joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18008d1f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
sub rsp, 0x80
mov rax, qword [0x1802ec4c0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r9
mov rsi, rdx
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x50], r9
mov rbx, qword [rsp + 0xc0]
xor ecx, ecx
mov r8, qword [r9 + 0x10]
mov rdx, r9
cmp qword [r9 + 0x18], 7
jbe 0x18008d239
mov rdx, qword [r9]
movabs r9, 0xcbf29ce484222325
add r8, r8
je 0x18008d265
movabs r10, 0x100000001b3
movzx eax, byte [rdx + rcx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x18008d252
mov r8, rdi
lea rdx, [rsp + 0x58]
lea rcx, [0x180337b08]
call fcn.180090310
mov rcx, qword [rax + 8]
mov rbp, qword [0x180337b10]
test rcx, rcx
cmovne rbp, rcx
cmp rbp, qword [0x180337b10]
je 0x18008d2da
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x30]
call fcn.180058410
mov rbx, rax
mov qword [rsp + 0x28], rax
mov r8, rax
mov rdx, qword [0x180337b48]
mov rdx, qword [rdx]
lea rcx, [0x180337b48]
call fcn.18008ee30
nop
mov rcx, rbx
call fcn.1800585d0
lea rdx, [rbp + 0x38]
mov rcx, rsi
call fcn.180059390
jmp 0x18008d34f
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.180084a80
nop
lea r8, [rsp + 0x58]
mov rdx, rdi
call fcn.18008dea0
lea rdx, [rsp + 0x58]
mov rcx, rsi
call fcn.180059390
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x18008d33c
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008d337
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008d37a
call fcn.18020e750
movdqa xmm0, xmmword [0x1802b8570]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], 0
mov rcx, rdi
call fcn.1800585d0
mov rax, rsi
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.18020e120
mov rbx, qword [rsp + 0xa0]
add rsp, 0x80
pop rdi
pop rsi
pop rbp
ret
call fcn.1802214b8
nop
Function at 0x18008d380
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
sub rsp, 0x40
mov rdi, rdx
xor r10d, r10d
movzx r8d, r9b
movabs rax, 0xcbf29ce484222325
xor r8, rax
movabs rdx, 0x100000001b3
imul r8, rdx
mov eax, r9d
shr eax, 8
movzx ecx, al
xor r8, rcx
imul r8, rdx
mov eax, r9d
shr eax, 0x10
movzx ecx, al
xor r8, rcx
imul r8, rdx
mov eax, r9d
shr rax, 0x18
xor r8, rax
imul r8, rdx
mov rcx, qword [0x180337a18]
and rcx, r8
shl rcx, 4
add rcx, qword [0x180337a00]
mov rax, qword [rcx + 8]
mov rdx, qword [0x1803379f0]
cmp rax, rdx
je 0x18008d428
mov rcx, qword [rcx]
cmp r9d, dword [rax + 0x10]
je 0x18008d42b
cmp rax, rcx
je 0x18008d428
mov rax, qword [rax + 8]
cmp r9d, dword [rax + 0x10]
jne 0x18008d417
jmp 0x18008d42b
mov rax, r10
mov rbx, rdx
test rax, rax
cmovne rbx, rax
cmp rbx, rdx
je 0x18008d4b8
mov ebp, dword [rbx + 0x10]
mov rax, qword [0x180337a28]
mov rsi, qword [rax]
movabs rax, 0xaaaaaaaaaaaaaaa
cmp qword [0x180337a30], rax
je 0x18008d521
lea rax, [0x180337a28]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r10
mov ecx, 0x18
call fcn.18020e888
mov dword [rax + 0x10], ebp
inc qword [0x180337a30]
mov rcx, qword [rsi + 8]
mov qword [rax], rsi
mov qword [rax + 8], rcx
mov qword [rsi + 8], rax
mov qword [rcx], rax
mov rcx, qword [rbx + 0x20]
mov qword [rdi], rcx
test rcx, rcx
je 0x18008d4a8
mov rax, qword [rcx]
call qword [rax + reloc.d2d1.dll_Ordinal_8]
nop
mov rax, rdi
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
