joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400394b0
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rcx, qword [0x14013a700]
xorps xmm0, xmm0
add rcx, 1
mov rbx, qword [0x14013a728]
js 0x1400394d4
cvtsi2ss xmm0, rcx
jmp 0x1400394e9
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [0x14013a6f0]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceilf
movss xmm1, dword [0x14011e0b0]
xor ecx, ecx
comiss xmm0, xmm1
jb 0x14003951b
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x14003951b
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x14003954d
cmp rbx, 0x200
jae 0x14003954a
lea rbx, [rbx*8]
cmp rbx, rcx
jae 0x14003954d
mov rbx, rcx
mov rdx, rbx
add rsp, 0x20
pop rbx
jmp 0x140039560
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x140039591
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x14013a6f8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x14013a708]
lea rdx, [rdi + rdi]
call fcn.1400020c0
mov rax, qword [0x14013a6f8]
lea r9, [rdi - 1]
mov qword [0x14013a720], r9
mov qword [0x14013a728], rdi
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x140039704
mov qword [rsp + 0x40], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rsi
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rdi
xor r11, rdx
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x14013a708]
mov r9, qword [r11]
cmp r9, rbx
jne 0x140039650
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x1400396c5
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x14003968d
mov r10, qword [rdx]
cmp r10, rax
je 0x140039687
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x1400396c5
cmp r9, rdx
je 0x1400396a1
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x1400396d9
cmp r9, rdx
jne 0x140039692
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
je 0x1400396ff
mov r9, qword [0x14013a720]
jmp 0x140039601
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x1400396c5
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x140039560
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rcx, qword [0x14013a700]
xorps xmm0, xmm0
add rcx, 1
mov rbx, qword [0x14013a728]
js 0x1400394d4
cvtsi2ss xmm0, rcx
jmp 0x1400394e9
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [0x14013a6f0]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceilf
movss xmm1, dword [0x14011e0b0]
xor ecx, ecx
comiss xmm0, xmm1
jb 0x14003951b
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x14003951b
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x14003954d
cmp rbx, 0x200
jae 0x14003954a
lea rbx, [rbx*8]
cmp rbx, rcx
jae 0x14003954d
mov rbx, rcx
mov rdx, rbx
add rsp, 0x20
pop rbx
jmp 0x140039560
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x140039591
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x14013a6f8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x14013a708]
lea rdx, [rdi + rdi]
call fcn.1400020c0
mov rax, qword [0x14013a6f8]
lea r9, [rdi - 1]
mov qword [0x14013a720], r9
mov qword [0x14013a728], rdi
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x140039704
mov qword [rsp + 0x40], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rsi
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rdi
xor r11, rdx
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x14013a708]
mov r9, qword [r11]
cmp r9, rbx
jne 0x140039650
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x1400396c5
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x14003968d
mov r10, qword [rdx]
cmp r10, rax
je 0x140039687
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x1400396c5
cmp r9, rdx
je 0x1400396a1
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x1400396d9
cmp r9, rdx
jne 0x140039692
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
je 0x1400396ff
mov r9, qword [0x14013a720]
jmp 0x140039601
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x1400396c5
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x140039b20
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x50
mov rax, qword [0x140136010]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rdi, rdx
mov rbx, rcx
mov qword [rsp + 0x38], rcx
xor esi, esi
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140039b59
mov rdx, qword [rdx]
movabs r9, 0xcbf29ce484222325
mov rcx, rsi
test r8, r8
je 0x140039b93
movabs r10, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x140039b80
mov r8, rdi
lea rdx, [rsp + 0x38]
call fcn.14003aa20
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x140039bd7
cmp rdx, qword [0x14013a738]
je 0x140039bd7
mov qword [rbx], rsi
mov qword [rbx + 8], rsi
mov rax, qword [rdx + 0x38]
test rax, rax
je 0x140039bc6
lock inc dword [rax + 8]
mov rcx, qword [rdx + 0x30]
mov qword [rbx], rcx
mov rcx, qword [rdx + 0x38]
mov qword [rbx + 8], rcx
jmp 0x140039c10
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov rdx, rdi
lea rcx, [rsp + 0x38]
call fcn.140039c30
nop
lea r9, [rsp + 0x38]
mov r8, rdi
lea rdx, [rsp + 0x28]
call fcn.14003a450
mov rax, qword [rsp + 0x38]
mov qword [rbx], rax
mov rax, qword [rsp + 0x40]
mov qword [rbx + 8], rax
mov rax, rbx
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1400f3150
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x50
pop rdi
ret
Function at 0x14003ab00
Capabilities:
Hash data using fnv

Disassembly:
mov dword [rsp + 8], ecx
movabs rax, 0xcbf29ce484222325
movzx edx, cl
xor rdx, rax
mov r8d, ecx
movzx eax, byte [rsp + 9]
movabs rcx, 0x100000001b3
imul rdx, rcx
xor rdx, rax
movzx eax, byte [rsp + 0xa]
imul rdx, rcx
xor rdx, rax
movzx eax, byte [rsp + 0xb]
imul rdx, rcx
xor rdx, rax
imul rdx, rcx
mov rcx, qword [0x14013e4d0]
and rcx, rdx
mov rdx, qword [0x14013e4a8]
shl rcx, 4
add rcx, qword [0x14013e4b8]
mov rax, qword [rcx + 8]
cmp rax, rdx
je 0x14003ab97
mov rcx, qword [rcx]
cmp r8d, dword [rax + 0x10]
je 0x14003ab99
cmp rax, rcx
je 0x14003ab97
mov rax, qword [rax + 8]
cmp r8d, dword [rax + 0x10]
jne 0x14003ab77
test rax, rax
mov rcx, rdx
cmovne rcx, rax
cmp rcx, rdx
setne al
ret
xor eax, eax
test rax, rax
mov rcx, rdx
cmovne rcx, rax
cmp rcx, rdx
setne al
ret
Function at 0x14003b030
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov r12, r8
mov rsi, rdx
movzx r15d, byte [r8]
movabs rax, 0xcbf29ce484222325
xor r15, rax
movabs rcx, 0x100000001b3
imul r15, rcx
movzx eax, byte [r8 + 1]
xor r15, rax
imul r15, rcx
movzx eax, byte [r8 + 2]
xor r15, rax
imul r15, rcx
movzx eax, byte [r8 + 3]
xor r15, rax
imul r15, rcx
mov rcx, qword [0x14013e4d0]
and rcx, r15
add rcx, rcx
mov rax, qword [0x14013e4b8]
mov rbx, qword [rax + rcx*8 + 8]
mov r14, qword [0x14013e4a8]
cmp rbx, r14
jne 0x14003b0ba
mov rbx, r14
mov rbp, r14
jmp 0x14003b0f9
mov rcx, qword [rax + rcx*8]
mov eax, dword [r8]
cmp eax, dword [rbx + 0x10]
je 0x14003b0d4
cmp rbx, rcx
je 0x14003b0f3
mov rbx, qword [rbx + 8]
cmp eax, dword [rbx + 0x10]
jne 0x14003b0c6
mov qword [rdx], rbx
mov byte [rdx + 8], 0
mov rax, rsi
mov rbx, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r14, rbx
mov rbp, rbx
movabs rax, 0x7ffffffffffffff
cmp qword [0x14013e4b0], rax
jne 0x14003b11a
lea rcx, str.unordered_map_set_too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [0x14013e4a8]
mov qword [rsp + 0x20], rax
xor r13d, r13d
mov qword [rsp + 0x28], r13
lea ecx, [r13 + 0x20]
call fcn.1400f3170
mov rdi, rax
mov qword [rsp + 0x28], rax
mov eax, dword [r12]
mov dword [rdi + 0x10], eax
mov qword [rdi + 0x18], r13
mov rdx, qword [0x14013e4b0]
lea rcx, [rdx + 1]
xorps xmm0, xmm0
test rcx, rcx
js 0x14003b164
cvtsi2ss xmm0, rcx
jmp 0x14003b179
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rcx, qword [0x14013e4d8]
xorps xmm1, xmm1
test rcx, rcx
js 0x14003b18f
cvtsi2ss xmm1, rcx
jmp 0x14003b1a4
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [0x14013e4a0]
seta al
test al, al
je 0x14003b218
call fcn.14003b290
mov rcx, qword [0x14013e4d0]
and rcx, r15
add rcx, rcx
mov rdx, qword [0x14013e4b8]
mov rax, qword [rdx + rcx*8 + 8]
mov rbx, qword [0x14013e4a8]
cmp rax, rbx
je 0x14003b204
mov rdx, qword [rdx + rcx*8]
mov ecx, dword [rdi + 0x10]
cmp ecx, dword [rax + 0x10]
je 0x14003b201
nop dword [rax]
mov rbx, rax
cmp rax, rdx
je 0x14003b25b
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x14003b1f0
mov rbx, qword [rax]
mov qword [rsp + 0x20], rbx
mov rbp, rbx
mov r14, qword [rsp + 0x20]
mov rdx, qword [0x14013e4b0]
mov r8, qword [rbx + 8]
inc rdx
mov qword [0x14013e4b0], rdx
mov qword [rdi], r14
mov qword [rdi + 8], r8
mov qword [r8], rdi
mov qword [rbx + 8], rdi
mov rcx, qword [0x14013e4b8]
mov rax, qword [0x14013e4d0]
and rax, r15
add rax, rax
mov rdx, qword [rcx + rax*8]
cmp rdx, qword [0x14013e4a8]
jne 0x14003b262
mov qword [rcx + rax*8], rdi
jmp 0x14003b274
mov qword [rsp + 0x20], rax
jmp 0x14003b209
cmp rdx, rbp
jne 0x14003b26d
mov qword [rcx + rax*8], rdi
jmp 0x14003b279
cmp qword [rcx + rax*8 + 8], r8
jne 0x14003b279
mov qword [rcx + rax*8 + 8], rdi
mov qword [rsi], rdi
mov byte [rsi + 8], 1
jmp 0x14003b0db
Function at 0x14003b290
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rcx, qword [0x14013e4b0]
xorps xmm0, xmm0
add rcx, 1
mov rbx, qword [0x14013e4d8]
js 0x14003b2b4
cvtsi2ss xmm0, rcx
jmp 0x14003b2c9
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [0x14013e4a0]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceilf
movss xmm1, dword [0x14011e0b0]
xor ecx, ecx
comiss xmm0, xmm1
jb 0x14003b2fb
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x14003b2fb
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x14003b32d
cmp rbx, 0x200
jae 0x14003b32a
lea rbx, [rbx*8]
cmp rbx, rcx
jae 0x14003b32d
mov rbx, rcx
mov rdx, rbx
add rsp, 0x20
pop rbx
jmp 0x14003b340
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x14003b371
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x14013e4a8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x14013e4b8]
lea rdx, [rdi + rdi]
call fcn.1400020c0
mov rax, qword [0x14013e4a8]
lea r9, [rdi - 1]
mov qword [0x14013e4d0], r9
mov qword [0x14013e4d8], rdi
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x14003b4e4
mov qword [rsp + 0x40], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rsi
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rdi
xor r11, rdx
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x14013e4b8]
mov r9, qword [r11]
cmp r9, rbx
jne 0x14003b430
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x14003b4a5
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x14003b46d
mov r10, qword [rdx]
cmp r10, rax
je 0x14003b467
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x14003b4a5
cmp r9, rdx
je 0x14003b481
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x14003b4b9
cmp r9, rdx
jne 0x14003b472
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
je 0x14003b4df
mov r9, qword [0x14013e4d0]
jmp 0x14003b3e1
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x14003b4a5
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x14003b340
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rcx, qword [0x14013e4b0]
xorps xmm0, xmm0
add rcx, 1
mov rbx, qword [0x14013e4d8]
js 0x14003b2b4
cvtsi2ss xmm0, rcx
jmp 0x14003b2c9
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [0x14013e4a0]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceilf
movss xmm1, dword [0x14011e0b0]
xor ecx, ecx
comiss xmm0, xmm1
jb 0x14003b2fb
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x14003b2fb
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x14003b32d
cmp rbx, 0x200
jae 0x14003b32a
lea rbx, [rbx*8]
cmp rbx, rcx
jae 0x14003b32d
mov rbx, rcx
mov rdx, rbx
add rsp, 0x20
pop rbx
jmp 0x14003b340
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x14003b371
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x14013e4a8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x14013e4b8]
lea rdx, [rdi + rdi]
call fcn.1400020c0
mov rax, qword [0x14013e4a8]
lea r9, [rdi - 1]
mov qword [0x14013e4d0], r9
mov qword [0x14013e4d8], rdi
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x14003b4e4
mov qword [rsp + 0x40], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rsi
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rdi
xor r11, rdx
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x14013e4b8]
mov r9, qword [r11]
cmp r9, rbx
jne 0x14003b430
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x14003b4a5
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x14003b46d
mov r10, qword [rdx]
cmp r10, rax
je 0x14003b467
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x14003b4a5
cmp r9, rdx
je 0x14003b481
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x14003b4b9
cmp r9, rdx
jne 0x14003b472
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
je 0x14003b4df
mov r9, qword [0x14013e4d0]
jmp 0x14003b3e1
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x14003b4a5
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x140040650
Capabilities:
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rbx
mov r11d, r8d
mov r10, rdx
not r11d
mov r9, rcx
mov eax, r11d
test rdx, rdx
je 0x1400406ad
lea rbx, [0x1400faa40]
movzx r8d, byte [r9]
lea r9, [r9 + 1]
dec r10
cmp r8b, 0x23
jne 0x140040694
cmp r10, 2
jb 0x140040694
cmp byte [r9], r8b
jne 0x140040694
cmp byte [r9 + 1], r8b
cmove eax, r11d
movzx edx, al
xor rdx, r8
shr eax, 8
xor eax, dword [rbx + rdx*4]
test r10, r10
jne 0x140040670
not eax
mov rbx, qword [rsp + 8]
ret
movzx r8d, byte [rcx]
inc r9
test r8b, r8b
je 0x1400406ef
lea rbx, [0x1400faa40]
cmp r8b, 0x23
jne 0x1400406d3
cmp byte [r9], r8b
jne 0x1400406d3
cmp byte [r9 + 1], r8b
cmove eax, r11d
movzx edx, al
movzx ecx, r8b
movzx r8d, byte [r9]
xor rdx, rcx
shr eax, 8
inc r9
xor eax, dword [rbx + rdx*4]
test r8b, r8b
jne 0x1400406c0
mov rbx, qword [rsp + 8]
not eax
ret

Function at 0x1400407f0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push r14
sub rsp, 0x20
xor r14d, r14d
mov rsi, r8
test r8, r8
je 0x14004080e
mov qword [r8], r14
lea rdx, [0x1401085b0]
call fcn.140040700
mov rbx, rax
test rax, rax
jne 0x140040833
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
mov qword [rsp + 0x30], rbp
mov rcx, rbx
mov qword [rsp + 0x38], rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
mov ebp, eax
cmp eax, 0xffffffff
je 0x14004095d
xor edx, edx
mov rcx, rbx
lea r8d, [rdx + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
test eax, eax
jne 0x14004095d
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
movsxd rdi, eax
cmp edi, 0xffffffff
je 0x14004095d
xor r8d, r8d
mov edx, ebp
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
test eax, eax
jne 0x14004095d
cmp rdi, 0xffffffffffffffff
je 0x14004095d
mov rcx, rdi
call fcn.140047150
mov rbp, rax
test rax, rax
je 0x14004095d
mov r9, rbx
mov r8, rdi
mov edx, 1
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov rcx, rbx
cmp rax, rdi
je 0x14004094a
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov r8, qword [0x14013cd70]
test r8, r8
je 0x14004093f
movsx rdx, word [r8 + 0x6310]
lea rcx, [r8 + 0x6314]
mov r9d, dword [r8 + 0x4098]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x140040934
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6310], cx
movsx rax, cx
lea rcx, [r8 + 0x6314]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], r14d
inc word [rcx + 6]
inc dword [r8 + 0x630c]
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x140040966
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
test rsi, rsi
je 0x140040958
mov qword [rsi], rdi
mov rax, rbp
jmp 0x140040968
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
xor eax, eax
mov rbp, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x140046730
Capabilities:
Hash data with crc32

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0x138]
lea r10, [0x1400faa40]
mov r8, rdx
mov r9, rcx
movsxd rdx, dword [rcx + 0x130]
mov ebx, dword [rax + rdx*4 - 4]
not ebx
movzx eax, r8b
movzx edx, bl
xor rdx, rax
shr ebx, 8
mov rax, r8
shr rax, 8
xor ebx, dword [r10 + rdx*4]
movzx ecx, bl
shr ebx, 8
movzx edx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x10
xor ebx, dword [r10 + rdx*4]
movzx ecx, bl
shr ebx, 8
movzx edx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x18
xor ebx, dword [r10 + rdx*4]
movzx ecx, bl
shr ebx, 8
movzx edx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x20
xor ebx, dword [r10 + rdx*4]
movzx ecx, bl
shr ebx, 8
movzx edx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x28
xor ebx, dword [r10 + rdx*4]
movzx ecx, bl
shr ebx, 8
movzx edx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x30
xor ebx, dword [r10 + rdx*4]
movzx ecx, bl
shr ebx, 8
movzx edx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x38
xor ebx, dword [r10 + rdx*4]
movzx ecx, bl
xor rcx, rax
shr ebx, 8
xor ebx, dword [r10 + rcx*4]
mov rcx, qword [r9]
not ebx
cmp dword [rcx + 0x418c], ebx
jne 0x14004681f
mov edx, 0xc
mov ecx, ebx
call fcn.140074d50
mov eax, ebx
add rsp, 0x20
pop rbx
ret

Function at 0x140046830
Capabilities:
Hash data with crc32

Disassembly:
push rbx
sub rsp, 0x20
movsxd r8, dword [rcx + 0x130]
lea r11, [0x1400faa40]
mov rax, qword [rcx + 0x138]
mov r9, rcx
movsxd r10, edx
mov ebx, dword [rax + r8*4 - 4]
not ebx
movzx eax, r10b
movzx r8d, bl
shr ebx, 8
xor r8, rax
mov eax, r10d
shr eax, 8
movzx edx, al
mov eax, r10d
xor ebx, dword [r11 + r8*4]
movzx ecx, bl
xor rdx, rcx
shr ebx, 8
shr eax, 0x10
xor ebx, dword [r11 + rdx*4]
movzx ecx, bl
shr ebx, 8
movzx edx, al
xor rdx, rcx
xor ebx, dword [r11 + rdx*4]
movzx ecx, bl
shr ebx, 8
mov edx, r10d
shr rdx, 0x18
xor rdx, rcx
mov rcx, qword [r9]
xor ebx, dword [r11 + rdx*4]
not ebx
cmp dword [rcx + 0x418c], ebx
jne 0x1400468c6
mov r8, r10
mov edx, 4
mov ecx, ebx
call fcn.140074d50
mov eax, ebx
add rsp, 0x20
pop rbx
ret