joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140106cb0
Capabilities:
Hash data using fnv

Disassembly:
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x14010647c
mov rax, qword [rdi + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x14010640a
mov rdx, qword [rdi + 8]
mov rcx, rdi
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x20
pop rdi
jmp 0x140106cb0
mov rcx, qword [rdi + 8]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x14010644a
mov qword [rsp + 0x38], rbx
nop word [rax + rax]
mov rbx, qword [rcx]
mov edx, 0x20
call fcn.1401d177c
mov rcx, rbx
test rbx, rbx
jne 0x140106430
mov rbx, qword [rsp + 0x38]
mov rax, qword [rdi + 8]
lea r8, [rsp + 0x30]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 8], rax
mov qword [rdi + 0x10], 0
mov rax, qword [rdi + 8]
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x30], rax
call fcn.1400295d0
add rsp, 0x20
pop rdi
ret
push rbp
push rsi
push r14
sub rsp, 0x40
mov rbp, r8
mov r14, rdx
mov rsi, rcx
cmp rdx, r8
je 0x140106dae
mov rdx, qword [rcx + 0x18]
movabs r8, 0x100000001b3
mov qword [rsp + 0x60], rbx
movabs rax, 0xcbf29ce484222325
mov qword [rsp + 0x38], rdi
mov rbx, r14
mov qword [rsp + 0x30], r12
mov r12, qword [rcx + 8]
movzx ecx, byte [r14 + 0x10]
xor rcx, rax
mov qword [rsp + 0x28], r13
movzx eax, byte [r14 + 0x11]
mov r13, qword [r14 + 8]
imul rcx, r8
mov qword [rsp + 0x20], r15
mov r15, qword [rsi + 0x30]
xor rcx, rax
movzx eax, byte [r14 + 0x12]
imul rcx, r8
mov qword [rsp + 0x78], rdx
xor rcx, rax
movzx eax, byte [r14 + 0x13]
imul rcx, r8
xor rcx, rax
imul rcx, r8
and r15, rcx
shl r15, 4
add r15, rdx
mov rax, qword [r15]
mov qword [rsp + 0x68], rax
mov rax, qword [r15 + 8]
mov qword [rsp + 0x70], rax
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x20
call fcn.1401d177c
dec qword [rsi + 0x10]
cmp rdi, qword [rsp + 0x70]
je 0x140106dba
cmp rbx, rbp
jne 0x140106d60
cmp qword [rsp + 0x68], r14
jne 0x140106d8d
mov qword [r15], rbx
mov r12, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov r15, qword [rsp + 0x20]
mov qword [r13], rbx
mov qword [rbx + 8], r13
mov r13, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x60]
mov rax, rbp
add rsp, 0x40
pop r14
pop rsi
pop rbp
ret
cmp qword [rsp + 0x68], r14
jne 0x140106dc9
mov qword [r15], r12
mov rax, r12
jmp 0x140106dcc
mov rax, r13
mov qword [r15 + 8], rax
cmp rbx, rbp
je 0x140106d8d
nop word [rax + rax]
movzx r15d, byte [rbx + 0x10]
movabs rdx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r15, rax
movzx eax, byte [rbx + 0x11]
imul r15, rdx
xor r15, rax
movzx eax, byte [rbx + 0x12]
imul r15, rdx
xor r15, rax
movzx eax, byte [rbx + 0x13]
imul r15, rdx
xor r15, rax
imul r15, rdx
and r15, qword [rsi + 0x30]
shl r15, 4
add r15, qword [rsp + 0x78]
mov r14, qword [r15 + 8]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x20
call fcn.1401d177c
dec qword [rsi + 0x10]
cmp rdi, r14
je 0x140106e58
cmp rbx, rbp
jne 0x140106e32
jmp 0x140106d8a
mov qword [r15], r12
mov qword [r15 + 8], r12
cmp rbx, rbp
jne 0x140106de0
jmp 0x140106d8d
Function at 0x140107880
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, r8
mov r9, rcx
movzx r8d, byte [r8 + 0x10]
movabs rcx, 0x100000001b3
mov rsi, rdx
movabs rax, 0xcbf29ce484222325
xor r8, rax
movzx eax, byte [rbx + 0x11]
mov rdx, qword [r9 + 0x30]
imul r8, rcx
xor r8, rax
movzx eax, byte [rbx + 0x12]
imul r8, rcx
xor r8, rax
movzx eax, byte [rbx + 0x13]
imul r8, rcx
xor r8, rax
imul r8, rcx
and rdx, r8
shl rdx, 4
add rdx, qword [r9 + 0x18]
mov rax, qword [rdx]
cmp qword [rdx + 8], rbx
jne 0x14010790d
cmp rax, rbx
jne 0x140107903
mov rax, qword [r9 + 8]
mov qword [rdx], rax
mov qword [rdx + 8], rax
jmp 0x140107918
mov rax, qword [rbx + 8]
mov qword [rdx + 8], rax
jmp 0x140107918
cmp rax, rbx
jne 0x140107918
mov rax, qword [rbx]
mov qword [rdx], rax
mov rdi, qword [rbx]
lea rcx, [rbx + 0x20]
dec qword [r9 + 0x10]
mov rax, qword [rbx + 8]
mov qword [rax], rdi
mov rax, qword [rbx + 8]
mov qword [rdi + 8], rax
call fcn.14000b2f0
mov edx, 0x40
mov rcx, rbx
call fcn.1401d177c
mov rbx, qword [rsp + 0x30]
mov rax, rsi
mov qword [rsi], rdi
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret

Function at 0x140107ea0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r13
push r14
push r15
sub rsp, 0x20
mov r15, qword [r8 + 0x18]
mov r14, r8
mov rbp, qword [r8 + 0x10]
mov r13, rdx
mov rdi, rcx
mov r9, r8
cmp r15, 0xf
jbe 0x140107ece
mov r9, qword [r8]
xor edx, edx
movabs r8, 0xcbf29ce484222325
test rbp, rbp
je 0x140107f04
movabs rcx, 0x100000001b3
nop dword [rax]
movzx eax, byte [r9 + rdx]
inc rdx
xor r8, rax
imul r8, rcx
cmp rdx, rbp
jb 0x140107ef0
mov rcx, qword [rdi + 0x30]
mov rax, qword [rdi + 0x18]
and rcx, r8
mov rdi, qword [rdi + 8]
add rcx, rcx
mov rsi, qword [rax + rcx*8]
cmp rsi, rdi
jne 0x140107f27
mov rsi, rdi
jmp 0x140107fc9
mov qword [rsp + 0x50], rbx
mov rbx, qword [rax + rcx*8 + 8]
lea rcx, [rsi + 0x10]
mov rdx, r14
cmp r15, 0xf
jbe 0x140107f41
mov rdx, qword [r14]
cmp qword [rcx + 0x18], 0xf
mov r8, qword [rcx + 0x10]
jbe 0x140107f4f
mov rcx, qword [rcx]
cmp r8, rbp
jne 0x140107f5d
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140107f67
cmp rsi, rbx
je 0x140107fc1
mov rsi, qword [rsi]
jmp 0x140107f31
mov rdi, qword [rsi]
cmp rsi, rbx
je 0x140107fc4
mov qword [rsp + 0x58], r12
mov r12, r15
mov r15, rbp
nop word [rax + rax]
cmp qword [rdi + 0x28], 0xf
lea rdx, [rdi + 0x10]
mov rax, qword [rdx + 0x10]
mov rbp, rdi
jbe 0x140107f95
mov rdx, qword [rdx]
mov rcx, r14
cmp r12, 0xf
jbe 0x140107fa1
mov rcx, qword [r14]
cmp r15, rax
jne 0x140107fba
mov r8, r15
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140107fba
mov rdi, qword [rdi]
cmp rbp, rbx
jne 0x140107f80
mov r12, qword [rsp + 0x58]
jmp 0x140107fc4
mov rsi, rdi
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x60]
mov rax, r13
mov qword [r13], rsi
mov qword [r13 + 8], rdi
add rsp, 0x20
pop r15
pop r14
pop r13
pop rdi
pop rsi
ret
Function at 0x140108db0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov r13, r8
mov r14, rdx
mov rsi, rcx
movzx r12d, byte [r8]
movabs rax, 0xcbf29ce484222325
xor r12, rax
movabs rcx, 0x100000001b3
imul r12, rcx
movzx eax, byte [r8 + 1]
xor r12, rax
imul r12, rcx
movzx eax, byte [r8 + 2]
xor r12, rax
imul r12, rcx
movzx eax, byte [r8 + 3]
xor r12, rax
imul r12, rcx
mov rcx, r12
and rcx, qword [rsi + 0x30]
add rcx, rcx
mov rax, qword [rsi + 0x18]
mov rbx, qword [rax + rcx*8 + 8]
lea rdx, [rsi + 8]
mov r15, qword [rdx]
cmp rbx, r15
jne 0x140108e3f
mov rbx, r15
mov rbp, r15
jmp 0x140108e8c
mov rcx, qword [rax + rcx*8]
mov eax, dword [r8]
cmp eax, dword [rbx + 0x10]
je 0x140108e5e
nop dword [rax + rax]
cmp rbx, rcx
je 0x140108e86
mov rbx, qword [rbx + 8]
cmp eax, dword [rbx + 0x10]
jne 0x140108e50
mov qword [r14], rbx
mov byte [r14 + 8], 0
mov rax, r14
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov r15, rbx
mov rbp, rbx
movabs rax, 0x7ffffffffffffff
cmp qword [rsi + 0x10], rax
jne 0x140108eaa
lea rcx, str.unordered_map_set_too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x28], 0
mov ecx, 0x20
call fcn.1401d19cc
mov rdi, rax
mov qword [rsp + 0x28], rax
mov ecx, dword [r13]
mov dword [rax + 0x10], ecx
xor r13d, r13d
mov qword [rax + 0x18], r13
mov rcx, qword [rsi + 0x10]
add rcx, 1
vxorps xmm1, xmm1, xmm1
js 0x140108eed
vcvtsi2ss xmm1, xmm1, rcx
jmp 0x140108f02
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
vcvtsi2ss xmm1, xmm1, rax
vaddss xmm1, xmm1, xmm1
mov rcx, qword [rsi + 0x38]
vxorps xmm0, xmm0, xmm0
test rcx, rcx
js 0x140108f16
vcvtsi2ss xmm0, xmm0, rcx
jmp 0x140108f2b
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
vcvtsi2ss xmm0, xmm0, rax
vaddss xmm0, xmm0, xmm0
vdivss xmm0, xmm1, xmm0
vcomiss xmm0, dword [rsi]
jbe 0x140108f86
mov rcx, rsi
call fcn.140109410
mov rcx, qword [rsi + 0x30]
and rcx, r12
add rcx, rcx
mov rdx, qword [rsi + 0x18]
mov rax, qword [rdx + rcx*8 + 8]
mov rbx, qword [rsi + 8]
cmp rax, rbx
je 0x140108f79
mov rdx, qword [rdx + rcx*8]
mov ecx, dword [rdi + 0x10]
cmp ecx, dword [rax + 0x10]
je 0x140108f76
mov rbx, rax
cmp rax, rdx
je 0x140108fba
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x140108f65
mov rbx, qword [rax]
mov qword [rsp + 0x20], rbx
mov rbp, rbx
mov r15, qword [rsp + 0x20]
mov rdx, qword [rbx + 8]
inc qword [rsi + 0x10]
mov qword [rdi], r15
mov qword [rdi + 8], rdx
mov qword [rdx], rdi
mov qword [rbx + 8], rdi
mov rcx, qword [rsi + 0x18]
mov rax, qword [rsi + 0x30]
and rax, r12
add rax, rax
mov r8, qword [rcx + rax*8]
cmp r8, qword [rsi + 8]
jne 0x140108fc1
mov qword [rcx + rax*8], rdi
jmp 0x140108fd3
mov qword [rsp + 0x20], rax
jmp 0x140108f7e
cmp r8, rbp
jne 0x140108fcc
mov qword [rcx + rax*8], rdi
jmp 0x140108fd8
cmp qword [rcx + rax*8 + 8], rdx
jne 0x140108fd8
mov qword [rcx + rax*8 + 8], rdi
mov qword [r14], rdi
mov byte [r14 + 8], 1
jmp 0x140108e66
Function at 0x140109410
Capabilities:
Hash data using fnv

Disassembly:
mov rdx, qword [rcx + 0x10]
mov r9, rcx
add rdx, 1
mov r8, qword [rcx + 0x38]
vxorps xmm0, xmm0, xmm0
js 0x14010942c
vcvtsi2ss xmm0, xmm0, rdx
jmp 0x140109441
mov rax, rdx
and edx, 1
shr rax, 1
or rax, rdx
vcvtsi2ss xmm0, xmm0, rax
vaddss xmm0, xmm0, xmm0
vdivss xmm0, xmm0, dword [rcx]
vxorps xmm1, xmm1, xmm1
vroundss xmm1, xmm1, xmm0, 2
vmovss xmm0, dword [0x140217c08]
xor ecx, ecx
vcomiss xmm1, xmm0
jb 0x140109476
vsubss xmm1, xmm1, xmm0
vcomiss xmm1, xmm0
jae 0x140109476
movabs rax, 0x8000000000000000
mov rcx, rax
vcvttss2si rax, xmm1
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp r8, rcx
jae 0x1401094a8
cmp r8, 0x200
jae 0x1401094a5
lea r8, [r8*8]
cmp r8, rcx
jae 0x1401094a8
mov r8, rcx
mov rdx, r8
mov rcx, r9
jmp fcn.140066fa0
Function at 0x140109530
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x140109568
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x40], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.140028e00
lea rax, [rdi - 1]
mov qword [rsi + 0x38], rdi
mov qword [rsi + 0x30], rax
mov rax, qword [rsi + 8]
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x1401096d4
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop
movzx edx, byte [rax + 0x11]
movzx r9d, byte [rax + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rcx, qword [rcx]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x12]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x13]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x14]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x15]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x16]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x17]
imul r9, rdi
xor r9, rdx
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r9, qword [r11]
cmp r9, rbx
jne 0x14010964c
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x1401096c3
mov rdx, qword [r11 + 8]
mov r8, qword [rax + 0x10]
cmp r8, qword [rdx + 0x10]
jne 0x140109689
mov r10, qword [rdx]
cmp r10, rax
je 0x140109683
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x1401096c3
cmp r9, rdx
je 0x14010969f
nop
mov rdx, qword [rdx + 8]
cmp r8, qword [rdx + 0x10]
je 0x1401096e9
cmp r9, rdx
jne 0x140109690
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
jne 0x1401095d0
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x1401096c3
Function at 0x14010b8f0
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rdx]
mov rbx, rcx
mov rcx, rdx
call qword [rax + 0x68]
test rax, rax
je 0x14010b92e
movzx edx, word [rax + 0x18]
mov ecx, 0xa23
sub dx, cx
mov ecx, 0xfffd
test cx, dx
jne 0x14010b92e
lea rcx, [rbx - 0x40]
mov rdx, rax
add rsp, 0x20
pop rbx
jmp fcn.14010b9d0
add rsp, 0x20
pop rbx
ret

Function at 0x14010b940
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [r8]
mov rbx, rcx
mov rcx, r8
call qword [rax + 0x68]
test rax, rax
je 0x14010b97e
movzx edx, word [rax + 0x18]
mov ecx, 0xa23
sub dx, cx
mov ecx, 0xfffd
test cx, dx
jne 0x14010b97e
lea rcx, [rbx - 0x40]
mov rdx, rax
add rsp, 0x20
pop rbx
jmp fcn.14010b9d0
add rsp, 0x20
pop rbx
ret
Function at 0x14010fce0
Capabilities:
Hash data using fnv

Disassembly:
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x14010fd8c
mov rax, qword [rdi + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x14010fd1a
mov rdx, qword [rdi + 8]
mov rcx, rdi
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x20
pop rdi
jmp 0x14010fe50
mov rcx, qword [rdi + 8]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x14010fd5a
mov qword [rsp + 0x38], rbx
nop word [rax + rax]
mov rbx, qword [rcx]
mov edx, 0x18
call fcn.1401d177c
mov rcx, rbx
test rbx, rbx
jne 0x14010fd40
mov rbx, qword [rsp + 0x38]
mov rax, qword [rdi + 8]
lea r8, [rsp + 0x30]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 8], rax
mov qword [rdi + 0x10], 0
mov rax, qword [rdi + 8]
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x30], rax
call fcn.1400295d0
add rsp, 0x20
pop rdi
ret
Function at 0x140110200
Capabilities:
Hash data using fnv

Disassembly:
mov rdx, qword [rcx + 0x10]
mov r9, rcx
add rdx, 1
mov r8, qword [rcx + 0x38]
vxorps xmm0, xmm0, xmm0
js 0x14011021c
vcvtsi2ss xmm0, xmm0, rdx
jmp 0x140110231
mov rax, rdx
and edx, 1
shr rax, 1
or rax, rdx
vcvtsi2ss xmm0, xmm0, rax
vaddss xmm0, xmm0, xmm0
vdivss xmm0, xmm0, dword [rcx]
vxorps xmm1, xmm1, xmm1
vroundss xmm1, xmm1, xmm0, 2
vmovss xmm0, dword [0x140217c08]
xor ecx, ecx
vcomiss xmm1, xmm0
jb 0x140110266
vsubss xmm1, xmm1, xmm0
vcomiss xmm1, xmm0
jae 0x140110266
movabs rax, 0x8000000000000000
mov rcx, rax
vcvttss2si rax, xmm1
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp r8, rcx
jae 0x140110298
cmp r8, 0x200
jae 0x140110295
lea r8, [r8*8]
cmp r8, rcx
jae 0x140110298
mov r8, rcx
mov rdx, r8
mov rcx, r9
jmp fcn.1401102b0
Function at 0x1401102b0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push rsi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov ebx, 1
mov eax, ebx
shl rax, cl
cmp rdx, rax
jbe 0x1401102e8
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x38], rdi
mov rdi, qword [rsi + 8]
or rax, rbx
bsr rcx, rax
mov r8, rdi
mov qword [rsp + 0x40], r14
inc ecx
shl rbx, cl
lea rcx, [rsi + 0x18]
lea rdx, [rbx + rbx]
call fcn.140028e00
mov qword [rsi + 0x38], rbx
lea rax, [rbx - 1]
mov qword [rsi + 0x30], rax
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
cmp rcx, rdi
je 0x140110454
mov qword [rsp + 0x30], rbp
mov rax, rcx
movabs rbp, 0xcbf29ce484222325
movabs rbx, 0x100000001b3
nop
movzx edx, byte [rax + 0x11]
movzx r9d, byte [rax + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rcx, qword [rcx]
imul r9, rbx
xor r9, rdx
movzx edx, byte [rax + 0x12]
imul r9, rbx
xor r9, rdx
movzx edx, byte [rax + 0x13]
imul r9, rbx
xor r9, rdx
movzx edx, byte [rax + 0x14]
imul r9, rbx
xor r9, rdx
movzx edx, byte [rax + 0x15]
imul r9, rbx
xor r9, rdx
movzx edx, byte [rax + 0x16]
imul r9, rbx
xor r9, rdx
movzx edx, byte [rax + 0x17]
imul r9, rbx
xor r9, rdx
imul r9, rbx
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r9, qword [r11]
cmp r9, rdi
jne 0x1401103cc
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x140110443
mov rdx, qword [r11 + 8]
mov r8, qword [rax + 0x10]
cmp r8, qword [rdx + 0x10]
jne 0x140110409
mov r10, qword [rdx]
cmp r10, rax
je 0x140110403
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x140110443
cmp r9, rdx
je 0x14011041f
nop
mov rdx, qword [rdx + 8]
cmp r8, qword [rdx + 0x10]
je 0x140110469
cmp r9, rdx
jne 0x140110410
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rdi
jne 0x140110350
mov rbp, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x20
pop rsi
ret
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x140110443
Function at 0x14011b200
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
mov r10, rcx
movzx r9d, dl
lea rdi, [rcx + 0x5e0]
mov r11, rdx
movabs rdx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r9, rax
mov rax, r11
imul r9, rdx
sar rax, 8
movzx r8d, al
mov rax, r11
xor r9, r8
sar rax, 0x10
imul r9, rdx
movzx ecx, al
mov rax, r11
xor r9, rcx
sar rax, 0x18
imul r9, rdx
movzx ecx, al
mov rax, r11
xor r9, rcx
sar rax, 0x20
imul r9, rdx
movzx ecx, al
mov rax, r11
xor r9, rcx
sar rax, 0x28
imul r9, rdx
movzx ecx, al
mov rax, r11
xor r9, rcx
sar rax, 0x30
imul r9, rdx
movzx ecx, al
mov rax, r11
xor r9, rcx
sar rax, 0x38
imul r9, rdx
movzx ecx, al
mov rax, qword [r10 + 0x5e8]
xor r9, rcx
mov rcx, qword [r10 + 0x610]
imul r9, rdx
and rcx, r9
shl rcx, 4
add rcx, qword [r10 + 0x5f8]
mov rbx, qword [rcx + 8]
cmp rbx, rax
je 0x14011b2f1
mov rcx, qword [rcx]
cmp r11, qword [rbx + 0x10]
je 0x14011b2f3
nop dword [rax]
cmp rbx, rcx
je 0x14011b2f1
mov rbx, qword [rbx + 8]
cmp r11, qword [rbx + 0x10]
jne 0x14011b2e0
jmp 0x14011b2f3
xor ebx, ebx
test rbx, rbx
cmove rbx, rax
cmp rbx, rax
je 0x14011b332
add dword [r11 + 0x90], 0xffffffff
jne 0x14011b322
mov rax, qword [r11 + 8]
mov edx, 1
add r11, 8
movsxd rcx, dword [rax + 4]
add rcx, r11
mov rax, qword [rcx]
call qword [rax]
mov r8, rbx
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.140120870
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x14011b910
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
lea rsi, [rcx + 0x5e0]
mov rdi, qword [rsi + 8]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x14011b960
mov rax, qword [rbx + 0x10]
add dword [rax + 0x90], 0xffffffff
jne 0x14011b958
mov rdx, qword [rax + 8]
add rax, 8
movsxd rcx, dword [rdx + 4]
mov edx, 1
add rcx, rax
mov rax, qword [rcx]
call qword [rax]
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x14011b932
mov rcx, rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.140120800
Function at 0x140120870
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
movzx r9d, byte [r8 + 0x10]
mov r10, rcx
movabs rcx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r9, rax
mov rdi, rdx
movzx eax, byte [r8 + 0x11]
mov rdx, qword [r10 + 0x30]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x12]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x13]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x14]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x15]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x16]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x17]
imul r9, rcx
xor r9, rax
imul r9, rcx
and rdx, r9
shl rdx, 4
add rdx, qword [r10 + 0x18]
mov rax, qword [rdx]
cmp qword [rdx + 8], r8
jne 0x140120928
cmp rax, r8
jne 0x14012091e
mov rax, qword [r10 + 8]
mov qword [rdx], rax
mov qword [rdx + 8], rax
jmp 0x140120933
mov rax, qword [r8 + 8]
mov qword [rdx + 8], rax
jmp 0x140120933
cmp rax, r8
jne 0x140120933
mov rax, qword [r8]
mov qword [rdx], rax
mov rbx, qword [r8]
mov edx, 0x18
dec qword [r10 + 0x10]
mov rcx, r8
mov rax, qword [r8 + 8]
mov qword [rax], rbx
mov rax, qword [r8 + 8]
mov qword [rbx + 8], rax
call fcn.1401d177c
mov qword [rdi], rbx
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x1401385d0
Capabilities:
Initialize winsock library

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x200
mov rax, qword [0x14025e2c0]
xor rax, rsp
mov qword [rsp + 0x1f0], rax
movzx ebx, dl
mov rdi, rcx
mov eax, 1
lock xadd dword [0x14026e9c8], eax
inc eax
cmp eax, 1
jne 0x14013861f
mov ecx, 0x202
lea rdx, [rsp + 0x50]
call qword [sym.imp.WS2_32.dll_WSAStartup]
xchg dword [0x14026e9cc], eax
test bl, bl
je 0x1401386c3
xor ebx, ebx
lock xadd dword [0x14026e9cc], ebx
test ebx, ebx
je 0x1401386c3
movabs rcx, 0x4d54ee85da812030
mov qword [rsp + 0x210], rsi
add rcx, qword [0x14025e378]
lea rsi, [0x14025e370]
mov dword [rsp + 0x3c], 0
cmp rcx, 1
jbe 0x140138678
mov rax, qword [0x14025e370]
mov edx, ebx
mov rcx, rsi
call qword [rax + 0x30]
jmp 0x14013867a
mov al, 1
lea rcx, str.C:Usersgeorge.tomaz_vcpkginstalledx64_windowsinclude_boost_asiodetailimplwinsock_init.ipp
movzx eax, al
add rax, 2
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x40], rsi
lea rcx, str.void___cdecl_boost::asio::detail::winsock_init_base::throw_on_error_struct_boost::asio::detail::winsock_init_base::data__
mov rsi, qword [rsp + 0x210]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], 0x48
mov dword [rsp + 0x34], 0x1a
test al, 1
jne 0x1401386e7
mov rax, rdi
mov rcx, qword [rsp + 0x1f0]
xor rcx, rsp
call fcn.1401d1730
mov rbx, qword [rsp + 0x218]
add rsp, 0x200
pop rdi
ret
lea r8, [rsp + 0x20]
lea rdx, str.winsock
lea rcx, [rsp + 0x38]
call fcn.140030f00
int3
Function at 0x14013c6e0
Capabilities:
Write file on windows

Disassembly:
push rbx
push rdi
push r15
sub rsp, 0x20
cmp qword [rcx + 0x68], 0
mov rbx, r8
mov r15, rdx
mov rdi, rcx
je 0x14013c708
add rsp, 0x20
pop r15
pop rdi
pop rbx
jmp qword [sym.imp.MSVCP140.dll_protected_virtual:_long_long___int64____cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::xsputn_char_const____ptr64__long_long___int64_____ptr64]
mov rax, qword [rcx + 0x40]
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rsi
mov rsi, rbx
mov qword [rsp + 0x58], r14
mov r9, qword [rax]
test r9, r9
je 0x14013c72e
mov rax, qword [rcx + 0x58]
mov ecx, dword [rax]
jmp 0x14013c730
xor ecx, ecx
movsxd rbp, ecx
test rbx, rbx
jle 0x14013c789
test ecx, ecx
jle 0x14013c769
cmp rbx, rbp
mov rcx, r9
cmovl rbp, rbx
mov r8, rbp
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rdi + 0x58]
add r15, rbp
sub rbx, rbp
sub dword [rax], ebp
mov rcx, qword [rdi + 0x40]
movsxd rax, ebp
add qword [rcx], rax
test rbx, rbx
jle 0x14013c789
mov r9, qword [rdi + 0x80]
test r9, r9
je 0x14013c789
mov r8, rbx
mov edx, 1
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
sub rbx, rax
mov r14, qword [rsp + 0x58]
sub rsi, rbx
mov rbp, qword [rsp + 0x40]
mov rax, rsi
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop r15
pop rdi
pop rbx
ret