joyce8/EMBER2024-capa huggingface dataset:
Function at 0x141fb18a4
Capabilities:
Authenticate hmac

Disassembly:
push rbp
cdq
lea rdx, [rdx + rdx - 0x34cc5b79]
xor dword [rsp + rdx + 0x34cc5b79], r11d
movzx ecx, dx
movsx ebx, dx
pop rbp
and r9, 0xffffffffde3f27a7
call fcn.141faa137
mov eax, 0x1e88bbad
lea rdi, [rdi + rax*4 - 0x7a22eeb8]
lea rdx, [rax + rax + 0x2c831d1d]
add edx, 0x408b0b30
lea rsi, [rdx + rax + 0x798a230b]
mov r8d, dword [rdi + rax - 0x1e88bbad]
lea rbp, [rsi + rsi*8 - 0x26f2f643]
ror al, 0xc1
mov ecx, edx
xor r8d, r10d
or esi, ecx
adc ebp, eax
shl sil, 1
rol r8d, 2
sub r8d, 0xf7afaa16
rol r8d, 2
mov ebx, eax
call fcn.141f0d5ce
not r8d
bt ax, 2
shl ebx, 0xe1
neg r8d
or rbx, rax
sar ecx, 0x21
jne 0x14200c37e
bt ebx, 0xbc
not r8w
not edx
movsx eax, bpl
inc bx
sbb edx, 0xb9059314
mov qword [rsp + rsi - 0x92], r9
call fcn.141f8ccdb
xor r11d, ebp
not r11d
and eax, eax
jae 0x14207a153
xor r8d, 0xd3b1c736
movzx esi, dx
imul dx, cx
sbb rbx, rsi
dec r8d
bt ebp, ebx
imul eax, eax
neg r8d
inc rcx
jp 0x141fb2832
mov edx, 0xf40227b0
sub rdi, 4
mov eax, dword [rdi]
xor eax, r8d
call fcn.141ea8039
dec r11d
movsx r9d, dx
xor r11d, 0x57aadea5
cdq
shl ax, 0x46
sbb r11d, edx
cdq
lea rax, [rax + r9*2 + 0x3bb2bb06]
bswap r11d
sar r9w, 0xe3
cwd
xor r11d, 0xc99cea2a
sub r11d, 0xac9fc091
jmp 0x141f033d1

Function at 0x141fb9d26
Capabilities:
Hash data using murmur3

Disassembly:
jb 0x141ee3b1b
call fcn.141f4a78c
lea rsi, [r10 + r9*4 - 0x59f3c2de]
ror eax, 2
shr r9, 0x66
jb 0x141f421be
mov r8d, dword [r11]
add r11, 4
mov edx, 0x76b60535
xor r8d, esi
lea rcx, [rdx*8 - 0x7fc01656]
sub r8d, 0xbd9db7b4
call fcn.141fbfa27

Function at 0x141fc2ffc
Capabilities:
Hash data using murmur3

Disassembly:
call fcn.141fd0927
btc rcx, r9
mov cl, byte [rcx + rdi - 0x800cb0]
call fcn.141ec75f4
xor esi, r8d
dec r11w
dec esi
shr bl, 0xe4
xor esi, 0x540b4901
xor bl, r11b
jg 0x1420289e1
cmp ebx, 2
lea rsp, [rsp + 8]
jne 0x141ed0224
jmp 0x141e67269
mov rax, qword [rbp + rbx*8]
cmp ebx, 1
jmp 0x141f04257
lea esi, [r11 + rsi - 0x6683475f]
ror esi, 2
or bx, r10w
push r8
jne 0x1420576e2
pop rax
pop rcx
pop r9
jmp fcn.141f5a357
xor dword [rsp + r10 - 0x4d9f], esi
movsx eax, r11b
movsx ecx, r11w
xadd r11d, ecx
pop r8
mov edx, 0xbf0a9e0c
movsxd rsi, esi
seta cl
adc r9, rsi
mov esi, ebx
call fcn.141e8cab3
ror qword [rsp + rdx*2 - 0x441a], 0x54
mov r8, qword [rsp + rdx - 0x2205]
not dx
mov r11d, ebx
call fcn.141f69d91
mov edx, 0xf7add826
mov eax, edx
movzx si, byte [rbp + riz]
lea r11, [rax + rax*4 - 0x25d66969]
mov cl, byte [rbp + 2]
add rbp, 2
movzx r10d, dx
shl sil, cl
mov word [rbp + r10 - 0xd826], si
lea rdi, [r10 + rdi - 0xd82a]
dec dx
call fcn.141ff2ac0
mov ax, word [r9]
call fcn.142049f67
Function at 0x141fc986f
Capabilities:
Hash data using murmur3

Disassembly:
call fcn.141f59928
mov ebp, dword [r8 + rbp - 0x439d01af]
sets dl
lea r8, [r8 + rbx*2 - 0xda]
neg ebx
xor ebp, r10d
not dl
sub dl, ch
xor ebp, 0x8e3ab818
call fcn.141f725dd
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [0xcd36ccd0], bl
mov ebx, 0xea3137bf
mov dh, 0xae
cmpsd dword [rsi], dword [rdi]
fidiv dword [rcx - 0x2ab0fb27]
xchg r10d, eax
jg 0x141f61429
invalid
xor byte [rax], ch
fld xword cs:[rcx - 0x2123e142]
invalid
jmp 0x141fb9241
cmp ebx, 1
lea rsp, [rsp + 8]
jne 0x141f6140d
mov ecx, 0x3421d08a
mov rcx, rax
jmp 0x141f6d433

Function at 0x141fcb0d1
Capabilities:
Encode data using base64
Hash data using murmur3

Disassembly:
test rcx, rcx
call fcn.141e696c3
jmp 0x141ed76be

Function at 0x141fd0996
Capabilities:
Encode data using base64
Hash data using murmur3

Disassembly:
and rdi, rdi
mov word [rsi + rbx - 0x778117b4], dx
jae 0x141fab437
sal di, 0x2d
ror r8d, 3
xadd word [rsp + rdi - 0xbfe0], si
movsx eax, r9w
inc r8d
mov qword [rsp + rdi - 0xbfe8], 0xfffffffff88e5cb5
ror r8d, 1
bts rdi, r9
not qword [rsp + rsi - 0x5c0011]
mov qword [rsp + rsi*8 - 0x2e00150], rbp
and qword [rsp + rsi*4 - 0x17000a3], 0xffffffffae3eeb09
lea rcx, [rdi + 0x783a5f11]
xor dword [rsp + rsi - 0x5c000e], r8d
call fcn.141ffd208
mov r9d, 0x74814680
mov r9, qword [rbx + r9 - 0x74814680]
mov esi, 0x778117b4
movzx dx, byte [r9 + rsi - 0x778117b4]
movsx edi, sil
lea rbx, [rbx + rsi - 0x778117ae]
jmp 0x141ed9a6b

Function at 0x141fd1d14
Capabilities:
Hash data using murmur3

Disassembly:
lea r10, [rbp + 0x7127902c]
pop r10
jmp 0x141f0c1ca
lea r10, [r10 + rsi*2 + 0x8b84]
xor ecx, ebp
dec ecx
lea rbx, [r11 + 0xe050e24]
cwd
mov qword [rsp + rax + 0x4af3c2ba], 0xffffffffeda05c3d
rol ecx, 2
sar r11d, 0x35
dec ecx
rol ecx, 1
ror r11d, 0x23
mov qword [rsp + rax + 0x4af3c2ca], rbx
lea ecx, [rcx + rax - 0x73425ce3]
add r11b, 0xaa
mov qword [rsp + rax + 0x4af3c2d2], rbp
movsx ebp, dl
call fcn.142052bb0
lea rdi, [rdi + rcx*2 - 0xdd5e]
mov r11d, ecx
push rsi
bts rax, rax
jae 0x142075a20
xor edi, 0x950b0b02
push r10
movzx eax, word [rsp + r10 + 0x41e84142]
dec edi
movzx esi, word [rsp + r10 + 0x41e84143]
ror word [rsp + r10 + 0x41e84143], 0xce
lea rcx, [r10 + rdx*4 + 0x45009ea3]
xor edi, 0x7e246285
neg edi
inc esi
xor edi, 0xc116bfb2
sar dl, 0xe7
mov qword [rsp + r10 + 0x41e84141], rbp
xor dword [rsp + rax - 0x17be], edi
pop rbp
lea rbx, [rbx + rax*2 - 0x2f80]
bts r10d, r9d
mov dword [rbx + rax*2 - 0x2f7c], edi
lea r8, [r8 + rax*2 - 0x2f80]
mov edi, dword [r8 + rax*4 - 0x5ef8]
xor edi, ebp
btr esi, 4
jb 0x14207c279
xor dword [rsp + rbp*4 - 0x300], ebx
movsx r11d, cx
jmp 0x141f7fa3f
cdqe
popfq
jmp r8

Function at 0x141fd75af
Capabilities:
Hash data using murmur3

Disassembly:
neg rdx
lea ebp, [rdi + rbp + 0x48fe74e9]
mov qword [rsp + rdi*2 - 0x83b8164], rcx
dec dx
xor ebp, 0x1481a09f
rol ebp, 2
call fcn.141e5a120

Function at 0x141fde162
Capabilities:
Hash data using murmur3

Disassembly:
lea r11, [rsp + 0x10]
call fcn.141f82363
call fcn.141fadd32
Function at 0x141fe600e
Capabilities:
Hash data using murmur3

Disassembly:
call fcn.141ed5c06
sub esi, 0xb634de09
ror dx, 0x68
mov rbx, qword [rcx + rsi*2 - 0x4e87972a]
imul esi
cwd
lea rdi, [rdi + rax - 0x1231c3fd]
pop rbp
mov qword [rdi + rax*4 - 0x48c70fd4], rbx
mov ebx, 0x93038ea1
mov ecx, dword [r8 + rax - 0x1231c3f5]
sub eax, r11d
jge 0x142030966
movsx r9d, cx
inc r10
push rbp
lea rax, [rcx + rcx*8 - 0x49c179f1]
xor dword [rsp + rdi*2 - 0x48], esi
dec r10
pop rbp
ror r10d, 0x8c
movsxd rsi, esi
jns 0x14204a310
lea r8, [r8 + rax*4 - 0x74c02dbc]
dec byte [rsp + rax - 0x1d300b6e]
rol bx, 0xe7
not byte [rsp + rax - 0x1d300b6f]
xor ecx, r10d
call fcn.141ed5644
mov eax, dword [rdi]
mov esi, 0x81146434
movsx r8d, si
dec si
lea rdi, [rdi + r8*8 - 0x3219c]
lea rsi, [rsi - 0x58f52ccb]
or sil, r8b
xor eax, r9d
call fcn.141f03d9b
lea edi, [rbp - 0x72e454ff]
invalid
sub r9b, 0x9f
mul r10d
add r11, rsi
btc ax, ax
mov dx, word [rbx + rdi*2 - 0x48]
mov cl, byte [rbx + rdi*8 - 0x11e]
lea rax, [r9 + rdi*8 + 0x7e1dbc32]
setb dil
call fcn.141ea949b
mov r11d, 0xe02c4e35
mov ecx, dword [r8]
call fcn.141e6d590
cmp ebx, 4
jmp 0x141f1929a

Function at 0x141fe6c22
Capabilities:
Hash data using murmur3

Disassembly:
xor dword [rsp + rcx - 0xd0], ebx
cqo
rol word [rsp + rcx*2 - 0x1b3], 0x88
mov r10, qword [rsp + rcx*2 - 0x1b0]
jb 0x1420167e5
movsxd rbx, ebx
call fcn.141e978f6
call fcn.141fa1fcc

Function at 0x141fed7a0
Capabilities:
Encode data using base64
Hash data using murmur3

Disassembly:
inc edx
shl rbx, 0xf0
neg bpl
sal r8d, 0x3a
xor edx, 0xa08ea53f
lea rcx, [rax*8 + 0x749805b1]
rol ebx, cl
mov qword [rsp + rax*8 - 0x7a0], r10
ror qword [rsp + rax - 0xf5], 0x3d
btr ebp, 0x97
or esi, ebp
xor dword [rsp + rax - 0xed], edx
mov r10, qword [rsp + rax - 0xed]
idiv bpl
mov qword [rsp + rax*2 - 0x624], r8
movsxd rdx, edx
sub bl, r8b
jge 0x141e7296c
inc bpl
jmp 0x141e52be3
mov qword [rsp + rax - 0xf5], r8
lea edx, [r8 + rdx + 0x192e1f31]
ror dword [rsp + rax*2 - 0x1e0], 0x88
movsx ebp, al
js 0x14202a967
not edx
jne 0x141f6453f

Function at 0x141ff0ff1
Capabilities:
Hash data using murmur3

Disassembly:
mov qword [rsp + rdi - 0x78a713ab], rdx
lea r11, [r11 + rdi - 0x78a713a7]
dec di
movzx eax, di
mov dword [r11 + rcx - 0x78a713ab], esi
movsx r9d, ax
dec rax
mov eax, dword [rbx + rax*4 - 0x4ea4]
lea rbx, [rcx + rbx - 0x78a713a7]
not edi
xor eax, ebp
and byte [rsp + r9*4 - 0x4ea8], r9b
push rdx
jnp 0x142026c94
inc eax
ror eax, 2
sal di, cl
not eax
jne 0x142045a6c
sub edx, edx
xor eax, 0x3ee6b7
bswap eax
jmp 0x142078c98
call fcn.141f43dca
mov ebp, 0x5e13aab8
mov esi, ebp
movzx ebx, bpl
mov ebx, dword [rdi + rsi - 0x5e13aab8]
movzx edx, sil
lea rdi, [rsi + rdi - 0x5e13aab4]
xor ebx, r9d
ror ebx, 2
neg ebx
movzx ecx, bpl
call fcn.141eedbb6
Function at 0x141ff3214
Capabilities:
Hash data using murmur3

Disassembly:
pop r8
movsxd rax, eax
bt edx, 0x10
adc r9, rax
rol rcx, 0xd6
jae fcn.141f6db95
mov eax, 0x990b4701
ror rax, 0x38
mov bx, word [rdi]
movzx r11d, ax
lea rdx, [rax + 0xa017b1]
lea rsi, [rdx + rdx*8 + 0x7620a9a7]
mov si, word [rdi + r11*2 - 0x1fe]
lea rdi, [r11 + rdi - 0xfe]
movsx ecx, dx
adc bx, si
sub rax, r11
mov word [rdi + r11 - 0x100], bx
setnp al
lea r9, [rax + rax - 0x65cf79e7]
movzx ebx, cl
mov r9d, dword [r11 + r10 - 0x100]
lea r10, [r10 + r11 - 0xfc]
xor r9d, ebp
sar ecx, cl
adc r9d, 0xd3239f1a
movzx esi, r11b
ror r9d, 1
bt ebx, 0x3c
inc r9d
lea rsi, [r11*8 + 0x66888898]
sar eax, 0xd9
rol r9d, 1
push rbp
xor dword [rsp + rax*4 - 0x14], r9d
lea rax, [rbx*2 + 0x4a95020c]
pop rbp
movsxd r9, r9d
add r8, r9
movzx r9d, al
shr r9b, 1
adc rcx, r8
jmp rcx
mov ecx, edx
mov eax, dword [rdi + rbx - 0xaf]
sbb ecx, esi
xor eax, r8d
rol dx, 4
adc edx, 0xd003369a
ror ecx, cl
lea eax, [rbx + rax + 0x4eb11055]
shl rdx, 0xa1
xor eax, 0x4193e631
btr bx, bx
dec eax
movsx r11d, cx
xchg r11b, r10b
ror eax, 1
push r8
xor dword [rsp + rbx*2 - 0x15e], eax
mov r8d, ecx
jmp 0x141f360fb
mov dword [r9 + rbx*4], esi
mov eax, 0x97a31834
call fcn.141fa380d
mov r10d, 0x9820c5af
movzx ebx, r10b
movzx edx, bx
mov r10, rbp
push rdx
lea rbp, [rbp + rdx*8 - 0x580]
movsx esi, dl
mov qword [rbp + rbx*8 - 0x578], r10
shr edx, 0xeb
imul edx, ebx
pop r10
lea rdi, [rdi + rbx - 0xb3]
jae 0x141f745e0

Function at 0x141ffbd24
Capabilities:
Execute anti-debugging instructions
Hash data using murmur3

Disassembly:
cbw
lea rdi, [rdi + rdx*2 + 4]
xor r8d, r9d
bswap r8d
jmp 0x141e75ef7
xor sil, 0xd
shl bl, 0x61
xor r9b, sil
mov qword [rsp + rdx], 0xcaddd21
lea rsi, [rsp + rsi + 0x10]
neg bl
inc qword [rsp + rdx*2 + 6]
movsx eax, bp
mov dword [rbp + rsi - 0x2f3e0000], r8d
mov r8d, dword [rdi + rdx*4]
sal dx, 0x25
jae 0x141ff11da

Function at 0x141ffdae1
Capabilities:
Hash data using murmur3

Disassembly:
lea rax, [rdx + rdx*8 + 0x3b096338]
shrd ebx, ebp, cl
mov ebp, dword [rsp + rdx + 0x59280740]
and qword [rsp + rdx + 0x5928073f], rdx
cwd
mov dword [rbp + r11 - 0x592807], ebx
mov ecx, dword [rdi + rbp*4 - 0x164a01c]
cwde
lea rdi, [rax + rdi - 0x21fd]
shr rax, 0xb3
cbw
sub ebp, edx
xor ecx, r9d
not ecx
shl qword [rsp + rdx + 0x59290000], 0x9f
rol ecx, 1
pop rsi
mov ebx, 0x549a0808
neg esi
not ecx
dec ecx
idiv bpl
xor al, dh
push r9
movsx r9d, si
xadd rbx, rax
dec ax
xor dword [rsp + rdx + 0x59290000], ecx
pop r9
lea r8, [rdx*2 - 0x6be79ad6]
bt dx, r8w
sub esi, ebx
movsxd rcx, ecx
neg ax
sar bl, 0xe1
jg 0x142033884
mov qword [rsp + rdx - 0x5928073e], rdx
mov ebp, dword [r11 + rdx - 0x5928073a]
movsx ecx, dx
not rdx
mov cl, byte [rcx + r11 - 0x736]
mov esi, edx
sar word [rsp + rdx + 0x59280743], 0xa9
lea r11, [r11 + rdx + 0x59280745]
jae 0x141fbf88b
mov qword [rsp + rsi*2 - 0x7fe5000], r8
ret 0x18
adc r10, rcx
call fcn.141f32d97
Function at 0x141ffeac6
Capabilities:
Hash data using murmur3

Disassembly:
mov rdi, qword [rsp + r12 - 0x36]
mov r10, qword [rsp + r14*2 - 0x71099ec8]
lea r14, [r15 + rdx*8 - 0x3c6995cc]
mov qword [rsp + r14 - 0x64cb7199], r12
lea r13, [r12 + 0x18a90306]
mov r14, qword [rsp + r14 - 0x64cb7139]
call fcn.141f24fa4

Function at 0x142002581
Capabilities:
Hash data using murmur3

Disassembly:
mov eax, dword [r10]
mov r11d, r9d
movzx edx, r11w
lea r10, [r10 + rdx*8 - 0x525c4]
xor eax, ebp
not edx
ror eax, 2
bswap eax
lea rsi, [r11 - 0x48601f43]
ror eax, 3
jmp 0x141f9f914
xor edi, 0x91b959ad
sal ebp, 0x50
sal ecx, 0xed
and edx, 0xadb24a1e
inc edi
rol edi, 2
mov qword [rsp + rdx - 0x4216], 0xffffffffa226b31c
xadd qword [rsp + rdx - 0x4216], r8
setle byte [rsp + rdx - 0x4210]
bswap edi
neg qword [rsp + rdx*2 - 0x842c]
lea edi, [rdi + rdx - 0x42034b1d]
rol edi, 3
mov qword [rsp + rdx - 0x4216], rsi
movzx esi, r8w
xor dword [rsp + rdx*2 - 0x842c], edi
lea r9, [rsi + r8*4 + 0x984eb0a]
call fcn.141e518bd
jmp 0x142045832
mov r9d, 0xab03a4b9
jmp 0x141e562a7
Function at 0x142003c96
Capabilities:
Hash data using murmur3

