joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1802dfee0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x18077c340]
imul eax, dword [0x18077c344]
or eax, 0xfaef6b3e
add eax, 0x89a9c09f
or eax, 0xb7285bed
cmp eax, 0x522d9bed
jbe 0x1802dffba
jmp 0x1802dff0c
mov eax, dword [0x18077c348]
xor eax, dword [0x18077c34c]
imul eax, eax, 0x50baf749
or eax, 0xb508b18e
mov r9d, 0xf0cefc62
xor edx, edx
div r9d
mov r9, r8
xor r9, 0x398e0120
mov r10, r9
shr r10, 1
cmp eax, 0xf65bcc98
jae 0x1802dff0c
jmp 0x1802dff47
mov eax, dword [0x18077c350]
sub eax, dword [0x18077c354]
add eax, 0x9a70dafe
xor eax, 0x4d73778f
or eax, 0x5c610db3
cmp eax, 0x182d0ee0
je 0x1802dffcb
jmp 0x1802dff6b
mov eax, dword [0x18077c358]
add eax, dword [0x18077c35c]
and eax, 0x5bf68bd2
add eax, 0x16e67310
mov r8d, 0xfd81a41f
xor edx, edx
div r8d
mov rdx, r10
xor rdx, r9
imul r8, rdx, 0x4c4c9054
mov rdx, r8
nop
mov rdx, r8
rol rdx, 6
xor rdx, r8
and rdx, 0xffff
cmp eax, 0x41278b5e
ja 0x1802dff6b
jmp 0x1802dffb3
add rcx, rdx
mov rax, rcx
ret
clc
sar ebp, 1
mov ebp, 0x6612a741
cmp edx, dword [rbp + 0x22]
or eax, 0xffff3fe9
jmp qword [rdi + 0x58]
pop rax
mov ecx, 0x72daecd0
jne 0x1802dff96
sahf
cmpsb byte [rsi], byte [rdi]
mov ebp, ebx
nop
int3

Function at 0x1802e04a0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov r9, r8
rol r9, 1
mov eax, dword [0x18077c3e0]
or eax, dword [0x18077c3e4]
xor eax, 0x1c83895
imul eax, eax, 0x1d465101
add eax, 0x56d002c1
cmp eax, 0x503050fd
jb 0x1802e0525
jmp 0x1802e04ce
mov eax, dword [0x18077c3e8]
xor edx, edx
div dword [0x18077c3ec]
imul edx, eax, 0x7838ce38
and edx, 0xab07dbd0
sub edx, 0x3ddddc1e
mov rax, r9
xor rax, r8
mov r10d, 0x33d89b6d
sub r10, rax
xor r10, 0xffffffff834406cb
mov r11, r10
rol r11, 1
xor r11, r10
and r11, 0xffff
mov rax, rcx
add rax, r11
cmp edx, 0x8343fe82
je 0x1802e04ce
jmp 0x1802e0524
ret
mov edi, 0x8a62e84e
test al, 0xb1
push rsi
in eax, 0x89
stc
jmp 0x1802e04cc

Function at 0x1802e08b0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x18077c440]
xor edx, edx
div dword [0x18077c444]
and eax, 0x9954c355
sub eax, 0xa410a1d2
or eax, 0x4b2f0835
cmp eax, 0x6b4255e4
jae 0x1802e0985
jmp 0x1802e08dd
mov eax, dword [0x18077c448]
xor eax, dword [0x18077c44c]
sub eax, 0x1321a700
and eax, 0x4166baf0
mov r9d, 0x99c1e766
xor edx, edx
div r9d
mov edx, 0x36578c7b
sub rdx, r8
imul r9, rdx, 0xffffffffe16118b5
add r9, 0xfffffffffb9070f1
xor r9, 0xffffffff97c25b18
cmp eax, 0xdabd343f
jae 0x1802e08dd
ret 0x3d97
jmp 0x1802e0924
mov eax, dword [0x18077c450]
xor edx, edx
div dword [0x18077c454]
add eax, 0xe6cd0ffc
add eax, 0x59b79019
sub eax, 0xfc11fa7
cmp eax, 0x52760136
jae 0x1802e0992
mov eax, dword [0x18077c458]
or eax, dword [0x18077c45c]
sub eax, 0xa240c615
or eax, 0xd7737575
imul edx, eax, 0xf530bc5a
mov r8, r9
rol r8, 1
xor r8, r9
and r8, 0xffff
mov rax, rcx
add rax, r8
cmp edx, 0x1c4ebba3
jb 0x1802e0992
jmp 0x1802e0984
ret
in eax, 0x89
loopne 0x1802e0919
invalid
retfq
Function at 0x1802e0f20
Capabilities:
Encode data using xor

Disassembly:
imul rax, rdx, 0xffffffffa492f9e0
mov rdx, rax
rol rdx, 1
xor rdx, rax
mov rax, rdx
shr rax, 0x10
xor rax, rdx
xor edx, edx
sub rdx, rax
mov r8, rdx
rol r8, 6
xor r8, rdx
mov eax, dword [0x18077c4f0]
xor eax, dword [0x18077c4f4]
add eax, 0x3c48ee87
mov r9d, 0xbc658e45
xor edx, edx
div r9d
and eax, 0x553391ae
cmp eax, 0x5cde918e
jae 0x1802e0ffb
jmp 0x1802e0f77
mov eax, dword [0x18077c4f8]
xor eax, dword [0x18077c4fc]
add eax, 0x90a91f15
add eax, 0xeb2bb21d
and eax, 0xa90a2479
mov r9, r8
and r9, 0xffff
cmp eax, 0xc0c2f526
ja 0x1802e0f77
jmp 0x1802e0fa5
mov eax, dword [0x18077c500]
xor eax, dword [0x18077c504]
or eax, 0x3bb11b7d
or eax, 0xdfdeaef3
sub eax, 0x394d0432
cmp eax, 0x1af37148
je 0x1802e1008
mov eax, dword [0x18077c508]
add eax, dword [0x18077c50c]
mov r8d, 0x56f0edfe
xor edx, edx
div r8d
mov edx, eax
and edx, 0xf9fec7a7
and edx, 0x61207d3b
mov rax, rcx
add rax, r9
cmp edx, 0x54e06506
ja 0x1802e1008
ret
mov bh, 0xfd
hlt
mov edx, 0x94847cf1
movabs byte [0xb1eb551abeef4a5e], al
int3

Function at 0x1802e11b0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x18077c540]
add eax, dword [0x18077c544]
and eax, 0xcfab9ac9
imul eax, eax, 0x777dcc15
mov r9d, 0x6e77da4e
xor edx, edx
div r9d
cmp eax, 0x153ab176
je 0x1802e122a
jmp 0x1802e11de
mov eax, dword [0x18077c548]
xor eax, dword [0x18077c54c]
xor eax, 0xe3da624
or eax, 0x4cd5918f
mov r9d, 0x44f096bf
xor edx, edx
div r9d
mov r9, r8
add r9, 0xffffffffaf7019d4
mov rdx, r9
rol rdx, 7
cmp eax, 0x2cd65dbd
ja 0x1802e11de
jmp 0x1802e1219
xor rdx, r9
and rdx, 0xffff
add rcx, rdx
mov rax, rcx
ret
mov dword ss:[rcx + 0x7d], eax
mov ebp, 0x272c96ba
adc dl, byte [rdi]
jmp 0x1802e11dc

Function at 0x1802e1d50
Capabilities:
Encode data using xor

Disassembly:
mov r10, 0xffffffffe946a186
sub r10, rdx
xor r10, 0x14151b67
mov r11, r10
rol r11, 1
mov eax, dword [0x18077c680]
xor edx, edx
div dword [0x18077c684]
mov r8d, 0xaccde5eb
xor edx, edx
div r8d
xor eax, 0x98e95205
and eax, 0x8c187f8f
cmp eax, 0x1e7d95c
je 0x1802e1e38
mov eax, dword [0x18077c688]
and eax, dword [0x18077c68c]
sub eax, 0x8023cf50
and eax, 0xc3144a5e
add eax, 0xaaddc7b6
mov rdx, r11
xor rdx, r10
imul r8, rdx, 0xffffffff9771c515
mov r9, r8
rol r9, 2
cmp eax, 0xce96e707
je 0x1802e1e38
jmp 0x1802e1dcd
mov eax, dword [0x18077c690]
xor edx, edx
div dword [0x18077c694]
mov r10d, 0x7392ea2c
xor edx, edx
div r10d
and eax, 0xfdecdc8
or eax, 0x69d9a66f
cmp eax, 0x56a61ee8
jbe 0x1802e1e49
jmp 0x1802e1df9
mov eax, dword [0x18077c698]
xor eax, dword [0x18077c69c]
and eax, 0x31a855f9
or eax, 0x233eec73
mov r10d, 0x1bb40a21
xor edx, edx
div r10d
mov edx, eax
mov r10, r9
xor r10, r8
and r10, 0xffff
mov rax, rcx
add rax, r10
cmp edx, 0x66167796
je 0x1802e1df9
ret
xchg ebp, eax
fldenv [rsi + rax*2]
insd dword [rdi], dx
retf 0x7d7f
sbb byte [rbx - 0x5ad8f94e], bl
pop rsp
cmp bh, cl
invalid
Function at 0x1802e2150
Capabilities:
Encode data using xor

Disassembly:
mov r10, 0xfffffffff43297d2
sub r10, rdx
mov r11, r10
rol r11, 7
mov eax, dword [0x18077c6e0]
xor edx, edx
div dword [0x18077c6e4]
add eax, 0xb03f4c0a
imul eax, eax, 0xa8551a72
imul eax, eax, 0x2631c3df
cmp eax, 0x1b39194
jb 0x1802e2224
mov eax, dword [0x18077c6e8]
xor eax, dword [0x18077c6ec]
sub eax, 0x57b55325
sub eax, 0x4a510b98
imul eax, eax, 0xf9180876
mov r8, r11
xor r8, r10
mov r9, r8
rol r9, 7
cmp eax, 0xc62557ca
jae 0x1802e2224
jmp 0x1802e21bd
mov eax, dword [0x18077c6f0]
imul eax, dword [0x18077c6f4]
xor eax, 0x530718d3
mov r10d, 0xd421d20
xor edx, edx
div r10d
imul eax, eax, 0x9e128730
cmp eax, 0x3554f3d7
je 0x1802e2231
jmp 0x1802e21e9
mov edx, dword [0x18077c6f8]
imul edx, dword [0x18077c6fc]
add edx, 0x84596db0
or edx, 0xcdff0069
xor edx, 0xbf6b9b25
mov r10, r9
xor r10, r8
and r10, 0xffff
mov rax, rcx
add rax, r10
cmp edx, 0x54a3edb7
je 0x1802e21e9
ret
jns 0x1802e224c
add al, 0x7b
sbb eax, 0xe98c08ab
pop rdx
invalid
push 0xffffffffe4a86dc8
std
sbb dword [rax - 0x15], esi
lodsb al, byte [rsi]
int3
retf 0x481c

Function at 0x1802e3280
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
shr rax, 0x10
xor rax, rdx
movabs rdx, 0xffffffff33cb90ac
sub rdx, rax
mov r8, rdx
rol r8, 6
xor r8, rdx
mov eax, dword [0x18077c8c0]
xor edx, edx
div dword [0x18077c8c4]
imul eax, eax, 0x562cc598
xor eax, 0x8c31137e
sub eax, 0x1fb6a9bc
cmp eax, 0x9b6564e0
ja 0x1802e3300
jmp 0x1802e32c8
mov edx, dword [0x18077c8c8]
or edx, dword [0x18077c8cc]
sub edx, 0x302a13b
or edx, 0xecd7e996
xor edx, 0x3d9443bf
mov rax, r8
and rax, 0xffff
cmp edx, 0xf55dab79
jae 0x1802e32c8
jmp 0x1802e32f9
add rcx, rax
mov rax, rcx
ret
sbb eax, 0x3683c8b6
test ebx, ebp
mov esp, 0xcccccccc
int3
Function at 0x1802e3710
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x18077c930]
add eax, dword [0x18077c934]
and eax, 0x71a15505
or eax, 0x683533d3
mov r9d, 0x1aac452e
xor edx, edx
div r9d
cmp eax, 0x45ef8724
ja 0x1802e382c
mov eax, dword [0x18077c938]
xor edx, edx
div dword [0x18077c93c]
or eax, 0x564f77a6
add eax, 0xa4cdf6b9
add eax, 0xa963bfd4
mov edx, 0x498c9d97
sub rdx, r8
cmp eax, 0x9dbedf03
jb 0x1802e382c
jmp 0x1802e3771
mov eax, dword [0x18077c940]
and eax, dword [0x18077c944]
and eax, 0x630e8e0d
xor eax, 0x79aecf6e
add eax, 0xc2b611d8
cmp eax, 0x4d2f289a
jae 0x1802e3839
mov eax, dword [0x18077c948]
and eax, dword [0x18077c94c]
xor eax, 0x74c61de
or eax, 0xdb6d223b
add eax, 0xcebde5c5
mov r8, rdx
mov eax, edx
rol r8, 7
xor r8, rdx
and r8, 0xffff
cmp eax, 0x86d9e9dc
je 0x1802e3839
jmp 0x1802e37cc
mov eax, dword [0x18077c950]
xor eax, dword [0x18077c954]
mov r9d, 0x1893f47
xor edx, edx
div r9d
add eax, 0x1f5cf1c1
and eax, 0xba47483c
cmp eax, 0x5cb9b3f4
je 0x1802e3846
jmp 0x1802e37f6
mov eax, dword [0x18077c958]
xor edx, edx
div dword [0x18077c95c]
mov r9d, 0x83c45ea4
xor edx, edx
div r9d
mov edx, eax
xor edx, 0x321777e7
and edx, 0x3715c553
mov rax, rcx
add rax, r8
cmp edx, 0x89384a56
je 0x1802e37f6
ret
lodsd eax, dword [rsi]
popfq
jnp 0x1802e37b3
and bl, cl
pushfq
push 0xffffffffffffffe9
invalid
and byte [rdx], ah
pop rax
invalid
cmp ah, byte [rcx]
mov ah, 0x11
sub byte [rcx + 0x55], bl
invalid

Function at 0x1802e3ab0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x18077c990]
xor eax, dword [0x18077c994]
sub eax, 0xd819bb98
mov r9d, 0xf7714b8b
xor edx, edx
div r9d
add eax, 0x33431331
cmp eax, 0x21334292
jbe 0x1802e3b83
jmp 0x1802e3ae1
mov eax, dword [0x18077c998]
xor eax, dword [0x18077c99c]
mov r9d, 0xb8ff4ff7
xor edx, edx
div r9d
sub eax, 0x6cbb18b9
mov r9d, 0xd43a8f78
xor edx, edx
div r9d
mov edx, 0x2b51f572
sub rdx, r8
imul rdx, rdx, 0xffffffff9c94b217
cmp eax, 0xa8ffcf72
jae 0x1802e3ae1
jmp 0x1802e3b20
mov rax, rdx
invalid

Function at 0x1802e3dc0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
shr rax, 0xf
xor rax, rdx
mov edx, 0x378ff757
sub rdx, rax
mov rax, rdx
rol rax, 5
xor rax, rdx
mov r8, rax
rol r8, 1
xor r8, rax
and r8, 0xffff
mov eax, dword [0x18077c9d0]
add eax, dword [0x18077c9d4]
mov r9d, 0x4df8b4ca
xor edx, edx
div r9d
add eax, 0x65202e7b
mov r9d, 0xd65cb955
xor edx, edx
div r9d
cmp eax, 0x54038f80
ja 0x1802e3e4a
jmp 0x1802e3e1c
mov edx, dword [0x18077c9d8]
imul edx, dword [0x18077c9dc]
sub edx, 0xf6f55a5
xor edx, 0xd3f4326d
and edx, 0xe43aaff6
mov rax, rcx
add rax, r8
cmp edx, 0xcaadd43b
je 0x1802e3e1c
ret
je 0x1802e3ec0
sbb byte [rdx], bl
add eax, 0xde245b9
ja 0x1802e3e98
retf 0xc2eb
sub byte [rcx + rcx*4 - 0x3e], cl
Function at 0x1802e43c0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x18077ca70]
or eax, dword [0x18077ca74]
sub eax, 0x70bd1c09
mov r9d, 0xee75b98a
xor edx, edx
div r9d
add eax, 0x1292423d
cmp eax, 0x7e3d0047
je 0x1802e43af
mov eax, dword [0x18077ca78]
add eax, dword [0x18077ca7c]
mov r9d, 0xafa4a4ad
xor edx, edx
div r9d
add eax, 0xe4e974bc
xor eax, 0x785ee563
mov rdx, r8
shr rdx, 0x14
xor rdx, r8
cmp eax, 0x5d9fb19b
jbe 0x1802e43af
jmp 0x1802e438f
mov r8d, 0xf2f377c
sub r8, rdx
mov rax, r8
rol rax, 6
xor rax, r8
and rax, 0xffff
add rcx, rax
mov rax, rcx
ret
clc
lea esp, [rdi - 0x7a]
adc eax, 0xffffffdb
or bl, ch
movabs byte [0x49cccccccccccccc], al
mov r8, rdx
mov eax, dword [0x18077ca80]
sub eax, dword [0x18077ca84]
add eax, 0x4ca19a32
xor eax, 0xb8aa0049
mov r9d, 0x41661325
xor edx, edx
div r9d
cmp eax, 0xd395cfc0
je 0x1802e44fa
mov eax, dword [0x18077ca88]
sub eax, dword [0x18077ca8c]
sub eax, 0x77f2d209
mov r9d, 0xf3d632b
xor edx, edx
div r9d
mov r9d, 0x3991044f
xor edx, edx
div r9d
mov rdx, 0xfffffffff503eff9
sub rdx, r8
cmp eax, 0x59681594
jae 0x1802e44fa
jmp 0x1802e442d
mov eax, dword [0x18077ca90]
or eax, dword [0x18077ca94]
add eax, 0xb000c2e1
imul eax, eax, 0xe9195bd5
imul eax, eax, 0xd4181560
cmp eax, 0x60e2ba73
jb 0x1802e4507
mov eax, dword [0x18077ca98]
