joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400b1500
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x30
movzx eax, byte [0x140126688]
lea rdx, [0x140126689]
mov rbx, rcx
mov r9d, 0x811c9dc5
test eax, eax
je 0x1400b1546
nop word [rax + rax]
xor eax, r9d
lea rdx, [rdx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rdx - 1]
test eax, eax
jne 0x1400b1530
mov edx, ntohs
mov dword [rsp + 0x28], 0
lea r8, [0x140126688]
mov dword [rsp + 0x20], 0xfffffffa
lea ecx, [rdx + 0x15]
call fcn.140025e30
xorps xmm0, xmm0
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rdi, rax
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov r9, qword [rbx + 8]
mov r8, qword [rbx]
mov qword [rsp + 0x40], 0x20
call fcn.1400ba730
cmp qword [rsp + 0x40], 0x10
lea rdx, [0x140126688]
mov rcx, rdi
sete bl
xor r9d, r9d
lea r8d, [r9 - 6]
call fcn.140025f00
movzx eax, bl
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
Function at 0x1400b26d0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
xor r12d, r12d
mov byte [rsp + 0x60], r8b
mov qword [rcx], r12
mov r15, rcx
mov qword [rcx + 8], r12
mov r14, rdx
mov qword [rcx + 0x10], r12
mov r9d, r12d
movabs rcx, 0x3fffffffffffffff
mov qword [rsp + 0x68], rbp
movabs r13, 0x7fffffffffffffff
nop dword [rax]
mov rdi, qword [r14 + 8]
cmp r9, rdi
ja 0x1400b2769
lea rax, [r9 + 1]
mov rbx, r9
cmp rax, rdi
ja 0x1400b2769
mov rax, r12
cmp rax, 1
jae 0x1400b2795
mov rdx, qword [r14]
movzx ecx, byte [rsp + rax + 0x60]
add rdx, rax
cmp byte [rdx + rbx], cl
jne 0x1400b2753
inc rax
jmp 0x1400b2738
inc rbx
lea rax, [rbx + 1]
cmp rax, rdi
jbe 0x1400b2735
movabs rcx, 0x3fffffffffffffff
mov rbx, 0xffffffffffffffff
mov rsi, qword [r14]
sub rdi, r9
add rsi, r9
test rdi, rdi
je 0x1400b28e3
cmp byte [rsi], 0x20
jne 0x1400b27b0
inc rsi
sub rdi, 1
jne 0x1400b2782
jmp 0x1400b28e3
movabs rcx, 0x3fffffffffffffff
cmp rbx, 0xffffffffffffffff
je 0x1400b2770
mov rdi, rbx
jmp 0x1400b2770
cmp byte [rsi + rdi - 1], 0x20
jne 0x1400b27c2
sub rdi, 1
jne 0x1400b27b0
jmp 0x1400b28e3
mov r10, qword [r15 + 0x10]
mov rax, qword [r15 + 8]
mov r9, r10
and r9, r13
cmp rax, r9
jne 0x1400b28cf
lea r11, [r9 + 1]
cmp r11, r9
jbe 0x1400b28cf
mov rdx, r10
shr rdx, 1
and rdx, rcx
mov ecx, 1
lea rax, [r9 + rdx]
cmp rax, r11
cmovae rcx, rdx
lea rdx, [0x140128791]
add rcx, r9
mov r9d, 0x811c9dc5
mov rax, rcx
xor rax, r10
and rax, r13
xor rax, r10
mov qword [r15 + 0x10], rax
movzx eax, byte [str.._AV__basic_string_view_DU__char_traits_D_blz___blz__]
test eax, eax
je 0x1400b2846
nop word [rax + rax]
xor eax, r9d
lea rdx, [rdx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rdx - 1]
test eax, eax
jne 0x1400b2830
shl rcx, 4
lea r8, str.._AV__basic_string_view_DU__char_traits_D_blz___blz__
mov dword [rsp + 0x28], r12d
mov edx, ntohs
mov dword [rsp + 0x20], 0xfffffffa
call fcn.140025e30
mov rcx, qword [r15]
mov rbp, rax
mov rdx, rax
mov rax, qword [r15 + 8]
mov r8, rax
shl r8, 4
add r8, rcx
cmp rcx, r8
je 0x1400b28ab
test rdx, rdx
je 0x1400b2897
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
add rdx, 0x10
add rcx, 0x10
cmp rcx, r8
jne 0x1400b2884
mov rcx, qword [r15]
mov rax, qword [r15 + 8]
cmp qword [r15 + 0x10], r12
jl 0x1400b28c8
xor r9d, r9d
lea rdx, str.._AV__basic_string_view_DU__char_traits_D_blz___blz__
lea r8d, [r9 - 6]
call fcn.140025f00
mov rax, qword [r15 + 8]
and qword [r15 + 0x10], r13
mov qword [r15], rbp
shl rax, 4
add rax, qword [r15]
je 0x1400b28df
mov qword [rax], rsi
mov qword [rax + 8], rdi
inc qword [r15 + 8]
cmp rbx, 0xffffffffffffffff
je 0x1400b2901
lea r9, [rbx + 1]
movabs rcx, 0x3fffffffffffffff
cmp r9, 0xffffffffffffffff
jne 0x1400b2720
mov rbp, qword [rsp + 0x68]
mov rax, r15
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1400b2e60
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rdi
push r14
sub rsp, 0x48
movss xmm3, dword [rcx + 0x18]
mov r14, rcx
mov rcx, qword [rcx + 0x10]
mov r8, rdx
xorps xmm1, xmm1
test rcx, rcx
js 0x1400b2e86
cvtsi2ss xmm1, rcx
jmp 0x1400b2e9b
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
movss xmm2, dword [0x1400deb28]
movaps xmm0, xmm1
divss xmm0, xmm3
xor eax, eax
comiss xmm0, xmm2
jb 0x1400b2ec7
subss xmm0, xmm2
comiss xmm0, xmm2
jae 0x1400b2ec7
movabs rcx, 0x8000000000000000
mov rax, rcx
cvttss2si rdx, xmm0
xorps xmm0, xmm0
add rdx, rax
js 0x1400b2edb
cvtsi2ss xmm0, rdx
jmp 0x1400b2ef3
mov rax, rdx
mov rcx, rdx
shr rcx, 1
and eax, 1
or rcx, rax
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
mulss xmm0, xmm3
lea rax, [rdx + 1]
mov edi, 8
comiss xmm1, xmm0
cmovbe rax, rdx
cmp rax, r8
cmovb rax, r8
cmp rdi, rax
jae 0x1400b2f1b
add rdi, rdi
cmp rdi, rax
jb 0x1400b2f13
cmp rdi, qword [r14]
jne 0x1400b2f2b
cmp qword [r14 + 8], 0
jne 0x1400b3041
movzx eax, byte [str..PEAU__chained_hash_node_V__basic_string_view_DU__char_traits_D_blz___blz___blz__]
lea rcx, [0x140128721]
mov qword [rsp + 0x60], rbx
mov r9d, 0x811c9dc5
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x40], r15
test eax, eax
je 0x1400b2f68
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x1400b2f52
xor esi, esi
lea rbx, [rdi*8]
mov dword [rsp + 0x28], esi
lea r8, str..PEAU__chained_hash_node_V__basic_string_view_DU__char_traits_D_blz___blz___blz__
mov rcx, rbx
mov dword [rsp + 0x20], 0xfffffffa
lea edx, [rsi + 0xb]
call fcn.140025e30
mov r15, rax
test rdi, rdi
je 0x1400b2fa9
and rbx, 0xfffffffffffffff8
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.1400be550
mov rax, qword [r14 + 8]
mov rcx, rax
test rax, rax
je 0x1400b3018
cmp qword [r14], rsi
jbe 0x1400b3018
mov qword [rsp + 0x68], rbp
nop
mov rbx, qword [rax + rsi*8]
mov rcx, rax
test rbx, rbx
je 0x1400b3008
nop dword [rax]
mov r8, qword [rbx + 0x10]
lea rcx, [rsp + 0x30]
mov rdx, qword [rbx + 8]
xor r9d, r9d
call fcn.1400baf00
mov rcx, qword [rbx]
lea rdx, [rdi - 1]
and rdx, qword [rsp + 0x30]
mov rax, qword [r15 + rdx*8]
mov qword [rbx], rax
mov qword [r15 + rdx*8], rbx
mov rbx, rcx
test rcx, rcx
jne 0x1400b2fd0
mov rcx, qword [r14 + 8]
inc rsi
mov rax, rcx
cmp rsi, qword [r14]
jb 0x1400b2fc0
mov rbp, qword [rsp + 0x68]
xor r9d, r9d
lea rdx, str..PEAU__chained_hash_node_V__basic_string_view_DU__char_traits_D_blz___blz___blz__
lea r8d, [r9 - 6]
call fcn.140025f00
mov rsi, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x60]
mov qword [r14 + 8], r15
mov r15, qword [rsp + 0x40]
mov qword [r14], rdi
add rsp, 0x48
pop r14
pop rdi
ret
Function at 0x1400b4090
Capabilities:
Encode data using xor

Disassembly:
mov r10, r8
mov r8, rdx
mov r11, rcx
test r9d, r9d
jne 0x1400b40b1
cmp rcx, r10
je 0x1400b411f
sub r8, rcx
mov rdx, rcx
mov rcx, r10
jmp fcn.1400bddc0
mov eax, r9d
mov byte [rsp + 0x23], r9b
shr eax, 0x18
xor edx, edx
mov byte [rsp + 0x20], al
mov eax, r9d
shr eax, 0x10
mov byte [rsp + 0x21], al
mov eax, r9d
shr eax, 8
mov byte [rsp + 0x22], al
cmp rcx, r10
jne 0x1400b40fa
cmp r10, r8
je 0x1400b411f
mov rax, rdx
inc rdx
and eax, 3
movzx ecx, byte [rsp + rax + 0x20]
xor byte [r10], cl
inc r10
cmp r10, r8
jne 0x1400b40e0
ret
cmp rcx, r8
je 0x1400b411f
sub r10, rcx
mov rax, rdx
inc rdx
and eax, 3
movzx ecx, byte [rsp + rax + 0x20]
xor cl, byte [r11]
mov byte [r10 + r11], cl
inc r11
cmp r11, r8
jne 0x1400b4102
ret

Function at 0x1400b42b0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r15
sub rsp, 0x30
mov rax, qword [rdx]
xor ebp, ebp
mov rdi, r8
mov rsi, rcx
movabs r15, 0x7fffffffffffffff
cmp qword [rdx + 0x10], rbp
jl 0x1400b4315
and qword [rcx + 0x10], r15
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rdx + 0x10]
and rax, r15
mov qword [rcx + 0x10], rax
lea rax, [rdx + 0x18]
movabs rcx, 0x800000000000000f
mov qword [rdx], rax
mov qword [rdx + 0x10], rcx
mov qword [rdx + 8], rbp
mov byte [rax], bpl
jmp 0x1400b4321
mov r8, qword [rdx + 8]
mov rdx, rax
call fcn.1400027c0
mov qword [rsi + 0x28], rbp
mov qword [rsi + 0x30], rbp
mov qword [rsi + 0x38], rbp
mov rbx, qword [rdi]
cmp qword [rdi + 0x10], rbp
jl 0x1400b4367
mov qword [rsi + 0x28], rbx
mov rax, qword [rdi + 8]
mov qword [rsi + 0x30], rax
mov rax, qword [rdi + 0x10]
and rax, r15
mov qword [rsi + 0x38], rax
movabs rax, 0x8000000000000000
and qword [rdi + 0x10], rax
mov qword [rdi], rbp
mov qword [rdi + 8], rbp
jmp 0x1400b4419
movzx eax, byte [str.._AV__basic_string_view_DU__char_traits_D_blz___blz__]
lea rcx, [0x140128791]
mov qword [rsp + 0x50], r14
mov r9d, 0x811c9dc5
mov r14, qword [rdi + 8]
shl r14, 4
lea rdi, [r14 + rbx]
sar r14, 4
test eax, eax
je 0x1400b43b6
nop dword [rax]
nop dword [rax + rax]
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x1400b43a0
mov rcx, r14
mov dword [rsp + 0x28], ebp
shl rcx, 4
lea r8, str.._AV__basic_string_view_DU__char_traits_D_blz___blz__
mov edx, ntohs
mov dword [rsp + 0x20], 0xfffffffa
call fcn.140025e30
mov rcx, r14
mov qword [rsi + 0x28], rax
and rcx, r15
mov qword [rsi + 0x38], rcx
cmp rbx, rdi
je 0x1400b4410
nop dword [rax]
test rax, rax
je 0x1400b4403
mov rcx, qword [rbx]
mov qword [rax], rcx
mov rcx, qword [rbx + 8]
mov qword [rax + 8], rcx
add rax, 0x10
add rbx, 0x10
cmp rbx, rdi
jne 0x1400b43f0
mov qword [rsi + 0x30], r14
mov r14, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x58]
mov rax, rsi
mov rbp, qword [rsp + 0x60]
add rsp, 0x30
pop r15
pop rdi
pop rsi
ret
Function at 0x1400b4430
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x30
mov r9, qword [rcx + 0x10]
mov rdi, rdx
mov rax, qword [rcx + 8]
mov r8, r9
mov qword [rsp + 0x40], rbp
mov rbx, rcx
movabs rbp, 0x7fffffffffffffff
and r8, rbp
cmp rax, r8
jne 0x1400b4581
lea rdx, [r8 + 1]
cmp rdx, r8
jbe 0x1400b4581
mov rcx, r9
mov qword [rsp + 0x48], rsi
shr rcx, 1
movabs rax, 0x3fffffffffffffff
and rcx, rax
mov r10d, 1
lea rax, [r8 + rcx]
cmp rax, rdx
lea rdx, [0x140128791]
cmovae r10, rcx
add r10, r8
mov rax, r10
xor rax, r9
and rax, rbp
xor rax, r9
mov r9d, 0x811c9dc5
mov qword [rbx + 0x10], rax
movzx eax, byte [str.._AV__basic_string_view_DU__char_traits_D_blz___blz__]
test eax, eax
je 0x1400b44e6
nop word [rax + rax]
xor eax, r9d
lea rdx, [rdx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rdx - 1]
test eax, eax
jne 0x1400b44d0
shl r10, 4
lea r8, str.._AV__basic_string_view_DU__char_traits_D_blz___blz__
mov rcx, r10
mov dword [rsp + 0x28], 0
mov edx, ntohs
mov dword [rsp + 0x20], 0xfffffffa
call fcn.140025e30
mov rcx, qword [rbx]
mov rsi, rax
mov r9, rax
mov rax, qword [rbx + 8]
mov r10, rax
shl r10, 4
add r10, rcx
cmp rcx, r10
je 0x1400b4557
nop word [rax + rax]
test r9, r9
je 0x1400b4543
mov rax, qword [rcx]
mov qword [r9], rax
mov rax, qword [rcx + 8]
mov qword [r9 + 8], rax
add r9, 0x10
add rcx, 0x10
cmp rcx, r10
jne 0x1400b4530
mov rcx, qword [rbx]
mov rax, qword [rbx + 8]
cmp qword [rbx + 0x10], 0
jl 0x1400b4575
xor r9d, r9d
lea rdx, str.._AV__basic_string_view_DU__char_traits_D_blz___blz__
lea r8d, [r9 - 6]
call fcn.140025f00
mov rax, qword [rbx + 8]
and qword [rbx + 0x10], rbp
mov qword [rbx], rsi
mov rsi, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
shl rax, 4
add rax, qword [rbx]
je 0x1400b459d
mov rcx, qword [rdi]
mov qword [rax], rcx
mov rcx, qword [rdi + 8]
mov qword [rax + 8], rcx
inc qword [rbx + 8]
mov rbx, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
Function at 0x1400b45b0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x30
xor r8d, r8d
mov rdi, rcx
mov qword [rcx], r8
mov r9d, 0x811c9dc5
mov qword [rcx + 8], r8
mov qword [rcx + 0x10], r8
lea rcx, [0x140128791]
mov rbp, qword [rdx + 8]
mov rbx, qword [rdx]
movzx eax, byte [str.._AV__basic_string_view_DU__char_traits_D_blz___blz__]
shl rbp, 4
lea rsi, [rbx + rbp]
sar rbp, 4
test eax, eax
je 0x1400b4616
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x1400b4600
mov dword [rsp + 0x28], r8d
mov rcx, rbp
shl rcx, 4
lea r8, str.._AV__basic_string_view_DU__char_traits_D_blz___blz__
mov edx, ntohs
mov dword [rsp + 0x20], 0xfffffffa
call fcn.140025e30
mov rcx, rbp
mov qword [rdi], rax
movabs rdx, 0x7fffffffffffffff
and rcx, rdx
mov qword [rdi + 0x10], rcx
cmp rbx, rsi
je 0x1400b4677
test rax, rax
je 0x1400b466a
mov rcx, qword [rbx]
mov qword [rax], rcx
mov rcx, qword [rbx + 8]
mov qword [rax + 8], rcx
add rax, 0x10
add rbx, 0x10
cmp rbx, rsi
jne 0x1400b4657
mov rbx, qword [rsp + 0x40]
mov rax, rdi
mov rsi, qword [rsp + 0x50]
mov qword [rdi + 8], rbp
mov rbp, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
Function at 0x1400b4d60
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rdi
push r14
sub rsp, 0x48
movss xmm3, dword [rcx + 0x18]
mov r14, rcx
mov rcx, qword [rcx + 0x10]
mov r8, rdx
xorps xmm1, xmm1
test rcx, rcx
js 0x1400b4d86
cvtsi2ss xmm1, rcx
jmp 0x1400b4d9b
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
movss xmm2, dword [0x1400deb28]
movaps xmm0, xmm1
divss xmm0, xmm3
xor eax, eax
comiss xmm0, xmm2
jb 0x1400b4dc7
subss xmm0, xmm2
comiss xmm0, xmm2
jae 0x1400b4dc7
movabs rcx, 0x8000000000000000
mov rax, rcx
cvttss2si rdx, xmm0
xorps xmm0, xmm0
add rdx, rax
js 0x1400b4ddb
cvtsi2ss xmm0, rdx
jmp 0x1400b4df3
mov rax, rdx
mov rcx, rdx
shr rcx, 1
and eax, 1
or rcx, rax
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
mulss xmm0, xmm3
lea rax, [rdx + 1]
mov edi, 8
comiss xmm1, xmm0
cmovbe rax, rdx
cmp rax, r8
cmovb rax, r8
cmp rdi, rax
jae 0x1400b4e1b
add rdi, rdi
cmp rdi, rax
jb 0x1400b4e13
cmp rdi, qword [r14]
jne 0x1400b4e2b
cmp qword [r14 + 8], 0
jne 0x1400b4f41
movzx eax, byte [str..PEAU__chained_hash_node_U__pair___CBV__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz__V__vector_V__basic_string_view_DU__char_traits_D_blz___blz__V__allocator_V__basic_string_view_DU__char_traits_D_blz___blz___2__2__blz___blz__]
lea rcx, [0x1401285a1]
mov qword [rsp + 0x60], rbx
mov r9d, 0x811c9dc5
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x40], r15
test eax, eax
je 0x1400b4e68
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x1400b4e52
xor esi, esi
lea rbx, [rdi*8]
mov dword [rsp + 0x28], esi
lea r8, str..PEAU__chained_hash_node_U__pair___CBV__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz__V__vector_V__basic_string_view_DU__char_traits_D_blz___blz__V__allocator_V__basic_string_view_DU__char_traits_D_blz___blz___2__2__blz___blz__
mov rcx, rbx
mov dword [rsp + 0x20], 0xfffffffa
lea edx, [rsi + 0xb]
call fcn.140025e30
mov r15, rax
test rdi, rdi
je 0x1400b4ea9
and rbx, 0xfffffffffffffff8
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.1400be550
mov rax, qword [r14 + 8]
mov rcx, rax
test rax, rax
je 0x1400b4f18
cmp qword [r14], rsi
jbe 0x1400b4f18
mov qword [rsp + 0x68], rbp
nop
mov rbx, qword [rax + rsi*8]
mov rcx, rax
test rbx, rbx
je 0x1400b4f08
nop dword [rax]
mov r8, qword [rbx + 0x10]
lea rcx, [rsp + 0x30]
mov rdx, qword [rbx + 8]
xor r9d, r9d
call fcn.1400baf00
mov rcx, qword [rbx]
lea rdx, [rdi - 1]
and rdx, qword [rsp + 0x30]
mov rax, qword [r15 + rdx*8]
mov qword [rbx], rax
mov qword [r15 + rdx*8], rbx
mov rbx, rcx
test rcx, rcx
jne 0x1400b4ed0
mov rcx, qword [r14 + 8]
inc rsi
mov rax, rcx
cmp rsi, qword [r14]
jb 0x1400b4ec0
mov rbp, qword [rsp + 0x68]
xor r9d, r9d
lea rdx, str..PEAU__chained_hash_node_U__pair___CBV__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz__V__vector_V__basic_string_view_DU__char_traits_D_blz___blz__V__allocator_V__basic_string_view_DU__char_traits_D_blz___blz___2__2__blz___blz__
lea r8d, [r9 - 6]
call fcn.140025f00
mov rsi, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x60]
mov qword [r14 + 8], r15
mov r15, qword [rsp + 0x40]
mov qword [r14], rdi
add rsp, 0x48
pop r14
pop rdi
ret
Function at 0x1400b6e20
Capabilities:
Encode data using xor
Hash data using murmur3

Disassembly:
mov r9, rdx
shr r9, 2
lea r10, [rcx + r9*4]
neg r9
je 0x1400b6e59
imul eax, dword [r10 + r9*4], 0xcc9e2d51
rol eax, 0xf
imul ecx, eax, 0x1b873593
xor r8d, ecx
rol r8d, 0xd
add r8d, 0xfaddaf14
lea r8d, [r8 + r8*4]
add r9, 1
jne 0x1400b6e30
mov rax, rdx
xor ecx, ecx
and eax, 3
sub rax, 1
je 0x1400b6e85
sub rax, 1
je 0x1400b6e7b
cmp rax, 1
jne 0x1400b6e9d
movzx ecx, byte [r10 + 2]
shl ecx, 0x10
movzx eax, byte [r10 + 1]
shl eax, 8
xor ecx, eax
movzx eax, byte [r10]
xor eax, ecx
imul ecx, eax, 0xcc9e2d51
rol ecx, 0xf
imul eax, ecx, 0x1b873593
xor r8d, eax
xor edx, r8d
mov eax, edx
shr eax, 0x10
xor eax, edx
imul ecx, eax, 0x85ebca6b
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0xc2b2ae35
mov eax, ecx
shr eax, 0x10
xor eax, ecx
ret

Function at 0x1400b8100
Capabilities:
Get common file path

Disassembly:
push rbp
sub rsp, 0x40
lea rbp, [rsp + 0x40]
mov qword [rbp + 0x10], rbx
lea rax, [rdx + rdx]
lea r8, [rax + 0xf]
mov qword [rbp + 0x18], rsi
mov qword [rbp + 0x20], rdi
mov rbx, rdx
mov rdi, rcx
cmp r8, rax
ja 0x1400b8134
movabs r8, 0xffffffffffffff0
and r8, 0xfffffffffffffff0
mov rax, r8
call fcn.1400bd490
sub rsp, r8
mov ecx, ebx
lea rsi, [rsp + 0x40]
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
test eax, eax
jne 0x1400b816e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rbx, qword [rbp + 0x10]
mov rsi, qword [rbp + 0x18]
mov rdi, qword [rbp + 0x20]
mov rsp, rbp
pop rbp
ret
mov eax, eax
cmp rax, rbx
ja 0x1400b81cc
test rbx, rbx
je 0x1400b81cc
xor eax, eax
mov r8, rsi
mov qword [rsp + 0x38], rax
xor edx, edx
mov qword [rsp + 0x30], rax
mov ecx, 0xfde9
mov dword [rsp + 0x28], ebx
lea r9d, [rax - 1]
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x1400b81cc
mov r8, rdi
mov rdx, rbx
mov rcx, rdi
call fcn.1400b7830
mov eax, dword [0x1400ed134]
mov rbx, qword [rbp + 0x10]
mov rsi, qword [rbp + 0x18]
mov rdi, qword [rbp + 0x20]
mov rsp, rbp
pop rbp
ret
mov ecx, 1
call fcn.1400bb690
mov rbx, qword [rbp + 0x10]
mov rsi, qword [rbp + 0x18]
mov rdi, qword [rbp + 0x20]
mov rsp, rbp
pop rbp
ret

Function at 0x1400b86d0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rbp
sub rsp, 0x30
lea rbp, [rsp + 0x30]
mov qword [rbp + 0x10], rbx
mov r8, rcx
mov rax, 0xffffffffffffffff
nop dword [rax]
cmp byte [rcx + rax + 1], 0
lea rax, [rax + 1]
jne 0x1400b86f0
lea rax, [rax*2 + 2]
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x1400b8716
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1400bd490
sub rsp, rcx
xor edx, edx
mov ecx, 0xfde9
lea rbx, [rsp + 0x30]
mov dword [rsp + 0x28], 0x3fffffff
lea r9d, [rdx - 1]
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400b8765
test al, 0x10
jne 0x1400b8765
mov al, 1
mov rbx, qword [rbp + 0x10]
mov rsp, rbp
pop rbp
ret
mov rbx, qword [rbp + 0x10]
xor al, al
mov rsp, rbp
pop rbp
ret
Function at 0x1400ba710
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 1
add rsp, 0x28
jmp qword [sym.imp.KERNEL32.dll_TerminateProcess]

Function at 0x1400ba730
Capabilities:
Decode data using base64 via dword translation table

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
mov r11, rdx
mov rbx, rcx
mov r10, rcx
test r9b, 3
jne 0x1400ba85f
lea rax, [r9 + r9*2]
shr rax, 2
cmp qword [rdx], rax
jb 0x1400ba85f
cmp r9, 4
jb 0x1400ba84c
lea rdi, [0x1400ed450]
nop
movzx eax, byte [r8]
movzx ecx, byte [rax + rdi]
cmp cl, 0xff
je 0x1400ba85f
movzx eax, byte [r8 + 1]
movzx edx, byte [rax + rdi]
cmp dl, 0xff
je 0x1400ba85f
mov eax, ecx
movzx ecx, byte [r8 + 2]
shl eax, 6
or eax, edx
shl eax, 0xc
cmp cl, 0x3d
je 0x1400ba83c
movzx edx, byte [rcx + rdi]
cmp dl, 0xff
je 0x1400ba85f
mov ecx, edx
shl ecx, 6
or eax, ecx
movzx ecx, byte [r8 + 3]
cmp cl, 0x3d
je 0x1400ba816
movzx edx, byte [rcx + rdi]
cmp dl, 0xff
je 0x1400ba85f
or eax, edx
add r8, 4
mov ecx, eax
sub r9, 4
shr ecx, 0x10
mov byte [r10], cl
mov ecx, eax
shr ecx, 8
mov byte [r10 + 1], cl
mov byte [r10 + 2], al
add r10, 3
cmp r9, 4
jae 0x1400ba770
sub r10, rbx
mov al, 1
mov qword [r11], r10
mov rbx, qword [rsp + 8]
mov rdi, qword [rsp + 0x10]
ret
mov ecx, eax
shr eax, 8
shr ecx, 0x10
mov byte [r10], cl
mov byte [r10 + 1], al
add r10, 2
sub r10, rbx
mov al, 1
mov qword [r11], r10
mov rbx, qword [rsp + 8]
mov rdi, qword [rsp + 0x10]
ret
cmp byte [r8 + 3], 0x3d
jne 0x1400ba85f
shr eax, 0x10
mov byte [r10], al
inc r10
sub r10, rbx
mov al, 1
mov qword [r11], r10
mov rbx, qword [rsp + 8]
mov rdi, qword [rsp + 0x10]
ret
mov rbx, qword [rsp + 8]
xor al, al
mov rdi, qword [rsp + 0x10]
ret
Function at 0x1400ba9c0
Capabilities:
Encode data using base64

Disassembly:
push rbx
mov rbx, rdx
lea r10, [r9 + 2]
mov r11, r8
movabs r8, 0xaaaaaaaaaaaaaaab
mov rax, r8
mul r10
shr rdx, 1
shl rdx, 2
cmp qword [rbx], rdx
jae 0x1400ba9ec
xor al, al
pop rbx
ret
mov qword [rsp + 0x10], rdi
lea rdi, str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
mov r10, rcx
cmp r9, 3
jb 0x1400baa85
mov rax, r8
mul r9
shr rdx, 1
imul rax, rdx, 0xfffffffffffffffd
add r9, rax
nop word [rax + rax]
movzx eax, byte [r11 + 1]
movzx r8d, byte [r11]
shl r8, 8
or r8, rax
movzx eax, byte [r11 + 2]
shl r8, 8
add r11, 3
or r8, rax
mov rax, r8
shr rax, 0x12
movzx eax, byte [rax + rdi]
mov byte [rcx], al
mov rax, r8
shr rax, 0xc
and eax, 0x3f
movzx eax, byte [rax + rdi]
mov byte [rcx + 1], al
mov rax, r8
shr rax, 6
and r8d, 0x3f
and eax, 0x3f
movzx eax, byte [rax + rdi]
mov byte [rcx + 2], al
movzx eax, byte [r8 + rdi]
mov byte [rcx + 3], al
add rcx, 4
sub rdx, 1
jne 0x1400baa20
sub r9, 1
je 0x1400baaee
cmp r9, 1
jne 0x1400bab1b
movzx eax, byte [r11 + 1]
movzx edx, byte [r11]
shl rdx, 8
or rdx, rax
shl rdx, 8
mov rax, rdx
shr rax, 0x12
movzx eax, byte [rax + rdi]
mov byte [rcx], al
mov rax, rdx
shr rax, 0xc
and eax, 0x3f
shr rdx, 6
mov byte [rcx + 3], 0x3d
and edx, 0x3f
movzx eax, byte [rax + rdi]
mov byte [rcx + 1], al
movzx eax, byte [rdx + rdi]
mov rdi, qword [rsp + 0x10]
mov byte [rcx + 2], al
add rcx, 4
sub rcx, r10
movzx eax, r9b
mov qword [rbx], rcx
pop rbx
ret
movzx edx, byte [r11]
shl rdx, 0x10
mov rax, rdx
shr rdx, 0xc
shr rax, 0x12
and edx, 0x3f
movzx eax, byte [rax + rdi]
mov byte [rcx], al
movzx eax, byte [rdx + rdi]
mov byte [rcx + 1], al
mov word [rcx + 2], 0x3d3d
add rcx, 4
mov rdi, qword [rsp + 0x10]
sub rcx, r10
mov qword [rbx], rcx
mov al, 1
pop rbx
ret
Function at 0x1400baf00
Capabilities:
Encode data using xor
Hash data using murmur3

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push r14
sub rsp, 0x20
mov eax, r9d
mov rbx, r8
shr rbx, 4
mov rsi, r8
mov qword [rsp + 0x48], rax
mov rbp, rdx
mov qword [rsp + 0x40], rax
mov r14, rcx
test rbx, rbx
je 0x1400bafb5
mov r10, qword [0x1401235d0]
mov r8d, eax
mov r11, qword [0x1401235d8]
mov r9, rbx
mov qword [rsp + 0x50], rdi
mov edi, eax
nop
mov rcx, r10
imul rcx, qword [rdx]
lea rdx, [rdx + 0x10]
rol rcx, 0x1f
imul rcx, r11
xor rcx, rax
rol rcx, 0x1b
add rcx, r8
lea rax, [rcx*4 + 0x52dce729]
add rax, rcx
mov rcx, r11
imul rcx, qword [rdx - 8]
ror rcx, 0x1f
imul rcx, r10
xor rcx, rdi
rol rcx, 0x1f
add rcx, 0xb41def1
add rcx, rax
lea r8, [rcx + rcx*4]
mov rdi, r8
sub r9, 1
jne 0x1400baf50
mov rdi, qword [rsp + 0x50]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r8
add rbx, rbx
lea rdx, [rsp + 0x40]
mov r9, rsi
lea rcx, [rsp + 0x48]
lea r8, [rbx*8]
add r8, rbp
call fcn.1400badc0
mov rcx, qword [rsp + 0x48]
movabs r10, 0xff51afd7ed558ccd
mov rdx, qword [rsp + 0x40]
xor rcx, rsi
mov rbx, qword [rsp + 0x58]
xor rdx, rsi
add rcx, rdx
movabs r9, 0xc4ceb9fe1a85ec53
mov rax, rcx
shr rax, 0x21
xor rax, rcx
imul rax, r10
mov r8, rax
shr r8, 0x21
xor r8, rax
lea rax, [rcx + rdx]
mov rcx, rax
shr rcx, 0x21
xor rcx, rax
imul rcx, r10
imul r8, r9
mov rax, rcx
shr rax, 0x21
xor rax, rcx
imul rax, r9
mov rcx, rax
shr rcx, 0x21
xor rcx, rax
mov rax, r8
shr rax, 0x21
xor rax, r8
add rax, rcx
mov qword [r14], rax
add rax, rcx
mov qword [r14 + 8], rax
add rsp, 0x20
pop r14
pop rsi
pop rbp
ret