joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140001390
Capabilities:
Log keystrokes via application hook

Disassembly:
sub rsp, 0x68
mov rax, qword [0x140005008]
xor rax, rsp
mov qword [rsp + 0x50], rax
xor r9d, r9d
lea rdx, [0x140001070]
xor r8d, r8d
lea ecx, [r9 + 0xd]
call qword [sym.imp.USER32.dll_SetWindowsHookExW]
mov qword [0x1400056c0], rax
test rax, rax
jne 0x1400013f7
lea r9d, [rax + 0x10]
xor ecx, ecx
lea r8, str.Error
lea rdx, str.Failed_to_set_keyboard_hook_
call qword [sym.imp.USER32.dll_MessageBoxW]
mov eax, 1
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.1400016f0
add rsp, 0x68
ret
xor r9d, r9d
lea rcx, [rsp + 0x20]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x14000143d
nop
lea rcx, [rsp + 0x20]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x20]
call qword [sym.imp.USER32.dll_DispatchMessageW]
xor r9d, r9d
lea rcx, [rsp + 0x20]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jne 0x140001410
mov rcx, qword [0x1400056c0]
call qword [sym.imp.USER32.dll_UnhookWindowsHookEx]
xor eax, eax
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.1400016f0
add rsp, 0x68
ret

Function at 0x140002018
Capabilities:
Parse pe header

Disassembly:
sub rsp, 0x28
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x140002062
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x140002062
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
cmp dword [rcx], reloc.USER32.dll_UnhookWindowsHookEx
jne 0x140002062
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x140002062
cmp dword [rcx + 0x84], 0xe
jbe 0x140002062
cmp dword [rcx + 0xf8], 0
setne al
jmp 0x140002064
xor al, al
add rsp, 0x28
ret

Function at 0x180001210
Capabilities:
Create thread

Disassembly:
sub rsp, 0x38
cmp edx, 1
jne 0x18000123e
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor eax, eax
lea r8, [0x180001070]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, 1
add rsp, 0x38
ret
Function at 0x14001c7d0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx edi, byte [rcx]
mov rbx, rcx
mov ecx, edi
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x14001c7f8
mov edx, 0x84
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x14001c807
mov edx, 0x9d
call fcn.140128630
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edi, edi
mov edx, edi
lea r10d, [rdi + 8]
nop word [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001c830
mov r9d, dword [0x140196874]
mov rdx, qword [rbx + 0x28]
call fcn.14011cb00
mov rdx, rax
test rax, rax
jne 0x14001c88c
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movsx ecx, word [rbx]
mov rax, rdi
movd xmm1, ecx
lea rcx, [rdx + 0x16]
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
cmp rdx, rbx
ja 0x14001c8ad
cmp rcx, rbx
jae 0x14001c8c0
movdqu xmm0, xmmword [rdx]
mov eax, 8
pxor xmm0, xmm1
movdqu xmmword [rdx], xmm0
nop
movzx ecx, word [rbx]
xor word [rdx + rax*2], cx
inc rax
cmp rax, 0xc
jb 0x14001c8c0
mov rbx, qword [rsp + 0x38]
mov rax, rdx
mov word [rdx + 0x18], di
add rsp, 0x20
pop rdi
ret

Function at 0x14001c8f0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx ebx, byte [rcx]
mov rdi, rcx
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001c918
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001c927
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rdi + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edx, edx
lea r10d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001c950
mov r9d, dword [0x140196874]
mov rdx, qword [rdi + 0x28]
call fcn.14011cb00
mov rcx, rax
test rax, rax
jne 0x14001c9ac
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movzx eax, byte [rdi]
xor byte [rcx], al
movzx eax, byte [rdi]
xor byte [rcx + 1], al
movzx eax, byte [rdi]
xor byte [rcx + 2], al
movzx eax, byte [rdi]
xor byte [rcx + 3], al
movzx eax, byte [rdi]
xor byte [rcx + 4], al
movzx eax, byte [rdi]
xor byte [rcx + 5], al
movzx eax, byte [rdi]
xor byte [rcx + 6], al
movzx eax, byte [rdi]
xor byte [rcx + 7], al
movzx eax, byte [rdi]
xor byte [rcx + 8], al
mov rax, rcx
mov rbx, qword [rsp + 0x38]
mov byte [rcx + 9], 0
add rsp, 0x20
pop rdi
ret
Function at 0x14001ca00
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx edi, byte [rcx]
mov rbx, rcx
mov ecx, edi
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x14001ca28
mov edx, 0x84
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x14001ca37
mov edx, 0x9d
call fcn.140128630
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edx, edx
lea r10d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001ca60
mov r9d, dword [0x140196874]
mov rdx, qword [rbx + 0x28]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x14001cabc
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov edx, 0xc
movzx ecx, byte [rbx]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x14001cac1
mov rbx, qword [rsp + 0x38]
mov rax, r8
mov byte [r8 + 0xc], dl
add rsp, 0x20
pop rdi
ret

Function at 0x14001caf0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx ebx, byte [rcx]
mov rdi, rcx
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001cb18
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001cb27
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rdi + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edx, edx
lea r10d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001cb50
mov r9d, dword [0x140196874]
mov rdx, qword [rdi + 0x28]
call fcn.14011cb00
mov rcx, rax
test rax, rax
jne 0x14001cbac
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movzx eax, byte [rdi]
xor byte [rcx], al
movzx eax, byte [rdi]
xor byte [rcx + 1], al
mov rax, rcx
mov rbx, qword [rsp + 0x38]
mov byte [rcx + 2], 0
add rsp, 0x20
pop rdi
ret
Function at 0x14001cbd0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx ebx, byte [rcx]
mov rdi, rcx
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001cbf8
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001cc07
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rdi + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edx, edx
lea r10d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001cc30
mov r9d, dword [0x140196874]
mov rdx, qword [rdi + 0x28]
call fcn.14011cb00
mov rcx, rax
test rax, rax
jne 0x14001cc8c
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movzx eax, byte [rdi]
xor byte [rcx], al
movzx eax, byte [rdi]
xor byte [rcx + 1], al
movzx eax, byte [rdi]
xor byte [rcx + 2], al
movzx eax, byte [rdi]
xor byte [rcx + 3], al
movzx eax, byte [rdi]
xor byte [rcx + 4], al
mov rax, rcx
mov rbx, qword [rsp + 0x38]
mov byte [rcx + 5], 0
add rsp, 0x20
pop rdi
ret

Function at 0x14001ccc0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx edi, byte [rcx]
mov rbx, rcx
mov ecx, edi
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x14001cce8
mov edx, 0x84
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x14001ccf7
mov edx, 0x9d
call fcn.140128630
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edi, edi
mov edx, edi
lea r10d, [rdi + 8]
nop word [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001cd20
mov r9d, dword [0x140196874]
mov rdx, qword [rbx + 0x28]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x14001cd7c
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movsx eax, byte [rbx]
movd xmm1, eax
lea rax, [r8 + 0x15]
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
cmp r8, rbx
ja 0x14001cd9e
cmp rax, rbx
jae 0x14001cdb1
movdqu xmm0, xmmword [r8]
mov edi, 0x10
pxor xmm0, xmm1
movdqu xmmword [r8], xmm0
mov edx, 0x16
lea rax, [rdi + r8]
sub rdx, rdi
nop dword [rax]
movzx ecx, byte [rbx]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x14001cdc0
mov rbx, qword [rsp + 0x38]
mov rax, r8
mov byte [r8 + 0x16], dl
add rsp, 0x20
pop rdi
ret
Function at 0x14001cdf0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx edi, byte [rcx]
mov rbx, rcx
mov ecx, edi
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x14001ce18
mov edx, 0x84
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x14001ce27
mov edx, 0x9d
call fcn.140128630
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edi, edi
mov edx, edi
lea r10d, [rdi + 8]
nop word [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001ce50
mov r9d, dword [0x140196874]
mov rdx, qword [rbx + 0x28]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x14001ceac
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movsx eax, byte [rbx]
movd xmm1, eax
lea rax, [r8 + 0x18]
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
cmp r8, rbx
ja 0x14001cece
cmp rax, rbx
jae 0x14001cee1
movdqu xmm0, xmmword [r8]
mov edi, 0x10
pxor xmm0, xmm1
movdqu xmmword [r8], xmm0
mov edx, 0x19
lea rax, [rdi + r8]
sub rdx, rdi
nop dword [rax]
movzx ecx, byte [rbx]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x14001cef0
mov rbx, qword [rsp + 0x38]
mov rax, r8
mov byte [r8 + 0x19], dl
add rsp, 0x20
pop rdi
ret

Function at 0x14001cf20
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx edi, byte [rcx]
mov rbx, rcx
mov ecx, edi
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x14001cf48
mov edx, 0x84
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x14001cf57
mov edx, 0x9d
call fcn.140128630
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edi, edi
mov edx, edi
lea r10d, [rdi + 8]
nop word [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001cf80
mov r9d, dword [0x140196874]
mov rdx, qword [rbx + 0x28]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x14001cfdc
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movsx eax, byte [rbx]
movd xmm1, eax
lea rax, [r8 + 0x13]
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
cmp r8, rbx
ja 0x14001cffe
cmp rax, rbx
jae 0x14001d011
movdqu xmm0, xmmword [r8]
mov edi, 0x10
pxor xmm0, xmm1
movdqu xmmword [r8], xmm0
mov edx, 0x14
lea rax, [rdi + r8]
sub rdx, rdi
nop dword [rax]
movzx ecx, byte [rbx]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x14001d020
mov rbx, qword [rsp + 0x38]
mov rax, r8
mov byte [r8 + 0x14], dl
add rsp, 0x20
pop rdi
ret
Function at 0x14001d050
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx edi, byte [rcx]
mov rbx, rcx
mov ecx, edi
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x14001d078
mov edx, 0x84
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x14001d087
mov edx, 0x9d
call fcn.140128630
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edi, edi
mov edx, edi
lea r10d, [rdi + 8]
nop word [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001d0b0
mov r9d, dword [0x140196874]
mov rdx, qword [rbx + 0x28]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x14001d10c
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movsx eax, byte [rbx]
movd xmm1, eax
lea rax, [r8 + 0x16]
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
cmp r8, rbx
ja 0x14001d12e
cmp rax, rbx
jae 0x14001d141
movdqu xmm0, xmmword [r8]
mov edi, 0x10
pxor xmm0, xmm1
movdqu xmmword [r8], xmm0
mov edx, 0x17
lea rax, [rdi + r8]
sub rdx, rdi
nop dword [rax]
movzx ecx, byte [rbx]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x14001d150
mov rbx, qword [rsp + 0x38]
mov rax, r8
mov byte [r8 + 0x17], dl
add rsp, 0x20
pop rdi
ret

Function at 0x14001d180
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx edi, byte [rcx]
mov rbx, rcx
mov ecx, edi
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x14001d1a8
mov edx, 0x84
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x14001d1b7
mov edx, 0x9d
call fcn.140128630
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edi, edi
mov edx, edi
lea r10d, [rdi + 8]
nop word [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001d1e0
mov r9d, dword [0x140196874]
mov rdx, qword [rbx + 0x28]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x14001d23c
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movsx eax, byte [rbx]
movd xmm1, eax
lea rax, [r8 + 0x1e]
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
cmp r8, rbx
ja 0x14001d25e
cmp rax, rbx
jae 0x14001d271
movdqu xmm0, xmmword [r8]
mov edi, 0x10
pxor xmm0, xmm1
movdqu xmmword [r8], xmm0
mov edx, 0x1f
lea rax, [rdi + r8]
sub rdx, rdi
nop dword [rax]
movzx ecx, byte [rbx]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x14001d280
mov rbx, qword [rsp + 0x38]
mov rax, r8
mov byte [r8 + 0x1f], dl
add rsp, 0x20
pop rdi
ret
Function at 0x14001d2b0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx edi, byte [rcx]
mov rbx, rcx
mov ecx, edi
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x14001d2d8
mov edx, 0x84
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x14001d2e7
mov edx, 0x9d
call fcn.140128630
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edx, edx
lea r10d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001d310
mov r9d, dword [0x140196874]
mov rdx, qword [rbx + 0x28]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x14001d36c
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov edx, 0xd
movzx ecx, byte [rbx]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x14001d371
mov rbx, qword [rsp + 0x38]
mov rax, r8
mov byte [r8 + 0xd], dl
add rsp, 0x20
pop rdi
ret

Function at 0x14001d3a0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx ebx, byte [rcx]
mov rdi, rcx
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001d3c8
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001d3d7
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rdi + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edx, edx
lea r10d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001d400
mov r9d, dword [0x140196874]
mov rdx, qword [rdi + 0x28]
call fcn.14011cb00
mov rcx, rax
test rax, rax
jne 0x14001d45c
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movzx eax, byte [rdi]
xor byte [rcx], al
mov rax, rcx
mov rbx, qword [rsp + 0x38]
mov byte [rcx + 1], 0
add rsp, 0x20
pop rdi
ret
Function at 0x14001d480
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx edi, byte [rcx]
mov rbx, rcx
mov ecx, edi
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x14001d4a8
mov edx, 0x84
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x14001d4b7
mov edx, 0x9d
call fcn.140128630
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edx, edx
lea r10d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001d4e0
mov r9d, dword [0x140196874]
mov rdx, qword [rbx + 0x28]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x14001d53c
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movsx eax, byte [rbx]
movd xmm1, eax
lea rax, [r8 + 0xf]
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
cmp r8, rbx
ja 0x14001d591
cmp rax, rbx
jb 0x14001d591
mov rax, r8
mov edx, 0x10
nop word [rax + rax]
movzx ecx, byte [rbx]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x14001d570
mov byte [r8 + 0x10], dl
mov rax, r8
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movdqu xmm0, xmmword [r8]
pxor xmm0, xmm1
movdqu xmmword [r8], xmm0
mov rbx, qword [rsp + 0x38]
mov rax, r8
mov byte [r8 + 0x10], 0
add rsp, 0x20
pop rdi
ret

Function at 0x14001d5c0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx edi, byte [rcx]
mov rbx, rcx
mov ecx, edi
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x14001d5e8
mov edx, 0x84
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x14001d5f7
mov edx, 0x9d
call fcn.140128630
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edi, edi
mov edx, edi
lea r10d, [rdi + 8]
nop word [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001d620
mov r9d, dword [0x140196874]
mov rdx, qword [rbx + 0x28]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x14001d67c
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movsx eax, byte [rbx]
movd xmm1, eax
lea rax, [r8 + 0x17]
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
cmp r8, rbx
ja 0x14001d69e
cmp rax, rbx
jae 0x14001d6b1
movdqu xmm0, xmmword [r8]
mov edi, 0x10
pxor xmm0, xmm1
movdqu xmmword [r8], xmm0
mov edx, 0x18
lea rax, [rdi + r8]
sub rdx, rdi
nop dword [rax]
movzx ecx, byte [rbx]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x14001d6c0
mov rbx, qword [rsp + 0x38]
mov rax, r8
mov byte [r8 + 0x18], dl
add rsp, 0x20
pop rdi
ret
Function at 0x14001d6f0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx ebx, byte [rcx]
mov rdi, rcx
mov ecx, ebx
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14001d718
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14001d727
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rdi + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edx, edx
lea r10d, [rdx + 8]
nop dword [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001d750
mov r9d, dword [0x140196874]
mov rdx, qword [rdi + 0x28]
call fcn.14011cb00
mov rcx, rax
test rax, rax
jne 0x14001d7ac
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movzx eax, byte [rdi]
xor byte [rcx], al
movzx eax, byte [rdi]
xor byte [rcx + 1], al
movzx eax, byte [rdi]
xor byte [rcx + 2], al
movzx eax, byte [rdi]
xor byte [rcx + 3], al
movzx eax, byte [rdi]
xor byte [rcx + 4], al
movzx eax, byte [rdi]
xor byte [rcx + 5], al
mov rax, rcx
mov rbx, qword [rsp + 0x38]
mov byte [rcx + 6], 0
add rsp, 0x20
pop rdi
ret

Function at 0x14001d7f0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
movsx edi, byte [rcx]
mov rbx, rcx
mov ecx, edi
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x14001d818
mov edx, 0x84
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x14001d827
mov edx, 0x9d
call fcn.140128630
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edi, edi
mov edx, edi
lea r10d, [rdi + 8]
nop word [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x14001d850
mov r9d, dword [0x140196874]
mov rdx, qword [rbx + 0x28]
call fcn.14011cb00
mov r8, rax
test rax, rax
jne 0x14001d8ac
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movsx eax, byte [rbx]
movd xmm1, eax
lea rax, [r8 + 0x12]
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
cmp r8, rbx
ja 0x14001d8ce
cmp rax, rbx
jae 0x14001d8e1
movdqu xmm0, xmmword [r8]
mov edi, 0x10
pxor xmm0, xmm1
movdqu xmmword [r8], xmm0
mov edx, 0x13
lea rax, [rdi + r8]
sub rdx, rdi
nop dword [rax]
movzx ecx, byte [rbx]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x14001d8f0
mov rbx, qword [rsp + 0x38]
mov rax, r8
mov byte [r8 + 0x13], dl
add rsp, 0x20
pop rdi
ret