joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14035a9c0
Capabilities:
Encode data using xor

Disassembly:
mov r8d, dword [rsp + 0x28]
test ecx, ecx
je 0x14035a9fc
test edx, edx
je 0x14035aa2c
movzx eax, byte [0x14051b87d]
cmp al, 6
je 0x14035a9f4
mov cl, 0x7f
nop word [rax + rax]
mov al, 0xcc
lock cmpxchg byte [0x14051b87d], cl
je 0x14035aacc
cmp al, 6
jne 0x14035a9e0
lea rax, [0x14051b870]
ret
test edx, edx
je 0x14035aa5c
movzx eax, byte [0x14051b867]
cmp al, 0x33
je 0x14035aa24
mov cl, 0x17
nop dword [rax]
mov al, 0xb7
lock cmpxchg byte [0x14051b867], cl
je 0x14035ab2f
cmp al, 0x33
jne 0x14035aa10
lea rax, [0x14051b850]
ret
movzx eax, byte [0x14051b813]
cmp al, 0x2f
je 0x14035aa54
mov cl, 0xbb
nop dword [rax]
mov al, 0x5e
lock cmpxchg byte [0x14051b813], cl
je 0x14035ab7b
cmp al, 0x2f
jne 0x14035aa40
lea rax, [0x14051b7f0]
ret
movzx eax, byte [0x14051b84d]
nop word cs:[rax + rax]
cmp al, 0x7e
je 0x14035ac09
movzx ecx, byte [0x14051bbd8]
mov eax, r8d
xor al, 0x36
add al, cl
mov edx, r8d
xor dl, 0x45
add dl, cl
lock cmpxchg byte [0x14051b84d], dl
jne 0x14035aa70
xor eax, eax
lea rcx, [0x14051b840]
lea rdx, [0x140425c70]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14035ac01
inc rax
jmp 0x14035aab0
xor eax, eax
lea rcx, [0x14051b870]
lea rdx, [0x140425ca0]
nop dword [rax]
movzx r9d, byte [rax + rcx]
movzx r10d, byte [rax + rdx]
mov r11d, r10d
xor r11b, r10b
not r11b
and r11b, r9b
xor r11b, r10b
and r9b, r10b
add r9b, r9b
add r9b, r11b
mov byte [rax + rcx], r9b
lea r9d, [rax + 1]
cmp r9d, 0xc
jg 0x14035ab15
inc rax
jmp 0x14035aae0
xor r8b, 0x94
add r8b, byte [0x14051bbd8]
xchg byte [0x14051b87d], r8b
lea rax, [0x14051b870]
ret
xor eax, eax
lea rcx, [0x14051b850]
lea rdx, [0x140425c80]
xor r8d, 0x6e30998
nop word cs:[rax + rax]
movzx r9d, byte [rax + rdx]
xor byte [rax + rcx], r9b
lea r9d, [rax + 1]
mov r10d, dword [0x14051bbc8]
mov r11d, r8d
xor r11d, r10d
and r10d, r8d
lea r10d, [r11 + r10*2]
cmp r9d, r10d
jge 0x14035abf1
inc rax
jmp 0x14035ab50
xor edx, edx
lea rax, [0x14051b7f0]
lea rcx, [0x140425c20]
xor r8d, 0x6e309f2
nop word cs:[rax + rax]
movsxd rdx, edx
movzx r9d, byte [rdx + rcx]
xor byte [rdx + rax], r9b
mov r9d, dword [0x14051bbc8]
mov r10d, r8d
xor r10d, r9d
and r9d, r8d
lea r9d, [r10 + r9*2]
mov r10d, edx
not r10d
mov r11d, r9d
xor r11d, r10d
xor r10d, edx
and r10d, r9d
xor r10d, edx
and r11d, r9d
lea edx, [r10 + r11*2]
cmp edx, 0x23
jl 0x14035aba0
mov al, 0x2f
xchg byte [0x14051b813], al
lea rax, [0x14051b7f0]
ret
mov al, 0x33
xchg byte [0x14051b867], al
lea rax, [0x14051b850]
ret
mov al, 0x7e
xchg byte [0x14051b84d], al
lea rax, [0x14051b840]
ret
Function at 0x14035ac80
Capabilities:
Encode data using xor

Disassembly:
test ecx, ecx
je 0x14035acbc
test edx, edx
je 0x14035acec
movzx eax, byte [0x14051b899]
cmp al, 0x4b
je 0x14035acb4
mov cl, 0x97
nop word cs:[rax + rax]
mov al, 0xf8
lock cmpxchg byte [0x14051b899], cl
je 0x14035ad5c
cmp al, 0x4b
jne 0x14035aca0
lea rax, [0x14051b880]
ret
test edx, edx
je 0x14035ad1c
movzx eax, byte [0x14051b792]
cmp al, 0x8b
je 0x14035ace4
mov cl, 0x9e
nop dword [rax]
mov al, 9
lock cmpxchg byte [0x14051b792], cl
je 0x14035ad98
cmp al, 0x8b
jne 0x14035acd0
lea rax, [0x14051b780]
ret
movzx eax, byte [0x14051b839]
cmp al, 0x95
je 0x14035ad14
mov cl, 0x55
nop dword [rax]
mov al, 0x57
lock cmpxchg byte [0x14051b839], cl
je 0x14035adc8
cmp al, 0x95
jne 0x14035ad00
lea rax, [0x14051b830]
ret
mov eax, dword [rsp + 0x28]
movzx ecx, byte [0x14051b7e3]
xor al, 0xb4
add al, byte [0x14051bbd8]
cmp cl, al
je 0x14035ad54
mov cl, 0xbf
nop word cs:[rax + rax]
mov al, 0x36
lock cmpxchg byte [0x14051b7e3], cl
je 0x14035ae1f
cmp al, 0xe7
jne 0x14035ad40
lea rax, [0x14051b7e0]
ret
xor eax, eax
lea rcx, [0x14051b880]
lea rdx, [0x140425cb0]
nop dword [rax]
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x18
jg 0x14035ad88
inc rax
jmp 0x14035ad70
mov al, 0x4b
xchg byte [0x14051b899], al
lea rax, [0x14051b880]
ret
xor eax, eax
lea rcx, [0x14051b780]
lea rdx, [0x140425bc0]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x11
jg 0x14035ae0f
inc rax
jmp 0x14035adb0
xor edx, edx
lea rax, [0x14051b830]
lea rcx, [0x140425c60]
nop dword [rax + rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 9
jl 0x14035ade0
mov al, 0x95
xchg byte [0x14051b839], al
lea rax, [0x14051b830]
ret
mov al, 0x8b
xchg byte [0x14051b792], al
lea rax, [0x14051b780]
ret
xor eax, eax
lea rcx, [0x14051b7e0]
lea rdx, [0x140425c10]
nop
movzx r8d, byte [rax + rdx]
add byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 2
jg 0x14035ae48
inc rax
jmp 0x14035ae30
mov al, 0xe7
xchg byte [0x14051b7e3], al
lea rax, [0x14051b7e0]
ret
Function at 0x14035d4b0
Capabilities:
Check http status code

Disassembly:
test ecx, ecx
je 0x14035d4ec
test edx, edx
je 0x14035d51c
movzx eax, byte [0x14051be1d]
cmp al, 0xf4
je 0x14035d4e4
mov cl, 0xbe
nop word cs:[rax + rax]
mov al, 0x1b
lock cmpxchg byte [0x14051be1d], cl
je 0x14035d59c
cmp al, 0xf4
jne 0x14035d4d0
lea rax, [0x14051be10]
ret
test edx, edx
je 0x14035d55c
movzx eax, byte [0x14051bd99]
cmp al, 0xc8
je 0x14035d514
mov cl, 0x69
nop dword [rax]
mov al, 3
lock cmpxchg byte [0x14051bd99], cl
je 0x14035d5e8
cmp al, 0xc8
jne 0x14035d500
lea rax, [0x14051bd90]
ret
movzx eax, byte [0x14051bd73]
movzx ecx, byte [0x14051bfd8]
add cl, 0xc3
cmp al, cl
je 0x14035d554
mov cl, 0x83
nop word cs:[rax + rax]
mov al, 0xc5
lock cmpxchg byte [0x14051bd73], cl
je 0x14035d618
cmp al, 0xfe
jne 0x14035d540
lea rax, [0x14051bd50]
ret
movzx eax, byte [0x14051be84]
movzx ecx, byte [0x14051bfd8]
add cl, 7
cmp al, cl
je 0x14035d594
mov cl, 0x8e
nop word cs:[rax + rax]
mov al, 0x92
lock cmpxchg byte [0x14051be84], cl
je 0x14035d678
cmp al, 0x42
jne 0x14035d580
lea rax, [0x14051be70]
ret
xor eax, eax
lea rcx, [0x14051be10]
lea rdx, [0x140425fe0]
nop dword [rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0xc
jg 0x14035d5d8
inc rax
jmp 0x14035d5b0
mov al, 0xf4
xchg byte [0x14051be1d], al
lea rax, [0x14051be10]
ret
xor eax, eax
lea rcx, [0x14051bd90]
lea rdx, [0x140425f60]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 8
jg 0x14035d658
inc rax
jmp 0x14035d600
xor eax, eax
lea rcx, [0x14051bd50]
lea rdx, [0x140425f20]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
mov r9d, r8d
xor r9b, r8b
not r9b
and r9b, byte [rax + rcx]
xor r9b, r8b
mov byte [rax + rcx], r9b
lea r8d, [rax + 1]
cmp r8d, 0x22
jg 0x14035d668
inc rax
jmp 0x14035d630
mov al, 0xc8
xchg byte [0x14051bd99], al
lea rax, [0x14051bd90]
ret
mov al, 0xfe
xchg byte [0x14051bd73], al
lea rax, [0x14051bd50]
ret
xor eax, eax
lea rcx, [0x14051be70]
lea rdx, [0x140426040]
nop dword [rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x13
jg 0x14035d6a8
inc rax
jmp 0x14035d690
mov al, 0x42
xchg byte [0x14051be84], al
lea rax, [0x14051be70]
ret
Function at 0x140369d20
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x48
lea rbp, [rsp + 0x40]
mov qword [rbp], 0xfffffffffffffffe
mov r14, r8
sub r14, rdx
mov rbx, r8
sub rbx, rdx
je 0x140369f28
js 0x140369d98
mov qword [rbp - 0x10], rdx
mov qword [rbp - 0x18], r8
mov qword [rbp - 8], rcx
cmp rbx, 0xfe1
jb 0x140369d7d
mov eax, dword [0x140534ca4]
movabs r15, 0xa2c38b5dbaf60cd1
cmp eax, 0x61
jle 0x140369d9d
jmp 0x140369dfa
mov rcx, rbx
mov edx, 0xe326e409
mov r8d, 0x40647e39
call fcn.1400a83d0
mov r8, rax
jmp 0x140369ebd
call fcn.14031e080
mov rax, qword [0x14051dde0]
movabs rcx, 0xa2c38b5dbaf60d18
xor rcx, rax
movabs rdx, 0x22c38b5dbaf60d18
and rdx, rax
lea rcx, [rcx + rdx*2]
add rcx, rbx
mov edx, 0xe326e409
mov r8d, 0x40647e39
call fcn.1400a83d0
lea rcx, [rax + 0x27]
mov r8, qword [0x14051dde0]
add r8, r15
and r8, rcx
mov qword [r8 - 8], rax
cmp dword [0x14051ddd8], 0xb6c81a40
je 0x140369ebd
movabs r12, 0x3435c4b884840158
movabs r13, 0xa2c38b5dbaf60cf1
movabs rsi, 0xcbca3b477b7bf8de
movabs rdi, 0x22c38b5dbaf60cd1
nop word cs:[rax + rax]
mov rax, qword [0x14051dde0]
mov rcx, rbx
sub rcx, rax
imul rcx, rcx, 0x27
add rcx, r12
sub rax, rbx
add rax, rcx
add rcx, r13
add rcx, rax
mov edx, 0xe326e409
mov r8d, 0x40647e39
call fcn.1400a83d0
mov rdx, qword [0x14051dde0]
mov rcx, rdx
sub rcx, rax
imul r8, rcx, 0x27
add r8, rsi
lea rcx, [rdx + r15]
shl r8, cl
mov r9, rdx
xor r9, r15
and rdx, rdi
lea rdx, [r9 + rdx*2]
mov r9, r8
sub r9, rdx
imul r9, rcx
mov rcx, r8
sub rcx, r9
imul rcx, r9
and rcx, r8
mov qword [rcx - 8], rax
mov eax, dword [0x140534ca0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
jne 0x140369e30
jmp 0x140369d9d
sar r14, 5
mov eax, dword [0x140534ca0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov r9, qword [rbp - 8]
jne 0x140369efc
mov qword [r9], r8
mov qword [r9 + 8], r8
mov rax, r14
shl rax, 5
add rax, r8
mov qword [r9 + 0x10], rax
mov eax, dword [0x140534ca0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
je 0x140369f13
mov qword [r9], r8
mov qword [r9 + 8], r8
mov rax, r14
shl rax, 5
add rax, r8
mov qword [r9 + 0x10], rax
jmp 0x140369ed6
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp - 0x18]
call fcn.140369f80
mov rcx, qword [rbp - 8]
mov qword [rcx + 8], rax
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
Function at 0x14036aac0
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x20
movabs rax, 0xaac38b5dbaf60cf1
add rax, qword [0x14051dde0]
cmp rdx, rax
ja 0x14036ad3e
mov rsi, rcx
mov rax, qword [0x14051dde0]
movabs rcx, 0xa2c38b5dbaf60cf0
add rdx, rcx
add rdx, rax
movabs rcx, 0xa2c38b5dbaf60cf2
add rcx, rax
or rcx, rdx
bsr rcx, rcx
xor ecx, 0x3f
neg cl
mov ebx, 1
shl rbx, cl
lea rax, [rsi + 0x18]
mov rdi, qword [rsi + 8]
mov edx, 2
shl rdx, cl
mov rcx, rax
mov r8, rdi
call fcn.14036a110
lea rax, [rbx - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rbx
mov rax, qword [rsi + 8]
mov rax, qword [rax]
cmp rax, rdi
je 0x14036ad32
movabs rdx, 0x340d631b7bdddcda
movabs r8, 0x100000001b3
jmp 0x14036ab81
mov qword [r10 + r11*8], r9
mov qword [r10 + rcx*8], r9
cmp rax, rdi
je 0x14036ad32
mov r9, rax
mov rax, qword [rax]
movzx ecx, byte [r9 + 0x10]
mov r10d, ecx
mov r11d, ecx
xor r11d, 0x25
and r11d, ecx
xor rcx, rdx
and r10d, 0xffffffda
or r10, rcx
not r10
or r11, r10
imul r11, r8
movzx r10d, byte [r9 + 0x11]
xor r10, r11
imul r10, r8
movzx ecx, byte [r9 + 0x12]
xor rcx, r10
imul rcx, r8
movzx r10d, byte [r9 + 0x13]
not rcx
mov r11, r10
not r11
and r10d, ecx
xor rcx, r11
and rcx, r11
or rcx, r10
imul rcx, r8
movzx r10d, byte [r9 + 0x14]
mov r11, r10
not r11
and r11, rcx
not ecx
and ecx, r10d
or r11, rcx
imul r11, r8
movzx ecx, byte [r9 + 0x15]
mov r10, rcx
not r10
and r10, r11
not r11d
and r11d, ecx
or r10, r11
imul r10, r8
movzx ecx, byte [r9 + 0x16]
xor rcx, r10
imul rcx, r8
movzx r10d, byte [r9 + 0x17]
not rcx
mov r11, r10
not r11
and r10d, ecx
xor rcx, r11
and rcx, r11
or rcx, r10
imul rcx, r8
mov r10, qword [rsi + 0x18]
mov r11, qword [rsi + 0x30]
mov rbx, rcx
not rbx
xor rcx, r11
not r11
and r11, rbx
or r11, rcx
not r11
mov ecx, dword [0x14051dde0]
movzx ebx, cl
xor ebx, 0xf2
and ecx, 0x72
lea ecx, [rbx + rcx*2]
shl r11, cl
mov rcx, r11
or rcx, 1
mov r14, qword [r10 + r11*8]
cmp r14, rdi
je 0x14036ab70
mov rbx, qword [r10 + rcx*8]
mov r15, qword [r9 + 0x10]
cmp r15, qword [rbx + 0x10]
jne 0x14036acd0
mov r11, qword [rbx]
cmp r11, r9
je 0x14036ab74
mov rbx, qword [r9 + 8]
mov qword [rbx], rax
mov r14, qword [rax + 8]
mov qword [r14], r11
mov r15, qword [r11 + 8]
mov qword [r15], r9
mov qword [r11 + 8], r14
mov qword [rax + 8], rbx
mov qword [r9 + 8], r15
jmp 0x14036ab74
cmp r14, rbx
je 0x14036ad08
mov rbx, qword [rbx + 8]
cmp r15, qword [rbx + 0x10]
jne 0x14036acd0
mov rcx, qword [rbx]
mov r10, qword [r9 + 8]
mov qword [r10], rax
mov r11, qword [rax + 8]
mov qword [r11], rcx
mov rbx, qword [rcx + 8]
mov qword [rbx], r9
mov qword [rcx + 8], r11
mov qword [rax + 8], r10
mov qword [r9 + 8], rbx
jmp 0x14036ab78
mov rcx, qword [r9 + 8]
mov qword [rcx], rax
mov r14, qword [rax + 8]
mov qword [r14], rbx
mov r15, qword [rbx + 8]
mov qword [r15], r9
mov qword [rbx + 8], r14
mov qword [rax + 8], rcx
mov qword [r9 + 8], r15
mov qword [r10 + r11*8], r9
jmp 0x14036ab78
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
xor ecx, ecx
mov edx, 1
mov r8d, 0x10c6245b
mov r9d, 0x238d0cda
call fcn.140378130
mov rcx, rax
call fcn.1403bd734
int3
Function at 0x14036ff80
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x20
movabs rax, 0xaac38b5dbaf60cf1
add rax, qword [0x14051dde0]
cmp rdx, rax
ja 0x1403701ae
mov rsi, rcx
dec rdx
or rdx, 1
bsr rcx, rdx
xor ecx, 0x3f
neg cl
mov ebx, 1
shl rbx, cl
mov edx, 2
shl rdx, cl
lea rcx, [rsi + 0x18]
mov eax, 0xffff1add
add eax, dword [0x14051def0]
mov rdi, qword [rsi + 8]
cdqe
add rax, qword [0x14051df08]
mov r8, rdi
call qword [case.0x1401138cb.0]
lea rax, [rbx - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rbx
mov rax, qword [rsi + 8]
mov rax, qword [rax]
cmp rax, rdi
je 0x1403701a2
movabs rcx, 0xcbf29ce484222325
movabs rdx, 0x100000001b3
jmp 0x140370031
mov qword [r9 + r10*8], r8
mov qword [r9 + rbx*8], r8
cmp rax, rdi
je 0x1403701a2
mov r8, rax
mov rax, qword [rax]
movzx r9d, byte [r8 + 0x10]
xor r9, rcx
imul r9, rdx
movzx r10d, byte [r8 + 0x11]
xor r10, r9
imul r10, rdx
movzx r9d, byte [r8 + 0x12]
xor r9, r10
imul r9, rdx
movzx r10d, byte [r8 + 0x13]
mov r11, r10
not r11
and r11, r9
not r9d
and r9d, r10d
or r11, r9
imul r11, rdx
movzx r9d, byte [r8 + 0x14]
xor r9, r11
imul r9, rdx
movzx r10d, byte [r8 + 0x15]
mov r11, r10
not r11
and r11, r9
not r9d
and r9d, r10d
or r11, r9
imul r11, rdx
movzx r9d, byte [r8 + 0x16]
xor r9, r11
imul r9, rdx
movzx r10d, byte [r8 + 0x17]
mov r11, r10
not r11
and r11, r9
not r9d
and r9d, r10d
or r11, r9
imul r11, rdx
mov r14, qword [rsi + 0x30]
xor r14, r11
not r14
and r14, r11
mov r9, qword [rsi + 0x18]
lea r10, [r14 + r14]
lea rbx, [r14 + r14]
inc rbx
shl r14, 4
mov r14, qword [r9 + r14]
cmp r14, rdi
je 0x140370020
mov r11, qword [r9 + rbx*8]
mov r15, qword [r8 + 0x10]
cmp r15, qword [r11 + 0x10]
jne 0x140370140
mov r10, qword [r11]
cmp r10, r8
je 0x140370024
mov r11, qword [r8 + 8]
mov qword [r11], rax
mov r14, qword [rax + 8]
mov qword [r14], r10
mov r15, qword [r10 + 8]
mov qword [r15], r8
mov qword [r10 + 8], r14
mov qword [rax + 8], r11
mov qword [r8 + 8], r15
jmp 0x140370024
cmp r14, r11
je 0x140370178
mov r11, qword [r11 + 8]
cmp r15, qword [r11 + 0x10]
jne 0x140370140
mov r9, qword [r11]
mov r10, qword [r8 + 8]
mov qword [r10], rax
mov r11, qword [rax + 8]
mov qword [r11], r9
mov rbx, qword [r9 + 8]
mov qword [rbx], r8
mov qword [r9 + 8], r11
mov qword [rax + 8], r10
mov qword [r8 + 8], rbx
jmp 0x140370028
mov rbx, qword [r8 + 8]
mov qword [rbx], rax
mov r14, qword [rax + 8]
mov qword [r14], r11
mov r15, qword [r11 + 8]
mov qword [r15], r8
mov qword [r11 + 8], r14
mov qword [rax + 8], rbx
mov qword [r8 + 8], r15
mov qword [r9 + r10*8], r8
jmp 0x140370028
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
mov eax, 0xffff1add
add eax, dword [0x14051def4]
cdqe
add rax, qword [0x14051df00]
xor ecx, ecx
mov edx, 1
mov r8d, 0x10c6245b
mov r9d, 0x238d0cda
call qword [case.0x1401138cb.0]
mov rcx, rax
call fcn.1403bd734
int3
Function at 0x140371bf0
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x48
mov rax, qword [0x140521398]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov r14, qword [rdx + 8]
mov r15, qword [r14]
cmp r15, r14
je 0x140371df8
mov rsi, rcx
movabs rcx, 0xba96698066e4eeb1
movabs rax, 0xaf5a0bba95913de3
movabs r13, 0xa2c38b5dbaf60cf2
movabs rbp, 0x89d053a01a3915a7
movabs rdx, 0x16a3d6e2a035347
movabs rbx, 0x100000001b3
mov r12, rax
sub r12, rbp
sub r12, rax
add r12, rcx
add rbp, rdx
movabs rdi, 0xa2c38c5dbaf60ea4
jmp 0x140371caf
mov rax, qword [r15 + 0x10]
mov qword [rsp + 0x30], rax
mov eax, dword [r15 + 0x18]
mov dword [rsp + 0x38], eax
mov rcx, rsi
lea rdx, [rsp + 0x20]
lea r8, [rsp + 0x30]
call fcn.140371e20
mov r15, qword [r15]
cmp r15, r14
je 0x140371df8
movzx eax, byte [r15 + 0x10]
movabs rcx, 0xcbf29ce484222325
xor rax, rcx
imul rax, rbx
movzx ecx, byte [r15 + 0x11]
xor rcx, rax
imul rcx, rbx
movzx eax, byte [r15 + 0x12]
mov rdx, rax
not rdx
and rdx, rcx
not ecx
and ecx, eax
or rdx, rcx
imul rdx, rbx
movzx eax, byte [r15 + 0x13]
xor rax, rdx
imul rax, rbx
movzx ecx, byte [r15 + 0x14]
mov rdx, rcx
not rdx
and rdx, rax
not eax
and eax, ecx
or rdx, rax
imul rdx, rbx
movzx eax, byte [r15 + 0x15]
xor rax, rdx
imul rax, rbx
movzx ecx, byte [r15 + 0x16]
mov rdx, rcx
not rdx
xor rdx, rax
not eax
and eax, ecx
or rdx, rax
not rdx
or rdx, rax
mov rax, qword [0x14051dde0]
lea rcx, [r12 + rax]
movabs r8, 0xba96698066e4eeb1
sub rcx, r8
add rcx, rbp
movabs r8, 0x16a3d6e2a035347
sub rcx, r8
add rcx, rdi
imul rcx, rdx
movzx r8d, byte [r15 + 0x17]
mov rdx, r8
not rdx
and rdx, rcx
not ecx
and ecx, r8d
or rdx, rcx
imul rdx, rbx
mov rcx, qword [rsi + 0x30]
mov r8, rdx
xor r8, rcx
or rdx, rcx
not rdx
or rdx, r8
not rdx
mov r8, qword [rsi + 8]
mov r9, qword [rsi + 0x18]
lea ecx, [rax + r13]
shl rdx, cl
add rax, r13
or rax, rdx
mov rax, qword [r9 + rax*8]
cmp rax, r8
je 0x140371c80
mov rcx, qword [r15 + 0x10]
cmp rcx, qword [rax + 0x10]
je 0x140371de3
mov rdx, qword [r9 + rdx*8]
nop word cs:[rax + rax]
cmp rax, rdx
je 0x140371c80
mov rax, qword [rax + 8]
cmp rcx, qword [rax + 0x10]
jne 0x140371dd0
cmp rax, r8
je 0x140371c80
mov ecx, dword [r15 + 0x18]
add dword [rax + 0x18], ecx
jmp 0x140371ca3
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.1403bbdf0
nop
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x1403722c0
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x28
movabs rax, 0x800000000000001
cmp rdx, rax
jae 0x140372511
mov rsi, rcx
dec rdx
or rdx, 1
bsr rcx, rdx
xor ecx, 0x3f
neg cl
mov ebx, 1
shl rbx, cl
lea rax, [rsi + 0x18]
mov rdi, qword [rsi + 8]
mov rdx, qword [0x14051dde0]
movabs r8, 0xa2c38b5dbaf60cf3
xor r8, rdx
movabs r9, 0x22c38b5dbaf60cf3
and r9, rdx
lea rdx, [r8 + r9*2]
shl rdx, cl
mov rcx, rax
mov r8, rdi
call fcn.1403718e0
lea rax, [rbx - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rbx
mov rax, qword [rsi + 8]
mov rax, qword [rax]
cmp rax, rdi
je 0x140372503
movabs rcx, 0xcbf29ce484222325
movabs rdx, 0x100000001b3
movabs r8, 0xa2c38c5dbaf60ea4
jmp 0x140372391
mov qword [r10 + r11*8], r9
mov qword [r10 + r14*8], r9
cmp rax, rdi
je 0x140372503
mov r9, rax
mov rax, qword [rax]
movzx r10d, byte [r9 + 0x10]
xor r10, rcx
imul r10, rdx
movzx r11d, byte [r9 + 0x11]
xor r11, r10
mov r10, qword [0x14051dde0]
add r10, r8
imul r10, r11
movzx r11d, byte [r9 + 0x12]
mov rbx, r11
not rbx
and rbx, r10
not r10d
and r10d, r11d
or rbx, r10
imul rbx, rdx
movzx r10d, byte [r9 + 0x13]
mov r11, r10
not r11
and r11, rbx
not ebx
and ebx, r10d
or r11, rbx
imul r11, rdx
movzx r10d, byte [r9 + 0x14]
xor r10, r11
imul r10, rdx
movzx r11d, byte [r9 + 0x15]
xor r11, r10
imul r11, rdx
movzx r10d, byte [r9 + 0x16]
mov rbx, r10
not rbx
and rbx, r11
not r11d
and r11d, r10d
or rbx, r11
imul rbx, rdx
movzx r15d, byte [r9 + 0x17]
xor r15, rbx
imul r15, rdx
mov r10, qword [rsi + 0x18]
mov r11, qword [rsi + 0x30]
xor r15, r11
not r15
and r15, r11
lea r11, [r15 + r15]
lea r14, [r15 + r15]
inc r14
shl r15, 4
mov r15, qword [r10 + r15]
cmp r15, rdi
je 0x140372380
mov rbx, qword [r10 + r14*8]
mov r12, qword [r9 + 0x10]
cmp r12, qword [rbx + 0x10]
jne 0x1403724a0
mov r11, qword [rbx]
cmp r11, r9
je 0x140372384
mov rbx, qword [r9 + 8]
mov qword [rbx], rax
mov r15, qword [rax + 8]
mov qword [r15], r11
mov r12, qword [r11 + 8]
mov qword [r12], r9
mov qword [r11 + 8], r15
mov qword [rax + 8], rbx
mov qword [r9 + 8], r12
jmp 0x140372384
cmp r15, rbx
je 0x1403724d8
mov rbx, qword [rbx + 8]
cmp r12, qword [rbx + 0x10]
jne 0x1403724a0
mov r10, qword [rbx]
mov r11, qword [r9 + 8]
mov qword [r11], rax
mov rbx, qword [rax + 8]
mov qword [rbx], r10
mov r14, qword [r10 + 8]
mov qword [r14], r9
mov qword [r10 + 8], rbx
mov qword [rax + 8], r11
mov qword [r9 + 8], r14
jmp 0x140372388
mov r14, qword [r9 + 8]
mov qword [r14], rax
mov r15, qword [rax + 8]
mov qword [r15], rbx
mov r12, qword [rbx + 8]
mov qword [r12], r9
mov qword [rbx + 8], r15
mov qword [rax + 8], r14
mov qword [r9 + 8], r12
mov qword [r10 + r11*8], r9
jmp 0x140372388
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
xor ecx, ecx
mov edx, 1
mov r8d, 0x10c6245b
mov r9d, 0x238d0cda
call fcn.140378130
mov rcx, rax
call fcn.1403bd734
int3
Function at 0x140375b60
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x4937e5c0
add eax, dword [0x14051ddd8]
cmp ecx, eax
jne 0x140375bac
test edx, edx
je 0x140375bdc
movzx eax, byte [0x14051c921]
movzx ecx, byte [0x14051dddc]
add cl, 0x73
cmp al, cl
je 0x140375ba4
mov cl, 0xc9
nop word [rax + rax]
mov al, 0x25
lock cmpxchg byte [0x14051c921], cl
je 0x140375c5c
cmp al, 0xe4
jne 0x140375b90
lea rax, [0x14051c820]
ret
test edx, edx
je 0x140375c26
movzx eax, byte [0x14051c5a8]
cmp al, 0xf7
je 0x140375bd4
mov cl, 0x46
nop dword [rax]
mov al, 0x85
lock cmpxchg byte [0x14051c5a8], cl
je 0x140375ca9
cmp al, 0xf7
jne 0x140375bc0
lea rax, [0x14051c5a0]
ret
movzx eax, byte [0x14051c289]
movzx ecx, byte [0x14051dddc]
add cl, 0xa6
cmp al, cl
je 0x140375c1e
mov cl, 9
nop word cs:[rax + rax]
mov al, 0xd5
lock cmpxchg byte [0x14051c289], cl
je 0x140375d31
movzx edx, byte [0x14051dddc]
add dl, 0xa6
cmp al, dl
jne 0x140375c00
lea rax, [0x14051c270]
ret
cmp byte [0x14051cb4f], 0
je 0x140375c54
mov cl, 0xf9
nop word cs:[rax + rax]
mov al, 0xd2
lock cmpxchg byte [0x14051cb4f], cl
je 0x140375cef
test al, al
jne 0x140375c40
lea rax, [0x14051cb40]
ret
xor edx, edx
lea rax, [0x14051c820]
lea rcx, [0x140426840]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 0x101
jl 0x140375c70
movzx eax, byte [0x14051dddc]
add al, 0x73
xchg byte [0x14051c921], al
lea rax, [0x14051c820]
ret
xor edx, edx
lea rax, [0x14051c5a0]
lea rcx, [0x140426600]
nop dword [rax]
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, edx
xor r8d, 1
and edx, 1
lea edx, [r8 + rdx*2]
cmp edx, 8
jl 0x140375cc0
mov al, 0xf7
xchg byte [0x14051c5a8], al
lea rax, [0x14051c5a0]
ret
xor edx, edx
lea rax, [0x14051cb40]
lea rcx, [0x140426b40]
nop
movsxd rdx, edx
movzx r8d, byte [rdx + rcx]
add byte [rdx + rax], r8b
mov r8d, dword [0x14051ddd8]
add edx, r8d
add edx, 0x4937e5c1
cmp edx, 0xf
jl 0x140375d00
xor eax, eax
xchg byte [0x14051cb4f], al
lea rax, [0x14051cb40]
ret
xor eax, eax
lea rcx, [0x14051c270]
lea rdx, [0x1404262f0]
nop word cs:[rax + rax]
movzx r8d, byte [rax + rdx]
xor byte [rax + rcx], r8b
lea r8d, [rax + 1]
cmp r8d, 0x18
jg 0x140375d68
inc rax
jmp 0x140375d50
mov al, 0x17
xchg byte [0x14051c289], al
lea rax, [0x14051c270]
ret