joyce8/EMBER2024-capa huggingface dataset:
Function at 0x141f150a0
Capabilities:
Encode data using base64

Disassembly:
call fcn.14207c003
not edi
push rdx
sar dl, 0x64
ror edi, 2
not word [rsp + rax*4 - 0x3ad0]
shr r9, cl
bswap edi
adc eax, 0xaaa5a495
cwd
mov qword [rsp + r9 - 0x386], rsi
ror r9b, 0xc4
xor dword [rsp + r9 - 0x368], edi
xchg rdx, rax
pop rsi
neg bpl
xor rcx, 0x58276a93
movsxd rdi, edi
jns 0x141f22208
sal sil, cl
adc r10, r8
jmp r10
shr r11, 0xba
call fcn.142047f67
xor esi, 0x1b185080
btr di, 0x8e
shl r9, 0x3e
shl ax, 0x68
push rbp
xor dword [rsp + rdx], esi
pop rbp
sar al, 0x44
mul cl
call fcn.141f979c7
call fcn.141e7b2c0
sub r10, 4
mov edi, 0x83a0fea7
mov edi, dword [r10]
mov esi, 0x9dbff71b
mov edx, esi
xor edi, ebp
xor edi, 0x11abd19b
rol edi, 1
movsx ecx, sil
movzx r8d, dx
neg edi
bswap edi
not edi
movzx r11d, dx
bswap edi
add rcx, r11
jp 0x14202ec9e
mov r11d, 0xef07e722
sar r11, 0x52
mov r11d, dword [r8 + r11 - 0x3bc1]
push 0x1b0d1e2f
jns 0x141f5e8ef
sal bpl, 0x64
adc rbx, rdi
jmp rbx
adc r8, 3
call fcn.141e575e1
not rcx
xor rbp, rcx
shl r8, 0xdd
mov qword [rsp + rax*2 - 0x767e0014], 0xffffffffd80bb4b8
push rdi
lea r9, [r9 + rdx*4 + 0x124]
shr r8, 0x7e
mov qword [r9 + rax*2 - 0x767e0014], rcx
movsx ecx, byte [rsp + rdi - 0x78663935]
jne 0x141fb2858
sar byte [rsp + rdi - 0x78663935], 0xc4
pop rdx
pop rdx
pop r11
pop r8
je fcn.142064af2
mul eax
or rbp, rdx
jg 0x14201cba0
lea r8, [r8 + rbp - 0x9827d97]
sub esi, dword [rsp + rbp - 0x9827d9a]
sar rbp, cl
xor edx, r10d
sub edx, ebp
jmp 0x141f03b7f
movsxd r8, r8d
sbb ax, dx
jns 0x141e7692e
mov ebx, 0x971fc915
call fcn.141fd6586
neg edi
movsx r9d, bpl
xchg rdx, rax
push rsi
add dl, 0x3f
sal ax, 0xa5
xor dword [rsp + r9*8 - 0x1c8], edi
sal rax, 0x9e
pop rsi
dec bpl
movsxd rdi, edi
movzx r8d, ax
lea r9, [rbp*2 + 0x64911a24]
adc rbx, rdi
or bpl, r9b
sub r9d, eax
mov rdx, qword [r9 + r10 - 0x79c52894]
push rax
call fcn.14206003d
mov edx, 0x8ea7a231
mov edx, dword [rdi]
mov ebp, 0x9827d9b
and bpl, bpl
mov esi, 0x6d19b5bc
mov eax, dword [rbp + rdi - 0x9827d97]
mov ecx, ebp
mov ebx, dword [rdi + rbp*8 - 0x4c13ecd0]
lea rdi, [rdi + rbp - 0x9827d97]
bts ecx, ecx
mov r11d, esi
div ebx
push rbp
neg word [rsp + rbp - 0x9827d98]
mov dword [rbp + rdi - 0x9827d9b], edx
mov dword [rbp + rdi - 0x9827d97], eax
jne 0x1420373ee
sub r8b, sil
lea edi, [rcx + rdi - 0x60a7bac4]
xor r8w, 0xeab8
not r8w
push rbp
neg r8
xor dword [rsp + rcx*8 - 0x7b9b0], edi
jmp 0x141e57fd0
sbb esi, ebp
mov edx, dword [r8 + rbp*8 - 0x4c13ecd8]
ror r11, cl
jb 0x141fdf713

Function at 0x141f16bfb
Capabilities:
Hash data using murmur3

Disassembly:
bswap ecx
mov qword [rsp + rbp + 0x2083bcef], r9
add rbx, rax
dec dword [rsp + rbp + 0x2083bcf2]
mov r8w, word [r10 + r9 + 0x3b841]
movsx edx, bpl
shl bpl, 0x26
mov bp, word [rbp + r10 + 0x2083bcc2]
lea rax, [r9 + r9*2 + 0x4707ac28]
cwd
lea r10, [r9 + r10 + 0x3b843]
shl qword [rsp + r9 + 0x3b841], cl
adc qword [rsp + r9*2 + 0x77082], r9
shl dx, cl
not r8w
je 0x142067ed5
sub byte [rsp + r9 + 0x3b841], 0xac
add r9w, word [rsp + r9 + 0x3b847]
not bp
jp 0x141eaba48
Function at 0x141f16fe6
Capabilities:
Hash data using murmur3

