joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14004dee0
Capabilities:
Decrypt data using aes via x86 extensions

Disassembly:
pxor xmm15, xmm9
movdqu xmm11, xmmword [rbx + r12]
movdqa xmm12, xmm10
movdqu xmm13, xmmword [rbx + r13]
pxor xmm10, xmm15
pxor xmm11, xmm10
pxor xmm2, xmm10
pxor xmm12, xmm11
pxor xmm3, xmm11
pxor xmm13, xmm12
pxor xmm4, xmm12
pxor xmm5, xmm13
movups xmm0, xmmword [r11 + 0x20]
pxor xmm10, xmm9
pxor xmm11, xmm9
pxor xmm12, xmm9
pxor xmm13, xmm9
aesdec xmm2, xmm1
aesdec xmm3, xmm1
aesdec xmm4, xmm1
aesdec xmm5, xmm1
movups xmm1, xmmword [r11 + 0x30]
aesdec xmm2, xmm0
aesdec xmm3, xmm0
aesdec xmm4, xmm0
aesdec xmm5, xmm0
movups xmm0, xmmword [r11 + 0x40]
jmp 0x14004df80
aesdec xmm2, xmm1
aesdec xmm3, xmm1
aesdec xmm4, xmm1
aesdec xmm5, xmm1
movups xmm1, xmmword [rcx + rax]
add rax, 0x20
aesdec xmm2, xmm0
aesdec xmm3, xmm0
aesdec xmm4, xmm0
aesdec xmm5, xmm0
movups xmm0, xmmword [rcx + rax - 0x10]
jne 0x14004df80
aesdec xmm2, xmm1
aesdec xmm3, xmm1
aesdec xmm4, xmm1
aesdec xmm5, xmm1
movups xmm1, xmmword [r11 + 0x10]
mov rax, r10
aesdeclast xmm2, xmm10
aesdeclast xmm3, xmm11
aesdeclast xmm4, xmm12
aesdeclast xmm5, xmm13
repz ret

Function at 0x14004e000
Capabilities:
Decrypt data using aes via x86 extensions

Disassembly:
pxor xmm7, xmm15
pxor xmm7, xmm9
pxor xmm2, xmm7
movups xmm0, xmmword [r11 + 0x20]
aesdec xmm2, xmm1
movups xmm1, xmmword [r11 + 0x30]
pxor xmm7, xmm9
aesdec xmm2, xmm0
movups xmm0, xmmword [r11 + 0x40]
jmp 0x14004e040
aesdec xmm2, xmm1
movups xmm1, xmmword [rcx + rax]
add rax, 0x20
aesdec xmm2, xmm0
movups xmm0, xmmword [rcx + rax - 0x10]
jne 0x14004e040
aesdec xmm2, xmm1
movups xmm1, xmmword [r11 + 0x10]
mov rax, r10
aesdeclast xmm2, xmm7
repz ret
Function at 0x14004eab0
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
sub rsp, 8
call fcn.14004eb20
shl edx, 4
test eax, eax
jne 0x14004eb16
lea rcx, [r8 + rdx + 0x10]
movups xmm0, xmmword [r8]
movups xmm1, xmmword [rcx]
movups xmmword [rcx], xmm0
movups xmmword [r8], xmm1
lea r8, [r8 + 0x10]
lea rcx, [rcx - 0x10]
movups xmm0, xmmword [r8]
movups xmm1, xmmword [rcx]
aesimc xmm0, xmm0
aesimc xmm1, xmm1
lea r8, [r8 + 0x10]
lea rcx, [rcx - 0x10]
movups xmmword [rcx + 0x10], xmm0
movups xmmword [r8 - 0x10], xmm1
cmp rcx, r8
ja 0x14004eadb
movups xmm0, xmmword [r8]
aesimc xmm0, xmm0
pxor xmm1, xmm1
movups xmmword [rcx], xmm0
pxor xmm0, xmm0
add rsp, 8
repz ret
Function at 0x14004fc00
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
vmovdqu xmm4, xmmword [rcx - 0x80]
vmovdqu xmm2, xmmword [r11 + 0x20]
lea r13, [rbp - 1]
vmovups xmm15, xmmword [rcx - 0x70]
lea r12, [rcx - 0x60]
vpxor xmm9, xmm1, xmm4
add ebx, 0x6000000
jb 0x14004fd20
vpaddb xmm10, xmm1, xmm2
vpaddb xmm11, xmm10, xmm2
vpxor xmm10, xmm10, xmm4
vpaddb xmm12, xmm11, xmm2
vpxor xmm11, xmm11, xmm4
vpaddb xmm13, xmm12, xmm2
vpxor xmm12, xmm12, xmm4
vpaddb xmm14, xmm13, xmm2
vpxor xmm13, xmm13, xmm4
vpaddb xmm1, xmm14, xmm2
vpxor xmm14, xmm14, xmm4
jmp 0x14004fc60
vaesenc xmm9, xmm9, xmm15
vaesenc xmm10, xmm10, xmm15
vaesenc xmm11, xmm11, xmm15
vaesenc xmm12, xmm12, xmm15
vaesenc xmm13, xmm13, xmm15
vaesenc xmm14, xmm14, xmm15
vmovups xmm15, xmmword [r12]
lea r12, [r12 + 0x10]
dec r13d
jne 0x14004fc60
vmovdqu xmm3, xmmword [r12]
vaesenc xmm9, xmm9, xmm15
vpxor xmm4, xmm3, xmmword [rdi]
vaesenc xmm10, xmm10, xmm15
vpxor xmm5, xmm3, xmmword [rdi + 0x10]
vaesenc xmm11, xmm11, xmm15
vpxor xmm6, xmm3, xmmword [rdi + 0x20]
vaesenc xmm12, xmm12, xmm15
vpxor xmm8, xmm3, xmmword [rdi + 0x30]
vaesenc xmm13, xmm13, xmm15
vpxor xmm2, xmm3, xmmword [rdi + 0x40]
vaesenc xmm14, xmm14, xmm15
vpxor xmm3, xmm3, xmmword [rdi + 0x50]
lea rdi, [rdi + 0x60]
vaesenclast xmm9, xmm9, xmm4
vaesenclast xmm10, xmm10, xmm5
vaesenclast xmm11, xmm11, xmm6
vaesenclast xmm12, xmm12, xmm8
vaesenclast xmm13, xmm13, xmm2
vaesenclast xmm14, xmm14, xmm3
vmovups xmmword [rsi], xmm9
vmovups xmmword [rsi + 0x10], xmm10
vmovups xmmword [rsi + 0x20], xmm11
vmovups xmmword [rsi + 0x30], xmm12
vmovups xmmword [rsi + 0x40], xmm13
vmovups xmmword [rsi + 0x50], xmm14
lea rsi, [rsi + 0x60]
repz ret
vpshufb xmm6, xmm1, xmm0
vmovdqu xmm5, xmmword [r11 + 0x30]
vpaddd xmm10, xmm6, xmmword [r11 + 0x40]
vpaddd xmm11, xmm6, xmm5
vpaddd xmm12, xmm10, xmm5
vpshufb xmm10, xmm10, xmm0
vpaddd xmm13, xmm11, xmm5
vpshufb xmm11, xmm11, xmm0
vpxor xmm10, xmm10, xmm4
vpaddd xmm14, xmm12, xmm5
vpshufb xmm12, xmm12, xmm0
vpxor xmm11, xmm11, xmm4
vpaddd xmm1, xmm13, xmm5
vpshufb xmm13, xmm13, xmm0
vpxor xmm12, xmm12, xmm4
vpshufb xmm14, xmm14, xmm0
vpxor xmm13, xmm13, xmm4
vpshufb xmm1, xmm1, xmm0
vpxor xmm14, xmm14, xmm4
jmp 0x14004fc60
Function at 0x14005fe90
Capabilities:
Hash data using fnv

Disassembly:
movsx eax, byte [rcx]
test al, al
jne 0x14005fe9a
mov eax, edx
ret
xor eax, edx
imul edx, eax, 0x1000193
inc rcx
jmp fcn.14005fe90

Function at 0x140066bd0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1a], 0
je 0x140066bf3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x57]
xor byte [rcx + rax], dl
inc rax
cmp rax, 0x19
jb 0x140066be0
mov byte [rcx + 0x1a], 0
mov rax, rcx
ret

Function at 0x140066c00
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 5], 0
je 0x140066c23
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x57]
xor byte [rcx + rax], dl
inc rax
cmp rax, 4
jb 0x140066c10
mov byte [rcx + 5], 0
mov rax, rcx
ret

Function at 0x140066c30
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 9], 0
je 0x140066c53
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x57]
xor byte [rcx + rax], dl
inc rax
cmp rax, 8
jb 0x140066c40
mov byte [rcx + 9], 0
mov rax, rcx
ret

Function at 0x140066c60
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
je 0x140066c83
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x57]
xor byte [rcx + rax], dl
inc rax
cmp rax, 0x10
jb 0x140066c70
mov byte [rcx + 0x11], 0
mov rax, rcx
ret

Function at 0x140066c90
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xf], 0
je 0x140066cb3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x57]
xor byte [rcx + rax], dl
inc rax
cmp rax, 0xe
jb 0x140066ca0
mov byte [rcx + 0xf], 0
mov rax, rcx
ret

Function at 0x140066cc0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xb], 0
je 0x140066ce3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x57]
xor byte [rcx + rax], dl
inc rax
cmp rax, 0xa
jb 0x140066cd0
mov byte [rcx + 0xb], 0
mov rax, rcx
ret
Function at 0x14006b8e0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x19], 0
je 0x14006b903
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x57]
xor byte [rcx + rax], dl
inc rax
cmp rax, 0x18
jb 0x14006b8f0
mov byte [rcx + 0x19], 0
mov rax, rcx
ret

Function at 0x14006b910
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x18], 0
je 0x14006b933
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x57]
xor byte [rcx + rax], dl
inc rax
cmp rax, 0x17
jb 0x14006b920
mov byte [rcx + 0x18], 0
mov rax, rcx
ret
Function at 0x14006c8f0
Capabilities:
Create thread

Disassembly:
push rbx
sub rsp, 0x70
mov rax, qword [0x140330440]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov rbx, rcx
mov rax, qword [0x14033d460]
mov rdx, qword [rax + 0x1a0]
cmp rdx, qword [rax + 0x1a8]
je 0x14006c926
mov qword [rax + 0x1a8], rdx
mov ecx, reloc.WS2_32.dll_recv
call fcn.140264740
mov qword [rax], rbx
lea rcx, [0x14006c8d0]
mov qword [rax + 8], rcx
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x140073440]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14006c9ce
cmp dword [rsp + 0x38], 0
jne 0x14006c985
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x14006c9ab
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov rax, qword [0x14033d460]
mov byte [rax + 0x100], 1
xor al, al
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.140264720
add rsp, 0x70
pop rbx
ret
mov dword [rsp + 0x38], 0
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
Function at 0x14006d370
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor eax, eax
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 4], al
je 0x14006d3a3
nop dword [rax]
nop word [rax + rax]
lea ecx, [rax - 0x57]
xor byte [rdx + rax], cl
inc rax
cmp rax, 3
jb 0x14006d390
mov byte [rdx + 4], 0
lea r8, [rdx + 3]
mov rcx, rbx
call fcn.14005dd70
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x14006d410
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor eax, eax
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0xb], al
je 0x14006d443
nop dword [rax]
nop word [rax + rax]
lea ecx, [rax - 0x57]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0xa
jb 0x14006d430
mov byte [rdx + 0xb], 0
lea r8, [rdx + 0xa]
mov rcx, rbx
call fcn.14005dd70
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x14006d460
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 5], 0
je 0x14006d483
xor eax, eax
nop dword [rax + rax]
lea edx, [rax - 0x57]
xor byte [rcx + rax], dl
inc rax
cmp rax, 4
jb 0x14006d470
mov byte [rcx + 5], 0
ret

Function at 0x14006d490
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor eax, eax
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x17], al
je 0x14006d4c3
nop dword [rax]
nop word [rax + rax]
lea ecx, [rax - 0x57]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x16
jb 0x14006d4b0
mov byte [rdx + 0x17], 0
lea r8, [rdx + 0x16]
mov rcx, rbx
call fcn.14005dd70
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x14006d4e0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor eax, eax
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x16], al
je 0x14006d513
nop dword [rax]
nop word [rax + rax]
lea ecx, [rax - 0x57]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x15
jb 0x14006d500
mov byte [rdx + 0x16], 0
lea r8, [rdx + 0x15]
mov rcx, rbx
call fcn.14005dd70
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x14006d530
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor eax, eax
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x1b], al
je 0x14006d563
nop dword [rax]
nop word [rax + rax]
lea ecx, [rax - 0x57]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x1a
jb 0x14006d550
mov byte [rdx + 0x1b], 0
lea r8, [rdx + 0x1a]
mov rcx, rbx
call fcn.14005dd70
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x14006d580
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor eax, eax
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x1a], al
je 0x14006d5b3
nop dword [rax]
nop word [rax + rax]
lea ecx, [rax - 0x57]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x19
jb 0x14006d5a0
mov byte [rdx + 0x1a], 0
lea r8, [rdx + 0x19]
mov rcx, rbx
call fcn.14005dd70
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x14006d5d0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor eax, eax
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0x12], al
je 0x14006d603
nop dword [rax]
nop word [rax + rax]
lea ecx, [rax - 0x57]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0x11
jb 0x14006d5f0
mov byte [rdx + 0x12], 0
lea r8, [rdx + 0x11]
mov rcx, rbx
call fcn.14005dd70
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x14006da40
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor eax, eax
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0xd], al
je 0x14006da73
nop dword [rax]
nop word [rax + rax]
lea ecx, [rax - 0x57]
xor byte [rdx + rax], cl
inc rax
cmp rax, 0xc
jb 0x14006da60
mov byte [rdx + 0xd], 0
lea r8, [rdx + 0xc]
mov rcx, rbx
call fcn.14005dd70
mov rax, rbx
add rsp, 0x30
pop rbx
ret

Function at 0x14006dc80
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x30
xor eax, eax
mov rbx, rdx
mov rdx, rcx
cmp byte [rcx + 0xa], al
je 0x14006dcb3
nop dword [rax]
nop word [rax + rax]
lea ecx, [rax - 0x57]
xor byte [rdx + rax], cl
inc rax
cmp rax, 9
jb 0x14006dca0
mov byte [rdx + 0xa], 0
lea r8, [rdx + 9]
mov rcx, rbx
call fcn.14005dd70
mov rax, rbx
add rsp, 0x30
pop rbx
ret
Function at 0x14006e020
Capabilities:
Hash data using fnv

Disassembly:
sub rsp, 0x28
movzx r8d, byte [rdx]
mov r9, rcx
movabs rcx, 0x100000001b3
mov r10, rdx
movabs rax, 0xcbf29ce484222325
xor r8, rax
movzx eax, byte [rdx + 1]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 2]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 3]
mov rdx, qword [r9 + 0x30]
imul r8, rcx
xor r8, rax
imul r8, rcx
and rdx, r8
shl rdx, 4
add rdx, qword [r9 + 0x18]
mov rcx, qword [rdx + 8]
cmp rcx, qword [r9 + 8]
je 0x14006e0a0
mov eax, dword [r10]
mov r8, qword [rdx]
cmp eax, dword [rcx + 0x10]
je 0x14006e0a2
nop
cmp rcx, r8
je 0x14006e0a0
mov rcx, qword [rcx + 8]
cmp eax, dword [rcx + 0x10]
jne 0x14006e090
jmp 0x14006e0a2
xor ecx, ecx
test rcx, rcx
je 0x14006e101
mov rax, qword [rdx]
cmp qword [rdx + 8], rcx
jne 0x14006e0cc
cmp rax, rcx
jne 0x14006e0c2
mov rax, qword [r9 + 8]
mov qword [rdx], rax
mov qword [rdx + 8], rax
jmp 0x14006e0d7
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
jmp 0x14006e0d7
cmp rax, rcx
jne 0x14006e0d7
mov rax, qword [rcx]
mov qword [rdx], rax
mov rdx, qword [rcx]
dec qword [r9 + 0x10]
mov rax, qword [rcx + 8]
mov qword [rax], rdx
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov edx, Ordinal_26
call fcn.14026477c
mov eax, 1
add rsp, 0x28
ret
xor eax, eax
add rsp, 0x28
ret
Function at 0x14006fb80
Capabilities:
Hash data using fnv

Disassembly:
movzx r9d, byte [r8]
movabs rcx, 0x100000001b3
mov r10, rdx
movabs rax, 0xcbf29ce484222325
mov rdx, qword [0x14033d930]
xor r9, rax
movzx eax, byte [r8 + 1]
mov r11, r8
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 2]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 3]
mov r8, qword [0x14033d908]
imul r9, rcx
xor r9, rax
imul r9, rcx
and rdx, r9
shl rdx, 4
add rdx, qword [0x14033d918]
mov rax, qword [rdx + 8]
cmp rax, r8
je 0x14006fc1c
mov ecx, dword [r11]
mov rdx, qword [rdx]
cmp ecx, dword [rax + 0x10]
je 0x14006fc1e
nop dword [rax]
cmp rax, rdx
je 0x14006fc1c
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x14006fc00
test rax, rax
cmovne r8, rax
mov rax, r10
mov qword [r10], r8
ret
xor eax, eax
test rax, rax
cmovne r8, rax
mov rax, r10
mov qword [r10], r8
ret
Function at 0x140070160
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov r13, r8
mov r14, rdx
mov rsi, rcx
movzx r12d, byte [r8]
movabs rax, 0xcbf29ce484222325
xor r12, rax
movabs rcx, 0x100000001b3
imul r12, rcx
movzx eax, byte [r8 + 1]
xor r12, rax
imul r12, rcx
movzx eax, byte [r8 + 2]
xor r12, rax
imul r12, rcx
movzx eax, byte [r8 + 3]
xor r12, rax
imul r12, rcx
mov rcx, qword [rsi + 0x30]
and rcx, r12
add rcx, rcx
mov rax, qword [rsi + 0x18]
mov rbx, qword [rax + rcx*8 + 8]
lea rdx, [rsi + 8]
mov r15, qword [rdx]
cmp rbx, r15
jne 0x1400701e7
mov rbx, r15
mov rbp, r15
jmp 0x14007022a
mov rcx, qword [rax + rcx*8]
mov eax, dword [r8]
cmp eax, dword [rbx + 0x10]
je 0x140070201
cmp rbx, rcx
je 0x140070224
mov rbx, qword [rbx + 8]
cmp eax, dword [rbx + 0x10]
jne 0x1400701f3
mov qword [r14], rbx
mov byte [r14 + 8], 0
mov rax, r14
mov rbx, qword [rsp + 0x88]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r15, rbx
mov rbp, rbx
movabs rax, 0x492492492492492
cmp qword [rsi + 0x10], rax
jne 0x140070248
lea rcx, str.unordered_map_set_too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x28], 0
mov ecx, gethostname
call fcn.140264740
mov rdi, rax
mov qword [rsp + 0x28], rax
mov eax, dword [r13]
mov dword [rdi + 0x10], eax
xor r13d, r13d
mov qword [rdi + 0x18], r13
mov qword [rdi + 0x30], r13
mov qword [rdi + 0x20], r13
mov qword [rdi + 0x28], r13
mov dword [rdi + 0x34], r13d
mov rcx, qword [rsi + 0x10]
add rcx, 1
xorps xmm0, xmm0
js 0x14007029a
cvtsi2ss xmm0, rcx
jmp 0x1400702af
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rcx, qword [rsi + 0x38]
xorps xmm1, xmm1
test rcx, rcx
js 0x1400702c2
cvtsi2ss xmm1, rcx
jmp 0x1400702d7
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [rsi]
seta al
test al, al
je 0x140070336
mov rcx, rsi
call fcn.140071400
mov rcx, qword [rsi + 0x30]
and rcx, r12
add rcx, rcx
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + rcx*8 + 8]
mov rbx, qword [rsi + 8]
cmp rax, rbx
je 0x140070329
mov rdx, qword [rdx + rcx*8]
mov ecx, dword [rdi + 0x10]
cmp ecx, dword [rax + 0x10]
je 0x140070326
mov rbx, rax
cmp rax, rdx
je 0x14007036a
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x140070315
mov rbx, qword [rax]
mov qword [rsp + 0x20], rbx
mov rbp, rbx
mov r15, qword [rsp + 0x20]
mov rdx, qword [rbx + 8]
inc qword [rsi + 0x10]
mov qword [rdi], r15
mov qword [rdi + 8], rdx
mov qword [rdx], rdi
mov qword [rbx + 8], rdi
mov rcx, qword [rsi + 0x18]
mov rax, qword [rsi + 0x30]
and rax, r12
add rax, rax
mov r8, qword [rcx + rax*8]
cmp r8, qword [rsi + 8]
jne 0x140070371
mov qword [rcx + rax*8], rdi
jmp 0x140070383
mov qword [rsp + 0x20], rax
jmp 0x14007032e
cmp r8, rbp
jne 0x14007037c
mov qword [rcx + rax*8], rdi
jmp 0x140070388
cmp qword [rcx + rax*8 + 8], rdx
jne 0x140070388
mov qword [rcx + rax*8 + 8], rdi
mov qword [r14], rdi
mov byte [r14 + 8], 1
jmp 0x140070209
Function at 0x140071670
Capabilities:
Hash data using fnv

Disassembly:
push rsi
push rdi
sub rsp, 0x28
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x1400716a5
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x50], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x20], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.14006f4e0
lea rax, [rdi - 1]
mov qword [rsi + 0x38], rdi
mov qword [rsi + 0x30], rax
mov rax, qword [rsi + 8]
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x1400717e6
mov qword [rsp + 0x58], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop dword [rax + rax]
movzx edx, byte [rax + 0x11]
movzx r9d, byte [rax + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rcx, qword [rcx]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x12]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x13]
imul r9, rdi
xor r9, rdx
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r9, qword [r11]
cmp r9, rbx
jne 0x140071760
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x1400717d5
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x14007179d
mov r10, qword [rdx]
cmp r10, rax
je 0x140071797
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x1400717d5
cmp r9, rdx
je 0x1400717b1
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x1400717f7
cmp r9, rdx
jne 0x1400717a2
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
jne 0x140071710
mov rbp, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov r14, qword [rsp + 0x20]
add rsp, 0x28
pop rdi
pop rsi
ret
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x1400717d5
Function at 0x140071b70
Capabilities:
Hash data using fnv

Disassembly:
push rdi
sub rsp, 0x30
mov rdi, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x140071c1c
mov rax, qword [rdi + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x140071baa
mov rdx, qword [rdi + 8]
mov rcx, rdi
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x30
pop rdi
jmp 0x140071c30
mov rcx, qword [rdi + 8]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x140071bea
mov qword [rsp + 0x48], rbx
nop word [rax + rax]
mov rbx, qword [rcx]
mov edx, Ordinal_26
call fcn.14026477c
mov rcx, rbx
test rbx, rbx
jne 0x140071bd0
mov rbx, qword [rsp + 0x48]
mov rax, qword [rdi + 8]
lea r8, [rsp + 0x20]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 8], rax
mov qword [rdi + 0x10], 0
mov rax, qword [rdi + 8]
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x20], rax
call fcn.1400703a0
add rsp, 0x30
pop rdi
ret
mov rax, rsp
push rbp
push rsi
push r14
sub rsp, 0x50
mov rbp, r8
mov r14, rdx
mov rsi, rcx
cmp rdx, r8
je 0x140071d34
mov rdx, qword [rcx + 0x18]
movabs r8, 0x100000001b3
mov qword [rax + 0x10], rbx
mov rbx, r14
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
mov r12, qword [rcx + 8]
movzx ecx, byte [r14 + 0x10]
mov qword [rax - 0x20], r13
mov r13, qword [r14 + 8]
mov qword [rax - 0x28], r15
movabs rax, 0xcbf29ce484222325
mov r15, qword [rsi + 0x30]
xor rcx, rax
movzx eax, byte [r14 + 0x11]
imul rcx, r8
mov qword [rsp + 0x30], rdx
xor rcx, rax
movzx eax, byte [r14 + 0x12]
imul rcx, r8
xor rcx, rax
movzx eax, byte [r14 + 0x13]
imul rcx, r8
xor rcx, rax
imul rcx, r8
and r15, rcx
shl r15, 4
add r15, rdx
mov rax, qword [r15]
mov qword [rsp + 0x20], rax
mov rax, qword [r15 + 8]
mov qword [rsp + 0x28], rax
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, Ordinal_26
call fcn.14026477c
dec qword [rsi + 0x10]
cmp rdi, qword [rsp + 0x28]
je 0x140071d40
cmp rbx, rbp
jne 0x140071ce0
cmp qword [rsp + 0x20], r14
jne 0x140071d0d
mov qword [r15], rbx
mov r12, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x80]
mov r15, qword [rsp + 0x40]
mov qword [r13], rbx
mov qword [rbx + 8], r13
mov r13, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x78]
mov rax, rbp
add rsp, 0x50
pop r14
pop rsi
pop rbp
ret
cmp qword [rsp + 0x20], r14
jne 0x140071d4f
mov qword [r15], r12
mov rax, r12
jmp 0x140071d52
mov rax, r13
mov qword [r15 + 8], rax
cmp rbx, rbp
je 0x140071d0d
nop dword [rax + rax]
movzx ecx, byte [rbx + 0x10]
movabs rdx, 0x100000001b3
mov r15, qword [rsi + 0x30]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movzx eax, byte [rbx + 0x11]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x12]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x13]
imul rcx, rdx
xor rcx, rax
imul rcx, rdx
and r15, rcx
shl r15, 4
add r15, qword [rsp + 0x30]
mov r14, qword [r15 + 8]
nop dword [rax]
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, Ordinal_26
call fcn.14026477c
dec qword [rsi + 0x10]
cmp rdi, r14
je 0x140071de6
cmp rbx, rbp
jne 0x140071dc0
jmp 0x140071d0a
mov qword [r15], r12
mov qword [r15 + 8], r12
cmp rbx, rbp
jne 0x140071d60
jmp 0x140071d0d