joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180125360
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x20
mov rsi, rcx
movabs rax, 0xfffffffffffffff
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x180125541
lea rax, [rdx - 1]
or rax, rdi
bsr rcx, rax
inc ecx
shl rdi, cl
mov rbx, qword [rsi + 8]
lea rdx, [rdi + rdi]
mov r8, rbx
lea rcx, [rsi + 0x18]
call fcn.18001fd00
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rdi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x1801254ff
movabs rbp, 0xcbf29ce484222325
movabs rdi, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [rdx]
movzx r9d, byte [rcx + 0x10]
xor r9, rbp
imul r9, rdi
movzx eax, byte [rcx + 0x11]
xor r9, rax
imul r9, rdi
movzx eax, byte [rcx + 0x12]
xor r9, rax
imul r9, rdi
movzx eax, byte [rcx + 0x13]
xor r9, rax
imul r9, rdi
movzx eax, byte [rcx + 0x14]
xor r9, rax
imul r9, rdi
movzx eax, byte [rcx + 0x15]
xor r9, rax
imul r9, rdi
movzx eax, byte [rcx + 0x16]
xor r9, rax
imul r9, rdi
movzx eax, byte [rcx + 0x17]
xor r9, rax
imul r9, rdi
mov r11, qword [rsi + 0x30]
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r9, qword [r11]
cmp r9, rbx
jne 0x18012547c
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x1801254f3
mov rax, qword [r11 + 8]
mov r8, qword [rcx + 0x10]
cmp r8, qword [rax + 0x10]
jne 0x1801254b9
mov r8, qword [rax]
cmp r8, rcx
je 0x1801254b3
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x1801254f3
cmp r9, rax
je 0x1801254cf
nop
mov rax, qword [rax + 8]
cmp r8, qword [rax + 0x10]
je 0x18012551b
cmp r9, rax
jne 0x1801254c0
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], rax
mov r8, qword [rax + 8]
mov qword [r8], rcx
mov qword [rax + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], r8
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x180125400
mov qword [rsp + 0x48], 0
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x50]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret
mov rax, qword [rax]
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], rax
mov r8, qword [rax + 8]
mov qword [r8], rcx
mov qword [rax + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], r8
jmp 0x1801254f3
lea rcx, str.invalid_hash_bucket_count
call fcn.1802657c8
int3
Function at 0x180140ce0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x20
mov rsi, rcx
movabs rax, 0xfffffffffffffff
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x180140ec1
lea rax, [rdx - 1]
or rax, rdi
bsr rcx, rax
inc ecx
shl rdi, cl
mov rbx, qword [rsi + 8]
lea rdx, [rdi + rdi]
mov r8, rbx
lea rcx, [rsi + 0x18]
call fcn.18001fd00
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rdi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x180140e7f
movabs rbp, 0xcbf29ce484222325
movabs rdi, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [rdx]
movzx r9d, byte [rcx + 0x10]
xor r9, rbp
imul r9, rdi
movzx eax, byte [rcx + 0x11]
xor r9, rax
imul r9, rdi
movzx eax, byte [rcx + 0x12]
xor r9, rax
imul r9, rdi
movzx eax, byte [rcx + 0x13]
xor r9, rax
imul r9, rdi
movzx eax, byte [rcx + 0x14]
xor r9, rax
imul r9, rdi
movzx eax, byte [rcx + 0x15]
xor r9, rax
imul r9, rdi
movzx eax, byte [rcx + 0x16]
xor r9, rax
imul r9, rdi
movzx eax, byte [rcx + 0x17]
xor r9, rax
imul r9, rdi
mov r11, qword [rsi + 0x30]
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r9, qword [r11]
cmp r9, rbx
jne 0x180140dfc
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x180140e73
mov rax, qword [r11 + 8]
mov r8, qword [rcx + 0x10]
cmp r8, qword [rax + 0x10]
jne 0x180140e39
mov r8, qword [rax]
cmp r8, rcx
je 0x180140e33
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x180140e73
cmp r9, rax
je 0x180140e4f
nop
mov rax, qword [rax + 8]
cmp r8, qword [rax + 0x10]
je 0x180140e9b
cmp r9, rax
jne 0x180140e40
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], rax
mov r8, qword [rax + 8]
mov qword [r8], rcx
mov qword [rax + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], r8
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x180140d80
mov qword [rsp + 0x48], 0
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x50]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret
mov rax, qword [rax]
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], rax
mov r8, qword [rax + 8]
mov qword [r8], rcx
mov qword [rax + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], r8
jmp 0x180140e73
lea rcx, str.invalid_hash_bucket_count
call fcn.1802657c8
int3
Function at 0x180140ed0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x20
mov rsi, rcx
movabs rax, 0xfffffffffffffff
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x1801410b1
lea rax, [rdx - 1]
or rax, rdi
bsr rcx, rax
inc ecx
shl rdi, cl
mov rbx, qword [rsi + 8]
lea rdx, [rdi + rdi]
mov r8, rbx
lea rcx, [rsi + 0x18]
call fcn.18001fd00
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rdi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x18014106f
movabs rbp, 0xcbf29ce484222325
movabs rdi, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [rdx]
movzx r11d, byte [rcx + 0x10]
xor r11, rbp
imul r11, rdi
movzx eax, byte [rcx + 0x11]
xor r11, rax
imul r11, rdi
movzx eax, byte [rcx + 0x12]
xor r11, rax
imul r11, rdi
movzx eax, byte [rcx + 0x13]
xor r11, rax
imul r11, rdi
movzx eax, byte [rcx + 0x14]
xor r11, rax
imul r11, rdi
movzx eax, byte [rcx + 0x15]
xor r11, rax
imul r11, rdi
movzx eax, byte [rcx + 0x16]
xor r11, rax
imul r11, rdi
movzx eax, byte [rcx + 0x17]
xor r11, rax
imul r11, rdi
and r11, qword [rsi + 0x30]
shl r11, 4
add r11, qword [rsi + 0x18]
mov r9, qword [r11]
cmp r9, rbx
jne 0x180140fe9
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x180141063
mov rax, qword [r11 + 8]
mov r8, qword [rcx + 0x10]
cmp r8, qword [rax + 0x10]
jne 0x180141026
mov r8, qword [rax]
cmp r8, rcx
je 0x180141020
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x180141063
cmp r9, rax
je 0x18014103f
nop dword [rax + rax]
mov rax, qword [rax + 8]
cmp r8, qword [rax + 0x10]
je 0x18014108b
cmp r9, rax
jne 0x180141030
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], rax
mov r8, qword [rax + 8]
mov qword [r8], rcx
mov qword [rax + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], r8
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x180140f70
mov qword [rsp + 0x48], 0
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x50]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret
mov rax, qword [rax]
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], rax
mov r8, qword [rax + 8]
mov qword [r8], rcx
mov qword [rax + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], r8
jmp 0x180141063
lea rcx, str.invalid_hash_bucket_count
call fcn.1802657c8
int3
Function at 0x1801410c0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r13, rcx
movabs rax, 0xfffffffffffffff
bsr rcx, rax
mov ebx, 1
mov eax, ebx
shl rax, cl
cmp rdx, rax
ja 0x180141300
lea rax, [rdx - 1]
or rax, rbx
bsr rcx, rax
inc ecx
shl rbx, cl
mov rbp, qword [r13 + 8]
lea r12, [r13 + 0x18]
lea rdx, [rbx + rbx]
mov r8, rbp
mov rcx, r12
call fcn.18001fd00
lea rax, [rbx - 1]
mov qword [r13 + 0x30], rax
mov qword [r13 + 0x38], rbx
mov qword [rsp + 0x68], r13
mov rdi, qword [r13 + 8]
mov rdi, qword [rdi]
mov rsi, rdi
cmp rdi, rbp
je 0x1801412e2
movabs rax, 0xcbf29ce484222325
movabs r10, 0x100000001b3
nop dword [rax]
mov rsi, qword [rsi]
mov r15, qword [rdi + 0x20]
lea r8, [rdi + 0x10]
mov r9, qword [rdi + 0x28]
cmp r9, 0x10
jb 0x180141179
mov r8, qword [rdi + 0x10]
mov rcx, rax
xor edx, edx
test r15, r15
je 0x1801411a4
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rdx + r8]
xor rcx, rax
imul rcx, r10
inc rdx
cmp rdx, r15
jb 0x180141190
and rcx, qword [r13 + 0x30]
shl rcx, 4
mov r13, qword [r12]
add r13, rcx
mov r12, qword [r13]
cmp r12, rbp
jne 0x1801411c9
mov qword [r13], rdi
mov qword [r13 + 8], rdi
jmp 0x1801412c3
mov rbx, qword [r13 + 8]
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1801411df
mov rdx, qword [rdx]
lea rcx, [rdi + 0x10]
cmp r9, 0x10
jb 0x1801411ed
mov rcx, qword [rdi + 0x10]
cmp r15, rax
jne 0x180141234
mov r8, r15
call fcn.180287980
test eax, eax
jne 0x180141230
mov rax, qword [rbx]
cmp rax, rdi
je 0x180141227
mov r8, qword [rdi + 8]
mov qword [r8], rsi
mov rdx, qword [rsi + 8]
mov qword [rdx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rdi
mov qword [rax + 8], rdx
mov qword [rsi + 8], r8
mov qword [rdi + 8], rcx
mov qword [r13 + 8], rdi
jmp 0x1801412b9
mov r9, qword [rdi + 0x28]
cmp r12, rbx
je 0x180141294
mov rbx, qword [rbx + 8]
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x18014124f
mov rdx, qword [rdx]
lea rcx, [rdi + 0x10]
cmp r9, 0x10
jb 0x18014125d
mov rcx, qword [rdi + 0x10]
cmp r15, rax
jne 0x180141234
mov r8, r15
call fcn.180287980
test eax, eax
jne 0x180141230
mov rax, qword [rbx]
mov r8, qword [rdi + 8]
mov qword [r8], rsi
mov rdx, qword [rsi + 8]
mov qword [rdx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rdi
mov qword [rax + 8], rdx
mov qword [rsi + 8], r8
mov qword [rdi + 8], rcx
jmp 0x1801412b9
mov rdx, qword [rdi + 8]
mov qword [rdx], rsi
mov rcx, qword [rsi + 8]
mov qword [rcx], rbx
mov rax, qword [rbx + 8]
mov qword [rax], rdi
mov qword [rbx + 8], rcx
mov qword [rsi + 8], rdx
mov qword [rdi + 8], rax
mov qword [r13], rdi
movabs r10, 0x100000001b3
mov rdi, rsi
cmp rsi, rbp
mov r13, qword [rsp + 0x60]
lea r12, [r13 + 0x18]
movabs rax, 0xcbf29ce484222325
jne 0x180141160
mov qword [rsp + 0x68], 0
mov rbx, qword [rsp + 0x70]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, str.invalid_hash_bucket_count
call fcn.1802657c8
int3
Function at 0x180141310
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r13, rcx
movabs rax, 0xfffffffffffffff
bsr rcx, rax
mov ebx, 1
mov eax, ebx
shl rax, cl
cmp rdx, rax
ja 0x180141550
lea rax, [rdx - 1]
or rax, rbx
bsr rcx, rax
inc ecx
shl rbx, cl
mov rbp, qword [r13 + 8]
lea r12, [r13 + 0x18]
lea rdx, [rbx + rbx]
mov r8, rbp
mov rcx, r12
call fcn.18001fd00
lea rax, [rbx - 1]
mov qword [r13 + 0x30], rax
mov qword [r13 + 0x38], rbx
mov qword [rsp + 0x68], r13
mov rdi, qword [r13 + 8]
mov rdi, qword [rdi]
mov rsi, rdi
cmp rdi, rbp
je 0x180141532
movabs rax, 0xcbf29ce484222325
movabs r10, 0x100000001b3
nop dword [rax]
mov rsi, qword [rsi]
mov r15, qword [rdi + 0x20]
lea r8, [rdi + 0x10]
mov r9, qword [rdi + 0x28]
cmp r9, 0x10
jb 0x1801413c9
mov r8, qword [rdi + 0x10]
mov rcx, rax
xor edx, edx
test r15, r15
je 0x1801413f4
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rdx + r8]
xor rcx, rax
imul rcx, r10
inc rdx
cmp rdx, r15
jb 0x1801413e0
and rcx, qword [r13 + 0x30]
shl rcx, 4
mov r13, qword [r12]
add r13, rcx
mov r12, qword [r13]
cmp r12, rbp
jne 0x180141419
mov qword [r13], rdi
mov qword [r13 + 8], rdi
jmp 0x180141513
mov rbx, qword [r13 + 8]
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x18014142f
mov rdx, qword [rdx]
lea rcx, [rdi + 0x10]
cmp r9, 0x10
jb 0x18014143d
mov rcx, qword [rdi + 0x10]
cmp r15, rax
jne 0x180141484
mov r8, r15
call fcn.180287980
test eax, eax
jne 0x180141480
mov rax, qword [rbx]
cmp rax, rdi
je 0x180141477
mov r8, qword [rdi + 8]
mov qword [r8], rsi
mov rdx, qword [rsi + 8]
mov qword [rdx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rdi
mov qword [rax + 8], rdx
mov qword [rsi + 8], r8
mov qword [rdi + 8], rcx
mov qword [r13 + 8], rdi
jmp 0x180141509
mov r9, qword [rdi + 0x28]
cmp r12, rbx
je 0x1801414e4
mov rbx, qword [rbx + 8]
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x18014149f
mov rdx, qword [rdx]
lea rcx, [rdi + 0x10]
cmp r9, 0x10
jb 0x1801414ad
mov rcx, qword [rdi + 0x10]
cmp r15, rax
jne 0x180141484
mov r8, r15
call fcn.180287980
test eax, eax
jne 0x180141480
mov rax, qword [rbx]
mov r8, qword [rdi + 8]
mov qword [r8], rsi
mov rdx, qword [rsi + 8]
mov qword [rdx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rdi
mov qword [rax + 8], rdx
mov qword [rsi + 8], r8
mov qword [rdi + 8], rcx
jmp 0x180141509
mov rdx, qword [rdi + 8]
mov qword [rdx], rsi
mov rcx, qword [rsi + 8]
mov qword [rcx], rbx
mov rax, qword [rbx + 8]
mov qword [rax], rdi
mov qword [rbx + 8], rcx
mov qword [rsi + 8], rdx
mov qword [rdi + 8], rax
mov qword [r13], rdi
movabs r10, 0x100000001b3
mov rdi, rsi
cmp rsi, rbp
mov r13, qword [rsp + 0x60]
lea r12, [r13 + 0x18]
movabs rax, 0xcbf29ce484222325
jne 0x1801413b0
mov qword [rsp + 0x68], 0
mov rbx, qword [rsp + 0x70]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, str.invalid_hash_bucket_count
call fcn.1802657c8
int3
Function at 0x180141560
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r13, rcx
movabs rax, 0xfffffffffffffff
bsr rcx, rax
mov ebx, 1
mov eax, ebx
shl rax, cl
cmp rdx, rax
ja 0x1801417a0
lea rax, [rdx - 1]
or rax, rbx
bsr rcx, rax
inc ecx
shl rbx, cl
mov rbp, qword [r13 + 8]
lea r12, [r13 + 0x18]
lea rdx, [rbx + rbx]
mov r8, rbp
mov rcx, r12
call fcn.18001fd00
lea rax, [rbx - 1]
mov qword [r13 + 0x30], rax
mov qword [r13 + 0x38], rbx
mov qword [rsp + 0x68], r13
mov rdi, qword [r13 + 8]
mov rdi, qword [rdi]
mov rsi, rdi
cmp rdi, rbp
je 0x180141782
movabs rax, 0xcbf29ce484222325
movabs r10, 0x100000001b3
nop dword [rax]
mov rsi, qword [rsi]
mov r15, qword [rdi + 0x20]
lea r8, [rdi + 0x10]
mov r9, qword [rdi + 0x28]
cmp r9, 0x10
jb 0x180141619
mov r8, qword [rdi + 0x10]
mov rdx, rax
xor ecx, ecx
test r15, r15
je 0x180141644
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rcx + r8]
xor rdx, rax
imul rdx, r10
inc rcx
cmp rcx, r15
jb 0x180141630
mov r13, qword [r13 + 0x30]
and r13, rdx
shl r13, 4
add r13, qword [r12]
mov r12, qword [r13]
cmp r12, rbp
jne 0x180141669
mov qword [r13], rdi
mov qword [r13 + 8], rdi
jmp 0x180141763
mov rbx, qword [r13 + 8]
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x18014167f
mov rdx, qword [rdx]
lea rcx, [rdi + 0x10]
cmp r9, 0x10
jb 0x18014168d
mov rcx, qword [rdi + 0x10]
cmp r15, rax
jne 0x1801416d4
mov r8, r15
call fcn.180287980
test eax, eax
jne 0x1801416d0
mov rax, qword [rbx]
cmp rax, rdi
je 0x1801416c7
mov r8, qword [rdi + 8]
mov qword [r8], rsi
mov rdx, qword [rsi + 8]
mov qword [rdx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rdi
mov qword [rax + 8], rdx
mov qword [rsi + 8], r8
mov qword [rdi + 8], rcx
mov qword [r13 + 8], rdi
jmp 0x180141759
mov r9, qword [rdi + 0x28]
cmp r12, rbx
je 0x180141734
mov rbx, qword [rbx + 8]
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1801416ef
mov rdx, qword [rdx]
lea rcx, [rdi + 0x10]
cmp r9, 0x10
jb 0x1801416fd
mov rcx, qword [rdi + 0x10]
cmp r15, rax
jne 0x1801416d4
mov r8, r15
call fcn.180287980
test eax, eax
jne 0x1801416d0
mov rax, qword [rbx]
mov r8, qword [rdi + 8]
mov qword [r8], rsi
mov rdx, qword [rsi + 8]
mov qword [rdx], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rdi
mov qword [rax + 8], rdx
mov qword [rsi + 8], r8
mov qword [rdi + 8], rcx
jmp 0x180141759
mov rdx, qword [rdi + 8]
mov qword [rdx], rsi
mov rcx, qword [rsi + 8]
mov qword [rcx], rbx
mov rax, qword [rbx + 8]
mov qword [rax], rdi
mov qword [rbx + 8], rcx
mov qword [rsi + 8], rdx
mov qword [rdi + 8], rax
mov qword [r13], rdi
movabs r10, 0x100000001b3
mov rdi, rsi
cmp rsi, rbp
mov r13, qword [rsp + 0x60]
lea r12, [r13 + 0x18]
movabs rax, 0xcbf29ce484222325
jne 0x180141600
mov qword [rsp + 0x68], 0
mov rbx, qword [rsp + 0x70]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, str.invalid_hash_bucket_count
call fcn.1802657c8
int3
Function at 0x1801417b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdx, qword [rcx + 0x10]
mov rdi, rcx
add rdx, 1
mov rbx, qword [rcx + 0x38]
xorps xmm0, xmm0
js 0x1801417d5
cvtsi2ss xmm0, rdx
jmp 0x1801417ea
mov rax, rdx
and edx, 1
shr rax, 1
or rax, rdx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [rcx]
call fcn.18028d1bc
movss xmm1, dword [0x180317718]
xor ecx, ecx
comiss xmm0, xmm1
jb 0x180141818
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x180141818
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x18014184a
cmp rbx, 0x200
jae 0x180141847
lea rbx, [rbx*8]
cmp rbx, rcx
jae 0x18014184a
mov rbx, rcx
mov rdx, rbx
mov rcx, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.18003de80
Function at 0x180144d60
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
mov rsi, rcx
mov r10, qword [rdx + 0x10]
mov r9, rdx
cmp qword [rdx + 0x18], 0x10
jb 0x180144d83
mov r9, qword [rdx]
movabs rdi, 0xcbf29ce484222325
xor r8d, r8d
test r10, r10
je 0x180144db4
movabs rcx, 0x100000001b3
nop
movzx eax, byte [r8 + r9]
xor rdi, rax
imul rdi, rcx
inc r8
cmp r8, r10
jb 0x180144da0
mov r9, rdi
mov r8, rdx
lea rdx, [rsp + 0x20]
mov rcx, rsi
call fcn.18003b070
mov rbx, qword [rax + 8]
test rbx, rbx
je 0x180144e54
mov rdx, qword [rsi + 0x30]
and rdx, rdi
shl rdx, 4
add rdx, qword [rsi + 0x18]
mov rax, qword [rdx]
cmp qword [rdx + 8], rbx
jne 0x180144e08
cmp rax, rbx
jne 0x180144dfe
mov rax, qword [rsi + 8]
mov qword [rdx], rax
mov qword [rdx + 8], rax
jmp 0x180144e13
mov rax, qword [rbx + 8]
mov qword [rdx + 8], rax
jmp 0x180144e13
cmp rax, rbx
jne 0x180144e13
mov rax, qword [rbx]
mov qword [rdx], rax
mov rdx, qword [rbx]
dec qword [rsi + 0x10]
mov rax, qword [rbx + 8]
mov qword [rax], rdx
mov rax, qword [rbx + 8]
mov qword [rdx + 8], rax
lea rcx, [rbx + 0x10]
call fcn.180013350
mov edx, 0x38
mov rcx, rbx
call fcn.18026a1a0
mov eax, 1
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
xor eax, eax
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
Function at 0x180146d80
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov rdx, qword [rcx]
movabs rax, 0xcbf29ce484222325
mov r8, qword [rcx + 8]
add r8, rdx
cmp rdx, r8
je 0x180146dc3
movabs r9, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movsx rcx, byte [rdx]
inc rdx
xor rax, rcx
imul rax, r9
cmp rdx, r8
jne 0x180146db0
ret
Function at 0x180155220
Capabilities:
Allocate or change rwx memory

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [rcx + 8]
lea r9, [rsp + 0x30]
mov rbx, rcx
mov r8d, 0x40
mov rdx, qword [rax + 0x38]
sub rdx, qword [rax + 0x30]
mov rcx, qword [rax]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
mov dword [rsp + 0x30], 0
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r8, qword [rbx + 8]
mov rcx, qword [r8]
mov rdx, qword [r8 + 0x30]
mov r8, qword [r8 + 0x38]
sub r8, rdx
call fcn.180287a80
mov r8d, dword [rsp + 0x30]
lea r9, [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
add rsp, 0x40
pop rbx
ret
Function at 0x180156070
Capabilities:
Allocate or change rwx memory

Disassembly:
mov r9, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
mov r8, qword [r9 + 0x38]
mov rdx, qword [rax]
sub r8, qword [r9 + 0x30]
add rdx, 5
mov rcx, qword [r9]
jmp 0x180156070
cmp r8, 5
jb 0x180156113
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
mov rbx, r8
mov qword [rsp + 0x20], rcx
mov rsi, rdx
mov qword [rsp + 0x28], rbx
mov rdx, rbx
mov dword [rsp + 0x30], 0
lea r9, [rsp + 0x30]
mov r8d, 0x40
mov rdi, rcx
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp rbx, 5
jbe 0x1801560ce
mov r8, rbx
mov edx, 0x90
mov rcx, rdi
call fcn.180288120
mov r8d, dword [rsp + 0x30]
lea r9, [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
sub esi, edi
mov rcx, qword [rsp + 0x20]
sub esi, 5
mov dword [rsp + 0x61], esi
mov byte [rsp + 0x60], 0xe9
mov eax, dword [rsp + 0x60]
mov dword [rdi], eax
movzx eax, byte [rsp + 0x64]
mov byte [rdi + 4], al
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret

Function at 0x180156120
Capabilities:
Allocate or change rwx memory

Disassembly:
mov rdx, qword [rcx + 8]
mov rcx, qword [rdx]
mov r9, qword [rdx + 0x38]
sub r9, qword [rdx + 0x30]
mov rdx, qword [rdx + 8]
lea r8, [rcx + 6]
jmp 0x180156120
cmp r9, 6
jb 0x1801561d2
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
push rdi
sub rsp, 0x40
mov rbx, r9
mov qword [rax - 0x28], rcx
mov rsi, r8
mov qword [rax - 0x20], rbx
mov rbp, rdx
mov dword [rax - 0x18], 0
mov rdx, rbx
lea r9, [rax - 0x18]
mov r8d, 0x40
mov rdi, rcx
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp rbx, 6
jbe 0x180156182
mov r8, rbx
mov edx, 0x90
mov rcx, rdi
call fcn.180288120
mov r8d, dword [rsp + 0x30]
lea r9, [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
mov qword [rsi], rbp
sub esi, edi
sub esi, 6
mov word [rsp + 0x68], 0x25ff
mov dword [rsp + 0x6a], esi
mov eax, dword [rsp + 0x68]
mov dword [rdi], eax
movzx eax, word [rsp + 0x6c]
mov word [rdi + 4], ax
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret