joyce8/EMBER2024-capa huggingface dataset:
Function at 0x110107c40
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edi, 0xf5401631
mov esi, 0x4c56fe24
mov edx, 0xb18a46b0
mov ebx, 0xe0e7bf6e
mov ecx, 0x54a981c0
mov rsp, rbp
mov dword [rbp - 0x18], 0x9c168200
sub rsp, 0x20
inc dword [rbp - 0x20]
mov eax, dword [rbp - 0x20]
jmp fcn.110107d34
sub ebx, 0xe3096f77
add ecx, 0xf377b5e6
ror edi, 9
add ebx, edx
add ebx, edi
and ebx, 0x40
je fcn.1101026af
rol ebx, 0x14
ror ecx, 0x1f
ror eax, 3
sub edx, 0xaf435f25
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x10000
je fcn.11010533c
xor eax, dword [rbp - 0x20]
sub edx, 0x54474eb9
ror ecx, 3
add eax, 0x5f16139b
add ebx, edx
add ebx, ecx
add ebx, eax
and ebx, 0x40000
je fcn.1101022c7
xor ebx, 0xec8a921
ror edi, 8
ror edi, 5
jmp 0x11010817e
add byte [rax], al
add dword [rbp - 0x18], 0x33df64c1
xor ebx, dword [rbp - 0x18]
ror edi, 0xd
rol esi, 0x18
xor ecx, 0x6313efe7
add edx, 0xa9826c88
add eax, 0xa3a5c2c3
add ebx, esi
add ebx, eax
and ebx, 0x2000000
je fcn.1101095e4
rol edi, 0x12
sub esi, 0xd108d84d
ror edi, 5
xor eax, 0x8fa34a7f
add ebx, eax
add ebx, edi
and ebx, 0x40
je 0x110109be2
sub edi, 0x317a5c78
ror edi, 2
ror eax, 0x16
add ebx, esi
add ebx, edx
and ebx, 0x8000
je 0x110102f06
add esi, 0x61f361bd
sub ecx, 0xb3fdd64f
xor ebx, 0xf4967e92
rol eax, 0x18
jmp 0x1101013db

Function at 0x110107d20
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0xc6540c3b
xor ebx, dword [rbp - 0x18]
xor edx, edi
rol esi, 0x1d
add edx, 0xdbe01e0e
add ebx, edx
add ebx, eax
add ebx, edi
and ebx, 0x20000
je 0x1101023ba
ror edx, 0x1c
sub ecx, 0x8ff07fd
rol eax, 9
add ecx, 0x76ef0944
add ebx, eax
add ebx, edx
add ebx, edi
and ebx, 2
je fcn.1101015fc
xor ebx, 0x4aeba2f1
rol esi, 0x13
rol edi, 0x19
ror ebx, 0x11
ror ebx, 0x1f
add ebx, edi
add ebx, edx
and ebx, 0x10
je 0x1101013db
sub ecx, 0xc419f76
xor esi, 0xef64cc7b
ror ecx, 0x1f
ror edi, 0x10
rol edx, 0xf
jmp 0x110102a9c
add dword [rbp - 0x18], 0x399c9e11
xor ebx, dword [rbp - 0x18]
add eax, 0xc50501d4
ror edx, 0x13
rol esi, 0xc
add ebx, ecx
add ebx, edi
add ebx, eax
and ebx, 0x80000000
je 0x110109a47
add ecx, 0x7f9487b4
xor edi, eax
xor edi, dword [rbp - 0x20]
rol ecx, 0x1e
add ebx, 0x51aa5648
add ebx, eax
add ebx, ecx
add ebx, edx
and ebx, 0x8000000
je 0x11010a2ca
add edx, 0x98ff1224
ror edi, 0x10
xor ecx, 0x12a8426a
add ebx, eax
add ebx, esi
and ebx, 0x80000
je fcn.110109cf2
sub esi, 0x50b884bb
add eax, 0xc5bc3bdb
xor edx, esi
ror eax, 3
jmp 0x1101055d4
xor edx, 0x77134565
add edi, 0x998752db
rol eax, 4
add ebx, edi
add ebx, edx
and ebx, 0x20000000
je 0x110101f3a
sub edi, 0xdb78a47b
movsb byte [rdi], byte [rsi]
js 0x110107cfe
rol edx, 0x14
sub ebx, 0xb8d73b10
ror ebx, 0x17
jmp fcn.11010119a
Function at 0x110107e70
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add byte [rdi], cl
test byte [rbx], ch
sar edi, cl
inc dword [rcx + 0x727bbbf2]
iretd

Function at 0x110107ef0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
and ebx, 0x8000000
je fcn.110104c63
rol esi, 5
sub esi, 0x9af49300
add esi, 0x86c55e40
add ebx, edx
add ebx, eax
and ebx, 0x100
je fcn.11010533c
sub ecx, 0xa3a1ff96
ror eax, 0x13
add ebx, 0x2c0af71
ror edx, 0x1f
xor ecx, dword [rbp - 0x18]
add ebx, eax
add ebx, edi
add ebx, edx
and ebx, 0x8000000
invalid
invalid
invalid
invalid

Function at 0x110107fe0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
call 0x12d3af57a
xor ebx, dword [rbp - 0x18]
rol ecx, 0x14
add edx, 0x96bcf15e
ror ecx, 2
xor edi, ebx
add ebx, edi
add ebx, esi
and ebx, 0x800000
je 0x11010806a
xor eax, 0x96985f57
ror eax, 0x18
add edx, 0x3485b44d
rol ebx, 0x1e
sub eax, 0x19358bfc
add ebx, edi
add ebx, edx
and ebx, 0x4000000
je fcn.1101094d9
sub ecx, 0x26b657d4
add edx, 0xe5f73f01
ror ebx, 0x16
rol ecx, 0x1d
add ebx, edx
add ebx, esi
and ebx, 0x8000000
je 0x110101eab
add eax, 0xb803d6c0
ror ecx, 0x16
sub eax, 0xdb606e9d
add edi, 0xd0ae3af8
jmp 0x1101052b6

Function at 0x110108130
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edi
and ebx, 0x20
je 0x1101051a2
add eax, 0xf76b4e86
xor edx, edi
add edi, 0x61f8ac35
xor eax, 0xcd241e59
rol edi, 3
add ebx, eax
add ebx, ecx
add ebx, esi
and ebx, 0x80000000
je 0x110106fed
rol ecx, 0x15
xor edi, 0x8076e568
ror esi, 0x1c
sub esi, 0x1deb12c5
ror edx, 2
jmp fcn.11010202e
Function at 0x1101082c0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x40166df1
xor ebx, dword [rbp - 0x18]
ror ecx, 0x12
sub eax, 0x3ed3f1fa
rol edi, 5
add ebx, ecx
add ebx, esi
add ebx, edi
and ebx, 0x800
je 0x110108bfd
push rbp
add byte [rax], al
add eax, 0xbbe1f116
add esi, 0x91844d7b
xor ebx, 0x5746ddba
mov edx, 0x815746dd
lock xor dword [rbp - 0x7d], 0xe0f68111
jmp [rdi + 0x1fb010e]
retf
and ebx, 0x4000
je fcn.11010119a
sub ecx, 0xec8e0c99
add edx, 0x58852fd
rol esi, 8
sub eax, 0x3937d438
add ebx, edx
add ebx, esi
and ebx, 0x200000
je 0x1101076a4
add edx, 0x3a19dc31
xor edx, 0x687a7472
add eax, 0xae28c173
sub eax, 0xbbd4ac40
xor ecx, dword [rbp - 0x20]
jmp fcn.11010533c
je fcn.11010110f
sub ecx, 0x223a7437
ror ebx, 2
xor ecx, 0xdf702e23
sub ecx, 0x7bfb4f92
xor edi, esi
add ebx, esi
add ebx, eax
and ebx, 0x40
je fcn.1101017a9
rol eax, 0x14
add edx, 0x14d0eb28
add eax, 0x54ddb4af
rol esi, 0x19
add ebx, esi
add ebx, eax
and ebx, 0x2000
je 0x110105fe8
ror edx, 0xb
add edx, 0x9d8cca44
rol edi, 0xc
jmp 0x1101035fb
mov edx, 0xb18a46b0
mov edi, 0xf5401631
mov esi, 0x4c56fe24
mov ebx, 0xe0e7bf6e
mov rsp, rbp
mov dword [rbp - 0x18], 0x9c168200
sub rsp, 0x20
add dword [rbp - 0x20], 1
mov eax, dword [rbp - 0x20]
mov ecx, 0x54a981c0
jmp fcn.110107d34

Function at 0x110108480
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x5311f56d
xor ebx, dword [rbp - 0x18]
xor ecx, 0x54030e53
rol eax, 0x13
sub edi, 0x2103d8a6
add ebx, ecx
add ebx, edx
add ebx, esi
and ebx, 0x8000000
je 0x110102dff
xor ebx, esi
add eax, 0x80597ace
sub eax, 0xbeec2e49
add ecx, 0xff757ef1
ror edi, 0x17
add ebx, eax
add ebx, ecx
add ebx, edi
and ebx, 0x1000
je 0x110102842
sub edx, 0xefc8d94
sub edx, 0xc41929b5
xor esi, 0x3e4c0d81
rol edi, 0xd
rol esi, 0x13
add ebx, ecx
add ebx, esi
add ebx, edi
and ebx, 0x2000
je fcn.1101017a9
add edi, 0x3f866ed9
add eax, 0xd34a05e3
sub ecx, 0xec380651
add esi, 0x1712b905
jmp 0x110108427
add dword [rbp - 0x18], 0xa7ae0c29
xor ebx, dword [rbp - 0x18]
ror esi, 0x17
rol edx, 0x1e
add ecx, 0x2619597d
rol ecx, 0x1c
rol edx, 0x17
add ebx, edi
add ebx, esi
and ebx, 0x10000
je 0x11010a832
ror ebx, 8
sub ecx, 0x4bf6820c
xor eax, 0x3ccccd3d
rol eax, 0xe
add ebx, eax
add ebx, edx
and ebx, 0x400
je fcn.1101017a9
ror edx, 0x13
rol ecx, 0xa
xor edx, 0x6e4c6a1f
outsb dx, byte [rsi]
sub ebx, 0x9004cc53
ror eax, 7
add ebx, edi
add ebx, ecx
and ebx, 0x200
add byte [rdx], al
add byte [rax], al
je 0x11010a2ca
xor ecx, ebx
rol esi, 0x10
rol edx, 0xd
xor ecx, 0x7e86c815
jmp fcn.1101095e4
add dword [rbp - 0x18], 0xd57f026c
xor ebx, dword [rbp - 0x18]
sub ebx, 0x32381f5
rol edx, 0x16
ror ebx, 0xa
add ebx, eax
add ebx, edx
and ebx, 0x100000
adc byte [rax], al
in al, 0x4d
xor eax, 0x39b1794e
add eax, 0xbfe96e02
ror edx, 0x13
ror edi, 0xc
add ebx, eax
add ebx, esi
and ebx, 0x80
invalid
invalid
Function at 0x110108490
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x5311f56d
xor ebx, dword [rbp - 0x18]
xor ecx, 0x54030e53
rol eax, 0x13
sub edi, 0x2103d8a6
add ebx, ecx
add ebx, edx
add ebx, esi
and ebx, 0x8000000
je 0x110102dff
xor ebx, esi
add eax, 0x80597ace
sub eax, 0xbeec2e49
add ecx, 0xff757ef1
ror edi, 0x17
add ebx, eax
add ebx, ecx
add ebx, edi
and ebx, 0x1000
je 0x110102842
sub edx, 0xefc8d94
sub edx, 0xc41929b5
xor esi, 0x3e4c0d81
rol edi, 0xd
rol esi, 0x13
add ebx, ecx
add ebx, esi
add ebx, edi
and ebx, 0x2000
je fcn.1101017a9
add edi, 0x3f866ed9
add eax, 0xd34a05e3
sub ecx, 0xec380651
add esi, 0x1712b905
jmp 0x110108427
add dword [rbp - 0x18], 0xa7ae0c29
xor ebx, dword [rbp - 0x18]
ror esi, 0x17
rol edx, 0x1e
add ecx, 0x2619597d
rol ecx, 0x1c
rol edx, 0x17
add ebx, edi
add ebx, esi
and ebx, 0x10000
je 0x11010a832
ror ebx, 8
sub ecx, 0x4bf6820c
xor eax, 0x3ccccd3d
rol eax, 0xe
add ebx, eax
add ebx, edx
and ebx, 0x400
je fcn.1101017a9
ror edx, 0x13
rol ecx, 0xa
xor edx, 0x6e4c6a1f
outsb dx, byte [rsi]
sub ebx, 0x9004cc53
ror eax, 7
add ebx, edi
add ebx, ecx
and ebx, 0x200
add byte [rdx], al
add byte [rax], al
je 0x11010a2ca
xor ecx, ebx
rol esi, 0x10
rol edx, 0xd
xor ecx, 0x7e86c815
jmp fcn.1101095e4
add dword [rbp - 0x18], 0xd57f026c
xor ebx, dword [rbp - 0x18]
sub ebx, 0x32381f5
rol edx, 0x16
ror ebx, 0xa
add ebx, eax
add ebx, edx
and ebx, 0x100000
adc byte [rax], al
in al, 0x4d
xor eax, 0x39b1794e
add eax, 0xbfe96e02
ror edx, 0x13
ror edi, 0xc
add ebx, eax
add ebx, esi
and ebx, 0x80
invalid
invalid
Function at 0x110108690
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
je fcn.11010487c
add edx, 0x1416cd71
xor eax, dword [rbp - 0x20]
invalid

Function at 0x110108810
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edx
add ebx, edi
add ebx, esi
and ebx, 2
je 0x110106593
xor esi, ebx
xor ebx, 0xf9840883
ror ebx, 3
rol ecx, 0x13
xor esi, dword [rbp - 0x18]
add ebx, eax
add ebx, edi
add ebx, edx
and ebx, 0x8000000
je 0x11010887d
sub edx, 0xe7a373b0
add ebx, 0xce2c7d40
add ebx, 0x4c91b8d7
add ebx, edx
add ebx, eax
add ebx, edi
and ebx, 0x4000
je 0x11010a9f4
add eax, 0xe495ec8a
add esi, 0x4f2621f7
ror eax, 0x16
rol eax, 2
jmp fcn.11010533c
add dword [rbp - 0x18], 0x21998add
xor ebx, dword [rbp - 0x18]
sub ecx, 0xac81e576
ror ebx, 0xe
xor ebx, edi
add eax, 0x89b40345
add ebx, edx
add ebx, esi
add ebx, edi
and ebx, 0x10000000
je 0x1101076a4
ror edx, 0x19
rol ecx, 9
sub edi, 0x7cb554d6
add ebx, eax
add ebx, edx
and ebx, 0x4000000
je fcn.1101063e6
ror eax, 0x17
ror eax, 0x1d
rol edx, 0x15
sub edi, 0xa1a72b7

Function at 0x110108d10
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
inc dword [rcx - 0x352473a]
rol edi, 7

Function at 0x110108fc0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0xf9f8102f
xor ebx, dword [rbp - 0x18]
xor esi, 0xea5a69c2
xor ecx, esi
sub eax, 0xf14b274e
add ebx, ecx
add ebx, edi
add ebx, esi
and ebx, 0x800
je 0x11010322b
xor ebx, 0x8e9ae8fa
xor ecx, 0x2756a691
rol edi, 4
xor esi, 0xc47030d9
add edx, 0xdb30ca5d
add ebx, esi
add ebx, ecx
and ebx, 0x100000
je 0x110102a9c
sub ebx, 0x7adb505d
rol eax, 2
ror eax, 0x14
add edx, 0x313de514
add ebx, esi
add ebx, edx
and ebx, 0x100000
add dword [rbp - 0x18], 0x8ddf3257
xor ebx, dword [rbp - 0x18]
rol eax, 0x1e
add edi, 0xea5548ab
ror edx, 9
sub esi, 0x4d67b674
rol ebx, 0x1e
add ebx, edx
add ebx, esi
and ebx, 0x1000
je 0x110101b4f
ror ebx, 0x10
xor eax, edx
add ebx, 0x299a8c0f
add ecx, 0xfdcdf809
add ebx, ecx
add ebx, edi
and ebx, 0x20
je fcn.1101015fc
add edx, 0x4184d4e1
sub eax, 0xebac0e4
sub esi, 0xceb0fd4f
xor eax, dword [rbp - 0x18]
add ebx, edi
add ebx, eax
add ebx, esi
and ebx, 1
je fcn.1101063e6
xor edi, 0x67aaacfe
rol edx, 9
add ecx, 0x326347f3
sub eax, 0x606a6c58
xor edi, 0x5b699c1e
jmp fcn.110103fb1
sti
add ebx, ecx
and ebx, 0x8000
je 0x110106a5b
add eax, 0xb24b14ad
xor esi, dword [rbp - 0x20]
xor eax, dword [rbp - 0x20]
sub edi, 0xe5db7fa3
add ebx, ecx
add ebx, edi
and ebx, 0x8000
je 0x110102521
add ecx, 0xf499c380
add ecx, 0xd1de230b
add edx, 0x8ed8acc8
jmp fcn.1101026af

Function at 0x110109170
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
movabs al, byte [0xf18109c7c1e85d33]
mov r14d, 0xf281a4b6
mov cl, 0xeb
ret
Function at 0x110109300
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x84675db4
xor ebx, dword [rbp - 0x18]
sub ebx, 0xf49b4688
rol edi, 0x15
rol eax, 8
add ebx, ecx
add ebx, edx
and ebx, 0x10000
je 0x110101d0a
add eax, 0x919588af
rol esi, 0x1c
ror ecx, 0x12
add ebx, esi
add ebx, edx
and ebx, 0x4000000
je fcn.1101095e4
sub ecx, 0x8f0c53dc
sub edi, 0xb6cbbdf3
add eax, 0x26e0058a
rol ecx, 0x16
add ebx, edx
add ebx, esi
and ebx, 0x10000
je 0x1101054cb
rol esi, 4
sub edx, 0xeec793bd
add esi, 0x811b5118
xor eax, 0xa71471b2
inc dword [rcx - 0x43612339]
mov edi, 0x811ac2c1
call 0xca44157e
sub edi, 0x889956a0
add ebx, eax
add ebx, ecx
and ebx, 0x40000000
je 0x110109091
xor edi, ebx
sub edi, 0x98c3b5f3
add eax, 0xb818881a
add ebx, edx
add ebx, edi
and ebx, 2
invalid
test dh, dh
xchg ebx, eax
invalid