or eax, dword [str.vyp_q]
or eax, 0xce2b6fb0
imul eax, eax, 0x509db2e
xor eax, 0xe6988b7c
mov r8, rdx
xor r8, 0xffffffffb8c8f605
cmp eax, 0xbe81f978
ja 0x1802e4507
jmp 0x1802e4488
mov eax, dword [0x18077caa0]
imul eax, dword [0x18077caa4]
add eax, 0x6c217992
add eax, 0xc1032125
sub eax, 0xd77aec20
cmp eax, 0x5bc3f373
jb 0x1802e4518
jmp 0x1802e44ad
mov eax, dword [0x18077caa8]
xor eax, dword [0x18077caac]
mov r9d, 0x8860b2bc
xor edx, edx
div r9d
mov edx, eax
and edx, 0xfdeb36c9
sub edx, 0xf5737d5a
mov rax, r8
add rax, 0x1495d74c
mov r9, rax
rol r9, 1
xor r9, rax
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0xa832e817
je 0x1802e44ad
ret
or eax, 0x103b6b2d
movq mm5, mm1
call 0x1c32e4506
jno 0x1802e4531
jno 0x1802e4531
adc bh, byte [rdx + 0x5c2ade8]
ret
invalid
mov eax, edx
mov eax, dword [0x18077cab0]
xor edx, edx
div dword [0x18077cab4]
imul eax, eax, 0x78cecc82
mov r9d, 0xefd4f12f
xor edx, edx
div r9d
imul eax, eax, 0xe1b8db
cmp eax, 0x8457be5f
je 0x1802e4613
jmp 0x1802e4565
mov eax, dword [0x18077cab8]
and eax, dword [0x18077cabc]
add eax, 0x536d2357
imul eax, eax, 0xa1f98044
imul edx, eax, 0x282f054b
mov rax, r8
xor rax, 0xffffffff8057ff27
cmp edx, 0xea95d70b
je 0x1802e4565
jmp 0x1802e4595
mov edx, dword [0x18077cac0]
add edx, dword [0x18077cac4]
sub edx, 0x1e3149ea
or edx, 0x4407c396
or edx, 0x93215992
cmp edx, 0x8f9a4847
jbe 0x1802e4624
jmp 0x1802e45bd
mov r9d, dword [0x18077cac8]
add r9d, dword [0x18077cacc]
and r9d, 0x95f74955
xor r9d, 0xe3e1faab
or r9d, 0x210dcd19
movabs rdx, 0xde828a6fe9607d6f
mov r8, rax
imul r8, rdx
mov rdx, r8
rol rdx, 1
cmp r9d, 0x3757aa
jb 0x1802e45bd
ret 0x894c
jmp 0x1802e4602
xor rdx, r8
and rdx, 0xffff
add rcx, rdx
mov rax, rcx
ret
js 0x1802e45f0
fcomp dword [rbx - 0x64b7d070]
and dword [rbp + 0xc], 0xffffffe9
invalid
cwde
test ah, ah
adc al, 0x3e
xor al, 0xb4
ret 0x8deb
Function at 0x1802e4a50
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
movabs rax, 0xd93e33d867a9d880
imul r8, rax
movabs rax, 0xebebeaaa561100c6
add r8, rax
mov r9, r8
shr r9, 0x19
mov eax, dword [0x18077cb50]
and eax, dword [0x18077cb54]
imul eax, eax, 0x8fc619f9
xor eax, 0xc1b40afb
imul eax, eax, 0x5a3a92b
cmp eax, 0xa81cbab0
jbe 0x1802e4ae3
jmp 0x1802e4a9b
mov eax, dword [0x18077cb58]
imul eax, dword [0x18077cb5c]
mov r10d, 0xb12a3179
xor edx, edx
div r10d
xor eax, 0x8fc811db
sub eax, 0x8636cccd
mov r10, r9
xor r10, r8
mov rdx, r10
rol rdx, 1
xor rdx, r10
and rdx, 0xffff
cmp eax, 0x286ffd98
je 0x1802e4a9b
jmp 0x1802e4adc
add rcx, rdx
mov rax, rcx
ret
xor eax, dword [0x1689aaa5b]
invalid

