joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14006cf10
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0xa0
mov rax, qword [0x1401d2ee8]
mov rdi, rdx
mov rsi, rcx
cmp rax, 2
je 0x14006cf6d
lea rax, [0x1400e3dc0]
mov byte [rsp + 0x50], 0
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
lea rax, [0x14006cbf0]
lea rcx, [0x1401d2ee8]
mov qword [rsp + 0x48], rax
call fcn.14004ea00
lea rcx, [rsp + 0x40]
call fcn.14004cea0
mov rbx, qword [0x1401d2ee0]
lea rcx, [rbx + 0x28]
call fcn.140002a40
cmp qword [rbx + 0x38], 0
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rdi
jne 0x14006cf9b
mov rdx, qword [rbx + 0x30]
lea rcx, [rbx + 0x30]
call fcn.14006d7e0
mov rax, qword [rbx + 0x38]
mov rcx, qword [rbx + 0x30]
dec rcx
and rcx, rsi
lea rdi, [rax + rcx*8]
mov rax, qword [rax + rcx*8]
test rax, rax
je 0x14006cfc7
cmp rsi, qword [rax + 8]
je 0x14006cfc7
mov rdi, rax
mov rax, qword [rax]
test rax, rax
jne 0x14006cfb6
cmp qword [rdi], 0
je 0x14006cfd4
xor al, al
jmp 0x14006d0b2
movzx eax, byte [str.._AU__chained_hash_node_U__pair_QEBVDescriptor_protobuf_google__PEBVMessage_23__blz___blz__]
lea rcx, [0x140127ae1]
mov r9d, 0x811c9dc5
test eax, eax
je 0x14006d006
nop dword [rax]
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006cff0
mov edx, ntohs
mov dword [rsp + 0x28], 0
lea r8, str.._AU__chained_hash_node_U__pair_QEBVDescriptor_protobuf_google__PEBVMessage_23__blz___blz__
mov dword [rsp + 0x20], 0xfffffffa
lea ecx, [rdx + 0xd]
call fcn.140025e30
test rax, rax
je 0x14006d03f
movups xmm0, xmmword [rsp + 0x30]
mov qword [rax], 0
movups xmmword [rax + 8], xmm0
mov qword [rdi], rax
xorps xmm0, xmm0
inc qword [rbx + 0x40]
mov rcx, qword [rbx + 0x40]
mov r8, qword [rbx + 0x30]
test rcx, rcx
js 0x14006d05d
cvtsi2ss xmm0, rcx
jmp 0x14006d072
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
xorps xmm1, xmm1
test r8, r8
js 0x14006d081
cvtsi2ss xmm1, r8
jmp 0x14006d099
mov rax, r8
mov rdx, r8
shr rdx, 1
and eax, 1
or rdx, rax
cvtsi2ss xmm1, rdx
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [rbx + 0x48]
jbe 0x14006d0b0
lea rdx, [r8 + r8]
lea rcx, [rbx + 0x30]
call fcn.14006d7e0
mov al, 1
test al, al
jne 0x14006d107
mov r9d, 0x127
lea r8, str.D:BuildServerDworkpackage_cacheprotobuf_blz2.6.1.7_srcgoogleprotobufmessage.cc
mov edx, 2
lea rcx, [rsp + 0x58]
call fcn.14004ce00
lea rdx, str.Type_is_already_registered:
mov rcx, rax
call fcn.14004d0d0
mov rdx, qword [rsi + 8]
mov rcx, rax
call fcn.14004cfc0
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.14004cf00
lea rcx, [rsp + 0x58]
call fcn.14004ceb0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret
Function at 0x14006d3d0
Capabilities:
Encode data using xor
Encrypt data using rc4 prga
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x30
mov r9, qword [r8]
xor ebx, ebx
mov r12, r8
mov r14, rdx
mov rsi, rcx
movzx eax, byte [r9]
test al, al
je 0x14006d427
nop dword [rax]
nop dword [rax + rax]
movsx rax, al
lea rbx, [rbx + rbx*4]
add rbx, rax
lea r9, [r9 + 1]
movzx eax, byte [r9]
test al, al
jne 0x14006d410
cmp qword [rcx + 8], 0
jne 0x14006d436
mov rdx, qword [rcx]
call fcn.14006d5e0
mov r11, qword [rsi]
mov rdi, qword [rsi + 8]
lea rax, [r11 - 1]
and rax, rbx
mov r9, qword [rdi + rax*8]
lea rbp, [rdi + rax*8]
mov r15, rbp
test r9, r9
je 0x14006d492
mov r10, qword [r12]
nop dword [rax + rax]
mov r8, qword [r9 + 8]
mov rax, r10
sub r8, r10
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x14006d483
inc rax
test ecx, ecx
jne 0x14006d470
test edx, edx
je 0x14006d492
mov r15, r9
mov r9, qword [r9]
test r9, r9
jne 0x14006d460
mov rcx, qword [r15]
test rcx, rcx
je 0x14006d4b3
mov qword [r14], rcx
lea rax, [rdi + r11*8]
mov qword [r14 + 8], rbp
mov qword [r14 + 0x10], rax
mov byte [r14 + 0x18], 0
jmp 0x14006d5ba
movzx eax, byte [str.._AU__chained_hash_node_U__pair_QEBDP6AXAEBV__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz___Z_blz___blz__]
lea rcx, [0x1401279c1]
mov r9d, 0x811c9dc5
test eax, eax
je 0x14006d4e6
nop dword [rax + rax]
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006d4d0
mov edx, ntohs
mov dword [rsp + 0x28], 0
lea r8, str.._AU__chained_hash_node_U__pair_QEBDP6AXAEBV__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz___Z_blz___blz__
mov dword [rsp + 0x20], 0xfffffffa
lea ecx, [rdx + 0xd]
call fcn.140025e30
mov rdi, rax
test rax, rax
je 0x14006d522
mov qword [rax], 0
movups xmm0, xmmword [r12]
movups xmmword [rax + 8], xmm0
mov qword [r15], rdi
xorps xmm0, xmm0
inc qword [rsi + 0x10]
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi]
test rcx, rcx
js 0x14006d53f
cvtsi2ss xmm0, rcx
jmp 0x14006d554
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
xorps xmm1, xmm1
test rdx, rdx
js 0x14006d563
cvtsi2ss xmm1, rdx
jmp 0x14006d57b
mov rax, rdx
mov rcx, rdx
shr rcx, 1
and eax, 1
or rcx, rax
cvtsi2ss xmm1, rcx
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [rsi + 0x18]
jbe 0x14006d5a2
add rdx, rdx
mov rcx, rsi
call fcn.14006d5e0
mov rdx, qword [rsi]
mov rax, qword [rsi + 8]
lea rcx, [rdx - 1]
and rcx, rbx
lea rbp, [rax + rcx*8]
mov rax, qword [rsi + 8]
mov qword [r14], rdi
mov qword [r14 + 8], rbp
lea rcx, [rax + rdx*8]
mov qword [r14 + 0x10], rcx
mov byte [r14 + 0x18], 1
mov rbx, qword [rsp + 0x50]
mov rax, r14
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x30
pop r15
pop r14
pop r12
ret
Function at 0x14006d5e0
Capabilities:
Encode data using xor
Encrypt data using rc4 prga
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x30
mov r8, qword [rcx + 0x10]
mov r9, rdx
movss xmm3, dword [rcx + 0x18]
mov r14, rcx
xorps xmm1, xmm1
test r8, r8
js 0x14006d609
cvtsi2ss xmm1, r8
jmp 0x14006d61f
mov rax, r8
and r8d, 1
shr rax, 1
or rax, r8
cvtsi2ss xmm1, rax
addss xmm1, xmm1
movss xmm2, dword [0x1400deb28]
movaps xmm0, xmm1
divss xmm0, xmm3
xor eax, eax
comiss xmm0, xmm2
jb 0x14006d64b
subss xmm0, xmm2
comiss xmm0, xmm2
jae 0x14006d64b
movabs rcx, 0x8000000000000000
mov rax, rcx
cvttss2si rdx, xmm0
xorps xmm0, xmm0
add rdx, rax
js 0x14006d65f
cvtsi2ss xmm0, rdx
jmp 0x14006d677
mov rax, rdx
mov rcx, rdx
shr rcx, 1
and eax, 1
or rcx, rax
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
mulss xmm0, xmm3
lea rax, [rdx + 1]
mov edi, 8
comiss xmm1, xmm0
cmovbe rax, rdx
cmp rax, r9
cmovb rax, r9
cmp rdi, rax
jae 0x14006d69f
add rdi, rdi
cmp rdi, rax
jb 0x14006d697
cmp rdi, qword [r14]
jne 0x14006d6af
cmp qword [r14 + 8], 0
jne 0x14006d7d1
movzx eax, byte [str..PEAU__chained_hash_node_U__pair_QEBDP6AXAEBV__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz___Z_blz___blz__]
lea rcx, [0x140127a51]
mov qword [rsp + 0x40], rbx
mov r9d, 0x811c9dc5
mov qword [rsp + 0x48], rsi
test eax, eax
je 0x14006d6e7
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006d6d1
lea rbx, [rdi*8]
mov dword [rsp + 0x28], 0
mov rcx, rbx
mov dword [rsp + 0x20], 0xfffffffa
lea r8, str..PEAU__chained_hash_node_U__pair_QEBDP6AXAEBV__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz___Z_blz___blz__
mov edx, ntohs
call fcn.140025e30
mov rsi, rax
test rdi, rdi
je 0x14006d72c
and rbx, 0xfffffffffffffff8
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.1400be550
mov rax, qword [r14 + 8]
mov rbx, qword [rsp + 0x40]
mov rcx, rax
test rax, rax
je 0x14006d7b2
xor r9d, r9d
cmp qword [r14], r9
jbe 0x14006d7b2
nop word [rax + rax]
mov r8, qword [rax + r9*8]
mov rcx, rax
test r8, r8
je 0x14006d7a7
nop dword [rax]
mov rdx, qword [r8 + 8]
xor ecx, ecx
movzx eax, byte [rdx]
test al, al
je 0x14006d786
nop dword [rax]
movsx rax, al
lea rcx, [rcx + rcx*4]
add rcx, rax
lea rdx, [rdx + 1]
movzx eax, byte [rdx]
test al, al
jne 0x14006d770
lea rdx, [rdi - 1]
and rdx, rcx
mov rcx, qword [r8]
mov rax, qword [rsi + rdx*8]
mov qword [r8], rax
mov qword [rsi + rdx*8], r8
mov r8, rcx
test rcx, rcx
jne 0x14006d760
mov rcx, qword [r14 + 8]
inc r9
mov rax, rcx
cmp r9, qword [r14]
jb 0x14006d750
xor r9d, r9d
lea rdx, str..PEAU__chained_hash_node_U__pair_QEBDP6AXAEBV__basic_string_DU__char_traits_D_blz__V__allocator_D_2__blz___Z_blz___blz__
lea r8d, [r9 - 6]
call fcn.140025f00
mov qword [r14 + 8], rsi
mov rsi, qword [rsp + 0x48]
mov qword [r14], rdi
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop r14
ret
Function at 0x14006d7e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push r14
sub rsp, 0x30
movss xmm3, dword [rcx + 0x18]
mov r14, rcx
mov rcx, qword [rcx + 0x10]
mov r8, rdx
xorps xmm1, xmm1
test rcx, rcx
js 0x14006d809
cvtsi2ss xmm1, rcx
jmp 0x14006d81e
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
movss xmm2, dword [0x1400deb28]
movaps xmm0, xmm1
divss xmm0, xmm3
xor eax, eax
comiss xmm0, xmm2
jb 0x14006d84a
subss xmm0, xmm2
comiss xmm0, xmm2
jae 0x14006d84a
movabs rcx, 0x8000000000000000
mov rax, rcx
cvttss2si rdx, xmm0
xorps xmm0, xmm0
add rdx, rax
js 0x14006d85e
cvtsi2ss xmm0, rdx
jmp 0x14006d876
mov rax, rdx
mov rcx, rdx
shr rcx, 1
and eax, 1
or rcx, rax
cvtsi2ss xmm0, rcx
addss xmm0, xmm0
mulss xmm0, xmm3
lea rax, [rdx + 1]
mov ebx, 8
comiss xmm1, xmm0
cmovbe rax, rdx
cmp rax, r8
cmovb rax, r8
cmp rbx, rax
jae 0x14006d89e
add rbx, rbx
cmp rbx, rax
jb 0x14006d896
cmp rbx, qword [r14]
jne 0x14006d8ae
cmp qword [r14 + 8], 0
jne 0x14006d9b0
movzx eax, byte [str..PEAU__chained_hash_node_U__pair_QEBVDescriptor_protobuf_google__PEBVMessage_23__blz___blz__]
lea rcx, [0x140127b51]
mov qword [rsp + 0x40], rbp
mov r9d, 0x811c9dc5
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rdi
test eax, eax
je 0x14006d8f6
nop word [rax + rax]
xor eax, r9d
lea rcx, [rcx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rcx - 1]
test eax, eax
jne 0x14006d8e0
xor esi, esi
lea rbp, [rbx*8]
mov dword [rsp + 0x28], esi
lea r8, str..PEAU__chained_hash_node_U__pair_QEBVDescriptor_protobuf_google__PEBVMessage_23__blz___blz__
mov rcx, rbp
mov dword [rsp + 0x20], 0xfffffffa
lea edx, [rsi + 0xb]
call fcn.140025e30
mov rdi, rax
test rbx, rbx
je 0x14006d937
and rbp, 0xfffffffffffffff8
xor edx, edx
mov r8, rbp
mov rcx, rax
call fcn.1400be550
mov rax, qword [r14 + 8]
mov rbp, qword [rsp + 0x40]
mov rcx, rax
test rax, rax
je 0x14006d98c
cmp qword [r14], rsi
jbe 0x14006d98c
nop dword [rax]
mov r8, qword [rax + rsi*8]
mov rcx, rax
test r8, r8
je 0x14006d981
lea r9, [rbx - 1]
mov rdx, qword [r8 + 8]
mov rcx, qword [r8]
and rdx, r9
mov rax, qword [rdi + rdx*8]
mov qword [r8], rax
mov qword [rdi + rdx*8], r8
mov r8, rcx
test rcx, rcx
jne 0x14006d960
mov rcx, qword [r14 + 8]
inc rsi
mov rax, rcx
cmp rsi, qword [r14]
jb 0x14006d950
xor r9d, r9d
lea rdx, str..PEAU__chained_hash_node_U__pair_QEBVDescriptor_protobuf_google__PEBVMessage_23__blz___blz__
lea r8d, [r9 - 6]
call fcn.140025f00
mov rsi, qword [rsp + 0x48]
mov qword [r14 + 8], rdi
mov rdi, qword [rsp + 0x50]
mov qword [r14], rbx
mov rbx, qword [rsp + 0x58]
add rsp, 0x30
pop r14
ret
Function at 0x14006da20
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov rax, qword [rcx]
lea rdi, [0x1400e7b21]
xor r15d, r15d
mov rbp, rdx
mov r14, rcx
mov esi, 0x811c9dc5
mov ebx, 0x44
test rax, rax
jne 0x14006daaa
mov r9d, esi
mov rdx, rdi
mov eax, ebx
xor eax, r9d
lea rdx, [rdx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rdx - 1]
test eax, eax
jne 0x14006da62
lea r8, str.D:BuildServerDworkpackage_cacheprotobuf_blz2.6.1.7_srcgoogleprotobufunknown_field_set.cc
mov dword [rsp + 0x20], 0x98
lea edx, [rax + 0xb]
lea ecx, [rax + 0x18]
call fcn.140025410
test rax, rax
je 0x14006daa4
mov qword [rax], r15
mov qword [rax + 8], r15
mov qword [rax + 0x10], r15
jmp 0x14006daa7
mov rax, r15
mov qword [r14], rax
mov rdx, rbp
mov rcx, rax
call fcn.14006e7d0
mov rax, qword [r14]
mov rbp, qword [rax + 8]
shl rbp, 4
add rbp, qword [rax]
mov ecx, dword [rbp - 0xc]
sub ecx, 3
je 0x14006db50
cmp ecx, 1
jne 0x14006dbe2
nop dword [rax + rax]
xor ebx, esi
lea rdi, [rdi + 1]
imul esi, ebx, 0x1000193
movzx ebx, byte [rdi - 1]
test ebx, ebx
jne 0x14006dae0
mov r9d, esi
mov dword [rsp + 0x20], 0xed
lea r8, str.D:BuildServerDworkpackage_cacheprotobuf_blz2.6.1.7_srcgoogleprotobufunknown_field_set.cc
lea edx, [rbx + 0xb]
lea ecx, [rbx + 8]
call fcn.140025410
mov rbx, rax
test rax, rax
je 0x14006db2d
mov qword [rax], r15
mov rcx, rax
mov rdx, qword [rbp - 8]
call fcn.14006e400
jmp 0x14006dbde
mov rdx, qword [rbp - 8]
mov rbx, r15
mov rcx, rbx
call fcn.14006e400
jmp 0x14006dbde
xor ebx, esi
lea rdi, [rdi + 1]
imul esi, ebx, 0x1000193
movzx ebx, byte [rdi - 1]
test ebx, ebx
jne 0x14006db50
mov r9d, esi
mov dword [rsp + 0x20], 0xe9
lea r8, str.D:BuildServerDworkpackage_cacheprotobuf_blz2.6.1.7_srcgoogleprotobufunknown_field_set.cc
lea edx, [rbx + 0xb]
lea ecx, [rbx + 0x28]
call fcn.140025410
mov rbx, rax
test rax, rax
je 0x14006dbdb
mov rcx, qword [rbp - 8]
mov rdi, qword [rcx + 8]
mov rsi, qword [rcx]
mov rdx, rdi
lea rcx, [rax + 0x18]
mov qword [rax + 8], r15
mov qword [rax], rcx
movabs rax, 0x800000000000000f
mov qword [rbx + 0x10], rax
mov byte [rcx], r15b
mov rcx, rbx
call fcn.140002a70
test rdi, rdi
je 0x14006dbce
mov rcx, qword [rbx]
mov r8, rdi
mov rdx, rsi
call fcn.1400bddc0
mov rax, qword [rbx]
mov byte [rdi + rax], r15b
mov qword [rbx + 8], rdi
jmp 0x14006dbde
mov rbx, r15
mov qword [rbp - 8], rbx
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x30
pop r15
pop r14
pop rdi
ret
Function at 0x14006dc00
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x40
mov rbx, qword [rcx]
mov esi, r8d
mov ebp, edx
mov rdi, rcx
test rbx, rbx
jne 0x14006dc8e
mov r9d, 0x811c9dc5
lea r10, [0x1400e7b21]
mov eax, 0x44
nop word [rax + rax]
xor eax, r9d
lea r10, [r10 + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [r10 - 1]
test eax, eax
jne 0x14006dc40
lea r8, str.D:BuildServerDworkpackage_cacheprotobuf_blz2.6.1.7_srcgoogleprotobufunknown_field_set.cc
mov dword [rsp + 0x20], WSAStartup
lea edx, [rax + 0xb]
lea ecx, [rax + 0x18]
call fcn.140025410
mov rbx, rax
test rax, rax
je 0x14006dc88
xor eax, eax
mov qword [rbx], rax
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], rax
jmp 0x14006dc8b
mov rbx, rax
mov qword [rdi], rbx
mov rdx, qword [rbx + 0x10]
lea rdi, [rsp + 0x30]
sub rdi, qword [rbx]
movabs rax, 0x7fffffffffffffff
sar rdi, 4
and rdx, rax
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x34], 1
mov dword [rsp + 0x38], esi
cmp qword [rbx + 8], rdx
jne 0x14006dccc
inc rdx
mov rcx, rbx
call fcn.14006e850
mov rcx, qword [rbx + 8]
mov rdx, qword [rbx]
add rcx, rcx
cmp rdi, qword [rbx + 8]
jae 0x14006dce5
add rdi, rdi
movups xmm0, xmmword [rdx + rdi*8]
jmp 0x14006dcea
movups xmm0, xmmword [rsp + 0x30]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
movups xmmword [rdx + rcx*8], xmm0
inc qword [rbx + 8]
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rdi
ret

Function at 0x14006dd10
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x40
mov rbx, qword [rcx]
mov rsi, r8
mov ebp, edx
mov rdi, rcx
test rbx, rbx
jne 0x14006dd9e
mov r9d, 0x811c9dc5
lea r10, [0x1400e7b21]
mov eax, 0x44
nop word [rax + rax]
xor eax, r9d
lea r10, [r10 + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [r10 - 1]
test eax, eax
jne 0x14006dd50
lea r8, str.D:BuildServerDworkpackage_cacheprotobuf_blz2.6.1.7_srcgoogleprotobufunknown_field_set.cc
mov dword [rsp + 0x20], 0x7a
lea edx, [rax + 0xb]
lea ecx, [rax + 0x18]
call fcn.140025410
mov rbx, rax
test rax, rax
je 0x14006dd98
xor eax, eax
mov qword [rbx], rax
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], rax
jmp 0x14006dd9b
mov rbx, rax
mov qword [rdi], rbx
mov rdx, qword [rbx + 0x10]
lea rdi, [rsp + 0x30]
sub rdi, qword [rbx]
movabs rax, 0x7fffffffffffffff
sar rdi, 4
and rdx, rax
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x34], 2
mov qword [rsp + 0x38], rsi
cmp qword [rbx + 8], rdx
jne 0x14006dddd
inc rdx
mov rcx, rbx
call fcn.14006e850
mov rax, qword [rbx + 8]
mov rdx, qword [rbx]
add rax, rax
cmp rdi, qword [rbx + 8]
jae 0x14006ddfa
add rdi, rdi
movups xmm0, xmmword [rdx + rdi*8]
movups xmmword [rdx + rax*8], xmm0
jmp 0x14006de0a
mov dword [rdx + rax*8], ebp
mov dword [rdx + rax*8 + 4], 2
mov qword [rdx + rax*8 + 8], rsi
inc qword [rbx + 8]
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret
Function at 0x14006de30
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x40
xor r15d, r15d
lea rdi, [0x1400e7b21]
mov ebp, edx
mov r14, rcx
mov esi, 0x811c9dc5
mov ebx, 0x44
cmp qword [rcx], r15
jne 0x14006deb9
mov r9d, esi
mov r8, rdi
mov eax, ebx
nop
xor eax, r9d
lea r8, [r8 + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [r8 - 1]
test eax, eax
jne 0x14006de70
lea r8, str.D:BuildServerDworkpackage_cacheprotobuf_blz2.6.1.7_srcgoogleprotobufunknown_field_set.cc
mov dword [rsp + 0x20], 0x8e
lea edx, [rax + 0xb]
lea ecx, [rax + 0x18]
call fcn.140025410
test rax, rax
je 0x14006deb3
mov qword [rax], r15
mov qword [rax + 8], r15
mov qword [rax + 0x10], r15
jmp 0x14006deb6
mov rax, r15
mov qword [r14], rax
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x34], 4
nop word [rax + rax]
xor ebx, esi
lea rdi, [rdi + 1]
imul esi, ebx, 0x1000193
movzx ebx, byte [rdi - 1]
test ebx, ebx
jne 0x14006ded0
mov r9d, esi
mov dword [rsp + 0x20], __WSAFDIsSet
lea r8, str.D:BuildServerDworkpackage_cacheprotobuf_blz2.6.1.7_srcgoogleprotobufunknown_field_set.cc
lea edx, [rbx + 0xb]
lea ecx, [rbx + 8]
call fcn.140025410
mov rdi, rax
test rax, rax
je 0x14006df13
mov qword [rax], r15
mov qword [rsp + 0x38], rax
jmp 0x14006df1b
mov rdi, r15
mov qword [rsp + 0x38], r15
mov rbx, qword [r14]
lea rsi, [rsp + 0x30]
movabs rax, 0x7fffffffffffffff
sub rsi, qword [rbx]
mov rdx, qword [rbx + 0x10]
sar rsi, 4
and rdx, rax
cmp qword [rbx + 8], rdx
jne 0x14006df4c
inc rdx
mov rcx, rbx
call fcn.14006e850
mov rax, qword [rbx + 8]
mov rdx, qword [rbx]
add rax, rax
cmp rsi, qword [rbx + 8]
jae 0x14006df65
add rsi, rsi
movups xmm0, xmmword [rdx + rsi*8]
jmp 0x14006df6a
movups xmm0, xmmword [rsp + 0x30]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
movups xmmword [rdx + rax*8], xmm0
inc qword [rbx + 8]
mov rax, rdi
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop r15
pop r14
pop rdi
ret
Function at 0x14006df90
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x40
xor r15d, r15d
lea rdi, [0x1400e7b21]
mov ebp, edx
mov r14, rcx
mov esi, 0x811c9dc5
mov ebx, 0x44
cmp qword [rcx], r15
jne 0x14006e019
mov r9d, esi
mov r8, rdi
mov eax, ebx
nop
xor eax, r9d
lea r8, [r8 + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [r8 - 1]
test eax, eax
jne 0x14006dfd0
lea r8, str.D:BuildServerDworkpackage_cacheprotobuf_blz2.6.1.7_srcgoogleprotobufunknown_field_set.cc
mov dword [rsp + 0x20], 0x83
lea edx, [rax + 0xb]
lea ecx, [rax + 0x18]
call fcn.140025410
test rax, rax
je 0x14006e013
mov qword [rax], r15
mov qword [rax + 8], r15
mov qword [rax + 0x10], r15
jmp 0x14006e016
mov rax, r15
mov qword [r14], rax
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x34], 3
nop word [rax + rax]
xor ebx, esi
lea rdi, [rdi + 1]
imul esi, ebx, 0x1000193
movzx ebx, byte [rdi - 1]
test ebx, ebx
jne 0x14006e030
mov r9d, esi
mov dword [rsp + 0x20], 0x87
lea r8, str.D:BuildServerDworkpackage_cacheprotobuf_blz2.6.1.7_srcgoogleprotobufunknown_field_set.cc
lea edx, [rbx + 0xb]
lea ecx, [rbx + 0x28]
call fcn.140025410
mov rbx, rax
test rax, rax
je 0x14006e087
mov qword [rax + 8], r15
movabs rcx, 0x800000000000000f
add rax, 0x18
mov qword [rbx + 0x10], rcx
mov qword [rbx], rax
mov byte [rax], r15b
jmp 0x14006e08a
mov rbx, r15
mov rdi, qword [r14]
lea rsi, [rsp + 0x30]
movabs rax, 0x7fffffffffffffff
mov qword [rsp + 0x38], rbx
sub rsi, qword [rdi]
mov rdx, qword [rdi + 0x10]
sar rsi, 4
and rdx, rax
cmp qword [rdi + 8], rdx
jne 0x14006e0c0
inc rdx
mov rcx, rdi
call fcn.14006e850
mov rax, qword [rdi + 8]
mov rdx, qword [rdi]
add rax, rax
cmp rsi, qword [rdi + 8]
jae 0x14006e0d9
add rsi, rsi
movups xmm0, xmmword [rdx + rsi*8]
jmp 0x14006e0de
movups xmm0, xmmword [rsp + 0x30]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
movups xmmword [rdx + rax*8], xmm0
inc qword [rdi + 8]
mov rax, rbx
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop r15
pop r14
pop rdi
ret
Function at 0x14006e110
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x40
mov rbx, qword [rcx]
xor r14d, r14d
mov rsi, r8
mov ebp, edx
mov rdi, rcx
test rbx, rbx
jne 0x14006e19c
mov r9d, 0x811c9dc5
lea r10, [0x1400e7b21]
mov eax, 0x44
nop
xor eax, r9d
lea r10, [r10 + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [r10 - 1]
test eax, eax
jne 0x14006e150
lea r8, str.D:BuildServerDworkpackage_cacheprotobuf_blz2.6.1.7_srcgoogleprotobufunknown_field_set.cc
mov dword [rsp + 0x20], WSAGetLastError
lea edx, [rax + 0xb]
lea ecx, [rax + 0x18]
call fcn.140025410
mov rbx, rax
test rax, rax
je 0x14006e196
mov qword [rax], r14
mov qword [rax + 8], r14
mov qword [rax + 0x10], r14
jmp 0x14006e199
mov rbx, r14
mov qword [rdi], rbx
mov rdx, qword [rbx + 0x10]
lea rdi, [rsp + 0x30]
sub rdi, qword [rbx]
movabs rax, 0x7fffffffffffffff
sar rdi, 4
and rdx, rax
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x38], rsi
cmp qword [rbx + 8], rdx
jne 0x14006e1d8
inc rdx
mov rcx, rbx
call fcn.14006e850
mov rax, qword [rbx + 8]
mov rdx, qword [rbx]
add rax, rax
cmp rdi, qword [rbx + 8]
jae 0x14006e1f5
add rdi, rdi
movups xmm0, xmmword [rdx + rdi*8]
movups xmmword [rdx + rax*8], xmm0
jmp 0x14006e202
mov dword [rdx + rax*8], ebp
mov dword [rdx + rax*8 + 4], r14d
mov qword [rdx + rax*8 + 8], rsi
inc qword [rbx + 8]
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret

Function at 0x14006e850
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rsi
sub rsp, 0x30
mov r8, qword [rcx + 0x10]
movabs rsi, 0x7fffffffffffffff
mov rax, r8
mov rbx, rcx
and rax, rsi
cmp rdx, rax
jbe 0x14006e96e
movabs r9, 0x3fffffffffffffff
mov qword [rsp + 0x40], rdi
mov rcx, r8
shr rcx, 1
and rcx, r9
mov r9d, 0x811c9dc5
add rcx, rax
mov rax, r8
cmp rcx, rdx
cmovb rcx, rdx
lea rdx, [0x140127bc1]
xor rax, rcx
and rax, rsi
xor rax, r8
mov qword [rbx + 0x10], rax
movzx eax, byte [str.._AVUnknownField_protobuf_google__]
test eax, eax
je 0x14006e8e6
nop dword [rax]
nop dword [rax + rax]
xor eax, r9d
lea rdx, [rdx + 1]
imul r9d, eax, 0x1000193
movzx eax, byte [rdx - 1]
test eax, eax
jne 0x14006e8d0
shl rcx, 4
lea r8, str.._AVUnknownField_protobuf_google__
mov dword [rsp + 0x28], 0
mov edx, ntohs
mov dword [rsp + 0x20], 0xfffffffa
call fcn.140025e30
mov rcx, qword [rbx]
mov rdi, rax
mov r10, qword [rbx + 8]
mov r9, rax
shl r10, 4
add r10, rcx
cmp rcx, r10
je 0x14006e945
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rcx]
add rcx, 0x10
lea r9, [r9 + 0x10]
movups xmmword [r9 - 0x10], xmm0
cmp rcx, r10
jne 0x14006e930
cmp qword [rbx + 0x10], 0
jl 0x14006e962
mov rcx, qword [rbx]
lea rdx, str.._AVUnknownField_protobuf_google__
xor r9d, r9d
lea r8d, [r9 - 6]
call fcn.140025f00
and qword [rbx + 0x10], rsi
mov qword [rbx], rdi
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
ret