joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180004560
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x1aaf8fda
xor ebx, dword [rbp - 0x28]
xor eax, 0x141a84ae
xor esi, dword [rbp - 0x10]
sub esi, 0xb97919
ror ecx, 0x1c
add ebx, eax
add ebx, edi
and ebx, 0x800
je 0x180006572
xor eax, 0x3f5484ff
rol ebx, 0xe
rol edx, 0x10
sub esi, 0xf4010cb4
xor ecx, dword [rbp - 0x10]
add ebx, eax
add ebx, ecx
and ebx, 0x80000
je 0x1800026f8
sub ecx, 0x3d103292
sub eax, 0x50ecab20
add edx, 0x58c554c
add esi, 0x96b47a6d
add ebx, eax
add ebx, edi
and ebx, 0x800000
je fcn.180001a39
xor ebx, 0x88b50ad2
ror edi, 3
rol edx, 0x19
add edi, 0x1695db2a
jmp 0x18000aac1
mov edx, 0xf8d59f44
mov edi, 0xebea2c42
jmp 0x18000274b
mov esp, ebp
sub rsp, 0x30
inc dword [rbp - 0x10]
mov dword [rbp - 0x28], 0x38caefc8
mov ebx, 0x92e8d182
mov eax, dword [rbp - 0x10]
mov ecx, 0x10e74163
mov esi, 0xa88d2a18
jmp fcn.180007343
and ebx, 0x4000000
je 0x180003329
sub edx, 0x5b7efe86
sub edi, 0xdce948fd
rol edx, 0xb
ror ebx, 0xe
jmp 0x180005a37
add dword [rbp - 0x28], 0xf1a77df8
xor ebx, dword [rbp - 0x28]
add edi, 0xba45f64e
xor eax, edi
rol eax, 5
add ebx, edx
add ebx, esi
and ebx, 0x4000000
je 0x180007c21
xor edx, 0x3bda5494
ror edx, 8
rol edi, 7
add edx, 0x8eb045ab
add ebx, ecx
add ebx, eax
add ebx, esi
and ebx, 0x400000
je 0x18000129b
rol ecx, 5
rol edx, 0xd
rol eax, 2
add ebx, edx
add ebx, ecx
and ebx, 0x40000000
je 0x18000a2e7
ror esi, 0x1d
xor eax, dword [rbp - 0x10]
xor edx, dword [rbp - 0x10]
rol ebx, 0x1e
sub edi, 0x141b7458
jmp 0x180009eb2

Function at 0x1800047c0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xor esi, dword [rbp - 0x10]
rol edx, 0xb
sub edx, 0x6517f050
add ebx, edi
add ebx, eax
add ebx, esi
and ebx, 0x40000
je 0x180002550
rol eax, 0xd
xor edi, 0xfd67f3b7
xor eax, dword [rbp - 0x10]
add ebx, ecx
add ebx, edx
add ebx, eax

Function at 0x1800047f0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
and ebx, 0x1000000
je fcn.180002b3a
ror esi, 0xa
sub esi, 0x50489d72
xor eax, 0x39bcb9bf
ror ebx, 0xf
add esi, 0x3fe8d39b
jmp fcn.180005918
Function at 0x1800051c0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov esi, 0xa88d2a18
mov ebx, 0x92e8d182
mov rsp, rbp
mov ecx, 0x10e74163
sub rsp, 0x30
mov edi, 0xebea2c42
mov dword [rbp - 0x28], 0x38caefc8
mov edx, 0xf8d59f44
add dword [rbp - 0x10], 1
mov eax, dword [rbp - 0x10]
jmp fcn.180007343
add ebx, 0x4d1466c1
sub edx, 0xbbe4bb26
xor edx, 0x77b0de45
add ebx, 0x5b79b416
add ebx, eax
add ebx, esi
add ebx, edi
and ebx, 0x80000000
je 0x18000977f
xor edx, 0x64bb1ccd
ror ebx, 0x1d
sub eax, 0xe24bf91a
rol ecx, 0x17
add ebx, edi
add ebx, eax
and ebx, 0x20
je 0x180006937
rol edx, 0x1c
sub ebx, 0x272876f6
add edx, 0xbc2332b7
ror ebx, 0x11
sub eax, 0x2b590b4d
add ebx, ecx
add ebx, eax
and ebx, 0x800
je fcn.180008e27
rol esi, 3
add edx, 0x9239aecc
rol esi, 0x1e
sub ebx, 0xcb9c7fc0
xor edi, eax
jmp 0x180004d00
add dword [rbp - 0x28], 0x6ab9e407
xor ebx, dword [rbp - 0x28]
sub esi, 0x426b2e4e
rol esi, 0x17
ror eax, 0xd
add ebx, esi
add ebx, eax
and ebx, 0x10000000
je 0x180001e9b
ror esi, 0x18
add eax, 0xd545a93b
sub edi, 0xaee761db
add esi, 0xdb2a4be
ror edi, 0x1d
add ebx, esi
add ebx, edx
add ebx, edi
and ebx, 0x10
je 0x180009122
sahf
invalid
add byte [rax], al
ror edi, 0x1c
xor ebx, ecx
rol eax, 9
xor eax, 0x44d8a90
add al, 1
retf
add ebx, edx
and ebx, 8
je 0x180003c84
rol ebx, 0x12
ror edx, 0x12
xor eax, 0x49a56da9
ror edi, 0xf
jmp 0x180001c09

Function at 0x180005520
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x68214895
xor ebx, dword [rbp - 0x28]
ror edi, 0x16
rol ebx, 0x1a
xor eax, edi
add ebx, edx
add ebx, ecx
add ebx, esi
and ebx, 0x2000
add byte [rax], ah
add byte [rax], al
je fcn.180004a57
sub eax, 0xf09dbf8d
rol eax, 9
rol edi, 2
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x2000
je fcn.180006e5e
add edi, 0x6e7eda2d
rol esi, 0xd
ror edx, 0x19
add ebx, ecx
add ebx, edx
add ebx, esi
and ebx, 0x80000000
je fcn.180001a39
add edx, 0xf2bb12bf
sub eax, 0x60a02b85
xor ecx, 0xdebaeea
jmp 0x180007cd7
mov ecx, 0x10e74163
mov rsp, rbp
mov esi, 0xa88d2a18
mov ebx, 0x92e8d182
mov edx, 0xf8d59f44
mov dword [rbp - 0x28], 0x38caefc8
mov edi, 0xebea2c42
sub rsp, 0x30
add dword [rbp - 0x10], 1
mov eax, dword [rbp - 0x10]
jmp fcn.180007343
add dword [rbp - 0x28], 0x32ef660
xor ebx, dword [rbp - 0x28]
xor edx, dword [rbp - 0x28]
sub edx, 0xb450ad89
add esi, 0xf837fc03
add ebx, ecx
add ebx, esi
and ebx, 0x800
je 0x1800064c4
rol ecx, 6
add ecx, 0xb94c97fb
sub eax, 0xf1d94a3f
xor edx, ecx
add ebx, ecx
add ebx, edx
and ebx, 2
je 0x180005506
add esi, 0xc5ab76d9
add ecx, 0xa2719484
add edx, 0x34197
rol ebx, 0xb
ror ebx, 0x1f
add ebx, eax
add ebx, edi
and ebx, 0x100
je fcn.180005b35
rol edi, 0x1b
ror edx, 2
ror edi, 0x1b
sub edi, 0x640ff24c
invalid
invalid
pcmpgtb mm5, mm1
invalid
invalid
invalid
invalid
push rbp
mov rbp, rsp
sub rsp, 0x30
mov dword [rbp - 0x10], 0x1b635a9
mov dh, 1
jmp 0x180009996
Function at 0x1800056f0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0xfdf6b31f
xor ebx, dword [rbp - 0x28]
add edx, 0xadd32306
add edx, 0xd321366a
ror edi, 8
add ebx, eax
add ebx, edx
add ebx, edi
and ebx, 0x80
je 0x18000272d
add ebx, 0x7a2c7518
sub ebx, 0xd463f3c7
xor edi, esi
xor eax, dword [rbp - 0x28]
xor ecx, 0xd8a4bd69
add ebx, eax
add ebx, ecx
and ebx, 0x10000
je 0x18000aea9
ror edi, 0x14
add edx, 0xc5a87580
vcmpltpd xmm2, xmm7, xmmword [0x153023afa]
retf
and ebx, 0x100
add byte [rax], al
add byte [rcx], al
je fcn.180002b3a
rol edi, 0xa
ror esi, 0xf
rol edi, 3
add ebx, edx
add ebx, eax
add ebx, ecx
and ebx, 4
je 0x180009122
rol edx, 0x15
rol eax, 0x18
add eax, 0x41995e1c
add edx, 0x5509690b
sub ecx, 0x5748e3ad
add ebx, ecx
add ebx, esi
and ebx, 0x100
je 0x180003f96
rol edx, 0x16
sub esi, 0x5a237965
ror edi, 0x15
jmp 0x18000132b

Function at 0x1800058f0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
sub rsp, 0x30
inc dword [rbp - 0x10]
mov edi, 0xebea2c42
mov esi, 0xa88d2a18
mov dword [rbp - 0x28], 0x38caefc8
mov ebx, 0x92e8d182
mov eax, dword [rbp - 0x10]
jmp fcn.180007343

Function at 0x180005b50
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edi
and ebx, 0x2000
je 0x180009122
add esi, 0x5f5adf17
ror ecx, 0x16
xor ecx, 0x2b8df547
add ebx, ecx
add ebx, eax
and ebx, 0x20000
je 0x180002550
add edx, 0xb619dc09
add esi, 0xd6028c5e
ror ebx, 0x1c
add ebx, edi
add ebx, eax
and ebx, 0x80
je 0x180001103
ror esi, 0xa
rol edx, 0x1a
xor esi, dword [rbp - 0x10]
jmp 0x180001646
Function at 0x180005d40
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edx, 0xf8d59f44
mov rsp, rbp
sub rsp, 0x30
mov ebx, 0x92e8d182
mov edi, 0xebea2c42
mov dword [rbp - 0x28], 0x38caefc8
add dword [rbp - 0x10], 1
mov ecx, 0x10e74163
mov esi, 0xa88d2a18
mov eax, dword [rbp - 0x10]
jmp fcn.180007343
add dword [rbp - 0x28], 0x6997076f
xor ebx, dword [rbp - 0x28]
xor ebx, ecx
rol esi, 6
rol ebx, 0x15
ror eax, 0x14
adc al, 0x81
sal cl, 0x76
adc byte [rdi - 0xcfe2cff], dh
and ebx, 1
je 0x180009c9b
add eax, 0xf3dc3afc
sub edi, 0x8ded48b3
rol ecx, 0x18
rol edx, 8
add ebx, edx
add ebx, eax
add ebx, esi
and ebx, 0x2000000
je 0x180001b8a
sub edx, 0x4c85f5f2
add edi, 0xde374572
xor eax, dword [rbp - 0x10]
add ebx, eax
add ebx, esi
and ebx, 0x8000
je 0x180004fe2
rol eax, 2
ror esi, 0x19
rol ebx, 0x11
rol edi, 0xc
sub edx, 0x8e3dd9cb
jmp 0x18000121c
add dword [rbp - 0x28], 0x3990e203
xor ebx, dword [rbp - 0x28]
ror esi, 0xf
add ebx, 0xaac6d733
ror edi, 7
add ebx, ecx
add ebx, esi
and ebx, 0x20
je 0x1800069b3
rol edx, 5
add ecx, 0x4a7b5c36
rol edx, 0xd
ror edi, 6
add ebx, edi
add ebx, ecx
add ebx, esi
and ebx, 0x100
je 0x180008aee
ror esi, 9
ror ebx, 0x1d
sub edx, 0x9350270e
sub esi, 0xc22e265b
add ebx, ecx
add ebx, eax
add ebx, esi
and ebx, 0x8000000
je 0x180005c34
add ebx, 0x2773a42f
rol eax, 0xa
ror ebx, 0x1d
jmp 0x180009122
or edx, 0x4c
sub edx, 0x1e19a082
xor ecx, 0xb37bc217
invalid

Function at 0x180005ee0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
ror edi, 0xe
ror esi, 0x11
add ebx, edi
add ebx, edx
and ebx, 0x4000000

Function at 0x180005ef0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
je fcn.18000379e
xor eax, edi
sub esi, 0xd60a614b
add edx, 0x9f7a500e
add esi, 0x3be9e6da
xor edx, dword [rbp - 0x10]
jmp fcn.18000312f

Function at 0x180006150
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
sti
and ebx, 0x80000
je 0x180001b8a
add edi, 0x8dd3112e
sub edi, 0xe0ac636
add eax, 0x7132c256
xor edi, 0x929a7786
jmp 0x18000a0ac

Function at 0x180006390
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov rsp, rbp
mov ecx, 0x10e74163
mov edx, 0xf8d59f44
mov dword [rbp - 0x28], 0x38caefc8
mov esi, 0xa88d2a18
mov edi, 0xebea2c42
mov ebx, 0x92e8d182
sub rsp, 0x30
inc dword [rbp - 0x10]
mov eax, dword [rbp - 0x10]
jmp fcn.180007343
and ebx, 0x20000
je 0x180005f12
sub ebx, 0xac1d01d0
ror edx, 0x12
ror edx, 0xa
rol edx, 0x10
jmp 0x180005ab0
Function at 0x180006dc0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xor byte [rax], al
add byte [rax], al
add dword [rbp - 0x10], 1
mov eax, dword [rbp - 0x10]
invalid
invalid

Function at 0x1800072d0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x858fd5a0
xor ebx, dword [rbp - 0x28]
add ecx, 0x7326a8be
ror ebx, 0x1e
ror eax, 0xd
or eax, 0xd301cb01
add ebx, eax
and ebx, 0x200000
je 0x180001d0c
sub edx, 0xfd8e91fc
xor esi, 0xbd027315
sub ecx, 0x81c243ff
sub ebx, 0xed29b24
xor ebx, dword [rbp - 0x10]
add ebx, esi
add ebx, edx
and ebx, 0x20
je 0x18000aea9
xor eax, esi
add ebx, 0xe8778eaa
rol edi, 2
ror eax, 0xb
add ebx, edi
add ebx, edx
and ebx, 0x20000
je 0x18000af35
ror esi, 0x10
xor ecx, 0x85b07a50
sub eax, 0xc989054b
add eax, 0xf2055496
jmp 0x180004193
mov ebx, 0x92e8d182
mov edx, 0xf8d59f44
mov rsp, rbp
mov ecx, 0x10e74163
sub rsp, 0x30
inc dword [rbp - 0x10]
mov eax, dword [rbp - 0x10]
mov edi, 0xebea2c42
mov dword [rbp - 0x28], 0x38caefc8
mov esi, 0xa88d2a18
jmp fcn.180007343
add dword [rbp - 0x28], 0xecd2693
xor ebx, dword [rbp - 0x28]
add esi, 0x1d1de8ce
xor esi, 0x85ac89a4
xor ecx, 0xa263fe39
add edi, 0x81c0a7a5
add ebx, eax
add ebx, ecx
and ebx, 0x80
add byte [rdi], cl
invalid
invalid
sar bh, 1
invalid
ror edx, 0xe
ror eax, 0x14
xor esi, eax
add ebx, esi
add ebx, ecx
and ebx, 0x20
je fcn.180003e81
sub ebx, 0x4b94ae4b
xor edx, dword [rbp - 0x10]
sub edx, 0x8bd28063
xor ecx, 0x728d6144
add ebx, eax
add ebx, edi
add ebx, ecx
and ebx, 0x800
je 0x1800030af
add edi, 0x80f5fba
xor edi, eax
rol esi, 0xb
jmp fcn.180004a57
push rbp
mov rbp, rsp
sub rsp, 0x30
mov dword [rbp - 0x10], 0x1b635a9
jmp 0x1800072bb

Function at 0x180007520
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
sbb eax, dword [rax]
add cl, al
leave
sbb al, 0x81
neg byte [rax + 0x6a]
sal bl, 1
rol edi, 0xc
sub ebx, 0xfb321c2b
jmp 0x18000755d
sbb al, 0x32
sti
add ebx, eax
add ebx, edi
add ebx, esi
and ebx, 1
je 0x1800034e1
sub eax, 0xa29bf7d8
ror eax, 0xf
rol edi, 0x1a
ror ebx, 5
xor ecx, edi
jmp 0x180001d0c

Function at 0x180007a40
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov esi, 0xa88d2a18
mov edi, 0xebea2c42
jmp 0x180007a8b
mov esp, ebp
mov ecx, 0x10e74163
mov dword [rbp - 0x28], 0x38caefc8
cmp byte [rax - 0x7f], cl
in al, dx
xor byte [rax], al
add byte [rax], al
inc dword [rbp - 0x10]
mov edx, 0xf8d59f44
mov eax, dword [rbp - 0x10]
mov ebx, 0x92e8d182
jmp fcn.180007343
push rbp
mov rbp, rsp
sub rsp, 0x30
mov dword [rbp - 0x10], 0x1b635a9
jmp 0x180007a38
Function at 0x180007ca0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
shr eax, 1
xchg edx, eax
mov edi, 0xebea2c42
mov edx, 0xf8d59f44
mov esi, 0xa88d2a18
mov ecx, 0x10e74163
mov rsp, rbp
sub rsp, 0x30
mov dword [rbp - 0x28], 0x38caefc8
add dword [rbp - 0x10], 1
mov eax, dword [rbp - 0x10]
jmp fcn.180007343
Function at 0x1800082f0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
and ebx, 0x8000000
je 0x180008604
add eax, 0x1c0f5f54
ror edi, 0x15
add edx, 0x46cdaba2
sub ebx, 0x79820bd8
xor eax, 0x3d777c5b
add ebx, esi
add ebx, edx
add ebx, edi
and ebx, 0x1000
je 0x180008aee
rol ecx, 0x17
rol ebx, 0x1f
ror ecx, 4
leave
add al, 0x81
jmp 0x1800082fc
pop rbp
jns 0x18000839e
add ebx, ecx
add ebx, eax
add ebx, edx
and ebx, 2
je 0x18000977f
rol eax, 0x19
rol edi, 0x15
ror eax, 0x15
sub ecx, 0x7eb60861
jmp 0x18000132b
add dword [rbp - 0x28], 0x92d39395
xor ebx, dword [rbp - 0x28]
sub ebx, 0x4614b5a3
rol ecx, 0x1a
ror ebx, 0xc
sub esi, 0xc1ebb080
add ebx, edi
add ebx, ecx
and ebx, 0x100
je 0x18000a3fb
add edx, 0x2d94e5a8
sub edx, 0x469f14d2
sub ebx, 0xd1b80165
add ebx, edi
add ebx, eax
add ebx, esi
and ebx, 0x100
je 0x180001c09
sub ecx, 0x190a36e2
ror esi, 9
ror ebx, 0xd
ror eax, 0x1f
add esi, 0x8ee5ae69
add ebx, edi
add ebx, esi
add ebx, edx
and ebx, 0x400
je fcn.180002b3a
sub ecx, 0x67f53c1b
xor edx, 0xd3c7998
add ecx, 0x6bf155e6
add edi, 0x34837b32
jmp 0x18000272d
add dword [rbp - 0x28], 0x96617c1d
xor ebx, dword [rbp - 0x28]
ror ecx, 0xd
rol edx, 0x1a
ror ecx, 9
add ebx, eax
add ebx, edx
and ebx, 0x40000000
add dword [rbp - 0x28], 0xbd4ef00c
xor ebx, dword [rbp - 0x28]
ror eax, 0x12
add dword [rbp - 0x28], 0x744dae99
xor ebx, dword [rbp - 0x28]
add eax, 0x8bd1b3d8
rol esi, 0x1b
xor eax, 0xcef1c285
add ebx, eax
add ebx, esi
add ebx, edx
and ebx, 0x1000
je 0x180009613
sub ecx, 0x701559bf
rol ecx, 0x1c
xor edi, dword [rbp - 0x28]
add esi, 0x37ba4c62
add ebx, edx
add ebx, eax
and ebx, 0x40000000
je 0x180001646
sub esi, 0xb9eea344
sub edx, 0xa958d1e
sub ecx, 0x101d3ee2
add ebx, edi
add ebx, ecx
add ebx, esi
and ebx, 0x100000
je 0x180001d0c
add edi, 0xd8479b94
sub esi, 0xf573d030
sub edx, 0xc382143
jmp 0x180006572

Function at 0x180008430
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
je 0x18000132b
sub ecx, 0xe47fdd18
rol esi, 0x15
rol esi, 6
add ebx, edi
add ebx, ecx
and ebx, 8
je 0x180007c21
add esi, 0xdaac45d2
xor eax, ecx
sub esi, 0x30950d40
xor ecx, 0x5a4002b7
sub ebx, 0x9da73471
jmp 0x18000abd5
Function at 0x180008580
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov ecx, 0x10e74163
mov edi, 0xebea2c42
mov esi, 0xa88d2a18
mov rsp, rbp
sub rsp, 0x30
mov ebx, 0x92e8d182
add dword [rbp - 0x10], 1
mov eax, dword [rbp - 0x10]
mov dword [rbp - 0x28], 0x38caefc8
mov edx, 0xf8d59f44
jmp fcn.180007343
add dword [rbp - 0x28], 0xf25bf04f
xor ebx, dword [rbp - 0x28]
ror eax, 0x15
add eax, 0x7d5521de
sub eax, 0x6e40c591
add ebx, esi
add ebx, edx
and ebx, 0x2000000
je 0x180007c21
xor esi, 0xba7c79b3
sub edi, 0xe94d61ad
rol esi, 0xd
xor ebx, 0x26e9be7e
rol edi, 8
add ebx, ecx
add ebx, edi
and ebx, 0x10
je 0x18000506a
xor edi, 0xfbee4af0
xor esi, 0x4d2f2a7c
rol edx, 4
add eax, 0xc0dae591
ror eax, 0x18
add ebx, esi
add ebx, edi
add ebx, edx
and ebx, 0x80000
je 0x180002ab4
add esi, 0xc37e1f4d
ror edx, 0x17
xor ebx, 0x8835197c
jmp 0x180001646
ror edi, 0xc
sub edx, 0x39b78c59
sub edi, 0x382a8df6
rol edi, 0x17
sub edx, 0xbaaab35c
add ebx, esi
add ebx, edx
and ebx, 0x400
je 0x1800092ad
rol esi, 0x15
sub edi, 0xc3dc9ac4
ror ebx, 0xa
ror ebx, 3
add ebx, eax
add ebx, edi
add ebx, ecx
and ebx, 0x100
je 0x18000272d
ror edx, 0x1b
rol ebx, 5
add ebx, 0x517db19a
rol esi, 0x1a
add edi, 0xdd8e48a9
add ebx, edi
add ebx, ecx
add ebx, edx
and ebx, 8
je 0x1800079ac
rol esi, 8
sub ecx, 0x55db6eb6
rol edx, 0x1d
add eax, 0xbc727284
jmp 0x180001c7e
Function at 0x180008680
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
and ebx, 0x8000000
je 0x180008604
add eax, 0x1c0f5f54
ror edi, 0x15
add edx, 0x46cdaba2
sub ebx, 0x79820bd8
xor eax, 0x3d777c5b
add ebx, esi
add ebx, edx
add ebx, edi
and ebx, 0x1000
je 0x180008aee
rol ecx, 0x17
rol ebx, 0x1f
ror ecx, 4
leave
add al, 0x81
jmp 0x1800082fc
pop rbp
jns 0x18000839e
add ebx, ecx
add ebx, eax
add ebx, edx
and ebx, 2
je 0x18000977f
rol eax, 0x19
rol edi, 0x15
ror eax, 0x15
sub ecx, 0x7eb60861
jmp 0x18000132b
add dword [rbp - 0x28], 0x92d39395
xor ebx, dword [rbp - 0x28]
sub ebx, 0x4614b5a3
rol ecx, 0x1a
ror ebx, 0xc
sub esi, 0xc1ebb080
add ebx, edi
add ebx, ecx
and ebx, 0x100
je 0x18000a3fb
add edx, 0x2d94e5a8
sub edx, 0x469f14d2
sub ebx, 0xd1b80165
add ebx, edi
add ebx, eax
add ebx, esi
and ebx, 0x100
je 0x180001c09
sub ecx, 0x190a36e2
ror esi, 9
ror ebx, 0xd
ror eax, 0x1f
add esi, 0x8ee5ae69
add ebx, edi
add ebx, esi
add ebx, edx
and ebx, 0x400
je fcn.180002b3a
sub ecx, 0x67f53c1b
xor edx, 0xd3c7998
add ecx, 0x6bf155e6
add edi, 0x34837b32
jmp 0x18000272d
add dword [rbp - 0x28], 0x96617c1d
xor ebx, dword [rbp - 0x28]
ror ecx, 0xd
rol edx, 0x1a
ror ecx, 9
add ebx, eax
add ebx, edx
and ebx, 0x40000000
add dword [rbp - 0x28], 0xbd4ef00c
xor ebx, dword [rbp - 0x28]
ror eax, 0x12
add dword [rbp - 0x28], 0x744dae99
xor ebx, dword [rbp - 0x28]
add eax, 0x8bd1b3d8
rol esi, 0x1b
xor eax, 0xcef1c285
add ebx, eax
add ebx, esi
add ebx, edx
and ebx, 0x1000
je 0x180009613
sub ecx, 0x701559bf
rol ecx, 0x1c
xor edi, dword [rbp - 0x28]
add esi, 0x37ba4c62
add ebx, edx
add ebx, eax
and ebx, 0x40000000
je 0x180001646
sub esi, 0xb9eea344
sub edx, 0xa958d1e
sub ecx, 0x101d3ee2
add ebx, edi
add ebx, ecx
add ebx, esi
and ebx, 0x100000
je 0x180001d0c
add edi, 0xd8479b94
sub esi, 0xf573d030
sub edx, 0xc382143
jmp 0x180006572

Function at 0x1800087b0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edx, 0xf8d59f44
sub rsp, 0x30
mov edi, 0xebea2c42
mov dword [rbp - 0x28], 0x38caefc8
inc dword [rbp - 0x10]
mov eax, dword [rbp - 0x10]
jmp fcn.180007343

Function at 0x1800088d0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x1db34f24
xor ebx, dword [rbp - 0x28]
add edi, 0xd34c0895
add esi, 0x28532cb5
sub al, 0x53
sub cl, al
invalid
adc eax, 0xfb01d301
add ebx, ecx
and ebx, 0x80
je 0x180004d7f
xor edi, dword [rbp - 0x10]
ror edx, 5
add esi, 0x6d2ffe6f
outsd dx, dword [rsi]
invalid
invalid
insd dword [rdi], dx
xor esi, 0xa8aba382
add ebx, eax
add ebx, ecx
and ebx, 0x200000
add byte [rax], al
and byte [rax], al
je 0x180002550
ror eax, 9
ror ebx, 0xf
add ebx, edi
and ebx, 0x10000
je 0x1800088cd
ror eax, 0x1a
xor ebx, 0x54d12c74
add eax, 0x3cea01
rol edx, 0xa
Function at 0x1800088e0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x1db34f24
xor ebx, dword [rbp - 0x28]
add edi, 0xd34c0895
add esi, 0x28532cb5
sub al, 0x53
sub cl, al
invalid
adc eax, 0xfb01d301
add ebx, ecx
and ebx, 0x80
je 0x180004d7f
xor edi, dword [rbp - 0x10]
ror edx, 5
add esi, 0x6d2ffe6f
outsd dx, dword [rsi]
invalid
invalid
insd dword [rdi], dx
xor esi, 0xa8aba382
add ebx, eax
add ebx, ecx
and ebx, 0x200000
add byte [rax], al
and byte [rax], al
je 0x180002550
ror eax, 9
ror ebx, 0xf
add ebx, edi
and ebx, 0x10000
je 0x1800088cd
ror eax, 0x1a
xor ebx, 0x54d12c74
add eax, 0x3cea01
rol edx, 0xa

Function at 0x180008900
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x28], 0x1db34f24
xor ebx, dword [rbp - 0x28]
add edi, 0xd34c0895
add esi, 0x28532cb5
sub al, 0x53
sub cl, al
invalid
adc eax, 0xfb01d301
add ebx, ecx
and ebx, 0x80
je 0x180004d7f
xor edi, dword [rbp - 0x10]
ror edx, 5
add esi, 0x6d2ffe6f
outsd dx, dword [rsi]
invalid
invalid
insd dword [rdi], dx
xor esi, 0xa8aba382
add ebx, eax
add ebx, ecx
and ebx, 0x200000
add byte [rax], al
and byte [rax], al
je 0x180002550
ror eax, 9
ror ebx, 0xf
add ebx, edi
and ebx, 0x10000
je 0x1800088cd
ror eax, 0x1a
xor ebx, 0x54d12c74
add eax, 0x3cea01
rol edx, 0xa

Function at 0x180008920
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
rol edi, 7
add ebx, edi
add ebx, ecx
add ebx, esi
and ebx, 0x10000000
je 0x180004193
sub ecx, 0x8b491a90
xor eax, 0xbdce8a4f
rol eax, 0x15
xor edx, 0xc3d07330
jmp 0x180001646

Function at 0x180008974
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edi, 0xebea2c42
mov ecx, 0x10e74163
mov rsp, rbp
mov esi, 0xa88d2a18
mov ebx, 0x92e8d182
sub rsp, 0x30
mov edx, 0xf8d59f44
mov dword [rbp - 0x28], 0x38caefc8
add dword [rbp - 0x10], 1
mov eax, dword [rbp - 0x10]
jmp fcn.180007343
add dword [rbp - 0x28], 0x1be8af10
xor ebx, dword [rbp - 0x28]
xor ecx, 0x81e56d05
rol esi, 3
add ebx, 0xfbdf969
add ebx, edx
add ebx, ecx
add ebx, edi
and ebx, 0x400000
je 0x180001b8a
sub esi, 0x66b106d2
ror ecx, 0x12
ror ebx, 0x11
xor ecx, 0x1e28842f
rol edx, 0x11
add ebx, esi
add ebx, edi
add ebx, eax
and ebx, 0x200
je 0x180008aee
add ebx, 0x16e0029f
add esi, 0x387c9fe5
xor edx, 0xb492295e
sub dword [rdx + 0x1c301b4], edx
and ebx, 0x100000
je 0x18000272d
add edx, 0xd58783ce
sub ecx, 0x2722cdc8
xor esi, dword [rbp - 0x28]
jmp 0x1800031b4
add ecx, 0x1a4abe06
add ecx, 0x74e5b549
xor edi, 0x2b504030
add ebx, 0xb6109a78
ror edi, 0xd
add ebx, edx
add ebx, ecx
and ebx, 0x400000
jrcxz 0x180009952
add byte [rax], al
je 0x18000894f
invalid
invalid
mov cl, 0x68
invalid