pop rsi
pop rbp
ret
mov rax, qword [rsp + 0x80]
movaps xmm0, xmmword [rax]
movaps xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.180084d80
nop
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x78]
call fcn.18008dcb0
mov rax, qword [rsp + 0x70]
mov qword [rdi], rax
test rax, rax
je 0x18008d502
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.d2d1.dll_Ordinal_8]
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x18008d511
lea rcx, [rsp + 0x70]
call fcn.18005c410
mov rax, rdi
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
pop rsi
pop rbp
ret
lea rcx, str.list_too_long
call fcn.18020adf0
int3
Function at 0x18008d610
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x80
mov rax, qword [0x1802ec4c0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r9
mov rsi, rdx
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x50], r9
mov rbx, qword [rsp + 0xc0]
xor r14d, r14d
mov r8, qword [r9 + 0x10]
mov rdx, r9
cmp qword [r9 + 0x18], 0xf
jbe 0x18008d660
mov rdx, qword [r9]
movabs r9, 0xcbf29ce484222325
mov rcx, r14
test r8, r8
je 0x18008d693
movabs r10, 0x100000001b3
nop dword [rax]
movzx eax, byte [rdx + rcx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x18008d680
mov r8, rdi
lea rdx, [rsp + 0x58]
lea rcx, [0x180337b68]
call fcn.18004b0e0
mov rcx, qword [rax + 8]
mov rbp, qword [0x180337b70]
test rcx, rcx
cmovne rbp, rcx
cmp rbp, qword [0x180337b70]
je 0x18008d708
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x30]
call fcn.180059390
mov rbx, rax
mov qword [rsp + 0x28], rax
mov r8, rax
mov rdx, qword [0x180337ba8]
mov rdx, qword [rdx]
lea rcx, [0x180337ba8]
call fcn.18008ea90
nop
mov rcx, rbx
call fcn.180059890
lea rdx, [rbp + 0x38]
mov rcx, rsi
call fcn.180058410
jmp 0x18008d783
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.18008bf30
nop
lea r8, [rsp + 0x58]
mov rdx, rdi
call fcn.18008e160
lea rdx, [rsp + 0x58]
mov rcx, rsi
call fcn.180058410
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x18008d76f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008d76a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008d7b3
call fcn.18020e750
movdqa xmm0, xmmword [0x1802b8550]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r14w
mov rcx, rdi
call fcn.180059890
mov rax, rsi
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.18020e120
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
call fcn.1802214b8
nop
int3
Function at 0x18008dcb0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x40
mov r14, r8
mov rsi, rdx
mov rax, qword [0x1803379e0]
cmp qword [0x1803379f8], rax
jb 0x18008ddfc
mov rax, qword [0x180337a28]
mov rcx, qword [rax + 8]
mov edi, dword [rcx + 0x10]
mov r8, qword [rcx]
dec qword [0x180337a30]
mov rax, qword [rcx + 8]
mov qword [rax], r8
mov rax, qword [rcx + 8]
mov qword [r8 + 8], rax
mov edx, 0x18
call fcn.18020e750
movzx edx, dil
movabs rax, 0xcbf29ce484222325
xor rdx, rax
movabs r8, 0x100000001b3
imul rdx, r8
mov eax, edi
shr eax, 8
movzx ecx, al
xor rdx, rcx
imul rdx, r8
mov eax, edi
shr eax, 0x10
movzx ecx, al
xor rcx, rdx
imul rcx, r8
mov eax, edi
shr rax, 0x18
xor rcx, rax
imul rcx, r8
and rcx, qword [0x180337a18]
shl rcx, 4
add rcx, qword [0x180337a00]
mov rbx, qword [rcx + 8]
mov rdx, qword [0x1803379f0]
cmp rbx, rdx
je 0x18008dd94
mov rax, qword [rcx]
cmp edi, dword [rbx + 0x10]
je 0x18008dd96
cmp rbx, rax
je 0x18008dd94
mov rbx, qword [rbx + 8]
cmp edi, dword [rbx + 0x10]
jne 0x18008dd84
jmp 0x18008dd96
xor ebx, ebx
test rbx, rbx
je 0x18008ddfc
mov rax, qword [rcx]
cmp qword [rcx + 8], rbx
jne 0x18008ddbc
cmp rax, rbx
jne 0x18008ddb2
mov qword [rcx], rdx
mov qword [rcx + 8], rdx
jmp 0x18008ddc7
mov rdx, qword [rbx + 8]
mov qword [rcx + 8], rdx
jmp 0x18008ddc7
cmp rax, rbx
jne 0x18008ddc7
mov rax, qword [rbx]
mov qword [rcx], rax
mov rcx, qword [rbx]
dec qword [0x1803379f8]
mov rax, qword [rbx + 8]
mov qword [rax], rcx
mov rax, qword [rbx + 8]
mov qword [rcx + 8], rax
lea rcx, [rbx + 0x20]
cmp qword [rcx], 0
je 0x18008ddef
call fcn.18005c410
mov edx, 0x28
mov rcx, rbx
call fcn.18020e750
mov r8, rsi
mov rdx, qword [0x180337a28]
mov rdx, qword [rdx]
lea rcx, [0x180337a28]
call fcn.18008f1d0
mov rbx, rax
mov qword [rsp + 0x20], rax
mov rdi, qword [r14]
mov qword [rsp + 0x28], rdi
test rdi, rdi
je 0x18008de34
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.d2d1.dll_Ordinal_8]
nop
mov r8, rsi
lea rdx, [rsp + 0x30]
lea rcx, [0x1803379e8]
call fcn.18008f250
mov rcx, qword [rax]
mov qword [rcx + 0x18], rbx
lea rbx, [rcx + 0x20]
lea rax, [rsp + 0x28]
cmp rbx, rax
je 0x18008de79
cmp qword [rbx], 0
je 0x18008de6b
mov rcx, rbx
call fcn.18005c410
mov qword [rsp + 0x28], 0
mov qword [rbx], rdi
xor edi, edi
test rdi, rdi
je 0x18008de88
lea rcx, [rsp + 0x28]
call fcn.18005c410
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
add rsp, 0x40
pop r14
ret
Function at 0x18008e160
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov rax, qword [0x1802ec4c0]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x28], r8
mov r15, rdx
mov qword [rsp + 0x20], rdx
mov rax, qword [0x180337b60]
cmp qword [0x180337b78], rax
jb 0x18008e363
mov rax, qword [0x180337ba8]
mov rdx, qword [rax + 8]
add rdx, 0x10
lea rcx, [rsp + 0x38]
call fcn.180059390
mov rax, qword [0x180337ba8]
mov rbx, qword [rax + 8]
mov rdx, qword [rbx]
dec qword [0x180337bb0]
mov rax, qword [rbx + 8]
mov qword [rax], rdx
mov rax, qword [rbx + 8]
mov qword [rdx + 8], rax
lea rcx, [rbx + 0x10]
call fcn.180059890
mov edx, 0x30
mov rcx, rbx
call fcn.18020e750
lea r8, [rsp + 0x38]
mov rbp, qword [rsp + 0x38]
mov r13, qword [rsp + 0x50]
cmp r13, 0xf
cmova r8, rbp
movabs rcx, 0xcbf29ce484222325
xor edi, edi
mov edx, edi
mov rsi, qword [rsp + 0x48]
test rsi, rsi
je 0x18008e254
movabs r9, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
xor rcx, rax
imul rcx, r9
inc rdx
cmp rdx, rsi
jb 0x18008e240
and rcx, qword [0x180337b98]
shl rcx, 4
mov r14, qword [0x180337b80]
add r14, rcx
mov rbx, qword [r14 + 8]
mov r12, qword [0x180337b70]
cmp rbx, r12
je 0x18008e2c3
mov r15, qword [r14]
nop dword [rax]
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x18008e292
mov rdx, qword [rdx]
lea rcx, [rsp + 0x38]
cmp r13, 0xf
cmova rcx, rbp
cmp rsi, rax
jne 0x18008e2b0
mov r8, rsi
call fcn.180245950
test eax, eax
je 0x18008e2bb
cmp rbx, r15
je 0x18008e2be
mov rbx, qword [rbx + 8]
jmp 0x18008e280
mov rdi, rbx
mov r15, qword [rsp + 0x20]
test rdi, rdi
je 0x18008e32c
mov rax, qword [r14]
cmp qword [r14 + 8], rdi
jne 0x18008e2e9
cmp rax, rdi
jne 0x18008e2df
mov qword [r14], r12
mov qword [r14 + 8], r12
jmp 0x18008e2f4
