joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1402e4d90
Capabilities:
Read file on windows

Disassembly:
push rbx
sub rsp, 0x50
mov rax, qword [0x140424a38]
xor rax, rsp
mov qword [rsp + 0x30], rax
cmp byte [rcx + 0x5c], 0
mov rbx, rcx
je 0x1402e4dcd
mov dword [rcx + 0x9c], 2
xor eax, eax
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140322a80
add rsp, 0x50
pop rbx
ret
mov eax, dword [rcx + 0x374]
mov qword [rsp + 0x68], rbp
xor ebp, ebp
test eax, eax
jne 0x1402e4f7b
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x40], r14
mov r14, qword [rcx + 0x40]
test r14, r14
je 0x1402e4dfb
sub r14d, dword [rcx + 0x48]
jmp 0x1402e4e0a
mov rcx, qword [rcx + 0x30]
call fcn.14033968c
sub eax, dword [rbx + 0x38]
mov r14d, eax
mov edx, dword [rbx + 0x58]
cmp edx, 0x10000
jb 0x1402e4e20
add edx, 0xffff0000
cmp edx, dword [rbx + 0x60]
jae 0x1402e4e23
mov edx, dword [rbx + 0x60]
mov rcx, rbx
call fcn.1402e1580
lea r8, [rsp + 0x20]
mov rcx, rbx
lea rdx, [rsp + 0x24]
call fcn.1402e6280
test eax, eax
jne 0x1402e4e55
mov dword [rbx + 0x9c], 0x24
mov esi, 0xffffffff
jmp 0x1402e4f5a
mov rcx, rbx
mov qword [rsp + 0x48], rdi
call fcn.1402e4110
mov edi, eax
cmp dword [rsp + 0x20], ebp
jne 0x1402e4ebe
nop word [rax + rax]
mov edx, dword [rsp + 0x24]
mov rcx, rbx
call fcn.1402e1580
lea r8, [rsp + 0x20]
mov rcx, rbx
lea rdx, [rsp + 0x24]
call fcn.1402e6280
test eax, eax
je 0x1402e4ebe
cmp byte [rbx + 0x5c], bpl
je 0x1402e4e9c
mov edi, ebp
jmp 0x1402e4eb8
mov rdi, qword [rbx + 0x40]
test rdi, rdi
je 0x1402e4eaa
sub edi, dword [rbx + 0x48]
jmp 0x1402e4eb8
mov rcx, qword [rbx + 0x30]
call fcn.14033968c
sub eax, dword [rbx + 0x38]
mov edi, eax
cmp dword [rsp + 0x20], ebp
je 0x1402e4e70
mov edx, edi
mov rcx, rbx
call fcn.1402e1580
mov rcx, qword [rbx + 0x40]
test rcx, rcx
je 0x1402e4ef0
lea rdx, [rcx + 6]
cmp rdx, qword [rbx + 0x50]
ja 0x1402e4f0d
mov eax, dword [rcx]
mov dword [rsp + 0x28], eax
movzx eax, word [rcx + 4]
mov word [rsp + 0x2c], ax
mov qword [rbx + 0x40], rdx
jmp 0x1402e4f17
mov r9, qword [rbx + 0x30]
lea rcx, [rsp + 0x28]
mov edx, 6
lea r8d, [rdx - 5]
call fcn.1403364cc
cmp rax, 1
je 0x1402e4f17
mov dword [rbx + 0x98], 1
mov rcx, rbx
call fcn.1402de7d0
mov rcx, rbx
mov esi, eax
call fcn.1402de7d0
cmp esi, 0xffffffff
jne 0x1402e4f3e
cmp eax, esi
jne 0x1402e4f3e
mov dword [rbx + 0x9c], 0x24
jmp 0x1402e4f55
test eax, eax
mov dword [rbx + 0x70], edi
mov eax, dword [rsp + 0x24]
mov ecx, 0xfffffffe
cmovne esi, ecx
mov dword [rbx + 0x74], eax
mov dword [rbx + 0x78], esi
mov rdi, qword [rsp + 0x48]
mov edx, r14d
mov dword [rbx + 0x374], esi
mov rcx, rbx
call fcn.1402e1580
mov eax, dword [rbx + 0x374]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x70]
cmp eax, 0xffffffff
cmovne ebp, eax
mov eax, ebp
mov rbp, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140322a80
add rsp, 0x50
pop rbx
ret
Function at 0x1402e7690
Capabilities:
Write file on windows

Disassembly:
push rsi
sub rsp, 0x50
mov rax, qword [0x140424a38]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov rsi, rcx
test rcx, rcx
jne 0x1402e76c3
lea eax, [rcx - 1]
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140322a80
add rsp, 0x50
pop rsi
ret
mov ecx, dword [rcx + 8]
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x48], rdi
test cl, 1
je 0x1402e7736
lea rbx, [rsi + 0x90]
mov edi, 2
xor ebp, ebp
cmp dword [rbx], ebp
jbe 0x1402e76f7
mov rcx, qword [rbx - 8]
call fcn.14032cd24
mov dword [rbx], ebp
add rbx, 0x10
sub rdi, 1
jne 0x1402e76e8
cmp dword [rsi + 0xc], 1
jne 0x1402e7719
mov rax, qword [rsi + 0x78]
mov rdx, qword [rax + 0x30]
test rdx, rdx
je 0x1402e7719
mov rcx, rsi
call rdx
mov rcx, qword [rsi]
mov dword [rsi + 0xc], ebp
call fcn.140335ba8
mov rcx, rsi
call fcn.14032cd24
mov ebx, 1
jmp 0x1402e7804
test cl, 2
je 0x1402e77ff
mov eax, dword [rsi + 0x38]
xor ebp, ebp
cmp dword [rsi + 0xc], 3
bswap eax
mov dword [rsp + 0x24], eax
mov eax, 0x46464941
mov qword [rsp + 0x40], r14
mov r14d, ebp
setne r14b
mov dword [rsp + 0x20], 0x4d524f46
test cl, 0x10
mov ecx, 0x43464941
cmovne eax, ecx
mov rcx, qword [rsi]
xor r8d, r8d
mov dword [rsp + 0x28], eax
xor edx, edx
call fcn.1403367dc
mov r9, qword [rsi]
test eax, eax
jns 0x1402e77a6
mov rcx, r9
call fcn.140335ba8
mov rcx, rsi
mov ebx, 0xffffffff
call fcn.14032cd24
mov r14, qword [rsp + 0x40]
jmp 0x1402e7804
mov edx, 1
lea rcx, [rsp + 0x20]
lea r8d, [rdx + 0xb]
call fcn.140336a34
mov rcx, qword [rsi]
cmp rax, 0xc
jne 0x1402e778d
call fcn.140335ba8
lea rbx, [rsi + 0x90]
mov edi, 2
cmp dword [rbx], ebp
jbe 0x1402e77e2
mov rcx, qword [rbx - 8]
call fcn.14032cd24
mov dword [rbx], ebp
add rbx, 0x10
sub rdi, 1
jne 0x1402e77d3
mov rcx, rsi
lea ebx, [r14 + 1]
call fcn.14032cd24
mov r14, qword [rsp + 0x40]
jmp 0x1402e7804
mov ebx, 0xffffffff
mov rdi, qword [rsp + 0x48]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140322a80
add rsp, 0x50
pop rsi
ret
Function at 0x1402e79a0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x40
mov rax, qword [0x140424a38]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov rsi, rcx
mov edi, edx
mov ecx, 0xa8
call fcn.14033c138
mov rbx, rax
test rax, rax
je 0x1402e7a5a
mov edx, 1
mov qword [rax], rsi
or edi, 1
lea rcx, [rsp + 0x20]
mov r9, rsi
mov dword [rax + 8], edi
lea r8d, [rdx + 0xb]
call fcn.1403364cc
cmp rax, 0xc
jne 0x1402e7a52
cmp dword [rsp + 0x20], 0x4d524f46
jne 0x1402e7a52
cmp dword [rsp + 0x24], 0
je 0x1402e7a52
mov eax, dword [rsp + 0x28]
mov dword [rbx + 0x70], eax
mov eax, dword [rsp + 0x28]
cmp eax, 0x43464941
je 0x1402e7a28
cmp eax, 0x46464941
jne 0x1402e7a52
mov rcx, rbx
call fcn.1402e8000
cmp eax, 1
jl 0x1402e7a52
xorps xmm0, xmm0
mov dword [rbx + 0xc], 0
movups xmmword [rbx + 0x88], xmm0
mov rax, rbx
movups xmmword [rbx + 0x98], xmm0
jmp 0x1402e7a5c
mov rcx, rbx
call fcn.14032cd24
xor eax, eax
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140322a80
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret

Function at 0x1402e7b80
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x140424a38]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rsi, rcx
mov edi, edx
mov ecx, 0xa8
call fcn.14033c138
mov rbx, rax
test rax, rax
je 0x1402e7cad
mov qword [rax], rsi
mov edx, 1
mov qword [rsp + 0x68], rbp
mov ecx, 0x43464941
mov dword [rsp + 0x30], 0x4d524f46
mov ebp, edi
mov qword [rax + 0x38], 4
and ebp, 0x10
mov eax, 0x46464941
mov dword [rsp + 0x34], 0x4000000
cmovne eax, ecx
lea r8d, [rdx + 0xb]
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x38], eax
mov r9, rsi
call fcn.140336a34
cmp rax, 0xc
jne 0x1402e7c84
xor eax, eax
xorps xmm0, xmm0
mov qword [rbx + 0xc], rax
movups xmmword [rbx + 0x88], xmm0
movups xmmword [rbx + 0x98], xmm0
test ebp, ebp
je 0x1402e7c90
mov r9, rsi
mov dword [rsp + 0x28], 0x52455646
lea edx, [rax + 8]
mov dword [rsp + 0x2c], 0x4000000
lea r8d, [rax + 1]
mov dword [rsp + 0x20], 0x405180a2
lea rcx, [rsp + 0x28]
call fcn.140336a34
cmp rax, 1
jne 0x1402e7c84
mov r9, rsi
lea edx, [rax + 3]
mov r8, rax
lea rcx, [rsp + 0x20]
call fcn.140336a34
cmp rax, 1
jne 0x1402e7c84
add qword [rbx + 0x38], 0xc
mov ecx, edi
or ecx, 4
mov eax, edi
and al, 0xc
cmovne ecx, edi
jmp 0x1402e7c98
mov rcx, rbx
call fcn.14032cd24
xor eax, eax
jmp 0x1402e7ca8
mov ecx, edi
and ecx, 0xfffffff7
or ecx, 4
or ecx, 2
mov dword [rbx + 0x74], 0x454e4f4e
mov dword [rbx + 8], ecx
mov rax, rbx
mov rbp, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.140322a80
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x50
pop rdi
ret
Function at 0x1402e7cd0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x20
cmp dword [rcx + 0xc], 1
mov rdi, rcx
je 0x1402e7e15
mov eax, dword [rcx + 0x70]
cmp eax, 0x43464941
je 0x1402e7cfc
cmp eax, 0x46464941
jne 0x1402e7d9d
lea r8, [rsp + 0x30]
mov rdx, rdi
mov ecx, 0x53534e44
call fcn.1402e7e90
test eax, eax
je 0x1402e7d9d
mov eax, dword [rsp + 0x30]
cmp eax, 8
jb 0x1402e7d9d
mov r9, qword [rdi]
add eax, 0xfffffff8
mov ecx, eax
mov edx, 1
mov qword [rdi + 0x40], rcx
lea rcx, [rsp + 0x38]
mov qword [rdi + 0x48], 0
lea r8d, [rdx + 7]
call fcn.1403364cc
cmp rax, 8
jb 0x1402e7d9d
mov ecx, dword [rsp + 0x38]
mov ebx, ecx
and ebx, 0xff0000
mov eax, ecx
shr eax, 0x10
or ebx, eax
mov eax, ecx
and eax, 0xff00
shl ecx, 0x10
or eax, ecx
shr ebx, 8
shl eax, 8
or ebx, eax
mov dword [rsp + 0x38], ebx
je 0x1402e7dc2
mov eax, ebx
sub qword [rdi + 0x40], rax
test ebx, ebx
jle 0x1402e7dc2
test byte [rdi + 8], 0x20
jne 0x1402e7db0
mov rcx, qword [rdi]
mov r8d, 1
mov edx, ebx
call fcn.1403367dc
test eax, eax
jns 0x1402e7dc2
mov eax, 0xffffffff
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
mov rcx, qword [rdi]
dec ebx
call fcn.1403360ac
test eax, eax
js 0x1402e7d9d
test ebx, ebx
jg 0x1402e7db0
mov rbx, qword [0x140424690]
lea rax, [0x140424690]
test rbx, rbx
je 0x1402e7d9d
mov ecx, dword [rdi + 0x74]
cmp dword [rbx], ecx
je 0x1402e7df7
mov rbx, qword [rax + 8]
add rax, 8
test rbx, rbx
jne 0x1402e7dd8
lea eax, [rbx - 1]
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
mov rax, qword [rbx + 8]
test rax, rax
je 0x1402e7e0a
mov rcx, rdi
call rax
cmp eax, 1
jl 0x1402e7e1a
mov qword [rdi + 0x78], rbx
mov dword [rdi + 0xc], 1
mov eax, 1
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
Function at 0x1402e7e90
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rsi
push rdi
push r14
sub rsp, 0x30
mov rax, qword [0x140424a38]
xor rax, rsp
mov qword [rsp + 0x28], rax
mov eax, dword [rdx + 8]
mov esi, ecx
mov r14, r8
mov rdi, rdx
bswap esi
test al, 0x20
jne 0x1402e7eed
mov rcx, qword [rdi]
xor r8d, r8d
lea edx, [r8 + 0xc]
call fcn.1403367dc
test eax, eax
jns 0x1402e7f0f
xor eax, eax
mov rcx, qword [rsp + 0x28]
xor rcx, rsp
call fcn.140322a80
mov rbx, qword [rsp + 0x50]
add rsp, 0x30
pop r14
pop rdi
pop rsi
ret
bt eax, 0x1d
jae 0x1402e7f0f
cmp esi, 0x444e5353
jne 0x1402e7ed0
btr eax, 0x1d
mov dword [rdx + 8], eax
mov eax, dword [rdx + 0x40]
mov dword [r8], eax
mov eax, 1
jmp 0x1402e7ed2
mov r9, qword [rdi]
lea rcx, [rsp + 0x20]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.1403364cc
cmp rax, 8
jb 0x1402e7ed0
nop dword [rax + rax]
mov ecx, dword [rsp + 0x24]
mov edx, ecx
and edx, 0xff0000
mov eax, ecx
shr eax, 0x10
or edx, eax
mov eax, ecx
and eax, 0xff00
shl ecx, 0x10
or eax, ecx
shr edx, 8
mov ecx, dword [rsp + 0x20]
shl eax, 8
or edx, eax
mov dword [rsp + 0x24], edx
cmp ecx, esi
je 0x1402e7fed
mov eax, dword [rdi + 8]
mov ebx, edx
and ebx, 1
add ebx, edx
test al, 0x20
jne 0x1402e7f8f
mov rcx, qword [rdi]
mov r8d, 1
mov edx, ebx
call fcn.1403367dc
test eax, eax
js 0x1402e7ed0
jmp 0x1402e7fb6
cmp ecx, 0x444e5353
je 0x1402e7fdb
test ebx, ebx
jle 0x1402e7fb6
nop dword [rax + rax]
mov rcx, qword [rdi]
dec ebx
call fcn.1403360ac
test eax, eax
js 0x1402e7ed0
test ebx, ebx
jg 0x1402e7fa0
mov r9, qword [rdi]
lea rcx, [rsp + 0x20]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.1403364cc
cmp rax, 8
jae 0x1402e7f30
jmp 0x1402e7ed0
bts eax, 0x1d
mov dword [rdi + 8], eax
mov eax, edx
mov qword [rdi + 0x40], rax
jmp 0x1402e7ed0
mov dword [r14], edx
mov eax, 1
jmp 0x1402e7ed2
Function at 0x1402ec690
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
xor r14d, r14d
mov ebp, edx
lea rdx, str.wvpk
mov rsi, rcx
mov edi, r14d
lea r8d, [r14 + 4]
call fcn.140338370
test eax, eax
jne 0x1402ec807
mov r9d, dword [rsi + 4]
lea eax, [r9 + 8]
cmp eax, 0x20
jb 0x1402ec807
add r9d, 0xffffffe8
lea r8, [rsi + 0x20]
cmp r9d, 2
jb 0x1402ec7e6
movzx eax, byte [r8 + 1]
add r9d, 0xfffffffe
movzx ebx, byte [r8]
add r8, 2
lea r11d, [rax + rax]
test bl, bl
jns 0x1402ec72f
cmp r9d, 2
jb 0x1402ec807
movzx edx, byte [r8 + 1]
movzx ecx, byte [r8]
add r8, 2
shl edx, 8
add edx, ecx
shl edx, 9
add r11d, edx
add r9d, 0xfffffffe
cmp r9d, r11d
jb 0x1402ec807
test ebp, ebp
je 0x1402ec7d3
movzx eax, bl
and al, 0x3f
cmp al, 0x2f
jne 0x1402ec7d3
mov edx, r8d
mov r10, rsi
sub edx, esi
mov eax, 0xffffffff
sub edx, 2
sar edx, 1
test bl, 0x40
jne 0x1402ec807
lea ecx, [r11 - 2]
cmp ecx, 2
ja 0x1402ec807
test edx, edx
je 0x1402ec792
nop dword [rax]
movzx ecx, word [r10]
lea eax, [rax + rax*2]
add eax, ecx
lea r10, [r10 + 2]
sub edx, 1
jne 0x1402ec780
cmp r11d, 4
jne 0x1402ec7bc
cmp byte [r8], al
jne 0x1402ec807
mov ecx, eax
shr ecx, 8
cmp byte [r8 + 1], cl
jne 0x1402ec807
mov ecx, eax
shr ecx, 0x10
cmp byte [r8 + 2], cl
jne 0x1402ec807
shr eax, 0x18
cmp byte [r8 + 3], al
jmp 0x1402ec7cf
mov ecx, eax
shr ecx, 0x10
xor eax, ecx
cmp byte [r8], al
jne 0x1402ec807
shr eax, 8
cmp byte [r8 + 1], al
jne 0x1402ec807
inc edi
mov eax, r11d
sub r9d, r11d
add r8, rax
cmp r9d, 2
jae 0x1402ec6f0
test r9d, r9d
jne 0x1402ec802
test ebp, ebp
je 0x1402ec7fc
test dword [rsi + 0x18], 0x10000000
je 0x1402ec7fc
test edi, edi
je 0x1402ec802
mov r14d, 1
mov eax, r14d
jmp 0x1402ec809
xor eax, eax
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x1402f4670
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x30
movups xmm0, xmmword [r8]
mov rbx, rcx
mov rdi, r8
movaps xmmword [rsp + 0x20], xmm0
psrldq xmm0, 8
movq rcx, xmm0
test rcx, rcx
je 0x1402f4729
mov r9, qword [rsp + 0x20]
mov edx, 0x811c9dc5
movzx eax, byte [r9]
xor rax, rdx
imul rdx, rax, 0x1000193
lea rax, [r9 + 1]
mov qword [rsp + 0x20], rax
lea rax, [rcx - 1]
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x20]
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
call fcn.1400c5a00
movabs rcx, 0x4681d23bf54f2346
cmp rax, rcx
je 0x1402f4711
movabs rcx, 0xf54574241b5426fe
cmp rax, rcx
jne 0x1402f4729
mov dword [rbx], 0
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov dword [rbx], 1
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov rax, qword [0x140676310]
mov edx, 2
mov qword [rsp + 0x40], rsi
movsxd rcx, dword [rax + 4]
lea rax, [0x140676328]
add rcx, rax
and dword [rcx], 0xffffefff
or dword [rcx], 0x2000
lea rcx, [rsp + 0x20]
call fcn.140316bc8
mov rcx, qword [0x140676310]
lea rsi, [0x140676310]
mov rdx, qword [rax + 8]
movsxd rcx, dword [rcx + 4]
add rcx, rsi
call qword [rax]
lea rdx, str.Unknown_crossfade_power_curve:
mov rcx, rsi
call fcn.14001ce10
movups xmm1, xmmword [rdi]
mov rcx, rax
movdqa xmm0, xmm1
movq rdx, xmm1
psrldq xmm0, 8
movq r8, xmm0
call fcn.14001d0e0
mov rcx, rax
mov dl, 0xa
call fcn.1400730a0
mov rsi, qword [rsp + 0x40]
mov rax, rbx
mov byte [rbx + 4], 0
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
Function at 0x1402f47d0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x30
movups xmm0, xmmword [r8]
mov rbx, rcx
mov rdi, r8
movaps xmmword [rsp + 0x20], xmm0
psrldq xmm0, 8
movq rcx, xmm0
test rcx, rcx
je 0x1402f48b0
mov r9, qword [rsp + 0x20]
mov edx, 0x811c9dc5
movzx eax, byte [r9]
xor rax, rdx
imul rdx, rax, 0x1000193
lea rax, [r9 + 1]
mov qword [rsp + 0x20], rax
lea rax, [rcx - 1]
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x20]
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
call fcn.1400c5a00
movabs rcx, 0xb24e258dd748e21d
cmp rax, rcx
je 0x1402f4898
movabs rcx, 0xd20e31b5b71f9b12
cmp rax, rcx
je 0x1402f4880
movabs rcx, 0xd8ab93d667b03739
cmp rax, rcx
jne 0x1402f48b0
mov dword [rbx], 3
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov dword [rbx], 1
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov dword [rbx], 2
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov rax, qword [0x140676310]
mov edx, 2
mov qword [rsp + 0x40], rsi
movsxd rcx, dword [rax + 4]
lea rax, [0x140676328]
add rcx, rax
and dword [rcx], 0xffffefff
or dword [rcx], 0x2000
lea rcx, [rsp + 0x20]
call fcn.140316bc8
mov rcx, qword [0x140676310]
lea rsi, [0x140676310]
mov rdx, qword [rax + 8]
movsxd rcx, dword [rcx + 4]
add rcx, rsi
call qword [rax]
lea rdx, str.Unknown_EQ_type:
mov rcx, rsi
call fcn.14001ce10
movups xmm1, xmmword [rdi]
mov rcx, rax
movdqa xmm0, xmm1
movq rdx, xmm1
psrldq xmm0, 8
movq r8, xmm0
call fcn.14001d0e0
mov rcx, rax
mov dl, 0xa
call fcn.1400730a0
mov rsi, qword [rsp + 0x40]
mov rax, rbx
mov byte [rbx + 4], 0
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
Function at 0x1402f4ec0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x30
movups xmm0, xmmword [r8]
mov rbx, rcx
mov rdi, r8
movaps xmmword [rsp + 0x20], xmm0
psrldq xmm0, 8
movq rcx, xmm0
test rcx, rcx
je 0x1402f4fc7
mov r9, qword [rsp + 0x20]
mov edx, 0x811c9dc5
movzx eax, byte [r9]
xor rax, rdx
imul rdx, rax, 0x1000193
lea rax, [r9 + 1]
mov qword [rsp + 0x20], rax
lea rax, [rcx - 1]
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x20]
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
call fcn.1400c5a00
movabs rcx, 0x30e7ee0d51121c35
cmp rax, rcx
je 0x1402f4faf
movabs rcx, 0x33645df2e7bc3637
cmp rax, rcx
je 0x1402f4f97
movabs rcx, 0x664cfc53f26aaff0
cmp rax, rcx
je 0x1402f4f7f
movabs rcx, 0x6884f9e7afbd9ca5
cmp rax, rcx
jne 0x1402f4fc7
mov dword [rbx], 3
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov dword [rbx], 1
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov dword [rbx], 2
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov dword [rbx], 0
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov rax, qword [0x140676310]
mov edx, 2
mov qword [rsp + 0x40], rsi
movsxd rcx, dword [rax + 4]
lea rax, [0x140676328]
add rcx, rax
and dword [rcx], 0xffffefff
or dword [rcx], 0x2000
lea rcx, [rsp + 0x20]
call fcn.140316bc8
mov rcx, qword [0x140676310]
lea rsi, [0x140676310]
mov rdx, qword [rax + 8]
movsxd rcx, dword [rcx + 4]
add rcx, rsi
call qword [rax]
lea rdx, str.Unknown_loop_mode:
mov rcx, rsi
call fcn.14001ce10
movups xmm1, xmmword [rdi]
mov rcx, rax
movdqa xmm0, xmm1
movq rdx, xmm1
psrldq xmm0, 8
movq r8, xmm0
call fcn.14001d0e0
mov rcx, rax
mov dl, 0xa
call fcn.1400730a0
mov rsi, qword [rsp + 0x40]
mov rax, rbx
mov byte [rbx + 4], 0
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
Function at 0x1402f5070
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x30
movups xmm0, xmmword [r8]
mov rbx, rcx
mov rdi, r8
movaps xmmword [rsp + 0x20], xmm0
psrldq xmm0, 8
movq rcx, xmm0
test rcx, rcx
je 0x1402f5150
mov r9, qword [rsp + 0x20]
mov edx, 0x811c9dc5
movzx eax, byte [r9]
xor rax, rdx
imul rdx, rax, 0x1000193
lea rax, [r9 + 1]
mov qword [rsp + 0x20], rax
lea rax, [rcx - 1]
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x20]
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
call fcn.1400c5a00
movabs rcx, 0x5a8f6d88e68b9c52
cmp rax, rcx
je 0x1402f5138
movabs rcx, 0xc9e4feac029402af
cmp rax, rcx
je 0x1402f5120
movabs rcx, 0xec9bd5855d3c9be4
cmp rax, rcx
jne 0x1402f5150
mov dword [rbx], 2
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov dword [rbx], 0
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov dword [rbx], 1
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov rax, qword [0x140676310]
mov edx, 2
mov qword [rsp + 0x40], rsi
movsxd rcx, dword [rax + 4]
lea rax, [0x140676328]
add rcx, rax
and dword [rcx], 0xffffefff
or dword [rcx], 0x2000
lea rcx, [rsp + 0x20]
call fcn.140316bc8
mov rcx, qword [0x140676310]
lea rsi, [0x140676310]
mov rdx, qword [rax + 8]
movsxd rcx, dword [rcx + 4]
add rcx, rsi
call qword [rax]
lea rdx, str.Unknown_off_mode:
mov rcx, rsi
call fcn.14001ce10
movups xmm1, xmmword [rdi]
mov rcx, rax
movdqa xmm0, xmm1
movq rdx, xmm1
psrldq xmm0, 8
movq r8, xmm0
call fcn.14001d0e0
mov rcx, rax
mov dl, 0xa
call fcn.1400730a0
mov rsi, qword [rsp + 0x40]
mov rax, rbx
mov byte [rbx + 4], 0
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
Function at 0x1402f52a0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x30
movups xmm0, xmmword [r8]
mov rbx, rcx
mov rdi, r8
movaps xmmword [rsp + 0x20], xmm0
psrldq xmm0, 8
movq rcx, xmm0
test rcx, rcx
je 0x1402f5340
mov r9, qword [rsp + 0x20]
mov edx, 0x811c9dc5
movzx eax, byte [r9]
xor rax, rdx
imul rdx, rax, 0x1000193
lea rax, [r9 + 1]
mov qword [rsp + 0x20], rax
lea rax, [rcx - 1]
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x20]
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
call fcn.1400c5a00
movabs rcx, 0x342b585b61342fd0
cmp rax, rcx
je 0x1402f53f6
movabs rcx, 0x7ba54c22ab3a8a0a
cmp rax, rcx
je 0x1402f53de
movabs rcx, 0xa147808ce7774569
cmp rax, rcx
je 0x1402f53f6
mov rax, qword [0x140676310]
mov edx, 2
mov qword [rsp + 0x40], rsi
movsxd rcx, dword [rax + 4]
lea rax, [0x140676328]
add rcx, rax
and dword [rcx], 0xffffefff
or dword [rcx], 0x2000
lea rcx, [rsp + 0x20]
call fcn.140316bc8
mov rcx, qword [0x140676310]
lea rsi, [0x140676310]
mov rdx, qword [rax + 8]
movsxd rcx, dword [rcx + 4]
add rcx, rsi
call qword [rax]
lea rdx, str.Unknown_velocity_override:
mov rcx, rsi
call fcn.14001ce10
movups xmm1, xmmword [rdi]
mov rcx, rax
movdqa xmm0, xmm1
movq rdx, xmm1
psrldq xmm0, 8
movq r8, xmm0
call fcn.14001d0e0
mov rcx, rax
mov dl, 0xa
call fcn.1400730a0
mov rsi, qword [rsp + 0x40]
mov rax, rbx
mov byte [rbx + 4], 0
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov dword [rbx], 1
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov dword [rbx], 0
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
Function at 0x1402f5410
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x30
movups xmm0, xmmword [r8]
mov rbx, rcx
mov rdi, r8
movaps xmmword [rsp + 0x20], xmm0
psrldq xmm0, 8
movq rcx, xmm0
test rcx, rcx
je 0x1402f5542
mov r9, qword [rsp + 0x20]
mov edx, 0x811c9dc5
movzx eax, byte [r9]
xor rax, rdx
imul rdx, rax, 0x1000193
lea rax, [r9 + 1]
mov qword [rsp + 0x20], rax
lea rax, [rcx - 1]
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x20]
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
call fcn.1400c5a00
movabs rcx, 0x1db58c994881d841
cmp rax, rcx
je 0x1402f552a
movabs rcx, 0x214ce71b4595b8fd
cmp rax, rcx
je 0x1402f5512
movabs rcx, 0x5e0c40ac1036ae7e
cmp rax, rcx
je 0x1402f54fa
movabs rcx, 0xce743d8d3ee2c9ea
cmp rax, rcx
je 0x1402f54e2
movabs rcx, 0xfe042945af016ab7
cmp rax, rcx
jne 0x1402f5542
mov dword [rbx], 4
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov dword [rbx], 2
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov dword [rbx], 1
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov dword [rbx], 0
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov dword [rbx], 3
mov rax, rbx
mov byte [rbx + 4], 1
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov rax, qword [0x140676310]
mov edx, 2
mov qword [rsp + 0x40], rsi
movsxd rcx, dword [rax + 4]
lea rax, [0x140676328]
add rcx, rax
and dword [rcx], 0xffffefff
or dword [rcx], 0x2000
lea rcx, [rsp + 0x20]
call fcn.140316bc8
mov rcx, qword [0x140676310]
lea rsi, [0x140676310]
mov rdx, qword [rax + 8]
movsxd rcx, dword [rcx + 4]
add rcx, rsi
call qword [rax]
lea rdx, str.Unknown_trigger_value:
mov rcx, rsi
call fcn.14001ce10
movups xmm1, xmmword [rdi]
mov rcx, rax
movdqa xmm0, xmm1
movq rdx, xmm1
psrldq xmm0, 8
movq r8, xmm0
call fcn.14001d0e0
mov rcx, rax
mov dl, 0xa
call fcn.1400730a0
mov rsi, qword [rsp + 0x40]
mov rax, rbx
mov byte [rbx + 4], 0
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret