joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180340570
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
shr rax, 6
xor rax, rdx
mov r8, rax
rol r8, 4
xor r8, rax
mov eax, dword [0x180786160]
xor edx, edx
div dword [0x180786164]
xor eax, 0xdb74e620
and eax, 0x773127a
imul eax, eax, 0x7ee33c51
cmp eax, 0xa4b7c149
jb 0x180340653
jmp 0x1803405af
mov eax, dword [0x180786168]
sub eax, dword [0x18078616c]
sub eax, 0x76260eff
mov r9d, 0xac071a52
xor edx, edx
div r9d
imul eax, eax, 0x454fd195
mov rdx, r8
add rdx, 0x299ad1fa
mov r9, rdx
shr r9, 0xd
xor r9, rdx
mov rdx, r9
rol rdx, 2
xor rdx, r9
and rdx, 0xffff
cmp eax, 0xeb40c8e7
je 0x1803405af
jmp 0x1803405ff
mov eax, dword [0x180786170]
add eax, dword [0x180786174]
xor eax, 0x962a8610
and eax, 0x1898f2a4
imul eax, eax, 0xae71147a
cmp eax, 0xebe08b67
je 0x180340664
jmp 0x180340624
mov eax, dword [0x180786178]
sub eax, dword [0x18078617c]
and eax, 0x11020ce8
imul r8d, eax, 0xd5c911e7
or r8d, 0x5bc7a56
mov rax, rcx
add rax, rdx
cmp r8d, 0x7f6c7d72
jae 0x180340624
ret
invalid
fnstcw word [rbx + rsi*4 - 0x39f0d39c]
jl 0x16b726821
mov al, 0xcc
int3

Function at 0x180340680
Capabilities:
Encode data using xor

Disassembly:
mov r8, 0xffffffffac13794b
sub r8, rdx
mov eax, dword [0x180786180]
xor edx, edx
div dword [0x180786184]
xor eax, 0x7a380327
add eax, 0xe42d6e8c
imul eax, eax, 0xb7b7f0da
cmp eax, 0x3ab3c319
je 0x180340758
jmp 0x1803406b5
mov eax, dword [0x180786188]
sub eax, dword [0x18078618c]
or eax, 0x6c9f6973
or eax, 0x543ae935
mov r9d, 0x5581aa80
xor edx, edx
div r9d
mov rdx, r8
xor rdx, 0x69e6f319
add rdx, 0x7520b46a
mov r9, rdx
rol r9, 3
xor r9, rdx
and r9, 0xffff
cmp eax, 0x4d31e067
jae 0x1803406b5
jmp 0x180340701
mov eax, dword [0x180786190]
sub eax, dword [0x180786194]
sub eax, 0xce588ce6
mov r8d, 0x7c0ac117
xor edx, edx
div r8d
xor eax, 0x120992f0
cmp eax, 0x7fbb5b72
je 0x180340765
jmp 0x18034072b
mov edx, dword [0x180786198]
sub edx, dword [0x18078619c]
or edx, 0xe945650b
add edx, 0xe2e8e4d4
or edx, 0x859468cd
mov rax, rcx
add rax, r9
cmp edx, 0xe485bef9
jae 0x18034072b
ret
mov cl, 0x31
mov ah, 0x16
and al, 0xa2
in eax, 0x74
jmp 0x1803406b3
xlatb
sub eax, 0x8f631bf4
fsubrp st(3)
jg 0x180340765
retf

Function at 0x1803408b0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
add r8, 0xffffffffbfef6ee2
mov rax, r8
rol rax, 2
xor r8, rax
mov eax, dword [0x1807861b0]
xor edx, edx
div dword [0x1807861b4]
and eax, 0x4f947c5f
imul eax, eax, 0x20ad9936
xor eax, 0x23623987
cmp eax, 0xd143f9da
jae 0x18034093f
jmp 0x1803408eb
mov eax, dword [0x1807861b8]
xor edx, edx
div dword [0x1807861bc]
and eax, 0x2755c44f
xor eax, 0xa268a67
mov r9d, 0xd17de448
xor edx, edx
div r9d
mov edx, eax
mov rax, r8
xor rax, 0x6350fd07
imul rax, rax, 0x7f402e5a
mov r9, rax
rol r9, 1
xor r9, rax
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0x6061e4df
je 0x1803408eb
ret
movabs byte [0x69b36a6db15fcbd4], al
adc eax, 0x9ceb91dd
int3
Function at 0x180340e00
Capabilities:
Encode data using xor

Disassembly:
xor rdx, 0x6861b2f2
add rdx, 0xffffffffffffffff
mov r8, rdx
rol r8, 6
xor r8, rdx
and r8, 0xffff
mov eax, dword [0x180786250]
xor eax, dword [0x180786254]
add eax, 0x10b8e26d
xor eax, 0x8ee9ff3b
mov r9d, 0x1ccafbcc
xor edx, edx
div r9d
cmp eax, 0xb0dd18ed
ja 0x180340e7c
jmp 0x180340e46
mov eax, dword [0x180786258]
xor eax, dword [0x18078625c]
mov r9d, 0x2bcb9ab3
xor edx, edx
div r9d
mov edx, eax
xor edx, 0x88979732
and edx, 0x171b2d40
mov rax, rcx
add rax, r8
cmp edx, 0x6be9c879
ja 0x180340e46
jmp 0x180340e7b
ret
invalid

Function at 0x180341060
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
movabs rcx, 0xdefa5d900c417be2
imul rdx, rcx
mov r8, rdx
shr r8, 0x19
xor r8, rdx
mov rcx, r8
shr rcx, 0x17
xor rcx, r8
mov rdx, rcx
rol rdx, 1
mov r8d, dword [0x180786290]
sub r8d, dword [0x180786294]
or r8d, 0x3a1a3a9
and r8d, 0x9ac3e7f5
sub r8d, 0x6033b0bc
cmp r8d, 0x6cfcfb78
js 0x1803410ae
cld
insb byte [rdi], dx
jbe 0x1803410f9
jmp 0x1803410b9
mov r9d, dword [0x180786298]
imul r9d, dword [0x18078629c]
xor r9d, 0x8ca67609
or r9d, 0xa5bdc45f
xor r9d, 0xcf8b51f4
mov r8, rdx
xor r8, rcx
cmp r9d, 0xbff02d0
jbe 0x1803410b9
jmp 0x1803410ee
and r8, 0xffff
add rax, r8
ret
jrcxz 0x1803410b1
lock and edx, dword [rbx]
sar byte [rax], 0xd2
out dx, eax
fild dword [rcx]
jmp 0x1803410b7

Function at 0x180341110
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
shr rcx, 0x17
mov r8d, dword [0x1807862a0]
xor r8d, dword [0x1807862a4]
add r8d, 0xc53eaf30
sub r8d, 0xfbf98b20
add r8d, 0x5d688aa8
cmp r8d, 0xc0c980da
je 0x1803411a5
jmp 0x180341148
mov r9d, dword [0x1807862a8]
and r9d, dword [0x1807862ac]
and r9d, 0x57f8267d
sub r9d, 0x5641f5de
xor r9d, 0xe9f0f5ec
mov r8, rcx
xor r8, rdx
imul r10, r8, 0xffffffffd9c04dab
movabs r8, 0xf716f2bcd4dee23f
add r10, r8
mov r8, r10
rol r8, 7
xor r8, r10
and r8, 0xffff
cmp r9d, 0x6666332f
ja 0x180341148
jmp 0x1803411a1
add rax, r8
ret
jmp 0x180341212
mov eax, dword [0x1807862b8]
xor edx, edx
div dword [0x1807862bc]
add eax, 0xcc492ca9
imul eax, eax, 0x20285539
or eax, 0x789cf570
imul r9, r8, 0xffffffffdfea96e8
movabs rdx, 0x826ffb92
add byte [rax], al
add byte [rax], al
add r9, rdx
mov r10, r9
shr r10, 0x18
cmp eax, 0x32c7d1ff
je 0x1803411e7
jmp 0x180341229
mov eax, dword [0x1807862c0]
add eax, dword [0x1807862c4]
sub eax, 0xa9e37930
or eax, 0xeaac9906
add eax, 0x4d64b917
cmp eax, 0xf626ba61
ja 0x1803412a4
mov eax, dword [0x1807862c8]
sub eax, dword [0x1807862cc]
add eax, 0x7ea0cb5
mov r8d, 0xe11f8381
xor edx, edx
div r8d
mov edx, eax
or edx, 0x91335a0e
mov rax, r10
xor rax, r9
mov r8, rax
rol r8, 6
xor r8, rax
and r8, 0xffff
mov rax, rcx
add rax, r8
cmp edx, 0x1d040d43
jb 0x1803412a4
jmp 0x180341296
ret
mov esp, 0xb4b6b987
clc
and al, 0xeb
popfq
int3
Function at 0x1803418f0
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x5cdd051b
sub rax, rdx
mov edx, dword [0x180786370]
xor edx, dword [0x180786374]
or edx, 0x9caed64
sub edx, 0xecd0ffa0
add edx, 0xe2df8986
cmp edx, 0xa79a869f
je 0x1803419bc
mov edx, dword [0x180786378]
imul edx, dword [0x18078637c]
xor edx, 0x1a2d7fd1
sub edx, 0x35e7928b
and edx, 0x1bbd500e
mov r8, rax
xor r8, 0xffffffffa5c6577f
cmp edx, 0x9390359e
jae 0x1803419bc
jmp 0x180341955
mov eax, dword [0x180786380]
sub eax, dword [0x180786384]
xor eax, 0x5020d281
or eax, 0x3ace268d
add eax, 0xdf2947be
cmp eax, 0x9bf912b9
jbe 0x1803419cd
jmp 0x180341979
mov eax, dword [0x180786388]
or eax, dword [0x18078638c]
xor eax, 0x7eafacf2
and eax, 0x1e62b621
mov r9d, 0x7fa6ba5a
xor edx, edx
div r9d
mov edx, eax
mov r9, r8
rol r9, 4
xor r9, r8
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0xce3d737d
je 0x180341979
ret
enter 0xffffffffffffb5c6, 0xffffffffffffff9c
mov al, 0x8b
je 0x180341966
lodsb al, byte [rsi]
invalid
sbb eax, 0x5159a67a
out 0x60, eax
mov ebx, 0xcccca0eb
int3

Function at 0x1803419e0
Capabilities:
Encode data using xor

Disassembly:
imul rax, rdx, 0x77865637
xor rax, 0xffffffffffffffff
mov rdx, rax
rol rdx, 4
xor rdx, rax
mov eax, dword [0x180786390]
add eax, dword [0x180786394]
or eax, 0x3137e626
sub eax, 0x848ba8bb
and eax, 0x1e64aa84
cmp eax, 0x9f932b20
je 0x180341a51
jmp 0x180341a19
mov eax, dword [0x180786398]
imul eax, dword [0x18078639c]
xor eax, 0xc6923a7
xor eax, 0x42699977
imul r8d, eax, 0x75194839
mov r9, rdx
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp r8d, 0x2722a608
jb 0x180341a19
ret
jge fcn.1803419e0
mov esp, 0xf3a53f9
and ch, bl
mov esp, 0xcccccccc
int3

Function at 0x180341c60
Capabilities:
Encode data using xor

Disassembly:
add rdx, 0xffffffff9050eee2
xor rdx, 0x1fd7d5e7
mov r8, rdx
shr r8, 0x14
xor r8, rdx
mov r9, r8
rol r9, 4
mov eax, dword [0x1807863d0]
add eax, dword [0x1807863d4]
and eax, 0x23412bea
add eax, 0x7b7bf4d9
imul eax, eax, 0xab8e2c79
cmp eax, 0x86a0901c
je 0x180341ce2
jmp 0x180341ca4
mov eax, dword [0x1807863d8]
and eax, dword [str.y_x]
mov r10d, 0xcfe964e4
xor edx, edx
div r10d
xor eax, 0xd7b88726
or eax, 0x956ef562
mov rdx, r9
xor rdx, r8
cmp eax, 0x8af5d5c1
je 0x180341ca4
jmp 0x180341cd4
and rdx, 0xffff
add rcx, rdx
mov rax, rcx
ret
invalid

Function at 0x1803429c0
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
mov rax, rcx
xor rdx, 0x7d356ac9
mov ecx, dword [0x180786530]
or ecx, dword [0x180786534]
or ecx, 0xaad9d3dd
sub ecx, 0x5ad890d4
add ecx, 0x48ece2f7
cmp ecx, 0x31aef83f
jb 0x180342a45
jmp 0x1803429f2
mov r8d, dword [0x180786538]
xor r8d, dword [0x18078653c]
and r8d, 0xe68f8b69
add r8d, 0x68f03bdb
xor r8d, 0xa78f6bad
mov rcx, rdx
rol rcx, 3
xor rcx, rdx
xor r9d, r9d
sub r9, rcx
mov rcx, r9
rol rcx, 4
xor rcx, r9
and rcx, 0xffff
cmp r8d, 0xc5c7288a
ja 0x1803429f2
jmp 0x180342a41
add rax, rcx
ret
cmp al, 0x61
xchg dword [rcx], ebp
invalid
Function at 0x180343320
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [0x1807865f0]
xor eax, dword [str.6hl]
imul eax, eax, 0x23170139
and eax, 0x76f715ab
sub eax, 0x479b0316
cmp eax, 0x19019499
ja 0x1803433fe
jmp 0x180343349
mov eax, dword [0x1807865f8]
imul eax, dword [0x1807865fc]
xor eax, 0x92601e
and eax, 0x94df910b
or eax, 0xc9d583cc
mov r8, rdx
rol r8, 2
xor r8, rdx
mov r9, 0xffffffffda2985f4
sub r9, r8
imul r8, r9, 0x533c5ac3
cmp eax, 0xc56e313b
jb 0x180343349
jmp 0x180343389
mov eax, dword [0x180786600]
xor eax, dword [0x180786604]
xor eax, 0xb9773c1b
sub eax, 0xc4b35b0a
add eax, 0xacc5d3fb
cmp eax, 0xbaf58d63
je 0x18034340f
or bl, byte [rbx - 0x4d]
invalid
jmp 0x1803433ad
mov eax, dword [0x180786608]
xor edx, edx
div dword [0x18078660c]
and eax, 0x12209852
sub eax, 0x40bf2f02
mov r9d, 0xe0604b98
xor edx, edx
div r9d
mov edx, eax
mov rax, r8
shr rax, 0xf
xor rax, r8
mov r9, rax
rol r9, 6
xor r9, rax
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0xefa32b1d
ja 0x1803433ad
enter 0xfffffffffffffa81, 0x1d
sub esp, dword [rbx - 0x144d8811]
add bl, al
jmp 0x1803433fd
ret
pushfq
cmpsb byte [rsi], byte [rdi]
cmpsb byte [rsi], byte [rdi]
loope 0x18034339b
jrcxz 0x1803433f2
invalid
jmp 0x180343473
enter 0xffffffffffff894d, 0xffffffffffffffc1

Function at 0x180343420
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [0x180786610]
sub eax, dword [0x180786614]
xor eax, 0x95d0f309
xor eax, 0x8756a9f4
sub eax, 0xe2b1566b
cmp eax, 0x3fc227b9
jbe 0x1803434ec
mov eax, dword [0x180786618]
xor eax, dword [0x18078661c]
and eax, 0x1df56d81
xor eax, 0x6dfd555d
or eax, 0xd168936b
mov r9, rdx
rol r9, 1
xor r9, rdx
mov r8, r9
rol r8, 2
xor r8, r9
mov r9, r8
rol r9, 4
cmp eax, 0xf5f282a2
je 0x1803434ec
jmp 0x180343484
mov eax, dword [0x180786620]
sub eax, dword [0x180786624]
add eax, 0x8cc72238
or eax, 0x26bef6aa
mov r10d, 0x97bcd1cb
xor edx, edx
div r10d
cmp eax, 0x1da03c1e
ja 0x1803434fd
jmp 0x1803434ae
mov eax, dword [0x180786628]
or eax, dword [0x18078662c]
or eax, 0x87a627fd
xor eax, 0xdd75f06e
mov r10d, 0x68176a3a
xor edx, edx
div r10d
mov rdx, r9
xor rdx, r8
cmp eax, 0xa64821f6
je 0x1803434ae
jmp 0x1803434de
and rdx, 0xffff
add rcx, rdx
mov rax, rcx
ret
push 0x58
invalid
invalid
Function at 0x180343a70
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x1807866b0]
xor edx, edx
div dword [0x1807866b4]
or eax, 0xe2b80006
add eax, 0x24fe80aa
add eax, 0xe51545d2
cmp eax, 0xe36ef6c6
jbe 0x180343b4e
jmp 0x180343a9d
mov eax, dword [0x1807866b8]
imul eax, dword [0x1807866bc]
add eax, 0x7174a6f5
add eax, 0x216b4c3a
sub eax, 0x1e5dfcf2
mov rdx, r8
shr rdx, 0x10
xor rdx, r8
mov r9, rdx
shr r9, 3
xor rdx, r9
xor rdx, 0xffffffff85062f2d
add rdx, 1
mov r9, rdx
rol r9, 1
xor r9, rdx
cmp eax, 0xea5182ad
ja 0x180343a9d
jmp 0x180343aea
mov eax, dword [0x1807866c0]
imul eax, dword [0x1807866c4]
mov r8d, 0x417d0b9d
xor edx, edx
div r8d
sub eax, 0x21d0244b
xor eax, 0x5400ba9c
cmp eax, 0xb1fa814b
ja 0x180343b5b
jmp 0x180343b15
mov eax, dword [0x1807866c8]
sub eax, dword [0x1807866cc]
imul edx, eax, 0x7d8bc855
add edx, 0x81add8b7
or edx, 0xbb91e576
mov r8, r9
and r8, 0xffff
mov rax, rcx
add rax, r8
cmp edx, 0x764801ac
jb 0x180343b15
jmp 0x180343b4d
ret
ret 0x8ed9
mov eax, 0x1b08c975
sub edx, esi
mov bl, 0xeb
scasb al, byte [rdi]
int3

Function at 0x180343ba0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x1807866d0]
xor edx, edx
div dword [0x1807866d4]
imul eax, eax, 0x91445998
xor eax, 0xfca72575
sub eax, 0x72ee9c94
cmp eax, 0xb72e8023
ja 0x180343c77
mov edx, dword [0x1807866d8]
or edx, dword [0x1807866dc]
add edx, 0x2ff34549
add edx, 0x358cb2c5
add edx, 0x15790ef3
mov r9, r8
shr r9, 2
xor r9, r8
add r9, 1
mov rax, r9
shr rax, 0x1a
xor rax, r9
cmp edx, 0x666aa642
jbe 0x180343c77
jmp 0x180343c0c
mov rdx, rax
rol rdx, 2
xor rdx, rax
and rdx, 0xffff
add rcx, rdx
mov eax, dword [0x1807866e0]
imul eax, dword [0x1807866e4]
sub eax, 0xb21356c3
sub eax, 0x1737f007
add eax, 0xd985b13
cmp eax, 0x753466c
je 0x180343c84
jmp 0x180343c45
mov eax, dword [0x1807866e8]
xor eax, dword [0x1807866ec]
and eax, 0x2267dbdd
mov r8d, 0xf520a729
xor edx, edx
div r8d
mov r8d, 0x33bc7574
xor edx, edx
div r8d
cmp eax, 0x9ca457ea
jae 0x180343c45
mov rax, rcx
ret
invalid
pushfq
sub dword [rsi], edi
cwde
xor esi, dword [rdx + rsi*2 - 0x33334a15]

Function at 0x180343e60
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
add r8, 0x69a99e44
rol r8, 4
mov rax, 0xffffffff965661bb
sub rax, rdx
xor r8, rax
mov eax, dword [0x180786720]
xor edx, edx
div dword [0x180786724]
or eax, 0xcfc74aab
or eax, 0x111b430c
sub eax, 0x99ba84a1
cmp eax, 0xc0d1b516
ja 0x180343f36
jmp 0x180343ea5
mov eax, dword [0x180786728]
or eax, dword [0x18078672c]
or eax, 0x51b12360
or eax, 0xac711210
sub eax, 0xa88788ab
mov r9, r8
rol r9, 5
cmp eax, 0xa4a58ed
jb 0x180343ea5
jmp 0x180343ed0
mov eax, dword [0x180786730]
sub eax, dword [0x180786734]
imul eax, eax, 0x80c43d1d
or eax, 0x1ac7d07d
imul eax, eax, 0xe437c473
cmp eax, 0xae82916a
ja 0x180343f43
jmp 0x180343ef6
mov eax, dword [0x180786738]
xor edx, edx
div dword [0x18078673c]
mov r10d, 0x1efe9c62
xor edx, edx
div r10d
xor eax, 0x8950bcfd
imul edx, eax, 0x40ef40a2
mov r10, r9
xor r10, r8
and r10, 0xffff
mov rax, rcx
add rax, r10
cmp edx, 0xe4a77900
ja 0x180343ef6
ret
xchg esp, eax
invalid
mov al, 0x79
int1
push rdi
push 0xffffffffcca7eb2a
int3
Function at 0x180344260
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
imul rcx, rdx, 0xfffffffff81fd7da
mov rdx, rcx
shr rdx, 0x17
xor rdx, rcx
mov rcx, rdx
rol rcx, 2
xor rcx, rdx
mov rdx, rcx
rol rdx, 4
xor rdx, rcx
and rdx, 0xffff
add rax, rdx
mov ecx, dword [0x180786780]
add ecx, dword [0x180786784]
sub ecx, 0xed938c38
imul ecx, ecx, 0x7cad33d3
imul ecx, ecx, 0xe2b8421
cmp ecx, 0x98d71c56
je 0x1803442e1
jmp 0x1803442ba
mov ecx, dword [0x180786788]
add ecx, dword [0x18078678c]
sub ecx, 0xcc9ed35e
xor ecx, 0xb563fdf8
imul ecx, ecx, 0x89fd7bf2
cmp ecx, 0xf11a2a81
jae 0x1803442ba
ret
loope 0x18034431b
xor ah, dl
xchg dword [rbx + 5], eax
lodsd eax, dword [rsi]
jmp 0x1803442b8
add byte [rcx], dh
sal bh, cl
xor eax, 0x442478

Function at 0x180344670
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
xor r8, 0x5695d433

Function at 0x180344b90
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180786860]
xor edx, edx
div dword [0x180786864]
and eax, 0xf595227a
sub eax, 0x9a54315f
or eax, 0xa59f49e
cmp eax, 0x5b9e024f
jb 0x180344c59
jmp 0x180344bbd
mov eax, dword [0x180786868]
add eax, dword [0x18078686c]
mov r9d, 0x321c8d68
xor edx, edx
div r9d
add eax, 0xb280e823
and eax, 0xa10de85c
mov rdx, r8
shr rdx, 0xf
xor rdx, r8
cmp eax, 0x802e8e05
jb 0x180344bbd
jmp 0x180344bf1
imul rax, rdx, 0x445bb40e
mov rdx, rax
rol rdx, 2
xor rdx, rax
and rdx, 0xffff
add rcx, rdx
mov eax, dword [0x180786870]
xor edx, edx
div dword [0x180786874]
xor eax, 0xa23ceede
and eax, 0xeabd2df1
and eax, 0xc23ee1a9
cmp eax, 0x524a3953
je 0x180344c66
mov eax, dword [0x180786878]
xor edx, edx
div dword [0x18078687c]
sub eax, 0x4fa4a761
xor eax, 0x59cc23a3
imul eax, eax, 0x93499e26
cmp eax, 0x968c9329
jb 0x180344c66
mov rax, rcx
ret
xor byte [rbx + rdx*8], ch
jb 0x180344c7a
cmp byte [rdx + 0x17], bl
jmp 0x180344bbb
add dword [0x19e48c162], edx
xor eax, 0x8949c0eb
mov r8, rdx
shr r8, 0x1d
xor r8, rdx
mov eax, dword [0x180786880]
imul eax, dword [0x180786884]
sub eax, 0x64dc492a
mov r9d, 0xc918c35a
xor edx, edx
div r9d
add eax, 0x33fd11c5
cmp eax, 0xb6d81cf5
je 0x180344d5e
mov eax, dword [0x180786888]
xor edx, edx
div dword [0x18078688c]
and eax, 0xa5428e51
add eax, 0xcd61c35a
or eax, 0x5531b3a0
mov rdx, r8
xor rdx, 0x406e5808
mov r9, rdx
shr r9, 1
xor r9, rdx
mov rdx, r9
shr rdx, 0x1c
xor rdx, r9
mov r9, rdx
rol r9, 3
xor r9, rdx
and r9, 0xffff
cmp eax, 0x69e19759
je 0x180344d5e
jmp 0x180344cfb
mov eax, dword [0x180786890]
add eax, dword [0x180786894]
mov r8d, 0x3657de73
xor edx, edx
div r8d
and eax, 0x206f211b
mov r8d, 0x6e7530
xor edx, edx
div r8d
cmp eax, 0x46090a3d
jae 0x180344d6b
jmp 0x180344d2b
mov eax, dword [str.w_a_Z]
sub eax, dword [0x18078689c]
sub eax, 0xc30ecff4
mov r8d, 0x3d1e0331
xor edx, edx
div r8d
mov edx, eax
and edx, 0x8298dadb
mov rax, rcx
add rax, r9
cmp edx, 0x18ee6e2a
jae 0x180344d2b
ret
and ebp, 0x1f461568
xchg r10, rax
jmp 0x180344ca7
in al, dx
xchg ebp, eax
stosw word [rdi], ax
invalid
Function at 0x180344d80
Capabilities:
Encode data using xor

Disassembly:
mov rax, 0xffffffffdc01f958
sub rax, rdx
mov rdx, rax
shr rdx, 0x14
xor rdx, rax
mov r9, rdx
rol r9, 1
xor r9, rdx
mov eax, dword [0x1807868a0]
and eax, dword [0x1807868a4]
mov r8d, 0x4814fb71
xor edx, edx
div r8d
or eax, 0xd876813e
and eax, 0xbb4cdedd
cmp eax, 0x88b9e062
je 0x180344e61
mov eax, dword [0x1807868a8]
and eax, dword [0x1807868ac]
or eax, 0x7a718da9
xor eax, 0x53778fe4
xor eax, 0xabdfb592
mov rdx, r9
add rdx, 0x12485152
mov r8, rdx
rol r8, 3
xor r8, rdx
cmp eax, 0x378cdf7c
jb 0x180344e61
jmp 0x180344e01
mov eax, dword [0x1807868b0]
add eax, dword [0x1807868b4]
sub eax, 0xe3516010
add byte [0x16385ae22], ch
or eax, 0x8df1dcf3
imul eax, eax, 0x3d7c923d
cmp eax, 0x8c397022
je 0x180344e72
jmp 0x180344e26
mov eax, dword [0x1807868b8]
xor edx, edx
div dword [0x1807868bc]
mov edx, eax
and edx, 0x9f9b6f76
sub edx, 0x5572a677
xor edx, 0xbc12a01e
mov r9, r8
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0x5b3eef9d
je 0x180344e26
ret
test byte [rsi], al
test ax, 0xd1fe
mov ecx, 0x4aa2cecf
add al, 0xe9
push rdi
invalid
jge 0x180344ea1
sbb esp, ebx
jge 0x180344e0c
cmp ch, ch
push rcx
sbb esi, dword [rbp - 0x13]
jmp 0x180344e24

Function at 0x1803450a0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x1807868f0]
xor edx, edx
div dword [0x1807868f4]
or eax, 0x974b6d5c
xor eax, 0x8b317166
xor eax, 0xa583eff4
cmp eax, 0xf66893ea
je 0x180345171
jmp 0x1803450cd
mov eax, dword [0x1807868f8]
or eax, dword [0x1807868fc]
xor eax, 0x557bcc77
xor eax, 0xa56dedf0
sub eax, 0xa3ff004
mov r9, r8
add r9, 0xffffffffffffffff
xor r9, 0x5433cfe5
cmp eax, 0xbd7759b4
ja 0x1803450cd
jmp 0x1803450ff
mov eax, dword [0x180786900]
sub eax, dword [0x180786904]
mov r8d, 0xa774cfa3
xor edx, edx
div r8d
mov r8d, 0x1ceacdab
xor edx, edx
div r8d
sub eax, 0x64c953c9
cmp eax, 0x96e21e6a
je 0x180345182
jmp 0x18034512f
mov eax, dword [0x180786908]
sub eax, dword [0x18078690c]
add eax, 0xa9ce0e06
mov r8d, 0x63ae4e97
xor edx, edx
div r8d
imul edx, eax, 0x87d81ecf
mov rax, r9
rol rax, 1
xor rax, r9
and rax, 0xffff
cmp edx, 0x73033f29
je 0x18034512f
jmp 0x18034516a
add rcx, rax
mov rax, rcx
ret
invalid
sar dword [rbx], 0x9f
sub al, al
enter 0xffffffffffffe83e, 0x6f
pushfq
cmpsb byte [rsi], byte [rdi]
pop rbp
jmp 0x18034512d

Function at 0x180345350
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180786940]
add eax, dword [0x180786944]
mov r9d, 0x60255923
xor edx, edx
div r9d
xor eax, 0xc993dde4
and eax, 0x5eebf4e6
pop rsi
cmp eax, 0x2eb77634
jbe 0x1803453db
jmp 0x18034537d
mov eax, dword [0x180786948]
imul eax, dword [0x18078694c]
mov r9d, 0x1263b043
xor edx, edx
div r9d
add eax, 0x254e03f9
add eax, 0x67233801
mov r9, r8
rol r9, 3
xor r9, r8
add r9, 0xffffffffb580bcf8
mov rdx, r9
shr rdx, 4
xor rdx, r9
mov r9, rdx
rol r9, 4
cmp eax, 0xbab4d0de
je 0x18034537d
jmp 0x1803453ca
xor r9, rdx
and r9, 0xffff
add rcx, r9
mov rax, rcx
ret
fdivrp st(3)
mov ebx, 0x43b7de5f
jrcxz 0x180345373
mov bh, 0xe5
jmp 0x14d00e6d6
Function at 0x180345760
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x1807869a0]
sub eax, dword [0x1807869a4]
imul eax, eax, 0x11b59ff
sub eax, 0xa5c26284
mov r9d, 0x1edb11e8
xor edx, edx
div r9d
cmp eax, 0x55616382
je 0x18034584e
jmp 0x180345792
mov eax, dword [0x1807869a8]
and eax, dword [0x1807869ac]
mov r9d, 0xf23925f9
xor edx, edx
div r9d
or eax, 0xced8622f
and eax, 0xc2e093e6
mov edx, 0x50a434c3
sub rdx, r8
imul r9, rdx, 0xffffffffd71b6482
add r9, 0x34d1af36
xor r9, 0x33a0f88
mov r10, r9
rol r10, 5
cmp eax, 0xbea138f
je 0x180345792
jmp 0x1803457e0
mov eax, dword [0x1807869b0]
or eax, dword [0x1807869b4]
mov r8d, 0x78318588
xor edx, edx
div r8d
sub eax, 0xffb2c086
add eax, 0xdf00394d
cmp eax, 0x3b2154da
jb 0x18034585b
jmp 0x18034580a
mov eax, dword [0x1807869b8]
add eax, dword [0x1807869bc]
mov r8d, 0x5cbdd746
xor edx, edx
div r8d
mov r8d, 0xc44ae68a
xor edx, edx
div r8d
xor eax, 0x112aa9bf
mov rdx, r10
xor rdx, r9
and rdx, 0xffff
cmp eax, 0x5cde2897
sub dh, bl
pop rsp
je 0x18034580a
jmp 0x180345847
add rcx, rdx
mov rax, rcx
ret
enter 0xffffffffffffe4c3, 0x47
in al, 0x47
loope 0x18034584c
lahf
add dword [r15 - 0x17], ecx
xor eax, 0x41ffffff
sahf
sahf
nop
loop 0x180345840
stosd dword [rdi], eax
lodsb al, byte [rsi]
loope 0x18034589f
jmp 0x1201fee72
mov eax, dword [0x1807869c8]
imul eax, dword [0x1807869cc]
xor eax, 0xba222ea4
imul eax, eax, 0x8b9d065a
mov r9d, 0xb4160905
xor edx, edx
div r9d
mov rdx, r8
rol rdx, 7
xor rdx, r8
mov r9d, 0x3ff73d28
sub r9, rdx
mov rdx, r9
rol rdx, 1
cmp eax, 0x4d62f1d6
je 0x180345940
jmp 0x1803458de
xor rdx, r9
mov eax, dword [0x1807869d0]
xor eax, dword [0x1807869d4]
add eax, 0xd1a525e9
add eax, 0x260be95c
add eax, 0x45ddd6
cmp eax, 0x459569d4
jbe 0x180345951
mov r8d, dword [0x1807869d8]
and r8d, dword [0x1807869dc]
xor r8d, 0x47344372
and r8d, 0x472d13a8
and r8d, 0xf79db765
mov r9, rdx
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp r8d, 0xac1c85db
je 0x180345951
ret
fnstcw word [rax + 0x5842cec4]
je 0x18034595c
or al, 0x80
pop rbx
movsd dword [rdi], dword [rsi]
jmp 0x180345899
add esp, esp
leave
sbb dword [rax + rbx + 0x6e469202], eax
and eax, 0x49cca4eb
invalid
and eax, 0x49cca4eb
mov eax, edx
shr r8, 0x1e
xor r8, rdx
xor r8, 0xffffffffc79ae6f5
add r8, 0x789b1ba5
mov eax, dword [0x1807869e0]
xor edx, edx
div dword [0x1807869e4]
add eax, 0x6dc89cc
xor eax, 0xaa631881
or eax, 0xc2c23257
cmp eax, 0x738939cf
jbe 0x1803459dc
jmp 0x18034599e
mov edx, dword [0x1807869e8]
and edx, dword [0x1807869ec]
or edx, 0xffdb0f61
sub edx, 0x24816c74
or edx, 0x45add1f9
mov r9, r8
rol r9, 4
xor r9, r8
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0x90fad24
je 0x18034599e
ret
invalid

Function at 0x180345870
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x1807869c0]
or eax, dword [0x1807869c4]
or eax, 0x8ce6439b
add eax, 0xc5856ca3
and eax, 0x9e04b24c
cmp eax, 0xe642404a
je 0x180345940
Function at 0x180345a70
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [0x1807869f0]
sub eax, dword [0x1807869f4]
add eax, 0x28817615
add eax, 0x3b50f057
add eax, 0x59c2d774
cmp eax, 0x5b58bd09
jbe 0x180345b34
jmp 0x180345a98
mov eax, dword [0x1807869f8]
and eax, dword [0x1807869fc]
and eax, 0x937bbe78
and eax, 0xa05e8103
and eax, 0x62b3236d
mov r8, 0xffffffffb0807193
sub r8, rdx
xor r8, 0xffffffffd512c851
cmp eax, 0xe4cf51c4
je 0x180345a98
jmp 0x180345acd
mov eax, dword [0x180786a00]
and eax, dword [0x180786a04]
mov r9d, 0x97af8d61
xor edx, edx
div r9d
xor eax, 0x5b545214
add eax, 0xa78f4f50
cmp eax, 0x27f15ed0
ja 0x180345b41
mov edx, dword [0x180786a08]
and edx, dword [0x180786a0c]
and edx, 0x20352b3b
sub edx, 0x2169876b
or edx, 0x1cf65bf9
mov r9, r8
rol r9, 1
xor r9, r8
and r9, 0xffff
mov rax, rcx
add rax, r9
add byte [rax - 0x77], cl
enter 0x14c, 0xffffffffffffffc8
cmp edx, 0x81018783
je 0x180345b41
jmp 0x180345b33
ret
jmp 0x180345b22
xchg ebp, ebp
add bl, bh
push rbx
push rsi
clc
xchg esp, eax
xchg esi, eax
scasb al, byte [rdi]
invalid