joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1801bb590
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x752804
sub rax, rdx
mov r8, rax
rol r8, 3
xor r8, rax
mov eax, dword [0x180516558]
imul eax, dword [0x18051655c]
add eax, 0x67ee1f73
or eax, 0x7d66a6d7
sub eax, 0x2f49473
cmp eax, 0xff33e658
je 0x1801bb602
jmp 0x1801bb5c7
mov eax, dword [0x180516560]
sub eax, dword [0x180516564]
mov r9d, 0x450d2019
xor edx, edx
div r9d
xor eax, 0xdf8adb54
xor eax, 0x4805b278
mov rdx, r8
and rdx, 0xffff
cmp eax, 0xc403e90
je 0x1801bb5c7
jmp 0x1801bb5fb
add rcx, rdx
mov rax, rcx
ret
xlatb
cld
sub r15b, r8b
jg 0x1801bb664
test al, 0xeb
mov ecx, 0xcccccccc
imul r8, rax
mov rax, r8
rol rax, 1
xor rax, r8
and rax, 0xffff
add rcx, rax
mov eax, dword [0x180516568]
xor edx, edx
div dword [0x18051656c]
add eax, 0x9de75a17
or eax, 0xccd3e23d
and eax, 0x329d1851
cmp eax, 0x795f0b94
je 0x1801bb6c4
mov eax, dword [0x180516570]
and eax, dword [0x180516574]
sub eax, 0xc78af56f
or eax, 0xa895defa
sub eax, 0xdc25437d
cmp eax, 0xbde6a39e
je 0x1801bb6c4
mov rax, rcx
ret
cmp qword [0x1f21e8d44], r8
cli
invalid

Function at 0x1801bc420
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
rol r8, 1
xor r8, rdx
mov rax, r8
xor rax, 0xffffffffffffffff
rol rax, 2
xor r8, rax
xor r8, 0xffffffffc617dc37
mov eax, dword [0x180516648]
or eax, dword [0x18051664c]
mov r9d, 0xdbb8913
xor edx, edx
div r9d
sub eax, 0xb1d97a70
or eax, 0x8ed4614d
cmp eax, 0xaa28a4a7
jb 0x1801bc4a8
jmp 0x1801bc468
mov edx, dword [0x180516650]
add edx, dword [0x180516654]
or edx, 0xe46bf19a
or edx, 0xefd09700
add edx, 0xd48ff8c8
mov r9, r8
rol r9, 2
xor r9, r8
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0x94412953
jbe 0x1801bc468
jmp 0x1801bc4a7
ret
movabs eax, dword [0xeb1b16027927002a]
mov ah, 0xcc
int3

Function at 0x1801bc670
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180516668]
sub eax, dword [0x18051666c]
mov r9d, 0x66454111
xor edx, edx
div r9d
sub eax, 0x9af6b80a
sub eax, 0x3cee3b05
cmp eax, 0x6f1a78ff
ja 0x1801bc707
mov eax, 0x52d9af6
cmp ebp, esi
cmp al, 0x3d
invalid
jmp 0x1801bc69d
mov eax, dword [0x180516670]
and eax, dword [0x180516674]
mov r9d, 0x63752784
xor edx, edx
div r9d
imul edx, eax, 0x10cb1d0e
xor edx, 0x8e890768
mov rax, 0xffffffffea92a3f6
sub rax, r8
cmp edx, 0xe052fa
jbe 0x1801bc69d
jmp 0x1801bc6d4
mov rdx, rax
rol rdx, 4
xor rdx, rax
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
mov edx, 0x46c0eaf9
sub rdx, rax
mov rax, rdx
rol rax, 2
xor rax, rdx
and rax, 0xffff
add rcx, rax
mov rax, rcx
ret
push rbp
jle 0x1801bc68c
xchg byte [rcx], ah
invalid
Function at 0x1801bd730
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov r9d, 0x311ed7b3
sub r9, r8
shr r9, 0x14
mov eax, dword [0x180516748]
xor edx, edx
div dword [str.t__y:]
sub eax, 0xe694b402
sub eax, 0x6075569c
add eax, 0x9ac47437
cmp eax, 0x3bac66bb
jb 0x1801bd7ba
jmp 0x1801bd766
mov edx, dword [0x180516750]
xor edx, dword [0x180516754]
add edx, 0xddba951e
xor edx, 0x46204f08
sub edx, 0xc6a26760
mov rax, r8
add rax, 0xffffffffcee1284c
mov r10, r9
xor r10, rax
imul r10, r10, 0xffffffffb4b612ba
mov rax, r10
rol rax, 1
xor rax, r10
cmp edx, 0x480ba7bf
je 0x1801bd766
jmp 0x1801bd7ad
and rax, 0xffff
add rcx, rax
mov rax, rcx
ret
cmpsd dword [rsi], dword [rdi]
pushfq
cli
mov ebp, 0x200ea3e4
push rsp
movsd dword [rdi], dword [rsi]
jmp 0x1801bd764

Function at 0x1801bd800
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
shr rax, 0x1e
xor rax, rdx
mov r8d, 0x621a9cb2
sub r8, rax
shr r8, 6
add rax, 0xffffffff9de5634d
xor r8, rax
mov r9, r8
rol r9, 6
mov eax, dword [0x180516758]
add eax, dword [0x18051675c]
and eax, 0x745ec4c3
mov r10d, 0x70027391
xor edx, edx
div r10d
sub eax, 0xd670f3a4
cmp eax, 0xc92400f
jbe 0x1801bd88b
jmp 0x1801bd851
mov edx, dword [0x180516760]
sub edx, dword [0x180516764]
and edx, 0xb18c0bc7
add edx, 0x111c5f5a
sub edx, 0x5cf31595
mov r10, r9
xor r10, r8
and r10, 0xffff
mov rax, rcx
add rax, r10
cmp edx, 0xb09abdb3
jae 0x1801bd851
ret
outsd dx, dword [rsi]
movabs dword [0xa86b87b759994383], eax
insb byte [rdi], dx
invalid

Function at 0x1801be650
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
shr rax, 6
xor rax, rdx
imul rdx, rax, 0xffffffffa46d5017
xor rdx, 0xffffffffea82e750
mov eax, dword [0x180516838]
sub eax, dword [0x18051683c]
or eax, 0xf2f31a51
add eax, 0x153d53cc
imul eax, eax, 0x5be9fa5
cmp eax, 0x37d03618
jae 0x1801be6d4
jmp 0x1801be68d
mov r8d, dword [0x180516840]
imul r8d, dword [0x180516844]
and r8d, 0xbf882595
add r8d, 0xdc83555b
sub r8d, 0x5b79668e
mov r9, rdx
rol r9, 6
xor r9, rdx
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp r8d, 0xfceee480
ja 0x1801be68d
jmp 0x1801be6d3
ret
add spl, al
push 0xffffffff9aea6c29
jmp 0x1801be68b

Function at 0x1801bf7f0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180516958]
xor edx, edx
div dword [0x18051695c]
mov r9d, 0xb078dc41
xor edx, edx
div r9d
add eax, 0xe715ca3e
add eax, 0xcf89bf20
cmp eax, 0x36fb9a47
jb 0x1801bf88a
jmp 0x1801bf81f
mov eax, dword [0x180516960]
imul eax, dword [0x180516964]
imul eax, eax, 0xe59bb0b8
sub eax, 0xe37d4ebc
mov r9d, 0x862493c9
xor edx, edx
div r9d
mov rdx, r8
rol rdx, 4
xor rdx, r8
mov r9, rdx
shr r9, 8
xor r9, rdx
mov rdx, r9
shr rdx, 5
xor rdx, r9
mov r9, rdx
shr r9, 0x10
xor r9, rdx
mov rdx, r9
rol rdx, 1
xor rdx, r9
cmp eax, 0xc0cae43d
ja 0x1801bf81f
jmp 0x1801bf87c
and rdx, 0xffff
add rcx, rdx
mov rax, rcx
ret
jrcxz 0x1801bf88a
invalid
Function at 0x1801c0110
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x1805169e8]
xor eax, dword [0x1805169ec]
or eax, 0x1fd9ab82
add eax, 0x8c8fee7f
or eax, 0xa4d83ed8
cmp eax, 0x9c4ed031
jb 0x1801c023e
jmp 0x1801c013b
mov eax, dword [0x1805169f0]
xor edx, edx
div dword [0x1805169f4]
and eax, 0xc47e255e
xor eax, 0x933473ac
imul eax, eax, 0x6a38b012
imul r9, r8, 0x6d5ff65d
movabs rdx, 0xe303de39a99b15ef
add r9, rdx
mov r10, r9
rol r10, 3
cmp eax, 0x2a63c9a0
jbe 0x1801c013b
jmp 0x1801c017d
mov eax, dword [0x1805169f8]
xor edx, edx
div dword [0x1805169fc]
or eax, 0xf6de7577
or eax, 0xdaf1fc60
and eax, 0x96ae72e9
cmp eax, 0x60f36e13
je 0x1801c024b
mov eax, dword [0x180516a00]
xor eax, dword [0x180516a04]
add eax, 0xc876fc71
add eax, 0xbe7af3fa
xor eax, 0xd19fefee
mov rdx, r10
xor rdx, r9
cmp eax, 0x5a35f405
jb 0x1801c024b
jmp 0x1801c01cf
mov eax, dword [0x180516a08]
add eax, dword [0x180516a0c]
sub eax, 0x51a8580d
add eax, 0xd090b898
add eax, 0xd344d
cmp eax, 0x2c9818bf
je 0x1801c0258
jmp 0x1801c01f3
mov r8d, dword [0x180516a10]
or r8d, dword [0x180516a14]
xor r8d, 0xf0db6749
sub r8d, 0x6a86ef0c
and r8d, 0x194fa50c
imul rax, rdx, 0xffffffff9e7df671
mov r9, rax
rol r9, 6
xor r9, rax
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp r8d, 0x950cb63b
je 0x1801c01f3
ret
sahf
pop rdi
jmp 0x1f992fd4f
invalid
sahf
invalid

Function at 0x1801c0790
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180516a48]
and eax, dword [0x180516a4c]
and eax, 0x4f545ae8
and eax, 0xfb8b92bd
or eax, 0xd3ffdb63
cmp eax, 0x55537114
jb 0x1801c0811
jmp 0x1801c07b7
mov eax, dword [0x180516a50]
xor edx, edx
div dword [0x180516a54]
mov r9d, 0xfe0ab966
xor edx, edx
div r9d
sub eax, 0x6bb32b9d
xor eax, 0xb3f31ad6
mov rdx, r8
shr rdx, 0xa
cmp eax, 0x13fc263c
jb 0x1801c07b7
jmp 0x1801c07ea
xor rdx, r8
add rdx, 0x5bbf944f
xor rdx, 0x1f755c5c
mov rax, rdx
rol rax, 1
xor rax, rdx
and rax, 0xffff
add rcx, rax
mov rax, rcx
ret
test eax, 0x68f743bb
or bh, bl
invalid

Function at 0x1801c0820
Capabilities:
Encode data using xor

Disassembly:
mov r8d, 0x3589cbb7
sub r8, rdx
mov rax, r8
shr rax, 6
xor r8, rax
xor r8, 0x49b9dd65
mov eax, dword [str.II_]
sub eax, dword [0x180516a5c]
mov r9d, 0xe29a03fb
mov ecx, 0xe29a03fb
xor edx, edx
div r9d
add eax, 0xac5f3614
sub eax, 0xc50ed1d
cmp eax, 0x25b6585f
je 0x1801c08a1
jmp 0x1801c0864
mov edx, dword [0x180516a60]
add edx, dword [0x180516a64]
or edx, 0x2e2e36ba
sub edx, 0x5110fe2d
sub edx, 0x1021bd2e
mov r9, r8
rol r9, 1
xor r9, r8
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0x7fb82c55
je 0x1801c0864
ret
jno 0x1801c0847
movabs eax, dword [0x5aebc10d04cfdc86]
cmpsd dword [rsi], dword [rdi]
jmp 0x1801c0862
Function at 0x1801c21f0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180516b88]
xor eax, dword [0x180516b8c]
add eax, 0x9230dcad
mov r9d, 0xd5997a1b
xor edx, edx
div r9d
sub eax, 0x814f7f8d
cmp eax, 0xfe717264
ja 0x1801c22c7
mov eax, dword [0x180516b90]
xor eax, dword [0x180516b94]
or eax, 0xa68ed3be
sub eax, 0x566d7cd4
add eax, 0xeaa1c9fc
mov r9, 0xffffffffb09dbcd4
sub r9, r8
movabs rdx, 0xbd8ae1673de2b7e6
imul r9, rdx
mov r10, r9
rol r10, 7
cmp eax, 0x9bef29b3
ja 0x1801c22c7
jmp 0x1801c2262
mov eax, dword [0x180516b98]
and eax, dword [0x180516b9c]
add eax, 0x5960c4e3
xor eax, 0xf34f1185
add eax, 0x8b3f0bb7
cmp eax, 0xaa6e925
jb 0x1801c22d8
jmp 0x1801c2286
mov eax, dword [0x180516ba0]
imul eax, dword [str.V_QV]
mov r8d, 0xaa44a8f9
xor edx, edx
div r8d
and eax, 0xf235f6d2
imul edx, eax, 0x5a309efa
mov r8, r10
xor r8, r9
and r8, 0xffff
mov rax, rcx
add rax, r8
cmp edx, 0xd182d4e7
jae 0x1801c2286
jmp 0x1801c22c6
ret
push rax
xchg ebx, eax
sub eax, 0x2f09b3c6
invalid
in eax, dx
in al, 0x11
inc byte [rax - 0x5d14496b]
int3

Function at 0x1801c29c0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [0x180516c18]
add eax, dword [0x180516c1c]
and eax, 0xd5ffa024
xor eax, 0x3dc866
imul eax, eax, 0x2be7f9f6
cmp eax, 0x8cd7c0ef
jbe 0x1801c2a8a
jmp 0x1801c29e9
mov r9d, dword [0x180516c20]
add r9d, dword [0x180516c24]
xor r9d, 0xdef27bfe
sub r9d, 0xc9b7ae96
or r9d, 0x758ad6c5
mov eax, 0x523dde8e
sub rax, rdx
mov r8, rax
rol r8, 4
cmp r9d, 0x7ed4ad5a
je 0x1801c29e9
jmp 0x1801c2a26
xor r8, rax
mov eax, dword [0x180516c28]
or eax, dword [0x180516c2c]
mov r9d, 0x78fbf24d
xor edx, edx
div r9d
sub eax, 0xa150f757
sub eax, 0x87e051dc
cmp eax, 0xef644a22
jae 0x1801c2a97
jmp 0x1801c2a53
mov edx, dword [0x180516c30]
and edx, dword [0x180516c34]
xor edx, 0x76e04069
sub edx, 0x4b11724e
xor edx, 0xddb44b4b
mov r9, r8
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0x77460f66
jbe 0x1801c2a53
ret
std
in al, 0x74
retf 0x39b3
fidivr word [rsi + 0x13]
push rdi
push rsi
sub dword [rcx + rax], ecx
lodsb al, byte [rsi]
clc
jb 0x1801c2b01
jmp 0x1801c2a51
invalid

Function at 0x1801c34b0
Capabilities:
Encode data using xor

Disassembly:
add rdx, 0xffffffff9d3c4141
mov rax, rdx
shr rax, 0x1c
xor rax, rdx
mov rdx, 0xffffffffa81940d6
sub rdx, rax
mov rax, rdx
rol rax, 1
xor rax, rdx
and rax, 0xffff
add rcx, rax
mov eax, dword [0x180516ce8]
sub eax, dword [0x180516cec]
mov r8d, 0xaec50c7e
xor edx, edx
div r8d
or eax, 0x920defd9
or eax, 0xb171f8db
cmp eax, 0x29b680ce
jb 0x1801c352e
jmp 0x1801c3507
mov eax, dword [0x180516cf0]
imul eax, dword [0x180516cf4]
xor eax, 0xe797413c
sub eax, 0x5d5f711
or eax, 0x18eea7c3
cmp eax, 0xf2b98a
jb 0x1801c3507
mov rax, rcx
ret
cmc
call 0x1f57171fd
invalid
Function at 0x1801c4240
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
add r8, 0x2e8647f0
mov r9, r8
shr r9, 0x11
mov eax, dword [0x180516d88]
xor edx, edx
div dword [0x180516d8c]
sub eax, 0x359eafdd
mov r10d, 0x1922ec82
xor edx, edx
div r10d
and eax, 0x9333f1cf
cmp eax, 0x1a46c0a0
je 0x1801c42c7
jmp 0x1801c427d
mov eax, dword [0x180516d90]
xor edx, edx
div dword [0x180516d94]
add eax, 0xb4804691
add eax, 0xf829b3f4
or eax, 0xadc201bd
mov rdx, r9
xor rdx, r8
imul r10, rdx, 0xa3d360f
mov rdx, r10
rol rdx, 1
xor rdx, r10
and rdx, 0xffff
cmp eax, 0x3280f64c
je 0x1801c427d
jmp 0x1801c42c0
add rcx, rdx
mov rax, rcx
ret
invalid

Function at 0x1801c4ee0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
xor r8, 0xffffffffa939cafc
mov r9, r8
shr r9, 0xc
mov eax, dword [0x180516e58]
xor edx, edx
div dword [0x180516e5c]
xor eax, 0xa05d7f5d
mov r10d, 0x627a21ad
xor edx, edx
div r10d
xor eax, 0x6398a4bf
cmp eax, 0x8c9f4c57
ja 0x1801c4f73
jmp 0x1801c4f1d
mov edx, dword [0x180516e60]
sub edx, dword [0x180516e64]
add edx, 0xf1a13bcb
or edx, 0x904f1902
sub edx, 0x3b10140f
mov rax, r9
xor rax, r8
mov r10, rax
shr r10, 0x13
xor r10, rax
add r10, 0x40f9a247
mov rax, r10
rol rax, 4
xor rax, r10
and rax, 0xffff
cmp edx, 0x81a228e0
je 0x1801c4f1d
jmp 0x1801c4f6c
add rcx, rax
mov rax, rcx
ret
sub dword [rcx - 0x2af8080], ecx
and edx, dword [rbx + 0x754695ff]
jmp 0x1801c4f1b

Function at 0x1801c5880
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180516ee8]
sub eax, dword [0x180516eec]
imul eax, eax, 0xe406b2c2
add eax, 0xc6daccae
or eax, 0x9bd915c5
cmp eax, 0x5da78ae3
jbe 0x1801c58f1
jmp 0x1801c58a8
mov eax, dword [0x180516ef0]
xor eax, dword [0x180516ef4]
mov r9d, 0xb4c3d5cd
xor edx, edx
div r9d
sub eax, 0x2fa8920c
add eax, 0x57ba6c6e
mov r9, r8
add r9, 1
mov rdx, r9
rol rdx, 3
xor rdx, r9
and rdx, 0xffff
cmp eax, 0xcee9842d
jae 0x1801c58a8
jmp 0x1801c58ea
add rcx, rdx
mov rax, rcx
ret
invalid

Function at 0x1801c6580
Capabilities:
Encode data using add xor sub operations
Encode data using xor

Disassembly:
imul r8, rdx, 0x77513dfa
mov eax, dword [0x180516f98]
or eax, dword [0x180516f9c]
and eax, 0xb08e2eb5
or eax, 0x8b441461
imul eax, eax, 0x8021fe3d
cmp eax, 0xa7beda23
jae 0x1801c6602
jmp 0x1801c65ac
mov eax, dword [0x180516fa0]
xor edx, edx
div dword [0x180516fa4]
mov r9d, 0xfa078ad7
xor edx, edx
div r9d
sub eax, 0xd0b513b1
imul edx, eax, 0xb3259c76
mov r9, r8
xor r9, 0x59c10f0b
add r9, 0x77eaf1de
mov rax, r9
rol rax, 7
xor rax, r9
cmp edx, 0xaa9f421a
jb 0x1801c65ac
jmp 0x1801c65f5
and rax, 0xffff
add rcx, rax
mov rax, rcx
ret
cmp dword [rdx + riz - 0x4d], esi
invalid
Function at 0x1801c6d00
Capabilities:
Encode data using xor

Disassembly:
imul r8, rdx, 0x727bf7a7
movabs rax, 0x1496add00fc7c9ab
add r8, rax
mov eax, dword [0x180517028]
xor edx, edx
div dword [0x18051702c]
and eax, 0xd1252e61
or eax, 0x6f29ba07
imul eax, eax, 0x5509d254
cmp eax, 0xc9feb69f
je 0x1801c6dd2
jmp 0x1801c6d3f
mov eax, dword [0x180517030]
or eax, dword [0x180517034]
or eax, 0xb083469
mov r9d, 0xfed1952e
xor edx, edx
div r9d
and eax, 0xe6d4cfb1
mov rdx, r8
rol rdx, 3
xor rdx, r8
cmp eax, 0xcf07aac5
je 0x1801c6d3f
jmp 0x1801c6d73
mov eax, dword [0x180517038]
or eax, dword [0x18051703c]
add eax, 0x9a0705eb
sub eax, 0x6471e930
sub eax, 0x6cb0b271
cmp eax, 0xeb354a
je 0x1801c6ddf
mov r8d, dword [0x180517040]
and r8d, dword [0x180517044]
sub r8d, 0x5d0dc04b
or r8d, 0x376b4e91
xor r8d, 0x5f18dbee
mov r9, rdx
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp r8d, 0x1cb5352b
jbe 0x1801c6ddf
ret
push 0xffffffffffffffb4
invalid
mov bh, 0x21
add dword [rbx + r14*8], r10d
invalid

Function at 0x1801c6f80
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180517068]
xor eax, dword [0x18051706c]
add eax, 0xfdaf4c6e
mov r9d, 0xbce40a02
xor edx, edx
div r9d
imul eax, eax, 0x585c4845
cmp eax, 0x51efb177
je 0x1801c706a
jmp 0x1801c6fb2
mov eax, dword [0x180517070]
sub eax, dword [0x180517074]
mov r9d, 0xd91d3e1d
xor edx, edx
div r9d
or eax, 0xabf4a369
xor eax, 0xb6946fd1
imul rdx, r8, 0xffffffffcf02aaca
mov r9, rdx
shr r9, 8
cmp eax, 0x9e2c8c10
je 0x1801c6fb2
jmp 0x1801c6fea
xor r9, rdx
imul r8, r9, 0xffffffff8fe411fd
mov eax, dword [0x180517078]
imul eax, dword [0x18051707c]
or eax, 0xf3423508
add eax, 0x579ffab9
or eax, 0xa82a23b5
cmp eax, 0xfffed66
je 0x1801c7077
mov eax, dword [0x180517080]
imul eax, dword [0x180517084]
imul eax, eax, 0xa5c92782
mov r9d, 0x21ab1559
xor edx, edx
div r9d
mov r9d, 0x679496d2
xor edx, edx
div r9d
mov edx, eax
mov rax, r8
add rax, 0x30517f8d
mov r9, rax
rol r9, 1
xor r9, rax
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0xc79645e2
je 0x1801c7077
ret
xchg esp, eax
shl byte [rbp + 0x45], cl
jle 0x1801c70d3
mov word [rax - 0xc617], es
invalid
mov esi, 0x98b6dbe4
hlt
ror dword [rax - 0x3f], 1
jmp 0x1514db8eb
Function at 0x1801c7410
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x1805170b8]
xor edx, edx
div dword [0x1805170bc]
or eax, 0xf4d97c08
mov r9d, 0x8c1ab2de
xor edx, edx
div r9d
or eax, 0xb4e6ac55
cmp eax, 0x28c3723f
jb 0x1801c74ea
jmp 0x1801c7443
mov eax, dword [0x1805170c0]
xor edx, edx
div dword [0x1805170c4]
mov r9d, 0xfe19634
xor edx, edx
div r9d
or eax, 0x5f5fdeaf
add eax, 0x820d3719
mov r9, r8
shr r9, 1
cmp eax, 0xba7d9432
jb 0x1801c7443
jmp 0x1801c7475
mov eax, dword [0x1805170c8]
or eax, dword [0x1805170cc]
or eax, 0x730dc205
sub eax, 0x40821ffc
xor eax, 0xb27dcf5b
cmp eax, 0xfb42a574
je 0x1801c74fb
jmp 0x1801c7499
mov eax, dword [0x1805170d0]
imul eax, dword [0x1805170d4]
sub eax, 0x69010d76
mov r10d, 0x1578feaa
xor edx, edx
div r10d
imul edx, eax, 0x9983cfe6
mov r10, r9
xor r10, r8
add r10, 0xffffffff95c6e6c1
mov rax, r10
rol rax, 5
xor rax, r10
and rax, 0xffff
cmp edx, 0x376449a3
je 0x1801c7499
jmp 0x1801c74e3
add rcx, rax
mov rax, rcx
ret
invalid
invalid

Function at 0x1801c7570
Capabilities:
Encode data using xor

Disassembly:
xor rdx, 0x290bb090
mov r8, rdx
shr r8, 0x1a
xor r8, rdx
xor eax, eax
sub rax, r8
mov rdx, rax
rol rdx, 6
xor rdx, rax
mov r8, rdx
rol r8, 2
xor r8, rdx
mov eax, dword [0x1805170d8]
sub eax, dword [0x1805170dc]
or eax, 0xa175ed
sub eax, 0x227432d5
mov r9d, 0xd5b9e509
xor edx, edx
div r9d
cmp eax, 0x1591c4
je 0x1801c75fd
mov eax, dword [0x1805170e0]
xor edx, edx
div dword [str.xIf]
mov edx, eax
add edx, 0x76620ce7
or edx, 0xe4b8725f
sub edx, 0xa571ec45
mov r9, r8
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0x11c15eb2
jbe 0x1801c75fd
ret
and al, 0xea
scasd eax, dword [rdi]
fld st(1)
jne 0x1801c7617
sbb ch, bl
mov ebx, 0xcccccccc
int3
xor al, 0
add eax, dword [0x1805170ec]
add eax, 0x94724385
xor eax, 0x12116316
sub eax, 0xc74fb488
cmp eax, 0x6dfdbbc4
je 0x1801c7694
jmp 0x1801c7637
mov eax, dword [0x1805170f0]
xor eax, dword [0x1805170f4]
sub eax, 0xce5545f3
xor eax, 0x6a0dc31a
mov r9d, 0x59056222
xor edx, edx
div r9d
mov rdx, r8
add rdx, 0xffffffff99849d84
mov r9, rdx
shr r9, 0x12
cmp eax, 0xf5a28fb5
ja 0x1801c7637
jmp 0x1801c7672
xor r9, rdx
imul rax, r9, 0xfffffffffad55155
mov rdx, rax
rol rdx, 6
xor rdx, rax
and rdx, 0xffff
add rcx, rdx
mov rax, rcx
ret
invalid
Function at 0x1801ca1d0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
rol rax, 3
xor rax, rdx
mov r8, 0xffffffff9947e465
sub r8, rax
xor r8, 0x613e206a
mov r9, r8
rol r9, 2
mov eax, dword [0x180517368]
xor edx, edx
div dword [0x18051736c]
or eax, 0x238b4443
xor eax, 0x4d547b38
mov r10d, 0x34fa004
xor edx, edx
div r10d
cmp eax, 0x28a9f5b7
je 0x1801ca2be
jmp 0x1801ca222
mov eax, dword [0x180517370]
sub eax, dword [0x180517374]
add eax, 0x2bbb53ee
xor eax, 0xcfe9c415
mov r10d, 0x27168391
xor edx, edx
div r10d
mov rdx, r9
xor rdx, r8
mov r10, rdx
rol r10, 7
xor r10, rdx
cmp eax, 0xe55d9d7f
jae 0x1801ca222
jmp 0x1801ca25c
mov eax, dword [0x180517378]
and eax, dword [0x18051737c]
and eax, 0x6586e420
or eax, 0x280420be
and eax, 0x82733b6
cmp eax, 0x2765d74
jbe 0x1801ca2cf
jmp 0x1801ca280
mov eax, dword [0x180517380]
xor eax, dword [0x180517384]
mov r8d, 0xb55032e2
xor edx, edx
div r8d
mov edx, eax
sub edx, 0xfeda11d6
add edx, 0xd896b661
mov r8, r10
and r8, 0xffff
mov rax, rcx
add rax, r8
cmp edx, 0xf1630f73
ja 0x1801ca280
ret
mov ch, dh
push rbp
pop rdi
invalid
test al, 0x89
invalid

Function at 0x1801ca5c0
Capabilities:
Encode data using xor

Disassembly:
imul r8, rdx, 0xffffffffb367b156
mov rax, r8
rol rax, 7
xor r8, rax
xor r8, 0xffffffffc4732dce
mov eax, dword [0x1805173a8]
imul eax, dword [0x1805173ac]
or eax, 0x5cdf379e
xor eax, 0xd44eb662
mov r9d, 0xc2b983c2
xor edx, edx
div r9d
cmp eax, 0xd54eacbc
ja 0x1801ca649
jmp 0x1801ca603
mov eax, dword [0x1805173b0]
imul eax, dword [0x1805173b4]
mov r9d, 0xe085221b
xor edx, edx
div r9d
mov edx, eax
or edx, 0xebe5b094
and edx, 0xd991196b
mov r9, r8
rol r9, 7
xor r9, r8
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0x2ab0ad73
jb 0x1801ca603
ret
xchg dword [rbx], ebp
push rsi
shr byte [rdi - 0x653902e1], 0x88
push 0xffffffffccaaebec
int3

Function at 0x1801cb060
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180517448]
sub eax, dword [0x18051744c]
imul eax, eax, 0xfdca5ded
sub eax, 0xe32e1c92
or eax, 0x5a36dec3
cmp eax, 0x21dac229
jbe 0x1801cb0e1
jmp 0x1801cb088
mov eax, dword [0x180517450]
xor eax, dword [0x180517454]
mov r9d, 0x54c716a6
xor edx, edx
div r9d
and eax, 0x793f3e10
sub eax, 0x1b1fc6b
movabs r9, 0xf1f5ae748b8fc928
mov rdx, r8
imul rdx, r9
cmp eax, 0x87c734d5
jbe 0x1801cb088
jmp 0x1801cb0c3
xor rdx, 0x9f03c91
mov rax, rdx
rol rax, 3
xor rax, rdx
and rax, 0xffff
add rcx, rax
mov rax, rcx
ret
scasd eax, dword [rdi]
mul esp
cdq
push rsp
push rsi
xor ah, byte [rbx + rbp*8 - 0x33333365]
int3
Function at 0x1801cbbf0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180517548]
xor edx, edx
div dword [0x18051754c]
and eax, 0x866045e7
mov r9d, 0x867829c1
xor edx, edx
div r9d
xor eax, 0x85a39b97
cmp eax, 0xff34c736
je 0x1801cbc7e
jmp 0x1801cbc1f
mov eax, dword [0x180517550]
xor edx, edx
div dword [0x180517554]
add byte [rcx], dh
sal bh, cl
xor eax, 0x34b927
imul eax, eax, 0x480e49f5
sub eax, 0x2a180dcc
mov r9d, 0xca49aac7
xor edx, edx
div r9d
mov rdx, r8
add rdx, 0x27f8e410
mov r9, rdx
rol r9, 7
cmp eax, 0x90524867
je 0x1801cbc1f
jmp 0x1801cbc5d
xor rdx, r9
xor rdx, 0x33d9c863
mov rax, rdx
rol rax, 4
xor rax, rdx
and rax, 0xffff
add rcx, rax
mov rax, rcx
ret
insd dword [rdi], dx
stc
mov al, 0x90
jg 0x1801cbc24
add byte [rdi], ah
loope 0x1801cbc95
imul esi, dword [rax], 0xcccc91eb
int3
call 0x1504e04a9

Function at 0x1801cbf20
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x36578c7b
sub rax, rdx
imul r8, rax, 0xffffffffe16118b5
mov eax, dword [0x180517588]
add eax, dword [0x18051758c]
mov r9d, 0x6a61b1a7
xor edx, edx
div r9d
xor eax, 0x39f28b4f
xor eax, 0xe4db3c75
cmp eax, 0x929897ca
je 0x1801cbfad
jmp 0x1801cbf59
mov r9d, dword [0x180517590]
add r9d, dword [0x180517594]
sub r9d, 0x91d0e869
and r9d, 0xeee89232
or r9d, 0xb7d6bb2c
mov rax, r8
add rax, 0xfffffffffb9070f1
xor rax, 0xffffffff97c25b18
mov rdx, rax
rol rdx, 1
cmp r9d, 0xcd64c72f
je 0x1801cbf59
jmp 0x1801cbf9c
xor rdx, rax
and rdx, 0xffff
add rcx, rdx
mov rax, rcx
ret
ja 0x1801cbfe6
add eax, 0x4a56873
in eax, dx
jmp 0x11d081e56
add eax, 0x34b5b5
xor eax, dword [0x1805175a4]
and eax, 0xc482b9c8
sub eax, 0x47eb1b57
mov r9d, 0xef090a6e
xor edx, edx
div r9d
mov rdx, r8
rol rdx, 6
cmp eax, 0x2159d84
jae 0x1801cc040
jmp 0x1801cc016
xor rdx, r8
mov rax, rdx
rol rax, 6
xor rax, rdx
add rax, 0xffffffffc6da54e7
mov rdx, rax
rol rdx, 1
xor rdx, rax
and rdx, 0xffff
add rcx, rdx
mov rax, rcx
ret
mov ecx, 0x1a61fc21
and dword [rdi], edx
invalid

Function at 0x1801cc220
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x1805175b8]
xor edx, edx
div dword [0x1805175bc]
imul eax, eax, 0x116db964
imul eax, eax, 0xe0df58a1
imul eax, eax, 0xb8e1de21
cmp eax, 0xb2ee4509
je 0x1801cc301
jmp 0x1801cc250
mov r9d, dword [0x1805175c0]
imul r9d, dword [0x1805175c4]
add r9d, 0xa43f4b58
xor r9d, 0x2dafa248
xor r9d, 0x86b2e92f
mov rdx, r8
add rdx, 0x3c665497
mov rax, rdx
rol rax, 7
cmp r9d, 0x67879aff
je 0x1801cc250
jmp 0x1801cc290
xor rax, rdx
mov rdx, rax
rol rdx, 4
xor rdx, rax
mov rax, rdx
rol rax, 6
xor rax, rdx
and rax, 0xffff
add rcx, rax
mov eax, dword [0x1805175c8]
imul eax, dword [0x1805175cc]
add eax, 0xaab787ae
imul eax, eax, 0x316b6977
mov r8d, 0x777a4826
xor edx, edx
div r8d
cmp eax, 0xfab4d0c2
ja 0x1801cc30e
mov eax, dword [0x1805175d0]
imul eax, dword [0x1805175d4]
add eax, 0x278ad617
and eax, 0x22e17b1
or eax, 0x68648a2
cmp eax, 0x7c14c8f9
je 0x1801cc30e
mov rax, rcx
ret
push rbp
add byte [rbx], 0x32
invalid
insb byte [rdi], dx
and eax, 0xbf6c42d9
loop 0x1801cc302
ret 0xcccc