joyce8/EMBER2024-capa huggingface dataset:
Function at 0x110104700
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0xaafb3b52
xor ebx, dword [rbp - 0x18]
sub esi, 0xcb4c9f6a
xor edx, 0x7e1de258
add eax, 0xcd568544
add ebx, edi
add ebx, ecx
and ebx, 0x200000
je 0x110101981
add esi, 0xfe724510
sub edx, 0xb9b01640
ror edx, 0x18
sub esi, 0x9821521d
add edx, 0x7db509b2
add ebx, esi
add ebx, edx
and ebx, 0x8000
je 0x110103f2c
rol esi, 0x14
xor ecx, 0xcb67f2c4
add ecx, 0x574247af
add ebx, edi
add ebx, edx
add ebx, eax
and ebx, 0x800000
je 0x110109be2
add esi, 0x6185abba
add ecx, 0x3ad6e673
add dword [rbp - 0x18], 0xbba41899
xor ebx, dword [rbp - 0x18]
add eax, 0x36010395
rol esi, 0xc
rol eax, 0x18
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x4000000
je 0x110101981
rol ebx, 0x1d
xor eax, 0x549760f7
xor edx, 0x77ca1a92
xor ebx, edi
sub ecx, 0x34ab9c2f
add ebx, ecx
add ebx, edi
and ebx, 0x800000
je 0x110101a0c
ror ebx, 0x17
ror eax, 0x18
sbb byte [rcx - 0x459d3b11], al
lodsd eax, dword [rsi]
sub edx, ebx
mov ah, 0xfc
rol eax, 0xf
xor edi, 0x7c553829
add ebx, edi
add ebx, esi
add ebx, edx
and ebx, 0x10000
je 0x110109a47
rol eax, 0xe
xor edi, dword [rbp - 0x18]
sub ebx, 0xb3e3a49c
sub edi, 0x8f817a9d
add ebx, edi
add ebx, edx
add ebx, esi
and ebx, 2
je fcn.11010110f
rol eax, 6
xor eax, 0xd9be10ee
ror ecx, 0x1b
ror eax, 8
add ebx, esi
add ebx, edx
add ebx, ecx
and ebx, 0x800
je 0x11010398c
xor esi, 0x8f193b95
sub edi, 0x1eae81ee
ror esi, 0x1f
jmp 0x11010887d
add dword [rbp - 0x18], 0xaa85f8ab
xor ebx, dword [rbp - 0x18]
xor edi, edx
ror eax, 0x1a
rol edi, 0xf
rol edi, 0x19
add eax, 0xe61e9ba4
add ebx, edx
add ebx, eax
and ebx, 0x100000
je 0x11010887d
add edi, 0x11a9ae77
add eax, 0xada1cf0a
xor edx, 0x85fb608
rol edi, 2
add ebx, 0xf24198fd
add ebx, edx
add ebx, edi
and ebx, 0x20000
je fcn.11010487c
sub esi, 0xd13ec7ea
add eax, 0x1909e399
xor esi, 0xd6117f80
add ebx, edi
add ebx, eax
add ebx, ecx
and ebx, 0x800000
je 0x1101087f4
add ecx, 0xd5d16d4c
sub edi, 0xfc744d9c
ror edx, 0x1c
jmp fcn.110103fb1

Function at 0x110104830
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xor edi, 0x5f3feb7
add ebx, 0xcf3c60a4
add ebx, edi
add ebx, ecx
Function at 0x110104840
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0xa93f490e
xor ebx, dword [rbp - 0x18]
add esi, 0xada447f4
add esi, 0xe56b239a
add ecx, 0x83835628
rol esi, 0x1b
add ebx, edi
add ebx, ecx
and ebx, 0x400000
je 0x110109c6d
ror edi, 0x11
add edx, 0x9bc7b2f7
rol edi, 0x1b
add ebx, ecx
add ebx, edi
add ebx, edx
and ebx, 0x10000000
je 0x110102a9c
ror ebx, 0x11
rol ecx, 0x1a
xor edi, ebx
ror ebx, 0x1b
add ebx, edi
add ebx, esi
and ebx, 0x800
je fcn.11010119a
add eax, 0xa0b41a48
sub esi, 0xe451bccd
add edi, 0x5531ff0d
rol edi, 0xe
rol esi, 0x12
jmp 0x110103a93
and ebx, 0x20
je 0x110103f2c
xor ecx, dword [rbp - 0x18]
ror ebx, 0x1d
xor ecx, 0x4340a159
xor ebx, 0xdcd3714d
add ebx, ecx
add ebx, edx
and ebx, 0x200000
je 0x11010aa78
xor edi, dword [rbp - 0x18]
xor eax, dword [rbp - 0x18]
add ebx, 0xc0bdbf7c
jmp 0x110104e2d
add dword [rbp - 0x18], 0x74b18717
xor ebx, dword [rbp - 0x18]
rol eax, 0x11
rol ebx, 0x11
add edx, 0xd1544e57
ror edx, 0x16
ror esi, 0xb
add ebx, eax
add ebx, esi
and ebx, 0x20
je fcn.1101085ab
invalid
xor ecx, 0x3e65cc28
add eax, 0x1902851c

Function at 0x1101049d0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
inc dword [rcx - 0xb067240]
loop 0x110104a0b
pop rbp
call 0x14325129f
push rbp
call 0xdb120ce5
add ebx, eax
add ebx, ecx
and ebx, 0x4000
je 0x110101d0a
xor eax, dword [rbp - 0x18]
sub ecx, 0x28d205c4
add eax, 0xbdacb641
xor eax, ecx
add edi, 0x5c8bfcf6
jmp fcn.110103fb1
inc dword [rcx - 0x5f1117bb]
cmp al, 0x10
xor ebx, dword [rbp - 0x18]
rol edi, 0xf
sub ebx, 0xc4fa27a6
rol esi, 0x18
rol ecx, 5
add edi, 0x978b6f8d
add ebx, esi
add ebx, edx
add ebx, ecx
and ebx, 0x20
je sym.msvcrt.dll__ui64tow_s
sub eax, 0x31f42aea
ror eax, 2
xor ecx, ebx
add ebx, ecx
add ebx, esi
and ebx, 0x4000
je fcn.110103880
sub eax, 0x3e9f9fb
xor edi, dword [rbp - 0x18]
sub esi, 0xe071a21
sub esi, 0x18fcfd1c
add ebx, edx
add ebx, edi
add ebx, ecx
and ebx, 0x80000000
je 0x110105c16
xor ebx, esi
add ecx, 0xf467e84a
rol esi, 0x11
jmp fcn.110104c63

Function at 0x110104b30
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edi, 0xf5401631
mov edx, 0xb18a46b0
mov ecx, 0x54a981c0
mov ebx, 0xe0e7bf6e
mov rsp, rbp
sub rsp, 0x20
mov dword [rbp - 0x18], 0x9c168200
inc dword [rbp - 0x20]
mov eax, dword [rbp - 0x20]
mov esi, 0x4c56fe24
jmp fcn.110107d34
rol dword [rcx], cl
and ebx, 0x1000000
je fcn.11010ad9f
ror edi, 0x1b
add ebx, 0x75617bb9
sub edi, 0xe5cc8dfc
rol eax, 5
jmp 0x1101030b2
Function at 0x110104b60
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x9d2e7008
xor ebx, dword [rbp - 0x18]
add eax, 0x1af0ff14
add ecx, 0xc6fe82cb
ror edx, 7
add ebx, esi
add ebx, edx
add ebx, ecx
and ebx, 0x4000
je 0x110108eb8
rol eax, 0xc
ror edx, 6
sub edx, 0x22a9cdb0
rol ebx, 0x17
ror esi, 0x1b
add ebx, esi
add ebx, eax
add ebx, edx
and ebx, 1
je 0x110109118
xor ecx, dword [rbp - 0x18]
rol esi, 0x1e
rol edx, 0x1a
add ebx, edx
add ebx, eax
add ebx, esi
and ebx, 2
je fcn.11010533c
sub edx, 0xedc53171
rol ebx, 0x10
xor esi, dword [rbp - 0x18]
xor ebx, dword [rbp - 0x20]
rol ebx, 0x1c
jmp 0x1101033fd
mov edi, 0xf5401631
mov rsp, rbp
sub rsp, 0x20
mov ebx, 0xe0e7bf6e
add dword [rbp - 0x20], 1
mov eax, dword [rbp - 0x20]
mov esi, 0x4c56fe24
mov edx, 0xb18a46b0
mov dword [rbp - 0x18], 0x9c168200
mov ecx, 0x54a981c0
jmp fcn.110107d34
sub edi, 0x6ca644c6
xor ebx, 0x4eeeb984
xor edi, 0xb899a5c4
add edx, 0xa6f1d389
xor edi, edx
add ebx, eax
add ebx, esi
and ebx, 0x20000
je 0x110103580
sub eax, 0x17664610
rol ecx, 0x11
rol ecx, 0x1e
add ebx, ecx
add ebx, esi
and ebx, 0x80
je fcn.1101017a9
rol esi, 0x14
xor esi, eax
xor edx, 0x6c96f7f9
sub eax, 0xc287affa
add ebx, ecx
add ebx, eax
add ebx, esi
and ebx, 0x100000
je fcn.1101032b9
rol esi, 0xa
add edx, 0x3f0e5ec0
xor edx, eax
jmp 0x1101072a7
add dword [rbp - 0x18], 0x4831c607
xor ebx, dword [rbp - 0x18]
add ebx, 0xe638fa7e
sub ebx, 0xbffa52c3
ror ecx, 0xe
sub esi, 0x54d82be5
xor eax, 0xf5b0aa17
add ebx, eax
add ebx, edx
and ebx, 0x400
je fcn.1101095e4
ror ecx, 0x18
rol edx, 9
rol eax, 0x10
add ebx, 0x91e729b7
add ebx, edx
add ebx, esi
and ebx, 0x80000000
je fcn.110103880
xor esi, 0x36957ad1
ror eax, 0x1e
sub esi, 0x2aa724e0
add ebx, edi
add ebx, edx
add ebx, eax
and ebx, 4
je 0x1101042f7
rol esi, 0x15
sub edi, 0x246018f1
ror esi, 0x15
sub esi, 0xb764acb5
xor esi, 0xe26882c6
jmp 0x11010585b
add dword [rbp - 0x18], 0x309b7766
xor ebx, dword [rbp - 0x18]
sub eax, 0x54b23e6d
sub ebx, 0xd93c5082
rol edx, 0x13
ror eax, 2
add ebx, esi
add ebx, ecx
and ebx, 0x800000
je fcn.110104c63
sub edi, 0x1c9891a0
xor edi, dword [rbp - 0x18]
xor esi, 0x9d174225
ror eax, 0x1c
add ebx, edi
add ebx, edx
add ebx, esi
and ebx, 8
je fcn.1101017a9
rol ecx, 0xa
ror edx, 0x19
sub esi, 0x3282b292
rol ebx, 0x17
sub eax, 0x513770c0
add ebx, edx
add ebx, eax
add ebx, ecx
and ebx, 0x10
je 0x110107770
add edx, 0x8bc86647
xor esi, dword [rbp - 0x20]
jne 0x110108f12
sub eax, 0x4f41e5e4
ror edx, 0x1c
sub ebx, 0xddc8afe6
jmp 0x110104536
Function at 0x110104c40
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
je 0x110108a62
sub edx, 0xdd9e80c6
add edx, 0x799d4bf1
popfq
jns 0x110104bd4
ret
invalid
invalid
or al, 0xf3
rol eax, 0xd
ror edi, 0x1f
jmp 0x11010806a
add dword [rbp - 0x18], 0x59b44506
xor ebx, dword [rbp - 0x18]
xor edx, 0x836b17ec
xor edx, dword [rbp - 0x20]
rol edi, 0x11
add ebx, ecx
add ebx, edi
and ebx, 0x400
je 0x110101357
xor esi, eax
xor eax, 0x4a042dd5
xor eax, ecx
xor esi, 0xa43c9d09
ror ebx, 0x1f
add ebx, eax
add ebx, ecx
add ebx, esi
and ebx, 0x10000000
je fcn.1101022c7
sub ebx, 0x39aef0c6
add edx, 0xf7d7da43
ror ecx, 4
sub ecx, 0xe7ea7ce1
add ebx, edx
add ebx, eax
and ebx, 0x8000000
je 0x110107770
sub eax, 0x6ec76cd1
ror esi, 0x1d
ror edi, 8
jmp 0x1101030e7

Function at 0x110104d30
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
ror edx, 0x13
add edx, 0xf778e860
add edi, 0x38cb331d
add ebx, edx
rol dword [rcx], cl
and ebx, 0x20000000

Function at 0x11010554c
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x2c39b27f
xor ebx, dword [rbp - 0x18]
rol ebx, 0x13
xor esi, 0x1f278540
rol ecx, 0xe
ror ebx, 0x13
ror edx, 4
add ebx, edx
add ebx, esi
and ebx, 0x40000000
je 0x110102521
xor eax, 0xdab35fad
sub edx, 0xb850272d
xor esi, 0x30cc5efc
rol ebx, 0x12
add ebx, 0x2731d84e
add ebx, esi
add ebx, ecx
retf
and ebx, 0x800
je 0x110109008
ror edi, 7
add edx, 0x3696759d
xor edx, ebx
sub ecx, 0x7a4f0140
add ebx, ecx
add ebx, edi
add ebx, esi
and ebx, 0x40
je fcn.1101095e4
ror esi, 0x10
add edx, 0x9acb791e
rol esi, 0x12
add edi, 0x4094ab9d
jmp fcn.1101026af
fcmovnbe st(0), st(0)
invalid
invalid
push rbp
mov rbp, rsp
sub rsp, 0x20
mov dword [rbp - 0x20], 0x1084a8f
jmp 0x110105546

Function at 0x110105cc0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
rol edi, 0x10
ror ebx, 0xe
add ebx, ecx
add ebx, edx
and ebx, 0x80
je fcn.110104c63
add ebx, 0x470969b1
add edx, 0x363dc5d7
cmp eax, 0xb5c78136
cmp byte [rax + rax*4 + 1], bl
add ebx, edi

Function at 0x110105ce0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edi, 0xf5401631
mov esi, 0x4c56fe24
mov rsp, rbp
mov dword [rbp - 0x18], 0x9c168200
mov ebx, 0xe0e7bf6e
mov edx, 0xb18a46b0
mov ecx, 0x54a981c0
sub rsp, 0x20
add dword [rbp - 0x20], 1
mov eax, dword [rbp - 0x20]
jmp fcn.110107d34
cmp eax, 0xb5c78136
cmp byte [rax + rax*4 + 1], bl
add ebx, edi
and ebx, 0x800
je 0x110102737
xor edx, 0x9a73443
rol eax, 0xe
rol edx, 0x19
sub ebx, 0x9d690028
add ebx, esi
add ebx, ecx
add ebx, edx
and ebx, 0x800
je 0x110101981
sub ebx, 0xeae18a47
xor edi, 0x80888804
rol edi, 0x18
xor edi, eax
xor ecx, dword [rbp - 0x18]
jmp 0x110103166
Function at 0x110105df0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x5a2edb4c
sub esi, 0xbc813000
add ebx, eax
add ebx, edx
add ebx, ecx
and ebx, 0x800000
je 0x11010966b
sub edi, 0xc83650eb
invalid
invalid

Function at 0x110105e10
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov edi, 0x8179a655
ret

Function at 0x110106250
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x24872db7
xor ebx, dword [rbp - 0x18]
add ebx, 0xd3b13596
rol edi, 4
xor ebx, 0xf4985f55
xor esi, 0x83024a02
add ebx, eax
add ebx, esi
add ebx, ecx
and ebx, 0x10000000
je fcn.1101026af
sub ecx, 0xda96fa33
xor ebx, 0xd50e6d9b
wait
insd dword [rdi], dx
invalid
invalid
ror edi, 0x13
add ebx, edx
add ebx, esi
and ebx, 0x2000
je fcn.1101063e6
rol ecx, 0x15
add edi, 0x879656a0
rol eax, 0xa
rol eax, 0x13
add ebx, eax
add ebx, edx
add ebx, edi
and ebx, 0x100000
je 0x1101033fd
rol edx, 0x1b
rol edi, 9
sub edx, 0x227ba15d
jmp 0x11010839f
add dword [rbp - 0x18], 0x8b915a3c
xor ebx, dword [rbp - 0x18]
rol ebx, 0xe
add eax, 0xbd30d22c
rol edx, 0x12
rol ebx, 0x1e
add ecx, 0x5e3eea62
add ebx, ecx
add ebx, edi
add ebx, eax
and ebx, 0x100000
je 0x110109be2
add edx, 0x253f2854
sub ecx, 0x9e537d3d
rol eax, 0xb
sub ebx, 0xa655e152
add ebx, edx
add ebx, eax
add ebx, esi
and ebx, 0x40
je 0x110107770
xor edi, 0x1a00e817
ror edx, 0x10
rol ebx, 0xa
sub edx, 0xa9f9b74d
rol edx, 7
add ebx, ecx
add ebx, eax
and ebx, 0x80000000
je fcn.1101032b9
rol ebx, 0xb
ror edi, 0x19
ror esi, 0x1f
jmp fcn.110102cb4
add dword [rbp - 0x18], 0x5c95a6fc
xor ebx, dword [rbp - 0x18]
rol ecx, 0x18
rol ebx, 7
add edi, 0x12b63357
xor ebx, dword [rbp - 0x20]
ror ecx, 0x17
add ebx, edx
add ebx, esi
and ebx, 1
je 0x110106217
xor ebx, dword [rbp - 0x20]
ror ebx, 0xf
rol eax, 0x1a
sub edx, 0xeea15d2d
add ebx, eax
add ebx, ecx
and ebx, 0x1000
je 0x11010806a
add ebx, 0x27511e4e
rol edi, 0x14
sub ebx, 0xd05aee61
add ebx, esi
add ebx, eax
add ebx, ecx
and ebx, 0x20000
je 0x110109c6d
sub ecx, 0xe373c127
sub ebx, 0x652d41f4
sub edx, 0xd09ea46d
ror edi, 0x1f
jmp fcn.11010487c
add dword [rbp - 0x18], 0xb2d1ccd4
xor ebx, dword [rbp - 0x18]
add edi, 0xc338db15
rol ecx, 0x14
sub ecx, 0x490e5d41
add ebx, esi
add ebx, edi
and ebx, 0x20000000
je 0x110109118
rol edx, 0x12
rol eax, 8
add edi, 0x563c0d9d
xor ebx, edx
add ebx, edx
add ebx, eax
add ebx, ecx
and ebx, 4
je 0x110105fe8
sub edx, 0x75872545
add edi, 0x3a0d7f3b
xor ecx, dword [rbp - 0x20]
add ebx, edi
add ebx, ecx
and ebx, 0x10000000
je 0x11010a1ca
xor ecx, 0x4f827924
rol eax, 0x16
rol edx, 0x11
add eax, 0x65b2faaf
rol ecx, 3
jmp fcn.1101085ab
push rbp
mov rbp, rsp
sub rsp, 0x20
mov dword [rbp - 0x20], 0x1084a8f
jmp 0x11010a413
Function at 0x1101062a0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xor ebx, dword [rbp - 0x18]
rol eax, 0x16
xor edx, 0x5a4719c2
xor edx, dword [rbp - 0x18]
sub edx, 0x287c3f05
sub edi, 0x66d9c697
add ebx, edi
add ebx, edx
add ebx, ecx
and ebx, 0x40000000
je 0x110108b63
add edi, 0xebe0699d
sub ebx, 0xc42d3099
rol eax, 9
rol eax, 0x16
add ebx, ecx
add ebx, edx
and ebx, 4
je 0x110106593
sub eax, 0xf724f446
sub edx, 0x4c146494
add esi, 0x76f7a3f2
xor edi, 0xa5211b5e
xor esi, dword [rbp - 0x20]
add ebx, esi
add ebx, eax
and ebx, 2
invalid
invalid

Function at 0x110106408
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add dword [rbp - 0x18], 0x72211d6d
xor ebx, dword [rbp - 0x18]
xor esi, 0x746e25d5
xor edi, 0x960977bd
add ebx, 0x5a5414b6
add eax, 0x9745f9e
add ebx, esi
add ebx, eax
and ebx, 0x400
je fcn.1101032b9
rol eax, 0x10
xor edx, eax
sub esi, 0x492c4661
add edi, 0x27eb4a2f
add edi, 0x9d37b9f4
add ebx, edi
add ebx, edx
and ebx, 1
je 0x110105f71
sub eax, 0xc773cc97
sub esi, 0xdd213d2a
add ecx, 0x52a0e685
add edx, 0x362b0ebc
add ebx, edi
add ebx, ecx
and ebx, 0x1000000
je fcn.1101094d9
add ebx, 0x89742164
xor ebx, 0x9f0677db
ror edi, 0x18
jmp fcn.1101017a9

Function at 0x110106700
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
rol dword [rcx], cl
sti
and ebx, 0x4000000
je 0x110102a9c
rol edi, 0x1c
sub ebx, 0x83c89e87
xor esi, dword [rbp - 0x20]
rol eax, 0x12
rol eax, 0x13
add ebx, esi
add ebx, edi
and ebx, 0x1000
je 0x110107c34
sub edx, 0x367a33cd
sub ebx, 0x1cf44c31
ror edx, 0xb
jmp fcn.110103880

Function at 0x1101067b0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
inc dword [rcx + 0x6d4310f0]
in eax, dx
rol edx, 0xd
add ebx, 0x3dc87b64
rol esi, 0x14
add ebx, ecx
add ebx, edi
and ebx, 0x80000
je 0x110106478
xor ecx, 0x26d8f2b2
xor edx, 0xf464dbad
rol esi, 0xd
xor esi, 0x7a1e1779
add ebx, ecx
add ebx, edi
add ebx, eax
and ebx, 0x800
je 0x110105fe8
xor ebx, edi
add ecx, 0xd673a463
rol ebx, 0x1e
add edx, 0x8eaae43c
ror eax, 0xe
jmp 0x110109be2

Function at 0x110106ba0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add esi, 0xd1f0d6be
rol ebx, 0x11
xor ecx, 0xc1bc7e5d
add ebx, edx
rol dword [rcx], cl
and ebx, 0x80
je fcn.11010ad9f
rol edx, 0x18
xor edi, dword [rbp - 0x18]
xor ecx, edi
sub edx, 0xe93ed6fa
ror esi, 0x1e

Function at 0x110106bd0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add ebx, edi
add ebx, ecx
add ebx, esi
and ebx, 0x20000
je 0x1101073f4
rol edx, 0x1e
ror esi, 5
rol ecx, 0x10
jmp 0x110106478
Function at 0x110106c00
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
xor ebx, edi
xor esi, 0xa00d8105
sub eax, 0x40a571f1
invalid
out dx, al

Function at 0x110106c10
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push 0x1ecea1a
ret

Function at 0x110106c20
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
je 0x110101357
ror esi, 6
rol eax, 2
xor esi, 0xf4838562
sub esi, 0x2a55c8b7
rol ecx, 0x1d
add ebx, esi
add ebx, eax
and ebx, 0x200000
je 0x110103f2c
xor edx, 0xa04cf2a5
add esi, 0xb3b5ae87
sub edx, 0x27bab9fb
add edx, 0x6df41c59
sub edi, 0x49888ff8
add ebx, edi
add ebx, esi
and ebx, 0x2000000
je 0x11010ac98
sub esi, 0xa56eb8e8
rol esi, 0x1e
sub edx, 0x92107479
rol edx, 0xd
jmp fcn.1101017a9
add dword [rbp - 0x18], 0xbd7dd95d
xor ebx, dword [rbp - 0x18]
add ecx, 0x54140ce4
add edi, 0x1367ee48
xor eax, 0xdd7ef0ba
xor ebx, edx
add ebx, edx
add ebx, eax
and ebx, 0x10
je 0x110107770
rol edi, 6
sub ebx, 0xa536400d
add edi, 0x58719d9
xor eax, edi
add ebx, esi
add ebx, edi
and ebx, 8
je 0x110106328
ror ecx, 0x17
xor ecx, 0xc36eadb2
sub eax, 0x99b628c7
sub ebx, 0x5a25a59a
add edi, 0xa628e42d
add ebx, ecx
add ebx, eax
add ebx, edi
and ebx, 0x800000
je fcn.11010119a
sub edx, 0xb743083d
ror ecx, 9
sub esi, 0xc6559d34
add dword [rbp - 0x18], 0xf4ec0538
xor ebx, dword [rbp - 0x18]
ror edx, 0x13
ror ebx, 4
ror esi, 0xa
add ebx, edx
add ebx, eax
and ebx, 0x800000
je 0x1101070eb
xor ecx, 0x2050b5d3
rol ecx, 0x19
ror ebx, 0x19
add eax, 0xd0cb9db3
xor esi, 0xcf8be2d8
add ebx, eax
add ebx, esi
and ebx, 0x20000
je 0x110109be2
ror ecx, 0x14
rol ecx, 0x11
xor esi, dword [rbp - 0x18]
add ebx, eax
add ebx, edx
and ebx, 0x400
je fcn.1101085ab
add edx, 0x60dbdf1d
add dword [rbp - 0x18], 0xc2be8278
xor ebx, dword [rbp - 0x18]
rol ecx, 0x12
xor edi, 0x900667a5
xor eax, 0x378db61c
add ebx, edi
add ebx, esi
add ebx, eax
and ebx, 0x40000
je 0x110107a27
int 0xff
invalid
add ebx, 0x2b9d6de0
xor edx, ebx
xor edx, 0x761a2185
add ebx, edi

Function at 0x110106ed0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
jl 0x110106ee2
mov al, 0xc1
invalid
xor ebx, dword [rbp - 0x18]
rol edi, 0x1e
sub esi, 0x811d6fb2
rol eax, 0x1f
sub ecx, 0xf324a8ec
rol ecx, 0xd
add ebx, eax
add ebx, edx
add ebx, ecx
and ebx, 0x2000000
je fcn.110103fb1
rol ebx, 0x18
ror eax, 0x13
add esi, 0xd41bb8b7
add ebx, eax
add ebx, ecx
and ebx, 0x400
je 0x110102dff
ror edi, 0x19
rol edx, 0x1f
rol ecx, 0x12
rol esi, 4
rol ecx, 0x1f
add ebx, edx
add ebx, eax
add ebx, edi
and ebx, 0x10
je 0x110107fde
ror edx, 2
sub ecx, 0xf5a68f61
xor edi, esi
sub ebx, 0xfb68b06e
add ecx, 0x57890fa1
jmp fcn.1101032b9
add dword [rbp - 0x18], 0x1d2a7595
Function at 0x110106fd0
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
add byte [rax], al
add dword [rdi], ecx
test dh, ch
mov dl, 0xff
inc dword [rcx - 0x3759c33e]
invalid
invalid
Function at 0x110107a10
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x20
mov dword [rbp - 0x20], 0x1084a8f
jmp 0x1101033fd

Function at 0x110107a90
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
je 0x110101357
ror esi, 6
rol eax, 2
xor esi, 0xf4838562
sub esi, 0x2a55c8b7
rol ecx, 0x1d
add ebx, esi
add ebx, eax
and ebx, 0x200000
je 0x110103f2c
xor edx, 0xa04cf2a5
add esi, 0xb3b5ae87
sub edx, 0x27bab9fb
add edx, 0x6df41c59
sub edi, 0x49888ff8
add ebx, edi
add ebx, esi
and ebx, 0x2000000
je 0x11010ac98
sub esi, 0xa56eb8e8
rol esi, 0x1e
sub edx, 0x92107479
rol edx, 0xd
jmp fcn.1101017a9
add dword [rbp - 0x18], 0xbd7dd95d
xor ebx, dword [rbp - 0x18]
add ecx, 0x54140ce4
add edi, 0x1367ee48
xor eax, 0xdd7ef0ba
xor ebx, edx
add ebx, edx
add ebx, eax
and ebx, 0x10
je 0x110107770
rol edi, 6
sub ebx, 0xa536400d
add edi, 0x58719d9
xor eax, edi
add ebx, esi
add ebx, edi
and ebx, 8
je 0x110106328
ror ecx, 0x17
xor ecx, 0xc36eadb2
sub eax, 0x99b628c7
sub ebx, 0x5a25a59a
add edi, 0xa628e42d
add ebx, ecx
add ebx, eax
add ebx, edi
and ebx, 0x800000
je fcn.11010119a
sub edx, 0xb743083d
ror ecx, 9
sub esi, 0xc6559d34
add dword [rbp - 0x18], 0xf4ec0538
xor ebx, dword [rbp - 0x18]
ror edx, 0x13
ror ebx, 4
ror esi, 0xa
add ebx, edx
add ebx, eax
and ebx, 0x800000
je 0x1101070eb
xor ecx, 0x2050b5d3
rol ecx, 0x19
ror ebx, 0x19
add eax, 0xd0cb9db3
xor esi, 0xcf8be2d8
add ebx, eax
add ebx, esi
and ebx, 0x20000
je 0x110109be2
ror ecx, 0x14
rol ecx, 0x11
xor esi, dword [rbp - 0x18]
add ebx, eax
add ebx, edx
and ebx, 0x400
je fcn.1101085ab
add edx, 0x60dbdf1d
add dword [rbp - 0x18], 0xc2be8278
xor ebx, dword [rbp - 0x18]
rol ecx, 0x12
xor edi, 0x900667a5
xor eax, 0x378db61c
add ebx, edi
add ebx, esi
add ebx, eax
and ebx, 0x40000
je 0x110107a27
int 0xff
invalid
add ebx, 0x2b9d6de0
xor edx, ebx
xor edx, 0x761a2185
add ebx, edi