joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18000a020
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x68214895
xor ebx, dword [rbp - 0x28]
ror edi, 0x16
rol ebx, 0x1a
xor eax, edi
add ebx, edx
add ebx, ecx
add ebx, esi
and ebx, 0x2000
add byte [rax], ah
add byte [rax], al
je fcn.180004a57
sub eax, 0xf09dbf8d
rol eax, 9
rol edi, 2
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x2000
je fcn.180006e5e
add edi, 0x6e7eda2d
rol esi, 0xd
ror edx, 0x19
add ebx, ecx
add ebx, edx
add ebx, esi
and ebx, 0x80000000
je fcn.180001a39
add edx, 0xf2bb12bf
sub eax, 0x60a02b85
xor ecx, 0xdebaeea
jmp 0x180007cd7
mov ecx, 0x10e74163
mov rsp, rbp
mov esi, 0xa88d2a18
mov ebx, 0x92e8d182
mov edx, 0xf8d59f44
mov dword [rbp - 0x28], 0x38caefc8
mov edi, 0xebea2c42
sub rsp, 0x30
add dword [rbp - 0x10], 1
mov eax, dword [rbp - 0x10]
jmp fcn.180007343
add dword [rbp - 0x28], 0x32ef660
xor ebx, dword [rbp - 0x28]
xor edx, dword [rbp - 0x28]
sub edx, 0xb450ad89
add esi, 0xf837fc03
add ebx, ecx
add ebx, esi
and ebx, 0x800
je 0x1800064c4
rol ecx, 6
add ecx, 0xb94c97fb
sub eax, 0xf1d94a3f
xor edx, ecx
add ebx, ecx
add ebx, edx
and ebx, 2
je 0x180005506
add esi, 0xc5ab76d9
add ecx, 0xa2719484
add edx, 0x34197
rol ebx, 0xb
ror ebx, 0x1f
add ebx, eax
add ebx, edi
and ebx, 0x100
je fcn.180005b35
rol edi, 0x1b
ror edx, 2
ror edi, 0x1b
sub edi, 0x640ff24c
invalid
invalid
pcmpgtb mm5, mm1
invalid
invalid
invalid
invalid
push rbp
mov rbp, rsp
sub rsp, 0x30
mov dword [rbp - 0x10], 0x1b635a9
mov dh, 1
jmp 0x180009996
Function at 0x18000a160
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov dword [rbp - 0x10], 0x1b635a9
jmp 0x180004e97

Function at 0x18000a178
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
fsubr st(3)
and byte [rax - 0x75], ch
xor ebx, dword [rbp - 0x28]
sub edi, 0xd5e07700
rol eax, 0xf
sub eax, 0x17d254fa
add ebx, edi
add ebx, edx
and ebx, 0x800000
je 0x180004fe2
sub ebx, 0x31bdc390
xor edi, dword [rbp - 0x28]
xor eax, ebx
sub ecx, 0xa5c81dda
add ebx, edx
add ebx, esi
and ebx, 0x20000000
je 0x180001646
sub ecx, 0x79d8a21d
ror ecx, 0x11
xor edx, dword [rbp - 0x28]
rol edx, 0x1e
sub eax, 0x81e3dde9
add ebx, ecx
add ebx, eax
add ebx, edi
and ebx, 8
je 0x180007a6d
xor edx, 0xf3d0f5db
ror eax, 0xe
xor ebx, 0x3fe0533b
ror ebx, 0xe
xor esi, 0xa2cf1cb0
jmp 0x1800069b3

Function at 0x18000a1b8
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
fsubr st(3)
and byte [rax - 0x75], ch
xor ebx, dword [rbp - 0x28]
sub edi, 0xd5e07700
rol eax, 0xf
sub eax, 0x17d254fa
add ebx, edi
add ebx, edx
and ebx, 0x800000
je 0x180004fe2
sub ebx, 0x31bdc390
xor edi, dword [rbp - 0x28]
xor eax, ebx
sub ecx, 0xa5c81dda
add ebx, edx
add ebx, esi
and ebx, 0x20000000
je 0x180001646
sub ecx, 0x79d8a21d
ror ecx, 0x11
xor edx, dword [rbp - 0x28]
rol edx, 0x1e
sub eax, 0x81e3dde9
add ebx, ecx
add ebx, eax
add ebx, edi
and ebx, 8
je 0x180007a6d
xor edx, 0xf3d0f5db
ror eax, 0xe
xor ebx, 0x3fe0533b
ror ebx, 0xe
xor esi, 0xa2cf1cb0
jmp 0x1800069b3

Function at 0x18000a1f4
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
fsubr st(3)
and byte [rax - 0x75], ch
xor ebx, dword [rbp - 0x28]
sub edi, 0xd5e07700
rol eax, 0xf
sub eax, 0x17d254fa
add ebx, edi
add ebx, edx
and ebx, 0x800000
je 0x180004fe2
sub ebx, 0x31bdc390
xor edi, dword [rbp - 0x28]
xor eax, ebx
sub ecx, 0xa5c81dda
add ebx, edx
add ebx, esi
and ebx, 0x20000000
je 0x180001646
sub ecx, 0x79d8a21d
ror ecx, 0x11
xor edx, dword [rbp - 0x28]
rol edx, 0x1e
sub eax, 0x81e3dde9
add ebx, ecx
add ebx, eax
add ebx, edi
and ebx, 8
je 0x180007a6d
xor edx, 0xf3d0f5db
ror eax, 0xe
xor ebx, 0x3fe0533b
ror ebx, 0xe
xor esi, 0xa2cf1cb0
jmp 0x1800069b3

Function at 0x18000a240
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov dword [rbp - 0x10], 0x1b635a9
mov dh, 1

Function at 0x18000a2d0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
sub edx, 0x34fdff5c
sub edi, 0x33cdaf4f
xor ecx, 0x494ada01
jmp 0x180003329
Function at 0x18000a3c0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
jp 0x18000a371
invalid
inc dword [rcx + 0x7081d845]
push rbp
std
xor ebx, dword [rbp - 0x28]
rol ebx, 0x18
ror edi, 0x14
add esi, 0x39c9d2a7
sub ecx, 0x6df4a315
add ebx, ecx
add ebx, eax
and ebx, 0x100
je 0x180003329
rol edx, 0x1b
xor ecx, 0x7b08f8a6
rol edi, 9
add ebx, eax
add ebx, esi
add ebx, edi
and ebx, 0x2000
je 0x180006718
add eax, 0x8a429a18
sub edi, 0x2e301beb
sub ebx, 0xb5088995
xor esi, dword [rbp - 0x28]
add ebx, ecx
add ebx, esi
add ebx, edi
and ebx, 0x8000
je 0x18000abd5
int1
invalid
add byte [rax], al
add edi, 0x7bf16796
sub edx, 0x1d2fafc3
ror eax, 0x18
ror esi, 0xa
jmp fcn.180003226
add dword [rbp - 0x28], 0x6a6fa25d
xor ebx, dword [rbp - 0x28]
add ebx, 0x81d57568
add eax, 0x63a9b1fc
ror esi, 0xd
rol edx, 3
add ebx, ecx
add ebx, edi
add ebx, edx
and ebx, 0x40000
je 0x180003329
rol ebx, 2
sub esi, 0xef70893a
sub ecx, 0xaf471525
add eax, 0x14d620e8
add ebx, eax
add ebx, edi
add ebx, esi
and ebx, 0x8000000
je fcn.180005b35
rol ebx, 0x16
sub ecx, 0xafd37bd6
xor ebx, edx
add ebx, ecx
add ebx, edx
and ebx, 0x100000
je 0x180001819
sub esi, 0x3728b39a
rol ecx, 4
ror edi, 0x17
ror edi, 0x1d
jmp fcn.180002b3a
Function at 0x18000a460
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
and ebx, 0x8000000
je 0x180008604
add eax, 0x1c0f5f54
ror edi, 0x15
add edx, 0x46cdaba2
sub ebx, 0x79820bd8
xor eax, 0x3d777c5b
add ebx, esi
add ebx, edx
add ebx, edi
and ebx, 0x1000
je 0x180008aee
rol ecx, 0x17
rol ebx, 0x1f
ror ecx, 4
leave
add al, 0x81
jmp 0x1800082fc
pop rbp
jns 0x18000839e
add ebx, ecx
add ebx, eax
add ebx, edx
and ebx, 2
je 0x18000977f
rol eax, 0x19
rol edi, 0x15
ror eax, 0x15
sub ecx, 0x7eb60861
jmp 0x18000132b
add dword [rbp - 0x28], 0x92d39395
xor ebx, dword [rbp - 0x28]
sub ebx, 0x4614b5a3
rol ecx, 0x1a
ror ebx, 0xc
sub esi, 0xc1ebb080
add ebx, edi
add ebx, ecx
and ebx, 0x100
je 0x18000a3fb
add edx, 0x2d94e5a8
sub edx, 0x469f14d2
sub ebx, 0xd1b80165
add ebx, edi
add ebx, eax
add ebx, esi
and ebx, 0x100
je 0x180001c09
sub ecx, 0x190a36e2
ror esi, 9
ror ebx, 0xd
ror eax, 0x1f
add esi, 0x8ee5ae69
add ebx, edi
add ebx, esi
add ebx, edx
and ebx, 0x400
je fcn.180002b3a
sub ecx, 0x67f53c1b
xor edx, 0xd3c7998
add ecx, 0x6bf155e6
add edi, 0x34837b32
jmp 0x18000272d
add dword [rbp - 0x28], 0x96617c1d
xor ebx, dword [rbp - 0x28]
ror ecx, 0xd
rol edx, 0x1a
ror ecx, 9
add ebx, eax
add ebx, edx
and ebx, 0x40000000
add dword [rbp - 0x28], 0xbd4ef00c
xor ebx, dword [rbp - 0x28]
ror eax, 0x12
add dword [rbp - 0x28], 0x744dae99
xor ebx, dword [rbp - 0x28]
add eax, 0x8bd1b3d8
rol esi, 0x1b
xor eax, 0xcef1c285
add ebx, eax
add ebx, esi
add ebx, edx
and ebx, 0x1000
je 0x180009613
sub ecx, 0x701559bf
rol ecx, 0x1c
xor edi, dword [rbp - 0x28]
add esi, 0x37ba4c62
add ebx, edx
add ebx, eax
and ebx, 0x40000000
je 0x180001646
sub esi, 0xb9eea344
sub edx, 0xa958d1e
sub ecx, 0x101d3ee2
add ebx, edi
add ebx, ecx
add ebx, esi
and ebx, 0x100000
je 0x180001d0c
add edi, 0xd8479b94
sub esi, 0xf573d030
sub edx, 0xc382143
jmp 0x180006572

Function at 0x18000a590
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0xdcf390e5
xor ebx, dword [rbp - 0x28]
rol eax, 0x14
xor ecx, 0xed02d8c1
add eax, 0x2b252474
add eax, 0x8865ff86
add ebx, ecx
add ebx, esi
and ebx, 0x2000000
je 0x180007101
sub edx, 0xd6d16c82
rol edx, 0x1d
rol edx, 0x10
add eax, 0x71a47fc8
add ebx, edi
add ebx, ecx
add ebx, esi
and ebx, 0x80
je 0x18000a2e7
ror eax, 0xa
ror esi, 8
rol eax, 0x18
ror eax, 2
add ebx, eax
add ebx, edi
and ebx, 8
je 0x18000aea9
add edx, 0x3359be25
add ebx, 0xa67b143c
xor eax, esi
xor ecx, 0xa77ccb50
jmp fcn.180006e5e
mov al, 0xaa
xor ebx, dword [rbp - 0x28]
ror edx, 5
ror eax, 8
rol edi, 6
add eax, 0x9e6474d8
fdiv dword [rsp + riz*2 - 0x62]
ror edx, 0xf
add ebx, edi
add ebx, ecx
add ebx, eax
and ebx, 2
je 0x18000a516
sub edi, 0x63f0c241
ror edx, 0x1e
xor esi, 0x7c1c086e
imul byte [rsi + 8]
sbb al, 0x7c
xor edx, dword [rbp - 0x28]
rol ecx, 0x16
add ebx, edx
add ebx, esi
invalid
Function at 0x18000a750
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x669259f8
xor ebx, dword [rbp - 0x28]
ror edi, 0x1f
sub esi, 0xff3775cc
xor ecx, esi
add ebx, edi
add ebx, ecx
add ebx, eax
and ebx, 0x4000
je 0x180001c09
add ecx, 0x863d9935
rol ebx, 0xe
rol edi, 4
add eax, 0x5fd7b774
add ebx, ecx
add ebx, edi
add dword [rbp - 0x28], 0xee16f1c8
xor ebx, dword [rbp - 0x28]
rol edi, 3
rol eax, 0x1d
add edi, 0xb3c0b250
rol eax, 0xf
add ebx, ecx
add ebx, esi
and ebx, 0x200
je 0x18000a717
ror esi, 4
rol edi, 0xd
rol eax, 6
add ecx, 0x1dd1351f
rol ecx, 0x10
add ebx, edi
add ebx, esi
and ebx, 2
je 0x180004113
sub edx, 0x274f8e1a
add edx, 0xb5ad3082
rol edi, 0x1e
xor ebx, dword [rbp - 0x10]
add ebx, edi
add ebx, eax
and ebx, 0x800
je 0x18000aac1
sub edx, 0x258d24e1
ror esi, 4
xor ecx, dword [rbp - 0x10]
add esi, 0x9763ca6d
invalid
insd dword [rdi], dx
retf 0x9763
jmp 0x180008aee
add dword [rbp - 0x28], 0x5be182e5
xor ebx, dword [rbp - 0x28]
sub edi, 0x1b6740bf
ror edi, 0xc
ror ebx, 2
sub edx, 0x6b0cff32
ror edx, 0x15
add ebx, edx
add ebx, ecx
add ebx, eax
and ebx, 0x400000
je 0x180002550
sub ebx, 0x43d265f1
add ecx, 0x53c075ab
xor esi, 0xa0424683
sub ebx, 0x5aac9e44
add edx, 0x5985c2da
add ebx, edx
add ebx, esi
and ebx, 0x20000
je fcn.180004a57
sub ecx, 0xd44cd353
ror ecx, 0x1c
sub ecx, 0x724e2d02
ror edi, 0x1c
sub esi, 0x457709e4
add ebx, ecx
add ebx, esi
add ebx, eax
and ebx, 2
je 0x180005469
add ebx, 0x6cf2aac3
xor ecx, 0x3cb67182
ror eax, 0x1a
jmp fcn.180003226
add dword [rbp - 0x28], 0x67204162
xor ebx, dword [rbp - 0x28]
rol eax, 0x18
sub ebx, 0xad274cad
add eax, 0x43bb02a9
add ebx, eax
add ebx, esi
add ebx, edi
and ebx, 0x100
je 0x180006572
rol edx, 0x19
add dword [rbp - 0x28], 0x61303c43
xor ebx, dword [rbp - 0x28]
add edi, 0x5a90f17c
ror eax, 7
add edi, 0x1ef5710d
ror esi, 0x17
add ebx, eax
add ebx, ecx
add ebx, esi
and ebx, 0x80000000
je 0x180006b5c
sub eax, 0xe958eb1c
ror edx, 0x10
sub edi, 0xcb49ad19
sbb dword [rbp - 0x3e7e34b7], ebp
adc dword [rdx - 0x33], esi
mov eax, 0xd301c301
add ebx, esi
and ebx, 0x4000000
je 0x180009122
ror edx, 0xd
add esi, 0x578b2826
ror ecx, 0x15
add ebx, edx
add ebx, esi
add ebx, edi
and ebx, 0x80
je fcn.180005b35
rol esi, 7
sub edx, 0x60f4031e
xor ebx, 0x895ddd76
rol ecx, 0x19
sub eax, 0xd69de
jmp fcn.180003e81
push rbp
mov rbp, rsp
sub rsp, 0x30
mov dword [rbp - 0x10], 0x1b635a9
jmp 0x180008139

Function at 0x18000a9d0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
out dx, eax
fsubr st(7)
adc eax, 0x8c9c104
jrcxz 0x18000a9c2
add byte [rax], al
add cl, byte [rdi]
test byte [rdx - 0x7e000055], dh
int1
jle 0x18000a966
adc al, 0xc0
ror eax, 0x1d
ror ecx, 5
add eax, 0xf2877701
add ebx, edi
add ebx, edx
and ebx, 0x800000
je 0x180001d0c
rol ecx, 0xb

Function at 0x18000a9f0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
rol eax, 0x13
ror ecx, 0xb
jmp 0x1800034e1
Function at 0x18000aad0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x32eb1511
xor ebx, dword [rbp - 0x28]
add eax, 0x5914dea0
ror edi, 0xf
add ecx, 0xee3cdf8a
add ebx, eax
add ebx, esi
and ebx, 0x4000000
je 0x18000aea9
ror ebx, 9
xor esi, ebx
sub eax, 0x10a9b0d1
add ebx, edx
add ebx, edi
add ebx, esi
and ebx, 1
je 0x1800082d3
xor eax, edx
add eax, 0x1fcf6438
add ebx, 0xaae92421
xor edx, 0x7cad4078
add ebx, edi
add ebx, esi
add ebx, edx
and ebx, 0x80000
je fcn.180004a57
sub edi, 0xff90b12f
sub ecx, 0xcd1b4ad2
rol edx, 0xc
sub edx, 0xbcb1f976
jmp fcn.180005b35
add dword [rbp - 0x28], 0x95140317
xor ebx, dword [rbp - 0x28]
sub eax, 0x8143f679
xor edi, dword [rbp - 0x10]
add eax, 0x3a0c8684
add ebx, eax
add ebx, edi
add dword [rbp - 0x28], 0x61f146b3
xor ebx, dword [rbp - 0x28]
rol ebx, 0xb
sub ecx, 0x2a5bcd8b
mov ecx, ebp
pop rbx
sub al, byte [rcx - 0x1ca7e10]
iretd
xor eax, edi
add ebx, eax
add ebx, edx
add ebx, ecx
and ebx, 0x100000
je 0x180008a5d
sub esi, 0xb7cbf425
xor eax, 0xd8d9d21d
sub edx, 0x997c4616
rol ebx, 0xc
sub ecx, 0x2c6d7683
add ebx, edx
add ebx, ecx
and ebx, 0x2000000
add byte [rax], al
add cl, byte [rdi]
invalid
xchg esp, eax
out 0xff, eax
invalid
sub ecx, 0x3c041f74
add ebx, esi
and ebx, 0x2000
je 0x180006ad9
ror eax, 0x12
xor ebx, 0xee6de4ad
xor edi, 0x8e692be1
xor edx, edi
ror edi, 0x10
add ebx, eax
add ebx, esi
and ebx, 0x20000000
je 0x180002d4f
sub esi, 0xf02f9866
ror ebx, 0x1d
ror esi, 0x1d
xor eax, dword [rbp - 0x10]
ror eax, 0xe
jmp 0x180008aee
add dword [rbp - 0x28], 0x41eebb85
xor ebx, dword [rbp - 0x28]
add edx, 0x917c6a7d
rol edx, 0x11
sub ebx, 0xb0300eb7
ror edi, 0x17
ror esi, 8
add ebx, edi
add ebx, eax
and ebx, 0x8000
je 0x18000aac1
sub edx, 0xdb7a6208
rol edx, 6
add esi, 0x316e8c7a
xor edi, 0xb0549b48
add ebx, esi
add ebx, edx
and ebx, 0x10000
je 0x180007d10
xor esi, dword [rbp - 0x10]
ror edi, 3
xor edi, 0xe00703a6
rol esi, 0x1c
add ecx, 0x86a8bf54
add ebx, eax
add ebx, edx
add ebx, edi
and ebx, 0x8000000
je 0x180003558
add edi, 0x366b9bd7
ror edi, 3
xor esi, dword [rbp - 0x10]
jmp fcn.18000312f
Function at 0x18000ada0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edx, 0xf8d59f44
mov rsp, rbp
sub rsp, 0x30
mov ebx, 0x92e8d182
mov edi, 0xebea2c42
mov dword [rbp - 0x28], 0x38caefc8
add dword [rbp - 0x10], 1
mov ecx, 0x10e74163
mov esi, 0xa88d2a18
mov eax, dword [rbp - 0x10]
jmp fcn.180007343
add dword [rbp - 0x28], 0x6997076f
xor ebx, dword [rbp - 0x28]
xor ebx, ecx
rol esi, 6
rol ebx, 0x15
ror eax, 0x14
adc al, 0x81
sal cl, 0x76
adc byte [rdi - 0xcfe2cff], dh
and ebx, 1
je 0x180009c9b
add eax, 0xf3dc3afc
sub edi, 0x8ded48b3
rol ecx, 0x18
rol edx, 8
add ebx, edx
add ebx, eax
add ebx, esi
and ebx, 0x2000000
je 0x180001b8a
sub edx, 0x4c85f5f2
add edi, 0xde374572
xor eax, dword [rbp - 0x10]
add ebx, eax
add ebx, esi
and ebx, 0x8000
je 0x180004fe2
rol eax, 2
ror esi, 0x19
rol ebx, 0x11
rol edi, 0xc
sub edx, 0x8e3dd9cb
jmp 0x18000121c
add dword [rbp - 0x28], 0x3990e203
xor ebx, dword [rbp - 0x28]
ror esi, 0xf
add ebx, 0xaac6d733
ror edi, 7
add ebx, ecx
add ebx, esi
and ebx, 0x20
je 0x1800069b3
rol edx, 5
add ecx, 0x4a7b5c36
rol edx, 0xd
ror edi, 6
add ebx, edi
add ebx, ecx
add ebx, esi
and ebx, 0x100
je 0x180008aee
ror esi, 9
ror ebx, 0x1d
sub edx, 0x9350270e
sub esi, 0xc22e265b
add ebx, ecx
add ebx, eax
add ebx, esi
and ebx, 0x8000000
je 0x180005c34
add ebx, 0x2773a42f
rol eax, 0xa
ror ebx, 0x1d
jmp 0x180009122
or edx, 0x4c
sub edx, 0x1e19a082
xor ecx, 0xb37bc217
invalid

Function at 0x18000ae40
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0xc53235a2
xor ebx, dword [rbp - 0x28]
add esi, 0x39b75d98
rol ecx, 0x1c
sub eax, 0x4259e1e1
rol edx, 0xc
add esi, 0xd8fe0ad6
add ebx, esi
add ebx, ecx
and ebx, 8
je 0x18000ae1d
sub ecx, 0xada63e1c
xor esi, dword [rbp - 0x28]
ror ebx, 0x17
add edx, 0x9c43a3b7
mov bh, 0xa3
pushfq
add eax, 0x5fd4d3dc
add ebx, edx
add ebx, ecx
and ebx, 0x4000000
je fcn.180005b35
rol ebx, 4
xor edi, esi
xor edi, dword [rbp - 0x10]
xor esi, 0x2c03de1f
add ebx, esi
add ebx, edi
and ebx, 0x80000
je fcn.180001e0f
rol edx, 7
add edx, 0x2d6cd7cc
add edx, 0x338cb63a
add edx, 0xfe94b848
xor esi, dword [rbp - 0x28]
jmp fcn.180008e27
add ebx, ecx
and ebx, 0x4000
je 0x1800034e1
add esi, 0xf04a1ce8
ror esi, 0x1b
add ecx, 0x2b7a85ab
rol ecx, 0x1b
add ebx, esi
add ebx, eax
and ebx, 0x4000000
je 0x1800065f3
add dword [rbp - 0x28], 0xebe128cd
xor ebx, dword [rbp - 0x28]
xor esi, dword [rbp - 0x10]
rol edx, 0x1f
ror ecx, 0x18
rol edi, 0x18
xor eax, 0x49e0461b
add ebx, esi
add ebx, ecx
and ebx, 0x40000
add byte [rax + rax], al
je 0x180003c84
xor edi, dword [rbp - 0x10]
invalid
invalid
fsubp st(6)
Function at 0x18000ae60
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x32eb1511
xor ebx, dword [rbp - 0x28]
add eax, 0x5914dea0
ror edi, 0xf
add ecx, 0xee3cdf8a
add ebx, eax
add ebx, esi
and ebx, 0x4000000
je 0x18000aea9
ror ebx, 9
xor esi, ebx
sub eax, 0x10a9b0d1
add ebx, edx
add ebx, edi
add ebx, esi
and ebx, 1
je 0x1800082d3
xor eax, edx
add eax, 0x1fcf6438
add ebx, 0xaae92421
xor edx, 0x7cad4078
add ebx, edi
add ebx, esi
add ebx, edx
and ebx, 0x80000
je fcn.180004a57
sub edi, 0xff90b12f
sub ecx, 0xcd1b4ad2
rol edx, 0xc
sub edx, 0xbcb1f976
jmp fcn.180005b35
add dword [rbp - 0x28], 0x95140317
xor ebx, dword [rbp - 0x28]
sub eax, 0x8143f679
xor edi, dword [rbp - 0x10]
add eax, 0x3a0c8684
add ebx, eax
add ebx, edi
add dword [rbp - 0x28], 0x61f146b3
xor ebx, dword [rbp - 0x28]
rol ebx, 0xb
sub ecx, 0x2a5bcd8b
mov ecx, ebp
pop rbx
sub al, byte [rcx - 0x1ca7e10]
iretd
xor eax, edi
add ebx, eax
add ebx, edx
add ebx, ecx
and ebx, 0x100000
je 0x180008a5d
sub esi, 0xb7cbf425
xor eax, 0xd8d9d21d
sub edx, 0x997c4616
rol ebx, 0xc
sub ecx, 0x2c6d7683
add ebx, edx
add ebx, ecx
and ebx, 0x2000000
add byte [rax], al
add cl, byte [rdi]
invalid
xchg esp, eax
out 0xff, eax
invalid
sub ecx, 0x3c041f74
add ebx, esi
and ebx, 0x2000
je 0x180006ad9
ror eax, 0x12
xor ebx, 0xee6de4ad
xor edi, 0x8e692be1
xor edx, edi
ror edi, 0x10
add ebx, eax
add ebx, esi
and ebx, 0x20000000
je 0x180002d4f
sub esi, 0xf02f9866
ror ebx, 0x1d
ror esi, 0x1d
xor eax, dword [rbp - 0x10]
ror eax, 0xe
jmp 0x180008aee
add dword [rbp - 0x28], 0x41eebb85
xor ebx, dword [rbp - 0x28]
add edx, 0x917c6a7d
rol edx, 0x11
sub ebx, 0xb0300eb7
ror edi, 0x17
ror esi, 8
add ebx, edi
add ebx, eax
and ebx, 0x8000
je 0x18000aac1
sub edx, 0xdb7a6208
rol edx, 6
add esi, 0x316e8c7a
xor edi, 0xb0549b48
add ebx, esi
add ebx, edx
and ebx, 0x10000
je 0x180007d10
xor esi, dword [rbp - 0x10]
ror edi, 3
xor edi, 0xe00703a6
rol esi, 0x1c
add ecx, 0x86a8bf54
add ebx, eax
add ebx, edx
add ebx, edi
and ebx, 0x8000000
je 0x180003558
add edi, 0x366b9bd7
ror edi, 3
xor esi, dword [rbp - 0x10]
jmp fcn.18000312f
Function at 0x18000af60
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x858fd5a0
xor ebx, dword [rbp - 0x28]
add ecx, 0x7326a8be
ror ebx, 0x1e
ror eax, 0xd
or eax, 0xd301cb01
add ebx, eax
and ebx, 0x200000
je 0x180001d0c
sub edx, 0xfd8e91fc
xor esi, 0xbd027315
sub ecx, 0x81c243ff
sub ebx, 0xed29b24
xor ebx, dword [rbp - 0x10]
add ebx, esi
add ebx, edx
and ebx, 0x20
je 0x18000aea9
xor eax, esi
add ebx, 0xe8778eaa
rol edi, 2
ror eax, 0xb
add ebx, edi
add ebx, edx
and ebx, 0x20000
je 0x18000af35
ror esi, 0x10
xor ecx, 0x85b07a50
sub eax, 0xc989054b
add eax, 0xf2055496
jmp 0x180004193
mov ebx, 0x92e8d182
mov edx, 0xf8d59f44
mov rsp, rbp
mov ecx, 0x10e74163
sub rsp, 0x30
inc dword [rbp - 0x10]
mov eax, dword [rbp - 0x10]
mov edi, 0xebea2c42
mov dword [rbp - 0x28], 0x38caefc8
mov esi, 0xa88d2a18
jmp fcn.180007343
add dword [rbp - 0x28], 0xecd2693
xor ebx, dword [rbp - 0x28]
add esi, 0x1d1de8ce
xor esi, 0x85ac89a4
xor ecx, 0xa263fe39
add edi, 0x81c0a7a5
add ebx, eax
add ebx, ecx
and ebx, 0x80
add byte [rdi], cl
invalid
invalid
sar bh, 1
invalid
ror edx, 0xe
ror eax, 0x14
xor esi, eax
add ebx, esi
add ebx, ecx
and ebx, 0x20
je fcn.180003e81
sub ebx, 0x4b94ae4b
xor edx, dword [rbp - 0x10]
sub edx, 0x8bd28063
xor ecx, 0x728d6144
add ebx, eax
add ebx, edi
add ebx, ecx
and ebx, 0x800
je 0x1800030af
add edi, 0x80f5fba
xor edi, eax
rol esi, 0xb
jmp fcn.180004a57
push rbp
mov rbp, rsp
sub rsp, 0x30
mov dword [rbp - 0x10], 0x1b635a9
jmp 0x1800072bb
Function at 0x18000b310
Capabilities:
Encode data using xor

Disassembly:
mov ecx, dword [rbx]
sub ecx, eax
xor ecx, edx
xor ecx, edx
mov dword [rbx], ecx
add rbx, 4
sub rax, 4
cmp eax, 0
ja 0x18000b308
mov rcx, qword [rbp]
add rcx, 0x88430
call rcx
mov esi, edx
mov rdi, rcx
xor esi, esi
mov dword [rsp + 0xf0], esi
test rcx, rcx
je 0x18000b3f6
cmp qword [rcx], rsi
jne 0x18000b3f6
lea ecx, [rsi + 0x60]
call fcn.18004584c
mov rbx, rax
mov qword [rsp + 0xf0], rax
test rax, rax
je 0x18000b3e1
mov rax, qword [r14]
test rax, rax
jne 0x18000b37b
lea rdx, [0x18004fb96]
jmp 0x18000b388
mov rdx, qword [rax + 0x28]
test rdx, rdx
jne 0x18000b388
lea rdx, [rax + 0x30]
lea rcx, [rsp + 0x78]
call sym.msvcp110_win.dll___0_Locinfo_std__QEAA_PEBD_Z
mov esi, 1
and dword [rbx + 8], 0
lea rax, vtable.std::ctype_unsigned_short_int_.0
mov qword [rbx], rax
lea rcx, [rsp + 0x28]
call fcn.180007e20
movups xmm0, xmmword [rax]
movups xmmword [rbx + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbx + 0x20], xmm1
lea rcx, [rsp + 0x48]
call sym.msvcp110_win.dll__Getcvt
movups xmm0, xmmword [rax]
movups xmmword [rbx + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbx + 0x40], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rbx + 0x50], xmm0
jmp 0x18000b3e3
xor ebx, ebx
mov qword [rdi], rbx
test sil, 1
je 0x18000b3f6
lea rcx, [rsp + 0x78]
call sym.msvcp110_win.dll___1_Locinfo_std__QEAA_XZ
mov eax, 2
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret

Function at 0x18000be10
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x5c13e94e
xor ebx, dword [rbp - 0x28]
add eax, 0x4044e393
xor ecx, 0x837ac382
rol esi, 0x15
add ecx, 0x76b8ff1e
add ebx, eax
add ebx, esi
add ebx, edx
and ebx, 0x40000000
je 0x180005ab0
xor eax, 0x76e058a3
rol eax, 0xb
sub edi, 0x80842b2a
xor ebx, 0xa63fe04
ror edi, 8
add ebx, edx
add ebx, eax
and ebx, 0x80
je fcn.180005b35
ror eax, 8
sub ecx, 0x16978445
xor ebx, 0x5de48029
add edx, 0xdd1349e4
add ebx, esi
add ebx, eax
and ebx, 0x80000000
je 0x1800059aa
add eax, 0xe30d99a1
sub eax, 0xcaf52f6
xor ebx, 0x8505eff9
sub edx, 0xa2d64524
sub ecx, 0x9a1e10e9
jmp 0x180002020
push rbp
mov rbp, rsp
sub rsp, 0x30
mov dword [rbp - 0x10], 0x1b635a9
jmp 0x180004c5f

Function at 0x18000bec0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov dword [rbp - 0x10], 0x1b635a9
jmp 0x180004e97