mov r12, qword [rdi + 8]
mov qword [r14 + 8], r12
jmp 0x18008e2f4
cmp rax, rdi
jne 0x18008e2f4
mov rax, qword [rdi]
mov qword [r14], rax
mov rdx, qword [rdi]
dec qword [0x180337b78]
mov rax, qword [rdi + 8]
mov qword [rax], rdx
mov rax, qword [rdi + 8]
mov qword [rdx + 8], rax
lea rcx, [rdi + 0x38]
call fcn.1800585d0
lea rcx, [rdi + 0x10]
call fcn.180059890
mov edx, 0x58
mov rcx, rdi
call fcn.18020e750
cmp r13, 0xf
jbe 0x18008e363
lea rdx, [r13 + 1]
mov rax, rbp
cmp rdx, 0x1000
jb 0x18008e35b
add rdx, 0x27
mov rbp, qword [rbp - 8]
sub rax, rbp
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008e3f5
mov rcx, rbp
call fcn.18020e750
mov r8, r15
mov rdx, qword [0x180337ba8]
mov rdx, qword [rdx]
lea rcx, [0x180337ba8]
call fcn.18008ea90
mov qword [rsp + 0x58], rax
mov rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0x60]
call fcn.180058410
nop
mov r8, r15
lea rdx, [rsp + 0x28]
lea rcx, [0x180337b68]
call fcn.18008eb30
mov rcx, qword [rax]
mov rax, qword [rsp + 0x58]
mov qword [rcx + 0x30], rax
add rcx, 0x38
lea rdx, [rsp + 0x60]
call fcn.1800904f0
nop
lea rcx, [rsp + 0x60]
call fcn.1800585d0
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.18020e120
mov rbx, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1802214b8
int3
Function at 0x18008fb10
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x18008fcc1
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x40], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.180042ed0
lea rax, [rdi - 1]
mov qword [rsi + 0x38], rdi
mov qword [rsi + 0x30], rax
mov rax, qword [rsi + 8]
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x18008fc86
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop dword [rax]
nop dword [rax + rax]
movzx edx, byte [rax + 0x11]
movzx r9d, byte [rax + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rcx, qword [rcx]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x12]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x13]
imul r9, rdi
xor r9, rdx
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r9, qword [r11]
cmp r9, rbx
jne 0x18008fc00
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x18008fc75
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x18008fc3d
mov r10, qword [rdx]
cmp r10, rax
je 0x18008fc37
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x18008fc75
cmp r9, rdx
je 0x18008fc51
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x18008fc9b
cmp r9, rdx
jne 0x18008fc42
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
jne 0x18008fbb0
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x18008fc75
lea rcx, str.invalid_hash_bucket_count
call fcn.18020adf0
int3
Function at 0x180099360
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
push r14
sub rsp, 0x48
mov rbp, r8
mov r14, rdx
cmp rdx, r8
je 0x180099549
cmp qword [rdx + 0x28], 0xf
lea r8, [rdx + 0x10]
mov r10, qword [0x1803b7ed8]
mov r9, qword [r8 + 0x10]
mov qword [rax + 0x20], rbx
mov rbx, rdx
mov qword [rax - 0x18], rsi
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r13
mov qword [rax - 0x38], r15
mov rax, qword [0x1803b7ec8]
mov qword [rsp + 0x68], rax
mov rax, qword [rdx + 8]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], r10
jbe 0x1800993cb
mov r8, qword [r8]
xor edx, edx
movabs rcx, 0xcbf29ce484222325
movabs r11, 0x100000001b3
test r9, r9
je 0x180099404
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
inc rdx
xor rcx, rax
imul rcx, r11
cmp rdx, r9
jb 0x1800993f0
and rcx, qword [0x1803b7ef0]
add rcx, rcx
mov r12, qword [r10 + rcx*8]
lea r15, [r10 + rcx*8]
mov r13, qword [r15 + 8]
nop word [rax + rax]
mov rdi, rbx
mov rsi, rbx
mov rbx, qword [rbx]
lea rcx, [rdi + 0x10]
call fcn.180059890
mov edx, 0x38
mov rcx, rdi
call fcn.18020e750
dec qword [0x1803b7ed0]
cmp rdi, r13
je 0x180099469
cmp rbx, rbp
jne 0x180099420
cmp r12, r14
jne 0x180099458
mov qword [r15], rbx
mov rax, qword [rsp + 0x60]
mov qword [rax], rbx
mov qword [rbx + 8], rax
jmp 0x18009952b
mov r13, qword [rsp + 0x60]
cmp r12, r14
mov r12, qword [rsp + 0x68]
jne 0x180099480
mov qword [r15], r12
mov rax, r12
jmp 0x180099483
mov rax, r13
mov qword [r15 + 8], rax
cmp rbx, rbp
je 0x180099523
cmp qword [rbx + 0x28], 0xf
lea r8, [rbx + 0x10]
mov r9, qword [r8 + 0x10]
jbe 0x1800994a2
mov r8, qword [r8]
xor edx, edx
movabs rcx, 0xcbf29ce484222325
test r9, r9
je 0x1800994d9
movabs r13, 0x100000001b3
nop dword [rax]
movzx eax, byte [r8 + rdx]
inc rdx
xor rcx, rax
imul rcx, r13
cmp rdx, r9
jb 0x1800994c0
mov r13, qword [rsp + 0x60]
and rcx, qword [0x1803b7ef0]
mov r14, qword [rsp + 0x70]
shl rcx, 4
add r14, rcx
mov r15, qword [r14 + 8]
mov rdi, rbx
mov rsi, rbx
mov rbx, qword [rbx]
lea rcx, [rdi + 0x10]
call fcn.180059890
mov edx, 0x38
mov rcx, rdi
call fcn.18020e750
dec qword [0x1803b7ed0]
cmp rdi, r15
je 0x180099554
cmp rbx, rbp
jne 0x1800994f0
mov qword [r14], rbx
mov qword [r13], rbx
mov qword [rbx + 8], r13
mov r13, qword [rsp + 0x28]
mov r12, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x78]
mov r15, qword [rsp + 0x20]
mov rax, rbp
add rsp, 0x48
pop r14
pop rbp
ret
mov qword [r14], r12
mov qword [r14 + 8], r12
cmp rbx, rbp
jne 0x180099490
jmp 0x180099523
Function at 0x18009eab0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x20
movzx esi, r8b
mov rbx, rcx
lea rdi, [rcx + 8]
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
xor ebp, ebp
mov qword [rdi + 0x10], rbp
mov qword [rdi + 0x18], 0xf
mov byte [rdi], bpl
mov qword [rcx + 0x28], rbp
mov qword [rcx + 0x30], rbp
cmp rdi, rdx
je 0x18009eb0e
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x18009eb06
mov rdx, qword [rdx]
mov rcx, rdi
call fcn.1800422d0
test sil, sil
je 0x18009eb1e
mov dword [rbx], 2
mov r8b, 2
jmp 0x18009eb23
mov dword [rbx], ebp
xor r8b, r8b
movabs rsi, 0xcbf29ce484222325
mov rax, rsi
movabs r11, 0x100000001b3
cmp qword [rbx + 0x18], 0
je 0x18009eb89
mov r10, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x18009eb56
mov r10, qword [rdi]
mov r9, r10
mov rdx, r10
jmp 0x18009eb5c
mov rdx, rdi
mov r9, rdi
add r9, qword [rdi + 0x10]
cmp r10, r9
je 0x18009eb8c
nop word [rax + rax]
imul rax, r11
movsx rcx, byte [rdx]
xor rax, rcx
inc rdx
cmp rdx, r9
jne 0x18009eb70
movzx r8d, byte [rbx]
jmp 0x18009eb8c
mov rax, rbp
movzx ecx, r8b
xor rcx, rsi
imul rcx, r11
mov qword [rbx + 0x28], rax
xor rcx, rax
mov qword [rbx + 0x30], rcx
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x18009f750
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x50
mov rax, qword [0x1802ec4c0]
xor rax, rsp
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], 5
mov qword [rsp + 0x38], 0xf
mov r10d, dword [str.vsync]
mov dword [rsp + 0x20], r10d
movzx r9d, byte [0x1802a0b24]
mov byte [rsp + 0x24], r9b
mov byte [rsp + 0x25], 0
movabs rcx, 0xcbf29ce484222325
xor edi, edi
mov edx, edi
movabs r8, 0x100000001b3
nop dword [rax]
movzx eax, byte [rsp + rdx + 0x20]
xor rcx, rax
imul rcx, r8
inc rdx
cmp rdx, 5
jb 0x18009f7c0
and rcx, qword [0x180343c30]
shl rcx, 4
mov r8, qword [0x180343c18]
add r8, rcx
mov rcx, qword [r8 + 8]
mov r11, qword [0x180343c08]
cmp rcx, r11
je 0x18009f82e
mov r8, qword [r8]
nop dword [rax]
lea rax, [rcx + 0x10]
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x18009f812
mov rax, qword [rax]
cmp rdx, 5
jne 0x18009f823
cmp r10d, dword [rax]
jne 0x18009f823
cmp r9b, byte [rax + 4]
je 0x18009f831
cmp rcx, r8
je 0x18009f82e
mov rcx, qword [rcx + 8]
jmp 0x18009f800
mov rcx, rdi
mov rax, r11
test rcx, rcx
cmovne rax, rcx
cmp rax, r11
je 0x18009f844
mov rdi, qword [rax + 0x30]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
movdqa xmm1, xmmword [0x1802b85c0]
movdqu xmmword [rsp + 0x30], xmm1
mov dword [rsp + 0x20], r10d
mov byte [rsp + 0x24], r9b
mov byte [rsp + 0x25], 0
lea rcx, [rsp + 0x20]
call fcn.18009f910
mov rbx, rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x18009f8af
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18009f8aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18009f8fe
call fcn.18020e750
test rbx, rbx
je 0x18009f8e6
cmp byte [rdi + 0x28], 0
je 0x18009f8d0
mov rcx, rbx
call fcn.18009f650
test al, al
je 0x18009f8ca
xor edx, edx
jmp 0x18009f8de
cmp byte [rdi + 0x28], 0
jne 0x18009f8e6
mov rcx, rbx
call fcn.18009f650
test al, al
jne 0x18009f8e6
mov dl, 1
mov rcx, rbx
call fcn.18009f6d0
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.18020e120
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rdi
ret
call fcn.1802214b8
int3
Function at 0x1800a6ee0
Capabilities:
Hash data using fnv

Disassembly:
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x1800a708e
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x180337c48]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x180337c58]
lea rdx, [rdi + rdi]
call fcn.180042ed0
mov rax, qword [0x180337c48]
lea r9, [rdi - 1]
mov qword [0x180337c70], r9
mov qword [0x180337c78], rdi
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x1800a7083
mov qword [rsp + 0x38], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
nop word [rax + rax]
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rsi
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rdi
xor r11, rdx
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x180337c58]
mov r9, qword [r11]
cmp r9, rbx
jne 0x1800a6fcf
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x1800a7044
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x1800a700c
mov r10, qword [rdx]
cmp r10, rax
je 0x1800a7006
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x1800a7044
cmp r9, rdx
je 0x1800a7020
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x1800a7058
cmp r9, rdx
jne 0x1800a7011
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
je 0x1800a707e
mov r9, qword [0x180337c70]
jmp 0x1800a6f80
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x1800a7044
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
lea rcx, str.invalid_hash_bucket_count
call fcn.18020adf0
int3