joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180267c60
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, r8
mov rbx, rdx
mov rdi, rcx
mov rax, r9
add rax, 8
mov rax, qword [rax]
cmp rax, 0
je 0x180267df7
mov rcx, qword [r9]
mov rdx, qword [r9 + 0x10]
cmp rdx, 0
jne 0x180267d83
cmp rsi, 0
sete cl
mov eax, dword [0x180521038]
xor eax, dword [0x18052103c]
and eax, 0x3400914
mov r8d, 0xead7ec80
xor edx, edx
div r8d
mov r8d, 0xcce871c8
xor edx, edx
div r8d
cmp eax, 0xd6fdb21e
ja 0x180267ee7
jmp 0x180267cd0
mov eax, dword [0x180521040]
xor edx, edx
div dword [0x180521044]
sub eax, 0x784fde64
mov r8d, 0xd8430694
xor edx, edx
div r8d
xor eax, 0xb2c1df2a
cmp eax, 0xe4ad56be
jae 0x180267cd0
test cl, 1
jne 0x180267d01
jmp 0x180267d6a
xor ecx, ecx
add rcx, rbx
mov eax, dword [0x180521048]
xor edx, edx
div dword [0x18052104c]
imul eax, eax, 0xd24cea6e
mov r8d, 0x1402e27d
xor edx, edx
div r8d
mov r8d, 0xc36761c2
xor edx, edx
div r8d
cmp eax, 0x31103597
je 0x180267ef8
jmp 0x180267d3d
mov eax, dword [0x180521050]
xor eax, dword [0x180521054]
mov r8d, 0x58226f30
xor edx, edx
div r8d
sub eax, 0x14482ac7
or eax, 0xf9aee058
cmp eax, 0xa82064d
je 0x180267d3d
jmp 0x180267ec0
mov al, byte [0x1805297c8]
mov rcx, rsi
mov rdx, rbx
call fcn.1802cbf10
mov rcx, rax
jmp 0x180267ec0
cmp rdx, rsi
setbe al
mov r8, rbx
mov r9, rsi
call fcn.1802cbf30
mov rcx, rax
mov eax, dword [0x180521058]
xor edx, edx
div dword [0x18052105c]
imul eax, eax, 0xf5a1a824
xor eax, 0x4eb76c0e
mov r8d, 0x208f186a
xor edx, edx
div r8d
cmp eax, 0x19d15d62
ja 0x180267f05
mov eax, dword [0x180521060]
xor eax, dword [0x180521064]
mov r8d, 0xf5ad0d59
xor edx, edx
div r8d
sub eax, 0x749cf1ca
or eax, 0x89886db3
cmp eax, 0xf2330fce
je 0x180267f05
jmp 0x180267ec0
cmp rsi, 0
sete al
test al, 1
jne 0x180267e04
jmp 0x180267e61
cmp rbx, 0
setne al
mov eax, dword [0x180521068]
sub eax, dword [0x18052106c]
and eax, 0xded4bae
xor eax, 0x762750ce
imul eax, eax, 0x90d35654
cmp eax, 0xaa733dc7
jbe 0x180267f12
mov eax, dword [0x180521070]
add eax, dword [0x180521074]
add eax, 0xd9b65278
sub eax, 0x730d404a
or eax, 0x4666a4a3
cmp eax, 0x61b8afc9
je 0x180267f12
jmp 0x180267e5a
xor ecx, ecx
add rcx, rbx
jmp 0x180267ec0
mov eax, dword [0x180521078]
or eax, dword [0x18052107c]
and eax, 0x392a343b
and eax, 0xa4870e8d
add eax, 0x7a396065
cmp eax, 0x7e599bd4
je 0x180267f23
mov eax, dword [0x180521080]
and eax, dword [0x180521084]
add eax, 0xbbec4c37
imul eax, eax, 0xe36a88a6
and eax, 0x143e6216
mov cl, byte [0x1805297c8]
cmp eax, 0x84811b49
je 0x180267f23
jmp 0x180267eb2
mov rcx, rsi
mov rdx, rbx
call fcn.1802cbf10
mov rcx, rax
cmp rcx, 0
sete al
cmp rcx, 0
cmove rcx, rbx
and al, 1
movzx eax, al
mov qword [rdi + 8], rcx
mov qword [rdi + 0x10], rsi
mov qword [rdi], rax
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
invalid
add al, 0x2d
loop 0x180267f02
xor al, 0x4c
mov ah, byte [rax - 0x42]
pop rdx
invalid
invalid
movabs dword [0xe9bb9259d10a33e6], eax
invalid
invalid
xor bh, byte [rax]
jrcxz 0x180267ee1
in eax, dx
mov al, 0x41
jmp 0x180267dc6
pop rbx
cdq
jbe 0x180267ef6
ficom dword [rdx + rax*4 - 0x13]
insb byte [rdi], dx
jmp 0x180267e32
xchg edi, eax
cdq
push rax
xchg ebp, eax
invalid
Function at 0x180267f40
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x50
mov rsi, rcx
mov rax, qword [rsi]
xor ecx, ecx
cmp rax, 0xffffffffffffffff
je 0x180267fed
mov rcx, rax
add rcx, 1
mov rdx, rax
shl rdx, 1
mov r8, rdx
sub r8, rcx
cmova rcx, rdx
mov rdx, rcx
sub rdx, 9
mov edi, 8
cmovae rdi, rcx
cmp rdi, 0
setl dl
xor ecx, ecx
test dl, 1
jne 0x180267fed
jmp 0x180267f90
mov rbx, rsi
add rbx, 8
xor ecx, ecx
cmp rax, 0
je 0x180267fb3
mov rcx, qword [rbx]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x48], rax
mov ecx, 1
jmp 0x180267fb3
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x20]
lea r9, [rsp + 0x38]
mov edx, 1
mov r8, rdi
call fcn.180267c60
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x20]
add rax, 8
cmp rcx, 0
je 0x180267ff2
mov rcx, qword [rax]
mov rdx, qword [rsp + 0x30]
jmp 0x180267fed
call fcn.180407090
mov rax, qword [rax]
mov qword [rbx], rax
mov eax, dword [0x180521088]
xor edx, edx
div dword [0x18052108c]
or eax, 0xe2f4d5eb
imul eax, eax, 0xffcf4bdf
xor eax, 0xbc7eb28b
cmp eax, 0xe1fefa4
je 0x18026804d
jmp 0x18026801f
mov eax, dword [0x180521090]
imul eax, dword [0x180521094]
xor eax, 0xd600f82a
add eax, 0xea4cd539
or eax, 0x624d13b9
mov qword [rsi], rdi
cmp eax, 0xf3785e6b
ja 0x18026801f
add rsp, 0x50
pop rbx
pop rdi
pop rsi
ret
jge 0x180267fd4
and byte [rsi], cl
mov ebp, ds
xchg edi, eax
cwde
pop rsp
xchg ebx, eax
mov qword [rsi], rdi
jmp 0x18026801d
Function at 0x180268600
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x50
mov rsi, rcx
mov r9, qword [rsi]
cmp r9, 0xffffffffffffffff
sete al
xor ecx, ecx
test al, 1
jne 0x180268787
jmp 0x180268620
mov eax, dword [0x180521108]
sub eax, dword [0x18052110c]
add eax, 0x980749f4
xor eax, 0x79f09c74
and eax, 0x21594c40
cmp eax, 0xd700a3a4
jae 0x1802687ed
mov eax, dword [0x180521110]
add eax, dword [0x180521114]
mov ecx, 0xcf01dce8
xor edx, edx
div ecx
and eax, 0x359d7ec0
add eax, 0xdd9b39da
mov rcx, r9
add rcx, 1
cmp eax, 0x19380716
je 0x1802687ed
jmp 0x180268679
mov rax, r9
shl rax, 1
mov rdx, rax
sub rdx, rcx
cmova rcx, rax
mov rax, rcx
sub rax, 5
mov edi, 4
cmovae rdi, rcx
mov ecx, 0x28
mov rax, rdi
mul rcx
mov r8, rax
seto al
movabs rcx, 0x7ffffffffffffff8
cmp r8, rcx
seta cl
or al, cl
xor ecx, ecx
test al, 1
jne 0x180268787
mov eax, dword [0x180521118]
or eax, dword [0x18052111c]
add eax, 0xd1d3d5de
add eax, 0xccd3cbb5
sub eax, 0xe17e8e6b
cmp eax, 0xfe2614f1
je 0x1802687fe
jmp 0x1802686ee
mov eax, dword [0x180521120]
xor eax, dword [0x180521124]
add eax, 0x484a24d8
imul eax, eax, 0x750e6bdd
mov ecx, 0xf77bd1f2
xor edx, edx
div ecx
cmp eax, 0x8657c0f3
ja 0x1802686ee
jmp 0x180268717
mov rbx, rsi
add rbx, 8
cmp r9, 0
sete cl
xor eax, eax
test cl, 1
jne 0x18026874b
jmp 0x18026872e
mov rcx, qword [rbx]
imul rax, r9, 0x28
mov qword [rsp + 0x38], rcx
lea rcx, [rsp + 0x38]
add rcx, 0x10
mov qword [rcx], rax
mov eax, 8
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x20]
lea r9, [rsp + 0x38]
mov edx, 8
call fcn.180267c60
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x20]
add rax, 8
cmp rcx, 0
je 0x18026878c
mov rcx, qword [rax]
lea rax, [rsp + 0x20]
add rax, 0x10
mov rdx, qword [rax]
call fcn.180407090
mov ecx, dword [0x180521128]
add ecx, dword [0x18052112c]
add ecx, 0x1796e863
or ecx, 0x6773fb24
sub ecx, 0xb605cce0
cmp ecx, 0xa21878c6
jbe 0x18026880f
jmp 0x1802687b4
mov ecx, dword [0x180521130]
sub ecx, dword [0x180521134]
and ecx, 0x1e58f7fd
or ecx, 0x701bf293
imul edx, ecx, 0x2d50213
mov rcx, qword [rax]
cmp edx, 0x977f024a
je 0x1802687b4
jmp 0x1802687df
mov qword [rbx], rcx
mov qword [rsi], rdi
add rsp, 0x50
pop rbx
pop rdi
pop rsi
ret
or ebx, dword [rcx - 0x235e542]
ret 0x3810
lodsb al, byte [rsi]
pop rsp
invalid
xchg esi, eax
lodsd eax, dword [rsi]
invalid
Function at 0x180268820
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
mov rbp, rsp
mov rsi, rcx
mov eax, dword [0x180521138]
and eax, dword [0x18052113c]
and eax, 0x24f7033f
imul eax, eax, 0x5a605dfa
xor eax, 0x2b70fe93
cmp eax, 0x7f27230e
jbe 0x1802689d3
jmp 0x180268855
mov eax, dword [0x180521140]
mov ecx, dword [0x180521144]
xor edx, edx
div ecx
mov ecx, eax
and ecx, 0x438e2f2a
mov eax, 0xae83ea01
imul rcx, rax
shr rcx, 0x3a
xor ecx, 0xde7aea42
mov eax, 0x20
call fcn.18045a590
sub rsp, rax
mov r9, rsp
cmp ecx, 0x1ed71cfe
jbe 0x180268855
jmp 0x18026889a
mov eax, 0x20
call fcn.18045a590
sub rsp, rax
mov rbx, rsp
mov r8, qword [rsi]
xor ecx, ecx
cmp r8, 0xffffffffffffffff
je 0x180268966
mov rax, r8
add rax, 1
mov rcx, r8
shl rcx, 1
mov rdx, rcx
sub rdx, rax
cmova rax, rcx
mov rcx, rax
sub rcx, 5
mov edi, 4
cmovae rdi, rax
mov ecx, 0x70
mov rax, rdi
mul rcx
seto dl
movabs rcx, 0x7ffffffffffffff8
cmp rax, rcx
seta cl
or dl, cl
xor ecx, ecx
test dl, 1
jne 0x180268966
mov r14, rsi
add r14, 8
cmp r8, 0
sete dl
xor ecx, ecx
test dl, 1
jne 0x180268933
jmp 0x18026891e
mov rdx, qword [r14]
imul rcx, r8, 0x70
mov qword [r9], rdx
mov qword [r9 + 0x10], rcx
mov ecx, 8
jmp 0x180268933
mov qword [r9 + 8], rcx
sub rsp, 0x20
mov rcx, rbx
mov edx, 8
mov r8, rax
call fcn.180267c60
add rsp, 0x20
mov rcx, qword [rbx]
mov rax, rbx
add rax, 8
cmp rcx, 0
je 0x18026896f
mov rcx, qword [rax]
mov rdx, qword [rbx + 0x10]
sub rsp, 0x20
call fcn.180407090
mov rax, qword [rax]
mov ecx, dword [0x180521148]
and ecx, dword [0x18052114c]
or ecx, 0xd0ae829b
xor ecx, 0x9d474acd
xor ecx, 0xa2d64677
cmp ecx, 0x7de792e7
je 0x1802689e0
jmp 0x18026899a
mov ecx, dword [0x180521150]
imul ecx, dword [0x180521154]
imul ecx, ecx, 0x2b64ae1
or ecx, 0x4aca81f7
imul ecx, ecx, 0x571dd7bd
mov qword [r14], rax
mov qword [rsi], rdi
cmp ecx, 0xa7c72667
je 0x18026899a
jmp 0x1802689c9
mov rsp, rbp
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret
cwde
jg 0x180268a3a
cmp bl, byte [rbx - 0x160c36a3]
jae 0x1802689dc
invalid
sub al, 0xfb
or byte [rsi - 0x51123558], bl
sbb byte [rdx - 0x47], dh
sub cl, byte [rcx - 0x77]
invalid
add bl, ch
add byte [rax + 1], cl
invalid
Function at 0x180269700
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rax, rsi
add rax, 8
mov r14, qword [rax]
cmp r14, 0
je 0x1802698ea
mov rdx, qword [rsi + 0x18]
cmp rdx, 0
sete al
test al, 1
jne 0x1802698a8
jmp 0x18026973c
mov r12, qword [rsi]
movdqa xmm0, xmmword [r12]
pmovmskb r15d, xmm0
xor r15w, 0xffff
mov r13, r12
add r13, 0x10
cmp r15w, 0
je 0x18026975f
jmp 0x1802697dc
jmp 0x1802697c0
mov ecx, dword [0x180521210]
or ecx, dword [0x180521214]
add ecx, 0xd5aff636
or ecx, 0x483eefca
add ecx, 0xbeff2388
cmp ecx, 0x480f2cad
je 0x180269942
jmp 0x18026978d
mov ecx, dword [0x180521218]
and ecx, dword [0x18052121c]
and ecx, 0xef144115
imul ecx, ecx, 0x8dbb913b
add ecx, 0x6e14fd80
mov r15w, ax
xor r15w, 0xffff
cmp ecx, 0xcd013272
je 0x18026978d
jmp 0x1802697be
jmp 0x1802697dc
movaps xmm0, xmmword [r13]
pmovmskb eax, xmm0
add r12, 0xfffffffffffffd00
add r13, 0x10
cmp ax, 0xffff
je 0x1802697c0
jmp 0x180269761
mov ax, r15w
mov r15d, eax
dec r15d
and r15d, eax
dec rdx
tzcnt eax, eax
neg rax
lea rcx, [rax + rax*2]
shl rcx, 4
mov rax, r12
add rax, rcx
mov rdi, qword [r12 + rcx - 0x30]
mov rcx, rdi
shl rcx, 1
test rcx, rcx
je 0x180269896
jmp 0x180269817
add rax, 0xffffffffffffffd0
add rax, 8
mov qword [rsp + 0x20], rdx
mov rbx, qword [rax]
mov eax, dword [0x180521220]
or eax, dword [0x180521224]
add eax, 0x5432b33d
sub eax, 0x6d6b8a21
mov ecx, 0xf2aa8b29
xor edx, edx
div ecx
cmp eax, 0x8138dae6
jae 0x180269953
mov eax, dword [0x180521228]
or eax, dword [0x18052122c]
xor eax, 0xde199b8e
add eax, 0xc97f0ddf
mov ecx, 0x4f3bce8c
xor edx, edx
div ecx
mov ebp, eax
mov rcx, rbx
mov rdx, rdi
mov r8d, 1
call fcn.1802cbf20
cmp ebp, 0x8ddaa4a9
ja 0x180269953
mov rdx, qword [rsp + 0x20]
jmp 0x180269896
cmp rdx, 0
sete al
test al, 1
jne 0x1802698a6
jmp 0x180269756
jmp 0x1802698a8
mov rax, r14
add rax, 1
mov ecx, 0x30
mul rcx
seto cl
add r14, 0x11
mov rcx, rax
add rcx, r14
setb cl
mov rdx, rax
add rdx, r14
cmp rdx, 0
je 0x1802698ea
mov rcx, qword [rsi]
xor r8d, r8d
sub r8, rax
add rcx, r8
mov r8d, 0x10
call fcn.1802cbf20
mov eax, dword [0x180521230]
and eax, dword [0x180521234]
add eax, 0xc3070919
xor eax, 0x52d3a15a
add eax, 0x71680b66
cmp eax, 0x52cbe54a
je 0x180269971
jmp 0x18026990e
mov eax, dword [0x180521238]
and eax, dword [0x18052123c]
imul eax, eax, 0xecba7480
add eax, 0xf3544736
or eax, 0x146084
cmp eax, 0xe901b897
jb 0x18026990e
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
test al, 0xc5
out 0x72, eax
nop
xlatb
jrcxz 0x1802698e5
push rcx
xchg esp, eax
or ch, cl
cmp dh, bh
invalid
movsb byte [rdi], byte ss:[rsi]
loopne 0x18026998a
invalid
invalid
Function at 0x180269e70
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
mov eax, dword [0x180521280]
add eax, dword [0x180521284]
add eax, 0x73452f79
imul eax, eax, 0x4da0dbf9
sub eax, 0xd4c02115
cmp eax, 0x42ae7705
jb 0x18026a11f
mov eax, dword [0x180521288]
xor edx, edx
div dword [0x18052128c]
or eax, 0x8de73b
sub eax, 0x7ee4afe3
imul eax, eax, 0x8c7bd317
cmp eax, 0x7238331e
jbe 0x18026a11f
jmp 0x180269ed3
mov rdi, qword [rsi + 8]
cmp rdi, 0
sete al
test al, 1
jne 0x18026a110
jmp 0x180269ee8
mov rbx, qword [rsi + 0x18]
mov eax, dword [0x180521290]
and eax, dword [0x180521294]
xor eax, 0x281f375e
or eax, 0x97719a40
mov ecx, 0x55684ebc
xor edx, edx
div ecx
cmp eax, 0x88daac45
je 0x18026a130
jmp 0x180269f18
mov eax, dword [0x180521298]
xor edx, edx
div dword [0x18052129c]
sub eax, 0x1f3a6e35
and eax, 0x54b3a81a
sub eax, 0xb6fe280b
cmp rbx, 0
sete cl
cmp eax, 0x76cd1713
jbe 0x180269f18
test cl, 1
jne 0x18026a06e
jmp 0x180269f4e
mov r14, qword [rsi]
movdqa xmm0, xmmword [r14]
pmovmskb ebp, xmm0
xor bp, 0xffff
mov r15, r14
add r15, 0x10
cmp bp, 0
je 0x180269f6d
jmp 0x180269fe6
jmp 0x180269fcb
mov eax, dword [0x1805212a0]
or eax, dword [0x1805212a4]
mov r8d, 0xd9fe2b3d
xor edx, edx
div r8d
add eax, 0xf4236753
xor eax, 0xb8e7d7e
cmp eax, 0x155526d
jbe 0x18026a141
jmp 0x180269f9d
mov eax, dword [0x1805212a8]
imul eax, dword [0x1805212ac]
sub eax, 0xed2ac3c8
or eax, 0x3e099180
and eax, 0x86a456b6
mov bp, cx
xor bp, 0xffff
cmp eax, 0xd3578e2f
je 0x180269f9d
jmp 0x180269fc9
jmp 0x180269fe6
movaps xmm0, xmmword [r15]
pmovmskb ecx, xmm0
add r14, 0xfffffffffffffd00
add r15, 0x10
cmp cx, 0xffff
je 0x180269fcb
jmp 0x180269f6f
mov ax, bp
mov bp, ax
add bp, 0xffff
and bp, ax
add rbx, 0xffffffffffffffff
tzcnt eax, eax
movzx eax, ax
xor ecx, ecx
sub rcx, rax
imul rax, rcx, 0x30
mov r12, r14
add r12, rax
mov rdx, qword [r12 - 0x30]
cmp rdx, 0
je 0x18026a031
mov rax, r12
add rax, 0xffffffffffffffd0
add rax, 8
mov rcx, qword [rax]
mov r8d, 1
call fcn.1802cbf20
mov rax, r12
add rax, 0xffffffffffffffd0
add rax, 0x18
mov rdx, qword [rax]
cmp rdx, 0
je 0x18026a05c
add r12, 0xffffffffffffffd0
add r12, 0x20
mov rcx, qword [r12]
mov r8d, 1
call fcn.1802cbf20
cmp rbx, 0
sete al
test al, 1
jne 0x18026a06c
jmp 0x180269f65
jmp 0x18026a06e
mov rax, rdi
add rax, 1
mov ecx, 0x30
mul rcx
seto cl
xor cl, 0xff
add rdi, 0x11
mov rcx, rax
add rcx, rdi
setb cl
mov rdx, rax
add rdx, rdi
cmp rdx, 0
je 0x18026a110
mov ecx, dword [0x1805212b0]
imul ecx, dword [0x1805212b4]
sub ecx, 0xa0635219
and ecx, 0x15731d5d
imul ecx, ecx, 0x9f04bbb7
cmp ecx, 0xcd915c2e
je 0x18026a14e
jmp 0x18026a0c9
mov r8d, dword [0x1805212b8]
add r8d, dword [0x1805212bc]
xor r8d, 0x5a4f7b1a
and r8d, 0x29cdc09e
and r8d, 0x77f21b9a
mov rcx, qword [rsi]
xor r9d, r9d
sub r9, rax
add rcx, r9
cmp r8d, 0x59d9e1e
ja 0x18026a0c9
jmp 0x18026a103
mov r8d, 0x10
call fcn.1802cbf20
jmp 0x18026a110
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
clc
invalid
invalid
invalid
add byte [rbp - 0xb2b49d8], ch
movabs dword [0xff68e9db3621d24a], eax
invalid
Function at 0x18026b010
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x138
mov rdi, r8
mov rbx, rdx
mov rsi, rcx
mov r15, qword [rbx]
movabs rax, 0x8000000000000005
cmp r15, rax
sete al
test al, 1
jne 0x18026b042
jmp 0x18026b04e
add rbx, 0x28
mov rax, rbx
add rax, 0x28
mov r14, qword [rax]
lea rcx, [rsp + 0xb0]
mov rdx, r14
mov r8, rdi
call fcn.1802aadf0
mov r12, qword [rsp + 0xb0]
mov rax, r12
sub rax, 0xf
je 0x18026b092
jmp 0x18026b07e
mov rax, r12
sub rax, 0x10
jne 0x18026b1b3
jmp 0x18026b08d
jmp 0x18026b202
movabs rax, 0x8000000000000005
mov qword [rbx], rax
add rbx, 8
mov r8, qword [r14]
movabs rax, 0x8000000000000005
cmp r8, rax
sete cl
mov eax, dword [0x1805213c0]
sub eax, dword [0x1805213c4]
and eax, 0x9d9dca04
imul eax, eax, 0xf06970e0
and eax, 0xefab0ed9
cmp eax, 0x1f34314
jbe 0x18026b291
jmp 0x18026b0df
mov eax, dword [0x1805213c8]
xor eax, dword [0x1805213cc]
mov r9d, 0xd9387548
xor edx, edx
div r9d
imul eax, eax, 0xa929f61
xor eax, 0x4ff24904
cmp eax, 0xa77f67d0
je 0x18026b0df
test cl, 1
jne 0x18026b189
jmp 0x18026b10f
movabs rax, 0x8000000000000000
mov rcx, r8
xor rcx, rax
mov rax, rcx
sub rax, 5
mov eax, 5
cmovb rax, rcx
mov rcx, rax
sub rcx, 4
jb 0x18026b160
jmp 0x18026b13a
sub rax, 4
mov rax, r14
jne 0x18026b16c
jmp 0x18026b145
mov rax, r14
add rax, 8
mov r8, qword [rax]
movabs rcx, 0x8000000000000002
cmp r8, rcx
jl 0x18026b189
jmp 0x18026b16c
mov rax, r14
add rax, 8
mov r8, qword [rax]
jmp 0x18026b16c
cmp r8, 0
je 0x18026b189
add rax, 8
mov rcx, qword [rax]
mov rdx, r8
mov r8d, 1
call fcn.1802cbf20
jmp 0x18026b189
mov qword [r14], r15
mov rax, r14
add rax, 8
mov rcx, qword [rbx]
mov qword [rax], rcx
mov rcx, qword [rbx + 8]
mov qword [rax + 8], rcx
mov rcx, qword [rbx + 0x10]
mov qword [rax + 0x10], rcx
mov rcx, qword [rbx + 0x18]
mov qword [rax + 0x18], rcx
jmp 0x18026b1d3
lea rdx, [rsp + 0xb0]
add rdx, 8
mov rcx, rsi
add rcx, 8
mov r8d, 0x80
call fcn.180468b10
jmp 0x18026b202
mov eax, dword [0x1805213d0]
sub eax, dword [0x1805213d4]
add eax, 0x8a9346e1
mov ecx, 0x4fabdb11
xor edx, edx
div ecx
or eax, 0x7d879e8e
cmp eax, 0xbfe07007
ja 0x18026b29e
mov eax, dword [0x1805213d8]
and eax, dword [0x1805213dc]
imul eax, eax, 0x4cb66cec
stosb byte [rdi], al
invalid
sub eax, 0x88a2366f
and eax, 0xbf136f4c
mov qword [rsi], r12
cmp eax, 0x778bdc42
jb 0x18026b29e
jmp 0x18026b250
jmp 0x18026b252
cli
sub dword [rax + rsi*2], esp
jnp 0x18026b228
mov eax, dword [rsi]
jmp 0x18026b0dd
jbe 0x18026b23a
adc ebx, ecx
nop
ja 0x18026b22a
add byte [rcx + rcx*4 + 0x26], cl
jmp 0x18026b228
Function at 0x18026bfd0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, qword [rcx]
cmp rsi, 0
sete al
test al, 1
jne 0x18026c5b9
jmp 0x18026bff4
mov rbx, qword [rcx + 0x10]
add rcx, 8
Function at 0x180271f00
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x70
mov rsi, rcx
mov rdx, qword [rsi]
movabs rax, 0x8000000000000000
cmp rdx, rax
sete al
test al, 1
jne 0x180271f93
jmp 0x180271f21
cmp rdx, 0
sete al
test al, 1
jne 0x180271f93
jmp 0x180271f2e
mov rcx, qword [rsi + 8]
mov r8d, 1
call fcn.1802cbf20
mov eax, dword [0x180521ac0]
xor edx, edx
div dword [0x180521ac4]
and eax, 0x2adbac3e
or eax, 0xe6ff9065
mov ecx, 0x496500d8
xor edx, edx
div ecx
cmp eax, 0xa79d65cf
je 0x180272178
jmp 0x180271f6b
mov eax, dword [0x180521ac8]
and eax, dword [0x180521acc]
mov ecx, 0xb981909
xor edx, edx
div ecx
add eax, 0xa97798a3
sub eax, 0x6130d095
cmp eax, 0xc5d15a7
jb 0x180271f6b
jmp 0x180271f93
mov eax, dword [0x180521ad0]
add eax, dword [0x180521ad4]
and eax, 0xba899462
and eax, 0x8739113c
imul eax, eax, 0xc685df44
cmp eax, 0x69aefcbc
jae 0x180272185
jmp 0x180271fbc
mov eax, dword [0x180521ad8]
and eax, dword [0x180521adc]
xor eax, 0xca52eeef
imul eax, eax, 0xb413b917
and eax, 0x25912df9
mov rdx, qword [rsi + 0x18]
cmp eax, 0x15f46ef7
jae 0x180271fbc
jmp 0x180271fe5
movabs rax, 0x8000000000000000
cmp rdx, rax
sete al
test al, 1
jne 0x180272019
jmp 0x180271ffb
cmp rdx, 0
sete al
test al, 1
jne 0x180272019
jmp 0x180272008
mov rcx, qword [rsi + 0x20]
mov r8d, 1
call fcn.1802cbf20
jmp 0x180272019
mov rax, rsi
add rax, 0x30
mov rdx, qword [rax]
movabs rax, 0x8000000000000000
cmp rdx, rax
sete al
test al, 1
jne 0x1802720aa
jmp 0x180272039
cmp rdx, 0
sete al
test al, 1
jne 0x1802720aa
jmp 0x180272046
mov rax, rsi
add rax, 0x38
mov rcx, qword [rax]
mov r8d, 1
call fcn.1802cbf20
mov eax, dword [0x180521ae0]
imul eax, dword [0x180521ae4]
imul eax, eax, 0x2caf8d9b
and eax, 0xbc260961
sub eax, 0xcba3f92b
cmp eax, 0x57f4cb8b
jb 0x180272192
jmp 0x180272085
mov eax, dword [0x180521ae8]
sub eax, dword [0x180521aec]
xor eax, 0x25ef898e
imul eax, eax, 0x133217df
add eax, 0xb2c53456
cmp eax, 0xbadc65bb
ja 0x180272085
jmp 0x1802720aa
mov rax, rsi
add rax, 0x48
mov rcx, qword [rax]
xor eax, eax
cmp rcx, 0
mov r8d, 0
je 0x180272158
lea rax, [rsp + 0x28]
add rax, 8
mov r8, qword [rsi + 0x58]
add rsi, 0x50
mov r9, qword [rsi]
mov qword [rax], 0
mov qword [rsp + 0x38], rcx
mov eax, dword [0x180521af0]
imul eax, dword [0x180521af4]
add eax, 0x355c2658
imul eax, eax, 0x23017026
mov r10d, 0x9c44aa81
xor edx, edx
div r10d
cmp eax, 0xcec15803
je 0x18027219f
jmp 0x180272116
mov eax, dword [0x180521af8]
add eax, dword [0x180521afc]
and eax, 0xf9dbff17
and eax, 0x94488e24
imul eax, eax, 0xd6a4da52
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], r9
cmp eax, 0xc60b7e2b
je 0x180272116
mov eax, 1
jmp 0x180272158
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x68], r8
lea rcx, [rsp + 0x28]
call fcn.180265460
nop
add rsp, 0x70
pop rsi
ret
push rbp
ret 0x5767
sahf
sub ch, dl
sbb byte [rax], bh
fiadd word [rsi + rcx*2 - 0x1d717]
invalid
jg 0x180272156
mov ebx, 0x3df992fd
jmp 0x180272083
shl byte [rbx], 1
sbb eax, 0x13
cld
fld qword [rbx]
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], r9
jmp 0x180272114
Function at 0x180273180
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, qword [rcx]
mov rdi, rsi
add rdi, 0x10
mov r14, qword [rsi + 0x30]
mov rax, r14
and rax, 1
cmp rax, 0
sete al
test al, 1
jne 0x1802731ac
jmp 0x1802731bd
and r14, 8
cmp r14, 0
sete al
test al, 1
jne 0x180273229
jmp 0x18027321f
mov rbx, rsi
add rbx, 0x20
mov eax, dword [0x180521c60]
add eax, dword [0x180521c64]
add eax, 0xf528ad0c
add eax, 0x99aef3ef
sub eax, 0xfc51ca4d
cmp eax, 0x3128ade0
jbe 0x1802732c0
jmp 0x1802731ec
mov ebp, dword [0x180521c68]
imul ebp, dword [0x180521c6c]
xor ebp, 0xa4be986f
add ebp, 0x481cf5a6
sub ebp, 0x626eb02d
mov rcx, rbx
call fcn.180406450
cmp ebp, 0xa6a03bcc
ja 0x1802731ec
jmp 0x18027321d
jmp 0x1802731ac
mov rcx, rdi
call fcn.180406450
jmp 0x180273229
mov rax, 0xffffffffffffffff
cmp rsi, rax
sete al
test al, 1
jne 0x1802732b5
jmp 0x18027323c
mov rax, rsi
add rax, 8
lock dec qword [rax]
sete cl
jmp 0x18027324c
mov eax, dword [0x180521c70]
sub eax, dword [0x180521c74]
mov r8d, 0x471cb430
xor edx, edx
div r8d
and eax, 0xd24a5a14
and eax, 0xad4df8e2
cmp eax, 0x76437da0
jae 0x1802732d9
jmp 0x180273276
mov eax, dword [0x180521c78]
and eax, dword [0x180521c7c]
imul eax, eax, 0xbccba660
or eax, 0xfa5060a1
xor eax, 0xd8e6e8ca
cmp eax, 0x20e3ce41
jb 0x180273276
test cl, 1
jne 0x1802732a0
jmp 0x1802732b5
mov rcx, rsi
mov edx, 0x40
mov r8d, 8
call fcn.1802cbf20
jmp 0x1802732b5
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov bh, 0x46
adc edi, dword [rsi]
and esp, esi
invalid
cmp dword [rsi], ebx
loope 0x180273274
jge 0x1802732df
mov esp, 0xfc6525ea
test eax, 0xcccc8deb
int3