joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401f8d00
Capabilities:
Hash data using murmur3

Disassembly:
push rsi
push rdi
push rbx
mov edx, dword [rdx]
mov eax, edx
shr eax, 0x10
xor eax, edx
imul eax, eax, 0x85ebca6b
mov r8d, eax
shr r8d, 0xd
xor r8d, eax
imul eax, r8d, 0xc2b2ae35
mov r9d, eax
shr r9d, 0x10
xor r9d, eax
mov r8d, 1
cmovne r8d, r9d
mov r9d, dword [rcx + 0xc]
xor r10d, r10d
test r9d, r9d
jle 0x1401f8dee
lea r11d, [r9 - 1]
and r11d, r8d
mov rsi, qword [rcx + 0x10]
mov edi, r9d
jmp 0x1401f8d74
test r11d, r11d
mov eax, r9d
cmovg eax, r10d
add r11d, eax
dec r11d
dec edi
je 0x1401f8dee
movsxd rax, r11d
shl rax, 4
mov ebx, dword [rsi + rax]
test ebx, ebx
je 0x1401f8dee
cmp r8d, ebx
jne 0x1401f8d60
mov rax, qword [rsi + rax + 8]
cmp edx, dword [rax]
jne 0x1401f8d60
cmp rax, qword [rcx + 0x18]
je 0x1401f8de8
mov r8, qword [rax + 0x10]
mov r9, qword [rax + 0x18]
test r8, r8
mov r10, r8
cmove r10, rcx
lea rdx, [rcx + 0x20]
lea r11, [r9 + 0x10]
test r9, r9
cmove r11, rdx
mov qword [r10 + 0x18], r9
mov qword [r11], r8
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
mov r8, qword [rcx + 0x18]
mov qword [rax + 0x18], r8
mov r8, qword [rcx + 0x18]
test r8, r8
je 0x1401f8dda
mov qword [r8 + 0x10], rax
mov qword [rcx + 0x18], rax
cmp qword [rcx + 0x20], 0
jne 0x1401f8de8
mov qword [rdx], rax
add rax, 8
jmp 0x1401f8df0
xor eax, eax
pop rbx
pop rdi
pop rsi
ret

Function at 0x1401f8fa0
Capabilities:
Hash data using murmur3

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov eax, dword [rcx]
mov ecx, dword [rcx + 4]
shl eax, 2
lea edx, [rcx + rcx*2]
cmp eax, edx
jl 0x1401f8fd9
lea eax, [rcx + rcx]
test ecx, ecx
mov edx, 4
cmovg edx, eax
mov rcx, rdi
call fcn.1401f9170
mov ecx, dword [rdi + 4]
mov edx, dword [rsi]
mov eax, edx
shr eax, 0x10
xor eax, edx
imul eax, eax, 0x85ebca6b
mov r8d, eax
shr r8d, 0xd
xor r8d, eax
imul eax, r8d, 0xc2b2ae35
mov r9d, eax
shr r9d, 0x10
xor r9d, eax
mov r8d, 1
cmovne r8d, r9d
xor eax, eax
test ecx, ecx
jle 0x1401f9087
lea r10d, [rcx - 1]
and r10d, r8d
mov r9, qword [rdi + 8]
mov r11d, ecx
jmp 0x1401f9043
test r10d, r10d
mov ebx, ecx
cmovg ebx, eax
add r10d, ebx
dec r10d
dec r11d
je 0x1401f9087
movsxd r14, r10d
shl r14, 4
lea rbx, [r9 + r14]
mov ebp, dword [r9 + r14]
test ebp, ebp
je 0x1401f9075
cmp r8d, ebp
jne 0x1401f9030
mov r15, qword [r9 + r14 + 8]
cmp edx, dword [r15]
jne 0x1401f9030
lea rax, [r9 + r14]
add rax, 8
mov qword [rax], rsi
mov dword [rbx], r8d
jmp 0x1401f9087
lea rax, [r9 + r14]
add rax, 8
mov qword [r9 + r14 + 8], rsi
mov dword [rbx], r8d
inc dword [rdi]
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
Function at 0x1401f90a0
Capabilities:
Hash data using murmur3

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, rcx
mov eax, dword [rdx]
mov ecx, eax
shr ecx, 0x10
xor ecx, eax
imul ecx, ecx, 0x85ebca6b
mov r8d, ecx
shr r8d, 0xd
xor r8d, ecx
imul r8d, r8d, 0xc2b2ae35
mov ecx, r8d
shr ecx, 0x10
xor ecx, r8d
mov r8d, 1
cmove ecx, r8d
mov r9d, dword [rsi + 0xc]
lea r10d, [r9 - 1]
and r10d, ecx
mov r11, qword [rsi + 0x10]
xor ebx, ebx
jmp 0x1401f9102
test r10d, r10d
mov edi, r9d
cmovg edi, ebx
add r10d, edi
dec r10d
inc r8d
movsxd rdi, r10d
shl rdi, 4
cmp ecx, dword [r11 + rdi]
jne 0x1401f90f0
mov rdi, qword [r11 + rdi + 8]
cmp eax, dword [rdi]
jne 0x1401f90f0
lea rcx, [rsi + 8]
call fcn.1401f9350
mov rax, qword [rdi + 0x10]
test rax, rax
mov rcx, rax
cmove rcx, rsi
mov rdx, qword [rdi + 0x18]
mov qword [rcx + 0x18], rdx
add rsi, 0x20
lea rcx, [rdx + 0x10]
test rdx, rdx
cmove rcx, rsi
mov qword [rcx], rax
xorps xmm0, xmm0
movups xmmword [rdi + 0x10], xmm0
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1401f915e
call fcn.140352cd0
mov rcx, rdi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp fcn.1405602d0
Function at 0x1401f9170
Capabilities:
Hash data using murmur3

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov eax, dword [rcx + 4]
mov qword [rsp + 0x20], rax
mov dword [rcx], 0
mov dword [rcx + 4], edx
mov rdi, qword [rcx + 8]
test edx, edx
je 0x1401f91e2
movsxd rbx, edx
mov r14, rbx
shl r14, 4
lea rax, [r14 + 8]
test edx, edx
mov rcx, 0xffffffffffffffff
cmovns rcx, rax
call fcn.14056080c
mov qword [rax], rbx
add rax, 8
xor ecx, ecx
nop word cs:[rax + rax]
mov dword [rax + rcx], 0
add rcx, 0x10
cmp r14, rcx
jne 0x1401f91d0
jmp 0x1401f91e4
xor eax, eax
mov qword [rsi + 8], rax
cmp dword [rsp + 0x20], 0
jle 0x1401f92eb
xor eax, eax
xor edx, edx
jmp 0x1401f921e
mov qword [r12 + rcx + 8], r8
mov dword [r13], r10d
inc dword [rsi]
nop word cs:[rax + rax]
inc rdx
cmp rdx, qword [rsp + 0x20]
je 0x1401f92eb
mov r14, rdx
shl r14, 4
cmp dword [rdi + r14], 0
je 0x1401f9210
mov r8, qword [rdi + r14 + 8]
mov r9d, dword [r8]
mov ecx, r9d
shr ecx, 0x10
xor ecx, r9d
imul ecx, ecx, 0x85ebca6b
mov r10d, ecx
shr r10d, 0xd
xor r10d, ecx
imul ecx, r10d, 0xc2b2ae35
mov r10d, ecx
shr r10d, 0x10
xor r10d, ecx
mov ecx, 1
cmove r10d, ecx
mov r11d, dword [rsi + 4]
test r11d, r11d
jle 0x1401f9210
add r14, rdi
add r14, 8
lea r15d, [r11 - 1]
and r15d, r10d
mov r12, qword [rsi + 8]
mov ebp, r11d
jmp 0x1401f92a7
test r15d, r15d
mov ecx, r11d
cmovg ecx, eax
add r15d, ecx
dec r15d
dec ebp
je 0x1401f9210
movsxd rcx, r15d
shl rcx, 4
lea r13, [r12 + rcx]
mov ebx, dword [r12 + rcx]
test ebx, ebx
je 0x1401f91f9
cmp r10d, ebx
jne 0x1401f9290
mov rbx, qword [r12 + rcx + 8]
cmp r9d, dword [rbx]
jne 0x1401f9290
add rcx, r12
add rcx, 8
mov dword [r13], 0
mov r8, qword [r14]
mov qword [rcx], r8
mov dword [r13], r10d
jmp 0x1401f9210
test rdi, rdi
je 0x1401f933c
lea rcx, [rdi - 8]
mov rax, qword [rdi - 8]
test rax, rax
je 0x1401f9327
shl rax, 4
jmp 0x1401f9316
add rax, 0xfffffffffffffff0
je 0x1401f9327
cmp dword [rdi + rax - 0x10], 0
je 0x1401f9310
mov dword [rdi + rax - 0x10], 0
jmp 0x1401f9310
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp fcn.140560310
nop
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x1401f9350
Capabilities:
Hash data using murmur3

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
mov eax, dword [rdx]
mov ecx, eax
shr ecx, 0x10
xor ecx, eax
imul ecx, ecx, 0x85ebca6b
mov edx, ecx
shr edx, 0xd
xor edx, ecx
imul ecx, edx, 0xc2b2ae35
mov edx, ecx
shr edx, 0x10
xor edx, ecx
mov ecx, 1
cmovne ecx, edx
mov r8d, dword [rsi + 4]
test r8d, r8d
jle 0x1401f93f1
lea edx, [r8 - 1]
and edx, ecx
mov r9, qword [rsi + 8]
xor r10d, r10d
mov r11d, r8d
jmp 0x1401f93b2
test edx, edx
mov edi, r8d
cmovg edi, r10d
add edx, edi
dec edx
dec r11d
je 0x1401f93f1
movsxd rdi, edx
shl rdi, 4
cmp ecx, dword [r9 + rdi]
jne 0x1401f93a0
mov rdi, qword [r9 + rdi + 8]
cmp eax, dword [rdi]
jne 0x1401f93a0
mov rcx, rsi
call fcn.140146980
mov eax, dword [rsi]
mov edx, dword [rsi + 4]
shl eax, 2
cmp eax, edx
jg 0x1401f93f1
cmp edx, 5
jl 0x1401f93f1
shr edx, 1
mov rcx, rsi
add rsp, 0x28
pop rdi
pop rsi
jmp fcn.1401f9170
nop
add rsp, 0x28
pop rdi
pop rsi
ret
Function at 0x1402595e0
Capabilities:
Hash data using murmur3

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov eax, dword [rcx]
mov ecx, dword [rcx + 4]
shl eax, 2
lea edx, [rcx + rcx*2]
cmp eax, edx
jl 0x140259615
lea eax, [rcx + rcx]
test ecx, ecx
mov edx, 4
cmovg edx, eax
mov rcx, rdi
call fcn.1402596c0
mov ecx, dword [rdi + 4]
mov eax, esi
shr eax, 0x10
xor eax, esi
imul eax, eax, 0x85ebca6b
mov edx, eax
shr edx, 0xd
xor edx, eax
imul eax, edx, 0xc2b2ae35
mov r8d, eax
shr r8d, 0x10
xor r8d, eax
mov edx, 1
cmovne edx, r8d
xor eax, eax
test ecx, ecx
jle 0x1402596b5
lea r9d, [rcx - 1]
and r9d, edx
mov r8, qword [rdi + 8]
mov r10d, ecx
jmp 0x140259675
test r9d, r9d
mov r11d, ecx
cmovg r11d, eax
add r9d, r11d
dec r9d
dec r10d
je 0x1402596b5
movsxd r11, r9d
lea rbx, [r11 + r11*2]
lea r11, [r8 + rbx*4]
mov ebp, dword [r8 + rbx*4]
test ebp, ebp
je 0x1402596a3
cmp edx, ebp
jne 0x140259660
cmp dword [r8 + rbx*4 + 4], esi
jne 0x140259660
lea rax, [r8 + rbx*4]
add rax, 4
mov qword [rax], rsi
mov dword [r11], edx
jmp 0x1402596b5
lea rax, [r8 + rbx*4]
add rax, 4
mov qword [r8 + rbx*4 + 4], rsi
mov dword [r11], edx
inc dword [rdi]
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
ret
Function at 0x1402596c0
Capabilities:
Hash data using murmur3

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov r14d, dword [rcx + 4]
mov dword [rcx], 0
mov dword [rcx + 4], edx
mov rbx, qword [rcx + 8]
test edx, edx
je 0x140259742
movsxd rdi, edx
mov ecx, 0xc
mov rax, rdi
mul rcx
seto dl
add rax, 8
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
test dl, dl
cmove rcx, rax
call fcn.14056080c
mov qword [rax], rdi
add rax, 8
shl rdi, 2
lea rcx, [rdi + rdi*2]
xor edx, edx
nop word cs:[rax + rax]
mov dword [rax + rdx], 0
add rdx, 0xc
cmp rcx, rdx
jne 0x140259730
jmp 0x140259744
xor eax, eax
mov qword [rsi + 8], rax
test r14d, r14d
jle 0x140259839
xor eax, eax
xor edx, edx
jmp 0x14025977c
mov rcx, qword [r11]
mov qword [rdi + r13*4 + 4], rcx
mov dword [r12], r9d
inc dword [rsi]
nop word cs:[rax + rax]
inc rdx
cmp rdx, r14
je 0x140259839
lea r11, [rdx + rdx*2]
cmp dword [rbx + r11*4], 0
je 0x140259770
mov r8d, dword [rbx + r11*4 + 4]
mov ecx, r8d
shr ecx, 0x10
xor ecx, r8d
imul ecx, ecx, 0x85ebca6b
mov r9d, ecx
shr r9d, 0xd
xor r9d, ecx
imul ecx, r9d, 0xc2b2ae35
mov r9d, ecx
shr r9d, 0x10
xor r9d, ecx
mov ecx, 1
cmove r9d, ecx
mov r10d, dword [rsi + 4]
test r10d, r10d
jle 0x140259770
lea r11, [rbx + r11*4]
add r11, 4
lea r15d, [r10 - 1]
and r15d, r9d
mov rdi, qword [rsi + 8]
mov ebp, r10d
jmp 0x1402597f7
test r15d, r15d
mov ecx, r10d
cmovg ecx, eax
add r15d, ecx
dec r15d
dec ebp
je 0x140259770
movsxd rcx, r15d
lea r13, [rcx + rcx*2]
lea r12, [rdi + r13*4]
mov ecx, dword [rdi + r13*4]
test ecx, ecx
je 0x140259757
cmp r9d, ecx
jne 0x1402597e0
cmp r8d, dword [rdi + r13*4 + 4]
jne 0x1402597e0
lea rcx, [rdi + r13*4]
add rcx, 4
mov dword [r12], 0
mov r8, qword [r11]
mov qword [rcx], r8
mov dword [r12], r9d
jmp 0x140259770
test rbx, rbx
je 0x14025988c
lea rcx, [rbx - 8]
mov rax, qword [rbx - 8]
test rax, rax
je 0x140259877
shl rax, 2
lea rax, [rax + rax*2]
jmp 0x140259866
add rax, 0xfffffffffffffff4
je 0x140259877
cmp dword [rbx + rax - 0xc], 0
je 0x140259860
mov dword [rbx + rax - 0xc], 0
jmp 0x140259860
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp fcn.140560310
nop
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x1402598a0
Capabilities:
Hash data using murmur3

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
mov eax, dword [rdx]
mov ecx, eax
shr ecx, 0x10
xor ecx, eax
imul ecx, ecx, 0x85ebca6b
mov edx, ecx
shr edx, 0xd
xor edx, ecx
imul ecx, edx, 0xc2b2ae35
mov edx, ecx
shr edx, 0x10
xor edx, ecx
mov ecx, 1
cmovne ecx, edx
mov r8d, dword [rsi + 4]
test r8d, r8d
jle 0x14025993f
lea edx, [r8 - 1]
and edx, ecx
mov r9, qword [rsi + 8]
xor r10d, r10d
mov r11d, r8d
jmp 0x140259902
test edx, edx
mov edi, r8d
cmovg edi, r10d
add edx, edi
dec edx
dec r11d
je 0x14025993f
movsxd rdi, edx
lea rdi, [rdi + rdi*2]
cmp ecx, dword [r9 + rdi*4]
jne 0x1402598f0
cmp eax, dword [r9 + rdi*4 + 4]
jne 0x1402598f0
mov rcx, rsi
call fcn.140259950
mov eax, dword [rsi]
mov edx, dword [rsi + 4]
shl eax, 2
cmp eax, edx
jg 0x14025993f
cmp edx, 5
jl 0x14025993f
shr edx, 1
mov rcx, rsi
add rsp, 0x28
pop rdi
pop rsi
jmp fcn.1402596c0
nop
add rsp, 0x28
pop rdi
pop rsi
ret
Function at 0x14025fa40
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x20
movabs rax, 0x800000000000001
cmp rdx, rax
jae 0x14025fc28
mov rsi, rcx
dec rdx
or rdx, 1
bsr rcx, rdx
xor ecx, 0x3f
neg cl
mov ebx, 1
shl rbx, cl
lea rax, [rsi + 0x18]
mov rdi, qword [rsi + 8]
mov edx, 2
shl rdx, cl
mov rcx, rax
mov r8, rdi
call fcn.14025f880
lea rax, [rbx - 1]
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rbx
mov rax, qword [rsi + 8]
mov r8, qword [rax]
cmp r8, rdi
je 0x14025fc1c
movabs rax, 0x100000001b3
movabs rcx, 0xcbf29ce484222325
jmp 0x14025fae1
mov qword [r9 + r10*8], rdx
mov qword [r9 + rbx*8], rdx
cmp r8, rdi
je 0x14025fc1c
mov rdx, r8
movzx r8d, byte [r8 + 0x10]
xor r8, rcx
imul r8, rax
movzx r9d, byte [rdx + 0x11]
xor r9, r8
imul r9, rax
movzx r8d, byte [rdx + 0x12]
xor r8, r9
imul r8, rax
movzx r9d, byte [rdx + 0x13]
xor r9, r8
imul r9, rax
movzx r8d, byte [rdx + 0x14]
xor r8, r9
imul r8, rax
movzx r9d, byte [rdx + 0x15]
xor r9, r8
imul r9, rax
movzx r8d, byte [rdx + 0x16]
xor r8, r9
imul r8, rax
movzx r11d, byte [rdx + 0x17]
xor r11, r8
imul r11, rax
and r11, qword [rsi + 0x30]
mov r8, qword [rdx]
mov r9, qword [rsi + 0x18]
lea r10, [r11 + r11]
lea rbx, [r11 + r11]
inc rbx
shl r11, 4
mov r11, qword [r9 + r11]
cmp r11, rdi
je 0x14025fad0
mov r14, qword [r9 + rbx*8]
mov r15, qword [rdx + 0x10]
cmp r15, qword [r14 + 0x10]
je 0x14025fbc0
nop dword [rax]
cmp r11, r14
je 0x14025fbf2
mov r14, qword [r14 + 8]
cmp r15, qword [r14 + 0x10]
jne 0x14025fb80
mov r9, qword [r14]
mov r10, qword [rdx + 8]
mov qword [r10], r8
mov r11, qword [r8 + 8]
mov qword [r11], r9
mov rbx, qword [r9 + 8]
mov qword [rbx], rdx
mov qword [r9 + 8], r11
mov qword [r8 + 8], r10
mov qword [rdx + 8], rbx
jmp 0x14025fad8
mov r10, qword [r14]
cmp r10, rdx
je 0x14025fad4
mov r11, qword [rdx + 8]
mov qword [r11], r8
mov r14, qword [r8 + 8]
mov qword [r14], r10
mov r15, qword [r10 + 8]
mov qword [r15], rdx
mov qword [r10 + 8], r14
mov qword [r8 + 8], r11
mov qword [rdx + 8], r15
jmp 0x14025fad4
mov rbx, qword [rdx + 8]
mov qword [rbx], r8
mov r14, qword [r8 + 8]
mov qword [r14], r11
mov r15, qword [r11 + 8]
mov qword [r15], rdx
mov qword [r11 + 8], r14
mov qword [r8 + 8], rbx
mov qword [rdx + 8], r15
mov qword [r9 + r10*8], rdx
jmp 0x14025fad8
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
lea rcx, str.invalid_hash_bucket_count
call fcn.14055e104
int3
Function at 0x14027bfb0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x178
mov r14d, r9d
mov ebx, r8d
mov esi, edx
mov r8, qword [rsp + 0x1e0]
mov rax, qword [0x1406a7e00]
xor rax, rsp
mov qword [rsp + 0x170], rax
mov ebp, ecx
sar ebp, 8
lea eax, [rbx - 1]
sar eax, 8
cmp ebp, eax
jne 0x14027c02c
sub ebx, ecx
mov eax, ebx
sar eax, 8
sub ebx, eax
lea eax, [rbx + r14]
imul ebx, r14d
lea ecx, [rbx + 0x80]
shr ecx, 8
add ecx, ebx
add ecx, 0x80
shr ecx, 8
sub eax, ecx
mov r10, qword [r8]
mov byte [rsp + 0x20], al
mov rcx, r8
mov edx, ebp
jmp 0x14027c123
mov eax, ecx
and eax, 0xff
je 0x14027c073
add ecx, r14d
imul eax, r14d
lea edx, [rax + 0x80]
shr edx, 8
add eax, edx
add eax, 0x80
shr eax, 8
sub ecx, eax
mov rax, qword [r8]
mov byte [rsp + 0x20], cl
mov rcx, r8
mov edx, ebp
mov r8d, esi
mov r9d, 1
call qword [rax + 0x18]
mov r8, qword [rsp + 0x1e0]
inc ebp
mov edx, ebx
sar edx, 8
mov r13d, edx
sub r13d, ebp
jle 0x14027c0ed
mov dword [rsp + 0x2c], edx
lea r15, [rsp + 0xa0]
lea r12, [rsp + 0x30]
nop word cs:[rax + rax]
cmp r13d, 0x64
mov edi, 0x64
cmovl edi, r13d
mov byte [rsp + 0x30], r14b
mov word [rsp + 0xa0], di
mov word [rsp + rdi*2 + 0xa0], 0
mov rax, qword [r8]
mov qword [rsp + 0x20], r15
mov rcx, r8
mov edx, ebp
mov r8d, esi
mov r9, r12
call qword [rax + 0x10]
mov r8, qword [rsp + 0x1e0]
add ebp, edi
sub r13d, edi
jg 0x14027c0a0
mov edx, dword [rsp + 0x2c]
and ebx, 0xff
je 0x14027c130
xor ebx, 0xff
lea eax, [rbx + r14]
imul ebx, r14d
lea ecx, [rbx + 0x80]
shr ecx, 8
add ecx, ebx
add ecx, 0x80
shr ecx, 8
sub eax, ecx
mov r10, qword [r8]
mov byte [rsp + 0x20], al
mov rcx, r8
mov r8d, esi
mov r9d, 1
call qword [r10 + 0x18]
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.1405602f0
nop
add rsp, 0x178
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x14029a890
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
movaps xmmword [rsp + 0x70], xmm7
movaps xmmword [rsp + 0x60], xmm6
mov esi, r9d
mov r14, rdx
mov rbx, rcx
mov rax, qword [0x1406a7e00]
xor rax, rsp
mov qword [rsp + 0x58], rax
lea r15, [rcx + 0x110]
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x54]
mov rcx, r15
call fcn.1403bb620
xor ecx, ecx
test al, al
je 0x14029aac4
mov byte [rsp + 0x37], sil
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], r14
mov ecx, dword [rsp + 0x4c]
cmp ecx, 2
jl 0x14029aa0a
movsd xmm0, qword [rbx + 0x110]
lea r14, [rbx + 0x30]
lea r15, [rbx + 0x48]
lea r12, [rbx + 0x60]
xor r13d, r13d
movaps xmm6, xmmword [0x140599730]
nop word cs:[rax + rax]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0x55
xorps xmm1, xmm6
movss xmm2, dword [rsp + 0x54]
shufps xmm2, xmm2, 0
unpcklps xmm1, xmm0
mulps xmm1, xmm2
movss xmm7, dword [rsp + 0x50]
shufps xmm7, xmm7, 0
mulps xmm7, xmm0
addps xmm7, xmm1
movaps xmm0, xmm7
shufps xmm0, xmm7, 0x55
movss xmm1, dword [rbx + 0x118]
addss xmm1, xmm7
addss xmm0, dword [rbx + 0x11c]
movd ebp, xmm1
movd eax, xmm0
shl rax, 0x20
or rbp, rax
mov rcx, r14
call fcn.1400ba940
mov rax, qword [rbx + 0x38]
movsxd rcx, dword [rbx + 0x44]
mov qword [rax + rcx*8 - 8], rbp
mov rcx, r15
call fcn.1400ba940
mov rax, qword [rbx + 0x50]
movsxd rcx, dword [rbx + 0x5c]
mov dword [rax + rcx*4 - 4], 0
mov ebp, dword [rbx + 0x44]
lea edi, [rbp - 2]
dec ebp
movzx esi, word [rbx + 0x100]
mov rcx, r12
mov edx, 3
call fcn.1400ba960
mov rax, qword [rbx + 0x68]
movsxd rcx, dword [rbx + 0x74]
mov word [rax + rcx*2 - 6], si
mov word [rax + rcx*2 - 4], bp
mov word [rax + rcx*2 - 2], di
inc r13d
mov ecx, dword [rsp + 0x4c]
lea eax, [rcx - 1]
movaps xmm0, xmm7
cmp r13d, eax
jl 0x14029a940
cmp byte [rsp + 0x37], 0
je 0x14029aaba
test ecx, ecx
mov r14, qword [rsp + 0x40]
mov r15, qword [rsp + 0x38]
je 0x14029aac4
lea rcx, [rbx + 0x30]
movss xmm0, dword [rbx + 0x118]
movss xmm1, dword [rbx + 0x11c]
addss xmm0, dword [r14]
addss xmm1, dword [r14 + 4]
movd esi, xmm0
movd eax, xmm1
shl rax, 0x20
or rsi, rax
call fcn.1400ba940
mov rax, qword [rbx + 0x38]
movsxd rcx, dword [rbx + 0x44]
mov qword [rax + rcx*8 - 8], rsi
lea rcx, [rbx + 0x48]
call fcn.1400ba940
mov rax, qword [rbx + 0x50]
movsxd rcx, dword [rbx + 0x5c]
mov dword [rax + rcx*4 - 4], 0
mov esi, dword [rbx + 0x44]
lea edi, [rsi - 2]
dec esi
movzx ebp, word [rbx + 0x100]
lea rcx, [rbx + 0x60]
mov edx, 3
call fcn.1400ba960
mov rax, qword [rbx + 0x68]
movsxd rcx, dword [rbx + 0x74]
mov word [rax + rcx*2 - 6], bp
mov word [rax + rcx*2 - 4], si
mov word [rax + rcx*2 - 2], di
mov ecx, dword [rsp + 0x4c]
jmp 0x14029aac4
mov r14, qword [rsp + 0x40]
mov r15, qword [rsp + 0x38]
mov rax, qword [r14]
mov qword [r15], rax
test ecx, ecx
setg bl
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1405602f0
mov eax, ebx
movaps xmm6, xmmword [rsp + 0x60]
movaps xmm7, xmmword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x1402a07b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, r8
mov rdi, rdx
mov rbx, rcx
cmp byte [rcx + 0x18], 0
movss xmm0, dword [rcx + 0x10]
je 0x1402a07d6
mov rcx, r9
movaps xmm1, xmm0
call fcn.140023680
movss xmm1, dword [0x14059d434]
minss xmm1, xmm0
mov r9d, dword [rbx + 0x14]
movaps xmm0, xmm1
mov rdx, rdi
mov r8, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp fcn.14029f040
Function at 0x1402c25f0
Capabilities:
Hash data using murmur3

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
movaps xmmword [rsp + 0x60], xmm6
mov rax, qword [0x1406a7e00]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov r13, r8
shr r13, 0x20
test r13d, r13d
jle 0x1402c2758
mov rbx, r8
mov rsi, rdx
mov rdi, rcx
lea r14, [rcx + 0x88]
lea rax, [rcx + 0x188]
mov qword [rsp + 0x38], rax
xor r12d, r12d
xorps xmm6, xmm6
xor r15d, r15d
jmp 0x1402c2681
movaps xmmword [rsp + 0x40], xmm6
mov rcx, qword [rsp + 0x38]
mov edx, ebp
lea r8, [rsp + 0x40]
call fcn.1402c9c80
mov rcx, rax
lea ebp, [rbx + 1]
mov edx, ebx
call fcn.1401b1940
inc r15
mov ebx, ebp
cmp r15, r13
je 0x1402c2758
mov rax, qword [rsi]
mov ebp, dword [rax + r15*4]
mov r8, rbx
movabs rax, 0xffffffff00000000
or r8, rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, r14
mov edx, 0x207
mov r9d, ebp
call fcn.1401fcf80
mov eax, ebp
shr eax, 0x10
xor eax, ebp
imul eax, eax, 0x85ebca6b
mov ecx, eax
shr ecx, 0xd
xor ecx, eax
imul ecx, ecx, 0xc2b2ae35
mov eax, ecx
shr eax, 0x10
xor eax, ecx
mov ecx, 1
cmove eax, ecx
mov ecx, dword [rdi + 0x18c]
test ecx, ecx
jle 0x1402c2650
lea edx, [rcx - 1]
and edx, eax
mov r8, qword [rdi + 0x190]
mov r9d, ecx
jmp 0x1402c2727
test edx, edx
mov r10d, ecx
cmovg r10d, r12d
add edx, r10d
dec edx
dec r9d
je 0x1402c2650
movsxd r10, edx
shl r10, 5
mov r11d, dword [r8 + r10]
test r11d, r11d
je 0x1402c2650
cmp eax, r11d
jne 0x1402c2710
cmp ebp, dword [r8 + r10 + 8]
jne 0x1402c2710
lea rcx, [r8 + r10]
add rcx, 8
add rcx, 8
jmp 0x1402c2669
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1405602f0
movaps xmm6, xmmword [rsp + 0x60]
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret

Function at 0x1402c9ef0
Capabilities:
Hash data using murmur3

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov eax, dword [rdx]
mov r8d, eax
shr r8d, 0x10
xor r8d, eax
imul r8d, r8d, 0x85ebca6b
mov r9d, r8d
shr r9d, 0xd
xor r9d, r8d
imul r8d, r9d, 0xc2b2ae35
mov r9d, r8d
shr r9d, 0x10
xor r9d, r8d
mov r8d, 1
cmovne r8d, r9d
mov r9d, dword [rcx + 4]
xor esi, esi
test r9d, r9d
jle 0x1402c9fa1
mov rdi, rcx
lea r10d, [r9 - 1]
and r10d, r8d
mov rbx, qword [rcx + 8]
mov r11d, r9d
jmp 0x1402c9f64
test r10d, r10d
mov ecx, r9d
cmovg ecx, esi
add r10d, ecx
dec r10d
dec r11d
je 0x1402c9fa1
movsxd r14, r10d
shl r14, 5
lea rcx, [rbx + r14]
mov ebp, dword [rbx + r14]
test ebp, ebp
je 0x1402c9f92
cmp r8d, ebp
jne 0x1402c9f50
cmp eax, dword [rbx + r14 + 8]
jne 0x1402c9f50
lea rsi, [rbx + r14]
add rsi, 8
call fcn.1402c9fb0
jmp 0x1402c9fa1
call fcn.1402c9fb0
inc dword [rdi]
lea rsi, [rbx + r14]
add rsi, 8
mov rax, rsi
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
Function at 0x140356f20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rsi
sub rsp, 0x40
movaps xmmword [rsp + 0x30], xmm6
mov r10, rcx
cmp dword [rcx + 4], edx
jbe 0x140356fbd
mov rax, qword [r10 + 0x18]
test rax, rax
lea rcx, [0x1405d7500]
cmove rax, rcx
mov r11d, dword [r10]
dec r11d
cmp r11d, edx
cmovae r11d, edx
mov rax, qword [rax + 0x10]
movzx eax, word [rax + r11*4]
rol ax, 8
movzx eax, ax
mov r11d, dword [r8 + 0x78]
test r11d, r11d
je 0x140356fc6
mov r10, qword [r10 + 0x20]
test r10, r10
cmove r10, rcx
mov esi, dword [r10 + 0x18]
test esi, esi
je 0x140356fd1
xorps xmm6, xmm6
cvtsi2ss xmm6, eax
cmp esi, 0x18
jb 0x140356f91
mov rcx, qword [r10 + 0x10]
mov r8, qword [r8 + 0x80]
mov qword [rsp + 0x20], r9
mov r9d, r11d
call fcn.1403569a0
addss xmm0, dword [0x14059b040]
call fcn.14056fa9c
addss xmm0, xmm6
cvttss2si rax, xmm0
jmp 0x140356fc6
xor eax, eax
cmp dword [r10 + 8], 0
je 0x140356fe6
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x40
pop rsi
ret
mov rcx, r8
mov r8b, 1
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x40
pop rsi
jmp 0x140342f70
mov eax, dword [r10 + 0x10]
jmp 0x140356fc6