joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180100770
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180234f20], edx
jle 0x180100857
lea rcx, [0x180234f20]
call fcn.180184dbc
cmp dword [0x180234f20], 0xffffffff
jne 0x180100857
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18010083e
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1801007e2
mov rdx, r11
test rax, rax
je 0x180100820
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180100800
cmp r9d, 0x24615a25
je 0x18010082b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1801007d1
jmp 0x18010083e
lea r8, str.m_iReloadMode
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
lea eax, [r11 - 0xf0]
mov dword [0x180234f00], eax
lea rcx, [0x180234f20]
call fcn.180184d50
movsxd rax, dword [0x180234f00]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x180100870
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180234ec0], edx
jle 0x180100957
lea rcx, [0x180234ec0]
call fcn.180184dbc
cmp dword [0x180234ec0], 0xffffffff
jne 0x180100957
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18010093e
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1801008e2
mov rdx, r11
test rax, rax
je 0x180100920
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180100900
cmp r9d, 0x24615a25
je 0x18010092b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1801008d1
jmp 0x18010093e
lea r8, str.m_iReloadMode
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
lea eax, [r11 - 0xec]
mov dword [0x180234edc], eax
lea rcx, [0x180234ec0]
call fcn.180184d50
movsxd rax, dword [0x180234edc]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x180100970
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180234f0c], edx
jle 0x180100a54
lea rcx, [0x180234f0c]
call fcn.180184dbc
cmp dword [0x180234f0c], 0xffffffff
jne 0x180100a54
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x180100a3e
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1801009e2
mov rdx, r11
test rax, rax
je 0x180100a20
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180100a00
cmp r9d, 0x24615a25
je 0x180100a2b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1801009d1
jmp 0x180100a3e
lea r8, str.m_flLastCritCheckTime
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
lea eax, [r11 - 4]
mov dword [0x180234f08], eax
lea rcx, [0x180234f0c]
call fcn.180184d50
movsxd rax, dword [0x180234f08]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x180100a70
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180234f04], edx
jle 0x180100b51
lea rcx, [0x180234f04]
call fcn.180184dbc
cmp dword [0x180234f04], 0xffffffff
jne 0x180100b51
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x180100b3e
mov r9, qword [r10 + 0x10]
mov rcx, 0xffffffffffffffff
mov r8d, 0x811c9dc5
inc rcx
cmp byte [r9 + rcx], r11b
jne 0x180100ae2
mov rdx, r11
test rcx, rcx
je 0x180100b20
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [r9 + rdx]
xor eax, r8d
imul r8d, eax, 0x1000193
inc rdx
cmp rdx, rcx
jb 0x180100b00
cmp r8d, 0x7c5cc931
je 0x180100b2b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x180100ad1
jmp 0x180100b3e
lea r8, str.m_iCritMult
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
mov dword [0x180234f14], r11d
lea rcx, [0x180234f04]
call fcn.180184d50
movsxd rax, dword [0x180234f14]
movd xmm2, dword [rax + rbx]
cvtdq2ps xmm2, xmm2
xorps xmm0, xmm0
subss xmm2, xmm0
divss xmm2, dword [0x18020a5e4]
movss dword [rsp + 0x38], xmm2
mov dword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
lea rax, [rsp + 0x38]
comiss xmm0, xmm2
cmovbe rcx, rax
lea rax, [rsp + 0x40]
comiss xmm2, dword [0x18020a400]
cmovbe rax, rcx
movss xmm0, dword [rax]
mulss xmm0, dword [0x18020a478]
addss xmm0, dword [0x18020a400]
add rsp, 0x20
pop rbx
ret
Function at 0x180100bc0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov ebx, edx
mov rdi, rcx
mov r8d, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r8*8]
mov r8d, dword [rcx + rax]
cmp dword [0x180234f24], r8d
jle 0x180100cb1
lea rcx, [0x180234f24]
call fcn.180184dbc
cmp dword [0x180234f24], 0xffffffff
jne 0x180100cb1
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x180100c9e
nop word [rax + rax]
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x180100c41
mov rdx, r11
test rax, rax
je 0x180100c80
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180100c60
cmp r9d, 0x3369e751
je 0x180100c8b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x180100c30
jmp 0x180100c9e
lea r8, str.m_iHealth
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
mov dword [0x180234ef0], r11d
lea rcx, [0x180234f24]
call fcn.180184d50
lea eax, [rbx*4]
cdqe
movsxd rdx, dword [0x180234ef0]
add rax, rdi
mov eax, dword [rdx + rax]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret

Function at 0x180101010
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov ecx, r9d
mov ebp, r8d
mov ebx, edx
call fcn.18017b830
mov rcx, qword [0x180234bb8]
mov esi, eax
xor r14d, r14d
mov eax, 8
btr esi, 0x1f
mov edi, r14d
cmp ebx, 2
mov rdx, qword [rcx]
cmove edi, eax
call qword [rdx + 0x60]
mov ecx, edi
mov ebx, eax
mov rax, qword gs:[0x58]
shl ebx, cl
lea ecx, [rdi + 8]
shl ebp, cl
mov ecx, dword [0x18023327c]
or ebx, ebp
xor ebx, esi
mov esi, 4
mov rdi, qword [rax + rcx*8]
mov eax, dword [rdi + rsi]
cmp dword [0x180247260], eax
jle 0x1801010d2
lea rcx, [0x180247260]
call fcn.180184dbc
cmp dword [0x180247260], 0xffffffff
jne 0x1801010d2
lea rcx, str.vstdlib.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.RandomSeed
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x180247260]
mov qword [0x180247240], rax
call fcn.180184d50
mov ecx, ebx
call qword [0x180247240]
mov eax, dword [rdi + rsi]
cmp dword [0x180247238], eax
jle 0x18010112a
lea rcx, [0x180247238]
call fcn.180184dbc
cmp dword [0x180247238], 0xffffffff
jne 0x18010112a
lea rcx, str.vstdlib.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.RandomInt
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x180247238]
mov qword [0x180247270], rax
call fcn.180184d50
mov edx, 0x270f
xor ecx, ecx
call qword [0x180247270]
cmp byte [rsp + 0x50], r14b
je 0x180101146
cmp eax, 0x64
setl al
jmp 0x18010114e
cmp eax, 0x1770
setge al
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x180102bd0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rcx
push r14
sub rsp, 0x40
mov r14, qword [0x18022e8b0]
test r14, r14
je 0x180102dc3
mov rax, qword [0x180244300]
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x38], rsi
mov rbx, qword [rax]
mov qword [rsp + 0x30], rdi
cmp rbx, rax
je 0x180102cf2
movabs rsi, 0xcbf29ce484222325
movabs rdi, 0x100000001b3
nop word [rax + rax]
mov rcx, qword [0x180234ba0]
mov edx, dword [rbx + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x18]
test rax, rax
je 0x180102c4d
mov rbx, qword [rbx]
jmp 0x180102ce5
movzx eax, byte [rbx + 0x11]
mov rcx, rbx
movzx r8d, byte [rbx + 0x10]
xor r8, rsi
imul r8, rdi
xor r8, rax
movzx eax, byte [rbx + 0x12]
imul r8, rdi
xor r8, rax
movzx eax, byte [rbx + 0x13]
imul r8, rdi
xor r8, rax
imul r8, rdi
and r8, qword [0x180244328]
shl r8, 4
add r8, qword [0x180244310]
mov rax, qword [r8]
cmp qword [r8 + 8], rbx
jne 0x180102cb7
cmp rax, rbx
jne 0x180102cad
mov rax, qword [0x180244300]
mov qword [r8], rax
mov qword [r8 + 8], rax
jmp 0x180102cc2
mov rax, qword [rbx + 8]
mov qword [r8 + 8], rax
jmp 0x180102cc2
cmp rax, rbx
jne 0x180102cc2
mov rax, qword [rbx]
mov qword [r8], rax
mov rbx, qword [rbx]
mov edx, 0x18
dec qword [0x180244308]
mov rax, qword [rcx + 8]
mov qword [rax], rbx
mov rax, qword [rcx + 8]
mov qword [rbx + 8], rax
call fcn.180184d0c
cmp rbx, qword [0x180244300]
jne 0x180102c30
lea r8, [rsp + 0x50]
mov dword [rsp + 0x50], 0
lea rdx, [rsp + 0x20]
lea rcx, [0x18022e8c0]
call fcn.1800c0810
mov rcx, qword [rax]
mov rbp, qword [rcx + 0x20]
mov rsi, qword [rcx + 0x18]
cmp rsi, rbp
je 0x180102daf
mov rdi, qword [rsi]
mov rcx, rdi
call fcn.1800b54c0
cmp byte [rax], 0
jne 0x180102da2
mov rcx, rdi
call fcn.1800b57d0
mov ecx, dword [rax]
shr ecx, 0xd
test cl, 1
jne 0x180102da2
mov rax, qword [rdi + 0x10]
lea rbx, [rdi + 0x10]
mov rcx, rbx
call qword [rax + 0x40]
test al, al
je 0x180102d6f
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x48]
mov edx, eax
mov rcx, r14
call fcn.180100bc0
mov edi, eax
jmp 0x180102d79
mov rcx, rdi
call fcn.1800bb320
mov edi, dword [rax]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x48]
lea r8, [rsp + 0x50]
mov dword [rsp + 0x50], eax
lea rdx, [rsp + 0x20]
lea rcx, [0x1802442f8]
call fcn.1800c0a50
mov rcx, qword [rax]
mov dword [rcx + 0x14], edi
add rsi, 8
cmp rsi, rbp
jne 0x180102d24
mov rdi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x38]
add rsp, 0x40
pop r14
ret
Function at 0x1801047e0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rbx, rdx
mov rdi, rcx
mov r8d, dword [0x18023327c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r8*8]
mov r8d, dword [rcx + rax]
cmp dword [0x180234f3c], r8d
jle 0x1801048d4
lea rcx, [0x180234f3c]
call fcn.180184dbc
cmp dword [0x180234f3c], 0xffffffff
jne 0x1801048d4
mov rcx, qword [0x180234b78]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1801048be
nop dword [rax + rax]
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x180104861
mov rdx, r11
test rax, rax
je 0x1801048a0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180104880
cmp r9d, 0x7a1c884e
je 0x1801048ab
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x180104850
jmp 0x1801048be
lea r8, str.m_hConstraintEntity
mov rdx, qword [r10 + 0x18]
call fcn.180184950
mov r11d, eax
lea eax, [r11 - 8]
mov dword [0x180234f28], eax
lea rcx, [0x180234f3c]
call fcn.180184d50
movsxd rax, dword [0x180234f28]
mov qword [rax + rdi], rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x180126980
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x180126a39
mov rax, qword [rbx + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x1801269ba
mov rdx, qword [rbx + 8]
mov rcx, rbx
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x20
pop rbx
jmp 0x180126b20
mov rcx, qword [rbx + 8]
mov qword [rsp + 0x30], rsi
xor esi, esi
mov qword [rsp + 0x38], rdi
mov rax, qword [rcx + 8]
mov qword [rax], rsi
mov rcx, qword [rcx]
test rcx, rcx
je 0x1801269f5
nop dword [rax]
mov rdi, qword [rcx]
mov edx, 0x20
call fcn.180184d0c
mov rcx, rdi
test rdi, rdi
jne 0x1801269e0
mov rax, qword [rbx + 8]
mov qword [rax], rax
mov rax, qword [rbx + 8]
mov qword [rax + 8], rax
mov qword [rbx + 0x10], rsi
mov rdi, qword [rbx + 0x18]
mov rcx, qword [rbx + 0x20]
sub rcx, rdi
add rcx, 7
shr rcx, 3
cmp rdi, qword [rbx + 0x20]
cmova rcx, rsi
mov rsi, qword [rsp + 0x30]
test rcx, rcx
je 0x180126a34
mov rax, qword [rbx + 8]
rep stosq qword [rdi], rax
mov rdi, qword [rsp + 0x38]
add rsp, 0x20
pop rbx
ret
Function at 0x180127450
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x60
movzx esi, dl
mov rdi, rcx
xor ebx, ebx
cmp byte [0x18023383c], bl
jne 0x180127605
test byte [rcx + 0x28], 6
je 0x1801274be
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f6d18]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f6d1c]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f6d1e]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], bl
jmp 0x1801274d0
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180091890
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180091890
mov rdx, rax
mov rcx, rdi
call fcn.18012ca50
cmp al, sil
je 0x18012750e
lea rcx, [rdi + 0x38]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
call fcn.1800e6850
mov rcx, qword [rax]
mov byte [rcx + 0x30], sil
jmp 0x1801275fb
lea rdx, [rsp + 0x40]
mov rbp, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180127535
test rcx, rcx
je 0x180127564
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x180127550
mov rax, qword [0x1801f6d18]
test al, al
je 0x18012758a
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f6d19]
call fcn.1800e1a60
mov r8d, eax
cmp esi, r8d
je 0x1801275fb
mov rax, qword [rdi + 0x40]
mov rbx, qword [rax]
cmp rbx, rax
je 0x1801275fb
nop dword [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x1801275bf
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x1801275f2
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1801275f2
lea rcx, [rdi + 0x38]
mov r8, rbx
lea rdx, [rsp + 0x90]
call fcn.1800e4a10
mov rbx, qword [rax]
mov r14, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x40]
jmp 0x1801275f5
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x40]
jne 0x1801275a0
lea rcx, [rsp + 0x40]
call fcn.180091c20
movzx eax, byte [0x18023383b]
mov byte [0x18023383c], al
movzx eax, byte [0x18023383a]
mov byte [0x180233839], al
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
Function at 0x180127970
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0x60
mov rbx, rdx
xor edi, edi
cmp byte [0x18023383c], dil
jne 0x180127b4d
test byte [0x18023eaf8], 6
je 0x1801279e4
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f6d18]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f6d1c]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f6d1e]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], dil
jmp 0x1801279f6
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180091890
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180091890
mov rdx, rax
call fcn.18012ceb0
mov rcx, rax
shr rcx, 0x20
cmp eax, ebx
jne 0x180127b26
cmp ecx, dword [rsp + 0x8c]
jne 0x180127b26
lea rdx, [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x58]
cmp rbp, 0xf
cmova rdx, rsi
mov r8d, 0x811c9dc5
mov ebx, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180127a50
test rcx, rcx
je 0x180127a74
nop
movsx eax, byte [rdi + rdx]
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdi
cmp rdi, rcx
jb 0x180127a60
mov rax, qword [0x1801f6d18]
test al, al
je 0x180127a9a
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f6d19]
call fcn.1800e1a60
mov r8d, eax
cmp ebx, r8d
je 0x180127b43
mov rdi, qword [0x18023eb18]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x180127b43
nop word [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp rbp, 0xf
cmova rdx, rsi
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x180127adf
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x180127b1c
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180127b1c
mov r8, rbx
lea rdx, [rsp + 0x80]
lea rcx, [0x18023eb10]
call fcn.1800e4a10
mov rbx, qword [rax]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [0x18023eb18]
jmp 0x180127b1f
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x180127ac0
jmp 0x180127b43
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
lea rcx, [0x18023eb10]
call fcn.1800e5e40
mov rcx, qword [rax]
mov qword [rcx + 0x30], rbx
lea rcx, [rsp + 0x40]
call fcn.180091c20
movzx eax, byte [0x18023383b]
mov byte [0x18023383c], al
movzx eax, byte [0x18023383a]
mov byte [0x180233839], al
mov rbx, qword [rsp + 0x90]
add rsp, 0x60
pop rdi
pop rsi
pop rbp
ret
Function at 0x180127ea0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x70
movaps xmmword [rsp + 0x60], xmm6
movaps xmm6, xmm1
mov rdi, rcx
xor ebx, ebx
cmp byte [0x18023383c], bl
jne 0x180128062
test byte [rcx + 0x28], 6
je 0x180127f13
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f6d18]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f6d1c]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f6d1e]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], bl
jmp 0x180127f25
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180091890
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180091890
mov rdx, rax
mov rcx, rdi
call fcn.18012d0c0
ucomiss xmm0, xmm6
jp 0x18012803d
jne 0x18012803d
lea rdx, [rsp + 0x40]
mov rbp, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180127f75
test rcx, rcx
je 0x180127fa4
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x180127f90
mov rax, qword [0x1801f6d18]
test al, al
je 0x180127fca
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f6d19]
call fcn.1800e1a60
mov r8d, eax
cmp esi, r8d
je 0x180128058
mov rax, qword [rdi + 0x40]
mov rbx, qword [rax]
cmp rbx, rax
je 0x180128058
nop
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x180127fff
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x180128032
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180128032
lea rcx, [rdi + 0x38]
mov r8, rbx
lea rdx, [rsp + 0xa0]
call fcn.1800e4a10
mov rbx, qword [rax]
mov r14, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x40]
jmp 0x180128035
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x40]
jne 0x180127fe0
jmp 0x180128058
lea rcx, [rdi + 0x38]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
call fcn.1800e6340
mov rcx, qword [rax]
movss dword [rcx + 0x30], xmm6
lea rcx, [rsp + 0x40]
call fcn.180091c20
movzx eax, byte [0x18023383b]
mov byte [0x18023383c], al
movzx eax, byte [0x18023383a]
mov byte [0x180233839], al
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
movaps xmm6, xmmword [rsp + 0x60]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
Function at 0x1801283a0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x60
mov esi, edx
mov rdi, rcx
xor ebx, ebx
cmp byte [0x18023383c], bl
jne 0x180128545
test byte [rcx + 0x28], 6
je 0x18012840d
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f6d18]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f6d1c]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f6d1e]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], bl
jmp 0x18012841f
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180091890
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180091890
mov rdx, rax
mov rcx, rdi
call fcn.18012d2e0
cmp eax, esi
je 0x18012845b
lea rcx, [rdi + 0x38]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
call fcn.1800e6340
mov rcx, qword [rax]
mov dword [rcx + 0x30], esi
jmp 0x18012853b
lea rdx, [rsp + 0x40]
mov rbp, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180128482
test rcx, rcx
je 0x1801284a4
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x180128490
mov rax, qword [0x1801f6d18]
test al, al
je 0x1801284ca
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f6d19]
call fcn.1800e1a60
mov r8d, eax
cmp esi, r8d
je 0x18012853b
mov rax, qword [rdi + 0x40]
mov rbx, qword [rax]
cmp rbx, rax
je 0x18012853b
nop dword [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x1801284ff
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x180128532
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180128532
lea rcx, [rdi + 0x38]
mov r8, rbx
lea rdx, [rsp + 0x90]
call fcn.1800e4a10
mov rbx, qword [rax]
mov r14, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x40]
jmp 0x180128535
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x40]
jne 0x1801284e0
lea rcx, [rsp + 0x40]
call fcn.180091c20
movzx eax, byte [0x18023383b]
mov byte [0x18023383c], al
movzx eax, byte [0x18023383a]
mov byte [0x180233839], al
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret