joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140003490
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
sub rsp, 0x80
mov rax, qword [0x140008070]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov rbx, qword [rsp + 0xd0]
xor ebp, ebp
movsx eax, dl
add eax, 0xffffffa8
mov r10, rcx
lea r11, str.0123456789abcdef
mov dword [rsp + 0x24], ebp
mov esi, ebp
cmp eax, 0x20
ja case.0x1400034f5.89
lea rdx, [0x140000000]
cdqe
movzx eax, byte [rdx + rax + 0x36e8]
mov ecx, dword [rdx + rax*4 + 0x36d0]
add rcx, rdx
jmp rcx
mov ecx, 0xa
test r10, r10
jns 0x14000350e
mov dword [rsp + 0x24], 0x2d
neg r10
jmp 0x140003537
test r8d, r8d
je 0x140003537
mov dword [rsp + 0x24], 0x2b
jmp 0x140003537
mov ecx, 8
jmp 0x140003537
mov ecx, 0xa
jmp 0x140003537
lea r11, str.0123456789ABCDEF
mov ecx, 0x10
mov qword [rsp + 0x90], rdi
mov edi, dword [rsp + 0xc0]
test r10, r10
jne 0x140003558
cmp dword [rsp + 0xc8], esi
je 0x140003558
test edi, edi
je 0x14000357f
lea r8, [rsp + 0x30]
nop dword [rax]
xor edx, edx
mov rax, r10
inc esi
div rcx
lea r8, [r8 + 1]
mov r10, rax
movzx eax, byte [rdx + r11]
mov byte [r8 - 1], al
test r10, r10
jne 0x140003560
mov eax, dword [rsp + 0xb0]
sub edi, esi
cmovs edi, ebp
sub eax, edi
sub eax, esi
cmovs eax, ebp
mov dword [rsp + 0x20], eax
test r9d, r9d
je 0x1400035a1
neg eax
mov dword [rsp + 0x20], eax
mov ecx, dword [rsp + 0xb8]
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x24]
mov r9, rbx
call fcn.140003cd0
test edi, edi
jle 0x1400035f0
nop
mov rax, qword [rbx + 0x10]
dec edi
test rax, rax
je 0x1400035e3
cmp qword [rbx], rax
jb 0x1400035e3
cmp qword [rbx + 0x18], rbp
jne 0x1400035db
inc dword [rbx + 0x20]
jmp 0x1400035ec
mov rcx, rbx
call fcn.140002930
mov rax, qword [rbx]
mov byte [rax], 0x30
inc qword [rbx]
test edi, edi
jg 0x1400035c0
movsxd rdi, esi
test esi, esi
jle 0x140003637
nop word [rax + rax]
mov rax, qword [rbx + 0x10]
movsx esi, byte [rsp + rdi + 0x2f]
dec rdi
test rax, rax
je 0x140003629
cmp qword [rbx], rax
jb 0x140003629
cmp qword [rbx + 0x18], rbp
jne 0x140003621
inc dword [rbx + 0x20]
jmp 0x140003632
mov rcx, rbx
call fcn.140002930
mov rax, qword [rbx]
mov byte [rax], sil
inc qword [rbx]
test rdi, rdi
jg 0x140003600
mov eax, dword [rsp + 0x20]
test eax, eax
jns 0x1400036a4
neg eax
movsxd rsi, eax
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x140003696
mov rdi, qword [rbx]
cmp rdi, rax
jb 0x140003696
mov r9, qword [rbx + 0x18]
test r9, r9
jne 0x140003663
inc dword [rbx + 0x20]
jmp 0x14000369f
mov rcx, qword [rbx + 8]
sub rdi, rcx
cmp byte [rbx + 0x24], bpl
jne 0x14000368f
test rdi, rdi
je 0x14000368f
mov r8, rdi
mov edx, 1
call qword [sym.imp.MSVCR120.dll_fwrite]
add dword [rbx + 0x20], eax
cmp rax, rdi
je 0x14000368f
mov byte [rbx + 0x24], 1
mov rax, qword [rbx + 8]
mov qword [rbx], rax
mov rax, qword [rbx]
mov byte [rax], 0x20
inc qword [rbx]
dec rsi
jne 0x140003644
mov rdi, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.140004890
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsp, r11
pop rsi
ret
Function at 0x140003710
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x20
xor eax, eax
lea edi, [r8 - 1]
mov qword [rsp + 0x30], rbp
test edi, edi
mov rbx, r9
mov ebp, ecx
cmovs edi, eax
test edx, edx
je 0x140003735
neg edi
mov qword [rsp + 0x38], rsi
test edi, edi
jle 0x1400037a1
nop
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x140003792
mov rsi, qword [rbx]
cmp rsi, rax
jb 0x140003792
mov r9, qword [rbx + 0x18]
test r9, r9
jne 0x14000375f
inc dword [rbx + 0x20]
jmp 0x14000379b
mov rcx, qword [rbx + 8]
sub rsi, rcx
cmp byte [rbx + 0x24], 0
jne 0x14000378b
test rsi, rsi
je 0x14000378b
mov r8, rsi
mov edx, 1
call qword [sym.imp.MSVCR120.dll_fwrite]
add dword [rbx + 0x20], eax
cmp rax, rsi
je 0x14000378b
mov byte [rbx + 0x24], 1
mov rax, qword [rbx + 8]
mov qword [rbx], rax
mov rax, qword [rbx]
mov byte [rax], 0x20
inc qword [rbx]
dec edi
test edi, edi
jg 0x140003740
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x1400037c3
cmp qword [rbx], rax
jb 0x1400037c3
cmp qword [rbx + 0x18], 0
jne 0x1400037bb
inc dword [rbx + 0x20]
jmp 0x1400037cc
mov rcx, rbx
call fcn.140002930
mov rax, qword [rbx]
mov byte [rax], bpl
inc qword [rbx]
mov rbp, qword [rsp + 0x30]
test edi, edi
jns 0x140003840
neg edi
movsxd rsi, edi
nop word [rax + rax]
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x140003832
mov rdi, qword [rbx]
cmp rdi, rax
jb 0x140003832
mov r9, qword [rbx + 0x18]
test r9, r9
jne 0x1400037ff
inc dword [rbx + 0x20]
jmp 0x14000383b
mov rcx, qword [rbx + 8]
sub rdi, rcx
cmp byte [rbx + 0x24], 0
jne 0x14000382b
test rdi, rdi
je 0x14000382b
mov r8, rdi
mov edx, 1
call qword [sym.imp.MSVCR120.dll_fwrite]
add dword [rbx + 0x20], eax
cmp rax, rdi
je 0x14000382b
mov byte [rbx + 0x24], 1
mov rax, qword [rbx + 8]
mov qword [rbx], rax
mov rax, qword [rbx]
mov byte [rax], 0x20
inc qword [rbx]
dec rsi
jne 0x1400037e0
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
Function at 0x140003b50
Capabilities:
Write file on windows

Disassembly:
test edx, edx
jle 0x140003c19
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push r14
sub rsp, 0x20
mov qword [rsp + 0x30], rsi
mov rbx, r8
mov ebp, edx
mov qword [rsp + 0x38], rdi
mov r14, rcx
nop word [rax + rax]
cmp qword [rbx + 0x10], 0
je 0x140003b8e
mov eax, dword [rbx + 0x10]
sub eax, dword [rbx]
jmp 0x140003b90
mov eax, ebp
test eax, eax
jg 0x140003bd5
mov r9, qword [rbx + 0x18]
test r9, r9
je 0x140003bfc
mov rcx, qword [rbx + 8]
mov rdi, qword [rbx]
sub rdi, rcx
cmp byte [rbx + 0x24], 0
jne 0x140003bcc
test rdi, rdi
je 0x140003bcc
mov r8, rdi
mov edx, 1
call qword [sym.imp.MSVCR120.dll_fwrite]
add dword [rbx + 0x20], eax
cmp rax, rdi
je 0x140003bcc
mov byte [rbx + 0x24], 1
mov rax, qword [rbx + 8]
mov qword [rbx], rax
jmp 0x140003bf6
mov rcx, qword [rbx]
cmp eax, ebp
mov esi, ebp
cmovl esi, eax
mov rdx, r14
movsxd rdi, esi
mov r8, rdi
call qword [sym.imp.MSVCR120.dll_memmove]
add qword [rbx], rdi
add r14, rdi
sub ebp, esi
test ebp, ebp
jg 0x140003b80
jmp 0x140003bff
add dword [rbx + 0x20], ebp
mov rsi, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x140003cd0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x20
cmp dword [r8], 0
mov rbx, r9
mov rdi, r8
mov r14, rdx
mov esi, ecx
jle 0x140003d48
test ecx, ecx
je 0x140003d48
mov ecx, dword [rdx]
test ecx, ecx
je 0x140003d11
mov rdx, rbx
call fcn.140003c20
dec dword [rdi]
mov dword [r14], 0
cmp dword [rdi], 0
jle 0x140003d48
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x140003d38
cmp qword [rbx], rax
jb 0x140003d38
cmp qword [rbx + 0x18], 0
jne 0x140003d30
inc dword [rbx + 0x20]
jmp 0x140003d41
mov rcx, rbx
call fcn.140002930
mov rax, qword [rbx]
mov byte [rax], sil
inc qword [rbx]
dec dword [rdi]
cmp dword [rdi], 0
jg 0x140003d16
xor eax, eax
cmp dword [r14], eax
setne al
cmp dword [rdi], eax
jle 0x140003dbd
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x140003da6
mov rsi, qword [rbx]
cmp rsi, rax
jb 0x140003da6
mov r9, qword [rbx + 0x18]
test r9, r9
jne 0x140003d73
inc dword [rbx + 0x20]
jmp 0x140003daf
mov rcx, qword [rbx + 8]
sub rsi, rcx
cmp byte [rbx + 0x24], 0
jne 0x140003d9f
test rsi, rsi
je 0x140003d9f
mov r8, rsi
mov edx, 1
call qword [sym.imp.MSVCR120.dll_fwrite]
add dword [rbx + 0x20], eax
cmp rax, rsi
je 0x140003d9f
mov byte [rbx + 0x24], 1
mov rax, qword [rbx + 8]
mov qword [rbx], rax
mov rax, qword [rbx]
mov byte [rax], 0x20
inc qword [rbx]
dec dword [rdi]
xor eax, eax
cmp dword [r14], eax
setne al
cmp dword [rdi], eax
jg 0x140003d54
mov esi, dword [r14]
test esi, esi
je 0x140003dff
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x140003de6
cmp qword [rbx], rax
jb 0x140003de6
cmp qword [rbx + 0x18], 0
jne 0x140003dde
inc dword [rbx + 0x20]
jmp 0x140003def
mov rcx, rbx
call fcn.140002930
mov rax, qword [rbx]
mov byte [rax], sil
inc qword [rbx]
mov eax, dword [rdi]
test eax, eax
jle 0x140003df9
dec eax
jmp 0x140003dfd
jns 0x140003dff
inc eax
mov dword [rdi], eax
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
add rsp, 0x20
pop r14
ret

Function at 0x14000ffcd
Capabilities:
Resolve function by hash

Disassembly:
movabs eax, dword fs:[0xc78c08500000030]
mov eax, dword [rax + 0xc]
mov esi, dword [rax + 0x1c]
lodsd eax, dword [rsi]
mov ebx, dword [rax + 8]
jmp 0x14000ffec
pop rsi
add esi, 3
push rbx
mov edx, 0xec0e4e8e
call rsi
push rax
mov edx, 0x7c0dfcaa
call rsi
push rax
push rdi
mov edx, 0x4ee4a045
call rsi
xor edx, edx
push rdx
push 0x6d756369
push 0x6c656167
push rsp
push rdx
push rdx
call rax
push rax
mov edx, 0x75da1966
call rsi
call rax
xchg edi, eax
mov edx, 0xffd97fb
call rsi
call rax
cmp edi, 0xb7
jne 0x14001003b
mov esp, ebp
invalid
call fcn.14001005c
sti
xchg edi, eax
std
pcmpeqd mm5, qword [rbp - 0x50]
jb 0x140010048
jb 0x140010048
mov bl, 0x16
movabs eax, dword [0xd368a7c7d2d83d6a]
invalid
Function at 0x180006550
Capabilities:
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rbx
mov r11d, r8d
mov r10, rdx
not r11d
mov r9, rcx
mov eax, r11d
test rdx, rdx
je 0x1800065ad
lea rbx, [0x180127690]
movzx r8d, byte [r9]
lea r9, [r9 + 1]
dec r10
cmp r8b, 0x23
jne 0x180006594
cmp r10, 2
jb 0x180006594
cmp byte [r9], r8b
jne 0x180006594
cmp byte [r9 + 1], r8b
cmove eax, r11d
movzx edx, al
xor rdx, r8
shr eax, 8
xor eax, dword [rbx + rdx*4]
test r10, r10
jne 0x180006570
not eax
mov rbx, qword [rsp + 8]
ret
movzx r8d, byte [rcx]
inc r9
test r8b, r8b
je 0x1800065ef
lea rbx, [0x180127690]
cmp r8b, 0x23
jne 0x1800065d3
cmp byte [r9], r8b
jne 0x1800065d3
cmp byte [r9 + 1], r8b
cmove eax, r11d
movzx edx, al
movzx ecx, r8b
movzx r8d, byte [r9]
xor rdx, rcx
shr eax, 8
inc r9
xor eax, dword [rbx + rdx*4]
test r8b, r8b
jne 0x1800065c0
mov rbx, qword [rsp + 8]
not eax
ret

Function at 0x180006740
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push r14
sub rsp, 0x20
mov r14, r8
test r8, r8
je 0x18000675a
mov qword [r8], 0
lea rdx, [0x180126f58]
call fcn.180006600
mov rbx, rax
test rax, rax
jne 0x18000677a
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop r14
ret
mov qword [rsp + 0x30], rsi
mov rcx, rbx
mov qword [rsp + 0x38], rdi
call fcn.1800df51c
mov esi, eax
cmp eax, 0xffffffff
je 0x180006862
xor edx, edx
mov r8d, 2
mov rcx, rbx
call fcn.1800dff8c
test eax, eax
jne 0x180006862
mov rcx, rbx
call fcn.1800df51c
movsxd rdi, eax
cmp edi, 0xffffffff
je 0x180006862
xor r8d, r8d
mov edx, esi
mov rcx, rbx
call fcn.1800dff8c
test eax, eax
jne 0x180006862
cmp rdi, 0xffffffffffffffff
je 0x180006862
mov rax, qword [0x18017d3d8]
test rax, rax
je 0x1800067f4
inc dword [rax + 0xf0]
mov rdx, qword [0x18017d3f8]
mov rcx, rdi
call qword [0x18017bec8]
mov rsi, rax
test rax, rax
je 0x180006862
mov r9, rbx
mov r8, rdi
mov edx, 1
mov rcx, rax
call fcn.1800e0bf0
mov rcx, rbx
cmp rax, rdi
je 0x180006850
call fcn.1800dfc70
mov rax, qword [0x18017d3d8]
test rax, rax
je 0x18000683e
dec dword [rax + 0xf0]
mov rdx, qword [0x18017d3f8]
mov rcx, rsi
call qword [0x18017bed0]
jmp 0x18000686a
call fcn.1800dfc70
test r14, r14
je 0x18000685d
mov qword [r14], rdi
mov rax, rsi
jmp 0x18000686c
mov rcx, rbx
call fcn.1800dfc70
xor eax, eax
mov rsi, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop r14
ret
Function at 0x18000a730
Capabilities:
Hash data with crc32

Disassembly:
sub rsp, 0x18
movss xmm0, dword [rcx + 0x110]
lea r10, [0x180127690]
mov rax, qword [rcx + 0xf8]
movss xmm1, dword [rcx + 0x114]
movss xmm2, dword [rdx]
movss xmm4, dword [rdx + 8]
subss xmm2, xmm0
movss xmm3, dword [rdx + 4]
subss xmm4, xmm0
movss xmm0, dword [rdx + 0xc]
subss xmm3, xmm1
movsxd rcx, dword [rcx + 0xf0]
subss xmm0, xmm1
movd r8d, xmm2
movss dword [rsp], xmm2
mov r9d, dword [rax + rcx*4 - 4]
movzx eax, byte [rsp]
not r9d
movzx ecx, r9b
xor rcx, rax
shr r9d, 8
mov eax, r8d
movss dword [rsp + 4], xmm3
shr eax, 8
movzx edx, al
mov eax, r8d
xor r9d, dword [r10 + rcx*4]
movzx ecx, r9b
xor rdx, rcx
shr r9d, 8
shr eax, 0x10
movss dword [rsp + 8], xmm4
movss dword [rsp + 0xc], xmm0
xor r9d, dword [r10 + rdx*4]
movzx ecx, r9b
shr r9d, 8
movzx edx, al
movzx eax, byte [rsp + 4]
xor rdx, rcx
xor r9d, dword [r10 + rdx*4]
movzx ecx, r9b
shr r9d, 8
mov edx, r8d
shr rdx, 0x18
xor rdx, rcx
movd r8d, xmm3
xor r9d, dword [r10 + rdx*4]
movzx ecx, r9b
xor rcx, rax
shr r9d, 8
mov eax, r8d
shr eax, 8
movzx edx, al
mov eax, r8d
xor r9d, dword [r10 + rcx*4]
movzx ecx, r9b
xor rdx, rcx
shr r9d, 8
shr eax, 0x10
xor r9d, dword [r10 + rdx*4]
movzx ecx, r9b
shr r9d, 8
movzx edx, al
movzx eax, byte [rsp + 8]
xor rdx, rcx
xor r9d, dword [r10 + rdx*4]
movzx ecx, r9b
shr r9d, 8
mov edx, r8d
shr rdx, 0x18
xor rdx, rcx
movd r8d, xmm4
xor r9d, dword [r10 + rdx*4]
movzx ecx, r9b
xor rcx, rax
shr r9d, 8
mov eax, r8d
xor r9d, dword [r10 + rcx*4]
shr eax, 8
movzx edx, al
movzx ecx, r9b
xor rdx, rcx
shr r9d, 8
mov eax, r8d
shr eax, 0x10
xor r9d, dword [r10 + rdx*4]
movzx ecx, r9b
shr r9d, 8
movzx edx, al
movzx eax, byte [rsp + 0xc]
xor rdx, rcx
xor r9d, dword [r10 + rdx*4]
movzx ecx, r9b
shr r9d, 8
mov edx, r8d
shr rdx, 0x18
xor rdx, rcx
movd r8d, xmm0
xor r9d, dword [r10 + rdx*4]
movzx ecx, r9b
xor rcx, rax
shr r9d, 8
mov eax, r8d
shr eax, 8
movzx edx, al
mov eax, r8d
xor r9d, dword [r10 + rcx*4]
movzx ecx, r9b
xor rdx, rcx
shr r9d, 8
shr eax, 0x10
shr r8, 0x18
xor r9d, dword [r10 + rdx*4]
movzx ecx, r9b
shr r9d, 8
movzx edx, al
xor rdx, rcx
xor r9d, dword [r10 + rdx*4]
movzx edx, r9b
shr r9d, 8
xor r8, rdx
xor r9d, dword [r10 + r8*4]
not r9d
mov eax, r9d
add rsp, 0x18
ret
Function at 0x18000dcf0
Capabilities:
Hash data with crc32

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x40
mov rdi, qword [0x18017d3d8]
mov r14d, edx
mov r12d, dword [rsp + 0x90]
movaps xmmword [rsp + 0x30], xmm6
mov rbx, qword [rdi + 0x3f48]
mov eax, dword [rbx + 0x14]
and eax, 4
or eax, 0x1000103
or r12d, eax
cmp qword [rbx + 0x1a8], 0
jne 0x18000dd4b
cmp qword [rdi + 0x4bb8], 0
mov eax, 0x250
je 0x18000dd50
mov eax, 0x220
movss xmm5, dword [rax + rbx]
xorps xmm4, xmm4
movss xmm2, dword [rax + rbx + 4]
xor r15d, r15d
cvttss2si eax, dword [r8]
subss xmm5, dword [rbx + 0x100]
subss xmm2, dword [rbx + 0x104]
movd xmm1, eax
cvttss2si eax, dword [r8 + 4]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
ucomiss xmm1, xmm4
cvtdq2ps xmm0, xmm0
jp 0x18000dd96
mov eax, 1
je 0x18000dd99
mov eax, r15d
ucomiss xmm0, xmm4
jp 0x18000dda6
jne 0x18000dda6
mov r15d, 2
movss xmm3, dword [0x180163100]
or r15d, eax
comiss xmm4, xmm1
jb 0x18000ddc1
addss xmm5, xmm1
movaps xmm1, xmm5
maxss xmm1, xmm3
comiss xmm4, xmm0
jb 0x18000ddd1
addss xmm2, xmm0
movaps xmm0, xmm2
maxss xmm0, xmm3
or dword [rdi + 0x4828], 2
xor edx, edx
movss dword [rdi + 0x4848], xmm1
movss dword [rdi + 0x484c], xmm0
mov dword [rdi + 0x4830], 1
mov r9, qword [rbx + 8]
test rcx, rcx
je 0x18000de1a
mov dword [rsp + 0x28], r14d
lea r8, str._s__s__08X
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x70]
call fcn.180006470
jmp 0x18000de30
lea r8, str._s__08X
mov dword [rsp + 0x20], r14d
lea rcx, [rsp + 0x70]
call fcn.180006470
mov rcx, qword [rsp + 0x70]
mov r8d, r12d
movss xmm6, dword [rdi + 0x37f8]
xor edx, edx
call fcn.180010b10
mov rsi, qword [rdi + 0x3f48]
movzx ebp, al
movss dword [rdi + 0x37f8], xmm6
cmp word [rsi + 0xc2], 1
mov dword [rsi + 0x80], r14d
mov byte [rsi + 0xd2], r15b
jne 0x18000de7e
movsd xmm0, qword [rsi + 0x20]
movsd qword [rbx + 0x100], xmm0
mov r9d, r14d
lea rdx, [0x180126e79]
not r9d
lea r10, [0x180127690]
mov ebx, r9d
mov r8b, 0x23
cmp r8b, 0x23
jne 0x18000deab
cmp byte [rdx], r8b
jne 0x18000deab
cmp byte [rdx + 1], r8b
cmove ebx, r9d
movzx ecx, bl
movzx eax, r8b
movzx r8d, byte [rdx]
xor rcx, rax
shr ebx, 8
inc rdx
xor ebx, dword [r10 + rcx*4]
test r8b, r8b
jne 0x18000de98
not ebx
cmp dword [rdi + 0x3fa8], ebx
jne 0x18000ded7
call fcn.18000aa20
cmp dword [rdi + 0x4950], r14d
jne 0x18000df24
bt r12d, 0x17
jb 0x18000df24
cmp word [rsi + 0x15c], 0
jne 0x18000defa
cmp byte [rsi + 0x162], 0
je 0x18000df24
xor edx, edx
mov rcx, rsi
call fcn.180013010
xor edx, edx
mov rcx, rsi
call fcn.180019020
mov rdx, rsi
mov ecx, ebx
call fcn.18000a920
mov eax, dword [rdi + 0x4974]
mov dword [rdi + 0x3fd0], eax
mov rbx, qword [rsp + 0x78]
movzx eax, bpl
mov rbp, qword [rsp + 0x80]
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x40
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
Function at 0x180013b80
Capabilities:
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rax, qword [0x18017d3d8]
lea r10, [0x180127690]
mov r8d, ecx
mov rbx, qword [rax + 0x3f48]
add rbx, 0xf0
movsxd r9, dword [rbx]
mov rax, qword [rbx + 8]
mov edi, dword [rax + r9*4 - 4]
not edi
movzx eax, r8b
movzx ecx, dil
xor rcx, rax
shr edi, 8
mov eax, r8d
shr eax, 8
movzx edx, al
mov eax, r8d
xor edi, dword [r10 + rcx*4]
movzx ecx, dil
xor rdx, rcx
shr edi, 8
shr eax, 0x10
xor edi, dword [r10 + rdx*4]
movzx ecx, dil
shr edi, 8
movzx edx, al
mov eax, r8d
mov r8d, dword [rbx + 4]
xor rdx, rcx
shr rax, 0x18
xor edi, dword [r10 + rdx*4]
movzx ecx, dil
shr edi, 8
xor rcx, rax
xor edi, dword [r10 + rcx*4]
not edi
cmp r9d, r8d
jne 0x180013c41
lea ecx, [r9 + 1]
test r8d, r8d
je 0x180013c2d
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x180013c32
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
mov rcx, rbx
call fcn.18001eb50
movsxd rcx, dword [rbx]
mov rax, qword [rbx + 8]
mov dword [rax + rcx*4], edi
inc dword [rbx]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret

Function at 0x180017040
Capabilities:
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x18017b040]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov rbx, qword [0x18017d3d8]
mov edi, ecx
cmp byte [rbx + 0x4b01], 0
jne 0x1800170a1
cmp byte [rbx + 0x4b02], 0
jne 0x1800170a1
movsx r9d, word [rbx + 0x5c34]
lea r8, str.Tooltip__02d
mov edx, 0x10
lea rcx, [rsp + 0x20]
call fcn.180006420
test dil, 2
je 0x1800171cf
jmp 0x18001712c
movss xmm1, dword [rbx + 0x3894]
lea r8, str.Tooltip__02d
movsx r9d, word [rbx + 0x5c34]
lea rcx, [rsp + 0x20]
movaps xmm0, xmm1
xor eax, eax
mulss xmm0, dword [0x180163150]
mov edx, 0x10
mulss xmm1, dword [0x18016313c]
addss xmm0, dword [rbx + 0xe00]
addss xmm1, dword [rbx + 0xe04]
mov qword [rbx + 0x4840], rax
mov dword [rbx + 0x482c], 1
movss dword [rbx + 0x4838], xmm0
movss dword [rbx + 0x483c], xmm1
movss xmm0, dword [rbx + 0x38fc]
mulss xmm0, dword [0x180163038]
or dword [rbx + 0x4828], 0x41
movss dword [rbx + 0x4888], xmm0
call fcn.180006420
movzx r9d, byte [rsp + 0x20]
lea r8, [rsp + 0x21]
mov r10d, 0xffffffff
mov ecx, r10d
test r9b, r9b
je 0x180017180
lea r11, [0x180127690]
nop dword [rax]
cmp r9b, 0x23
jne 0x180017163
cmp byte [r8], r9b
jne 0x180017163
cmp byte [r8 + 1], r9b
cmove ecx, r10d
movzx edx, cl
movzx eax, r9b
movzx r9d, byte [r8]
xor rdx, rax
shr ecx, 8
inc r8
xor ecx, dword [r11 + rdx*4]
test r9b, r9b
jne 0x180017150
not ecx
call fcn.18000e240
test rax, rax
je 0x1800171cf
cmp byte [rax + 0xb6], 0
je 0x1800171cf
mov byte [rax + 0xbb], 1
lea r8, str.Tooltip__02d
mov byte [rax + 0xbd], 1
lea rcx, [rsp + 0x20]
mov byte [rax + 0xd8], 1
mov edx, 0x10
inc word [rbx + 0x5c34]
movsx r9d, word [rbx + 0x5c34]
call fcn.180006420
xor edx, edx
lea rcx, [rsp + 0x20]
mov r8d, 0x20c0347
call fcn.180010b10
mov al, 1
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1800db5c0
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rdi
ret
Function at 0x18001cac0
Capabilities:
Hash data with crc32

Disassembly:
sub rsp, 8
movzx r9d, byte [rcx]
lea r8, [rcx + 1]
mov r10, qword [0x18017d3d8]
mov r11d, 0xffffffff
mov eax, r11d
test r9b, r9b
je 0x18001cb23
mov qword [rsp], rbx
lea rbx, [0x180127690]
nop dword [rax]
cmp r9b, 0x23
jne 0x18001cb03
cmp byte [r8], r9b
jne 0x18001cb03
cmp byte [r8 + 1], r9b
cmove eax, r11d
movzx edx, al
movzx ecx, r9b
movzx r9d, byte [r8]
xor rdx, rcx
shr eax, 8
inc r8
xor eax, dword [rbx + rdx*4]
test r9b, r9b
jne 0x18001caf0
mov rbx, qword [rsp]
movsxd rcx, dword [r10 + 0x5c90]
not eax
mov r8, qword [r10 + 0x5c98]
lea rdx, [rcx + rcx*8]
lea rcx, [r8 + rdx*8]
cmp r8, rcx
je 0x18001cb4f
cmp dword [r8 + 8], eax
je 0x18001cb56
add r8, 0x48
cmp r8, rcx
jne 0x18001cb40
xor eax, eax
add rsp, 8
ret
mov rax, r8
add rsp, 8
ret
Function at 0x180044c00
Capabilities:
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rcx
push rbx
sub rsp, 0x50
mov r10d, 0xffffffff
movaps xmmword [rsp + 0x40], xmm6
mov ecx, r10d
lea r8, [0x180126f29]
movaps xmm5, xmm3
lea rbx, [0x180127690]
mov r11, rdx
mov r9b, 0x23
nop
cmp r9b, 0x23
jne 0x180044c43
cmp byte [r8], r9b
jne 0x180044c43
cmp byte [r8 + 1], r9b
cmove ecx, r10d
movzx edx, cl
movzx eax, r9b
movzx r9d, byte [r8]
xor rdx, rax
shr ecx, 8
inc r8
xor ecx, dword [rbx + rdx*4]
test r9b, r9b
jne 0x180044c30
not ecx
call fcn.18000e240
mov rbx, qword [0x18017d3d8]
xorps xmm4, xmm4
test rax, rax
je 0x180044c83
cmp word [rax + 0xc2], 0
jne 0x180044d23
test r11, r11
jne 0x180044c92
mov rax, qword [rbx + 0x4938]
mov r11, qword [rax]
movss xmm1, dword [r11 + 0xb8]
movss xmm0, dword [r11 + 0xc]
movaps xmm3, xmm1
addss xmm3, dword [r11 + 4]
movss xmm2, dword [r11 + 0xbc]
subss xmm0, xmm1
addss xmm2, dword [r11 + 8]
addss xmm0, dword [r11 + 0xc0]
or dword [rbx + 0x4828], 3
mov qword [rbx + 0x4840], 0
mov dword [rbx + 0x482c], 1
mov dword [rbx + 0x4830], 1
maxss xmm4, xmm0
movaps xmm0, xmm3
unpcklps xmm0, xmm2
movsd qword [rbx + 0x4838], xmm0
addss xmm4, xmm3
subss xmm4, xmm3
unpcklps xmm4, xmm5
movsd qword [rbx + 0x4848], xmm4
addss xmm5, dword [r11 + 0xbc]
movss dword [r11 + 0xbc], xmm5
movups xmm0, xmmword [rbx + 0x3c00]
lea rcx, [rbx + 0x4898]
mov dword [rsp + 0x20], 0x35
lea rdx, [rsp + 0x20]
xorps xmm6, xmm6
movups xmmword [rsp + 0x24], xmm0
call fcn.18001dff0
movups xmmword [rbx + 0x3c00], xmm6
mov rbx, qword [0x18017d3d8]
lea rdx, [rsp + 0x20]
mov dword [rsp + 0x20], 3
movss xmm0, dword [rbx + 0x37d8]
lea rcx, [rbx + 0x48a8]
movss dword [rsp + 0x24], xmm0
call fcn.18001def0
lea rdx, [rsp + 0x60]
mov dword [rbx + 0x37d8], 0
mov ecx, 5
mov qword [rsp + 0x60], 0
call fcn.1800071d0
xor edx, edx
lea rcx, str.MainMenuBar
mov r8d, 0x50f
call fcn.180010b10
mov ecx, 2
movzx ebx, al
call fcn.180007260
mov r8, qword [0x18017d3d8]
movsxd rax, dword [r8 + 0x4898]
cmp eax, 1
jl 0x180044e00
mov rcx, qword [r8 + 0x48a0]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, 0x38b
add rax, rax
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x4898]
movaps xmm6, xmmword [rsp + 0x40]
movzx eax, bl
add rsp, 0x50
pop rbx
ret
Function at 0x180046350
Capabilities:
Hash data with crc32

Disassembly:
test dword [rcx + 0x10], 0x100000
mov r10, rdx
je 0x1800463d7
movzx r9d, byte [rdx]
lea r8, [rdx + 1]
mov r11d, 0xffffffff
mov eax, r11d
test r9b, r9b
je 0x1800463b0
lea r10, [0x180127690]
nop dword [rax]
cmp r9b, 0x23
jne 0x180046393
cmp byte [r8], r9b
jne 0x180046393
cmp byte [r8 + 1], r9b
cmove eax, r11d
movzx edx, al
movzx ecx, r9b
movzx r9d, byte [r8]
xor rdx, rcx
shr eax, 8
inc r8
xor eax, dword [r10 + rdx*4]
test r9b, r9b
jne 0x180046380
mov rcx, qword [0x18017d3d8]
not eax
cmp dword [rcx + 0x3fa8], eax
jne 0x1800463c7
mov dword [rcx + 0x3fac], eax
cmp dword [rcx + 0x3fd8], eax
jne 0x180046402
mov byte [rcx + 0x3fdc], 1
ret
mov rax, qword [0x18017d3d8]
xor edx, edx
mov rcx, r10
mov r8, qword [rax + 0x3f48]
movsxd rax, dword [r8 + 0xf0]
mov r8, qword [r8 + 0xf8]
mov r8d, dword [r8 + rax*4 - 4]
jmp fcn.180006550
ret