Disassembly:
movsx r10d, bx
imul dl
not r11w
inc r11w
cdq
shr ax, 0x84
xchg r10, rbx
xor r11w, 0x3eab
mov qword [rsp + rcx], 0x45871925
add r11w, 0x1d24
rol byte [rsp + rcx*4 + 0x1f], 0xa1
movzx esi, cl
shr rbx, 0xea
rol r11w, 1
dec byte [rsp + rcx*2 + 6]
xchg qword [rsp + rcx*2 + 0xc], r10
idiv eax
xor r8w, r11w
xor qword [rsp + rdx + 0xf], rsi
sar ax, 0x6f
lea r11, [rsp + r11 + 0x20]
jae 0x141ff0eea

Function at 0x141f1707f
Capabilities:
Hash data using murmur3

Disassembly:
jmp 0x14201a772
lea rsp, [rsp + 8]
call rax
mov edx, 0xd10e02bb
mov rsp, qword [rbp + riz - 0x10]
movsx ebx, dx
and bl, 0xc
neg dl
mov rbp, qword [rbp + rbx - 0x210]
movsx r10d, bx
lea rsi, [r10*2 + 0x770b132c]
mov qword [rbp + rbx*2 - 0x410], rax
movsx ecx, dl
push rcx
mov r9, rbp
not sil
mov r10, qword [rsp + rbx - 0x200]
mov r11, qword [rsp + rbx - 0x1f8]
mov eax, 0x3ad5116
mov rdi, qword [rsp + rbx - 0x1f0]
cdq
bswap eax
imul ebx
lea rdi, [rdi + rdx*4 - 0xb8]
lea rcx, [rbx*8 - 0x43e21869]
mov ecx, dword [rdi + rdx - 0x2d]
call fcn.14202c88a

Function at 0x141f187d9
Capabilities:
Hash data using murmur3

Disassembly:
mov qword [rsp + rcx - 0x3fb018dd], 0xffffffff86b6e991
xor dword [rsp + rcx*2 - 0x7f6031b2], edx
not eax
sal cl, 0xc3
not r10w
mov r8, qword [rsp + rsi - 0xc50f]
mov qword [rsp + rsi - 0xc50f], 0x751e5d96
add dword [rsp + rcx - 0x3fb018de], esi
movsxd rdx, edx
neg r10w
ror cl, 0x22
adc r9, rdx
mul sil
pop rsi
pop rdx
jb fcn.141f6db95

Function at 0x141f1adcb
Capabilities:
Hash data using murmur3

Disassembly:
lea rsp, [rsp + 8]
call rax
call fcn.1420144c5
Function at 0x141f2ccb2
Capabilities:
Hash data using murmur3

Disassembly:
rol edx, 2
sar dword [rsp + r8 - 0xd5], cl
call fcn.141ed089b
xor edx, 0xe85fd2f
call fcn.14203b533
mov eax, 0x519e9117
lea r8, [r8 + rax - 0x519e911b]
mov r9d, dword [r8 + rax - 0x519e9117]
lea rsi, [rax*4 + 0x4c3b7822]
xor r9d, ebp
ror ax, 0x65
inc r9d
cbw
lea rdi, [rsi*4 + 0xc94233b]
ror r9d, 1
inc eax
xadd edi, esi
neg r9d
idiv sil
movsx ecx, sil
ror r9d, 1
lea rdx, [rdi - 0x1e52e8df]
not r9d
push rbp
push rax
jmp 0x141f99365
call fcn.141fb06d8
mov eax, dword [rdi + rbp - 0x6d94692d]
mov ebx, 0xd78f76b9
movsx r8d, bl
movsx edx, bl
lea rdi, [rbp + rdi - 0x6d946929]
btc ebp, ebx
sub r8w, 0x66b6
xor eax, r9d
call fcn.141f60416
mov ebx, 0xc9080882
mov ebp, ebx
mov ecx, ebp
movzx dx, byte [rdi]
movzx esi, cx
mov cl, byte [rsi + rdi - 0x880]
dec sil
jle 0x141eabf60
sub r11, 4
mov edx, dword [r11]
mov ebx, 0x20267427
mov r10d, ebx
xor edx, esi
lea rax, [rbx + 0x4625292f]
sal al, 0x25
not edx
call fcn.141ef851b
ror eax, 2
shl qword [rsp + rbp - 0x28], cl
call fcn.141f676d1
mov edx, dword [r11]
xchg cx, ax
xadd rax, r9
xor edx, esi
sub edx, 0x202f8c19
inc cl
movzx r8d, r10b
ror edx, 1
btr r10w, r8w
not edx
push r10
jae 0x141e8f0d7
rol rbp, 0xe6
lea rdi, [rdi + rsi*2 - 0x1100]
sal dl, cl
movsx eax, bp
mov ecx, ebx
mov word [rdi + rsi*2 - 0x1102], dx
rol cl, 1
mov ebp, dword [r8 + rsi*2 - 0x1102]
movsx edx, ax
lea r8, [r8 + rsi - 0x87d]
jb 0x141ece217
xor rdx, rax
cdqe
xor ebp, r10d
movzx r11d, sil
neg ebp
shr ecx, cl
dec dl
inc ebp
xchg r11, rax
add rax, rax
ror ebp, 2
not ebp
push r10
xor dword [rsp + rsi - 0x881], ebp
pop r10
movsxd rbp, ebp
idiv ebx
add r9, rbp
jmp r9
or dl, cl
mov cl, byte [r9 + r8*2 - 0x94f0]
mul r8w
lea r9, [r9 + r8 - 0x4a76]
cbw
shld rsi, r11, cl
jmp 0x14202e336
ror si, cl
mov qword [rsp + rdx*2], rsi
mov qword [rsp + rdx], r10
ja 0x141f65350
setb bl
xor dword [rsp + rdx], r11d
movzx r10d, cx
pop r10
imul dx, si
movsxd r11, r11d
xor esi, ebx
jp 0x14205049f
mov ebx, 0x9fb1080e
mov r8d, dword [rdi]
lea rsi, [rbx + rbx - 0x2d5c8e54]
neg si
mov edx, 0x1c0ddd1f
lea rdi, [rdi + rdx*4 - 0x70377478]
xor r8d, r9d
btr rdx, rsi
lea rbp, [rdx + rdx*4 + 0x6db5d3b2]
ror dl, 0x42
ror r8d, 1
movsx ecx, bl
inc rdx
bswap r8d
jge 0x141e9203e
mov qword [rsp + r8*2 - 0x4a80], rbp
and dl, dl
xor dword [rsp + rax - 0x95], esi
lea rdi, [rdx*4 - 0x19fd9a5c]
mov ecx, eax
xor r11b, cl
pop rbp
btr r8d, r8d
rol rdi, cl
movsxd rsi, esi
cqo
mul al
shl r8w, 1
adc rbx, rsi
mov rsi, qword [r9 + r8*2 - 0x9500]
idiv r8d
or dl, dil
mov r11, qword [r8 + r9 - 0x4a78]
jno 0x141f24a75
xadd dword [rsp + rcx - 0x30], ecx
xor dword [rsp + rsi - 0x576b152b], r9d
mov rbp, qword [rsp + rax - 0x519eeff6]
call fcn.141ecbc50
shr edx, 0x5f
shl edx, 0x82
mov qword [r9 + rdx*4], rsi
add rdx, rbx
jmp rdx
adc r9, r11
and bx, bp
sal cx, cl
mov r11, qword [rdi + rdx]
mov rbx, qword ss:[rdx + r11]
mov qword [rdx + rdi], rbx
shl dx, 0x41
mul cl
xor rdx, r9
jmp rdx

Function at 0x141f2da6d
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
sub r11, 4
call fcn.141f92864
Function at 0x141f2da79
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
mov ecx, edx
lea rbx, [rbx + rax*4 - 0x4c7fffc]
mov qword [rsp + rax - 0x1320000], r9
shr r9b, 0xa3
sbb dx, word [rsp + r9 + 9]
xor esi, ebp
xor dl, 0x13
sar al, 0x25
movsx edi, al
rol esi, 2
lea esi, [r8 + rsi - 0x4af616ce]
not esi
lea r8, [rax + r9 - 0x79c2b3ca]
rol esi, 3
or dword [rsp + rax - 0x131fff4], edi
cwd
mov qword [rsp + rax*2 - 0x263fff8], rbp
cwd
sbb rax, qword [rsp + rax - 0x1320000]
xor dword [rsp + r8 + 0x7890b3d2], esi
ror dil, 0x43
add r8, rdi
call fcn.141ffb20b

Function at 0x141f2f9d0
Capabilities:
Hash data using murmur3

Disassembly:
and r8, r9
ror ebx, 3
dec ebx
neg eax
not r8d
ror eax, 0x58
rol ebx, 1
ror r9d, 0x9b
mov edx, dword [rsp + r9 + 0x10]
lea ebx, [r9 + rbx + 0x69b38c97]
lea r9, [r8 + rax*2 + 0x1f23708e]
push r9
mov qword [rsp + rdx*8 - 0x3ffe8], rsi
call fcn.14206fd6c
mov ebx, 0x9811693d
movsx ecx, bl
mov edx, dword [r11 + rcx*8 - 0x1e8]
mov eax, dword [r11 + rcx - 0x39]
mov ebp, dword [r11 + rcx*2 - 0x72]
sub rbx, 0xffffffff942e7337
sete bl
lea r11, [r11 + rcx*2 - 0x76]
div ebp
lea r8, [rbx - 0x29d718c9]
and rcx, 0xffffffffe093ad97
mov dword [r11 + rcx*2 - 0x2a], edx
lea rdx, [r8*4 + 0x2924c496]
btr r8w, 0x19
mov dword [r11 + rcx - 0x11], eax
mov eax, 0xa438d72b
adc cx, 0x7621
add r8w, dx
mov esi, dword [rdi + rcx - 0x7636]
jge 0x1420180ab
jmp 0x141f3de0b

Function at 0x141f31f29
Capabilities:
Hash data using murmur3

Disassembly:
lea rsp, [rsp + 8]
je 0x141f6d59d

Function at 0x141f33fac
Capabilities:
Hash data using murmur3

Disassembly:
call fcn.141fc986f
mov ecx, 0x56195f34
movsx eax, cx
movsx edi, cl
mov rax, qword [rcx + rbx - 0x56195f34]
lea r9, [rcx + rcx + 0x16b04414]
movsx r10d, cx
mov rcx, qword [rbx + rcx - 0x56195f2c]
lea rbx, [rdi + rbx - 0x24]
movsx esi, r9b
mov qword ss:[rdi + rax - 0x34], rcx
mov ecx, esi
lea r8, [r8 + rdi*2 - 0x6c]
neg r10w
mov esi, dword [r8 + rdi*8 - 0x1a0]
lea rax, [rdi + rcx*8 + 0x10bdd1b6]
xadd rdi, r9
xor esi, ebp
not esi
bswap r10d
lea esi, [rdi + rsi - 0xba5b3aa]
movsx edx, r10b
not esi
ror esi, 1
cwd
bts r9w, 0x1f
cdq
push rbp
xor dword [rsp + r9 - 0x8034], esi
bswap rax
idiv di
movzx ebp, r10w
pop rbp
movsxd rsi, esi
add r11, rsi
add rdx, r11
jmp rdx
cmp ebx, 3
lea rsp, [rsp + 8]
jne 0x141e52099
mov r8d, 0x14008a19
push r8
mov r8, rax
lea rsp, [rsp + 8]
jmp 0x141fb9241
mov rax, qword [rbp + rbx*8]
jmp 0x141f2e9b8
jmp 0x141f45b86
jmp 0x142020b4b
jmp 0x14200d0e2
movsxd rsi, esi
add r9, rsi
mov rbx, rbp
jmp 0x141e52bf4
push 0xffffffffe88944b2
dec ebx
lea rsp, [rsp + 8]
jne 0x141f6a862
mov eax, 0x93a4701f
call fcn.141eb1730
call fcn.1420245f8
mov eax, 0x2e1ac181
movsx edx, al
lea rdi, [rax + rdi - 0x2e1ac185]
mov esi, edx
mov esi, dword [rdi + rax*2 - 0x5c358302]
lea rbx, [rax + rax - 0x517c0dc9]
xor esi, r8d
bswap esi
mov ecx, ebx
inc esi
bts rdx, 0xb4
rol ecx, cl
rol esi, 1
not esi
neg dl
inc esi
movsx r10d, bl
movsx r11d, dx
neg esi
sub dx, bx
push r8
xor dword [rsp + rax - 0x2e1ac181], esi
pop r8
cwd
jmp 0x1420082fe
Function at 0x141f36734
Capabilities:
Authenticate hmac

Disassembly:
dec ebx
lea rsp, [rsp + 8]
jne 0x142019a03
mov eax, 0x3f07531c
call fcn.141edb714
mov edx, 0xe515738a
lea rdi, [rdx + rdx*8 + 0x5ab9b2a1]
movsx ecx, di
mov edi, dword [r11]
call fcn.141f34fe9
mov rcx, rax
jmp 0x141f6f687
jmp 0x141e8a104
mov rax, qword [rbp + rbx*8]
cmp ebx, 1
jne 0x14204242d
jmp 0x141ee1e32
call fcn.141f0629b
sub r10, 4
mov edx, 0x2f077e31
mov edx, dword [rdx + r10 - 0x2f077e31]
xor edx, ebp
mov edi, 0x2003ac34
inc edx
neg edx
bt edi, edi
bswap edx
movsx ecx, dil
inc edx
lea rsi, [rdi + rdi + 0x5e99d099]
push rbp
xor dword [rsp + rdi*2 - 0x40075868], edx
jmp 0x141f2ed36
Function at 0x141f376ab
Capabilities:
Hash data using murmur3

Disassembly:
bswap edi
lea edi, [rdi + rdx - 0x4c6dbe42]
inc r9
sal dword [rsp + rdx - 0x7ba8e6f7], 0x90
cwde
not edi
lea edi, [rdi + rax*8 - 0x511e570e]
jnp fcn.141eeae6a
mov qword [rsp + r9 - 0x411f3b79], rbp
pop rsi
adc rsi, 0x2481d
jmp rsi

Function at 0x141f3f898
Capabilities:
Hash data using murmur3

Disassembly:
mov qword [rsp + r9 - 0x221a773a], rsi
xor dword [rsp + rax - 0xd24], ebp
btc r9w, di
pop rsi
cqo
shl r8, 0x5f
movsxd rbp, ebp
adc rbx, rbp
mov ebp, 0xb597650c
dec ax
sar r9w, 0x61
mov r10, qword [r9 + r10 - 0x221a3b9c]
call fcn.1420782a5

Function at 0x141f40026
Capabilities:
Hash data using murmur3

Disassembly:
neg r9d
inc byte [rsp + rcx*8 - 0x336]
mov qword [rsp + rcx*2 - 0xc8], rsi
mov qword [rsp + rcx - 0x68], r8
xor dword [rsp + rcx - 0x60], r9d
mov rsi, qword [rsp + rcx - 0x60]
sal r8w, 0x8e
movsxd r9, r9d
pop rbx
adc rbp, r9
xor ecx, 0xee8ffa3c
btr rcx, 0x97
mov r10w, word [rdi + r8 - 0x5eed0000]
mov qword [rsp + rbx - 0x5eedb2b0], rax
mov cl, byte [rdi + rbx - 0x5eedb2ae]
lea rdi, [rdi + rbx - 0x5eedb2ae]
shr r10w, cl
bts ebx, eax
mov word [r8 + rdi - 0x5eed0000], r10w
call fcn.141ecfca9

Function at 0x141f44ef7
Capabilities:
Hash data using murmur3

Disassembly:
dec ebx
push 0x143c3bb2
mov qword [rsp + 8], 0x45890429
lea rsp, [rsp + 0x10]
jne 0x141fe95d2
Function at 0x141f4741c
Capabilities:
Hash data using murmur3

Disassembly:
dec ecx
or qword [rsp + r9 - 0x25], rsi
not ebp
mov qword [rsp + r9*2 - 0x5a], rbp
xor dword [rsp + r9 - 0x25], ecx
lea rbp, [r8*2 + 0x3485eca1]
lea r10, [r10 + r9*4 - 0xc0]
sar r8d, 0x38
mov qword [rsp + r9*2 - 0x5a], 0x25917c04
mov dword [r10 + r9*2 - 0x4e], eax
mov dword [r10 + r9*8 - 0x160], ebx
mov edi, r8d
ror word [rsp + r9 - 0x29], 4
imul r8d, dword [rsp + r9 - 0x2d]
mov dword [r10 + r9*2 - 0x56], ecx
mov dword [r10 + r9 - 0x2d], edx
mov rbx, qword [rsp + r9 - 0x25]
mov ecx, dword [r11 + r9*2 - 0x5a]
mov qword [rsp + r9 - 0x25], r8
shr bpl, 0x47
lea r11, [r9 + r11 - 0x29]
xor ecx, esi
ror ecx, 3
lea rdx, [r9*8 + 0x4600eeb1]
lea ecx, [rcx + r9*8 - 0x3e19f877]
lea r8, [r9 - 0x53d9cbc8]
sal qword [rsp + r9 - 0x26], 9
sal qword [rsp + r9 - 0x28], 0xad
xor ecx, 0xe385ad85
and ebp, edi
lea ecx, [r9 + rcx + 0x7a02ae06]
btr ebp, edi
bswap ecx
bts r8w, bp
xor ecx, 0x3888a63a
ror edi, 0xac
jae 0x141f40578
sbb edi, 0xf78d7710
ror edi, 1
xadd r8b, sil
xadd edx, esi
and r8d, edx
neg edi
dec edi
mov ecx, eax
cdqe
push rbp
sub r8w, r8w
xor dword [rsp + rdx - 0x32f130da], edi
shr al, 0x82
pop rbp
lea r11, [rdx + r11 - 0x32f130de]
push rsi
mov dword [r11 + r8*2], edi
sete byte [rsp + rdx - 0x32f130d8]
pop r8
jne fcn.1420748b2
mov ebx, 0x9912229c
jmp 0x141f8b8e6
bswap ebp
xor ebx, r10d
xor ebx, 0xf5365ea6
add dx, 0xa4b5
bswap ebx
ror r11, 0xec
dec ebx
push rbp
not bp
bswap ebx
movsx ecx, word [rsp + rdx - 0xc74f]
mov qword [rsp + rbp - 0x18fe00], r10
neg rdx
not r11b
xor dword [rsp + rbp - 0x18fe00], ebx
pop r10
bswap esi
inc r11d
not sil
movsxd rbx, ebx
add r9, rbx
and bp, r11w
jmp r9
lea r11, [rbx*8 + 0x3c856bac]
mov rsi, qword [rdi]
movsx ebp, bx
movsx edx, r11w
mov cx, word [rdi + rbp*8 - 0x114d8]
shl edx, 0x69
lea rdi, [rdi + rbp - 0x2292]
rol bx, 0x44
mov word ss:[rsi + rbp*2 - 0x4538], cx
shr r11w, 0x83
inc ebx
lea rax, [rdx + rbx*2 + 0x4fb3b08a]
mov ebx, dword [r8 + rbp - 0x229c]
movzx esi, ax
jl 0x141fd798e
xchg rbp, rdx
lea r8, [r8 + rsi*4 - 0x703c]
jp 0x141f5d138
mov r9d, 0xe8b2c7aa
lea rbp, [r9*8 - 0x46f910d7]
mov edi, dword [r11]
push rbp
shr qword [rsp], 8
adc r11, 4
xor edi, esi
neg byte [rsp + 4]
bswap edi
sar rbp, 0x35
inc edi
mov ecx, 0x3b314204
not byte [rsp + rcx - 0x3b314203]
xor edi, 0x2284358e
call fcn.141f11a2b

Function at 0x141f4a78c
Capabilities:
Execute anti-debugging instructions
Hash data using murmur3

Disassembly:
lea r9, [r9 + r8*4 + 0x6bd0af2e]
shld esi, ebx, cl
mov dword [r9 + r8 + 0x1af42bca], esi
shl byte [rsp + r8*4 + 0x6bd0af40], 0x61
dec word [rsp + rdx*4 - 0x35023]
jp 0x14205598b
mov qword [rsp + r8 + 0x1af42bca], r11
ret 0x30

Function at 0x141f51746
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov eax, 0xa00a6cbf
sar eax, 0xb0
mov rax, qword [rbp + rbx*8 + 0x20]
ja 0x141f9ce43
cmp ebx, 4
lea rsp, [rsp + 8]
jne 0x141ee2652
call fcn.14200c18a
push rax

Function at 0x141f541bf
Capabilities:
Hash data using murmur3

Disassembly:
mov qword [rsp + rdi*2 - 0x1816ef3c], 0x441b2
sub qword [rsp + rdi - 0xc0b779e], rdi
mov rbp, qword [rbp + rdi*4 - 0x302dde80]
mov qword [rbp + rdi - 0xc0b779e], rax
movzx esi, cl
jl 0x141e8ecde
Function at 0x141f590d3
Capabilities:
Hash data using murmur3

Disassembly:
and r9d, dword [rsp + r10*2 - 0x8f28c9]
mov dword [rdi + r10*8 - 0x23ca350], ebx
idiv dword [rsp + r10*2 - 0x8f28c2]
lea r8, [rdx*8 - 0x597864f5]
pop rbx
pop rbx
pop rdx
jmp fcn.141f9adc4
sub r8w, dx
mov qword [rsp + r10 - 0x479462], 0x541caf38
cdqe
rol r8w, 1
and edx, edx
xor si, r8w
xadd rcx, r9
mov qword [rsp + r10 - 0x47946a], rbx
lea r8, [rsp + r8 + 0x18]
sub word [rsp + r10*4 - 0x11e51a1], 0xe196
mov ebx, dword [r8 + rbx*2 - 0x585e34a6]
add r9w, r10w
add word [rsp + r10 - 0x479468], cx
lea rdi, [rdi + r10*2 - 0x8f28d8]
jp 0x141ee6ef7
mov eax, dword [r9]
push rbx
cpuid
mov r8d, 0x3c3bfa8c
lea r9, [r9 + r8*2 - 0x7877f524]
lea rdi, [r8 + 0x6a07d48a]
mov dword [r8 + r9 - 0x3c3bfa80], eax
sal r8b, 0x22
mov dword [r8 + r9 - 0x3c3bfa28], ebx
movzx esi, di
mov dword [r8 + r9 - 0x3c3bfa2c], ecx
ja 0x141f47116

Function at 0x141f5d282
Capabilities:
Encode data using xor

Disassembly:
rol dx, 0x85
mov qword [rsp], r11
btc dx, dx
mov r11d, edx
sub dl, 0x24
lea rdx, [0x141eba550]
mov r11d, 0xe618091a
and r11b, r11b
bt r11d, r11d
movzx r11d, byte [rcx]
xor r11d, ebp
push 0x1214a205
and r11d, 0xff
mov r11d, dword [rdx + r11*4]
shr ebp, 8
xor ebp, r11d
inc rcx
xor ebp, 0x3c91719a
dec rax
lea rsp, [rsp + 8]
jne 0x141f5d29b
mov r11d, 0xf330ed23
pop r11

Function at 0x141f69c9c
Capabilities:
Hash data using murmur3

Disassembly:
cdqe
shr r10w, cl
mov word [rbx + rdi - 0x622a], r10w
call fcn.141eaea17
and r10b, cl
sbb bx, 0xa4a9
btr r10d, edx
dec r10w
xor r8w, bx
movzx eax, r10b
add rbx, rsp
and ecx, esi
mov esi, dword [rbx + rcx*2 - 2]
lea r11, [r10*4 - 0x24d37a4c]
bswap rax
lea rbp, [rcx + rbp - 5]
push r11
jg 0x141f6a27f
lea rbx, [rdx + r10*2 - 0x627d4778]
mov dword [rbp + rcx*2 - 2], esi
or r10w, word [rsp + rcx + 4]
dec dword [rsp + rcx - 1]
lea rdi, [rdi + rcx*2 - 6]
div byte [rsp + rcx + 3]
xchg r11b, dl
mov ebx, dword [rdi + rcx*4 - 4]
xor ebx, r8d
not ebx
or qword [rsp + rcx - 1], 0x5e2a9bbd
inc cx
mov esi, r11d
ror ebx, 3
add cx, cx
xor ebx, 0x9fb40530
not ebx
pop rcx
cwde
xchg r11b, al
push r8
xor dword [rsp + r10*2 - 0x1fffe], ebx
push rax
mov r8, qword [rsp + r11 + 0x24d37b08]
or dword [rsp + rcx + 0x20d16005], esi
movsxd rbx, ebx
adc r9, rbx
sal r11w, 0x83
pop rax
pop rcx
jne fcn.141f6db95

Function at 0x141f6c77d
Capabilities:
Hash data using murmur3

Disassembly:
mov r9, rax
lea rsp, [rsp + 8]
jmp 0x142048bc7
Function at 0x141f6d79c
Capabilities:
Hash data using murmur3

Disassembly:
sar bx, 0xae
adc rbp, rcx
call fcn.141e9ed3c
adc rbx, rcx
mov r9d, dword [r10 + rax*2 - 0x20]
add ebp, 0x991c8f31
jae 0x1420672ef
mov eax, edi
xor dword [rsp + rcx - 0x90e], r8d
pop rbp
sar cl, 0x41
xor eax, eax
movsxd r8, r8d
movzx edx, di
mul ax
adc r10, r8
bswap rax
btr edi, edx
lea rax, [rax*2 - 0x3e42da7e]
add rdx, r10
jmp rdx
xor ecx, esi
lea rbx, [r10 + r9*2 + 0x163b5f06]
lea r10, [rbx + r9*8 + 0x72120a0d]
lea ecx, [rcx + r9*2 + 0x2bf645d9]
dec r10b
not ecx
dec ecx
not ecx
sal r10d, 0xa3
adc eax, 0x122b6b85
rol ecx, 3
and rbx, 0xffffffffa91e3480
shl rax, 0x10
mov r8d, ebx
push rsi
xor dword [rsp + r9*2 + 0x5f16cd5a], ecx
and r10, rbx
pop rsi
xadd r8w, bx
setno bl
movsxd rcx, ecx
jp 0x141ebe461
bts dx, bx
sar r11w, 0xa8
xor dword [rsp + rbx*2 - 0x5a], esi
shr dl, 0x84
push rax
mov r8, qword [rsp + rbx*8 - 0x1a8]
or rax, rax
btr r10w, 0x36
movsxd rsi, esi
mov qword [rsp + rbx*2 - 0x6a], r10
add r9, rsi
cdq
inc r10b
pop rbx
pop rax
pop rdx
pop rsi
pop rcx
jno fcn.141f6db95
popfq
mov esi, dword [rdi + rbp*8]
lea rdi, [rbx + rdi - 0xdb]
movsx edx, bl
xor esi, r9d
bt rdx, 0x20
dec esi
rol ax, 0x67
ror rdx, 0x82
mul ax
rol esi, 3
mov r8d, 0xae11e388
shr ebx, 4
lea esi, [rsi + rax*4 - 0x23f36217]
call fcn.141fe3068
push rbp
ror si, 1
sub si, 0xd18f
pop rbp
xadd rbx, rax
rol si, 1
mov r11d, 0x9c02303f
xor r10w, si
push rbp
lea rsi, [rsp + rsi + 8]
shl dword [rsp + rcx*2 - 0x2b], cl
or ebx, ecx
mov ax, word [rsi + rcx*8 - 0xb0]
lea rdi, [rcx + rdi - 0x18]
add bx, word [rsp + rdx*8 - 0x2fc]
mov word [rdi + rcx*8 - 0xb0], ax
push r11
call fcn.142014bba
mov qword [rsp + rax - 0x10], rsi
ror r8, 2
xor edx, eax
xor dword [rsp + rax - 0x10], ecx
rol r9b, 0xc3
lea rsi, [r9*4 - 0x7e61da73]
pop rsi
setae r8b
neg r9w
movsxd rcx, ecx
mov edi, r9d
jle 0x141f1581a
mov r9d, 0x2f8b66ac
lea r10, [r9 + 0x45805abd]
mov eax, r10d
lea r11, [r11 + r9 - 0x2f8b66b0]
movsx ecx, al
mov ecx, dword [r11 + r9*2 - 0x5f16cd58]
bts r10, r10
not r9
jae 0x141f1c6ab
movsx ecx, dx
lea r10, [rax + r10 - 0xc]
bswap rcx
btc bp, 0x8c
movzx r8d, word [r11 + rax*2 - 0x20]
bswap ebp
lea r11, [rax + r11 - 0xe]
xor r8w, si
btc bp, dx
bt rdx, 0xaf
dec r8w
bts ebp, 0x36
btc ecx, edi
call fcn.141fac221

Function at 0x141f70f7b
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea r11, [rbp - 0x166b526e]
inc esi
lea rdx, [rbp + rbp*2 + 0x4526f2bb]
call fcn.141fd0045

Function at 0x141f8cac9
Capabilities:
Hash data using murmur3

Disassembly:
add edi, 0xdeb9cd89
add rbx, rdx
lea rdx, [rcx*2 + 0x25a046b1]
push rsi
mov r9d, dword [rdi + r9 - 0x297a31c6]
sal rcx, 0x15
sar dx, 2
pop r11
pop rdi
jnp fcn.142064af2

Function at 0x141f8ccaf
Capabilities:
Hash data using murmur3

Disassembly:
push 0x2730938b
mov r8, rax
call fcn.141ef6248
pop rbx
pop rax
pop rdx
jmp fcn.141f6db95
Function at 0x141f8fd3e
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea rdx, [rsp + rdx + 0x10]
mov word [rdx + r11*4 - 0x1e4], cx
lea rax, [r11 + rsi*8 + 0x4292b8b9]
lea rcx, [rax + rdi*2 - 0x51f65941]
lea rcx, [rcx + r8*4 - 0x76fd56c6]
lea r10, [r10 + rdi*4 - 0x1e404]
mov qword [rsp + r11 - 0x79], 0xffffffffbab8f3bf
mov edi, dword [r8 + r10 - 0x4f1c7cdd]
xchg byte [rsp + r11*2 - 0xef], cl
rol sil, 0xa3
mov edx, 0xe72edc10
xor edi, ebp
add dl, 0xc
call fcn.141ed7ede
mov ebx, 0xba049a22
jmp 0x14204fbd8
mov r11, rdi
sub rdi, 2
jmp 0x141ecd8e0

Function at 0x141f9f87c
Capabilities:
Hash data using murmur3

Disassembly:
lea r9, [r9 + rcx*2 - 0x2450f208]
mov qword [rsp + rcx*2 - 0x2450f20e], 0xffffffffcbb0d08b
lea rsi, [rcx*4 - 0x7e6a82da]
mov word [r9 + rbx*2 - 0xf486], dx
lea rdi, [rdi + rcx*2 - 0x2450f212]
mov ebx, dword [rdi + rcx*2 - 0x2450f20e]
xor ebx, r10d
movzx edx, r8w
shr word [rsp + rcx - 0x12287901], cl
lea rax, [r8*8 + 0x1006230f]
lea ebx, [rbx + rsi*4 - 0x1e747fa9]
mov ebp, 0xa9adeab8
call fcn.142005ce8
mov ebx, r9d
mov edx, dword [r10 + r9 - 0x17bafba8]
call fcn.142019162

Function at 0x141fa1fcc
Capabilities:
Hash data using murmur3

Disassembly:
sar rdx, 0xd4
movzx eax, sil
sal rbx, cl
neg r8d
sar rdx, 0x31
mov qword [rsi + r11 - 0x703d6bb1], rbx
add rdx, r8
jns 0x141fddffe
mov eax, dword [rdi]
add rdi, 4
mov qword [rsp], 0xffffffffdfb9269d
pop rcx
xor eax, r9d
shr cl, 0xc4
lea eax, [rax + rcx*4 - 0x717dd624]
neg eax
movzx esi, cx
call fcn.141ec619d
mov esi, 0x703d6bb1
mov rbx, qword [rsi + r11 - 0x703d6bb1]
lea r8, [rsi + rsi - 0x216e88d1]
movzx ebp, si
bt r8d, 0x14
mov cl, byte [r11 + rbp*2 - 0xd75a]
btc ebp, ebp
mov edx, ebp
setae r8b
lea r11, [rbp + r11 - 0x26baf]
jae 0x141ebdf67

Function at 0x141fadd32
Capabilities:
Hash data using murmur3

Disassembly:
or rbx, rdx
movsxd rsi, esi
adc r8, rsi
xor r9, 0x2f12fa10
jae fcn.141f4678a
mov qword [rsp], 0x222ad39e
mov esi, dword [rsp + 4]
mov rbx, rdi
mov ecx, 0x6eaa3d84
lea rdi, [rdi + rsi*2 - 2]
mov r11d, ecx
lea rdx, [rcx + r11*2 + 0x452a6fbe]
mov word [rdi + rsi], bx
xchg qword [rsp + rsi], rsi
or dword [rsp + r11 - 0x6eaa3d81], r11d
rol cx, 2
mov esi, dword [rcx + r10 - 0x6eaaf610]
jp 0x14200c3ba
mov r9d, ecx
xor esi, 0xa1859d1c
shl rdx, cl
dec esi
xor esi, 0x9cad6134
inc r11b
bswap esi
mov qword [rsp + r11 - 0x6eaa3d85], rbp
mov ebp, r11d
lea rbx, [r11 + rdx*8 - 0x10ec53c6]
xor dword [rsp + rcx - 0x6eaaf610], esi
sub edx, r11d
pop rbp
jne 0x141e565cd
lea r10, [r10 + rcx - 0x6eaaf60c]
xor esi, ebp
jmp 0x141fc728a