joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1800ff2f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023228c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180233f28], edx
jle 0x1800ff3d7
lea rcx, [0x180233f28]
call fcn.180183aac
cmp dword [0x180233f28], 0xffffffff
jne 0x1800ff3d7
mov rcx, qword [0x180233b80]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800ff3be
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800ff362
mov rdx, r11
test rax, rax
je 0x1800ff3a0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800ff380
cmp r9d, 0x24615a25
je 0x1800ff3ab
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800ff351
jmp 0x1800ff3be
lea r8, str.m_iReloadMode
mov rdx, qword [r10 + 0x18]
call fcn.180183640
mov r11d, eax
lea eax, [r11 - 0xf0]
mov dword [0x180233f08], eax
lea rcx, [0x180233f28]
call fcn.180183a40
movsxd rax, dword [0x180233f08]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800ff3f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023228c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180233ec8], edx
jle 0x1800ff4d7
lea rcx, [0x180233ec8]
call fcn.180183aac
cmp dword [0x180233ec8], 0xffffffff
jne 0x1800ff4d7
mov rcx, qword [0x180233b80]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800ff4be
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800ff462
mov rdx, r11
test rax, rax
je 0x1800ff4a0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800ff480
cmp r9d, 0x24615a25
je 0x1800ff4ab
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800ff451
jmp 0x1800ff4be
lea r8, str.m_iReloadMode
mov rdx, qword [r10 + 0x18]
call fcn.180183640
mov r11d, eax
lea eax, [r11 - 0xec]
mov dword [0x180233ee4], eax
lea rcx, [0x180233ec8]
call fcn.180183a40
movsxd rax, dword [0x180233ee4]
add rax, rbx
add rsp, 0x20
pop rbx
ret
Function at 0x1800ff4f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023228c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180233f14], edx
jle 0x1800ff5d4
lea rcx, [0x180233f14]
call fcn.180183aac
cmp dword [0x180233f14], 0xffffffff
jne 0x1800ff5d4
mov rcx, qword [0x180233b80]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800ff5be
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800ff562
mov rdx, r11
test rax, rax
je 0x1800ff5a0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800ff580
cmp r9d, 0x24615a25
je 0x1800ff5ab
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800ff551
jmp 0x1800ff5be
lea r8, str.m_flLastCritCheckTime
mov rdx, qword [r10 + 0x18]
call fcn.180183640
mov r11d, eax
lea eax, [r11 - 4]
mov dword [0x180233f10], eax
lea rcx, [0x180233f14]
call fcn.180183a40
movsxd rax, dword [0x180233f10]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x1800ff5f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18023228c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180233f0c], edx
jle 0x1800ff6d1
lea rcx, [0x180233f0c]
call fcn.180183aac
cmp dword [0x180233f0c], 0xffffffff
jne 0x1800ff6d1
mov rcx, qword [0x180233b80]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800ff6be
mov r9, qword [r10 + 0x10]
mov rcx, 0xffffffffffffffff
mov r8d, 0x811c9dc5
inc rcx
cmp byte [r9 + rcx], r11b
jne 0x1800ff662
mov rdx, r11
test rcx, rcx
je 0x1800ff6a0
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [r9 + rdx]
xor eax, r8d
imul r8d, eax, 0x1000193
inc rdx
cmp rdx, rcx
jb 0x1800ff680
cmp r8d, 0x7c5cc931
je 0x1800ff6ab
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800ff651
jmp 0x1800ff6be
lea r8, str.m_iCritMult
mov rdx, qword [r10 + 0x18]
call fcn.180183640
mov r11d, eax
mov dword [0x180233f20], r11d
lea rcx, [0x180233f0c]
call fcn.180183a40
movsxd rax, dword [0x180233f20]
movd xmm2, dword [rax + rbx]
cvtdq2ps xmm2, xmm2
xorps xmm0, xmm0
subss xmm2, xmm0
divss xmm2, dword [0x180209394]
movss dword [rsp + 0x38], xmm2
mov dword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
lea rax, [rsp + 0x38]
comiss xmm0, xmm2
cmovbe rcx, rax
lea rax, [rsp + 0x40]
comiss xmm2, dword [0x1802091b0]
cmovbe rax, rcx
movss xmm0, dword [rax]
mulss xmm0, dword [0x180209228]
addss xmm0, dword [0x1802091b0]
add rsp, 0x20
pop rbx
ret
Function at 0x1800ff740
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov ebx, edx
mov rdi, rcx
mov r8d, dword [0x18023228c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r8*8]
mov r8d, dword [rcx + rax]
cmp dword [0x180233f2c], r8d
jle 0x1800ff831
lea rcx, [0x180233f2c]
call fcn.180183aac
cmp dword [0x180233f2c], 0xffffffff
jne 0x1800ff831
mov rcx, qword [0x180233b80]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1800ff81e
nop word [rax + rax]
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1800ff7c1
mov rdx, r11
test rax, rax
je 0x1800ff800
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1800ff7e0
cmp r9d, 0x3369e751
je 0x1800ff80b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800ff7b0
jmp 0x1800ff81e
lea r8, str.m_iHealth
mov rdx, qword [r10 + 0x18]
call fcn.180183640
mov r11d, eax
mov dword [0x180233ef8], r11d
lea rcx, [0x180233f2c]
call fcn.180183a40
lea eax, [rbx*4]
cdqe
movsxd rdx, dword [0x180233ef8]
add rax, rdi
mov eax, dword [rdx + rax]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret

Function at 0x1800ffb90
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov ecx, r9d
mov ebp, r8d
mov ebx, edx
call fcn.18017a5e0
mov rcx, qword [0x180233bc0]
mov esi, eax
xor r14d, r14d
mov eax, 8
btr esi, 0x1f
mov edi, r14d
cmp ebx, 2
mov rdx, qword [rcx]
cmove edi, eax
call qword [rdx + 0x60]
mov ecx, edi
mov ebx, eax
mov rax, qword gs:[0x58]
shl ebx, cl
lea ecx, [rdi + 8]
shl ebp, cl
mov ecx, dword [0x18023228c]
or ebx, ebp
xor ebx, esi
mov esi, 4
mov rdi, qword [rax + rcx*8]
mov eax, dword [rdi + rsi]
cmp dword [0x180245d80], eax
jle 0x1800ffc52
lea rcx, [0x180245d80]
call fcn.180183aac
cmp dword [0x180245d80], 0xffffffff
jne 0x1800ffc52
lea rcx, str.vstdlib.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.RandomSeed
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x180245d80]
mov qword [0x180245d60], rax
call fcn.180183a40
mov ecx, ebx
call qword [0x180245d60]
mov eax, dword [rdi + rsi]
cmp dword [0x180245d58], eax
jle 0x1800ffcaa
lea rcx, [0x180245d58]
call fcn.180183aac
cmp dword [0x180245d58], 0xffffffff
jne 0x1800ffcaa
lea rcx, str.vstdlib.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.RandomInt
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x180245d58]
mov qword [0x180245d90], rax
call fcn.180183a40
mov edx, 0x270f
xor ecx, ecx
call qword [0x180245d90]
cmp byte [rsp + 0x50], r14b
je 0x1800ffcc6
cmp eax, 0x64
setl al
jmp 0x1800ffcce
cmp eax, 0x1770
setge al
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x180101750
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rcx
push r14
sub rsp, 0x40
mov r14, qword [0x18022d8b0]
test r14, r14
je 0x180101943
mov rax, qword [0x180242e20]
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x38], rsi
mov rbx, qword [rax]
mov qword [rsp + 0x30], rdi
cmp rbx, rax
je 0x180101872
movabs rsi, 0xcbf29ce484222325
movabs rdi, 0x100000001b3
nop word [rax + rax]
mov rcx, qword [0x180233ba8]
mov edx, dword [rbx + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x18]
test rax, rax
je 0x1801017cd
mov rbx, qword [rbx]
jmp 0x180101865
movzx eax, byte [rbx + 0x11]
mov rcx, rbx
movzx r8d, byte [rbx + 0x10]
xor r8, rsi
imul r8, rdi
xor r8, rax
movzx eax, byte [rbx + 0x12]
imul r8, rdi
xor r8, rax
movzx eax, byte [rbx + 0x13]
imul r8, rdi
xor r8, rax
imul r8, rdi
and r8, qword [0x180242e48]
shl r8, 4
add r8, qword [0x180242e30]
mov rax, qword [r8]
cmp qword [r8 + 8], rbx
jne 0x180101837
cmp rax, rbx
jne 0x18010182d
mov rax, qword [0x180242e20]
mov qword [r8], rax
mov qword [r8 + 8], rax
jmp 0x180101842
mov rax, qword [rbx + 8]
mov qword [r8 + 8], rax
jmp 0x180101842
cmp rax, rbx
jne 0x180101842
mov rax, qword [rbx]
mov qword [r8], rax
mov rbx, qword [rbx]
mov edx, 0x18
dec qword [0x180242e28]
mov rax, qword [rcx + 8]
mov qword [rax], rbx
mov rax, qword [rcx + 8]
mov qword [rbx + 8], rax
call fcn.1801839fc
cmp rbx, qword [0x180242e20]
jne 0x1801017b0
lea r8, [rsp + 0x50]
mov dword [rsp + 0x50], 0
lea rdx, [rsp + 0x20]
lea rcx, [0x18022d8c0]
call fcn.1800b2bd0
mov rcx, qword [rax]
mov rbp, qword [rcx + 0x20]
mov rsi, qword [rcx + 0x18]
cmp rsi, rbp
je 0x18010192f
mov rdi, qword [rsi]
mov rcx, rdi
call fcn.1800a78c0
cmp byte [rax], 0
jne 0x180101922
mov rcx, rdi
call fcn.1800a7bd0
mov ecx, dword [rax]
shr ecx, 0xd
test cl, 1
jne 0x180101922
mov rax, qword [rdi + 0x10]
lea rbx, [rdi + 0x10]
mov rcx, rbx
call qword [rax + 0x40]
test al, al
je 0x1801018ef
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x48]
mov edx, eax
mov rcx, r14
call fcn.1800ff740
mov edi, eax
jmp 0x1801018f9
mov rcx, rdi
call fcn.1800ad720
mov edi, dword [rax]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x48]
lea r8, [rsp + 0x50]
mov dword [rsp + 0x50], eax
lea rdx, [rsp + 0x20]
lea rcx, [0x180242e18]
call fcn.1800b2e10
mov rcx, qword [rax]
mov dword [rcx + 0x14], edi
add rsi, 8
cmp rsi, rbp
jne 0x1801018a4
mov rdi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x38]
add rsp, 0x40
pop r14
ret
Function at 0x180103380
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rbx, rdx
mov rdi, rcx
mov r8d, dword [0x18023228c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r8*8]
mov r8d, dword [rcx + rax]
cmp dword [0x180233f44], r8d
jle 0x180103474
lea rcx, [0x180233f44]
call fcn.180183aac
cmp dword [0x180233f44], 0xffffffff
jne 0x180103474
mov rcx, qword [0x180233b80]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18010345e
nop dword [rax + rax]
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x180103401
mov rdx, r11
test rax, rax
je 0x180103440
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180103420
cmp r9d, 0x7a1c884e
je 0x18010344b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1801033f0
jmp 0x18010345e
lea r8, str.m_hConstraintEntity
mov rdx, qword [r10 + 0x18]
call fcn.180183640
mov r11d, eax
lea eax, [r11 - 8]
mov dword [0x180233f30], eax
lea rcx, [0x180233f44]
call fcn.180183a40
movsxd rax, dword [0x180233f30]
mov qword [rax + rdi], rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x180125460
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x180125519
mov rax, qword [rbx + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x18012549a
mov rdx, qword [rbx + 8]
mov rcx, rbx
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x20
pop rbx
jmp 0x180125600
mov rcx, qword [rbx + 8]
mov qword [rsp + 0x30], rsi
xor esi, esi
mov qword [rsp + 0x38], rdi
mov rax, qword [rcx + 8]
mov qword [rax], rsi
mov rcx, qword [rcx]
test rcx, rcx
je 0x1801254d5
nop dword [rax]
mov rdi, qword [rcx]
mov edx, 0x20
call fcn.1801839fc
mov rcx, rdi
test rdi, rdi
jne 0x1801254c0
mov rax, qword [rbx + 8]
mov qword [rax], rax
mov rax, qword [rbx + 8]
mov qword [rax + 8], rax
mov qword [rbx + 0x10], rsi
mov rdi, qword [rbx + 0x18]
mov rcx, qword [rbx + 0x20]
sub rcx, rdi
add rcx, 7
shr rcx, 3
cmp rdi, qword [rbx + 0x20]
cmova rcx, rsi
mov rsi, qword [rsp + 0x30]
test rcx, rcx
je 0x180125514
mov rax, qword [rbx + 8]
rep stosq qword [rdi], rax
mov rdi, qword [rsp + 0x38]
add rsp, 0x20
pop rbx
ret
Function at 0x180125f30
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x60
movzx esi, dl
mov rdi, rcx
xor ebx, ebx
cmp byte [0x18023284c], bl
jne 0x1801260e5
test byte [rcx + 0x28], 6
je 0x180125f9e
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f5cd8]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f5cdc]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f5cde]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], bl
jmp 0x180125fb0
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180090730
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180090730
mov rdx, rax
mov rcx, rdi
call fcn.18012b530
cmp al, sil
je 0x180125fee
lea rcx, [rdi + 0x38]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
call fcn.1800e53d0
mov rcx, qword [rax]
mov byte [rcx + 0x30], sil
jmp 0x1801260db
lea rdx, [rsp + 0x40]
mov rbp, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180126015
test rcx, rcx
je 0x180126044
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x180126030
mov rax, qword [0x1801f5cd8]
test al, al
je 0x18012606a
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f5cd9]
call fcn.1800e05e0
mov r8d, eax
cmp esi, r8d
je 0x1801260db
mov rax, qword [rdi + 0x40]
mov rbx, qword [rax]
cmp rbx, rax
je 0x1801260db
nop dword [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x18012609f
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x1801260d2
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1801260d2
lea rcx, [rdi + 0x38]
mov r8, rbx
lea rdx, [rsp + 0x90]
call fcn.1800e3590
mov rbx, qword [rax]
mov r14, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x40]
jmp 0x1801260d5
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x40]
jne 0x180126080
lea rcx, [rsp + 0x40]
call fcn.180090ac0
movzx eax, byte [0x18023284b]
mov byte [0x18023284c], al
movzx eax, byte [0x18023284a]
mov byte [0x180232849], al
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
Function at 0x180126450
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0x60
mov rbx, rdx
xor edi, edi
cmp byte [0x18023284c], dil
jne 0x18012662d
test byte [0x18023d618], 6
je 0x1801264c4
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f5cd8]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f5cdc]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f5cde]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], dil
jmp 0x1801264d6
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180090730
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180090730
mov rdx, rax
call fcn.18012b990
mov rcx, rax
shr rcx, 0x20
cmp eax, ebx
jne 0x180126606
cmp ecx, dword [rsp + 0x8c]
jne 0x180126606
lea rdx, [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x58]
cmp rbp, 0xf
cmova rdx, rsi
mov r8d, 0x811c9dc5
mov ebx, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180126530
test rcx, rcx
je 0x180126554
nop
movsx eax, byte [rdi + rdx]
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdi
cmp rdi, rcx
jb 0x180126540
mov rax, qword [0x1801f5cd8]
test al, al
je 0x18012657a
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f5cd9]
call fcn.1800e05e0
mov r8d, eax
cmp ebx, r8d
je 0x180126623
mov rdi, qword [0x18023d638]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x180126623
nop word [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp rbp, 0xf
cmova rdx, rsi
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x1801265bf
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x1801265fc
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1801265fc
mov r8, rbx
lea rdx, [rsp + 0x80]
lea rcx, [0x18023d630]
call fcn.1800e3590
mov rbx, qword [rax]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [0x18023d638]
jmp 0x1801265ff
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x1801265a0
jmp 0x180126623
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
lea rcx, [0x18023d630]
call fcn.1800e49c0
mov rcx, qword [rax]
mov qword [rcx + 0x30], rbx
lea rcx, [rsp + 0x40]
call fcn.180090ac0
movzx eax, byte [0x18023284b]
mov byte [0x18023284c], al
movzx eax, byte [0x18023284a]
mov byte [0x180232849], al
mov rbx, qword [rsp + 0x90]
add rsp, 0x60
pop rdi
pop rsi
pop rbp
ret
Function at 0x180126980
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x70
movaps xmmword [rsp + 0x60], xmm6
movaps xmm6, xmm1
mov rdi, rcx
xor ebx, ebx
cmp byte [0x18023284c], bl
jne 0x180126b42
test byte [rcx + 0x28], 6
je 0x1801269f3
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f5cd8]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f5cdc]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f5cde]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], bl
jmp 0x180126a05
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180090730
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180090730
mov rdx, rax
mov rcx, rdi
call fcn.18012bba0
ucomiss xmm0, xmm6
jp 0x180126b1d
jne 0x180126b1d
lea rdx, [rsp + 0x40]
mov rbp, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180126a55
test rcx, rcx
je 0x180126a84
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x180126a70
mov rax, qword [0x1801f5cd8]
test al, al
je 0x180126aaa
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f5cd9]
call fcn.1800e05e0
mov r8d, eax
cmp esi, r8d
je 0x180126b38
mov rax, qword [rdi + 0x40]
mov rbx, qword [rax]
cmp rbx, rax
je 0x180126b38
nop
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x180126adf
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x180126b12
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180126b12
lea rcx, [rdi + 0x38]
mov r8, rbx
lea rdx, [rsp + 0xa0]
call fcn.1800e3590
mov rbx, qword [rax]
mov r14, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x40]
jmp 0x180126b15
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x40]
jne 0x180126ac0
jmp 0x180126b38
lea rcx, [rdi + 0x38]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
call fcn.1800e4ec0
mov rcx, qword [rax]
movss dword [rcx + 0x30], xmm6
lea rcx, [rsp + 0x40]
call fcn.180090ac0
movzx eax, byte [0x18023284b]
mov byte [0x18023284c], al
movzx eax, byte [0x18023284a]
mov byte [0x180232849], al
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
movaps xmm6, xmmword [rsp + 0x60]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
Function at 0x180126e80
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x60
mov esi, edx
mov rdi, rcx
xor ebx, ebx
cmp byte [0x18023284c], bl
jne 0x180127025
test byte [rcx + 0x28], 6
je 0x180126eed
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f5cd8]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f5cdc]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f5cde]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], bl
jmp 0x180126eff
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180090730
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180090730
mov rdx, rax
mov rcx, rdi
call fcn.18012bdc0
cmp eax, esi
je 0x180126f3b
lea rcx, [rdi + 0x38]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
call fcn.1800e4ec0
mov rcx, qword [rax]
mov dword [rcx + 0x30], esi
jmp 0x18012701b
lea rdx, [rsp + 0x40]
mov rbp, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180126f62
test rcx, rcx
je 0x180126f84
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x180126f70
mov rax, qword [0x1801f5cd8]
test al, al
je 0x180126faa
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f5cd9]
call fcn.1800e05e0
mov r8d, eax
cmp esi, r8d
je 0x18012701b
mov rax, qword [rdi + 0x40]
mov rbx, qword [rax]
cmp rbx, rax
je 0x18012701b
nop dword [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x180126fdf
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x180127012
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180127012
lea rcx, [rdi + 0x38]
mov r8, rbx
lea rdx, [rsp + 0x90]
call fcn.1800e3590
mov rbx, qword [rax]
mov r14, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x40]
jmp 0x180127015
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x40]
jne 0x180126fc0
lea rcx, [rsp + 0x40]
call fcn.180090ac0
movzx eax, byte [0x18023284b]
mov byte [0x18023284c], al
movzx eax, byte [0x18023284a]
mov byte [0x180232849], al
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret