joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14000a920
Capabilities:
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
mov eax, 0x40
call fcn.140189f50
sub rsp, rax
mov rsi, qword [rdx]
lea r14, [rcx + 0x60]
mov rbx, rdx
mov edx, dword [r14]
mov rdi, rcx
mov rcx, qword [r14 + 0x10]
mov qword [rsp + 0x28], r8
lea r8, [rsp + 0x20]
xor r9d, r9d
mov qword [rsp + 0x20], rsi
call fcn.140004150
test rax, rax
je 0x14000a9a3
mov rax, qword [rax]
test rax, rax
je 0x14000a9a3
mov rax, qword [rax + 0x10]
cmp byte [rax + 4], 0
je 0x14000a991
cmp byte [rbx + 0x1c], 0
je 0x14000a991
mov edx, 1
mov byte [rax + 4], dl
xor eax, eax
add rsp, 0x40
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
xor edx, edx
mov byte [rax + 4], dl
xor eax, eax
add rsp, 0x40
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov edx, dword [rdi + 0xe8]
mov rcx, qword [rdi + 0xf8]
lea r8, [rsp + 0x28]
xor r9d, r9d
call fcn.140004150
test rax, rax
je 0x14000a9c5
mov rax, qword [rax]
mov rdi, qword [rax + 0x10]
mov r8, qword [rbx + 8]
lea rcx, [rsp + 0x38]
mov rdx, qword [rdi + 8]
call qword [0x1432a81a0]
cmp eax, 0x1f4
je 0x14000ab3e
test eax, eax
je 0x14000a9fd
mov ecx, eax
call fcn.140003cd0
add rsp, 0x40
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov ecx, 0x18
call fcn.14000d3f0
test rax, rax
je 0x14000ab4b
mov edx, dword [rbx + 0x18]
mov r9, qword [rsp + 0x38]
movzx r8d, byte [rbx + 0x1c]
mov dword [rax], edx
lea rdx, [rsp + 0x28]
mov rcx, r14
mov byte [rax + 4], r8b
mov qword [rax + 8], rsi
mov qword [rax + 0x10], r9
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], rax
call fcn.14000b450
mov ecx, dword [rdi + 0x60]
test ecx, ecx
jne 0x14000aa60
lea edx, [rcx + 1]
lea rcx, [rdi + 0x60]
call fcn.14000bf00
mov ecx, dword [rdi + 0x60]
test ecx, ecx
je 0x14000ab4b
mov r8, qword [rdi + 0x70]
test ecx, ecx
jne 0x14000aa73
mov ebp, dword [rsp + 0x20]
xor ebx, ebx
jmp 0x14000ab02
movzx eax, byte [rsp + 0x21]
movzx ebp, sil
xor edx, edx
xor ebp, 0x811c9dc5
imul ebp, ebp, 0x1000193
xor ebp, eax
movzx eax, byte [rsp + 0x22]
imul ebp, ebp, 0x1000193
xor ebp, eax
movzx eax, byte [rsp + 0x23]
imul ebp, ebp, 0x1000193
xor ebp, eax
movzx eax, byte [rsp + 0x24]
imul ebp, ebp, 0x1000193
xor ebp, eax
movzx eax, byte [rsp + 0x25]
imul ebp, ebp, 0x1000193
xor ebp, eax
movzx eax, byte [rsp + 0x26]
imul ebp, ebp, 0x1000193
xor ebp, eax
movzx eax, byte [rsp + 0x27]
imul ebp, ebp, 0x1000193
xor ebp, eax
imul ebp, ebp, 0x1000193
mov eax, ebp
div ecx
mov rax, qword [r8 + rdx*8]
lea rbx, [r8 + rdx*8]
test rax, rax
je 0x14000ab02
cmp qword [rax + 8], rsi
je 0x14000ab02
mov rbx, rax
mov rax, qword [rax]
test rax, rax
jne 0x14000aaf1
cmp qword [rbx], 0
jne 0x14000ab3e
mov ecx, 0x18
call fcn.14000d3f0
test rax, rax
je 0x14000ab25
mov qword [rax], 0
mov qword [rax + 8], rsi
mov dword [rax + 0x10], ebp
mov qword [rbx], rax
test rax, rax
je 0x14000ab4b
inc qword [rdi + 0x68]
mov rdx, qword [rdi + 0x68]
lea rcx, [rdi + 0x60]
call fcn.14000bf00
xor eax, eax
add rsp, 0x40
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov eax, 2
add rsp, 0x40
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x14000dfc0
Capabilities:
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
mov eax, 0x68
call fcn.140189f50
sub rsp, rax
lea rax, [rcx + 0x30]
mov rsi, rcx
mov qword [rsp + 0x20], rcx
mov rcx, rax
mov rbx, r8
mov rbp, rdx
mov qword [rsp + 0x38], rdx
xor edi, edi
mov qword [rsp + 0x48], rax
call fcn.14000d320
mov r14, qword [rbx + 0x10]
mov eax, dword [rbx]
lea rax, [r14 + rax*8]
mov r12d, edi
mov qword [rsp + 0x50], rax
cmp r14, rax
je 0x14000e029
cmp qword [r14], rdi
jne 0x14000e026
add r14, 8
cmp r14, rax
jne 0x14000e013
jmp 0x14000e200
mov r12, qword [r14]
mov qword [rsp + 0xb0], r13
mov qword [rsp + 0x60], r15
mov r15d, dword [rsp + 0x20]
nop dword [rax + rax]
test r12, r12
je 0x14000e1f3
mov rbx, qword [r12 + 8]
mov rbx, qword [rbx + 0x40]
test rbx, rbx
je 0x14000e1c0
nop dword [rax + rax]
mov r8, qword [rbx]
lea rdx, [rsp + 0x40]
xor r9d, r9d
mov rcx, rbp
call fcn.14000b150
test eax, eax
jne 0x14000e1f1
mov r13, qword [rsp + 0x40]
test r13, r13
je 0x14000e1ae
mov ecx, dword [rsi + 0x58]
mov rbp, qword [r13 + 8]
mov qword [rsp + 0x28], rbp
test ecx, ecx
jne 0x14000e0b0
lea edx, [rax + 1]
lea rcx, [rsi + 0x58]
call fcn.14000e770
mov ecx, dword [rsi + 0x58]
test ecx, ecx
je 0x14000e1ea
mov r8, qword [rsi + 0x68]
test ecx, ecx
je 0x14000e161
movzx eax, byte [rsp + 0x29]
movzx r15d, bpl
xor edx, edx
xor r15d, 0x811c9dc5
imul r15d, r15d, 0x1000193
xor r15d, eax
movzx eax, byte [rsp + 0x2a]
imul r15d, r15d, 0x1000193
xor r15d, eax
movzx eax, byte [rsp + 0x2b]
imul r15d, r15d, 0x1000193
xor r15d, eax
movzx eax, byte [rsp + 0x2c]
imul r15d, r15d, 0x1000193
xor r15d, eax
movzx eax, byte [rsp + 0x2d]
imul r15d, r15d, 0x1000193
xor r15d, eax
movzx eax, byte [rsp + 0x2e]
imul r15d, r15d, 0x1000193
xor r15d, eax
movzx eax, byte [rsp + 0x2f]
imul r15d, r15d, 0x1000193
xor r15d, eax
imul r15d, r15d, 0x1000193
mov eax, r15d
div ecx
mov rax, qword [r8 + rdx*8]
lea rdi, [r8 + rdx*8]
test rax, rax
je 0x14000e161
nop dword [rax + rax]
cmp qword [rax + 8], rbp
je 0x14000e161
mov rdi, rax
mov rax, qword [rax]
test rax, rax
jne 0x14000e150
cmp qword [rdi], 0
jne 0x14000e1a2
mov ecx, 0x20
call fcn.14000d3f0
test rax, rax
je 0x14000e189
mov qword [rax], 0
mov qword [rax + 8], rbp
mov qword [rax + 0x10], r13
mov dword [rax + 0x18], r15d
mov qword [rdi], rax
test rax, rax
je 0x14000e1ea
inc qword [rsi + 0x60]
mov rdx, qword [rsi + 0x60]
lea rcx, [rsi + 0x58]
call fcn.14000e770
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x20]
xor edi, edi
mov rbx, qword [rbx + 0x50]
test rbx, rbx
jne 0x14000e060
mov rax, qword [rsp + 0x50]
mov r12, qword [r12]
test r12, r12
jne 0x14000e049
nop dword [rax]
add r14, 8
cmp r14, rax
je 0x14000e040
mov r12, qword [r14]
test r12, r12
je 0x14000e1d0
jmp 0x14000e040
mov edi, 2
jmp 0x14000e1f3
mov edi, eax
mov r13, qword [rsp + 0xb0]
mov r15, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
call fcn.14000d3d0
mov eax, edi
add rsp, 0x68
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x1400203e0
Capabilities:
Encode data using xor

Disassembly:
test rcx, rcx
je 0x140020632
mov qword [rsp + 0x20], rbx
push rsi
sub rsp, 0x830
mov rax, qword [0x1402376b8]
xor rax, rsp
mov qword [rsp + 0x820], rax
mov rbx, rdx
mov rsi, rcx
test rdx, rdx
je 0x140020612
mov r11d, dword [rdx + 0x18]
mov qword [rsp + 0x850], rdi
mov eax, r11d
mov rdi, qword [rdx]
mov edx, 8
shl rax, 0xa
lea rcx, [rdi - 0x400]
add rcx, rax
lea rax, [rsp + 0x20]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140020441
mov r10d, dword [rbx + 0x1c]
mov r9d, 1
cmp r10d, r9d
jbe 0x14002058b
nop word [rax + rax]
inc r9d
lea r8, [rsp + 0x20]
mov edx, r9d
xor eax, eax
imul edx, r11d
dec edx
shl rdx, 0xa
add rdx, rdi
lea rcx, [rdx + 0x3f8]
cmp r8, rcx
ja 0x1400204fc
lea rcx, [rsp + 0x418]
cmp rcx, rdx
jb 0x1400204fc
mov rcx, qword [rdx + rax*8]
xor qword [rsp + rax*8 + 0x20], rcx
inc rax
cmp rax, 0x80
jl 0x1400204e3
jmp 0x140020582
lea rcx, [rsp + 0x20]
sub rcx, rdx
lea r8, [rsp + 0x30]
sub r8, rdx
lea rax, [rdx + 0x20]
mov edx, 0x10
nop word [rax + rax]
movdqu xmm0, xmmword [rcx + rax - 0x20]
movdqu xmm1, xmmword [rax - 0x20]
lea rax, [rax + 0x40]
pxor xmm1, xmm0
movdqu xmmword [rcx + rax - 0x60], xmm1
movdqu xmm0, xmmword [r8 + rax - 0x60]
movdqu xmm1, xmmword [rax - 0x50]
pxor xmm1, xmm0
movdqu xmm0, xmmword [rax - 0x40]
movdqu xmmword [r8 + rax - 0x60], xmm1
movdqu xmm1, xmmword [rax + rcx - 0x40]
pxor xmm1, xmm0
movdqu xmmword [rax + rcx - 0x40], xmm1
movdqu xmm0, xmmword [rax + r8 - 0x40]
movdqu xmm1, xmmword [rax - 0x30]
pxor xmm1, xmm0
movdqu xmmword [rax + r8 - 0x40], xmm1
sub rdx, 1
jne 0x140020520
cmp r9d, r10d
jb 0x1400204b0
mov rdi, qword [rsp + 0x850]
lea rcx, [rsp + 0x420]
lea rdx, [rsp + 0x20]
mov r8d, 0x20
nop word [rax + rax]
mov rax, qword [rdx]
lea rdx, [rdx + 0x20]
mov qword [rcx], rax
lea rcx, [rcx + 0x20]
mov rax, qword [rdx - 0x18]
mov qword [rcx - 0x18], rax
mov rax, qword [rdx - 0x10]
mov qword [rcx - 0x10], rax
mov rax, qword [rdx - 8]
mov qword [rcx - 8], rax
sub r8, 1
jne 0x1400205b0
mov edx, dword [rsi + 8]
lea r8, [rsp + 0x420]
mov rcx, qword [rsi]
mov r9d, 0x400
call fcn.14001ff80
mov rax, qword [rsi + 0x68]
mov rcx, qword [rbx]
test rax, rax
je 0x14002060c
mov edx, dword [rbx + 0x10]
shl rdx, 0xa
call rax
jmp 0x140020612
call qword [0x14018c510]
mov rcx, qword [rsp + 0x820]
xor rcx, rsp
call fcn.140189f20
mov rbx, qword [rsp + 0x858]
add rsp, 0x830
pop rsi
ret
Function at 0x14002c240
Capabilities:
Hash data using djb2

Disassembly:
sub rsp, 0x28
mov r10, rdx
test rcx, rcx
je 0x14002c2b9
cmp dword [rcx], 0
jne 0x14002c2b9
movsx rax, byte [rdx]
lea r11, [rcx + 0x10]
mov rcx, rdx
mov r9d, 0x1505
test rax, rax
je 0x14002c284
nop word [rax + rax]
imul r9, r9, 0x21
lea rcx, [rcx + 1]
add r9, rax
movsx rax, byte [rcx]
test rax, rax
jne 0x14002c270
mov r8, qword [r11 + 0x10]
lea rcx, [0x1401c5670]
xor edx, edx
mov rax, r9
div qword [rcx + r8*8]
mov r8, r10
mov rcx, r11
shl rdx, 4
add rdx, qword [r11 + 8]
call fcn.14002a1c0
test rax, rax
je 0x14002c2b9
mov rax, qword [rax + 0x18]
add rsp, 0x28
ret
xor eax, eax
add rsp, 0x28
ret
Function at 0x140031080
Capabilities:
Hash data using djb2

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x260
mov rax, qword [0x1402376b8]
xor rax, rsp
mov qword [rsp + 0x250], rax
movzx eax, byte [rdx + 0x198]
mov rsi, rdx
imul rbp, rax, 0x748
cmp dword [0x140238244], 0
mov r14, rcx
je 0x14003119a
xor edi, edi
lea rax, [0x1401c6a80]
cmp dword [0x1432aac64], edi
lea r15, [0x140000000]
lea rbx, [0x1401c6a08]
mov dword [rsp + 0x40], edi
cmovne rbx, rax
lea rcx, [r15 + 0x32ab098]
add rcx, rbp
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], dil
jne 0x140031100
neg rax
mov qword [rsp + 0x28], rcx
lea r9, [r15 + 0x32aafd8]
mov edx, 0x200
sbb eax, eax
lea r8, [0x1402184b0]
and eax, 0x3a
lea rcx, [rsp + 0x50]
add r9, rbp
mov dword [rsp + 0x20], eax
call fcn.140029200
lea rax, [rsp + 0x40]
mov r9, rbx
mov qword [rsp + 0x38], rax
lea rdx, [r15 + 0x32aad98]
mov dword [rsp + 0x30], edi
lea r8, [rsp + 0x50]
mov dword [rsp + 0x28], edi
add rdx, rbp
mov rcx, r14
mov dword [rsp + 0x20], edi
call fcn.1400439e0
mov rbx, rax
test rax, rax
jne 0x1400311c3
cmp dword [rsp + 0x40], 0xffffffff
jne 0x140031235
cmp dword [0x1432bf578], edi
mov dword [0x140238244], edi
jne 0x14003119a
lea rdx, [0x1401c6a48]
lea ecx, [rax + 0x10]
call fcn.1400432a0
xor eax, eax
mov rcx, qword [rsp + 0x250]
xor rcx, rsp
call fcn.140189f20
mov rbx, qword [rsp + 0x2a0]
add rsp, 0x260
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
cmp dword [rax], edi
jne 0x140031235
lea rax, [0x1401c5e54]
mov ecx, 0x72
mov r9d, 0x1505
nop dword [rax]
imul r9, r9, 0x21
lea rax, [rax + 1]
add r9, rcx
movsx rcx, byte [rax]
test rcx, rcx
jne 0x1400311e0
mov r10, qword [rbx + 0x20]
lea r8, [0x1401c5e54]
xor edx, edx
lea rcx, [rbx + 0x10]
mov rax, r9
div qword [r15 + r10*8 + 0x1c5670]
shl rdx, 4
add rdx, qword [rbx + 0x18]
call fcn.14002a1c0
test rax, rax
je 0x140031226
mov rdi, qword [rax + 0x18]
mov rdx, rsi
mov rcx, rdi
call fcn.14002f7d0
mov edi, eax
jmp 0x140031246
mov rdx, rsi
xor ecx, ecx
call fcn.14002f7d0
mov edi, eax
test rbx, rbx
je 0x140031262
mov rax, qword [rbx + 8]
cmp rax, 0xffffffffffffffff
je 0x140031262
sub rax, 1
mov qword [rbx + 8], rax
jne 0x140031262
mov rcx, rbx
call fcn.14002c610
mov eax, edi
jmp 0x14003119c
Function at 0x140038a80
Capabilities:
Hash data using djb2

Disassembly:
push rbp
sub rsp, 0x50
mov rax, qword [0x1402376b8]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rbp, qword [0x1432bfbb0]
test rbp, rbp
je 0x140038c48
cmp dword [rbp], 0
jne 0x140038c48
mov qword [rsp + 0x60], rbx
lea rbx, [0x140237758]
mov qword [rsp + 0x68], rsi
xor esi, esi
mov qword [rsp + 0x70], rdi
nop word [rax + rax]
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x140038bc3
lea rdx, [0x1401c615c]
call qword [0x14018c770]
test eax, eax
je 0x140038bb4
mov rdi, qword [rbx - 0x18]
mov rcx, rbp
mov rdx, rdi
call fcn.14002c240
test rax, rax
je 0x140038bb4
cmp dword [rbx - 0x10], 0
mov ecx, dword [rax]
je 0x140038ba1
cmp ecx, 2
jne 0x140038b46
mov rcx, qword [rax + 0x10]
call qword [0x14018c730]
mov rdi, rax
test rax, rax
je 0x140038bb4
mov ecx, dword [rbx]
mov rdx, rax
call fcn.140036d80
mov rcx, rdi
call qword [0x14018c510]
jmp 0x140038bb4
cmp ecx, 3
jne 0x140038b67
mov r8d, dword [rax + 0x10]
lea rdx, [0x1401c6164]
lea rcx, [rsp + 0x20]
call fcn.140021430
lea rdx, [rsp + 0x20]
jmp 0x140038bad
cmp ecx, 4
jne 0x140038b8e
movsd xmm2, qword [rax + 0x10]
lea rdx, [0x1401c6194]
movq r8, xmm2
lea rcx, [rsp + 0x30]
call fcn.140021430
lea rdx, [rsp + 0x30]
jmp 0x140038bad
mov r8, rdi
lea rdx, [0x1401c7af8]
xor ecx, ecx
call fcn.1400432a0
jmp 0x140038bb4
cmp ecx, 5
jne 0x140038bb4
lea rdx, [0x1401c55dd]
mov ecx, dword [rbx]
call fcn.140036d80
inc esi
add rbx, 0x20
cmp esi, 0x58
jb 0x140038ad0
cmp dword [rbp], 0
mov rdi, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
jne 0x140038c48
lea rax, [0x1401c7b10]
mov ecx, 0x70
mov r9d, 0x1505
nop word [rax + rax]
imul r9, r9, 0x21
lea rax, [rax + 1]
add r9, rcx
movsx rcx, byte [rax]
test rcx, rcx
jne 0x140038bf0
mov r10, qword [rbp + 0x20]
lea rcx, [0x1401c5670]
xor edx, edx
lea r8, [0x1401c7b10]
mov rax, r9
div qword [rcx + r10*8]
lea rcx, [rbp + 0x10]
shl rdx, 4
add rdx, qword [rbp + 0x18]
call fcn.14002a1c0
test rax, rax
je 0x140038c48
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140038c48
cmp dword [rcx], 1
jne 0x140038c48
call fcn.140043030
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.140189f20
add rsp, 0x50
pop rbp
ret
Function at 0x14003b420
Capabilities:
Hash data using djb2

Disassembly:
mov r11, rsp
push rbx
push r14
sub rsp, 0x78
mov rax, qword [0x1402376b8]
xor rax, rsp
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
mov r14, rdx
mov rbx, rcx
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm0
test rdx, rdx
je 0x14003b660
test rcx, rcx
je 0x14003b660
cmp dword [rcx], 0
mov qword [r11 + 0x18], rbp
mov qword [r11 - 0x18], rsi
mov qword [r11 - 0x20], rdi
mov qword [r11 - 0x28], r15
jne 0x14003b64e
lea rax, [0x140216d20]
mov ecx, 0x68
mov r9d, 0x1505
nop dword [rax]
imul r9, r9, 0x21
lea rax, [rax + 1]
add r9, rcx
movsx rcx, byte [rax]
test rcx, rcx
jne 0x14003b490
mov rcx, qword [rbx + 0x20]
lea r11, [0x1401c5670]
xor edx, edx
lea r8, [0x140216d20]
mov rax, r9
div qword [r11 + rcx*8]
lea rcx, [rbx + 0x10]
shl rdx, 4
add rdx, qword [rbx + 0x18]
call fcn.14002a1c0
test rax, rax
je 0x14003b64e
mov rax, qword [rax + 0x18]
test rax, rax
je 0x14003b64e
cmp dword [rax], 3
jne 0x14003b63c
mov r15, qword [rax + 0x10]
test r15, r15
jne 0x14003b50d
lea rdx, [0x140216d70]
xor ecx, ecx
call fcn.1400432a0
xor eax, eax
jmp 0x14003b5fe
lea rdx, [0x140216d90]
mov rcx, rbx
call fcn.14002c240
test rax, rax
je 0x14003b62a
cmp dword [rax], 2
jne 0x14003b62a
mov rbx, qword [rax + 0x10]
test rbx, rbx
je 0x14003b62a
xor ebp, ebp
mov edi, 0x20
mov esi, ebp
mov byte [rsp + 0x22], sil
cmp byte [rbx], sil
je 0x14003b59b
nop
test rdi, rdi
je 0x14003b59b
movzx ecx, byte [rbx + 1]
test cl, cl
je 0x14003b5d2
movzx eax, byte [rbx]
lea rdx, [rsp + 0x28]
mov byte [rsp + 0x21], cl
mov r8d, 0x10
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x20], al
call qword [0x14018c468]
mov byte [rsp + rsi + 0x30], al
mov rax, qword [rsp + 0x28]
cmp byte [rax], bpl
jne 0x14003b5bd
add rbx, 2
inc rsi
dec rdi
cmp byte [rbx], bpl
jne 0x14003b550
cmp byte [rbx], bpl
cmove rbp, rsi
cmp rbp, 0x20
je 0x14003b5e2
mov r8, rbp
lea rdx, [0x140216dc8]
xor ecx, ecx
call fcn.1400432a0
xor eax, eax
jmp 0x14003b5fe
lea r8, [rsp + 0x20]
xor ecx, ecx
lea rdx, [0x140216ce8]
call fcn.1400432a0
jmp 0x14003b5a8
lea rdx, [0x140216cd0]
xor ecx, ecx
call fcn.1400432a0
jmp 0x14003b5a8
movups xmm0, xmmword [rsp + 0x30]
mov qword [r14 + 0x20], r15
mov eax, 1
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r14], xmm0
movups xmmword [r14 + 0x10], xmm1
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rbp, qword [rsp + 0xa0]
mov r15, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.140189f20
add rsp, 0x78
pop r14
pop rbx
ret
lea rdx, [0x140216da0]
xor ecx, ecx
call fcn.1400432a0
xor eax, eax
jmp 0x14003b5fe
lea rdx, [0x140216d48]
xor ecx, ecx
call fcn.1400432a0
xor eax, eax
jmp 0x14003b5fe
lea rdx, [0x140216d28]
xor ecx, ecx
call fcn.1400432a0
xor eax, eax
jmp 0x14003b5fe
lea rdx, [0x140216d00]
xor ecx, ecx
call fcn.1400432a0
xor eax, eax
jmp 0x14003b615
Function at 0x14003b680
Capabilities:
Encode data using xor

Disassembly:
mov r10, rcx
test r8, r8
je 0x14003b6fe
shr r10, 2
lea r9, [rdx + 0x10]
dec r8
shr r8, 2
inc r8
nop word [rax + rax]
mov rcx, qword [r9 - 0x10]
lea r9, [r9 + 0x20]
mov rax, rcx
xor edx, edx
div r10
mov rax, qword [0x1432bf618]
shl rdx, 2
xor qword [rax + rdx*8], rcx
mov rax, qword [0x1432bf618]
lea rcx, [rax + rdx*8]
mov rax, qword [r9 - 0x28]
xor qword [rcx + 8], rax
mov rax, qword [0x1432bf618]
lea rcx, [rax + rdx*8]
mov rax, qword [r9 - 0x20]
xor qword [rcx + 0x10], rax
mov rax, qword [0x1432bf618]
lea rcx, [rax + rdx*8]
mov rax, qword [r9 - 0x18]
xor qword [rcx + 0x18], rax
sub r8, 1
jne 0x14003b6a0
mov eax, 1
ret
Function at 0x14003c650
Capabilities:
Hash data using djb2

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
test rcx, rcx
je 0x14003c868
cmp dword [rcx], 0
jne 0x14003c868
mov ebx, 0x1505
lea r11, [rcx + 0x10]
mov r9d, ebx
lea rax, [0x1402172b4]
mov ecx, 0x72
nop dword [rax]
nop dword [rax + rax]
imul r9, r9, 0x21
lea rax, [rax + 1]
add r9, rcx
movsx rcx, byte [rax]
test rcx, rcx
jne 0x14003c6a0
mov r10, qword [r11 + 0x10]
lea r14, [0x1401c5670]
xor edx, edx
lea r8, [0x1402172b4]
mov rax, r9
mov rcx, r11
div qword [r14 + r10*8]
shl rdx, 4
add rdx, qword [r11 + 8]
call fcn.14002a1c0
test rax, rax
je 0x14003c868
mov rdi, qword [rax + 0x18]
test rdi, rdi
je 0x14003c868
cmp dword [rdi], 0
jne 0x14003c85f
lea rax, [0x1402172d4]
mov r9, rbx
mov ecx, 0x69
nop dword [rax]
imul r9, r9, 0x21
lea rax, [rax + 1]
add r9, rcx
movsx rcx, byte [rax]
test rcx, rcx
jne 0x14003c710
mov rcx, qword [rdi + 0x20]
lea r8, [0x1402172d4]
xor edx, edx
mov rax, r9
div qword [r14 + rcx*8]
lea rcx, [rdi + 0x10]
shl rdx, 4
add rdx, qword [rdi + 0x18]
call fcn.14002a1c0
test rax, rax
je 0x14003c85f
mov rax, qword [rax + 0x18]
test rax, rax
je 0x14003c85f
cmp dword [rax], 2
jne 0x14003c856
mov rsi, qword [rax + 0x10]
test rsi, rsi
je 0x14003c856
mov r8d, 0x3f
lea rcx, [0x1432bfbf0]
mov rdx, rsi
call qword [0x14018c708]
cmp dword [0x1432bf3a8], 0
je 0x14003c7a8
mov r8, rsi
lea rdx, [0x140217300]
mov ecx, 4
call fcn.1400432a0
cmp dword [rdi], 0
jne 0x14003c84d
lea rax, [0x14021730c]
mov ecx, 0x73
nop dword [rax]
imul rbx, rbx, 0x21
lea rax, [rax + 1]
add rbx, rcx
movsx rcx, byte [rax]
test rcx, rcx
jne 0x14003c7c0
mov r10, qword [rdi + 0x20]
lea r8, [0x14021730c]
xor edx, edx
lea rcx, [rdi + 0x10]
mov rax, rbx
mov r9, rbx
div qword [r14 + r10*8]
shl rdx, 4
add rdx, qword [rdi + 0x18]
call fcn.14002a1c0
test rax, rax
je 0x14003c84d
mov r8, qword [rax + 0x18]
test r8, r8
je 0x14003c84d
cmp dword [r8], 2
jne 0x14003c844
mov r8, qword [r8 + 0x10]
test r8, r8
je 0x14003c844
cmp byte [r8], 0x4f
jne 0x14003c834
cmp byte [r8 + 1], 0x4b
jne 0x14003c834
cmp byte [r8 + 2], 0
jne 0x14003c834
mov eax, 1
jmp 0x14003c878
lea rdx, [0x140217350]
xor ecx, ecx
call fcn.1400432a0
jmp 0x14003c876
lea rdx, [0x140217330]
jmp 0x14003c86f
lea rdx, [0x140217318]
jmp 0x14003c86f
lea rdx, [0x1402172e8]
jmp 0x14003c86f
lea rdx, [0x1402172d8]
jmp 0x14003c86f
lea rdx, [0x1402172c0]
xor ecx, ecx
call fcn.1400432a0
xor eax, eax
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
Function at 0x140040290
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov rax, r8
mov rcx, rdx
mov edx, eax
lea r8, [r9 + 0x200000]
mov rbp, r9
call fcn.140040e80
call fcn.14003f400
movups xmm0, xmmword [rbp + 0x200040]
lea rbx, [rbp + 0x2000c8]
mov rcx, rax
movups xmm1, xmmword [rbp + 0x200050]
lea r15, [rbp + 0x200178]
movups xmmword [rbx], xmm0
lea rdx, [rbp + 0x200000]
mov qword [r15], rax
movups xmm0, xmmword [rbp + 0x200060]
movups xmmword [rbx + 0x10], xmm1
movups xmm1, xmmword [rbp + 0x200070]
movups xmmword [rbx + 0x20], xmm0
movups xmm0, xmmword [rbp + 0x200080]
movups xmmword [rbx + 0x30], xmm1
movups xmm1, xmmword [rbp + 0x200090]
movups xmmword [rbx + 0x40], xmm0
movups xmm0, xmmword [rbp + 0x2000a0]
movups xmmword [rbx + 0x50], xmm1
movups xmm1, xmmword [rbp + 0x2000b0]
movups xmmword [rbx + 0x60], xmm0
movups xmmword [rbx + 0x70], xmm1
call fcn.14003f320
lea rax, [rbp + 0x200128]
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x50], rax
lea r12, [rbp + 0x2000d8]
lea rax, [rbp + 0x200138]
mov qword [rsp + 0x28], r12
lea r13, [rbp + 0x2000e8]
mov qword [rsp + 0x58], rax
lea rdi, [rbp + 0x2000f8]
mov qword [rsp + 0x30], r13
lea rsi, [rbp + 0x200108]
mov qword [rsp + 0x38], rdi
lea r14, [rbp + 0x200118]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r14
nop
Function at 0x14005e060
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov rbx, rdx
mov rbp, rcx
lea rax, [rbp + 8]
mov edi, 0x40
nop dword [rax]
mov esi, 4
nop word [rax + rax]
movdqu xmm1, xmmword [rbx + 0x10]
mov r10, qword [rbx]
movdqu xmm0, xmmword [rbx]
mov r11, qword [rbx + 0x18]
mov r9, qword [rbx + 8]
add r11, r10
rol r11, 0x17
pxor xmm1, xmm0
movdqu xmmword [rbx + 0x10], xmm1
mov rcx, qword [rbx + 0x18]
add r11, r10
mov rdx, qword [rbx + 0x10]
xor r10, rcx
xor qword [rbx + 8], rdx
ror rcx, 0x13
mov qword [rbx + 0x18], rcx
mov ecx, r11d
and ecx, 0xf
mov qword [rbx], r10
shl r9, 0x11
xor rdx, r9
mov qword [rbx + 0x10], rdx
mov dword [rax - 8], ecx
mov rcx, r11
shr rcx, 4
and ecx, 0xf
mov dword [rax - 4], ecx
mov rcx, r11
shr rcx, 8
and ecx, 0xf
mov dword [rax], ecx
mov rcx, r11
shr rcx, 0xc
and ecx, 0xf
mov dword [rax + 4], ecx
mov rcx, r11
shr rcx, 0x10
and ecx, 0xf
mov dword [rax + 8], ecx
mov rcx, r11
shr rcx, 0x14
and ecx, 0xf
mov dword [rax + 0xc], ecx
mov rcx, r11
shr rcx, 0x18
and ecx, 0xf
mov dword [rax + 0x10], ecx
mov rcx, r11
shr rcx, 0x1c
and ecx, 0xf
mov dword [rax + 0x14], ecx
mov rcx, r11
shr rcx, 0x20
and ecx, 0xf
mov dword [rax + 0x18], ecx
mov rcx, r11
shr rcx, 0x24
and ecx, 0xf
mov dword [rax + 0x1c], ecx
mov rcx, r11
shr rcx, 0x28
and ecx, 0xf
mov dword [rax + 0x20], ecx
mov rcx, r11
shr rcx, 0x2c
and ecx, 0xf
mov dword [rax + 0x24], ecx
mov rcx, r11
shr rcx, 0x30
and ecx, 0xf
mov dword [rax + 0x28], ecx
mov rcx, r11
shr rcx, 0x34
and ecx, 0xf
mov dword [rax + 0x2c], ecx
mov rcx, r11
shr rcx, 0x38
and ecx, 0xf
shr r11, 0x3c
mov dword [rax + 0x30], ecx
mov dword [rax + 0x34], r11d
add rax, 0x40
sub rsi, 1
jne 0x14005e0a0
sub rdi, 1
jne 0x14005e090
mov rcx, rbp
call fcn.14005da80
cmp eax, 0x40
jne 0x14005e080
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret