joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180138c00
Capabilities:
Hash data using fnv

Disassembly:
push rdi
sub rsp, 0x20
movabs rax, 0xfffffffffffffff
mov edi, 1
bsr rcx, rax
mov eax, edi
shl rax, cl
cmp rdx, rax
jbe 0x180138c31
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
lea rax, [rdx - 1]
mov qword [rsp + 0x30], rbx
mov rbx, qword [0x180257678]
or rax, rdi
bsr rcx, rax
mov r8, rbx
inc ecx
shl rdi, cl
lea rcx, [0x180257688]
lea rdx, [rdi + rdi]
call fcn.1800941b0
mov rax, qword [0x180257678]
lea r9, [rdi - 1]
mov qword [0x1802576a0], r9
mov qword [0x1802576a8], rdi
mov rax, qword [rax]
mov rcx, rax
cmp rax, rbx
je 0x180138dd2
mov qword [rsp + 0x38], rsi
movabs rdi, 0x100000001b3
movabs rsi, 0xcbf29ce484222325
movzx edx, byte [rax + 0x11]
movzx r11d, byte [rax + 0x10]
mov rcx, qword [rcx]
xor r11, rsi
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x12]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x13]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x14]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x15]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x16]
imul r11, rdi
xor r11, rdx
movzx edx, byte [rax + 0x17]
imul r11, rdi
xor r11, rdx
imul r11, rdi
and r11, r9
shl r11, 4
add r11, qword [0x180257688]
mov r9, qword [r11]
cmp r9, rbx
jne 0x180138d1c
mov qword [r11], rax
mov qword [r11 + 8], rax
jmp 0x180138d93
mov rdx, qword [r11 + 8]
mov r8, qword [rax + 0x10]
cmp r8, qword [rdx + 0x10]
jne 0x180138d59
mov r10, qword [rdx]
cmp r10, rax
je 0x180138d53
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
mov qword [r11 + 8], rax
jmp 0x180138d93
cmp r9, rdx
je 0x180138d6f
nop
mov rdx, qword [rdx + 8]
cmp r8, qword [rdx + 0x10]
je 0x180138da7
cmp r9, rdx
jne 0x180138d60
mov r10, qword [rax + 8]
mov qword [r10], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov r8, qword [rdx + 8]
mov qword [r8], rax
mov qword [rdx + 8], r9
mov qword [rcx + 8], r10
mov qword [rax + 8], r8
mov qword [r11], rax
mov rax, rcx
cmp rcx, rbx
je 0x180138dcd
mov r9, qword [0x1802576a0]
jmp 0x180138ca1
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x180138d93
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x1801393d0
Capabilities:
Hash data using fnv

Disassembly:
sub rsp, 0x18
test byte [rcx + 0x28], 6
je 0x1801393e4
mov eax, 0xffffffff
add rsp, 0x18
ret
test dl, dl
je 0x1801393f3
mov eax, dword [0x1802512b4]
add rsp, 0x18
ret
mov r8d, dword [0x1802512b4]
cmp r8d, 0xffffffff
je 0x180139530
mov r11, qword [0x180252ad8]
mov r10, qword [0x180252ad0]
mov qword [rsp + 0x20], rbx
mov rbx, qword [rcx + 0x68]
mov qword [rsp + 0x28], rbp
movabs rbp, 0xe38e38e38e38e39
mov qword [rsp + 0x30], rsi
mov rsi, qword [rcx + 0x40]