Function at 0x1802e4b80
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
xor r8, 0xffffffffffffffff
mov r10, r8
rol r10, 2
mov eax, dword [0x18077cb70]
add eax, dword [0x18077cb74]
xor eax, 0xd85bafa4
or eax, 0x132dc24f
imul eax, eax, 0x14a7ccc9
cmp eax, 0xb912009d
je 0x1802e4c5f
mov eax, dword [0x18077cb78]
xor edx, edx
div dword [0x18077cb7c]
add eax, 0xff7cb4be
mov r9d, 0xc83a26a7
xor edx, edx
div r9d
mov r9d, 0xf83d3a3
xor edx, edx
div r9d
mov r9, r10
xor r9, r8
cmp eax, 0x108b9682
ja 0x1802e4c5f
jmp 0x1802e4bed
mov eax, dword [0x18077cb80]
xor edx, edx
div dword [0x18077cb84]
imul eax, eax, 0x5b90d52d
and eax, 0x32719a9b
sub eax, 0xd3869d34
cmp eax, 0xd20e27ec
je 0x1802e4c70
jmp 0x1802e4c14
mov eax, dword [0x18077cb88]
xor edx, edx
div dword [0x18077cb8c]
mov edx, eax
or edx, 0xdf769fe5
add edx, 0x9d275843
sub edx, 0xb55f93d0
mov rax, 0xffffffffbcb7ce4c
sub rax, r9
mov r8, rax
rol r8, 1
xor r8, rax
and r8, 0xffff
mov rax, rcx
add rax, r8
cmp edx, 0x4b335344
jbe 0x1802e4c14
ret
cwde
xor al, 0x52
jmp [rax + rdi*2 - 0x73]
or dword ds:[rdx + 0x75a7fc59], 0xcb0b96c5
invalid

Function at 0x1802e4d20
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, rdx
rol rcx, 7
xor rcx, rdx
mov rdx, rcx
rol rdx, 6
xor rdx, rcx
add rdx, 0xffffffff83fd4c10
mov r8, rdx
rol r8, 6
xor r8, rdx
mov rcx, r8
rol rcx, 1
xor rcx, r8
and rcx, 0xffff
add rax, rcx
mov ecx, dword [0x18077cba0]
imul ecx, dword [0x18077cba4]
add ecx, 0x5da90a32
imul ecx, ecx, 0x89b7e7b9
sub ecx, 0x3f134cef
cmp ecx, 0x422979f7
jb 0x1802e4dab
jmp 0x1802e4d84
mov ecx, dword [0x18077cba8]
and ecx, dword [0x18077cbac]
or ecx, 0xf1be0c2e
xor ecx, 0x6db18d5b
and ecx, 0xaff0da1
cmp ecx, 0x215f6d7d
ja 0x1802e4d84
ret
mov word [rbx], es
outsb dx, byte [rsi]
scasb al, byte [rdi]
fnstsw word [rax - 0x321490e6]
int3
Function at 0x1802e5500
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x18077cc60]
or eax, dword [0x18077cc64]
imul eax, eax, 0x2f6b4907
mov r9d, 0xb29a4b3d
xor edx, edx
div r9d
imul eax, eax, 0xac55e372
cmp eax, 0xbdf5603b
je 0x1802e5598
jmp 0x1802e552f
mov r9d, dword [0x18077cc68]
imul r9d, dword [0x18077cc6c]
and r9d, 0xec7ec551
add r9d, 0xb4b545e3
or r9d, 0xc36fd8b
mov rdx, r8
add rdx, 0xcfe2c2b
mov rax, rdx
shr rax, 0x19
xor rax, rdx
movabs rdx, 0xf2099171e621a158
imul rax, rdx
mov rdx, rax
rol rdx, 7
cmp r9d, 0x5bd5f0e9
jb 0x1802e552f
jmp 0x1802e5587
xor rdx, rax
and rdx, 0xffff
add rcx, rdx
mov rax, rcx
ret
loop 0x1802e558d
invalid
inc dword [rax]
add byte [rax + 1], cl
ror dword [rax - 0x77], 1
enter 0x3ac3, 0xffffffffffffff90
push rbx
and eax, 0xe25244bf
jmp 0x1802e552d
cmp dl, byte [rax + 0x44bf2553]
push rdx
loop 0x1802e558c
mov ecx, esp
int3

Function at 0x1802e55b0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [0x18077cc70]
add eax, dword [0x18077cc74]
xor eax, 0x9e84d1c4
or eax, 0x9e75d7c5
sub eax, 0x20aaa808
cmp eax, 0xc209cf23
ja 0x1802e5688
jmp 0x1802e55d8
mov eax, dword [0x18077cc78]
xor eax, dword [0x18077cc7c]
add eax, 0x9e50d701
sub eax, 0x753941f8
add eax, 0x3ccac6d9
mov r9, rdx
xor r9, 0xffffffffad782342
mov r8, r9
rol r8, 3
xor r8, r9
mov r9, r8
rol r9, 2
xor r8, r9
xor r8, 0x6d89701a
cmp eax, 0xd36056a5
je 0x1802e55d8
jmp 0x1802e5621
mov eax, dword [0x18077cc80]
sub eax, dword [0x18077cc84]
mov r9d, 0x35cbfcc3
xor edx, edx
div r9d
sub eax, 0x6cf585e7
and eax, 0xbee03dd1
cmp eax, 0xdeec012c
je 0x1802e5695
jbe 0x1802e5675
add byte [rcx - 0x47], al
ret
mov edx, dword [0x18077cc88]
add edx, dword [0x18077cc8c]
and edx, 0x25b1f606
and edx, 0x1f156d5b
or edx, 0x7ed881ad
mov rax, r8
rol rax, 7
xor rax, r8
cmp edx, 0x227a7a70
jp 0x1802e5699
je 0x1802e5695
jmp 0x1802e567b
and rax, 0xffff
add rcx, rax
mov rax, rcx
ret
mov byte [0x7350b7e1], al
invalid
jno 0x1802e570d
stosb byte [rdi], al
jno 0x1802e562a
nop
rol cl, 0x9a
movabs byte [0xcccccca6ebc14529], al
int3
xor eax, edx
mov r10d, 0x18cbdbdc
sub r10, r8
mov r11, r10
shr r11, 1
xor r11, r10
mov r8, r11
rol r8, 6
xor r8, r11
and r8, 0xffff
cmp r9d, 0xe5b8a47c
ja 0x1802e5741
jmp 0x1802e573d
add rax, r8
ret
insd dword [rdi], dx
hlt

Function at 0x1802e5910
Capabilities:
Encode data using xor

Disassembly:
movabs rax, 0xaa0a6baf
add rdx, rax
mov r8, rdx
rol r8, 6
xor r8, rdx
and r8, 0xffff
mov eax, dword [0x18077ccd0]
or eax, dword [0x18077ccd4]
xor eax, 0x74f2cc7f
and eax, 0x2d22e73f
xor eax, 0x1a42fd2f
cmp eax, 0x2245c020
jae 0x1802e597e
jmp 0x1802e5952
mov eax, dword [0x18077ccd8]
imul eax, dword [0x18077ccdc]
xor eax, 0x6187ab72
add eax, 0x53af3f3d
imul edx, eax, 0xb0a6a9c2
mov rax, rcx
add rax, r8
cmp edx, 0x94bd130
je 0x1802e5952
ret
pop rdx
pop rsp
pop rbx
lea edi, [rbx]
scasd eax, dword [rdi]
xchg ecx, eax
movabs al, byte [0xccccc4ebf024ecae]
int3
Function at 0x1802e5db0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov rcx, 0xffffffffa493a681
sub rcx, rdx
imul rdx, rcx, 0x42bde582
mov rcx, rdx
rol rcx, 4
xor rcx, rdx
and rcx, 0xffff
add rax, rcx
mov ecx, dword [0x18077cd50]
and ecx, dword [0x18077cd54]
imul ecx, ecx, 0xce6711d3
and ecx, 0xfc1c0e00
xor ecx, 0xa7304b9b
cmp ecx, 0x9000a78c
je 0x1802e5e27
jmp 0x1802e5e00
mov ecx, dword [0x18077cd58]
and ecx, dword [0x18077cd5c]
xor ecx, 0xdde01e87
add ecx, 0x4b1f8a0c
add ecx, 0x7bf5e364
cmp ecx, 0xbd4bb93
jb 0x1802e5e00
ret
jl 0x1802e5e3b
invalid
int3

Function at 0x1802e6340
Capabilities:
Encode data using xor

Disassembly:
mov rax, rcx
mov ecx, dword [0x18077cdd0]
add ecx, dword [0x18077cdd4]
imul ecx, ecx, 0x64ad403c
sub ecx, 0xe10ba006
and ecx, 0x54c8355d
cmp ecx, 0x2a6118c8
je 0x1802e641d
jmp 0x1802e636f
mov r8d, dword [0x18077cdd8]
and r8d, dword [0x18077cddc]
or r8d, 0x348c57b9
xor r8d, 0x908c8e44
sub r8d, 0x1741fea5
imul rcx, rdx, 0x382fa2e1
mov r9, rcx
rol r9, 1
xor r9, rcx
xor r10d, r10d
sub r10, r9
mov rcx, r10
rol rcx, 5
xor rcx, r10
cmp r8d, 0x8d04a09e
jb 0x1802e636f
jmp 0x1802e63bd
mov edx, dword [0x18077cde0]
xor edx, dword [0x18077cde4]
sub edx, 0xf2c8ead
or edx, 0xe07c4a77
or edx, 0xdc52c4b1
cmp edx, 0x83cc84c0
je 0x1802e642a
jmp 0x1802e63e5
mov edx, dword [0x18077cde8]
xor edx, dword [0x18077cdec]
imul edx, edx, 0xa8b39418
or edx, 0x22802af7
imul r8d, edx, 0x15febe59
mov rdx, rcx
and rdx, 0xffff
cmp r8d, 0xb93ba3ab
jae 0x1802e63e5
jmp 0x1802e6419
add rax, rdx
ret
sar byte [rbx + rsi*4 + 0x7b0eb957], cl
jmp 0x1802e636d
invalid

Function at 0x1802e6730
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x18077ce40]
or eax, dword [0x18077ce44]
mov r9d, 0x18425e1d
xor edx, edx
div r9d
xor eax, 0x2e1c3ca
sub eax, 0xbaada068
cmp eax, 0xd1cce242
jae 0x1802e67f7
jmp 0x1802e6761
mov eax, dword [0x18077ce48]
and eax, dword [0x18077ce4c]
imul edx, eax, 0x2e90daa1
add edx, 0x374208cf
sub edx, 0x26ed3c60
mov rax, r8
shr rax, 0x1c
xor rax, r8
cmp edx, 0xc0c79a7e
jae 0x1802e6761
jmp 0x1802e6793
add rax, 0x73574be1
mov rdx, rax
rol rdx, 1
xor rdx, rax
and rdx, 0xffff
add rcx, rdx
mov eax, dword [0x18077ce50]
imul eax, dword [0x18077ce54]
sub eax, 0xe7edca1b
xor eax, 0xf10c0d13
sub eax, 0xcd0a787c
cmp eax, 0xe070dfd3
ja 0x1802e6804
mov eax, dword [0x18077ce58]
xor edx, edx
div dword [0x18077ce5c]
add eax, 0x88c4b0e7
xor eax, 0x2dae4cf4
add eax, 0x65460e8f
cmp eax, 0x158a9ea4
je 0x1802e6804
mov rax, rcx
ret
cmpsq qword [rsi], qword [rdi]
jo 0x1802e686c
pop rsp
invalid
or r13d, ebp
jne 0x1802e6864
cmp eax, 0xce7cc5e
invalid
cmp esp, edi
or edx, 0xdfb4c399
add edx, 0x46bb6a5
mov rax, r8
shr rax, 0x1a
xor rax, r8
imul rax, rax, 0xdd7f35e
cmp edx, 0x19ace0b
jbe 0x1802e68b2
jmp 0x1802e688d
movabs rdx, 0x5267955fe1b13ec
add rax, rdx
mov rdx, rax
rol rdx, 7
xor rdx, rax
and rdx, 0xffff
add rcx, rdx
mov rax, rcx
ret
lodsb al, byte [rsi]
invalid