joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140020be0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
cmp qword [rcx + 0x68], 0
mov r14, r8
mov rsi, rdx
mov rbx, rcx
je 0x140020c7b
mov rdi, r8
test r8, r8
jle 0x140020c70
mov rcx, rbx
call fcn.14001dd80
test rax, rax
jle 0x140020c50
mov rdx, qword [rbx + 0x38]
cmp rdi, rax
mov rbp, rdi
mov rcx, rsi
cmovge rbp, rax
mov r8, rbp
mov rdx, qword [rdx]
call fcn.14016d600
mov rax, qword [rbx + 0x50]
sub rdi, rbp
sub dword [rax], ebp
mov rcx, qword [rbx + 0x38]
movsxd rax, ebp
add qword [rcx], rax
jmp 0x140020c68
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x38]
cmp eax, 0xffffffff
je 0x140020c70
mov byte [rsi], al
dec rdi
mov ebp, 1
add rsi, rbp
test rdi, rdi
jg 0x140020c12
sub r14, rdi
mov rax, r14
jmp 0x140020d2a
mov rax, qword [rcx + 0x38]
mov rbp, r14
mov rdx, qword [rax]
test rdx, rdx
je 0x140020c92
mov rax, qword [rcx + 0x50]
mov ecx, dword [rax]
jmp 0x140020c94
xor ecx, ecx
movsxd rdi, ecx
test r14, r14
jle 0x140020d24
test ecx, ecx
jle 0x140020ccc
cmp r14, rdi
mov rcx, rsi
cmovl rdi, r14
mov r8, rdi
call fcn.14016d600
mov rax, qword [rbx + 0x50]
add rsi, rdi
sub r14, rdi
sub dword [rax], edi
mov rcx, qword [rbx + 0x38]
movsxd rax, edi
add qword [rcx], rax
test r14, r14
jle 0x140020d24
mov r9, qword [rbx + 0x80]
test r9, r9
je 0x140020d24
mov r8, qword [rbx + 0x18]
lea rax, [rbx + 0x70]
cmp qword [r8], rax
jne 0x140020d11
mov rcx, qword [rbx + 0x88]
mov rdx, qword [rbx + 0x90]
mov qword [r8], rcx
sub edx, ecx
mov rax, qword [rbx + 0x38]
mov qword [rax], rcx
mov rax, qword [rbx + 0x50]
mov dword [rax], edx
mov r9, qword [rbx + 0x80]
mov r8, r14
mov edx, 1
mov rcx, rsi
call fcn.1401714f4
sub r14, rax
sub rbp, r14
mov rax, rbp
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x140020e00
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
cmp qword [rcx + 0x68], 0
mov r14, r8
mov rbp, rdx
mov rdi, rcx
je 0x140020e9a
mov rbx, r8
test r8, r8
jle 0x140020e92
mov rcx, rdi
call fcn.14001e3a0
test rax, rax
jle 0x140020e70
mov rcx, qword [rdi + 0x40]
cmp rbx, rax
mov rsi, rbx
mov rdx, rbp
cmovge rsi, rax
mov r8, rsi
mov rcx, qword [rcx]
call fcn.14016d600
mov rax, qword [rdi + 0x58]
sub rbx, rsi
sub dword [rax], esi
mov rcx, qword [rdi + 0x40]
movsxd rax, esi
add qword [rcx], rax
jmp 0x140020e8a
mov rax, qword [rdi]
mov rcx, rdi
movzx edx, byte [rbp]
call qword [rax + 0x18]
cmp eax, 0xffffffff
je 0x140020e92
dec rbx
mov esi, 1
add rbp, rsi
test rbx, rbx
jg 0x140020e32
sub r14, rbx
mov rax, r14
jmp 0x140020f11
mov rax, qword [rcx + 0x40]
mov rsi, r14
mov r9, qword [rax]
test r9, r9
je 0x140020eb1
mov rax, qword [rcx + 0x58]
mov ecx, dword [rax]
jmp 0x140020eb3
xor ecx, ecx
movsxd rbx, ecx
test r14, r14
jle 0x140020f0b
test ecx, ecx
jle 0x140020ee7
cmp r14, rbx
mov rcx, r9
cmovl rbx, r14
mov r8, rbx
call fcn.14016d600
mov rax, qword [rdi + 0x58]
add rbp, rbx
sub r14, rbx
sub dword [rax], ebx
mov rcx, qword [rdi + 0x40]
movsxd rax, ebx
add qword [rcx], rax
test r14, r14
jle 0x140020f0b
mov r9, qword [rdi + 0x80]
test r9, r9
je 0x140020f0b
mov r8, r14
mov edx, 1
mov rcx, rbp
call fcn.140171a5c
sub r14, rax
sub rsi, r14
mov rax, rsi
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x14002c550
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
cmp qword [r8 + 0x28], 0x10
lea r11, [r8 + 0x10]
mov rbx, qword [r11 + 0x10]
mov rsi, rdx
mov rdi, rcx
jb 0x14002c577
mov r11, qword [r11]
xor r9d, r9d
movabs r10, 0xcbf29ce484222325
test rbx, rbx
je 0x14002c5b4
movabs rcx, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9 + r11]
inc r9
xor r10, rax
imul r10, rcx
cmp r9, rbx
jb 0x14002c5a0
mov rdx, qword [rdi + 0x30]
mov rcx, qword [rdi + 0x18]
and rdx, r10
shl rdx, 4
add rcx, rdx
mov rax, qword [rcx]
cmp qword [rcx + 8], r8
jne 0x14002c5f4
cmp rax, r8
jne 0x14002c5ea
mov rax, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rdi + 0x18]
mov rax, qword [rdi + 8]
mov qword [rdx + rcx + 8], rax
jmp 0x14002c5ff
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
jmp 0x14002c5ff
cmp rax, r8
jne 0x14002c5ff
mov rax, qword [r8]
mov qword [rcx], rax
mov rax, qword [r8 + 8]
lea rcx, [rdi + 8]
mov rbx, qword [r8]
mov qword [rax], rbx
mov rdx, qword [r8]
mov rax, qword [r8 + 8]
mov qword [rdx + 8], rax
mov rdx, r8
dec qword [rcx + 8]
call fcn.140031c00
mov qword [rsi], rbx
mov rax, rsi
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x140034f30
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rdi, r9
mov rsi, r8
mov r12, rdx
mov r15, rcx
mov r14, qword [r8 + 0x10]
mov r9, qword [r8 + 0x18]
cmp r9, 0x10
jb 0x140034f6f
mov r8, qword [r8]
movabs rdx, 0xcbf29ce484222325
xor ecx, ecx
test r14, r14
je 0x140034fa4
movabs r10, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [rcx + r8]
xor rdx, rax
imul rdx, r10
inc rcx
cmp rcx, r14
jb 0x140034f90
mov r8, qword [r15 + 0x30]
and r8, rdx
shl r8, 4
mov qword [rsp + 0x80], r8
mov r13, qword [r15 + 0x18]
add r13, r8
mov rbx, qword [r15 + 8]
cmp rbx, qword [r13]
je 0x140035044
mov rbx, qword [r13 + 8]
mov rbx, qword [rbx]
nop
cmp rbx, qword [r13]
je 0x140035044
mov rbx, qword [rbx + 8]
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140034fec
mov rdx, qword [rdx]
mov rcx, rsi
cmp r9, 0x10
jb 0x140034ff8
mov rcx, qword [rsi]
cmp r14, rax
jne 0x140034fd0
mov r8, r14
call fcn.14016dc00
test eax, eax
mov r9, qword [rsi + 0x18]
jne 0x140034fd0
lea rcx, [r15 + 8]
mov rdx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rdx], rax
mov rdx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rdx + 8], rax
dec qword [rcx + 8]
mov rdx, rdi
call fcn.14003a560
mov qword [r12], rbx
mov byte [r12 + 8], 0
mov rax, r12
jmp 0x1400350e1
mov rax, qword [rdi]
cmp rbx, rax
je 0x140035079
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rdx, qword [r15 + 0x18]
mov r8, qword [rsp + 0x80]
add rdx, r8
mov rax, qword [rdx]
cmp rax, qword [r15 + 8]
jne 0x14003509f
mov qword [rdx], rdi
mov rax, qword [r15 + 0x18]
mov qword [rax + r8 + 8], rdi
jmp 0x1400350cb
cmp rax, rbx
jne 0x1400350a9
mov qword [rdx], rdi
jmp 0x1400350cb
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x1400350cb
mov rdx, qword [r15 + 0x18]
mov rax, qword [rdx + r8 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r8 + 8], rcx
mov rcx, r15
call fcn.140039670
nop
mov qword [r12], rdi
mov byte [r12 + 8], 1
mov rax, r12
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
Function at 0x140035170
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rcx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x78], rsi
mov rdi, r8
mov r14, rdx
mov r15, rcx
mov rsi, qword [r8 + 0x10]
mov r9, qword [r8 + 0x18]
cmp r9, 0x10
jb 0x1400351af
mov r8, qword [r8]
movabs rdx, 0xcbf29ce484222325
xor ecx, ecx
test rsi, rsi
je 0x1400351e4
movabs r10, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [rcx + r8]
xor rdx, rax
imul rdx, r10
inc rcx
cmp rcx, rsi
jb 0x1400351d0
mov r12, qword [r15 + 0x30]
and r12, rdx
shl r12, 4
mov r13, qword [r15 + 0x18]
mov rbx, qword [r15 + 8]
cmp rbx, qword [r13 + r12]
je 0x140035254
mov rbx, qword [r13 + r12 + 8]
mov rbx, qword [rbx]
cmp rbx, qword [r13 + r12]
je 0x140035254
mov rbx, qword [rbx + 8]
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140035223
mov rdx, qword [rdx]
mov rcx, rdi
cmp r9, 0x10
jb 0x14003522f
mov rcx, qword [rdi]
cmp rsi, rax
jne 0x140035206
mov r8, rsi
call fcn.14016dc00
test eax, eax
mov r9, qword [rdi + 0x18]
jne 0x140035206
mov qword [r14], rbx
mov byte [r14 + 8], 0
mov rax, r14
jmp 0x140035309
mov rdx, qword [r15 + 8]
mov r8, rdi
mov rdx, qword [rdx]
lea rcx, [r15 + 8]
call fcn.140035100
mov rcx, qword [r15 + 8]
mov rdi, qword [rcx]
mov qword [rsp + 0x70], rdi
mov rax, qword [rdi]
cmp rbx, rax
je 0x1400352ac
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rcx, qword [r15 + 8]
mov rdx, qword [r15 + 0x18]
add rdx, r12
mov rax, qword [rdx]
cmp rax, rcx
jne 0x1400352c9
mov qword [rdx], rdi
mov rax, qword [r15 + 0x18]
mov qword [rax + r12 + 8], rdi
jmp 0x1400352f5
cmp rax, rbx
jne 0x1400352d3
mov qword [rdx], rdi
jmp 0x1400352f5
mov rax, qword [rdx + 8]
mov rcx, qword [rax]
mov qword [rdx + 8], rcx
cmp rcx, rdi
je 0x1400352f5
mov rdx, qword [r15 + 0x18]
mov rax, qword [rdx + r12 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r12 + 8], rcx
mov rcx, r15
call fcn.140039670
nop
mov qword [r14], rdi
mov byte [r14 + 8], 1
mov rax, r14
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x14003c0c0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rsp + 0xb8], rbx
mov rdi, rdx
mov rbx, rcx
cmp byte [rcx + 0x40], 0
je 0x14003c171
add rdx, 0x58
lea rcx, [rsp + 0x38]
call fcn.14010dd70
nop
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.14010ffa0
movzx esi, al
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14003c14c
mov rdx, qword [rsp + 0x48]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c147
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c2fc
call fcn.14014f740
test sil, sil
je 0x14003c2e2
lea rcx, [rbx + 0x41]
mov r8d, 0x20
lea rdx, [rsp + 0x50]
call fcn.14016dc00
test eax, eax
jne 0x14003c2e2
cmp qword [rbx + 0x10], 0
je 0x14003c2de
mov rax, qword [rdi + 0x80]
mov qword [rsp + 0xb0], rax
mov rcx, qword [rdi + 0x88]
mov qword [rsp + 0xc8], rcx
cmp rax, rcx
je 0x14003c2e2
mov r11, qword [rbx + 0x30]
mov qword [rsp + 0x28], r11
mov r14, qword [rbx + 8]
mov r10, qword [rbx + 0x18]
mov qword [rsp + 0x20], r10
lea rdi, [rax + 8]
movabs rbx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
mov r9, qword [rdi + 0x10]
mov r8, rdi
mov r12, qword [rdi + 0x18]
cmp r12, 0x10
jb 0x14003c1e5
mov r8, qword [rdi]
mov rdx, rax
xor eax, eax
test r9, r9
je 0x14003c204
nop
movzx ecx, byte [rax + r8]
xor rdx, rcx
imul rdx, rbx
inc rax
cmp rax, r9
jb 0x14003c1f0
mov rax, r11
and rax, rdx
shl rax, 4
mov r15, qword [r10 + rax]
mov rbx, r15
add rax, 8
add rax, r10
mov qword [rsp + 0xc0], rax
mov r13, r9
cmp r15, r14
jne 0x14003c231
mov rax, r14
jmp 0x14003c237
mov rax, qword [rax]
mov rax, qword [rax]
cmp rbx, rax
je 0x14003c2ad
lea rcx, [rbx + 0x10]
mov rdx, rdi
cmp r12, 0x10
jb 0x14003c24c
mov rdx, qword [rdi]
mov rsi, qword [rcx + 0x10]
mov rbp, qword [rcx + 0x18]
cmp rbp, 0x10
jb 0x14003c25d
mov rcx, qword [rcx]
cmp rsi, r13
jne 0x14003c26e
mov r8, rsi
call fcn.14016dc00
test eax, eax
je 0x14003c27b
mov rbx, qword [rbx]
mov rax, qword [rsp + 0xc0]
jmp 0x14003c227
lea rdx, [rbx + 0x10]
cmp rbp, 0x10
jb 0x14003c288
mov rdx, qword [rdx]
mov rcx, rdi
cmp r12, 0x10
jb 0x14003c294
mov rcx, qword [rdi]
cmp r13, rsi
jne 0x14003c2a5
mov r8, r13
call fcn.14016dc00
test eax, eax
je 0x14003c2a8
mov rbx, r14
cmp rbx, r14
jne 0x14003c2de
mov rax, qword [rsp + 0xb0]
add rax, 0x30
mov qword [rsp + 0xb0], rax
add rdi, 0x30
cmp rax, qword [rsp + 0xc8]
je 0x14003c2e2
mov r10, qword [rsp + 0x20]
mov r11, qword [rsp + 0x28]
jmp 0x14003c1bd
mov al, 1
jmp 0x14003c2e4
xor al, al
mov rbx, qword [rsp + 0xb8]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1401705dc
int3
Function at 0x14003fea0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
cmp qword [r8 + 0x28], 0x10
lea r11, [r8 + 0x10]
mov rbx, qword [r11 + 0x10]
mov rsi, rdx
mov rdi, rcx
jb 0x14003fec7
mov r11, qword [r11]
xor r9d, r9d
movabs r10, 0xcbf29ce484222325
test rbx, rbx
je 0x14003ff04
movabs rcx, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9 + r11]
inc r9
xor r10, rax
imul r10, rcx
cmp r9, rbx
jb 0x14003fef0
mov rdx, qword [rdi + 0x30]
mov rcx, qword [rdi + 0x18]
and rdx, r10
shl rdx, 4
add rcx, rdx
mov rax, qword [rcx]
cmp qword [rcx + 8], r8
jne 0x14003ff44
cmp rax, r8
jne 0x14003ff3a
mov rax, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rdi + 0x18]
mov rax, qword [rdi + 8]
mov qword [rdx + rcx + 8], rax
jmp 0x14003ff4f
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
jmp 0x14003ff4f
cmp rax, r8
jne 0x14003ff4f
mov rax, qword [r8]
mov qword [rcx], rax
mov rax, qword [r8 + 8]
lea rcx, [rdi + 8]
mov rbx, qword [r8]
mov qword [rax], rbx
mov rdx, qword [r8]
mov rax, qword [r8 + 8]
mov qword [rdx + 8], rax
mov rdx, r8
dec qword [rcx + 8]
call fcn.14003a560
mov qword [rsi], rbx
mov rax, rsi
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x14004b020
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x40
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rdi, r9
mov r14, rdx
mov rsi, rcx
mov rdx, qword [r8]
movzx r8d, dl
movabs rax, 0xcbf29ce484222325
xor r8, rax
movabs r9, 0x100000001b3
imul r8, r9
mov rax, rdx
shr rax, 8
movzx ecx, al
xor r8, rcx
imul r8, r9
mov rax, rdx
shr rax, 0x10
movzx ecx, al
xor r8, rcx
imul r8, r9
mov rax, rdx
shr rax, 0x18
movzx ecx, al
xor r8, rcx
imul r8, r9
mov rax, rdx
shr rax, 0x20
movzx ecx, al
xor r8, rcx
imul r8, r9
mov rax, rdx
shr rax, 0x28
movzx ecx, al
xor r8, rcx
imul r8, r9
mov rax, rdx
shr rax, 0x30
movzx ecx, al
xor r8, rcx
imul r8, r9
mov rax, rdx
shr rax, 0x38
xor r8, rax
imul r8, r9
mov r9, qword [rsi + 0x30]
and r9, r8
add r9, r9
mov rcx, qword [rsi + 0x18]
mov rbx, qword [rsi + 8]
mov rax, qword [rcx + r9*8]
cmp rbx, rax
je 0x14004b14e
mov rbx, qword [rcx + r9*8 + 8]
mov rbx, qword [rbx]
cmp rbx, rax
je 0x14004b14e
mov rbx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
jne 0x14004b100
mov rcx, qword [rdi + 8]
mov rax, qword [rdi]
mov qword [rcx], rax
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
dec qword [rsi + 0x10]
lea rcx, [rdi + 0x10]
call fcn.140051a90
mov edx, 0x38
mov rcx, rdi
call fcn.14014f740
mov qword [r14], rbx
mov byte [r14 + 8], 0
mov rax, r14
jmp 0x14004b27b
mov qword [rsp + 0x80], rdi
mov rax, qword [rdi]
cmp rbx, rax
je 0x14004b18b
mov rcx, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rdi
mov rdx, qword [rbx + 8]
mov rcx, qword [rax + 8]
mov qword [rbx + 8], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
mov qword [rdi + 8], rdx
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + r9*8]
cmp rax, qword [rsi + 8]
jne 0x14004b1a8
mov qword [rdx + r9*8], rdi
mov rax, qword [rsi + 0x18]
mov qword [rax + r9*8 + 8], rdi
jmp 0x14004b1d7
cmp rax, rbx
jne 0x14004b1b3
mov qword [rdx + r9*8], rdi
jmp 0x14004b1d7
mov rax, qword [rdx + r9*8 + 8]
mov rcx, qword [rax]
mov qword [rdx + r9*8 + 8], rcx
cmp rcx, rdi
je 0x14004b1d7
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + r9*8 + 8]
mov rcx, qword [rax + 8]
mov qword [rdx + r9*8 + 8], rcx
mov rax, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x38]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss xmm1, dword [0x1401b6b20]
test rax, rax
jns 0x14004b1f8
addss xmm0, xmm1
xorps xmm2, xmm2
cvtsi2ss xmm2, rdx
test rdx, rdx
jns 0x14004b209
addss xmm2, xmm1
divss xmm0, xmm2
comiss xmm0, dword [rsi]
jbe 0x14004b270
cmp rdx, 0x200
jae 0x14004b225
lea rdx, [rdx*8]
jmp 0x14004b237
movabs rax, 0xfffffffffffffff
cmp rdx, rax
jae 0x14004b237
add rdx, rdx
mov rcx, rsi
call fcn.14001ddb0
mov rax, qword [rsi + 8]
cmp qword [rax], rax
je 0x14004b270
mov r15, qword [rax + 8]
nop dword [rax]
mov rbx, qword [rsi + 8]
mov rbx, qword [rbx]
lea r8, [rbx + 0x10]
mov r9, rbx
lea rdx, [rsp + 0x28]
mov rcx, rsi
call fcn.14004b020
cmp rbx, r15
jne 0x14004b250
mov qword [r14], rdi
mov byte [r14 + 8], 1
mov rax, r14
add rsp, 0x40
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret
Function at 0x14004cd20
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
sub rsp, 0x30
mov r10, qword [r8]
mov rbp, rcx
movabs rcx, 0xcbf29ce484222325
mov rbx, rdx
movabs rdx, 0x100000001b3
mov rax, r10
shr rax, 8
mov rdi, r8
mov r8, qword [rbp + 0x30]
movzx r9d, al
movzx eax, r10b
xor rax, rcx
imul rax, rdx
xor r9, rax
mov rax, r10
imul r9, rdx
shr rax, 0x10
movzx ecx, al
mov rax, r10
xor r9, rcx
shr rax, 0x18
imul r9, rdx
movzx ecx, al
mov rax, r10
xor r9, rcx
shr rax, 0x20
imul r9, rdx
movzx ecx, al
mov rax, r10
xor r9, rcx
shr rax, 0x28
imul r9, rdx
movzx ecx, al
mov rax, r10
xor r9, rcx
shr rax, 0x30
imul r9, rdx
movzx ecx, al
mov rax, r10
xor r9, rcx
shr rax, 0x38
mov rcx, qword [rbp + 0x18]
imul r9, rdx
xor r9, rax
imul r9, rdx
mov rdx, qword [rbp + 8]
and r8, r9
add r8, r8
mov r9, qword [rcx + r8*8]
lea r11, [rcx + r8*8]
mov rax, r9
nop dword [rax]
cmp r9, rdx
jne 0x14004cdfa
mov rcx, rdx
jmp 0x14004ce01
mov rcx, qword [r11 + 8]
mov rcx, qword [rcx]
cmp rax, rcx
je 0x14004ce2d
cmp qword [rax + 0x10], r10
je 0x14004ce11
mov rax, qword [rax]
jmp 0x14004cdf0
cmp rax, rdx
je 0x14004ce2d
mov qword [rbx], rax
mov rax, rbx
mov byte [rbx + 8], 0
mov rbx, qword [rsp + 0x68]
add rsp, 0x30
pop rdi
pop rsi
pop rbp
ret
mov qword [rsp + 0x60], rdi
lea rax, [rsp + 0x50]
mov rdi, qword [rdx]
lea r9, [0x1401bcee0]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 8]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x58], r14
mov rdx, rdi
mov qword [rsp + 0x20], rax
mov r14, qword [rdi + 8]
mov r8, r14
call fcn.14004a0e0
mov rdx, rax
movabs rcx, 0x492492492492491
mov rax, qword [rbp + 0x10]
sub rcx, rax
cmp rcx, 1
jb 0x14004cebb
inc rax
mov rcx, rbp
mov qword [rbp + 0x10], rax
mov qword [rdi + 8], rdx
mov qword [r14], rdx
mov rdx, rbx
mov r9, qword [rbp + 8]
mov r9, qword [r9]
lea r8, [r9 + 0x10]
call fcn.14004b020
mov r14, qword [rsp + 0x58]
mov rax, rbx
mov rbx, qword [rsp + 0x68]
add rsp, 0x30
pop rdi
pop rsi
pop rbp
ret
lea rcx, str.list_T__too_long
call fcn.14012eba0
int3
Function at 0x14004d3e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
cmp qword [r8 + 0x28], 0x10
lea r11, [r8 + 0x10]
mov rbx, qword [r11 + 0x10]
mov rsi, rdx
mov rdi, rcx
jb 0x14004d407
mov r11, qword [r11]
xor r9d, r9d
movabs r10, 0xcbf29ce484222325
test rbx, rbx
je 0x14004d444
movabs rcx, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9 + r11]
inc r9
xor r10, rax
imul r10, rcx
cmp r9, rbx
jb 0x14004d430
mov rdx, qword [rdi + 0x30]
mov rcx, qword [rdi + 0x18]
and rdx, r10
shl rdx, 4
add rcx, rdx
mov rax, qword [rcx]
cmp qword [rcx + 8], r8
jne 0x14004d484
cmp rax, r8
jne 0x14004d47a
mov rax, qword [rdi + 8]
mov qword [rcx], rax
mov rcx, qword [rdi + 0x18]
mov rax, qword [rdi + 8]
mov qword [rdx + rcx + 8], rax
jmp 0x14004d48f
mov rax, qword [r8 + 8]
mov qword [rcx + 8], rax
jmp 0x14004d48f
cmp rax, r8
jne 0x14004d48f
mov rax, qword [r8]
mov qword [rcx], rax
mov rax, qword [r8 + 8]
lea rcx, [rdi + 8]
mov rbx, qword [r8]
mov qword [rax], rbx
mov rdx, qword [r8]
mov rax, qword [r8 + 8]
mov qword [rdx + 8], rax
mov rdx, r8
dec qword [rcx + 8]
call fcn.140058870
mov qword [rsi], rbx
mov rax, rsi
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret

Function at 0x14004d4d0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov r10, rcx
mov rsi, rdx
movabs rdx, 0x100000001b3
mov rdi, r8
mov r8, qword [r8 + 0x10]
movabs rcx, 0xcbf29ce484222325
mov rax, r8
shr rax, 8
movzx r9d, al
movzx eax, r8b
xor rax, rcx
imul rax, rdx
xor r9, rax
mov rax, r8
imul r9, rdx
shr rax, 0x10
movzx ecx, al
mov rax, r8
xor r9, rcx
shr rax, 0x18
imul r9, rdx
movzx ecx, al
mov rax, r8
xor r9, rcx
shr rax, 0x20
imul r9, rdx
movzx ecx, al
mov rax, r8
xor r9, rcx
shr rax, 0x28
imul r9, rdx
movzx ecx, al
mov rax, r8
xor r9, rcx
shr rax, 0x30
imul r9, rdx
movzx ecx, al
xor r9, rcx
shr r8, 0x38
mov rcx, qword [r10 + 0x18]
imul r9, rdx
xor r9, r8
imul r9, rdx
mov rdx, qword [r10 + 0x30]
and rdx, r9
shl rdx, 4
add rcx, rdx
mov rax, qword [rcx]
cmp qword [rcx + 8], rdi
jne 0x14004d5bd
cmp rax, rdi
jne 0x14004d5b3
mov rax, qword [r10 + 8]
mov qword [rcx], rax
mov rcx, qword [r10 + 0x18]
mov rax, qword [r10 + 8]
mov qword [rdx + rcx + 8], rax
jmp 0x14004d5c8
mov rax, qword [rdi + 8]
mov qword [rcx + 8], rax
jmp 0x14004d5c8
cmp rax, rdi
jne 0x14004d5c8
mov rax, qword [rdi]
mov qword [rcx], rax
mov rax, qword [rdi + 8]
lea rcx, [rdi + 0x10]
mov rbx, qword [rdi]
mov qword [rax], rbx
mov rdx, qword [rdi]
mov rax, qword [rdi + 8]
mov qword [rdx + 8], rax
dec qword [r10 + 0x10]
call fcn.140051a90
mov edx, 0x38
mov rcx, rdi
call fcn.14014f740
mov qword [rsi], rbx
mov rax, rsi
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret