joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180001160
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add byte [rax], ah
add byte [rdi], cl
test byte [rbx - 0x3effff88], dh
enter 0xffffffffffff810c, 0xfffffffffffffff6
mov edi, dword [rcx - 0x387ee56a]
mov dword [rdx + rbx + 0x1cb01c9], edx
and ebx, 0x1000
je 0x1800017d6
add esi, 0xb3989d3d
add esi, 0xeebeb89b
wait
mov eax, 0xc6c1eebe
add al, byte [rcx - 0x73a1ab3e]
xor ecx, ebp
invalid
mov dword [rax], eax
invalid

Function at 0x1800011c0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edi
add ebx, esi
and ebx, 0x40
je 0x180001565
ror eax, 8

Function at 0x1800011d0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
sub edi, 0xe09ae923
xor edx, dword [rbp - 0x18]
add ebx, eax
add ebx, esi
and ebx, 1
je 0x180003d0b
add ecx, 0x61aea36f
xor ebx, eax
add ebx, 0x2251907e
xor esi, 0xde47d696
add ebx, edi
add ebx, edx
add ebx, esi
and ebx, 0x80000000
je 0x180006709
rol ebx, 0xc
sub edi, 0xbb319c65
rol edi, 0x1d
jmp 0x180007df0

Function at 0x180001380
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push di
test byte [rax - 0x3f], ah
leave
adc al, 0x81
out dx, eax
add esp, ebp
pop rsi
invalid

Function at 0x1800013d0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
pop rsi
add ebp, esi
jmp 0x18000aa28
mov ebx, 0x3d0ff0e4
mov rsp, rbp
mov edi, 0x34674c55
sub rsp, 0x20
mov ecx, 0x9eb61871
mov esi, 0x2b2128fc
inc dword [rbp - 8]
mov edx, 0xbc76ecca
mov dword [rbp - 0x18], 0x9585447b
mov eax, dword [rbp - 8]
jmp fcn.18000a066
add dword [rbp - 0x18], 0x49f3a239
xor ebx, dword [rbp - 0x18]
xor edx, ecx
sub ecx, 0x4c90ab87
ror esi, 0x13
ror edi, 6
rol eax, 0x16
add ebx, ecx
add ebx, edi
add ebx, esi
and ebx, 0x2000
je 0x180005b76
add edx, 0xa81b4bb0
rol edi, 0x1d
sub edi, 0xf6c03c34
add ebx, eax
add ebx, esi
add ebx, ecx
and ebx, 0x200000
je 0x18000412d
rol edi, 5
rol eax, 0x1b
sub edx, 0xa133cb3a
add edx, 0xf0d3080a
add ebx, eax
add ebx, esi
add ebx, edi
and ebx, 0x400
je 0x180006ed6
ror eax, 0xb
rol ebx, 0x18
ror edx, 0x1a
sub ebx, 0x42598c35
jmp 0x180003a7b
add dword [rbp - 0x18], 0x6c7b86f7
xor ebx, dword [rbp - 0x18]
rol ebx, 8
rol esi, 0xd
xor edx, 0x760d7308
xor esi, 0x523d951a
add ebx, edi
add ebx, ecx
add ebx, eax
and ebx, 0x1000
je 0x18000a3a0
xor ebx, 0xc2931f20
xor ebx, 0x6b2d94db
xor edx, dword [rbp - 0x18]
add ebx, edi
add ebx, eax
and ebx, 0x1000000
je 0x1800058c2
rol edi, 0x12
xor eax, ecx
add ecx, 0xe9860939
rol edi, 4
add ebx, esi
add ebx, ecx
add ebx, eax
and ebx, 0x4000000
je 0x180008bda
rol ebx, 0xf
xor eax, edx
xor ecx, dword [rbp - 0x18]
add edx, 0xf7b63cb0
jmp 0x180004e26
Function at 0x180001430
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edi
add ebx, eax
and ebx, 0x100000
je 0x180002249
rol eax, 0x17
xor edx, 0xf34f8c25
ror ecx, 0x17
rol esi, 0x13
jmp 0x180006ed6

Function at 0x180001470
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ecx, 0x3ae8456c
add ebx, esi
add ebx, edi
and ebx, 0x40000000

Function at 0x180001480
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
je 0x180002798
xor ecx, eax
xor eax, ecx
add edi, 0x9e6b32b8

Function at 0x180001490
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edx
add ebx, ecx
add ebx, eax
and ebx, 0x2000
je 0x180007df0
add esi, 0xff17feaa
rol eax, 0x12
xor esi, 0x8628c8df
sub edx, 0xf2c0eecb
add ebx, edx
add ebx, edi
and ebx, 1
je fcn.18000322c
add ecx, 0x217601c5
sub esi, 0x4da7fc72

Function at 0x1800014d0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xor eax, 0x9704f03b
jmp 0x180009847
add dword [rbp - 0x18], 0x4fbab1e0
xor ebx, dword [rbp - 0x18]
xor eax, 0x4f2dfcc5
rol ebx, 9
xor eax, dword [rbp - 0x18]
xor ecx, dword [rbp - 0x18]
add ebx, edi
add ebx, eax
add ebx, ecx
and ebx, 0x10
je 0x18000a9a0
xor edx, dword [rbp - 0x18]
xor eax, ecx
xor esi, ebx
add ebx, edi
add ebx, esi
and ebx, 0x2000
je 0x180006b44
rol edi, 4
add esi, 0x7df7656b
xor ebx, 0xaa878d52
add ebx, edi
add ebx, ecx
and ebx, 0x1000000
je 0x180009d3d
xor ecx, 0xbd86e666
sub edi, 0x574f87e
sub edx, 0xee2410ca
sub edi, 0xec97006a
jmp 0x180007582
jmp fcn.18000ae12

Function at 0x180001500
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
je section..text
ror edx, 0x15
ror edx, 0x14
ror esi, 0x1b
rol ecx, 0x18
rcr dword [rax], 0x81
call 0x1e70a76a6

Function at 0x180001530
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
rcr dword [rax], 0x81
call 0x1e70a76a6
add ebx, esi
add ebx, edx
and ebx, 0x800000
add byte [rax], 0xf
test byte [rbp + 0x62], ch
add byte [rax], al
xor ecx, 0x21146d66
sub esi, 0xcb80027a
jp 0x180001534
invalid
retf
rol esi, 3
add ecx, 0x2f82a815
add ebx, esi
add ebx, edx
add ebx, edi
and ebx, 0x200000
je 0x180003819
invalid
Function at 0x180001720
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0xbf448c0c
xor ebx, dword [rbp - 0x18]
ror eax, 0x16
sub ebx, 0xa500dfa1
ror ebx, 0x1e
xor ebx, 0x98efee99
add ebx, 0xfd12fa00
add ebx, esi
add ebx, edx
add ebx, ecx
and ebx, 0x20000
je 0x180007795
ror esi, 0x1b
add edx, 0xf3541c05
add eax, 0x9f09573e
add ebx, edx
add ebx, eax
add ebx, ecx
and ebx, 0x20
je 0x180006709
xor esi, dword [rbp - 0x18]
xor ecx, edx
rol edx, 0x14
add ebx, edx
add ebx, edi
and ebx, 0x40
je 0x180007a8c
add edx, 0xa1dd7ce4
ror edi, 0x11
sub eax, 0xd58b127c
add eax, 0x93bf60ab
jmp 0x180004eb8
add dword [rbp - 0x18], 0x55bf6a09
xor ebx, dword [rbp - 0x18]
sub eax, 0xa75042b
add edi, 0x90041f86
xor ecx, 0xb8a57a8d
sub edi, 0xb7a68ff9
sub edi, 0xd399401e
add ebx, esi
add ebx, edi
add ebx, edx
and ebx, 4
je 0x1800094f6
add ecx, 0xca3cf73f
add ebx, 0x44a74ef7
xor esi, 0xc06599
sub ebx, 0xe9a1b3da
rol ecx, 0x1a
add ebx, eax
add ebx, ecx
add ebx, edx
and ebx, 0x1000
je 0x1800047b6
rol ebx, 8
sub ecx, 0x202fe8e3
add edx, 0x45f3043c
xor edi, edx
sub ebx, 0x604cb2ee
add ebx, eax
add ebx, edx
and ebx, 0x20000000
je 0x180007a8c
add eax, 0xb0eb4a8d
add ecx, 0x865096cb
rol edx, 4
rol eax, 4
ror esi, 0x1b
jmp 0x1800093db
mov ebx, 0x3d0ff0e4
mov ecx, 0x9eb61871
mov edx, 0xbc76ecca
mov esi, 0x2b2128fc
mov edi, 0x34674c55
mov rsp, rbp
sub rsp, 0x20
mov dword [rbp - 0x18], 0x9585447b
inc dword [rbp - 8]
mov eax, dword [rbp - 8]
jmp fcn.18000a066
add dword [rbp - 0x18], 0x2af4534c
xor ebx, dword [rbp - 0x18]
add edx, 0xfba92f58
xor ecx, eax
add edx, 0x34d9f615
add ebx, eax
add ebx, esi
add ebx, edi
and ebx, 1
je 0x1800032a8
rol ecx, 0xf
ror esi, 0xe
xor esi, 0x9f4ec41b
xor ecx, dword [rbp - 8]
add ebx, edx
add ebx, ecx
add ebx, eax
and ebx, 0x40000000
je 0x180009127
rol esi, 0x1e
sub edx, 0x4882e350
sub ecx, 0x7164c7a1
add ebx, esi
add ebx, ecx
add ebx, edi
and ebx, 0x10
je 0x18000754d
add ecx, 0x147d5c8
sub eax, 0xc2947d59
add eax, 0x86b4e7de
jmp 0x18000689b
Function at 0x180001900
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x20
mov dword [rbp - 8], 0x19aa32d
jmp 0x180008638

Function at 0x180001ad0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
sub edx, 0x98b4fe26
xor edi, 0xa87ff11c
sub edx, 0x64165972
add ebx, ecx
add ebx, edi
add ebx, edx
and ebx, 0x8000000
je 0x1800098c2
add ebx, 0xeb621b02
rol edx, 0x17
invalid
out dx, eax
invalid

Function at 0x180001ca0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x20
mov dword [rbp - 8], 0x19aa32d
jmp 0x18000257d

Function at 0x180001ce0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x20
mov dword [rbp - 8], 0x19aa32d
jmp 0x180008638
add dword [rbp - 0x18], 0xe14c9eb0
xor ebx, dword [rbp - 0x18]
ror ecx, 0xf
sub esi, 0x4e0dc06b
ror ebx, 0x1f
xor ebx, 0x6cdcb077
xor ecx, 0xacaf2fb0
add ebx, edx
add ebx, eax
and ebx, 0x200000
je 0x180007a8c
add edi, 0xef714fcf
sub ecx, 0xbd5b1fb7
ror eax, 0x1b
add ebx, ecx
add ebx, esi
add ebx, edx
and ebx, 0x40000
jrcxz 0x180008682
add byte [rax + rax], al
je 0x1800041ba
add edi, 0x8ca91e42
sub edi, 0x1fcd4ae0
add esi, 0x5312daf0
add ebx, ecx
add ebx, esi
and ebx, 0x40000000
je 0x18000412d
add esi, 0xdcd0354a
sub ecx, 0x13040591
add edi, 0xed62d30
jmp 0x1800029b0

Function at 0x180001d00
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
call 0x10113e8c6
jmp 0x188aec571

Function at 0x180001ed0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edi
and ebx, 0x1000
je 0x1800085b9
add ecx, 0xe9784a0
xor edi, 0x84167bac
sub esi, 0xb9ce5a82
sub ebx, 0xc91e2e89
jmp 0x180006e48
add dword [rbp - 0x18], 0x933ff288
xor ebx, dword [rbp - 0x18]
rol ebx, 0xf
ror esi, 0x19
ror edx, 0x1d
add ebx, edi
add ebx, eax
add ebx, ecx
and ebx, 4
je 0x1800017d6
ror esi, 7
rol edi, 0x1c
rol ecx, 0x14
ror esi, 0x18
sub esi, 0x46313bd5
add ebx, edx
add ebx, ecx
add ebx, edi
and ebx, 0x4000000
je 0x1800029b0
add eax, 0x4cee3749
rol ecx, 3
add eax, 0x3ec30747
add edx, 0xc1404dac
add ebx, ecx
add ebx, esi
and ebx, 0x40000000
je 0x180004245
invalid
invalid
invalid
invalid
sub edi, 0xd9a78c5c
rol ebx, 7

Function at 0x180002170
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xchg ebx, eax
xlatb
rol esi, 0x1d
ror edx, 0x13
rol eax, 3
jmp 0x180003d0b
Function at 0x180002390
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
out dx, eax
sti
jo 0x180002395
ret
add ebx, edi
and ebx, 0x100
je 0x1800098c2
xor eax, dword [rbp - 8]
xor ebx, dword [rbp - 0x18]
xor eax, ebx
rol edi, 0x1d
xor edi, dword [rbp - 0x18]
add ebx, ecx
add ebx, esi
add ebx, eax
and ebx, 1
je 0x1800074c7
xor ecx, 0x38991e7a
sub esi, 0x66af8c5c
xor edx, 0x5253c936
jmp 0x180009ca8
add dword [rbp - 0x18], 0x15808379
xor ebx, dword [rbp - 0x18]
sub edi, 0xf69cda4e
rol esi, 0x13
sub ebx, 0xfb63dfe5
xor ecx, 0xe04ac2fb
rol ecx, 0x11
add ebx, edx
add ebx, ecx
add ebx, edi
and ebx, 0x100
je 0x180001bb6
xor edi, 0x6c1c3809
ror eax, 0x11
sub edx, 0x57c125f1
add ebx, ecx
add ebx, edx
add ebx, eax
and ebx, 0x40000
je 0x180003bfd
add edi, 0xda2bb5c9
sub edx, 0x99177571
add edx, 0x6010be54
add ebx, eax
add ebx, edi
add ebx, edx
and ebx, 0x40
je 0x180003819
sub ebx, 0xae5ee4af
xor eax, edx
add edi, 0x6591e0c2
add esi, 0x6a6a525
sub esi, 0x546fd7d7
jmp fcn.18000322c
Function at 0x180002600
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
ror edi, 0x13
ror edx, 0x12
rol edi, 0x14
xor edx, 0x31659f91
rol edx, 0x11
add ebx, esi
add ebx, eax
and ebx, 0x400
je 0x1800042d1
sub ebx, 0x3dcbef3d
sub eax, 0x4d3c6339
sub esi, 0x1c2867d4
rol eax, 0x1a
sub ebx, 0x3e7cdc98
add ebx, edi
add ebx, ecx
and ebx, 0x40000000
je 0x180009dc5
xor ebx, edi
xor edx, dword [rbp - 8]
sub esi, 0xec2d442b
ror edx, 0x15
add ebx, ecx
add ebx, edx
add ebx, eax
and ebx, 0x1000
je 0x180003967
xor esi, dword [rbp - 0x18]
sub esi, 0xbeb47447
ror edx, 0x1c
add edi, 0x19cea766
jmp 0x180005f11
add dword [rbp - 0x18], 0x3519f8e7
xor ebx, dword [rbp - 0x18]
sub ebx, 0x5fb99fbc
add eax, 0x365a6f2a
rol edx, 0x1d
ror edx, 0xe
sub edi, 0x31cc9696
add ebx, edi
add ebx, edx
and ebx, 0x40000
je 0x180004e26
sub ecx, 0xd1650220
ror eax, 0xf
add esi, 0x5a4a0a07
rol edx, 0x12
add ebx, esi
add ebx, edx
and ebx, 0x20000
je 0x180006e48
add eax, 0xbf6f4e88
sub esi, 0xd5cfa9c4
sub eax, 0xc195cd4d
add ebx, edi
add ebx, edx
add ebx, esi
and ebx, 0x40000000
je 0x18000a80c
add edi, 0xcc0e51e1
sub eax, 0x2d657271
xor eax, dword [rbp - 0x18]
ror eax, 0x12
jmp 0x180009dc5
mov ecx, 0x9eb61871
mov ebx, 0x3d0ff0e4
mov esi, 0x2b2128fc
mov rsp, rbp
mov edi, 0x34674c55
mov edx, 0xbc76ecca
sub rsp, 0x20
inc dword [rbp - 8]
mov eax, dword [rbp - 8]
mov dword [rbp - 0x18], 0x9585447b
jmp fcn.18000a066
add dword [rbp - 0x18], 0x6feb8495
xor ebx, dword [rbp - 0x18]
xor eax, dword [rbp - 8]
add esi, 0x39ed8e0d
ror edi, 0x1c
rol eax, 0x17
ror ecx, 0x1b
add ebx, ecx
add ebx, eax
add ebx, edx
and ebx, 0x1000000
je 0x18000412d
add ecx, 0x5e1cb1f0
sub ecx, 0x36d1f3a8
sub ecx, 0xc8e9127c
ror eax, 8
add ebx, esi
add ebx, edi
and ebx, 2
je 0x180006b44
ror eax, 0x1b
sub ecx, 0x7690021f
sub ebx, 0x26bca75d
add ebx, eax
add ebx, ecx
and ebx, 0x2000000
je 0x180002921
add esi, 0xd4f5baae
add ebx, 0xdaf7c20a
sub eax, 0xcc673161
ror edx, 2
ror esi, 0x12
jmp 0x18000689b
add dword [rbp - 0x18], 0x9ceee9a8
xor ebx, dword [rbp - 0x18]
sub esi, 0xb7e4b51b
sub ebx, 0x3aa34e79
rol esi, 0x10
sub eax, 0xe56c9e39
add ebx, eax
add ebx, esi
and ebx, 0x200000
je 0x180008055
rol ebx, 3
xor ebx, esi
ror ecx, 0x1e
add ebx, edi
add ebx, ecx
add ebx, esi
and ebx, 0x10000000
je 0x18000a18e
ror ecx, 7
add esi, 0x1e203fa8
xor edx, dword [rbp - 0x18]
add ebx, 0x798b7293
add ebx, edx
add ebx, esi
add ebx, eax
and ebx, 0x200000
je 0x180005d9a
ror ebx, 0x13
ror ebx, 0x1c
sub eax, 0xf3b5ee14
add ecx, 0x604c58f
add edi, 0xc6714c93
jmp 0x18000785b

Function at 0x180002a60
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
and byte [rax], al
add byte [rax], al
inc dword [rbp - 8]
mov eax, dword [rbp - 8]
jmp fcn.18000a066
Function at 0x180002fa0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, esi
add ebx, edx
add ebx, edi
and ebx, 0x1000
je 0x180008f8f
rol ebx, 7
rol ebx, 0x1e
ror esi, 0x10
add ebx, eax
add ebx, edi
and ebx, 0x40000000
je 0x180004590
rol ebx, 0x13
sub ebx, 0x57e18b8e
rol edi, 6
add ebx, edx
add ebx, esi
and ebx, 0x10
je 0x1800032a8
rol edi, 0xa
sub ebx, 0x8c6e36ce
xor esi, eax
sub edx, 0x8dc6f6ce
jmp 0x18000a60b

Function at 0x180003850
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
ror edi, 3
add eax, 0x78cf2505
add ebx, edi
add ebx, esi
add ebx, eax
and ebx, 0x40
je 0x18000ad86
sub eax, 0x4e5895d3
add edx, 0xd6a86d2d
xor edx, ecx
xor edx, 0x32d4799c
rol eax, 5
add ebx, ecx
add ebx, eax
add ebx, edx
and ebx, 0x2000000
je 0x1800098c2
sub esi, 0x5db2bb80
add ebx, 0x33f428a7
rol esi, 0x17
xor edx, 0x967b5c72
rol ecx, 0xa
jmp 0x1800099d7

Function at 0x180003a70
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov cl, pe_nt_image_headers64
fadd st(1), st(0)
rcr byte [rcx + rbp*8], 0xb1
idiv edi
inc dword [rcx - 0x6bce17bb]
xor byte [rax + 0x33], 0x5d
call 0x10113064a
out dx, al
xchg ebp, eax
cwde
add dword [rax], 0xffffffc1
ret

Function at 0x180003e60
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, eax
and ebx, 0x40
je 0x18000689b
rol edi, 0x11
ror ebx, 0x18
ror ebx, 3
rol edx, 0xa
add ebx, esi
add ebx, eax
and ebx, 8
je 0x180002249
rol edi, 4
rol ebx, 2
rol ebx, 0x1d
ror ecx, 6
rol ecx, 0xd
jmp 0x18000ad86

Function at 0x180003f80
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x40d8888a
xor ebx, dword [rbp - 0x18]
add edx, 0xcc4b826d
sub eax, 0x775ad474
xor eax, 0x3e952895
add ebx, ecx
add ebx, edx
and ebx, 0x10000000
je 0x18000aaa8
xor ecx, 0x4c1afb6a
rol edi, 0x13
sub eax, 0xfb786e43
xor edx, dword [rbp - 0x18]
sub esi, 0x70fbef41
out dx, eax
sti
jo 0x180002395
ret
push rbp
mov rbp, rsp
sub rsp, 0x20
mov dword [rbp - 8], 0x19aa32d
jmp 0x18000234f

Function at 0x1800049a0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
ror ebx, 0xa
sub edi, 0xb9628806
add ebx, edx
add ebx, eax
and ebx, 0x400
je fcn.18000322c
sub ebx, 0x7d6dc3ac
rol edx, 9
ror eax, 3
add ebx, ecx
add ebx, edi
add ebx, edx
and ebx, 8
je 0x1800012db
add eax, 0x42566177
xor eax, ebx
rol esi, 9
jmp 0x180009127
Function at 0x180004be0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
rol eax, 0xc
ror edi, 0x11
sub eax, 0x324fc6d
rol edx, 5
add ebx, ecx
add ebx, eax
and ebx, 0x100000
je 0x1800042d1
ror esi, 4
ror esi, 0x10
rol eax, 4
jmp 0x1800019a3

Function at 0x180004d30
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
ror ebx, 6
add ebx, edx
add ebx, ecx
add ebx, eax
and ebx, 0x400000
je 0x1800094f6
ror eax, 0x15
xor edx, ecx
xor eax, 0x8f2137ef
ror edi, 0x13
add ebx, ecx
add ebx, edi
and ebx, 0x8000
je 0x180004e26
add ebx, 0xbbb74d6d
ror esi, 0x1d
ror edx, 0x1d
ror ebx, 0x15
add ebx, esi
add ebx, edx
add ebx, edi
and ebx, 0x2000
je 0x18000a69b
sub edi, 0x1b91512e
ror eax, 0x11
ror edx, 0x10
xor edx, 0x1c9a14a5
jmp 0x18000a517

Function at 0x180004e60
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
cmp eax, dword [rax]
call 0x1011f1e28
ret

Function at 0x180004fc0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
and ebx, 0x80000
je 0x180008055
ror edi, 0x17
rol eax, 0xf
ror eax, 0x1a
jmp 0x180003967

Function at 0x180005130
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
cld
sub byte [rcx], ah
sub edi, dword [rdx - 0x43891336]
mov edi, 0x34674c55
mov rsp, rbp
mov dword [rbp - 0x18], 0x9585447b
sub rsp, 0x20
mov ecx, 0x9eb61871
add dword [rbp - 8], 1
mov eax, dword [rbp - 8]
jmp fcn.18000a066

Function at 0x180005280
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov ebx, 0x3d0ff0e4
mov esi, 0x2b2128fc
mov rsp, rbp
mov edi, 0x34674c55
sub rsp, 0x20
mov ecx, 0x9eb61871
mov dword [rbp - 0x18], 0x9585447b
inc dword [rbp - 8]
mov eax, dword [rbp - 8]
mov edx, 0xbc76ecca
jmp fcn.18000a066
add edx, 0x51ec9fa8
rol eax, 0x1f
rol esi, 0xd
add ebx, eax
add ebx, ecx
and ebx, 0x80
je 0x180002798
xor edx, 0x6d51311d
add ebx, 0x989c5711
add edi, 0xb9363c44
sub ecx, 0x78073609
xor ecx, 0xd929e7eb
add ebx, eax
add ebx, esi
and ebx, 0x10000
je 0x18000a517
rol eax, 0x18
ror edi, 0xe
xor ebx, edx
xor ebx, 0x2cba8b1d
add esi, 0xe8abbaa2
add ebx, eax
add ebx, ecx
add ebx, edi
and ebx, 0x200
je 0x180001861
xor esi, ecx
add ecx, 0xaa3fbf96
ror esi, 9
ror edi, 0x1a
add edx, 0x72ff90e3
jmp section..text
Function at 0x180005340
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0xeb9b3232
xor ebx, dword [rbp - 0x18]
rol edx, 0x15
add edx, 0x638f2e75
sub ecx, 0xdc74a567
xor edx, ecx
add ebx, esi
add ebx, eax
and ebx, 0x40000000
je 0x1800091aa
xor edx, ebx
sub edx, 0xee8ffc9b
xor ebx, 0xd5ef17f
add ebx, esi
add ebx, eax
add ebx, edi
and ebx, 0x2000
je 0x1800041ba
sub ebx, 0x5a88f6d2
ror ecx, 0x1b
rol esi, 0x11
ror eax, 0x1b
ror ebx, 0xf
add ebx, edi
add ebx, ecx
add ebx, esi
and ebx, 0x100000
je 0x180007df0
add ecx, 0x1875d7a7
add ecx, 0xf8e822fc
add ebx, 0x489d548f
xor edx, eax
sub ebx, 0xaeab840
jmp 0x18000a517
mov ebx, 0x3d0ff0e4
mov esi, 0x2b2128fc
mov ecx, 0x9eb61871
mov edi, 0x34674c55
mov rsp, rbp
mov dword [rbp - 0x18], 0x9585447b
mov edx, 0xbc76ecca
sub rsp, 0x20
and byte [rax], al
add byte [rax], al
call 0x17f4a972c
xor ebx, dword [rbp - 0x18]
sub ecx, 0xd5c17aad
rol eax, 0x11
ror ebx, 0x17
xor ecx, dword [rbp - 8]
rol ebx, 0x1f
add ebx, esi
add ebx, ecx
and ebx, 0x400
je 0x180009b69
add edx, 0xef4a611
rol ebx, 4
rol ebx, 0xb
add edx, 0x17d30628
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x8000
je 0x1800017d6
add edi, 0xc211081d
add eax, 0x58da5917
ror esi, 0xb
add ebx, edi
add ebx, edx
add ebx, ecx
and ebx, 0x20000
je 0x180009d3d
ror edi, 0x1b
ror eax, 0x1f
xor esi, ebx
add ebx, 0x9791c9fa
jmp 0x180001620
add dword [rbp - 0x18], 0x1fd8731
xor ebx, dword [rbp - 0x18]
ror edi, 0x18
ror ebx, 5
xor edi, dword [rbp - 8]
rol edx, 0xc
add ecx, 0x8d841d3c
add ebx, esi
add ebx, ecx
and ebx, 0x20000
je 0x180002a3a
add esi, 0x1c48acd8
xor edx, edi
xor edi, 0xcbc69c6a
add ebx, ecx
add ebx, edx
and ebx, 0x400
je fcn.1800079f5
rol ebx, 5
sub edx, 0xac7692e3
add edx, 0x7b161644
sub edx, 0xaecec107
add ebx, ecx
add ebx, edi
add ebx, eax
and ebx, 0x1000
je 0x180003336
sub edx, 0x9959ac60
rol eax, 3
ror edi, 0xc
jmp 0x180004245

Function at 0x180005930
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
adc byte [rsi + 0x7bef81ab], ah
out 0x59, al
ffree st(1)
rol dword [0x12ede49c2], 0xb7
test al, 0xe9
jae 0x18000592d
invalid

Function at 0x180005e70
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edi
and ebx, 0x100000
je 0x180008055
add edi, 0x16368206
ror edi, 7
ror edi, 0x1e
xor edi, esi
sub edi, 0x622e10f1
add ebx, edx
add ebx, edi
add ebx, esi
and ebx, 0x8000000
je 0x180009322
add esi, 0xf35912f0
sub edx, 0xd7aa8fbd
ror edi, 0x1f
add ebx, eax
add ebx, ecx
and ebx, 0x200000
je 0x1800074c7
rol edi, 0xf
add edi, 0x203fc997
add ebx, 0xf22a20e
jmp 0x18000689b
mov rsp, rbp