joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140021100
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 2
xor eax, eax
mov dword [rcx + 0x30], 0x5d307155
mov rbx, rcx
mov dword [rcx + 0x34], 0x662c3031
mov word [rcx + 0x38], 0x6e6e
mov byte [rcx + 0x3a], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x14002114e
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x14002115d
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140021180
mov ecx, 0xa
nop
inc ecx
test cl, 0xf
jne 0x1400211c0
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x1400211f1
mov qword [rbx + 0x28], rax
jmp 0x14002123b
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xa
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
movzx eax, word [rbx + 0x38]
mov word [rdi + 0x10], ax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140021260
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x63
xor eax, eax
mov dword [rcx + 0x30], 0x7020c2f
mov rbx, rcx
mov dword [rcx + 0x34], 0x11010a2f
mov dword [rcx + 0x38], 0x221a1102
mov byte [rcx + 0x3c], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x1400212af
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x1400212be
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x1400212e0
mov eax, 0xc
nop
inc eax
test al, 0xf
jne 0x140021320
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140021350
mov qword [rbx + 0x28], rax
jmp 0x140021398
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xc
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
mov eax, dword [rbx + 0x38]
mov dword [rdi + 0x10], eax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x1400213b0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x59
xor eax, eax
mov dword [rcx + 0x30], 0x66b2a0e
mov rbx, rcx
mov dword [rcx + 0x34], 0x3d776b6a
mov word [rcx + 0x38], 0x3535
mov byte [rcx + 0x3a], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x1400213fe
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x14002140d
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140021430
mov ecx, 0xa
nop
inc ecx
test cl, 0xf
jne 0x140021470
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x1400214a1
mov qword [rbx + 0x28], rax
jmp 0x1400214eb
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xa
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
movzx eax, word [rbx + 0x38]
mov word [rdi + 0x10], ax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140021510
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x3b
mov rbx, rcx
movsx edi, byte [rcx]
mov dword [rcx + 0x30], 0x524b7e67
mov dword [rcx + 0x34], 0x565a7c58
mov dword [rcx + 0x38], 0x5a77485e
mov dword [rcx + 0x3c], 0x5358554e
mov dword [rcx + 0x40], 0x6867495e
mov dword [rcx + 0x44], 0x5f5e4d5a
mov dword [rcx + 0x48], 0x55547867
mov dword [rcx + 0x4c], 0x675c525d
mov dword [rcx + 0x50], 0x5f55526c
mov dword [rcx + 0x54], 0x484c54
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x14002158b
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x14002159a
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax + rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x1400215c0
mov eax, 0x27
nop
inc eax
test al, 0xf
jne 0x140021600
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140021630
mov qword [rbx + 0x28], rax
jmp 0x14002168d
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0x27
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movups xmm0, xmmword [rbx + 0x30]
movups xmmword [rdi + 8], xmm0
movups xmm1, xmmword [rbx + 0x40]
movups xmmword [rdi + 0x18], xmm1
mov eax, dword [rbx + 0x50]
mov dword [rdi + 0x28], eax
movzx eax, word [rbx + 0x54]
mov word [rdi + 0x2c], ax
movzx eax, byte [rbx + 0x56]
mov byte [rdi + 0x2e], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x1400216b0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x29
mov rbx, rcx
movsx edi, byte [rcx]
mov dword [rcx + 0x30], 0x4a40596c
mov dword [rcx + 0x34], 0x4c44486e
mov dword [rcx + 0x38], 0x5c48655a
mov dword [rcx + 0x3c], 0x4c414a47
mov word [rcx + 0x40], 0x5b
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140021707
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140021716
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140021740
mov eax, 0x11
nop
inc eax
test al, 0xf
jne 0x140021780
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x1400217b0
mov qword [rbx + 0x28], rax
jmp 0x1400217f7
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0x11
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movups xmm0, xmmword [rbx + 0x30]
movups xmmword [rdi + 8], xmm0
movzx eax, byte [rbx + 0x40]
mov byte [rdi + 0x18], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140021810
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x24
mov rbx, rcx
movsx edi, byte [rcx]
mov dword [rcx + 0x30], 0x5e4b6978
mov dword [rcx + 0x34], 0x4548484d
mov dword [rcx + 0x38], 0x564d6278
mov dword [rcx + 0x3c], 0x5c4b4241
mov dword [rcx + 0x40], 0x4b567478
mov dword [rcx + 0x44], 0x41484d42
mov word [rcx + 0x48], 0x57
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140021875
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140021884
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
nop word [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x1400218b0
mov eax, 0x19
nop
inc eax
test al, 0xf
jne 0x1400218f0
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140021920
mov qword [rbx + 0x28], rax
jmp 0x140021971
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0x19
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movups xmm0, xmmword [rbx + 0x30]
movups xmmword [rdi + 8], xmm0
movsd xmm1, qword [rbx + 0x40]
movsd qword [rdi + 0x18], xmm1
movzx eax, byte [rbx + 0x48]
mov byte [rdi + 0x20], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140021990
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x3d
mov rbx, rcx
movsx edi, byte [rcx]
mov dword [rcx + 0x30], 0x51586961
mov dword [rcx + 0x34], 0x5c4f5a58
mov dword [rcx + 0x38], 0x58791d50
mov dword [rcx + 0x3c], 0x5249564e
mov dword [rcx + 0x40], 0x5949614d
mov dword [rcx + 0x44], 0x5c495c
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x1400219ef
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x1400219fe
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140021a20
mov eax, 0x17
nop
inc eax
test al, 0xf
jne 0x140021a60
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140021a90
mov qword [rbx + 0x28], rax
jmp 0x140021ae5
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0x17
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movups xmm0, xmmword [rbx + 0x30]
movups xmmword [rdi + 8], xmm0
mov eax, dword [rbx + 0x40]
mov dword [rdi + 0x18], eax
movzx eax, word [rbx + 0x44]
mov word [rdi + 0x1c], ax
movzx eax, byte [rbx + 0x46]
mov byte [rdi + 0x1e], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140021b00
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov word [rcx], 0x28
xor eax, eax
mov dword [rcx + 0x30], 0x4b005b
mov rbx, rcx
mov dword [rcx + 0x34], 0x4d005a
mov dword [rcx + 0x38], 0x46004d
mov dword [rcx + 0x3c], 0x40005b
mov dword [rcx + 0x40], 0x5c0047
mov dword [rcx + 0x44], 0x4a0006
mov dword [rcx + 0x48], 0x580045
mov word [rcx + 0x4c], ax
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140021b6e
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140021b7d
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140021ba0
mov ecx, 0x1c
nop
inc ecx
test cl, 0xf
jne 0x140021be0
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140021c11
mov qword [rbx + 0x28], rax
jmp 0x140021c61
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0x1c
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movups xmm0, xmmword [rbx + 0x30]
movups xmmword [rdi + 8], xmm0
movsd xmm1, qword [rbx + 0x40]
movsd qword [rdi + 0x18], xmm1
mov eax, dword [rbx + 0x48]
mov dword [rdi + 0x20], eax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140021c80
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x74
mov rbx, rcx
movsx edi, byte [rcx]
mov dword [rcx + 0x30], 0x6110721
mov dword [rcx + 0x34], 0x19151a54
mov dword [rcx + 0x38], 0x544e11
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140021cca
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140021cd9
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop word [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140021d00
mov eax, 0xb
nop
inc eax
test al, 0xf
jne 0x140021d40
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140021d70
mov qword [rbx + 0x28], rax
jmp 0x140021dc1
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xb
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
movzx eax, word [rbx + 0x38]
mov word [rdi + 0x10], ax
movzx eax, byte [rbx + 0x3a]
mov byte [rdi + 0x12], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140021de0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x66
xor eax, eax
mov dword [rcx + 0x30], 0x34233533
mov rbx, rcx
mov dword [rcx + 0x34], 0x232b2728
mov byte [rcx + 0x38], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140021e28
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140021e37
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop word [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140021e60
mov ecx, 8
nop
inc ecx
test cl, 0xf
jne 0x140021ea0
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140021ed1
mov qword [rbx + 0x28], rax
jmp 0x140021f11
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 8
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
mov rax, qword [rbx + 0x30]
mov qword [rdi + 8], rax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140021f30
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x10
mov rbx, rcx
movsx edi, byte [rcx]
mov dword [rcx + 0x30], 0x64637f58
mov dword [rcx + 0x34], 0x7d717e30
mov dword [rcx + 0x38], 0x302a75
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140021f7a
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140021f89
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop word [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140021fb0
mov eax, 0xb
nop
inc eax
test al, 0xf
jne 0x140021ff0
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140022020
mov qword [rbx + 0x28], rax
jmp 0x140022071
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xb
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
movzx eax, word [rbx + 0x38]
mov word [rdi + 0x10], ax
movzx eax, byte [rbx + 0x3a]
mov byte [rdi + 0x12], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140022090
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x53
xor eax, eax
mov dword [rcx + 0x30], 0x1160006
mov rbx, rcx
mov dword [rcx + 0x34], 0x121e1c17
mov word [rcx + 0x38], 0x1d1a
mov byte [rcx + 0x3a], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x1400220de
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x1400220ed
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140022110
mov ecx, 0xa
nop
inc ecx
test cl, 0xf
jne 0x140022150
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140022181
mov qword [rbx + 0x28], rax
jmp 0x1400221cb
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xa
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
movzx eax, word [rbx + 0x38]
mov word [rdi + 0x10], ax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x1400221f0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x36
xor eax, eax
mov dword [rcx + 0x30], 0x5f44723c
mov rbx, rcx
mov dword [rcx + 0x34], 0xc455340
mov byte [rcx + 0x38], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140022238
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140022247
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop word [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140022270
mov ecx, 8
nop
inc ecx
test cl, 0xf
jne 0x1400222b0
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x1400222e1
mov qword [rbx + 0x28], rax
jmp 0x140022321
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 8
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
mov rax, qword [rbx + 0x30]
mov qword [rdi + 8], rax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret