joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400314f0
Capabilities:
Read file on windows

Disassembly:
push rbp
push rsi
push r14
sub rsp, 0x30
mov rsi, r8
mov r14, rdx
mov rbp, rcx
test r8, r8
jg 0x140031512
xor eax, eax
add rsp, 0x30
pop r14
pop rsi
pop rbp
ret
cmp qword [rcx + 0x68], 0
je 0x140031528
add rsp, 0x30
pop r14
pop rsi
pop rbp
jmp qword [sym.imp.MSVCP140.dll_protected_virtual:_long_long___int64____cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::xsgetn_char____ptr64__long_long___int64_____ptr64]
mov qword [rsp + 0x28], rbx
mov rbx, rsi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.MSVCP140.dll_protected:_long_long___int64____cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Gnavail_void_const___ptr64]
test rax, rax
je 0x140031572
cmp rax, rsi
mov rdi, rsi
mov rcx, rbp
cmovb rdi, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
mov r8, rdi
mov rcx, r14
mov rdx, rax
call sub.VCRUNTIME140.dll_memcpy
mov edx, edi
mov rcx, rbp
add r14, rdi
sub rbx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gbump_int____ptr64]
cmp qword [rbp + 0x80], 0
mov rdi, rbx
je 0x1400315e1
mov rcx, rbp
call fcn.1400286f0
cmp rbx, 0xfff
jbe 0x1400315c1
mov r9, qword [rbp + 0x80]
mov edx, 1
mov r8d, 0xfff
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
sub rbx, rax
add r14, rax
mov rdi, rbx
cmp rax, 0xfff
jne 0x1400315fa
cmp rbx, rax
ja 0x140031590
test rdi, rdi
je 0x1400315e1
mov r9, qword [rbp + 0x80]
mov r8, rbx
mov edx, 1
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
sub rdi, rax
sub rsi, rdi
mov rbx, qword [rsp + 0x28]
mov rax, rsi
mov rdi, qword [rsp + 0x20]
add rsp, 0x30
pop r14
pop rsi
pop rbp
ret
sub rsi, rbx
jmp 0x1400315e4
Function at 0x140031600
Capabilities:
Write file on windows

Disassembly:
push rbx
push rdi
push r14
sub rsp, 0x20
cmp qword [rcx + 0x68], 0
mov rbx, r8
mov r14, rdx
mov rdi, rcx
je 0x140031628
add rsp, 0x20
pop r14
pop rdi
pop rbx
jmp qword [sym.imp.MSVCP140.dll_protected_virtual:_long_long___int64____cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::xsputn_char_const____ptr64__long_long___int64_____ptr64]
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rsi
mov rsi, rbx
call qword [sym.imp.MSVCP140.dll_protected:_long_long___int64____cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Pnavail_void_const___ptr64]
mov rbp, rax
test rbx, rbx
jle 0x14003169c
test rax, rax
jle 0x14003167c
cmp rbx, rax
mov rcx, rdi
cmovl rbp, rbx
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
mov r8, rbp
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov edx, ebp
mov rcx, rdi
add r14, rbp
sub rbx, rbp
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbump_int____ptr64]
test rbx, rbx
jle 0x14003169c
mov r9, qword [rdi + 0x80]
test r9, r9
je 0x14003169c
mov r8, rbx
mov edx, 1
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
sub rbx, rax
mov rbp, qword [rsp + 0x40]
sub rsi, rbx
mov rax, rsi
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
pop rdi
pop rbx
ret
Function at 0x1400316c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbx
push rdi
push r12
sub rsp, 0x20
mov r12, rdx
mov rbx, rcx
call fcn.1401d0c60
movzx edi, word [rbx]
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rsi
mov r8, qword [rax + 0x18]
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r15
mov r10, qword [r8 + 0x20]
mov r11, qword [r8 + 0x28]
nop word [rax + rax]
mov r8, qword [r10 + 0x50]
xor ecx, ecx
cmp word [r8], cx
je 0x14003171c
mov rax, r8
nop
inc ecx
lea rax, [rax + 2]
cmp word [rax], 0
jne 0x140031710
xor edx, edx
test di, di
je 0x14003173c
mov rax, rbx
nop word [rax + rax]
inc edx
lea rax, [rax + 2]
cmp word [rax], 0
jne 0x140031730
cmp ecx, edx
jne 0x140031848
xor edx, edx
movsxd r9, ecx
test ecx, ecx
jle 0x14003177b
mov rax, rbx
sub r8, rbx
nop dword [rax]
nop word [rax + rax]
movzx ecx, word [rax]
cmp word [r8 + rax], cx
jne 0x140031848
add rdx, 2
add rax, 4
cmp rdx, r9
jl 0x140031760
mov r11, qword [r10 + 0x20]
test r11, r11
je 0x140031854
movsxd rax, dword [r11 + 0x3c]
xor ebx, ebx
movsxd rcx, dword [rax + r11 + 0x88]
add rcx, r11
movsxd r14, dword [rcx + 0x1c]
movsxd rsi, dword [rcx + 0x20]
add r14, r11
movsxd r15, dword [rcx + 0x24]
add rsi, r11
movsxd rdi, dword [rcx + 0x18]
add r15, r11
test rdi, rdi
jle 0x140031854
movzx ebp, byte [r12]
xor r10d, r10d
nop dword [rax]
nop word [rax + rax]
movsxd r8, dword [rsi + r10*4]
xor edx, edx
add r8, r11
cmp byte [r8], dl
je 0x1400317ec
mov rax, r8
inc edx
lea rax, [rax + 1]
cmp byte [rax], 0
jne 0x1400317e1
xor ecx, ecx
test bpl, bpl
je 0x14003180b
mov rax, r12
nop word [rax + rax]
inc ecx
lea rax, [rax + 1]
cmp byte [rax], 0
jne 0x140031800
cmp edx, ecx
jne 0x140031873
movsxd r9, edx
test edx, edx
jle 0x140031837
mov rcx, r12
sub r8, r12
nop dword [rax]
movzx eax, byte [rcx]
cmp byte [r8 + rcx], al
jne 0x140031873
inc rcx
mov rax, rcx
sub rax, r12
cmp rax, r9
jl 0x140031820
movsxd rax, ebx
movsx rcx, word [r15 + rax*2]
movsxd rax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140031856
mov r10, qword [r10]
cmp r10, r11
jne 0x140031700
xor eax, eax
mov r15, qword [rsp + 0x58]
mov r14, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
add rsp, 0x20
pop r12
pop rdi
pop rbx
ret
inc ebx
inc r10
cmp r10, rdi
jl 0x1400317d0
jmp 0x140031854
Function at 0x1401d0d74
Capabilities:
Get geographical location

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x40
mov rbx, rdx
lea r8, [rsp + 0x60]
mov edi, ecx
mov edx, 0x20000001
lea rcx, str._x_sys_default_locale
mov r9d, 2
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoEx]
test eax, eax
jne 0x1401d0dae
xor r9d, r9d
mov dword [rsp + 0x60], r9d
jmp 0x1401d0db3
mov r9d, dword [rsp + 0x60]
and qword [rsp + 0x30], 0
mov r8d, edi
and dword [rsp + 0x28], 0
xor edx, edx
mov ecx, 0x1300
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
mov edx, eax
test eax, eax
je 0x1401d0dfc
mov r8, qword [rbx]
dec r8
add r8, rdx
movzx ecx, byte [r8]
lea rax, [0x1401da680]
cmp byte [rcx + rax], 0
je 0x1401d0dfc
dec r8
sub rdx, 1
jne 0x1401d0de2
mov rbx, qword [rsp + 0x50]
mov rax, rdx
add rsp, 0x40
pop rdi
ret

Function at 0x1401d2520
Capabilities:
Parse pe header

Disassembly:
sub rsp, 0x28
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x1401d256a
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x1401d256a
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
cmp dword [rcx], 0x4550
jne 0x1401d256a
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x1401d256a
cmp dword [rcx + 0x84], 0xe
jbe 0x1401d256a
cmp dword [rcx + 0xf8], 0
setne al
jmp 0x1401d256c
xor al, al
add rsp, 0x28
ret

Function at 0x140004698
Capabilities:
Parse pe header

Disassembly:
sub rsp, 0x28
xor ecx, ecx
call qword [0x140005090]
test rax, rax
je 0x1400046e2
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x1400046e2
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
cmp dword [rcx], 0x4550
jne 0x1400046e2
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x1400046e2
cmp dword [rcx + 0x84], 0xe
jbe 0x1400046e2
cmp dword [rcx + 0xf8], 0
setne al
jmp 0x1400046e4
xor al, al
add rsp, 0x28
ret
Function at 0x14001b4c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 9], 0
je 0x14001b4e3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 8
jb 0x14001b4d0
mov byte [rcx + 9], 0
mov rax, rcx
ret

Function at 0x14001b4f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 6], 0
je 0x14001b513
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 5
jb 0x14001b500
mov byte [rcx + 6], 0
mov rax, rcx
ret

Function at 0x14001b520
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xb], 0
je 0x14001b543
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xa
jb 0x14001b530
mov byte [rcx + 0xb], 0
mov rax, rcx
ret

Function at 0x14001b550
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
je 0x14001b573
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xf
jb 0x14001b560
mov byte [rcx + 0x10], 0
mov rax, rcx
ret

Function at 0x14001b580
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xe], 0
je 0x14001b5a3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xd
jb 0x14001b590
mov byte [rcx + 0xe], 0
mov rax, rcx
ret

Function at 0x14001b610
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xd], 0
je 0x14001b633
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xc
jb 0x14001b620
mov byte [rcx + 0xd], 0
mov rax, rcx
ret

Function at 0x14001b640
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xf], 0
je 0x14001b663
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xe
jb 0x14001b650
mov byte [rcx + 0xf], 0
mov rax, rcx
ret

Function at 0x14001b6a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x12], 0
je 0x14001b6c3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x11
jb 0x14001b6b0
mov byte [rcx + 0x12], 0
mov rax, rcx
ret

Function at 0x14001b6d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xc], 0
je 0x14001b6f3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xb
jb 0x14001b6e0
mov byte [rcx + 0xc], 0
mov rax, rcx
ret

Function at 0x14001b700
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
je 0x14001b723
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x10
jb 0x14001b710
mov byte [rcx + 0x11], 0
mov rax, rcx
ret

Function at 0x14001b730
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x19], 0
je 0x14001b753
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x18
jb 0x14001b740
mov byte [rcx + 0x19], 0
mov rax, rcx
ret
Function at 0x14001b760
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x15], 0
je 0x14001b783
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x14
jb 0x14001b770
mov byte [rcx + 0x15], 0
mov rax, rcx
ret

Function at 0x14001b790
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x17], 0
je 0x14001b7b3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x16
jb 0x14001b7a0
mov byte [rcx + 0x17], 0
mov rax, rcx
ret

Function at 0x14001b7f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x16], 0
je 0x14001b813
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x15
jb 0x14001b800
mov byte [rcx + 0x16], 0
mov rax, rcx
ret

Function at 0x14001b820
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1b], 0
je 0x14001b843
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x1a
jb 0x14001b830
mov byte [rcx + 0x1b], 0
mov rax, rcx
ret

Function at 0x14001b850
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 7], 0
je 0x14001b873
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 6
jb 0x14001b860
mov byte [rcx + 7], 0
mov rax, rcx
ret

Function at 0x14001b880
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1a], 0
je 0x14001b8a3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x19
jb 0x14001b890
mov byte [rcx + 0x1a], 0
mov rax, rcx
ret

Function at 0x14001b8b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x18], 0
je 0x14001b8d3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x17
jb 0x14001b8c0
mov byte [rcx + 0x18], 0
mov rax, rcx
ret

Function at 0x14002c420
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x21], 0
je 0x14002c443
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x20
jb 0x14002c430
mov byte [rcx + 0x21], 0
ret

Function at 0x14002c450
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1f], 0
je 0x14002c473
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x1e
jb 0x14002c460
mov byte [rcx + 0x1f], 0
ret

Function at 0x14002c480
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x18], 0
je 0x14002c4a3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x17
jb 0x14002c490
mov byte [rcx + 0x18], 0
ret

Function at 0x14002c4b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1a], 0
je 0x14002c4d3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x19
jb 0x14002c4c0
mov byte [rcx + 0x1a], 0
ret
Function at 0x14002c4e0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 7], 0
je 0x14002c503
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 6
jb 0x14002c4f0
mov byte [rcx + 7], 0
ret

Function at 0x14002c510
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1b], 0
je 0x14002c533
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x1a
jb 0x14002c520
mov byte [rcx + 0x1b], 0
ret

Function at 0x14002c540
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x16], 0
je 0x14002c563
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x15
jb 0x14002c550
mov byte [rcx + 0x16], 0
ret

Function at 0x14002c570
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x14], 0
je 0x14002c593
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x13
jb 0x14002c580
mov byte [rcx + 0x14], 0
ret

Function at 0x14002c5a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x17], 0
je 0x14002c5c3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x16
jb 0x14002c5b0
mov byte [rcx + 0x17], 0
ret

Function at 0x14002c5d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x15], 0
je 0x14002c5f3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x14
jb 0x14002c5e0
mov byte [rcx + 0x15], 0
ret

Function at 0x14002c600
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x19], 0
je 0x14002c623
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x18
jb 0x14002c610
mov byte [rcx + 0x19], 0
ret

Function at 0x14002c630
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
je 0x14002c653
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x10
jb 0x14002c640
mov byte [rcx + 0x11], 0
ret

Function at 0x14002c660
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xc], 0
je 0x14002c683
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xb
jb 0x14002c670
mov byte [rcx + 0xc], 0
ret

Function at 0x14002c690
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x12], 0
je 0x14002c6b3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x11
jb 0x14002c6a0
mov byte [rcx + 0x12], 0
ret

Function at 0x14002c6c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 8], 0
je 0x14002c6e3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 7
jb 0x14002c6d0
mov byte [rcx + 8], 0
ret

Function at 0x14002c6f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xf], 0
je 0x14002c713
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xe
jb 0x14002c700
mov byte [rcx + 0xf], 0
ret
Function at 0x14002c720
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xd], 0
je 0x14002c743
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xc
jb 0x14002c730
mov byte [rcx + 0xd], 0
ret

Function at 0x14002c750
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xa], 0
je 0x14002c773
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 9
jb 0x14002c760
mov byte [rcx + 0xa], 0
ret

Function at 0x14002c780
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x13], 0
je 0x14002c7a3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x12
jb 0x14002c790
mov byte [rcx + 0x13], 0
ret

Function at 0x14002c7b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xe], 0
je 0x14002c7d3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xd
jb 0x14002c7c0
mov byte [rcx + 0xe], 0
ret

Function at 0x14002c7e0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
je 0x14002c803
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xf
jb 0x14002c7f0
mov byte [rcx + 0x10], 0
ret

Function at 0x14002c810
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xb], 0
je 0x14002c833
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xa
jb 0x14002c820
mov byte [rcx + 0xb], 0
ret

Function at 0x14002c840
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 6], 0
je 0x14002c863
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 5
jb 0x14002c850
mov byte [rcx + 6], 0
ret

Function at 0x14002c870
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 9], 0
je 0x14002c893
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x1f]
xor byte [rax + rcx], dl
inc rax
cmp rax, 8
jb 0x14002c880
mov byte [rcx + 9], 0
ret

Function at 0x140031970
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 4], 0
je 0x140031993
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x27]
xor byte [rax + rcx], dl
inc rax
cmp rax, 3
jb 0x140031980
mov byte [rcx + 4], 0
mov rax, rcx
ret

Function at 0x140031da0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 4], 0
je 0x140031dc3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x27]
xor byte [rax + rcx], dl
inc rax
cmp rax, 3
jb 0x140031db0
mov byte [rcx + 4], 0
ret

Function at 0x140031de0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 5], 0
je 0x140031e03
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x27]
xor byte [rax + rcx], dl
inc rax
cmp rax, 4
jb 0x140031df0
mov byte [rcx + 5], 0
ret
Function at 0x140031ec0
Capabilities:
Hash data using fnv

Disassembly:
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x140031f6c
mov rax, qword [rdi + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x140031efa
mov rdx, qword [rdi + 8]
mov rcx, rdi
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x20
pop rdi
jmp 0x140033900
mov rcx, qword [rdi + 8]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x140031f3a
mov qword [rsp + 0x38], rbx
nop word [rax + rax]
mov rbx, qword [rcx]
mov edx, 0x18
call fcn.14013c9f0
mov rcx, rbx
test rbx, rbx
jne 0x140031f20
mov rbx, qword [rsp + 0x38]
mov rax, qword [rdi + 8]
lea r8, [rsp + 0x30]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 8], rax
mov qword [rdi + 0x10], 0
mov rax, qword [rdi + 8]
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x30], rax
call fcn.140035e80
add rsp, 0x20
pop rdi
ret
push rbp
push rsi
push r14
sub rsp, 0x40
mov rbp, r8
mov r14, rdx
mov rsi, rcx
cmp rdx, r8
je 0x1400339fe
mov rdx, qword [rcx + 0x18]
movabs r8, 0x100000001b3
mov qword [rsp + 0x60], rbx
movabs rax, 0xcbf29ce484222325
mov qword [rsp + 0x38], rdi
mov rbx, r14
mov qword [rsp + 0x30], r12
mov r12, qword [rcx + 8]
movzx ecx, byte [r14 + 0x10]
xor rcx, rax
mov qword [rsp + 0x28], r13
movzx eax, byte [r14 + 0x11]
mov r13, qword [r14 + 8]
imul rcx, r8
mov qword [rsp + 0x20], r15
mov r15, qword [rsi + 0x30]
xor rcx, rax
movzx eax, byte [r14 + 0x12]
imul rcx, r8
mov qword [rsp + 0x78], rdx
xor rcx, rax
movzx eax, byte [r14 + 0x13]
imul rcx, r8
xor rcx, rax
imul rcx, r8
and r15, rcx
shl r15, 4
add r15, rdx
mov rax, qword [r15]
mov qword [rsp + 0x68], rax
mov rax, qword [r15 + 8]
mov qword [rsp + 0x70], rax
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x18
call fcn.14013c9f0
dec qword [rsi + 0x10]
cmp rdi, qword [rsp + 0x70]
je 0x140033a0a
cmp rbx, rbp
jne 0x1400339b0
cmp qword [rsp + 0x68], r14
jne 0x1400339dd
mov qword [r15], rbx
mov r12, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov r15, qword [rsp + 0x20]
mov qword [r13], rbx
mov qword [rbx + 8], r13
mov r13, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x60]
mov rax, rbp
add rsp, 0x40
pop r14
pop rsi
pop rbp
ret
cmp qword [rsp + 0x68], r14
jne 0x140033a19
mov qword [r15], r12
mov rax, r12
jmp 0x140033a1c
mov rax, r13
mov qword [r15 + 8], rax
cmp rbx, rbp
je 0x1400339dd
nop word [rax + rax]
movzx ecx, byte [rbx + 0x10]
movabs rdx, 0x100000001b3
mov r15, qword [rsi + 0x30]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movzx eax, byte [rbx + 0x11]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x12]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x13]
imul rcx, rdx
xor rcx, rax
imul rcx, rdx
and r15, rcx
shl r15, 4
add r15, qword [rsp + 0x78]
mov r14, qword [r15 + 8]
nop dword [rax]
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x18
call fcn.14013c9f0
dec qword [rsi + 0x10]
cmp rdi, r14
je 0x140033ab6
cmp rbx, rbp
jne 0x140033a90
jmp 0x1400339da
mov qword [r15], r12
mov qword [r15 + 8], r12
cmp rbx, rbp
jne 0x140033a30
jmp 0x1400339dd