joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14001fed0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x45
mov rbx, rcx
movsx edi, byte [rcx]
mov dword [rcx + 0x30], 0x1312002
mov dword [rcx + 0x34], 0x262c3320
mov dword [rcx + 0x38], 0x35240620
mov word [rcx + 0x3c], 0x36
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x14001ff20
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x14001ff2f
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x14001ff50
mov eax, 0xd
nop
inc eax
test al, 0xf
jne 0x14001ff90
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x14001ffc0
mov qword [rbx + 0x28], rax
jmp 0x14002000f
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xd
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
mov eax, dword [rbx + 0x38]
mov dword [rdi + 0x10], eax
movzx eax, byte [rbx + 0x3c]
mov byte [rdi + 0x14], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140020030
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x65
mov rbx, rcx
movsx edi, byte [rcx]
mov dword [rcx + 0x30], 0x21110022
mov dword [rcx + 0x34], 0x60c1300
mov dword [rcx + 0x38], 0x15042600
mov word [rcx + 0x3c], 0x16
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140020080
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x14002008f
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x1400200b0
mov eax, 0xd
nop
inc eax
test al, 0xf
jne 0x1400200f0
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140020120
mov qword [rbx + 0x28], rax
jmp 0x14002016f
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xd
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
mov eax, dword [rbx + 0x38]
mov dword [rdi + 0x10], eax
movzx eax, byte [rbx + 0x3c]
mov byte [rdi + 0x14], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140020190
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x25
xor eax, eax
mov dword [rcx + 0x30], 0x44405766
mov rbx, rcx
mov dword [rcx + 0x34], 0x4a664051
mov dword [rcx + 0x38], 0x51445548
mov dword [rcx + 0x3c], 0x4049474c
mov dword [rcx + 0x40], 0x48514c67
mov word [rcx + 0x44], 0x5544
mov byte [rcx + 0x46], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x1400201f3
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140020202
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140020220
mov eax, 0x16
nop
inc eax
test al, 0xf
jne 0x140020260
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140020290
mov qword [rbx + 0x28], rax
jmp 0x1400202de
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0x16
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movups xmm0, xmmword [rbx + 0x30]
movups xmmword [rdi + 8], xmm0
mov eax, dword [rbx + 0x40]
mov dword [rdi + 0x18], eax
movzx eax, word [rbx + 0x44]
mov word [rdi + 0x1c], ax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140020300
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x58
xor eax, eax
mov dword [rcx + 0x30], 0x3d343d0b
mov rbx, rcx
mov dword [rcx + 0x34], 0x3a172c3b
mov dword [rcx + 0x38], 0x2c3b3d32
mov byte [rcx + 0x3c], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x14002034f
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x14002035e
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140020380
mov eax, 0xc
nop
inc eax
test al, 0xf
jne 0x1400203c0
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x1400203f0
mov qword [rbx + 0x28], rax
jmp 0x140020438
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xc
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
mov eax, dword [rbx + 0x38]
mov dword [rdi + 0x10], eax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140020450
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x27
xor eax, eax
mov dword [rcx + 0x30], 0x42555374
mov rbx, rcx
mov dword [rcx + 0x34], 0x654f4453
mov word [rcx + 0x38], 0x534b
mov byte [rcx + 0x3a], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x14002049e
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x1400204ad
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x1400204d0
mov ecx, 0xa
nop
inc ecx
test cl, 0xf
jne 0x140020510
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140020541
mov qword [rbx + 0x28], rax
jmp 0x14002058b
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xa
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
movzx eax, word [rbx + 0x38]
mov word [rdi + 0x10], ax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x1400205b0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x69
xor eax, eax
mov dword [rcx + 0x30], 0x261d0c2e
mov rbx, rcx
mov dword [rcx + 0x34], 0xa0c030b
mov word [rcx + 0x38], 0x3e1d
mov byte [rcx + 0x3a], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x1400205fe
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x14002060d
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140020630
mov ecx, 0xa
nop
inc ecx
test cl, 0xf
jne 0x140020670
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x1400206a1
mov qword [rbx + 0x28], rax
jmp 0x1400206eb
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xa
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
movzx eax, word [rbx + 0x38]
mov word [rdi + 0x10], ax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140020710
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x77
xor eax, eax
mov dword [rcx + 0x30], 0x1614183b
mov rbx, rcx
mov dword [rcx + 0x34], 0x1b1b361b
mov word [rcx + 0x38], 0x1418
mov byte [rcx + 0x3a], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x14002075e
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x14002076d
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140020790
mov ecx, 0xa
nop
inc ecx
test cl, 0xf
jne 0x1400207d0
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140020801
mov qword [rbx + 0x28], rax
jmp 0x14002084b
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xa
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
movzx eax, word [rbx + 0x38]
mov word [rdi + 0x10], ax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140020870
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x54
xor eax, eax
mov dword [rcx + 0x30], 0x35373b18
mov rbx, rcx
mov dword [rcx + 0x34], 0x38381538
mov word [rcx + 0x38], 0x373b
mov byte [rcx + 0x3a], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x1400208be
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x1400208cd
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x1400208f0
mov ecx, 0xa
nop
inc ecx
test cl, 0xf
jne 0x140020930
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140020961
mov qword [rbx + 0x28], rax
jmp 0x1400209ab
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xa
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
movzx eax, word [rbx + 0x38]
mov word [rdi + 0x10], ax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x1400209d0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x1a
mov rbx, rcx
movzx eax, byte [rdx]
xor al, 0x1a
mov byte [rcx + 0x30], al
movzx eax, byte [rdx + 1]
xor al, 0x1a
mov byte [rcx + 0x31], al
movzx eax, byte [rdx + 2]
xor al, 0x1a
mov byte [rcx + 0x32], al
movzx eax, byte [rdx + 3]
xor al, 0x1a
mov byte [rcx + 0x33], al
movzx eax, byte [rdx + 4]
xor al, 0x1a
mov byte [rcx + 0x34], al
movzx eax, byte [rdx + 5]
xor al, 0x1a
mov byte [rcx + 0x35], al
movzx eax, byte [rdx + 6]
xor al, 0x1a
mov byte [rcx + 0x36], al
movzx eax, byte [rdx + 7]
xor al, 0x1a
mov byte [rcx + 0x37], al
movzx eax, byte [rdx + 8]
xor al, 0x1a
mov byte [rcx + 0x38], al
movzx eax, byte [rdx + 9]
xor al, 0x1a
mov byte [rcx + 0x39], al
movzx eax, byte [rdx + 0xa]
xor al, 0x1a
mov byte [rcx + 0x3a], al
xor eax, eax
mov byte [rcx + 0x3b], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140020a6c
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140020a7b
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140020aa0
mov ecx, 0xb
nop
inc ecx
test cl, 0xf
jne 0x140020ae0
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140020b11
mov qword [rbx + 0x28], rax
jmp 0x140020b62
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xb
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
movzx eax, word [rbx + 0x38]
mov word [rdi + 0x10], ax
movzx eax, byte [rbx + 0x3a]
mov byte [rdi + 0x12], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140020b80
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x33
mov rbx, rcx
movsx edi, byte [rcx]
mov dword [rcx + 0x30], 0x77475674
mov dword [rcx + 0x34], 0x475a717a
mov word [rcx + 0x38], 0x40
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140020bc9
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140020bd8
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop word [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140020c00
mov ecx, 9
nop
inc ecx
test cl, 0xf
jne 0x140020c40
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140020c71
mov qword [rbx + 0x28], rax
jmp 0x140020cba
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 9
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
movzx eax, byte [rbx + 0x38]
mov byte [rdi + 0x10], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140020ce0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x1a
xor eax, eax
mov dword [rcx + 0x30], 0x7875765d
mov rbx, rcx
mov dword [rcx + 0x34], 0x685c767b
mov word [rcx + 0x38], 0x7f7f
mov byte [rcx + 0x3a], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140020d2e
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140020d3d
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140020d60
mov ecx, 0xa
nop
inc ecx
test cl, 0xf
jne 0x140020da0
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140020dd1
mov qword [rbx + 0x28], rax
jmp 0x140020e1b
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xa
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
movzx eax, word [rbx + 0x38]
mov word [rdi + 0x10], ax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140020e40
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x2d
mov rbx, rcx
movsx edi, byte [rcx]
mov dword [rcx + 0x30], 0x4841487f
mov dword [rcx + 0x34], 0x69485e4c
mov word [rcx + 0x38], 0x6e
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140020e89
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140020e98
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop word [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140020ec0
mov ecx, 9
nop
inc ecx
test cl, 0xf
jne 0x140020f00
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140020f31
mov qword [rbx + 0x28], rax
jmp 0x140020f7a
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 9
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
movzx eax, byte [rbx + 0x38]
mov byte [rdi + 0x10], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140020fa0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x46
mov rbx, rcx
movsx edi, byte [rcx]
mov dword [rcx + 0x30], 0x232a2314
mov dword [rcx + 0x34], 0x2233527
mov word [rcx + 0x38], 5
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140020fe9
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140020ff8
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop word [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140021020
mov ecx, 9
nop
inc ecx
test cl, 0xf
jne 0x140021060
lea esi, [rcx + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140021091
mov qword [rbx + 0x28], rax
jmp 0x1400210da
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 9
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
movzx eax, byte [rbx + 0x38]
mov byte [rdi + 0x10], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret