joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14008db30
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov r14, rcx
movzx r13d, dx
and r13d, 7
movzx eax, dx
shr rax, 3
lea rsi, [rcx + 0xa]
add rsi, rax
mov qword [rsp + 0x60], rsi
mov r8d, 1
mov ecx, r13d
shl r8w, cl
test byte [rsi], r8b
je 0x14008dcd9
lea rcx, [r14 + 0xa]
call fcn.14009a880
movzx edi, ax
movzx ebx, word [r14 + 8]
cmp bx, 1
jne 0x14008dba7
mov rcx, r14
call fcn.14008e7e0
xor r15d, r15d
jmp 0x14008dcc3
dec bx
movzx ecx, bx
shl rcx, 5
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
test rax, rax
jne 0x14008dbe8
movzx ebx, bx
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8d, ebx
lea rdx, [0x14018ab30]
call fcn.140034970
lea ecx, [r15 + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r12, rdi
shl r12, 5
mov rbx, qword [r14]
lea rsi, [rbx + r12]
mov qword [rsp + 0x20], r15
mov rdi, r15
mov qword [rsp + 0x28], r15
cmp rbx, rsi
je 0x14008dc30
nop dword [rax + rax]
mov rdx, rbx
mov rcx, rdi
call fcn.140086740
add rdi, 0x20
mov qword [rsp + 0x28], rdi
add rbx, 0x20
cmp rbx, rsi
jne 0x14008dc10
mov rbx, qword [r14]
lea rdi, [r12 + r15]
movzx eax, word [r14 + 8]
mov ebp, eax
shl rbp, 5
add rbp, rbx
lea rsi, [r12 + 0x20]
add rsi, rbx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rdi
cmp rsi, rbp
je 0x14008dc85
nop dword [rax]
mov rdx, rsi
mov rcx, rdi
call fcn.140086740
add rdi, 0x20
mov qword [rsp + 0x28], rdi
add rsi, 0x20
cmp rsi, rbp
jne 0x14008dc60
mov rbx, qword [r14]
movzx eax, word [r14 + 8]
test rbx, rbx
je 0x14008dcbe
movzx edi, ax
shl rdi, 5
add rdi, rbx
cmp rbx, rdi
je 0x14008dcb5
nop dword [rax]
lea rcx, [rbx + 8]
call fcn.140088d80
add rbx, 0x20
cmp rbx, rdi
jne 0x14008dca0
mov rbx, qword [r14]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rsi, qword [rsp + 0x60]
mov qword [r14], r15
mov eax, 0xffff
add word [r14 + 8], ax
movzx eax, byte [rsi]
btr eax, r13d
mov byte [rsi], al
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x14008dd00
Capabilities:
Terminate process

Disassembly:
push rbx
push rsi
push r13
sub rsp, 0x30
mov rsi, rdx
mov rbx, rcx
mov rcx, rsi
mov rdx, r8
mov r13, r8
call fcn.1400880b0
test al, al
je 0x14008de46
mov qword [rsp + 0x58], rdi
movzx edi, word [rsi + 8]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x60], r12
movzx r14d, di
mov r8d, 1
and r14d, 7
movzx r15d, di
shr r15, 3
mov ecx, r14d
shl r8w, cl
test byte [r15 + rbx + 0xa], r8b
je 0x14008de12
lea rcx, [rbx + 0xa]
movzx edx, di
call fcn.14009a8f0
movzx edi, word [rbx + 8]
movzx r12d, ax
cmp di, 1
jne 0x14008dd96
mov rcx, qword [rbx]
test rcx, rcx
je 0x14008dd92
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor ebp, ebp
jmp 0x14008ddf7
dec di
movzx ecx, di
shl rcx, 5
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbp, rax
test rax, rax
je 0x14008de4f
mov rdx, qword [rbx]
mov rdi, r12
shl rdi, 5
mov rcx, rax
mov r8, rdi
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [rbx]
lea rcx, [rdi + rbp]
movzx r8d, word [rbx + 8]
shl r8, 5
lea rdx, [rax + 0x20]
add rdx, rdi
sub r8, rdx
add r8, rax
call sub.VCRUNTIME140.dll_memmove
mov rcx, qword [rbx]
test rcx, rcx
je 0x14008ddf7
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, 0xffff
mov qword [rbx], rbp
add word [rbx + 8], ax
movzx eax, byte [r15 + rbx + 0xa]
btr eax, r14d
mov byte [r15 + rbx + 0xa], al
inc word [rsi + 8]
mov rdx, r13
movzx edi, word [rsi + 8]
mov rcx, rsi
call fcn.1400880b0
test al, al
jne 0x14008dd42
mov r12, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
mov r14, qword [rsp + 0x28]
mov r15, qword [rsp + 0x20]
add rsp, 0x30
pop r13
pop rsi
pop rbx
ret
mov ecx, 2
movzx ebx, di
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, ebx
lea rdx, [0x14018ab30]
mov rcx, rax
call fcn.140034970
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1400a0420
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x18], r8
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
movzx ebx, dx
mov rsi, rcx
add rcx, 0xa
movzx edx, bx
call fcn.14006a8e0
movzx edi, ax
mov r13d, ebx
and r13d, 7
mov r12d, ebx
shr r12, 3
mov edx, 1
mov ecx, r13d
shl dx, cl
test byte [r12 + rsi + 0xa], dl
je 0x1400a0491
mov r14d, edi
shl r14, 5
mov rcx, qword [rsi]
add rcx, 8
add rcx, r14
call fcn.140088d80
jmp 0x1400a057f
movzx ebx, word [rsi + 8]
inc bx
movzx ecx, bx
shl rcx, 5
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
test rax, rax
jne 0x1400a04d6
movzx ebx, bx
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8d, ebx
lea rdx, [0x14018ab30]
call fcn.140034970
lea ecx, [r15 + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r14, rdi
shl r14, 5
mov rbx, qword [rsi]
lea rbp, [rbx + r14]
mov qword [rsp + 0x20], r15
mov rdi, r15
mov qword [rsp + 0x28], r15
cmp rbx, rbp
je 0x1400a0520
nop word [rax + rax]
mov rdx, rbx
mov rcx, rdi
call fcn.140086670
add rdi, 0x20
mov qword [rsp + 0x28], rdi
add rbx, 0x20
cmp rbx, rbp
jne 0x1400a0500
mov rbx, qword [rsi]
lea rdi, [r15 + 0x20]
add rdi, r14
movzx ebp, word [rsi + 8]
shl rbp, 5
add rbp, rbx
add rbx, r14
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rdi
cmp rbx, rbp
je 0x1400a0561
mov rdx, rbx
mov rcx, rdi
call fcn.140086670
add rdi, 0x20
mov qword [rsp + 0x28], rdi
add rbx, 0x20
cmp rbx, rbp
jne 0x1400a0544
mov rcx, rsi
call fcn.14008e7e0
mov qword [rsi], r15
inc word [rsi + 8]
movzx eax, byte [r12 + rsi + 0xa]
bts eax, r13d
mov byte [r12 + rsi + 0xa], al
mov rcx, qword [rsi]
add rcx, r14
mov rdx, qword [rsp + 0x70]
call fcn.140086670
mov rax, qword [rsi]
add rax, r14
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1400a05c0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x18], r8
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
movzx ebx, dx
mov rsi, rcx
add rcx, 0xa
movzx edx, bx
call fcn.14009a880
movzx edi, ax
mov r13d, ebx
and r13d, 7
mov r12d, ebx
shr r12, 3
mov edx, 1
mov ecx, r13d
shl dx, cl
test byte [r12 + rsi + 0xa], dl
je 0x1400a0631
mov r14d, edi
shl r14, 5
mov rcx, qword [rsi]
add rcx, 8
add rcx, r14
call fcn.140088d80
jmp 0x1400a071f
movzx ebx, word [rsi + 8]
inc bx
movzx ecx, bx
shl rcx, 5
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
test rax, rax
jne 0x1400a0676
movzx ebx, bx
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8d, ebx
lea rdx, [0x14018ab30]
call fcn.140034970
lea ecx, [r15 + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r14, rdi
shl r14, 5
mov rbx, qword [rsi]
lea rbp, [rbx + r14]
mov qword [rsp + 0x20], r15
mov rdi, r15
mov qword [rsp + 0x28], r15
cmp rbx, rbp
je 0x1400a06c0
nop word [rax + rax]
mov rdx, rbx
mov rcx, rdi
call fcn.140086740
add rdi, 0x20
mov qword [rsp + 0x28], rdi
add rbx, 0x20
cmp rbx, rbp
jne 0x1400a06a0
mov rbx, qword [rsi]
lea rdi, [r15 + 0x20]
add rdi, r14
movzx ebp, word [rsi + 8]
shl rbp, 5
add rbp, rbx
add rbx, r14
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rdi
cmp rbx, rbp
je 0x1400a0701
mov rdx, rbx
mov rcx, rdi
call fcn.140086740
add rdi, 0x20
mov qword [rsp + 0x28], rdi
add rbx, 0x20
cmp rbx, rbp
jne 0x1400a06e4
mov rcx, rsi
call fcn.14008e7e0
mov qword [rsi], r15
inc word [rsi + 8]
movzx eax, byte [r12 + rsi + 0xa]
bts eax, r13d
mov byte [r12 + rsi + 0xa], al
mov rcx, qword [rsi]
add rcx, r14
mov rdx, qword [rsp + 0x70]
call fcn.140086740
mov rax, qword [rsi]
add rax, r14
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x1400a0840
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov rbx, rdx
mov r14, rcx
movabs rax, 0xaaaaaaaaaaaaaaab
mov rdi, r8
mul rdx
mov rsi, qword [r14]
shr rdx, 5
mov rcx, rdx
movzx eax, dx
shl rcx, 4
add dx, dx
add ax, dx
mov qword [rsp + 0x68], rcx
add rsi, rcx
shl ax, 4
sub bx, ax
movzx edx, bx
movzx r12d, word [rsi + 8]
lea rcx, [rsi + 0xa]
call fcn.14009a8f0
movzx r13d, bx
mov edx, 1
and r13d, 7
movzx r15d, bx
shr r15, 3
mov ecx, r13d
shl dx, cl
mov word [rsp + 0x60], ax
test byte [r15 + rsi + 0xa], dl
jne 0x1400a097a
lea ebx, [r12 + 1]
movzx ecx, bx
shl rcx, 5
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbp, rax
test rax, rax
jne 0x1400a0913
lea ecx, [rax + 2]
movzx ebx, bx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, ebx
lea rdx, [0x14018ab30]
mov rcx, rax
call fcn.140034970
lea ecx, [rbp + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movzx ebx, word [rsp + 0x60]
mov rcx, rbp
mov rdi, qword [rsi]
shl rbx, 5
mov rdx, rdi
mov r8, rbx
call sub.VCRUNTIME140.dll_memmove
movzx r8d, word [rsi + 8]
lea rdx, [rbx + rdi]
shl r8, 5
lea rcx, [rbx + 0x20]
sub r8, rdx
add rcx, rbp
add r8, rdi
call sub.VCRUNTIME140.dll_memmove
mov rcx, qword [rsi]
test rcx, rcx
je 0x1400a095a
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
inc word [rsi + 8]
mov rdi, qword [rsp + 0x70]
mov qword [rsi], rbp
movzx eax, byte [r15 + rsi + 0xa]
bts eax, r13d
mov byte [r15 + rsi + 0xa], al
movzx eax, word [rsp + 0x60]
movups xmm0, xmmword [rdi]
mov rdx, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x78]
movzx ecx, ax
mov rax, qword [rsi]
shl rcx, 5
movups xmmword [rcx + rax], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rcx + rax + 0x10], xmm1
mov rax, qword [rsi]
add rax, rcx
mov rcx, qword [r14]
movzx edx, word [rdx + rcx + 8]
sub rdx, r12
add qword [r14 + 0x20], rdx
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400a3f30
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov rbx, r9
mov rbp, r8
mov r14, rdx
mov rsi, rcx
movabs rax, 0x492492492492492
cmp qword [rcx + 0x10], rax
je 0x1400a4162
lea r15, [rcx + 8]
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x28], 0
mov ecx, 0x38
call fcn.140161d48
mov rdi, rax
mov qword [rsp + 0x28], rax
mov edx, dword [rbp]
mov dword [rax + 0x10], edx
movups xmm0, xmmword [rbx]
movups xmmword [rax + 0x14], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rax + 0x24], xmm1
mov eax, edx
shr eax, 8
movzx ebp, al
movzx eax, dl
movabs rcx, 0xcbf29ce484222325
xor rax, rcx
movabs r8, 0x100000001b3
imul rax, r8
xor rbp, rax
imul rbp, r8
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor rbp, rcx
imul rbp, r8
shr rdx, 0x18
xor rbp, rdx
imul rbp, r8
mov rcx, qword [rsi + 0x10]
movss xmm3, dword [rsi]
add rcx, 1
xorps xmm0, xmm0
js 0x1400a4000
cvtsi2ss xmm0, rcx
jmp 0x1400a4015
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rbx, qword [rsi + 0x38]
xorps xmm2, xmm2
test rbx, rbx
js 0x1400a4028
cvtsi2ss xmm2, rbx
jmp 0x1400a4040
mov rcx, rbx
shr rcx, 1
mov rax, rbx
and eax, 1
or rcx, rax
cvtsi2ss xmm2, rcx
addss xmm2, xmm2
movaps xmm1, xmm0
divss xmm1, xmm2
comiss xmm1, xmm3
seta al
test al, al
je 0x1400a40bc
divss xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_ceilf
xor ecx, ecx
movss xmm1, dword [0x140187620]
comiss xmm0, xmm1
jb 0x1400a407f
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x1400a407f
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x1400a40b1
cmp rbx, 0x200
jae 0x1400a40ae
lea rbx, [rbx*8]
cmp rbx, rcx
jae 0x1400a40b1
mov rbx, rcx
mov rdx, rbx
mov rcx, rsi
call fcn.1400a57e0
mov rcx, qword [rsi + 0x30]
and rcx, rbp
add rcx, rcx
mov r8, qword [rsi + 0x18]
mov rax, qword [r8 + rcx*8 + 8]
mov rdx, qword [r15]
cmp rax, rdx
je 0x1400a40f4
mov rdx, qword [r8 + rcx*8]
mov ecx, dword [rdi + 0x10]
cmp ecx, dword [rax + 0x10]
je 0x1400a40f1
cmp rax, rdx
je 0x1400a4127
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x1400a40e3
mov rdx, qword [rax]
mov r8, qword [rdx + 8]
inc qword [rsi + 0x10]
mov qword [rdi], rdx
mov qword [rdi + 8], r8
mov qword [r8], rdi
mov qword [rdx + 8], rdi
mov rcx, qword [rsi + 0x18]
mov rax, qword [rsi + 0x30]
and rax, rbp
add rax, rax
mov r9, qword [rcx + rax*8]
cmp r9, qword [r15]
jne 0x1400a412c
mov qword [rcx + rax*8], rdi
jmp 0x1400a413e
mov rdx, rax
jmp 0x1400a40f4
cmp r9, rdx
jne 0x1400a4137
mov qword [rcx + rax*8], rdi
jmp 0x1400a4143
cmp qword [rcx + rax*8 + 8], r8
jne 0x1400a4143
mov qword [rcx + rax*8 + 8], rdi
mov qword [r14], rdi
mov rax, r14
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x30
pop r15
pop r14
pop rdi
ret
lea rcx, str.unordered_map_set_too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3
Function at 0x1400a4980
Capabilities:
Hash data using fnv

Disassembly:
movzx r9d, byte [r8]
mov r10, rcx
movabs rcx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r9, rax
mov r11, rdx
movzx eax, byte [r8 + 1]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 2]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 3]
imul r9, rcx
xor r9, rax
mov rax, qword [r10 + 0x18]
imul r9, rcx
mov rcx, qword [r10 + 0x30]
and rcx, r9
shl rcx, 4
add rax, rcx
mov rcx, qword [r10 + 8]
mov rdx, qword [rax]
cmp rdx, rcx
jne 0x1400a49f5
mov rdx, rcx
mov qword [r11], rcx
mov qword [r11 + 8], rcx
mov rax, r11
ret
mov r8d, dword [r8]
mov rax, qword [rax + 8]
cmp dword [rdx + 0x10], r8d
je 0x1400a4a10
cmp rdx, rax
je 0x1400a49e7
mov rdx, qword [rdx]
cmp dword [rdx + 0x10], r8d
jne 0x1400a4a02
mov rcx, qword [rdx]
cmp rdx, rax
je 0x1400a4a31
nop dword [rax + rax]
mov r9, rcx
cmp r8d, dword [rcx + 0x10]
jne 0x1400a4a31
mov rcx, qword [rcx]
cmp r9, rax
jne 0x1400a4a20
mov qword [r11], rdx
mov rax, r11
mov qword [r11 + 8], rcx
ret
Function at 0x1400a57e0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x1400a59a2
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x40], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.14005f140
mov rcx, qword [rsi + 8]
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rdi
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x1400a5967
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + 0x11]
movzx r9d, byte [rcx + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rdx, qword [rdx]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x12]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x13]
imul r9, rdi
xor r9, rax
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r10, qword [r11]
cmp r10, rbx
jne 0x1400a58d3
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x1400a5956
mov rax, qword [r11 + 8]
mov r9d, dword [rcx + 0x10]
cmp r9d, dword [rax + 0x10]
jne 0x1400a5910
mov r10, qword [rax]
cmp r10, rcx
je 0x1400a590a
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x1400a5956
mov r8, rax
cmp r10, rax
je 0x1400a5932
nop dword [rax + rax]
mov rax, qword [rax + 8]
mov r8, rax
cmp r9d, dword [rax + 0x10]
je 0x1400a597c
cmp r10, rax
jne 0x1400a5920
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x1400a5880
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov r10, qword [rax]
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
jmp 0x1400a5956
lea rcx, str.invalid_hash_bucket_count
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3
Function at 0x1400a5c40
Capabilities:
Hash data using fnv

Disassembly:
push rbp
push rsi
push r14
sub rsp, 0x40
mov rbp, r8
mov r14, rdx
mov rsi, rcx
cmp rdx, r8
je 0x1400a5d3e
mov rdx, qword [rcx + 0x18]
movabs r8, 0x100000001b3
mov qword [rsp + 0x60], rbx
movabs rax, 0xcbf29ce484222325
mov qword [rsp + 0x38], rdi
mov rbx, r14
mov qword [rsp + 0x30], r12
mov r12, qword [rcx + 8]
movzx ecx, byte [r14 + 0x10]
xor rcx, rax
mov qword [rsp + 0x28], r13
movzx eax, byte [r14 + 0x11]
mov r13, qword [r14 + 8]
imul rcx, r8
mov qword [rsp + 0x20], r15
mov r15, qword [rsi + 0x30]
xor rcx, rax
movzx eax, byte [r14 + 0x12]
imul rcx, r8
mov qword [rsp + 0x78], rdx
xor rcx, rax
movzx eax, byte [r14 + 0x13]
imul rcx, r8
xor rcx, rax
imul rcx, r8
and r15, rcx
shl r15, 4
add r15, rdx
mov rax, qword [r15]
mov qword [rsp + 0x68], rax
mov rax, qword [r15 + 8]
mov qword [rsp + 0x70], rax
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x20
call fcn.140161d84
dec qword [rsi + 0x10]
cmp rdi, qword [rsp + 0x70]
je 0x1400a5d4a
cmp rbx, rbp
jne 0x1400a5cf0
cmp qword [rsp + 0x68], r14
jne 0x1400a5d1d
mov qword [r15], rbx
mov r12, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov r15, qword [rsp + 0x20]
mov qword [r13], rbx
mov qword [rbx + 8], r13
mov r13, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x60]
mov rax, rbp
add rsp, 0x40
pop r14
pop rsi
pop rbp
ret
cmp qword [rsp + 0x68], r14
jne 0x1400a5d59
mov qword [r15], r12
mov rax, r12
jmp 0x1400a5d5c
mov rax, r13
mov qword [r15 + 8], rax
cmp rbx, rbp
je 0x1400a5d1d
nop word [rax + rax]
movzx ecx, byte [rbx + 0x10]
movabs rdx, 0x100000001b3
mov r15, qword [rsi + 0x30]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movzx eax, byte [rbx + 0x11]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x12]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x13]
imul rcx, rdx
xor rcx, rax
imul rcx, rdx
and r15, rcx
shl r15, 4
add r15, qword [rsp + 0x78]
mov r14, qword [r15 + 8]
nop dword [rax]
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x20
call fcn.140161d84
dec qword [rsi + 0x10]
cmp rdi, r14
je 0x1400a5df6
cmp rbx, rbp
jne 0x1400a5dd0
jmp 0x1400a5d1a
mov qword [r15], r12
mov qword [r15 + 8], r12
cmp rbx, rbp
jne 0x1400a5d70
jmp 0x1400a5d1d
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x1400a614c
mov rax, qword [rdi + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x1400a60da
mov rdx, qword [rdi + 8]
mov rcx, rdi
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x20
pop rdi
jmp 0x1400a5c40
mov rcx, qword [rdi + 8]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x1400a611a
mov qword [rsp + 0x38], rbx
nop word [rax + rax]
mov rbx, qword [rcx]
mov edx, 0x20
call fcn.140161d84
mov rcx, rbx
test rbx, rbx
jne 0x1400a6100
mov rbx, qword [rsp + 0x38]
mov rax, qword [rdi + 8]
lea r8, [rsp + 0x30]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 8], rax
mov qword [rdi + 0x10], 0
mov rax, qword [rdi + 8]
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x30], rax
call fcn.14005b770
add rsp, 0x20
pop rdi
ret
Function at 0x1400a60a0
Capabilities:
Hash data using fnv

Disassembly:
push rbp
push rsi
push r14
sub rsp, 0x40
mov rbp, r8
mov r14, rdx
mov rsi, rcx
cmp rdx, r8
je 0x1400a5d3e
mov rdx, qword [rcx + 0x18]
movabs r8, 0x100000001b3
mov qword [rsp + 0x60], rbx
movabs rax, 0xcbf29ce484222325
mov qword [rsp + 0x38], rdi
mov rbx, r14
mov qword [rsp + 0x30], r12
mov r12, qword [rcx + 8]
movzx ecx, byte [r14 + 0x10]
xor rcx, rax
mov qword [rsp + 0x28], r13
movzx eax, byte [r14 + 0x11]
mov r13, qword [r14 + 8]
imul rcx, r8
mov qword [rsp + 0x20], r15
mov r15, qword [rsi + 0x30]
xor rcx, rax
movzx eax, byte [r14 + 0x12]
imul rcx, r8
mov qword [rsp + 0x78], rdx
xor rcx, rax
movzx eax, byte [r14 + 0x13]
imul rcx, r8
xor rcx, rax
imul rcx, r8
and r15, rcx
shl r15, 4
add r15, rdx
mov rax, qword [r15]
mov qword [rsp + 0x68], rax
mov rax, qword [r15 + 8]
mov qword [rsp + 0x70], rax
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x20
call fcn.140161d84
dec qword [rsi + 0x10]
cmp rdi, qword [rsp + 0x70]
je 0x1400a5d4a
cmp rbx, rbp
jne 0x1400a5cf0
cmp qword [rsp + 0x68], r14
jne 0x1400a5d1d
mov qword [r15], rbx
mov r12, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov r15, qword [rsp + 0x20]
mov qword [r13], rbx
mov qword [rbx + 8], r13
mov r13, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x60]
mov rax, rbp
add rsp, 0x40
pop r14
pop rsi
pop rbp
ret
cmp qword [rsp + 0x68], r14
jne 0x1400a5d59
mov qword [r15], r12
mov rax, r12
jmp 0x1400a5d5c
mov rax, r13
mov qword [r15 + 8], rax
cmp rbx, rbp
je 0x1400a5d1d
nop word [rax + rax]
movzx ecx, byte [rbx + 0x10]
movabs rdx, 0x100000001b3
mov r15, qword [rsi + 0x30]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movzx eax, byte [rbx + 0x11]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x12]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x13]
imul rcx, rdx
xor rcx, rax
imul rcx, rdx
and r15, rcx
shl r15, 4
add r15, qword [rsp + 0x78]
mov r14, qword [r15 + 8]
nop dword [rax]
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x20
call fcn.140161d84
dec qword [rsi + 0x10]
cmp rdi, r14
je 0x1400a5df6
cmp rbx, rbp
jne 0x1400a5dd0
jmp 0x1400a5d1a
mov qword [r15], r12
mov qword [r15 + 8], r12
cmp rbx, rbp
jne 0x1400a5d70
jmp 0x1400a5d1d
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x1400a614c
mov rax, qword [rdi + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x1400a60da
mov rdx, qword [rdi + 8]
mov rcx, rdi
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x20
pop rdi
jmp 0x1400a5c40
mov rcx, qword [rdi + 8]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x1400a611a
mov qword [rsp + 0x38], rbx
nop word [rax + rax]
mov rbx, qword [rcx]
mov edx, 0x20
call fcn.140161d84
mov rcx, rbx
test rbx, rbx
jne 0x1400a6100
mov rbx, qword [rsp + 0x38]
mov rax, qword [rdi + 8]
lea r8, [rsp + 0x30]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 8], rax
mov qword [rdi + 0x10], 0
mov rax, qword [rdi + 8]
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x30], rax
call fcn.14005b770
add rsp, 0x20
pop rdi
ret
Function at 0x1400a6260
Capabilities:
Hash data using fnv

Disassembly:
cmp byte [rcx + 0x48], 0
jne fcn.1400a60a0
ret

Function at 0x1400a6290
Capabilities:
Hash data using fnv

Disassembly:
mov dword [rsp + 0x10], edx
sub rsp, 0x48
cmp byte [rcx + 0x48], 0
mov r10, rcx
mov r9d, edx
je 0x1400a6340
movabs rcx, 0x100000001b3
movzx edx, r9b
movabs rax, 0xcbf29ce484222325
xor rdx, rax
movzx eax, byte [rsp + 0x59]
imul rdx, rcx
xor rdx, rax
movzx eax, byte [rsp + 0x5a]
imul rdx, rcx
xor rdx, rax
movzx eax, byte [rsp + 0x5b]
imul rdx, rcx
xor rdx, rax
imul rdx, rcx
mov rcx, qword [r10 + 0x30]
and rcx, rdx
mov rdx, qword [r10 + 8]
shl rcx, 4
add rcx, qword [r10 + 0x18]
mov rax, qword [rcx + 8]
cmp rax, rdx
je 0x1400a6339
mov rcx, qword [rcx]
cmp r9d, dword [rax + 0x10]
je 0x1400a631f
cmp rax, rcx
je 0x1400a6339
mov rax, qword [rax + 8]
cmp r9d, dword [rax + 0x10]
jne 0x1400a6310
test rax, rax
cmove rax, rdx
cmp rax, rdx
je 0x1400a6339
mov rcx, qword [rax + 0x18]
mov al, 1
mov qword [r8], rcx
add rsp, 0x48
ret
xor al, al
add rsp, 0x48
ret
lea rdx, str.Generated_transactions_index_disabled.
lea rcx, [rsp + 0x20]
call fcn.140011960
lea rdx, [0x1401d25c0]
lea rcx, [rsp + 0x20]
call sub.VCRUNTIME140.dll__CxxThrowException
int3