joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180122250
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x40
xor esi, esi
mov ecx, 0x158
call fcn.18016efa4
mov rdi, rax
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x1801eb830]
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.1801072c0
nop
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
add rbx, 8
mov rdx, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x1801222ba
mov rbx, qword [rbx]
movabs rcx, 0xcbf29ce484222325
test rdx, rdx
je 0x1801222f3
movabs r8, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbx + rsi]
xor rcx, rax
imul rcx, r8
inc rsi
cmp rsi, rdx
jb 0x1801222e0
mov qword [rsp + 0x50], rcx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x30]
call fcn.180123be0
mov rcx, qword [rax]
lock inc dword [rdi + 8]
mov rax, qword [rsp + 0x20]
mov qword [rcx + 0x18], rax
mov rbx, qword [rcx + 0x20]
mov qword [rcx + 0x20], rdi
mov esi, 0xffffffff
test rbx, rbx
je 0x180122353
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180122353
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180122353
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.d2d1.dll_Ordinal_8]
nop
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x18012237a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x18012237a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.d2d1.dll_Ordinal_8]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret
Function at 0x180122390
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x40
xor esi, esi
mov ecx, 0x168
call fcn.18016efa4
mov rdi, rax
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x1801eb810]
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.1801052b0
nop
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
add rbx, 8
mov rdx, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x1801223fa
mov rbx, qword [rbx]
movabs rcx, 0xcbf29ce484222325
test rdx, rdx
je 0x180122433
movabs r8, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbx + rsi]
xor rcx, rax
imul rcx, r8
inc rsi
cmp rsi, rdx
jb 0x180122420
mov qword [rsp + 0x50], rcx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x30]
call fcn.180123be0
mov rcx, qword [rax]
lock inc dword [rdi + 8]
mov rax, qword [rsp + 0x20]
mov qword [rcx + 0x18], rax
mov rbx, qword [rcx + 0x20]
mov qword [rcx + 0x20], rdi
mov esi, 0xffffffff
test rbx, rbx
je 0x180122493
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180122493
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180122493
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.d2d1.dll_Ordinal_8]
nop
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1801224ba
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x1801224ba
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.d2d1.dll_Ordinal_8]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret
Function at 0x1801224d0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x40
xor esi, esi
mov ecx, 0x160
call fcn.18016efa4
mov rdi, rax
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x1801eb850]
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.18010a000
nop
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
add rbx, 8
mov rdx, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x18012253a
mov rbx, qword [rbx]
movabs rcx, 0xcbf29ce484222325
test rdx, rdx
je 0x180122573
movabs r8, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbx + rsi]
xor rcx, rax
imul rcx, r8
inc rsi
cmp rsi, rdx
jb 0x180122560
mov qword [rsp + 0x50], rcx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x30]
call fcn.180123be0
mov rcx, qword [rax]
lock inc dword [rdi + 8]
mov rax, qword [rsp + 0x20]
mov qword [rcx + 0x18], rax
mov rbx, qword [rcx + 0x20]
mov qword [rcx + 0x20], rdi
mov esi, 0xffffffff
test rbx, rbx
je 0x1801225d3
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1801225d3
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1801225d3
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.d2d1.dll_Ordinal_8]
nop
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1801225fa
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x1801225fa
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.d2d1.dll_Ordinal_8]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret
Function at 0x180122610
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x40
xor esi, esi
mov ecx, 0x180
call fcn.18016efa4
mov rdi, rax
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x1801eb930]
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.18010d080
nop
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
add rbx, 8
mov rdx, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x18012267a
mov rbx, qword [rbx]
movabs rcx, 0xcbf29ce484222325
test rdx, rdx
je 0x1801226b3
movabs r8, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbx + rsi]
xor rcx, rax
imul rcx, r8
inc rsi
cmp rsi, rdx
jb 0x1801226a0
mov qword [rsp + 0x50], rcx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x30]
call fcn.180123be0
mov rcx, qword [rax]
lock inc dword [rdi + 8]
mov rax, qword [rsp + 0x20]
mov qword [rcx + 0x18], rax
mov rbx, qword [rcx + 0x20]
mov qword [rcx + 0x20], rdi
mov esi, 0xffffffff
test rbx, rbx
je 0x180122713
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180122713
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180122713
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.d2d1.dll_Ordinal_8]
nop
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x18012273a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x18012273a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.d2d1.dll_Ordinal_8]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret
Function at 0x180122750
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x40
xor esi, esi
mov ecx, 0x198
call fcn.18016efa4
mov rdi, rax
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x1801eb910]
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.18010e540
nop
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
add rbx, 8
mov rdx, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x1801227ba
mov rbx, qword [rbx]
movabs rcx, 0xcbf29ce484222325
test rdx, rdx
je 0x1801227f3
movabs r8, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbx + rsi]
xor rcx, rax
imul rcx, r8
inc rsi
cmp rsi, rdx
jb 0x1801227e0
mov qword [rsp + 0x50], rcx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x30]
call fcn.180123be0
mov rcx, qword [rax]
lock inc dword [rdi + 8]
mov rax, qword [rsp + 0x20]
mov qword [rcx + 0x18], rax
mov rbx, qword [rcx + 0x20]
mov qword [rcx + 0x20], rdi
mov esi, 0xffffffff
test rbx, rbx
je 0x180122853
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180122853
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180122853
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.d2d1.dll_Ordinal_8]
nop
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x18012287a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x18012287a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.d2d1.dll_Ordinal_8]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret
Function at 0x180122890
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x40
xor esi, esi
mov ecx, 0x178
call fcn.18016efa4
mov rdi, rax
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x1801eb950]
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.180116ba0
nop
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
add rbx, 8
mov rdx, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x1801228fa
mov rbx, qword [rbx]
movabs rcx, 0xcbf29ce484222325
test rdx, rdx
je 0x180122933
movabs r8, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbx + rsi]
xor rcx, rax
imul rcx, r8
inc rsi
cmp rsi, rdx
jb 0x180122920
mov qword [rsp + 0x50], rcx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x30]
call fcn.180123be0
mov rcx, qword [rax]
lock inc dword [rdi + 8]
mov rax, qword [rsp + 0x20]
mov qword [rcx + 0x18], rax
mov rbx, qword [rcx + 0x20]
mov qword [rcx + 0x20], rdi
mov esi, 0xffffffff
test rbx, rbx
je 0x180122993
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180122993
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180122993
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.d2d1.dll_Ordinal_8]
nop
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1801229ba
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x1801229ba
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.d2d1.dll_Ordinal_8]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret
Function at 0x1801229d0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x40
xor esi, esi
mov ecx, 0x158
call fcn.18016efa4
mov rdi, rax
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x1801eb830]
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.180117d00
nop
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
add rbx, 8
mov rdx, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x180122a3a
mov rbx, qword [rbx]
movabs rcx, 0xcbf29ce484222325
test rdx, rdx
je 0x180122a73
movabs r8, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbx + rsi]
xor rcx, rax
imul rcx, r8
inc rsi
cmp rsi, rdx
jb 0x180122a60
mov qword [rsp + 0x50], rcx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x30]
call fcn.180123be0
mov rcx, qword [rax]
lock inc dword [rdi + 8]
mov rax, qword [rsp + 0x20]
mov qword [rcx + 0x18], rax
mov rbx, qword [rcx + 0x20]
mov qword [rcx + 0x20], rdi
mov esi, 0xffffffff
test rbx, rbx
je 0x180122ad3
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180122ad3
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180122ad3
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.d2d1.dll_Ordinal_8]
nop
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x180122afa
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x180122afa
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.d2d1.dll_Ordinal_8]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret
Function at 0x180122b10
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x40
xor esi, esi
mov ecx, 0x168
call fcn.18016efa4
mov rdi, rax
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x1801eb810]
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.1801188a0
nop
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
add rbx, 8
mov rdx, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x180122b7a
mov rbx, qword [rbx]
movabs rcx, 0xcbf29ce484222325
test rdx, rdx
je 0x180122bb3
movabs r8, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbx + rsi]
xor rcx, rax
imul rcx, r8
inc rsi
cmp rsi, rdx
jb 0x180122ba0
mov qword [rsp + 0x50], rcx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x30]
call fcn.180123be0
mov rcx, qword [rax]
lock inc dword [rdi + 8]
mov rax, qword [rsp + 0x20]
mov qword [rcx + 0x18], rax
mov rbx, qword [rcx + 0x20]
mov qword [rcx + 0x20], rdi
mov esi, 0xffffffff
test rbx, rbx
je 0x180122c13
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180122c13
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180122c13
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.d2d1.dll_Ordinal_8]
nop
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x180122c3a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x180122c3a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.d2d1.dll_Ordinal_8]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret
Function at 0x180122c50
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x40
xor esi, esi
mov ecx, 0x158
call fcn.18016efa4
mov rdi, rax
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x1801eb830]
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.18011b650
nop
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
add rbx, 8
mov rdx, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x180122cba
mov rbx, qword [rbx]
movabs rcx, 0xcbf29ce484222325
test rdx, rdx
je 0x180122cf3
movabs r8, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbx + rsi]
xor rcx, rax
imul rcx, r8
inc rsi
cmp rsi, rdx
jb 0x180122ce0
mov qword [rsp + 0x50], rcx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x30]
call fcn.180123be0
mov rcx, qword [rax]
lock inc dword [rdi + 8]
mov rax, qword [rsp + 0x20]
mov qword [rcx + 0x18], rax
mov rbx, qword [rcx + 0x20]
mov qword [rcx + 0x20], rdi
mov esi, 0xffffffff
test rbx, rbx
je 0x180122d53
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180122d53
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180122d53
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.d2d1.dll_Ordinal_8]
nop
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x180122d7a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x180122d7a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.d2d1.dll_Ordinal_8]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret
Function at 0x180122d90
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x40
xor esi, esi
mov ecx, 0x1b8
call fcn.18016efa4
mov rdi, rax
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x1801eba10]
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.18010fcd0
nop
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
add rbx, 8
mov rdx, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x180122dfa
mov rbx, qword [rbx]
movabs rcx, 0xcbf29ce484222325
test rdx, rdx
je 0x180122e33
movabs r8, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbx + rsi]
xor rcx, rax
imul rcx, r8
inc rsi
cmp rsi, rdx
jb 0x180122e20
mov qword [rsp + 0x50], rcx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x30]
call fcn.180123be0
mov rcx, qword [rax]
lock inc dword [rdi + 8]
mov rax, qword [rsp + 0x20]
mov qword [rcx + 0x18], rax
mov rbx, qword [rcx + 0x20]
mov qword [rcx + 0x20], rdi
mov esi, 0xffffffff
test rbx, rbx
je 0x180122e93
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180122e93
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180122e93
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.d2d1.dll_Ordinal_8]
nop
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x180122eba
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x180122eba
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.d2d1.dll_Ordinal_8]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret
Function at 0x180122ed0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x40
xor esi, esi
mov ecx, 0x208
call fcn.18016efa4
mov rdi, rax
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, [0x1801eb9f0]
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.180114200
nop
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdi
add rbx, 8
mov rdx, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x180122f3a
mov rbx, qword [rbx]
movabs rcx, 0xcbf29ce484222325
test rdx, rdx
je 0x180122f73
movabs r8, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbx + rsi]
xor rcx, rax
imul rcx, r8
inc rsi
cmp rsi, rdx
jb 0x180122f60
mov qword [rsp + 0x50], rcx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x30]
call fcn.180123be0
mov rcx, qword [rax]
lock inc dword [rdi + 8]
mov rax, qword [rsp + 0x20]
mov qword [rcx + 0x18], rax
mov rbx, qword [rcx + 0x20]
mov qword [rcx + 0x20], rdi
mov esi, 0xffffffff
test rbx, rbx
je 0x180122fd3
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180122fd3
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180122fd3
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.d2d1.dll_Ordinal_8]
nop
mov eax, esi
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x180122ffa
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], esi
cmp esi, 1
jne 0x180122ffa
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.d2d1.dll_Ordinal_8]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret
Function at 0x180123fe0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
movabs rax, 0xcbf29ce484222325
mov r9d, 0
sub r8, rdx
je 0x180124014
movabs r10, 0x100000001b3
nop
movzx ecx, byte [rdx + r9]
inc r9
xor rax, rcx
imul rax, r10
cmp r9, r8
jb 0x180124000
ret

Function at 0x180124b80
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x180124d5f
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x40], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.1800460c0
lea rax, [rdi - 1]
mov qword [rsi + 0x38], rdi
mov qword [rsi + 0x30], rax
mov rax, qword [rsi + 8]
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x180124d24
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop dword [rax]
nop dword [rax + rax]
movzx edx, byte [rax + 0x11]
movzx r9d, byte [rax + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rcx, qword [rcx]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x12]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x13]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x14]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x15]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x16]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x17]
imul r9, rdi
xor r9, rdx
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r9, qword [r11]
cmp r9, rbx
jne 0x180124c9c
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x180124d13
mov rdx, qword [r11 + 8]
mov r8, qword [rax + 0x10]
cmp r8, qword [rdx + 0x10]
jne 0x180124cd9
mov r10, qword [rdx]
cmp r10, rax
je 0x180124cd3
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x180124d13
cmp r9, rdx
je 0x180124cef
nop
mov rdx, qword [rdx + 8]
cmp r8, qword [rdx + 0x10]
je 0x180124d39
cmp r9, rdx
jne 0x180124ce0
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
jne 0x180124c20
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x180124d13
lea rcx, str.invalid_hash_bucket_count
call fcn.18016b24c
int3