joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140051980
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0xe
xor eax, eax
mov dword [rcx + 0x30], 0x4f4d4142
mov rbx, rcx
mov dword [rcx + 0x34], 0x5e5e4f42
mov dword [rcx + 0x38], 0x4f5a4f4a
mov byte [rcx + 0x3c], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x1400519cf
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x1400519de
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140051a00
mov eax, 0xc
nop
inc eax
test al, 0xf
jne 0x140051a40
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140051a70
mov qword [rbx + 0x28], rax
jmp 0x140051ab8
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xc
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
mov eax, dword [rbx + 0x38]
mov dword [rdi + 0x10], eax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140051ad0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0xc
mov rbx, rcx
movsx edi, byte [rcx]
mov dword [rcx + 0x30], 0x4978694b
mov dword [rcx + 0x34], 0x7e657a62
mov dword [rcx + 0x38], 0x69616263
mov dword [rcx + 0x3c], 0x6d5a7862
mov dword [rcx + 0x40], 0x6e6d657e
mov dword [rcx + 0x44], 0x4d6960
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140051b2f
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140051b3e
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140051b60
mov eax, 0x17
nop
inc eax
test al, 0xf
jne 0x140051ba0
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140051bd0
mov qword [rbx + 0x28], rax
jmp 0x140051c25
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0x17
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movups xmm0, xmmword [rbx + 0x30]
movups xmmword [rdi + 8], xmm0
mov eax, dword [rbx + 0x40]
mov dword [rdi + 0x18], eax
movzx eax, word [rbx + 0x44]
mov word [rdi + 0x1c], ax
movzx eax, byte [rbx + 0x46]
mov byte [rdi + 0x1e], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140051c40
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x2e
xor eax, eax
mov dword [rcx + 0x30], 0x4a404768
mov rbx, rcx
mov dword [rcx + 0x34], 0x5d5c4768
mov dword [rcx + 0x38], 0x4247685a
mov word [rcx + 0x3c], 0x6f4b
mov byte [rcx + 0x3e], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140051c95
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140051ca4
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
nop word [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140051cd0
mov eax, 0xe
nop
inc eax
test al, 0xf
jne 0x140051d10
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140051d40
mov qword [rbx + 0x28], rax
jmp 0x140051d90
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xe
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
mov eax, dword [rbx + 0x38]
mov dword [rdi + 0x10], eax
movzx eax, word [rbx + 0x3c]
mov word [rdi + 0x14], ax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140051db0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x42
mov rbx, rcx
movsx edi, byte [rcx]
mov dword [rcx + 0x30], 0x262c2b04
mov dword [rcx + 0x34], 0x363a270c
mov dword [rcx + 0x38], 0x272e2b04
mov word [rcx + 0x3c], 3
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140051e00
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140051e0f
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140051e30
mov eax, 0xd
nop
inc eax
test al, 0xf
jne 0x140051e70
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140051ea0
mov qword [rbx + 0x28], rax
jmp 0x140051eef
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xd
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
mov eax, dword [rbx + 0x38]
mov dword [rdi + 0x10], eax
movzx eax, byte [rbx + 0x3c]
mov byte [rdi + 0x14], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x1400521f0
Capabilities:
Encode data using xor
Encrypt data using xtea

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r14
mov esi, dword [rdx]
xor r14d, r14d
mov r11d, dword [r8 + 4]
mov rdi, rdx
mov ebp, dword [r8 + 8]
mov ebx, dword [r8 + 0xc]
add esi, dword [r8]
add r11d, dword [rdx + 4]
add ebp, dword [rdx + 8]
add ebx, dword [rdx + 0xc]
test ecx, ecx
je 0x1400522f8
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x28], r15
mov r15d, r14d
mov r12d, ecx
nop word [rax + rax]
movzx ecx, r11b
mov eax, r14d
and eax, 3
and cl, 0x1f
add eax, 4
and r15d, 3
mov r10d, dword [r8 + rax*4]
mov eax, r11d
mov edx, dword [r8 + r15*4]
shl eax, 4
rol r10d, cl
mov ecx, r11d
add r10d, eax
shr ecx, 0x1b
rol edx, cl
mov eax, r11d
shr eax, 5
mov ecx, ebx
add edx, eax
shr ecx, 0x1b
xor r10d, edx
lea eax, [rbx + r14]
xor r10d, eax
add r14d, 0x9e3779b9
add r10d, esi
mov eax, r14d
shr rax, 0xb
mov esi, r11d
and eax, 3
mov r15d, r14d
mov r9d, dword [r8 + rax*4]
mov eax, ebx
shr eax, 5
rol r9d, cl
movzx ecx, bl
add r9d, eax
and cl, 0x1f
mov eax, r14d
shr eax, 0xb
and eax, 3
add eax, 4
mov edx, dword [r8 + rax*4]
mov eax, ebx
shl eax, 4
rol edx, cl
add edx, eax
lea eax, [r11 + r14]
xor r9d, edx
mov r11d, r9d
xor r11d, eax
add r11d, ebp
mov ebp, ebx
mov ebx, r10d
sub r12, 1
jne 0x140052240
mov r15, qword [rsp + 0x28]
mov r12, qword [rsp + 0x20]
xor esi, dword [r8 + 0x10]
mov dword [rdi], esi
xor r11d, dword [r8 + 0x14]
mov dword [rdi + 4], r11d
xor ebp, dword [r8 + 0x18]
mov dword [rdi + 8], ebp
xor ebx, dword [r8 + 0x1c]
mov rbp, qword [rsp + 0x38]
mov dword [rdi + 0xc], ebx
mov rbx, qword [rsp + 0x30]
pop r14
pop rdi
pop rsi
ret
Function at 0x140052330
Capabilities:
Encode data using xor
Encrypt data using xtea

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r14
mov ebx, dword [r8 + 0x1c]
mov rdi, rdx
mov esi, dword [r8 + 0x18]
mov ebp, dword [r8 + 0x14]
mov r11d, dword [r8 + 0x10]
xor ebx, dword [rdx + 0xc]
xor esi, dword [rdx + 8]
xor ebp, dword [rdx + 4]
xor r11d, dword [rdx]
imul r14d, ecx, 0x9e3779b9
test ecx, ecx
je 0x140052439
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x28], r15
mov r15d, r14d
mov r12d, ecx
nop dword [rax]
shr r15, 0xb
mov r10d, ebx
mov ebx, esi
and r15d, 3
mov eax, ebx
mov ecx, ebx
shr eax, 5
mov esi, ebp
shr ecx, 0x1b
mov ebp, r11d
mov r9d, dword [r8 + r15*4]
rol r9d, cl
movzx ecx, bl
add r9d, eax
and cl, 0x1f
mov eax, r14d
shr eax, 0xb
and eax, 3
add eax, 4
mov edx, dword [r8 + rax*4]
mov eax, ebx
shl eax, 4
rol edx, cl
movzx ecx, r11b
add edx, eax
and cl, 0x1f
xor r9d, edx
lea eax, [r11 + r14]
xor r9d, eax
add r14d, 0x61c88647
sub esi, r9d
mov r15d, r14d
mov eax, r14d
and eax, 3
add eax, 4
mov r9d, dword [r8 + rax*4]
mov eax, r11d
rol r9d, cl
mov ecx, r11d
shl eax, 4
add r9d, eax
shr r11d, 5
mov eax, r14d
and eax, 3
shr ecx, 0x1b
mov edx, dword [r8 + rax*4]
lea eax, [rbx + r14]
rol edx, cl
add edx, r11d
mov r11d, r10d
xor r9d, edx
xor r9d, eax
sub r11d, r9d
sub r12, 1
jne 0x140052380
mov r15, qword [rsp + 0x28]
mov r12, qword [rsp + 0x20]
sub ebx, dword [r8 + 0xc]
mov dword [rdi + 0xc], ebx
sub esi, dword [r8 + 8]
mov rbx, qword [rsp + 0x30]
mov dword [rdi + 8], esi
sub ebp, dword [r8 + 4]
mov dword [rdi + 4], ebp
sub r11d, dword [r8]
mov rbp, qword [rsp + 0x38]
mov dword [rdi], r11d
pop r14
pop rdi
pop rsi
ret
Function at 0x140055050
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x4c
xor eax, eax
mov dword [rcx + 0x30], 0x282d2300
mov rbx, rcx
mov dword [rcx + 0x34], 0x3e2e2500
mov dword [rcx + 0x38], 0xd353e2d
mov byte [rcx + 0x3c], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x14005509f
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x1400550ae
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x1400550d0
mov eax, 0xc
nop
inc eax
test al, 0xf
jne 0x140055110
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140055140
mov qword [rbx + 0x28], rax
jmp 0x140055188
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xc
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
mov eax, dword [rbx + 0x38]
mov dword [rdi + 0x10], eax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x1400551a0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x58
xor eax, eax
mov dword [rcx + 0x30], 0x342d392e
mov rbx, rcx
mov dword [rcx + 0x34], 0x31343b2c
mov dword [rcx + 0x38], 0x34343c76
mov byte [rcx + 0x3c], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x1400551ef
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x1400551fe
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140055220
mov eax, 0xc
nop
inc eax
test al, 0xf
jne 0x140055260
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140055290
mov qword [rbx + 0x28], rax
jmp 0x1400552d8
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xc
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
mov eax, dword [rbx + 0x38]
mov dword [rdi + 0x10], eax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x1400552f0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x66
xor eax, eax
mov dword [rcx + 0x30], 0xa130730
mov rbx, rcx
mov dword [rcx + 0x34], 0x13082312
mov dword [rcx + 0x38], 0x714030b
mov dword [rcx + 0x3c], 0x7300312
mov dword [rcx + 0x40], 0x15120a13
mov byte [rcx + 0x44], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x14005534d
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x14005535c
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop word [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140055380
mov eax, 0x14
nop
inc eax
test al, 0xf
jne 0x1400553c0
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x1400553f0
mov qword [rbx + 0x28], rax
jmp 0x140055436
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0x14
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movups xmm0, xmmword [rbx + 0x30]
movups xmmword [rdi + 8], xmm0
mov eax, dword [rbx + 0x40]
mov dword [rdi + 0x18], eax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140055450
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x62
xor eax, eax
mov dword [rcx + 0x30], 0xe170334
mov rbx, rcx
mov dword [rcx + 0x34], 0x7122d16
mov dword [rcx + 0x38], 0x1703340c
mov word [rcx + 0x3c], 0x160e
mov byte [rcx + 0x3e], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x1400554a5
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x1400554b4
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
nop word [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x1400554e0
mov eax, 0xe
nop
inc eax
test al, 0xf
jne 0x140055520
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140055550
mov qword [rbx + 0x28], rax
jmp 0x1400555a0
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xe
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
mov eax, dword [rbx + 0x38]
mov dword [rdi + 0x10], eax
movzx eax, word [rbx + 0x3c]
mov word [rdi + 0x14], ax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x1400555c0
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x71
mov rbx, rcx
movsx edi, byte [rcx]
mov dword [rcx + 0x30], 0x1d041027
mov dword [rcx + 0x34], 0x41f3405
mov dword [rcx + 0x38], 0x1003141c
mov dword [rcx + 0x3c], 0x5381405
mov dword [rcx + 0x40], 0x21c14
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140055618
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140055627
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop word [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140055650
mov eax, 0x13
nop
inc eax
test al, 0xf
jne 0x140055690
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x1400556c0
mov qword [rbx + 0x28], rax
jmp 0x14005570f
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0x13
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movups xmm0, xmmword [rbx + 0x30]
movups xmmword [rdi + 8], xmm0
movzx eax, word [rbx + 0x40]
mov word [rdi + 0x18], ax
movzx eax, byte [rbx + 0x42]
mov byte [rdi + 0x1a], al
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140055730
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 1
xor eax, eax
mov dword [rcx + 0x30], 0x6d746057
mov rbx, rcx
mov dword [rcx + 0x34], 0x75644675
mov dword [rcx + 0x38], 0x6c647548
mov byte [rcx + 0x3c], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x14005577f
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x14005578e
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x1400557b0
mov eax, 0xc
nop
inc eax
test al, 0xf
jne 0x1400557f0
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x140055820
mov qword [rbx + 0x28], rax
jmp 0x140055868
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0xc
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movsd xmm0, qword [rbx + 0x30]
movsd qword [rdi + 8], xmm0
mov eax, dword [rbx + 0x38]
mov dword [rdi + 0x10], eax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140055880
Capabilities:
Encode data using xor
Hash data using murmur2

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
mov byte [rcx], 0x6e
xor eax, eax
mov dword [rcx + 0x30], 0x43434343
mov rbx, rcx
mov dword [rcx + 0x34], 0x43434343
mov dword [rcx + 0x38], 0x43434343
mov dword [rcx + 0x3c], 0x43434343
mov dword [rcx + 0x40], 0x43434343
mov dword [rcx + 0x44], 0x43434343
mov dword [rcx + 0x48], 0x43434343
mov dword [rcx + 0x4c], 0x43434343
mov dword [rcx + 0x50], 0x43434343
mov dword [rcx + 0x54], 0x43434343
mov word [rcx + 0x58], 0x6443
mov byte [rcx + 0x5a], al
movsx edi, byte [rcx]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x140055906
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x140055915
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor edx, edx
lea r9d, [rdx + 8]
nop dword [rax]
nop word [rax + rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140055940
mov eax, 0x2a
nop
inc eax
test al, 0xf
jne 0x140055980
lea esi, [rax + 8]
mov qword [0x140187190], 0
mov edx, esi
call fcn.140052d80
mov qword [0x140187190], rax
mov rdi, rax
test rax, rax
jne 0x1400559b0
mov qword [rbx + 0x28], rax
jmp 0x140055a0a
mov dword [0x14018719c], esi
lea rcx, [rdi + 8]
mov dword [0x140187198], 0x2a
lea r9, [rbx + 4]
mov dword [rax], esi
mov r8b, 1
mov eax, dword [0x140187198]
mov dword [rdi + 4], eax
movups xmm0, xmmword [rbx + 0x30]
movups xmmword [rdi + 8], xmm0
movups xmm1, xmmword [rbx + 0x40]
movups xmmword [rdi + 0x18], xmm1
movsd xmm0, qword [rbx + 0x50]
movsd qword [rdi + 0x28], xmm0
movzx eax, word [rbx + 0x58]
mov word [rdi + 0x30], ax
mov edx, dword [0x14018719c]
add edx, 0xfffffff8
call fcn.140052470
mov qword [rbx + 0x28], rdi
mov rbp, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret