joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180006268
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 8], 0x4a8bb9a6
xor ebx, dword [rbp - 8]
ror edx, 0x19
xor eax, dword [rbp - 8]
sub edx, 0xf1238cad
sub ecx, 0x17b0cf17
add eax, 0xe1517b98
add ebx, esi
add ebx, edx
add ebx, eax
and ebx, 0x4000000
je 0x180004c74
xor edi, dword [rbp - 8]
ror edi, 0x17
xor ecx, edx
add eax, 0xbafa5148
add ebx, eax
add ebx, ecx
and ebx, 0x40
je 0x180004e0d
xor edx, 0xeb095bf5
add esi, 0xb8c8b878
rol ecx, 9
xor edi, 0x3a72785d
add ebx, esi
add ebx, ecx
and ebx, 0x2000
je 0x1800050c9
sub esi, 0xc818857a
sub edx, 0xd51cb148
add eax, 0x6b77b10
jmp 0x18000a024
add dword [rbp - 8], 0xaf430cd4
xor ebx, dword [rbp - 8]
rol eax, 0xe
xor edi, dword [rbp - 8]
ror ecx, 9
add edi, 0x5af52272
xor edi, dword [rbp - 8]
add ebx, ecx
add ebx, eax
add ebx, edi
and ebx, 0x100000
je 0x1800012eb
invalid
invalid
invalid
rol edx, 0xa
xor ecx, dword [rbp - 8]
xor edi, edx
add edx, 0x80ae428f
ror ecx, 6
add ebx, esi
add ebx, edx
and ebx, 0x800
je 0x180004116
ror ecx, 7
sub esi, 0xd71280c0
xor eax, 0xf3d843a
add ebx, esi
add ebx, edx
add ebx, ecx
and ebx, 0x2000000
je 0x1800071c2
xor ebx, 0x74f9484a
sub edi, 0x31504da7
add ebx, 0xb0965c36
jmp 0x180002b5c
add dword [rbp - 8], 0x69a19a1e
xor ebx, dword [rbp - 8]
xor ecx, dword [rbp - 8]
xor esi, eax
add eax, 0xb844e24d
add ebx, esi
add ebx, eax
add ebx, ecx
and ebx, 0x1000
je 0x1800098ae
xor ebx, 0x8e05ffba
rol eax, 0xa
add ecx, 0x2ccc72e5
add ebx, ecx
add ebx, eax
and ebx, 0x20
je 0x180004224
xor ebx, dword [rbp - 0x18]
ror edi, 0xa
rol ebx, 0x12
ror edi, 0x12
add ebx, ecx
add ebx, esi
and ebx, 4
je 0x180009083
add ebx, 0xb7674f4b
sub eax, 0x4ba31878
xor ebx, dword [rbp - 0x18]
add ebx, 0x79dc362d
jmp 0x180003c8b
add dword [rbp - 8], 0x54f186a9
xor ebx, dword [rbp - 8]
xor ebx, dword [rbp - 0x18]
sub edx, 0x8358787b
rol edi, 0x1c
add ebx, eax
add ebx, esi
add ebx, edx
and ebx, 0x4000
je 0x1800022e0
xor esi, 0xd440ac5
sub edx, 0x5b4c8725
add ebx, 0x8053b689
add ebx, edx
add ebx, esi
add ebx, ecx
and ebx, 0x10000000
je 0x180004e9a
ror esi, 0xe
xor edx, ebx
ror edx, 0x17
sub edx, 0x4aee821
add ebx, edi
add ebx, edx
and ebx, 0x200000
and byte [rax], al
je 0x180001c1a
rol eax, 0x18
ror edi, 0x13
ror edi, 0x1f
rol ebx, 9
add ecx, 0xf635de45
jmp 0x1800045cf
add dword [rbp - 8], 0xb23b4124
xor ebx, dword [rbp - 8]
add edx, 0x9723d8aa
add edi, 0xd4073e90
xor eax, 0x75bc2675
sub edx, 0xec12c8f2
add ebx, edi
add ebx, eax
add ebx, edx
and ebx, 0x80000000
je 0x180007035
ror edi, 0x14
xor ecx, 0x4b6e2d55
sub ebx, 0x449934a0
add ebx, ecx
add ebx, esi
add ebx, edi
and ebx, 0x800
je 0x1800045cf
sub edx, 0xe483b942
xor edi, edx
sub edi, 0xbf381850
xor eax, 0xf5c657e5
add ebx, edi
add ebx, eax
and ebx, 0x10000000
je 0x180007a67
ror esi, 0xf
add edx, 0xe6ea2bf0
add ebx, 0xd68509b1
jmp 0x180004224
Function at 0x180006494
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
and ebx, 0x8000000
je 0x180004f34
xor ebx, 0x400b6eb1
ror ebx, 0x19
rol edi, 0x1a
add ebx, eax
add ebx, edi
add ebx, ecx
and ebx, 0x400000
je 0x180001e78
sub edx, 0xbce1bef2
sub edi, 0xeebdcb69
xor esi, 0x722ff951

Function at 0x1800064d0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
ror eax, 0x17
rol eax, 7
add ebx, ecx
add ebx, eax
add ebx, esi
and ebx, 0x400
je 0x180008d30
rol ebx, 0xd
add ecx, 0x7b83da09
xor edi, eax
jmp 0x1800045cf
xlatb
loopne 0x1800064f6
invalid
add dword [rbp - 8], 0x6c14d4d6
xor ebx, dword [rbp - 8]
rol edx, 0x11
xor esi, eax
xor edx, 0xf4a76838
xor eax, edi
add ebx, edx
add ebx, esi
and ebx, 0x1000000
je 0x180006f2b
rol ebx, 8
xor edx, edi
rol edx, 8
add ecx, 0x6cfddc33
rol edi, 0x12
add ebx, esi
add ebx, ecx
add ebx, edi
and ebx, 0x80
je 0x180004f34
rol edx, 0xc
rol edx, 0x12
ror edx, 0x13
sub edx, 0xfce0aac2
add ebx, edx
add ebx, ecx
and ebx, 4
je 0x180002db9
add ecx, 0xe3a2fd23
add edi, 0xe5149726
ror edi, 0xa
jmp 0x18000260e
Function at 0x180006bec
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 8], 0x87fc6a8c
xor ebx, dword [rbp - 8]
ror ecx, 5
rol ebx, 2
ror ebx, 3
add ebx, edx
add ebx, eax
add ebx, edi
and ebx, 0x200
je 0x180003502
ror ecx, 0x1b
sub ecx, 0x60ded6d
xor edx, dword [rbp - 8]
sub edx, 0x7948dd62
add edx, 0xe939282d
add ebx, edx
add ebx, ecx
add ebx, eax
and ebx, 0x400
je 0x18000828a
add esi, 0x795b183a
add edi, 0xb636bc99
ror esi, 0xa
sub edx, 0xea7914a5
add ecx, 0x95cb6b52
add ebx, esi
add ebx, eax
add ebx, ecx
and ebx, 0x400000
je 0x18000419b
add ebx, 0xf3f42357
xor eax, 0x4833a0b
xor edi, 0x7d73c704
ror eax, 0xf
jmp 0x180005bb6
jmp fcn.18000af88
add dword [rbp - 8], 0x167c00b7
xor ebx, dword [rbp - 8]
add esi, 0xcfb186b6
sub edx, 0xe0ed14a1
rol edi, 6
sub eax, 0x30a42a98
add ebx, edi
add ebx, esi
and ebx, 0x1000000
je 0x1800055ae
add ebx, 0x8aa9943e
sub edi, 0xff77f410
sub edx, 0x1a8fe21c
add ebx, edx
add ebx, esi
and ebx, 0x400
je 0x180007ae9
xor eax, 0xf9e57ba1
ror edi, 0xf
ror edi, 2
add esi, 0x8521e77b
add ebx, eax
add ebx, ecx
add ebx, edi
and ebx, 0x10
je 0x180004224
sub esi, 0xa9f2f64d
sub ebx, 0xc2ab2796
sub ebx, 0x5f77d9da
jmp 0x180002b5c
add dword [rbp - 8], 0xe898f5a1
xor ebx, dword [rbp - 8]
xor edi, 0xb5ddfc89
rol ebx, 6
xor ebx, eax
xor ecx, edi
add edx, 0xf8f7864
add ebx, ecx
add ebx, eax
add ebx, edx
and ebx, 0x800000
je 0x18000852c
add eax, 0xad6121a4
xor esi, 0xab546041
sub esi, 0xcaa93fb4
xor edi, dword [rbp - 8]
rol ebx, 0x1b
add ebx, ecx
add ebx, eax
add ebx, edi
and ebx, 1
je 0x1800085b5
add edi, 0xa8b81ba6
ror ebx, 0xf
ror esi, 0x19
add ecx, 0x561d1f76
ror ebx, 0x19
add ebx, edx
add ebx, eax
and ebx, 0x1000000
je 0x180009270
xor esi, 0xf191b506
xor edi, 0x79e002fa
sub esi, 0xd16287f6
jmp 0x18000260e
add dword [rbp - 8], 0xc092c11d
xor ebx, dword [rbp - 8]
sub esi, 0xc60d78bd
xor eax, dword [rbp - 8]
sub ebx, 0x77524f6e
add ebx, 0x8876068d
add ebx, edi
add ebx, edx
and ebx, 1
je 0x180003617
ror edx, 0x1c
add ecx, 0x6f79e1a1
add esi, 0x3e35584f
rol esi, 0xf
add ebx, ecx
add ebx, eax
and ebx, 0x10000
je 0x180009b89
ror esi, 0xf
ror edx, 0xf
add esi, 0x14b225ea
add ebx, ecx
add ebx, esi
and ebx, 8
je 0x180009da9
ror edi, 3
ror eax, 0xe
ror ecx, 0x1a
ror ebx, 9
jmp 0x180009083
add dword [rbp - 8], 0x266de6ad
xor ebx, dword [rbp - 8]
rol edx, 0xa
add ecx, 0xe5fda59
ror edi, 0xf
rol eax, 0xa
add ebx, edx
add ebx, eax
add ebx, edi
and ebx, 0x8000000
je 0x180002c87
ror edx, 0xd
sub ebx, 0xcada1a07
ror ecx, 0xd
ror ecx, 0x15
sub ebx, 0x422f6d5d
add ebx, eax
add ebx, ecx
and ebx, 0x200
je 0x180004541
xor ecx, eax
sub eax, 0x758cf723
sub ecx, 0x5d183620
sub eax, 0x2e66420d
add ebx, eax
add ebx, ecx
add ebx, edi
and ebx, 0x80
je 0x180003e4a
rol eax, 0x1b
sub edx, 0x78522076
rol edx, 0x16
add ebx, 0x3b08c3f1
jmp 0x18000260e
Function at 0x180006c68
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 8], 0x87fc6a8c
xor ebx, dword [rbp - 8]
ror ecx, 5
rol ebx, 2
ror ebx, 3
add ebx, edx
add ebx, eax
add ebx, edi
and ebx, 0x200
je 0x180003502
ror ecx, 0x1b
sub ecx, 0x60ded6d
xor edx, dword [rbp - 8]
sub edx, 0x7948dd62
add edx, 0xe939282d
add ebx, edx
add ebx, ecx
add ebx, eax
and ebx, 0x400
je 0x18000828a
add esi, 0x795b183a
add edi, 0xb636bc99
ror esi, 0xa
sub edx, 0xea7914a5
add ecx, 0x95cb6b52
add ebx, esi
add ebx, eax
add ebx, ecx
and ebx, 0x400000
je 0x18000419b
add ebx, 0xf3f42357
xor eax, 0x4833a0b
xor edi, 0x7d73c704
ror eax, 0xf
jmp 0x180005bb6
jmp fcn.18000af88
add dword [rbp - 8], 0x167c00b7
xor ebx, dword [rbp - 8]
add esi, 0xcfb186b6
sub edx, 0xe0ed14a1
rol edi, 6
sub eax, 0x30a42a98
add ebx, edi
add ebx, esi
and ebx, 0x1000000
je 0x1800055ae
add ebx, 0x8aa9943e
sub edi, 0xff77f410
sub edx, 0x1a8fe21c
add ebx, edx
add ebx, esi
and ebx, 0x400
je 0x180007ae9
xor eax, 0xf9e57ba1
ror edi, 0xf
ror edi, 2
add esi, 0x8521e77b
add ebx, eax
add ebx, ecx
add ebx, edi
and ebx, 0x10
je 0x180004224
sub esi, 0xa9f2f64d
sub ebx, 0xc2ab2796
sub ebx, 0x5f77d9da
jmp 0x180002b5c
add dword [rbp - 8], 0xe898f5a1
xor ebx, dword [rbp - 8]
xor edi, 0xb5ddfc89
rol ebx, 6
xor ebx, eax
xor ecx, edi
add edx, 0xf8f7864
add ebx, ecx
add ebx, eax
add ebx, edx
and ebx, 0x800000
je 0x18000852c
add eax, 0xad6121a4
xor esi, 0xab546041
sub esi, 0xcaa93fb4
xor edi, dword [rbp - 8]
rol ebx, 0x1b
add ebx, ecx
add ebx, eax
add ebx, edi
and ebx, 1
je 0x1800085b5
add edi, 0xa8b81ba6
ror ebx, 0xf
ror esi, 0x19
add ecx, 0x561d1f76
ror ebx, 0x19
add ebx, edx
add ebx, eax
and ebx, 0x1000000
je 0x180009270
xor esi, 0xf191b506
xor edi, 0x79e002fa
sub esi, 0xd16287f6
jmp 0x18000260e
add dword [rbp - 8], 0xc092c11d
xor ebx, dword [rbp - 8]
sub esi, 0xc60d78bd
xor eax, dword [rbp - 8]
sub ebx, 0x77524f6e
add ebx, 0x8876068d
add ebx, edi
add ebx, edx
and ebx, 1
je 0x180003617
ror edx, 0x1c
add ecx, 0x6f79e1a1
add esi, 0x3e35584f
rol esi, 0xf
add ebx, ecx
add ebx, eax
and ebx, 0x10000
je 0x180009b89
ror esi, 0xf
ror edx, 0xf
add esi, 0x14b225ea
add ebx, ecx
add ebx, esi
and ebx, 8
je 0x180009da9
ror edi, 3
ror eax, 0xe
ror ecx, 0x1a
ror ebx, 9
jmp 0x180009083
add dword [rbp - 8], 0x266de6ad
xor ebx, dword [rbp - 8]
rol edx, 0xa
add ecx, 0xe5fda59
ror edi, 0xf
rol eax, 0xa
add ebx, edx
add ebx, eax
add ebx, edi
and ebx, 0x8000000
je 0x180002c87
ror edx, 0xd
sub ebx, 0xcada1a07
ror ecx, 0xd
ror ecx, 0x15
sub ebx, 0x422f6d5d
add ebx, eax
add ebx, ecx
and ebx, 0x200
je 0x180004541
xor ecx, eax
sub eax, 0x758cf723
sub ecx, 0x5d183620
sub eax, 0x2e66420d
add ebx, eax
add ebx, ecx
add ebx, edi
and ebx, 0x80
je 0x180003e4a
rol eax, 0x1b
sub edx, 0x78522076
rol edx, 0x16
add ebx, 0x3b08c3f1
jmp 0x18000260e
Function at 0x180006d60
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
rol ecx, 0x13
ror edx, 0x15
sub ebx, 0x6ef945d8
add ebx, ecx
add ebx, eax
and ebx, 0x100
je 0x180009702
add edi, 0x1164c88e
rol edx, 0x18
xor eax, 0x6183fa8a
rol edi, 0x10
add edi, 0xdc0c45a2
jmp 0x18000abad

Function at 0x180006de0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
adc al, 1
add ebx, eax
add dword [rbp - 8], 0x6183f3e7
xor ebx, dword [rbp - 8]
xor ecx, 0xb67dc658
rol ecx, 0x1e
rol eax, 7
add esi, 0x66656dec
rol eax, 6
add ebx, ecx
add ebx, eax
add ebx, edi
and ebx, 0x1000
je 0x180007d9e
sub edi, 0x45d2d2e
rol edx, 5
sub edi, 0xe2341fd2
add esi, 0x146d68bb
sub ebx, 0x33b9cd10
add ebx, edx
add ebx, edi
add ebx, esi
and ebx, 0x10000000
je 0x18000613c
add ecx, 0xb0d0022e
sub esi, 0xd59ee631
add edi, 0xa90cd658
rol edi, 0xf
add ebx, eax
add ebx, ecx
and ebx, 0x80000
je 0x18000ae74
xor edi, dword [rbp - 0x18]
xor edx, ecx
sub ecx, 0x1e49fdb6
ror edi, 8
jmp 0x180007ae9
add dword [rbp - 8], 0xb03280e7
xor ebx, dword [rbp - 8]
sub eax, 0x169bd1ab
xor ecx, 0x7fe36120
add eax, 0xa1efd84c
ror edx, 0x12
add ebx, 0x91e84369
add ebx, edx
add ebx, ecx
and ebx, 8
je 0x1800050c9
sub edx, 0x9c92d412
xor edi, 0xd62d06bd
add ecx, 0x49564b0d
rol ebx, 0x17
xor eax, 0x41698c79
add ebx, esi
add ebx, ecx
add ebx, edi
and ebx, 0x40000
je 0x180005a22
add eax, 0x9dcbd933
ror esi, 0x1b
rol esi, 0x12
add ebx, eax
add ebx, esi
add ebx, edi
and ebx, 0x8000000
je 0x180001502
add edx, 0x88f1fe31
rol eax, 2
sub ecx, 0x133f5576
jmp 0x180002db9
add dword [rbp - 8], 0xd4429162
xor ebx, dword [rbp - 8]
rol edi, 7
xor edi, dword [rbp - 8]
ror edi, 0x1e
add ebx, eax
add ebx, edi
add ebx, esi
and ebx, 2
je 0x180007d9e
ror eax, 5
ror edx, 0x17
sub ecx, 0xaa3f5ab2
add edi, 0x671f9a4e
add edi, 0xaa57641c
add ebx, esi
add ebx, ecx
add ebx, edi
and ebx, 0x800
je 0x18000852c
add edx, 0x8473280b
ror edx, 0x19
rol esi, 0x15
add ebx, esi
add ebx, edx
and ebx, 0x100000
je 0x180002f57
ror edx, 0x1f
sub esi, 0x74d2b30
sub esi, 0x8cbb0249
jmp 0x1800042a3
Function at 0x180006f58
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 8], 0xeccf95a0
xor ebx, dword [rbp - 8]
xor ecx, dword [rbp - 0x18]
rol eax, 0x14
add edx, 0x202636c
rol ebx, 0x11
add ebx, eax
add ebx, edx
add ebx, edi
and ebx, 8
je 0x180004a28
sub edi, 0x6cfb28df
ror ecx, 0x16
xor edx, 0xb4ec3756
add ebx, esi
add ebx, edx
and ebx, 0x80000000
je 0x180009702
rol edx, 0x13
add esi, 0x1f69b0fc
mov al, 0x69
invalid
rol ebx, 4
xor edi, 0xe5183ecb
add ebx, eax
add ebx, ecx
and ebx, 0x8000000
je 0x1800050c9
sub ecx, 0xd2ee0851
xor eax, 0x3886db0b
rol ebx, 0x13
jmp 0x180006f2b
add dword [rbp - 8], 0xed1e47bf
xor ebx, dword [rbp - 8]
xor edx, 0x36cff7be
rol edx, 0xe
ror esi, 0xd
rol ecx, 2
xor eax, 0x3540bb12
add ebx, edi
add ebx, eax
add ebx, ecx
and ebx, 0x40
je 0x180008cb3
invalid
add esi, 0x6bd20564
rol edx, 9
xor ebx, 0x6eb128cf
add ebx, eax
add ebx, esi
and ebx, 0x100000
je 0x180003481
rol esi, 0x11
ror eax, 0x1d
rol esi, 8
add eax, 0x185c38c5
ror eax, 3
add ebx, edx
add ebx, eax
and ebx, 0x10000
je 0x180004a28
sub ecx, 0x6c4ff7eb
rol eax, 0xb
add eax, 0x6de8dc8d
add ecx, 0x3b947349
rol edx, 0xf
jmp 0x180007d9e
push rbp
mov rbp, rsp
sub rsp, 0x20
mov dword [rbp - 0x18], 0x1964387
xchg esi, eax
add ecx, ebp
invalid
jge 0x18002bdd3
invalid
Function at 0x180007060
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
movabs byte [0xf84d330ac2c1ffff], al

Function at 0x180007290
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, esi
add ebx, edx
and ebx, 0x80000000
je 0x180009702
sub eax, 0xbc1a8dcc
xor edx, dword [rbp - 0x18]
add edx, 0x2abd13b0
sub ecx, 0x6d75b84a
xor esi, ebx
jmp 0x1800093e2

Function at 0x180007340
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 8], 0xc1aefd6b
xor ebx, dword [rbp - 8]
xor edx, dword [rbp - 8]
sub edx, 0x50f3a74c
add ecx, 0x2b40fe9b
add ebx, edi
add ebx, esi
and ebx, 0x20
je 0x180008306
sub ebx, 0xcb0ed460
add edi, 0xc7180e4d
xor ecx, 0xb8d22268
rol esi, 0xa
add ebx, edx
add ebx, ecx
and ebx, 0x40000
je 0x18000613c
sub ebx, 0x5e43545e
ror ecx, 3
sub esi, 0x51a6b232
add ebx, esi
add ebx, edx
add ebx, edi
and ebx, 0x80000000
je 0x18000911a
xor edx, 0x8c0ac52
xor esi, dword [rbp - 8]
ror ecx, 0x1c
ror edi, 0x1e
jmp 0x1800012eb
mov edx, 0xedf33532
mov ecx, 0x1cefa332
mov rsp, rbp
mov dword [rbp - 8], 0x267438dd
sub rsp, 0x20
in al, dx
and byte [rax], al
add byte [rax], al

Function at 0x180007410
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xor dh, byte [rdx - 0xcfeae5a]
in al, dx
lea esi, [rdx]
loop 0x180007396
jmp 0x1e23806d8
Function at 0x180007590
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 8], 0xbeb658ac
xor ebx, dword [rbp - 8]
rol ebx, 3
add ebx, 0x72ecd83f
fsubr st(4)
jb 0x180000fd5
retf
adc eax, 0xd301fb01
and ebx, 0x200
je 0x1800050c9
rol eax, 0xf
sub edx, 0xef0a7cff
ror eax, 0x1e
xor eax, 0x9f31687e
add ebx, eax
add ebx, esi
and ebx, 0x80000
je 0x18000369d
xor eax, dword [rbp - 8]
sub eax, 0xca35639f
xor eax, dword [rbp - 0x18]
sub esi, 0xb0de2906
sub eax, 0x9a030c01
add ebx, ecx
add ebx, eax
add ebx, esi
and ebx, 4
je 0x180004224
add eax, 0xdb3618af
xor edx, 0x2ae87551
xor edx, ecx
jmp 0x180005bb6
add dword [rbp - 8], 0xa5c80d51
xor ebx, dword [rbp - 8]
rol ecx, 0xd
sub edi, 0x5e8b215e
sub eax, 0x7863f26f
add edi, 0xbdd9f54
add eax, 0x45513c9d
add ebx, ecx
add ebx, edx
and ebx, 0x80000
add byte [rax], al
or byte [rax], al
je 0x18000aabe
rol edx, 0x10
rol eax, 0x17
add eax, 0x231de177
sub ebx, 0xc9eb792
add ebx, esi
add ebx, eax
and ebx, 2
je 0x180005ab8
xor edx, 0xe0c09617
xor ebx, edi
xor esi, dword [rbp - 0x18]
add ebx, 0xcce2bdd0
xor ebx, 0x393b8d1d
add ebx, eax
add ebx, edi
and ebx, 0x80
je 0x1800012eb
rol esi, 0x1a
rol eax, 0x1a
sub eax, 0xe5b6b109
jmp 0x18000282a
rol ebx, 0xb
sub ebx, 0xd3b775ea
add ebx, eax
add ebx, ecx
add ebx, edi
and ebx, 0x40000000
je section..text
sub ebx, 0x34d24974
sub esi, 0x25a1f1e8
xor eax, 0x94a94034
sub ebx, 0xe0393e3d
add ebx, esi
add ebx, edx
and ebx, 0x40000000
je 0x180005bb6
rol edx, 0x12
rol ebx, 0xf
sub ebx, 0x683d4218
rol edi, 5
sub edx, 0xd0f24a84
add ebx, ecx
add ebx, edx
and ebx, 0x800
je 0x1800022e0
add eax, 0x955e59ec
xor ecx, dword [rbp - 8]
ror ecx, 0x13
rol eax, 5
xor eax, 0xe028ef68
jmp 0x180003ef9
mov esi, 0x1c0cb413
mov ebx, 0xa9de66f7
mov ecx, 0x1cefa332
mov edx, 0xedf33532
mov rsp, rbp
mov dword [rbp - 8], 0x267438dd
sub rsp, 0x20
mov edi, 0x994a22ef
inc dword [rbp - 0x18]
mov eax, dword [rbp - 0x18]
jmp 0x18000160a

Function at 0x1800076f4
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x20
mov esi, 0x1c0cb413
inc dword [rbp - 0x18]
mov eax, dword [rbp - 0x18]
jmp 0x18000160a

Function at 0x180007730
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xor esi, 0xd5f935e4
xor edi, 0xcf7ac8a5
rol edx, 0x13
xor edi, 0x49789ed7
sub eax, 0x9b29c1db
add ebx, edi
add ebx, ecx
and ebx, 0x200
je 0x18000a8d2
xor eax, ecx
ror eax, 0xb
add edi, 0xfc7f8094
sub edi, 0xbbaa1ab4
Function at 0x1800077a8
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov ebx, 0xa9de66f7
mov rsp, rbp
mov edx, 0xedf33532
sub rsp, 0x20
add dword [rbp - 0x18], 1
mov eax, dword [rbp - 0x18]
mov dword [rbp - 8], 0x267438dd
mov esi, 0x1c0cb413
jmp 0x18000160a

Function at 0x1800078a0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add edi, 0x1ab1bc7a
ror eax, 0x1f
add esi, 0x1312a0ef
add ebx, esi
add ebx, ecx
and ebx, 0x400
je 0x180004c74
xor esi, ebx
rol edx, 0x13
ror edi, 3
jmp 0x180004e9a
Function at 0x1800083e0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add edx, 0xbc5be9ac
sub eax, 0xed07658b
add edi, 0xd97a52d9
jp 0x1800083cb
Function at 0x1800088f8
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edx
and ebx, 0x40000
je 0x18000a8d2
add eax, 0x4866fe80
add edx, 0x88079b27
ror edx, 0x11
ror ecx, 5
add ebx, ecx
add ebx, edx
and ebx, 0x800
je 0x1800012eb
add esi, 0xddd5a6d2
sub eax, 0xa4476591
rol ecx, 4
jmp 0x180003481
Function at 0x180009010
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add byte [rax], al
add byte [rax], cl
je 0x18000110a
rol edi, 0x18
add esi, 0x188dfd66
rol esi, 0xd
xor ecx, edi
xor eax, 0xa50b8ae0
add ebx, ecx
add ebx, eax
and ebx, 0x100000
je 0x1800078cc
add ebx, 0x526cb891
add edi, 0xa8bd5edc
xor edx, 0x525e4528
ror edi, 0x10
sub ecx, 0x49932e27
add ebx, edx
add ebx, eax
and ebx, 0x40000
je 0x18000a127
sub edi, 0xe7bb880b
rol ecx, 0xf
sub edx, 0x45bc82b6
ror esi, 0xc
ror esi, 0x1c
jmp 0x1800085b5
add dword [rbp - 8], 0x9be08579
xor ebx, dword [rbp - 8]
xor eax, edx
rol ebx, 7
xor ecx, 0xdfb0e575
add ebx, ecx
add ebx, edi
add ebx, eax
and ebx, 0x40000
je 0x180002b5c
add edi, 0x561485fe
ror ecx, 6
xor edi, 0xce312761
sub ebx, 0xe01c53ef
add esi, 0xca06574
add ebx, ecx
add ebx, esi
and ebx, 0x20
je 0x18000acb9
add edx, 0xa1635c5a
xor eax, 0x4cbdc129
xor ebx, ecx
ror edi, 0xb
sub edi, 0xf831ec2
add ebx, ecx
add ebx, edi
and ebx, 0x40000
je 0x18000613c
sub edi, 0x59c32448
xor eax, 0xab186f51
add ecx, 0x7ff3009a
jmp 0x180003e4a
mov ecx, 0x1cefa332
mov ebx, 0xa9de66f7
mov esi, 0x1c0cb413
mov rsp, rbp
mov edx, 0xedf33532
mov dword [rbp - 8], 0x267438dd
mov edi, 0x994a22ef
sub rsp, 0x20
add dword [rbp - 0x18], 1
mov eax, dword [rbp - 0x18]
jmp 0x18000160a

Function at 0x180009130
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
in al, dx
and byte [rax], al
add byte [rax], al
add dword [rbp - 0x18], 1
mov eax, dword [rbp - 0x18]
mov ebx, 0xa9de66f7
mov esi, 0x1c0cb413
mov edi, 0x994a22ef
jmp 0x18000160a
Function at 0x18000a970
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
and byte [rax], al
add byte [rax], al
mov ecx, 0x1cefa332
mov edi, 0x994a22ef
mov dword [rbp - 8], 0x267438dd
inc dword [rbp - 0x18]
mov eax, dword [rbp - 0x18]
jmp 0x18000160a

Function at 0x18000aa90
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 8], 0x725fe094
xor ebx, dword [rbp - 8]
rol ebx, 0xf
add ecx, 0x753f684e
xor eax, dword [rbp - 8]
xor edi, esi
xor edi, ecx
add ebx, eax
add ebx, esi
and ebx, 0x80000
je 0x180009c95
ror ebx, 0x18
rol esi, 2
sub eax, 0xaed4ac76
add esi, 0xfb518f5f
sub ebx, 0xd6a3802e
add ebx, ecx
add ebx, edx
and ebx, 0x2000000
je 0x18000282a
xor edi, dword [rbp - 8]
add ecx, 0xb8243eb6
sub ecx, 0xfd2043c5
add ebx, eax
add ebx, ecx
and ebx, 0x200
je 0x180008306
sub edi, 0xde77a7a1
sub eax, 0x85169f19
sub ecx, 0x96ab8995
xchg esi, eax
rol esi, 0xf
sub ebx, 0x35fb9c3f
jmp 0x180002410
add dword [rbp - 8], 0xc462930d
xor ebx, dword [rbp - 8]
ror edx, 0xf
rol esi, 0x1a
xor edi, 0x8dbf85f2
ror edx, 6
add ebx, ecx
add ebx, edx
add ebx, edi
and ebx, 0x80000000
je 0x180004541
add ebx, 0xa5ede752
add esi, 0x2c90a126
ror ecx, 0x12
ror esi, 5
ror esi, 8
add ebx, edx
add ebx, esi
add ebx, eax
and ebx, 0x100000
je 0x180008174
xor ebx, eax
add edx, 0xfae8d8d
sub ecx, 0x63164d40
sub esi, 0x5b8aba1b
ror edi, 0x1e
add ebx, esi
add ebx, edi
and ebx, 0x100000
je 0x18000260e
ror edx, 8
sub ebx, 0x7a239a38
ror ebx, 3
jmp 0x180004116
add dword [rbp - 8], 0x721a664e
xor ebx, dword [rbp - 8]
add ecx, 0x6478a03f
rol esi, 3
ror edx, 0x1e
add ebx, ecx
add ebx, edi
and ebx, 0x200000
je 0x1800070bc
add edx, 0x73db120
add esi, 0x173939a2
add ecx, 0xc5721e76
ror edx, 0x13
add ebx, esi
add ebx, edx
and ebx, 2
je 0x1800037c0
xor esi, 0x958e57ef
ror ebx, 0x1a
ror edi, 0xb
rol esi, 0xc
ror ecx, 0x11
add ebx, edi
add ebx, ecx
and ebx, 0x2000
je 0x1800017d3
ror ecx, 8
ror esi, 0xb
rol edx, 0x15
sub esi, 0x21707609
rol edx, 0x13
jmp 0x1800022e0
add ebx, 0x592c80da
add ebx, ecx
add ebx, edx
add ebx, edi
and ebx, 0x4000000
je 0x180001db2
rol eax, 0x15
xor edx, 0xffd7494c
xor ecx, edx
sub edi, 0x58076376
jmp 0x180003481

Function at 0x18000ab40
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push rdx
jge 0x18000abae
clc
rol dword [rdi + rax*2 + 0x78], 1

Function at 0x18000ae10
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edi, 0x994a22ef
mov ebx, 0xa9de66f7
mov ecx, 0x1cefa332
mov rsp, rbp
sub rsp, 0x20
mov dword [rbp - 8], 0x267438dd
inc dword [rbp - 0x18]
mov eax, dword [rbp - 0x18]
jmp 0x18000160a