joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180008ed0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov rsp, rbp
mov esi, 0xa88d2a18
lea ebp, [rax - 0x15d3bd41]
jmp fcn.180002072
lahf
invalid
clc
sub rsp, 0x30
mov dword [rbp - 0x28], 0x38caefc8
add dword [rbp - 0x10], 1
mov ebx, 0x92e8d182
mov ecx, 0x10e74163
mov eax, dword [rbp - 0x10]
jmp fcn.180007343
sub al, 0xea
jmp 0x180008f1d
add byte [rax], al
sub ecx, 0x8e29437b
rol eax, 4
xor edi, 0x4b2c1860
add edi, 0x9e0669f0
add ebx, edi
add ebx, edx
add ebx, ecx
and ebx, 0x2000000
je 0x1800030af
ror ebx, 0x1a
sub edi, 0xe5e37abd
rol esi, 0x16
xor edi, dword [rbp - 0x10]
add ebx, eax
add ebx, edi
and ebx, 0x80
je 0x1800020aa
sub edx, 0xd1e383ae
sub edx, 0x2cce6415
xor edi, ecx
rol edi, 8
rol ebx, 0x18
jmp 0x1800018a4

Function at 0x180009010
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edi, 0xebea2c42
mov edx, 0xf8d59f44
mov esi, 0xa88d2a18
mov ebx, 0x92e8d182
mov rsp, rbp
mov dword [rbp - 0x28], 0x38caefc8
sub rsp, 0x30
inc dword [rbp - 0x10]
mov ecx, 0x10e74163
mov eax, dword [rbp - 0x10]
jmp fcn.180007343
imul esp, dword [rdi - 0x27a2ccbf], 0xffffffc1
enter 0xffffffffffffc102, 0xffffffffffffffce
adc eax, dword [rcx - 0x4b86ab3e]
ror ebx, 0x17
add ebx, ecx
add ebx, edx
add ebx, eax
and ebx, 1
je 0x180002ab4
xor edi, esi
xor ebx, dword [rbp - 0x28]
xor edi, 0x7fd4718a
xor edx, edi
add ebx, edi
add ebx, eax
add ebx, edx
and ebx, 0x40000000
je fcn.180008e27
sub eax, 0xca8f659
xor ecx, dword [rbp - 0x28]
sub esi, 0x3cb2cce9
add ebx, esi
add ebx, eax
and ebx, 0x1000000
je 0x18000977f
xor edi, ebx
sub ebx, 0xa421b07d
sub esi, 0xd741dff5
jmp 0x180006308

Function at 0x180009150
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0xf4f99429
xor ebx, dword [rbp - 0x28]
add edi, 0x2bb6128e
xor ebx, 0x6b439f82
xor edx, 0xaedfab7c
add ebx, eax
add ebx, edi
add ebx, edx
and ebx, 0x200
je fcn.180008e27
xor edx, 0xefab364
rol esi, 5
xor esi, 0xd3002e42
add ebx, ecx
add ebx, edx
and ebx, 0x200
je 0x1800073c6
ror edi, 4
add edi, 0x9e4447f9
rol ebx, 0x15
rol ebx, 0xe
sub esi, 0xb6a94b41
add ebx, ecx
add ebx, eax
and ebx, 0x40000
je 0x180004471
ror edx, 0x14
xor ecx, eax
sub esi, 0x8192c960
jmp 0x180004fe2
add esi, 0x4f58c69f
ror esi, 0x1c
xor edi, 0x1613fada
add ebx, edx
add ebx, ecx
and ebx, 0x80000
je 0x1800069b3
rol ecx, 7
add esi, 0x6bd63920
ror esi, 0xa
add ebx, edx
add ebx, edi
and ebx, 0x100000
je 0x180004091
ror edi, 9
rol esi, 7
ror edx, 0x13
ror ebx, 0xd
jmp 0x1800092ad

Function at 0x1800092c0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, ecx
add ebx, eax
add ebx, esi
and ebx, 0x800000
je fcn.180001e0f
sub edi, 0x94a4d45e
ror edi, 0x12
rol esi, 9
add ebx, edx
Function at 0x1800092e0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x1db34f24
xor ebx, dword [rbp - 0x28]
add edi, 0xd34c0895
add esi, 0x28532cb5
sub al, 0x53
sub cl, al
invalid
adc eax, 0xfb01d301
add ebx, ecx
and ebx, 0x80
je 0x180004d7f
xor edi, dword [rbp - 0x10]
ror edx, 5
add esi, 0x6d2ffe6f
outsd dx, dword [rsi]
invalid
invalid
insd dword [rdi], dx
xor esi, 0xa8aba382
add ebx, eax
add ebx, ecx
and ebx, 0x200000
add byte [rax], al
and byte [rax], al
je 0x180002550
ror eax, 9
ror ebx, 0xf
add ebx, edi
and ebx, 0x10000
je 0x1800088cd
ror eax, 0x1a
xor ebx, 0x54d12c74
add eax, 0x3cea01
rol edx, 0xa

Function at 0x180009300
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
rol ecx, 0x14
add ebx, esi
add ebx, eax
add ebx, ecx
and ebx, 1
je 0x180008698
ror edi, 0xf
add edi, 0x59594fb
ror eax, 0x18
xor edi, ebx
jmp 0x180001c09

Function at 0x1800093d0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0xc53235a2
xor ebx, dword [rbp - 0x28]
add esi, 0x39b75d98
rol ecx, 0x1c
sub eax, 0x4259e1e1
rol edx, 0xc
add esi, 0xd8fe0ad6
add ebx, esi
add ebx, ecx
and ebx, 8
je 0x18000ae1d
sub ecx, 0xada63e1c
xor esi, dword [rbp - 0x28]
ror ebx, 0x17
add edx, 0x9c43a3b7
mov bh, 0xa3
pushfq
add eax, 0x5fd4d3dc
add ebx, edx
add ebx, ecx
and ebx, 0x4000000
je fcn.180005b35
rol ebx, 4
xor edi, esi
xor edi, dword [rbp - 0x10]
xor esi, 0x2c03de1f
add ebx, esi
add ebx, edi
and ebx, 0x80000
je fcn.180001e0f
rol edx, 7
add edx, 0x2d6cd7cc
add edx, 0x338cb63a
add edx, 0xfe94b848
xor esi, dword [rbp - 0x28]
jmp fcn.180008e27
add ebx, ecx
and ebx, 0x4000
je 0x1800034e1
add esi, 0xf04a1ce8
ror esi, 0x1b
add ecx, 0x2b7a85ab
rol ecx, 0x1b
add ebx, esi
add ebx, eax
and ebx, 0x4000000
je 0x1800065f3
add dword [rbp - 0x28], 0xebe128cd
xor ebx, dword [rbp - 0x28]
xor esi, dword [rbp - 0x10]
rol edx, 0x1f
ror ecx, 0x18
rol edi, 0x18
xor eax, 0x49e0461b
add ebx, esi
add ebx, ecx
and ebx, 0x40000
add byte [rax + rax], al
je 0x180003c84
xor edi, dword [rbp - 0x10]
invalid
invalid
fsubp st(6)

Function at 0x180009400
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add esi, 0x2c584e01
rol eax, 3
xor ecx, eax
xor edx, 0x605bfbc5
rol edi, 0xa
add ebx, esi
add ebx, ecx
and ebx, 1
je 0x18000132b
xor ebx, edi
rol esi, 0x10
rol edi, 0x16
jmp fcn.180008e27

Function at 0x1800094a0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push rdi
add edx, 0x2fef76a
ror ebx, 0xe
rol edi, 0x10
rol edx, 0xa
jmp fcn.180004a57
Function at 0x1800094d0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edx, 0xf8d59f44
mov ebx, 0x92e8d182
mov ecx, 0x10e74163
mov eax, dword [rbp - 0x10]
mov dword [rbp - 0x28], 0x38caefc8
jmp fcn.180007343
Function at 0x180009670
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
and ebx, 0x10
je fcn.18000524a
xor edi, 0x29589edf
rol eax, 8
rol edx, 0x14
jmp 0x18000a717

