joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180098ca0
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rcx, qword [0x180150620]
xorps xmm0, xmm0
add rcx, 1
mov rbx, qword [0x180150648]
js 0x180098b64
cvtsi2ss xmm0, rcx
jmp 0x180098b79
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [0x180150610]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceilf
movss xmm1, dword [0x180136ab0]
xor ecx, ecx
comiss xmm0, xmm1
jb 0x180098bab
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x180098bab
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x180098bdd
cmp rbx, 0x200
jae 0x180098bda
lea rbx, [rbx*8]
cmp rbx, rcx
jae 0x180098bdd
mov rbx, rcx
mov rdx, rbx
add rsp, 0x20
pop rbx
jmp 0x180098ca0
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x180098cd1
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x180150618]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x180150628]
lea rdx, [rdi + rdi]
call fcn.180063d10
mov rax, qword [0x180150618]
lea r9, [rdi - 1]
mov qword [0x180150640], r9
mov qword [0x180150648], rdi
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x180098e44
mov qword [rsp + 0x40], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rsi
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rdi
xor r11, rdx
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x180150628]
mov r9, qword [r11]
cmp r9, rbx
jne 0x180098d90
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x180098e05
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x180098dcd
mov r10, qword [rdx]
cmp r10, rax
je 0x180098dc7
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x180098e05
cmp r9, rdx
je 0x180098de1
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x180098e19
cmp r9, rdx
jne 0x180098dd2
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
je 0x180098e3f
mov r9, qword [0x180150640]
jmp 0x180098d41
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x180098e05
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x180098e50
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rcx, qword [0x1801505e0]
xorps xmm0, xmm0
add rcx, 1
mov rbx, qword [0x180150608]
js 0x180098c14
cvtsi2ss xmm0, rcx
jmp 0x180098c29
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [0x1801505d0]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceilf
movss xmm1, dword [0x180136ab0]
xor ecx, ecx
comiss xmm0, xmm1
jb 0x180098c5b
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x180098c5b
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x180098c8d
cmp rbx, 0x200
jae 0x180098c8a
lea rbx, [rbx*8]
cmp rbx, rcx
jae 0x180098c8d
mov rbx, rcx
mov rdx, rbx
add rsp, 0x20
pop rbx
jmp 0x180098e50
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x180098e81
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x1801505d8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x1801505e8]
lea rdx, [rdi + rdi]
call fcn.180063d10
mov rax, qword [0x1801505d8]
lea r9, [rdi - 1]
mov qword [0x180150600], r9
mov qword [0x180150608], rdi
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x180098ff4
mov qword [rsp + 0x40], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rsi
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rdi
xor r11, rdx
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x1801505e8]
mov r9, qword [r11]
cmp r9, rbx
jne 0x180098f40
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x180098fb5
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x180098f7d
mov r10, qword [rdx]
cmp r10, rax
je 0x180098f77
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x180098fb5
cmp r9, rdx
je 0x180098f91
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x180098fc9
cmp r9, rdx
jne 0x180098f82
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
je 0x180098fef
mov r9, qword [0x180150600]
jmp 0x180098ef1
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x180098fb5
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x18009ca60
Capabilities:
Hash data using fnv

Disassembly:
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x18009ca91
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x180152d88]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x180152d98]
lea rdx, [rdi + rdi]
call fcn.180063d10
mov rax, qword [0x180152d88]
lea r9, [rdi - 1]
mov qword [0x180152db0], r9
mov qword [0x180152db8], rdi
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x18009cc04
mov qword [rsp + 0x40], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rsi
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rdi
xor r11, rdx
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x180152d98]
mov r9, qword [r11]
cmp r9, rbx
jne 0x18009cb50
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x18009cbc5
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x18009cb8d
mov r10, qword [rdx]
cmp r10, rax
je 0x18009cb87
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x18009cbc5
cmp r9, rdx
je 0x18009cba1
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x18009cbd9
cmp r9, rdx
jne 0x18009cb92
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
je 0x18009cbff
mov r9, qword [0x180152db0]
jmp 0x18009cb01
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x18009cbc5
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x18009cc10
Capabilities:
Hash data using fnv

Disassembly:
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x18009cc41
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x180152d48]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x180152d58]
lea rdx, [rdi + rdi]
call fcn.180063d10
mov rax, qword [0x180152d48]
lea r9, [rdi - 1]
mov qword [0x180152d70], r9
mov qword [0x180152d78], rdi
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x18009cdb4
mov qword [rsp + 0x40], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rsi
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rdi
xor r11, rdx
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x180152d58]
mov r9, qword [r11]
cmp r9, rbx
jne 0x18009cd00
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x18009cd75
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x18009cd3d
mov r10, qword [rdx]
cmp r10, rax
je 0x18009cd37
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x18009cd75
cmp r9, rdx
je 0x18009cd51
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x18009cd89
cmp r9, rdx
jne 0x18009cd42
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
je 0x18009cdaf
mov r9, qword [0x180152d70]
jmp 0x18009ccb1
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x18009cd75
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x1800a23f0
Capabilities:
Log keystrokes via polling

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x180150040]
xor rax, rsp
mov qword [rsp + 0x30], rax
movss xmm2, dword [0x18015482c]
mov rbx, rcx
lea rcx, [0x1801533d0]
call fcn.180065050
subss xmm2, dword [0x180154828]
xorps xmm1, xmm1
mov eax, eax
xorps xmm0, xmm0
lea rdx, [0x180154838]
mov rcx, rbx
cvtsi2ss xmm1, rax
subss xmm1, xmm0
addss xmm1, xmm0
mulss xmm1, dword [0x180136884]
mulss xmm1, xmm2
addss xmm1, dword [0x180154828]
movss dword [0x180154830], xmm1
call fcn.1800a0e30
lea rcx, [rsp + 0x20]
call fcn.18008e520
xorps xmm1, xmm1
mov rcx, qword [rax]
movabs rax, 0x20c49ba5e353f7cf
mov qword [rbx + 0x10], rcx
sub rcx, qword [rbx + 8]
imul rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cvtsi2ss xmm1, rdx
divss xmm1, dword [0x180136a98]
movss dword [rbx + 0x1c], xmm1
movss xmm0, dword [0x180154834]
addss xmm0, dword [0x180154830]
subss xmm0, xmm1
divss xmm0, dword [0x180136a98]
cvtps2pd xmm0, xmm0
call fcn.1800a1020
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x1800a24f0
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1800d11c0
add rsp, 0x40
pop rbx
ret
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x28], 0
call qword [sym.imp.USER32.dll_GetCursorPos]
movsxd r9, dword [rsp + 0x2c]
mov edx, 0x201
mov rcx, qword [0x1801530f8]
mov r8d, 0x1000000
call qword [sym.imp.USER32.dll_PostMessageW]
lea rcx, [rsp + 0x20]
call fcn.18008e520
mov rcx, rbx
mov rdx, qword [rax]
mov qword [rbx + 8], rdx
call fcn.1800a0c70
mov al, 1
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1800d11c0
add rsp, 0x40
pop rbx
ret
Function at 0x1800a2b80
Capabilities:
Log keystrokes via polling

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x180150040]
xor rax, rsp
mov qword [rsp + 0x30], rax
movss xmm2, dword [0x18015488c]
mov rbx, rcx
lea rcx, [0x1801533d0]
call fcn.180065050
subss xmm2, dword [0x180154888]
xorps xmm1, xmm1
mov eax, eax
xorps xmm0, xmm0
lea rdx, [0x180154898]
mov rcx, rbx
cvtsi2ss xmm1, rax
subss xmm1, xmm0
addss xmm1, xmm0
mulss xmm1, dword [0x180136884]
mulss xmm1, xmm2
addss xmm1, dword [0x180154888]
movss dword [0x180154890], xmm1
call fcn.1800a0e30
lea rcx, [rsp + 0x20]
call fcn.18008e520
xorps xmm1, xmm1
mov rcx, qword [rax]
movabs rax, 0x20c49ba5e353f7cf
mov qword [rbx + 0x10], rcx
sub rcx, qword [rbx + 8]
imul rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cvtsi2ss xmm1, rdx
divss xmm1, dword [0x180136a98]
movss dword [rbx + 0x1c], xmm1
movss xmm0, dword [0x180154894]
addss xmm0, dword [0x180154890]
subss xmm0, xmm1
divss xmm0, dword [0x180136a98]
cvtps2pd xmm0, xmm0
call fcn.1800a1020
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x1800a2c80
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1800d11c0
add rsp, 0x40
pop rbx
ret
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x28], 0
call qword [sym.imp.USER32.dll_GetCursorPos]
movsxd r9, dword [rsp + 0x2c]
mov edx, 0x204
mov rcx, qword [0x1801530f8]
mov r8d, 0x2000000
call qword [sym.imp.USER32.dll_PostMessageW]
lea rcx, [rsp + 0x20]
call fcn.18008e520
mov rcx, rbx
mov rdx, qword [rax]
mov qword [rbx + 8], rdx
call fcn.1800a0c70
mov al, 1
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1800d11c0
add rsp, 0x40
pop rbx
ret
Function at 0x1800a4260
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push r15
sub rsp, 0x40
mov rax, qword [0x180150040]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0xfc
mov ecx, dword [0x180152b6c]
mov rax, qword gs:[0x58]
mov edx, 4
mov rax, qword [rax + rcx*8]
lea r14, [0x180150300]
lea r15, str.none
mov rdi, 0xffffffffffffffff
lea rsi, [0x180155e10]
mov eax, dword [rdx + rax]
cmp dword [0x180155e08], eax
jle 0x1800a435b
lea rcx, [0x180155e08]
call fcn.1800d1288
cmp dword [0x180155e08], edi
jne 0x1800a435b
mov dword [rsp + 0x20], 0
mov edx, dword [0x180150300]
lea rcx, [rsp + 0x20]
test edx, edx
cmovns rcx, r14
lea rax, [rsp + 0x28]
cmp edx, 0xfc
cmovle rax, rcx
movsxd rax, dword [rax]
mov rdx, qword [r15 + rax*8]
xorps xmm0, xmm0
movups xmmword [0x180155e10], xmm0
xorps xmm1, xmm1
movdqu xmmword [0x180155e20], xmm1
mov r8, rdi
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x1800a4330
mov rcx, rsi
call fcn.180072920
lea rcx, [0x1800dbd00]
call fcn.1800d18a4
nop
lea rcx, [0x180155e08]
call fcn.1800d121c
cmp byte [0x180153369], 0
je 0x1800a43fd
mov qword [rsp + 0x20], 0
xor r8d, r8d
lea rdx, [rsp + 0x20]
lea rcx, str._..._
call fcn.180044610
xor ebx, ebx
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x1800a43a3
inc ebx
cmp ebx, 0xfc
jl 0x1800a4387
jmp 0x1800a4443
cmp ebx, 0x1b
cmove ebx, edi
mov dword [0x180150300], ebx
mov dword [rsp + 0x20], 0
lea rcx, [rsp + 0x20]
test ebx, ebx
cmovns rcx, r14
lea rax, [rsp + 0x28]
cmp ebx, 0xfc
cmovle rax, rcx
movsxd rax, dword [rax]
mov rdx, qword [r15 + rax*8]
nop dword [rax + rax]
inc rdi
cmp byte [rdx + rdi], 0
jne 0x1800a43e0
mov r8, rdi
mov rcx, rsi
call fcn.180079d40
mov byte [0x180153369], 0
jmp 0x1800a4443
cmp dword [0x180150300], 0xffffffff
jne 0x1800a440f
lea rsi, str._none_
jmp 0x1800a441f
cmp qword [0x180155e28], 0xf
cmova rsi, qword [0x180155e10]
mov qword [rsp + 0x20], 0
xor r8d, r8d
lea rdx, [rsp + 0x20]
mov rcx, rsi
call fcn.180044610
test al, al
je 0x1800a4443
mov byte [0x180153369], 1
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1800d11c0
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
add rsp, 0x40
pop r15
ret
Function at 0x1800a6680
Capabilities:
Create thread

Disassembly:
push rbx
sub rsp, 0x50
mov rax, qword [0x180150040]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rbx, rcx
mov eax, 1
xchg byte [rcx + 0x48], al
mov ecx, 0x10
call fcn.1800d193c
mov qword [rax], rbx
lea rcx, [0x1800a68f0]
mov qword [rax + 8], rcx
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x1800b7cc0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x30], rax
test rax, rax
je 0x1800a6716
cmp dword [rbx + 0x40], 0
jne 0x1800a670f
movaps xmm1, xmmword [rsp + 0x30]
movups xmmword [rbx + 0x38], xmm1
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1800d11c0
add rsp, 0x50
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov dword [rsp + 0x38], 0
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
Function at 0x1800b3510
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov r12, r8
mov rsi, rdx
movzx r15d, byte [r8]
movabs rax, 0xcbf29ce484222325
xor r15, rax
movabs rcx, 0x100000001b3
imul r15, rcx
movzx eax, byte [r8 + 1]
xor r15, rax
imul r15, rcx
movzx eax, byte [r8 + 2]
xor r15, rax
imul r15, rcx
movzx eax, byte [r8 + 3]
xor r15, rax
imul r15, rcx
mov rcx, qword [0x1801504f0]
and rcx, r15
add rcx, rcx
mov rax, qword [0x1801504d8]
mov rbx, qword [rax + rcx*8 + 8]
mov r14, qword [0x1801504c8]
cmp rbx, r14
jne 0x1800b359a
mov rbx, r14
mov rbp, r14
jmp 0x1800b35d9
mov rcx, qword [rax + rcx*8]
mov eax, dword [r8]
cmp eax, dword [rbx + 0x10]
je 0x1800b35b4
cmp rbx, rcx
je 0x1800b35d3
mov rbx, qword [rbx + 8]
cmp eax, dword [rbx + 0x10]
jne 0x1800b35a6
mov qword [rdx], rbx
mov byte [rdx + 8], 0
mov rax, rsi
mov rbx, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r14, rbx
mov rbp, rbx
movabs rax, 0x7ffffffffffffff
cmp qword [0x1801504d0], rax
jne 0x1800b35fa
lea rcx, str.unordered_map_set_too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [0x1801504c8]
mov qword [rsp + 0x20], rax
xor r13d, r13d
mov qword [rsp + 0x28], r13
mov ecx, 0x20
call fcn.1800d193c
mov rdi, rax
mov qword [rsp + 0x28], rax
mov eax, dword [r12]
mov dword [rdi + 0x10], eax
mov qword [rdi + 0x18], r13
mov rdx, qword [0x1801504d0]
lea rcx, [rdx + 1]
xorps xmm0, xmm0
test rcx, rcx
js 0x1800b3645
cvtsi2ss xmm0, rcx
jmp 0x1800b365a
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rcx, qword [0x1801504f8]
xorps xmm1, xmm1
test rcx, rcx
js 0x1800b3670
cvtsi2ss xmm1, rcx
jmp 0x1800b3685
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [0x1801504c0]
jbe 0x1800b36f0
call fcn.180064930
mov rcx, qword [0x1801504f0]
and rcx, r15
add rcx, rcx
mov rdx, qword [0x1801504d8]
mov rax, qword [rdx + rcx*8 + 8]
mov rbx, qword [0x1801504c8]
cmp rax, rbx
je 0x1800b36dc
mov rdx, qword [rdx + rcx*8]
mov ecx, dword [rdi + 0x10]
cmp ecx, dword [rax + 0x10]
je 0x1800b36d9
mov rbx, rax
cmp rax, rdx
je 0x1800b3733
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x1800b36c8
mov rbx, qword [rax]
mov qword [rsp + 0x20], rbx
mov rbp, rbx
mov r14, qword [rsp + 0x20]
mov rdx, qword [0x1801504d0]
mov r8, qword [rbx + 8]
inc rdx
mov qword [0x1801504d0], rdx
mov qword [rdi], r14
mov qword [rdi + 8], r8
mov qword [r8], rdi
mov qword [rbx + 8], rdi
mov rcx, qword [0x1801504d8]
mov rax, qword [0x1801504f0]
and rax, r15
add rax, rax
mov rdx, qword [rcx + rax*8]
cmp rdx, qword [0x1801504c8]
jne 0x1800b373a
mov qword [rcx + rax*8], rdi
jmp 0x1800b374c
mov qword [rsp + 0x20], rax
jmp 0x1800b36e1
cmp rdx, rbp
jne 0x1800b3745
mov qword [rcx + rax*8], rdi
jmp 0x1800b3751
cmp qword [rcx + rax*8 + 8], r8
jne 0x1800b3751
mov qword [rcx + rax*8 + 8], rdi
mov qword [rsi], rdi
mov byte [rsi + 8], 1
jmp 0x1800b35bb
Function at 0x1800b3760
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x30
mov rsi, rdx
mov ecx, dword [0x180150358]
movzx r15d, cl
movabs rax, 0xcbf29ce484222325
xor r15, rax
movabs rdx, 0x100000001b3
imul r15, rdx
movzx eax, byte [0x180150359]
xor r15, rax
imul r15, rdx
movzx eax, byte [0x18015035a]
xor r15, rax
imul r15, rdx
movzx eax, byte [0x18015035b]
xor r15, rax
imul r15, rdx
mov rax, qword [0x1801504b0]
and rax, r15
add rax, rax
mov rdx, qword [0x180150498]
mov rbx, qword [rdx + rax*8 + 8]
mov r14, qword [0x180150488]
cmp rbx, r14
jne 0x1800b37f5
mov rbx, r14
mov rbp, r14
jmp 0x1800b3835
mov rax, qword [rdx + rax*8]
cmp ecx, dword [rbx + 0x10]
je 0x1800b380e
nop
cmp rbx, rax
je 0x1800b382f
mov rbx, qword [rbx + 8]
cmp ecx, dword [rbx + 0x10]
jne 0x1800b3800
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov r14, rbx
mov rbp, rbx
movabs rax, 0x7ffffffffffffff
cmp qword [0x180150490], rax
jne 0x1800b3856
lea rcx, str.unordered_map_set_too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [0x180150488]
mov qword [rsp + 0x20], rax
xor r12d, r12d
mov qword [rsp + 0x28], r12
mov ecx, 0x20
call fcn.1800d193c
mov rdi, rax
mov qword [rsp + 0x28], rax
mov eax, dword [0x180150358]
mov dword [rdi + 0x10], eax
mov qword [rdi + 0x18], r12
mov rdx, qword [0x180150490]
lea rcx, [rdx + 1]
xorps xmm0, xmm0
test rcx, rcx
js 0x1800b38a3
cvtsi2ss xmm0, rcx
jmp 0x1800b38b8
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rcx, qword [0x1801504b8]
xorps xmm1, xmm1
test rcx, rcx
js 0x1800b38ce
cvtsi2ss xmm1, rcx
jmp 0x1800b38e3
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [0x180150480]
jbe 0x1800b394e
call fcn.1800649e0
mov rcx, qword [0x1801504b0]
and rcx, r15
add rcx, rcx
mov rdx, qword [0x180150498]
mov rax, qword [rdx + rcx*8 + 8]
mov rbx, qword [0x180150488]
cmp rax, rbx
je 0x1800b393a
mov rdx, qword [rdx + rcx*8]
mov ecx, dword [rdi + 0x10]
cmp ecx, dword [rax + 0x10]
je 0x1800b3937
mov rbx, rax
cmp rax, rdx
je 0x1800b3991
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x1800b3926
mov rbx, qword [rax]
mov qword [rsp + 0x20], rbx
mov rbp, rbx
mov r14, qword [rsp + 0x20]
mov rdx, qword [0x180150490]
mov r8, qword [rbx + 8]
inc rdx
mov qword [0x180150490], rdx
mov qword [rdi], r14
mov qword [rdi + 8], r8
mov qword [r8], rdi
mov qword [rbx + 8], rdi
mov rcx, qword [0x180150498]
mov rax, qword [0x1801504b0]
and rax, r15
add rax, rax
mov rdx, qword [rcx + rax*8]
cmp rdx, qword [0x180150488]
jne 0x1800b3998
mov qword [rcx + rax*8], rdi
jmp 0x1800b39aa
mov qword [rsp + 0x20], rax
jmp 0x1800b393f
cmp rdx, rbp
jne 0x1800b39a3
mov qword [rcx + rax*8], rdi
jmp 0x1800b39af
cmp qword [rcx + rax*8 + 8], r8
jne 0x1800b39af
mov qword [rcx + rax*8 + 8], rdi
mov qword [rsi], rdi
mov byte [rsi + 8], 1
jmp 0x1800b3815