joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18027da60
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, rcx
mov rax, rsi
add rax, 0x20
movzx eax, byte [rax]
mov ecx, eax
sub ecx, 3
je 0x18027da90
jmp 0x18027da7d
sub eax, 4
je 0x18027db7c
jmp case.0x18027dc02.40
mov cx, word [rsi + 0x28]
add rsi, 0x30
mov rax, qword [rsi]
cmp cx, 3
jne case.0x18027dc02.40
mov rcx, rax
and rcx, 3
mov rdx, rcx
sub rdx, 3
ja 0x18027dac1
lea rdx, [0x18048747c]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov eax, dword [0x180522aa8]
xor edx, edx
div dword [0x180522aac]
imul eax, eax, 0x6879ee78
mov ecx, 0xee0975d8
or esi, ebp
mov eax, dword [0x180522ab8]
xor eax, dword [0x180522abc]
and eax, 0x12c699
add eax, 0x6b64ba57
add eax, 0xcd23b6a5
cmp eax, 0x9bd3109e
ja 0x18027ddbb
jmp 0x18027dba4
sbb byte [rdi - 0x19409a06], bl
stc
scasd eax, dword [rdi]
std
add ebx, dword [rcx]
outsb dx, byte [rsi]
jmp 0x18027dba2
Function at 0x180284fd0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rdi, r9
mov rbx, r8
mov rsi, rdx
mov r14, rcx
mov r12, rsi
add r12, 0x29
mov r13, rsi
add r13, 8
mov al, byte [r12]
jmp 0x180285000
add al, 0xfe
movzx edx, al
inc rdx
xor ecx, ecx
sub al, 2
cmovb rcx, rdx
test rcx, rcx
je 0x180285024
jmp 0x180285017
sub rcx, 1
je 0x180285050
jmp 0x18028501f
jmp 0x1802850bf
mov rcx, rsi
mov rdx, r14
mov r8, rbx
mov r9, rdi
call fcn.1802b5590
mov r15, rdx
mov rcx, rax
add rcx, 0xffffffffffffffff
cmp rcx, 2
setb cl
test cl, 1
je 0x1802850c6
jmp 0x18028510a
mov eax, dword [0x1805235c8]
add eax, dword [0x1805235cc]
add eax, 0x8238072b
imul eax, eax, 0x89f81216
xor eax, 0xeb09b796
cmp eax, 0x434a0f34
je 0x1802851da
jmp 0x180285079
mov eax, dword [0x1805235d0]
xor eax, dword [0x1805235d4]
imul ebp, eax, 0x57c2c657
xor ebp, 0xebcf6b94
add ebp, 0x90df5b26
mov rcx, rdi
mov rdx, r14
call fcn.180407970
mov rcx, rax
mov r15, rdx
cmp ebp, 0x6449463e
je 0x180285079
jmp 0x1802850b2
mov eax, 2
cmp rcx, 0
je 0x18028511e
jmp 0x18028510a
mov r15, qword [rsi]
xor eax, eax
jmp 0x18028510a
mov al, byte [r12]
cmp al, 2
setb cl
mov al, 2
test cl, 1
jne 0x1802850d8
jmp 0x1802850fe
mov rdx, qword [r13]
cmp rdx, 0
sete cl
mov al, 2
test cl, 1
je 0x1802850ec
jmp 0x1802850fe
mov rcx, qword [rsi]
mov r8d, 1
call fcn.1802cbf20
mov al, 2
jmp 0x1802850fe
mov qword [rsi], r15
mov byte [r12], al
jmp 0x180285000
mov rdx, r15
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp r15, 0
sete cl
mov eax, dword [0x1805235d8]
xor eax, dword [0x1805235dc]
mov r8d, 0x60275b1f
xor edx, edx
div r8d
and eax, 0x64262650
mov r8d, 0xae38c7ff
xor edx, edx
div r8d
cmp eax, 0xc41b3b2f
jae 0x1802851f6
jmp 0x180285159
mov eax, dword [0x1805235e0]
imul eax, dword [0x1805235e4]
mov r8d, 0xd9d8afe5
xor edx, edx
div r8d
mov r8d, 0x87268e66
xor edx, edx
div r8d
or eax, 0xf8815aec
cmp eax, 0xad26954
je 0x180285159
mov eax, 1
test cl, 1
jne 0x180285197
jmp 0x18028510a
mov r15, qword [rsi]
cmp byte [r12], 2
setb cl
mov al, 3
test cl, 1
jne 0x1802851ae
jmp 0x1802850fe
mov rdx, qword [r13]
cmp rdx, 0
sete cl
mov al, 3
test cl, 1
je 0x1802851c5
jmp 0x1802850fe
mov rcx, r15
mov r8d, 1
call fcn.1802cbf20
mov al, 3
jmp 0x1802850fe
dec ecx
fxch st(5)
add byte [rax + 0x3e3ac221], dl
mov esi, 0xf9894836
mov rdx, r14
call fcn.180407970
jmp 0x180285077
adc ch, byte [rdi]
outsd dx, dword [rsi]
xor eax, 0x19075fe9
jmp 0x180285157
Function at 0x180289e50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
mov rsi, rcx
mov rcx, rsi
call fcn.180405d80
mov rcx, rax
and rcx, 8
cmp rcx, 0
jne 0x180289efe
mov eax, dword [0x180523ad0]
xor eax, dword [0x180523ad4]
or eax, 0xc790767b
add eax, 0x5191c51c
or eax, 0xa50e3945
cmp eax, 0xb0df30c3
je 0x180289fbd
jmp 0x180289e9b
mov eax, dword [0x180523ad8]
xor eax, dword [0x180523adc]
imul ebx, eax, 0xc1e8bd05
or ebx, 0x29f35220
add ebx, 0x68455661
mov rcx, qword [rsi + 0x28]
call fcn.1804080c0
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rdx
mov rdi, rsi
add rdi, 0x30
cmp ebx, 0x32e02b7b
jae 0x180289e9b
jmp 0x180289edd
mov rcx, rdi
call fcn.180200990
movabs rax, 0x8000000000000006
mov qword [rdi], rax
lea rcx, [rsp + 0x28]
call fcn.180408160
jmp 0x180289f20
and rax, 0x10
cmp rax, 0
sete al
test al, 1
jne 0x180289f20
jmp 0x180289f0f
mov rcx, rsi
add rcx, 0x3c0
call fcn.180408a20
jmp 0x180289f20
mov qword [rsp + 0x38], rsi
mov rdi, rsi
add rdi, 0x20
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.180409c50
mov edx, 2
mov ecx, 1
cmp rax, 0
cmove rdx, rcx
mov rcx, rsi
call fcn.180405db0
test al, 1
jne 0x180289f5f
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rax, qword [rdi]
lock dec qword [rax]
sete al
test al, 1
je 0x180289f77
mov rcx, rdi
call fcn.180275eb0
jmp 0x180289f77
mov rcx, rsi
add rcx, 0x30
call fcn.18027eda0
mov rax, rsi
add rax, 0x3d0
mov rax, qword [rax]
cmp rax, 0
je 0x180289fa8
mov rcx, rsi
add rcx, 0x3d8
mov rcx, qword [rcx]
add rax, 0x18
call qword [rax]
mov rcx, rsi
mov edx, 0x400
mov r8d, 0x80
call fcn.1802cbf20
jmp 0x180289f57
and bl, byte [rdi - 0x48]
mov bl, 0x7c
mov dl, 0x61
in eax, 0x48
mov ecx, dword [rsi + 0x28]
call fcn.1804080c0
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rdx
jmp 0x180289e99
Function at 0x18028a700
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
push rbx
sub rsp, 0x18
lea rbp, [rsp + 0x10]
mov rsi, rcx
mov eax, 0x10
call fcn.18045a590
sub rsp, rax
mov rdi, rsp
sub rsp, 0x20
mov rcx, rsi
call fcn.180405d80
add rsp, 0x20
mov rcx, rax

Function at 0x18028c170
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r12
push rsi
push rdi
push rbx
mov rbp, rsp
mov rsi, rcx
mov eax, dword [0x180523d70]
xor eax, dword [0x180523d74]
imul eax, eax, 0xf84dfdc7
mov ecx, 0xa5bf7db0
xor edx, edx
div ecx
mov ecx, 0x496aad4a
xor edx, edx
div ecx
cmp eax, 0xd85e81dd
je 0x18028c3bb
mov ecx, dword [0x180523d78]
mov eax, dword [0x180523d7c]
xor ecx, eax
add ecx, 0xe3412069
and ecx, 0xf69f165b
mov eax, 0x10
call fcn.18045a590
sub rsp, rax
mov rdi, rsp
cmp ecx, 0x4ead82b5
ja 0x18028c3bb
jmp 0x18028c1e7
mov eax, 0x10
call fcn.18045a590
sub rsp, rax
mov rbx, rsp
sub rsp, 0x20
mov rcx, rsi
call fcn.180405dd0
add rsp, 0x20
test al, 1
jne 0x18028c2fc
jmp 0x18028c211
sub rsp, 0x20
mov rcx, rsi
call fcn.180405e70
add rsp, 0x20
test al, 1
jne 0x18028c22a
jmp 0x18028c3ad
mov rcx, rsi
add rcx, 0x20
mov rax, qword [rcx]
lock dec qword [rax]
sete al
test al, 1
je 0x18028c24e
sub rsp, 0x20
call fcn.180279770
add rsp, 0x20
jmp 0x18028c24e
mov rcx, rsi
add rcx, 0x30
sub rsp, 0x20
call fcn.18027e720
add rsp, 0x20
mov rax, rsi
add rax, 0xf0
mov rax, qword [rax]
cmp rax, 0
je 0x18028c28e
mov rcx, rsi
add rcx, 0xf8
mov rcx, qword [rcx]
sub rsp, 0x20
call qword [rax + 0x18]
add rsp, 0x20
jmp 0x18028c28e
sub rsp, 0x20
mov rcx, rsi
mov edx, 0x100
mov r8d, 0x80
call fcn.1802cbf20
add rsp, 0x20
mov eax, dword [0x180523d80]
or eax, dword [0x180523d84]
or eax, 0xb8825dcc
xor eax, 0xbda99a27
mov ecx, 0x102bfdcc
xor edx, edx
div ecx
cmp eax, 0xc212a1a2
jae 0x18028c3cc
jmp 0x18028c2d5
mov eax, dword [0x180523d88]
add eax, dword [0x180523d8c]
and eax, 0xda188e11
xor eax, 0x4efcc039
sub eax, 0xe24270c7
cmp eax, 0xd3520876
je 0x18028c2d5
jmp 0x18028c3ad
mov r15, rsi
add r15, 0x28
mov rcx, qword [rsi + 0x28]
sub rsp, 0x20
call fcn.1804080c0
add rsp, 0x20
mov qword [rbx], rax
mov qword [rbx + 8], rdx
mov r14, rsi
add r14, 0x30
sub rsp, 0x20
mov rcx, r14
call fcn.180200d80
add rsp, 0x20
mov r12, rsi
add r12, 0xd8
mov byte [rsi + 0xd8], 5
sub rsp, 0x20
mov rcx, rbx
call fcn.180408160
add rsp, 0x20
mov rbx, qword [r15]
sub rsp, 0x20
mov rcx, rbx
call fcn.1804080c0
add rsp, 0x20
mov qword [rdi], rax
mov qword [rdi + 8], rdx
sub rsp, 0x20
mov rcx, r14
call fcn.180200d80
add rsp, 0x20
mov qword [r14], 1
mov qword [rsi + 0x38], 0
mov qword [rsi + 0x48], rbx
mov byte [r12], 4
sub rsp, 0x20
mov rcx, rdi
call fcn.180408160
mov rcx, rsi
call fcn.18028b310
add rsp, 0x20
mov rsp, rbp
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
pop rbp
ret
xchg edi, eax
invalid
pop rcx
outsd dx, dword [rsi]
jmp 0x15d12068a
Function at 0x18028ccb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
mov rbx, r8
mov rsi, rdx
mov rdi, rcx
lea rcx, [rsp + 0x28]
mov rdx, rdi
call fcn.180405ec0
cmp qword [rdi], 0
sete al
test al, 1
jne 0x18028ccda
jmp 0x18028ccf5
mov rcx, rdi
add rcx, 8
add rdi, 0x30
mov rdx, rdi
mov r8, rsi
mov r9, rbx
call fcn.1802c5df0
jmp 0x18028cd12
add rdi, 0x30
lea r9, str.C:Userslucak.cargo_registry_srcindex.crates.io_6f17d22bba15001f_tokio_1.39.2_src_runtime_schedulermulti_threadmod.rs
mov rcx, rdi
mov edx, 1
mov r8, rsi
call fcn.1802c5840
jmp 0x18028cd12
lea rcx, [rsp + 0x28]
call fcn.1804057a0
mov eax, dword [0x180523e10]
and eax, dword [0x180523e14]
and eax, 0x8d0cfef
and eax, 0x5cdbfd9e
and eax, 0x8a3dd805
cmp eax, 0xf1b43541
jae 0x18028ce6d
mov eax, dword [0x180523e18]
sub eax, dword [0x180523e1c]
xor eax, 0x2c641cfc
or eax, 0x8957169c
imul eax, eax, 0x8ac679be
mov rcx, qword [rsp + 0x28]
cmp eax, 0xa3b1df26
ja 0x18028ce6d
jmp 0x18028cd70
mov eax, dword [0x180523e20]
xor eax, dword [0x180523e24]
xor eax, 0xc1e7b0e8
add eax, 0x13b1b935
or eax, 0xebc4459d
cmp eax, 0x3512c10c
je 0x18028ce7e
jmp 0x18028cd98
mov eax, dword [0x180523e28]
and eax, dword [0x180523e2c]
sub eax, 0x9cb607e3
mov r8d, 0x1b6b5d98
xor edx, edx
div r8d
or eax, 0x64dd020f
cmp rcx, 2
sete dl
cmp eax, 0xb0965e4d
je 0x18028cd98
test dl, 1
jne 0x18028ce65
jmp 0x18028cdd2
cmp rcx, 0
sete r8b
lea rcx, [rsp + 0x28]
add rcx, 8
mov eax, dword [0x180523e30]
xor edx, edx
div dword [0x180523e34]
add eax, 0x54996440
sub eax, 0xc26b9b23
xor eax, 0x1437939c
cmp eax, 0x934abb0e
jae 0x18028ce8b
jmp 0x18028ce0d
mov eax, dword [0x180523e38]
and eax, dword [0x180523e3c]
xor eax, 0xa9bbf54c
or eax, 0x6cc8d5eb
add eax, 0x474011ce
cmp eax, 0xa0914747
jbe 0x18028ce0d
test r8b, 1
jne 0x18028ce37
jmp 0x18028ce4e
mov rax, qword [rcx]
lock dec qword [rax]
sete al
test al, 1
jne 0x18028ce47
jmp 0x18028ce65
call fcn.180275eb0
jmp 0x18028ce65
mov rax, qword [rcx]
lock dec qword [rax]
sete al
test al, 1
jne 0x18028ce5e
jmp 0x18028ce65
call fcn.180279770
jmp 0x18028ce65
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
add cl, dh
cli
xchg byte [rdi], dh
mov al, 0x16
fdiv dword [rax]
invalid
cmp esp, edx
out 0x96, eax
pop rcx
invalid
dec esp
mov byte [rdi + rdx*4 - 0x16654568], dl
jae 0x18028ce95
invalid
invalid
Function at 0x18028d410
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x778
Function at 0x1802935e0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, r8
mov rdi, rdx
mov rbx, rcx
cmp rsi, 0
sete cl
mov eax, dword [0x180524430]
imul eax, dword [0x180524434]
imul eax, eax, 0x668268c8
mov r8d, 0xc57956c6
xor edx, edx
div r8d
mov r8d, 0x428ab1e6
xor edx, edx
div r8d
cmp eax, 0xf242a5cb
retf
movsd dword [rdi], dword [rsi]
bnd je 0x180293ac3
invalid
pop qword [rax + rax]
invalid
jmp 0x180293636
mov eax, dword [0x180524438]
or eax, dword [0x18052443c]
sub eax, 0xabd8efc7
add eax, 0xb8448766
mov r8d, 0xe960944c
xor edx, edx
div r8d
cmp eax, 0x8150c6a6
ja 0x180293636
xor eax, eax
test cl, 1
add dword [rbp + 0x1d], esi
jmp case.0x180290e38.27
jmp 0x180293669
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.1804293b0
mov rcx, rdx
cmp rax, 0
je 0x180293693
jmp 0x1802936ab
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp rcx, 0
sete dl
xchg esp, eax
ret 0x8d48
add eax, 0x1f43c7
invalid
add dh, dh
ret 0x7501
invalid
jmp 0x180293897
mov r8, rcx
and r8, 3
lea rax, [0x180488590]
add eax, 0x1f4ed7
movsxd rdx, dword [rax + r8*4]
add rdx, rax
jmp rdx
mov eax, dword [0x180524460]
xor eax, dword [0x180524464]
add eax, 0x15f34222
or eax, 0xe473f653
imul eax, eax, 0xd37fc041
cmp eax, 0x7cccb451
push rcx
mov ah, 0xcc
jl 0x1802938c8
xchg byte [rdx + rax], ch
add byte [rax], al
jmp 0x1802938c0
mov eax, dword [0x180524468]
xor eax, dword [0x18052446c]
add eax, 0xe4216a8c
xor eax, 0x1be5f2dc
imul edx, eax, 0x3525c95c
cmp rsi, rcx
setb al
cmp edx, 0xfeb20b3d
je 0x1802938c0
jmp case.0x180290e38.70
test al, 1
jne 0x1802938f2
jmp 0x1802938f6
ud2
sub rsi, rcx
add rdi, rcx
jmp 0x180293ab2
xor eax, eax
cmp rsi, 0
je 0x180293682
jmp 0x180293669
push rsp
movabs byte [0x64e9177d7e075021], al
sti
invalid
jmp [r10]
Function at 0x1802974a0
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rsi, r8
mov rdi, rdx
mov rbx, rcx
retf
cmp rdi, r9
sete al
xor edx, edx
test al, 1
jne 0x1802974c3
jmp 0x180297560
cmp rdi, 0
sete al
mov dl, 1
test al, 1
jne 0x180297560
jmp 0x1802974d6
xor r10d, r10d
jmp 0x1802974db
mov eax, dword [0x180524870]
or eax, dword [0x180524874]
or eax, 0xc0db0fad
imul eax, eax, 0x6fca7d7a
sar byte [rdx + 0x7d], 0xca
outsd dx, dword [rsi]
mov ecx, 0xd9142cf6
xor edx, edx
div ecx
cmp eax, 0x73782b8f
sub edi, dword [rax + 0x73]
je 0x180297c6f
jmp 0x180297508
mov edx, dword [0x180524878]
xor edx, dword [0x18052487c]
sub edx, 0x169fd7da
xor edx, 0xf01c15ef
add edx, 0x2125b7ec
mov r14, r10
add r14, 1
mov rax, r10
shl rax, 5
mov rcx, rbx
add rcx, rax
mov rax, r10
shl rax, 5
mov r9, rsi
add r9, rax
mov r8b, byte [rcx]
cmp r8b, byte [r9]
sete al
cmp edx, 0x40c5b614
jae 0x180297508
xor edx, edx
test al, 1
jne 0x180297570
jmp 0x180297560
and dl, 1
movzx eax, dl
add rsp, 0x28
sub byte [rbx + 0x5f], bl
pop rsi
pop r14
ret
mov eax, dword [0x180524880]
xor eax, dword [0x180524884]
mov r10d, 0x4540350
mov edx, 0x4540350
xor edx, edx
div r10d
imul eax, eax, 0xfd34e277
or eax, 0x734acdc6
cmp eax, 0x23cff002
je 0x180297c7c
fild word [rsi]
add byte [rax], al
mov eax, dword [0x180524888]
add eax, dword [0x18052488c]
jrcxz 0x180297579
sub byte [rax], al
imul eax, eax, 0xfe6d70aa
mov r10d, 0x2c0344b8
xor edx, edx
div r10d
sub eax, 0xe2a5d168
movzx edx, r8b
cmp eax, 0x61156d2f
jae 0x180297c7c
invalid
jmp 0x1802975d0
add rdx, 0xfffffffffffffffe
mov rax, rdx
mov eax, edx
sub rax, 0xe
ja 0x180297c04
and eax, dword [rsi]
add byte [rax], al
lea rax, [0x180488748]
movsxd rdx, dword [rax + rdx*4]
invalid
adc al, 0x90
add rdx, rax
jmp rdx
mov eax, dword [0x180524920]
sub eax, dword [0x180524924]
imul eax, eax, 0xd19c95d6
imul eax, eax, 0x5e477dae
xor eax, 0x82550238
cmp eax, 0xe099a535
ja 0x180297d16
jmp 0x180297c2e
mov eax, dword [0x180524928]
xor eax, dword [0x18052492c]
xor eax, 0xd32b2482
sub eax, 0x6eb7384f
mov ecx, 0xd580444e
xor edx, edx
div ecx
cmp r14, rdi
sete cl
cmp eax, 0xa41ef3ca
jae 0x180297c2e
jmp 0x180297c5c
mov dl, 1
test cl, 1
mov r10, r14
jne 0x180297560
jmp 0x1802974db
and eax, 0xd2b516d1
pop rdx
jmp 0x180297506
xchg ecx, eax
cmpsd dword [rsi], dword [rdi]
movabs dword [0xdd4b8097b72cb526], eax
jmp 0x18029759d
sbb esi, dword [rdx]
sub bh, bl
cmp ah, byte [rbx]
jle 0x180297d26
jmp 0x180297c2c
int3
Function at 0x180298700
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rax, rcx
add rax, 0x18
mov rax, qword [rax]
cmp rax, 0
sete dl
test dl, 1
jne 0x1802988bc
jmp 0x18029872b
mov r8, qword [rcx + 0x10]
mov rdx, qword [rcx]
xor r9d, r9d
cmp r8, rdx
mov r10, rdx
cmovb r10, r9
sub r8, r10
mov r10, rdx
sub r10, r8
cmp r10, rax
setb dil
mov r9, r8
add r9, rax
xor r11d, r11d
mov rbx, rax
sub rbx, r10
cmovb rbx, r11
cmp r10, rax
cmovb r9, rdx
add rcx, 8
mov eax, dword [0x180524970]
xor edx, edx
div dword [0x180524974]
and eax, 0x6edf20f5
imul eax, eax, 0xe587b494
or eax, 0x762fac3c
cmp eax, 0x250ce9e0
jb 0x1802988cc
jmp 0x180298798
mov edx, dword [0x180524978]
or edx, dword [0x18052497c]
xor edx, 0xdffa2f17
and edx, 0xc3ce054f
and edx, 0x2420d1
mov r14, qword [rcx]
mov rax, r8
shl rax, 4
mov r15, r14
add r15, rax
mov r12, r9
sub r12, r8
cmp r9, r8
sete al
cmp edx, 0x616b3636
ja 0x180298798
test al, 1
jne 0x18029881f
jmp 0x1802987e0
xor r13d, r13d
jmp 0x1802987e5
mov rax, r13
shl rax, 4
mov rcx, r15
add rcx, rax
add r13, 1
mov rsi, qword [rcx]
mov rcx, rsi
call fcn.180405e90
test al, 1
jne 0x180298807
jmp 0x180298811
mov rcx, rsi
call fcn.180407030
jmp 0x180298811
cmp r13, r12
sete al
test al, 1
jne 0x18029881d
jmp 0x1802987e5
jmp 0x18029881f
test dil, 1
jne 0x18029882a
jmp 0x1802988bc
xor r15d, r15d
jmp 0x18029882f
mov rax, r15
shl rax, 4
mov rcx, r14
add rcx, rax
add r15, 1
mov rsi, qword [rcx]
mov rcx, rsi
call fcn.180405e90
test al, 1
jne 0x180298851
jmp 0x1802988ab
mov eax, dword [0x180524980]
xor edx, edx
div dword [0x180524984]
xor eax, 0xba8ddae0
or eax, 0xcec4da92
and eax, 0x74ec0648
cmp eax, 0xe15303b3
ja 0x1802988dd
mov eax, dword [0x180524988]
xor edx, edx
div dword [0x18052498c]
mov edi, eax
or edi, 0x608a4a73
add edi, 0x385e18a6
and edi, 0x612ee1e6
mov rcx, rsi
call fcn.180407030
cmp edi, 0x788df294
je 0x1802988dd
invalid
jmp 0x1802988a9
jmp 0x1802988ab
cmp r15, rbx
sete al
test al, 1
jne 0x1802988ba
jmp 0x18029882f
jmp 0x1802988bc
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
outsd dx, dword cs:[rsi]
retf 0xdfbe
add ebx, dword [rsi - 0x5684913f]
outsb dx, byte [rsi]
jnp 0x18029888c
jrcxz 0x1802988e0
mov rcx, rsi
call fcn.180407030
jmp 0x180298875
Function at 0x18029ca90
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rdi, r8
mov rsi, rcx
mov r15, rdx
add r15, 0x38
mov rbx, qword [r15]
cmp rbx, 0
Function at 0x18029dc50
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov r8, rdx
mov rdx, rcx
lea rcx, [rsp + 0x48]
call fcn.180435480
mov rdi, qword [rsp + 0x48]
cmp rdi, 0
sete cl
lea r8, [rsp + 0x48]
add r8, 8
mov eax, dword [0x180524ec0]
xor eax, dword [0x180524ec4]
mov r9d, 0x96a0df17
xor edx, edx
div r9d
or eax, 0xfe91ae3e
or eax, 0x494d9ec2
cmp eax, 0x40445fe9
jbe 0x18029e0c1
jmp 0x18029dcb6
mov eax, dword [0x180524ec8]
sub eax, dword [0x180524ecc]
sub eax, 0xfa57fea7
imul eax, eax, 0x4487b3a8
and eax, 0xbbf2cbb4
mov rbx, qword [r8]
cmp eax, 0xbd01bc23
je 0x18029dcb6
test cl, 1
jne 0x18029dd68
jmp 0x18029dce7
lea rax, [rsp + 0x48]
add rax, 0x10
mov r14, qword [rax]
mov eax, dword [0x180524ed0]
xor edx, edx
div dword [0x180524ed4]
imul eax, eax, 0x50d400ab
and eax, 0xb8db230d
and eax, 0xf9af60ce
cmp eax, 0xe582ae17
jae 0x18029e0ce
jmp 0x18029dd1e
mov eax, dword [0x180524ed8]
xor edx, edx
div dword [0x180524edc]
or eax, 0x98c02e3
add eax, 0xe6f7637d
add eax, 0x89b2e25a
mov rbp, qword [rsp + 0x60]
cmp rbx, rbp
sete cl
cmp eax, 0x92a88b7f
ja 0x18029dd1e
xor esi, esi
test cl, 1
jne 0x18029de0b
jmp 0x18029dd5a
lea r12, [rsp + 0x68]
add r12, 2
xor r13d, r13d
jmp 0x18029ddcd
mov eax, dword [0x180524ee0]
or eax, dword [0x180524ee4]
or eax, 0xab7e79c5
sub eax, 0xdc7f9de6
and eax, 0x101c136b
cmp eax, 0x8f6e6f77
je 0x18029e0df
jmp 0x18029dd90
mov edi, dword [0x180524ee8]
sub edi, dword [0x180524eec]
and edi, 0x17ac4836
or edi, 0x4ca8d18e
or edi, 0x2262c172
mov ecx, 1
mov rdx, rbx
call fcn.18043c250
mov rsi, rdx
cmp edi, 0xfbe4601d
ja 0x18029dd90
jmp 0x18029ddc8
jmp 0x18029de98
std
xchg esi, eax
cli
invalid
ja 0x18029e117
retf 0x590c
call 0x19148b314
mov cl, 0xd1
stosb byte [rdi], al
invalid
invalid

Function at 0x18029f9f0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rax, rsi
add rax, 0x20
mov cl, byte [rax]
movzx eax, cl
sub cl, 3
invalid
je 0x18029fa2a
jmp 0x18029fa12
sub eax, 4
je 0x18029fbb0
jmp case.0x18029faae.0
mov rax, rsi
add rax, 0x28
mov ax, word [rax]
add rsi, 0x30
mov rcx, qword [rsi]
cmp ax, 3
jne case.0x18029faae.0
cmp rcx, 0
setne al
mov eax, dword [0x180525120]
add eax, dword [str.6_tpS]
sub eax, 0xbe840a7f
mov esi, 0x914c8005
and al, byte [rcx - 0x48]
ror dl, 0x3a
ror dl, 0x3a
mov eax, dword [0x180525150]
or eax, dword [0x180525154]
xor eax, 0x8762ca63
add eax, 0xb48f731e
add eax, 0x83647c76
cmp eax, 0xb33521e1
je 0x18029fec5
jmp 0x18029fbd8
mov eax, dword [0x180525158]
and eax, dword [0x18052515c]
imul eax, eax, 0xaa6cf06a
or eax, 0xc4cf2ff
and eax, 0x93cfca99
mov rcx, rsi
add rcx, 0x30
cmp eax, 0xc777141c
ja 0x18029fbd8
jmp 0x18029fc04
call fcn.1802a6bf0
mov rax, qword [rsi + 0x28]
cmp rax, 0
sete cl
test cl, 1
jne case.0x18029faae.0
jmp 0x18029fc1f
mov ecx, dword [0x180525160]
and ecx, dword [0x180525164]
mov edx, 0x7d14693
invalid
Function at 0x1802a0430
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
mov al, byte [rsi + 0xa8]
mov dl, al
add dl, 0xfc
movzx r8d, dl
inc r8
xor ecx, ecx
sub dl, 2
cmovb rcx, r8
test rcx, rcx
je 0x1802a046e
jmp 0x1802a045f
sub rcx, 1
je 0x1802a07bf
jmp 0x1802a086b
movzx eax, al
test eax, eax
je 0x1802a0492
jmp 0x1802a0477
sub eax, 3
je 0x1802a055e
jmp 0x1802a086b
mov rdi, qword [rsi]
mov rax, rdi
add rax, 0x1c8
lock dec qword [rax]
sete al
test al, 1
jne 0x1802a04ae
jmp 0x1802a0547
mov rbx, rdi
sub rbx, 0xffffffffffffff80
mov r14d, 1
lock xadd qword [rdi + 0x88], r14
mov eax, dword [0x180525200]
xor edx, edx
div dword [0x180525204]
add eax, 0xe1c2d35c
or eax, 0x3b95b72a
mov ecx, 0x9f9a328a
xor edx, edx
div ecx
cmp eax, 0x61f594eb
ja 0x1802a0876
mov rcx, rsi
add rcx, 0x30
call fcn.180406d20
mov rax, qword [rsi + 0x30]
cmp rax, 0
sete al
mov rcx, rsi
add rcx, 0x38
test al, 1
jne 0x1802a0582
jmp 0x1802a05f9
mov r8, qword [rcx]
mov eax, dword [0x180525210]
or eax, dword [0x180525214]
and eax, 0x23e98334
and eax, 0xfde8f52a
xor eax, 0xd4feec20
cmp eax, 0xa0204692
jb case.0x18029faae.65
mov rax, qword [rcx]
lock dec qword [rax]
sete al
test al, 1
jne 0x1802a0609
jmp 0x1802a0610
call fcn.180279770
jmp 0x1802a0610
mov rax, qword [rsi]
cmp rax, 0
sete al
test al, 1
jne 0x1802a086b
jmp 0x1802a07d3
mov rdi, qword [rsi + 8]
mov rsi, qword [rsi + 0x10]
cmp rdi, 0
je 0x1802a086b
mov eax, dword [0x180525230]
xor eax, dword [0x180525234]
add eax, 0x9cf04af0
xor eax, 0x1245008e
imul eax, eax, 0x3f7c01c3
cmp eax, 0x41a560ba
jbe 0x1802a08c1
jmp 0x1802a080e
sbb eax, ebp
sub al, 0xe
invalid