joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400133a0
Capabilities:
Hash data using fnv

Disassembly:
mov rcx, qword [rcx]
jmp 0x1400133b0
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
mov rbp, rcx
mov rsi, rdx
add rcx, 0xfd8
call fcn.140114068
test eax, eax
jne 0x140013592
movzx eax, byte [rsp + 0x39]
movabs r10, 0x100000001b3
mov r8, qword [rbp + 0x1058]
movabs r11, 0xcbf29ce484222325
mov r9, qword [rbp + 0x1040]
mov rdx, qword [rbp + 0x1030]
movzx ecx, sil
xor rcx, r11
mov qword [rsp + 0x30], rbx
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3a]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3b]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3c]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3d]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3e]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3f]
imul rcx, r10
xor rcx, rax
mov rax, r8
imul rcx, r10
and rax, rcx
add rax, rax
mov rbx, qword [r9 + rax*8 + 8]
cmp rbx, rdx
je 0x140013572
mov rax, qword [r9 + rax*8]
cmp rsi, qword [rbx + 0x10]
je 0x1400134a3
nop dword [rax]
cmp rbx, rax
je 0x140013572
mov rbx, qword [rbx + 8]
cmp rsi, qword [rbx + 0x10]
jne 0x140013490
test rbx, rbx
cmove rbx, rdx
cmp rbx, rdx
je 0x140013572
movzx eax, byte [rbx + 0x11]
movzx ecx, byte [rbx + 0x10]
xor rcx, r11
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x12]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x13]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x14]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x15]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x16]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x17]
imul rcx, r10
xor rcx, rax
imul rcx, r10
and r8, rcx
add r8, r8
mov rax, qword [r9 + r8*8]
cmp qword [r9 + r8*8 + 8], rbx
jne 0x140013537
cmp rax, rbx
jne 0x14001352c
mov qword [r9 + r8*8], rdx
mov qword [r9 + r8*8 + 8], rdx
jmp 0x140013543
mov rdx, qword [rbx + 8]
mov qword [r9 + r8*8 + 8], rdx
jmp 0x140013543
cmp rax, rbx
jne 0x140013543
mov rax, qword [rbx]
mov qword [r9 + r8*8], rax
mov rcx, qword [rbx]
dec qword [rbp + 0x1038]
mov rax, qword [rbx + 8]
mov qword [rax], rcx
mov rax, qword [rbx + 8]
mov qword [rcx + 8], rax
lea rcx, [rbx + 0x18]
call fcn.140006d70
mov edx, 0x30
mov rcx, rbx
call fcn.140116d50
lea rcx, [rbp + 0xfd8]
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
jmp fcn.14011408c
mov ecx, eax
call fcn.140114198
int3
Function at 0x1400133b0
Capabilities:
Hash data using fnv

Disassembly:
mov rcx, qword [rcx]
jmp 0x1400133b0
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x20
mov rbp, rcx
mov rsi, rdx
add rcx, 0xfd8
call fcn.140114068
test eax, eax
jne 0x140013592
movzx eax, byte [rsp + 0x39]
movabs r10, 0x100000001b3
mov r8, qword [rbp + 0x1058]
movabs r11, 0xcbf29ce484222325
mov r9, qword [rbp + 0x1040]
mov rdx, qword [rbp + 0x1030]
movzx ecx, sil
xor rcx, r11
mov qword [rsp + 0x30], rbx
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3a]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3b]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3c]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3d]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3e]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rsp + 0x3f]
imul rcx, r10
xor rcx, rax
mov rax, r8
imul rcx, r10
and rax, rcx
add rax, rax
mov rbx, qword [r9 + rax*8 + 8]
cmp rbx, rdx
je 0x140013572
mov rax, qword [r9 + rax*8]
cmp rsi, qword [rbx + 0x10]
je 0x1400134a3
nop dword [rax]
cmp rbx, rax
je 0x140013572
mov rbx, qword [rbx + 8]
cmp rsi, qword [rbx + 0x10]
jne 0x140013490
test rbx, rbx
cmove rbx, rdx
cmp rbx, rdx
je 0x140013572
movzx eax, byte [rbx + 0x11]
movzx ecx, byte [rbx + 0x10]
xor rcx, r11
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x12]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x13]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x14]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x15]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x16]
imul rcx, r10
xor rcx, rax
movzx eax, byte [rbx + 0x17]
imul rcx, r10
xor rcx, rax
imul rcx, r10
and r8, rcx
add r8, r8
mov rax, qword [r9 + r8*8]
cmp qword [r9 + r8*8 + 8], rbx
jne 0x140013537
cmp rax, rbx
jne 0x14001352c
mov qword [r9 + r8*8], rdx
mov qword [r9 + r8*8 + 8], rdx
jmp 0x140013543
mov rdx, qword [rbx + 8]
mov qword [r9 + r8*8 + 8], rdx
jmp 0x140013543
cmp rax, rbx
jne 0x140013543
mov rax, qword [rbx]
mov qword [r9 + r8*8], rax
mov rcx, qword [rbx]
dec qword [rbp + 0x1038]
mov rax, qword [rbx + 8]
mov qword [rax], rcx
mov rax, qword [rbx + 8]
mov qword [rcx + 8], rax
lea rcx, [rbx + 0x18]
call fcn.140006d70
mov edx, 0x30
mov rcx, rbx
call fcn.140116d50
lea rcx, [rbp + 0xfd8]
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
jmp fcn.14011408c
mov ecx, eax
call fcn.140114198
int3
Function at 0x140018160
Capabilities:
Hash data using fnv

Disassembly:
movzx r8d, byte [rdx]
mov r9, rcx
movabs rcx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r8, rax
mov r10, rdx
movzx eax, byte [rdx + 1]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 2]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 3]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 4]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 5]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 6]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 7]
mov rdx, qword [r9 + 0x30]
imul r8, rcx
xor r8, rax
imul r8, rcx
and rdx, r8
xor r8d, r8d
shl rdx, 4
add rdx, qword [r9 + 0x18]
mov rax, qword [rdx + 8]
cmp rax, qword [r9 + 8]
je 0x14001821a
mov rcx, qword [r10]
mov rdx, qword [rdx]
cmp rcx, qword [rax + 0x10]
je 0x14001821d
nop word [rax + rax]
cmp rax, rdx
je 0x14001821a
mov rax, qword [rax + 8]
cmp rcx, qword [rax + 0x10]
jne 0x140018200
test rax, rax
setne r8b
mov rax, r8
ret
mov rax, r8
test rax, rax
setne r8b
mov rax, r8
ret

Function at 0x140018230
Capabilities:
Hash data using fnv

Disassembly:
movzx r9d, byte [r8]
mov r10, rcx
movabs rcx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r9, rax
mov r11, rdx
movzx eax, byte [r8 + 1]
mov rdx, qword [r10 + 0x30]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 2]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 3]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 4]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 5]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 6]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 7]
imul r9, rcx
xor r9, rax
imul r9, rcx
and rdx, r9
mov r9, qword [r10 + 8]
shl rdx, 4
add rdx, qword [r10 + 0x18]
mov rax, qword [rdx + 8]
cmp rax, r9
je 0x1400182ee
mov rcx, qword [r8]
mov rdx, qword [rdx]
cmp rcx, qword [rax + 0x10]
je 0x1400182f0
cmp rax, rdx
je 0x1400182ee
mov rax, qword [rax + 8]
cmp rcx, qword [rax + 0x10]
jne 0x1400182d1
test rax, rax
cmove rax, r9
mov qword [r11], rax
mov rax, r11
ret
xor eax, eax
test rax, rax
cmove rax, r9
mov qword [r11], rax
mov rax, r11
ret
Function at 0x14001b5e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov r8, qword [rcx + 0x10]
mov r9, rcx
mov eax, dword [rcx + 0x18]
movabs r10, 0x100000001b3
movabs rcx, 0xaf63bd4c8601b7df
xor rax, rcx
mov edx, dword [r9 + 0x2c]
mov ecx, dword [r9 + 0x28]
imul rax, r10
xor rax, rdx
imul rax, r10
xor rax, rcx
imul rax, r10
test r8, r8
je 0x14001b648
movzx ecx, byte [r8]
xor rax, 0xff
inc r8
test cl, cl
je 0x14001b648
imul rax, r10
movzx ecx, cl
lea r8, [r8 + 1]
xor rax, rcx
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x14001b631
mov rdx, qword [r9 + 0x20]
imul rax, r10
test rdx, rdx
je 0x14001b686
movzx ecx, byte [rdx]
xor rax, 0xff
inc rdx
test cl, cl
je 0x14001b686
nop word [rax + rax]
imul rax, r10
movzx ecx, cl
lea rdx, [rdx + 1]
xor rax, rcx
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14001b670
ret
Function at 0x14001b9d0
Capabilities:
Encode data using base64

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x20
mov rbp, r8
mov rbx, rdx
mov rdx, rbp
mov r8d, 0x10
call fcn.14001b3f0
xor edi, edi
mov rsi, rax
mov r9, rax
test rbp, rbp
je 0x14001bbbb
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r15
lea r15d, [rdi + 0x3f]
nop
movsx ecx, byte [rbx]
mov r14, r9
test cl, cl
je 0x14001bbae
movsx edx, byte [rbx + 1]
test dl, dl
je 0x14001bbae
movsx r11d, byte [rbx + 2]
test r11b, r11b
je 0x14001bbae
movsx r10d, byte [rbx + 3]
add rbx, 4
test r10b, r10b
je 0x14001bbae
lea eax, [rcx - 0x41]
cmp al, 0x19
ja 0x14001ba56
lea eax, [rcx - 0x41]
jmp 0x14001ba83
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x14001ba62
lea eax, [rcx - 0x47]
jmp 0x14001ba83
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x14001ba6e
lea eax, [rcx + 4]
jmp 0x14001ba83
cmp cl, 0x2b
jne 0x14001ba7a
mov eax, 0x3e
jmp 0x14001ba83
xor eax, eax
cmp cl, 0x2f
cmove eax, r15d
lea ecx, [rdx - 0x41]
cmp cl, 0x19
ja 0x14001ba91
lea r8d, [rdx - 0x41]
jmp 0x14001bac4
lea ecx, [rdx - 0x61]
cmp cl, 0x19
ja 0x14001ba9f
lea r8d, [rdx - 0x47]
jmp 0x14001bac4
lea ecx, [rdx - 0x30]
cmp cl, 9
ja 0x14001baad
lea r8d, [rdx + 4]
jmp 0x14001bac4
cmp dl, 0x2b
jne 0x14001baba
mov r8d, 0x3e
jmp 0x14001bac4
xor r8d, r8d
cmp dl, 0x2f
cmove r8d, r15d
lea ecx, [r11 - 0x41]
cmp cl, 0x19
ja 0x14001bad3
lea edx, [r11 - 0x41]
jmp 0x14001bb08
lea ecx, [r11 - 0x61]
cmp cl, 0x19
ja 0x14001bae2
lea edx, [r11 - 0x47]
jmp 0x14001bb08
lea ecx, [r11 - 0x30]
cmp cl, 9
ja 0x14001baf1
lea edx, [r11 + 4]
jmp 0x14001bb08
cmp r11b, 0x2b
jne 0x14001bafe
mov edx, 0x3e
jmp 0x14001bb08
xor edx, edx
cmp r11b, 0x2f
cmove edx, r15d
lea ecx, [r10 - 0x41]
cmp cl, 0x19
ja 0x14001bb17
lea ecx, [r10 - 0x41]
jmp 0x14001bb4c
lea ecx, [r10 - 0x61]
cmp cl, 0x19
ja 0x14001bb26
lea ecx, [r10 - 0x47]
jmp 0x14001bb4c
lea ecx, [r10 - 0x30]
cmp cl, 9
ja 0x14001bb35
lea ecx, [r10 + 4]
jmp 0x14001bb4c
cmp r10b, 0x2b
jne 0x14001bb42
mov ecx, 0x3e
jmp 0x14001bb4c
xor ecx, ecx
cmp r10b, 0x2f
cmove ecx, r15d
shl eax, 6
or eax, r8d
shl eax, 6
or eax, edx
shl eax, 6
or eax, ecx
cmp r11b, 0x3d
jne 0x14001bb74
cmp r10b, r11b
jne 0x14001bb74
shr eax, 0x10
mov byte [r9], al
mov eax, 1
jmp 0x14001bb9f
inc r9
mov ecx, eax
shr ecx, 0x10
mov byte [r14], cl
mov ecx, eax
shr ecx, 8
mov byte [r9], cl
cmp r10b, 0x3d
jne 0x14001bb94
mov eax, 2
jmp 0x14001bb9f
inc r9
mov byte [r9], al
mov eax, 3
add rdi, rax
inc r9
cmp rdi, rbp
jb 0x14001ba10
mov r14, qword [rsp + 0x40]
mov rax, rsi
mov r15, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
add rsp, 0x20
pop rdi
pop rsi
pop rbp
ret

Function at 0x14001bc30
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, qword [rcx]
lea rcx, [rbx + 8]
call fcn.14001b520
lea rcx, [rbx + 0x48]
call fcn.14001b520
lea rcx, [rbx + 0x88]
call fcn.14001b520
lea rcx, [rbx + 0xc8]
call fcn.14001b520
lea rcx, [rbx + 0x108]
call fcn.14001b520
lea rcx, [rbx + 0x148]
call fcn.14001b520
lea rcx, [rbx + 0x188]
call fcn.14001b520
lea rcx, [rbx + 0x1c8]
add rsp, 0x20
pop rbx
jmp fcn.14001b520
Function at 0x14001bca0
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, qword [rcx]
lea rcx, [rbx + 0x148]
call fcn.14001b520
lea rcx, [rbx + 0x188]
call fcn.14001b520
lea rcx, [rbx + 0x1c8]
add rsp, 0x20
pop rbx
jmp fcn.14001b520

Function at 0x14001bd40
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, r8
mov r9, rdx
movabs r10, 0x100000001b3
test rbx, rbx
je 0x14001bd9c
nop dword [rax + rax]
mov eax, dword [rbx]
cmp eax, 0x3b9f9c62
je 0x14001bda4
cmp eax, 0x3b9ddf10
je 0x14001bda4
cmp eax, 0x3b9e3cd3
je 0x14001bda4
cmp eax, 0x3b9f2730
je 0x14001bda4
cmp eax, 0x3b9fc371
je 0x14001bda4
cmp eax, 0x3b9fcb40
je 0x14001bda4
cmp eax, 0x3b9fe698
je 0x14001bda4
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x14001bd60
mov al, 1
add rsp, 0x40
pop rbx
ret
mov rdx, qword [r9]
imul rdx, r10
xor rdx, rax
mov qword [r9], rdx
mov eax, dword [rbx]
cmp eax, 0x3b9f9c62
jg 0x14001be6c
je 0x14001be2e
cmp eax, 0x3b9ddf10
je 0x14001be0a
cmp eax, 0x3b9e3cd3
je 0x14001bdd9
cmp eax, 0x3b9f2730
jne 0x14001bf18
mov eax, dword [rbx + 0x10]
imul rdx, r10
xor rax, rdx
mov qword [r9], rax
mov ecx, dword [rbx + 0x14]
imul rax, r10
xor rcx, rax
mov qword [r9], rcx
mov r8d, dword [rbx + 0x18]
imul rcx, r10
xor r8, rcx
mov qword [r9], r8
mov rbx, qword [rbx + 8]
jmp 0x14001bd56
mov eax, dword [rbx + 0x10]
imul rdx, r10
xor rax, rdx
mov qword [r9], rax
mov r8d, dword [rbx + 0x14]
imul rax, r10
xor r8, rax
mov qword [r9], r8
mov rbx, qword [rbx + 8]
jmp 0x14001bd56
mov eax, dword [rbx + 0x10]
imul rdx, r10
xor rax, rdx
mov qword [r9], rax
mov ecx, dword [rbx + 0x14]
imul rax, r10
xor rcx, rax
mov qword [r9], rcx
mov eax, dword [rbx + 0x18]
imul rcx, r10
xor rax, rcx
mov qword [r9], rax
mov r8d, dword [rbx + 0x1c]
imul rax, r10
xor r8, rax
mov qword [r9], r8
mov rbx, qword [rbx + 8]
jmp 0x14001bd56
cmp eax, 0x3b9fc371
je 0x14001bee7
cmp eax, 0x3b9fcb40
je 0x14001be9c
cmp eax, 0x3b9fe698
jne 0x14001bf18
mov r8d, dword [rbx + 0x10]
imul rdx, r10
xor r8, rdx
mov qword [r9], r8
mov rbx, qword [rbx + 8]
jmp 0x14001bd56
mov eax, dword [rbx + 0x10]
imul rdx, r10
xor rax, rdx
mov qword [r9], rax
mov ecx, dword [rbx + 0x14]
imul rax, r10
xor rcx, rax
mov qword [r9], rcx
mov eax, dword [rbx + 0x18]
imul rcx, r10
xor rax, rcx
mov qword [r9], rax
mov ecx, dword [rbx + 0x1c]
imul rax, r10
xor rcx, rax
mov qword [r9], rcx
mov r8d, dword [rbx + 0x20]
imul rcx, r10
xor r8, rcx
mov qword [r9], r8
mov rbx, qword [rbx + 8]
jmp 0x14001bd56
mov eax, dword [rbx + 0x18]
imul rdx, r10
xor rax, rdx
mov qword [r9], rax
mov ecx, dword [rbx + 0x10]
imul rax, r10
xor rcx, rax
mov qword [r9], rcx
mov r8d, dword [rbx + 0x14]
imul rcx, r10
xor r8, rcx
mov qword [r9], r8
mov rbx, qword [rbx + 8]
jmp 0x14001bd56
xor eax, eax
mov qword [rsp + 0x38], 0xf
lea rdx, [0x140150040]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x30], rax
lea r8d, [rax + 0x25]
call fcn.140001ad0
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14001bf60
xor al, al
add rsp, 0x40
pop rbx
ret
Function at 0x14001de40
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
mov rdi, r8
lea rcx, str.application
xorps xmm0, xmm0
lea r8, [rbp - 0x10]
movups xmmword [rbp - 0x10], xmm0
mov r13, rdx
mov dword [rbp - 0x10], 0xb
mov esi, 0x405
lea rdx, [rbp + 0x38]
mov word [rbp - 2], si
movabs r14, 0xffff000000000000
mov rax, qword [rbp - 8]
and rax, r14
or rax, rcx
mov rcx, rdi
mov qword [rbp - 8], rax
call fcn.140015810
mov ecx, dword [rdi]
lea rbx, [0x140202c68]
mov rax, qword [rdi + 8]
movabs r15, 0xffffffffffff
and rax, r15
shl rcx, 5
add rcx, rax
mov rax, qword [rbp + 0x38]
cmp rax, rcx
je 0x14001dedb
lea rcx, [rax + 0x10]
jmp 0x14001dee8
xorps xmm0, xmm0
mov rcx, rbx
movups xmmword [0x140202c68], xmm0
mov eax, 0x1000
test word [rcx + 0xe], ax
jne 0x14001defa
mov rcx, qword [rcx + 8]
and rcx, r15
xor edx, edx
lea r8d, [rdx + 0x10]
call fcn.1401212e0
xorps xmm0, xmm0
lea r8, [rbp - 0x10]
movups xmmword [rbp - 0x10], xmm0
mov word [rbp - 2], si
lea rdx, [rbp + 0x38]
mov rcx, qword [rbp - 8]
mov r12, rax
and rcx, r14
mov dword [rbp - 0x10], 3
lea rax, [0x1401502ac]
or rcx, rax
mov qword [rbp - 8], rcx
mov rcx, rdi
call fcn.140015810
mov r14d, dword [rdi]
mov rsi, qword [rdi + 8]
mov ecx, r14d
shl rcx, 5
mov rax, rsi
and rax, r15
add rcx, rax
mov rax, qword [rbp + 0x38]
cmp rax, rcx
je 0x14001df65
add rax, 0x10
jmp 0x14001df79
xorps xmm0, xmm0
mov rax, rbx
movups xmmword [0x140202c68], xmm0
mov r14d, dword [rdi]
mov rsi, qword [rdi + 8]
mov r15d, dword [rax]
lea r8, [rbp - 0x10]
xorps xmm0, xmm0
lea rdx, [rbp + 0x38]
movups xmmword [rbp - 0x10], xmm0
mov eax, 0x405
mov dword [rbp - 0x10], 4
mov word [rbp - 2], ax
movabs rcx, 0xffff000000000000
mov rax, qword [rbp - 8]
and rax, rcx
lea rcx, str.hash
or rax, rcx
mov rcx, rdi
mov qword [rbp - 8], rax
call fcn.140015810
mov rax, qword [rbp + 0x38]
movabs rdx, 0xffffffffffff
and rsi, rdx
mov ecx, r14d
shl rcx, 5
add rcx, rsi
cmp rax, rcx
je 0x14001dfe8
lea rbx, [rax + 0x10]
jmp 0x14001dff2
xorps xmm0, xmm0
movups xmmword [0x140202c68], xmm0
mov eax, 0x1000
test word [rbx + 0xe], ax
jne 0x14001e004
mov rbx, qword [rbx + 8]
and rbx, rdx
xor edx, edx
mov rcx, rbx
lea r8d, [rdx + 0x10]
call fcn.1401212e0
mov r10, qword [r13]
mov r8, rax
movabs r9, 0x100000001b3
mov edx, r12d
movabs rax, 0xaf63bd4c8601b7df
mov qword [rsp + 0x20], r8
xor rdx, rax
mov rcx, r12
imul rdx, r9
mov eax, r8d
shr rcx, 0x20
xor rdx, rcx
mov rcx, r13
imul rdx, r9
xor rdx, r15
imul rdx, r9
xor rdx, rax
mov rax, r8
imul rdx, r9
shr rax, 0x20
mov r9d, r15d
xor rdx, rax
mov r8, r12
call qword [r10 + 0x18]
lea r11, [rsp + 0x40]
mov al, 1
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
Function at 0x140025e10
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rsi, rcx
mov rdi, r8
mov ecx, 0x1000
mov rax, rdx
test word [rdx + 0xe], cx
jne 0x140025e44
mov rax, qword [rdx + 8]
movabs rcx, 0xffffffffffff
and rax, rcx
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 0x10]
call fcn.1401212e0
mov rbx, rax
test rax, rax
je 0x140025fb6
movabs r8, 0x100000001b3
movzx edx, bl
movabs rax, 0xcbf29ce484222325
xor rdx, rax
mov rax, rbx
imul rdx, r8
shr rax, 8
movzx ecx, al
mov rax, rbx
xor rdx, rcx
shr rax, 0x10
imul rdx, r8
movzx ecx, al
mov rax, rbx
xor rdx, rcx
shr rax, 0x18
imul rdx, r8
movzx ecx, al
mov rax, rbx
xor rdx, rcx
shr rax, 0x20
imul rdx, r8
movzx ecx, al
mov rax, rbx
xor rdx, rcx
shr rax, 0x28
imul rdx, r8
movzx ecx, al
mov rax, rbx
xor rdx, rcx
shr rax, 0x30
imul rdx, r8
movzx ecx, al
mov rax, rbx
xor rdx, rcx
shr rax, 0x38
mov rcx, qword [rsi + 0xb8]
imul rdx, r8
xor rdx, rax
imul rdx, r8
and rcx, rdx
mov rdx, qword [rsi + 0x90]
shl rcx, 4
add rcx, qword [rsi + 0xa0]
mov rax, qword [rcx + 8]
cmp rax, rdx
je 0x140025f44
mov rcx, qword [rcx]
cmp rbx, qword [rax + 0x10]
je 0x140025f2f
nop
cmp rax, rcx
je 0x140025f44
mov rax, qword [rax + 8]
cmp rbx, qword [rax + 0x10]
jne 0x140025f20
test rax, rax
cmove rax, rdx
cmp rax, rdx
je 0x140025f44
mov rcx, qword [rax + 0x18]
test rcx, rcx
jne 0x140025fb8
mov ecx, dword [0x140204d10]
mov rax, qword gs:[0x58]
mov edx, 8
mov rax, qword [rax + rcx*8]
cmp dword [rdx + rax], 1
jg 0x140025fa4
mov r9, rbx
lea r8, str.Pipeline_layout
lea rdx, str.Referenced__s__016llx__but_it_does_not_exist._nThis_can_be_expected_when_replaying_an_archive_from_Steam._nIf_replaying_just_the_application_cache__make_sure_to_replay_together_with_the_common_cache__as_application_cache_can_depend_on_common_cache._n
mov ecx, 1
call fcn.14001c3a0
test al, al
jne 0x140025fa4
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea r8, str.Pipeline_layout
mov r9, rbx
lea rdx, str.Fossilize_WARN:_Referenced__s__016llx__but_it_does_not_exist._nThis_can_be_expected_when_replaying_an_archive_from_Steam._nIf_replaying_just_the_application_cache__make_sure_to_replay_together_with_the_common_cache__as_application_cache_can_depend_on_common_cache._n
call fcn.1400020d0
xor al, al
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
xor ecx, ecx
mov qword [rdi], rcx
mov al, 1
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x140034a60
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push rsi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov ebx, 1
mov eax, ebx
shl rax, cl
cmp rdx, rax
ja 0x140034c43
lea rax, [rdx - 1]
mov qword [rsp + 0x38], rdi
mov rdi, qword [rsi + 8]
or rax, rbx
bsr rcx, rax
mov r8, rdi
mov qword [rsp + 0x40], r14
inc ecx
shl rbx, cl
lea rcx, [rsi + 0x18]
lea rdx, [rbx + rbx]
call fcn.140001960
mov qword [rsi + 0x38], rbx
lea rax, [rbx - 1]
mov qword [rsi + 0x30], rax
mov rdx, qword [rsi + 8]
mov rdx, qword [rdx]
cmp rdx, rdi
je 0x140034c08
mov qword [rsp + 0x30], rbp
mov rcx, rdx
movabs rbp, 0xcbf29ce484222325
movabs rbx, 0x100000001b3
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + 0x11]
movzx r9d, byte [rcx + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rdx, qword [rdx]
imul r9, rbx
xor r9, rax
movzx eax, byte [rcx + 0x12]
imul r9, rbx
xor r9, rax
movzx eax, byte [rcx + 0x13]
imul r9, rbx
xor r9, rax
movzx eax, byte [rcx + 0x14]
imul r9, rbx
xor r9, rax
movzx eax, byte [rcx + 0x15]
imul r9, rbx
xor r9, rax
movzx eax, byte [rcx + 0x16]
imul r9, rbx
xor r9, rax
movzx eax, byte [rcx + 0x17]
imul r9, rbx
xor r9, rax
imul r9, rbx
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r10, qword [r11]
cmp r10, rdi
jne 0x140034b7c
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x140034bf7
mov rax, qword [r11 + 8]
mov r9, qword [rcx + 0x10]
cmp r9, qword [rax + 0x10]
jne 0x140034bb9
mov r10, qword [rax]
cmp r10, rcx
je 0x140034bb3
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x140034bf7
mov r8, rax
cmp r10, rax
je 0x140034bd3
mov rax, qword [rax + 8]
mov r8, rax
cmp r9, qword [rax + 0x10]
je 0x140034c1d
cmp r10, rax
jne 0x140034bc1
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rdi
jne 0x140034b00
mov rbp, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x20
pop rsi
ret
mov r10, qword [rax]
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
jmp 0x140034bf7
lea rcx, str.invalid_hash_bucket_count
call fcn.140113d38
int3
Function at 0x140035780
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rsi, r9
mov r12, r8
mov r13, rdx
mov rdi, rcx
mov eax, dword [r9 + 0x14]
cmp rax, r8
je 0x1400357b0
xor al, al
jmp 0x140035921
xor ebx, ebx
mov qword [rsp + 0x88], rbx
lea r15, [rcx + 0x2e0]
mov qword [rsp + 0x20], r15
movzx ebp, byte [rsp + 0x90]
mov byte [rsp + 0x28], bpl
test bpl, bpl
je 0x1400357e8
mov rcx, r15
call fcn.140114068
test eax, eax
jne 0x14003596a
mov edx, dword [rsi + 8]
test bpl, bpl
je 0x1400358ac
mov ecx, edx
call fcn.140116f28
mov r14, rax
mov rbx, rax
mov qword [rsp + 0x88], rax
xor r8d, r8d
mov edx, dword [rsi]
mov rcx, qword [rdi + 0x18]
call fcn.140124548
test eax, eax
js 0x140035900
mov r8d, dword [rsi + 8]
mov r9, qword [rdi + 0x18]
mov edx, 1
mov rcx, r14
call fcn.140124270
mov edx, dword [rsi + 8]
cmp rax, rdx
jne 0x140035900
test bpl, bpl
je 0x14003584d
mov rcx, r15
call fcn.14011408c
cmp dword [rsi + 0x10], 0
je 0x140035936
mov r8d, dword [rsi + 8]
mov rdx, r14
xor ecx, ecx
call fcn.140042760
cmp eax, dword [rsi + 0x10]
je 0x140035936
call fcn.14001bd20
cmp eax, 2
jg 0x14003590d
lea rdx, str.CRC_mismatch__n
mov ecx, 2
call fcn.14001c3a0
test al, al
jne 0x14003590d
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_CRC_mismatch__n
call fcn.1400020d0
jmp 0x14003590d
mov r14, qword [rdi + 0x2c8]
cmp qword [rdi + 0x2d0], rdx
jae 0x140035809
mov rcx, r14
call fcn.140124ec8
mov r14, rax
test rax, rax
je 0x1400358e6
mov qword [rdi + 0x2c8], rax
mov eax, dword [rsi + 8]
mov qword [rdi + 0x2d0], rax
jmp 0x140035809
mov rcx, qword [rdi + 0x2c8]
call fcn.140123d70
mov qword [rdi + 0x2c8], rbx
mov qword [rdi + 0x2d0], rbx
test bpl, bpl
je 0x14003590d
mov rcx, r15
call fcn.14011408c
xor dil, dil
test rbx, rbx
je 0x14003591d
mov rcx, rbx
call fcn.140116d50
movzx eax, dil
mov rbx, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov dword [rsp + 0x80], r12d
mov r9d, dword [rsi + 8]
mov r8, r14
lea rdx, [rsp + 0x80]
mov rcx, r13
call fcn.140042b60
test eax, eax
jne 0x14003590d
mov eax, dword [rsp + 0x80]
cmp rax, r12
jne 0x14003590d
mov dil, 1
jmp 0x140035910
mov ecx, eax
call fcn.140114198
int3