joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400ba3f0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x40
mov r15, r8
mov rdi, rdx
mov rbx, rcx
movzx esi, byte [r8]
movabs rax, 0xcbf29ce484222325
xor rsi, rax
movabs rcx, 0x100000001b3
imul rsi, rcx
movzx eax, byte [r8 + 1]
xor rsi, rax
imul rsi, rcx
movzx eax, byte [r8 + 2]
xor rsi, rax
imul rsi, rcx
movzx eax, byte [r8 + 3]
xor rsi, rax
imul rsi, rcx
mov r8, qword [rbx + 0x30]
and r8, rsi
lea rcx, [r8 + r8]
mov rax, qword [rbx + 0x18]
mov rdx, qword [rax + rcx*8 + 8]
mov rbp, qword [rbx + 8]
cmp rdx, rbp
je 0x1400ba4b5
add r8, r8
mov rcx, qword [rax + r8*8]
mov eax, dword [r15]
cmp eax, dword [rdx + 0x10]
je 0x1400ba48e
nop
cmp rdx, rcx
je 0x1400ba4b2
mov rdx, qword [rdx + 8]
cmp eax, dword [rdx + 0x10]
jne 0x1400ba480
mov qword [rdi], rdx
mov byte [rdi + 8], 0
mov rax, rdi
mov rbx, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x88]
add rsp, 0x40
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov rbp, rdx
movabs rax, 0x492492492492492
cmp qword [rbx + 0x10], rax
je 0x1400ba5f9
lea rax, [rbx + 8]
mov qword [rsp + 0x30], rax
xor r12d, r12d
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x38], r12
lea ecx, [r12 + 0x38]
call fcn.14012fc1c
mov r14, rax
mov qword [rsp + 0x38], rax
lea rdx, [rax + 0x10]
mov qword [rsp + 0x70], rdx
mov ecx, dword [r15]
mov dword [rdx], ecx
xorps xmm0, xmm0
movups xmmword [rdx + 8], xmm0
movups xmmword [rdx + 0x18], xmm0
lea rcx, [rdx + 8]
mov qword [rsp + 0x80], rcx
mov qword [rcx + 8], r12
mov qword [rcx + 0x10], r12
mov qword [rcx + 0x18], r12
mov rcx, qword [rbx + 0x10]
add rcx, 1
xorps xmm0, xmm0
js 0x1400ba536
cvtsi2ss xmm0, rcx
jmp 0x1400ba54b
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rcx, qword [rbx + 0x38]
xorps xmm1, xmm1
test rcx, rcx
js 0x1400ba55e
cvtsi2ss xmm1, rcx
jmp 0x1400ba573
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [rbx]
jbe 0x1400ba5d0
mov rcx, rbx
call fcn.1400bb560
mov r8, qword [rbx + 0x30]
and r8, rsi
lea rcx, [r8 + r8]
mov rax, qword [rbx + 0x18]
mov rdx, qword [rax + rcx*8 + 8]
mov rax, qword [rbx + 8]
cmp rdx, rax
je 0x1400ba5c6
add r8, r8
mov rax, qword [rbx + 0x18]
mov rcx, qword [rax + r8*8]
mov eax, dword [r14 + 0x10]
cmp eax, dword [rdx + 0x10]
je 0x1400ba5c3
cmp rdx, rcx
je 0x1400ba5f2
mov rdx, qword [rdx + 8]
cmp eax, dword [rdx + 0x10]
jne 0x1400ba5b5
mov rax, qword [rdx]
mov qword [rsp + 0x20], rax
mov rbp, qword [rsp + 0x20]
mov qword [rsp + 0x38], r12
mov r9, r14
mov r8, rbp
mov rdx, rsi
mov rcx, rbx
call fcn.14005d600
mov qword [rdi], rax
mov byte [rdi + 8], 1
jmp 0x1400ba495
mov qword [rsp + 0x20], rdx
jmp 0x1400ba5cb
lea rcx, str.unordered_map_set_too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3
Function at 0x1400ba610
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x40
mov r15, r8
mov rdi, rdx
mov rbx, rcx
movzx ebp, byte [r8]
movabs rax, 0xcbf29ce484222325
xor rbp, rax
movabs rcx, 0x100000001b3
imul rbp, rcx
movzx eax, byte [r8 + 1]
xor rbp, rax
imul rbp, rcx
movzx eax, byte [r8 + 2]
xor rbp, rax
imul rbp, rcx
movzx eax, byte [r8 + 3]
xor rbp, rax
imul rbp, rcx
mov r8, qword [rbx + 0x30]
and r8, rbp
lea rcx, [r8 + r8]
mov rax, qword [rbx + 0x18]
mov rdx, qword [rax + rcx*8 + 8]
mov r14, qword [rbx + 8]
cmp rdx, r14
je 0x1400ba6e0
add r8, r8
mov rcx, qword [rax + r8*8]
mov eax, dword [r15]
cmp eax, dword [rdx + 0x10]
je 0x1400ba6b4
cmp rdx, rcx
je 0x1400ba6dd
mov rdx, qword [rdx + 8]
cmp eax, dword [rdx + 0x10]
jne 0x1400ba6a6
mov qword [rdi], rdx
mov byte [rdi + 8], 0
mov rax, rdi
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x40
pop r15
pop r14
pop r12
ret
mov r14, rdx
movabs rax, 0x666666666666666
cmp qword [rbx + 0x10], rax
je 0x1400ba804
lea rax, [rbx + 8]
mov qword [rsp + 0x30], rax
xor r12d, r12d
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x38], r12
lea ecx, [r12 + 0x28]
call fcn.14012fc1c
mov rsi, rax
mov qword [rsp + 0x38], rax
mov ecx, dword [r15]
mov dword [rax + 0x10], ecx
xorps xmm0, xmm0
movups xmmword [rax + 0x18], xmm0
mov rcx, qword [rbx + 0x10]
add rcx, 1
xorps xmm0, xmm0
js 0x1400ba73d
cvtsi2ss xmm0, rcx
jmp 0x1400ba752
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rcx, qword [rbx + 0x38]
xorps xmm1, xmm1
test rcx, rcx
js 0x1400ba765
cvtsi2ss xmm1, rcx
jmp 0x1400ba77a
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [rbx]
jbe 0x1400ba7db
mov rcx, rbx
call fcn.1400bb620
mov r8, qword [rbx + 0x30]
and r8, rbp
lea rcx, [r8 + r8]
mov rax, qword [rbx + 0x18]
mov rdx, qword [rax + rcx*8 + 8]
mov rax, qword [rbx + 8]
cmp rdx, rax
je 0x1400ba7d1
add r8, r8
mov rax, qword [rbx + 0x18]
mov rcx, qword [rax + r8*8]
mov eax, dword [rsi + 0x10]
cmp eax, dword [rdx + 0x10]
je 0x1400ba7ce
nop dword [rax + rax]
cmp rdx, rcx
je 0x1400ba7fd
mov rdx, qword [rdx + 8]
cmp eax, dword [rdx + 0x10]
jne 0x1400ba7c0
mov rax, qword [rdx]
mov qword [rsp + 0x20], rax
mov r14, qword [rsp + 0x20]
mov qword [rsp + 0x38], r12
mov r9, rsi
mov r8, r14
mov rdx, rbp
mov rcx, rbx
call fcn.14005d600
mov qword [rdi], rax
mov byte [rdi + 8], 1
jmp 0x1400ba6bb
mov qword [rsp + 0x20], rdx
jmp 0x1400ba7d6
lea rcx, str.unordered_map_set_too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3
Function at 0x1400e0ef0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x80
mov rax, qword [0x1402922b8]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov rsi, rdx
mov rdi, rcx
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x24], 0
mov r9, qword [r8 + 0x10]
cmp qword [r8 + 0x18], 0x10
jb 0x1400e0f2b
mov r8, qword [r8]
movabs rdx, 0xcbf29ce484222325
xor ecx, ecx
test r9, r9
je 0x1400e0f64
movabs r10, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [rcx + r8]
xor rdx, rax
imul rdx, r10
inc rcx
cmp rcx, r9
jb 0x1400e0f50
lea rcx, [rsp + 0x50]
call fcn.140035870
mov rbx, rax
lea r8, [0x14019aa8c]
mov rdx, rsi
lea rcx, [rsp + 0x30]
call fcn.1400519e0
nop
mov r9, rbx
mov r8, rax
movzx edx, byte [rsp + 0x20]
mov rcx, rdi
call fcn.140059800
mov eax, 4
mov dword [rsp + 0x24], eax
and eax, 0xfffffffb
mov dword [rsp + 0x24], eax
or eax, 1
mov dword [rsp + 0x24], eax
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x1400e0fed
inc rdx
mov rcx, qword [rsp + 0x30]
cmp rdx, 0x1000
jb 0x1400e0fe8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400e106f
mov rcx, r8
call fcn.14012fc60
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1400e103d
inc rdx
mov rcx, qword [rsp + 0x50]
cmp rdx, 0x1000
jb 0x1400e1038
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400e1076
mov rcx, r8
call fcn.14012fc60
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rax, rdi
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.14012fd90
add rsp, 0x80
pop rdi
pop rsi
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
Function at 0x1400e7d80
Capabilities:
Hash data using fnv

Disassembly:
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
push rbx
sub rsp, 0x30
mov rbx, rdx
mov r10, rcx
xor r11d, r11d
mov dword [rsp + 0x20], r11d
movzx r9d, r8b
movabs rax, 0xcbf29ce484222325
xor r9, rax
movabs rcx, 0x100000001b3
imul r9, rcx
movzx eax, byte [rsp + 0x51]
xor r9, rax
imul r9, rcx
movzx eax, byte [rsp + 0x52]
xor r9, rax
imul r9, rcx
movzx eax, byte [rsp + 0x53]
xor r9, rax
imul r9, rcx
mov rcx, qword [r10 + 0x58]
and rcx, r9
lea rax, [rcx + rcx]
mov rdx, qword [r10 + 0x40]
mov rdx, qword [rdx + rax*8 + 8]
cmp rdx, qword [r10 + 0x30]
je 0x1400e7e21
add rcx, rcx
mov rax, qword [r10 + 0x40]
mov rcx, qword [rax + rcx*8]
cmp r8d, dword [rdx + 0x10]
je 0x1400e7e24
nop dword [rax + rax]
cmp rdx, rcx
je 0x1400e7e21
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
jne 0x1400e7e10
jmp 0x1400e7e24
mov rdx, r11
test rdx, rdx
jne 0x1400e7e2d
mov rdx, qword [r10 + 0x30]
cmp rdx, qword [r10 + 0x30]
je 0x1400e7e41
add rdx, 0x18
mov rcx, rbx
call fcn.140019bb0
jmp 0x1400e7e56
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r11
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r11b
mov dword [rsp + 0x20], 1
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x1400eb8a0
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister

Disassembly:
movss xmm2, dword [0x140192acc]
mov r11d, 0x138
mov r8, rcx
xorps xmm1, xmm1
cmp dword [rcx], r11d
jne 0x1400eb915
lea r9, [rcx + 0x10]
movabs r10, 0xb5026f5aa96619e9
nop word [rax + rax]
mov eax, dword [r9]
mov rdx, qword [r9 - 8]
lea r9, [r9 + 8]
btr eax, 0x1f
and rdx, 0xffffffff80000000
or rdx, rax
movzx eax, dl
and al, 1
neg al
sbb rcx, rcx
shr rdx, 1
and rcx, r10
xor rcx, qword [r9 + 0x4d0]
xor rcx, rdx
mov qword [r9 + 0x9b0], rcx
sub r11, 1
jne 0x1400eb8d0
jmp 0x1400eba0c
cmp dword [rcx], 0x270
jb 0x1400eba0c
lea r9, [rcx + 0x9c8]
mov r11d, 0x9c
movabs r10, 0xb5026f5aa96619e9
nop dword [rax + rax]
mov edx, dword [r9 + 8]
mov rax, qword [r9]
lea r9, [r9 + 8]
and rax, 0xffffffff80000000
btr edx, 0x1f
or rdx, rax
movzx eax, dl
and al, 1
neg al
sbb rcx, rcx
shr rdx, 1
and rcx, r10
xor rcx, qword [r9 + 0x4d8]
xor rcx, rdx
mov qword [r9 - 0x9c8], rcx
sub r11, 1
jne 0x1400eb940
lea r9, [r8 + 0xea8]
mov r11d, 0x9b
nop dword [rax]
mov edx, dword [r9 + 8]
mov rax, qword [r9]
lea r9, [r9 + 8]
and rax, 0xffffffff80000000
btr edx, 0x1f
or rdx, rax
movzx eax, dl
and al, 1
neg al
sbb rcx, rcx
shr rdx, 1
and rcx, r10
xor rcx, qword [r9 - 0xea8]
xor rcx, rdx
mov qword [r9 - 0x9c8], rcx
sub r11, 1
jne 0x1400eb990
mov eax, dword [r8 + 8]
mov rdx, qword [r8 + 0x1380]
btr eax, 0x1f
and rdx, 0xffffffff80000000
or rdx, rax
movzx eax, dl
and al, 1
neg al
sbb rcx, rcx
shr rdx, 1
and rcx, r10
xor rcx, qword [r8 + 0x4e0]
xor rcx, rdx
mov qword [r8 + 0x9c0], rcx
mov dword [r8], r11d
mov eax, dword [r8]
movabs rdx, 0x38eb3ffff6d3
xorps xmm0, xmm0
mov rcx, qword [r8 + rax*8 + 8]
inc dword [r8]
mov rax, rcx
shr rax, 0x1d
and rax, qword [r8 + 0x1388]
xor rcx, rax
mov rax, rcx
and rax, rdx
shl rax, 0x11
xor rcx, rax
mov rax, rcx
and rax, 0xffffffffffffbf77
shl rax, 0x25
xor rcx, rax
mov rdx, rcx
shr rdx, 0x2b
xor rdx, rcx
js 0x1400eba65
cvtsi2ss xmm0, rdx
jmp 0x1400eba7a
mov rax, rdx
and edx, 1
shr rax, 1
or rax, rdx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
subss xmm0, xmm1
mulss xmm0, xmm2
mulss xmm2, dword [0x140192ad0]
addss xmm1, xmm0
divss xmm1, xmm2
movaps xmm0, xmm1
ret
Function at 0x1400ebaa0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
mov eax, 0x1400
call fcn.140130110
sub rsp, rax
movaps xmmword [rsp + 0x13f0], xmm6
movaps xmmword [rsp + 0x13e0], xmm7
mov rax, qword [0x1402922b8]
xor rax, rsp
mov qword [rsp + 0x13d0], rax
mov rsi, rdx
mov rdi, rcx
mov rbx, qword [0x14029c7d0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x38], 0xf
mov edx, 0x20
lea rcx, [rsp + 0x20]
call fcn.14001b8a0
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], 0x18
mov qword [rsp + 0x38], 0x1f
movups xmm0, xmmword [str.telemetry.disableCulling]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x14019ebb0]
movsd qword [rax + 0x10], xmm0
mov byte [rax + 0x18], 0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.140023310
movzx ebx, al
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x1400ebb9e
inc rdx
mov rcx, qword [rsp + 0x20]
cmp rdx, 0x1000
jb 0x1400ebb99
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400ebc7a
mov rcx, r8
call fcn.14012fc60
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
test bl, bl
jne 0x1400ebc76
cmp byte [rsi + 0x5d], bl
jne 0x1400ebc76
xorps xmm7, xmm7
comiss xmm7, dword [rdi + 0x40]
jae 0x1400ebc76
movss xmm0, dword [rdi + 0x40]
movss xmm6, dword [0x140192acc]
comiss xmm0, xmm6
jae 0x1400ebc81
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov edx, eax
movabs rax, 0x5555555555555555
mov qword [rsp + 0x13c8], rax
mov qword [rsp + 0x48], rdx
mov ecx, 1
movabs r8, 0x5851f42d4c957f2d
nop word [rax + rax]
mov rax, rdx
shr rax, 0x3e
xor rdx, rax
imul rdx, r8
add rdx, rcx
mov qword [rsp + rcx*8 + 0x48], rdx
inc rcx
cmp rcx, 0x138
jb 0x1400ebc20
mov dword [rsp + 0x40], 0x138
lea rcx, [rsp + 0x40]
call fcn.1400eb8a0
addss xmm0, xmm7
comiss xmm0, dword [rdi + 0x40]
jb 0x1400ebc81
subss xmm6, dword [rdi + 0x40]
movss xmm0, dword [rdi + 0x40]
divss xmm0, xmm6
addss xmm0, dword [rsi + 0x54]
movss dword [rsi + 0x54], xmm0
xor al, al
jmp 0x1400ebc83
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov al, 1
mov rcx, qword [rsp + 0x13d0]
xor rcx, rsp
call fcn.14012fd90
lea r11, [rsp + 0x1400]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1400ee9c0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x1402922b8]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x20], 0
lea rcx, [rsp + 0x28]
call fcn.140019bb0
mov ebp, 1
mov dword [rsp + 0x20], ebp
lea rsi, [rsp + 0x28]
mov rcx, qword [rsp + 0x28]
mov r9, qword [rsp + 0x40]
cmp r9, 0x10
cmovae rsi, rcx
lea rbx, [rsp + 0x28]
cmovae rbx, rcx
mov r8, qword [rsp + 0x38]
add rbx, r8
lea rdi, [rsp + 0x28]
cmp r9, 0x10
cmovae rdi, rcx
cmp rdi, rbx
je 0x1400eea63
sub rsi, rdi
nop dword [rax + rax]
movzx ecx, byte [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rsi + rdi], al
inc rdi
cmp rdi, rbx
jne 0x1400eea40
mov r9, qword [rsp + 0x40]
mov r8, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x28]
lea rdx, [rsp + 0x28]
cmp r9, 0x10
cmovae rdx, rcx
movabs rbx, 0xcbf29ce484222325
xor ecx, ecx
test r8, r8
je 0x1400eeaa3
movabs r9, 0x100000001b3
nop dword [rax + rax]
movzx eax, byte [rcx + rdx]
xor rbx, rax
imul rbx, r9
inc rcx
cmp rcx, r8
jb 0x1400eea90
and ebp, 0xfffffffe
mov dword [rsp + 0x20], ebp
mov rdx, qword [rsp + 0x40]
cmp rdx, 0x10
jb 0x1400eeae3
inc rdx
mov rcx, qword [rsp + 0x28]
cmp rdx, 0x1000
jb 0x1400eeade
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400eeb1f
mov rcx, r8
call fcn.14012fc60
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], 0xf
mov byte [rsp + 0x28], 0
mov rax, rbx
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.14012fd90
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x50
pop rdi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
Function at 0x1400f5cb0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
cmp qword [rdx + 0x18], 0x10
mov esi, r8d
mov rbx, qword [rdx + 0x10]
mov rdi, rcx
mov r11, rdx
jb 0x1400f5cd6
mov r11, qword [rdx]
xor r10d, r10d
movabs r9, 0xcbf29ce484222325
test rbx, rbx
je 0x1400f5d14
movabs rcx, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r10 + r11]
inc r10
xor r9, rax
imul r9, rcx
cmp r10, rbx
jb 0x1400f5d00
mov r8, rdx
mov rcx, rdi
lea rdx, [rsp + 0x20]
call fcn.140020f90
mov rcx, qword [rax + 8]
test rcx, rcx
jne 0x1400f5d31
mov rcx, qword [rdi + 8]
cmp rcx, qword [rdi + 8]
je 0x1400f5d5b
add rcx, 0x30
cmp qword [rcx + 0x18], 0x10
jb 0x1400f5d45
mov rcx, qword [rcx]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov rbx, qword [rsp + 0x40]
mov eax, esi
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret

Function at 0x1400f5d70
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x30
cmp qword [rdx + 0x18], 0x10
mov esi, r8d
mov rbx, qword [rdx + 0x10]
mov rdi, rcx
mov r11, rdx
jb 0x1400f5d96
mov r11, qword [rdx]
xor r10d, r10d
movabs r9, 0xcbf29ce484222325
test rbx, rbx
je 0x1400f5dd4
movabs rcx, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r10 + r11]
inc r10
xor r9, rax
imul r9, rcx
cmp r10, rbx
jb 0x1400f5dc0
mov r8, rdx
mov rcx, rdi
lea rdx, [rsp + 0x20]
call fcn.140020f90
mov rbx, qword [rax + 8]
test rbx, rbx
jne 0x1400f5df1
mov rbx, qword [rdi + 8]
cmp rbx, qword [rdi + 8]
je 0x1400f5e36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
add rbx, 0x30
mov rdi, rax
cmp qword [rbx + 0x18], 0x10
jb 0x1400f5e0e
mov rbx, qword [rbx]
mov r8d, 0xa
mov dword [rax], 0
lea rdx, [rsp + 0x40]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoul]
cmp rbx, qword [rsp + 0x40]
je 0x1400f5e48
cmp dword [rdi], 0x22
je 0x1400f5e55
jmp 0x1400f5e38
mov eax, esi
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
lea rcx, str.invalid_stoul_argument
call sub.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_
int3
lea rcx, str.stoul_argument_out_of_range
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_
int3
Function at 0x1400f5e70
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x58
mov rax, qword [0x1402922b8]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rbx, r9
mov rdi, rdx
mov rsi, rcx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x40], rbx
xor ebp, ebp
mov dword [rsp + 0x20], ebp
mov r10, qword [r8 + 0x10]
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x1400f5eb2
mov rdx, qword [r8]
movabs r9, 0xcbf29ce484222325
mov rcx, rbp
test r10, r10
je 0x1400f5ee3
movabs r11, 0x100000001b3
nop
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r11
inc rcx
cmp rcx, r10
jb 0x1400f5ed0
lea rdx, [rsp + 0x30]
mov rcx, rsi
call fcn.140020f90
mov rdx, qword [rax + 8]
test rdx, rdx
jne 0x1400f5efd
mov rdx, qword [rsi + 8]
cmp rdx, qword [rsi + 8]
je 0x1400f5f21
add rdx, 0x30
mov rcx, rdi
call fcn.140019bb0
mov dword [rsp + 0x20], 1
mov rcx, rbx
call fcn.14001b600
jmp 0x1400f5f9a
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rbp
mov qword [rdi + 0x18], rbp
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx + 0x10], rbp
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov dword [rsp + 0x20], 1
cmp qword [rbx + 0x18], 0x10
jb 0x1400f5f8b
mov rdx, qword [rbx + 0x18]
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1400f5f86
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400f5fb3
mov rcx, r8
call fcn.14012fc60
mov qword [rbx + 0x10], rbp
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rax, rdi
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.14012fd90
add rsp, 0x58
pop rdi
pop rsi
pop rbp
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
Function at 0x1400f5fc0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x30
cmp qword [rdx + 0x18], 0x10
mov rsi, r8
mov rbx, qword [rdx + 0x10]
mov rdi, rcx
mov r11, rdx
jb 0x1400f5fe6
mov r11, qword [rdx]
xor r10d, r10d
movabs r9, 0xcbf29ce484222325
test rbx, rbx
je 0x1400f6024
movabs rcx, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r10 + r11]
inc r10
xor r9, rax
imul r9, rcx
cmp r10, rbx
jb 0x1400f6010
mov r8, rdx
mov rcx, rdi
lea rdx, [rsp + 0x20]
call fcn.140020f90
mov rbx, qword [rax + 8]
test rbx, rbx
jne 0x1400f6041
mov rbx, qword [rdi + 8]
cmp rbx, qword [rdi + 8]
je 0x1400f6086
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
add rbx, 0x30
mov rdi, rax
cmp qword [rbx + 0x18], 0x10
jb 0x1400f605e
mov rbx, qword [rbx]
mov r8d, 0xa
mov dword [rax], 0
lea rdx, [rsp + 0x40]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoull]
cmp rbx, qword [rsp + 0x40]
je 0x1400f6099
cmp dword [rdi], 0x22
je 0x1400f60a6
jmp 0x1400f6089
mov rax, rsi
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
lea rcx, str.invalid_stoull_argument
call sub.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_
int3
lea rcx, str.stoull_argument_out_of_range
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_
int3
Function at 0x1400f6510
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x40
mov rdi, r9
mov rbx, rdx
mov rsi, rcx
mov dword [rsp + 0x20], 0
mov r11, qword [r8 + 0x10]
mov r10, r8
cmp qword [r8 + 0x18], 0x10
jb 0x1400f6546
mov r10, qword [r8]
xor edx, edx
movabs r9, 0xcbf29ce484222325
test r11, r11
je 0x1400f6575
movabs rcx, 0x100000001b3
movzx eax, byte [rdx + r10]
xor r9, rax
imul r9, rcx
inc rdx
cmp rdx, r11
jb 0x1400f6561
lea rdx, [rsp + 0x28]
mov rcx, rsi
call fcn.140020f90
mov rdx, qword [rax + 8]
test rdx, rdx
jne 0x1400f658f
mov rdx, qword [rsi + 8]
cmp rdx, qword [rsi + 8]
je 0x1400f65a3
add rdx, 0x30
mov rcx, rbx
call fcn.140019bb0
jmp 0x1400f65d6
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdi + r8], 0
jne 0x1400f65c0
mov rdx, rdi
mov rcx, rbx
call fcn.14000c9c0
nop
mov dword [rsp + 0x20], 1
mov rax, rbx
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret

Function at 0x1400f7b70
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x30
cmp qword [rdx + 0x18], 0x10
mov rbx, rcx
mov r11, qword [rdx + 0x10]
mov r10, rdx
jb 0x1400f7b8a
mov r10, qword [rdx]
xor r8d, r8d
movabs r9, 0xcbf29ce484222325
test r11, r11
je 0x1400f7bc4
movabs rcx, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [r8 + r10]
inc r8
xor r9, rax
imul r9, rcx
cmp r8, r11
jb 0x1400f7bb0
mov r8, rdx
mov rcx, rbx
lea rdx, [rsp + 0x20]
call fcn.140020f90
mov rcx, qword [rax + 8]
test rcx, rcx
jne 0x1400f7be1
mov rcx, qword [rbx + 8]
cmp rcx, qword [rbx + 8]
setne al
add rsp, 0x30
pop rbx
ret