joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180019b60
Capabilities:
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x18014a040]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov rbx, qword [0x18014d0c0]
mov edi, ecx
cmp byte [rbx + 0x4f55], 0
jne 0x180019bc1
cmp byte [rbx + 0x4f56], 0
jne 0x180019bc1
movsx r9d, word [rbx + 0x60c8]
lea r8, str.Tooltip__02d
mov edx, 0x10
lea rcx, [rsp + 0x20]
call fcn.1800059b0
test dil, 2
je 0x180019d00
jmp 0x180019c53
movss xmm1, dword [rbx + 0x3ad8]
lea r8, str.Tooltip__02d
movsx r9d, word [rbx + 0x60c8]
lea rcx, [rsp + 0x20]
movaps xmm0, xmm1
xor eax, eax
mulss xmm0, dword [0x180130984]
mov edx, 0x10
mulss xmm1, dword [0x180130974]
addss xmm0, dword [rbx + 0x100]
addss xmm1, dword [rbx + 0x104]
mov qword [rbx + 0x4bac], rax
mov dword [rbx + 0x4b94], 1
movss dword [rbx + 0x4ba4], xmm0
mov byte [rbx + 0x4bd0], 1
movss dword [rbx + 0x4ba8], xmm1
movss xmm0, dword [rbx + 0x3b34]
mulss xmm0, dword [0x18013089c]
or dword [rbx + 0x4b90], 0x41
movss dword [rbx + 0x4bf8], xmm0
call fcn.1800059b0
movzx r9d, byte [rsp + 0x20]
lea r8, [rsp + 0x21]
mov r10d, 0xffffffff
mov edx, r10d
test r9b, r9b
je 0x180019ca3
lea r11, [0x1800f7020]
cmp r9b, 0x23
jne 0x180019c86
cmp byte [r8], r9b
jne 0x180019c86
cmp byte [r8 + 1], r9b
cmove edx, r10d
movzx ecx, dl
movzx eax, r9b
movzx r9d, byte [r8]
xor rcx, rax
shr edx, 8
inc r8
xor edx, dword [r11 + rcx*4]
test r9b, r9b
jne 0x180019c73
mov rcx, qword [0x18014d0c0]
not edx
add rcx, 0x4160
call fcn.1800065e0
test rax, rax
je 0x180019d00
cmp byte [rax + 0xff], 0
je 0x180019d00
mov byte [rax + 0x104], 1
lea r8, str.Tooltip__02d
mov byte [rax + 0x107], 1
lea rcx, [rsp + 0x20]
mov byte [rax + 0x120], 1
mov edx, 0x10
inc word [rbx + 0x60c8]
movsx r9d, word [rbx + 0x60c8]
call fcn.1800059b0
xor edx, edx
lea rcx, [rsp + 0x20]
mov r8d, 0x20b0347
call fcn.180011250
mov al, 1
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1800cc250
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rdi
ret
Function at 0x18001f860
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
cmp qword [rcx + 0x6280], 0
lea rbx, [rcx + 0x6288]
mov rsi, r8
mov rbp, rdx
mov rdi, rcx
je 0x18001f907
mov r9d, dword [rbx + 4]
mov qword [rsp + 0x30], r14
xor r14d, r14d
test r9d, r9d
jns 0x18001f8ba
mov eax, r9d
mov rcx, rbx
cdq
sub eax, edx
mov edx, r14d
sar eax, 1
add eax, r9d
test eax, eax
cmovg edx, eax
call fcn.18002d030
mov r8, rsi
mov dword [rbx], r14d
mov rdx, rbp
mov rcx, rbx
call fcn.180006900
mov eax, dword [rbx]
mov edx, 1
mov r9, qword [rdi + 0x6280]
test eax, eax
lea ecx, [rax - 1]
mov rax, qword [rdi + 0x6290]
cmove ecx, r14d
test rax, rax
movsxd r8, ecx
lea rcx, [0x18014d0b8]
cmovne rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov r14, qword [rsp + 0x30]
jmp 0x18001f90f
mov rcx, rbx
call fcn.180006900
mov rbx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret

Function at 0x18001fb70
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov rbx, qword [0x18014d0c0]
xor ebp, ebp
cmp byte [rbx + 0x61c0], bpl
jne 0x18001fc4f
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x18001fc48
lea r8, [rsp + 0x30]
mov qword [rsp + 0x30], rbp
call fcn.180005e30
mov rsi, rax
test rax, rax
je 0x18001fc48
mov rdx, qword [rsp + 0x30]
test rdx, rdx
je 0x18001fbd4
mov rcx, rax
call fcn.18001fda0
mov r8, qword [0x18014d0c0]
test r8, r8
je 0x18001fc3f
movsx rdx, word [r8 + 0x6360]
lea rcx, [r8 + 0x6364]
mov r9d, dword [r8 + 0x40c8]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x18001fc34
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6360], cx
movsx rax, cx
lea rcx, [r8 + 0x6364]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], ebp
inc word [rcx + 6]
inc dword [r8 + 0x635c]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov byte [rbx + 0x61c0], 1
movss xmm0, dword [rbx + 0x61c4]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x18001fcde
subss xmm0, dword [rbx + 0x18]
comiss xmm1, xmm0
movss dword [rbx + 0x61c4], xmm0
jb 0x18001fcde
mov rdi, qword [rbx + 0x20]
test rdi, rdi
je 0x18001fcd1
mov rax, qword [0x18014d0c0]
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], rbp
mov dword [rax + 0x61c4], ebp
call fcn.180020000
lea rdx, [0x1800f61f4]
mov rcx, rdi
mov rsi, rax
call fcn.180005c80
mov rdi, rax
test rax, rax
je 0x18001fcd8
mov r8, qword [rsp + 0x30]
mov r9, rax
mov edx, 1
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x18001fcd8
mov byte [rbx + 0xd6], 1
mov dword [rbx + 0x61c4], ebp
mov rbx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x18001fd00
Capabilities:
Hash data with crc32

Disassembly:
sub rsp, 8
movzx r9d, byte [rcx]
lea r8, [rcx + 1]
mov r10, qword [0x18014d0c0]
mov r11d, 0xffffffff
mov eax, r11d
test r9b, r9b
je 0x18001fd63
mov qword [rsp], rbx
lea rbx, [0x1800f7020]
nop dword [rax]
cmp r9b, 0x23
jne 0x18001fd43
cmp byte [r8], r9b
jne 0x18001fd43
cmp byte [r8 + 1], r9b
cmove eax, r11d
movzx edx, al
movzx ecx, r9b
movzx r9d, byte [r8]
xor rdx, rcx
shr eax, 8
inc r8
xor eax, dword [rbx + rdx*4]
test r9b, r9b
jne 0x18001fd30
mov rbx, qword [rsp]
movsxd rcx, dword [r10 + 0x61d8]
not eax
mov r8, qword [r10 + 0x61e0]
lea rdx, [rcx + rcx*8]
lea rcx, [r8 + rdx*8]
cmp r8, rcx
je 0x18001fd8f
cmp dword [r8 + 8], eax
je 0x18001fd96
add r8, 0x48
cmp r8, rcx
jne 0x18001fd80
xor eax, eax
add rsp, 8
ret
mov rax, r8
add rsp, 8
ret
Function at 0x1800232c0
Capabilities:
Hash data with crc32

Disassembly:
test r8d, r8d
jle 0x1800234cc
mov r11, rsp
push rbp
push rsi
sub rsp, 0x58
mov rax, qword [0x18014a040]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov qword [r11 - 0x18], rdi
mov rbp, rcx
mov qword [r11 - 0x20], r14
lea rdi, [rdx + 0x18]
mov qword [r11 - 0x28], r15
mov r14d, 0xffffffff
lea r15, [0x1800f7020]
mov qword [r11 + 0x18], rbx
movsxd rsi, r8d
nop dword [rax + rax]
mov edx, dword [rdi - 0x18]
test edx, edx
je 0x180023494
mov rcx, rbp
call fcn.180022b80
mov edx, dword [rdi - 0x14]
mov rbx, rax
test edx, edx
je 0x18002333e
lea rcx, [rbp + 0x6180]
call fcn.1800065e0
mov rcx, rax
jmp 0x180023340
xor ecx, ecx
mov qword [rbx + 0x18], rcx
movsx eax, word [rdi]
movd xmm1, eax
movsx eax, word [rdi + 2]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
movss dword [rbx + 0x48], xmm1
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x4c], xmm0
movsx eax, word [rdi + 4]
movd xmm1, eax
movsx eax, word [rdi + 6]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
movss dword [rbx + 0x50], xmm1
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x54], xmm0
movsx eax, word [rdi + 8]
movd xmm1, eax
movsx eax, word [rdi + 0xa]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov eax, dword [rbx + 0xc8]
and eax, 0xfffffe49
movss dword [rbx + 0x58], xmm1
or eax, 0x49
mov dword [rbx + 0xc8], eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x5c], xmm0
test rcx, rcx
je 0x1800233d4
cmp qword [rcx + 0x20], 0
jne 0x1800233c9
mov qword [rcx + 0x20], rbx
jmp 0x1800233d4
cmp qword [rcx + 0x28], 0
jne 0x1800233d4
mov qword [rcx + 0x28], rbx
mov eax, dword [rdi - 0xc]
mov r9, rbx
mov dword [rbx + 0xbc], eax
movsx eax, byte [rdi - 8]
mov dword [rbx + 0x60], eax
mov ecx, dword [rdi - 4]
mov eax, dword [rbx + 0xc]
and ecx, 0x3fc20
or eax, dword [rbx + 4]
or eax, ecx
mov dword [rbx + 8], ecx
mov dword [rbx + 0x10], eax
mov rax, qword [rbx + 0x18]
test rax, rax
je 0x18002341c
nop word [rax + rax]
mov r9, rax
mov rax, qword [rax + 0x18]
test rax, rax
jne 0x180023410
mov r9d, dword [r9]
lea r8, str.DockNode__02X
mov edx, 0x14
lea rcx, [rsp + 0x20]
call fcn.1800059b0
movzx r9d, byte [rsp + 0x20]
lea r8, [rsp + 0x21]
mov edx, r14d
test r9b, r9b
je 0x180023478
cmp r9b, 0x23
jne 0x18002345b
cmp byte [r8], r9b
jne 0x18002345b
cmp byte [r8 + 1], r9b
cmove edx, r14d
movzx ecx, dl
movzx eax, r9b
movzx r9d, byte [r8]
xor rcx, rax
shr edx, 8
inc r8
xor edx, dword [r15 + rcx*4]
test r9b, r9b
jne 0x180023448
mov rcx, qword [0x18014d0c0]
not edx
add rcx, 0x4160
call fcn.1800065e0
mov qword [rbx + 0x88], rax
add rdi, 0x24
sub rsi, 1
jne 0x180023310
mov r15, qword [rsp + 0x40]
mov r14, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.1800cc250
add rsp, 0x58
pop rsi
pop rbp
ret
Function at 0x18002b190
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x50
mov esi, r8d
mov rbx, rdx
mov rbp, rcx
xor r14d, r14d
nop word [rax + rax]
mov eax, dword [rbx]
mov dword [rsp + 0x20], eax
mov rax, qword [rbx + 0x18]
mov word [rsp + 0x32], r14w
test rax, rax
je 0x18002b1dd
mov eax, dword [rax]
mov dword [rsp + 0x24], eax
jmp 0x18002b1e2
mov dword [rsp + 0x24], r14d
mov eax, dword [rbx + 0x10]
shr eax, 0xa
test al, 1
je 0x18002b20d
mov rax, qword [rbx + 0x88]
test rax, rax
je 0x18002b20d
mov rax, qword [rax + 0x3b8]
test rax, rax
je 0x18002b20d
mov eax, dword [rax + 0x10]
mov dword [rsp + 0x28], eax
jmp 0x18002b212
mov dword [rsp + 0x28], r14d
mov eax, dword [rbx + 0xbc]
mov dword [rsp + 0x2c], eax
cmp qword [rbx + 0x20], r14
je 0x18002b22c
movzx eax, byte [rbx + 0x60]
mov byte [rsp + 0x30], al
jmp 0x18002b231
mov byte [rsp + 0x30], 0xff
cvttss2si ecx, dword [rbx + 0x48]
mov eax, dword [rbx + 8]
mov r8d, dword [rbp + 0x24]
and eax, 0x3fc20
mov dword [rsp + 0x34], eax
mov byte [rsp + 0x31], sil
cvttss2si eax, dword [rbx + 0x4c]
mov word [rsp + 0x38], cx
cvttss2si ecx, dword [rbx + 0x50]
mov word [rsp + 0x3a], ax
cvttss2si eax, dword [rbx + 0x54]
mov word [rsp + 0x3c], cx
cvttss2si ecx, dword [rbx + 0x58]
mov word [rsp + 0x3e], ax
cvttss2si eax, dword [rbx + 0x5c]
mov word [rsp + 0x40], cx
mov ecx, dword [rbp + 0x20]
mov word [rsp + 0x42], ax
cmp ecx, r8d
jne 0x18002b2b3
inc ecx
test r8d, r8d
je 0x18002b29e
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x18002b2a3
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
lea rcx, [rbp + 0x20]
call fcn.18002cca0
movsxd rax, dword [rbp + 0x20]
mov rcx, qword [rbp + 0x28]
movups xmm0, xmmword [rsp + 0x20]
movups xmm1, xmmword [rsp + 0x30]
lea rdx, [rax + rax*8]
mov eax, dword [rsp + 0x40]
movups xmmword [rcx + rdx*4], xmm0
movups xmmword [rcx + rdx*4 + 0x10], xmm1
mov dword [rcx + rdx*4 + 0x20], eax
inc dword [rbp + 0x20]
mov rdx, qword [rbx + 0x20]
test rdx, rdx
je 0x18002b2f2
lea r8d, [rsi + 1]
mov rcx, rbp
call fcn.18002b190
mov rbx, qword [rbx + 0x28]
test rbx, rbx
je 0x18002b302
inc esi
jmp 0x18002b1c0
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x50
pop r14
ret
Function at 0x1800640e0
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
lea rsi, [rcx + 0x4f8]
lea rdi, [rcx + 0x198]
mov rcx, rsi
call fcn.180064d90
mov rbp, qword [0x18014a5f8]
xor r12d, r12d
mov r13, qword [0x18014a5f0]
mov r15, qword [rdi + 0x10]
test r15, r15
je 0x180064218
cmp r13, rbp
je 0x18006417e
mov r14, qword [rdi + 0x18]
mov rbx, r13
nop dword [rax]
cmp qword [rbx + 0x18], 0xf
mov r9, rbx
mov rax, qword [rbx + 0x10]
jbe 0x180064151
mov r9, qword [rbx]
mov rcx, rdi
cmp r14, 0xf
jbe 0x18006415d
mov rcx, qword [rdi]
mov rdx, r15
mov qword [rsp + 0x20], rax
call fcn.180065880
cmp rax, 0xffffffffffffffff
jne 0x18006417e
add rbx, 0x20
cmp rbx, rbp
jne 0x180064140
jmp 0x180064218
mov rcx, qword [rsi + 0x20]
movzx eax, cl
add al, byte [rsi + 0x18]
test al, 3
jne 0x1800641a2
lea rax, [rcx + 4]
shr rax, 2
cmp qword [rsi + 0x10], rax
ja 0x1800641a2
mov rcx, rsi
call fcn.180065a90
mov rdx, qword [rsi + 0x10]
lea rax, [rdx*4 - 1]
and qword [rsi + 0x18], rax
lea rax, [rdx - 1]
mov rbx, qword [rsi + 0x18]
add rbx, qword [rsi + 0x20]
mov rbp, rbx
shr rbp, 2
and rax, rbp
lea r14, [rax*8]
mov rax, qword [rsi + 8]
cmp qword [r14 + rax], 0
jne 0x1800641ed
mov ecx, 0x10
call fcn.1800cc9cc
mov rcx, qword [rsi + 8]
mov qword [r14 + rcx], rax
mov rcx, qword [rsi + 0x10]
and ebx, 3
mov rax, qword [rsi + 8]
dec rcx
and rcx, rbp
mov rax, qword [rax + rcx*8]
mov dword [rax + rbx*4], r12d
inc qword [rsi + 0x20]
mov rbp, qword [0x18014a5f8]
mov r13, qword [0x18014a5f0]
inc r12d
add rdi, 0x20
cmp r12d, 0x1b
jb 0x180064123
mov ecx, dword [0x18014d05c]
mov rax, qword gs:[0x58]
mov edx, 4
mov rax, qword [rax + rcx*8]
mov ecx, dword [rdx + rax]
cmp dword [0x18014ebf0], ecx
jle 0x1800642c9
lea rcx, [0x18014ebf0]
call fcn.1800cc318
cmp dword [0x18014ebf0], 0xffffffff
jne 0x1800642c9
mov r8d, 0x1571
mov dword [0x18014ff84], 0xffffffff
mov dword [0x18014ec04], r8d
lea r9, [0x18014ec04]
mov edx, 1
nop dword [rax]
nop dword [rax + rax]
mov eax, r8d
shr eax, 0x1e
xor eax, r8d
imul r8d, eax, 0x6c078965
add r8d, edx
mov dword [r9 + rdx*4], r8d
inc rdx
cmp rdx, 0x270
jb 0x180064290
lea rcx, [0x18014ebf0]
mov dword [0x18014ec00], 0x270
call fcn.1800cc2ac
mov r8, rsi
lea rdx, [rsp + 0x30]
call fcn.1800655c0
lea rdx, [rsp + 0x80]
mov dword [rsp + 0x80], 0xffffffff
mov rcx, rsi
call fcn.1800657b0
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1800662c0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x30
mov r12, r8
mov rsi, rdx
movzx r15d, byte [r8]
movabs rax, 0xcbf29ce484222325
xor r15, rax
movabs rcx, 0x100000001b3
imul r15, rcx
movzx eax, byte [r8 + 1]
xor r15, rax
imul r15, rcx
movzx eax, byte [r8 + 2]
xor r15, rax
imul r15, rcx
movzx eax, byte [r8 + 3]
xor r15, rax
imul r15, rcx
mov rcx, qword [0x18014a540]
and rcx, r15
add rcx, rcx
mov rax, qword [0x18014a528]
mov rbx, qword [rax + rcx*8 + 8]
mov r14, qword [0x18014a518]
cmp rbx, r14
jne 0x18006634c
mov rbx, r14
mov rbp, r14
jmp 0x18006638d
mov rcx, qword [rax + rcx*8]
mov eax, dword [r8]
cmp eax, dword [rbx + 0x10]
je 0x180066366
cmp rbx, rcx
je 0x180066387
mov rbx, qword [rbx + 8]
cmp eax, dword [rbx + 0x10]
jne 0x180066358
mov qword [rdx], rbx
mov byte [rdx + 8], 0
mov rax, rsi
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov r14, rbx
mov rbp, rbx
movabs rax, 0x7ffffffffffffff
cmp qword [0x18014a520], rax
jne 0x1800663ae
lea rcx, str.unordered_map_set_too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [0x18014a518]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0
mov ecx, 0x20
call fcn.1800cc9cc
mov rdi, rax
mov qword [rsp + 0x28], rax
movups xmm0, xmmword [r12]
movups xmmword [rax + 0x10], xmm0
mov rdx, qword [0x18014a520]
lea rcx, [rdx + 1]
xorps xmm0, xmm0
test rcx, rcx
js 0x1800663f8
cvtsi2ss xmm0, rcx
jmp 0x18006640d
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rcx, qword [0x18014a548]
xorps xmm1, xmm1
test rcx, rcx
js 0x180066423
cvtsi2ss xmm1, rcx
jmp 0x180066438
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [0x18014a510]
jbe 0x1800664ae
call fcn.180066a90
mov rcx, qword [0x18014a540]
and rcx, r15
add rcx, rcx
mov rdx, qword [0x18014a528]
mov rax, qword [rdx + rcx*8 + 8]
mov rbx, qword [0x18014a518]
cmp rax, rbx
jne 0x18006647a
mov qword [rsp + 0x28], 0
jmp 0x18006649a
mov rdx, qword [rdx + rcx*8]
mov ecx, dword [rdi + 0x10]
cmp ecx, dword [rax + 0x10]
je 0x180066497
mov rbx, rax
cmp rax, rdx
je 0x1800664f1
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x180066486
mov rbx, qword [rax]
mov qword [rsp + 0x20], rbx
mov rbp, rbx
mov r14, qword [rsp + 0x20]
mov rdx, qword [0x18014a520]
mov r8, qword [rbx + 8]
inc rdx
mov qword [0x18014a520], rdx
mov qword [rdi], r14
mov qword [rdi + 8], r8
mov qword [r8], rdi
mov qword [rbx + 8], rdi
mov rcx, qword [0x18014a528]
mov rax, qword [0x18014a540]
and rax, r15
add rax, rax
mov rdx, qword [rcx + rax*8]
cmp rdx, qword [0x18014a518]
jne 0x180066501
mov qword [rcx + rax*8], rdi
jmp 0x180066513
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0
jmp 0x18006649f
cmp rdx, rbp
jne 0x18006650c
mov qword [rcx + rax*8], rdi
jmp 0x180066518
cmp qword [rcx + rax*8 + 8], r8
jne 0x180066518
mov qword [rcx + rax*8 + 8], rdi
mov qword [rsi], rdi
mov byte [rsi + 8], 1
jmp 0x18006636d
Function at 0x180066530
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x30
mov r12, r8
mov rsi, rdx
movzx r15d, byte [r8]
movabs rax, 0xcbf29ce484222325
xor r15, rax
movabs rcx, 0x100000001b3
imul r15, rcx
movzx eax, byte [r8 + 1]
xor r15, rax
imul r15, rcx
movzx eax, byte [r8 + 2]
xor r15, rax
imul r15, rcx
movzx eax, byte [r8 + 3]
xor r15, rax
imul r15, rcx
mov rcx, qword [0x18014a500]
and rcx, r15
add rcx, rcx
mov rax, qword [0x18014a4e8]
mov rbx, qword [rax + rcx*8 + 8]
mov r14, qword [0x18014a4d8]
cmp rbx, r14
jne 0x1800665bc
mov rbx, r14
mov rbp, r14
jmp 0x1800665fd
mov rcx, qword [rax + rcx*8]
mov eax, dword [r8]
cmp eax, dword [rbx + 0x10]
je 0x1800665d6
cmp rbx, rcx
je 0x1800665f7
mov rbx, qword [rbx + 8]
cmp eax, dword [rbx + 0x10]
jne 0x1800665c8
mov qword [rdx], rbx
mov byte [rdx + 8], 0
mov rax, rsi
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov r14, rbx
mov rbp, rbx
movabs rax, 0x7ffffffffffffff
cmp qword [0x18014a4e0], rax
jne 0x18006661e
lea rcx, str.unordered_map_set_too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [0x18014a4d8]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0
mov ecx, 0x20
call fcn.1800cc9cc
mov rdi, rax
mov qword [rsp + 0x28], rax
movups xmm0, xmmword [r12]
movups xmmword [rax + 0x10], xmm0
mov rdx, qword [0x18014a4e0]
lea rcx, [rdx + 1]
xorps xmm0, xmm0
test rcx, rcx
js 0x180066668
cvtsi2ss xmm0, rcx
jmp 0x18006667d
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rcx, qword [0x18014a508]
xorps xmm1, xmm1
test rcx, rcx
js 0x180066693
cvtsi2ss xmm1, rcx
jmp 0x1800666a8
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [0x18014a4d0]
jbe 0x18006671e
call fcn.180066b40
mov rcx, qword [0x18014a500]
and rcx, r15
add rcx, rcx
mov rdx, qword [0x18014a4e8]
mov rax, qword [rdx + rcx*8 + 8]
mov rbx, qword [0x18014a4d8]
cmp rax, rbx
jne 0x1800666ea
mov qword [rsp + 0x28], 0
jmp 0x18006670a
mov rdx, qword [rdx + rcx*8]
mov ecx, dword [rdi + 0x10]
cmp ecx, dword [rax + 0x10]
je 0x180066707
mov rbx, rax
cmp rax, rdx
je 0x180066761
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x1800666f6
mov rbx, qword [rax]
mov qword [rsp + 0x20], rbx
mov rbp, rbx
mov r14, qword [rsp + 0x20]
mov rdx, qword [0x18014a4e0]
mov r8, qword [rbx + 8]
inc rdx
mov qword [0x18014a4e0], rdx
mov qword [rdi], r14
mov qword [rdi + 8], r8
mov qword [r8], rdi
mov qword [rbx + 8], rdi
mov rcx, qword [0x18014a4e8]
mov rax, qword [0x18014a500]
and rax, r15
add rax, rax
mov rdx, qword [rcx + rax*8]
cmp rdx, qword [0x18014a4d8]
jne 0x180066771
mov qword [rcx + rax*8], rdi
jmp 0x180066783
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0
jmp 0x18006670f
cmp rdx, rbp
jne 0x18006677c
mov qword [rcx + rax*8], rdi
jmp 0x180066788
cmp qword [rcx + rax*8 + 8], r8
jne 0x180066788
mov qword [rcx + rax*8 + 8], rdi
mov qword [rsi], rdi
mov byte [rsi + 8], 1
jmp 0x1800665dd
Function at 0x1800667a0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x30
mov r12, r8
mov rsi, rdx
movzx r15d, byte [r8]
movabs rax, 0xcbf29ce484222325
xor r15, rax
movabs rcx, 0x100000001b3
imul r15, rcx
movzx eax, byte [r8 + 1]
xor r15, rax
imul r15, rcx
movzx eax, byte [r8 + 2]
xor r15, rax
imul r15, rcx
movzx eax, byte [r8 + 3]
xor r15, rax
imul r15, rcx
mov rcx, qword [0x18014a4c0]
and rcx, r15
add rcx, rcx
mov rax, qword [0x18014a4a8]
mov rbx, qword [rax + rcx*8 + 8]
mov r14, qword [0x18014a498]
cmp rbx, r14
jne 0x18006682c
mov rbx, r14
mov rbp, r14
jmp 0x18006686d
mov rcx, qword [rax + rcx*8]
mov eax, dword [r8]
cmp eax, dword [rbx + 0x10]
je 0x180066846
cmp rbx, rcx
je 0x180066867
mov rbx, qword [rbx + 8]
cmp eax, dword [rbx + 0x10]
jne 0x180066838
mov qword [rdx], rbx
mov byte [rdx + 8], 0
mov rax, rsi
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov r14, rbx
mov rbp, rbx
movabs rax, 0x7ffffffffffffff
cmp qword [0x18014a4a0], rax
jne 0x18006688e
lea rcx, str.unordered_map_set_too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [0x18014a498]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0
mov ecx, 0x20
call fcn.1800cc9cc
mov rdi, rax
mov qword [rsp + 0x28], rax
movups xmm0, xmmword [r12]
movups xmmword [rax + 0x10], xmm0
mov rdx, qword [0x18014a4a0]
lea rcx, [rdx + 1]
xorps xmm0, xmm0
test rcx, rcx
js 0x1800668d8
cvtsi2ss xmm0, rcx
jmp 0x1800668ed
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rcx, qword [0x18014a4c8]
xorps xmm1, xmm1
test rcx, rcx
js 0x180066903
cvtsi2ss xmm1, rcx
jmp 0x180066918
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [0x18014a490]
jbe 0x18006698e
call fcn.180066bf0
mov rcx, qword [0x18014a4c0]
and rcx, r15
add rcx, rcx
mov rdx, qword [0x18014a4a8]
mov rax, qword [rdx + rcx*8 + 8]
mov rbx, qword [0x18014a498]
cmp rax, rbx
jne 0x18006695a
mov qword [rsp + 0x28], 0
jmp 0x18006697a
mov rdx, qword [rdx + rcx*8]
mov ecx, dword [rdi + 0x10]
cmp ecx, dword [rax + 0x10]
je 0x180066977
mov rbx, rax
cmp rax, rdx
je 0x1800669d1
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x180066966
mov rbx, qword [rax]
mov qword [rsp + 0x20], rbx
mov rbp, rbx
mov r14, qword [rsp + 0x20]
mov rdx, qword [0x18014a4a0]
mov r8, qword [rbx + 8]
inc rdx
mov qword [0x18014a4a0], rdx
mov qword [rdi], r14
mov qword [rdi + 8], r8
mov qword [r8], rdi
mov qword [rbx + 8], rdi
mov rcx, qword [0x18014a4a8]
mov rax, qword [0x18014a4c0]
and rax, r15
add rax, rax
mov rdx, qword [rcx + rax*8]
cmp rdx, qword [0x18014a498]
jne 0x1800669e1
mov qword [rcx + rax*8], rdi
jmp 0x1800669f3
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0
jmp 0x18006697f
cmp rdx, rbp
jne 0x1800669ec
mov qword [rcx + rax*8], rdi
jmp 0x1800669f8
cmp qword [rcx + rax*8 + 8], r8
jne 0x1800669f8
mov qword [rcx + rax*8 + 8], rdi
mov qword [rsi], rdi
mov byte [rsi + 8], 1
jmp 0x18006684d