Function at 0x110109640
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0xcb39479b
xor ebx, dword [rbp - 0x18]
ror eax, 0x17
add esi, 0x689eb674
sub ebx, 0x2e73ff6f
add ebx, eax
add ebx, edi
and ebx, 0x40
je 0x11010a2ca
ror eax, 2
xor edi, 0x11a6aeae
sub edi, 0x8ec007bb
rol edi, 0xe
add esi, 0x3beee49a
add ebx, eax
add ebx, ecx
and ebx, 0x10
je 0x110107897
sub eax, 0xfda9ac77
rol ecx, 0x12
add eax, 0xb8b22d6
sub ebx, 0x4b6e9253
push rbx
xchg edx, eax
outsb dx, byte [rsi]
xor rbx, qword [r13 - 0x20]
add ebx, edi
add ebx, edx
and ebx, 0x400000
je 0x110102a9c
sub esi, 0xfed4e719
ror eax, 0x15
rol eax, 5
ror edx, 0xb
jmp 0x110105c16
Function at 0x110109720
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edi, 0xf5401631
mov rsp, rbp
sub rsp, 0x20
mov ebx, 0xe0e7bf6e
mov ecx, 0x54a981c0
inc dword [rbp - 0x20]
mov edx, 0xb18a46b0
mov dword [rbp - 0x18], 0x9c168200
mov esi, 0x4c56fe24
mov eax, dword [rbp - 0x20]
jmp fcn.110107d34
add dword [rbp - 0x18], 0xcb3bb9a6
xor ebx, dword [rbp - 0x18]
rol eax, 9
rol edx, 0x1e
add edx, 0x53466926
sub esi, 0x2d865a11
ror edx, 0x1f
add ebx, esi
add ebx, eax
and ebx, 0x2000000
je 0x110102a9c
sub esi, 0x3453daaf
ror ebx, 0xc
add esi, 0x1f03aa12
add ebx, ecx
add ebx, esi
add ebx, edi
and ebx, 0x400
je fcn.11010487c
ror edx, 8
ror edi, 0x13
ror ebx, 0x1a
xor ebx, 0x27dc72d1
rol edi, 0xa
add ebx, ecx
add ebx, esi
add ebx, eax
and ebx, 0x10
je 0x110101d0a
ror edi, 0x1e
ror ecx, 0x12
sub esi, 0x972c2c
jmp 0x1101073bf
add dword [rbp - 0x18], 0x41fa13d7
xor ebx, dword [rbp - 0x18]
xor eax, 0x7807a9ce
ror edx, 0x1b
rol eax, 3
add esi, 0x2a598eec
sub eax, 0xd1e7615b
add ebx, esi
add ebx, edx
and ebx, 0x10000000
je 0x110107aa2
rol ebx, 0x1e
sub ebx, 0x57c501a6
ror ebx, 0x17
add ebx, eax
add ebx, edx
add ebx, ecx
and ebx, 0x4000000
je 0x1101096ef
xor edi, 0xbd0f881b
add edi, 0xc5e67a91
add ebx, 0xe78bf2d3
rol esi, 0x1e
add ecx, 0x290f0174
add ebx, eax
add ebx, ecx
and ebx, 0x800
je 0x110106593
add eax, 0x212fc5bf
xor ebx, 0x3c15f7c6
xor edi, 0x6d82ce7f
add eax, 0x75d36be1
jmp fcn.1101063e6

Function at 0x110109cc4
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
je 0x110109c6d
xor ecx, 0xa3e3a165
rol edi, 9
add ebx, 0x39cb2fe6
ror edx, 0xd
jmp 0x1101055d4
add dword [rbp - 0x18], 0x18a96169
xor ebx, dword [rbp - 0x18]
xor ebx, dword [rbp - 0x18]
rol eax, 2
sub edx, 0x353acbac
add ebx, ecx
add ebx, edx
add ebx, eax
and ebx, 0x2000000
je 0x110107aa2
add edi, 0xa872d436
rol edx, 0x12
rol edi, 0xc
add ebx, ecx
add ebx, esi
add ebx, edx
and ebx, 0x100000
je 0x110109118
sub ecx, 0xee439297
ror edx, 0xf
add ebx, 0x933c47e3
add ebx, edx
add ebx, edi
and ebx, 0x2000
je 0x110105b0f
add esi, 0xfc507f39
rol eax, 5
add esi, 0x50a4c716
add eax, 0x3b785740
add eax, 0xa85c3f62
jmp fcn.11010202e

Function at 0x11010a540
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
rol edi, 0x1b
rol edx, 6
ror edi, 0xc
ror ebx, 0xd
sub edx, 0x6fdc582f
add ebx, esi
add ebx, ecx
and ebx, 0x8000
je 0x11010a2ca
rol edi, 0x1a
rol ecx, 0x11
ror eax, 0x15
sub ecx, 0x361a3434
add ebx, edi
add ebx, ecx
and ebx, 0x40
je fcn.1101095e4
xor esi, 0x3e8137a6
sub eax, 0x290d0a6
xor ecx, esi
ror edx, 4
xor esi, edi
jmp 0x110109be2
Function at 0x11010a660
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, eax
add ebx, ecx
add ebx, esi
and ebx, 0x4000
je 0x110102737
xor eax, 0x43a79aeb
rol edi, 0x18
xor ecx, dword [rbp - 0x18]
xor edx, ecx
add ebx, ecx
add ebx, edi
add ebx, esi
and ebx, 0x20
je fcn.1101015fc
invalid

Function at 0x11010a7c0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x40451b70
xor ebx, dword [rbp - 0x18]
add dword [rbp - 0x18], 0xeb58ccfc
xor ebx, dword [rbp - 0x18]
ror ebx, 0x14
ror ecx, 0x16
rol edx, 0x1e
add ebx, edi
add ebx, edx
and ebx, 0x40
je 0x110109be2
add eax, 0x43c81d8d
sub esi, 0xf442d81b
ror esi, 0x19
rol ebx, 0x10
add ebx, edx
add ebx, esi
and ebx, 0x20
je 0x110104b56
test byte [rbp - 0x1e], cl
invalid
invalid
sub edi, 0x963e9322
add edx, 0x398bb1d5
rol edx, 0x1b
add ebx, edi
add ebx, ecx
add ebx, eax
and ebx, 0x2000000
je fcn.1101026af
xor eax, ebx
xor ecx, dword [rbp - 0x20]
rol esi, 0x1d
rol ecx, 0x18
xor edx, 0xc3cf6224
jmp 0x110101eab
add dword [rbp - 0x18], 0x53307371
xor ebx, dword [rbp - 0x18]
add edi, 0x7baa75a4
xor edi, ebx
rol edx, 0x1d
add ebx, esi
add ebx, ecx
and ebx, 0x20
je 0x1101076a4
xor ebx, 0x60013da5
xor ecx, dword [rbp - 0x20]
ror ebx, 0xd
xor esi, dword [rbp - 0x18]
add ebx, edi
add ebx, eax
and ebx, 0x1000
je fcn.1101022c7
sub ebx, 0xe9ce1d42
sub ebx, 0xf23e50c3
ror ebx, 0x10
add ebx, eax
add ebx, esi
add ebx, edx
and ebx, 0x2000
je 0x1101068ca
rol edx, 0x14
ror ecx, 0xa
xor edx, dword [rbp - 0x20]
xor esi, 0x7df8d2f8
ror eax, 9
jmp 0x110109be2
add ebx, ecx
add ebx, esi
add ebx, eax
and ebx, 0x200
je 0x110106c90
add esi, 0x7a6eae7b
rol edx, 0x14
invalid
invalid
push rsp
invalid
invalid

Function at 0x11010a7e0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xadd edx, ecx
add al, 1
ret
Function at 0x11010aaa0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x88ecec01
xor ebx, dword [rbp - 0x18]
sub edx, 0xf9e8867a
ror edi, 0x13
ror ebx, 0xf
add ebx, ecx
add ebx, eax
and ebx, 0x400
je 0x110107e49
xor eax, edx
sub eax, 0x8b636a7d
rol ebx, 0xe
add ebx, eax
add ebx, edi
and ebx, 0x200000
je 0x11010806a
rol ecx, 0x14
sub esi, 0xf68592b3
ror eax, 0xb
xor edi, 0x617db381
add ebx, eax
add ebx, edi
and ebx, 8
je 0x110107c34
xor edx, 0x69aa1b86
sub ecx, 0xd4eb1009
add edi, 0xfcb13d69
xor edx, ebx
add edi, 0xee45d08e
jmp fcn.1101017a9
add dword [rbp - 0x18], 0x77ebf490
xor ebx, dword [rbp - 0x18]
xor edx, esi
inc dword [rcx + 0x65cc28f1]
add eax, 0x1902851c
rol edi, 0x1f
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x2000000
je 0x110102521
invalid
xor edx, dword [rbp - 0x20]
sub edi, 0x725ac09
add edx, 0xeb39b01f
add ebx, edi
add ebx, edx
add ebx, esi
and ebx, 0x40000000
invalid
invalid
invalid

Function at 0x11010ab00
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
call 0xd1157ac6
enter 0xffffffffffffc112, 0xffffffffffffffc8
add al, byte [rcx + 0x21628ce8]
in eax, 1
retf

Function at 0x11010acc0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
int 0xff
inc dword [rcx - 0x62921f3d]
sub esi, dword [rcx]
fiadd dword [rcx + 0x1a2185f2]
jbe 0x11010acd3
sti
add ebx, edx
and ebx, 0x400000
je 0x110102dff
add esi, 0x1d98017d
sub edx, 0x2cc82006
sub eax, 0xb4b73c22
add ebx, edi
add ebx, esi
and ebx, 0x10000
invalid
test dl, bh

Function at 0x11010ae1c
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
ror ecx, 0x1c
ror edi, 0x1c
rol ecx, 0x1a
rol ebx, 0x1a
ror ecx, 0x1f
jmp fcn.1101063e6

Function at 0x11010ae50
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x20
mov dword [rbp - 0x20], 0x1084a8f
jmp 0x110105690

Function at 0x11010aea8
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xor edi, 0xb05fd60
add eax, 0x9bcd922f
rol eax, 0x13
add esi, 0x268b32af
xor ecx, ebx
add ebx, eax
add ebx, edi
add ebx, esi
and ebx, 4
je fcn.1101015fc
xor edi, edx

Function at 0x11010aed0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
rol ecx, 3
rol ebx, 0x1e
rol ebx, 0x17
jmp 0x110109a47
Function at 0x11010af98
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, qword [rcx + 0x50]
push 0x18
pop rbx
xor rsi, rsi
xor rdx, rdx
mov dl, byte [rax]
cmp edx, 0x61
jb 0x11010afa8
sub edx, 0x20
sub esi, edx
xor esi, 0x8f04e000
rol esi, 0x1f
xor esi, edx
sub esi, 0x687db000
rol esi, 0x1b
add esi, edx
ror esi, 0x19
xor esi, edx
xor esi, 0xcbcfd000
rol esi, 0x1f
sub esi, edx
ror esi, 0x1f
dec rbx
add rax, 1
cmp rbx, 0
ja 0x11010af9b
push qword [rcx + 0x20]
pop rdx
mov rcx, qword [rcx]
cmp esi, 0x88e8a948
jne 0x11010af8e
mov qword [rbp - 0x28], rdx
mov rsi, qword [rbp - 0x28]
mov rdx, rsi
mov edx, dword [rsi + 0x3c]
add rdx, rsi
mov qword [rbp - 0x10], rsi
mov edx, dword [rdx + 0x88]
add rdx, rsi
mov ebx, dword [rdx + 0x1c]
add rbx, rsi
mov qword [rbp - 0x20], rbx
mov ebx, dword [rdx + 0x20]
add rbx, rsi