joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1800026c4
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xor edx, dword [rbp - 0x18]
xor eax, 0x8da9e7f8
sub eax, 0xa79637bf
xor esi, 0x97505a4d
add ebx, esi
add ebx, eax
add ebx, edx
and ebx, 0x200
je 0x1800050c9
rol edx, 7
add edx, 0x65a6eff0
ror edx, 7
ror ebx, 0xc
add ebx, eax
add ebx, edi
add ebx, edx
and ebx, 0x400000
je 0x18000abad
sub edx, 0x1384a0d3
add ebx, 0x8464e749
rol edx, 0x14
add edi, 0x2191ca9d
jmp 0x18000770a
add dword [rbp - 8], 0xcde1911a
xor ebx, dword [rbp - 8]
sub edx, 0xcbe771d3
ror esi, 0x16
ror ebx, 5
add ebx, edi
add ebx, esi
and ebx, 0x400
je 0x18000828a

Function at 0x180002908
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov esi, 0x1c0cb413
mov rsp, rbp
sub rsp, 0x20
mov edx, 0xedf33532
mov ebx, 0xa9de66f7
mov dword [rbp - 8], 0x267438dd
mov edi, 0x994a22ef
inc dword [rbp - 0x18]
mov ecx, 0x1cefa332
mov eax, dword [rbp - 0x18]
jmp 0x18000160a
add dword [rbp - 8], 0x4bc56f01
xor ebx, dword [rbp - 8]
rol edx, 0x18
add edx, 0xe91ae9fd
sub ecx, 0xa9ecdbc7
xor edx, 0xc50a3f40
add ebx, eax
add ebx, ecx
add ebx, edx
and ebx, 0x400000
je 0x180004e9a
add edx, 0x5f86e6d3
sub edi, 0x22d29d1e
ror ecx, 0x16
add ebx, 0x522c2506
xor ecx, 0x54fad00a
add ebx, esi
add ebx, edx
add ebx, ecx
and ebx, 0x20
je 0x1800037c0
xor edx, 0x835c7b80
xor ebx, 0x80f18fa6
rol ebx, 0x1c
sub edi, 0xd3e7e487
xor edx, edi
add ebx, esi
add ebx, ecx
and ebx, 0x800
je 0x180009da9
add ebx, 0xa329c43d
sub eax, 0x2819b08f
sub edx, 0xabdb428f
xor edi, 0x575c28f8
jmp 0x180001226
add ebx, eax
add ebx, ecx
and ebx, 0x20
je 0x180007238
rol ecx, 0x11
xor eax, ebx
rol ebx, 2
add ebx, edi
add ebx, eax
and ebx, 0x20
je 0x180004224
rol eax, 0x16
sub edx, 0x141920ff
add edx, 0x1a297191
ror edx, 0xe
add ebx, ecx
add ebx, esi
and ebx, 0x8000
je 0x180009c95
xor ebx, 0x879d67ed
xor edx, edi
sub eax, 0x87ac991a
jmp 0x1800049b4
add dword [rbp - 8], 0x3d64130f
xor ebx, dword [rbp - 8]
xor edx, eax
rol ebx, 0x1e
rol eax, 0xb
add ebx, ecx
add ebx, eax
add ebx, edx
and ebx, 0x400
je 0x18000828a
xor edi, 0xc20980b1
sub eax, 0xd78b278
ror ebx, 0x17
rol edx, 0x14
add ebx, ecx
add ebx, edi
add ebx, edx
and ebx, 0x800000
je 0x180004f34
rol ebx, 0x18
rol ecx, 0x15
xor ebx, eax
add ebx, edx
add ebx, ecx
and ebx, 0x1000
je 0x180004e9a
rol ecx, 0x12
add edx, 0xdf88bf70
add ecx, 0x49a30761
jmp 0x1800028a8

Function at 0x180002bc4
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add eax, 0x73ea89b8
ror eax, 0x18
jmp 0x18000110a
Function at 0x180003020
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
je 0x180004e0d
ror edi, 0x11
ror eax, 0x16
add eax, 0x8bae645b
add edx, 0xf93acb44
add ebx, eax
add ebx, edi
add ebx, edx
and ebx, 0x80000000
je 0x180004541
sub edx, 0xe955a948
rol eax, 0x17
rol ebx, 0x12
xor eax, 0x35a6a358
jmp 0x180001e78

Function at 0x1800032e4
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edx, 0xedf33532
mov ebx, 0xa9de66f7
mov esi, 0x1c0cb413
mov ecx, 0x1cefa332
mov rsp, rbp
mov edi, 0x994a22ef
sub rsp, 0x20
inc dword [rbp - 0x18]
mov dword [rbp - 8], 0x267438dd
mov eax, dword [rbp - 0x18]
jmp 0x18000160a
add esi, 0xa4347cf2
ror edx, 0x16
rol ebx, 0x1e
rol ebx, 0x17
sub esi, 0x2dd28415
add ebx, edx
add ebx, edi
add ebx, eax
and ebx, 0x200000
je 0x180001720
rol eax, 0x1d
ror edi, 0xc
sub eax, 0x2dc7d4b1
add ebx, 0x4215fc6c
ror ebx, 0x16
add ebx, edi
add ebx, esi
add ebx, ecx
and ebx, 0x10000000
je 0x180002ec6
ror ecx, 3
rol edi, 0x1a
ror edx, 4
ror edi, 3
sub edx, 0x483f8ec7
jmp 0x18000613c
add dword [rbp - 8], 0xf531baf9
xor ebx, dword [rbp - 8]
sub edx, 0xc088efd7
ror ebx, 0x1a
add edx, 0x722fa25
add ebx, ecx
add ebx, edx
add ebx, edi
and ebx, 0x10000000
je 0x1800022e0
add edx, 0xb47b3b17
xor ebx, dword [rbp - 0x18]
xor ebx, esi
add ebx, edi
add ebx, edx
add ebx, eax
and ebx, 4
je 0x180008e74
xor esi, 0x962b4f75
add ecx, 0x790ba7a1
ror ecx, 0x18

Function at 0x180003894
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 8], 0x9d0f0f13
xor ebx, dword [rbp - 8]
add ecx, 0xcb99fc9d
sub ecx, 0x6748ad9e
xor esi, 0x5624d164
add ebx, eax
add ebx, edi
add ebx, esi
and ebx, 0x8000000
je 0x180004fb2
xor esi, edi
ror ebx, 0x1a
rol ecx, 0x1a
ror eax, 0x17
add ebx, ecx
add ebx, edi
add ebx, edx
and ebx, 0x200000
je 0x18000852c
sub esi, 0xe670e981
rol ecx, 0x16
add ebx, 0x9461172
add ebx, ecx
add ebx, eax
and ebx, 4
je 0x18000a8d2
ror ebx, 0x1a
xor esi, 0xcd204595
ror edi, 0x1f
jmp 0x1800050c9
ror edx, 5
xor esi, dword [rbp - 8]
add eax, 0x5920e1d9
rol edi, 0x1d
add ebx, edi
add ebx, esi
and ebx, 0x10000000
je 0x180002596
rol esi, 0x12
rol eax, 0xa
add esi, 0xeb77e0ef
ror edi, 0x16
jmp 0x180009c95

Function at 0x180003a48
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edx
and ebx, 0x2000000
je 0x180004f34
ror ebx, 0x15
rol edx, 7
sub ecx, 0x2219b785
ror ebx, 0x1d
jmp fcn.180006268
Function at 0x180003c50
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
sal byte [rdi - 0x30], 0xf5
sbb dword [rcx + 0x2beeeaf2], eax
xor rdi, qword [rbp - 8]
rol ecx, 0xa
sub edx, 0x797b4395
add ebx, eax
add ebx, edi
and ebx, 0x100000
je 0x18000abad
ror edx, 0xb
add edi, 0x70972f39
sub ecx, 0x318f0406
jmp 0x180001d2a

Function at 0x180003d6c
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov esi, 0x1c0cb413
mov rsp, rbp
sub rsp, 0x20
mov edx, 0xedf33532
mov ebx, 0xa9de66f7
mov dword [rbp - 8], 0x267438dd
mov edi, 0x994a22ef
inc dword [rbp - 0x18]
mov ecx, 0x1cefa332
mov eax, dword [rbp - 0x18]
jmp 0x18000160a
add dword [rbp - 8], 0x4bc56f01
xor ebx, dword [rbp - 8]
rol edx, 0x18
add edx, 0xe91ae9fd
sub ecx, 0xa9ecdbc7
xor edx, 0xc50a3f40
add ebx, eax
add ebx, ecx
add ebx, edx
and ebx, 0x400000
je 0x180004e9a
add edx, 0x5f86e6d3
sub edi, 0x22d29d1e
ror ecx, 0x16
add ebx, 0x522c2506
xor ecx, 0x54fad00a
add ebx, esi
add ebx, edx
add ebx, ecx
and ebx, 0x20
je 0x1800037c0
xor edx, 0x835c7b80
xor ebx, 0x80f18fa6
rol ebx, 0x1c
sub edi, 0xd3e7e487
xor edx, edi
add ebx, esi
add ebx, ecx
and ebx, 0x800
je 0x180009da9
add ebx, 0xa329c43d
sub eax, 0x2819b08f
sub edx, 0xabdb428f
xor edi, 0x575c28f8
jmp 0x180001226
add ebx, eax
add ebx, ecx
and ebx, 0x20
je 0x180007238
rol ecx, 0x11
xor eax, ebx
rol ebx, 2
add ebx, edi
add ebx, eax
and ebx, 0x20
je 0x180004224
rol eax, 0x16
sub edx, 0x141920ff
add edx, 0x1a297191
ror edx, 0xe
add ebx, ecx
add ebx, esi
and ebx, 0x8000
je 0x180009c95
xor ebx, 0x879d67ed
xor edx, edi
sub eax, 0x87ac991a
jmp 0x1800049b4
add dword [rbp - 8], 0x3d64130f
xor ebx, dword [rbp - 8]
xor edx, eax
rol ebx, 0x1e
rol eax, 0xb
add ebx, ecx
add ebx, eax
add ebx, edx
and ebx, 0x400
je 0x18000828a
xor edi, 0xc20980b1
sub eax, 0xd78b278
ror ebx, 0x17
rol edx, 0x14
add ebx, ecx
add ebx, edi
add ebx, edx
and ebx, 0x800000
je 0x180004f34
rol ebx, 0x18
rol ecx, 0x15
xor ebx, eax
add ebx, edx
add ebx, ecx
and ebx, 0x1000
je 0x180004e9a
rol ecx, 0x12
add edx, 0xdf88bf70
add ecx, 0x49a30761
jmp 0x1800028a8

Function at 0x180003e18
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add esi, 0xc6332c87
add ebx, edi
add ebx, esi
add ebx, ecx
and ebx, 0x1000000
je 0x180007ae9
add ebx, 0x2ffb6abb
ror esi, 0x12
sub ebx, 0x1170b63e
sub ecx, 0x3b841452
jmp 0x180004449

Function at 0x180003e64
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, ecx
and ebx, 0x40000000
je 0x180001e78
xor edx, 0x8ed9e6a5
ror esi, 4
ror ebx, 8
xor eax, 0x1c3ad866
xor edi, dword [rbp - 8]
add ebx, edx
add ebx, esi
and ebx, 4
je 0x180004449
sub eax, 0x9f26b12f
xor edx, edi
ror eax, 8
add ebx, eax
add ebx, esi
and ebx, 0x1000000
je 0x180004c74
ror edi, 0x18
ror esi, 0x15
xor edx, 0x2088352c
jmp 0x180003729
Function at 0x180004310
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add byte [rax], al
add dword [rbp - 8], 0xe8014981
xor ebx, dword [rbp - 8]
xor eax, dword [rbp - 0x18]
ror edx, 0x1f
sub edx, 0xde2e9f92
ror edx, 0xf
add ebx, ecx
add ebx, edx
add ebx, eax
and ebx, 0x20000000
je 0x180002ec6
sub ecx, 0x1f1b83d9
add eax, 0xcd150d3
ror ebx, 0x1c
add ebx, ecx
add ebx, edi
add ebx, esi
and ebx, 2
je 0x18000613c
add edi, 0x75e53262
xor eax, 0x419cebbd
sub edi, 0xa7b1dd5b
add ebx, edi
add ebx, ecx
add ebx, eax
and ebx, 0x1000000
je 0x18000a8d2
ror edx, 0x10
add ebx, 0xaeb1ce5c
rol ebx, 0x13
sub ebx, 0x455913a0
jmp 0x180005e66

Function at 0x180004940
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
clc
add ecx, 0x3a549ba2
sub edi, 0xa937a5aa
rol ebx, 0xb
add ebx, edi
add ebx, ecx
and ebx, 0x10
je 0x1800022e0
rol esi, 0x1b
add ecx, 0xfd41d3e6
sub edx, 0xb2a00a49
ror esi, 0x15
add ebx, ecx
add ebx, edx
and ebx, 0x20000
je 0x180003e4a
ror eax, 7
ror edi, 0x1e
add ecx, 0xecb76d8c
add ebx, edx
add ebx, edi
add ebx, ecx
and ebx, 0x4000000
je 0x180002ec6
xor eax, 0x4e41f1a1
xor esi, 0xe354291a
sub edi, 0x94a0361f
jmp 0x180005b2c
add dword [rbp - 8], 0xc2dd25ae
xor ebx, dword [rbp - 8]
sub esi, 0xc5684999
rol edx, 7
sub eax, 0x567e806f
sub edi, 0x267e0902
xor edi, dword [rbp - 8]
add ebx, edi
add ebx, esi
add ebx, edx
and ebx, 0x8000000
je 0x180009c95
add edi, 0x922a9d4c
ror edi, 0x18
rol edi, 0x18
add ebx, 0x7dcb7cb8
ror edi, 3
add ebx, esi
add ebx, edi
add ebx, edx
and ebx, 4
je 0x18000a8d2
rol ebx, 4
ror edx, 0xa
rol esi, 5
ror eax, 2
add ebx, ecx
add ebx, edi
add ebx, eax
and ebx, 0x40000000
je 0x180005ccd
rol esi, 0x18
add ebx, 0x2301860c
xor edx, 0x5bdc37ec
jmp 0x180003177

Function at 0x180004a4c
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edi
and ebx, 0x200
je 0x180005bb6
rol ecx, 6
sub eax, 0x53baab19
xor eax, 0x4e5d4ae3
xor ecx, ebx
rol edi, 0xf
add ebx, edx
add ebx, ecx
and ebx, 0x20000
je 0x1800022e0
add edi, 0x86adf4f7
rol ecx, 0x1d
rol eax, 0xa
ror edi, 0x14
rol eax, 8
add ebx, edi
add ebx, edx
add ebx, eax
and ebx, 0x20
je 0x180001a1d
sub eax, 0x8595074c
sub ecx, 0x5a5bf756
add eax, 0x8178e1b
jmp 0x180002ec6

Function at 0x180004c20
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
fnstsw word [rax]
je 0x180004c4a
mov edi, 0x994a22ef
sub rsp, 0x20
add dword [rbp - 0x18], 1
mov eax, dword [rbp - 0x18]
jmp 0x18000160a
mul dword [rsi - 0x22]
test eax, 0xb9ec8948
xor ah, byte [rbx + 0x13be1cef]
mov ah, 0xc
sbb al, 0x48
sub esp, 0x20
Function at 0x180004c90
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add eax, 0x710ead2a
add ebx, eax
add ebx, edx
and ebx, 1
je 0x180004f34
sub edx, 0xf91a2c9d
ror edi, 0x1a
ror edx, 9
xor eax, edx
ror edi, 0x1b
add ebx, edx
add ebx, edi
and ebx, 0x100000
je 0x180007238
add ebx, 0xd7db1162
add edi, 0xfa19e199
sub ecx, 0xef218d36
rol esi, 0xe
ror edi, 0x1b
add ebx, edi
add ebx, edx
add ebx, esi
and ebx, 0x80000
je 0x180003177
add esi, 0xb1c344ea
sub edi, 0xac6deee5
ror edi, 0xe
jmp 0x180009d1d
add dword [rbp - 8], 0xd0b24ab
xor ebx, dword [rbp - 8]
add ecx, 0xcccb8248
add edx, 0xc6b8b64f
xor ecx, dword [rbp - 0x18]
add ebx, ecx
add ebx, edx
and ebx, 0x1000000
je 0x1800012eb
sub esi, 0x7ff39266
ror edx, 0xe
rol edi, 0xa
sub edi, 0xb82ea7f1
rol edi, 9
add ebx, edi
add ebx, esi
add ebx, eax
and ebx, 0x200
je 0x180008306
xor esi, 0xc754a50a
add ecx, 0x38cc6015
rol edx, 0x14
add ebx, eax
add ebx, esi
and ebx, 0x8000000
je 0x1800054f8
rol eax, 0xb
xor edi, 0x8f8f851d
sub ebx, 0xdd4345f9
xor ecx, 0x39d24316
rol ebx, 0x1b
jmp 0x18000613c

Function at 0x180004ca0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add eax, 0x710ead2a
add ebx, eax
add ebx, edx
and ebx, 1
je 0x180004f34
sub edx, 0xf91a2c9d
ror edi, 0x1a
ror edx, 9
xor eax, edx
ror edi, 0x1b
add ebx, edx
add ebx, edi
and ebx, 0x100000
je 0x180007238
add ebx, 0xd7db1162
add edi, 0xfa19e199
sub ecx, 0xef218d36
rol esi, 0xe
ror edi, 0x1b
add ebx, edi
add ebx, edx
add ebx, esi
and ebx, 0x80000
je 0x180003177
add esi, 0xb1c344ea
sub edi, 0xac6deee5
ror edi, 0xe
jmp 0x180009d1d
add dword [rbp - 8], 0xd0b24ab
xor ebx, dword [rbp - 8]
add ecx, 0xcccb8248
add edx, 0xc6b8b64f
xor ecx, dword [rbp - 0x18]
add ebx, ecx
add ebx, edx
and ebx, 0x1000000
je 0x1800012eb
sub esi, 0x7ff39266
ror edx, 0xe
rol edi, 0xa
sub edi, 0xb82ea7f1
rol edi, 9
add ebx, edi
add ebx, esi
add ebx, eax
and ebx, 0x200
je 0x180008306
xor esi, 0xc754a50a
add ecx, 0x38cc6015
rol edx, 0x14
add ebx, eax
add ebx, esi
and ebx, 0x8000000
je 0x1800054f8
rol eax, 0xb
xor edi, 0x8f8f851d
sub ebx, 0xdd4345f9
xor ecx, 0x39d24316
rol ebx, 0x1b
jmp 0x18000613c

Function at 0x180004e20
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add edx, 0x652b15e4
xor eax, esi
add ebx, edi
add ebx, edx
and ebx, 0x10
je 0x1800056bb
sub edx, 0x97916dbb
add edi, 0x1a46562b
rol edi, 0xc
add ebx, edx
add ebx, ecx
add ebx, esi
and ebx, 8
je 0x180003e4a
add edx, 0x7b631a6c
xor edi, esi
sub edi, 0x41090878
add ecx, 0xc17d07b9
xor edi, 0x61c3e717
add ebx, ecx
add ebx, edx
and ebx, 0x800
je 0x180002db9
sub ebx, 0x6c694385
add eax, 0xeee59206
rol esi, 4
ror ecx, 0x1c
sub eax, 0x46d11b62
jmp 0x1800078cc
add dword [rbp - 8], 0x90a47108
xor ebx, dword [rbp - 8]
add ebx, 0x107b8396
xor eax, edi
rol eax, 0xb
Function at 0x180004e34
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add edx, 0x652b15e4
xor eax, esi
add ebx, edi
add ebx, edx
and ebx, 0x10
je 0x1800056bb
sub edx, 0x97916dbb
add edi, 0x1a46562b
rol edi, 0xc
add ebx, edx
add ebx, ecx
add ebx, esi
and ebx, 8
je 0x180003e4a
add edx, 0x7b631a6c
xor edi, esi
sub edi, 0x41090878
add ecx, 0xc17d07b9
xor edi, 0x61c3e717
add ebx, ecx
add ebx, edx
and ebx, 0x800
je 0x180002db9
sub ebx, 0x6c694385
add eax, 0xeee59206
rol esi, 4
ror ecx, 0x1c
sub eax, 0x46d11b62
jmp 0x1800078cc
add dword [rbp - 8], 0x90a47108
xor ebx, dword [rbp - 8]
add ebx, 0x107b8396
xor eax, edi
rol eax, 0xb

Function at 0x180004ee4
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edx
add ebx, eax
add ebx, ecx
and ebx, 0x200
je 0x180004541
rol edx, 0x18
rol ebx, 0x15
rol edx, 0x10
ror eax, 0x12
add ebx, edx
add ebx, eax
add ebx, esi
and ebx, 0x8000000
je 0x18000677e
add ecx, 0x34f88f9c
add edi, 0x56fd6568
add esi, 0x297deb27
add edx, 0x9632aefd
rol edx, 0xc
jmp 0x1800070bc

Function at 0x180005280
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
cmpsd dword [rsi], dword [rdi]
int 0xbf
rol edi, 0x12
xor edi, 0xd9b63702
add eax, 0x948f29c0
add ebx, eax
add ebx, edx
and ebx, 0x100
je 0x18000613c
ror edi, 0x1d
xor ecx, 0x9087cb5b
rol esi, 0xc
add ebx, edi
add ebx, edx
and ebx, 0x80000000
je 0x180007ae9
add edx, 0x44d80367
sub eax, 0x8a4807d4
xor ecx, 0x6aa0777d
ror ebx, 5
jmp 0x180007035

Function at 0x1800056d0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 8], 0x5b4bb98b
xor ebx, dword [rbp - 8]
xor eax, 0xec39c4fc
sub esi, 0xcd3018ea
sub eax, 0x5ac8c782
add ebx, edx
add ebx, edi
and ebx, 0x10
je 0x18000260e
sub esi, 0x6749ae0
ror ebx, 0xb
add edx, 0x2ee8e91
rol ecx, 0x1d
rol ecx, 0x11
add ebx, esi
add ebx, edx
and ebx, 0x400000
je 0x1800070bc
sub esi, 0xe46e7539
add edx, 0xbd6aedc8
sub edx, 0x8a0f968c
add ecx, 0xccd68336
add esi, 0xba328a29
add ebx, eax
add ebx, esi
and ebx, 0x40000000
je 0x180001b94
rol edx, 0x15
ror ebx, 0x14
sub ecx, 0x8849d0f6
jmp 0x180002f57
sub eax, 0x7568bcca
add ebx, ecx
add ebx, eax
add ebx, edx
and ebx, 0x4000
je 0x180003481
rol edx, 0x1d
xor esi, dword [rbp - 8]
sub ebx, 0x6726d710
add ebx, edi
add ebx, ecx
and ebx, 0x2000000
je 0x180007ae9
in eax, 0x23
add byte [rax], al
xor eax, dword [rbp - 0x18]
sub ebx, 0x493bc30e
xor edi, esi
ror eax, 0x19
add edx, 0xc18c7dc8
add ebx, esi
add ebx, eax
add ebx, edi
and ebx, 0x4000000
je 0x180002f57
rol eax, 0x17
xor ecx, eax
ror edi, 0x1b
jmp 0x180004d80
Function at 0x1800058a8
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add byte [rax], al
je 0x180003617
ror edi, 0xd
rol edx, 0x18
xor esi, 0xae7ede3b
add ebx, eax
add ebx, ecx
add ebx, esi
and ebx, 0x40
je 0x18000ad86
xor eax, 0x14a556a5
ror ecx, 0x17
ror esi, 0xb
add ebx, 0xbd428bf
jmp 0x1800045cf
add dword [rbp - 8], 0xa22dbe76
xor ebx, dword [rbp - 8]
xor ecx, ebx
add eax, 0x3681cb0f
add ecx, 0x6a9506c0
rol edi, 0x1a
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x1000000
je 0x180003c8b
sub edi, 0x3b413a54
rol esi, 0xe
xor ecx, dword [rbp - 0x18]
add ebx, edx
add ebx, eax
add ebx, esi
and ebx, 0x4000
je 0x180001d2a
rol esi, 0x13
rol esi, 0x16
sub esi, 0xa99e0ba2
add ebx, edx
add ebx, edi
add ebx, ecx
and ebx, 0x20000000
je 0x180008306
sub ebx, 0xe30ec0d6
rol esi, 0x17
rol ebx, 2
ror ebx, 3
ror esi, 0xa
jmp 0x180001502

Function at 0x1800058f0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
cqo
mov ecx, 0x1cefa332
mov ebx, 0xa9de66f7
mov rsp, rbp
mov dword [rbp - 8], 0x267438dd
sub rsp, 0x20
add dword [rbp - 0x18], 1
mov eax, dword [rbp - 0x18]
jmp 0x18000160a

Function at 0x180005950
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
fsubr dword [rbx - 0x7e]
vpminsw xmm1, xmm15, xmmword [0x181c9467a]
add ebx, ecx

Function at 0x180005990
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
ror eax, 0xc
sub edx, 0x674c8cbb
sub eax, 0xd452ba
jmp 0x180009702
Function at 0x180005bbc
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 8], 0x87fc6a8c
xor ebx, dword [rbp - 8]
ror ecx, 5
rol ebx, 2
ror ebx, 3
add ebx, edx
add ebx, eax
add ebx, edi
and ebx, 0x200
je 0x180003502
ror ecx, 0x1b
sub ecx, 0x60ded6d
xor edx, dword [rbp - 8]
sub edx, 0x7948dd62
add edx, 0xe939282d
add ebx, edx
add ebx, ecx
add ebx, eax
and ebx, 0x400
je 0x18000828a
add esi, 0x795b183a
add edi, 0xb636bc99
ror esi, 0xa
sub edx, 0xea7914a5
add ecx, 0x95cb6b52
add ebx, esi
add ebx, eax
add ebx, ecx
and ebx, 0x400000
je 0x18000419b
add ebx, 0xf3f42357
xor eax, 0x4833a0b
xor edi, 0x7d73c704
ror eax, 0xf
jmp 0x180005bb6
jmp fcn.18000af88
add dword [rbp - 8], 0x167c00b7
xor ebx, dword [rbp - 8]
add esi, 0xcfb186b6
sub edx, 0xe0ed14a1
rol edi, 6
sub eax, 0x30a42a98
add ebx, edi
add ebx, esi
and ebx, 0x1000000
je 0x1800055ae
add ebx, 0x8aa9943e
sub edi, 0xff77f410
sub edx, 0x1a8fe21c
add ebx, edx
add ebx, esi
and ebx, 0x400
je 0x180007ae9
xor eax, 0xf9e57ba1
ror edi, 0xf
ror edi, 2
add esi, 0x8521e77b
add ebx, eax
add ebx, ecx
add ebx, edi
and ebx, 0x10
je 0x180004224
sub esi, 0xa9f2f64d
sub ebx, 0xc2ab2796
sub ebx, 0x5f77d9da
jmp 0x180002b5c
add dword [rbp - 8], 0xe898f5a1
xor ebx, dword [rbp - 8]
xor edi, 0xb5ddfc89
rol ebx, 6
xor ebx, eax
xor ecx, edi
add edx, 0xf8f7864
add ebx, ecx
add ebx, eax
add ebx, edx
and ebx, 0x800000
je 0x18000852c
add eax, 0xad6121a4
xor esi, 0xab546041
sub esi, 0xcaa93fb4
xor edi, dword [rbp - 8]
rol ebx, 0x1b
add ebx, ecx
add ebx, eax
add ebx, edi
and ebx, 1
je 0x1800085b5
add edi, 0xa8b81ba6
ror ebx, 0xf
ror esi, 0x19
add ecx, 0x561d1f76
ror ebx, 0x19
add ebx, edx
add ebx, eax
and ebx, 0x1000000
je 0x180009270
xor esi, 0xf191b506
xor edi, 0x79e002fa
sub esi, 0xd16287f6
jmp 0x18000260e
add dword [rbp - 8], 0xc092c11d
xor ebx, dword [rbp - 8]
sub esi, 0xc60d78bd
xor eax, dword [rbp - 8]
sub ebx, 0x77524f6e
add ebx, 0x8876068d
add ebx, edi
add ebx, edx
and ebx, 1
je 0x180003617
ror edx, 0x1c
add ecx, 0x6f79e1a1
add esi, 0x3e35584f
rol esi, 0xf
add ebx, ecx
add ebx, eax
and ebx, 0x10000
je 0x180009b89
ror esi, 0xf
ror edx, 0xf
add esi, 0x14b225ea
add ebx, ecx
add ebx, esi
and ebx, 8
je 0x180009da9
ror edi, 3
ror eax, 0xe
ror ecx, 0x1a
ror ebx, 9
jmp 0x180009083
add dword [rbp - 8], 0x266de6ad
xor ebx, dword [rbp - 8]
rol edx, 0xa
add ecx, 0xe5fda59
ror edi, 0xf
rol eax, 0xa
add ebx, edx
add ebx, eax
add ebx, edi
and ebx, 0x8000000
je 0x180002c87
ror edx, 0xd
sub ebx, 0xcada1a07
ror ecx, 0xd
ror ecx, 0x15
sub ebx, 0x422f6d5d
add ebx, eax
add ebx, ecx
and ebx, 0x200
je 0x180004541
xor ecx, eax
sub eax, 0x758cf723
sub ecx, 0x5d183620
sub eax, 0x2e66420d
add ebx, eax
add ebx, ecx
add ebx, edi
and ebx, 0x80
je 0x180003e4a
rol eax, 0x1b
sub edx, 0x78522076
rol edx, 0x16
add ebx, 0x3b08c3f1
jmp 0x18000260e
Function at 0x180005f50
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
sti
add ebx, esi
add ebx, ecx
and ebx, 0x4000000
je 0x180002f57
ror esi, 8
rol edi, 0x10
add eax, 0xb34292b3
add ebx, edx
add ebx, edi
and ebx, 0x200
je 0x18000110a
sub eax, 0x7d1a228c
rol ebx, 0x15
xor edx, dword [rbp - 0x18]
rol edx, 0xc
jmp 0x18000260e

Function at 0x1800060b0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add edi, 0x54f4b70f
jmp 0x180007a67