joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18012f7a0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
mov r15, r8
mov r14, rdx
mov r12, rcx
mov rdx, r8
lea rcx, [rbp - 0x39]
call fcn.1800917a0
nop
xor r13d, r13d
nop word [rax + rax]
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x19]
call fcn.1800917a0
mov r8, rax
lea rdx, [rbp + 7]
call fcn.1800e3000
mov rbx, rax
lea rax, [rbp - 0x39]
cmp rax, rbx
je 0x18012f868
mov rdx, qword [rbp - 0x21]
cmp rdx, 0xf
jbe 0x18012f840
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18012f83b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18012f9af
call fcn.180184c4c
mov qword [rbp - 0x29], r13
mov qword [rbp - 0x21], 0xf
mov byte [rbp - 0x39], 0
vmovups ymm0, ymmword [rbx]
vmovups ymmword [rbp - 0x39], ymm0
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
lea rcx, [rbp + 7]
vzeroupper
call fcn.180091b30
lea r8, [rbp - 0x39]
cmp qword [rbp - 0x21], 0xf
seta sil
mov rdi, qword [rbp - 0x39]
cmova r8, rdi
mov ebx, 0x811c9dc5
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [r8 + rdx], 0
jne 0x18012f895
mov rax, r13
test rdx, rdx
je 0x18012f8c5
nop word [rax + rax]
movsx ecx, byte [r8 + rax]
xor ecx, ebx
imul ebx, ecx, 0x1000193
inc rax
cmp rax, rdx
jb 0x18012f8b0
mov rax, qword [0x1801f6cf8]
test al, al
jne 0x18012f8d7
mov eax, 0x811c9dc5
jmp 0x18012f8f2
movsx ecx, al
xor ecx, 0x811c9dc5
imul edx, ecx, 0x1000193
lea rcx, [0x1801f6cf9]
call fcn.1800e1f90
cmp ebx, eax
lea rbx, [r14 + 0x50]
je 0x18012f961
lea rdx, [rbp - 0x39]
test sil, sil
cmovne rdx, rdi
movabs r9, 0xcbf29ce484222325
mov rcx, r13
mov r8, qword [rbp - 0x29]
test r8, r8
je 0x18012f946
movabs r13, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
xor r9, rax
imul r9, r13
inc rcx
cmp rcx, r8
jb 0x18012f930
xor r13d, r13d
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x49]
mov rcx, rbx
call fcn.180095560
cmp qword [rax + 8], 0
je 0x18012f7e0
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x49]
mov rcx, rbx
call fcn.1800e5e60
mov rcx, qword [rax]
vmovups xmm0, xmmword [rcx + 0x30]
vmovups xmmword [r12], xmm0
lea rcx, [rbp - 0x39]
call fcn.180091b30
nop
mov rcx, r15
call fcn.180091b30
mov rax, r12
mov rbx, qword [rsp + 0xd8]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
int3
Function at 0x1801312c0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x20
cmp qword [rdx + 0x18], 0xf
mov r15, r8
mov r14, rdx
mov r9, rdx
jbe 0x1801312eb
mov r9, qword [rdx]
mov esi, 0x811c9dc5
mov rdi, 0xffffffffffffffff
mov ebp, esi
mov rcx, rdi
nop dword [rax]
inc rcx
cmp byte [r9 + rcx], 0
jne 0x180131300
xor ebx, ebx
mov edx, ebx
test rcx, rcx
je 0x180131335
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [r9 + rdx]
inc rdx
xor eax, ebp
imul ebp, eax, 0x1000193
cmp rdx, rcx
jb 0x180131320
mov edx, 0xc10bf213
lea rcx, [0x1801fe539]
call fcn.1800e1f90
mov edx, eax
cmp ebp, eax
jne 0x180131350
mov al, 1
jmp 0x1801313a9
cmp qword [r15 + 0x18], 0xf
mov rcx, r15
jbe 0x180131360
mov rcx, qword [r15]
nop dword [rax]
inc rdi
cmp byte [rcx + rdi], bl
jne 0x180131360
test rdi, rdi
je 0x180131384
nop dword [rax]
movsx eax, byte [rcx + rbx]
inc rbx
xor eax, esi
imul esi, eax, 0x1000193
cmp rbx, rdi
jb 0x180131370
cmp esi, edx
jne 0x18013138c
xor al, al
jmp 0x1801313a9
mov eax, dword [r14 + 0x24]
cmp eax, dword [r15 + 0x24]
je 0x18013139b
setg al
jmp 0x1801313a9
mov rdx, r15
mov rcx, r14
call fcn.1800ffef0
shr al, 7
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop rdi
ret
Function at 0x1801323a0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x20
cmp qword [rdx + 0x18], 0xf
mov r15, r8
mov r14, rdx
mov r9, rdx
jbe 0x1801323cb
mov r9, qword [rdx]
mov esi, 0x811c9dc5
mov rdi, 0xffffffffffffffff
mov ebp, esi
mov rcx, rdi
nop dword [rax]
inc rcx
cmp byte [r9 + rcx], 0
jne 0x1801323e0
xor ebx, ebx
mov edx, ebx
test rcx, rcx
je 0x180132415
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [r9 + rdx]
inc rdx
xor eax, ebp
imul ebp, eax, 0x1000193
cmp rdx, rcx
jb 0x180132400
mov edx, 0xcb0c01d1
lea rcx, [0x1801b4de9]
call fcn.1800e1f90
mov edx, eax
cmp ebp, eax
je 0x180132478
cmp qword [r15 + 0x18], 0xf
mov rcx, r15
jbe 0x180132440
mov rcx, qword [r15]
nop dword [rax]
inc rdi
cmp byte [rcx + rdi], bl
jne 0x180132440
test rdi, rdi
je 0x180132464
nop dword [rax]
movsx eax, byte [rcx + rbx]
inc rbx
xor eax, esi
imul esi, eax, 0x1000193
cmp rbx, rdi
jb 0x180132450
cmp esi, edx
je 0x1801324a7
cmp byte [r14 + 0x48], 0
movzx eax, byte [r15 + 0x48]
je 0x180132493
test al, al
jne 0x180132497
mov al, 1
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop rdi
ret
test al, al
jne 0x1801324a7
mov rdx, r15
mov rcx, r14
call fcn.1800ffef0
shr al, 7
jmp 0x18013247a
xor al, al
jmp 0x18013247a
Function at 0x180132bf0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], r8
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x20
mov r14, rcx
mov qword [rsp + 0x68], r15
lea rcx, [r8 - 1]
mov r13, r9
mov rbp, rcx
mov qword [rsp + 0x60], rcx
sar rbp, 1
mov rax, r8
mov rsi, rdx
mov r12, rdx
mov r15, rdx
cmp rdx, rbp
jge 0x180132c98
nop
lea rbx, [r15 + r15]
lea rdx, [rbx + 2]
lea rdx, [rdx + rdx*2]
shl rdx, 4
add rdx, r14
lea r8, [rdx - 0x30]
call fcn.1801312c0
movzx r15d, al
xor r15, 1
inc r15
add r15, rbx
lea rbx, [rsi + rsi*2]
shl rbx, 4
add rbx, r14
mov rcx, rbx
lea rdi, [r15 + r15*2]
shl rdi, 4
add rdi, r14
mov rdx, rdi
call fcn.1800916d0
mov rsi, r15
vmovsd xmm0, qword [rdi + 0x20]
vmovsd qword [rbx + 0x20], xmm0
mov eax, dword [rdi + 0x28]
mov dword [rbx + 0x28], eax
cmp r15, rbp
jl 0x180132c30
mov rax, qword [rsp + 0x70]
cmp r15, rbp
mov r15, qword [rsp + 0x68]
jne 0x180132ce1
test al, 1
jne 0x180132ce1
lea rdi, [rax + rax*2]
shl rdi, 4
lea rbx, [rsi + rsi*2]
shl rbx, 4
lea rdx, [r14 - 0x30]
add rbx, r14
add rdx, rdi
mov rcx, rbx
call fcn.1800916d0
vmovsd xmm0, qword [rdi + r14 - 0x10]
mov rsi, qword [rsp + 0x60]
vmovsd qword [rbx + 0x20], xmm0
mov eax, dword [rdi + r14 - 8]
mov dword [rbx + 0x28], eax
cmp r12, rsi
jge 0x180132d3f
nop word [rax + rax]
lea rbx, [rsi - 1]
mov r8, r13
sar rbx, 1
lea rbp, [rbx + rbx*2]
shl rbp, 4
add rbp, r14
mov rdx, rbp
call fcn.1801312c0
test al, al
je 0x180132d3f
lea rdi, [rsi + rsi*2]
mov rdx, rbp
shl rdi, 4
add rdi, r14
mov rcx, rdi
call fcn.1800916d0
mov rsi, rbx
vmovsd xmm0, qword [rbp + 0x20]
vmovsd qword [rdi + 0x20], xmm0
mov eax, dword [rbp + 0x28]
mov dword [rdi + 0x28], eax
cmp r12, rbx
jl 0x180132cf0
lea rbx, [rsi + rsi*2]
mov rdx, r13
shl rbx, 4
add rbx, r14
mov rcx, rbx
call fcn.1800916d0
vmovsd xmm0, qword [r13 + 0x20]
vmovsd qword [rbx + 0x20], xmm0
mov eax, dword [r13 + 0x28]
mov dword [rbx + 0x28], eax
add rsp, 0x20
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x180132f30
Capabilities:
Encode data using xor
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 0x18], r8
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x20
mov r14, rcx
mov qword [rsp + 0x68], r15
lea rcx, [r8 - 1]
mov r13, r9
mov rbp, rcx
mov qword [rsp + 0x60], rcx
sar rbp, 1
mov rax, r8
mov rsi, rdx
mov r12, rdx
mov r15, rdx
cmp rdx, rbp
jge 0x180132fe4
nop
lea rbx, [r15 + r15]
lea rdx, [rbx + 2]
lea rdx, [rdx + rdx*4]
shl rdx, 4
add rdx, r14
lea r8, [rdx - 0x50]
call fcn.1801323a0
movzx r15d, al
xor r15, 1
inc r15
add r15, rbx
lea rbx, [rsi + rsi*4]
shl rbx, 4
add rbx, r14
mov rcx, rbx
lea rdi, [r15 + r15*4]
shl rdi, 4
add rdi, r14
mov rdx, rdi
call fcn.1800916d0
mov rax, qword [rdi + 0x20]
lea rdx, [rdi + 0x28]
lea rcx, [rbx + 0x28]
mov qword [rbx + 0x20], rax
call fcn.1800916d0
movzx eax, byte [rdi + 0x48]
mov rsi, r15
mov byte [rbx + 0x48], al
cmp r15, rbp
jl 0x180132f70
mov rax, qword [rsp + 0x70]
cmp r15, rbp
mov r15, qword [rsp + 0x68]
jne 0x180133035
test al, 1
jne 0x180133035
lea rdi, [rax + rax*4]
shl rdi, 4
lea rbx, [rsi + rsi*4]
add rdi, r14
shl rbx, 4
add rbx, r14
mov rcx, rbx
lea rdx, [rdi - 0x50]
call fcn.1800916d0
mov rax, qword [rdi - 0x30]
lea rdx, [rdi - 0x28]
lea rcx, [rbx + 0x28]
mov qword [rbx + 0x20], rax
call fcn.1800916d0
movzx eax, byte [rdi - 8]
mov rsi, qword [rsp + 0x60]
mov byte [rbx + 0x48], al
cmp r12, rsi
jge 0x18013309b
nop word [rax + rax]
lea rbx, [rsi - 1]
mov r8, r13
sar rbx, 1
lea rbp, [rbx + rbx*4]
shl rbp, 4
add rbp, r14
mov rdx, rbp
call fcn.1801323a0
test al, al
je 0x18013309b
lea rdi, [rsi + rsi*4]
mov rdx, rbp
shl rdi, 4
add rdi, r14
mov rcx, rdi
call fcn.1800916d0
mov rax, qword [rbp + 0x20]
lea rdx, [rbp + 0x28]
lea rcx, [rdi + 0x28]
mov qword [rdi + 0x20], rax
call fcn.1800916d0
movzx eax, byte [rbp + 0x48]
mov rsi, rbx
mov byte [rdi + 0x48], al
cmp r12, rbx
jl 0x180133040
lea rbx, [rsi + rsi*4]
mov rdx, r13
shl rbx, 4
add rbx, r14
mov rcx, rbx
call fcn.1800916d0
mov rax, qword [r13 + 0x20]
lea rdx, [r13 + 0x28]
lea rcx, [rbx + 0x28]
mov qword [rbx + 0x20], rax
call fcn.1800916d0
movzx eax, byte [r13 + 0x48]
mov byte [rbx + 0x48], al
add rsp, 0x20
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x180136290
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023328c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180234fac], edx
jle 0x180136371
lea rcx, [0x180234fac]
call fcn.180184cfc
cmp dword [0x180234fac], 0xffffffff
jne 0x180136371
mov rcx, qword [0x180234b88]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18013635e
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x180136302
mov rdx, r11
test rax, rax
je 0x180136340
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180136320
cmp r9d, 0x7a1c884e
je 0x18013634b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1801362f1
jmp 0x18013635e
lea r8, str.m_nWaterLevel
mov rdx, qword [r10 + 0x18]
call fcn.180184890
mov r11d, eax
mov dword [0x180234f84], r11d
lea rcx, [0x180234fac]
call fcn.180184c90
movsxd rax, dword [0x180234f84]
cmp byte [rax + rbx], 1
seta al
add rsp, 0x20
pop rbx
ret

Function at 0x180136390
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023328c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180234fcc], edx
jle 0x180136474
lea rcx, [0x180234fcc]
call fcn.180184cfc
cmp dword [0x180234fcc], 0xffffffff
jne 0x180136474
mov rcx, qword [0x180234b88]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18013645e
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x180136402
mov rdx, r11
test rax, rax
je 0x180136440
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180136420
cmp r9d, 0x7c5cc931
je 0x18013644b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1801363f1
jmp 0x18013645e
lea r8, str.m_nWaterLevel
mov rdx, qword [r10 + 0x18]
call fcn.180184890
mov r11d, eax
lea eax, [r11 - 4]
mov dword [0x180234f8c], eax
lea rcx, [0x180234fcc]
call fcn.180184c90
movsxd rax, dword [0x180234f8c]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x180136490
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov ebx, edx
mov rdi, rcx
mov r8d, dword [0x18023328c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r8*8]
mov r8d, dword [rcx + rax]
cmp dword [0x180234fc0], r8d
jle 0x180136581
lea rcx, [0x180234fc0]
call fcn.180184cfc
cmp dword [0x180234fc0], 0xffffffff
jne 0x180136581
mov rcx, qword [0x180234b88]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18013656e
nop word [rax + rax]
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x180136511
mov rdx, r11
test rax, rax
je 0x180136550
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180136530
cmp r9d, 0x3369e751
je 0x18013655b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x180136500
jmp 0x18013656e
lea r8, str.m_iPing
mov rdx, qword [r10 + 0x18]
call fcn.180184890
mov r11d, eax
mov dword [0x180234f90], r11d
lea rcx, [0x180234fc0]
call fcn.180184c90
lea eax, [rbx*4]
cdqe
movsxd rdx, dword [0x180234f90]
add rax, rdi
mov eax, dword [rdx + rax]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x180139790
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x20
mov qword [rsp + 0x50], rbp
mov r15, r9
lea rbp, [r8 - 1]
mov qword [rsp + 0x58], r13
sar rbp, 1
mov r14, r8
mov rsi, rdx
mov rdi, rcx
mov r12, rdx
mov r10, rdx
cmp rdx, rbp
jge 0x180139822
nop dword [rax]
lea rbx, [r10 + r10]
lea rax, [rbx + 2]
lea rax, [rax + rax*2]
lea rdx, [rdi + rax*4]
lea r8, [rdx - 0xc]
lea rcx, [rsp + 0x70]
call fcn.180139290
movzx eax, al
lea rcx, [rsi + rsi*2]
xor rax, 1
lea r10, [rbx + 1]
add r10, rax
mov rsi, r10
lea rdx, [r10 + r10*2]
mov eax, dword [rdi + rdx*4]
mov dword [rdi + rcx*4], eax
mov eax, dword [rdi + rdx*4 + 4]
mov dword [rdi + rcx*4 + 4], eax
mov eax, dword [rdi + rdx*4 + 8]
mov dword [rdi + rcx*4 + 8], eax
cmp r10, rbp
jl 0x1801397d0
cmp r10, rbp
mov rbp, qword [rsp + 0x50]
jne 0x180139855
test r14b, 1
jne 0x180139855
lea rcx, [rsi + rsi*2]
lea rdx, [r14 + r14*2]
mov eax, dword [rdi + rdx*4 - 0xc]
lea rsi, [r14 - 1]
mov dword [rdi + rcx*4], eax
mov eax, dword [rdi + rdx*4 - 8]
mov dword [rdi + rcx*4 + 4], eax
mov eax, dword [rdi + rdx*4 - 4]
mov dword [rdi + rcx*4 + 8], eax
mov rax, qword [rsp + 0x70]
mov r13, qword [rsp + 0x58]
mov qword [rsp + 0x70], rax
cmp r12, rsi
jge 0x1801398b5
nop dword [rax]
lea rbx, [rsi - 1]
mov r8, r15
sar rbx, 1
lea rcx, [rsp + 0x70]
lea rax, [rbx + rbx*2]
lea r14, [rdi + rax*4]
mov rdx, r14
call fcn.180139290
test al, al
je 0x1801398b5
mov eax, dword [r14]
lea rcx, [rsi + rsi*2]
mov dword [rdi + rcx*4], eax
mov rsi, rbx
mov eax, dword [r14 + 4]
mov dword [rdi + rcx*4 + 4], eax
mov eax, dword [r14 + 8]
mov dword [rdi + rcx*4 + 8], eax
cmp r12, rbx
jl 0x180139870
mov eax, dword [r15]
lea rcx, [rsi + rsi*2]
mov rbx, qword [rsp + 0x60]
mov dword [rdi + rcx*4], eax
mov eax, dword [r15 + 4]
mov dword [rdi + rcx*4 + 4], eax
mov eax, dword [r15 + 8]
mov dword [rdi + rcx*4 + 8], eax
add rsp, 0x20
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
Function at 0x180140550
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov ebx, edx
mov rdi, rcx
mov r8d, dword [0x18023328c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r8*8]
mov r8d, dword [rcx + rax]
cmp dword [0x18023500c], r8d
jle 0x180140641
lea rcx, [0x18023500c]
call fcn.180184cfc
cmp dword [0x18023500c], 0xffffffff
jne 0x180140641
mov rcx, qword [0x180234b88]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18014062e
nop word [rax + rax]
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1801405d1
mov rdx, r11
test rax, rax
je 0x180140610
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1801405f0
cmp r9d, 0x3369e751
je 0x18014061b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1801405c0
jmp 0x18014062e
lea r8, str.m_iTeam
mov rdx, qword [r10 + 0x18]
call fcn.180184890
mov r11d, eax
mov dword [0x180234fec], r11d
lea rcx, [0x18023500c]
call fcn.180184c90
lea eax, [rbx*4]
cdqe
movsxd rdx, dword [0x180234fec]
add rax, rdi
mov eax, dword [rdx + rax]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret

Function at 0x180140670
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
movsxd rbx, edx
mov rdi, rcx
mov r8d, dword [0x18023328c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r8*8]
mov r8d, dword [rcx + rax]
cmp dword [0x180234fe4], r8d
jle 0x180140761
lea rcx, [0x180234fe4]
call fcn.180184cfc
cmp dword [0x180234fe4], 0xffffffff
jne 0x180140761
mov rcx, qword [0x180234b88]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18014074e
nop dword [rax + rax]
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1801406f1
mov rdx, r11
test rax, rax
je 0x180140730
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180140710
cmp r9d, 0x3369e751
je 0x18014073b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1801406e0
jmp 0x18014074e
lea r8, str.m_bValid
mov rdx, qword [r10 + 0x18]
call fcn.180184890
mov r11d, eax
mov dword [0x180234ff0], r11d
lea rcx, [0x180234fe4]
call fcn.180184c90
movsxd rax, dword [0x180234ff0]
add rax, rdi
movzx eax, byte [rbx + rax]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x180140780
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x10], rdx
push rdi
sub rsp, 0x30
mov rsi, r8
mov rbx, rdx
mov rdx, qword [rdx + 0x10]
test rdx, rdx
je 0x180140847
lea rdi, [rcx + 0x90]
mov r10, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1801407bb
mov r10, qword [rbx]
xor ecx, ecx
movabs r9, 0xcbf29ce484222325
test rdx, rdx
je 0x1801407f4
movabs r8, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [r10 + rcx]
xor r9, rax
imul r9, r8
inc rcx
cmp rcx, rdx
jb 0x1801407e0
mov r8, rbx
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.180095560
cmp qword [rax + 8], 0
je 0x180140847
mov r8, rbx
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.18012acb0
mov rax, qword [rax]
vmovsd xmm0, qword [rax + 0x30]
vmovsd qword [rsi], xmm0
mov eax, dword [rax + 0x38]
mov dword [rsi + 8], eax
mov rcx, rbx
call fcn.180091b30
mov al, 1
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
mov rcx, rbx
call fcn.180091b30
xor al, al
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
Function at 0x180140aa0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov r14, r8
mov r15, rcx
mov r12, qword [rbp + 0x70]
test edx, edx
je 0x180140d24
add rcx, 0x50
lea r8, [rbp + 0x58]
lea rdx, [rsp + 0x30]
call fcn.18012af50
mov rsi, qword [rax]
mov rax, qword [rsi + 0x18]
mov r11, qword [rsi + 0x20]
cmp rax, r11
je 0x180140d24
nop word [rax + rax]
mov r9, rax
cmp qword [rax + 0x18], 0xf
jbe 0x180140b0d
mov r9, qword [rax]
mov rcx, 0xffffffffffffffff
mov r10d, 0x811c9dc5
nop word [rax + rax]
inc rcx
cmp byte [r9 + rcx], 0
jne 0x180140b20
xor r8d, r8d
test rcx, rcx
je 0x180140b6a
nop dword [rax]
nop word [rax + rax]
movsx edx, byte [r9 + r8]
xor edx, r10d
imul r10d, edx, 0x1000193
inc r8
cmp r8, rcx
jb 0x180140b40
test r10d, r10d
jne 0x180140b6a
add rax, 0x20
cmp rax, r11
jne 0x180140b00
jmp 0x180140d24
mov rdi, r11
lea rbx, [rax + 0x20]
cmp rbx, r11
je 0x180140b95
nop word [rax + rax]
lea rcx, [rbx - 0x20]
mov rdx, rbx
call fcn.1800916d0
add rbx, 0x20
cmp rbx, rdi
jne 0x180140b80
mov rcx, qword [rsi + 0x20]
sub rcx, 0x20
call fcn.180091b30
add qword [rsi + 0x20], 0xffffffffffffffe0
mov byte [r15 + 0x129], 1
cmp qword [r12 + 0x10], 0
je 0x180140d24
mov dword [rsp + 0x30], 0xffffffff
mov rdx, r14
lea rcx, [rbp - 0x58]
call fcn.1800917a0
lea r8, [rsp + 0x30]
mov rdx, rax
mov rcx, r15
call fcn.180140780
test al, al
je 0x180140d24
lea rax, [rbp - 0x30]
mov qword [rsp + 0x70], rax
mov rdx, r14
lea rcx, [rbp - 0x30]
call fcn.1800917a0
mov rbx, rax
lea rax, [rbp - 0x58]
mov qword [rbp - 0x38], rax
lea rax, str._b:02X:02X:02X:02X
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 0x19
movzx ecx, byte [rsp + 0x30]
mov dword [rbp - 0x68], ecx
movabs rax, 0x2000000000000000
mov qword [rsp + 0x78], rax
movzx eax, byte [rsp + 0x31]
mov dword [rbp - 0x64], eax
movabs rax, 0x2000000000000004
mov qword [rbp - 0x80], rax
movzx eax, byte [rsp + 0x32]
mov dword [rbp - 0x60], eax
movabs rax, 0x2000000000000008
mov qword [rbp - 0x78], rax
movzx eax, byte [rsp + 0x33]
mov dword [rbp - 0x5c], eax
movabs rax, 0x200000000000000c
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x30], 4
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rax
vmovups xmm0, xmmword [rsp + 0x30]
vmovdqa xmmword [rsp + 0x30], xmm0
vmovups xmm1, xmmword [rsp + 0x40]
vmovdqa xmmword [rsp + 0x40], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x58]
call fcn.1800a99f0
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], 7
mov qword [rsp + 0x68], 0xf
mov rax, qword [str.Removed]
mov dword [rsp + 0x50], eax
movzx eax, word [0x18020491c]
mov word [rsp + 0x54], ax
movzx eax, byte [0x18020491e]
mov byte [rsp + 0x56], al
mov byte [rsp + 0x57], 0
mov rdx, r12
lea rcx, [rbp - 0x10]
call fcn.1800917a0
nop
mov qword [rsp + 0x20], rbx
lea r9, [rbp - 0x58]
lea r8, [rsp + 0x50]
mov rdx, rax
call fcn.180135cb0
nop
mov rcx, r14
call fcn.180091b30
nop
mov rcx, r12
call fcn.180091b30
add rsp, 0x110
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
Function at 0x180140d50
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
push rbp
push rsi
push rdi
sub rsp, 0x30
mov rsi, r8
mov r9, rcx
test edx, edx
jne 0x180140d86
mov rcx, r8
call fcn.180091b30
xor al, al
mov rbx, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
pop rsi
pop rbp
ret
cmp qword [r8 + 0x18], 0xf
jbe 0x180140d90
mov r8, qword [r8]
mov edi, 0x811c9dc5
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [r8 + rcx], 0
jne 0x180140da0
xor edx, edx
test rcx, rcx
je 0x180140dd5
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [r8 + rdx]
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
cmp rdx, rcx
jb 0x180140dc0
lea rbp, [r9 + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x20]
mov rcx, rbp
call fcn.18012af50
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
mov rbx, qword [rcx + 0x18]
cmp rbx, r10
je 0x180140e56
nop dword [rax + rax]
mov r8, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180140e0d
mov r8, qword [rbx]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
nop word [rax + rax]
inc rax
cmp byte [r8 + rax], 0
jne 0x180140e20
xor edx, edx
test rax, rax
je 0x180140e48
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180140e31
cmp edi, r9d
je 0x180140e56
add rbx, 0x20
cmp rbx, r10
jne 0x180140e00
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x20]
mov rcx, rbp
call fcn.18012af50
mov rcx, qword [rax]
cmp rbx, qword [rcx + 0x20]
setne bl
mov rcx, rsi
call fcn.180091b30
movzx eax, bl
mov rbx, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
pop rsi
pop rbp
ret