joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14044fc64
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
movsxd r15, ecx
lea r9, [0x1405af680]
mov rax, r15
mov rbp, r15
and eax, 0x3f
sar rbp, 6
mov ecx, 4
xor esi, esi
mov r14, rdx
lea rdi, [rax + rax*8]
mov rax, qword [r9 + rbp*8]
lea r13d, [rcx + 6]
mov r10, qword [rax + rdi*8 + 0x28]
test r8, r8
je 0x14044fcbb
cmp word [rdx], r13w
jne 0x14044fcbb
or byte [rax + rdi*8 + 0x38], cl
jmp 0x14044fcc0
and byte [rax + rdi*8 + 0x38], 0xfb
lea r8, [rdx + r8*2]
mov rbx, r14
cmp r14, r8
jae 0x14044fde5
mov r11d, 0xd
lea r12d, [r11 - 0xb]
movzx ecx, word [rdx]
cmp cx, 0x1a
je 0x14044fe06
lea r9, [rdx + 2]
cmp cx, r11w
je 0x14044fcf9
mov rdx, r9
mov word [rbx], cx
jmp 0x14044fd20
cmp r9, r8
jae 0x14044fd30
cmp word [r9], r13w
mov rax, r12
mov ecx, 4
cmove rax, rcx
add rdx, rax
mov eax, r13d
cmp word [r9], r13w
cmovne ax, r11w
mov word [rbx], ax
mov rax, r12
add rbx, rax
cmp rdx, r8
jb 0x14044fcda
jmp 0x14044fde5
lea r9, [rsp + 0x80]
mov qword [rsp + 0x20], rsi
mov r8d, r12d
lea rdx, [rsp + 0x70]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x14044fdda
cmp dword [rsp + 0x80], esi
je 0x14044fdda
lea r8, [0x1405af680]
mov rax, qword [r8 + rbp*8]
test byte [rax + rdi*8 + 0x38], 0x48
je 0x14044fdb2
movzx eax, word [rsp + 0x70]
cmp ax, r13w
jne 0x14044fd82
mov word [rbx], r13w
jmp 0x14044fde2
mov ecx, 0xd
mov word [rsp + 0x78], ax
mov word [rbx], cx
mov rax, qword [r8 + rbp*8]
lea rcx, [rax + rdi*8]
mov al, byte [rsp + rsi + 0x78]
mov byte [rcx + rsi + 0x3a], al
inc rsi
cmp rsi, r12
jl 0x14044fd8f
mov rax, qword [r8 + rbp*8]
mov byte [rax + rdi*8 + 0x3c], r13b
jmp 0x14044fde2
cmp word [rsp + 0x70], r13w
jne 0x14044fdbf
cmp rbx, r14
je 0x14044fd7c
mov rdx, 0xfffffffffffffffe
mov ecx, r15d
lea r8d, [rdx + 3]
call fcn.14044ed1c
cmp word [rsp + 0x70], r13w
je 0x14044fde5
mov ecx, 0xd
mov word [rbx], cx
add rbx, r12
sub rbx, r14
sar rbx, 1
lea eax, [rbx + rbx]
mov rbx, qword [rsp + 0x88]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea r8, [0x1405af680]
mov rdx, qword [r8 + rbp*8]
mov al, byte [rdx + rdi*8 + 0x38]
test al, 0x40
jne 0x14044fddf
or al, r12b
mov byte [rdx + rdi*8 + 0x38], al
jmp 0x14044fde5
Function at 0x14045085c
Capabilities:
Clear file content

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x20
mov rbx, rdx
mov rsi, r8
xor edx, edx
mov r14d, ecx
lea r8d, [rdx + 1]
call fcn.14044ed1c
xor edx, edx
mov ecx, r14d
mov r12, rax
lea r8d, [rdx + 2]
call fcn.14044ed1c
mov rbp, rbx
sub rbp, rax
cmp r12, 0xffffffffffffffff
je 0x1404509ac
cmp rax, 0xffffffffffffffff
je 0x1404509ac
xor edi, edi
test rbp, rbp
jle 0x140450957
lea edx, [rdi + 1]
mov ecx, 0x1000
call fcn.14043ffc0
mov rbx, rax
test rax, rax
jne 0x1404508e4
lea edi, [rax + 0xc]
mov byte [rsi + 0x30], 1
mov dword [rsi + 0x2c], edi
jmp 0x14045094d
mov edx, 0x8000
mov ecx, r14d
call fcn.140438de4
mov r15d, eax
mov eax, 0x1000
mov r8d, ebp
cmp rbp, rax
mov r9, rsi
mov rdx, rbx
mov ecx, r14d
cmovge r8d, eax
call fcn.14044aaa4
cmp eax, 0xffffffff
je 0x14045092d
cdqe
sub rbp, rax
test rbp, rbp
jg 0x1404508f4
mov edx, r15d
mov ecx, r14d
call fcn.140438de4
jmp 0x14045094d
cmp byte [rsi + 0x38], dil
je 0x140450944
cmp dword [rsi + 0x34], 5
jne 0x140450944
mov byte [rsi + 0x30], 1
mov dword [rsi + 0x2c], 0xd
cmp byte [rsi + 0x30], dil
je 0x14045094d
mov edi, dword [rsi + 0x2c]
mov rcx, rbx
call fcn.14043ea30
jmp 0x1404509c0
jns 0x1404509c0
xor r8d, r8d
mov rdx, rbx
mov ecx, r14d
call fcn.14044ed1c
cmp rax, 0xffffffffffffffff
jne 0x140450978
cmp byte [rsi + 0x30], dil
je 0x1404509c0
mov edi, dword [rsi + 0x2c]
jmp 0x1404509c0
mov ecx, r14d
call fcn.140446bd4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
test eax, eax
jne 0x1404509c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [rsi + 0x38], 1
mov edi, 0xd
mov dword [rsi + 0x34], eax
mov byte [rsi + 0x30], 1
mov dword [rsi + 0x2c], 0xd
jmp 0x1404509c0
xor edi, edi
cmp byte [rsi + 0x30], dil
je 0x1404509b9
mov eax, dword [rsi + 0x2c]
jmp 0x1404509be
mov eax, 0x16
mov edi, eax
xor r8d, r8d
mov rdx, r12
mov ecx, r14d
call fcn.14044ed1c
mov rbx, qword [rsp + 0x40]
mov eax, edi
mov rdi, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop r12
ret
Function at 0x140006c20
Capabilities:
Hash data using djb2

Disassembly:
movsx eax, byte [rcx]
test eax, eax
je 0x140006df6
add eax, 0x2b5a5
movsx edx, byte [rcx + 1]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 2]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 3]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 4]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 5]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 6]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 7]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 8]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 9]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xa]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xb]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xc]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xd]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xe]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xf]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0x10]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0x11]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0x12]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0x13]
test edx, edx
je 0x140006df5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx ecx, byte [rcx + 0x14]
test ecx, ecx
je 0x140006df5
add ecx, eax
shl eax, 5
add ecx, eax
mov eax, ecx
ret
mov eax, 0x1505
ret
Function at 0x140008010
Capabilities:
Hash data using djb2

Disassembly:
movsx eax, byte [rcx]
test eax, eax
je 0x140008126
add eax, 0x2b5a5
movsx edx, byte [rcx + 1]
test edx, edx
je 0x140008125
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 2]
test edx, edx
je 0x140008125
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 3]
test edx, edx
je 0x140008125
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 4]
test edx, edx
je 0x140008125
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 5]
test edx, edx
je 0x140008125
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 6]
test edx, edx
je 0x140008125
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 7]
test edx, edx
je 0x140008125
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 8]
test edx, edx
je 0x140008125
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 9]
test edx, edx
je 0x140008125
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xa]
test edx, edx
je 0x140008125
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xb]
test edx, edx
je 0x140008125
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx ecx, byte [rcx + 0xc]
test ecx, ecx
je 0x140008125
add ecx, eax
shl eax, 5
add ecx, eax
mov eax, ecx
ret
mov eax, 0x1505
ret
Function at 0x14000a570
Capabilities:
Hash data using djb2

Disassembly:
movsx eax, byte [rcx]
test eax, eax
je 0x14000a716
add eax, 0x2b5a5
movsx edx, byte [rcx + 1]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 2]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 3]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 4]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 5]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 6]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 7]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 8]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 9]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xa]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xb]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xc]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xd]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xe]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xf]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0x10]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0x11]
test edx, edx
je 0x14000a715
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx ecx, byte [rcx + 0x12]
test ecx, ecx
je 0x14000a715
add ecx, eax
shl eax, 5
add ecx, eax
mov eax, ecx
ret
mov eax, 0x1505
ret
Function at 0x140010870
Capabilities:
Hash data using djb2

Disassembly:
movsx eax, byte [rcx]
test eax, eax
je 0x14001099e
add eax, 0x2b5a5
movsx edx, byte [rcx + 1]
test edx, edx
je 0x14001099d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 2]
test edx, edx
je 0x14001099d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 3]
test edx, edx
je 0x14001099d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 4]
test edx, edx
je 0x14001099d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 5]
test edx, edx
je 0x14001099d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 6]
test edx, edx
je 0x14001099d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 7]
test edx, edx
je 0x14001099d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 8]
test edx, edx
je 0x14001099d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 9]
test edx, edx
je 0x14001099d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xa]
test edx, edx
je 0x14001099d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xb]
test edx, edx
je 0x14001099d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xc]
test edx, edx
je 0x14001099d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx ecx, byte [rcx + 0xd]
test ecx, ecx
je 0x14001099d
add ecx, eax
shl eax, 5
add ecx, eax
mov eax, ecx
ret
mov eax, 0x1505
ret
Function at 0x140011280
Capabilities:
Hash data using djb2

Disassembly:
movsx eax, byte [rcx]
test eax, eax
je 0x1400113de
add eax, 0x2b5a5
movsx edx, byte [rcx + 1]
test edx, edx
je 0x1400113dd
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 2]
test edx, edx
je 0x1400113dd
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 3]
test edx, edx
je 0x1400113dd
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 4]
test edx, edx
je 0x1400113dd
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 5]
test edx, edx
je 0x1400113dd
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 6]
test edx, edx
je 0x1400113dd
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 7]
test edx, edx
je 0x1400113dd
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 8]
test edx, edx
je 0x1400113dd
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 9]
test edx, edx
je 0x1400113dd
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xa]
test edx, edx
je 0x1400113dd
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xb]
test edx, edx
je 0x1400113dd
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xc]
test edx, edx
je 0x1400113dd
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xd]
test edx, edx
je 0x1400113dd
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xe]
test edx, edx
je 0x1400113dd
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx ecx, byte [rcx + 0xf]
test ecx, ecx
je 0x1400113dd
add ecx, eax
shl eax, 5
add ecx, eax
mov eax, ecx
ret
mov eax, 0x1505
ret
Function at 0x140014380
Capabilities:
Hash data using djb2

Disassembly:
movsx eax, byte [rcx]
test eax, eax
je 0x1400144f6
add eax, 0x2b5a5
movsx edx, byte [rcx + 1]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 2]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 3]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 4]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 5]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 6]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 7]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 8]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 9]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xa]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xb]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xc]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xd]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xe]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xf]
test edx, edx
je 0x1400144f5
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx ecx, byte [rcx + 0x10]
test ecx, ecx
je 0x1400144f5
add ecx, eax
shl eax, 5
add ecx, eax
mov eax, ecx
ret
mov eax, 0x1505
ret

Function at 0x140015b60
Capabilities:
Hash data using djb2

Disassembly:
movsx eax, byte [rcx]
test eax, eax
je 0x140015c5e
add eax, 0x2b5a5
movsx edx, byte [rcx + 1]
test edx, edx
je 0x140015c5d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 2]
test edx, edx
je 0x140015c5d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 3]
test edx, edx
je 0x140015c5d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 4]
test edx, edx
je 0x140015c5d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 5]
test edx, edx
je 0x140015c5d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 6]
test edx, edx
je 0x140015c5d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 7]
test edx, edx
je 0x140015c5d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 8]
test edx, edx
je 0x140015c5d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 9]
test edx, edx
je 0x140015c5d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xa]
test edx, edx
je 0x140015c5d
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx ecx, byte [rcx + 0xb]
test ecx, ecx
je 0x140015c5d
add ecx, eax
shl eax, 5
add ecx, eax
mov eax, ecx
ret
mov eax, 0x1505
ret
Function at 0x140015fb0
Capabilities:
Hash data using djb2

Disassembly:
movsx eax, byte [rcx]
test eax, eax
je 0x140016096
add eax, 0x2b5a5
movsx edx, byte [rcx + 1]
test edx, edx
je 0x140016095
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 2]
test edx, edx
je 0x140016095
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 3]
test edx, edx
je 0x140016095
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 4]
test edx, edx
je 0x140016095
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 5]
test edx, edx
je 0x140016095
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 6]
test edx, edx
je 0x140016095
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 7]
test edx, edx
je 0x140016095
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 8]
test edx, edx
je 0x140016095
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 9]
test edx, edx
je 0x140016095
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx ecx, byte [rcx + 0xa]
test ecx, ecx
je 0x140016095
add ecx, eax
shl eax, 5
add ecx, eax
mov eax, ecx
ret
mov eax, 0x1505
ret

Function at 0x140016a30
Capabilities:
Hash data using djb2

Disassembly:
movsx eax, byte [rcx]
test eax, eax
je 0x140016b76
add eax, 0x2b5a5
movsx edx, byte [rcx + 1]
test edx, edx
je 0x140016b75
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 2]
test edx, edx
je 0x140016b75
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 3]
test edx, edx
je 0x140016b75
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 4]
test edx, edx
je 0x140016b75
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 5]
test edx, edx
je 0x140016b75
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 6]
test edx, edx
je 0x140016b75
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 7]
test edx, edx
je 0x140016b75
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 8]
test edx, edx
je 0x140016b75
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 9]
test edx, edx
je 0x140016b75
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xa]
test edx, edx
je 0x140016b75
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xb]
test edx, edx
je 0x140016b75
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xc]
test edx, edx
je 0x140016b75
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx edx, byte [rcx + 0xd]
test edx, edx
je 0x140016b75
mov r8d, eax
shl r8d, 5
add eax, edx
add eax, r8d
movsx ecx, byte [rcx + 0xe]
test ecx, ecx
je 0x140016b75
add ecx, eax
shl eax, 5
add ecx, eax
mov eax, ecx
ret
mov eax, 0x1505
ret
Function at 0x140016fe0
Capabilities:
Hash data using fnv

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x38
lea rbp, [rsp + 0x30]
mov qword [rbp], 0xfffffffffffffffe
mov rbx, r8
mov rsi, rdx
mov rdi, rcx
movzx eax, byte [r8]
movabs rcx, 0xcbf29ce484222325
xor rcx, rax
movabs rax, 0x100000001b3
imul rcx, rax
movzx edx, byte [r8 + 1]
xor rdx, rcx
imul rdx, rax
movzx ecx, byte [r8 + 2]
xor rcx, rdx
imul rcx, rax
movzx r14d, byte [r8 + 3]
xor r14, rcx
imul r14, rax
mov rcx, qword [rdi + 0x30]
and rcx, r14
mov rdx, qword [rdi + 0x18]
mov rax, rcx
shl rax, 4
mov r13, qword [rdx + rax + 8]
cmp r13, qword [rdi + 8]
je 0x140017096
mov eax, dword [rbx]
cmp eax, dword [r13 + 0x10]
je 0x14001708f
add rcx, rcx
mov r15, qword [rdx + rcx*8]
nop word cs:[rax + rax]
cmp r13, r15
je 0x140017099
mov r13, qword [r13 + 8]
cmp eax, dword [r13 + 0x10]
jne 0x140017080
xor eax, eax
jmp 0x140017232
mov r15, r13
movabs rax, 0xaaaaaaaaaaaaaaa
cmp qword [rdi + 0x10], rax
je 0x14001724c
mov ecx, 0x18
call fcn.140170c88
mov r13, rax
mov r12d, dword [rbx]
mov dword [rax + 0x10], r12d
mov dword [rax + 0x14], 0
mov rax, qword [rdi + 0x10]
inc rax
js 0x1400170d8
cvtsi2ss xmm0, rax
jmp 0x1400170ed
mov rcx, rax
shr rcx, 1
and eax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
movss xmm1, dword [rdi]
mov rbx, qword [rdi + 0x38]
test rbx, rbx
js 0x140017101
cvtsi2ss xmm2, rbx
jmp 0x140017118
mov rax, rbx
shr rax, 1
mov ecx, ebx
and ecx, 1
or rcx, rax
cvtsi2ss xmm2, rcx
addss xmm2, xmm2
movaps xmm3, xmm0
divss xmm3, xmm2
ucomiss xmm3, xmm1
jbe 0x1400171dd
divss xmm0, xmm1
call fcn.140357148
cvttss2si rax, xmm0
mov rcx, rax
subss xmm0, dword [0x140379b70]
cvttss2si rdx, xmm0
sar rcx, 0x3f
and rdx, rcx
or rdx, rax
cmp rdx, 9
mov eax, 8
cmovae rax, rdx
cmp rbx, rax
mov qword [rbp - 8], r13
jae 0x140017183
lea rcx, [rbx*8]
cmp rcx, rax
cmovb rcx, rax
cmp rbx, 0x200
cmovae rcx, rax
mov rbx, rcx
mov rcx, rdi
mov rdx, rbx
call fcn.140017350
mov rax, qword [rdi + 0x30]
and rax, r14
mov rcx, qword [rdi + 0x18]
mov rdx, rax
shl rdx, 4
mov r15, qword [rcx + rdx + 8]
cmp r15, qword [rdi + 8]
je 0x1400171d4
cmp r12d, dword [r15 + 0x10]
mov r13, qword [rbp - 8]
je 0x1400171cf
add rax, rax
mov rax, qword [rcx + rax*8]
nop dword [rax]
cmp r15, rax
je 0x1400171da
mov r15, qword [r15 + 8]
cmp r12d, dword [r15 + 0x10]
jne 0x1400171c0
mov r15, qword [r15]
jmp 0x1400171dd
mov r13, qword [rbp - 8]
jmp 0x1400171dd
mov r15, rax
mov rcx, qword [r15 + 8]
inc qword [rdi + 0x10]
mov qword [r13], r15
mov qword [r13 + 8], rcx
mov qword [rcx], r13
mov qword [r15 + 8], r13
mov rax, qword [rdi + 0x18]
and r14, qword [rdi + 0x30]
shl r14, 4
lea rdx, [rax + r14]
lea r8, [rax + r14]
add r8, 8
mov rax, qword [rax + r14]
cmp rax, qword [rdi + 8]
je 0x140017227
cmp rax, r15
je 0x14001722d
mov al, 1
mov rdx, r8
cmp qword [r8], rcx
jne 0x140017232
jmp 0x14001722d
mov qword [rdx], r13
mov rdx, r8
mov qword [rdx], r13
mov al, 1
mov qword [rsi], r13
mov byte [rsi + 8], al
mov rax, rsi
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rcx, str.unordered_map_set_too_long
call fcn.140171bf4
int3