joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180125080
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x60
movzx esi, dl
mov rdi, rcx
xor ebx, ebx
cmp byte [0x18022f7ac], bl
jne 0x180125235
test byte [rcx + 0x28], 6
je 0x1801250ee
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f4d88]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f4d8c]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f4d8e]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], bl
jmp 0x180125100
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180092300
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180092300
mov rdx, rax
mov rcx, rdi
call fcn.18012a740
cmp al, sil
je 0x18012513e
lea rcx, [rdi + 0x38]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
call fcn.1800e5600
mov rcx, qword [rax]
mov byte [rcx + 0x30], sil
jmp 0x18012522b
lea rdx, [rsp + 0x40]
mov rbp, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180125165
test rcx, rcx
je 0x180125194
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x180125180
mov rax, qword [0x1801f4d88]
test al, al
je 0x1801251ba
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f4d89]
call fcn.1800e0810
mov r8d, eax
cmp esi, r8d
je 0x18012522b
mov rax, qword [rdi + 0x40]
mov rbx, qword [rax]
cmp rbx, rax
je 0x18012522b
nop dword [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x1801251ef
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x180125222
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180125222
lea rcx, [rdi + 0x38]
mov r8, rbx
lea rdx, [rsp + 0x90]
call fcn.1800e37c0
mov rbx, qword [rax]
mov r14, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x40]
jmp 0x180125225
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x40]
jne 0x1801251d0
lea rcx, [rsp + 0x40]
call fcn.180092690
movzx eax, byte [0x18022f7ab]
mov byte [0x18022f7ac], al
movzx eax, byte [0x18022f7aa]
mov byte [0x18022f7a9], al
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
Function at 0x1801255a0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0x60
mov rbx, rdx
xor edi, edi
cmp byte [0x18022f7ac], dil
jne 0x18012577d
test byte [0x180239f78], 6
je 0x180125614
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f4d88]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f4d8c]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f4d8e]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], dil
jmp 0x180125626
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180092300
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180092300
mov rdx, rax
call fcn.18012aba0
mov rcx, rax
shr rcx, 0x20
cmp eax, ebx
jne 0x180125756
cmp ecx, dword [rsp + 0x8c]
jne 0x180125756
lea rdx, [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x58]
cmp rbp, 0xf
cmova rdx, rsi
mov r8d, 0x811c9dc5
mov ebx, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180125680
test rcx, rcx
je 0x1801256a4
nop
movsx eax, byte [rdi + rdx]
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdi
cmp rdi, rcx
jb 0x180125690
mov rax, qword [0x1801f4d88]
test al, al
je 0x1801256ca
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f4d89]
call fcn.1800e0810
mov r8d, eax
cmp ebx, r8d
je 0x180125773
mov rdi, qword [0x180239f98]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x180125773
nop word [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp rbp, 0xf
cmova rdx, rsi
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x18012570f
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x18012574c
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x18012574c
mov r8, rbx
lea rdx, [rsp + 0x80]
lea rcx, [0x180239f90]
call fcn.1800e37c0
mov rbx, qword [rax]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [0x180239f98]
jmp 0x18012574f
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x1801256f0
jmp 0x180125773
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
lea rcx, [0x180239f90]
call fcn.1800e4bf0
mov rcx, qword [rax]
mov qword [rcx + 0x30], rbx
lea rcx, [rsp + 0x40]
call fcn.180092690
movzx eax, byte [0x18022f7ab]
mov byte [0x18022f7ac], al
movzx eax, byte [0x18022f7aa]
mov byte [0x18022f7a9], al
mov rbx, qword [rsp + 0x90]
add rsp, 0x60
pop rdi
pop rsi
pop rbp
ret
Function at 0x180125ad0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x70
movaps xmmword [rsp + 0x60], xmm6
movaps xmm6, xmm1
mov rdi, rcx
xor ebx, ebx
cmp byte [0x18022f7ac], bl
jne 0x180125c92
test byte [rcx + 0x28], 6
je 0x180125b43
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f4d88]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f4d8c]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f4d8e]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], bl
jmp 0x180125b55
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180092300
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180092300
mov rdx, rax
mov rcx, rdi
call fcn.18012adb0
ucomiss xmm0, xmm6
jp 0x180125c6d
jne 0x180125c6d
lea rdx, [rsp + 0x40]
mov rbp, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180125ba5
test rcx, rcx
je 0x180125bd4
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x180125bc0
mov rax, qword [0x1801f4d88]
test al, al
je 0x180125bfa
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f4d89]
call fcn.1800e0810
mov r8d, eax
cmp esi, r8d
je 0x180125c88
mov rax, qword [rdi + 0x40]
mov rbx, qword [rax]
cmp rbx, rax
je 0x180125c88
nop
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x180125c2f
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x180125c62
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180125c62
lea rcx, [rdi + 0x38]
mov r8, rbx
lea rdx, [rsp + 0xa0]
call fcn.1800e37c0
mov rbx, qword [rax]
mov r14, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x40]
jmp 0x180125c65
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x40]
jne 0x180125c10
jmp 0x180125c88
lea rcx, [rdi + 0x38]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
call fcn.1800e50f0
mov rcx, qword [rax]
movss dword [rcx + 0x30], xmm6
lea rcx, [rsp + 0x40]
call fcn.180092690
movzx eax, byte [0x18022f7ab]
mov byte [0x18022f7ac], al
movzx eax, byte [0x18022f7aa]
mov byte [0x18022f7a9], al
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
movaps xmm6, xmmword [rsp + 0x60]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
Function at 0x180125fd0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x60
mov esi, edx
mov rdi, rcx
xor ebx, ebx
cmp byte [0x18022f7ac], bl
jne 0x180126175
test byte [rcx + 0x28], 6
je 0x18012603d
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f4d88]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f4d8c]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f4d8e]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], bl
jmp 0x18012604f
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180092300
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180092300
mov rdx, rax
mov rcx, rdi
call fcn.18012afd0
cmp eax, esi
je 0x18012608b
lea rcx, [rdi + 0x38]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
call fcn.1800e50f0
mov rcx, qword [rax]
mov dword [rcx + 0x30], esi
jmp 0x18012616b
lea rdx, [rsp + 0x40]
mov rbp, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x1801260b2
test rcx, rcx
je 0x1801260d4
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x1801260c0
mov rax, qword [0x1801f4d88]
test al, al
je 0x1801260fa
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f4d89]
call fcn.1800e0810
mov r8d, eax
cmp esi, r8d
je 0x18012616b
mov rax, qword [rdi + 0x40]
mov rbx, qword [rax]
cmp rbx, rax
je 0x18012616b
nop dword [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x18012612f
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x180126162
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180126162
lea rcx, [rdi + 0x38]
mov r8, rbx
lea rdx, [rsp + 0x90]
call fcn.1800e37c0
mov rbx, qword [rax]
mov r14, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x40]
jmp 0x180126165
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x40]
jne 0x180126110
lea rcx, [rsp + 0x40]
call fcn.180092690
movzx eax, byte [0x18022f7ab]
mov byte [0x18022f7ac], al
movzx eax, byte [0x18022f7aa]
mov byte [0x18022f7a9], al
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
Function at 0x180126520
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x10], rdx
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x90
mov r14, rdx
mov rdi, rcx
xor ebx, ebx
cmp byte [0x18022f7ac], bl
jne 0x18012672c
test byte [rcx + 0x28], 6
je 0x180126598
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], 7
mov qword [rbp - 0x11], 0xf
mov rax, qword [0x1801f4d88]
mov dword [rbp - 0x29], eax
movzx eax, word [0x1801f4d8c]
mov word [rbp - 0x25], ax
movzx eax, byte [0x1801f4d8e]
mov byte [rbp - 0x23], al
mov byte [rbp - 0x22], bl
jmp 0x1801265a9
lea rdx, str.default
lea rcx, [rbp - 0x29]
call fcn.180092300
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp + 0x17]
call fcn.180092300
mov r8, rax
mov rdx, rdi
lea rcx, [rbp - 9]
call fcn.18012b430
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x1801265d3
mov rdx, qword [r14]
lea rcx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rcx, qword [rbp - 9]
mov r8, qword [rbp + 7]
cmp r8, qword [r14 + 0x10]
jne 0x1801266e5
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1801266e5
lea rdx, [rbp - 0x29]
mov r15, qword [rbp - 0x29]
mov r12, qword [rbp - 0x11]
cmp r12, 0xf
cmova rdx, r15
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180126620
test rcx, rcx
je 0x180126644
nop
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x180126630
mov rax, qword [0x1801f4d88]
test al, al
je 0x18012666a
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f4d89]
call fcn.1800e0810
mov r8d, eax
cmp esi, r8d
je 0x180126719
mov rax, qword [rdi + 0x78]
mov rbx, qword [rax]
cmp rbx, rax
je 0x180126719
nop dword [rax]
nop word [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rbp - 0x29]
cmp r12, 0xf
cmova rdx, r15
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x1801266ae
mov rcx, qword [rcx]
cmp r8, qword [rbp - 0x19]
jne 0x1801266da
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1801266da
lea rcx, [rdi + 0x70]
mov r8, rbx
lea rdx, [rbp + 0x77]
call fcn.1800e38b0
mov rbx, qword [rax]
mov r12, qword [rbp - 0x11]
mov r15, qword [rbp - 0x29]
jmp 0x1801266dd
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x78]
jne 0x180126690
jmp 0x180126719
lea rcx, [rdi + 0x70]
lea r8, [rbp - 0x29]
lea rdx, [rbp - 0x39]
call fcn.1800e5880
mov rcx, qword [rax]
add rcx, 0x30
cmp rcx, r14
je 0x180126719
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x18012670f
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
call fcn.1800926f0
nop
lea rcx, [rbp - 9]
call fcn.180092690
nop
lea rcx, [rbp - 0x29]
call fcn.180092690
movzx eax, byte [0x18022f7ab]
mov byte [0x18022f7ac], al
movzx eax, byte [0x18022f7aa]
mov byte [0x18022f7a9], al
mov rcx, r14
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
jmp fcn.180092690
Function at 0x180127090
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rbp
mov dword [rsp + 0x10], edx
push rsi
push rdi
push r14
sub rsp, 0x60
mov ebx, edx
mov rsi, rcx
xor edi, edi
cmp byte [0x18022f7ac], dil
jne 0x180127280
test byte [rcx + 0x28], 6
je 0x180127103
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f4d88]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f4d8c]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f4d8e]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], dil
jmp 0x180127115
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180092300
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180092300
mov rdx, rax
mov rcx, rsi
call fcn.18012bb90
mov ecx, eax
shr ecx, 0x18
mov edx, eax
shr edx, 0x10
mov r8d, eax
shr r8d, 8
cmp al, bl
jne 0x18012725d
cmp r8b, byte [rsp + 0x89]
jne 0x18012725d
cmp dl, byte [rsp + 0x8a]
jne 0x18012725d
cmp cl, byte [rsp + 0x8b]
jne 0x18012725d
lea rdx, [rsp + 0x40]
mov rbp, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov ebx, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180127197
test rcx, rcx
je 0x1801271c4
nop word [rax + rax]
movsx eax, byte [rdi + rdx]
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdi
cmp rdi, rcx
jb 0x1801271b0
mov rax, qword [0x1801f4d88]
test al, al
je 0x1801271ea
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f4d89]
call fcn.1800e0810
mov r8d, eax
cmp ebx, r8d
je 0x180127276
mov rax, qword [rsi + 0x40]
mov rbx, qword [rax]
cmp rbx, rax
je 0x180127276
nop
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x18012721f
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x180127252
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180127252
lea rcx, [rsi + 0x38]
mov r8, rbx
lea rdx, [rsp + 0x90]
call fcn.1800e37c0
mov rbx, qword [rax]
mov r14, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x40]
jmp 0x180127255
mov rbx, qword [rbx]
cmp rbx, qword [rsi + 0x40]
jne 0x180127200
jmp 0x180127276
lea rcx, [rsi + 0x38]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
call fcn.1800e4e70
mov rcx, qword [rax]
mov dword [rcx + 0x30], ebx
lea rcx, [rsp + 0x40]
call fcn.180092690
movzx eax, byte [0x18022f7ab]
mov byte [0x18022f7ac], al
movzx eax, byte [0x18022f7aa]
mov byte [0x18022f7a9], al
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
Function at 0x180127680
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0x60
mov rbx, rdx
xor edi, edi
cmp byte [0x18022f7ac], dil
jne 0x1801278dd
test byte [0x18023f9e8], 6
je 0x1801276f4
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f4d88]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f4d8c]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f4d8e]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], dil
jmp 0x180127706
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180092300
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180092300
mov rdx, rax
call fcn.18012bff0
mov rcx, rax
shr rcx, 0x28
mov rdx, rax
shr rdx, 0x20
mov r8, rax
shr r8, 0x18
mov r9, rax
shr r9, 0x10
mov r10, rax
shr r10, 8
cmp al, bl
jne 0x1801278b6
cmp r10b, byte [rsp + 0x89]
jne 0x1801278b6
cmp r9b, byte [rsp + 0x8a]
jne 0x1801278b6
cmp r8b, byte [rsp + 0x8b]
jne 0x1801278b6
cmp dl, byte [rsp + 0x8c]
jne 0x1801278b6
cmp cl, byte [rsp + 0x8d]
jne 0x1801278b6
mov rcx, rax
shr rcx, 0x30
cmp cl, byte [rsp + 0x8e]
jne 0x1801278b6
shr rax, 0x38
cmp al, byte [rsp + 0x8f]
jne 0x1801278b6
lea rdx, [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x58]
cmp rbp, 0xf
cmova rdx, rsi
mov r8d, 0x811c9dc5
mov ebx, r8d
mov rcx, 0xffffffffffffffff
nop dword [rax + rax]
inc rcx
cmp byte [rdx + rcx], 0
jne 0x1801277e0
test rcx, rcx
je 0x180127804
nop
movsx eax, byte [rdi + rdx]
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdi
cmp rdi, rcx
jb 0x1801277f0
mov rax, qword [0x1801f4d88]
test al, al
je 0x18012782a
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f4d89]
call fcn.1800e0810
mov r8d, eax
cmp ebx, r8d
je 0x1801278d3
mov rdi, qword [0x18023fa08]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x1801278d3
nop word [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp rbp, 0xf
cmova rdx, rsi
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x18012786f
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x1801278ac
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1801278ac
mov r8, rbx
lea rdx, [rsp + 0x80]
lea rcx, [0x18023fa00]
call fcn.1800e37c0
mov rbx, qword [rax]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [0x18023fa08]
jmp 0x1801278af
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x180127850
jmp 0x1801278d3
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
lea rcx, [0x18023fa00]
call fcn.1800e4440
mov rcx, qword [rax]
mov qword [rcx + 0x30], rbx
lea rcx, [rsp + 0x40]
call fcn.180092690
movzx eax, byte [0x18022f7ab]
mov byte [0x18022f7ac], al
movzx eax, byte [0x18022f7aa]
mov byte [0x18022f7a9], al
mov rbx, qword [rsp + 0x90]
add rsp, 0x60
pop rdi
pop rsi
pop rbp
ret
Function at 0x1801279b0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rbp
mov qword [rsp + 0x10], rdx
push rsi
push rdi
push r14
sub rsp, 0x60
mov rbx, rdx
mov rsi, rcx
xor edi, edi
cmp byte [0x18022f7ac], dil
jne 0x180127b81
test byte [rcx + 0x28], 6
je 0x180127a25
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x1801f4d88]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1801f4d8c]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1801f4d8e]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], dil
jmp 0x180127a37
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180092300
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180092300
mov rdx, rax
mov rcx, rsi
call fcn.18012cca0
mov rcx, rax
shr rcx, 0x20
cmp eax, ebx
jne 0x180127b5d
cmp ecx, dword [rsp + 0x8c]
jne 0x180127b5d
lea rdx, [rsp + 0x40]
mov rbp, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov ebx, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180127a94
test rcx, rcx
je 0x180127ac4
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [rdi + rdx]
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdi
cmp rdi, rcx
jb 0x180127ab0
mov rax, qword [0x1801f4d88]
test al, al
je 0x180127aea
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f4d89]
call fcn.1800e0810
mov r8d, eax
cmp ebx, r8d
je 0x180127b77
mov rax, qword [rsi + 0x48]
mov rbx, qword [rax]
cmp rbx, rax
je 0x180127b77
nop
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x180127b1f
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x180127b52
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180127b52
lea rcx, [rsi + 0x40]
mov r8, rbx
lea rdx, [rsp + 0x90]
call fcn.1800e37c0
mov rbx, qword [rax]
mov r14, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x40]
jmp 0x180127b55
mov rbx, qword [rbx]
cmp rbx, qword [rsi + 0x48]
jne 0x180127b00
jmp 0x180127b77
lea rcx, [rsi + 0x40]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
call fcn.1800e5370
mov rcx, qword [rax]
mov qword [rcx + 0x30], rbx
lea rcx, [rsp + 0x40]
call fcn.180092690
movzx eax, byte [0x18022f7ab]
mov byte [0x18022f7ac], al
movzx eax, byte [0x18022f7aa]
mov byte [0x18022f7a9], al
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
Function at 0x180127bb0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x80
movaps xmmword [rsp + 0x70], xmm6
mov rsi, rdx
mov rdi, rcx
xor ebx, ebx
cmp byte [0x18022f7ac], bl
jne 0x180127db7
test byte [rcx + 0x28], 6
je 0x180127c26
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 7
mov qword [rsp + 0x48], 0xf
mov rax, qword [0x1801f4d88]
mov dword [rsp + 0x30], eax
movzx eax, word [0x1801f4d8c]
mov word [rsp + 0x34], ax
movzx eax, byte [0x1801f4d8e]
mov byte [rsp + 0x36], al
mov byte [rsp + 0x37], bl
jmp 0x180127c38
lea rdx, str.default
lea rcx, [rsp + 0x30]
call fcn.180092300
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.180092300
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x20]
call fcn.18012d100
movups xmm0, xmmword [rax]
movaps xmm1, xmmword [rsi]
movq rax, xmm0
movq rcx, xmm1
cmp eax, ecx
jne 0x180127d90
shr rcx, 0x20
shr rax, 0x20
cmp eax, ecx
jne 0x180127d90
psrldq xmm0, 8
movq rax, xmm0
psrldq xmm1, 8
movq rcx, xmm1
cmp eax, ecx
jne 0x180127d90
shr rcx, 0x20
shr rax, 0x20
cmp eax, ecx
jne 0x180127d90
lea rdx, [rsp + 0x30]
mov rbp, qword [rsp + 0x30]
mov r14, qword [rsp + 0x48]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180127cd2
test rcx, rcx
je 0x180127cf4
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x180127ce0
mov rax, qword [0x1801f4d88]
test al, al
je 0x180127d1a
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x1801f4d89]
call fcn.1800e0810
mov r8d, eax
cmp esi, r8d
je 0x180127dad
mov rax, qword [rdi + 0x58]
mov rbx, qword [rax]
cmp rbx, rax
je 0x180127dad
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x30]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x180127d52
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x40]
jne 0x180127d85
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180127d85
lea rcx, [rdi + 0x50]
mov r8, rbx
lea rdx, [rsp + 0xb0]
call fcn.1800e3ab0
mov rbx, qword [rax]
mov r14, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x30]
jmp 0x180127d88
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x58]
jne 0x180127d33
jmp 0x180127dad
movaps xmm6, xmmword [rsi]
lea rcx, [rdi + 0x50]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x20]
call fcn.1800e46d0
mov rcx, qword [rax]
movups xmmword [rcx + 0x30], xmm6
lea rcx, [rsp + 0x30]
call fcn.180092690
movzx eax, byte [0x18022f7ab]
mov byte [0x18022f7ac], al
movzx eax, byte [0x18022f7aa]
mov byte [0x18022f7a9], al
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
movaps xmm6, xmmword [rsp + 0x70]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret