140025e30
mov r9, qword [rbx]
mov rdi, rax
mov rcx, qword [rbx + 8]
mov r10, rax
lea r11, [r9 + rcx*4]
cmp r9, r11
je 0x14006ba63
nop word [rax + rax]
mov ecx, dword [r9]
add r9, 4
mov dword [r10], ecx
lea r10, [r10 + 4]
cmp r9, r11
jne 0x14006ba50
cmp qword [rbx + 0x10], 0
jl 0x14006ba80
mov rcx, qword [rbx]
lea rdx, [0x1401262b8]
xor r9d, r9d
lea r8d, [r9 - 6]
call fcn.140025f00
and qword [rbx + 0x10], rsi
mov qword [rbx], rdi
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
ret

Function at 0x14006baa0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rsi
sub rsp, 0x30
mov rbx, rcx
movabs rsi, 0x7fffffffffffffff
mov rcx, qword [rcx + 0x10]
mov r8, rdx
mov rax, rcx
and rax, rsi
cmp rdx, rax
jbe 0x14006bbbc
mov rdx, rcx
mov qword [rsp + 0x40], rdi
shr rdx, 1
movabs r9, 0x3fffffffffffffff
and rdx, r9
mov r9d, 0x811c9dc5
add rdx, rax
mov rax, rcx
cmp rdx, r8
cmovb rdx, r8
xor rax, rdx
and rax, rsi
xor rax, rcx
lea rcx, [0x1401278f1]
mov qword [rbx + 0x10], rax
movzx eax, byte [str..PEAV__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz__]
test eax, eax
je 0x14006bb36
nop word [rax + rax]
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006bb20
lea rcx, [rdx*8]
mov dword [rsp + 0x28], 0
mov edx, ntohs
mov dword [rsp + 0x20], 0xfffffffa
lea r8, str..PEAV__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz__
call fcn.140025e30
mov r9, qword [rbx]
mov rdi, rax
mov rcx, qword [rbx + 8]
mov r10, rax
lea r11, [r9 + rcx*8]
cmp r9, r11
je 0x14006bb93
nop word [rax + rax]
mov rcx, qword [r9]
add r9, 8
mov qword [r10], rcx
lea r10, [r10 + 8]
cmp r9, r11
jne 0x14006bb80
cmp qword [rbx + 0x10], 0
jl 0x14006bbb0
mov rcx, qword [rbx]
lea rdx, str..PEAV__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz__
xor r9d, r9d
lea r8d, [r9 - 6]
call fcn.140025f00
and qword [rbx + 0x10], rsi
mov qword [rbx], rdi
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
ret
Function at 0x14006bbd0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rsi
sub rsp, 0x30
mov rbx, rcx
movabs rsi, 0x7fffffffffffffff
mov rcx, qword [rcx + 0x10]
mov r8, rdx
mov rax, rcx
and rax, rsi
cmp rdx, rax
jbe 0x14006bcec
mov rdx, rcx
mov qword [rsp + 0x40], rdi
shr rdx, 1
movabs r9, 0x3fffffffffffffff
and rdx, r9
mov r9d, 0x811c9dc5
add rdx, rax
mov rax, rcx
cmp rdx, r8
cmovb rdx, r8
xor rax, rdx
and rax, rsi
xor rax, rcx
lea rcx, [0x140127879]
mov qword [rbx + 0x10], rax
movzx eax, byte [str..PEAVFileDescriptorTables_protobuf_google__]
test eax, eax
je 0x14006bc66
nop word [rax + rax]
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006bc50
lea rcx, [rdx*8]
mov dword [rsp + 0x28], 0
mov edx, ntohs
mov dword [rsp + 0x20], 0xfffffffa
lea r8, str..PEAVFileDescriptorTables_protobuf_google__
call fcn.140025e30
mov r9, qword [rbx]
mov rdi, rax
mov rcx, qword [rbx + 8]
mov r10, rax
lea r11, [r9 + rcx*8]
cmp r9, r11
je 0x14006bcc3
nop word [rax + rax]
mov rcx, qword [r9]
add r9, 8
mov qword [r10], rcx
lea r10, [r10 + 8]
cmp r9, r11
jne 0x14006bcb0
cmp qword [rbx + 0x10], 0
jl 0x14006bce0
mov rcx, qword [rbx]
lea rdx, str..PEAVFileDescriptorTables_protobuf_google__
xor r9d, r9d
lea r8d, [r9 - 6]
call fcn.140025f00
and qword [rbx + 0x10], rsi
mov qword [rbx], rdi
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
ret

Function at 0x14006bd00
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rsi
sub rsp, 0x30
mov rbx, rcx
movabs rsi, 0x7fffffffffffffff
mov rcx, qword [rcx + 0x10]
mov r8, rdx
mov rax, rcx
and rax, rsi
cmp rdx, rax
jbe 0x14006be1c
mov rdx, rcx
mov qword [rsp + 0x40], rdi
shr rdx, 1
movabs r9, 0x3fffffffffffffff
and rdx, r9
mov r9d, 0x811c9dc5
add rdx, rax
mov rax, rcx
cmp rdx, r8
cmovb rdx, r8
xor rax, rdx
and rax, rsi
xor rax, rcx
lea rcx, [0x1401278b9]
mov qword [rbx + 0x10], rax
movzx eax, byte [str..PEAVMessage_protobuf_google__]
test eax, eax
je 0x14006bd96
nop word [rax + rax]
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006bd80
lea rcx, [rdx*8]
mov dword [rsp + 0x28], 0
mov edx, ntohs
mov dword [rsp + 0x20], 0xfffffffa
lea r8, str..PEAVMessage_protobuf_google__
call fcn.140025e30
mov r9, qword [rbx]
mov rdi, rax
mov rcx, qword [rbx + 8]
mov r10, rax
lea r11, [r9 + rcx*8]
cmp r9, r11
je 0x14006bdf3
nop word [rax + rax]
mov rcx, qword [r9]
add r9, 8
mov qword [r10], rcx
lea r10, [r10 + 8]
cmp r9, r11
jne 0x14006bde0
cmp qword [rbx + 0x10], 0
jl 0x14006be10
mov rcx, qword [rbx]
lea rdx, str..PEAVMessage_protobuf_google__
xor r9d, r9d
lea r8d, [r9 - 6]
call fcn.140025f00
and qword [rbx + 0x10], rsi
mov qword [rbx], rdi
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
ret
Function at 0x14006be30
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rsi
sub rsp, 0x30
mov rbx, rcx
movabs rsi, 0x7fffffffffffffff
mov rcx, qword [rcx + 0x10]
mov r8, rdx
mov rax, rcx
and rax, rsi
cmp rdx, rax
jbe 0x14006bf4c
mov rdx, rcx
mov qword [rsp + 0x40], rdi
shr rdx, 1
movabs r9, 0x3fffffffffffffff
and rdx, r9
mov r9d, 0x811c9dc5
add rdx, rax
mov rax, rcx
cmp rdx, r8
cmovb rdx, r8
xor rax, rdx
and rax, rsi
xor rax, rcx
lea rcx, [0x140127949]
mov qword [rbx + 0x10], rax
movzx eax, byte [str..PEAX]
test eax, eax
je 0x14006bec6
nop word [rax + rax]
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006beb0
lea rcx, [rdx*8]
mov dword [rsp + 0x28], 0
mov edx, ntohs
mov dword [rsp + 0x20], 0xfffffffa
lea r8, str..PEAX
call fcn.140025e30
mov r9, qword [rbx]
mov rdi, rax
mov rcx, qword [rbx + 8]
mov r10, rax
lea r11, [r9 + rcx*8]
cmp r9, r11
je 0x14006bf23
nop word [rax + rax]
mov rcx, qword [r9]
add r9, 8
mov qword [r10], rcx
lea r10, [r10 + 8]
cmp r9, r11
jne 0x14006bf10
cmp qword [rbx + 0x10], 0
jl 0x14006bf40
mov rcx, qword [rbx]
lea rdx, str..PEAX
xor r9d, r9d
lea r8d, [r9 - 6]
call fcn.140025f00
and qword [rbx + 0x10], rsi
mov qword [rbx], rdi
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
ret

Function at 0x14006bf60
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rsi
sub rsp, 0x30
mov rbx, rcx
movabs rsi, 0x7fffffffffffffff
mov rcx, qword [rcx + 0x10]
mov r8, rdx
mov rax, rcx
and rax, rsi
cmp rdx, rax
jbe 0x14006c07c
mov rdx, rcx
mov qword [rsp + 0x40], rdi
shr rdx, 1
movabs r9, 0x3fffffffffffffff
and rdx, r9
mov r9d, 0x811c9dc5
add rdx, rax
mov rax, rcx
cmp rdx, r8
cmovb rdx, r8
xor rax, rdx
and rax, rsi
xor rax, rcx
lea rcx, [0x140127819]
mov qword [rbx + 0x10], rax
movzx eax, byte [str..PEBD]
test eax, eax
je 0x14006bff6
nop word [rax + rax]
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006bfe0
lea rcx, [rdx*8]
mov dword [rsp + 0x28], 0
mov edx, ntohs
mov dword [rsp + 0x20], 0xfffffffa
lea r8, str..PEBD
call fcn.140025e30
mov r9, qword [rbx]
mov rdi, rax
mov rcx, qword [rbx + 8]
mov r10, rax
lea r11, [r9 + rcx*8]
cmp r9, r11
je 0x14006c053
nop word [rax + rax]
mov rcx, qword [r9]
add r9, 8
mov qword [r10], rcx
lea r10, [r10 + 8]
cmp r9, r11
jne 0x14006c040
cmp qword [rbx + 0x10], 0
jl 0x14006c070
mov rcx, qword [rbx]
lea rdx, str..PEBD
xor r9d, r9d
lea r8d, [r9 - 6]
call fcn.140025f00
and qword [rbx + 0x10], rsi
mov qword [rbx], rdi
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
ret
Function at 0x14006c090
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rsi
sub rsp, 0x30
mov r8, qword [rcx + 0x10]
movabs rsi, 0x7fffffffffffffff
mov rax, r8
mov rbx, rcx
and rax, rsi
cmp rdx, rax
jbe 0x14006c1b3
movabs r9, 0x3fffffffffffffff
mov qword [rsp + 0x40], rdi
mov rcx, r8
shr rcx, 1
and rcx, r9
mov r9d, 0x811c9dc5
add rcx, rax
mov rax, r8
cmp rcx, rdx
cmovb rcx, rdx
lea rdx, [0x1401277d1]
xor rax, rcx
and rax, rsi
xor rax, r8
mov qword [rbx + 0x10], rax
movzx eax, byte [str.._AU__pair_PEBVDescriptor_protobuf_google__H_blz__]
test eax, eax
je 0x14006c126
nop dword [rax]
nop dword [rax + rax]
xor eax, r9d
lea rdx, [rdx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rdx - 1]
test eax, eax
jne 0x14006c110
shl rcx, 4
lea r8, str.._AU__pair_PEBVDescriptor_protobuf_google__H_blz__
mov dword [rsp + 0x28], 0
mov edx, ntohs
mov dword [rsp + 0x20], 0xfffffffa
call fcn.140025e30
mov rcx, qword [rbx]
mov rdi, rax
mov r10, qword [rbx + 8]
mov r9, rax
shl r10, 4
add r10, rcx
cmp rcx, r10
je 0x14006c18a
nop dword [rax]
nop dword [rax + rax]
mov rdx, qword [rcx]
mov qword [r9], rdx
lea r9, [r9 + 0x10]
mov eax, dword [rcx + 8]
add rcx, 0x10
mov dword [r9 - 8], eax
cmp rcx, r10
jne 0x14006c170
cmp qword [rbx + 0x10], 0
jl 0x14006c1a7
mov rcx, qword [rbx]
lea rdx, str.._AU__pair_PEBVDescriptor_protobuf_google__H_blz__
xor r9d, r9d
lea r8d, [r9 - 6]
call fcn.140025f00
and qword [rbx + 0x10], rsi
mov qword [rbx], rdi
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
ret
Function at 0x14006c1c0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rsi
push r15
sub rsp, 0x48
mov rsi, rcx
movabs r15, 0x7fffffffffffffff
mov rcx, qword [rcx + 0x10]
mov r8, rdx
mov rax, rcx
and rax, r15
cmp rdx, rax
jbe 0x14006c390
mov qword [rsp + 0x60], rbx
mov rdx, rcx
shr rdx, 1
movabs r9, 0x3fffffffffffffff
and rdx, r9
mov qword [rsp + 0x68], rbp
add rdx, rax
mov qword [rsp + 0x70], rdi
cmp rdx, r8
mov qword [rsp + 0x38], r13
mov rax, rcx
mov qword [rsp + 0x30], r14
cmovb rdx, r8
mov r9d, 0x811c9dc5
xor rax, rdx
and rax, r15
xor rax, rcx
lea rcx, [0x140127961]
mov qword [rsi + 0x10], rax
movzx eax, byte [str.._AV__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz__]
test eax, eax
je 0x14006c266
nop dword [rax]
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006c250
lea rcx, [rdx + rdx*4]
xor r13d, r13d
shl rcx, 3
lea r8, str.._AV__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz__
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0xfffffffa
lea edx, [r13 + 0xb]
call fcn.140025e30
mov rbx, qword [rsi]
mov r14, rax
mov rcx, qword [rsi + 8]
lea rdx, [rcx + rcx*4]
lea rbp, [rbx + rdx*8]
cmp rbx, rbp
je 0x14006c319
mov qword [rsp + 0x40], r12
lea rdi, [rax + 0x10]
movabs r12, 0x800000000000000f
nop dword [rax + rax]
lea rcx, [rdi - 0x10]
test rcx, rcx
je 0x14006c307
mov rdx, qword [rbx]
cmp qword [rbx + 0x10], r13
jl 0x14006c2fe
and qword [rdi], r15
mov qword [rcx], rdx
mov rax, qword [rbx + 8]
mov qword [rdi - 8], rax
mov rax, qword [rbx + 0x10]
and rax, r15
mov qword [rdi], rax
lea rax, [rbx + 0x18]
mov qword [rbx], rax
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r12
mov byte [rax], r13b
jmp 0x14006c307
mov r8, qword [rbx + 8]
call fcn.1400027c0
add rdi, 0x28
add rbx, 0x28
cmp rbx, rbp
jne 0x14006c2c0
mov r12, qword [rsp + 0x40]
mov rbx, qword [rsi]
mov rax, qword [rsi + 8]
mov r13, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x68]
lea rcx, [rax + rax*4]
lea rdi, [rbx + rcx*8]
cmp rbx, rdi
je 0x14006c35d
cmp qword [rbx + 0x10], 0
jl 0x14006c354
mov rcx, qword [rbx]
lea rdx, [0x1401262a0]
xor r9d, r9d
lea r8d, [r9 - 6]
call fcn.140025f00
add rbx, 0x28
cmp rbx, rdi
jne 0x14006c337
cmp qword [rsi + 0x10], 0
mov rdi, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x60]
jl 0x14006c384
mov rcx, qword [rsi]
lea rdx, str.._AV__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz__
xor r9d, r9d
lea r8d, [r9 - 6]
call fcn.140025f00
and qword [rsi + 0x10], r15
mov qword [rsi], r14
mov r14, qword [rsp + 0x30]
add rsp, 0x48
pop r15
pop rsi
ret