joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140094480
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 8], rcx
push rsi
push rdi
push r14
sub rsp, 0x30
mov r10, rcx
movzx r9d, cl
mov r14, rdx
movabs rax, 0xcbf29ce484222325
xor r9, rax
movabs rdx, 0x100000001b3
imul r9, rdx
mov rax, rcx
sar rax, 8
movzx r8d, al
mov rax, rcx
xor r9, r8
sar rax, 0x10
imul r9, rdx
movzx ecx, al
mov rax, r10
xor r9, rcx
sar rax, 0x18
imul r9, rdx
movzx ecx, al
mov rax, r10
xor r9, rcx
sar rax, 0x20
imul r9, rdx
movzx ecx, al
mov rax, r10
xor r9, rcx
sar rax, 0x28
imul r9, rdx
movzx ecx, al
mov rax, r10
xor r9, rcx
sar rax, 0x30
imul r9, rdx
movzx ecx, al
mov rax, r10
xor r9, rcx
sar rax, 0x38
imul r9, rdx
movzx ecx, al
xor r9, rcx
mov rcx, qword [r14 + 0x30]
imul r9, rdx
and rcx, r9
shl rcx, 4
add rcx, qword [r14 + 0x18]
mov rax, qword [rcx + 8]
cmp rax, qword [r14 + 8]
je 0x14009456a
mov rcx, qword [rcx]
cmp r10, qword [rax + 0x10]
je 0x140094565
cmp rax, rcx
je 0x14009456a
mov rax, qword [rax + 8]
cmp r10, qword [rax + 0x10]
jne 0x140094556
test rax, rax
jne 0x1400945cf
lea r8, [rsp + 0x50]
mov rcx, r14
lea rdx, [rsp + 0x20]
call fcn.14007d060
mov rbp, qword [rsp + 0x50]
cmp dword [rbp + 0x7c], 0
jg 0x1400945d3
xor edi, edi
cmp dword [rbp + 0x68], edi
jle 0x1400945cf
mov esi, edi
mov rbx, qword [rbp + 0x28]
add rbx, rsi
cmp dword [rbx + 0x3c], 2
je 0x1400945d3
mov rcx, rbx
call fcn.140094160
cmp eax, 8
jne 0x1400945c1
mov rcx, rbx
call fcn.140194a80
mov rcx, rax
mov rdx, r14
call fcn.140094480
test al, al
jne 0x1400945d3
inc edi
add rsi, 0x98
cmp edi, dword [rbp + 0x68]
jl 0x140094590
xor al, al
jmp 0x1400945d5
mov al, 1
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
add rsp, 0x30
pop r14
pop rdi
pop rsi
ret
Function at 0x1400954f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa0
mov rax, qword [0x140298cb8]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov rdi, rcx
mov qword [rsp + 0x48], rcx
lea rcx, [rsp + 0x70]
call fcn.140091f90
nop
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140095220
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x140095580
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009557b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009557b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401f41fc
xor r13d, r13d
mov qword [rsp + 0x80], r13
mov qword [rsp + 0x88], 0xf
mov byte [rsp + 0x70], r13b
mov r9, qword [0x14029d5c8]
mov r12, qword [r9 + 8]
lea r8, [rsp + 0x50]
mov r14, qword [rsp + 0x50]
mov r15, qword [rsp + 0x68]
cmp r15, 0x10
cmovae r8, r14
movabs rdx, 0xcbf29ce484222325
mov ecx, r13d
mov rsi, qword [rsp + 0x60]
test rsi, rsi
je 0x1400955f4
movabs r10, 0x100000001b3
nop
movzx eax, byte [rcx + r8]
xor rdx, rax
imul rdx, r10
inc rcx
cmp rcx, rsi
jb 0x1400955e0
mov rcx, qword [r9 + 0x30]
and rcx, rdx
add rcx, rcx
mov rax, qword [r9 + 0x18]
mov rbx, qword [rax + rcx*8 + 8]
cmp rbx, r12
je 0x1400956f6
mov rbp, qword [rax + rcx*8]
lea rdx, [rbx + 0x10]
cmp qword [rbx + 0x28], 0x10
jb 0x140095623
mov rdx, qword [rbx + 0x10]
lea rcx, [rsp + 0x50]
cmp r15, 0x10
cmovae rcx, r14
cmp rsi, qword [rbx + 0x20]
jne 0x140095642
mov r8, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140095651
cmp rbx, rbp
je 0x1400956f6
mov rbx, qword [rbx + 8]
jmp 0x140095614
test rbx, rbx
je 0x1400956f6
cmp rbx, r12
je 0x1400956f6
movabs rax, 0x7fffffffffffffff
sub rax, rsi
cmp rax, 1
jb 0x140095735
lea r9, [rsp + 0x50]
cmp r15, 0x10
cmovae r9, r14
mov qword [rsp + 0x30], 1
lea rax, [0x1402044f4]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
lea r8, [rsp + 0x50]
movzx edx, byte [rsp + 0x40]
mov rcx, rdi
call fcn.140003c70
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140095707
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400956ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400956ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401f41fc
jmp 0x140095707
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov rax, rdi
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.1401f42a0
mov rbx, qword [rsp + 0xf0]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140003280
nop
int3
Function at 0x1400a20c0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x30
mov rdi, rcx
xor eax, eax
mov qword [rcx], rax
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], 0xf
mov byte [rcx], al
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], rax
mov qword [rcx + 0x30], rax
mov qword [rcx + 0x38], rax
mov qword [rcx + 0x48], rax
mov qword [rcx + 0x50], 0xf
mov byte [rcx + 0x38], al
mov qword [rcx + 0x58], rax
mov qword [rcx + 0x68], rax
mov qword [rcx + 0x70], 0xf
mov byte [rcx + 0x58], al
mov qword [rcx + 0x78], rax
mov qword [rcx + 0x88], rax
mov qword [rcx + 0x90], 0xf
mov byte [rcx + 0x78], al
lea rcx, str.GPB_OBJC_EXPECTED_PACKAGE_PREFIXES
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rbx, 0xffffffffffffffff
test rax, rax
je 0x1400a2166
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400a2151
mov rdx, rax
mov rcx, rdi
call fcn.140003300
lea rcx, str.GPB_OBJC_EXPECTED_PACKAGE_PREFIXES_SUPPRESSIONS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x1400a21af
mov qword [rsp + 0x20], rax
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400a2180
mov qword [rsp + 0x28], rbx
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea r8, [rdi + 0x20]
lea rdx, [0x140208494]
lea rcx, [rsp + 0x20]
call fcn.140142a70
nop
mov rax, rdi
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
Function at 0x140140ee0
Capabilities:
Encode data using base64

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x70
mov rax, qword [0x140298cb8]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rsi, r8
mov r11, rcx
test edx, edx
jle 0x140141131
lea r10d, [rdx*4]
lea eax, [r9 + r9*2]
cmp r10d, eax
jg 0x140141131
mov rbx, r8
movsxd r8, r9d
add r8, rbx
movsxd rdi, edx
add rdi, rcx
lea rdx, [rdi - 3]
mov r9, qword [rsp + 0xb0]
cmp rcx, rdx
jae 0x140140f95
nop word [rax + rax]
mov ecx, dword [r11]
bswap ecx
shr ecx, 8
mov eax, ecx
shr rax, 0x12
movzx eax, byte [rax + r9]
mov byte [rbx], al
and ecx, 0x3ffff
mov eax, ecx
shr rax, 0xc
movzx eax, byte [rax + r9]
mov byte [rbx + 1], al
and ecx, 0xfff
mov eax, ecx
shr rax, 6
movzx eax, byte [rax + r9]
mov byte [rbx + 2], al
and ecx, 0x3f
movzx ecx, byte [rcx + r9]
mov byte [rbx + 3], cl
add rbx, 4
add r11, 3
cmp r11, rdx
jb 0x140140f40
sub r8d, ebx
sub edi, r11d
mov ecx, edi
je 0x14014112b
sub ecx, 1
je 0x1401410e7
sub ecx, 1
je 0x140141081
cmp ecx, 1
je 0x140141011
mov r9d, 0x88b
lea r8, str..._third_partyprotobuf_srcgoogleprotobuf_stubs_strutil.cc
mov edx, 3
lea rcx, [rsp + 0x28]
call fcn.14013f680
nop
lea rdx, str.Logic_problem__szsrc_
mov rcx, rax
call fcn.14013fb20
mov rcx, rax
mov edx, edi
call fcn.14013f940
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14013f7a0
nop
lea rcx, [rsp + 0x28]
call fcn.14013f730
sub ebx, esi
mov eax, ebx
jmp 0x140141133
lea eax, [r8 - 4]
test eax, eax
js 0x140141131
movzx eax, word [r11 + 1]
ror ax, 8
movzx ecx, ax
movzx eax, byte [r11]
shl eax, 0x10
add ecx, eax
mov eax, ecx
shr rax, 0x12
movzx eax, byte [rax + r9]
mov byte [rbx], al
and ecx, 0x3ffff
mov edx, ecx
mov eax, ecx
shr rax, 0xc
movzx eax, byte [rax + r9]
mov byte [rbx + 1], al
and edx, 0xfff
mov eax, edx
shr rax, 6
movzx eax, byte [rax + r9]
mov byte [rbx + 2], al
and edx, 0x3f
movzx eax, byte [rdx + r9]
mov byte [rbx + 3], al
add rbx, 4
sub ebx, esi
mov eax, ebx
jmp 0x140141133
sub r8d, 3
js 0x140141131
movzx eax, word [r11]
ror ax, 8
movzx ecx, ax
mov eax, ecx
shr rax, 0xa
movzx eax, byte [rax + r9]
mov byte [rbx], al
and ecx, 0x3ff
mov eax, ecx
shr rax, 4
movzx eax, byte [rax + r9]
mov byte [rbx + 1], al
and ecx, 0xf
shl ecx, 2
movzx ecx, byte [rcx + r9]
mov byte [rbx + 2], cl
add rbx, 3
cmp byte [rsp + 0xb8], 0
je 0x14014112b
lea eax, [r8 - 1]
test eax, eax
js 0x140141131
mov byte [rbx], 0x3d
inc rbx
sub ebx, esi
mov eax, ebx
jmp 0x140141133
sub r8d, 2
js 0x140141131
movzx ecx, byte [r11]
mov eax, ecx
shr rax, 2
movzx eax, byte [rax + r9]
mov byte [rbx], al
and ecx, 3
shl ecx, 4
movzx ecx, byte [rcx + r9]
mov byte [rbx + 1], cl
add rbx, 2
cmp byte [rsp + 0xb8], 0
je 0x14014112b
lea ecx, [r8 - 2]
test ecx, ecx
js 0x140141131
mov word [rbx], 0x3d3d
add rbx, 2
sub ebx, esi
mov eax, ebx
jmp 0x140141133
xor eax, eax
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1401f42a0
add rsp, 0x70
pop rdi
pop rsi
pop rbx
ret
Function at 0x140167440
Capabilities:
Hash data using fnv

Disassembly:
movsxd r8, dword [rdx + 8]
mov r9, qword [rdx]
mov rdx, qword [rcx + 8]
imul rax, r9, 0x100011b
imul r10, r8, 0x1000193
xor r10, rax
and r10, qword [rcx + 0x30]
shl r10, 4
add r10, qword [rcx + 0x18]
mov rax, qword [r10 + 8]
cmp rax, rdx
je 0x14016749c
mov rcx, qword [r10]
cmp r9, qword [rax + 0x10]
jne 0x140167480
cmp r8d, dword [rax + 0x18]
je 0x14016748b
cmp rax, rcx
je 0x14016749c
mov rax, qword [rax + 8]
jmp 0x140167474
test rax, rax
cmove rax, rdx
cmp rax, rdx
je 0x14016749c
mov rax, qword [rax + 0x20]
ret
xor eax, eax
ret
Function at 0x140169d80
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x40
mov rbx, r8
mov rsi, rdx
mov rbp, rcx
xor r9d, r9d
mov r10, qword [r8 + 8]
mov rdx, qword [r8 + 0x10]
add rdx, r10
cmp r10, rdx
jae 0x140169dd3
nop word [rax + rax]
lea r9, [r9 + r9*4]
movsx rax, byte [r10]
add r9, rax
inc r10
cmp r10, rdx
jb 0x140169dc0
imul r14, qword [r8], 0x1000193
xor r14, r9
mov r9, r14
lea rdx, [rsp + 0x20]
call fcn.1401688e0
mov rax, qword [rsp + 0x28]
test rax, rax
je 0x140169e00
mov qword [rsi], rax
mov byte [rsi + 8], 0
jmp 0x140169f9e
movabs rax, 0x555555555555555
cmp qword [rbp + 0x10], rax
je 0x140169fc0
lea r12, [rbp + 8]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], 0
mov ecx, 0x30
call fcn.1401f41c0
mov rdi, rax
mov qword [rsp + 0x38], rax
movups xmm0, xmmword [rbx]
movups xmmword [rax + 0x10], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rax + 0x20], xmm1
mov r9, qword [rbp + 0x10]
lea rcx, [r9 + 1]
movss xmm3, dword [rbp]
xorps xmm0, xmm0
test rcx, rcx
js 0x140169e63
cvtsi2ss xmm0, rcx
jmp 0x140169e78
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rbx, qword [rbp + 0x38]
xorps xmm2, xmm2
test rbx, rbx
js 0x140169e8b
cvtsi2ss xmm2, rbx
jmp 0x140169ea3
mov rcx, rbx
shr rcx, 1
mov rax, rbx
and eax, 1
or rcx, rax
cvtsi2ss xmm2, rcx
addss xmm2, xmm2
movaps xmm1, xmm0
divss xmm1, xmm2
comiss xmm1, xmm3
seta al
test al, al
je 0x140169f43
divss xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_ceilf
xor ecx, ecx
movss xmm1, dword [0x14020afc4]
comiss xmm0, xmm1
jb 0x140169ee6
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x140169ee6
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x140169f18
cmp rbx, 0x200
jae 0x140169f15
lea rbx, [rbx*8]
cmp rbx, rcx
jae 0x140169f18
mov rbx, rcx
mov rdx, rbx
mov rcx, rbp
call fcn.140193c60
mov r9, r14
lea r8, [rdi + 0x10]
lea rdx, [rsp + 0x30]
mov rcx, rbp
call fcn.1401688e0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
mov r9, qword [rbp + 0x10]
mov rdx, qword [rsp + 0x20]
mov r8, qword [rdx + 8]
lea rax, [r9 + 1]
mov qword [rbp + 0x10], rax
mov qword [rdi], rdx
mov qword [rdi + 8], r8
mov qword [r8], rdi
mov qword [rdx + 8], rdi
mov rcx, qword [rbp + 0x18]
mov rax, qword [rbp + 0x30]
and rax, r14
add rax, rax
mov r9, qword [rcx + rax*8]
cmp r9, qword [r12]
jne 0x140169f80
mov qword [rcx + rax*8], rdi
jmp 0x140169f92
cmp r9, rdx
jne 0x140169f8b
mov qword [rcx + rax*8], rdi
jmp 0x140169f97
cmp qword [rcx + rax*8 + 8], r8
jne 0x140169f97
mov qword [rcx + rax*8 + 8], rdi
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x40
pop r15
pop r14
pop r12
ret
lea rcx, str.unordered_map_set_too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3
Function at 0x140169fd0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x40
mov rbx, r8
mov rsi, rdx
mov rbp, rcx
xor r9d, r9d
mov r10, qword [r8 + 8]
mov rdx, qword [r8 + 0x10]
add rdx, r10
cmp r10, rdx
jae 0x14016a023
nop word [rax + rax]
lea r9, [r9 + r9*4]
movsx rax, byte [r10]
add r9, rax
inc r10
cmp r10, rdx
jb 0x14016a010
imul r14, qword [r8], 0x1000193
xor r14, r9
mov r9, r14
lea rdx, [rsp + 0x20]
call fcn.1401688e0
mov rax, qword [rsp + 0x28]
test rax, rax
je 0x14016a050
mov qword [rsi], rax
mov byte [rsi + 8], 0
jmp 0x14016a1f8
movabs rax, 0x492492492492492
cmp qword [rbp + 0x10], rax
je 0x14016a21a
lea r12, [rbp + 8]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], 0
mov ecx, 0x38
call fcn.1401f41c0
mov rdi, rax
mov qword [rsp + 0x38], rax
movups xmm0, xmmword [rbx]
movups xmmword [rax + 0x10], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rax + 0x20], xmm1
movsd xmm0, qword [rbx + 0x20]
movsd qword [rax + 0x30], xmm0
mov r9, qword [rbp + 0x10]
lea rcx, [r9 + 1]
movss xmm3, dword [rbp]
xorps xmm0, xmm0
test rcx, rcx
js 0x14016a0bd
cvtsi2ss xmm0, rcx
jmp 0x14016a0d2
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
mov rbx, qword [rbp + 0x38]
xorps xmm2, xmm2
test rbx, rbx
js 0x14016a0e5
cvtsi2ss xmm2, rbx
jmp 0x14016a0fd
mov rcx, rbx
shr rcx, 1
mov rax, rbx
and eax, 1
or rcx, rax
cvtsi2ss xmm2, rcx
addss xmm2, xmm2
movaps xmm1, xmm0
divss xmm1, xmm2
comiss xmm1, xmm3
seta al
test al, al
je 0x14016a19d
divss xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_ceilf
xor ecx, ecx
movss xmm1, dword [0x14020afc4]
comiss xmm0, xmm1
jb 0x14016a140
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x14016a140
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x14016a172
cmp rbx, 0x200
jae 0x14016a16f
lea rbx, [rbx*8]
cmp rbx, rcx
jae 0x14016a172
mov rbx, rcx
mov rdx, rbx
mov rcx, rbp
call fcn.140193c60
mov r9, r14
lea r8, [rdi + 0x10]
lea rdx, [rsp + 0x30]
mov rcx, rbp
call fcn.1401688e0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
mov r9, qword [rbp + 0x10]
mov rdx, qword [rsp + 0x20]
mov r8, qword [rdx + 8]
lea rax, [r9 + 1]
mov qword [rbp + 0x10], rax
mov qword [rdi], rdx
mov qword [rdi + 8], r8
mov qword [r8], rdi
mov qword [rdx + 8], rdi
mov rcx, qword [rbp + 0x18]
mov rax, qword [rbp + 0x30]
and rax, r14
add rax, rax
mov r9, qword [rcx + rax*8]
cmp r9, qword [r12]
jne 0x14016a1da
mov qword [rcx + rax*8], rdi
jmp 0x14016a1ec
cmp r9, rdx
jne 0x14016a1e5
mov qword [rcx + rax*8], rdi
jmp 0x14016a1f1
cmp qword [rcx + rax*8 + 8], r8
jne 0x14016a1f1
mov qword [rcx + rax*8 + 8], rdi
mov qword [rsi], rdi
mov byte [rsi + 8], 1
mov rax, rsi
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x40
pop r15
pop r14
pop r12
ret
lea rcx, str.unordered_map_set_too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3
Function at 0x140183930
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x60
mov r12, r8
mov r15, rdx
mov rsi, rcx
lea rdi, [rcx + 0xd8]
xor r9d, r9d
lea r8, [rsp + 0x90]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
je 0x140183b37
xor ebp, ebp
cmp dword [rsp + 0x90], ebp
je 0x140183a4c
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x28], 4
mov rax, qword [rsi + 0xe8]
mov rbx, qword [rax]
cmp rbx, rax
je 0x140183a36
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [rbx + 0x20]
mov rcx, qword [rdx + 0x18]
cmp qword [rcx + 0x18], 0x10
jb 0x1401839c2
mov rcx, qword [rcx]
cmp byte [rdx + 0x43], 0
je 0x1401839d7
mov r8, qword [rdx + 0x60]
test r8, r8
jne 0x1401839db
mov r8, qword [rdx + 0x28]
jmp 0x1401839db
mov r8, qword [rdx + 0x50]
mov rax, rbp
test rcx, rcx
je 0x1401839f9
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1401839f0
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rdx
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
lea rcx, [rsi + 0x90]
call fcn.140169d80
mov rax, qword [rbx]
mov rbx, rax
cmp rax, qword [rsi + 0xe8]
jne 0x1401839b0
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x140183b37
movups xmm1, xmmword [r12]
mov rdx, rbp
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r8, xmm0
movq rcx, xmm1
add r8, rcx
cmp rcx, r8
jae 0x140183a83
nop
lea rdx, [rdx + rdx*4]
movsx rax, byte [rcx]
add rdx, rax
inc rcx
cmp rcx, r8
jb 0x140183a70
imul rcx, r15, 0x1000193
xor rcx, rdx
and rcx, qword [rsi + 0xc0]
add rcx, rcx
mov rax, qword [rsi + 0xa8]
mov rbx, qword [rax + rcx*8 + 8]
mov rsi, qword [rsi + 0x98]
cmp rbx, rsi
je 0x140183b1b
mov rdi, qword [rax + rcx*8]
cmp r15, qword [rbx + 0x10]
jne 0x140183b02
movups xmm1, xmmword [rbx + 0x18]
movaps xmmword [rsp + 0x30], xmm1
movups xmm0, xmmword [r12]
movaps xmmword [rsp + 0x20], xmm0
psrldq xmm0, 8
movq r8, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp r8, rax
jne 0x140183b02
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x30]
cmp rcx, rdx
je 0x140183b0d
test r8, r8
jle 0x140183b0d
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140183b0d
cmp rbx, rdi
je 0x140183b1b
mov rbx, qword [rbx + 8]
jmp 0x140183ab3
test rbx, rbx
je 0x140183b1b
cmp rbx, rsi
je 0x140183b1b
mov rbp, qword [rbx + 0x28]
mov rax, rbp
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
Function at 0x140183ba0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x60
mov r12, r8
mov r15, rdx
mov rsi, rcx
lea rdi, [rcx + 0x88]
xor r9d, r9d
lea r8, [rsp + 0x90]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
je 0x140183da4
xor ebp, ebp
cmp dword [rsp + 0x90], ebp
je 0x140183cb5
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x28], 4
mov rax, qword [rsi + 0xe8]
mov rbx, qword [rax]
cmp rbx, rax
je 0x140183c9f
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [rbx + 0x20]
mov rcx, qword [rdx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x140183c32
mov rcx, qword [rcx]
cmp byte [rdx + 0x43], 0
je 0x140183c47
mov r8, qword [rdx + 0x60]
test r8, r8
jne 0x140183c4b
mov r8, qword [rdx + 0x28]
jmp 0x140183c4b
mov r8, qword [rdx + 0x50]
mov rax, rbp
test rcx, rcx
je 0x140183c69
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140183c60
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rdx
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
lea rcx, [rsi + 0x40]
call fcn.140169d80
mov rax, qword [rbx]
mov rbx, rax
cmp rax, qword [rsi + 0xe8]
jne 0x140183c20
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x140183da4
movups xmm1, xmmword [r12]
mov rdx, rbp
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r8, xmm0
movq rcx, xmm1
add r8, rcx
cmp rcx, r8
jae 0x140183cf3
nop dword [rax + rax]
lea rdx, [rdx + rdx*4]
movsx rax, byte [rcx]
add rdx, rax
inc rcx
cmp rcx, r8
jb 0x140183ce0
imul rcx, r15, 0x1000193
xor rcx, rdx
and rcx, qword [rsi + 0x70]
add rcx, rcx
mov rax, qword [rsi + 0x58]
mov rbx, qword [rax + rcx*8 + 8]
mov rsi, qword [rsi + 0x48]
cmp rbx, rsi
je 0x140183d88
mov rdi, qword [rax + rcx*8]
nop word [rax + rax]
cmp r15, qword [rbx + 0x10]
jne 0x140183d6f
movups xmm1, xmmword [rbx + 0x18]
movaps xmmword [rsp + 0x30], xmm1
movups xmm0, xmmword [r12]
movaps xmmword [rsp + 0x20], xmm0
psrldq xmm0, 8
movq r8, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp r8, rax
jne 0x140183d6f
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x30]
cmp rcx, rdx
je 0x140183d7a
test r8, r8
jle 0x140183d7a
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140183d7a
cmp rbx, rdi
je 0x140183d88
mov rbx, qword [rbx + 8]
jmp 0x140183d20
test rbx, rbx
je 0x140183d88
cmp rbx, rsi
je 0x140183d88
mov rbp, qword [rbx + 0x28]
mov rax, rbp
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
Function at 0x140183e50
Capabilities:
Hash data using fnv

Disassembly:
mov r9, qword [rcx + 0xe8]
movsxd rax, r8d
imul r10, rax, 0x1000193
imul rax, rdx, 0x100011b
xor r10, rax
and r10, qword [rcx + 0x110]
shl r10, 4
add r10, qword [rcx + 0xf8]
mov rax, qword [r10 + 8]
cmp rax, r9
je 0x140183eb8
mov rcx, qword [r10]
nop dword [rax]
cmp rdx, qword [rax + 0x10]
jne 0x140183e9c
cmp r8d, dword [rax + 0x18]
je 0x140183ea7
cmp rax, rcx
je 0x140183eb8
mov rax, qword [rax + 8]
jmp 0x140183e90
test rax, rax
cmove rax, r9
cmp rax, r9
je 0x140183eb8
mov rax, qword [rax + 0x20]
ret
xor eax, eax
ret

Function at 0x1401841a0
Capabilities:
Hash data using fnv

Disassembly:
push rsi
sub rsp, 0x50
movups xmm1, xmmword [r9]
mov qword [rsp + 0x60], rbx
mov rsi, rdx
mov qword [rsp + 0x68], rbp
mov rdx, rcx
mov qword [rsp + 0x78], r12
movq r11, xmm1
mov r12, r9
mov qword [rsp + 0x48], r14
xor r14d, r14d
mov qword [rsp + 0x40], r15
movdqa xmm0, xmm1
mov rbp, r8
psrldq xmm0, 8
mov r10d, r14d
movq r9, xmm0
add r9, r11
cmp r11, r9
jae 0x140184203
movsx rax, byte [r11]
lea r10, [r10 + r10*4]
add r10, rax
inc r11
cmp r11, r9
jb 0x1401841f0
mov rax, qword [rdx + 0x18]
mov r15, qword [rdx + 8]
imul rcx, rbp, 0x1000193
mov qword [rsp + 0x70], rdi
xor rcx, r10
and rcx, qword [rdx + 0x30]
add rcx, rcx
mov rbx, qword [rax + rcx*8 + 8]
cmp rbx, r15
je 0x14018428f
mov rdi, qword [rax + rcx*8]
nop
cmp rbp, qword [rbx + 0x10]
jne 0x14018427f
movups xmm1, xmmword [rbx + 0x18]
movups xmm0, xmmword [r12]
movaps xmmword [rsp + 0x30], xmm1
movaps xmmword [rsp + 0x20], xmm0
psrldq xmm0, 8
psrldq xmm1, 8
movq r8, xmm0
movq rax, xmm1
cmp r8, rax
jne 0x14018427f
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x30]
cmp rcx, rdx
je 0x14018428a
test r8, r8
jle 0x14018428a
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14018428a
cmp rbx, rdi
je 0x14018428f
mov rbx, qword [rbx + 8]
jmp 0x140184230
test rbx, rbx
jne 0x140184292
mov rbx, r15
movups xmm1, xmmword [0x14029e3b8]
mov r12, qword [rsp + 0x78]
lea rax, [rbx + 0x28]
mov rdi, qword [rsp + 0x70]
cmp rbx, r15
mov r15, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x68]
cmovne r14, rax
mov rbx, qword [rsp + 0x60]
test r14, r14
jne 0x1401842c7
movups xmm0, xmm1
jmp 0x1401842cb
movups xmm0, xmmword [r14]
mov r14, qword [rsp + 0x48]
movd eax, xmm0
cmp eax, dword [rsp + 0x80]
mov rax, rsi
je 0x1401842e9
movups xmmword [rsi], xmm1
add rsp, 0x50
pop rsi
ret
movups xmmword [rsi], xmm0
add rsp, 0x50
pop rsi
ret

Function at 0x140184990
Capabilities:
Hash data using fnv

Disassembly:
mov rax, qword [rcx + 0x10]
mov r10, rcx
mov r9, qword [rax + 0x90]
movsxd rax, edx
imul r8, rax, 0x1000193
imul rax, rcx, 0x100011b
mov rcx, qword [r9 + 0x138]
xor r8, rax
and r8, qword [r9 + 0x150]
shl r8, 4
add rcx, r8
mov r8, qword [r9 + 0x128]
mov rax, qword [rcx + 8]
cmp rax, r8
je 0x140184a07
mov rcx, qword [rcx]
nop word [rax + rax]
cmp r10, qword [rax + 0x10]
jne 0x1401849eb
cmp edx, dword [rax + 0x18]
je 0x1401849f6
cmp rax, rcx
je 0x140184a07
mov rax, qword [rax + 8]
jmp 0x1401849e0
test rax, rax
cmove rax, r8
cmp rax, r8
je 0x140184a07
mov rax, qword [rax + 0x20]
ret
xor eax, eax
ret