Function at 0x1800097b0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add eax, 0xf181561d
in al, 0x51
in eax, dx
jp 0x18000978c
rol dword [rcx], 1
rol dword [rcx], cl
add ebx, eax
xor ecx, dword [rbp - 0x28]
sub ecx, 0x4baea3cd
xor ebx, dword [rbp - 0x28]
rol ecx, 0x11
add ebx, esi
add ebx, eax
add ebx, edx
and ebx, 0x100000
je 0x18000372d
sub edi, 0xc60d65b4
rol edi, 0x1f
ror esi, 0x16
add ebx, ecx
add ebx, eax
and ebx, 0x40
je 0x1800018a4
rol edx, 0x1f
rol ebx, 0x17
sub esi, 0xd3c8b3c8
ror edx, 0xb
add ebx, eax
add ebx, ecx
and ebx, 4
je fcn.180004a57
rol ecx, 0x15
ror eax, 0x1a
add edi, 0x47a80493
jmp fcn.18000379e
Function at 0x1800098a0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
adc al, byte [rcx]
rol dword [rcx], cl
and ebx, 0x1000
je 0x1800072bb
sub ebx, 0xbb21652
rol edx, 4
xor eax, 0x8155c89b
xor eax, dword [rbp - 0x28]
add ebx, edx
add ebx, ecx
and ebx, 1
je fcn.180005b35
add ebx, 0x9e4dddc5
xor ebx, eax
sub eax, 0x145222a8
add ebx, edx
add ebx, esi
add ebx, eax
and ebx, 0x40000
je 0x18000121c
rol eax, 0xc
xor esi, 0x744bb8a7
ror edi, 0x1d
add ebx, 0x451bdfac
ror ecx, 0x12
jmp 0x180004d00

Function at 0x180009930
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edi, 0xebea2c42
mov ecx, 0x10e74163
mov rsp, rbp
mov esi, 0xa88d2a18
mov ebx, 0x92e8d182
sub rsp, 0x30
mov edx, 0xf8d59f44
mov dword [rbp - 0x28], 0x38caefc8
add dword [rbp - 0x10], 1
mov eax, dword [rbp - 0x10]
jmp fcn.180007343
add dword [rbp - 0x28], 0x1be8af10
xor ebx, dword [rbp - 0x28]
xor ecx, 0x81e56d05
rol esi, 3
add ebx, 0xfbdf969
add ebx, edx
add ebx, ecx
add ebx, edi
and ebx, 0x400000
je 0x180001b8a
sub esi, 0x66b106d2
ror ecx, 0x12
ror ebx, 0x11
xor ecx, 0x1e28842f
rol edx, 0x11
add ebx, esi
add ebx, edi
add ebx, eax
and ebx, 0x200
je 0x180008aee
add ebx, 0x16e0029f
add esi, 0x387c9fe5
xor edx, 0xb492295e
sub dword [rdx + 0x1c301b4], edx
and ebx, 0x100000
je 0x18000272d
add edx, 0xd58783ce
sub ecx, 0x2722cdc8
xor esi, dword [rbp - 0x28]
jmp 0x1800031b4
add ecx, 0x1a4abe06
add ecx, 0x74e5b549
xor edi, 0x2b504030
add ebx, 0xb6109a78
ror edi, 0xd
add ebx, edx
add ebx, ecx
and ebx, 0x400000
jrcxz 0x180009952
add byte [rax], al
je 0x18000894f
invalid
invalid
mov cl, 0x68
invalid
Function at 0x180009a10
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x68214895
xor ebx, dword [rbp - 0x28]
ror edi, 0x16
rol ebx, 0x1a
xor eax, edi
add ebx, edx
add ebx, ecx
add ebx, esi
and ebx, 0x2000
add byte [rax], ah
add byte [rax], al
je fcn.180004a57
sub eax, 0xf09dbf8d
rol eax, 9
rol edi, 2
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x2000
je fcn.180006e5e
add edi, 0x6e7eda2d
rol esi, 0xd
ror edx, 0x19
add ebx, ecx
add ebx, edx
add ebx, esi
and ebx, 0x80000000
je fcn.180001a39
add edx, 0xf2bb12bf
sub eax, 0x60a02b85
xor ecx, 0xdebaeea
jmp 0x180007cd7
mov ecx, 0x10e74163
mov rsp, rbp
mov esi, 0xa88d2a18
mov ebx, 0x92e8d182
mov edx, 0xf8d59f44
mov dword [rbp - 0x28], 0x38caefc8
mov edi, 0xebea2c42
sub rsp, 0x30
add dword [rbp - 0x10], 1
mov eax, dword [rbp - 0x10]
jmp fcn.180007343
add dword [rbp - 0x28], 0x32ef660
xor ebx, dword [rbp - 0x28]
xor edx, dword [rbp - 0x28]
sub edx, 0xb450ad89
add esi, 0xf837fc03
add ebx, ecx
add ebx, esi
and ebx, 0x800
je 0x1800064c4
rol ecx, 6
add ecx, 0xb94c97fb
sub eax, 0xf1d94a3f
xor edx, ecx
add ebx, ecx
add ebx, edx
and ebx, 2
je 0x180005506
add esi, 0xc5ab76d9
add ecx, 0xa2719484
add edx, 0x34197
rol ebx, 0xb
ror ebx, 0x1f
add ebx, eax
add ebx, edi
and ebx, 0x100
je fcn.180005b35
rol edi, 0x1b
ror edx, 2
ror edi, 0x1b
sub edi, 0x640ff24c
invalid
invalid
pcmpgtb mm5, mm1
invalid
invalid
invalid
invalid
push rbp
mov rbp, rsp
sub rsp, 0x30
mov dword [rbp - 0x10], 0x1b635a9
mov dh, 1
jmp 0x180009996

Function at 0x180009a60
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x4c3f6161
xor ebx, dword [rbp - 0x28]
rol esi, 0xa
ror esi, 0x1a
sub esi, 0x91534960
xor ebx, 0xc09495d7
sub edi, 0x6c47e267
add ebx, eax
add ebx, edi
add ebx, edx
and ebx, 0x80000000
je 0x1800044f6
add ebx, 0x8ed749bb
xor eax, dword [rbp - 0x10]
ror eax, 2
add edi, 0x22b85de6
add ebx, eax
add ebx, ecx
add ebx, edx
and ebx, 0x80000
je 0x180002d4f
ror edx, 7
ror edx, 0x19
ror ebx, 8
add ecx, 0x3c617e67
add ebx, 0x69934f3c
add ebx, edi
add ebx, eax
and ebx, 0x8000
je 0x180001646
ror esi, 0x1e
rol eax, 4
add edx, 0x2c75b8ab
rol esi, 0x1f
jmp fcn.180005918
add dword [rbp - 0x28], 0xbdb309b
xor ebx, dword [rbp - 0x28]
rol eax, 0x12
rol edi, 0x1a
ror ebx, 0x19
sub edx, 0xa87297c
sub esi, 0x51b07e07
add ebx, edx
add ebx, ecx
add ebx, edi
and ebx, 0x8000000
je 0x1800059aa
ror eax, 0x14
rol ecx, 0x14
sub esi, 0x347eabf6
ror edi, 0xb
xor eax, 0xdf7c8993
add ebx, edx
add ebx, edi
add ebx, eax
and ebx, 0x100000
je fcn.180008e27
sub ebx, 0x6fede90
rol ebx, 0xa
ror eax, 0x15
add ebx, edx
add ebx, esi
add ebx, edi
and ebx, 0x4000000
je 0x18000118b
ror edx, 7
sub ecx, 0xeaff040e
ror esi, 0x1e
xor edi, dword [rbp - 0x28]
add ebx, edx
add ebx, ecx
add ebx, esi
and ebx, 0x40000
je 0x180001b8a
sub edx, 0xbba76118
rol edi, 0x16
add ecx, 0x433399f6
jmp 0x18000272d
Function at 0x180009b10
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
je fcn.180003226
ror edi, 0xe
rol ecx, 0x1a
rol edi, 8
xor eax, 0x542e99a5
xor edx, 0x7da58d7f
jmp 0x1800027e8

Function at 0x180009bb0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xchg esi, eax
xor r11, qword [rbp - 0x28]
add edi, 0xe9b7643e
xor eax, edi
xor ebx, eax
add ebx, edi
add ebx, ecx
and ebx, 0x400
je 0x180009eb2
sub eax, 0x217fc7a6
sub esi, 0xa289231d
rol ecx, 0x17
ror ebx, 0x1a
sbb al, byte [rcx]
rol dword [rcx], cl
add ebx, eax
and ebx, 0x10000
je 0x180002d4f
add ecx, 0xc0a1c33b
rol edx, 0x15
xor ecx, 0x612e2d71
add ebx, esi
add ebx, edx
and ebx, 0x8000
je 0x18000ac59
rol ebx, 9
ror edi, 6
rol ecx, 0x1c
jmp 0x18000121c
invalid
invalid
invalid
invalid
invalid
invalid

Function at 0x180009be0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xchg esi, eax
xor r11, qword [rbp - 0x28]
add edi, 0xe9b7643e
xor eax, edi
xor ebx, eax
add ebx, edi
add ebx, ecx
and ebx, 0x400
je 0x180009eb2
sub eax, 0x217fc7a6
sub esi, 0xa289231d
rol ecx, 0x17
ror ebx, 0x1a
sbb al, byte [rcx]
rol dword [rcx], cl
add ebx, eax
and ebx, 0x10000
je 0x180002d4f
add ecx, 0xc0a1c33b
rol edx, 0x15
xor ecx, 0x612e2d71
add ebx, esi
add ebx, edx
and ebx, 0x8000
je 0x18000ac59
rol ebx, 9
ror edi, 6
rol ecx, 0x1c
jmp 0x18000121c
invalid
invalid
invalid
invalid
invalid
invalid

Function at 0x180009c00
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xchg esi, eax
xor r11, qword [rbp - 0x28]
add edi, 0xe9b7643e
xor eax, edi
xor ebx, eax
add ebx, edi
add ebx, ecx
and ebx, 0x400
je 0x180009eb2
sub eax, 0x217fc7a6
sub esi, 0xa289231d
rol ecx, 0x17
ror ebx, 0x1a
sbb al, byte [rcx]
rol dword [rcx], cl
add ebx, eax
and ebx, 0x10000
je 0x180002d4f
add ecx, 0xc0a1c33b
rol edx, 0x15
xor ecx, 0x612e2d71
add ebx, esi
add ebx, edx
and ebx, 0x8000
je 0x18000ac59
rol ebx, 9
ror edi, 6
rol ecx, 0x1c
jmp 0x18000121c
invalid
invalid
invalid
invalid
invalid
invalid

Function at 0x180009c20
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0xfdb6ab0b
xor ebx, dword [rbp - 0x28]
rol eax, 0x17
sub esi, 0x27616f53
sub ebx, 0xfe327668
rol edi, 0x1d
add ebx, esi
add ebx, eax
add ebx, edi
and ebx, 0x10
je 0x180002d4f
rol eax, 0x1d
ror edi, 0x1a
xor esi, dword [rbp - 0x28]
xor ebx, 0xff24471b
add ebx, ecx
add ebx, esi
and ebx, 0x4000
je 0x180007d10
sub edx, 0x8cc42cd7
rol esi, 0x1f
rol edx, 0x11
ror ebx, 6
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x80000
jrcxz 0x180009c82
add byte [rax], cl
add byte [rdi], cl
invalid
nop
xchg ebx, eax
invalid
invalid
ror ecx, 0xb
xor ebx, esi
sub ecx, 0x64001d58
Function at 0x180009c38
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0xfdb6ab0b
xor ebx, dword [rbp - 0x28]
rol eax, 0x17
sub esi, 0x27616f53
sub ebx, 0xfe327668
rol edi, 0x1d
add ebx, esi
add ebx, eax
add ebx, edi
and ebx, 0x10
je 0x180002d4f
rol eax, 0x1d
ror edi, 0x1a
xor esi, dword [rbp - 0x28]
xor ebx, 0xff24471b
add ebx, ecx
add ebx, esi
and ebx, 0x4000
je 0x180007d10
sub edx, 0x8cc42cd7
rol esi, 0x1f
rol edx, 0x11
ror ebx, 6
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x80000
jrcxz 0x180009c82
add byte [rax], cl
add byte [rdi], cl
invalid
nop
xchg ebx, eax
invalid
invalid
ror ecx, 0xb
xor ebx, esi
sub ecx, 0x64001d58

Function at 0x180009c80
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
jrcxz 0x180009c82
add byte [rax], cl
add byte [rdi], cl
test byte [rax - 0x3e00006d], dl
leave
or esi, dword [rcx]
sub ecx, 0x64001d58
jmp 0x18000aac1

Function at 0x180009d74
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x44554c73
xor ebx, dword [rbp - 0x28]
add ebx, 0xf5522c8e
ror ebx, 6
ror esi, 0x1d
add esi, 0x9cf00d18
sub esi, 0x28493158
add ebx, ecx
add ebx, esi
add ebx, edi
and ebx, 0x100
je 0x180006d0f
ror eax, 5
add edx, 0xa2b6aecd
add esi, 0x7cb3030e
xor ebx, dword [rbp - 0x10]
ror eax, 0x11
add ebx, esi
add ebx, eax
ret
add ebx, ecx
and ebx, 0x1000
je fcn.180002b3a
add edi, 0x2e1472b1
rol ebx, 0x16
sub esi, 0x23d6ca5c
add ebx, edi
add ebx, eax
and ebx, 0x400000
je 0x180005ab0
sub ebx, 0x1fd56d36
sub ebx, 0x3b1c325c
ror edi, 0x1c
sbb al, 0x31
xlatb
sub edi, 0x7fc4d1fc
jmp 0x1800073c6
push rbp
mov rbp, rsp
sub rsp, 0x30
mov dword [rbp - 0x10], 0x1b635a9
jmp 0x180009d14

Function at 0x180009d9c
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x44554c73
xor ebx, dword [rbp - 0x28]
add ebx, 0xf5522c8e
ror ebx, 6
ror esi, 0x1d
add esi, 0x9cf00d18
sub esi, 0x28493158
add ebx, ecx
add ebx, esi
add ebx, edi
and ebx, 0x100
je 0x180006d0f
ror eax, 5
add edx, 0xa2b6aecd
add esi, 0x7cb3030e
xor ebx, dword [rbp - 0x10]
ror eax, 0x11
add ebx, esi
add ebx, eax
ret
add ebx, ecx
and ebx, 0x1000
je fcn.180002b3a
add edi, 0x2e1472b1
rol ebx, 0x16
sub esi, 0x23d6ca5c
add ebx, edi
add ebx, eax
and ebx, 0x400000
je 0x180005ab0
sub ebx, 0x1fd56d36
sub ebx, 0x3b1c325c
ror edi, 0x1c
sbb al, 0x31
xlatb
sub edi, 0x7fc4d1fc
jmp 0x1800073c6
push rbp
mov rbp, rsp
sub rsp, 0x30
mov dword [rbp - 0x10], 0x1b635a9
jmp 0x180009d14

Function at 0x180009e90
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, esi
and ebx, 4
je 0x180008a5d
ror ebx, 0x11
rol ecx, 7
rol ecx, 0x19
add edi, 0x41620892
rol ecx, 0xe
jmp 0x180007d10
Function at 0x180009eb8
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
adc al, 0x33
pop rbp
fadd st(1)
ret

Function at 0x180009ef0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, eax
add ebx, esi
add ebx, edx
and ebx, 0x200000
je fcn.18000379e
sub ecx, 0xa02fb1d
ror ecx, 0x1a
sub ecx, 0x9229e732
xchg edx, eax
add ebx, ecx
add ebx, eax
add ebx, edx
and ebx, 0x10000000
je 0x180003329
rol ecx, 0x18
rol esi, 0xe
rol edi, 0xb
xor edx, dword [rbp - 0x10]
add esi, 0xb5995d70
jmp 0x180003558

Function at 0x180009f60
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add edi, 0x4ef0e5b
rol esi, 0x1a
xor ecx, dword [rbp - 0x28]
sub edi, 0x80cde9d8
ror eax, 5
add ebx, ecx
add ebx, eax
add ebx, esi
and ebx, 0x800
je 0x180008698
rol ecx, 0x18
add ebx, 0x5ea392ef
add eax, 0x6d739be0
xor ecx, edx
add ebx, ecx
add ebx, edx
add ebx, esi
and ebx, 0x4000000
je 0x180008a5d
sub ebx, 0x6fd94942
Function at 0x180009fb0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov rsp, rbp
mov ecx, 0x10e74163
mov edx, 0xf8d59f44
mov dword [rbp - 0x28], 0x38caefc8
mov ebx, 0x92e8d182
sub rsp, 0x30
mov edi, 0xebea2c42
mov esi, 0xa88d2a18
add dword [rbp - 0x10], 1
mov eax, dword [rbp - 0x10]
jmp fcn.180007343
add dword [rbp - 0x28], 0x72ddb552
xor ebx, dword [rbp - 0x28]
ror ebx, 4
xor edx, 0xedf4b300
ror ebx, 0x16
sub ecx, 0x8be7adb0
xor ebx, 0x6a3a2fb9
add ebx, edx
add ebx, esi
and ebx, 0x100000
je fcn.180003226
sub edi, 0xc5d721f7
xor esi, 0x3cdf0675
xor ebx, dword [rbp - 0x10]
ror ecx, 3
add ebx, edi
add ebx, edx
add ebx, eax
and ebx, 0x40
je 0x180008aee
rol eax, 0x1a
xor ebx, dword [rbp - 0x28]
sub edx, 0x19685f2d
xor ecx, 0x2ca68bd8
add ebx, eax
add ebx, esi
and ebx, 0x2000000
je 0x180007d10
ror esi, 0xa
add edi, 0x8ba708c9
add ecx, 0x949abf93
jmp 0x18000919c
add dword [rbp - 0x28], 0xf110792c
xor ebx, dword [rbp - 0x28]
sub eax, 0x1c21480c
rol eax, 0x1e
add esi, 0x3bf3f8c8
sub edi, 0x57cef61c
add ebx, eax
add ebx, edi
and ebx, 0x20000000
je 0x180008a5d
rol edx, 5
xor ecx, edi
ror ebx, 0x1c
add ebx, edx
add ebx, esi
and ebx, 4
je 0x1800023c0
rol edx, 7
add ecx, 0xf59d3ded
ror eax, 0xb
ror eax, 4
add ebx, eax
add ebx, ecx
and ebx, 0x800
je 0x18000617a
rol edx, 0x14
rol edi, 7
invalid
xor eax, 0x69258632
ror edx, 0x1a
jmp fcn.180004a57
add dword [rbp - 0x28], 0xc72ea3cb
xor ebx, dword [rbp - 0x28]
rol ecx, 0xc
rol ecx, 0x1d
xor edi, 0x421c5658
add ebx, ecx
add ebx, eax
add ebx, edx
and ebx, 0x40000000
je fcn.180004a57
ror edx, 0x12
add edx, 0xa83c00c9
add edi, 0xe0afd55e
ror esi, 0xa
rol ecx, 0xc
add ebx, edx
add ebx, edi
and ebx, 0x200000
je fcn.180005b35
rol esi, 0xb
sub edi, 0x1db1e5c0
ror ebx, 0xc
add ebx, ecx
add ebx, esi
add ebx, eax
and ebx, 0x8000000
je 0x18000a0ac
sub edx, 0xed2e08e5
xor esi, dword [rbp - 0x28]
rol ecx, 6
sub edx, 0xbff35488
xor edi, dword [rbp - 0x10]
jmp fcn.180005918
xor eax, 0x68940cd2
rol ecx, 7
xor esi, 0xeb435a5b
jmp 0x180004be8
add dword [rbp - 0x28], 0xe95c5a30
xor ebx, dword [rbp - 0x28]
xor ecx, 0x57a8f0c
add edx, 0xa4de53
sub eax, 0x883589f4
add edx, 0x1f9d5f40
add ebx, edi
add ebx, eax
add ebx, ecx
and ebx, 2
je fcn.180005918
rol eax, 9
xor ecx, edx
add ecx, 0x65f5e543
sub eax, 0xf06daca1
xor edi, dword [rbp - 0x10]
add ebx, edx
add ebx, ecx
add ebx, eax
and ebx, 0x8000000
je 0x18000121c
sub edi, 0xe9986c53
xor eax, 0xb707e17f
sub eax, 0xfe6892d4
rol ecx, 0x12
add esi, 0xa6af100d
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x1000000
je 0x1800027e8
sub edi, 0x243ac623
xor eax, dword [rbp - 0x28]
xor edx, esi
jmp 0x1800021fc
Function at 0x18000a010
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x68214895
xor ebx, dword [rbp - 0x28]
ror edi, 0x16
rol ebx, 0x1a
xor eax, edi
add ebx, edx
add ebx, ecx
add ebx, esi
and ebx, 0x2000
add byte [rax], ah
add byte [rax], al
je fcn.180004a57
sub eax, 0xf09dbf8d
rol eax, 9
rol edi, 2
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x2000
je fcn.180006e5e
add edi, 0x6e7eda2d
rol esi, 0xd
ror edx, 0x19
add ebx, ecx
add ebx, edx
add ebx, esi
and ebx, 0x80000000
je fcn.180001a39
add edx, 0xf2bb12bf
sub eax, 0x60a02b85
xor ecx, 0xdebaeea
jmp 0x180007cd7
mov ecx, 0x10e74163
mov rsp, rbp
mov esi, 0xa88d2a18
mov ebx, 0x92e8d182
mov edx, 0xf8d59f44
mov dword [rbp - 0x28], 0x38caefc8
mov edi, 0xebea2c42
sub rsp, 0x30
add dword [rbp - 0x10], 1
mov eax, dword [rbp - 0x10]
jmp fcn.180007343
add dword [rbp - 0x28], 0x32ef660
xor ebx, dword [rbp - 0x28]
xor edx, dword [rbp - 0x28]
sub edx, 0xb450ad89
add esi, 0xf837fc03
add ebx, ecx
add ebx, esi
and ebx, 0x800
je 0x1800064c4
rol ecx, 6
add ecx, 0xb94c97fb
sub eax, 0xf1d94a3f
xor edx, ecx
add ebx, ecx
add ebx, edx
and ebx, 2
je 0x180005506
add esi, 0xc5ab76d9
add ecx, 0xa2719484
add edx, 0x34197
rol ebx, 0xb
ror ebx, 0x1f
add ebx, eax
add ebx, edi
and ebx, 0x100
je fcn.180005b35
rol edi, 0x1b
ror edx, 2
ror edi, 0x1b
sub edi, 0x640ff24c
invalid
invalid
pcmpgtb mm5, mm1
invalid
invalid
invalid
invalid
push rbp
mov rbp, rsp
sub rsp, 0x30
mov dword [rbp - 0x10], 0x1b635a9
mov dh, 1
jmp 0x180009996