Disassembly:
push 0x6a1c5811
cmp ebx, 2
push 0x77059100
lea rsp, [rsp + 0x10]
jne 0x141f98027
mov rdx, rax
jmp 0x141f1ef92
rol rcx, cl
movsxd rdx, edx
inc cx
bt rcx, rcx
adc r10, rdx
mov edx, ecx
add dx, dx
movzx ecx, byte [rbx]
push rdx
sbb qword [rsp], 0x43053004
adc rbx, 1
xor cl, bpl
btc rdx, 0x1c
jb 0x141f57bc9
lea rsp, [rsp + 8]
jmp 0x141e95cb7
call fcn.14203b75b
pop rax
pop rsi
pop rbp
pop rsi
pop rbp
jmp fcn.141e6f5f8
push 0x391e694
sal qword [rsp], 0xbd
dec ebx
lea rsp, [rsp + 8]
jne 0x141fb1c30
mov eax, 0xae1ebc25
sub rax, rax
or eax, 0x4980e786
mov rax, qword [rbp + rax - 0x4980e786]
sbb rsp, 0x20
push 0xfffffffffa9ff225
lea rsp, [rsp + 8]
call rax
mov r8d, 0x901107bb
mov edi, 0xfdb4db86
call fcn.141f9ee1d
call fcn.141faf643
pop r10
pop r10
jmp fcn.141f9adc4
push 0x768d5c0a
cmp ebx, 4
lea rsp, [rsp + 8]
jne 0x142000268
mov r9d, 0xffabd1be
lea r9, [r9*8 - 0x79de4645]
mov r9, rax
call fcn.141ec7192
neg cl
dec cl
push rdx
rol cl, 1
not cl
bt edx, edx
dec edx
jle 0x1420471b5
lea rdx, [rcx*2 + 0x1e8b411c]
mov dword [rbp + rsi*2 - 0x30303488], r10d
lea rcx, [rcx*2 + 0x17a442b0]
movzx r10d, cx
pop rsi
jmp r9
push 0x62bf1ba5
push 0x6d08f79e
cmp ebx, 3
push 0x2eb1eb04
jmp 0x1420365a8
imul ax, ax
xadd byte [rsp + rax - 0x569d69f6], r10b
or sil, cl
not sil
mov word [rbx + rdi*2 - 0x1836c], si
rol word [rsp + rax - 0x569d69f8], 0xab
mov qword [rsp + rdi*2 - 0x1836c], r11
ret
mov r8, rax
call fcn.141fb673c
lea rbx, [rdi + rbx - 0xc1b4]
jmp 0x141f9860c
push 0x24ac4218
mov eax, 0xb1a3c0a5
shr al, 1
mov rax, qword [rbp + rbx*8]
cmp ebx, 1
push 0x5619b39b
lea rsp, [rsp + 0x10]
jne 0x141e51166
mov ecx, 0x6797958c
mov rcx, rax
jmp 0x141e8a34c
add word [rsp + r9 - 0xff85], 0x8808
inc qword [rsp + r9*2 - 0x1ff0e]
mov qword [rsp + r9*4 - 0x3fe1c], rbp
mov ebp, 0x32327e90
lea r10, [rbp + rbp*2 - 0x6863cefd]
xor dword [rsp + r9 - 0xff87], eax
call fcn.141e59456
mov ecx, 0x78b3ed00
mov rbx, qword [r9 + rcx - 0x78b3ed00]
call fcn.142033dc0
mov eax, 0x19224616
or ax, 0x2b9f
call fcn.141e95cae
sal si, 0x6c
lea r11d, [r11 + rbx*2 - 0x20c6407c]
bts si, 0x88
and word [rsp + rbx - 0x5927224], 0x7735
call fcn.141e6eaed
bswap eax
lea rdx, [r9 + r9*2 + 0x44280e21]
or rdx, rdx
lea rsi, [r9 + r9 + 0x32335092]
rol eax, 3
movzx ecx, si
bt rsi, 0x88
inc eax
inc r9d
or dword [rsp + r9 - 0xff84], r9d
bswap eax
jne 0x141fd2d92
mov ecx, 0x921352bd
movzx edx, cx
mov edx, dword [rdx + rbx - 0x52bd]
xchg ch, cl
neg cl
adc rbx, 3
neg ecx
dec cx
xor edx, ebp
rol ecx, cl
xor edx, 0x63b869b3
ror edx, 1
lea edx, [rdx + rcx*2 - 0x3f383d17]
rol ecx, cl
not edx
bts cx, 0x21
bts ecx, 0x1c
push rbp
xor dword [rsp], edx
bswap ecx
pop rbp
jmp 0x141e5377b
lea rsp, [rsp + 0x18]
jne 0x141f3b1f5
jmp 0x141fa68f0
neg cl
sal dx, 0x49
rol rdx, 0x61
not cl
not rdx
rol qword [rsp + 3], 0xb6
xor bpl, cl
neg dx
mov qword [rsp + 8], rbx
call fcn.141ff8779
movsxd rsi, esi
bts rax, r9
cqo
adc r8, rsi
mov esi, r9d
mov rbx, qword [rsp + 8]
add rbx, 0xb072a
jmp rbx
Function at 0x14200650e
Capabilities:
Hash data using murmur3

Disassembly:
not eax
push rdx
call fcn.141fe5799
mov rbx, qword [rdi]
mov r11d, 0xfc165c2f
mov edx, r11d
mov r11, qword [rdi + 8]
shl edx, 1
lea rcx, [rdx + rdx*2 + 0x2828af22]
adc rdi, 0xf
mov qword ss:[rbx], r11
mov ebp, dword [r8]
xor rdx, rcx
adc r8, 4
xor ebp, r10d
lea r11, [rdx + rcx*4 - 0x2645d65a]
shr cx, 0xa6
rol ebp, 3
jmp 0x141fd2360

Function at 0x142013b09
Capabilities:
Encode data using base64
Hash data using murmur3

Disassembly:
mov ebx, 0xf9a3103a
pop rbx
pop rcx
pop rdx
jns fcn.141f9adc4

Function at 0x1420145c4
Capabilities:
Hash data using murmur3

Disassembly:
movsxd r11, r11d
mov qword [rsp + rsi*2 - 0x6e], rcx
pop rbx
movsx eax, byte [rsp + rsi - 0x33]
add r9, r11
mov ebx, dword [rsp + rsi - 0x34]
btc dx, r10w
lea r11, [rbx + rsi - 0x2c4bf460]
pop r10
pop rax
jae fcn.141f6db95
mov r9d, 0x671bc231
lea r8, [r8 + r9 - 0x671bc235]
mov r10d, r9d
lea rcx, [r9 - 0x4df17146]
mov r9d, dword [r9 + r8 - 0x671bc231]
mov edx, r10d
movzx eax, r10b
xor r9d, ebp
ror r10w, 0xc1
shl rax, cl
sbb r9d, 0xe188ec08
btc ecx, edx
bswap r9d
cdq
mul r10w
rol r9d, 1
sar ecx, 0xdb
call fcn.141e7301d

Function at 0x142019f6a
Capabilities:
Hash data using murmur3

Disassembly:
lea rbp, [rax + rbp - 0x9d8c]
cdq
mov word [rax + rbp - 0x9d8a], bx
or rcx, 0xffffffffc82de90d
pop r10
pop rcx
jae fcn.141f6db95

Function at 0x14201c0a6
Capabilities:
Hash data using murmur3

Disassembly:
lea r11d, [r8 + r11 - 0x75d03225]
rol di, 0xe1
neg r11d
ror dil, 0xc1
jo 0x1420636dc
xor ecx, ebp
xadd ax, bx
push rbx
shr qword [rsp + rbx - 0x46a70468], 0x16
neg ecx
inc ecx
inc word [rsp + rdx*2 - 0x298dc]
sar qword [rsp + rdx*4 - 0x531c4], 0x57
bswap ecx
pop rsi
neg ecx
sal rax, 0xd1
movzx r9d, dl
or edx, r9d
ror ecx, 2
add rdx, r11
call fcn.141ff1fb2
sbb r11d, esi
mov qword [rsp + rsi + 8], 0x439d089b
sub rax, 0x12033083
bts r8w, 0x1a
xor r11d, 0x15a77786
btc esi, 0x28
neg r11d
ror rsi, 0x66
adc r11, rbp
push r8
ror dil, 0xa1
adc r11, r9
mov qword [rsp + rdi - 0x611d3dad], rbx
neg qword [rsp + r8*2 + 0x47a6a0fe]
mov qword [rsp + r8*2 + 0x47a6a19e], rdx
lea rdi, [rsp + rdi - 0x611d3e25]
lea rax, [rdi + r8*2 + 0x47a69ede]
mov qword [rsp + r8 + 0x23d35087], 0xffffffffc7b139b6
and al, 0xf0
mov rsp, rax

Function at 0x14201f5b1
Capabilities:
Hash data using murmur3

Disassembly:
lea r8d, [r8 + rdx - 0x4f198225]
xor r8d, 0x29807d0d
sub r8d, 0xbb3b5d03
call fcn.141e851a8
lea rbx, [rcx*4 - 0x43f29e67]
movzx ebx, byte [rdi + rcx - 0x58001213]
lea rax, [rcx + rcx + 0x1faf7e36]
xor bl, r10b
lea rsi, [rcx*4 + 0x45140aa1]
xor bl, 0xb8
jmp 0x141fb6735

Function at 0x142026c24
Capabilities:
Encode data using base64
Hash data using murmur3

Disassembly:
pop rbp
jae fcn.141e6f5f8
mov rcx, rdi
lea rdi, [rdi + r11*8 - 0x205f4]
xchg r11w, r9w
call fcn.141fa48f8
xor r10b, r11b
rol dx, cl
lea rdi, [rbp + rdi - 0x551fba0e]
mov qword [rsp + rbp - 0x551fba0c], rbp
ror word [rsp + rbp - 0x551fba07], cl
mov word [rbp + rdi - 0x551fba0c], r11w
mov eax, 0xc6823a8f
rol al, 2
jae 0x141fcc175
lea r10, [r10 + r8 - 0x7911]
mov r8w, word [r10 + r8 - 0x790f]
xor r8w, bp
ror byte [rsp + rcx*2 - 0x139], 0xc1
not r8w
dec r8w
call fcn.141e8a211
Function at 0x142026ca4
Capabilities:
Hash data using murmur3

Disassembly:
sal edx, 0x14
movsxd rcx, ecx
adc r11, rcx
mov qword [rsp + r10 - 0x4786b800], r11
ret 8
rol ecx, 3
bt rdi, r10
shr edi, 0x2e
mov qword [rsp + r10 - 0x4786b8ac], rbp
cbw
sets r10b
mov qword [rsp + r10 - 0x4786b800], rdi
xor dword [rsp + r10 - 0x4786b7f8], ecx
sar r9d, 0xd1
mov rbp, qword [rsp + r10 - 0x4786b7f8]
ja 0x141fa689b

Function at 0x142026f0d
Capabilities:
Hash data using murmur3

Disassembly:
mov dword [r11 + rbp - 0x3b0d3508], edx
pop rsi
jno fcn.141f5b6ee

Function at 0x142028fb8
Capabilities:
Hash data using murmur3

Disassembly:
lea r8, [rcx + rcx*4 - 0x33d7e95d]
sub rdi, 4
mov r8d, dword [rdi]
add rcx, rcx
movzx edx, cl
xor r8d, r10d
jmp 0x141fe5ffa
lea rbp, [rcx + rdx*2 - 0x364a7d50]
movzx eax, bpl
neg r8d
call fcn.141f39501
push 0xffffffffcb922124
rep movsb byte [rdi], byte [rsi]
push qword [rsp + 0x18]
popfq
mov rdi, qword [rsp + 0x20]
lea rsp, [rsp + 0x28]
call fcn.141f295ca
mov eax, 0x132f510
mov ecx, 0xd83cd501
call fcn.142055f13
mov ecx, 0x3b0cd48c
movzx eax, cl
mov esi, dword [r10 + rcx*2 - 0x7619a918]
lea r10, [r10 + rcx - 0x3b0cd488]
imul eax
xadd edx, eax
call fcn.141ebcb3b
mov ecx, 0xdf8a59bb
jmp 0x141f2e2f4

Function at 0x14202bdce
Capabilities:
Execute anti-debugging instructions

Disassembly:
push 0xffffffffa319f608
lea rsp, [rsp + 0x10]
jmp 0x141f9ce44

Function at 0x14203a3f8
Capabilities:
Hash data using murmur3

Disassembly:
mov qword [rsp + rsi - 0x44fffff8], rbp
mov qword [rsp + rsi - 0x45000000], 0xffffffffbd28729b
call fcn.141f92da4

Function at 0x14203b698
Capabilities:
Hash data using murmur3

Disassembly:
movsx r9d, r11b
rol cx, 0x46
mov qword [rsp + r11 - 0x80000000], r8
ret 0x18
movsxd rbx, ebx
lea rax, [rcx + rsi - 0x1beb34e9]
setb al
push rcx
adc r8, rbx
jmp 0x141ef557b
xor ebx, 0x733412f
rol byte [rsp + r11 - 0x7ffffff0], cl
mov qword [rsp + rcx - 0x2ca506a5], rsi
mov qword [rsp + rcx*2 - 0x594a0d3a], rbp
xor dword [rsp + r11 - 0x7ffffff0], ebx
rol sil, cl
mov rbp, qword [rsp + rcx*2 - 0x594a0d3a]
ror dx, 5
jae 0x141f0c613

Function at 0x14203b6d3
Capabilities:
Hash data using murmur3

Disassembly:
cdq
xor dword [rsp + 8], ecx
mov rbp, qword [rsp + 8]
movsxd rcx, ecx
idiv ax
add r8, rcx
neg ebx
sar dl, 0x46
pop rdx
pop rax

Function at 0x14203ca62
Capabilities:
Hash data using murmur3

Disassembly:
push 0x6a3667ae
lea rsp, [rsp + 0x10]
jne 0x14204a349
push 0x1b95f327
call fcn.141f8ccaf

Function at 0x1420443a0
Capabilities:
Hash data using murmur3

Disassembly:
mov word [r11 + rax*2 - 0x2d88b6c], dx
call fcn.141fd5a3f
cqo
div eax
mov qword [rsp + rax - 1], rbp
mov ebp, 0x2bada196
call fcn.1420167e6
Function at 0x1420495e0
Capabilities:
Hash data using murmur3

Disassembly:
sal r11w, cl
movsxd rax, eax
add rbx, rax
mov eax, 0x682d41a6
jmp 0x1420541fa
jle 0x141f7f560
imul si, si
xor dword [rsp + rsi - 0x73984000], eax
pop rbp
jmp 0x141ef4d0d
mov qword [rsp + rbx - 0x32ea88c], 0x60e06b9
neg rcx
mov r8, qword [rsp + rbx*8 - 0x19754458]
sub ecx, r10d
mov qword [rsp + rbx*2 - 0x65d5110], 0xffffffffd3b659b9
lea rbp, [rbp + rbx*2 - 0x65d511c]
bt ecx, 0x86
sal byte [rsp + rbx - 0x32ea87d], 0x41
mov dword [rbp + rbx*4 - 0xcbaa230], edx
setbe byte [rsp + rbx*2 - 0x65d510e]
setae byte [rsp + rax - 0x2b12d9d8]
lea rdi, [rdi + rbx - 0x32ea890]
or ecx, 0xb6272db6
mov esi, dword [rbx + rdi - 0x32ea88c]
lea r11, [rbx*4 - 0x676c8f6d]
mov edx, r11d
rol r10w, 2
xor esi, r8d
sub cx, word [rsp + rbx - 0x32ea885]
js 0x142009e97
mov ecx, 0x78acee9c
call fcn.141f3a64d