joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140069740
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x80
mov rax, qword [0x14011e7d8]
xor rax, rsp
mov qword [rsp + 0x78], rax
movzx r15d, r9b
mov r12, r8
mov r10d, edx
mov rsi, rcx
mov r8, qword [0x1401a5b60]
mov rax, qword [r8 + 8]
cmp byte [rax + 0x19], 0
jne 0x14006979e
mov edx, dword [rcx + 0xf8]
cmp dword [rax + 0x20], edx
jge 0x140069792
mov rax, qword [rax + 0x10]
jmp 0x140069798
mov r8, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x140069787
cmp byte [r8 + 0x19], 0
jne 0x140069977
mov eax, dword [r8 + 0x20]
cmp dword [rcx + 0xf8], eax
jl 0x140069977
mov rdx, qword [0x1401a5b90]
mov rax, qword [rdx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400697e8
nop word [rax + rax]
cmp dword [rax + 0x20], r10d
jge 0x1400697dc
mov rax, qword [rax + 0x10]
jmp 0x1400697e2
mov rdx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x1400697d0
cmp byte [rdx + 0x19], 0
jne 0x140069977
cmp r10d, dword [rdx + 0x20]
jl 0x140069977
mov r8, qword [r8 + 0x28]
mov rdx, qword [rdx + 0x28]
lea rcx, [rsp + 0x38]
call fcn.14008eca0
nop
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rdx, qword [rsp + 0x38]
movabs r9, 0xcbf29ce484222325
xor r13d, r13d
mov ecx, r13d
mov r8, qword [rsp + 0x48]
test r8, r8
je 0x140069863
movabs r10, 0x100000001b3
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x140069850
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x20]
lea rcx, [rsi + 0x78]
call fcn.1400665e0
mov rcx, qword [rax + 8]
test rcx, rcx
jne 0x140069886
mov rcx, qword [rsi + 0x80]
lea rdi, [rcx + 0x30]
cmp rcx, qword [rsi + 0x80]
cmove rdi, r13
mov rbx, qword [rsi + 0xb8]
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rdx, qword [rsp + 0x38]
mov rcx, rbx
call fcn.140060b80
mov edx, eax
mov r9, rdi
mov r8, r12
mov rcx, rbx
call fcn.1400b1ea0
movzx ebx, al
test r15b, r15b
je 0x1400698d1
test al, al
je 0x140069939
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x140069911
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006990c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006990c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400eaec0
movzx eax, bl
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.1400eafe0
mov rbx, qword [rsp + 0xb8]
add rsp, 0x80
pop r15
pop r13
pop r12
pop rdi
pop rsi
ret
lea rcx, [rsp + 0x38]
call fcn.14008e380
mov r8, rax
lea rdx, str.key_not_found_in_model:__s
lea rcx, [rsp + 0x58]
call fcn.14008eca0
nop
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14006d8d0
lea rdx, [0x14011aac8]
lea rcx, [rsp + 0x20]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rcx, str.invalid_map_K__T__key
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_
int3
Function at 0x140069990
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x60
mov rax, qword [0x14011e7d8]
xor rax, rsp
mov qword [rsp + 0x58], rax
movzx r14d, r9b
mov r15, r8
mov rbx, rdx
mov rsi, rcx
mov r8, rdx
cmp qword [rdx + 0x18], 0x10
jb 0x1400699ca
mov r8, qword [rdx]
movabs r9, 0xcbf29ce484222325
mov rdx, qword [rdx + 0x10]
xor r12d, r12d
mov ecx, r12d
test rdx, rdx
je 0x140069a04
movabs r10, 0x100000001b3
nop dword [rax]
movzx eax, byte [rcx + r8]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, rdx
jb 0x1400699f0
mov r8, rbx
lea rdx, [rsp + 0x20]
lea rcx, [rsi + 0x78]
call fcn.1400665e0
mov rcx, qword [rax + 8]
test rcx, rcx
jne 0x140069a25
mov rcx, qword [rsi + 0x80]
lea rdi, [rcx + 0x30]
cmp rcx, qword [rsi + 0x80]
cmove rdi, r12
mov rsi, qword [rsi + 0xb8]
mov rdx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x140069a48
mov rdx, qword [rbx]
mov rcx, rsi
call fcn.140060b80
mov edx, eax
mov r9, rdi
mov r8, r15
mov rcx, rsi
call fcn.1400b20f0
test r14b, r14b
je 0x140069a69
test al, al
je 0x140069a8b
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1400eafe0
mov rbx, qword [rsp + 0xa8]
add rsp, 0x60
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov rcx, rbx
call fcn.14008e380
mov r8, rax
lea rdx, str.key_not_found_in_model:__s
lea rcx, [rsp + 0x38]
call fcn.14008eca0
nop
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14006d8d0
lea rdx, [0x14011aac8]
lea rcx, [rsp + 0x20]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
Function at 0x140069c20
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x80
mov rax, qword [0x14011e7d8]
xor rax, rsp
mov qword [rsp + 0x78], rax
movzx r15d, r9b
mov r12, r8
mov r10d, edx
mov rsi, rcx
mov r8, qword [0x1401a5b60]
mov rax, qword [r8 + 8]
cmp byte [rax + 0x19], 0
jne 0x140069c7e
mov edx, dword [rcx + 0xf8]
cmp dword [rax + 0x20], edx
jge 0x140069c72
mov rax, qword [rax + 0x10]
jmp 0x140069c78
mov r8, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x140069c67
cmp byte [r8 + 0x19], 0
jne 0x140069e57
mov eax, dword [r8 + 0x20]
cmp dword [rcx + 0xf8], eax
jl 0x140069e57
mov rdx, qword [0x1401a5b90]
mov rax, qword [rdx + 8]
cmp byte [rax + 0x19], 0
jne 0x140069cc8
nop word [rax + rax]
cmp dword [rax + 0x20], r10d
jge 0x140069cbc
mov rax, qword [rax + 0x10]
jmp 0x140069cc2
mov rdx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x140069cb0
cmp byte [rdx + 0x19], 0
jne 0x140069e57
cmp r10d, dword [rdx + 0x20]
jl 0x140069e57
mov r8, qword [r8 + 0x28]
mov rdx, qword [rdx + 0x28]
lea rcx, [rsp + 0x38]
call fcn.14008eca0
nop
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rdx, qword [rsp + 0x38]
movabs r9, 0xcbf29ce484222325
xor r13d, r13d
mov ecx, r13d
mov r8, qword [rsp + 0x48]
test r8, r8
je 0x140069d43
movabs r10, 0x100000001b3
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x140069d30
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x20]
lea rcx, [rsi + 0x78]
call fcn.1400665e0
mov rcx, qword [rax + 8]
test rcx, rcx
jne 0x140069d66
mov rcx, qword [rsi + 0x80]
lea rdi, [rcx + 0x30]
cmp rcx, qword [rsi + 0x80]
cmove rdi, r13
mov rbx, qword [rsi + 0xb8]
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rdx, qword [rsp + 0x38]
mov rcx, rbx
call fcn.140060b80
mov edx, eax
mov r9, rdi
mov r8, r12
mov rcx, rbx
call fcn.1400b23e0
movzx ebx, al
test r15b, r15b
je 0x140069db1
test al, al
je 0x140069e19
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x140069df1
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069dec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140069dec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400eaec0
movzx eax, bl
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.1400eafe0
mov rbx, qword [rsp + 0xb8]
add rsp, 0x80
pop r15
pop r13
pop r12
pop rdi
pop rsi
ret
lea rcx, [rsp + 0x38]
call fcn.14008e380
mov r8, rax
lea rdx, str.key_not_found_in_model:__s
lea rcx, [rsp + 0x58]
call fcn.14008eca0
nop
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14006d8d0
lea rdx, [0x14011aac8]
lea rcx, [rsp + 0x20]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rcx, str.invalid_map_K__T__key
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_
int3
Function at 0x14006af30
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x20
mov r9, rdx
mov rdi, rcx
xor esi, esi
mov qword [rcx + 0x50], rsi
mov qword [rcx + 0x58], rsi
mov qword [rcx + 0x60], rsi
mov qword [rcx + 0x68], rsi
mov qword [rcx + 0x70], rdx
mov dword [rcx + 0x78], esi
mov byte [rcx + 0x7c], 1
mov qword [rcx + 0x80], rsi
mov qword [rcx + 0x88], rsi
mov ecx, 1
mov dword [rdi + 0x90], ecx
mov dword [rdi + 0x94], ecx
mov qword [rdi + 0x98], rsi
mov qword [rdi + 0xa0], rsi
mov qword [rdi + 0xa8], rsi
mov qword [rdi + 0xb0], rsi
mov qword [rdi + 0xb8], rsi
mov qword [rdi + 0xc0], rsi
mov qword [rdi + 0xc8], rsi
mov qword [rdi + 0xd0], rsi
mov qword [rdi + 0xd8], rsi
mov qword [rdi + 0xe0], rsi
mov qword [rdi + 0xe8], rsi
mov qword [rdi + 0xf0], rsi
mov qword [rdi + 0xf8], rsi
mov qword [rdi + 0x100], rsi
mov qword [rdi + 0x108], rsi
mov dword [rdi + 0x1494], 0xffffffff
mov edx, 0x1571
mov dword [rdi + 0x114], edx
lea r8, [rdi + 0x118]
nop dword [rax + rax]
mov eax, edx
shr eax, 0x1e
xor eax, edx
imul edx, eax, 0x6c078965
add edx, ecx
mov dword [r8], edx
inc rcx
lea r8, [r8 + 4]
cmp rcx, 0x270
jb 0x14006b010
mov dword [rdi + 0x110], 0x270
mov byte [rdi + 0x1498], 0
mov rax, qword [r9 + 0x318]
mov qword [rdi + 0x14a0], rax
mov rax, qword [r9 + 0x310]
mov qword [rdi + 0x14a8], rax
mov qword [rdi + 0x14b0], rsi
mov qword [rdi + 0x14b8], rsi
mov qword [rdi + 0x14c0], rsi
mov qword [rdi + 0x14c8], rsi
mov qword [rdi + 0x14d0], rsi
mov qword [rdi + 0x14d8], rsi
mov dword [rdi + 0x14e0], esi
mov qword [rdi + 0x14e8], rsi
mov qword [rdi + 0x14f0], rsi
mov qword [rdi + 0x14f8], rsi
mov qword [rdi + 0x1500], rsi
mov qword [rdi + 0x1508], rsi
mov qword [rdi + 0x1510], rsi
mov qword [rdi + 0x1518], rsi
mov dword [rdi + 0x1520], esi
mov byte [rdi + 0x1524], 0
mov qword [rdi + 0x1528], rsi
mov qword [rdi + 0x1530], rsi
lea rbx, [rdi + 0x1538]
mov qword [rsp + 0x38], rbx
mov qword [rbx], rsi
mov qword [rbx + 8], rsi
mov ecx, 0x40
call fcn.1400eae84
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbx], rax
mov qword [rdi + 0x1548], rsi
mov qword [rdi + 0x1550], rsi
mov qword [rdi + 0x1558], rsi
mov qword [rdi + 0x1560], rsi
mov qword [rdi + 0x1568], rsi
mov qword [rdi + 0x1570], rsi
mov qword [rdi + 0x15d8], rsi
mov qword [rdi + 0x15e0], rsi
mov qword [rdi + 0x15e8], rsi
mov qword [rdi + 0x15f0], rsi
mov qword [rdi + 0x15f8], rsi
mov qword [rdi + 0x1600], rsi
mov qword [rdi + 0x1608], rsi
mov qword [rdi + 0x1610], rsi
mov qword [rdi + 0x1618], rsi
mov qword [rdi + 0x1620], 0xffffffffffffffff
