joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400401f0
Capabilities:
Reference sql statements

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0xb0
mov rax, qword [0x14025e2c0]
xor rax, rsp
mov qword [rsp + 0xa8], rax
call fcn.14000e160
mov rbx, rax
lea r8, [0x14026e2f0]
cmp qword [0x14026e308], 0xf
cmova r8, qword [0x14026e2f0]
mov r9d, dword [0x14026e300]
lea rdx, [rsp + 0x58]
mov rcx, rax
call fcn.14003eb40
nop
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rcx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x20], reloc.WS2_32.dll_listen
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, str.SELECT__TABLE_NAME__FROM__information_schema_._tables__WHERE__TABLE_SCHEMA___:s
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 0x52
vmovups xmm0, xmmword [rsp + 0x20]
vmovdqa xmmword [rsp + 0x20], xmm0
vmovups xmm1, xmmword [rsp + 0x30]
vmovdqa xmmword [rsp + 0x30], xmm1
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x88]
call qword [sym.imp.fmt.dll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_fmt::v11::vformat_class_fmt::v11::basic_string_view_char___class_fmt::v11::basic_format_args_class_fmt::v11::context__]
nop
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call fcn.14003e8a0
cmp qword [rax], 0
setne sil
mov rbx, qword [rsp + 0x50]
test rbx, rbx
je 0x140040318
mov edi, 0xffffffff
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140040318
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x140040318
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0xa0]
cmp rdx, 0xf
jbe 0x14004035e
inc rdx
mov rcx, qword [rsp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040359
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040359
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d177c
vmovdqu xmm0, xmmword [0x140217f50]
vmovdqu xmmword [rsp + 0x98], xmm0
mov byte [rsp + 0x88], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x1400403b7
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400403b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400403b2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d177c
movzx eax, sil
mov rcx, qword [rsp + 0xa8]
xor rcx, rsp
call fcn.1401d1730
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret
Function at 0x140048800
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push rsi
sub rsp, 0x80
mov rax, qword [0x14025e2c0]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov rbx, rdx
call fcn.140048760
mov rsi, rax
test rax, rax
je 0x140048917
mov rdx, rbx
mov qword [rsp + 0xa0], rdi
lea rcx, [rsp + 0x30]
call fcn.14000dbd0
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140192920
mov r10, rax
mov rdx, rax
cmp qword [rax + 0x18], 0xf
mov r8, qword [rax + 0x10]
jbe 0x140048866
mov rdx, qword [rax]
xor edi, edi
movabs r9, 0xcbf29ce484222325
mov ecx, edi
test r8, r8
je 0x1400488a3
movabs r11, 0x100000001b3
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
xor r9, rax
imul r9, r11
cmp rcx, r8
jb 0x140048890
mov r8, r10
lea rdx, [rsp + 0x20]
mov rcx, rsi
call fcn.140067960
mov rbx, qword [rax + 8]
test rbx, rbx
jne 0x1400488c0
mov rbx, qword [rsi + 8]
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140048900
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400488fb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400488fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d177c
cmp rbx, qword [rsi + 8]
lea rcx, [rbx + 0x30]
cmovne rdi, rcx
mov rax, rdi
mov rdi, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.1401d1730
mov rbx, qword [rsp + 0xa8]
add rsp, 0x80
pop rsi
ret

Function at 0x14004b370
Capabilities:
Hash data using fnv

Disassembly:
cmp edx, dword [0x14025e48c]
jbe fcn.14004b430
cmp edx, dword [0x14025e484]
ja 0x14004b3cc
test edx, edx
je 0x14004b3d8
mov rcx, qword [rcx + 0x528]
mov r8, rcx
mov rax, qword [rcx + 8]
cmp byte [rax + 0x19], 0
jne 0x14004b3b7
nop dword [rax]
cmp dword [rax + 0x20], edx
jae 0x14004b3ab
mov rax, qword [rax + 0x10]
jmp 0x14004b3b1
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x14004b3a0
cmp byte [rcx + 0x19], 0
jne 0x14004b3d8
cmp edx, dword [rcx + 0x20]
jb 0x14004b3d8
cmp rcx, r8
je 0x14004b3d8
mov rax, qword [rcx + 0x28]
ret
cmp edx, dword [0x14025e488]
jbe 0x14004b3e0
xor eax, eax
ret
test edx, edx
je 0x14004b424
mov rcx, qword [rcx + 0x518]
mov r8, rcx
mov rax, qword [rcx + 8]
cmp byte [rax + 0x19], 0
jne 0x14004b40f
cmp dword [rax + 0x20], edx
jae 0x14004b403
mov rax, qword [rax + 0x10]
jmp 0x14004b409
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x14004b3f8
cmp byte [rcx + 0x19], 0
jne 0x14004b424
cmp edx, dword [rcx + 0x20]
jb 0x14004b424
cmp rcx, r8
je 0x14004b424
mov rax, qword [rcx + 0x28]
ret
xor eax, eax
ret
Function at 0x14004b430
Capabilities:
Hash data using fnv

Disassembly:
mov r10, rcx
test edx, edx
je 0x14004b4d6
movabs r11, 0x100000001b3
movzx r9d, dl
movabs rax, 0xcbf29ce484222325
xor r9, rax
mov eax, edx
imul r9, r11
shr eax, 8
movzx r8d, al
mov eax, edx
xor r9, r8
shr eax, 0x10
mov r8, qword [r10 + 0x260]
imul r9, r11
movzx ecx, al
xor r9, rcx
mov eax, edx
mov rcx, qword [r10 + 0x288]
imul r9, r11
shr rax, 0x18
xor r9, rax
imul r9, r11
and rcx, r9
shl rcx, 4
add rcx, qword [r10 + 0x270]
mov rax, qword [rcx + 8]
cmp rax, r8
je 0x14004b4c3
mov rcx, qword [rcx]
cmp edx, dword [rax + 0x10]
je 0x14004b4c5
cmp rax, rcx
je 0x14004b4c3
mov rax, qword [rax + 8]
cmp edx, dword [rax + 0x10]
jne 0x14004b4b3
jmp 0x14004b4c5
xor eax, eax
test rax, rax
cmove rax, r8
cmp rax, r8
je 0x14004b4d6
mov rax, qword [rax + 0x18]
ret
xor eax, eax
ret

Function at 0x14004b4e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push rsi
sub rsp, 0x80
mov rax, qword [0x14025e2c0]
xor rax, rsp
mov qword [rsp + 0x70], rax
cmp qword [rdx + 0x10], 0
mov rsi, rcx
je 0x14004b601
lea rcx, [rsp + 0x30]
mov qword [rsp + 0xa0], rdi
call fcn.14000dbd0
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140192920
mov r10, rax
mov rdx, rax
cmp qword [rax + 0x18], 0xf
mov r8, qword [rax + 0x10]
jbe 0x14004b53d
mov rdx, qword [rax]
xor ecx, ecx
movabs r9, 0xcbf29ce484222325
test r8, r8
je 0x14004b573
movabs r11, 0x100000001b3
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
xor r9, rax
imul r9, r11
cmp rcx, r8
jb 0x14004b560
mov r8, r10
lea rdx, [rsp + 0x20]
lea rcx, [rsi + 0x298]
call fcn.140067960
mov rbx, qword [rax + 8]
test rbx, rbx
jne 0x14004b597
mov rbx, qword [rsi + 0x2a0]
mov rdx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0xa0]
cmp rdx, 0xf
jbe 0x14004b5df
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b5da
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004b5da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d177c
vmovdqu xmm0, xmmword [0x140217f50]
vmovdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
cmp rbx, qword [rsi + 0x2a0]
je 0x14004b601
mov rax, qword [rbx + 0x30]
jmp 0x14004b603
xor eax, eax
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.1401d1730
mov rbx, qword [rsp + 0xa8]
add rsp, 0x80
pop rsi
ret
Function at 0x14005e020
Capabilities:
Hash data using fnv

Disassembly:
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
push rbx
sub rsp, 0x40
lea r8, [rsp + 0x58]
mov ebx, r9d
lea rdx, [rsp + 0x20]
lea rcx, [0x14026df08]
cmp r9d, 0xffffffff
jne 0x14005e130
call fcn.140065ed0
mov r8d, dword [rsp + 0x60]
movabs rcx, 0x100000001b3
movzx edx, r8b
mov r10, qword [rax]
movabs rax, 0xcbf29ce484222325
xor rdx, rax
movzx eax, byte [rsp + 0x61]
imul rdx, rcx
mov r9, qword [r10 + 0x20]
xor rdx, rax
movzx eax, byte [rsp + 0x62]
imul rdx, rcx
xor rdx, rax
movzx eax, byte [rsp + 0x63]
imul rdx, rcx
xor rdx, rax
imul rdx, rcx
mov rcx, qword [r10 + 0x48]
and rcx, rdx
mov rdx, qword [r10 + 0x30]
shl rcx, 4
add rdx, rcx
mov r11, qword [rdx + 8]
mov rcx, r11
cmp r11, r9
je 0x14005e0d8
mov rax, qword [rdx]
cmp r8d, dword [r11 + 0x10]
je 0x14005e0da
cmp rcx, rax
je 0x14005e0d8
mov rcx, qword [rcx + 8]
cmp r8d, dword [rcx + 0x10]
jne 0x14005e0c7
jmp 0x14005e0da
xor ecx, ecx
test rcx, rcx
je 0x14005e151
mov rax, qword [rdx]
cmp r11, rcx
jne 0x14005e0ff
cmp rax, rcx
jne 0x14005e0f5
mov qword [rdx], r9
mov qword [rdx + 8], r9
jmp 0x14005e10a
mov r9, qword [rcx + 8]
mov qword [rdx + 8], r9
jmp 0x14005e10a
cmp rax, rcx
jne 0x14005e10a
mov rax, qword [rcx]
mov qword [rdx], rax
mov rdx, qword [rcx]
dec qword [r10 + 0x28]
mov rax, qword [rcx + 8]
mov qword [rax], rdx
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov edx, 0x18
call fcn.1401d177c
add rsp, 0x40
pop rbx
ret
call fcn.140065ed0
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, qword [rax]
add rcx, 0x18
call fcn.140065c20
mov rcx, qword [rax]
mov dword [rcx + 0x14], ebx
add rsp, 0x40
pop rbx
ret
Function at 0x1400639b0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x80
mov rax, qword [0x14025e2c0]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov rsi, rdx
add rdx, 0x710
lea rcx, [rsp + 0x30]
call fcn.14000dbd0
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140192920
nop
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rdx, qword [rsp + 0x50]
movabs rbx, 0xcbf29ce484222325
xor ecx, ecx
mov r8, qword [rsp + 0x60]
test r8, r8
je 0x140063a43
movabs r9, 0x100000001b3
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + rdx]
xor rbx, rax
imul rbx, r9
inc rcx
cmp rcx, r8
jb 0x140063a30
mov r9, rbx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x20]
lea rcx, [0x14026ddf8]
call fcn.140067960
mov rdi, qword [rax + 8]
test rdi, rdi
je 0x140063adc
mov rdx, qword [0x14026de28]
and rdx, rbx
shl rdx, 4
add rdx, qword [0x14026de10]
mov rax, qword [rdx]
cmp qword [rdx + 8], rdi
jne 0x140063aa2
cmp rax, rdi
jne 0x140063a98
mov rax, qword [0x14026de00]
mov qword [rdx], rax
mov qword [rdx + 8], rax
jmp 0x140063aad
mov rax, qword [rdi + 8]
mov qword [rdx + 8], rax
jmp 0x140063aad
cmp rax, rdi
jne 0x140063aad
mov rax, qword [rdi]
mov qword [rdx], rax
mov rdx, qword [rdi]
dec qword [0x14026de08]
mov rax, qword [rdi + 8]
mov qword [rax], rdx
mov rax, qword [rdi + 8]
mov qword [rdx + 8], rax
lea rcx, [rdi + 0x10]
call fcn.14000e0a0
mov edx, 0x38
mov rcx, rdi
call fcn.1401d177c
mov eax, dword [rsi + 0x968]
mov dword [rsp + 0x20], eax
lea rdx, [rsp + 0x20]
lea rcx, [0x14026de38]
call fcn.140064c90
lea rdx, [rsp + 0x50]
lea rcx, [0x14026e060]
call fcn.14019d650
mov eax, dword [rsi + 0x94]
mov dword [rsp + 0x20], eax
lea rdx, [rsp + 0x20]
lea rcx, [0x14026ddb8]
call fcn.140064c90
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140063b64
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063b5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140063b5f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401d177c
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.1401d1730
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret

Function at 0x140063b90
Capabilities:
Hash data using fnv

Disassembly:
mov r10, rcx
movzx r9d, dl
movabs r11, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r9, rax
mov eax, edx
imul r9, r11
shr eax, 8
movzx r8d, al
mov eax, edx
xor r9, r8
shr eax, 0x10
mov r8, qword [r10 + 0x320]
imul r9, r11
movzx ecx, al
xor r9, rcx
mov eax, edx
mov rcx, qword [r10 + 0x348]
imul r9, r11
shr rax, 0x18
xor r9, rax
imul r9, r11
and rcx, r9
shl rcx, 4
add rcx, qword [r10 + 0x330]
mov rax, qword [rcx + 8]
cmp rax, r8
je 0x140063c20
mov rcx, qword [rcx]
cmp edx, dword [rax + 0x10]
je 0x140063c22
nop dword [rax + rax]
cmp rax, rcx
je 0x140063c20
mov rax, qword [rax + 8]
cmp edx, dword [rax + 0x10]
jne 0x140063c10
jmp 0x140063c22
xor eax, eax
test rax, rax
cmove rax, r8
cmp rax, r8
jne 0x140063c31
xor eax, eax
ret
mov rax, qword [rax + 0x18]
ret
Function at 0x140063fe0
Capabilities:
Hash data using fnv

Disassembly:
push rbx
mov r9, qword [0x14026dee8]
movabs r11, 0x100000001b3
mov r10, qword [0x14026ded0]
movabs rbx, 0xcbf29ce484222325
mov r8, qword [0x14026dec0]
movzx ecx, dl
xor rcx, rbx
movzx eax, dx
shr rax, 8
imul rcx, r11
xor rcx, rax
mov rax, r9
imul rcx, r11
and rax, rcx
add rax, rax
mov rcx, qword [r10 + rax*8 + 8]
cmp rcx, r8
je 0x140064051
mov rax, qword [r10 + rax*8]
cmp dx, word [rcx + 0x10]
je 0x140064053
cmp rcx, rax
je 0x140064051
mov rcx, qword [rcx + 8]
cmp dx, word [rcx + 0x10]
jne 0x140064040
jmp 0x140064053
xor ecx, ecx
test rcx, rcx
je 0x1400640cf
cmp rcx, r8
je 0x1400640cf
movzx eax, byte [rcx + 0x11]
movzx edx, byte [rcx + 0x10]
xor rdx, rbx
imul rdx, r11
xor rdx, rax
imul rdx, r11
and rdx, r9
add rdx, rdx
mov rax, qword [r10 + rdx*8]
cmp qword [r10 + rdx*8 + 8], rcx
jne 0x14006409f
cmp rax, rcx
jne 0x140064094
mov qword [r10 + rdx*8], r8
mov qword [r10 + rdx*8 + 8], r8
jmp 0x1400640ab
mov r8, qword [rcx + 8]
mov qword [r10 + rdx*8 + 8], r8
jmp 0x1400640ab
cmp rax, rcx
jne 0x1400640ab
mov rax, qword [rcx]
mov qword [r10 + rdx*8], rax
mov rdx, qword [rcx]
dec qword [0x14026dec8]
mov rax, qword [rcx + 8]
mov qword [rax], rdx
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov edx, 0x20
pop rbx
jmp fcn.1401d177c
pop rbx
ret

Function at 0x140064c90
Capabilities:
Hash data using fnv

Disassembly:
sub rsp, 0x28
movzx r8d, byte [rdx]
mov r10, rcx
movabs rcx, 0x100000001b3
mov r11, rdx
movabs rax, 0xcbf29ce484222325
xor r8, rax
movzx eax, byte [rdx + 1]
mov r9, qword [r10 + 8]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 2]
imul r8, rcx
xor r8, rax
movzx eax, byte [rdx + 3]
mov rdx, qword [r10 + 0x30]
imul r8, rcx
xor r8, rax
imul r8, rcx
and rdx, r8
shl rdx, 4
add rdx, qword [r10 + 0x18]
mov rcx, qword [rdx + 8]
cmp rcx, r9
je 0x140064d11
mov eax, dword [r11]
mov r8, qword [rdx]
cmp eax, dword [rcx + 0x10]
je 0x140064d13
cmp rcx, r8
je 0x140064d11
mov rcx, qword [rcx + 8]
cmp eax, dword [rcx + 0x10]
jne 0x140064d01
jmp 0x140064d13
xor ecx, ecx
test rcx, rcx
je 0x140064d6e
mov rax, qword [rdx]
cmp qword [rdx + 8], rcx
jne 0x140064d39
cmp rax, rcx
jne 0x140064d2f
mov qword [rdx], r9
mov qword [rdx + 8], r9
jmp 0x140064d44
mov r9, qword [rcx + 8]
mov qword [rdx + 8], r9
jmp 0x140064d44
cmp rax, rcx
jne 0x140064d44
mov rax, qword [rcx]
mov qword [rdx], rax
mov rdx, qword [rcx]
dec qword [r10 + 0x10]
mov rax, qword [rcx + 8]
mov qword [rax], rdx
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov edx, 0x20
call fcn.1401d177c
mov eax, 1
add rsp, 0x28
ret
xor eax, eax
add rsp, 0x28
ret
Function at 0x1400653a0
Capabilities:
Hash data using fnv

Disassembly:
movzx r9d, byte [r8]
mov r10, rcx
movabs rcx, 0x100000001b3
mov r11, rdx
movabs rax, 0xcbf29ce484222325
xor r9, rax
movzx eax, byte [r8 + 1]
mov rdx, qword [r10 + 0x30]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 2]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 3]
imul r9, rcx
xor r9, rax
imul r9, rcx
and rdx, r9
mov r9, qword [r10 + 8]
shl rdx, 4
add rdx, qword [r10 + 0x18]
mov rax, qword [rdx + 8]
cmp rax, r9
je 0x14006542c
mov ecx, dword [r8]
mov rdx, qword [rdx]
cmp ecx, dword [rax + 0x10]
je 0x14006542e
cmp rax, rdx
je 0x14006542c
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x140065410
test rax, rax
cmove rax, r9
mov qword [r11], rax
mov rax, r11
ret
xor eax, eax
test rax, rax
cmove rax, r9
mov qword [r11], rax
mov rax, r11
ret

Function at 0x140065640
Capabilities:
Hash data using fnv

Disassembly:
movzx r9d, byte [r8]
mov r10, rcx
movabs rcx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r9, rax
mov r11, rdx
movzx eax, byte [r8 + 1]
mov rdx, qword [r10 + 0x30]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 2]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 3]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 4]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 5]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 6]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 7]
imul r9, rcx
xor r9, rax
imul r9, rcx
and rdx, r9
mov r9, qword [r10 + 8]
shl rdx, 4
add rdx, qword [r10 + 0x18]
mov rax, qword [rdx + 8]
cmp rax, r9
je 0x1400656fe
mov rcx, qword [r8]
mov rdx, qword [rdx]
cmp rcx, qword [rax + 0x10]
je 0x140065700
cmp rax, rdx
je 0x1400656fe
mov rax, qword [rax + 8]
cmp rcx, qword [rax + 0x10]
jne 0x1400656e1
test rax, rax
cmove rax, r9
mov qword [r11], rax
mov rax, r11
ret
xor eax, eax
test rax, rax
cmove rax, r9
mov qword [r11], rax
mov rax, r11
ret
Function at 0x140066fa0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x140066fd8
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x40], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.140028e00
lea rax, [rdi - 1]
mov qword [rsi + 0x38], rdi
mov qword [rsi + 0x30], rax
mov rax, qword [rsi + 8]
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x140067116
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop
movzx edx, byte [rax + 0x11]
movzx r9d, byte [rax + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rcx, qword [rcx]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x12]
imul r9, rdi
xor r9, rdx
movzx edx, byte [rax + 0x13]
imul r9, rdi
xor r9, rdx
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r9, qword [r11]
cmp r9, rbx
jne 0x140067090
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x140067105
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x1400670cd
mov r10, qword [rdx]
cmp r10, rax
je 0x1400670c7
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x140067105
cmp r9, rdx
je 0x1400670e1
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x14006712b
cmp r9, rdx
jne 0x1400670d2
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
jne 0x140067040
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x140067105
Function at 0x140067160
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x140067198
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x40], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.140028e00
lea rax, [rdi - 1]
mov qword [rsi + 0x38], rdi
mov qword [rsi + 0x30], rax
mov rax, qword [rsi + 8]
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x1400672d4
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rbp
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rdi
xor r11, rdx
imul r11, rdi
and r11, qword [rsi + 0x30]
shl r11, 4
add r11, qword [rsi + 0x18]
mov r9, qword [r11]
cmp r9, rbx
jne 0x14006724d
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x1400672c3
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x14006728a
mov r10, qword [rdx]
cmp r10, rax
je 0x140067284
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x1400672c3
cmp r9, rdx
je 0x14006729f
nop
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x1400672e9
cmp r9, rdx
jne 0x140067290
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
jne 0x140067200
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x1400672c3
Function at 0x140067310
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x140067348
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x40], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.140028e00
lea rax, [rdi - 1]
mov qword [rsi + 0x38], rdi
mov qword [rsi + 0x30], rax
mov rax, qword [rsi + 8]
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x140067475
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop
movzx r9d, byte [rax + 0x10]
movzx edx, byte [rax + 0x11]
xor r9, rbp
mov r11, qword [rsi + 0x30]
mov rcx, qword [rcx]
imul r9, rdi
xor r9, rdx
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r8, qword [r11]
cmp r8, rbx
jne 0x1400673ea
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x140067464
mov rdx, qword [r11 + 8]
movzx r9d, word [rax + 0x10]
cmp r9w, word [rdx + 0x10]
jne 0x140067429
mov r10, qword [rdx]
cmp r10, rax
je 0x140067423
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x140067464
cmp r8, rdx
je 0x140067440
nop
mov rdx, qword [rdx + 8]
cmp r9w, word [rdx + 0x10]
je 0x14006748a
cmp r8, rdx
jne 0x140067430
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
jne 0x1400673b0
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x140067464