joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1403518a0
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x1403518dc
test edx, edx
je 0x14035190c
movzx eax, byte [0x1405400bd]
cmp al, 0x7f
je 0x1403518d4
mov cl, 0xcc
nop word [rax + rax]
mov al, 0x68
lock cmpxchg byte [0x1405400bd], cl
je 0x14035197c
cmp al, 0x7f
jne 0x1403518c0
lea rax, [0x1405400b0]
ret
test edx, edx
je 0x14035193c
movzx eax, byte [0x140540073]
cmp al, 0x13
je 0x140351904
mov cl, 0x80
nop dword [rax]
mov al, 0x19
lock cmpxchg byte [0x140540073], cl
je 0x1403519cc
cmp al, 0x13
jne 0x1403518f0
lea rax, [0x140540050]
ret
movzx eax, byte [0x14053ffc2]
cmp al, 0x8a
je 0x140351934
mov cl, 0x33
nop dword [rax]
mov al, 0x17
lock cmpxchg byte [0x14053ffc2], cl
je 0x140351a27
cmp al, 0x8a
jne 0x140351920
lea rax, [0x14053ffc0]
ret
movzx eax, byte [0x1405400ad]
mov ecx, r8d
xor cl, 0xc
add cl, byte [0x1405401fc]
cmp al, cl
je 0x140351974
mov cl, 0xc
nop word cs:[rax + rax]
mov al, 0xab
lock cmpxchg byte [0x1405400ad], cl
je 0x140351a77
cmp al, 0xaa
jne 0x140351960
lea rax, [0x1405400a0]
ret
xor eax, eax
lea rcx, [0x1405400b0]
lea rdx, [0x14044c6b0]
nop dword [rax]
movzx r8d, byte [rax + rcx]
movzx r9d, byte [rax + rdx]
mov r10d, r8d
xor r10b, r9b
and r8b, r9b
add r8b, r8b
add r8b, r10b
mov byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x1403519bc
inc rax
jmp 0x140351990
mov al, 0x7f
xchg byte [0x1405400bd], al
lea rax, [0x1405400b0]
ret
xor eax, eax
lea rcx, [0x140540050]
lea rdx, [0x14044c650]
xor r8d, 0x4cce9610
nop word cs:[rax + rax]
cdqe
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
mov r9d, dword [0x1405401f8]
mov r10d, r8d
xor r10d, r9d
and r9d, r8d
lea r9d, [r10 + r9*2]
add eax, r9d
cmp eax, 0x23
jl 0x1403519f0
mov al, 0x13
xchg byte [0x140540073], al
lea rax, [0x140540050]
ret
xor eax, eax
lea rcx, [0x14053ffc0]
lea rdx, [0x14044c5d0]
xor r8d, 0x4cce9610
nop
cdqe
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
mov r9d, dword [0x1405401f8]
mov r10d, r8d
xor r10d, r9d
and r9d, r8d
lea r9d, [r10 + r9*2]
add eax, r9d
cmp eax, 2
jl 0x140351a40
mov al, 0x8a
xchg byte [0x14053ffc2], al
lea rax, [0x14053ffc0]
ret
xor eax, eax
lea rcx, [0x1405400a0]
lea rdx, [0x14044c6a0]
xor r8d, 0x4cce9610
nop
cdqe
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
mov r9d, dword [0x1405401f8]
mov r10d, r8d
xor r10d, r9d
and r9d, r8d
lea r9d, [r10 + r9*2]
add eax, r9d
cmp eax, 0xd
jl 0x140351a90
mov al, 0xaa
xchg byte [0x1405400ad], al
lea rax, [0x1405400a0]
ret
Function at 0x140351e50
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x140351e8c
test edx, edx
je 0x140351ebc
movzx eax, byte [0x140540104]
cmp al, 0x31
je 0x140351e84
mov cl, 0x7a
nop word [rax + rax]
mov al, 0x2b
lock cmpxchg byte [0x140540104], cl
je 0x140351f75
cmp al, 0x31
jne 0x140351e70
lea rax, [0x1405400f0]
ret
test edx, edx
je 0x140351efc
movzx eax, byte [0x14053ffdc]
cmp al, 0x4a
je 0x140351eb4
mov cl, 0xd7
nop dword [rax]
mov al, 0xb7
lock cmpxchg byte [0x14053ffdc], cl
je 0x140351fc1
cmp al, 0x4a
jne 0x140351ea0
lea rax, [0x14053ffd0]
ret
movzx eax, byte [0x14054008f]
xor r8b, 0x3a
add r8b, byte [0x1405401fc]
cmp al, r8b
je 0x140351ef4
mov cl, 0x54
nop word cs:[rax + rax]
mov al, 0xd0
lock cmpxchg byte [0x14054008f], cl
je 0x140352008
cmp al, 0x74
jne 0x140351ee0
lea rax, [0x140540080]
ret
movzx eax, byte [0x1405400dc]
nop word cs:[rax + rax]
cmp al, 0x5c
je 0x140352067
movzx ecx, byte [0x1405401fc]
mov eax, r8d
xor al, 0xda
add al, cl
mov edx, r8d
xor dl, 0x72
add dl, cl
lock cmpxchg byte [0x1405400dc], dl
jne 0x140351f10
xor eax, eax
lea rcx, [0x1405400d0]
lea rdx, [0x14044c6d0]
xor r8d, 0xb04716d7
nop
movzx r9d, byte [rax + rdx]
add byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x1405401f8]
add r10d, r8d
cmp r9d, r10d
jge 0x14035205f
inc rax
jmp 0x140351f50
xor eax, eax
lea rcx, [0x1405400f0]
lea rdx, [0x14044c6f0]
xor r8d, 0xb04716df
nop dword [rax]
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x1405401f8]
add r10d, r8d
cmp r9d, r10d
jge 0x140351fb1
inc rax
jmp 0x140351f90
mov al, 0x31
xchg byte [0x140540104], al
lea rax, [0x1405400f0]
ret
xor eax, eax
lea rcx, [0x14053ffd0]
lea rdx, [0x14044c5e0]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0xb
jg 0x14035204f
inc rax
jmp 0x140351fe0
xor edx, edx
lea rax, [0x140540080]
lea rcx, [0x14044c680]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
xor byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0xf
jl 0x140352020
mov al, 0x74
xchg byte [0x14054008f], al
lea rax, [0x140540080]
ret
mov al, 0x4a
xchg byte [0x14053ffdc], al
lea rax, [0x14053ffd0]
ret
mov al, 0x5c
xchg byte [0x1405400dc], al
lea rax, [0x1405400d0]
ret
Function at 0x14035c890
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
test rcx, rcx
setne r8b
test rdx, rdx
setne r9b
mov rax, rcx
or rax, rdx
sete al
and r9b, r8b
or r9b, al
xor eax, eax
cmp r8b, r9b
jne 0x14035ca68
test rcx, rcx
je 0x14035ca68
mov al, 1
cmp rcx, rdx
je 0x14035ca68
xor r8d, r8d
mov r9d, 1
xor r10d, r10d
nop
xor r11d, r11d
cmp byte [rcx + r8], 0
setne r11b
movzx r10d, r10b
cmove r10d, r9d
mov rsi, r11
xor rsi, r8
and r11d, r8d
lea r8, [rsi + r11*2]
movzx r11d, byte [0x140541ef8]
add r11b, 0x69
mov ebx, r10d
xor bl, r11b
not bl
test bl, r11b
je 0x14035c8e0
movabs r9, 0xaaf9705bffdb26a4
movabs r10, 0x2284cd8db14093f8
xor r11d, r11d
mov esi, 1
lea rdi, [r9 + r10]
xor ebx, ebx
nop dword [rax]
movzx ebp, byte [rdx + r11]
sub r11, r9
xor r14d, r14d
add bpl, byte [0x14055de40]
setne r14b
movzx ebx, bl
cmove ebx, esi
add r14, r11
sub r14, r10
mov r11, r14
add r11, rdi
test bl, 1
je 0x14035c940
cmp r8, r11
jne 0x14035ca66
test r8, r8
je 0x14035ca68
xor edi, edi
movabs r9, 0x11a1e649877f0c59
xor r10d, r10d
xor r11d, r11d
jmp 0x14035c9cb
mov r11d, r10d
xor r11d, 1
and r10d, 1
lea r10d, [r11 + r10*2]
mov rdi, qword [0x14055c400]
sub rdi, r9
add rdi, r10
add rdi, r9
mov r11d, ebx
cmp r8, rdi
jbe 0x14035ca68
movzx esi, byte [rcx + rdi]
movzx edi, byte [rdx + rdi]
cmp sil, dil
je 0x14035ca41
mov ebx, r11d
not bl
test bl, 1
je 0x14035ca66
mov ebx, esi
not bl
mov ebp, ebx
and bpl, 0x9f
mov r14d, esi
and r14b, 0x60
or r14b, bpl
mov ebp, esi
xor bpl, 0x1f
and bl, 0x60
or bl, bpl
not bl
add bl, bl
add bl, r14b
cmp bl, 0x1a
jae 0x14035ca16
add sil, 0xe0
movzx esi, sil
lea ebx, [rdi - 0x61]
mov ebp, edi
xor bpl, 0xe0
movzx r14d, dil
and dil, 0x60
add dil, dil
add dil, bpl
cmp bl, 0x1a
movzx edi, dil
cmovae edi, r14d
cmp sil, dil
jne 0x14035ca66
mov ebx, 1
mov ebp, 1
cmp dil, 0x2e
je 0x14035ca55
movzx ebp, r11b
cmp sil, 0x2e
je 0x14035c9a0
mov ebx, ebp
jmp 0x14035c9a0
xor eax, eax
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
Function at 0x14036f330
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x238
mov rax, qword [0x14054b938]
xor rax, rsp
mov qword [rsp + 0x230], rax
mov eax, dword [0x14055f1f4]
cmp eax, 0x58
jg 0x14036f3a1
mov rax, qword [0x14055f008]
mov ecx, dword [0x140544650]
lea edx, [rcx + 0x671d2d04]
lea r8, [fcn.14036f330]
add r8d, r8d
add r8d, 0x4a20
mov r9d, r8d
not r9d
xor r8d, edx
not edx
and edx, r9d
or edx, r8d
not edx
add ecx, 0x671d2d03
cmp edx, ecx
je 0x14036f3d5
mov eax, 0x34cbab42
nop word cs:[rax + rax]
mov rcx, qword [0x14055f008]
mov ecx, dword [0x140544650]
add ecx, eax
mov edx, ecx
xor edx, 0x325181c1
and ecx, 0x325181c1
add ecx, ecx
add ecx, edx
jne 0x14036f3b0
jmp 0x14036f360
test rax, rax
je 0x14036f524
movabs rax, 0xe48839743fb11b48
movabs rdx, 0xdbe1f0deb585a3b5
movabs r8, 0xd96caac359ce5733
movabs r9, 0xa1b95076cc13f3db
movabs r10, 0x908606e7d6ad94f0
movabs r11, 0x83e64e63d84fa9c7
movabs rdi, 0x800c84b33b577d1a
movabs rbx, 0x73b829fa3216dbf4
movabs r14, 0x43d339c155821e49
movabs r15, 0x22efd91d806c8d68
xor ecx, ecx
test cl, cl
jne 0x14036f460
inc qword [0x140541130]
mov rsi, qword [0x14055f008]
xor ecx, ecx
test cl, cl
je 0x14036f505
mov rcx, qword [0x140541130]
add rcx, rcx
mov rsi, qword [0x140544648]
add rsi, r9
mov r12, r9
sub r12, rsi
sub r12, rcx
movabs rsi, 0x6b6373c5011b89b8
add rsi, r12
lea rcx, [rsi + rsi]
add rsi, r11
add rsi, r8
sub rsi, r11
sub rsi, rcx
sub rsi, r8
imul rsi, rcx
mov ebp, r14d
sub ebp, esi
sub ebp, r14d
sub ebp, r15d
add ecx, r15d
add ecx, ebp
mov r12, rsi
shl r12, cl
lea rcx, [r10 + rdi]
sub rcx, rsi
sub rcx, rdi
add rcx, rbx
sub rcx, r10
sub rcx, rbx
add rcx, r12
mov r13, rdx
sub r13, rdx
sub r13, rsi
mov r12, r13
xor r12, rcx
and r13, rcx
lea rcx, [r12 + r13*2]
mov r12, rax
sub r12, rsi
add r12, rcx
sub r12, rax
add r12, rsi
mov qword [0x140541130], r12
mov rcx, qword [0x14055f008]
jmp 0x14036f448
mov eax, esi
not eax
xor rsi, 0xffffffffeeddccbb
and eax, 0x11223344
or rsi, rax
not rsi
or rsi, rax
jne 0x14036f5bb
movaps xmm0, xmmword [0x14044dad0]
movaps xmmword [rsp + 0x30], xmm0
movabs rax, 0x186f292b4c792d34
mov qword [rsp + 0x40], rax
mov byte [rsp + 0x48], 0
lea rsi, [rsp + 0x30]
mov rcx, rsi
mov edx, 6
mov r8d, 0xd59c2fc7
mov r9d, 0xadda353d
call fcn.140356890
mov qword [rsp + 0x28], 0
lea rdx, [rsp + 0x28]
mov rcx, rsi
mov r8d, 0x72097d60
mov r9d, 0xa712742b
call fcn.140373f90
mov rsi, rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 0
test rax, rax
je 0x14036f5bb
mov rax, qword [0x14055f008]
test rax, rax
jne 0x14036f5bb
mov qword [0x14055f008], rsi
xor qword [0x14055f008], 0x11223344
mov rcx, qword [rsp + 0x230]
xor rcx, rsp
call fcn.1403e4d80
mov rax, rsi
add rsp, 0x238
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x140383670
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x1403836ac
test edx, edx
je 0x1403836dc
movzx eax, byte [0x14054581c]
cmp al, 0xb7
je 0x1403836a4
mov cl, 0xa3
nop word [rax + rax]
mov al, 0xa5
lock cmpxchg byte [0x14054581c], cl
je 0x14038373c
cmp al, 0xb7
jne 0x140383690
lea rax, [0x140545810]
ret
test edx, edx
je 0x14038370c
movzx eax, byte [0x1405458cf]
cmp al, 0x2d
je 0x1403836d4
mov cl, 0x70
nop dword [rax]
mov al, 0x8e
lock cmpxchg byte [0x1405458cf], cl
je 0x140383799
cmp al, 0x2d
jne 0x1403836c0
lea rax, [0x1405458c0]
ret
movzx eax, byte [0x1405459c4]
cmp al, 0xcf
je 0x140383704
mov cl, 0x43
nop dword [rax]
mov al, 0x25
lock cmpxchg byte [0x1405459c4], cl
je 0x1403837f9
cmp al, 0xcf
jne 0x1403836f0
lea rax, [0x1405459b0]
ret
movzx eax, byte [0x140545901]
cmp al, 0xd9
je 0x140383734
mov cl, 0xf
nop dword [rax]
mov al, 0x9e
lock cmpxchg byte [0x140545901], cl
je 0x140383858
cmp al, 0xd9
jne 0x140383720
lea rax, [0x1405458f0]
ret
xor edx, edx
lea rax, [0x140545810]
lea rcx, [0x14044ee00]
xor r8d, 0x5838e120
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r9d, byte [rdx + rcx]
add byte [rdx + rax], r9b
mov r9d, edx
xor r9d, 1
and edx, 1
lea edx, [r9 + rdx*2]
mov r9d, dword [0x140546a08]
add r9d, r8d
cmp edx, r9d
jl 0x140383760
mov al, 0xb7
xchg byte [0x14054581c], al
lea rax, [0x140545810]
ret
xor edx, edx
lea rax, [0x1405458c0]
lea rcx, [0x14044eea0]
nop dword [rax]
movsxd rdx, edx
movzx r9d, byte [rdx + rcx]
mov r10d, r9d
xor r10b, r9b
not r10b
and r10b, byte [rdx + rax]
xor r10b, r9b
mov byte [rdx + rax], r10b
mov r9d, edx
xor r9d, 1
and edx, 1
lea edx, [r9 + rdx*2]
cmp edx, 0xf
jl 0x1403837b0
xor r8b, 0x9f
add r8b, byte [0x140546a0c]
xchg byte [0x1405458cf], r8b
lea rax, [0x1405458c0]
ret
xor edx, edx
lea rax, [0x1405459b0]
lea rcx, [0x14044ef90]
xor r8d, 0x5838e135
movsxd rdx, edx
movzx r9d, byte [rdx + rcx]
add byte [rdx + rax], r9b
mov r9d, dword [0x140546a08]
add r9d, r8d
mov r10d, edx
xor r10d, 0x21eb44a2
and edx, 0x21eb44a2
lea edx, [r10 + rdx*2]
add edx, r9d
add edx, 0xde14bb5e
cmp edx, 0x14
jl 0x140383810
mov al, 0xcf
xchg byte [0x1405459c4], al
lea rax, [0x1405459b0]
ret
xor eax, eax
lea rcx, [0x1405458f0]
lea rdx, [0x14044eed0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0x10
jg 0x140383898
inc rax
jmp 0x140383870
mov al, 0xd9
xchg byte [0x140545901], al
lea rax, [0x1405458f0]
ret
Function at 0x140391ee0
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x28
movabs rax, 0x800000000000001
cmp rdx, rax
jae 0x140392121
mov rsi, rcx
dec rdx
or rdx, 1
bsr rcx, rdx
xor ecx, 0x3f
neg cl
mov ebx, 1
shl rbx, cl
lea rax, [rsi + 0x18]
mov rdi, qword [rsi + 8]
mov edx, 2
shl rdx, cl
mov rcx, rax
mov r8, rdi
call fcn.140391390
lea rax, [rbx - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rbx
mov rax, qword [rsi + 8]
mov r9, qword [rax]
cmp r9, rdi
je 0x140392113
movabs rax, 0xcbf29ce484222325
movabs rcx, 0x100000001b3
movabs rdx, 0x6fcbe9cb2e3a7317
jmp 0x140391f91
mov qword [r10 + r11*8], r8
mov qword [r10 + r14*8], r8
cmp r9, rdi
je 0x140392113
mov r8, r9
movzx r9d, byte [r9 + 0x10]
xor r9, rax
imul r9, rcx
movzx r10d, byte [r8 + 0x11]
xor r10, r9
imul r10, rcx
movzx r11d, byte [r8 + 0x12]
xor r11, r10
mov r9, qword [0x140548438]
add r9, rdx
imul r11, r9
movzx r10d, byte [r8 + 0x13]
mov rbx, r10
not rbx
and rbx, r11
not r11d
and r11d, r10d
or rbx, r11
imul rbx, rcx
movzx r10d, byte [r8 + 0x14]
mov r11, r10
not r11
and r11, rbx
not ebx
and ebx, r10d
or r11, rbx
imul r11, rcx
movzx r10d, byte [r8 + 0x15]
mov rbx, r10
not rbx
and rbx, r11
not r11d
and r11d, r10d
or rbx, r11
imul rbx, rcx
movzx r10d, byte [r8 + 0x16]
mov r11, r10
not r11
and r11, rbx
not ebx
and ebx, r10d
or r11, rbx
imul r11, r9
movzx r10d, byte [r8 + 0x17]
mov rbx, r10
not rbx
and rbx, r11
not r11d
and r11d, r10d
or rbx, r11
imul rbx, r9
and rbx, qword [rsi + 0x30]
mov r9, qword [r8]
mov r10, qword [rsi + 0x18]
lea r11, [rbx + rbx]
lea r14, [rbx + rbx]
inc r14
shl rbx, 4
mov r15, qword [r10 + rbx]
cmp r15, rdi
je 0x140391f80
mov rbx, qword [r10 + r14*8]
mov r12, qword [r8 + 0x10]
cmp r12, qword [rbx + 0x10]
jne 0x1403920b0
mov r11, qword [rbx]
cmp r11, r8
je 0x140391f84
mov rbx, qword [r8 + 8]
mov qword [rbx], r9
mov r15, qword [r9 + 8]
mov qword [r15], r11
mov r12, qword [r11 + 8]
mov qword [r12], r8
mov qword [r11 + 8], r15
mov qword [r9 + 8], rbx
mov qword [r8 + 8], r12
jmp 0x140391f84
cmp r15, rbx
je 0x1403920e8
mov rbx, qword [rbx + 8]
cmp r12, qword [rbx + 0x10]
jne 0x1403920b0
mov r10, qword [rbx]
mov r11, qword [r8 + 8]
mov qword [r11], r9
mov rbx, qword [r9 + 8]
mov qword [rbx], r10
mov r14, qword [r10 + 8]
mov qword [r14], r8
mov qword [r10 + 8], rbx
mov qword [r9 + 8], r11
mov qword [r8 + 8], r14
jmp 0x140391f88
mov r14, qword [r8 + 8]
mov qword [r14], r9
mov r15, qword [r9 + 8]
mov qword [r15], rbx
mov r12, qword [rbx + 8]
mov qword [r12], r8
mov qword [rbx + 8], r15
mov qword [r9 + 8], r14
mov qword [r8 + 8], r12
mov qword [r10 + r11*8], r8
jmp 0x140391f88
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
mov r9d, dword [0x140548430]
lea ecx, [r9 + 0x5a062f0b]
lea edx, [r9 + 0x5a062f0c]
lea r8d, [r9 - 0x31b59e16]
add r9d, 0x82bd6b5b
call fcn.14039d8a0
mov rcx, rax
call fcn.1403e69d4
int3
Function at 0x1403966f0
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
movabs rax, 0x800000000000001
cmp rdx, rax
jae 0x140396966
mov rsi, rcx
dec rdx
or rdx, 1
bsr rcx, rdx
xor ecx, 0x3f
neg cl
mov ebx, 1
shl rbx, cl
lea rax, [rsi + 0x18]
mov rdi, qword [rsi + 8]
mov edx, 2
shl rdx, cl
mov rcx, rax
mov r8, rdi
call fcn.140395b50
mov rax, qword [0x140548438]
add rax, rbx
movabs rcx, 0x6fcbe8cb2e3a7163
add rcx, rax
mov qword [rsi + 0x30], rcx
mov qword [rsi + 0x38], rbx
mov rax, qword [rsi + 8]
mov rbx, qword [rax]
cmp rbx, rdi
je 0x140396955
movabs rax, 0xcbf29ce484222325
movabs rdx, 0x100000001b3
movabs r8, 0x6fcbe9cb2e3a7317
movabs r9, 0x6fcbe8cb2e3a7165
movabs r10, 0x10341734d1c58e9a
jmp 0x1403967c1
mov qword [r12 + r15*8], r11
mov qword [r12 + rcx*8], r11
cmp rbx, rdi
je 0x140396955
mov r11, rbx
movzx ecx, byte [rbx + 0x10]
xor rcx, rax
imul rcx, rdx
movzx ebx, byte [rbx + 0x11]
xor rbx, rcx
mov r14, qword [0x140548438]
lea rcx, [r14 + r8]
imul rcx, rbx
movzx ebx, byte [r11 + 0x12]
xor rbx, rcx
imul rbx, rdx
movzx ecx, byte [r11 + 0x13]
xor rcx, rbx
imul rcx, rdx
movzx ebx, byte [r11 + 0x14]
mov r15d, ecx
not r15d
xor rcx, rbx
and r15d, ebx
not rcx
or rcx, r15
not rcx
or rcx, r15
imul rcx, rdx
movzx ebx, byte [r11 + 0x15]
xor rbx, rcx
imul rbx, rdx
movzx ecx, byte [r11 + 0x16]
not rcx
mov r15, rbx
and r15, rcx
or rcx, rbx
not rcx
or rcx, r15
imul rcx, rdx
movzx r15d, byte [r11 + 0x17]
mov rbx, rcx
not rbx
not r15
mov r12, rbx
xor r12, r15
and r12, rbx
and r15, rcx
or r15, r12
imul r15, rdx
and r15, qword [rsi + 0x30]
mov rbx, qword [r11]
mov r12, qword [rsi + 0x18]
lea ecx, [r14 + 0x65]
shl r15, cl
mov rcx, r14
xor rcx, r10
and rcx, r14
xor r14, r9
add rcx, rcx
mov r13, r14
xor r13, rcx
and rcx, r14
lea rcx, [rcx*2]
add rcx, r13
or rcx, r15
mov r13, qword [r12 + r15*8]
cmp r13, rdi
je 0x1403967b0
mov r14, qword [r12 + rcx*8]
mov rbp, qword [r11 + 0x10]
cmp rbp, qword [r14 + 0x10]
jne 0x1403968f0
mov r14, qword [r14]
cmp r14, r11
je 0x1403967b4
mov r15, qword [r11 + 8]
mov qword [r15], rbx
mov r13, qword [rbx + 8]
mov qword [r13], r14
mov rbp, qword [r14 + 8]
mov qword [rbp], r11
mov qword [r14 + 8], r13
mov qword [rbx + 8], r15
mov qword [r11 + 8], rbp
jmp 0x1403967b4
cmp r13, r14
je 0x140396929
mov r14, qword [r14 + 8]
cmp rbp, qword [r14 + 0x10]
jne 0x1403968f0
mov rcx, qword [r14]
mov r14, qword [r11 + 8]
mov qword [r14], rbx
mov r15, qword [rbx + 8]
mov qword [r15], rcx
mov r12, qword [rcx + 8]
mov qword [r12], r11
mov qword [rcx + 8], r15
mov qword [rbx + 8], r14
mov qword [r11 + 8], r12
jmp 0x1403967b8
mov rcx, qword [r11 + 8]
mov qword [rcx], rbx
mov r13, qword [rbx + 8]
mov qword [r13], r14
mov rbp, qword [r14 + 8]
mov qword [rbp], r11
mov qword [r14 + 8], r13
mov qword [rbx + 8], rcx
mov qword [r11 + 8], rbp
mov qword [r12 + r15*8], r11
jmp 0x1403967b8
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor ecx, ecx
mov edx, 1
mov r8d, 0x744432df
mov r9d, 0x28b73c50
call fcn.14039d8a0
mov rcx, rax
call fcn.1403e69d4
int3
Function at 0x140396ce0
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x48
mov rax, qword [0x14054b938]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov r14, qword [rdx + 8]
mov r15, qword [r14]
cmp r15, r14
je 0x140396ef8
mov rsi, rcx
movabs r12, 0xab7349cec2f7c93a
movabs r13, 0x6fcbe9cb2e3a7317
movabs rbp, 0x6fcbe8cb2e3a7165
movabs rdi, 0x4fc1e0bcc3174995
movabs rbx, 0x100000001b3
sub r13, rdi
jmp 0x140396d7f
mov rax, qword [r15 + 0x10]
mov qword [rsp + 0x30], rax
mov eax, dword [r15 + 0x18]
mov dword [rsp + 0x38], eax
mov rcx, rsi
lea rdx, [rsp + 0x20]
lea r8, [rsp + 0x30]
call fcn.140396f20
mov r15, qword [r15]
cmp r15, r14
je 0x140396ef8
movzx ecx, byte [r15 + 0x10]
mov rax, qword [0x140548438]
movabs rdx, 0x3bbe85afb25c9489
add rdx, rax
mov r8d, edx
not r8d
and r8d, ecx
not rcx
and rcx, rdx
or r8, rcx
imul r8, rbx
movzx ecx, byte [r15 + 0x11]
mov rdx, rcx
not rdx
and rdx, r8
not r8d
and r8d, ecx
or rdx, r8
imul rdx, rbx
movzx ecx, byte [r15 + 0x12]
mov r8, rcx
not r8
and r8, rdx
not edx
and edx, ecx
or r8, rdx
movabs rcx, 0x6fcbe9cb2e3a7317
add rcx, rax
imul r8, rcx
movzx edx, byte [r15 + 0x13]
mov r9, rdx
not r9
and r9, r8
not r8d
and r8d, edx
or r9, r8
imul r9, rcx
movzx ecx, byte [r15 + 0x14]
mov rdx, rcx
not rdx
and rdx, r9
not r9d
and r9d, ecx
or rdx, r9
lea rcx, [rax + r13]
mov r8, rcx
xor r8, rdi
and rcx, rdi
lea rcx, [r8 + rcx*2]
imul rcx, rdx
movzx edx, byte [r15 + 0x15]
xor rdx, rcx
imul rdx, rbx
movzx ecx, byte [r15 + 0x16]
not rcx
mov r8, rcx
or r8, rdx
not r8
and rcx, rdx
or rcx, r8
imul rcx, rbx
movzx edx, byte [r15 + 0x17]
mov r8, rdx
not r8
and r8, rcx
not ecx
and ecx, edx
or r8, rcx
imul r8, rbx
mov rdx, qword [rsi + 0x30]
mov rcx, r8
not rcx
xor r8, rdx
not rdx
and rdx, rcx
or rdx, r8
not rdx
mov rcx, qword [rsi + 8]
mov r8, qword [rsi + 0x18]
add rdx, rdx
mov r9, rbp
xor r9, rax
and rax, rbp
sub r9, r12
lea rax, [r9 + rax*2]
add rax, r12
or rax, rdx
mov rax, qword [r8 + rax*8]
cmp rax, rcx
je 0x140396d50
mov r9, qword [r15 + 0x10]
cmp r9, qword [rax + 0x10]
je 0x140396ee3
mov rdx, qword [r8 + rdx*8]
nop dword [rax + rax]
cmp rax, rdx
je 0x140396d50
mov rax, qword [rax + 8]
cmp r9, qword [rax + 0x10]
jne 0x140396ed0
cmp rax, rcx
je 0x140396d50
mov ecx, dword [r15 + 0x18]
add dword [rax + 0x18], ecx
jmp 0x140396d73
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.1403e4d80
nop
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x1403972c0
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x20
movabs rax, 0x800000000000001
cmp rdx, rax
jae 0x140397534
mov rsi, rcx
dec rdx
or rdx, 1
bsr rcx, rdx
xor ecx, 0x3f
neg cl
mov ebx, 1
shl rbx, cl
lea rax, [rsi + 0x18]
mov rdi, qword [rsi + 8]
mov edx, 2
shl rdx, cl
mov rcx, rax
mov r8, rdi
call fcn.140396a50
movabs rax, 0x778db1e2116180b
add rax, rbx
mov rcx, rax
not rcx
lea rax, [rcx + rax*2]
movabs rcx, 0xf88724e1dee9e7f5
add rcx, rax
mov qword [rsi + 0x30], rcx
mov qword [rsi + 0x38], rbx
mov rax, qword [rsi + 8]
mov r10, qword [rax]
cmp r10, rdi
je 0x140397524
movabs rax, 0xcbf29ce484222325
movabs rcx, 0x100000001b3
movabs rdx, 0x6fcbe9cb2e3a7317
movabs r8, 0x6fcbe8cb2e3a7165
jmp 0x140397391
mov qword [rbx + r14*8], r9
mov qword [rbx + r11*8], r9
cmp r10, rdi
je 0x140397524
mov r9, r10
movzx r10d, byte [r10 + 0x10]
xor r10, rax
imul r10, rcx
movzx r11d, byte [r9 + 0x11]
xor r11, r10
imul r11, rcx
movzx r10d, byte [r9 + 0x12]
mov rbx, r10
not rbx
and rbx, r11
not r11d
and r11d, r10d
or rbx, r11
imul rbx, rcx
movzx r10d, byte [r9 + 0x13]
xor r10, rbx
imul r10, rcx
movzx r11d, byte [r9 + 0x14]
mov rbx, r11
not rbx
and rbx, r10
not r10d
and r10d, r11d
or rbx, r10
mov r11, qword [0x140548438]
lea r10, [r11 + rdx]
imul r10, rbx
movzx ebx, byte [r9 + 0x15]
mov r14, rbx
not r14
and r14, r10
not r10d
and r10d, ebx
or r14, r10
imul r14, rcx
movzx r10d, byte [r9 + 0x16]
mov rbx, r10
not rbx
mov r15, r14
and r15, rbx
xor rbx, r14
not r14
mov r12, r14
xor r12, r10
or r15, r12
not r15
and r14d, r10d
or r14, rbx
not r14
or r14, r15
imul r14, rcx
movzx r15d, byte [r9 + 0x17]
xor r15, r14
imul r15, rcx
and r15, qword [rsi + 0x30]
mov r10, qword [r9]
mov rbx, qword [rsi + 0x18]
lea r14, [r15 + r15]
shl r15, 4
add r11, r8
or r11, r14
mov r12, qword [rbx + r15]
cmp r12, rdi
je 0x140397380
mov r15, qword [rbx + r11*8]
mov r13, qword [r9 + 0x10]
cmp r13, qword [r15 + 0x10]
jne 0x1403974c0
mov r14, qword [r15]
cmp r14, r9
je 0x140397384
mov r15, qword [r9 + 8]
mov qword [r15], r10
mov r12, qword [r10 + 8]
mov qword [r12], r14
mov r13, qword [r14 + 8]
mov qword [r13], r9
mov qword [r14 + 8], r12
mov qword [r10 + 8], r15
mov qword [r9 + 8], r13
jmp 0x140397384
cmp r12, r15
je 0x1403974f8
mov r15, qword [r15 + 8]
cmp r13, qword [r15 + 0x10]
jne 0x1403974c0
mov r11, qword [r15]
mov rbx, qword [r9 + 8]
mov qword [rbx], r10
mov r14, qword [r10 + 8]
mov qword [r14], r11
mov r15, qword [r11 + 8]
mov qword [r15], r9
mov qword [r11 + 8], r14
mov qword [r10 + 8], rbx
mov qword [r9 + 8], r15
jmp 0x140397388
mov r11, qword [r9 + 8]
mov qword [r11], r10
mov r12, qword [r10 + 8]
mov qword [r12], r15
mov r13, qword [r15 + 8]
mov qword [r13], r9
mov qword [r15 + 8], r12
mov qword [r10 + 8], r11
mov qword [r9 + 8], r13
mov qword [rbx + r14*8], r9
jmp 0x140397388
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor ecx, ecx
mov edx, 1
mov r8d, 0x744432df
mov r9d, 0x28b73c50
call fcn.14039d8a0
mov rcx, rax
call fcn.1403e69d4
int3