joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14016dc40
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov rbp, r9
mov r14, r8
mov rsi, rdx
mov rdi, rcx
movabs rax, 0x492492492492492
cmp qword [rcx + 0x10], rax
je 0x14016de74
lea r15, [rcx + 8]
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x28], 0
mov ecx, 0x38
call fcn.140205df8
mov rbx, rax
mov qword [rsp + 0x28], rax
mov edx, dword [r14]
mov dword [rax + 0x10], edx
movups xmm0, xmmword [rbp]
movups xmmword [rax + 0x14], xmm0
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [rax + 0x24], xmm1
mov eax, edx
shr eax, 8
movzx ebp, al
movzx eax, dl
movabs rcx, 0xcbf29ce484222325
xor rax, rcx
movabs r8, 0x100000001b3
imul rax, r8
xor rbp, rax
imul rbp, r8
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor rbp, rcx
imul rbp, r8
shr rdx, 0x18
xor rbp, rdx
imul rbp, r8
mov rcx, qword [rdi + 0x10]
movss xmm3, dword [rdi]
add rcx, 1
xorps xmm1, xmm1
js 0x14016dd11
cvtsi2ss xmm1, rcx
jmp 0x14016dd26
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
mov rdx, qword [rdi + 0x38]
xorps xmm2, xmm2
test rdx, rdx
js 0x14016dd39
cvtsi2ss xmm2, rdx
jmp 0x14016dd51
mov rcx, rdx
shr rcx, 1
mov rax, rdx
and eax, 1
or rcx, rax
cvtsi2ss xmm2, rcx
addss xmm2, xmm2
movaps xmm0, xmm1
divss xmm0, xmm2
comiss xmm0, xmm3
seta al
test al, al
je 0x14016ddce
divss xmm1, xmm3
xorps xmm0, xmm0
roundss xmm0, xmm1, 2
xor ecx, ecx
movss xmm1, dword [0x14028ccb8]
comiss xmm0, xmm1
jb 0x14016dd94
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x14016dd94
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rdx, rcx
jae 0x14016ddc6
cmp rdx, 0x200
jae 0x14016ddc3
lea rdx, [rdx*8]
cmp rdx, rcx
jae 0x14016ddc6
mov rdx, rcx
mov rcx, rdi
call fcn.14016f9f0
mov rcx, qword [rdi + 0x30]
and rcx, rbp
add rcx, rcx
mov r8, qword [rdi + 0x18]
mov rax, qword [r8 + rcx*8 + 8]
mov rdx, qword [r15]
cmp rax, rdx
je 0x14016de06
mov rdx, qword [r8 + rcx*8]
mov ecx, dword [rbx + 0x10]
cmp ecx, dword [rax + 0x10]
je 0x14016de03
cmp rax, rdx
je 0x14016de39
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x14016ddf5
mov rdx, qword [rax]
mov r8, qword [rdx + 8]
inc qword [rdi + 0x10]
mov qword [rbx], rdx
mov qword [rbx + 8], r8
mov qword [r8], rbx
mov qword [rdx + 8], rbx
mov rcx, qword [rdi + 0x18]
mov rax, qword [rdi + 0x30]
and rax, rbp
add rax, rax
mov r9, qword [rcx + rax*8]
cmp r9, qword [r15]
jne 0x14016de3e
mov qword [rcx + rax*8], rbx
jmp 0x14016de50
mov rdx, rax
jmp 0x14016de06
cmp r9, rdx
jne 0x14016de49
mov qword [rcx + rax*8], rbx
jmp 0x14016de55
cmp qword [rcx + rax*8 + 8], r8
jne 0x14016de55
mov qword [rcx + rax*8 + 8], rbx
mov qword [rsi], rbx
mov rax, rsi
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x30
pop r15
pop r14
pop rdi
ret
lea rcx, str.unordered_map_set_too_long
call fcn.1401e106c
int3
Function at 0x14016e6a0
Capabilities:
Hash data using fnv

Disassembly:
movzx r9d, byte [r8]
mov r10, rcx
movabs rcx, 0x100000001b3
movabs rax, 0xcbf29ce484222325
xor r9, rax
mov r11, rdx
movzx eax, byte [r8 + 1]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 2]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 3]
imul r9, rcx
xor r9, rax
mov rax, qword [r10 + 0x18]
imul r9, rcx
mov rcx, qword [r10 + 0x30]
and rcx, r9
shl rcx, 4
add rax, rcx
mov rcx, qword [r10 + 8]
mov rdx, qword [rax]
cmp rdx, rcx
jne 0x14016e715
mov rdx, rcx
mov qword [r11], rcx
mov qword [r11 + 8], rcx
mov rax, r11
ret
mov r8d, dword [r8]
mov rax, qword [rax + 8]
cmp dword [rdx + 0x10], r8d
je 0x14016e730
cmp rdx, rax
je 0x14016e707
mov rdx, qword [rdx]
cmp dword [rdx + 0x10], r8d
jne 0x14016e722
mov rcx, qword [rdx]
cmp rdx, rax
je 0x14016e751
nop dword [rax + rax]
mov r9, rcx
cmp r8d, dword [rcx + 0x10]
jne 0x14016e751
mov rcx, qword [rcx]
cmp r9, rax
jne 0x14016e740
mov qword [r11], rdx
mov rax, r11
mov qword [r11 + 8], rcx
ret
Function at 0x14016f9f0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x14016fbb2
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x40], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.140049e40
mov rcx, qword [rsi + 8]
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rdi
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x14016fb77
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + 0x11]
movzx r9d, byte [rcx + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rdx, qword [rdx]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x12]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x13]
imul r9, rdi
xor r9, rax
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r10, qword [r11]
cmp r10, rbx
jne 0x14016fae3
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x14016fb66
mov rax, qword [r11 + 8]
mov r9d, dword [rcx + 0x10]
cmp r9d, dword [rax + 0x10]
jne 0x14016fb20
mov r10, qword [rax]
cmp r10, rcx
je 0x14016fb1a
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x14016fb66
mov r8, rax
cmp r10, rax
je 0x14016fb42
nop dword [rax + rax]
mov rax, qword [rax + 8]
mov r8, rax
cmp r9d, dword [rax + 0x10]
je 0x14016fb8c
cmp r10, rax
jne 0x14016fb30
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x14016fa90
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov r10, qword [rax]
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
jmp 0x14016fb66
lea rcx, str.invalid_hash_bucket_count
call fcn.1401e106c
int3
Function at 0x14016fd90
Capabilities:
Hash data using fnv

Disassembly:
mov rdx, qword [rcx + 0x10]
mov r9, rcx
add rdx, 1
mov r8, qword [rcx + 0x38]
xorps xmm0, xmm0
js 0x14016fdab
cvtsi2ss xmm0, rdx
jmp 0x14016fdc0
mov rax, rdx
and edx, 1
shr rax, 1
or rax, rdx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [rcx]
xor ecx, ecx
xorps xmm1, xmm1
roundss xmm1, xmm0, 2
movss xmm0, dword [0x14028ccb8]
comiss xmm1, xmm0
jb 0x14016fdf2
subss xmm1, xmm0
comiss xmm1, xmm0
jae 0x14016fdf2
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm1
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp r8, rcx
jae 0x14016fe24
cmp r8, 0x200
jae 0x14016fe21
lea r8, [r8*8]
cmp r8, rcx
jae 0x14016fe24
mov r8, rcx
mov rdx, r8
mov rcx, r9
jmp fcn.14016f9f0
Function at 0x14016fe40
Capabilities:
Hash data using fnv

Disassembly:
push rbp
push rsi
push r14
sub rsp, 0x40
mov rbp, r8
mov r14, rdx
mov rsi, rcx
cmp rdx, r8
je 0x14016ff3e
mov rdx, qword [rcx + 0x18]
movabs r8, 0x100000001b3
mov qword [rsp + 0x60], rbx
movabs rax, 0xcbf29ce484222325
mov qword [rsp + 0x38], rdi
mov rbx, r14
mov qword [rsp + 0x30], r12
mov r12, qword [rcx + 8]
movzx ecx, byte [r14 + 0x10]
xor rcx, rax
mov qword [rsp + 0x28], r13
movzx eax, byte [r14 + 0x11]
mov r13, qword [r14 + 8]
imul rcx, r8
mov qword [rsp + 0x20], r15
mov r15, qword [rsi + 0x30]
xor rcx, rax
movzx eax, byte [r14 + 0x12]
imul rcx, r8
mov qword [rsp + 0x78], rdx
xor rcx, rax
movzx eax, byte [r14 + 0x13]
imul rcx, r8
xor rcx, rax
imul rcx, r8
and r15, rcx
shl r15, 4
add r15, rdx
mov rax, qword [r15]
mov qword [rsp + 0x68], rax
mov rax, qword [r15 + 8]
mov qword [rsp + 0x70], rax
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x20
call fcn.140205dc4
dec qword [rsi + 0x10]
cmp rdi, qword [rsp + 0x70]
je 0x14016ff4a
cmp rbx, rbp
jne 0x14016fef0
cmp qword [rsp + 0x68], r14
jne 0x14016ff1d
mov qword [r15], rbx
mov r12, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov r15, qword [rsp + 0x20]
mov qword [r13], rbx
mov qword [rbx + 8], r13
mov r13, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x60]
mov rax, rbp
add rsp, 0x40
pop r14
pop rsi
pop rbp
ret
cmp qword [rsp + 0x68], r14
jne 0x14016ff59
mov qword [r15], r12
mov rax, r12
jmp 0x14016ff5c
mov rax, r13
mov qword [r15 + 8], rax
cmp rbx, rbp
je 0x14016ff1d
nop word [rax + rax]
movzx ecx, byte [rbx + 0x10]
movabs rdx, 0x100000001b3
mov r15, qword [rsi + 0x30]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movzx eax, byte [rbx + 0x11]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x12]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x13]
imul rcx, rdx
xor rcx, rax
imul rcx, rdx
and r15, rcx
shl r15, 4
add r15, qword [rsp + 0x78]
mov r14, qword [r15 + 8]
nop dword [rax]
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x20
call fcn.140205dc4
dec qword [rsi + 0x10]
cmp rdi, r14
je 0x14016fff6
cmp rbx, rbp
jne 0x14016ffd0
jmp 0x14016ff1a
mov qword [r15], r12
mov qword [r15 + 8], r12
cmp rbx, rbp
jne 0x14016ff70
jmp 0x14016ff1d
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x14017058c
mov rax, qword [rdi + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x14017051a
mov rdx, qword [rdi + 8]
mov rcx, rdi
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x20
pop rdi
jmp 0x14016fe40
mov rcx, qword [rdi + 8]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x14017055a
mov qword [rsp + 0x38], rbx
nop word [rax + rax]
mov rbx, qword [rcx]
mov edx, 0x20
call fcn.140205dc4
mov rcx, rbx
test rbx, rbx
jne 0x140170540
mov rbx, qword [rsp + 0x38]
mov rax, qword [rdi + 8]
lea r8, [rsp + 0x30]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 8], rax
mov qword [rdi + 0x10], 0
mov rax, qword [rdi + 8]
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x30], rax
call fcn.1400468c0
add rsp, 0x20
pop rdi
ret
Function at 0x1401704e0
Capabilities:
Hash data using fnv

Disassembly:
push rbp
push rsi
push r14
sub rsp, 0x40
mov rbp, r8
mov r14, rdx
mov rsi, rcx
cmp rdx, r8
je 0x14016ff3e
mov rdx, qword [rcx + 0x18]
movabs r8, 0x100000001b3
mov qword [rsp + 0x60], rbx
movabs rax, 0xcbf29ce484222325
mov qword [rsp + 0x38], rdi
mov rbx, r14
mov qword [rsp + 0x30], r12
mov r12, qword [rcx + 8]
movzx ecx, byte [r14 + 0x10]
xor rcx, rax
mov qword [rsp + 0x28], r13
movzx eax, byte [r14 + 0x11]
mov r13, qword [r14 + 8]
imul rcx, r8
mov qword [rsp + 0x20], r15
mov r15, qword [rsi + 0x30]
xor rcx, rax
movzx eax, byte [r14 + 0x12]
imul rcx, r8
mov qword [rsp + 0x78], rdx
xor rcx, rax
movzx eax, byte [r14 + 0x13]
imul rcx, r8
xor rcx, rax
imul rcx, r8
and r15, rcx
shl r15, 4
add r15, rdx
mov rax, qword [r15]
mov qword [rsp + 0x68], rax
mov rax, qword [r15 + 8]
mov qword [rsp + 0x70], rax
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x20
call fcn.140205dc4
dec qword [rsi + 0x10]
cmp rdi, qword [rsp + 0x70]
je 0x14016ff4a
cmp rbx, rbp
jne 0x14016fef0
cmp qword [rsp + 0x68], r14
jne 0x14016ff1d
mov qword [r15], rbx
mov r12, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov r15, qword [rsp + 0x20]
mov qword [r13], rbx
mov qword [rbx + 8], r13
mov r13, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x60]
mov rax, rbp
add rsp, 0x40
pop r14
pop rsi
pop rbp
ret
cmp qword [rsp + 0x68], r14
jne 0x14016ff59
mov qword [r15], r12
mov rax, r12
jmp 0x14016ff5c
mov rax, r13
mov qword [r15 + 8], rax
cmp rbx, rbp
je 0x14016ff1d
nop word [rax + rax]
movzx ecx, byte [rbx + 0x10]
movabs rdx, 0x100000001b3
mov r15, qword [rsi + 0x30]
movabs rax, 0xcbf29ce484222325
xor rcx, rax
movzx eax, byte [rbx + 0x11]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x12]
imul rcx, rdx
xor rcx, rax
movzx eax, byte [rbx + 0x13]
imul rcx, rdx
xor rcx, rax
imul rcx, rdx
and r15, rcx
shl r15, 4
add r15, qword [rsp + 0x78]
mov r14, qword [r15 + 8]
nop dword [rax]
nop dword [rax + rax]
mov rcx, rbx
mov rdi, rbx
mov rbx, qword [rbx]
mov edx, 0x20
call fcn.140205dc4
dec qword [rsi + 0x10]
cmp rdi, r14
je 0x14016fff6
cmp rbx, rbp
jne 0x14016ffd0
jmp 0x14016ff1a
mov qword [r15], r12
mov qword [r15 + 8], r12
cmp rbx, rbp
jne 0x14016ff70
jmp 0x14016ff1d
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x14017058c
mov rax, qword [rdi + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x14017051a
mov rdx, qword [rdi + 8]
mov rcx, rdi
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x20
pop rdi
jmp 0x14016fe40
mov rcx, qword [rdi + 8]
mov rax, qword [rcx + 8]
mov qword [rax], 0
mov rcx, qword [rcx]
test rcx, rcx
je 0x14017055a
mov qword [rsp + 0x38], rbx
nop word [rax + rax]
mov rbx, qword [rcx]
mov edx, 0x20
call fcn.140205dc4
mov rcx, rbx
test rbx, rbx
jne 0x140170540
mov rbx, qword [rsp + 0x38]
mov rax, qword [rdi + 8]
lea r8, [rsp + 0x30]
mov qword [rax], rax
mov rax, qword [rdi + 8]
mov qword [rax + 8], rax
mov qword [rdi + 0x10], 0
mov rax, qword [rdi + 8]
mov rdx, qword [rdi + 0x20]
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x30], rax
call fcn.1400468c0
add rsp, 0x20
pop rdi
ret
Function at 0x1401706f0
Capabilities:
Hash data using fnv

Disassembly:
cmp byte [rcx + 0x48], 0
jne fcn.1401704e0
ret

Function at 0x140170930
Capabilities:
Hash data using fnv

Disassembly:
mov dword [rsp + 0x10], edx
sub rsp, 0x48
cmp byte [rcx + 0x48], 0
mov r10, rcx
mov r9d, edx
je 0x1401709e0
movabs rcx, 0x100000001b3
movzx edx, r9b
movabs rax, 0xcbf29ce484222325
xor rdx, rax
movzx eax, byte [rsp + 0x59]
imul rdx, rcx
xor rdx, rax
movzx eax, byte [rsp + 0x5a]
imul rdx, rcx
xor rdx, rax
movzx eax, byte [rsp + 0x5b]
imul rdx, rcx
xor rdx, rax
imul rdx, rcx
mov rcx, qword [r10 + 0x30]
and rcx, rdx
mov rdx, qword [r10 + 8]
shl rcx, 4
add rcx, qword [r10 + 0x18]
mov rax, qword [rcx + 8]
cmp rax, rdx
je 0x1401709d9
mov rcx, qword [rcx]
cmp r9d, dword [rax + 0x10]
je 0x1401709bf
cmp rax, rcx
je 0x1401709d9
mov rax, qword [rax + 8]
cmp r9d, dword [rax + 0x10]
jne 0x1401709b0
test rax, rax
cmove rax, rdx
cmp rax, rdx
je 0x1401709d9
mov rcx, qword [rax + 0x18]
mov al, 1
mov qword [r8], rcx
add rsp, 0x48
ret
xor al, al
add rsp, 0x48
ret
lea rdx, str.Generated_transactions_index_disabled.
lea rcx, [rsp + 0x20]
call fcn.140008df0
lea rdx, [0x140336d50]
lea rcx, [rsp + 0x20]
call fcn.140207de0
int3
Function at 0x140171350
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x40
mov rsi, rcx
cmp byte [rcx + 0x48], 0
je 0x140171548
mov rcx, qword [rdx + 0x108]
test rcx, rcx
je 0x14017155d
lea rdx, [rsp + 0x60]
call fcn.1401386e0
test rax, rax
je 0x14017155d
mov edi, dword [rax]
mov rax, qword [rsi + 0x10]
dec rax
cmp rdi, rax
jne 0x140171548
movzx edx, dil
movabs r14, 0xcbf29ce484222325
xor rdx, r14
movabs rbp, 0x100000001b3
imul rdx, rbp
mov eax, edi
shr eax, 8
movzx ecx, al
xor rdx, rcx
imul rdx, rbp
mov eax, edi
shr eax, 0x10
movzx ecx, al
xor rdx, rcx
imul rdx, rbp
mov eax, edi
shr rax, 0x18
xor rdx, rax
imul rdx, rbp
mov r9, qword [rsi + 0x30]
mov rax, r9
and rax, rdx
mov r10, qword [rsi + 0x18]
add rax, rax
mov rcx, qword [r10 + rax*8 + 8]
mov r8, qword [rsi + 8]
xor ebx, ebx
cmp rcx, r8
je 0x140171428
mov rax, qword [r10 + rax*8]
cmp edi, dword [rcx + 0x10]
je 0x14017142b
cmp rcx, rax
je 0x140171428
mov rcx, qword [rcx + 8]
cmp edi, dword [rcx + 0x10]
jne 0x140171418
jmp 0x14017142b
mov rcx, rbx
test rcx, rcx
cmove rcx, r8
movzx edx, byte [rcx + 0x10]
xor rdx, r14
imul rdx, rbp
movzx eax, byte [rcx + 0x11]
xor rdx, rax
imul rdx, rbp
movzx eax, byte [rcx + 0x12]
xor rdx, rax
imul rdx, rbp
movzx eax, byte [rcx + 0x13]
xor rdx, rax
imul rdx, rbp
and rdx, r9
add rdx, rdx
mov rax, qword [r10 + rdx*8]
cmp qword [r10 + rdx*8 + 8], rcx
jne 0x14017148a
cmp rax, rcx
jne 0x14017147f
mov qword [r10 + rdx*8], r8
mov qword [r10 + rdx*8 + 8], r8
jmp 0x140171496
mov r8, qword [rcx + 8]
mov qword [r10 + rdx*8 + 8], r8
jmp 0x140171496
cmp rax, rcx
jne 0x140171496
mov rax, qword [rcx]
mov qword [r10 + rdx*8], rax
mov rdx, qword [rcx]
dec qword [rsi + 0x10]
mov rax, qword [rcx + 8]
mov qword [rax], rdx
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov edx, 0x20
call fcn.140205dc4
test edi, edi
je 0x140171540
lea r8d, [rdi - 1]
mov r9d, r8d
movzx edx, r8b
xor rdx, r14
imul rdx, rbp
mov eax, r8d
shr eax, 8
movzx ecx, al
xor rdx, rcx
imul rdx, rbp
mov eax, r8d
shr eax, 0x10
movzx ecx, al
xor rdx, rcx
imul rdx, rbp
mov eax, r8d
shr rax, 0x18
xor rdx, rax
imul rdx, rbp
mov rcx, qword [rsi + 0x30]
and rcx, rdx
shl rcx, 4
add rcx, qword [rsi + 0x18]
mov rax, qword [rcx + 8]
mov rdx, qword [rsi + 8]
cmp rax, rdx
je 0x140171535
mov rcx, qword [rcx]
cmp r9d, dword [rax + 0x10]
je 0x140171532
cmp rax, rcx
je 0x140171535
mov rax, qword [rax + 8]
cmp r8d, dword [rax + 0x10]
jne 0x140171523
mov rbx, rax
test rbx, rbx
cmove rbx, rdx
mov rbx, qword [rbx + 0x18]
mov qword [rsi + 0x40], rbx
mov al, 1
jmp 0x14017154a
xor al, al
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
add rsp, 0x40
pop r14
pop rdi
pop rsi
ret
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x20]
call fcn.14000cc50
nop
mov rcx, rax
call fcn.14000bd20
int3
Function at 0x140171580
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov rbx, rdx
mov rsi, rcx
cmp byte [rcx + 0x40], 0
je 0x1401716c0
lea rcx, [rsp + 0x40]
call fcn.14013c0e0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov rcx, qword [rbx + 0x108]
test rcx, rcx
je 0x14017176e
lea rdx, [rsp + 0x90]
call fcn.1401386e0
test rax, rax
je 0x14017176e
mov r8d, dword [rax]
movzx edx, r8b
movabs r13, 0xcbf29ce484222325
xor rdx, r13
movabs r12, 0x100000001b3
imul rdx, r12
mov eax, r8d
shr eax, 8
movzx ecx, al
xor rdx, rcx
imul rdx, r12
mov eax, r8d
shr eax, 0x10
movzx ecx, al
xor rdx, rcx
imul rdx, r12
mov eax, r8d
shr rax, 0x18
xor rdx, rax
imul rdx, r12
mov r14, qword [rsi + 0x30]
mov rax, r14
and rax, rdx
mov r15, qword [rsi + 0x18]
add rax, rax
mov rbx, qword [r15 + rax*8]
mov rbp, qword [rsi + 8]
cmp rbx, rbp
je 0x1401716c0
mov rax, qword [r15 + rax*8 + 8]
cmp dword [rbx + 0x10], r8d
je 0x140171674
cmp rbx, rax
je 0x1401716c0
mov rbx, qword [rbx]
cmp dword [rbx + 0x10], r8d
jne 0x140171666
mov rdi, qword [rbx]
cmp rbx, rax
je 0x140171691
nop dword [rax]
mov rcx, rdi
cmp r8d, dword [rdi + 0x10]
jne 0x140171691
mov rdi, qword [rdi]
cmp rcx, rax
jne 0x140171680
cmp rbx, rdi
je 0x1401716c0
nop word [rax + rax]
lea rcx, [rbx + 0x14]
mov r8d, 0x20
lea rdx, [rsp + 0x20]
call fcn.1402088b0
test eax, eax
je 0x1401716e0
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x1401716a0
xor al, al
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
movzx ecx, byte [rbx + 0x10]
xor rcx, r13
imul rcx, r12
movzx eax, byte [rbx + 0x11]
xor rcx, rax
imul rcx, r12
movzx eax, byte [rbx + 0x12]
xor rcx, rax
imul rcx, r12
movzx eax, byte [rbx + 0x13]
xor rcx, rax
imul rcx, r12
and r14, rcx
add r14, r14
mov rax, qword [r15 + r14*8]
cmp qword [r15 + r14*8 + 8], rbx
jne 0x140171738
cmp rax, rbx
jne 0x14017172d
mov qword [r15 + r14*8], rbp
mov qword [r15 + r14*8 + 8], rbp
jmp 0x140171744
mov rbp, qword [rbx + 8]
mov qword [r15 + r14*8 + 8], rbp
jmp 0x140171744
cmp rax, rbx
jne 0x140171744
mov rax, qword [rbx]
mov qword [r15 + r14*8], rax
mov rcx, qword [rbx]
dec qword [rsi + 0x10]
mov rax, qword [rbx + 8]
mov qword [rax], rcx
mov rax, qword [rbx + 8]
mov qword [rcx + 8], rax
mov edx, 0x38
mov rcx, rbx
call fcn.140205dc4
mov al, 1
jmp 0x1401716c2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x20]
call fcn.14000cc50
nop
mov rcx, rax
call fcn.14000bd20
int3
Function at 0x140180340
Capabilities:
Encode data using xor

Disassembly:
mov edx, 0x18
jmp fcn.140173e30

Function at 0x140180350
Capabilities:
Encode data using xor

Disassembly:
mov rax, r8
mov r9, rdx
mov r8, rcx
mov edx, eax
mov rcx, r9
jmp fcn.140173e20

Function at 0x140180500
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
movdqu xmm3, xmmword [rcx + 0x10]
movdqu xmm0, xmmword [rcx]
movdqu xmmword [rdx + 0x10], xmm3
movdqa xmm2, xmm0
movdqu xmmword [rdx], xmm0
pslldq xmm2, 4
movdqa xmm1, xmm2
pslldq xmm2, 4
pxor xmm1, xmm0
movdqa xmm4, xmm2
pxor xmm4, xmm1
pslldq xmm2, 4
pxor xmm4, xmm2
aeskeygenassist xmm0, xmm3, 1
pshufd xmm1, xmm0, 0xff
pxor xmm4, xmm1
movdqa xmm1, xmm3
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [rdx + 0x20], xmm4
pslldq xmm1, 4
pxor xmm0, xmm3
movdqa xmm2, xmm1
pslldq xmm1, 4
pxor xmm2, xmm0
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm4, 0
pshufd xmm1, xmm0, 0xaa
pxor xmm2, xmm1
movdqa xmm1, xmm4
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [rdx + 0x30], xmm2
pslldq xmm1, 4
pxor xmm0, xmm4
movdqa xmm3, xmm1
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm2, 2
pshufd xmm1, xmm0, 0xff
pxor xmm3, xmm1
movdqa xmm1, xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [rdx + 0x40], xmm3
pxor xmm0, xmm2
pslldq xmm1, 4
movdqa xmm2, xmm1
pslldq xmm1, 4
pxor xmm2, xmm0
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 0
pshufd xmm1, xmm0, 0xaa
pxor xmm2, xmm1
movdqa xmm1, xmm3
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [rdx + 0x50], xmm2
pslldq xmm1, 4
pxor xmm0, xmm3
movdqa xmm3, xmm1
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm2, 4
pshufd xmm1, xmm0, 0xff
pxor xmm3, xmm1
movdqa xmm1, xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [rdx + 0x60], xmm3
pxor xmm0, xmm2
pslldq xmm1, 4
movdqa xmm2, xmm1
pslldq xmm1, 4
pxor xmm2, xmm0
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 0
pshufd xmm1, xmm0, 0xaa
pxor xmm2, xmm1
movdqa xmm1, xmm3
movdqu xmmword [rdx + 0x70], xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
pslldq xmm1, 4
movdqa xmm4, xmm1
pxor xmm0, xmm3
pslldq xmm1, 4
pxor xmm4, xmm0
pxor xmm4, xmm1
aeskeygenassist xmm0, xmm2, 8
pshufd xmm1, xmm0, 0xff
pxor xmm4, xmm1
movdqa xmm1, xmm2
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [rdx + 0x80], xmm4
pxor xmm0, xmm2
pslldq xmm1, 4
movdqa xmm3, xmm1
pslldq xmm1, 4
pxor xmm3, xmm0
pxor xmm3, xmm1
aeskeygenassist xmm0, xmm4, 0
pshufd xmm1, xmm0, 0xaa
pxor xmm3, xmm1
movdqa xmm1, xmm4
pslldq xmm1, 4
movdqa xmm0, xmm1
movdqu xmmword [rdx + 0x90], xmm3
pslldq xmm1, 4
pxor xmm0, xmm4
movdqa xmm2, xmm1
pslldq xmm1, 4
pxor xmm2, xmm0
pxor xmm2, xmm1
aeskeygenassist xmm0, xmm3, 0x10
pshufd xmm1, xmm0, 0xff
pxor xmm2, xmm1
movdqu xmmword [rdx + 0xa0], xmm2
ret