joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180108110
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x180244234], edx
jle 0x1801081f4
lea rcx, [0x180244234]
call fcn.1801905cc
cmp dword [0x180244234], 0xffffffff
jne 0x1801081f4
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1801081de
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x180108182
mov rdx, r11
test rax, rax
je 0x1801081c0
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x1801081a0
cmp r9d, 0x24615a25
je 0x1801081cb
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x180108171
jmp 0x1801081de
lea r8, str.m_flLastCritCheckTime
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
lea eax, [r11 - 4]
mov dword [0x180244230], eax
lea rcx, [0x180244234]
call fcn.180190560
movsxd rax, dword [0x180244230]
add rax, rbx
add rsp, 0x20
pop rbx
ret

Function at 0x180108210
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + rdx*8]
mov edx, dword [rcx + rax]
cmp dword [0x18024422c], edx
jle 0x1801082f1
lea rcx, [0x18024422c]
call fcn.1801905cc
cmp dword [0x18024422c], 0xffffffff
jne 0x1801082f1
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x1801082de
mov r9, qword [r10 + 0x10]
mov rcx, 0xffffffffffffffff
mov r8d, 0x811c9dc5
inc rcx
cmp byte [r9 + rcx], r11b
jne 0x180108282
mov rdx, r11
test rcx, rcx
je 0x1801082c0
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [r9 + rdx]
xor eax, r8d
imul r8d, eax, 0x1000193
inc rdx
cmp rdx, rcx
jb 0x1801082a0
cmp r8d, 0x7c5cc931
je 0x1801082cb
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x180108271
jmp 0x1801082de
lea r8, str.m_iCritMult
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180244240], r11d
lea rcx, [0x18024422c]
call fcn.180190560
movsxd rax, dword [0x180244240]
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, dword [rax + rbx]
vxorps xmm1, xmm1, xmm1
vsubss xmm0, xmm0, xmm1
vdivss xmm2, xmm0, dword [0x180218c54]
vmovss dword [rsp + 0x38], xmm2
vmovss xmm3, dword [0x180218a50]
vmovss dword [rsp + 0x40], xmm3
vmovss dword [rsp + 0x30], xmm1
lea rcx, [rsp + 0x30]
lea rax, [rsp + 0x38]
vcomiss xmm1, xmm2
cmovbe rcx, rax
lea rax, [rsp + 0x40]
vcomiss xmm2, xmm3
cmovbe rax, rcx
vmovss xmm0, dword [rax]
vmulss xmm0, xmm0, dword [0x180218ad8]
vaddss xmm0, xmm0, xmm3
add rsp, 0x20
pop rbx
ret
Function at 0x180108360
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov ebx, edx
mov rdi, rcx
mov r8d, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r8*8]
mov r8d, dword [rcx + rax]
cmp dword [0x18024424c], r8d
jle 0x180108451
lea rcx, [0x18024424c]
call fcn.1801905cc
cmp dword [0x18024424c], 0xffffffff
jne 0x180108451
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18010843e
nop word [rax + rax]
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x1801083e1
mov rdx, r11
test rax, rax
je 0x180108420
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x180108400
cmp r9d, 0x3369e751
je 0x18010842b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1801083d0
jmp 0x18010843e
lea r8, str.m_iHealth
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
mov dword [0x180244218], r11d
lea rcx, [0x18024424c]
call fcn.180190560
lea eax, [rbx*4]
cdqe
movsxd rdx, dword [0x180244218]
add rax, rdi
mov eax, dword [rdx + rax]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret

Function at 0x1801087b0
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov ecx, r9d
mov ebp, r8d
mov ebx, edx
call fcn.180186e50
mov rcx, qword [0x180243ed8]
mov esi, eax
xor r14d, r14d
mov eax, 8
btr esi, 0x1f
mov edi, r14d
cmp ebx, 2
mov rdx, qword [rcx]
cmove edi, eax
call qword [rdx + 0x60]
shlx ebx, eax, edi
lea eax, [rdi + 8]
shlx ecx, ebp, eax
mov rax, qword gs:[0x58]
or ebx, ecx
mov ecx, dword [0x18024256c]
xor ebx, esi
mov esi, 4
mov rdi, qword [rax + rcx*8]
mov eax, dword [rdi + rsi]
cmp dword [0x180256a30], eax
jle 0x180108874
lea rcx, [0x180256a30]
call fcn.1801905cc
cmp dword [0x180256a30], 0xffffffff
jne 0x180108874
lea rcx, str.vstdlib.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.RandomSeed
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x180256a30]
mov qword [0x180256a10], rax
call fcn.180190560
mov ecx, ebx
call qword [0x180256a10]
mov eax, dword [rdi + rsi]
cmp dword [0x180256a08], eax
jle 0x1801088cc
lea rcx, [0x180256a08]
call fcn.1801905cc
cmp dword [0x180256a08], 0xffffffff
jne 0x1801088cc
lea rcx, str.vstdlib.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.RandomInt
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x180256a08]
mov qword [0x180256a40], rax
call fcn.180190560
mov edx, 0x270f
xor ecx, ecx
call qword [0x180256a40]
cmp byte [rsp + 0x50], r14b
je 0x1801088e8
cmp eax, 0x64
setl al
jmp 0x1801088f0
cmp eax, 0x1770
setge al
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x18010a350
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rcx
push r14
sub rsp, 0x40
mov r14, qword [0x18023d8f0]
test r14, r14
je 0x18010a543
mov rax, qword [0x1802539b0]
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x38], rsi
mov rbx, qword [rax]
mov qword [rsp + 0x30], rdi
cmp rbx, rax
je 0x18010a472
movabs rsi, 0xcbf29ce484222325
movabs rdi, 0x100000001b3
nop word [rax + rax]
mov rcx, qword [0x180243ec0]
mov edx, dword [rbx + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x18]
test rax, rax
je 0x18010a3cd
mov rbx, qword [rbx]
jmp 0x18010a465
movzx eax, byte [rbx + 0x11]
mov rcx, rbx
movzx r8d, byte [rbx + 0x10]
xor r8, rsi
imul r8, rdi
xor r8, rax
movzx eax, byte [rbx + 0x12]
imul r8, rdi
xor r8, rax
movzx eax, byte [rbx + 0x13]
imul r8, rdi
xor r8, rax
imul r8, rdi
and r8, qword [0x1802539d8]
shl r8, 4
add r8, qword [0x1802539c0]
mov rax, qword [r8]
cmp qword [r8 + 8], rbx
jne 0x18010a437
cmp rax, rbx
jne 0x18010a42d
mov rax, qword [0x1802539b0]
mov qword [r8], rax
mov qword [r8 + 8], rax
jmp 0x18010a442
mov rax, qword [rbx + 8]
mov qword [r8 + 8], rax
jmp 0x18010a442
cmp rax, rbx
jne 0x18010a442
mov rax, qword [rbx]
mov qword [r8], rax
mov rbx, qword [rbx]
mov edx, 0x18
dec qword [0x1802539b8]
mov rax, qword [rcx + 8]
mov qword [rax], rbx
mov rax, qword [rcx + 8]
mov qword [rbx + 8], rax
call fcn.18019051c
cmp rbx, qword [0x1802539b0]
jne 0x18010a3b0
lea r8, [rsp + 0x50]
mov dword [rsp + 0x50], 0
lea rdx, [rsp + 0x20]
lea rcx, [0x18023d900]
call fcn.1800c8090
mov rcx, qword [rax]
mov rbp, qword [rcx + 0x20]
mov rsi, qword [rcx + 0x18]
cmp rsi, rbp
je 0x18010a52f
mov rdi, qword [rsi]
mov rcx, rdi
call fcn.1800bcf40
cmp byte [rax], 0
jne 0x18010a522
mov rcx, rdi
call fcn.1800bd250
mov ecx, dword [rax]
shr ecx, 0xd
test cl, 1
jne 0x18010a522
mov rax, qword [rdi + 0x10]
lea rbx, [rdi + 0x10]
mov rcx, rbx
call qword [rax + 0x40]
test al, al
je 0x18010a4ef
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x48]
mov edx, eax
mov rcx, r14
call fcn.180108360
mov edi, eax
jmp 0x18010a4f9
mov rcx, rdi
call fcn.1800c2d50
mov edi, dword [rax]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x48]
lea r8, [rsp + 0x50]
mov dword [rsp + 0x50], eax
lea rdx, [rsp + 0x20]
lea rcx, [0x1802539a8]
call fcn.1800c82d0
mov rcx, qword [rax]
mov dword [rcx + 0x14], edi
add rsi, 8
cmp rsi, rbp
jne 0x18010a4a4
mov rdi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x38]
add rsp, 0x40
pop r14
ret
Function at 0x18010be80
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rbx, rdx
mov rdi, rcx
mov r8d, dword [0x18024256c]
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax + r8*8]
mov r8d, dword [rcx + rax]
cmp dword [0x180244264], r8d
jle 0x18010bf74
lea rcx, [0x180244264]
call fcn.1801905cc
cmp dword [0x180244264], 0xffffffff
jne 0x18010bf74
mov rcx, qword [0x180243e98]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
xor r11d, r11d
test rax, rax
je 0x18010bf5e
nop dword [rax + rax]
mov r8, qword [r10 + 0x10]
mov rax, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rax
cmp byte [r8 + rax], r11b
jne 0x18010bf01
mov rdx, r11
test rax, rax
je 0x18010bf40
nop dword [rax]
nop word [rax + rax]
movsx ecx, byte [r8 + rdx]
xor ecx, r9d
imul r9d, ecx, 0x1000193
inc rdx
cmp rdx, rax
jb 0x18010bf20
cmp r9d, 0x7a1c884e
je 0x18010bf4b
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x18010bef0
jmp 0x18010bf5e
lea r8, str.m_hConstraintEntity
mov rdx, qword [r10 + 0x18]
call fcn.180190160
mov r11d, eax
lea eax, [r11 - 8]
mov dword [0x180244250], eax
lea rcx, [0x180244264]
call fcn.180190560
movsxd rax, dword [0x180244250]
mov qword [rax + rdi], rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x18012e6a0
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x18012e759
mov rax, qword [rbx + 0x38]
shr rax, 3
cmp rax, rcx
jbe 0x18012e6da
mov rdx, qword [rbx + 8]
mov rcx, rbx
mov r8, rdx
mov rdx, qword [rdx]
add rsp, 0x20
pop rbx
jmp 0x18012e8e0
mov rcx, qword [rbx + 8]
mov qword [rsp + 0x30], rsi
xor esi, esi
mov qword [rsp + 0x38], rdi
mov rax, qword [rcx + 8]
mov qword [rax], rsi
mov rcx, qword [rcx]
test rcx, rcx
je 0x18012e715
nop dword [rax]
mov rdi, qword [rcx]
mov edx, 0x20
call fcn.18019051c
mov rcx, rdi
test rdi, rdi
jne 0x18012e700
mov rax, qword [rbx + 8]
mov qword [rax], rax
mov rax, qword [rbx + 8]
mov qword [rax + 8], rax
mov qword [rbx + 0x10], rsi
mov rdi, qword [rbx + 0x18]
mov rcx, qword [rbx + 0x20]
sub rcx, rdi
add rcx, 7
shr rcx, 3
cmp rdi, qword [rbx + 0x20]
cmova rcx, rsi
mov rsi, qword [rsp + 0x30]
test rcx, rcx
je 0x18012e754
mov rax, qword [rbx + 8]
rep stosq qword [rdi], rax
mov rdi, qword [rsp + 0x38]
add rsp, 0x20
pop rbx
ret
Function at 0x18012f230
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x60
movzx esi, dl
mov rdi, rcx
xor ebx, ebx
cmp byte [0x180242b2c], bl
jne 0x18012f3e5
test byte [rcx + 0x28], 6
je 0x18012f2a0
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x180202ed0]
mov dword [rsp + 0x40], eax
movzx eax, word [0x180202ed4]
mov word [rsp + 0x44], ax
movzx eax, byte [0x180202ed6]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], bl
jmp 0x18012f2b2
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180098aa0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180098aa0
mov rdx, rax
mov rcx, rdi
call fcn.180134890
cmp al, sil
je 0x18012f2f0
lea rcx, [rdi + 0x38]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
call fcn.1800edfb0
mov rcx, qword [rax]
mov byte [rcx + 0x30], sil
jmp 0x18012f3db
lea rdx, [rsp + 0x40]
mov rbp, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x18012f317
test rcx, rcx
je 0x18012f344
nop word [rax + rax]
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x18012f330
mov rax, qword [0x180202ed0]
test al, al
je 0x18012f36a
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x180202ed1]
call fcn.1800e91b0
mov r8d, eax
cmp esi, r8d
je 0x18012f3db
mov rax, qword [rdi + 0x40]
mov rbx, qword [rax]
cmp rbx, rax
je 0x18012f3db
nop dword [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x18012f39f
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x18012f3d2
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x18012f3d2
lea rcx, [rdi + 0x38]
mov r8, rbx
lea rdx, [rsp + 0x90]
call fcn.1800ec170
mov rbx, qword [rax]
mov r14, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x40]
jmp 0x18012f3d5
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x40]
jne 0x18012f380
lea rcx, [rsp + 0x40]
call fcn.180098e30
movzx eax, byte [0x180242b2b]
mov byte [0x180242b2c], al
movzx eax, byte [0x180242b2a]
mov byte [0x180242b29], al
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
Function at 0x18012f750
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0x60
mov rbx, rdx
xor edi, edi
cmp byte [0x180242b2c], dil
jne 0x18012f92d
test byte [0x18024e0a8], 6
je 0x18012f7c6
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x180202ed0]
mov dword [rsp + 0x40], eax
movzx eax, word [0x180202ed4]
mov word [rsp + 0x44], ax
movzx eax, byte [0x180202ed6]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], dil
jmp 0x18012f7d8
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180098aa0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180098aa0
mov rdx, rax
call fcn.180134d00
mov rcx, rax
shr rcx, 0x20
cmp eax, ebx
jne 0x18012f906
cmp ecx, dword [rsp + 0x8c]
jne 0x18012f906
lea rdx, [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x58]
cmp rbp, 0xf
cmova rdx, rsi
mov r8d, 0x811c9dc5
mov ebx, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x18012f832
test rcx, rcx
je 0x18012f854
movsx eax, byte [rdi + rdx]
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdi
cmp rdi, rcx
jb 0x18012f840
mov rax, qword [0x180202ed0]
test al, al
je 0x18012f87a
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x180202ed1]
call fcn.1800e91b0
mov r8d, eax
cmp ebx, r8d
je 0x18012f923
mov rdi, qword [0x18024e0c8]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x18012f923
nop word [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp rbp, 0xf
cmova rdx, rsi
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x18012f8bf
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x18012f8fc
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x18012f8fc
mov r8, rbx
lea rdx, [rsp + 0x80]
lea rcx, [0x18024e0c0]
call fcn.1800ec170
mov rbx, qword [rax]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [0x18024e0c8]
jmp 0x18012f8ff
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x18012f8a0
jmp 0x18012f923
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
lea rcx, [0x18024e0c0]
call fcn.1800ed5a0
mov rcx, qword [rax]
mov qword [rcx + 0x30], rbx
lea rcx, [rsp + 0x40]
call fcn.180098e30
movzx eax, byte [0x180242b2b]
mov byte [0x180242b2c], al
movzx eax, byte [0x180242b2a]
mov byte [0x180242b29], al
mov rbx, qword [rsp + 0x90]
add rsp, 0x60
pop rdi
pop rsi
pop rbp
ret
Function at 0x18012fc90
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x70
vmovaps xmmword [rsp + 0x60], xmm6
vmovaps xmm6, xmm1
mov rdi, rcx
xor ebx, ebx
cmp byte [0x180242b2c], bl
jne 0x18012fe52
test byte [rcx + 0x28], 6
je 0x18012fd07
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x180202ed0]
mov dword [rsp + 0x40], eax
movzx eax, word [0x180202ed4]
mov word [rsp + 0x44], ax
movzx eax, byte [0x180202ed6]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], bl
jmp 0x18012fd19
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180098aa0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180098aa0
mov rdx, rax
mov rcx, rdi
call fcn.180134f10
vucomiss xmm0, xmm6
jp 0x18012fe2d
jne 0x18012fe2d
lea rdx, [rsp + 0x40]
mov rbp, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
inc rcx
cmp byte [rdx + rcx], 0
jne 0x18012fd70
test rcx, rcx
je 0x18012fd94
nop
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x18012fd80
mov rax, qword [0x180202ed0]
test al, al
je 0x18012fdba
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x180202ed1]
call fcn.1800e91b0
mov r8d, eax
cmp esi, r8d
je 0x18012fe48
mov rax, qword [rdi + 0x40]
mov rbx, qword [rax]
cmp rbx, rax
je 0x18012fe48
nop
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x18012fdef
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x18012fe22
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x18012fe22
lea rcx, [rdi + 0x38]
mov r8, rbx
lea rdx, [rsp + 0xa0]
call fcn.1800ec170
mov rbx, qword [rax]
mov r14, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x40]
jmp 0x18012fe25
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x40]
jne 0x18012fdd0
jmp 0x18012fe48
lea rcx, [rdi + 0x38]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
call fcn.1800edaa0
mov rcx, qword [rax]
vmovss dword [rcx + 0x30], xmm6
lea rcx, [rsp + 0x40]
call fcn.180098e30
movzx eax, byte [0x180242b2b]
mov byte [0x180242b2c], al
movzx eax, byte [0x180242b2a]
mov byte [0x180242b29], al
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
vmovaps xmm6, xmmword [rsp + 0x60]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
Function at 0x180130190
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r14
sub rsp, 0x60
mov esi, edx
mov rdi, rcx
xor ebx, ebx
cmp byte [0x180242b2c], bl
jne 0x180130345
test byte [rcx + 0x28], 6
je 0x1801301ff
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 0xf
mov rax, qword [0x180202ed0]
mov dword [rsp + 0x40], eax
movzx eax, word [0x180202ed4]
mov word [rsp + 0x44], ax
movzx eax, byte [0x180202ed6]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], bl
jmp 0x180130211
lea rdx, str.default
lea rcx, [rsp + 0x40]
call fcn.180098aa0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180098aa0
mov rdx, rax
mov rcx, rdi
call fcn.180135120
cmp eax, esi
je 0x18013024d
lea rcx, [rdi + 0x38]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
call fcn.1800edaa0
mov rcx, qword [rax]
mov dword [rcx + 0x30], esi
jmp 0x18013033b
lea rdx, [rsp + 0x40]
mov rbp, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0xf
cmova rdx, rbp
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x180130274
test rcx, rcx
je 0x1801302a4
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x180130290
mov rax, qword [0x180202ed0]
test al, al
je 0x1801302ca
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x180202ed1]
call fcn.1800e91b0
mov r8d, eax
cmp esi, r8d
je 0x18013033b
mov rax, qword [rdi + 0x40]
mov rbx, qword [rax]
cmp rbx, rax
je 0x18013033b
nop dword [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbp
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x1801302ff
mov rcx, qword [rcx]
cmp r8, qword [rsp + 0x50]
jne 0x180130332
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180130332
lea rcx, [rdi + 0x38]
mov r8, rbx
lea rdx, [rsp + 0x90]
call fcn.1800ec170
mov rbx, qword [rax]
mov r14, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x40]
jmp 0x180130335
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x40]
jne 0x1801302e0
lea rcx, [rsp + 0x40]
call fcn.180098e30
movzx eax, byte [0x180242b2b]
mov byte [0x180242b2c], al
movzx eax, byte [0x180242b2a]
mov byte [0x180242b29], al
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
Function at 0x1801306f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x10], rdx
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x90
mov r14, rdx
mov rdi, rcx
xor ebx, ebx
cmp byte [0x180242b2c], bl
jne 0x1801308fc
test byte [rcx + 0x28], 6
je 0x18013076a
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], 7
mov qword [rbp - 0x11], 0xf
mov rax, qword [0x180202ed0]
mov dword [rbp - 0x29], eax
movzx eax, word [0x180202ed4]
mov word [rbp - 0x25], ax
movzx eax, byte [0x180202ed6]
mov byte [rbp - 0x23], al
mov byte [rbp - 0x22], bl
jmp 0x18013077b
lea rdx, str.default
lea rcx, [rbp - 0x29]
call fcn.180098aa0
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp + 0x17]
call fcn.180098aa0
mov r8, rax
mov rdx, rdi
lea rcx, [rbp - 9]
call fcn.1801355a0
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x1801307a5
mov rdx, qword [r14]
lea rcx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rcx, qword [rbp - 9]
mov r8, qword [rbp + 7]
cmp r8, qword [r14 + 0x10]
jne 0x1801308b5
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1801308b5
lea rdx, [rbp - 0x29]
mov r15, qword [rbp - 0x29]
mov r12, qword [rbp - 0x11]
cmp r12, 0xf
cmova rdx, r15
mov r8d, 0x811c9dc5
mov esi, r8d
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x1801307f2
test rcx, rcx
je 0x180130814
movsx eax, byte [rbx + rdx]
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
cmp rbx, rcx
jb 0x180130800
mov rax, qword [0x180202ed0]
test al, al
je 0x18013083a
movsx ecx, al
xor ecx, r8d
imul edx, ecx, 0x1000193
lea rcx, [0x180202ed1]
call fcn.1800e91b0
mov r8d, eax
cmp esi, r8d
je 0x1801308e9
mov rax, qword [rdi + 0x78]
mov rbx, qword [rax]
cmp rbx, rax
je 0x1801308e9
nop dword [rax]
nop word [rax + rax]
lea rcx, [rbx + 0x10]
lea rdx, [rbp - 0x29]
cmp r12, 0xf
cmova rdx, r15
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x18013087e
mov rcx, qword [rcx]
cmp r8, qword [rbp - 0x19]
jne 0x1801308aa
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1801308aa
lea rcx, [rdi + 0x70]
mov r8, rbx
lea rdx, [rbp + 0x77]
call fcn.1800ec260
mov rbx, qword [rax]
mov r12, qword [rbp - 0x11]
mov r15, qword [rbp - 0x29]
jmp 0x1801308ad
mov rbx, qword [rbx]
cmp rbx, qword [rdi + 0x78]
jne 0x180130860
jmp 0x1801308e9
lea rcx, [rdi + 0x70]
lea r8, [rbp - 0x29]
lea rdx, [rbp - 0x39]
call fcn.1800ee230
mov rcx, qword [rax]
add rcx, 0x30
cmp rcx, r14
je 0x1801308e9
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x1801308df
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
call fcn.180098e90
nop
lea rcx, [rbp - 9]
call fcn.180098e30
nop
lea rcx, [rbp - 0x29]
call fcn.180098e30
movzx eax, byte [0x180242b2b]
mov byte [0x180242b2c], al
movzx eax, byte [0x180242b2a]
mov byte [0x180242b29], al
mov rcx, r14
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
jmp fcn.180098e30