joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14004c9a0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push r14
sub rsp, 0x20
mov r14, r8
test r8, r8
je 0x14004c9ba
mov qword [r8], 0
lea rdx, [0x140121348]
call fcn.14004c870
mov rbx, rax
test rax, rax
jne 0x14004c9da
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop r14
ret
mov qword [rsp + 0x30], rsi
mov rcx, rbx
mov qword [rsp + 0x38], rdi
call fcn.1400e1004
mov esi, eax
cmp eax, 0xffffffff
je 0x14004caaa
xor edx, edx
mov r8d, 2
mov rcx, rbx
call fcn.1400e01bc
test eax, eax
jne 0x14004caaa
mov rcx, rbx
call fcn.1400e1004
movsxd rdi, eax
cmp edi, 0xffffffff
je 0x14004caaa
xor r8d, r8d
mov edx, esi
mov rcx, rbx
call fcn.1400e01bc
test eax, eax
jne 0x14004caaa
cmp rdi, 0xffffffffffffffff
je 0x14004caaa
mov rax, qword [0x14018b338]
test rax, rax
je 0x14004ca4c
inc dword [rax + 0xf4]
mov rcx, rdi
call fcn.1400d6940
mov rsi, rax
test rax, rax
je 0x14004caaa
mov r9, rbx
mov r8, rdi
mov edx, 1
mov rcx, rax
call fcn.1400dfdd8
mov rcx, rbx
cmp rax, rdi
je 0x14004ca98
call fcn.1400d7070
mov rax, qword [0x14018b338]
test rax, rax
je 0x14004ca8e
dec dword [rax + 0xf4]
mov rcx, rsi
call fcn.1400d64b0
jmp 0x14004cab2
call fcn.1400d7070
test r14, r14
je 0x14004caa5
mov qword [r14], rdi
mov rax, rsi
jmp 0x14004cab4
mov rcx, rbx
call fcn.1400d7070
xor eax, eax
mov rsi, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop r14
ret
Function at 0x14005d9e0
Capabilities:
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x140166100]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov rbx, qword [0x14018b338]
mov edi, ecx
cmp byte [rbx + 0x4a55], 0
jne 0x14005da41
cmp byte [rbx + 0x4a56], 0
jne 0x14005da41
movsx r9d, word [rbx + 0x5b7a]
lea r8, str.Tooltip__02d
mov edx, 0x10
lea rcx, [rsp + 0x20]
call fcn.14004c620
test dil, 1
je 0x14005db6f
jmp 0x14005dacc
movss xmm1, dword [rbx + 0x389c]
lea r8, str.Tooltip__02d
movsx r9d, word [rbx + 0x5b7a]
lea rcx, [rsp + 0x20]
movaps xmm0, xmm1
xor eax, eax
mulss xmm0, dword [0x140145f70]
mov edx, 0x10
mulss xmm1, dword [0x140145f4c]
addss xmm0, dword [rbx + 0xe08]
addss xmm1, dword [rbx + 0xe0c]
mov qword [rbx + 0x47c0], rax
mov dword [rbx + 0x47ac], 1
movss dword [rbx + 0x47b8], xmm0
movss dword [rbx + 0x47bc], xmm1
movss xmm0, dword [rbx + 0x38f8]
mulss xmm0, dword [0x140145d44]
or dword [rbx + 0x47a8], 0x41
movss dword [rbx + 0x4808], xmm0
call fcn.14004c620
movzx r9d, byte [rsp + 0x20]
lea r8, [rsp + 0x21]
mov r10d, 0xffffffff
mov ecx, r10d
test r9b, r9b
je 0x14005db20
lea r11, [0x140119f70]
nop dword [rax]
cmp r9b, 0x23
jne 0x14005db03
cmp byte [r8], r9b
jne 0x14005db03
cmp byte [r8 + 1], r9b
cmove ecx, r10d
movzx edx, cl
movzx eax, r9b
movzx r9d, byte [r8]
xor rdx, rax
shr ecx, 8
inc r8
xor ecx, dword [r11 + rdx*4]
test r9b, r9b
jne 0x14005daf0
not ecx
call fcn.140054a60
test rax, rax
je 0x14005db6f
cmp byte [rax + 0xb6], 0
je 0x14005db6f
mov byte [rax + 0xbb], 1
lea r8, str.Tooltip__02d
mov byte [rax + 0xbd], 1
lea rcx, [rsp + 0x20]
mov byte [rax + 0xd8], 1
mov edx, 0x10
inc word [rbx + 0x5b7a]
movsx r9d, word [rbx + 0x5b7a]
call fcn.14004c620
xor edx, edx
lea rcx, [rsp + 0x20]
mov r8d, 0x20c0347
call fcn.140057140
mov al, 1
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1400d0320
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rdi
ret
Function at 0x140096000
Capabilities:
Move file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x90
mov rax, qword [0x140166100]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r15, rdx
mov rdi, rcx
lea rbx, [rcx + 8]
mov qword [rbp - 0x39], rbx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
mov r14, 0xffffffffffffffff
cmp byte [rdi + 0x90], 0
je 0x140096062
mov rcx, rdi
call fcn.140096880
mov byte [rdi + 0x90], 0
jmp 0x140096142
cmp dword [rdi + 0x48], 0
jle 0x140096142
mov rax, qword [rdi + 0x38]
cmp rax, qword [rdi + 0x40]
jbe 0x140096142
cmp rax, r14
je 0x140096142
mov ecx, dword [rdi + 0x30]
cmp ecx, r14d
je 0x140096094
call fcn.1400e4d48
mov dword [rdi + 0x30], r14d
mov r8d, dword [rdi + 0x48]
dec r8d
lea rdx, [rbp + 0xf]
mov rcx, rdi
call fcn.1400976d0
nop
lea rcx, [rbp + 0xf]
cmp qword [rbp + 0x27], 7
cmova rcx, qword [rbp + 0xf]
call fcn.1400e6ecc
mov esi, dword [rdi + 0x48]
sub esi, 2
js 0x14009612a
nop dword [rax]
nop word [rax + rax]
mov r8d, esi
lea rdx, [rbp - 0x11]
mov rcx, rdi
call fcn.1400976d0
nop
lea r8d, [rsi + 1]
lea rdx, [rbp - 0x31]
mov rcx, rdi
call fcn.1400976d0
lea rdx, [rbp - 0x31]
cmp qword [rbp - 0x19], 7
cmova rdx, qword [rbp - 0x31]
lea rcx, [rbp - 0x11]
cmp qword [rbp + 7], 7
cmova rcx, qword [rbp - 0x11]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
lea rcx, [rbp - 0x31]
call fcn.140004f10
nop
lea rcx, [rbp - 0x11]
call fcn.140004f10
sub esi, 1
jns 0x1400960d0
mov rcx, rdi
call fcn.140096880
mov byte [rdi + 0x90], 0
lea rcx, [rbp + 0xf]
call fcn.140004f10
mov rdx, r15
lea rcx, [rbp - 0x11]
call fcn.1400971f0
nop
mov rdx, rax
lea rcx, [rbp + 0xf]
call fcn.1400978b0
nop
mov rdx, rax
lea rcx, [rbp - 0x31]
call fcn.1400919e0
nop
lea rcx, [rbp + 0xf]
call fcn.140004f10
lea rdx, [rbp - 0x31]
cmp qword [rbp - 0x19], 0xf
cmova rdx, qword [rbp - 0x31]
mov ecx, dword [rdi + 0x30]
cmp ecx, 0xffffffff
je 0x140096194
mov r8d, dword [rbp - 0x21]
call fcn.1400e5838
movsxd r14, eax
lea rcx, [rbp - 0x31]
call fcn.1400050a0
nop
lea rcx, [rbp - 0x11]
call fcn.140004f10
cmp r14, 0xffffffffffffffff
je 0x1400961b1
add qword [rdi + 0x38], r14
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400d0320
mov rbx, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400961e0
Capabilities:
Move file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x90
mov rax, qword [0x140166100]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r15, rdx
mov rdi, rcx
lea rbx, [rcx + 8]
mov qword [rbp - 0x39], rbx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
mov r14, 0xffffffffffffffff
cmp byte [rdi + 0x90], 0
je 0x140096242
mov rcx, rdi
call fcn.140096980
mov byte [rdi + 0x90], 0
jmp 0x140096322
cmp dword [rdi + 0x48], 0
jle 0x140096322
mov rax, qword [rdi + 0x38]
cmp rax, qword [rdi + 0x40]
jbe 0x140096322
cmp rax, r14
je 0x140096322
mov ecx, dword [rdi + 0x30]
cmp ecx, r14d
je 0x140096274
call fcn.1400e4d48
mov dword [rdi + 0x30], r14d
mov r8d, dword [rdi + 0x48]
dec r8d
lea rdx, [rbp + 0xf]
mov rcx, rdi
call fcn.1400976d0
nop
lea rcx, [rbp + 0xf]
cmp qword [rbp + 0x27], 7
cmova rcx, qword [rbp + 0xf]
call fcn.1400e6ecc
mov esi, dword [rdi + 0x48]
sub esi, 2
js 0x14009630a
nop dword [rax]
nop word [rax + rax]
mov r8d, esi
lea rdx, [rbp - 0x11]
mov rcx, rdi
call fcn.1400976d0
nop
lea r8d, [rsi + 1]
lea rdx, [rbp - 0x31]
mov rcx, rdi
call fcn.1400976d0
lea rdx, [rbp - 0x31]
cmp qword [rbp - 0x19], 7
cmova rdx, qword [rbp - 0x31]
lea rcx, [rbp - 0x11]
cmp qword [rbp + 7], 7
cmova rcx, qword [rbp - 0x11]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
lea rcx, [rbp - 0x31]
call fcn.140004f10
nop
lea rcx, [rbp - 0x11]
call fcn.140004f10
sub esi, 1
jns 0x1400962b0
mov rcx, rdi
call fcn.140096980
mov byte [rdi + 0x90], 0
lea rcx, [rbp + 0xf]
call fcn.140004f10
mov rdx, r15
lea rcx, [rbp - 0x11]
call fcn.140096a90
nop
mov rdx, rax
lea rcx, [rbp + 0xf]
call fcn.1400978b0
nop
mov rdx, rax
lea rcx, [rbp - 0x31]
call fcn.1400919e0
nop
lea rcx, [rbp + 0xf]
call fcn.140004f10
lea rdx, [rbp - 0x31]
cmp qword [rbp - 0x19], 0xf
cmova rdx, qword [rbp - 0x31]
mov ecx, dword [rdi + 0x30]
cmp ecx, 0xffffffff
je 0x140096374
mov r8d, dword [rbp - 0x21]
call fcn.1400e5838
movsxd r14, eax
lea rcx, [rbp - 0x31]
call fcn.1400050a0
nop
lea rcx, [rbp - 0x11]
call fcn.140004f10
cmp r14, 0xffffffffffffffff
je 0x140096391
add qword [rdi + 0x38], r14
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400d0320
mov rbx, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400b0240
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov r12, r8
mov rsi, rdx
mov rbp, rcx
movzx eax, byte [r8]
mov r13d, eax
movabs rcx, 0xcbf29ce484222325
xor r13, rcx
movabs rcx, 0x100000001b3
imul r13, rcx
mov rcx, qword [rbp + 0x30]
and rcx, r13
add rcx, rcx
mov rdx, qword [rbp + 0x18]
mov rbx, qword [rdx + rcx*8 + 8]
lea r8, [rbp + 8]
mov r15, qword [r8]
cmp rbx, r15
jne 0x1400b02a6
mov rbx, r15
mov r14, r15
jmp 0x1400b02e6
mov rcx, qword [rdx + rcx*8]
cmp al, byte [rbx + 0x10]
je 0x1400b02be
nop
cmp rbx, rcx
je 0x1400b02e0
mov rbx, qword [rbx + 8]
cmp al, byte [rbx + 0x10]
jne 0x1400b02b0
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
mov rbx, qword [rsp + 0x88]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r15, rbx
mov r14, rbx
movabs rax, 0xaaaaaaaaaaaaaaa
cmp qword [rbp + 0x10], rax
je 0x1400b0440
mov qword [rsp + 0x20], r8
mov qword [rsp + 0x28], 0
mov ecx, 0x18
call fcn.1400d0340
mov rdi, rax
mov qword [rsp + 0x28], rax
mov eax, dword [r12]
mov dword [rdi + 0x10], eax
mov rcx, qword [rbp + 0x10]
add rcx, 1
xorps xmm0, xmm0
js 0x1400b0335
cvtsi2ss xmm0, rcx
jmp 0x1400b034a
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rcx, qword [rbp + 0x38]
xorps xmm1, xmm1
test rcx, rcx
js 0x1400b035d
cvtsi2ss xmm1, rcx
jmp 0x1400b0372
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [rbp]
jbe 0x1400b03d9
mov rcx, rbp
call fcn.140021dc0
mov rdx, qword [rbp + 0x30]
and rdx, r13
add rdx, rdx
mov rcx, qword [rbp + 0x18]
mov rax, qword [rcx + rdx*8 + 8]
mov rbx, qword [rbp + 8]
cmp rax, rbx
jne 0x1400b03ab
mov qword [rsp + 0x28], 0
jmp 0x1400b03cc
mov rdx, qword [rcx + rdx*8]
movzx ecx, byte [rdi + 0x10]
cmp cl, byte [rax + 0x10]
je 0x1400b03c9
mov rbx, rax
cmp rax, rdx
je 0x1400b040d
mov rax, qword [rax + 8]
cmp cl, byte [rax + 0x10]
jne 0x1400b03b8
mov rbx, qword [rax]
mov qword [rsp + 0x20], rbx
mov r14, rbx
mov r15, qword [rsp + 0x20]
mov rdx, qword [rbx + 8]
inc qword [rbp + 0x10]
mov qword [rdi], r15
mov qword [rdi + 8], rdx
mov qword [rdx], rdi
mov qword [rbx + 8], rdi
mov rcx, qword [rbp + 0x18]
mov rax, qword [rbp + 0x30]
and rax, r13
add rax, rax
mov r8, qword [rcx + rax*8]
cmp r8, qword [rbp + 8]
jne 0x1400b041d
mov qword [rcx + rax*8], rdi
jmp 0x1400b042f
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0
jmp 0x1400b03d1
cmp r8, r14
jne 0x1400b0428
mov qword [rcx + rax*8], rdi
jmp 0x1400b0434
cmp qword [rcx + rax*8 + 8], rdx
jne 0x1400b0434
mov qword [rcx + rax*8 + 8], rdi
mov qword [rsi], rdi
mov byte [rsi + 8], 1
jmp 0x1400b02c5
lea rcx, str.unordered_map_set_too_long
call fcn.1400cdc08
int3
Function at 0x1400b8650
Capabilities:
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x70
mov rax, qword [0x140166100]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov rsi, rcx
mov qword [rsp + 0x60], r8
mov rcx, r8
mov r9, r8
mov r10, r8
shr rcx, 0x38
mov r11, r8
shr r9, 0x30
mov rdi, r8
shr r10, 0x28
mov rbp, r8
shr r11, 0x20
mov rax, r8
shr rdi, 0x18
shr rbp, 0x10
mov rbx, rdx
shr rax, 8
test r8, r8
je 0x1400b87ca
test rsi, rsi
je 0x1400b87ca
movzx eax, al
mov qword [rsp + 0xb8], r15
movabs r15, 0xcbf29ce484222325
movzx edx, r8b
xor rdx, r15
movabs r15, 0x100000001b3
imul rdx, r15
xor rdx, rax
movzx eax, bpl
imul rdx, r15
xor rdx, rax
movzx eax, dil
imul rdx, r15
xor rdx, rax
movzx eax, r11b
imul rdx, r15
xor rdx, rax
movzx eax, r10b
imul rdx, r15
xor rdx, rax
movzx eax, r9b
imul rdx, r15
xor rdx, rax
imul rdx, r15
xor rdx, rcx
mov rcx, qword [rsi + 0x38]
imul rdx, r15
mov r15, qword [rsp + 0xb8]
and rcx, rdx
mov rdx, qword [rsi + 0x10]
shl rcx, 4
add rcx, qword [rsi + 0x20]
mov rax, qword [rcx + 8]
cmp rax, rdx
je 0x1400b8765
mov rcx, qword [rcx]
cmp r8, qword [rax + 0x10]
je 0x1400b8767
cmp rax, rcx
je 0x1400b8765
mov rax, qword [rax + 8]
cmp r8, qword [rax + 0x10]
jne 0x1400b8754
jmp 0x1400b8767
xor eax, eax
test rax, rax
cmove rax, rdx
cmp rax, rdx
je 0x1400b8779
mov rdi, qword [rax + 0x18]
jmp 0x1400b87a6
mov rdx, r8
mov rcx, rsi
call fcn.140003680
mov rdi, rax
test rax, rax
je 0x1400b87ca
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x20]
lea rcx, [rsi + 8]
call fcn.140005780
mov rdx, qword [rax]
mov qword [rdx + 0x18], rdi
mov r8d, 0x40
mov rdx, rdi
mov rcx, rsi
call fcn.140003730
test rax, rax
jne 0x1400b87f7
lea rdx, [rsp + 0x60]
lea rcx, [rsi + 8]
call fcn.1400061b0
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
mov rax, rbx
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.1400d0320
add rsp, 0x70
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
movups xmm0, xmmword [rax]
mov rcx, rax
movups xmmword [rsp + 0x30], xmm0
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [rax + 0x30]
movups xmmword [rsp + 0x20], xmm0
call fcn.1400d64b0
movups xmm0, xmmword [rsp + 0x30]
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [rbx], xmm0
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbx + 0x10], xmm1
movups xmm1, xmmword [rsp + 0x20]
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm1
jmp 0x1400b87dc
Function at 0x1400c39c0
Capabilities:
Hash data using fnv

Disassembly:
push rdi
sub rsp, 0x30
mov rdi, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x1400c3a6c
mov rax, qword [rdi + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x1400c39fa
mov rdx, qword [rdi + 8]
mov rcx, rdi
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x30
pop rdi
jmp 0x1400c3c80
mov rcx, qword [rdi + 8]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x1400c3a3a
mov qword [rsp + 0x48], rbx
nop word [rax + rax]
mov rbx, qword [rcx]
mov edx, 0x18
call fcn.1400d05bc
mov rcx, rbx
test rbx, rbx
jne 0x1400c3a20
mov rbx, qword [rsp + 0x48]
mov rax, qword [rdi + 8]
lea r8, [rsp + 0x20]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 8], rax
mov qword [rdi + 0x10], 0
mov rax, qword [rdi + 8]
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x20], rax
call fcn.140005ee0
add rsp, 0x30
pop rdi
ret
mov rax, rsp
push rbp
push rsi
push r14
sub rsp, 0x50
mov rbp, r8
mov r14, rdx
mov rsi, rcx
cmp rdx, r8
je 0x1400c3d84
mov rdx, qword [rcx + 0x18]
movabs r8, 0x100000001b3
mov qword [rax + 0x10], rbx
mov rbx, r14
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
mov r12, qword [rcx + 8]
movzx ecx, byte [r14 + 0x10]
mov qword [rax - 0x20], r13
mov r13, qword [r14 + 8]
mov qword [rax - 0x28], r15
movabs rax, 0xcbf29ce484222325
mov r15, qword [rsi + 0x30]
xor rcx, rax
movzx eax, byte [r14 + 0x11]
imul rcx, r8
mov qword [rsp + 0x30], rdx
xor rcx, rax
movzx eax, byte [r14 + 0x12]
imul rcx, r8
xor rcx, rax
movzx eax, byte [r14 + 0x13]
imul rcx, r8
xor rcx, rax
imul rcx, r8
and r15, rcx
shl r15, 4
add r15, rdx
mov rax, qword [r15]
mov qword [rsp + 0x20], rax
mov rax, qword [r15 + 8]
mov qword [rsp + 0x28], rax
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x18
call fcn.1400d05bc
dec qword [rsi + 0x10]
cmp rdi, qword [rsp + 0x28]
je 0x1400c3d90
cmp rbx, rbp
jne 0x1400c3d30
cmp qword [rsp + 0x20], r14
jne 0x1400c3d5d
mov qword [r15], rbx
mov r12, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x80]
mov r15, qword [rsp + 0x40]
mov qword [r13], rbx
mov qword [rbx + 8], r13
mov r13, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x78]
mov rax, rbp
add rsp, 0x50
pop r14
pop rsi
pop rbp
ret
cmp qword [rsp + 0x20], r14
jne 0x1400c3d9f
mov qword [r15], r12
mov rax, r12
jmp 0x1400c3da2
mov rax, r13
mov qword [r15 + 8], rax
cmp rbx, rbp
je 0x1400c3d5d
nop dword [rax + rax]
movzx r15d, byte [rbx + 0x10]
movabs rdx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r15, rax
movzx eax, byte [rbx + 0x11]
imul r15, rdx
xor r15, rax
movzx eax, byte [rbx + 0x12]
imul r15, rdx
xor r15, rax
movzx eax, byte [rbx + 0x13]
imul r15, rdx
xor r15, rax
imul r15, rdx
and r15, qword [rsi + 0x30]
shl r15, 4
add r15, qword [rsp + 0x30]
mov r14, qword [r15 + 8]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x18
call fcn.1400d05bc
dec qword [rsi + 0x10]
cmp rdi, r14
je 0x1400c3e28
cmp rbx, rbp
jne 0x1400c3e02
jmp 0x1400c3d5a
mov qword [r15], r12
mov qword [r15 + 8], r12
cmp rbx, rbp
jne 0x1400c3db0
jmp 0x1400c3d5d
Function at 0x1400c3ad0
Capabilities:
Hash data using fnv

Disassembly:
push rbx
push rsi
sub rsp, 0x28
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov ebx, 1
mov eax, ebx
shl rax, cl
cmp rdx, rax
ja 0x1400c3c6b
lea rax, [rdx - 1]
mov qword [rsp + 0x58], rdi
mov rdi, qword [rsi + 8]
or rax, rbx
bsr rcx, rax
mov r8, rdi
mov qword [rsp + 0x20], r14
inc ecx
shl rbx, cl
lea rcx, [rsi + 0x18]
lea rdx, [rbx + rbx]
call fcn.140005190
mov qword [rsi + 0x38], rbx
lea rax, [rbx - 1]
mov qword [rsi + 0x30], rax
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
cmp rcx, rdi
je 0x1400c3c34
mov qword [rsp + 0x50], rbp
mov rax, rcx
movabs rbp, 0xcbf29ce484222325
movabs rbx, 0x100000001b3
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rbp
imul r11, rbx
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rbx
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rbx
xor r11, rdx
imul r11, rbx
and r11, qword [rsi + 0x30]
shl r11, 4
add r11, qword [rsi + 0x18]
mov r9, qword [r11]
cmp r9, rdi
jne 0x1400c3bae
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x1400c3c23
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x1400c3beb
mov r10, qword [rdx]
cmp r10, rax
je 0x1400c3be5
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x1400c3c23
cmp r9, rdx
je 0x1400c3bff
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x1400c3c45
cmp r9, rdx
jne 0x1400c3bf0
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rdi
jne 0x1400c3b61
mov rbp, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
mov r14, qword [rsp + 0x20]
add rsp, 0x28
pop rsi
pop rbx
ret
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x1400c3c23
lea rcx, str.invalid_hash_bucket_count
call fcn.1400cdc08
int3
Function at 0x1400c3c80
Capabilities:
Hash data using fnv

Disassembly:
push rdi
sub rsp, 0x30
mov rdi, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x1400c3a6c
mov rax, qword [rdi + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x1400c39fa
mov rdx, qword [rdi + 8]
mov rcx, rdi
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x30
pop rdi
jmp 0x1400c3c80
mov rcx, qword [rdi + 8]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x1400c3a3a
mov qword [rsp + 0x48], rbx
nop word [rax + rax]
mov rbx, qword [rcx]
mov edx, 0x18
call fcn.1400d05bc
mov rcx, rbx
test rbx, rbx
jne 0x1400c3a20
mov rbx, qword [rsp + 0x48]
mov rax, qword [rdi + 8]
lea r8, [rsp + 0x20]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 8], rax
mov qword [rdi + 0x10], 0
mov rax, qword [rdi + 8]
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x20], rax
call fcn.140005ee0
add rsp, 0x30
pop rdi
ret
mov rax, rsp
push rbp
push rsi
push r14
sub rsp, 0x50
mov rbp, r8
mov r14, rdx
mov rsi, rcx
cmp rdx, r8
je 0x1400c3d84
mov rdx, qword [rcx + 0x18]
movabs r8, 0x100000001b3
mov qword [rax + 0x10], rbx
mov rbx, r14
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
mov r12, qword [rcx + 8]
movzx ecx, byte [r14 + 0x10]
mov qword [rax - 0x20], r13
mov r13, qword [r14 + 8]
mov qword [rax - 0x28], r15
movabs rax, 0xcbf29ce484222325
mov r15, qword [rsi + 0x30]
xor rcx, rax
movzx eax, byte [r14 + 0x11]
imul rcx, r8
mov qword [rsp + 0x30], rdx
xor rcx, rax
movzx eax, byte [r14 + 0x12]
imul rcx, r8
xor rcx, rax
movzx eax, byte [r14 + 0x13]
imul rcx, r8
xor rcx, rax
imul rcx, r8
and r15, rcx
shl r15, 4
add r15, rdx
mov rax, qword [r15]
mov qword [rsp + 0x20], rax
mov rax, qword [r15 + 8]
mov qword [rsp + 0x28], rax
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x18
call fcn.1400d05bc
dec qword [rsi + 0x10]
cmp rdi, qword [rsp + 0x28]
je 0x1400c3d90
cmp rbx, rbp
jne 0x1400c3d30
cmp qword [rsp + 0x20], r14
jne 0x1400c3d5d
mov qword [r15], rbx
mov r12, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x80]
mov r15, qword [rsp + 0x40]
mov qword [r13], rbx
mov qword [rbx + 8], r13
mov r13, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x78]
mov rax, rbp
add rsp, 0x50
pop r14
pop rsi
pop rbp
ret
cmp qword [rsp + 0x20], r14
jne 0x1400c3d9f
mov qword [r15], r12
mov rax, r12
jmp 0x1400c3da2
mov rax, r13
mov qword [r15 + 8], rax
cmp rbx, rbp
je 0x1400c3d5d
nop dword [rax + rax]
movzx r15d, byte [rbx + 0x10]
movabs rdx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r15, rax
movzx eax, byte [rbx + 0x11]
imul r15, rdx
xor r15, rax
movzx eax, byte [rbx + 0x12]
imul r15, rdx
xor r15, rax
movzx eax, byte [rbx + 0x13]
imul r15, rdx
xor r15, rax
imul r15, rdx
and r15, qword [rsi + 0x30]
shl r15, 4
add r15, qword [rsp + 0x30]
mov r14, qword [r15 + 8]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x18
call fcn.1400d05bc
dec qword [rsi + 0x10]
cmp rdi, r14
je 0x1400c3e28
cmp rbx, rbp
jne 0x1400c3e02
jmp 0x1400c3d5a
mov qword [r15], r12
mov qword [r15 + 8], r12
cmp rbx, rbp
jne 0x1400c3db0
jmp 0x1400c3d5d
Function at 0x1400c65c0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
movabs rax, 0xcbf29ce484222325
mov r9d, 0
sub r8, rdx
je 0x1400c65f4
movabs r10, 0x100000001b3
nop
movzx ecx, byte [rdx + r9]
inc r9
xor rax, rcx
imul rax, r10
cmp r9, r8
jb 0x1400c65e0
ret