joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14006c0e0
Capabilities:
Hash data using fnv

Disassembly:
mov dword [rsp + 0x10], edx
push rbp
sub rsp, 0x20
mov r9, qword [rcx + 8]
mov rbp, r8
mov qword [rsp + 0x30], rbx
mov rcx, r9
mov qword [rsp + 0x40], rsi
mov r11, r9
mov qword [rsp + 0x18], rdi
mov rbx, r9
mov rdi, r9
mov qword [rsp + 8], r14
mov r14, qword [0x140175a58]
mov r8, r9
mov rsi, r9
shr rdi, 0x18
mov rax, r9
shr rcx, 0x38
shr r11, 0x30
shr rbx, 0x28
shr r8, 0x20
shr rsi, 0x10
shr rax, 8
mov r10d, edx
test r14, r14
je 0x14006c249
movzx eax, al
mov qword [rsp + 0x10], r12
movabs r12, 0x100000001b3
mov qword [rsp], r15
movabs r15, 0xcbf29ce484222325
movzx edx, r9b
xor rdx, r15
imul rdx, r12
xor rdx, rax
movzx eax, sil
imul rdx, r12
xor rdx, rax
movzx eax, dil
imul rdx, r12
xor rdx, rax
movzx eax, r8b
mov r8, qword [r14 + 8]
imul rdx, r12
xor rdx, rax
movzx eax, bl
imul rdx, r12
xor rdx, rax
movzx eax, r11b
imul rdx, r12
xor rdx, rax
movzx eax, byte [rsp + 0x39]
imul rdx, r12
xor rdx, rcx
movzx ecx, r10b
xor rcx, r15
mov r15, qword [rsp]
imul rcx, r12
imul rdx, r12
xor rcx, rax
movzx eax, byte [rsp + 0x3a]
imul rcx, r12
xor rcx, rax
movzx eax, byte [rsp + 0x3b]
imul rcx, r12
xor rcx, rax
imul rcx, r12
mov r12, qword [rsp + 0x10]
xor rcx, rdx
mov rdx, qword [r14 + 0x18]
and rcx, qword [r14 + 0x30]
mov rax, rcx
add rax, rax
add rcx, rcx
mov rax, qword [rdx + rax*8]
mov r11, qword [rdx + rcx*8]
lea rdx, [rdx + rcx*8]
cmp r11, r8
jne 0x14006c21d
mov rcx, r8
jmp 0x14006c224
mov rcx, qword [rdx + 8]
mov rcx, qword [rcx]
cmp rax, rcx
je 0x14006c249
cmp qword [rax + 0x10], r9
jne 0x14006c235
cmp dword [rax + 0x18], r10d
je 0x14006c23a
mov rax, qword [rax]
jmp 0x14006c213
cmovne rax, r8
cmp rax, r8
je 0x14006c249
add rax, 0x20
jmp 0x14006c24b
xor eax, eax
mov r14, qword [rsp + 8]
mov rdi, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
test rax, rax
jne 0x14006c26a
add rsp, 0x20
pop rbp
ret
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
mov al, 1
movups xmmword [rbp + 0x10], xmm1
add rsp, 0x20
pop rbp
ret

Function at 0x14006f9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea ecx, [rcx*8]
lea r9, [r8 + 1]
cmp ecx, 0x80
jae 0x14006f9f8
mov byte [r8], cl
jmp 0x14006fa3c
movzx eax, cl
shr ecx, 7
or al, 0x80
mov byte [r8], al
cmp ecx, 0x80
jae 0x14006fa20
mov byte [r9], cl
lea r9, [r8 + 2]
jmp 0x14006fa3c
movzx eax, cl
shr ecx, 7
or al, 0x80
mov byte [r9], al
inc r9
cmp ecx, 0x80
jae 0x14006fa20
mov byte [r9], cl
inc r9
mov eax, edx
lea ecx, [rdx + rdx]
sar eax, 0x1f
lea rdx, [r9 + 1]
xor eax, ecx
cmp eax, 0x80
jae 0x14006fa58
mov byte [r9], al
mov rax, rdx
ret
movzx ecx, al
shr eax, 7
or cl, 0x80
mov byte [r9], cl
cmp eax, 0x80
jae 0x14006fa80
mov byte [rdx], al
lea rax, [r9 + 2]
ret
movzx ecx, al
lea rdx, [rdx + 1]
or cl, 0x80
shr eax, 7
mov byte [rdx - 1], cl
cmp eax, 0x80
jae 0x14006fa80
mov byte [rdx], al
lea rax, [rdx + 1]
ret
Function at 0x14006faa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea ecx, [rcx*8]
lea r9, [r8 + 1]
cmp ecx, 0x80
jae 0x14006fab8
mov byte [r8], cl
jmp 0x14006fafc
movzx eax, cl
shr ecx, 7
or al, 0x80
mov byte [r8], al
cmp ecx, 0x80
jae 0x14006fae0
mov byte [r9], cl
lea r9, [r8 + 2]
jmp 0x14006fafc
movzx eax, cl
shr ecx, 7
or al, 0x80
mov byte [r9], al
inc r9
cmp ecx, 0x80
jae 0x14006fae0
mov byte [r9], cl
inc r9
mov rax, rdx
lea rcx, [rdx + rdx]
sar rax, 0x3f
lea rdx, [r9 + 1]
xor rax, rcx
cmp rax, 0x80
jae 0x14006fb1d
mov byte [r9], al
mov rax, rdx
ret
movzx ecx, al
shr rax, 7
or cl, 0x80
mov byte [r9], cl
cmp rax, 0x80
jae 0x14006fb40
mov byte [rdx], al
lea rax, [r9 + 2]
ret
movzx ecx, al
lea rdx, [rdx + 1]
or cl, 0x80
shr rax, 7
mov byte [rdx - 1], cl
cmp rax, 0x80
jae 0x14006fb40
mov byte [rdx], al
lea rax, [rdx + 1]
ret

Function at 0x1400700f0
Capabilities:
Hash data using fnv

Disassembly:
movzx eax, byte [rdx + 1]
movabs r11, 0x100000001b3
movzx r9d, byte [rdx]
mov r8, rdx
mov r10, rcx
movabs rcx, 0xcbf29ce484222325
xor r9, rcx
imul r9, r11
xor r9, rax
movzx eax, byte [rdx + 2]
imul r9, r11
xor r9, rax
movzx eax, byte [rdx + 3]
imul r9, r11
xor r9, rax
movzx eax, byte [rdx + 4]
imul r9, r11
xor r9, rax
movzx eax, byte [rdx + 5]
imul r9, r11
xor r9, rax
movzx eax, byte [rdx + 6]
imul r9, r11
xor r9, rax
movzx eax, byte [rdx + 7]
movzx edx, byte [rdx + 8]
xor rdx, rcx
movzx ecx, byte [r8 + 0xb]
imul r9, r11
imul rdx, r11
xor r9, rax
movzx eax, byte [r8 + 9]
imul r9, r11
xor rdx, rax
movzx eax, byte [r8 + 0xa]
imul rdx, r11
xor rax, rdx
imul rax, r11
xor rax, rcx
imul rax, r11
xor rax, r9
and rax, qword [r10 + 0x30]
ret
Function at 0x14007fa70
Capabilities:
Hash data using fnv

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x80
mov qword [rbp - 0x50], 0xfffffffffffffffe
mov qword [rsp + 0x90], rbx
mov rax, qword [0x14011e878]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rbx, rdx
mov rcx, rdx
call fcn.1400376f0
dec eax
cmp eax, 9
ja case.default.0x14007fabf
cdqe
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x7fcfc]
add rcx, rdx
jmp rcx
mov r9d, 0x326
lea r8, str.D:p_vcpkg_buildtreesprotobuf_src_v3.11.3_464ce72ac5_srcgoogle_protobuf_map_field.h
mov edx, 3
lea rcx, [rbp - 0x48]
call fcn.140053510
nop
lea rdx, str.Unsupported
mov rcx, rax
call fcn.140053850
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140053690
nop
lea rcx, [rbp - 0x48]
call fcn.140053600
mov r9d, 0x335
lea r8, str.D:p_vcpkg_buildtreesprotobuf_src_v3.11.3_464ce72ac5_srcgoogle_protobuf_map_field.h
mov edx, 3
lea rcx, [rbp - 0x48]
call fcn.140053510
nop
lea rdx, str.Cant_get_here.
mov rcx, rax
call fcn.140053850
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140053690
nop
lea rcx, [rbp - 0x48]
call fcn.140053600
xor eax, eax
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400d51a0
mov rbx, qword [rsp + 0x90]
add rsp, 0x80
pop rbp
ret
mov rcx, rbx
call fcn.140031aa0
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14007fb77
mov rdx, qword [rax]
xor eax, eax
movzx ecx, byte [rdx]
test cl, cl
je 0x14007fb45
lea rax, [rax + rax*4]
movsx rcx, cl
add rax, rcx
lea rdx, [rdx + 1]
movzx ecx, byte [rdx]
test cl, cl
jne 0x14007fb80
jmp 0x14007fb45
mov rcx, rbx
call fcn.140078a10
mov qword [rbp - 0x60], rax
movzx edx, al
movabs rax, 0xcbf29ce484222325
xor rdx, rax
movabs r8, 0x100000001b3
imul rdx, r8
movzx eax, byte [rbp - 0x5f]
xor rdx, rax
imul rdx, r8
movzx eax, byte [rbp - 0x5e]
xor rdx, rax
imul rdx, r8
movzx eax, byte [rbp - 0x5d]
xor rdx, rax
imul rdx, r8
movzx eax, byte [rbp - 0x5c]
xor rdx, rax
imul rdx, r8
movzx eax, byte [rbp - 0x5b]
xor rax, rdx
imul rax, r8
movzx ecx, byte [rbp - 0x5a]
xor rax, rcx
imul rax, r8
movzx ecx, byte [rbp - 0x59]
xor rax, rcx
imul rax, r8
jmp 0x14007fb45
mov rcx, rbx
call fcn.1400787b0
mov dword [rbp - 0x60], eax
movzx edx, al
movabs rax, 0xcbf29ce484222325
xor rdx, rax
movabs r8, 0x100000001b3
imul rdx, r8
movzx eax, byte [rbp - 0x5f]
xor rax, rdx
imul rax, r8
movzx ecx, byte [rbp - 0x5e]
xor rax, rcx
imul rax, r8
movzx ecx, byte [rbp - 0x5d]
xor rax, rcx
imul rax, r8
jmp 0x14007fb45
mov rcx, rbx
call fcn.140079000
mov qword [rbp - 0x60], rax
movzx edx, al
movabs rax, 0xcbf29ce484222325
xor rdx, rax
movabs r8, 0x100000001b3
imul rdx, r8
movzx eax, byte [rbp - 0x5f]
xor rdx, rax
imul rdx, r8
movzx eax, byte [rbp - 0x5e]
xor rdx, rax
imul rdx, r8
movzx eax, byte [rbp - 0x5d]
xor rdx, rax
imul rdx, r8
movzx eax, byte [rbp - 0x5c]
xor rdx, rax
imul rdx, r8
movzx eax, byte [rbp - 0x5b]
xor rax, rdx
imul rax, r8
movzx ecx, byte [rbp - 0x5a]
xor rax, rcx
imul rax, r8
movzx ecx, byte [rbp - 0x59]
xor rax, rcx
imul rax, r8
jmp 0x14007fb45
mov rcx, rbx
call fcn.140078da0
jmp 0x14007fc1c
mov rcx, rbx
call fcn.1400781c0
movzx eax, al
jmp 0x14007fb45
Function at 0x1400881a0
Capabilities:
Encrypt data using rc4 prga
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov r10, qword [rdx + 8]
xor r8d, r8d
mov r11, rcx
mov r9, r10
movzx eax, byte [r10]
test al, al
je 0x1400881e7
nop dword [rax]
nop dword [rax + rax]
movsx rax, al
lea r8, [r8 + r8*4]
add r8, rax
lea r9, [r9 + 1]
movzx eax, byte [r9]
test al, al
jne 0x1400881d0
mov rbx, qword [rdx]
mov rdx, qword [r11 + 0x18]
imul rcx, rbx, 0x1000193
xor rcx, r8
and rcx, qword [r11 + 0x30]
mov r11, qword [r11 + 8]
mov rax, rcx
add rax, rax
add rcx, rcx
mov rax, qword [rdx + rax*8]
mov rdi, qword [rdx + rcx*8]
lea rsi, [rdx + rcx*8]
cmp rdi, r11
jne 0x14008821f
mov rcx, r11
jmp 0x140088226
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
cmp rax, rcx
je 0x14008828c
cmp qword [rax + 0x10], rbx
jne 0x14008825a
mov rcx, qword [rax + 0x18]
mov r9, r10
sub r9, rcx
nop dword [rax + rax]
movzx r8d, byte [rcx]
movzx edx, byte [rcx + r9]
sub r8d, edx
jne 0x140088255
inc rcx
test edx, edx
jne 0x140088240
test r8d, r8d
je 0x14008825f
mov rax, qword [rax]
jmp 0x140088215
mov r8, qword [rax + 0x18]
sub r8, r10
nop word [rax + rax]
movzx edx, byte [r10]
movzx ecx, byte [r10 + r8]
sub edx, ecx
jne 0x140088284
inc r10
test ecx, ecx
jne 0x140088270
test edx, edx
cmovne rax, r11
jmp 0x14008828f
mov rax, r11
cmp rax, r11
jne 0x1400882a6
xor eax, eax
mov rbx, qword [rsp + 8]
mov rsi, qword [rsp + 0x10]
mov rdi, qword [rsp + 0x18]
ret
mov rax, qword [rax + 0x20]
mov rbx, qword [rsp + 8]
mov rsi, qword [rsp + 0x10]
mov rdi, qword [rsp + 0x18]
ret
Function at 0x140089a70
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rdi, r9
mov rsi, rdx
mov r9, rcx
movsxd rdx, dword [r8 + 8]
mov r10, qword [r8]
imul r8, rdx, 0x1000193
imul rax, r10, 0x100011b
xor r8, rax
and r8, qword [rcx + 0x30]
mov rbx, qword [rcx + 8]
mov r11, r8
shl r11, 4
add r11, qword [rcx + 0x18]
mov rax, qword [r11]
cmp rbx, rax
je 0x140089b19
mov rbx, qword [r11 + 8]
mov rbx, qword [rbx]
nop dword [rax]
cmp rbx, rax
je 0x140089b19
mov rbx, qword [rbx + 8]
cmp r10, qword [rbx + 0x10]
jne 0x140089ad0
cmp edx, dword [rbx + 0x18]
jne 0x140089ad0
mov rcx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rcx], rax
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
dec qword [r9 + 0x10]
mov edx, 0x28
mov rcx, rdi
call fcn.1400d5498
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
jmp 0x140089baf
mov rax, qword [rdi]
cmp rbx, rax
je 0x140089b4e
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
shl r8, 4
mov rdx, qword [r9 + 0x18]
add rdx, r8
mov rax, qword [rdx]
cmp rax, qword [r9 + 8]
jne 0x140089b70
mov qword [rdx], rdi
mov rax, qword [r9 + 0x18]
mov qword [r8 + rax + 8], rdi
jmp 0x140089b9c
cmp rax, rbx
jne 0x140089b7a
mov qword [rdx], rdi
jmp 0x140089b9c
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x140089b9c
mov rdx, qword [r9 + 0x18]
mov rax, qword [rdx + r8 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r8 + 8], rcx
mov rcx, r9
call fcn.1400b4820
nop
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
add rsp, 0x30
pop rdi
pop rsi
pop rbx
ret
Function at 0x140089bc0
Capabilities:
Encrypt data using rc4 prga
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rdi, r9
mov r14, r8
mov rsi, rdx
mov r11, rcx
mov r10, qword [r8 + 8]
xor r9d, r9d
movzx eax, byte [r10]
test al, al
je 0x140089c17
nop dword [rax]
lea r9, [r9 + r9*4]
movsx rax, al
add r9, rax
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x140089c00
mov r15, qword [r8]
imul r10, r15, 0x1000193
xor r10, r9
and r10, qword [rcx + 0x30]
mov rbx, qword [rcx + 8]
shl r10, 4
mov rcx, qword [rcx + 0x18]
mov rax, qword [rcx + r10]
cmp rbx, rax
je 0x140089cae
mov rbx, qword [rcx + r10 + 8]
mov rbx, qword [rbx]
cmp rbx, rax
je 0x140089cae
mov rbx, qword [rbx + 8]
cmp r15, qword [rbx + 0x10]
jne 0x140089c45
mov rcx, qword [r14 + 8]
mov r9, qword [rbx + 0x18]
sub r9, rcx
nop
movzx r8d, byte [rcx]
movzx edx, byte [rcx + r9]
sub r8d, edx
jne 0x140089c75
inc rcx
test edx, edx
jne 0x140089c60
test r8d, r8d
jne 0x140089c45
mov rcx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rcx], rax
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
dec qword [r11 + 0x10]
lea edx, [r8 + 0x28]
mov rcx, rdi
call fcn.1400d5498
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
jmp 0x140089d40
mov rax, qword [rdi]
cmp rbx, rax
je 0x140089ce3
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rdx, qword [r11 + 0x18]
add rdx, r10
mov rax, qword [rdx]
cmp rax, qword [r11 + 8]
jne 0x140089d01
mov qword [rdx], rdi
mov rax, qword [r11 + 0x18]
mov qword [r10 + rax + 8], rdi
jmp 0x140089d2d
cmp rax, rbx
jne 0x140089d0b
mov qword [rdx], rdi
jmp 0x140089d2d
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x140089d2d
mov rdx, qword [r11 + 0x18]
mov rax, qword [rdx + r10 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r10 + 8], rcx
mov rcx, r11
call fcn.1400b48c0
nop
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
add rsp, 0x30
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret
Function at 0x140089d50
Capabilities:
Encrypt data using rc4 prga
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rdi, r9
mov r14, r8
mov rsi, rdx
mov r11, rcx
mov r10, qword [r8 + 8]
xor r9d, r9d
movzx eax, byte [r10]
test al, al
je 0x140089da7
nop dword [rax]
lea r9, [r9 + r9*4]
movsx rax, al
add r9, rax
lea r10, [r10 + 1]
movzx eax, byte [r10]
test al, al
jne 0x140089d90
mov r15, qword [r8]
imul r10, r15, 0x1000193
xor r10, r9
and r10, qword [rcx + 0x30]
mov rbx, qword [rcx + 8]
shl r10, 4
mov rcx, qword [rcx + 0x18]
mov rax, qword [rcx + r10]
cmp rbx, rax
je 0x140089e3e
mov rbx, qword [rcx + r10 + 8]
mov rbx, qword [rbx]
cmp rbx, rax
je 0x140089e3e
mov rbx, qword [rbx + 8]
cmp r15, qword [rbx + 0x10]
jne 0x140089dd5
mov rcx, qword [r14 + 8]
mov r9, qword [rbx + 0x18]
sub r9, rcx
nop
movzx r8d, byte [rcx]
movzx edx, byte [rcx + r9]
sub r8d, edx
jne 0x140089e05
inc rcx
test edx, edx
jne 0x140089df0
test r8d, r8d
jne 0x140089dd5
mov rcx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rcx], rax
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
dec qword [r11 + 0x10]
lea edx, [r8 + 0x30]
mov rcx, rdi
call fcn.1400d5498
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
jmp 0x140089ed0
mov rax, qword [rdi]
cmp rbx, rax
je 0x140089e73
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rdx, qword [r11 + 0x18]
add rdx, r10
mov rax, qword [rdx]
cmp rax, qword [r11 + 8]
jne 0x140089e91
mov qword [rdx], rdi
mov rax, qword [r11 + 0x18]
mov qword [r10 + rax + 8], rdi
jmp 0x140089ebd
cmp rax, rbx
jne 0x140089e9b
mov qword [rdx], rdi
jmp 0x140089ebd
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x140089ebd
mov rdx, qword [r11 + 0x18]
mov rax, qword [rdx + r10 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r10 + 8], rcx
mov rcx, r11
call fcn.1400b4960
nop
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
add rsp, 0x30
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret
Function at 0x140089ee0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rdi, r9
mov r12, r8
mov r15, rcx
mov r13, qword [r8 + 0x10]
mov r9, qword [r8 + 0x18]
cmp r9, 0x10
jb 0x140089f21
mov r8, qword [r8]
movabs rdx, 0xcbf29ce484222325
xor ecx, ecx
test r13, r13
je 0x140089f54
movabs r10, 0x100000001b3
nop dword [rax]
movzx eax, byte [rcx + r8]
xor rdx, rax
imul rdx, r10
inc rcx
cmp rcx, r13
jb 0x140089f40
mov r14, qword [r15 + 0x30]
and r14, rdx
mov rbx, qword [r15 + 8]
add r14, r14
mov rax, qword [r15 + 0x18]
mov rsi, qword [rax + r14*8]
cmp rbx, rsi
je 0x140089fe9
mov rbx, qword [rax + r14*8 + 8]
mov rbx, qword [rbx]
cmp rbx, rsi
je 0x140089fe9
mov rbx, qword [rbx + 8]
lea rdx, [rbx + 0x10]
cmp qword [rbx + 0x28], 0x10
jb 0x140089f8f
mov rdx, qword [rbx + 0x10]
mov rcx, r12
cmp r9, 0x10
jb 0x140089f9c
mov rcx, qword [r12]
cmp r13, qword [rbx + 0x20]
jne 0x140089f77
mov r8, r13
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
mov r9, qword [r12 + 0x18]
jne 0x140089f77
lea rcx, [r15 + 8]
mov rdx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rdx], rax
mov rdx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rdx + 8], rax
dec qword [rcx + 8]
mov rdx, rdi
call fcn.1400b5340
mov rax, qword [rsp + 0x78]
mov qword [rax], rbx
mov byte [rax + 8], 0
jmp 0x14008a0ec
mov rax, qword [rdi]
cmp rbx, rax
je 0x14008a01e
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rdx, qword [r15 + 0x18]
mov rax, qword [rdx + r14*8]
cmp rax, qword [r15 + 8]
jne 0x14008a03b
mov qword [rdx + r14*8], rdi
mov rax, qword [r15 + 0x18]
mov qword [rax + r14*8 + 8], rdi
jmp 0x14008a06a
cmp rax, rbx
jne 0x14008a046
mov qword [rdx + r14*8], rdi
jmp 0x14008a06a
mov rax, qword [rdx + r14*8 + 8]
mov rcx, qword [rax]
mov qword [rdx + r14*8 + 8], rcx
cmp rcx, rdi
je 0x14008a06a
mov rdx, qword [r15 + 0x18]
mov rax, qword [rdx + r14*8 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r14*8 + 8], rcx
mov rax, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x38]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss xmm1, dword [0x1400efdfc]
test rax, rax
jns 0x14008a08b
addss xmm0, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm2, rdx
test rdx, rdx
jns 0x14008a09c
addss xmm2, xmm1
divss xmm0, xmm2
comiss xmm0, dword [r15]
jbe 0x14008a0dc
cmp rdx, 0x200
jae 0x14008a0b9
lea rdx, [rdx*8]
jmp 0x14008a0cb
movabs rax, 0xfffffffffffffff
cmp rdx, rax
jae 0x14008a0cb
add rdx, rdx
mov rcx, r15
call fcn.140068d40
mov rcx, r15
call fcn.1400b55b0
nop
mov r9, qword [rsp + 0x78]
mov qword [r9], rdi
mov byte [r9 + 8], 1
mov rax, r9
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
Function at 0x14008a420
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x50], rsi
mov rdi, r9
mov rsi, rdx
mov r10, rcx
movzx r9d, byte [r8]
movabs rax, 0xcbf29ce484222325
xor r9, rax
movabs rcx, 0x100000001b3
imul r9, rcx
movzx eax, byte [r8 + 1]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 2]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 3]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 4]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 5]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 6]
xor r9, rax
imul r9, rcx
movzx eax, byte [r8 + 7]
xor r9, rax
imul r9, rcx
mov r11, qword [r10 + 0x30]
and r11, r9
mov rbx, qword [r10 + 8]
mov rdx, r11
add rdx, rdx
mov rax, qword [r10 + 0x18]
mov rcx, qword [rax + rdx*8]
cmp rbx, rcx
je 0x14008a52b
mov rbx, qword [rax + rdx*8 + 8]
mov rbx, qword [rbx]
cmp rbx, rcx
je 0x14008a52b
mov rbx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
cmp qword [r8], rax
jne 0x14008a4e4
mov rcx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rcx], rax
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
dec qword [r10 + 0x10]
mov edx, 0x18
mov rcx, rdi
call fcn.1400d5498
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
jmp 0x14008a5c1
mov rax, qword [rdi]
cmp rbx, rax
je 0x14008a560
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
shl r11, 4
mov rdx, qword [r10 + 0x18]
add rdx, r11
mov rax, qword [rdx]
cmp rax, qword [r10 + 8]
jne 0x14008a582
mov qword [rdx], rdi
mov rax, qword [r10 + 0x18]
mov qword [r11 + rax + 8], rdi
jmp 0x14008a5ae
cmp rax, rbx
jne 0x14008a58c
mov qword [rdx], rdi
jmp 0x14008a5ae
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x14008a5ae
mov rdx, qword [r10 + 0x18]
mov rax, qword [rdx + r11 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r11 + 8], rcx
mov rcx, r10
call fcn.1400b4a00
nop
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
Function at 0x14008a5e0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rcx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x78], rsi
mov rsi, rdx
mov r14, rcx
movsxd rdx, dword [r8 + 8]
mov r9, qword [r8]
imul r15, rdx, 0x1000193
imul rax, r9, 0x100011b
xor r15, rax
and r15, qword [rcx + 0x30]
mov rdi, qword [rcx + 8]
mov rbx, r15
shl rbx, 4
add rbx, qword [rcx + 0x18]
mov rax, qword [rbx]
cmp rax, rdi
jne 0x14008a643
mov rbx, rdi
jmp 0x14008a650
mov rbx, qword [rbx + 8]
mov rbx, qword [rbx]
nop word [rax + rax]
cmp rbx, rax
je 0x14008a673
mov rbx, qword [rbx + 8]
cmp r9, qword [rbx + 0x10]
jne 0x14008a650
cmp edx, dword [rbx + 0x18]
jne 0x14008a650
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
jmp 0x14008a75e
mov rdi, qword [rdi]
mov r13, qword [rdi + 8]
mov r9, r8
mov r8, r13
mov rdx, rdi
add rcx, 8
call fcn.140088300
mov rdx, rax
mov rax, qword [r14 + 0x10]
movabs rcx, 0x666666666666665
sub rcx, rax
cmp rcx, 1
jb 0x14008a776
inc rax
mov qword [r14 + 0x10], rax
mov qword [rdi + 8], rdx
mov qword [r13], rdx
mov rcx, qword [r14 + 8]
mov rdi, qword [rcx]
mov qword [rsp + 0x70], rdi
mov rax, qword [rdi]
cmp rbx, rax
je 0x14008a6fe
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rcx, qword [r14 + 8]
shl r15, 4
mov rdx, qword [r14 + 0x18]
add rdx, r15
mov rax, qword [rdx]
cmp rax, rcx
jne 0x14008a71f
mov qword [rdx], rdi
mov rax, qword [r14 + 0x18]
mov qword [r15 + rax + 8], rdi
jmp 0x14008a74b
cmp rax, rbx
jne 0x14008a729
mov qword [rdx], rdi
jmp 0x14008a74b
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x14008a74b
mov rdx, qword [r14 + 0x18]
mov rax, qword [rdx + r15 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r15 + 8], rcx
mov rcx, r14
call fcn.1400b4820
nop
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rcx, str.list_T__too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3