mov rax, rdi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x14006d700
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov r10, qword [rdx + 0x70]
mov rbx, r9
mov qword [rcx], r10
lea r9, [rdx + 0x78]
mov qword [rcx + 8], rdx
mov qword [rcx + 0x18], rdx
mov qword [rcx + 0x20], r8
lea rax, [r10 + 0x30]
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x28], r9
mov eax, dword [r10 + 0x3c]
mov qword [rcx + 0x30], rax
mov eax, dword [r10 + 0x48]
mov qword [rcx + 0x38], rax
mov eax, dword [r10 + 0x4c]
mov qword [rcx + 0x40], rax
mov eax, dword [rdx]
mov qword [rcx + 0x48], rax
mov eax, dword [r10 + 0x40]
mov qword [rcx + 0x50], rax
mov eax, dword [r10 + 0x44]
mov qword [rcx + 0x58], rax
mov eax, dword [r10 + 0x50]
mov qword [rcx + 0x60], rax
mov eax, dword [r10 + 0x50]
imul eax, dword [r10 + 0x44]
mov qword [rcx + 0x68], rax
mov eax, dword [r10 + 0x54]
mov qword [rcx + 0x70], rax
mov eax, dword [r10 + 0x54]
imul eax, dword [r10 + 0x44]
cmp byte [rsp + 0x28], 0
mov qword [rcx + 0x78], rax
mov eax, dword [r10 + 0x5c]
mov qword [rcx + 0x80], rax
mov eax, dword [r10 + 0x60]
mov qword [rcx + 0x88], rax
mov eax, dword [rdx + 0x18]
mov dword [rcx + 0x90], eax
mov eax, dword [rdx + 0x1c]
mov dword [rcx + 0x94], eax
mov eax, dword [rdx + 0x24]
mov dword [rcx + 0x98], eax
mov eax, dword [rdx + 0x28]
mov dword [rcx + 0x9c], eax
mov eax, dword [rdx + 0x2c]
mov dword [rcx + 0xa0], eax
mov eax, dword [rdx + 0x30]
mov dword [rcx + 0xa4], eax
mov eax, dword [r10 + 0x68]
mov dword [rcx + 0xa8], eax
mov eax, dword [r10 + 0x6c]
mov dword [rcx + 0xac], eax
mov r11d, dword [r8]
mov dword [rcx + 0xb0], r11d
je 0x14006d81b
mov eax, dword [rdx + 0x84]
mov dword [rcx + 0xb4], eax
mov dword [rcx + 0xb8], r11d
cmp byte [r9 + 3], 0
je 0x14006d812
xor eax, eax
jmp 0x14006d837
mov eax, dword [r9 + 0xc]
sub eax, r11d
jmp 0x14006d837
mov eax, dword [rdx + 0x8c]
mov dword [rcx + 0xb4], eax
mov eax, dword [rdx + 0x1520]
mov dword [rcx + 0xb8], eax
mov eax, dword [r9 + 8]
mov dword [rcx + 0xbc], eax
mov eax, dword [rdx + 0x20]
mov dword [rcx + 0xc0], eax
movzx eax, byte [rdx + 0x3b]
mov byte [rcx + 0xc4], al
mov eax, dword [rdx + 0x3c]
mov dword [rcx + 0xc8], eax
mov eax, dword [r10 + 0xa0]
mov dword [rcx + 0xcc], eax
lea rax, [rdx + 0x1548]
mov qword [rcx + 0xd8], rax
mov rax, rcx
mov qword [rcx + 0xd0], rbx
mov rbx, qword [rsp + 8]
mov qword [rcx + 0xe0], 0
ret
Function at 0x140073160
Capabilities:
Hash data using fnv

Disassembly:
push rsi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov r9d, 1
bsr r8, rax
mov rsi, rcx
shlx rax, r9, r8
cmp rdx, rax
ja 0x140073322
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, r9
bsr rcx, rax
mov qword [rsp + 0x40], rdi
mov r8, rbx
inc ecx
mov qword [rsp + 0x48], r14
shlx rdi, r9, rcx
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.140071740
mov rcx, qword [rsi + 8]
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rdi
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x1400732e7
mov qword [rsp + 0x38], rbp
movabs rdi, 0x100000001b3
movabs rbp, 0xcbf29ce484222325
nop dword [rax + rax]
movzx eax, byte [rcx + 0x11]
movzx r9d, byte [rcx + 0x10]
mov r11, qword [rsi + 0x30]
xor r9, rbp
mov rdx, qword [rdx]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x12]
imul r9, rdi
xor r9, rax
movzx eax, byte [rcx + 0x13]
imul r9, rdi
xor r9, rax
imul r9, rdi
and r11, r9
shl r11, 4
add r11, qword [rsi + 0x18]
mov r10, qword [r11]
cmp r10, rbx
jne 0x140073253
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x1400732d6
mov rax, qword [r11 + 8]
mov r9d, dword [rcx + 0x10]
cmp r9d, dword [rax + 0x10]
jne 0x140073290
mov r10, qword [rax]
cmp r10, rcx
je 0x14007328a
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x1400732d6
mov r8, rax
cmp r10, rax
je 0x1400732b2
nop dword [rax + rax]
mov rax, qword [rax + 8]
mov r8, rax
cmp r9d, dword [rax + 0x10]
je 0x1400732fc
cmp r10, rax
jne 0x1400732a0
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x140073200
mov rbp, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x48]
add rsp, 0x20
pop rsi
ret
mov r10, qword [rax]
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
jmp 0x1400732d6
lea rcx, str.invalid_hash_bucket_count
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3
Function at 0x140074060
Capabilities:
Hash data using fnv

Disassembly:
mov rdx, qword [rcx + 0x10]
mov r9, rcx
add rdx, 1
mov r8, qword [rcx + 0x38]
vxorps xmm0, xmm0, xmm0
js 0x14007407c
vcvtsi2ss xmm0, xmm0, rdx
jmp 0x140074091
mov rax, rdx
and edx, 1
shr rax, 1
or rax, rdx
vcvtsi2ss xmm0, xmm0, rax
vaddss xmm0, xmm0, xmm0
vdivss xmm0, xmm0, dword [rcx]
vxorps xmm1, xmm1, xmm1
vroundss xmm1, xmm1, xmm0, 2
vmovss xmm0, dword [0x1400fd094]
xor ecx, ecx
vcomiss xmm1, xmm0
jb 0x1400740c6
vsubss xmm1, xmm1, xmm0
vcomiss xmm1, xmm0
jae 0x1400740c6
movabs rax, 0x8000000000000000
mov rcx, rax
vcvttss2si rax, xmm1
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp r8, rcx
jae 0x1400740f8
cmp r8, 0x200
jae 0x1400740f5
lea r8, [r8*8]
cmp r8, rcx
jae 0x1400740f8
mov r8, rcx
mov rdx, r8
mov rcx, r9
jmp fcn.140073160

Function at 0x140075490
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
sub rsp, 0x38
cmp qword [rdx + 0x18], 0x10
mov r10, rdx
jb 0x1400754a1
mov r10, qword [rdx]
mov r11, qword [rdx + 0x10]
xor r8d, r8d
movabs r9, 0xcbf29ce484222325
test r11, r11
je 0x1400754e9
mov qword [rsp + 0x30], rbx
movabs rbx, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [r8 + r10]
inc r8
xor r9, rax
imul r9, rbx
cmp r8, r11
jb 0x1400754d0
mov rbx, qword [rsp + 0x30]
mov r8, rdx
lea rdx, [rsp + 0x20]
call fcn.1400665e0
mov rax, qword [rsp + 0x28]
test rax, rax
je 0x140075509
add rax, 0x30
add rsp, 0x38
ret
lea rcx, str.invalid_unordered_map_K__T__key
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_
int3
Function at 0x14008f9e0
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
cmp qword [rcx], 0
mov rdi, rdx
mov rbx, rcx
jne 0x14008fa49
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, 0x5d9
lea r8, str.F:prog_llmllama.cppllama.cpp
mov rcx, rax
lea rdx, str.GGML_ASSERT:__s:_d:__s_n
lea rax, str.addr
mov qword [rsp + 0x20], rax
call fcn.140032e30
call fcn.14005c7a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
cmp byte [rcx + 0x10], 0
jne 0x14008faa1
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x34]
lea rcx, [rdi - 1]
add rcx, rax
dec rax
andn rdi, rax, rcx
mov rcx, qword [rbx + 8]
cmp rdi, rcx
jbe 0x14008faa1
mov rdx, qword [rbx]
mov r8, rdi
sub r8, rcx
add rdx, rcx
mov rcx, rbx
call fcn.1400b0550
test al, al
je 0x14008fa9d
mov qword [rbx + 8], rdi
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret
mov byte [rbx + 0x10], 1
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret
Function at 0x1400b0790
Capabilities:
Read file on windows

Disassembly:
test r8, r8
je 0x1400b07ff
push rbx
push rsi
push rdi
sub rsp, 0x60
mov rax, qword [0x14011e7d8]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov rbx, r8
mov rsi, rdx
mov rdi, rcx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0
mov r9, qword [rdi]
mov r8d, 1
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov rbx, rax
mov rcx, qword [rdi]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
test eax, eax
jne 0x1400b0823
cmp rbx, 1
jne 0x1400b0800
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1400eafe0
add rsp, 0x60
pop rdi
pop rsi
pop rbx
ret
lea rdx, str.unexpectedly_reached_end_of_file
lea rcx, [rsp + 0x20]
call fcn.14006d930
lea rdx, [0x14011aac8]
lea rcx, [rsp + 0x20]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov r8, rax
lea rdx, str.read_error:__s
lea rcx, [rsp + 0x38]
call fcn.14008eca0
nop
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14006d8d0
lea rdx, [0x14011aac8]
lea rcx, [rsp + 0x20]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
Function at 0x1400e3fc0
Capabilities:
Hash data using fnv

Disassembly:
push rsi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov r9d, 1
bsr r8, rax
mov rsi, rcx
shlx rax, r9, r8
cmp rdx, rax
ja 0x1400e4155
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 8]
or rax, r9
bsr rcx, rax
mov qword [rsp + 0x40], rdi
mov r8, rbx
inc ecx
mov qword [rsp + 0x48], r14
shlx rdi, r9, rcx
lea rcx, [rsi + 0x18]
lea rdx, [rdi + rdi]
call fcn.140071740
mov rcx, qword [rsi + 8]
lea rax, [rdi - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rdi
mov rcx, qword [rcx]
mov rdx, rcx
cmp rcx, rbx
je 0x1400e411a
mov qword [rsp + 0x38], rbp
movabs rdi, 0xcbf29ce484222325
movabs rbp, 0x100000001b3
nop dword [rax + rax]
movzx r10d, byte [rcx + 0x10]
mov r11, qword [rsi + 0x30]
mov eax, r10d
mov rdx, qword [rdx]
xor rax, rdi
imul rax, rbp
and r11, rax
shl r11, 4
add r11, qword [rsi + 0x18]
mov r9, qword [r11]
cmp r9, rbx
jne 0x1400e4092
mov qword [r11], rcx
mov qword [r11 + 8], rcx
jmp 0x1400e4109
mov rax, qword [r11 + 8]
cmp r10b, byte [rax + 0x10]
jne 0x1400e40cb
mov r10, qword [rax]
cmp r10, rcx
je 0x1400e40c5
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
mov qword [r11 + 8], rcx
jmp 0x1400e4109
mov r8, rax
cmp r9, rax
je 0x1400e40e5
mov rax, qword [rax + 8]
mov r8, rax
cmp r10b, byte [rax + 0x10]
je 0x1400e412f
cmp r9, rax
jne 0x1400e40d3
mov r10, qword [rcx + 8]
mov qword [r10], rdx
mov r9, qword [rdx + 8]
mov qword [r9], r8
mov rax, qword [r8 + 8]
mov qword [rax], rcx
mov qword [r8 + 8], r9
mov qword [rdx + 8], r10
mov qword [rcx + 8], rax
mov qword [r11], rcx
mov rcx, rdx
cmp rdx, rbx
jne 0x1400e4060
mov rbp, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x48]
add rsp, 0x20
pop rsi
ret
mov r10, qword [rax]
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], r10
mov rax, qword [r10 + 8]
mov qword [rax], rcx
mov qword [r10 + 8], r8
mov qword [rdx + 8], r9
mov qword [rcx + 8], rax
jmp 0x1400e4109
lea rcx, str.invalid_hash_bucket_count
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
int3

Function at 0x1400e53e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
sub r8, rdx
movabs rax, 0xcbf29ce484222325
sar r8, 1
mov r9d, 0
add r8, r8
je 0x1400e5424
movabs r10, 0x100000001b3
nop word [rax + rax]
movzx ecx, byte [r9 + rdx]
inc r9
xor rax, rcx
imul rax, r10
cmp r9, r8
jb 0x1400e5410
ret
Function at 0x1400e6790
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
movzx ebx, dl
mov rdi, rcx
mov r8d, dword [0x1401a6818]
mov rax, qword gs:[0x58]
mov ecx, 4
mov r8, qword [rax + r8*8]
mov eax, dword [rcx + r8]
cmp dword [0x1401a6650], eax
jg 0x1400e6848
nop dword [rax]
mov rax, rbx
movabs rcx, 0xcbf29ce484222325
xor rax, rcx
movabs rcx, 0x100000001b3
imul rax, rcx
mov rcx, qword [0x1401a6640]
and rcx, rax
add rcx, rcx
mov rax, qword [0x1401a6628]
mov rdx, qword [rax + rcx*8 + 8]
cmp rdx, qword [0x1401a6618]
je 0x1400e688b
mov rax, qword [rax + rcx*8]
cmp bl, byte [rdx + 0x10]
je 0x1400e682e
nop dword [rax]
cmp rdx, rax
je 0x1400e688b
mov rdx, qword [rdx + 8]
cmp bl, byte [rdx + 0x10]
jne 0x1400e6820
add rdx, 0x18
mov rcx, rdi
call fcn.14002af50
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
lea rcx, [0x1401a6650]
call fcn.1400eb7b0
cmp dword [0x1401a6650], 0xffffffff
jne 0x1400e67d0
lea rcx, [0x1401a6610]
call fcn.1400e68a0
lea rcx, [0x1400f2b80]
call fcn.1400eb610
nop
lea rcx, [0x1401a6650]
call fcn.1400eb750
jmp 0x1400e67d0
lea rcx, str.invalid_unordered_map_K__T__key
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_
int3
Function at 0x1400e7200
Capabilities:
Hash data using fnv

Disassembly:
mov dword [rsp + 8], ecx
push rbx
sub rsp, 0x20
mov ebx, ecx
mov edx, dword [0x1401a6818]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rdx, qword [rax + rdx*8]
mov eax, dword [rcx + rdx]
cmp dword [0x1401a6600], eax
jg 0x1400e72ca
movzx edx, bl
movabs rax, 0xcbf29ce484222325
xor rdx, rax
movabs rcx, 0x100000001b3
imul rdx, rcx
movzx eax, byte [rsp + 0x31]
xor rdx, rax
imul rdx, rcx
movzx eax, byte [rsp + 0x32]
xor rdx, rax
imul rdx, rcx
movzx eax, byte [rsp + 0x33]
xor rdx, rax
imul rdx, rcx
mov rcx, qword [0x1401a65f0]
and rcx, rdx
shl rcx, 4
add rcx, qword [0x1401a65d8]
mov rax, qword [rcx + 8]
mov rdx, qword [0x1401a65c8]
cmp rax, rdx
je 0x1400e72c2
mov rcx, qword [rcx]
cmp ebx, dword [rax + 0x10]
je 0x1400e72af
cmp rax, rcx
je 0x1400e72c2
mov rax, qword [rax + 8]
cmp ebx, dword [rax + 0x10]
jne 0x1400e72a1
test rax, rax
je 0x1400e72c2
cmp rax, rdx
je 0x1400e72c2
mov eax, dword [rax + 0x14]
add rsp, 0x20
pop rbx
ret
xor eax, eax
add rsp, 0x20
pop rbx
ret
lea rcx, [0x1401a6600]
call fcn.1400eb7b0
cmp dword [0x1401a6600], 0xffffffff
jne 0x1400e7232
lea rcx, [0x1401a65c0]
call fcn.1400e7310
lea rcx, [0x1400f2a40]
call fcn.1400eb610
nop
lea rcx, [0x1401a6600]
call fcn.1400eb750
jmp 0x1400e7232