joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14005e530
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x40
mov rdi, rcx
mov rcx, qword [rcx + 0x1050]
test rcx, rcx
je 0x14005e727
mov rdx, qword [rdi + 0x488]
test rdx, rdx
je 0x14005e727
cmp qword [rdi + 0x20], 0
je 0x14005e701
mov qword [rsp + 0x60], 0
mov rax, qword [0x140203310]
xor r9d, r9d
lea r8, [rsp + 0x60]
mov rcx, qword [rcx + 0x18]
call rax
test eax, eax
jne 0x14005e701
mov rbp, qword [rsp + 0x60]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
xor esi, esi
mov qword [rsp + 0x30], rsi
test rbp, rbp
je 0x14005e625
movabs rax, 0x7fffffffffffffff
cmp rbp, rax
ja 0x14005e740
cmp rbp, 0x1000
jb 0x14005e5f5
lea rcx, [rbp + 0x27]
cmp rcx, rbp
jbe 0x14005e746
call fcn.140116d14
test rax, rax
je 0x14005e73a
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14005e600
mov rcx, rbp
call fcn.140116d14
mov rbx, rax
mov qword [rsp + 0x20], rbx
lea rsi, [rbx + rbp]
mov qword [rsp + 0x30], rsi
mov r8, rbp
xor edx, edx
mov rcx, rbx
call fcn.140119530
mov r14, rsi
mov qword [rsp + 0x28], rsi
jmp 0x14005e62f
mov r14, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
mov r10, qword [0x140203310]
mov rax, qword [rdi + 0x1050]
mov r9, rbx
lea r8, [rsp + 0x60]
mov rdx, qword [rdi + 0x488]
mov rcx, qword [rax + 0x18]
call r10
test eax, eax
jne 0x14005e6cd
lea rcx, [rdi + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x14005e665
mov rcx, qword [rcx]
lea rdx, [0x14014dfb8]
call fcn.140123fac
mov rbp, rax
test rax, rax
je 0x14005e694
sub r14, rbx
mov r9, rax
mov r8, r14
mov edx, 1
mov rcx, rbx
call fcn.140124cf8
cmp rax, r14
je 0x14005e6c4
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Failed_to_write_pipeline_cache_data_to_disk._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
test rbp, rbp
je 0x14005e6cd
mov rcx, rbp
call fcn.140123e8c
nop
test rbx, rbx
je 0x14005e701
sub rsi, rbx
mov rax, rbx
cmp rsi, 0x1000
jb 0x14005e6f6
add rsi, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e73a
mov rdx, rsi
mov rcx, rbx
call fcn.140116d50
mov rcx, qword [rdi + 0x1050]
xor r8d, r8d
mov rdx, qword [rdi + 0x488]
mov rcx, qword [rcx + 0x18]
call qword [0x1402031f8]
mov qword [rdi + 0x488], 0
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
add rsp, 0x40
pop r14
pop rdi
pop rsi
ret
call fcn.14011d39c
int3
call fcn.140002b50
int3
call fcn.140001a90
int3
Function at 0x14005e750
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x40
mov rdi, rcx
mov rcx, qword [rcx + 0x1050]
test rcx, rcx
je 0x14005e947
mov rdx, qword [rdi + 0x490]
test rdx, rdx
je 0x14005e947
cmp qword [rdi + 0x40], 0
je 0x14005e921
mov qword [rsp + 0x60], 0
mov rax, qword [0x140203970]
xor r9d, r9d
lea r8, [rsp + 0x60]
mov rcx, qword [rcx + 0x18]
call rax
test eax, eax
jne 0x14005e921
mov rbp, qword [rsp + 0x60]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
xor esi, esi
mov qword [rsp + 0x30], rsi
test rbp, rbp
je 0x14005e845
movabs rax, 0x7fffffffffffffff
cmp rbp, rax
ja 0x14005e960
cmp rbp, 0x1000
jb 0x14005e815
lea rcx, [rbp + 0x27]
cmp rcx, rbp
jbe 0x14005e966
call fcn.140116d14
test rax, rax
je 0x14005e95a
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14005e820
mov rcx, rbp
call fcn.140116d14
mov rbx, rax
mov qword [rsp + 0x20], rbx
lea rsi, [rbx + rbp]
mov qword [rsp + 0x30], rsi
mov r8, rbp
xor edx, edx
mov rcx, rbx
call fcn.140119530
mov r14, rsi
mov qword [rsp + 0x28], rsi
jmp 0x14005e84f
mov r14, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
mov r10, qword [0x140203970]
mov rax, qword [rdi + 0x1050]
mov r9, rbx
lea r8, [rsp + 0x60]
mov rdx, qword [rdi + 0x490]
mov rcx, qword [rax + 0x18]
call r10
test eax, eax
jne 0x14005e8ed
lea rcx, [rdi + 0x30]
cmp qword [rcx + 0x18], 0x10
jb 0x14005e885
mov rcx, qword [rcx]
lea rdx, [0x14014dfb8]
call fcn.140123fac
mov rbp, rax
test rax, rax
je 0x14005e8b4
sub r14, rbx
mov r9, rax
mov r8, r14
mov edx, 1
mov rcx, rbx
call fcn.140124cf8
cmp rax, r14
je 0x14005e8e4
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Failed_to_write_pipeline_cache_data_to_disk._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
test rbp, rbp
je 0x14005e8ed
mov rcx, rbp
call fcn.140123e8c
nop
test rbx, rbx
je 0x14005e921
sub rsi, rbx
mov rax, rbx
cmp rsi, 0x1000
jb 0x14005e916
add rsi, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e95a
mov rdx, rsi
mov rcx, rbx
call fcn.140116d50
mov rcx, qword [rdi + 0x1050]
xor r8d, r8d
mov rdx, qword [rdi + 0x490]
mov rcx, qword [rcx + 0x18]
call qword [0x140203968]
mov qword [rdi + 0x490], 0
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
add rsp, 0x40
pop r14
pop rdi
pop rsi
ret
call fcn.14011d39c
int3
call fcn.140002b50
int3
call fcn.140001a90
int3
Function at 0x14005e970
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov rdi, qword [rcx + 0x2f8]
mov rsi, rcx
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x14005e9c5
nop word [rax + rax]
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x14005e9bd
mov rcx, qword [rsi + 0x1050]
xor r8d, r8d
mov rcx, qword [rcx + 0x18]
call qword [0x1402031f0]
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x14005e9a0
mov rdi, qword [rsi + 0x338]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x14005e9f9
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x14005e9f1
mov rcx, qword [rsi + 0x1050]
xor r8d, r8d
mov rcx, qword [rcx + 0x18]
call qword [0x1402031f0]
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x14005e9d4
mov rdi, qword [rsi + 0x378]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x14005ea35
nop dword [rax + rax]
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x14005ea2d
mov rcx, qword [rsi + 0x1050]
xor r8d, r8d
mov rcx, qword [rcx + 0x18]
call qword [0x1402031f0]
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x14005ea10
mov rax, qword [rsi + 0x300]
lea rcx, [rsi + 0x2f0]
add qword [rsi + 0x3b0], rax
mov rax, qword [rsi + 0x340]
add qword [rsi + 0x3b8], rax
mov rax, qword [rsi + 0x380]
add qword [rsi + 0x3c0], rax
call fcn.14001b520
lea rcx, [rsi + 0x330]
call fcn.14001b520
lea rcx, [rsi + 0x370]
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop rdi
jmp fcn.14001b520

Function at 0x1400604f0
Capabilities:
Write file on windows

Disassembly:
push rsi
sub rsp, 0x30
mov rsi, qword [0x140202f20]
test rsi, rsi
je 0x140060569
mov qword [rsp + 0x48], rbx
lea rbx, str.HEARTBEAT_n
mov qword [rsp + 0x50], rbp
xor ebp, ebp
mov qword [rsp + 0x58], rdi
mov edi, 0xa
nop
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], rbp
mov r8d, edi
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14006055a
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
je 0x14006055a
mov eax, dword [rsp + 0x40]
test eax, eax
je 0x14006055a
add rbx, rax
sub rdi, rax
jne 0x140060520
mov rbp, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x58]
add rsp, 0x30
pop rsi
ret

Function at 0x140060b30
Capabilities:
Read file on windows

Disassembly:
sub rsp, 0x38
xor eax, eax
lea r8, [rcx + 0x38]
mov qword [rcx + 0x38], rax
lea rdx, [rcx + 0x58]
mov qword [rcx + 0x40], rax
xor r9d, r9d
mov qword [rcx + 0x48], rax
mov rax, qword [rcx + 0x30]
mov qword [rcx + 0x50], rax
mov rcx, qword [rcx + 0x20]
mov qword [rsp + 0x20], r8
mov r8d, 0x400
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x140060b82
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
je 0x140060b82
xor al, al
add rsp, 0x38
ret
mov al, 1
add rsp, 0x38
ret
Function at 0x140060b90
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x40
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor ecx, ecx
mov r9d, 0x400
mov qword [rsp + 0x30], rcx
mov r8d, eax
mov dword [rsp + 0x28], ecx
xor edx, edx
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rcx
mov ecx, 0x1300
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
mov rbx, qword [rsp + 0x50]
mov ecx, 2
call fcn.140121458
mov r8, rbx
lea rdx, str.Fossilize_ERROR:_Error:__s_n
mov rcx, rax
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]

Function at 0x1400617f0
Capabilities:
Read file via mapping

Disassembly:
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
mov rsi, rdx
mov r8, rcx
xor edx, edx
lea ecx, [rdx + 6]
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov rdi, rax
test rax, rax
jne 0x140061847
lea ecx, [rax + 2]
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Failed_to_open_file_mapping_in_replayer._n
call fcn.1400020d0
lea ecx, [rdi + 2]
call fcn.140121458
mov rcx, rax
call fcn.140121814
xor al, al
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
xor r9d, r9d
mov qword [rsp + 0x40], rbx
xor r8d, r8d
mov qword [rsp + 0x20], 0
mov rcx, rdi
lea edx, [r9 + 6]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
test rax, rax
jne 0x1400618a9
lea ecx, [rax + 2]
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Failed_to_map_view_of_file_in_replayer._n
call fcn.1400020d0
lea ecx, [rbx + 2]
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov rbx, qword [rsp + 0x40]
xor al, al
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
cmp dword [rax], 0x19bcde1d
mov qword [0x140202ea8], rbx
jne 0x1400618d8
cmp dword [rax + 0xca4], 0xcac
jb 0x1400618d8
mov eax, dword [rax + 0xca8]
test eax, eax
je 0x1400618d8
mov ecx, eax
dec rax
test rcx, rax
je 0x140061920
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Control_block_is_corrupt._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x140202ea8], 0
mov r8, rsi
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
mov rbx, qword [rsp + 0x40]
test rax, rax
mov rsi, qword [rsp + 0x48]
mov qword [0x140202ec0], rax
setne al
add rsp, 0x30
pop rdi
ret
Function at 0x1400623d0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
mov r10d, dword [rdx + 0x10]
xor r9d, r9d
test r10d, r10d
je 0x1400624e0
mov r11, qword [rdx + 0x18]
movabs rbp, 0x100000001b3
mov rbx, qword [r8 + 0x30]
movabs r14, 0xcbf29ce484222325
mov rdi, qword [r8 + 0x18]
mov rsi, qword [r8 + 8]
nop word [rax + rax]
mov r8, qword [r11 + r9*8]
mov rax, r8
shr rax, 8
movzx edx, al
movzx eax, r8b
xor rax, r14
imul rax, rbp
xor rdx, rax
mov rax, r8
imul rdx, rbp
shr rax, 0x10
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x18
imul rdx, rbp
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x20
imul rdx, rbp
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x28
imul rdx, rbp
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x30
imul rdx, rbp
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x38
imul rdx, rbp
mov rcx, rbx
xor rdx, rax
imul rdx, rbp
and rcx, rdx
add rcx, rcx
mov rax, qword [rdi + rcx*8 + 8]
cmp rax, rsi
je 0x1400624f9
mov rcx, qword [rdi + rcx*8]
cmp r8, qword [rax + 0x10]
je 0x1400624cf
cmp rax, rcx
je 0x1400624f9
mov rax, qword [rax + 8]
cmp r8, qword [rax + 0x10]
jne 0x1400624c0
test rax, rax
je 0x1400624f9
inc r9d
cmp r9d, r10d
jb 0x140062420
mov al, 1
mov rbx, qword [rsp + 0x10]
mov rbp, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x28]
pop r14
ret
xor al, al
jmp 0x1400624e2

Function at 0x140062b10
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
mov rdi, qword [rdx + 0x18]
xor r9d, r9d
mov rbx, r8
mov r10, rdx
cmp dword [rdx + 0x10], r9d
jbe 0x140062c3b
mov qword [rsp + 0x10], rbp
movabs rbp, 0xcbf29ce484222325
mov qword [rsp + 0x18], rsi
movabs rsi, 0x100000001b3
nop dword [rax + rax]
mov r8, qword [rdi + r9*8]
lea r11, [rdi + r9*8]
mov rax, r8
shr rax, 8
movzx edx, al
movzx eax, r8b
xor rax, rbp
imul rax, rsi
xor rdx, rax
mov rax, r8
imul rdx, rsi
shr rax, 0x10
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x18
imul rdx, rsi
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x20
imul rdx, rsi
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x28
imul rdx, rsi
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x30
imul rdx, rsi
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x38
mov rcx, qword [rbx + 0x30]
imul rdx, rsi
xor rdx, rax
imul rdx, rsi
and rcx, rdx
mov rdx, qword [rbx + 8]
shl rcx, 4
add rcx, qword [rbx + 0x18]
mov rax, qword [rcx + 8]
cmp rax, rdx
je 0x140062c1f
mov rcx, qword [rcx]
cmp r8, qword [rax + 0x10]
je 0x140062c0f
nop dword [rax]
cmp rax, rcx
je 0x140062c1f
mov rax, qword [rax + 8]
cmp r8, qword [rax + 0x10]
jne 0x140062c00
test rax, rax
je 0x140062c1f
cmp rax, rdx
je 0x140062c1f
mov rcx, qword [rax + 0x18]
jmp 0x140062c21
xor ecx, ecx
inc r9d
mov qword [r11], rcx
cmp r9d, dword [r10 + 0x10]
jb 0x140062b50
mov rsi, qword [rsp + 0x18]
mov rbp, qword [rsp + 0x10]
mov rbx, qword [rsp + 0x20]
pop rdi
ret
Function at 0x14006a080
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x40
mov rbx, rcx
xor ebp, ebp
mov dword [rcx + 0x4c0], ebp
mov edx, ebp
mov eax, dword [rcx + 0x498]
test eax, eax
je 0x14006a0e7
nop dword [rax]
inc edx
mov eax, edx
imul rcx, rax, 0xd8
add rcx, qword [rbx + 0x648]
mov eax, dword [rbx + 0x120]
mov dword [rcx + 0xc], eax
mov eax, dword [rbx + 0x128]
mov dword [rcx + 0x10], eax
mov eax, dword [rbx + 0x130]
mov dword [rcx + 0x14], eax
mov eax, dword [rbx + 0x498]
cmp edx, eax
jb 0x14006a0b0
mov edi, ebp
test eax, eax
je 0x14006a1ac
lea r14, [0x14006c160]
nop dword [rax + rax]
mov ecx, 0x18
call fcn.140116d14
mov r9, rax
test rax, rax
je 0x14006a122
lea eax, [rdi + 1]
mov dword [r9], eax
mov qword [r9 + 8], rbx
mov qword [r9 + 0x10], r14
jmp 0x14006a125
mov r9, rbp
mov qword [rsp + 0x60], r9
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebp
lea r8, [0x14004dd40]
xor edx, edx
xor ecx, ecx
call fcn.14012508c
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14006a20f
mov rdx, qword [rbx + 0x638]
cmp rdx, qword [rbx + 0x640]
je 0x14006a181
xorps xmm0, xmm0
movaps xmm1, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movups xmmword [rdx], xmm1
add qword [rbx + 0x638], 0x10
jmp 0x14006a193
lea r8, [rsp + 0x30]
lea rcx, [rbx + 0x630]
call fcn.14004d380
nop
cmp dword [rsp + 0x38], 0
jne 0x14006a226
inc edi
cmp edi, dword [rbx + 0x498]
jb 0x14006a100
lea rcx, [rbx + 0x660]
call fcn.140114068
test eax, eax
jne 0x14006a21e
mov eax, dword [rbx + 0x498]
cmp dword [rbx + 0x4c0], eax
je 0x14006a1f1
nop word [rax + rax]
lea rdx, [rbx + 0x660]
lea rcx, [rbx + 0x510]
call fcn.14011471c
mov eax, dword [rbx + 0x498]
cmp dword [rbx + 0x4c0], eax
jne 0x14006a1d0
lea rcx, [rbx + 0x660]
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
add rsp, 0x40
pop r14
pop rdi
pop rsi
jmp fcn.14011408c
mov dword [rsp + 0x38], ebp
mov ecx, 6
call fcn.1401141d4
nop
mov ecx, eax
call fcn.140114198
int3
call fcn.140124f40
int3
Function at 0x14006bb70
Capabilities:
Terminate process
Write file on windows

Disassembly:
sub rsp, 0x38
mov rax, qword [0x140202f18]
test rax, rax
je 0x14006bb8d
cmp byte [rax + 0x1078], 0
je 0x14006bb8d
mov cl, 1
jmp 0x14006bb8f
xor cl, cl
mov eax, 1
xchg dword [0x140202f28], eax
test eax, eax
jne 0x14006bc98
test cl, cl
je 0x14006bc5c
mov qword [rsp + 0x48], rbx
lea rbx, str.CRASH_n
mov qword [rsp + 0x50], rbp
xor ebp, ebp
mov qword [rsp + 0x58], rsi
mov rsi, qword [0x140202f20]
mov qword [rsp + 0x30], rdi
mov edi, 6
nop dword [rax]
nop word [rax + rax]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], rbp
mov r8d, edi
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14006bc3d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
je 0x14006bc3d
mov eax, dword [rsp + 0x40]
test eax, eax
je 0x14006bc3d
add rbx, rax
sub rdi, rax
jne 0x14006bbe0
mov rbx, qword [0x140202f18]
test rbx, rbx
je 0x14006bc3d
lea rcx, [rbx + 0x648]
call fcn.14005c000
mov rdx, rax
mov rcx, rbx
call fcn.14005c2b0
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.1400628d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Pipeline_compilation_timed_out._n
call fcn.1400020d0
mov ecx, 2
call fcn.140121458
mov rcx, rax
call fcn.140121814
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
add rsp, 0x38
ret
Function at 0x14006f900
Capabilities:
Hash data using fnv

Disassembly:
movzx r9d, byte [r8]
mov r10, rcx
movabs rcx, 0x100000001b3
mov r11, rdx
movabs rax, 0xcbf29ce484222325
xor r9, rax
movzx eax, byte [r8 + 1]
mov rdx, qword [r10 + 0x30]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 2]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 3]
imul r9, rcx
xor r9, rax
imul r9, rcx
and rdx, r9
mov r9, qword [r10 + 8]
shl rdx, 4
add rdx, qword [r10 + 0x18]
mov rax, qword [rdx + 8]
cmp rax, r9
je 0x14006f98c
mov ecx, dword [r8]
mov rdx, qword [rdx]
cmp ecx, dword [rax + 0x10]
je 0x14006f98e
cmp rax, rdx
je 0x14006f98c
mov rax, qword [rax + 8]
cmp ecx, dword [rax + 0x10]
jne 0x14006f970
test rax, rax
cmove rax, r9
mov qword [r11], rax
mov rax, r11
ret
xor eax, eax
test rax, rax
cmove rax, r9
mov qword [r11], rax
mov rax, r11
ret
Function at 0x140070f60
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x140071122
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x40], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.140001960
mov qword [rsi + 0x38], rdi
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x1400710e7
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + 0x11]
movzx r9d, byte [rcx + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rdx, qword [rdx]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x12]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x13]
imul r9, rdi
xor r9, rax
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r10, qword [r11]
cmp r10, rbx
jne 0x140071053
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x1400710d6
mov rax, qword [r11 + 8]
mov r9d, dword [rcx + 0x10]
cmp r9d, dword [rax + 0x10]
jne 0x140071090
mov r10, qword [rax]
cmp r10, rcx
je 0x14007108a
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x1400710d6
mov r8, rax
cmp r10, rax
je 0x1400710b2
nop dword [rax + rax]
mov rax, qword [rax + 8]
mov r8, rax
cmp r9d, dword [rax + 0x10]
je 0x1400710fc
cmp r10, rax
jne 0x1400710a0
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x140071000
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov r10, qword [rax]
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
jmp 0x1400710d6
lea rcx, str.invalid_hash_bucket_count
call fcn.140113d38
int3
Function at 0x140071130
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x1400712f2
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov r8, rbx
mov qword [rsp + 0x40], r14
inc ecx
shl rdi, cl
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.140070da0
mov qword [rsi + 0x38], rdi
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov rcx, qword [rsi + 8]
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x1400712b7
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + 0x11]
movzx r9d, byte [rcx + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rdx, qword [rdx]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x12]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x13]
imul r9, rdi
xor r9, rax
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r10, qword [r11]
cmp r10, rbx
jne 0x140071223
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x1400712a6
mov rax, qword [r11 + 8]
mov r9d, dword [rcx + 0x10]
cmp r9d, dword [rax + 0x10]
jne 0x140071260
mov r10, qword [rax]
cmp r10, rcx
je 0x14007125a
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x1400712a6
mov r8, rax
cmp r10, rax
je 0x140071282
nop dword [rax + rax]
mov rax, qword [rax + 8]
mov r8, rax
cmp r9d, dword [rax + 0x10]
je 0x1400712cc
cmp r10, rax
jne 0x140071270
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x1400711d0
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov r10, qword [rax]
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
jmp 0x1400712a6
lea rcx, str.invalid_hash_bucket_count
call fcn.140113d38
int3