joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1800814f0
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rcx, qword [0x18014a630]
xorps xmm0, xmm0
add rcx, 1
mov rbx, qword [0x18014a658]
js 0x180081294
cvtsi2ss xmm0, rcx
jmp 0x1800812a9
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [0x18014a620]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceilf
movss xmm1, dword [0x180130a48]
xor ecx, ecx
comiss xmm0, xmm1
jb 0x1800812db
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x1800812db
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x18008130d
cmp rbx, 0x200
jae 0x18008130a
lea rbx, [rbx*8]
cmp rbx, rcx
jae 0x18008130d
mov rbx, rcx
mov rdx, rbx
add rsp, 0x20
pop rbx
jmp 0x1800814f0
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x180081521
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x18014a628]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x18014a638]
lea rdx, [rdi + rdi]
call fcn.180064fe0
mov rax, qword [0x18014a628]
lea r9, [rdi - 1]
mov qword [0x18014a650], r9
mov qword [0x18014a658], rdi
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x180081694
mov qword [rsp + 0x40], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rsi
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rdi
xor r11, rdx
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x18014a638]
mov r9, qword [r11]
cmp r9, rbx
jne 0x1800815e0
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x180081655
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x18008161d
mov r10, qword [rdx]
cmp r10, rax
je 0x180081617
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x180081655
cmp r9, rdx
je 0x180081631
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x180081669
cmp r9, rdx
jne 0x180081622
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
je 0x18008168f
mov r9, qword [0x18014a650]
jmp 0x180081591
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x180081655
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x180084ec0
Capabilities:
Hash data using fnv

Disassembly:
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x180084ef1
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x18014d278]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x18014d288]
lea rdx, [rdi + rdi]
call fcn.180064fe0
mov rax, qword [0x18014d278]
lea r9, [rdi - 1]
mov qword [0x18014d2a0], r9
mov qword [0x18014d2a8], rdi
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x180085064
mov qword [rsp + 0x40], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rsi
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rdi
xor r11, rdx
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x18014d288]
mov r9, qword [r11]
cmp r9, rbx
jne 0x180084fb0
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x180085025
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x180084fed
mov r10, qword [rdx]
cmp r10, rax
je 0x180084fe7
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x180085025
cmp r9, rdx
je 0x180085001
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x180085039
cmp r9, rdx
jne 0x180084ff2
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
je 0x18008505f
mov r9, qword [0x18014d2a0]
jmp 0x180084f61
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x180085025
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x180085070
Capabilities:
Hash data using fnv

Disassembly:
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x1800850a1
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x18014d238]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x18014d248]
lea rdx, [rdi + rdi]
call fcn.180064fe0
mov rax, qword [0x18014d238]
lea r9, [rdi - 1]
mov qword [0x18014d260], r9
mov qword [0x18014d268], rdi
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x180085214
mov qword [rsp + 0x40], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rsi
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rdi
xor r11, rdx
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x18014d248]
mov r9, qword [r11]
cmp r9, rbx
jne 0x180085160
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x1800851d5
mov rdx, qword [r11 + 8]
mov r8d, dword [rax + 0x10]
cmp r8d, dword [rdx + 0x10]
jne 0x18008519d
mov r10, qword [rdx]
cmp r10, rax
je 0x180085197
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x1800851d5
cmp r9, rdx
je 0x1800851b1
mov rdx, qword [rdx + 8]
cmp r8d, dword [rdx + 0x10]
je 0x1800851e9
cmp r9, rdx
jne 0x1800851a2
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
je 0x18008520f
mov r9, qword [0x18014d260]
jmp 0x180085111
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x1800851d5
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x18008aff0
Capabilities:
Log keystrokes via polling

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x18014a040]
xor rax, rsp
mov qword [rsp + 0x30], rax
movss xmm2, dword [0x18014eb2c]
mov rbx, rcx
lea rcx, [0x18014d6d0]
call fcn.1800671b0
subss xmm2, dword [0x18014eb28]
xorps xmm1, xmm1
mov eax, eax
xorps xmm0, xmm0
lea rdx, [0x18014eb38]
mov rcx, rbx
cvtsi2ss xmm1, rax
subss xmm1, xmm0
addss xmm1, xmm0
mulss xmm1, dword [0x180130820]
mulss xmm1, xmm2
addss xmm1, dword [0x18014eb28]
movss dword [0x18014eb30], xmm1
call fcn.1800899b0
lea rcx, [rsp + 0x20]
call fcn.180074d90
xorps xmm1, xmm1
mov rcx, qword [rax]
movabs rax, 0x20c49ba5e353f7cf
mov qword [rbx + 0x10], rcx
sub rcx, qword [rbx + 8]
imul rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cvtsi2ss xmm1, rdx
divss xmm1, dword [0x180130a30]
movss dword [rbx + 0x1c], xmm1
movss xmm0, dword [0x18014eb34]
addss xmm0, dword [0x18014eb30]
subss xmm0, xmm1
divss xmm0, dword [0x180130a30]
cvtps2pd xmm0, xmm0
call fcn.180089ba0
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x18008b0f0
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1800cc250
add rsp, 0x40
pop rbx
ret
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x28], 0
call qword [sym.imp.USER32.dll_GetCursorPos]
movsxd r9, dword [rsp + 0x2c]
mov edx, 0x201
mov rcx, qword [0x18014d3d8]
mov r8d, 0x1000000
call qword [sym.imp.USER32.dll_PostMessageW]
lea rcx, [rsp + 0x20]
call fcn.180074d90
mov rcx, rbx
mov rdx, qword [rax]
mov qword [rbx + 8], rdx
call fcn.1800897f0
mov al, 1
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1800cc250
add rsp, 0x40
pop rbx
ret
Function at 0x18008b820
Capabilities:
Log keystrokes via polling

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x18014a040]
xor rax, rsp
mov qword [rsp + 0x30], rax
movss xmm2, dword [0x18014eb8c]
mov rbx, rcx
lea rcx, [0x18014d6d0]
call fcn.1800671b0
subss xmm2, dword [0x18014eb88]
xorps xmm1, xmm1
mov eax, eax
xorps xmm0, xmm0
lea rdx, [0x18014eb98]
mov rcx, rbx
cvtsi2ss xmm1, rax
subss xmm1, xmm0
addss xmm1, xmm0
mulss xmm1, dword [0x180130820]
mulss xmm1, xmm2
addss xmm1, dword [0x18014eb88]
movss dword [0x18014eb90], xmm1
call fcn.1800899b0
lea rcx, [rsp + 0x20]
call fcn.180074d90
xorps xmm1, xmm1
mov rcx, qword [rax]
movabs rax, 0x20c49ba5e353f7cf
mov qword [rbx + 0x10], rcx
sub rcx, qword [rbx + 8]
imul rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cvtsi2ss xmm1, rdx
divss xmm1, dword [0x180130a30]
movss dword [rbx + 0x1c], xmm1
movss xmm0, dword [0x18014eb94]
addss xmm0, dword [0x18014eb90]
subss xmm0, xmm1
divss xmm0, dword [0x180130a30]
cvtps2pd xmm0, xmm0
call fcn.180089ba0
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x18008b920
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1800cc250
add rsp, 0x40
pop rbx
ret
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x28], 0
call qword [sym.imp.USER32.dll_GetCursorPos]
movsxd r9, dword [rsp + 0x2c]
mov edx, 0x204
mov rcx, qword [0x18014d3d8]
mov r8d, 0x2000000
call qword [sym.imp.USER32.dll_PostMessageW]
lea rcx, [rsp + 0x20]
call fcn.180074d90
mov rcx, rbx
mov rdx, qword [rax]
mov qword [rbx + 8], rdx
call fcn.1800897f0
mov al, 1
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1800cc250
add rsp, 0x40
pop rbx
ret
Function at 0x18008d6b0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push r15
sub rsp, 0x40
mov rax, qword [0x18014a040]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0xfc
mov ecx, dword [0x18014d05c]
mov rax, qword gs:[0x58]
mov edx, 4
mov rax, qword [rax + rcx*8]
lea r14, [0x18014a2dc]
lea r15, str.none
mov rdi, 0xffffffffffffffff
lea rsi, [0x180150168]
mov eax, dword [rdx + rax]
cmp dword [0x180150160], eax
jle 0x18008d7ab
lea rcx, [0x180150160]
call fcn.1800cc318
cmp dword [0x180150160], edi
jne 0x18008d7ab
mov dword [rsp + 0x20], 0
mov edx, dword [0x18014a2dc]
lea rcx, [rsp + 0x20]
test edx, edx
cmovns rcx, r14
lea rax, [rsp + 0x28]
cmp edx, 0xfc
cmovle rax, rcx
movsxd rax, dword [rax]
mov rdx, qword [r15 + rax*8]
xorps xmm0, xmm0
movups xmmword [0x180150168], xmm0
xorps xmm1, xmm1
movdqu xmmword [0x180150178], xmm1
mov r8, rdi
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x18008d780
mov rcx, rsi
call fcn.1800745b0
lea rcx, [0x1800d6530]
call fcn.1800cc934
nop
lea rcx, [0x180150160]
call fcn.1800cc2ac
cmp byte [0x18014d669], 0
je 0x18008d84d
mov qword [rsp + 0x20], 0
xor r8d, r8d
lea rdx, [rsp + 0x20]
lea rcx, str._..._
call fcn.1800445f0
xor ebx, ebx
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x18008d7f3
inc ebx
cmp ebx, 0xfc
jb 0x18008d7d7
jmp 0x18008d893
cmp ebx, 0x1b
cmove ebx, edi
mov dword [0x18014a2dc], ebx
mov dword [rsp + 0x20], 0
lea rcx, [rsp + 0x20]
test ebx, ebx
cmovns rcx, r14
lea rax, [rsp + 0x28]
cmp ebx, 0xfc
cmovle rax, rcx
movsxd rax, dword [rax]
mov rdx, qword [r15 + rax*8]
nop dword [rax + rax]
inc rdi
cmp byte [rdx + rdi], 0
jne 0x18008d830
mov r8, rdi
mov rcx, rsi
call fcn.180078440
mov byte [0x18014d669], 0
jmp 0x18008d893
cmp dword [0x18014a2dc], 0xffffffff
jne 0x18008d85f
lea rsi, str._none_
jmp 0x18008d86f
cmp qword [0x180150180], 0xf
cmova rsi, qword [0x180150168]
mov qword [rsp + 0x20], 0
xor r8d, r8d
lea rdx, [rsp + 0x20]
mov rcx, rsi
call fcn.1800445f0
test al, al
je 0x18008d893
mov byte [0x18014d669], 1
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1800cc250
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
add rsp, 0x40
pop r15
ret
Function at 0x18008fad0
Capabilities:
Create thread

Disassembly:
push rbx
sub rsp, 0x50
mov rax, qword [0x18014a040]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rbx, rcx
mov eax, 1
xchg byte [rcx + 0x48], al
mov ecx, 0x10
call fcn.1800cc9cc
mov qword [rax], rbx
lea rcx, [0x18008fd40]
mov qword [rax + 8], rcx
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x1800a24c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x30], rax
test rax, rax
je 0x18008fb66
cmp dword [rbx + 0x40], 0
jne 0x18008fb5f
movaps xmm1, xmmword [rsp + 0x30]
movups xmmword [rbx + 0x38], xmm1
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1800cc250
add rsp, 0x50
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov dword [rsp + 0x38], 0
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
Function at 0x18009d460
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov r12, r8
mov rsi, rdx
movzx r15d, byte [r8]
movabs rax, 0xcbf29ce484222325
xor r15, rax
movabs rcx, 0x100000001b3
imul r15, rcx
movzx eax, byte [r8 + 1]
xor r15, rax
imul r15, rcx
movzx eax, byte [r8 + 2]
xor r15, rax
imul r15, rcx
movzx eax, byte [r8 + 3]
xor r15, rax
imul r15, rcx
mov rcx, qword [0x18014a540]
and rcx, r15
add rcx, rcx
mov rax, qword [0x18014a528]
mov rbx, qword [rax + rcx*8 + 8]
mov r14, qword [0x18014a518]
cmp rbx, r14
jne 0x18009d4ea
mov rbx, r14
mov rbp, r14
jmp 0x18009d529
mov rcx, qword [rax + rcx*8]
mov eax, dword [r8]
cmp eax, dword [rbx + 0x10]
je 0x18009d504
cmp rbx, rcx
je 0x18009d523
mov rbx, qword [rbx + 8]
cmp eax, dword [rbx + 0x10]
jne 0x18009d4f6
mov qword [rdx], rbx
mov byte [rdx + 8], 0
mov rax, rsi
mov rbx, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r14, rbx
mov rbp, rbx
movabs rax, 0x7ffffffffffffff
cmp qword [0x18014a520], rax
jne 0x18009d54a
lea rcx, str.unordered_map_set_too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [0x18014a518]
mov qword [rsp + 0x20], rax
xor r13d, r13d
mov qword [rsp + 0x28], r13
mov ecx, 0x20
call fcn.1800cc9cc
mov rdi, rax
mov qword [rsp + 0x28], rax
mov eax, dword [r12]
mov dword [rdi + 0x10], eax
mov qword [rdi + 0x18], r13
mov rdx, qword [0x18014a520]
lea rcx, [rdx + 1]
xorps xmm0, xmm0
test rcx, rcx
js 0x18009d595
cvtsi2ss xmm0, rcx
jmp 0x18009d5aa
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rcx, qword [0x18014a548]
xorps xmm1, xmm1
test rcx, rcx
js 0x18009d5c0
cvtsi2ss xmm1, rcx
jmp 0x18009d5d5
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [0x18014a510]
jbe 0x18009d640
call fcn.180066a90
mov rcx, qword [0x18014a540]
and rcx, r15
add rcx, rcx
mov rdx, qword [0x18014a528]
mov rax, qword [rdx + rcx*8 + 8]
mov rbx, qword [0x18014a518]
cmp rax, rbx
je 0x18009d62c
mov rdx, qword [rdx + rcx*8]
mov ecx, dword [rdi + 0x10]
cmp ecx, dword [rax + 0x10]
je 0x18009d629
mov rbx, rax
cmp rax, rdx
je 0x18009d683
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x18009d618
mov rbx, qword [rax]
mov qword [rsp + 0x20], rbx
mov rbp, rbx
mov r14, qword [rsp + 0x20]
mov rdx, qword [0x18014a520]
mov r8, qword [rbx + 8]
inc rdx
mov qword [0x18014a520], rdx
mov qword [rdi], r14
mov qword [rdi + 8], r8
mov qword [r8], rdi
mov qword [rbx + 8], rdi
mov rcx, qword [0x18014a528]
mov rax, qword [0x18014a540]
and rax, r15
add rax, rax
mov rdx, qword [rcx + rax*8]
cmp rdx, qword [0x18014a518]
jne 0x18009d68a
mov qword [rcx + rax*8], rdi
jmp 0x18009d69c
mov qword [rsp + 0x20], rax
jmp 0x18009d631
cmp rdx, rbp
jne 0x18009d695
mov qword [rcx + rax*8], rdi
jmp 0x18009d6a1
cmp qword [rcx + rax*8 + 8], r8
jne 0x18009d6a1
mov qword [rcx + rax*8 + 8], rdi
mov qword [rsi], rdi
mov byte [rsi + 8], 1
jmp 0x18009d50b
Function at 0x18009d6b0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x30
mov rsi, rdx
mov ecx, dword [0x18014a32c]
movzx r15d, cl
movabs rax, 0xcbf29ce484222325
xor r15, rax
movabs rdx, 0x100000001b3
imul r15, rdx
movzx eax, byte [0x18014a32d]
xor r15, rax
imul r15, rdx
movzx eax, byte [0x18014a32e]
xor r15, rax
imul r15, rdx
movzx eax, byte [0x18014a32f]
xor r15, rax
imul r15, rdx
mov rax, qword [0x18014a500]
and rax, r15
add rax, rax
mov rdx, qword [0x18014a4e8]
mov rbx, qword [rdx + rax*8 + 8]
mov r14, qword [0x18014a4d8]
cmp rbx, r14
jne 0x18009d745
mov rbx, r14
mov rbp, r14
jmp 0x18009d785
mov rax, qword [rdx + rax*8]
cmp ecx, dword [rbx + 0x10]
je 0x18009d75e
nop
cmp rbx, rax
je 0x18009d77f
mov rbx, qword [rbx + 8]
cmp ecx, dword [rbx + 0x10]
jne 0x18009d750
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov r14, rbx
mov rbp, rbx
movabs rax, 0x7ffffffffffffff
cmp qword [0x18014a4e0], rax
jne 0x18009d7a6
lea rcx, str.unordered_map_set_too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [0x18014a4d8]
mov qword [rsp + 0x20], rax
xor r12d, r12d
mov qword [rsp + 0x28], r12
mov ecx, 0x20
call fcn.1800cc9cc
mov rdi, rax
mov qword [rsp + 0x28], rax
mov eax, dword [0x18014a32c]
mov dword [rdi + 0x10], eax
mov qword [rdi + 0x18], r12
mov rdx, qword [0x18014a4e0]
lea rcx, [rdx + 1]
xorps xmm0, xmm0
test rcx, rcx
js 0x18009d7f3
cvtsi2ss xmm0, rcx
jmp 0x18009d808
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rcx, qword [0x18014a508]
xorps xmm1, xmm1
test rcx, rcx
js 0x18009d81e
cvtsi2ss xmm1, rcx
jmp 0x18009d833
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [0x18014a4d0]
jbe 0x18009d89e
call fcn.180066b40
mov rcx, qword [0x18014a500]
and rcx, r15
add rcx, rcx
mov rdx, qword [0x18014a4e8]
mov rax, qword [rdx + rcx*8 + 8]
mov rbx, qword [0x18014a4d8]
cmp rax, rbx
je 0x18009d88a
mov rdx, qword [rdx + rcx*8]
mov ecx, dword [rdi + 0x10]
cmp ecx, dword [rax + 0x10]
je 0x18009d887
mov rbx, rax
cmp rax, rdx
je 0x18009d8e1
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x18009d876
mov rbx, qword [rax]
mov qword [rsp + 0x20], rbx
mov rbp, rbx
mov r14, qword [rsp + 0x20]
mov rdx, qword [0x18014a4e0]
mov r8, qword [rbx + 8]
inc rdx
mov qword [0x18014a4e0], rdx
mov qword [rdi], r14
mov qword [rdi + 8], r8
mov qword [r8], rdi
mov qword [rbx + 8], rdi
mov rcx, qword [0x18014a4e8]
mov rax, qword [0x18014a500]
and rax, r15
add rax, rax
mov rdx, qword [rcx + rax*8]
cmp rdx, qword [0x18014a4d8]
jne 0x18009d8e8
mov qword [rcx + rax*8], rdi
jmp 0x18009d8fa
mov qword [rsp + 0x20], rax
jmp 0x18009d88f
cmp rdx, rbp
jne 0x18009d8f3
mov qword [rcx + rax*8], rdi
jmp 0x18009d8ff
cmp qword [rcx + rax*8 + 8], r8
jne 0x18009d8ff
mov qword [rcx + rax*8 + 8], rdi
mov qword [rsi], rdi
mov byte [rsi + 8], 1
jmp 0x18009d765
Function at 0x18009d910
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x30
mov rsi, rdx
mov ecx, dword [0x18014d670]
movzx r15d, cl
movabs rax, 0xcbf29ce484222325
xor r15, rax
movabs rdx, 0x100000001b3
imul r15, rdx
movzx eax, byte [0x18014d671]
xor r15, rax
imul r15, rdx
movzx eax, byte [0x18014d672]
xor r15, rax
imul r15, rdx
movzx eax, byte [0x18014d673]
xor r15, rax
imul r15, rdx
mov rax, qword [0x18014a4c0]
and rax, r15
add rax, rax
mov rdx, qword [0x18014a4a8]
mov rbx, qword [rdx + rax*8 + 8]
mov r14, qword [0x18014a498]
cmp rbx, r14
jne 0x18009d9a5
mov rbx, r14
mov rbp, r14
jmp 0x18009d9e5
mov rax, qword [rdx + rax*8]
cmp ecx, dword [rbx + 0x10]
je 0x18009d9be
nop
cmp rbx, rax
je 0x18009d9df
mov rbx, qword [rbx + 8]
cmp ecx, dword [rbx + 0x10]
jne 0x18009d9b0
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov r14, rbx
mov rbp, rbx
movabs rax, 0x7ffffffffffffff
cmp qword [0x18014a4a0], rax
jne 0x18009da06
lea rcx, str.unordered_map_set_too_long
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [0x18014a498]
mov qword [rsp + 0x20], rax
xor r12d, r12d
mov qword [rsp + 0x28], r12
mov ecx, 0x20
call fcn.1800cc9cc
mov rdi, rax
mov qword [rsp + 0x28], rax
mov eax, dword [0x18014d670]
mov dword [rdi + 0x10], eax
mov qword [rdi + 0x18], r12
mov rdx, qword [0x18014a4a0]
lea rcx, [rdx + 1]
xorps xmm0, xmm0
test rcx, rcx
js 0x18009da53
cvtsi2ss xmm0, rcx
jmp 0x18009da68
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rcx, qword [0x18014a4c8]
xorps xmm1, xmm1
test rcx, rcx
js 0x18009da7e
cvtsi2ss xmm1, rcx
jmp 0x18009da93
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm1, rax
addss xmm1, xmm1
divss xmm0, xmm1
comiss xmm0, dword [0x18014a490]
jbe 0x18009dafe
call fcn.180066bf0
mov rcx, qword [0x18014a4c0]
and rcx, r15
add rcx, rcx
mov rdx, qword [0x18014a4a8]
mov rax, qword [rdx + rcx*8 + 8]
mov rbx, qword [0x18014a498]
cmp rax, rbx
je 0x18009daea
mov rdx, qword [rdx + rcx*8]
mov ecx, dword [rdi + 0x10]
cmp ecx, dword [rax + 0x10]
je 0x18009dae7
mov rbx, rax
cmp rax, rdx
je 0x18009db41
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x18009dad6
mov rbx, qword [rax]
mov qword [rsp + 0x20], rbx
mov rbp, rbx
mov r14, qword [rsp + 0x20]
mov rdx, qword [0x18014a4a0]
mov r8, qword [rbx + 8]
inc rdx
mov qword [0x18014a4a0], rdx
mov qword [rdi], r14
mov qword [rdi + 8], r8
mov qword [r8], rdi
mov qword [rbx + 8], rdi
mov rcx, qword [0x18014a4a8]
mov rax, qword [0x18014a4c0]
and rax, r15
add rax, rax
mov rdx, qword [rcx + rax*8]
cmp rdx, qword [0x18014a498]
jne 0x18009db48
mov qword [rcx + rax*8], rdi
jmp 0x18009db5a
mov qword [rsp + 0x20], rax
jmp 0x18009daef
cmp rdx, rbp
jne 0x18009db53
mov qword [rcx + rax*8], rdi
jmp 0x18009db5f
cmp qword [rcx + rax*8 + 8], r8
jne 0x18009db5f
mov qword [rcx + rax*8 + 8], rdi
mov qword [rsi], rdi
mov byte [rsi + 8], 1
jmp 0x18009d9c5