joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1101020c0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
ror edi, 0x1c
rol ebx, 0x14
rol eax, 0xc
add ebx, esi
add ebx, edx
add ebx, eax
and ebx, 0x4000000
je 0x110106478
xor esi, dword [rbp - 0x18]
invalid
invalid

Function at 0x110102100
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
ror ecx, 0x1a
add esi, 0xaf04f1d6
add esi, 0xc40edd2f
add ebx, edi
add ebx, eax
and ebx, 0x400000
je 0x110103812
rol eax, 3
xor ecx, dword [rbp - 0x20]
rol edi, 3
sub edx, 0x3cbd17f4
jmp 0x110109be2
jp 0x110102132
invalid
mov rsp, rbp
mov ebx, 0xe0e7bf6e
mov ecx, 0x54a981c0
sub rsp, 0x20
mov esi, 0x4c56fe24
mov dword [rbp - 0x18], 0x9c168200
add dword [rbp - 0x20], 1
mov edx, 0xb18a46b0
mov eax, dword [rbp - 0x20]
mov edi, 0xf5401631
jmp fcn.110107d34
add dword [rbp - 0x18], 0x115782eb
xor ebx, dword [rbp - 0x18]
xor ebx, eax
xor esi, 0x37f3dfd
sub ecx, 0x3af9f119
rol ebx, 6
xor edi, 0x441605d5
add ebx, ecx
add ebx, esi
add ebx, edx
and ebx, 0x100
je 0x110107918
xor edi, esi
ror esi, 0x14
sub ecx, 0xa53d56d0
sub ecx, 0x24da0943
ror edx, 4
add ebx, ecx
add ebx, edx
add ebx, esi
and ebx, 2
je 0x110101357
ror eax, 0x1a
ror ebx, 5
ror ebx, 0x15
sub eax, 0xb6419c4e
rol edi, 0x18
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x800000
je 0x110104ff4
rol edi, 0x17
sub edx, 0x9a47419b
xor esi, dword [rbp - 0x20]
jmp fcn.1101094d9

Function at 0x110102130
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
ror ecx, 0x1a
add esi, 0xaf04f1d6
add esi, 0xc40edd2f
add ebx, edi
add ebx, eax
and ebx, 0x400000
je 0x110103812
rol eax, 3
xor ecx, dword [rbp - 0x20]
rol edi, 3
sub edx, 0x3cbd17f4
jmp 0x110109be2
jp 0x110102132
invalid
mov rsp, rbp
mov ebx, 0xe0e7bf6e
mov ecx, 0x54a981c0
sub rsp, 0x20
mov esi, 0x4c56fe24
mov dword [rbp - 0x18], 0x9c168200
add dword [rbp - 0x20], 1
mov edx, 0xb18a46b0
mov eax, dword [rbp - 0x20]
mov edi, 0xf5401631
jmp fcn.110107d34
add dword [rbp - 0x18], 0x115782eb
xor ebx, dword [rbp - 0x18]
xor ebx, eax
xor esi, 0x37f3dfd
sub ecx, 0x3af9f119
rol ebx, 6
xor edi, 0x441605d5
add ebx, ecx
add ebx, esi
add ebx, edx
and ebx, 0x100
je 0x110107918
xor edi, esi
ror esi, 0x14
sub ecx, 0xa53d56d0
sub ecx, 0x24da0943
ror edx, 4
add ebx, ecx
add ebx, edx
add ebx, esi
and ebx, 2
je 0x110101357
ror eax, 0x1a
ror ebx, 5
ror ebx, 0x15
sub eax, 0xb6419c4e
rol edi, 0x18
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x800000
je 0x110104ff4
rol edi, 0x17
sub edx, 0x9a47419b
xor esi, dword [rbp - 0x20]
jmp fcn.1101094d9
Function at 0x110102150
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edx
and ebx, 0x800000
je 0x11010935e
rol edi, 0xc
sub eax, 0x13a81036
add ebx, 0xce15cc3a
ror ebx, 0xa
add dword [rbp - 0x18], 0x5060a239
xor ebx, dword [rbp - 0x18]
rol ebx, 0xc
rol edx, 0x1d
add edi, 0x2a33af2b
xor ecx, 0xb3a4e4de
rol ebx, 0xb
add ebx, ecx
add ebx, esi
add ebx, eax
and ebx, 0x1000000
je 0x110107918
invalid

Function at 0x110102170
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, ecx
add ebx, eax
add ebx, edi
and ebx, 0x20000
je 0x110101eab
add eax, 0x5c2c44c6
sub eax, 0xab2080d0
ror eax, 0x19
xor ebx, edi
add ebx, eax
add ebx, edx
and ebx, 0x8000000
je fcn.1101094d9
xor eax, 0x14f9f1d7
rol eax, 0x19
sub esi, 0x91536674
ror ebx, 0x1a
xor esi, 0x1ab54a96
jmp fcn.1101095e4

Function at 0x1101023a0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
or byte [rax], al
add byte [rdi], cl
test byte [rsp + rcx*2], al
add cl, al
ret 0x811a

Function at 0x110102460
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
rol edi, 8
sub ebx, 0x79523481
add eax, 0x1fd529cf
add ebx, edi
add ebx, edx
add ebx, eax
and ebx, 0x800
je 0x11010319f
xor ebx, 0x1786fe0
rol edi, 0x10
rol edi, 5
add ebx, ecx
add ebx, eax
add ebx, esi
and ebx, 0x400000
je fcn.11010ad9f
rol ecx, 0x17
sub esi, 0x39f21837
add esi, 0x3f0af1c6
jmp fcn.1101017a9
add dword [rbp - 0x18], 0x7fc659ae
xor ebx, dword [rbp - 0x18]
xor esi, ecx
rol esi, 0x11
add esi, 0xf54a5a0d
ror eax, 0x1c
add ebx, ecx
add ebx, esi
and ebx, 0x20000
je 0x110105ca7
ror eax, 0x17
add edi, 0xe0955292
add ecx, 0xc19c54dd
sub edx, 0xad7d9deb
ror edi, 8
add ebx, esi
add ebx, ecx
and ebx, 0x20000
je 0x110107918
ror ebx, 0x12
rol esi, 0xa
add eax, 0xabab35d2
ror esi, 0xc
add edx, 0x95da4b1e
add ebx, eax
add ebx, ecx
and ebx, 0x80000000
je 0x110101d0a
rol ebx, 0xf
xor esi, 0xa364cc0b
ror eax, 7
add edx, 0x67097073
jmp 0x110105fe8
Function at 0x110102a80
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov rsp, rbp
mov esi, 0x4c56fe24
mov edi, 0xf5401631
mov dword [rbp - 0x18], 0x9c168200
mov edx, 0xb18a46b0
mov ecx, 0x54a981c0
push rsp
sub rsp, 0x20
mov ebx, 0xe0e7bf6e
add dword [rbp - 0x20], 1
mov eax, dword [rbp - 0x20]
jmp fcn.110107d34
add dword [rbp - 0x18], 0xf615ccca
xor ebx, dword [rbp - 0x18]
xor edi, 0x3dd80890
xor esi, 0xb4d7b02a
rol ebx, 0x17
add ebx, 0x9203c885
ror esi, 0x14
add ebx, ecx
add ebx, esi
and ebx, 0x800000
je 0x110102521
xor edi, dword [rbp - 0x20]
rol eax, 8
sub esi, 0xefc952dc
rol ebx, 9
add ebx, eax
add ebx, esi
add ebx, edx
and ebx, 0x400
je 0x110105fe8
rol eax, 0xb
xor eax, ecx
sub esi, 0x2f10c02b
add edx, 0xbd42747f
ror edx, 0x1f
retf 0x11f
sti
add ebx, esi
and ebx, 0x40000
je 0x110102a63
sub ebx, 0x81e859d5
sub edi, 0x2979a08c
ror edi, 0x16
rol eax, 0x12
jmp fcn.11010487c
add dword [rbp - 0x18], 0xe121dd8b
xor ebx, dword [rbp - 0x18]
ror edx, 0x1d
rol ebx, 0x1c
rol edx, 4
add ebx, edx
add ebx, eax
and ebx, 0x200000
je 0x110105fe8
ror edx, 0x14
add ecx, 0xc85ccf18
sub ecx, 0x758d530d
ror ecx, 0x14
rol ecx, 0x1a
add ebx, esi
add ebx, edi
add ebx, ecx
and ebx, 0x40
je fcn.1101026af
ror ebx, 0x16
xor ecx, dword [rbp - 0x18]
ror esi, 0x1a
sub eax, 0xebb4aa75
add ebx, edi
add ebx, esi
and ebx, 0x20000
je fcn.1101063e6
ror ebx, 7
rol eax, 2
xor edx, 0x6e30e1fd
jmp 0x11010322b
push rbp
mov rbp, rsp
sub rsp, 0x20
mov dword [rbp - 0x20], 0x1084a8f
invalid
invalid

Function at 0x110102ab0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov ebp, 0x29eb817d
loopne 0x110102ad8
push 0xffffffffffffff81
jmp 0x110102a70
add eax, ecx
leave
sbb al, byte [rcx]
retf

Function at 0x110102ae0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
and ebx, 0x100000
je fcn.11010119a
xor esi, 0x72a3942b
rol ecx, 9
sub eax, 0x73c61be2
invalid
invalid
invalid
invalid
invalid

Function at 0x110102dc0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
rol ecx, 0x10
add ebx, eax
add ebx, esi
and ebx, 0x400
je fcn.1101095e4
xor eax, dword [rbp - 0x20]
xor esi, dword [rbp - 0x20]
rol esi, 4
rol eax, 0xe
add ebx, esi
add ebx, eax
and ebx, 0x2000000
je fcn.110103fb1
invalid
Function at 0x110102f60
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
je 0x11010945b
sub ecx, 0x5ba2af6a
xor edx, 0xff7f74e8
sub eax, 0x15733aec
add ebx, esi
add ebx, edi
and ebx, 0x1000000
je 0x110107918
xor esi, dword [rbp - 0x18]
xor esi, 0x3300c9ff
xor eax, dword [rcx - 0x32c54e0f]
imul eax, dword [rcx], 0xfffffff3
add ebx, edx
add ebx, edi
and ebx, 0x20
je 0x110106593
rol eax, 2
xor edx, 0x4db12de4
add edi, 0xf49c0064
add edx, 0x4b0c8068
jmp fcn.11010533c
add dword [rbp - 0x18], 0xfc6ad427
xor ebx, dword [rbp - 0x18]
ror ebx, 0x17
ror edx, 0xf
add ebx, 0x660f759d
xor ebx, edi
add ebx, ecx
add ebx, edx
and ebx, 0x8000
je fcn.11010ad9f
ror edi, 9
xor edx, 0x36efd569
rol edx, 0xc
rol ecx, 8
xor esi, 0xb33c9d4f
add ebx, esi
add ebx, eax
and ebx, 0x4000000
je 0x110105e6e
add esi, 0x70573070
ror eax, 0x1d
xor eax, 0xeb7b9f9a
add ebx, ecx
add ebx, edx
add ebx, eax
and ebx, 0x10
je 0x110105fe8
add ebx, 0xde2ce2b0
add ecx, 0xa1621b99
xor ebx, edi
jmp fcn.1101017a9
Function at 0x110102fc0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x760f9d17
xor ebx, dword [rbp - 0x18]
sub ebx, 0xa93610cf
sub esi, 0x7c452d3
sub esi, 0xb4d8c3c
rol eax, 4
add ebx, eax
add ebx, edi
and ebx, 0x10000000
je fcn.1101094d9
ror eax, 3
sub esi, 0x2d49992b
ror edi, 0xa
xor edx, esi
rol edx, 0xd
add ebx, edi
add ebx, ecx
and ebx, 0x200
je 0x110106190
add esi, 0x786912bb
ror esi, 0x10
add ecx, 0xcb681f9c
add ebx, esi
add ebx, edx
and ebx, 0x8000
add byte [rax], 0
je fcn.1101085ab
rol ecx, 2
ror ebx, 0x1c
ror edx, 0x1f
jmp fcn.1101032b9
add dword [rbp - 0x18], 0xeee65c7a
xor ebx, dword [rbp - 0x18]
ror edi, 6
iretd
invalid
rol ebx, 4
add ecx, 0xf5e1e6fe
sub eax, 0x2171f0b6
add ebx, eax
add ebx, ecx
add ebx, edi
and ebx, 0x10
je fcn.1101022c7
xor ecx, esi
xor ecx, 0xa688dbb4
sub edx, 0x6581c944
add ebx, esi
add ebx, edx
add ebx, edi
and ebx, 0x80000000
je 0x1101072a7
xor ecx, 0xbcd5c70
add edi, 0xc641008e
sub eax, 0xaf37caff
ror ecx, 0x1e
xor eax, 0xf2ede5b3
add ebx, edx
add ebx, edi
and ebx, 0x100000
je 0x110107aa2
rol edi, 0xd
sub edx, 0x5722f269
sub ecx, 0x81c10d8e
jmp 0x11010186a
add dword [rbp - 0x18], 0xbaf75012
xor ebx, dword [rbp - 0x18]
rol ecx, 2
ror ebx, 0xa
ror ebx, 0x1e
rol edi, 0xf
ror eax, 6
add ebx, eax
add ebx, esi
add ebx, edi
and ebx, 0x800000
jrcxz 0x110102fe2
add byte [rax - 0x3f7bf100], al
out dx, al
invalid
invalid
sub ebx, 0x490b9ec8
xor eax, edi
xor eax, ecx
add ebx, esi
add ebx, eax
and ebx, 8
je 0x110102625
xor ebx, 0x644e763d
ror edi, 0xb
sub ebx, 0x3ced4d3f
rol edx, 0x19
add ebx, edi
add ebx, ecx
and ebx, 0x1000000
je 0x11010806a
sub edx, 0x7d371c06
ror edx, 0x1b
ror ebx, 6
rol edi, 0x1f
add esi, 0x4b214701
jmp 0x110101d0a
add dword [rbp - 0x18], 0xb5f3e58a
xor ebx, dword [rbp - 0x18]
add esi, 0xfbf40493
sub ecx, 0xadd0d190
ror edi, 5
add ebx, edi
add ebx, ecx
add ebx, esi
and ebx, 2
je 0x110109564
rol esi, 2
ror esi, 5
rol ebx, 0x13
ror edi, 0x15
ror esi, 0xa
add ebx, ecx
add ebx, esi
add ebx, edx
and ebx, 0x2000
je 0x110101d0a
ror ecx, 0x19
ror eax, 4
ror esi, 0x17
ror eax, 0x1a
rol edx, 0x1c
add ebx, ecx
add ebx, edi
add ebx, eax
and ebx, 0x400000
je 0x110102737
add edi, 0xc9b38822
rol ecx, 0x11
sub esi, 0xdc70843f
ror eax, 0x19
add ecx, 0x1101ab03
jmp 0x110101357
add dword [rbp - 0x18], 0x974f1cb7
xor ebx, dword [rbp - 0x18]
xor edi, eax
sub esi, 0xf55db6b5
sub ecx, 0x3a96de1
ror eax, 0x18
add ebx, edx
add ebx, eax
add ebx, ecx
and ebx, 0x800
je 0x110102842
xor ecx, eax
ror edx, 0x12
rol edx, 0xe
add ebx, edx
add ebx, esi
add ebx, edi
and ebx, 0x4000
je 0x1101080f5
add edx, 0x9a1f64d3
rol edx, 0x12
ror edx, 8
add ebx, edx
add ebx, esi
and ebx, 0x40000000
je fcn.110102cb4
ror esi, 0xf
sub ebx, 0xaff72393
add ebx, 0xa2e1cc54
xor ebx, 0xf6aa613a
rol ecx, 0x1b
jmp 0x1101055d4
Function at 0x110102ffc
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x760f9d17
xor ebx, dword [rbp - 0x18]
sub ebx, 0xa93610cf
sub esi, 0x7c452d3
sub esi, 0xb4d8c3c
rol eax, 4
add ebx, eax
add ebx, edi
and ebx, 0x10000000
je fcn.1101094d9
ror eax, 3
sub esi, 0x2d49992b
ror edi, 0xa
xor edx, esi
rol edx, 0xd
add ebx, edi
add ebx, ecx
and ebx, 0x200
je 0x110106190
add esi, 0x786912bb
ror esi, 0x10
add ecx, 0xcb681f9c
add ebx, esi
add ebx, edx
and ebx, 0x8000
add byte [rax], 0
je fcn.1101085ab
rol ecx, 2
ror ebx, 0x1c
ror edx, 0x1f
jmp fcn.1101032b9
add dword [rbp - 0x18], 0xeee65c7a
xor ebx, dword [rbp - 0x18]
ror edi, 6
iretd
invalid
rol ebx, 4
add ecx, 0xf5e1e6fe
sub eax, 0x2171f0b6
add ebx, eax
add ebx, ecx
add ebx, edi
and ebx, 0x10
je fcn.1101022c7
xor ecx, esi
xor ecx, 0xa688dbb4
sub edx, 0x6581c944
add ebx, esi
add ebx, edx
add ebx, edi
and ebx, 0x80000000
je 0x1101072a7
xor ecx, 0xbcd5c70
add edi, 0xc641008e
sub eax, 0xaf37caff
ror ecx, 0x1e
xor eax, 0xf2ede5b3
add ebx, edx
add ebx, edi
and ebx, 0x100000
je 0x110107aa2
rol edi, 0xd
sub edx, 0x5722f269
sub ecx, 0x81c10d8e
jmp 0x11010186a
add dword [rbp - 0x18], 0xbaf75012
xor ebx, dword [rbp - 0x18]
rol ecx, 2
ror ebx, 0xa
ror ebx, 0x1e
rol edi, 0xf
ror eax, 6
add ebx, eax
add ebx, esi
add ebx, edi
and ebx, 0x800000
jrcxz 0x110102fe2
add byte [rax - 0x3f7bf100], al
out dx, al
invalid
invalid
sub ebx, 0x490b9ec8
xor eax, edi
xor eax, ecx
add ebx, esi
add ebx, eax
and ebx, 8
je 0x110102625
xor ebx, 0x644e763d
ror edi, 0xb
sub ebx, 0x3ced4d3f
rol edx, 0x19
add ebx, edi
add ebx, ecx
and ebx, 0x1000000
je 0x11010806a
sub edx, 0x7d371c06
ror edx, 0x1b
ror ebx, 6
rol edi, 0x1f
add esi, 0x4b214701
jmp 0x110101d0a
add dword [rbp - 0x18], 0xb5f3e58a
xor ebx, dword [rbp - 0x18]
add esi, 0xfbf40493
sub ecx, 0xadd0d190
ror edi, 5
add ebx, edi
add ebx, ecx
add ebx, esi
and ebx, 2
je 0x110109564
rol esi, 2
ror esi, 5
rol ebx, 0x13
ror edi, 0x15
ror esi, 0xa
add ebx, ecx
add ebx, esi
add ebx, edx
and ebx, 0x2000
je 0x110101d0a
ror ecx, 0x19
ror eax, 4
ror esi, 0x17
ror eax, 0x1a
rol edx, 0x1c
add ebx, ecx
add ebx, edi
add ebx, eax
and ebx, 0x400000
je 0x110102737
add edi, 0xc9b38822
rol ecx, 0x11
sub esi, 0xdc70843f
ror eax, 0x19
add ecx, 0x1101ab03
jmp 0x110101357
add dword [rbp - 0x18], 0x974f1cb7
xor ebx, dword [rbp - 0x18]
xor edi, eax
sub esi, 0xf55db6b5
sub ecx, 0x3a96de1
ror eax, 0x18
add ebx, edx
add ebx, eax
add ebx, ecx
and ebx, 0x800
je 0x110102842
xor ecx, eax
ror edx, 0x12
rol edx, 0xe
add ebx, edx
add ebx, esi
add ebx, edi
and ebx, 0x4000
je 0x1101080f5
add edx, 0x9a1f64d3
rol edx, 0x12
ror edx, 8
add ebx, edx
add ebx, esi
and ebx, 0x40000000
je fcn.110102cb4
ror esi, 0xf
sub ebx, 0xaff72393
add ebx, 0xa2e1cc54
xor ebx, 0xf6aa613a
rol ecx, 0x1b
jmp 0x1101055d4

Function at 0x110103360
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edx, 0xb18a46b0
mov ebx, 0xe0e7bf6e
sub rsp, 0x20
inc dword [rbp - 0x20]
mov eax, dword [rbp - 0x20]
jmp fcn.110107d34
Function at 0x1101033a0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
and ebx, 2
je fcn.110103880
xor ebx, dword [rbp - 0x18]
ror ebx, 0x13
sub edx, 0x4fca30ec
xor eax, 0x4187bd9c
xor edx, 0x536449ea
push rbx
add ebx, eax
add ebx, edx
and ebx, 0x20
je 0x110104d26
ror eax, 0x12
xor ecx, dword [rbp - 0x20]
rol edx, 0x15
add edi, 0x76cf0d3e
add ebx, ecx
add ebx, edi
sti
and ebx, 0x400000
je 0x110107918
rol ebx, 0x13
sub edi, 0x211b56f8
xor esi, ebx
jmp 0x110109118
add dword [rbp - 0x18], 0x853e436d
xor ebx, dword [rbp - 0x18]

Function at 0x110103400
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
sub byte [rdi + 0x5d337a60], bl
call 0x911cffcc
out dx, al
int1
and qword [r9 + rax*4 + 0x3cf42f1], r10
pop rcx
invalid
invalid
invalid
adc dword [rsi], ecx
invalid

Function at 0x110103490
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add eax, 0x666c21d4
xor eax, 0xa74cff88
xor edi, ecx
add ebx, edx

Function at 0x1101034a0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, ecx
and ebx, 0x400000
je fcn.1101022c7
rol ebx, 6
xor ecx, dword [rbp - 0x18]
ror edx, 3
rol edi, 0xb
add ebx, edi
add ebx, eax
and ebx, 0x200
je 0x1101080f5
add ebx, 0xaadf445a

Function at 0x1101034d0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
rol edi, 0x15
rol ecx, 0xe
add esi, 0x4f688e17
xor ebx, edx
add ebx, ecx

Function at 0x1101034e0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edx
and ebx, 0x40
je 0x1101042f7
invalid
invalid
mov byte [rdi + 0x17], cl

Function at 0x110103540
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, esi
and ebx, 0x4000000
je 0x110102a9c
invalid
invalid

Function at 0x110103560
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add byte [rax], ah
add byte [rax], al
je 0x11010817e
rol eax, 0x13
rol ecx, 0x1a
xor ebx, eax
add edx, 0x3cff9899
rol edi, 0x11
jmp 0x1101076a4
Function at 0x1101037e0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
ror eax, 2
xor edx, 0xc37c5fe3
add ebx, edx
add ebx, ecx
add ebx, eax
and ebx, 0x20000000
je 0x110102521
xor esi, 0x77804130
rol edx, 0x15
xor ebx, dword [rbp - 0x20]
sub esi, 0xafaec387
jmp 0x110103ef7
mov esi, 0x4c56fe24
mov edx, 0xb18a46b0
mov edi, 0xf5401631
mov ecx, 0x54a981c0
mov rsp, rbp
sub rsp, 0x20
mov ebx, 0xe0e7bf6e
mov dword [rbp - 0x18], 0x9c168200
pushfq
inc dword [rbp - 0x20]
mov eax, dword [rbp - 0x20]
jmp fcn.110107d34

Function at 0x110103b40
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
pushfq
sub rsp, 0x20
inc dword [rbp - 0x20]
mov ecx, 0x54a981c0
mov eax, dword [rbp - 0x20]
jmp fcn.110107d34
Function at 0x110103dc0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
jne 0x110103df5
pop rbp
call 0x912a0789
jmp 0x10ed1c901
add byte [rdi], cl
test dl, ah
jo 0x110103dfb
add cl, al
enter 0xffffffffffff810b, 0xfffffffffffffff3
std
jge 0x110103e32
xchg ebp, eax
invalid

Function at 0x110103f20
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
ror eax, 2
xor edx, 0xc37c5fe3
add ebx, edx
add ebx, ecx
add ebx, eax
and ebx, 0x20000000
je 0x110102521
xor esi, 0x77804130
rol edx, 0x15
xor ebx, dword [rbp - 0x20]
sub esi, 0xafaec387
jmp 0x110103ef7
mov esi, 0x4c56fe24
mov edx, 0xb18a46b0
mov edi, 0xf5401631
mov ecx, 0x54a981c0
mov rsp, rbp
sub rsp, 0x20
mov ebx, 0xe0e7bf6e
mov dword [rbp - 0x18], 0x9c168200
pushfq
inc dword [rbp - 0x20]
mov eax, dword [rbp - 0x20]
jmp fcn.110107d34

Function at 0x1101040d0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
or eax, 0x45810000
call 0x1121fc6e4
xor ebx, dword [rbp - 0x18]
xor ebx, 0x91fc30b4
sub esi, 0xbfb7aed3
sub ebx, 0x57a55f7
add ebx, eax
add ebx, esi
add ebx, edi
and ebx, 0x1000
je 0x110109771
xor ebx, dword [rbp - 0x18]
xor edi, eax
ror ebx, 0x1a
add ebx, 0x453aa24b
sub edx, 0xa6ce74e2
add ebx, esi
add ebx, eax
and ebx, 0x40
je 0x11010a2ca
ror edx, 0x13
add edx, 0x67fdd625
sub eax, 0xf3e8739
xor edi, dword [rbp - 0x18]
add ebx, esi
add ebx, ecx
add ebx, edi
and ebx, 0x1000
je 0x110109c6d
add edi, 0x6c0a6502
rol ebx, 0x1e
ror edi, 0x17
sub edi, 0x33c9f8fc
xor eax, 0xb0805403
jmp fcn.110103880
mov rsp, rbp
mov esi, 0x4c56fe24
mov ebx, 0xe0e7bf6e
mov ecx, 0x54a981c0
mov edi, 0xf5401631
mov edx, 0xb18a46b0
sub rsp, 0x20
mov dword [rbp - 0x18], 0x9c168200
inc dword [rbp - 0x20]
mov eax, dword [rbp - 0x20]
jmp fcn.110107d34
add dword [rbp - 0x18], 0x348e2a5a
xor ebx, dword [rbp - 0x18]
rol ecx, 0x10
ror ecx, 0xf
add eax, 0xfb659b22
sub ecx, 0x67cfec0b
add ebx, edx
add ebx, esi
and ebx, 2
je 0x110107aa2
add edi, 0xef01ecd7
rol edx, 7
sub ebx, 0xadececaf
xor esi, 0xb6fdb5c1
add ebx, eax
add ebx, edx
and ebx, 0x10000000
je 0x1101080f5
sub edi, 0x2fc9c32f
ror ecx, 0xf
ror esi, 0xb
sub ebx, 0xea579f5b
add ebx, ecx
add ebx, edx
add ebx, eax
and ebx, 2
je fcn.1101032b9
ror ecx, 5
ror eax, 0x19
rol ebx, 0xe
rol eax, 0x1f
add edx, 0xdc557b23
jmp 0x110106745
add dword [rbp - 0x18], 0x2a2585b2
xor ebx, dword [rbp - 0x18]
xor edx, 0xfe537504
rol edx, 0xa
sub ecx, 0x72bd6c1e
rol ecx, 0x12
add edi, 0x559ae851
add ebx, edi
add ebx, edx
and ebx, 8
je 0x110101357
xor ecx, 0x818341bf
rol edx, 0x1b
add edx, 0xb3b99646
xor esi, 0x6ab5d79
add ebx, edx
add ebx, ecx
and ebx, 0x200000
je fcn.110103fb1
add edi, 0x36f76c0c
add ecx, 0x590f663d
sub esi, 0x6d42a328
rol ebx, 0x10
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x1000000
je 0x110109118
xor eax, dword [rbp - 0x18]
sub edx, 0xd9eee1ec
sub ebx, 0xf2f52d1c
xor edx, ebx
add edi, 0x28623f9b
jmp fcn.110107068
Function at 0x110104380
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edx, 0xb18a46b0
mov rsp, rbp
mov ebx, 0xe0e7bf6e
sub rsp, 0x20
add dword [rbp - 0x20], 1
mov dword [rbp - 0x18], 0x9c168200
mov esi, 0x4c56fe24
mov edi, 0xf5401631
mov eax, dword [rbp - 0x20]
mov ecx, 0x54a981c0
rol byte [rcx + 0x7be954a9], 0x39
add byte [rax], al

Function at 0x1101043f0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x794578c0
xor ebx, dword [rbp - 0x18]
rol eax, 0xc
add esi, 0x4bc2b8ef
add ecx, 0x435c91a9
rol ecx, 6
rol ecx, 0x15
add ebx, eax
add ebx, ecx
retf
and ebx, 2
je 0x11010887d
add eax, 0xa380f3f5
ror eax, 0x1b
add ebx, 0x3bb7dc07
add ebx, ecx
add ebx, eax
add ebx, esi
and ebx, 0x100000
je 0x110102dff
ror esi, 9
ror edi, 0xe
xor ecx, 0x974b8d59
add ebx, 0x745582d1
xor ebx, 0xac91c7da
add ebx, edx
add ebx, ecx
add ebx, eax
and ebx, 0x2000
je 0x110102133
add eax, 0x960ca0e7
ror edx, 0x1d
ror edx, 6
jmp fcn.1101017a9
add dword [rbp - 0x18], 0x8e30b8c5
xor ebx, dword [rbp - 0x18]
ror eax, 0x1c
xor edi, ecx
add ebx, 0x41c0dd38
ror ecx, 0x18
rol ecx, 0x14
add ebx, eax
rol eax, 2
add ebx, esi
add ebx, eax
and ebx, 0x80
je 0x110104e2d
add eax, 0x9b1e793f
ror ecx, 6
rol ecx, 0x1d
add ebx, ecx
add ebx, eax
and ebx, 0x800
je 0x11010145e
add esi, 0x4d490a33
sub ebx, 0x61916b08
add ebx, 0x8ccb3786
ror edx, 0x1b
ror edx, 0xe
jmp fcn.1101017a9