mov qword [rsp + 0x10], rdi
mov rdi, qword [rcx + 0x50]
mov qword [rsp + 8], r14
movabs r14, 0x100000001b3
mov qword [rsp], r15
movabs r15, 0xcbf29ce484222325
nop dword [rax]
mov eax, r8d
movzx edx, r8b
xor rdx, r15
sar eax, 8
imul rdx, r14
movzx ecx, al
mov eax, r8d
xor rdx, rcx
sar eax, 0x10
imul rdx, r14
movzx ecx, al
mov eax, r8d
xor rdx, rcx
sar eax, 0x18
imul rdx, r14
movzx ecx, al
xor rdx, rcx
mov rcx, rbx
imul rdx, r14
and rcx, rdx
add rcx, rcx
mov rax, qword [rdi + rcx*8 + 8]
cmp rax, rsi
je 0x1801394c9
mov rcx, qword [rdi + rcx*8]
cmp r8d, dword [rax + 0x10]
je 0x1801394cb
cmp rax, rcx
je 0x1801394c9
mov rax, qword [rax + 8]
cmp r8d, dword [rax + 0x10]
jne 0x1801394b8
jmp 0x1801394cb
xor eax, eax
test rax, rax
jne 0x180139513
cmp r8d, 0xffffffff
jle 0x18013950d
mov rcx, r11
movsxd r9, r8d
sub rcx, r10
mov rax, rbp
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r9, rdx
jae 0x18013950d
lea rax, [r9 + r9*8]
mov r8d, dword [r10 + rax*8 + 0x44]
cmp r8d, 0xffffffff
jne 0x180139460
jmp 0x180139513
mov r8d, 0xffffffff
mov r14, qword [rsp + 8]
mov rdi, qword [rsp + 0x10]
mov rsi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
mov r15, qword [rsp]
mov eax, r8d
add rsp, 0x18
ret
Function at 0x180139540
Capabilities:
Hash data using fnv

Disassembly:
sub rsp, 0x18
test byte [0x180260f58], 6
je 0x180139557
mov eax, 0xffffffff
add rsp, 0x18
ret
test dl, dl
je 0x180139566
mov eax, dword [0x1802512b4]
add rsp, 0x18
ret
mov r8d, dword [0x1802512b4]
cmp r8d, 0xffffffff
je 0x1801396b0
mov r11, qword [0x180252ad8]
mov r10, qword [0x180252ad0]
mov qword [rsp + 0x20], rbx
mov rbx, qword [0x180260f78]
mov qword [rsp + 0x28], rbp
movabs rbp, 0xe38e38e38e38e39
mov qword [rsp + 0x30], rsi
mov rsi, qword [0x180260f88]
mov qword [rsp + 0x10], rdi
mov rdi, qword [0x180260fa0]
mov qword [rsp + 8], r14
movabs r14, 0x100000001b3
mov qword [rsp], r15
movabs r15, 0xcbf29ce484222325
nop word [rax + rax]
mov eax, r8d
movzx edx, r8b
xor rdx, r15
sar eax, 8
imul rdx, r14
movzx ecx, al
mov eax, r8d
xor rdx, rcx
sar eax, 0x10
imul rdx, r14
movzx ecx, al
mov eax, r8d
xor rdx, rcx
sar eax, 0x18
imul rdx, r14
movzx ecx, al
xor rdx, rcx
mov rcx, rdi
imul rdx, r14
and rcx, rdx
add rcx, rcx
mov rax, qword [rsi + rcx*8 + 8]
cmp rax, rbx
je 0x180139649
mov rcx, qword [rsi + rcx*8]
cmp r8d, dword [rax + 0x10]
je 0x18013964b
cmp rax, rcx
je 0x180139649
mov rax, qword [rax + 8]
cmp r8d, dword [rax + 0x10]
jne 0x180139638
jmp 0x18013964b
xor eax, eax
test rax, rax
jne 0x180139693
cmp r8d, 0xffffffff
jle 0x18013968d
mov rcx, r11
movsxd r9, r8d
sub rcx, r10
mov rax, rbp
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r9, rdx
jae 0x18013968d
lea rax, [r9 + r9*8]
mov r8d, dword [r10 + rax*8 + 0x44]
cmp r8d, 0xffffffff
jne 0x1801395e0
jmp 0x180139693
mov r8d, 0xffffffff
mov r14, qword [rsp + 8]
mov rdi, qword [rsp + 0x10]
mov rsi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
mov r15, qword [rsp]
mov eax, r8d
add rsp, 0x18
ret

Function at 0x1801396c0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
movzx r9d, byte [r8 + 0x10]
mov r10, rcx
movabs rcx, 0x100000001b3
mov rdi, rdx
movabs rax, 0xcbf29ce484222325
xor r9, rax
movzx eax, byte [r8 + 0x11]
mov rdx, qword [r10 + 0x30]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x12]
imul r9, rcx
xor r9, rax
movzx eax, byte [r8 + 0x13]
imul r9, rcx
xor r9, rax
imul r9, rcx
and rdx, r9
shl rdx, 4
add rdx, qword [r10 + 0x18]
mov rax, qword [rdx]
cmp qword [rdx + 8], r8
jne 0x180139748
cmp rax, r8
jne 0x18013973e
mov rax, qword [r10 + 8]
mov qword [rdx], rax
mov qword [rdx + 8], rax
jmp 0x180139753
mov rax, qword [r8 + 8]
mov qword [rdx + 8], rax
jmp 0x180139753
cmp rax, r8
jne 0x180139753
mov rax, qword [r8]
mov qword [rdx], rax
mov rbx, qword [r8]
mov edx, 0x20
dec qword [r10 + 0x10]
mov rcx, r8
mov rax, qword [r8 + 8]
mov qword [rax], rbx
mov rax, qword [r8 + 8]
mov qword [rbx + 8], rax
call fcn.1801a53dc
mov qword [rdi], rbx
mov rax, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x180139790
Capabilities:
Hash data using fnv

Disassembly:
sub rsp, 0x18
test byte [rcx + 0x28], 6
je 0x1801397a4
mov eax, 0xffffffff
add rsp, 0x18
ret
test dl, dl
je 0x1801397b3
mov eax, dword [0x1802512b4]
add rsp, 0x18
ret
mov r8d, dword [0x1802512b4]
cmp r8d, 0xffffffff
je 0x1801398f0
mov r11, qword [0x180252ad8]
mov r10, qword [0x180252ad0]
mov qword [rsp + 0x20], rbx
mov rbx, qword [rcx + 0xa0]
mov qword [rsp + 0x28], rbp
movabs rbp, 0xe38e38e38e38e39
mov qword [rsp + 0x30], rsi
mov rsi, qword [rcx + 0x78]
mov qword [rsp + 0x10], rdi
mov rdi, qword [rcx + 0x88]
mov qword [rsp + 8], r14
movabs r14, 0x100000001b3
mov qword [rsp], r15
movabs r15, 0xcbf29ce484222325
nop
mov eax, r8d
movzx edx, r8b
xor rdx, r15
sar eax, 8
imul rdx, r14
movzx ecx, al
mov eax, r8d
xor rdx, rcx
sar eax, 0x10
imul rdx, r14
movzx ecx, al
mov eax, r8d
xor rdx, rcx
sar eax, 0x18
imul rdx, r14
movzx ecx, al
xor rdx, rcx
mov rcx, rbx
imul rdx, r14
and rcx, rdx
add rcx, rcx
mov rax, qword [rdi + rcx*8 + 8]
cmp rax, rsi
je 0x180139889
mov rcx, qword [rdi + rcx*8]
cmp r8d, dword [rax + 0x10]
je 0x18013988b
cmp rax, rcx
je 0x180139889
mov rax, qword [rax + 8]
cmp r8d, dword [rax + 0x10]
jne 0x180139878
jmp 0x18013988b
xor eax, eax
test rax, rax
jne 0x1801398d3
cmp r8d, 0xffffffff
jle 0x1801398cd
mov rcx, r11
movsxd r9, r8d
sub rcx, r10
mov rax, rbp
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r9, rdx
jae 0x1801398cd
lea rax, [r9 + r9*8]
mov r8d, dword [r10 + rax*8 + 0x44]
cmp r8d, 0xffffffff
jne 0x180139820
jmp 0x1801398d3
mov r8d, 0xffffffff
mov r14, qword [rsp + 8]
mov rdi, qword [rsp + 0x10]
mov rsi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
mov r15, qword [rsp]
mov eax, r8d
add rsp, 0x18
ret

Function at 0x180139900
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, r8
mov r9, rcx
movzx r8d, byte [r8 + 0x10]
movabs rcx, 0x100000001b3
mov rsi, rdx
movabs rax, 0xcbf29ce484222325
xor r8, rax
movzx eax, byte [rbx + 0x11]
mov rdx, qword [r9 + 0x30]
imul r8, rcx
xor r8, rax
movzx eax, byte [rbx + 0x12]
imul r8, rcx
xor r8, rax
movzx eax, byte [rbx + 0x13]
imul r8, rcx
xor r8, rax
imul r8, rcx
and rdx, r8
shl rdx, 4
add rdx, qword [r9 + 0x18]
mov rax, qword [rdx]
cmp qword [rdx + 8], rbx
jne 0x18013998d
cmp rax, rbx
jne 0x180139983
mov rax, qword [r9 + 8]
mov qword [rdx], rax
mov qword [rdx + 8], rax
jmp 0x180139998
mov rax, qword [rbx + 8]
mov qword [rdx + 8], rax
jmp 0x180139998
cmp rax, rbx
jne 0x180139998
mov rax, qword [rbx]
mov qword [rdx], rax
mov rdi, qword [rbx]
lea rcx, [rbx + 0x18]
dec qword [r9 + 0x10]
mov rax, qword [rbx + 8]
mov qword [rax], rdi
mov rax, qword [rbx + 8]
mov qword [rdi + 8], rax
call fcn.180093e20
mov edx, 0x38
mov rcx, rbx
call fcn.1801a53dc
mov rbx, qword [rsp + 0x30]
mov rax, rsi
mov qword [rsi], rdi
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x1801399e0
Capabilities:
Hash data using fnv

Disassembly:
sub rsp, 0x18
test byte [rcx + 0x28], 6
je 0x1801399f4
mov eax, 0xffffffff
add rsp, 0x18
ret
test dl, dl
je 0x180139a03
mov eax, dword [0x1802512b4]
add rsp, 0x18
ret
mov r8d, dword [0x1802512b4]
cmp r8d, 0xffffffff
je 0x180139b40
mov r11, qword [0x180252ad8]
mov r10, qword [0x180252ad0]
mov qword [rsp + 0x20], rbx
mov rbx, qword [rcx + 0x90]
mov qword [rsp + 0x28], rbp
movabs rbp, 0xe38e38e38e38e39
mov qword [rsp + 0x30], rsi
mov rsi, qword [rcx + 0x68]
mov qword [rsp + 0x10], rdi
mov rdi, qword [rcx + 0x78]
mov qword [rsp + 8], r14
movabs r14, 0x100000001b3
mov qword [rsp], r15
movabs r15, 0xcbf29ce484222325
nop dword [rax]
mov eax, r8d
movzx edx, r8b
xor rdx, r15
sar eax, 8
imul rdx, r14
movzx ecx, al
mov eax, r8d
xor rdx, rcx
sar eax, 0x10
imul rdx, r14
movzx ecx, al
mov eax, r8d
xor rdx, rcx
sar eax, 0x18
imul rdx, r14
movzx ecx, al
xor rdx, rcx
mov rcx, rbx
imul rdx, r14
and rcx, rdx
add rcx, rcx
mov rax, qword [rdi + rcx*8 + 8]
cmp rax, rsi
je 0x180139ad9
mov rcx, qword [rdi + rcx*8]
cmp r8d, dword [rax + 0x10]
je 0x180139adb
cmp rax, rcx
je 0x180139ad9
mov rax, qword [rax + 8]
cmp r8d, dword [rax + 0x10]
jne 0x180139ac8
jmp 0x180139adb
xor eax, eax
test rax, rax
jne 0x180139b23
cmp r8d, 0xffffffff
jle 0x180139b1d
mov rcx, r11
movsxd r9, r8d
sub rcx, r10
mov rax, rbp
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r9, rdx
jae 0x180139b1d
lea rax, [r9 + r9*8]
mov r8d, dword [r10 + rax*8 + 0x44]
cmp r8d, 0xffffffff
jne 0x180139a70
jmp 0x180139b23
mov r8d, 0xffffffff
mov r14, qword [rsp + 8]
mov rdi, qword [rsp + 0x10]
mov rsi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
mov r15, qword [rsp]
mov eax, r8d
add rsp, 0x18
ret

Function at 0x180139c50
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, r8
mov r9, rcx
movzx r8d, byte [r8 + 0x10]
movabs rcx, 0x100000001b3
mov rsi, rdx
movabs rax, 0xcbf29ce484222325
xor r8, rax
movzx eax, byte [rbx + 0x11]
mov rdx, qword [r9 + 0x30]
imul r8, rcx
xor r8, rax
movzx eax, byte [rbx + 0x12]
imul r8, rcx
xor r8, rax
movzx eax, byte [rbx + 0x13]
imul r8, rcx
xor r8, rax
imul r8, rcx
and rdx, r8
shl rdx, 4
add rdx, qword [r9 + 0x18]
mov rax, qword [rdx]
cmp qword [rdx + 8], rbx
jne 0x180139cdd
cmp rax, rbx
jne 0x180139cd3
mov rax, qword [r9 + 8]
mov qword [rdx], rax
mov qword [rdx + 8], rax
jmp 0x180139ce8
mov rax, qword [rbx + 8]
mov qword [rdx + 8], rax
jmp 0x180139ce8
cmp rax, rbx
jne 0x180139ce8
mov rax, qword [rbx]
mov qword [rdx], rax
mov rdi, qword [rbx]
lea rcx, [rbx + 0x18]
dec qword [r9 + 0x10]
mov rax, qword [rbx + 8]
mov qword [rax], rdi
mov rax, qword [rbx + 8]
mov qword [rdi + 8], rax
call fcn.180093500
mov edx, 0x30
mov rcx, rbx
call fcn.1801a53dc
mov rbx, qword [rsp + 0x30]
mov rax, rsi
mov qword [rsi], rdi
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x180139d30
Capabilities:
Hash data using fnv

Disassembly:
sub rsp, 0x18
test byte [0x180265c88], 6
je 0x180139d47
mov eax, 0xffffffff
add rsp, 0x18
ret
test dl, dl
je 0x180139d56
mov eax, dword [0x1802512b4]
add rsp, 0x18
ret
mov r8d, dword [0x1802512b4]
cmp r8d, 0xffffffff
je 0x180139ea0
mov r11, qword [0x180252ad8]
mov r10, qword [0x180252ad0]
mov qword [rsp + 0x20], rbx
mov rbx, qword [0x180265ca8]
mov qword [rsp + 0x28], rbp
movabs rbp, 0xe38e38e38e38e39
mov qword [rsp + 0x30], rsi
mov rsi, qword [0x180265cb8]
mov qword [rsp + 0x10], rdi
mov rdi, qword [0x180265cd0]
mov qword [rsp + 8], r14
movabs r14, 0x100000001b3
mov qword [rsp], r15
movabs r15, 0xcbf29ce484222325
nop word [rax + rax]
mov eax, r8d
movzx edx, r8b
xor rdx, r15
sar eax, 8
imul rdx, r14
movzx ecx, al
mov eax, r8d
xor rdx, rcx
sar eax, 0x10
imul rdx, r14
movzx ecx, al
mov eax, r8d
xor rdx, rcx
sar eax, 0x18
imul rdx, r14
movzx ecx, al
xor rdx, rcx
mov rcx, rdi
imul rdx, r14
and rcx, rdx
add rcx, rcx
mov rax, qword [rsi + rcx*8 + 8]
cmp rax, rbx
je 0x180139e39
mov rcx, qword [rsi + rcx*8]
cmp r8d, dword [rax + 0x10]
je 0x180139e3b
cmp rax, rcx
je 0x180139e39
mov rax, qword [rax + 8]
cmp r8d, dword [rax + 0x10]
jne 0x180139e28
jmp 0x180139e3b
xor eax, eax
test rax, rax
jne 0x180139e83
cmp r8d, 0xffffffff
jle 0x180139e7d
mov rcx, r11
movsxd r9, r8d
sub rcx, r10
mov rax, rbp
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r9, rdx
jae 0x180139e7d
lea rax, [r9 + r9*8]
mov r8d, dword [r10 + rax*8 + 0x44]
cmp r8d, 0xffffffff
jne 0x180139dd0
jmp 0x180139e83
mov r8d, 0xffffffff
mov r14, qword [rsp + 8]
mov rdi, qword [rsp + 0x10]
mov rsi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
mov r15, qword [rsp]
mov eax, r8d
add rsp, 0x18
ret
Function at 0x18013a7b0
Capabilities:
Hash data using fnv

Disassembly:
sub rsp, 0x18
test byte [rcx + 0x28], 6
je 0x18013a7c4
mov eax, 0xffffffff
add rsp, 0x18
ret
test dl, dl
je 0x18013a7d3
mov eax, dword [0x1802512b4]
add rsp, 0x18
ret
mov r8d, dword [0x1802512b4]
cmp r8d, 0xffffffff
je 0x18013a910
mov r11, qword [0x180252ad8]
mov r10, qword [0x180252ad0]
mov qword [rsp + 0x20], rbx
mov rbx, qword [rcx + 0x70]
mov qword [rsp + 0x28], rbp
movabs rbp, 0xe38e38e38e38e39
mov qword [rsp + 0x30], rsi
mov rsi, qword [rcx + 0x48]
mov qword [rsp + 0x10], rdi
mov rdi, qword [rcx + 0x58]
mov qword [rsp + 8], r14
movabs r14, 0x100000001b3
mov qword [rsp], r15
movabs r15, 0xcbf29ce484222325
nop dword [rax]
mov eax, r8d
movzx edx, r8b
xor rdx, r15
sar eax, 8
imul rdx, r14
movzx ecx, al
mov eax, r8d
xor rdx, rcx
sar eax, 0x10
imul rdx, r14
movzx ecx, al
mov eax, r8d
xor rdx, rcx
sar eax, 0x18
imul rdx, r14
movzx ecx, al
xor rdx, rcx
mov rcx, rbx
imul rdx, r14
and rcx, rdx
add rcx, rcx
mov rax, qword [rdi + rcx*8 + 8]
cmp rax, rsi
je 0x18013a8a9
mov rcx, qword [rdi + rcx*8]
cmp r8d, dword [rax + 0x10]
je 0x18013a8ab
cmp rax, rcx
je 0x18013a8a9
mov rax, qword [rax + 8]
cmp r8d, dword [rax + 0x10]
jne 0x18013a898
jmp 0x18013a8ab
xor eax, eax
test rax, rax
jne 0x18013a8f3
cmp r8d, 0xffffffff
jle 0x18013a8ed
mov rcx, r11
movsxd r9, r8d
sub rcx, r10
mov rax, rbp
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r9, rdx
jae 0x18013a8ed
lea rax, [r9 + r9*8]
mov r8d, dword [r10 + rax*8 + 0x44]
cmp r8d, 0xffffffff
jne 0x18013a840
jmp 0x18013a8f3
mov r8d, 0xffffffff
mov r14, qword [rsp + 8]
mov rdi, qword [rsp + 0x10]
mov rsi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
mov r15, qword [rsp]
mov eax, r8d
add rsp, 0x18
ret
Function at 0x18013a920
Capabilities:
Hash data using fnv

Disassembly:
sub rsp, 0x18
test byte [rcx + 0x28], 6
je 0x18013a934
mov eax, 0xffffffff
add rsp, 0x18
ret
test dl, dl
je 0x18013a943
mov eax, dword [0x1802512b4]
add rsp, 0x18
ret
mov r8d, dword [0x1802512b4]
cmp r8d, 0xffffffff
je 0x18013aa80
mov r11, qword [0x180252ad8]
mov r10, qword [0x180252ad0]
mov qword [rsp + 0x20], rbx
mov rbx, qword [rcx + 0x80]
mov qword [rsp + 0x28], rbp
movabs rbp, 0xe38e38e38e38e39
mov qword [rsp + 0x30], rsi
mov rsi, qword [rcx + 0x58]
mov qword [rsp + 0x10], rdi
mov rdi, qword [rcx + 0x68]
mov qword [rsp + 8], r14
movabs r14, 0x100000001b3
mov qword [rsp], r15
movabs r15, 0xcbf29ce484222325
nop dword [rax]
mov eax, r8d
movzx edx, r8b
xor rdx, r15
sar eax, 8
imul rdx, r14
movzx ecx, al
mov eax, r8d
xor rdx, rcx
sar eax, 0x10
imul rdx, r14
movzx ecx, al
mov eax, r8d
xor rdx, rcx
sar eax, 0x18
imul rdx, r14
movzx ecx, al
xor rdx, rcx
mov rcx, rbx
imul rdx, r14
and rcx, rdx
add rcx, rcx
mov rax, qword [rdi + rcx*8 + 8]
cmp rax, rsi
je 0x18013aa19
mov rcx, qword [rdi + rcx*8]
cmp r8d, dword [rax + 0x10]
je 0x18013aa1b
cmp rax, rcx
je 0x18013aa19
mov rax, qword [rax + 8]
cmp r8d, dword [rax + 0x10]
jne 0x18013aa08
jmp 0x18013aa1b
xor eax, eax
test rax, rax
jne 0x18013aa63
cmp r8d, 0xffffffff
jle 0x18013aa5d
mov rcx, r11
movsxd r9, r8d
sub rcx, r10
mov rax, rbp
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r9, rdx
jae 0x18013aa5d
lea rax, [r9 + r9*8]
mov r8d, dword [r10 + rax*8 + 0x44]
cmp r8d, 0xffffffff
jne 0x18013a9b0
jmp 0x18013aa63
mov r8d, 0xffffffff
mov r14, qword [rsp + 8]
mov rdi, qword [rsp + 0x10]
mov rsi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
mov r15, qword [rsp]
mov eax, r8d
add rsp, 0x18
ret
Function at 0x18013d810
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x20
cmp qword [rdx + 0x18], 0xf
mov r15, r8
mov r14, rdx
mov r9, rdx
jbe 0x18013d83b
mov r9, qword [rdx]
mov esi, 0x811c9dc5
mov rdi, 0xffffffffffffffff
mov ebp, esi
mov rcx, rdi
nop dword [rax]
inc rcx
cmp byte [r9 + rcx], 0
jne 0x18013d850
xor ebx, ebx
mov edx, ebx
test rcx, rcx
je 0x18013d885
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [r9 + rdx]
inc rdx
xor eax, ebp
imul ebp, eax, 0x1000193
cmp rdx, rcx
jb 0x18013d870
mov edx, 0xcb0c01d1
lea rcx, [0x1801d6049]
call fcn.1800e8400
mov edx, eax
cmp ebp, eax
je 0x18013d8e8
cmp qword [r15 + 0x18], 0xf
mov rcx, r15
jbe 0x18013d8b0
mov rcx, qword [r15]
nop dword [rax]
inc rdi
cmp byte [rcx + rdi], bl
jne 0x18013d8b0
test rdi, rdi
je 0x18013d8d4
nop dword [rax]
movsx eax, byte [rcx + rbx]
inc rbx
xor eax, esi
imul esi, eax, 0x1000193
cmp rbx, rdi
jb 0x18013d8c0
cmp esi, edx
je 0x18013d917
cmp byte [r14 + 0x48], 0
movzx eax, byte [r15 + 0x48]
je 0x18013d903
test al, al
jne 0x18013d907
mov al, 1
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop rdi
ret
test al, al
jne 0x18013d917
mov rdx, r15
mov rcx, r14
call fcn.1800ff700
shr al, 7
jmp 0x18013d8ea
xor al, al
jmp 0x18013d8ea
Function at 0x18013e6d0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
lea r15, [r8 - 1]
mov r14, r9
sar r15, 1
mov r13, r8
mov rdi, rdx
mov rbp, rcx
mov r12, rdx
mov rsi, rdx
cmp rdx, r15
jge 0x18013e7a1
nop
add rsi, rsi
imul rax, rsi, 0x38
mov ecx, dword [rax + rbp + 0x9c]
cmp ecx, dword [rax + rbp + 0x64]
je 0x18013e729
setg cl
jmp 0x18013e742
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x78]
add rdx, rax
add rcx, rax
call fcn.1800ff700
movzx ecx, al
shr cl, 7
movzx eax, cl
xor rax, 1
inc rax
add rsi, rax
imul rdx, rsi, 0x38
imul rcx, rdi, 0x38
mov rax, qword [rdx + rbp]
lea rbx, [rdx + rbp]
lea rdx, [rbx + 8]
lea rdi, [rcx + rbp]
mov qword [rcx + rbp], rax
lea rcx, [rdi + 8]
call fcn.1800939b0
mov eax, dword [rbx + 0x28]
mov dword [rdi + 0x28], eax
mov eax, dword [rbx + 0x2c]
mov dword [rdi + 0x2c], eax
movzx eax, byte [rbx + 0x30]
mov byte [rdi + 0x30], al
movzx eax, byte [rbx + 0x31]
mov byte [rdi + 0x31], al
movzx eax, byte [rbx + 0x32]
mov byte [rdi + 0x32], al
mov rdi, rsi
cmp rsi, r15
jl 0x18013e710
cmp rsi, r15
jne 0x18013e7f7
test r13b, 1
jne 0x18013e7f7
imul rcx, r13, 0x38
imul rdx, rdi, 0x38
mov rax, qword [rcx + rbp - 0x38]
lea rbx, [rcx + rbp]
lea rdi, [rdx + rbp]
mov qword [rdx + rbp], rax
lea rdx, [rbx - 0x30]
lea rcx, [rdi + 8]
call fcn.1800939b0
mov eax, dword [rbx - 0x10]
mov dword [rdi + 0x28], eax
mov eax, dword [rbx - 0xc]
mov dword [rdi + 0x2c], eax
movzx eax, byte [rbx - 8]
mov byte [rdi + 0x30], al
movzx eax, byte [rbx - 7]
mov byte [rdi + 0x31], al
movzx eax, byte [rbx - 6]
mov byte [rdi + 0x32], al
lea rdi, [r13 - 1]
cmp r12, rdi
jge 0x18013e875
nop dword [rax]
lea rsi, [rdi - 1]
sar rsi, 1
imul rbx, rsi, 0x38
add rbx, rbp
mov eax, dword [rbx + 0x2c]
cmp eax, dword [r14 + 0x2c]
je 0x18013e81c
setg al
jmp 0x18013e82c
lea rdx, [r14 + 8]
lea rcx, [rbx + 8]
call fcn.1800ff700
shr al, 7
test al, al
je 0x18013e875
mov rax, qword [rbx]
lea rdx, [rbx + 8]
imul rcx, rdi, 0x38
lea rdi, [rcx + rbp]
mov qword [rcx + rbp], rax
lea rcx, [rdi + 8]
call fcn.1800939b0
mov eax, dword [rbx + 0x28]
mov dword [rdi + 0x28], eax
mov eax, dword [rbx + 0x2c]
mov dword [rdi + 0x2c], eax
movzx eax, byte [rbx + 0x30]
mov byte [rdi + 0x30], al
movzx eax, byte [rbx + 0x31]
mov byte [rdi + 0x31], al
movzx eax, byte [rbx + 0x32]
mov byte [rdi + 0x32], al
mov rdi, rsi
cmp r12, rsi
jl 0x18013e800
mov rax, qword [r14]
lea rdx, [r14 + 8]
imul rcx, rdi, 0x38
lea rdi, [rcx + rbp]
mov qword [rcx + rbp], rax
lea rcx, [rdi + 8]
call fcn.1800939b0
mov eax, dword [r14 + 0x28]
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov dword [rdi + 0x28], eax
mov eax, dword [r14 + 0x2c]
mov dword [rdi + 0x2c], eax
movzx eax, byte [r14 + 0x30]
mov byte [rdi + 0x30], al
movzx eax, byte [r14 + 0x31]
mov byte [rdi + 0x31], al
movzx eax, byte [r14 + 0x32]
mov byte [rdi + 0x32], al
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret