joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14004c480
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x40
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor ecx, ecx
mov r9d, 0x400
mov qword [rsp + 0x30], rcx
mov r8d, eax
mov dword [rsp + 0x28], ecx
xor edx, edx
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rcx
mov ecx, 0x1300
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
mov rbx, qword [rsp + 0x50]
mov ecx, 2
call fcn.1400f6cc8
mov r8, rbx
lea rdx, str.Fossilize_ERROR:_Error:__s_n
mov rcx, rax
call fcn.140002150
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]

Function at 0x14004d300
Capabilities:
Read file via mapping

Disassembly:
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
mov rsi, rdx
mov r8, rcx
xor edx, edx
lea ecx, [rdx + 6]
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov rdi, rax
test rax, rax
jne 0x14004d357
lea ecx, [rax + 2]
call fcn.1400f6cc8
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Failed_to_open_file_mapping_in_replayer._n
call fcn.140002150
lea ecx, [rdi + 2]
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
xor al, al
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
xor r9d, r9d
mov qword [rsp + 0x40], rbx
xor r8d, r8d
mov qword [rsp + 0x20], 0
mov rcx, rdi
lea edx, [r9 + 6]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
test rax, rax
jne 0x14004d3b9
lea ecx, [rax + 2]
call fcn.1400f6cc8
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Failed_to_map_view_of_file_in_replayer._n
call fcn.140002150
lea ecx, [rbx + 2]
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
mov rbx, qword [rsp + 0x40]
xor al, al
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
cmp dword [rax], 0x19bcde1b
mov qword [0x1401bc610], rbx
jne 0x14004d3e8
cmp dword [rax + 0x888], 0x890
jb 0x14004d3e8
mov eax, dword [rax + 0x88c]
test eax, eax
je 0x14004d3e8
mov ecx, eax
dec rax
test rcx, rax
je 0x14004d430
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Control_block_is_corrupt._n
call fcn.140002150
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1401bc610], 0
mov r8, rsi
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
mov rbx, qword [rsp + 0x40]
test rax, rax
mov rsi, qword [rsp + 0x48]
mov qword [0x1401bc628], rax
setne al
add rsp, 0x30
pop rdi
ret
Function at 0x140054170
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x40
mov rbx, rcx
xor ebp, ebp
mov dword [rcx + 0x440], ebp
mov edx, ebp
mov eax, dword [rcx + 0x418]
test eax, eax
je 0x1400541ce
nop dword [rax]
inc edx
mov eax, edx
imul rcx, rax, 0xb0
add rcx, qword [rbx + 0x5c8]
mov eax, dword [rbx + 0x100]
mov dword [rcx + 0xc], eax
mov eax, dword [rbx + 0x108]
mov dword [rcx + 0x10], eax
mov eax, dword [rbx + 0x418]
cmp edx, eax
jb 0x1400541a0
mov edi, ebp
test eax, eax
je 0x14005428c
lea r14, [0x1400560f0]
nop
mov ecx, 0x18
call fcn.1400ec60c
mov r9, rax
test rax, rax
je 0x140054202
lea eax, [rdi + 1]
mov dword [r9], eax
mov qword [r9 + 8], rbx
mov qword [r9 + 0x10], r14
jmp 0x140054205
mov r9, rbp
mov qword [rsp + 0x60], r9
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebp
lea r8, [0x14003cd60]
xor edx, edx
xor ecx, ecx
call fcn.1400fa88c
mov qword [rsp + 0x30], rax
test rax, rax
je 0x1400542ef
mov rdx, qword [rbx + 0x5b8]
cmp rdx, qword [rbx + 0x5c0]
je 0x140054261
xorps xmm0, xmm0
movaps xmm1, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movups xmmword [rdx], xmm1
add qword [rbx + 0x5b8], 0x10
jmp 0x140054273
lea r8, [rsp + 0x30]
lea rcx, [rbx + 0x5b0]
call fcn.14003c570
nop
cmp dword [rsp + 0x38], 0
jne 0x140054306
inc edi
cmp edi, dword [rbx + 0x418]
jb 0x1400541e0
lea rcx, [rbx + 0x5e0]
call fcn.1400e9ba0
test eax, eax
jne 0x1400542fe
mov eax, dword [rbx + 0x418]
cmp dword [rbx + 0x440], eax
je 0x1400542d1
nop word [rax + rax]
lea rdx, [rbx + 0x5e0]
lea rcx, [rbx + 0x490]
call fcn.1400e9e04
mov eax, dword [rbx + 0x418]
cmp dword [rbx + 0x440], eax
jne 0x1400542b0
lea rcx, [rbx + 0x5e0]
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
add rsp, 0x40
pop r14
pop rdi
pop rsi
jmp fcn.1400e9bc4
mov dword [rsp + 0x38], ebp
mov ecx, 6
call fcn.1400ea02c
nop
mov ecx, eax
call fcn.1400e9ff0
int3
call fcn.1400fa740
int3
Function at 0x1400596d0
Capabilities:
Hash data using fnv

Disassembly:
movzx r9d, byte [r8]
mov r10, rcx
movabs rcx, 0x100000001b3
mov r11, rdx
movabs rax, 0xcbf29ce484222325
xor r9, rax
movzx eax, byte [r8 + 1]
mov rdx, qword [r10 + 0x30]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 2]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 3]
imul r9, rcx
xor r9, rax
imul r9, rcx
and rdx, r9
mov r9, qword [r10 + 8]
shl rdx, 4
add rdx, qword [r10 + 0x18]
mov rax, qword [rdx + 8]
cmp rax, r9
je 0x14005975c
mov ecx, dword [r8]
mov rdx, qword [rdx]
cmp ecx, dword [rax + 0x10]
je 0x14005975e
cmp rax, rdx
je 0x14005975c
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x140059740
test rax, rax
cmove rax, r9
mov qword [r11], rax
mov rax, r11
ret
xor eax, eax
test rax, rax
cmove rax, r9
mov qword [r11], rax
mov rax, r11
ret
Function at 0x14005ac40
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x14005ae02
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x40], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.1400019e0
mov qword [rsi + 0x38], rdi
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x14005adc7
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + 0x11]
movzx r9d, byte [rcx + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rdx, qword [rdx]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x12]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x13]
imul r9, rdi
xor r9, rax
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r10, qword [r11]
cmp r10, rbx
jne 0x14005ad33
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x14005adb6
mov rax, qword [r11 + 8]
mov r9d, dword [rcx + 0x10]
cmp r9d, dword [rax + 0x10]
jne 0x14005ad70
mov r10, qword [rax]
cmp r10, rcx
je 0x14005ad6a
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x14005adb6
mov r8, rax
cmp r10, rax
je 0x14005ad92
nop dword [rax + rax]
mov rax, qword [rax + 8]
mov r8, rax
cmp r9d, dword [rax + 0x10]
je 0x14005addc
cmp r10, rax
jne 0x14005ad80
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x14005ace0
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov r10, qword [rax]
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
jmp 0x14005adb6
lea rcx, str.invalid_hash_bucket_count
call fcn.1400e95d0
int3
Function at 0x14005ae10
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x14005afd2
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x40], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.14005aa80
mov qword [rsi + 0x38], rdi
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x14005af97
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + 0x11]
movzx r9d, byte [rcx + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rdx, qword [rdx]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x12]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x13]
imul r9, rdi
xor r9, rax
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r10, qword [r11]
cmp r10, rbx
jne 0x14005af03
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x14005af86
mov rax, qword [r11 + 8]
mov r9d, dword [rcx + 0x10]
cmp r9d, dword [rax + 0x10]
jne 0x14005af40
mov r10, qword [rax]
cmp r10, rcx
je 0x14005af3a
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x14005af86
mov r8, rax
cmp r10, rax
je 0x14005af62
nop dword [rax + rax]
mov rax, qword [rax + 8]
mov r8, rax
cmp r9d, dword [rax + 0x10]
je 0x14005afac
cmp r10, rax
jne 0x14005af50
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x14005aeb0
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov r10, qword [rax]
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
jmp 0x14005af86
lea rcx, str.invalid_hash_bucket_count
call fcn.1400e95d0
int3
Function at 0x14005c2b0
Capabilities:
Hash data using fnv

Disassembly:
push rbp
push rsi
push r14
sub rsp, 0x40
mov rbp, r8
mov r14, rdx
mov rsi, rcx
cmp rdx, r8
je 0x14005c3ae
mov rdx, qword [rcx + 0x18]
movabs r8, 0x100000001b3
mov qword [rsp + 0x60], rbx
movabs rax, 0xcbf29ce484222325
mov qword [rsp + 0x38], rdi
mov rbx, r14
mov qword [rsp + 0x30], r12
mov r12, qword [rcx + 8]
movzx ecx, byte [r14 + 0x10]
xor rcx, rax
mov qword [rsp + 0x28], r13
movzx eax, byte [r14 + 0x11]
mov r13, qword [r14 + 8]
imul rcx, r8
mov qword [rsp + 0x20], r15
mov r15, qword [rsi + 0x30]
xor rcx, rax
movzx eax, byte [r14 + 0x12]
imul rcx, r8
mov qword [rsp + 0x78], rdx
xor rcx, rax
movzx eax, byte [r14 + 0x13]
imul rcx, r8
xor rcx, rax
imul rcx, r8
and r15, rcx
shl r15, 4
add r15, rdx
mov rax, qword [r15]
mov qword [rsp + 0x68], rax
mov rax, qword [r15 + 8]
mov qword [rsp + 0x70], rax
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x18
call fcn.1400ec648
dec qword [rsi + 0x10]
cmp rdi, qword [rsp + 0x70]
je 0x14005c3ba
cmp rbx, rbp
jne 0x14005c360
cmp qword [rsp + 0x68], r14
jne 0x14005c38d
mov qword [r15], rbx
mov r12, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov r15, qword [rsp + 0x20]
mov qword [r13], rbx
mov qword [rbx + 8], r13
mov r13, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x60]
mov rax, rbp
add rsp, 0x40
pop r14
pop rsi
pop rbp
ret
cmp qword [rsp + 0x68], r14
jne 0x14005c3c9
mov qword [r15], r12
mov rax, r12
jmp 0x14005c3cc
mov rax, r13
mov qword [r15 + 8], rax
cmp rbx, rbp
je 0x14005c38d
nop word [rax + rax]
movzx ecx, byte [rbx + 0x10]
movabs rdx, 0x100000001b3
mov r15, qword [rsi + 0x30]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movzx eax, byte [rbx + 0x11]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x12]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x13]
imul rcx, rdx
xor rcx, rax
imul rcx, rdx
and r15, rcx
shl r15, 4
add r15, qword [rsp + 0x78]
mov r14, qword [r15 + 8]
nop dword [rax]
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x18
call fcn.1400ec648
dec qword [rsi + 0x10]
cmp rdi, r14
je 0x14005c466
cmp rbx, rbp
jne 0x14005c440
jmp 0x14005c38a
mov qword [r15], r12
mov qword [r15 + 8], r12
cmp rbx, rbp
jne 0x14005c3e0
jmp 0x14005c38d
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x14005c76c
mov rax, qword [rdi + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x14005c6fa
mov rdx, qword [rdi + 8]
mov rcx, rdi
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x20
pop rdi
jmp 0x14005c2b0
mov rcx, qword [rdi + 8]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x14005c73a
mov qword [rsp + 0x38], rbx
nop word [rax + rax]
mov rbx, qword [rcx]
mov edx, 0x18
call fcn.1400ec648
mov rcx, rbx
test rbx, rbx
jne 0x14005c720
mov rbx, qword [rsp + 0x38]
mov rax, qword [rdi + 8]
lea r8, [rsp + 0x30]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 8], rax
mov qword [rdi + 0x10], 0
mov rax, qword [rdi + 8]
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x30], rax
call fcn.140001380
add rsp, 0x20
pop rdi
ret
Function at 0x14005c480
Capabilities:
Hash data using fnv

Disassembly:
push rbp
push rsi
push r14
sub rsp, 0x40
mov rbp, r8
mov r14, rdx
mov rsi, rcx
cmp rdx, r8
je 0x14005c57e
mov rdx, qword [rcx + 0x18]
movabs r8, 0x100000001b3
mov qword [rsp + 0x60], rbx
movabs rax, 0xcbf29ce484222325
mov qword [rsp + 0x38], rdi
mov rbx, r14
mov qword [rsp + 0x30], r12
mov r12, qword [rcx + 8]
movzx ecx, byte [r14 + 0x10]
xor rcx, rax
mov qword [rsp + 0x28], r13
movzx eax, byte [r14 + 0x11]
mov r13, qword [r14 + 8]
imul rcx, r8
mov qword [rsp + 0x20], r15
mov r15, qword [rsi + 0x30]
xor rcx, rax
movzx eax, byte [r14 + 0x12]
imul rcx, r8
mov qword [rsp + 0x78], rdx
xor rcx, rax
movzx eax, byte [r14 + 0x13]
imul rcx, r8
xor rcx, rax
imul rcx, r8
and r15, rcx
shl r15, 4
add r15, rdx
mov rax, qword [r15]
mov qword [rsp + 0x68], rax
mov rax, qword [r15 + 8]
mov qword [rsp + 0x70], rax
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x20
call fcn.1400ec648
dec qword [rsi + 0x10]
cmp rdi, qword [rsp + 0x70]
je 0x14005c58a
cmp rbx, rbp
jne 0x14005c530
cmp qword [rsp + 0x68], r14
jne 0x14005c55d
mov qword [r15], rbx
mov r12, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov r15, qword [rsp + 0x20]
mov qword [r13], rbx
mov qword [rbx + 8], r13
mov r13, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x60]
mov rax, rbp
add rsp, 0x40
pop r14
pop rsi
pop rbp
ret
cmp qword [rsp + 0x68], r14
jne 0x14005c599
mov qword [r15], r12
mov rax, r12
jmp 0x14005c59c
mov rax, r13
mov qword [r15 + 8], rax
cmp rbx, rbp
je 0x14005c55d
nop word [rax + rax]
movzx ecx, byte [rbx + 0x10]
movabs rdx, 0x100000001b3
mov r15, qword [rsi + 0x30]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movzx eax, byte [rbx + 0x11]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x12]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x13]
imul rcx, rdx
xor rcx, rax
imul rcx, rdx
and r15, rcx
shl r15, 4
add r15, qword [rsp + 0x78]
mov r14, qword [r15 + 8]
nop dword [rax]
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x20
call fcn.1400ec648
dec qword [rsi + 0x10]
cmp rdi, r14
je 0x14005c636
cmp rbx, rbp
jne 0x14005c610
jmp 0x14005c55a
mov qword [r15], r12
mov qword [r15 + 8], r12
cmp rbx, rbp
jne 0x14005c5b0
jmp 0x14005c55d
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x14005c82c
mov rax, qword [rdi + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x14005c7ba
mov rdx, qword [rdi + 8]
mov rcx, rdi
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x20
pop rdi
jmp 0x14005c480
mov rcx, qword [rdi + 8]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x14005c7fa
mov qword [rsp + 0x38], rbx
nop word [rax + rax]
mov rbx, qword [rcx]
mov edx, 0x20
call fcn.1400ec648
mov rcx, rbx
test rbx, rbx
jne 0x14005c7e0
mov rbx, qword [rsp + 0x38]
mov rax, qword [rdi + 8]
lea r8, [rsp + 0x30]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 8], rax
mov qword [rdi + 0x10], 0
mov rax, qword [rdi + 8]
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x30], rax
call fcn.140059640
add rsp, 0x20
pop rdi
ret
Function at 0x14005c6c0
Capabilities:
Hash data using fnv

Disassembly:
push rbp
push rsi
push r14
sub rsp, 0x40
mov rbp, r8
mov r14, rdx
mov rsi, rcx
cmp rdx, r8
je 0x14005c3ae
mov rdx, qword [rcx + 0x18]
movabs r8, 0x100000001b3
mov qword [rsp + 0x60], rbx
movabs rax, 0xcbf29ce484222325
mov qword [rsp + 0x38], rdi
mov rbx, r14
mov qword [rsp + 0x30], r12
mov r12, qword [rcx + 8]
movzx ecx, byte [r14 + 0x10]
xor rcx, rax
mov qword [rsp + 0x28], r13
movzx eax, byte [r14 + 0x11]
mov r13, qword [r14 + 8]
imul rcx, r8
mov qword [rsp + 0x20], r15
mov r15, qword [rsi + 0x30]
xor rcx, rax
movzx eax, byte [r14 + 0x12]
imul rcx, r8
mov qword [rsp + 0x78], rdx
xor rcx, rax
movzx eax, byte [r14 + 0x13]
imul rcx, r8
xor rcx, rax
imul rcx, r8
and r15, rcx
shl r15, 4
add r15, rdx
mov rax, qword [r15]
mov qword [rsp + 0x68], rax
mov rax, qword [r15 + 8]
mov qword [rsp + 0x70], rax
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x18
call fcn.1400ec648
dec qword [rsi + 0x10]
cmp rdi, qword [rsp + 0x70]
je 0x14005c3ba
cmp rbx, rbp
jne 0x14005c360
cmp qword [rsp + 0x68], r14
jne 0x14005c38d
mov qword [r15], rbx
mov r12, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov r15, qword [rsp + 0x20]
mov qword [r13], rbx
mov qword [rbx + 8], r13
mov r13, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x60]
mov rax, rbp
add rsp, 0x40
pop r14
pop rsi
pop rbp
ret
cmp qword [rsp + 0x68], r14
jne 0x14005c3c9
mov qword [r15], r12
mov rax, r12
jmp 0x14005c3cc
mov rax, r13
mov qword [r15 + 8], rax
cmp rbx, rbp
je 0x14005c38d
nop word [rax + rax]
movzx ecx, byte [rbx + 0x10]
movabs rdx, 0x100000001b3
mov r15, qword [rsi + 0x30]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movzx eax, byte [rbx + 0x11]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x12]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x13]
imul rcx, rdx
xor rcx, rax
imul rcx, rdx
and r15, rcx
shl r15, 4
add r15, qword [rsp + 0x78]
mov r14, qword [r15 + 8]
nop dword [rax]
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x18
call fcn.1400ec648
dec qword [rsi + 0x10]
cmp rdi, r14
je 0x14005c466
cmp rbx, rbp
jne 0x14005c440
jmp 0x14005c38a
mov qword [r15], r12
mov qword [r15 + 8], r12
cmp rbx, rbp
jne 0x14005c3e0
jmp 0x14005c38d
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x14005c76c
mov rax, qword [rdi + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x14005c6fa
mov rdx, qword [rdi + 8]
mov rcx, rdi
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x20
pop rdi
jmp 0x14005c2b0
mov rcx, qword [rdi + 8]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x14005c73a
mov qword [rsp + 0x38], rbx
nop word [rax + rax]
mov rbx, qword [rcx]
mov edx, 0x18
call fcn.1400ec648
mov rcx, rbx
test rbx, rbx
jne 0x14005c720
mov rbx, qword [rsp + 0x38]
mov rax, qword [rdi + 8]
lea r8, [rsp + 0x30]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 8], rax
mov qword [rdi + 0x10], 0
mov rax, qword [rdi + 8]
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x30], rax
call fcn.140001380
add rsp, 0x20
pop rdi
ret
Function at 0x14005c780
Capabilities:
Hash data using fnv

Disassembly:
push rbp
push rsi
push r14
sub rsp, 0x40
mov rbp, r8
mov r14, rdx
mov rsi, rcx
cmp rdx, r8
je 0x14005c57e
mov rdx, qword [rcx + 0x18]
movabs r8, 0x100000001b3
mov qword [rsp + 0x60], rbx
movabs rax, 0xcbf29ce484222325
mov qword [rsp + 0x38], rdi
mov rbx, r14
mov qword [rsp + 0x30], r12
mov r12, qword [rcx + 8]
movzx ecx, byte [r14 + 0x10]
xor rcx, rax
mov qword [rsp + 0x28], r13
movzx eax, byte [r14 + 0x11]
mov r13, qword [r14 + 8]
imul rcx, r8
mov qword [rsp + 0x20], r15
mov r15, qword [rsi + 0x30]
xor rcx, rax
movzx eax, byte [r14 + 0x12]
imul rcx, r8
mov qword [rsp + 0x78], rdx
xor rcx, rax
movzx eax, byte [r14 + 0x13]
imul rcx, r8
xor rcx, rax
imul rcx, r8
and r15, rcx
shl r15, 4
add r15, rdx
mov rax, qword [r15]
mov qword [rsp + 0x68], rax
mov rax, qword [r15 + 8]
mov qword [rsp + 0x70], rax
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x20
call fcn.1400ec648
dec qword [rsi + 0x10]
cmp rdi, qword [rsp + 0x70]
je 0x14005c58a
cmp rbx, rbp
jne 0x14005c530
cmp qword [rsp + 0x68], r14
jne 0x14005c55d
mov qword [r15], rbx
mov r12, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov r15, qword [rsp + 0x20]
mov qword [r13], rbx
mov qword [rbx + 8], r13
mov r13, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x60]
mov rax, rbp
add rsp, 0x40
pop r14
pop rsi
pop rbp
ret
cmp qword [rsp + 0x68], r14
jne 0x14005c599
mov qword [r15], r12
mov rax, r12
jmp 0x14005c59c
mov rax, r13
mov qword [r15 + 8], rax
cmp rbx, rbp
je 0x14005c55d
nop word [rax + rax]
movzx ecx, byte [rbx + 0x10]
movabs rdx, 0x100000001b3
mov r15, qword [rsi + 0x30]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movzx eax, byte [rbx + 0x11]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x12]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x13]
imul rcx, rdx
xor rcx, rax
imul rcx, rdx
and r15, rcx
shl r15, 4
add r15, qword [rsp + 0x78]
mov r14, qword [r15 + 8]
nop dword [rax]
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x20
call fcn.1400ec648
dec qword [rsi + 0x10]
cmp rdi, r14
je 0x14005c636
cmp rbx, rbp
jne 0x14005c610
jmp 0x14005c55a
mov qword [r15], r12
mov qword [r15 + 8], r12
cmp rbx, rbp
jne 0x14005c5b0
jmp 0x14005c55d
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x14005c82c
mov rax, qword [rdi + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x14005c7ba
mov rdx, qword [rdi + 8]
mov rcx, rdi
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x20
pop rdi
jmp 0x14005c480
mov rcx, qword [rdi + 8]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x14005c7fa
mov qword [rsp + 0x38], rbx
nop word [rax + rax]
mov rbx, qword [rcx]
mov edx, 0x20
call fcn.1400ec648
mov rcx, rbx
test rbx, rbx
jne 0x14005c7e0
mov rbx, qword [rsp + 0x38]
mov rax, qword [rdi + 8]
lea r8, [rsp + 0x30]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 8], rax
mov qword [rdi + 0x10], 0
mov rax, qword [rdi + 8]
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x30], rax
call fcn.140059640
add rsp, 0x20
pop rdi
ret
Function at 0x14005ee00
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x190
mov ebx, r8d
mov r11, rcx
movzx r10d, r8b
movabs rax, 0xcbf29ce484222325
xor r10, rax
movabs r8, 0x100000001b3
imul r10, r8
mov eax, ebx
shr eax, 8
movzx r9d, al
xor r10, r9
imul r10, r8
mov eax, ebx
shr eax, 0x10
movzx ecx, al
xor r10, rcx
imul r10, r8
mov eax, ebx
shr rax, 0x18
xor r10, rax
imul r10, r8
mov rcx, qword [r11 + 0xe0]
and rcx, r10
shl rcx, 4
add rcx, qword [r11 + 0xc8]
mov rax, qword [rcx + 8]
mov r8, qword [r11 + 0xb8]
cmp rax, r8
je 0x14005ef1f
mov rcx, qword [rcx]
cmp ebx, dword [rax + 0x10]
je 0x14005eea2
nop dword [rax + rax]
cmp rax, rcx
je 0x14005ef1f
mov rax, qword [rax + 8]
cmp ebx, dword [rax + 0x10]
jne 0x14005ee90
test rax, rax
cmove rax, r8
cmp rax, r8
je 0x14005ef1f
mov ecx, dword [rax + 0x14]
test ecx, ecx
jne 0x14005eefe
lea r8d, [rcx - 4]
lea rdx, [rsp + 0x20]
mov rcx, r11
call fcn.14005c840
nop
lea rdx, str.Type_Id
lea rcx, [rsp + 0x20]
call fcn.14002dd70
mov edx, ebx
lea rcx, [rsp + 0x20]
call fcn.14005a650
lea rdx, str._is_not_a_scalar_numeric_type
lea rcx, [rsp + 0x20]
call fcn.14002dd70
mov ebx, dword [rsp + 0x180]
jmp 0x14005ef68
mov dword [rdx + 8], ecx
mov ecx, dword [rax + 0x18]
mov dword [rdx + 0xc], ecx
mov ecx, dword [rax + 0x18]
add ecx, 0x1f
shr ecx, 5
mov word [rdx + 2], cx
xor eax, eax
add rsp, 0x190
pop rbx
ret
mov r8d, 0xfffffffc
lea rdx, [rsp + 0x20]
mov rcx, r11
call fcn.14005c840
nop
lea rdx, str.Type_Id
lea rcx, [rsp + 0x20]
call fcn.14002dd70
mov edx, ebx
lea rcx, [rsp + 0x20]
call fcn.14005a650
lea rdx, str._is_not_a_type
lea rcx, [rsp + 0x20]
call fcn.14002dd70
mov ebx, dword [rsp + 0x180]
lea rcx, [rsp + 0x20]
call fcn.1400604a0
mov eax, ebx
add rsp, 0x190
pop rbx
ret