joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180304220
Capabilities:
Encode data using xor

Disassembly:
mov rax, 0xffffffffd2cb2f43
sub rax, rdx
xor rax, 0x707f4012
mov r8, rax
shr r8, 0x13
xor r8, rax
mov r9, r8
rol r9, 1
mov eax, dword [0x18077ff20]
xor eax, dword [0x18077ff24]
xor eax, 0x84841631
or eax, 0xbfe09aed
and eax, 0xbd5b90e4
cmp eax, 0xddbf0070
je 0x1803042ae
jmp 0x180304264
mov eax, dword [0x18077ff28]
xor edx, edx
div dword [0x18077ff2c]
mov r10d, 0x8286f18a
xor edx, edx
div r10d
add eax, 0x3add04c0
add eax, 0x75cbf7b2
mov r10, r9
xor r10, r8
mov rdx, r10
rol rdx, 2
xor rdx, r10
and rdx, 0xffff
cmp eax, 0xec66e11b
jae 0x180304264
jmp 0x1803042a7
add rcx, rdx
mov rax, rcx
ret
outsb dx, byte [rsi]
enter 0xffffffffffffb9cf, 0xffffffffffffffed
mov dl, 0x94
out 0x8f, al
invalid

Function at 0x1803043d0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [0x18077ff50]
and eax, dword [0x18077ff54]
and eax, 0xe1e9916
sub eax, 0x3205cd77
and eax, 0xbe7154f9
cmp eax, 0x515854ed
je 0x180304502
mov eax, dword [0x18077ff58]
and eax, dword [0x18077ff5c]
imul eax, eax, 0x35c89f97
or eax, 0x68e53b66
sub eax, 0x443b94e4
mov r8, rdx
shr r8, 0xd
xor r8, rdx
add r8, 0x6dde3dc0
mov r9, r8
rol r9, 4
xor r9, r8
add r9, 0xffffffffb8b39b11
mov r8, r9
rol r8, 5
xor r8, r9
cmp eax, 0x4d46d940
je 0x180304502
jmp 0x18030444b
mov eax, dword [0x18077ff60]
xor edx, edx
div dword [0x18077ff64]
and eax, 0xd65b3204
xor eax, 0xfa88c5b2
mov r9d, 0x843169d7
xor edx, edx
div r9d
cmp eax, 0xc5e710f7
jae 0x180304513
jmp 0x18030447b
mov eax, dword [0x18077ff68]
xor edx, edx
div dword [0x18077ff6c]
sub eax, 0xc853ab53
add eax, 0x5639fd10
imul edx, eax, 0x47ddd69d
mov r9, r8
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0x48599704
ja 0x18030447b
jmp 0x1803044b3
mov ecx, dword [0x18077ff70]
add ecx, dword [0x18077ff74]
or ecx, 0x8bf42b8e
imul ecx, ecx, 0x4243986
and ecx, 0x8753551
cmp ecx, 0x16873b07
jae 0x180304520
jmp 0x1803044db
mov ecx, dword [0x18077ff78]
xor ecx, dword [0x18077ff7c]
or ecx, 0x93eb3a7b
xor ecx, 0x5e81ad2c
add ecx, 0x9294823a
cmp ecx, 0x3b8219b6
je 0x1803044db
ret
push 0x10
and edi, dword [rbx]
test byte [rdx + 0x75], dh
xor byte [rbx - 0x16178268], bl
jrcxz 0x18030450f
invalid
xor al, cl
sbb dl, bl
xchg ebp, eax
mov eax, 0x59e996a4
invalid
sbb edx, 0x3e
mov ah, 0x49
fcom dword [rsi + rbp*4]
lea eax, [rsi + rbp*4 - 0x15]
stosd dword [rdi], eax
int3

Function at 0x1803047b0
Capabilities:
Encode data using xor

Disassembly:
xor rdx, 0xffffffffffffffff
mov rax, rdx
shr rax, 9
xor rax, rdx
mov rdx, 0xffffffffc45d64bf
sub rdx, rax
mov r8, rdx
rol r8, 4
xor r8, rdx
and r8, 0xffff
mov eax, dword [0x18077ffc0]
xor eax, dword [0x18077ffc4]
mov r9d, 0x83263da9
xor edx, edx
div r9d
sub eax, 0xb9110ea0
and eax, 0x3dd9d3ec
cmp eax, 0x5b5db4b0
ja 0x180304833
jmp 0x180304803
mov eax, dword [0x18077ffc8]
imul eax, dword [0x18077ffcc]
imul edx, eax, 0xc052c541
xor edx, 0xc9fb8ab
or edx, 0x342ef753
mov rax, rcx
add rax, r8
cmp edx, 0x48038adf
jb 0x180304803
jmp 0x180304832
ret
shl byte [rax], cl
leave
xlatb
movsd dword [rdi], dword [rsi]
movabs byte [0xccc0eb9c2d14bca9], al
int3
Function at 0x1803048f0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x18077ffe0]
add eax, dword [0x18077ffe4]
xor eax, 0x8c4e6bab
or eax, 0xbc0434e0
and eax, 0x2f7185d5
cmp eax, 0xd0e2d187
jae 0x1803049d2
mov eax, dword [0x18077ffe8]
add eax, dword [0x18077ffec]
mov r9d, 0xc0b578a2
xor edx, edx
div r9d
and eax, 0x612f4b94
mov r9d, 0xd46a2e3e
xor edx, edx
div r9d
mov r9, r8
shr r9, 0x11
xor r9, r8
mov rdx, 0xffffffff9049e54f
sub rdx, r9
xor rdx, 0xffffffff8755eb8d
mov r9, rdx
rol r9, 4
cmp eax, 0xc642fede
ja 0x1803049d2
jmp 0x18030496b
mov eax, dword [0x18077fff0]
and eax, dword [0x18077fff4]
add eax, 0x1c06f4d6
or eax, 0x10c7fcc3
add eax, 0x32ca0093
cmp eax, 0x6693d015
je 0x1803049e3
jmp 0x18030498f
mov r8d, dword [0x18077fff8]
imul r8d, dword [0x18077fffc]
and r8d, 0x9fc16109
sub r8d, 0xd18d2d4e
and r8d, 0x60ad304f
mov r10, r9
xor r10, rdx
and r10, 0xffff
mov rax, rcx
add rax, r10
cmp r8d, 0xf379bfcb
je 0x18030498f
jmp 0x1803049d1
ret
in al, 0xf
invalid
fdivr qword [rsi - 0x5b]
fsubr st(4), st(0)
cld
rcl eax, cl
jmp 0x18030498d

Function at 0x180304a80
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180780000]
xor eax, dword [0x180780004]
and eax, 0x35d6fd64
xor eax, 0x925be046
sub eax, 0x37a91414
cmp eax, 0xde3c5980
je 0x180304b54
jmp 0x180304aab
mov eax, dword [0x180780008]
xor edx, edx
div dword [0x18078000c]
or eax, 0xe7ca9dce
or eax, 0x94a59a00
or eax, 0x3c6eb916
mov rdx, r8
shr rdx, 2
xor rdx, r8
mov r9, rdx
shr r9, 0x13
xor r9, rdx
mov edx, 0x66f5d09c
sub rdx, r9
mov r9, rdx
rol r9, 7
xor r9, rdx
cmp eax, 0xa0ff53ac
jbe 0x180304aab
jmp 0x180304af7
and r9, 0xffff
mov eax, dword [0x180780010]
xor edx, edx
div dword [0x180780014]
imul eax, eax, 0x45762d22
and eax, 0x7e08c901
mov r8d, 0xc6a72e76
mov eax, 0xc6a72e76
xor edx, edx
div r8d
cmp eax, 0x83c0d0e2
jae 0x180304b61
mov eax, dword [0x180780018]
add eax, dword [0x18078001c]
xor eax, 0xd7967a4f
sub eax, 0xdffc245d
imul edx, eax, 0x5acd5953
mov rax, rcx
add rax, r9
cmp edx, 0xd8b2f9fd
je 0x180304b61
ret
xchg dword [rsi], esp
or al, 0x9f
jae 0x180304b22
jno 0x180304b18
jmp 0x180304aa9
stosd dword [rdi], eax
scasb al, byte [rdi]
int 0x5b
invalid

Function at 0x180304f80
Capabilities:
Encode data using xor

Disassembly:
imul r8, rdx, 0xffffffff8de05794
mov eax, dword [0x180780090]
or eax, dword [0x180780094]
or eax, 0xf4c878ab
sub eax, 0xa98b5531
and eax, 0xd72afdc5
cmp eax, 0x154c1979
je 0x180304ff9
jmp 0x180304fab
mov eax, dword [0x180780098]
xor edx, edx
div dword [0x18078009c]
xor eax, 0x6824a0b0
add eax, 0x505c6bf8
and eax, 0xf57393c7
movabs rdx, 0xb260219b
mov r9, r8
add r9, rdx
mov rdx, r9
rol rdx, 6
xor rdx, r9
and rdx, 0xffff
cmp eax, 0x276d413
jb 0x180304fab
jmp 0x180304ff2
add rcx, rdx
mov rax, rcx
ret
int 5
movsd dword [rdi], dword [rsi]
invalid
Function at 0x180305350
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x1807800f0]
xor edx, edx
div dword [0x1807800f4]
mov r9d, 0x854a21be
xor edx, edx
div r9d
add eax, 0xbbadd594
mov r9d, 0xcb54dfcb
xor edx, edx
div r9d
cmp eax, 0x63ac801c
je 0x180305483
mov eax, dword [0x1807800f8]
and eax, dword [0x1807800fc]
and eax, 0x3f5c21f9
and eax, 0x85adaee9
and eax, 0x3f04ed36
imul r9, r8, 0xa07350c
cmp eax, 0xee82e911
ja 0x180305483
jmp 0x1803053b6
mov eax, dword [0x180780100]
imul eax, dword [0x180780104]
add eax, 0xe9233a72
imul eax, eax, 0x39e5b30e
imul eax, eax, 0xaf19c3d5
cmp eax, 0xff307d68
ja 0x180305494
jmp 0x1803053e1
mov eax, dword [0x180780108]
xor edx, edx
div dword [0x18078010c]
and eax, 0xca81aabb
and eax, 0x80572d56
add eax, 0x42ec5a1e
mov rdx, r9
add rdx, 0x268ff7cc
mov r8, rdx
rol r8, 7
xor r8, rdx
cmp eax, 0xfd1d3835
je 0x1803053e1
jmp 0x18030541b
mov eax, dword [0x180780110]
add eax, dword [0x180780114]
and eax, 0x9168bdba
add eax, 0xd8b5306d
mov r9d, 0x18925054
xor edx, edx
div r9d
cmp eax, 0x614c0366
jae 0x1803054a1
jmp 0x180305445
mov eax, dword [0x180780118]
xor edx, edx
div dword [0x18078011c]
int 0xac
add byte [r9], r14b
sal bh, cl
xor eax, 0x47acc9
and eax, 0x747596a3
sub eax, 0x8b5ea002
mov r9d, 0x58104f5e
xor edx, edx
div r9d
mov edx, eax
mov r9, r8
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0x2d8d285
je 0x180305445
ret
xchg dword [rcx], esi
jne 0x180305447
xor edi, edi
mov bh, 0xd9
invalid
sbb ch, byte [rcx - 0x6537b29f]
loopne 0x18030550b
jmp 0x1803053df
xor ah, byte [rdi]
fdivr qword [rax]
push 0xffffffffffffffc9
invalid
mov ecx, dword [0x180780128]
add ecx, dword [0x18078012c]
imul ecx, ecx, 0x665a4768
imul r8d, ecx, 0x24f8c3c6
sub r8d, 0x8bc1b127
mov r9, rdx
rol r9, 7
xor r9, rdx
mov rcx, r9
rol rcx, 1
xor r9, rcx
xor r9, 0xffffffffffffffff
mov rcx, r9
rol rcx, 1
xor rcx, r9
cmp r8d, 0xa66ef438
je 0x1803054db
jmp 0x180305526
mov rdx, rcx
rol rdx, 2
xor rdx, rcx
and rdx, 0xffff
add rax, rdx
ret

Function at 0x1803055e0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180780140]
add eax, dword [0x180780144]
add eax, 0x72795848
add eax, 0x15fdf7d5
or eax, 0xaa2a81d
cmp eax, 0xd9a51d28
je 0x1803056c5
jmp 0x18030560b
mov eax, dword [str.fvN]
sub eax, dword [0x18078014c]
mov r9d, 0xa078b953
xor edx, edx
div r9d
add eax, 0xf01a8bcc
sub eax, 0x97fda9fd
mov rdx, r8
rol rdx, 1
xor rdx, r8
cmp eax, 0x8bcc0ac9
je 0x18030560b
jmp 0x18030563e
mov rax, rdx
shr rax, 0xa
xor rax, rdx
mov rdx, rax
shr rdx, 0x17
xor rdx, rax
imul rax, rdx, 0xffffffffd05c6e33
mov r8, rax
rol r8, 3
xor r8, rax
mov eax, dword [0x180780150]
and eax, dword [0x180780154]
imul eax, eax, 0xf15925ac
mov r9d, 0xc953ab90
xor edx, edx
div r9d
xor eax, 0x2c58aef4
cmp eax, 0xc81859e3
jae 0x1803056d6
jmp 0x18030568e
mov eax, dword [0x180780158]
and eax, dword [0x18078015c]
imul edx, eax, 0xda6bc88d
and edx, 0x600f27ad
xor edx, 0x1c879bfd
mov r9, r8
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0x1f48f41c
je 0x18030568e
ret
test dword [rcx + 0x20711fb6], esi
mov edi, 0xe9e970a9
sbb ecx, ebp
xor edi, edi
invalid
invalid
Function at 0x1803056e0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
xor r8, 0xffffffffd09f5c5f
rol r8, 6
xor r8, rdx
mov eax, dword [0x180780160]
xor eax, dword [0x180780164]
and eax, 0x8d5c9c14
and eax, 0xa894506b
mov r9d, 0x8aff1add
xor edx, edx
div r9d
cmp eax, 0xe0b30125
ja 0x1803057ae
jmp 0x18030571f
mov eax, dword [0x180780168]
or eax, dword [0x18078016c]
imul eax, eax, 0x4bf6140b
sub eax, 0x6b0e7762
or eax, 0x5559cc6d
mov r9, r8
xor r9, 0x2f60a3a0
mov rdx, r9
rol rdx, 1
xor rdx, r9
and rdx, 0xffff
cmp eax, 0x58a75ed2
je 0x18030571f
jmp 0x18030575e
mov eax, dword [0x180780170]
add eax, dword [0x180780174]
xor eax, 0x52dc267f
xor eax, 0xf34d71a6
xor eax, 0x1829e9b3
cmp eax, 0x672a662f
je 0x1803057bf
mov eax, dword [0x180780178]
imul eax, dword [0x18078017c]
sub eax, 0x285d890b
sub eax, 0x9b42cf02
imul r8d, eax, 0x30e71a3
mov rax, rcx
add rax, rdx
cmp r8d, 0x690b0957
je 0x1803057bf
ret
xchg dword [rdx], eax
js 0x18030582c
loop 0x180305827
in eax, dx
invalid
outsb dx, byte [rsi]
mov dh, 0xc1
std
wait
jbe 0x180305841
mov bh, 0x78
mov dword [rsi], esp
cmp eax, 0xccccb3eb
int3
mov r9d, dword [0x180780188]
sub r9d, dword [0x18078018c]
or eax, 0x47a985
or r9d, 0xfac124cf
xor r9d, 0x54e0ea1c
sub r9d, 0xc3ac8bcd
imul r8, rdx, 0xffffffff9c0915c4
add r8, 0xffffffffe4bad8b0
mov rcx, r8
fdivr dword [rdx - 0x3e76b31c]
ror dword [rax - 0x3f], 0xc1
add al, byte [rcx - 0x7f]
stc
ja 0x180305802
rol rcx, 2
cmp r9d, 0x3204cc77
add al, 0x32
jb 0x18030585d
jmp 0x18030583c
xor rcx, r8
mov rdx, rcx
shr rdx, 0xb
xor rdx, rcx
mov rcx, rdx
rol rcx, 1
xor rcx, rdx
and rcx, 0xffff
add rax, rcx
ret
retf 0xc148
add dword [rax - 0x65], eax
mov byte [rcx + 0x37e94c55], dh
std
jne 0x1803058e6
jmp 0x1803057f9
invalid

Function at 0x180305e80
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov r9, r8
rol r9, 7
mov eax, dword [0x180780240]
add eax, dword [0x180780244]
sub eax, 0xab705c84
add eax, 0xdd139183
sub eax, 0x9a87f3ab
cmp eax, 0x911e7871

Function at 0x180306020
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
rol rax, 5
mov r8d, dword [0x180780270]
xor r8d, dword [0x180780274]
sub r8d, 0x7b4d20ad
or r8d, 0xa212515c
sub r8d, 0x227d5c61
cmp r8d, 0x2d671bb5
je 0x1803060fb
jmp 0x180306059
mov r8d, dword [0x180780278]
and r8d, dword [0x18078027c]
imul r8d, r8d, 0x4b57a456
sub r8d, 0x68bc08c6
imul r9d, r8d, 0x3af7e6a5
mov r8, rax
xor r8, rdx
imul r8, r8, 0x150f8f62
mov r10, r8
rol r10, 6
xor r10, r8
and r10, 0xffff
mov r8, rcx
add r8, r10
cmp r9d, 0xeeffe483
jae 0x180306059
jmp 0x1803060ab
mov eax, dword [0x180780280]
add eax, dword [0x180780284]
mov ecx, 0x7195db6a
xor edx, edx
div ecx
imul eax, eax, 0x1e68fe76
add eax, 0x4829fbe3
cmp eax, 0xb85de4e7
jae 0x18030610c
jmp 0x1803060d4
mov eax, dword [0x180780288]
xor eax, dword [0x18078028c]
and eax, 0xfad7d2f1
sub eax, 0xbca57a9e
imul eax, eax, 0xfc345e9c
cmp eax, 0x9c7a4530
je 0x1803060d4
mov rax, r8
ret
xchg esi, eax
invalid
invalid
Function at 0x1803061b0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x1807802a0]
add eax, dword [0x1807802a4]
imul eax, eax, 0x825b280
imul eax, eax, 0x8a1eb905
xor eax, 0x50aa862a
cmp eax, 0xb55cad8c
jb 0x180306286
mov eax, dword [0x1807802a8]
or eax, dword [0x1807802ac]
imul eax, eax, 0x91401ef2
mov r9d, 0x460272d5
xor edx, edx
div r9d
sub eax, 0xc786fd4d
mov r9, r8
xor r9, 0xffffffffffffffff
rol r9, 2
cmp eax, 0x47f7838
jb 0x180306286
jmp 0x180306211
mov eax, dword [0x1807802b0]
sub eax, dword [0x1807802b4]
add eax, 0x1ec1a882
and eax, 0xbe9d0bbb
and eax, 0x9e2907c8
cmp eax, 0x5381d089
je 0x180306297
jmp 0x180306235
mov eax, dword [0x1807802b8]
add eax, dword [0x1807802bc]
xor eax, 0xe2830f48
mov r10d, 0x50c612ca
xor edx, edx
div r10d
add eax, 0x86606ab9
mov rdx, r9
xor rdx, r8
mov r10, rdx
rol r10, 1
xor r10, rdx
mov rdx, r10
rol rdx, 7
xor rdx, r10
cmp eax, 0x98124c66
ja 0x180306235
jmp 0x180306278
and rdx, 0xffff
add rcx, rdx
mov rax, rcx
ret
mov edx, 0x9cd35646
sar ah, cl
loope 0x1803062e0
cmp dword [rdx], edi
xchg ecx, ebp
invalid
fisttp word [0x1fe91197d]
movabs al, byte [0xcc8eebc74c4b0845]
int3
lahf
add byte [r9 - 0x40], r13b
mov ecx, 0xd5e07db
imul ebx, dword [rdx + 0x42], 0x62

Function at 0x1803067a0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180780350]
imul eax, dword [0x180780354]
add eax, 0x288cebee
mov r9d, 0x9bb955b
xor edx, edx
div r9d
sub eax, 0xeec9c412
cmp eax, 0x891c0fb8
jae 0x180306831
jmp 0x1803067ce
mov edx, dword [0x180780358]
imul edx, dword [0x18078035c]
sub edx, 0x2be54cd7
add edx, 0x3531de1c
sub edx, 0x9a004e25
mov rax, r8
xor rax, 0xffffffffaa3fcd2c
cmp edx, 0x61b86aea
jae 0x1803067ce
jmp 0x180306800
mov rdx, rax
rol rdx, 1
xor rdx, rax
imul rax, rdx, 0x50346c85
mov rdx, rax
shr rdx, 0x16
xor rdx, rax
mov rax, rdx
rol rax, 4
xor rax, rdx
and rax, 0xffff
add rcx, rax
mov rax, rcx
ret
retf 0xeb9b

Function at 0x180306b90
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
shr rax, 0xf
xor rax, rdx
mov r8, rax
shr r8, 0x17
xor r8, rax
add r8, 0xffffffffac9e489e
mov r9, r8
rol r9, 4
mov eax, dword [0x1807803b0]
xor eax, dword [0x1807803b4]
or eax, 0x911abfce
xor eax, 0x1b87abf
add eax, 0x1c72222e
cmp eax, 0xbfc04a72
jb 0x180306c12
jmp 0x180306bd6
mov eax, dword [0x1807803b8]
xor edx, edx
div dword [0x1807803bc]
xor eax, 0x7b6e299b
imul edx, eax, 0xd7f7112e
or edx, 0xc430434e
mov rax, r9
xor rax, r8
and rax, 0xffff
cmp edx, 0xc10f1683
jbe 0x180306bd6
jmp 0x180306c0b
add rcx, rax
mov rax, rcx
ret
call 0x168309f89
add byte [rcx - 0x4f], bh
insb byte [rdi], dx
cmp dword [rdx + 0x49b4eb05], edi
mov r8, rdx
Function at 0x180306c20
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x1807803c0]
xor eax, dword [0x1807803c4]
mov r9d, 0x9dd1aed3
xor edx, edx
div r9d
add eax, 0xca4cf12
imul eax, eax, 0x9009af54
cmp eax, 0x40522649
je 0x180306d5a
jmp 0x180306c52
mov eax, dword [0x1807803c8]
sub eax, dword [0x1807803cc]
and eax, 0x49fe4310
xor eax, 0x63c1eecf
imul eax, eax, 0xa9809d94
movabs rdx, 0xccbdcc8fee82e12
mov r9, r8
imul r9, rdx
movabs rdx, 0x374b6be8fb1b1302
add r9, rdx
cmp eax, 0x375dc96
jb 0x180306c52
jmp 0x180306c95
mov eax, dword [0x1807803d0]
sub eax, dword [0x1807803d4]
or eax, 0xf7ea8cc6
mov r8d, 0x5adc055e
xor edx, edx
div r8d
add eax, 0xd23841fe
cmp eax, 0x6c9570f3
jbe 0x180306d67
mov eax, dword [0x1807803d8]
or eax, dword [0x1807803dc]
or eax, 0x2375df06
and eax, 0x69725aae
add eax, 0xdd6ee783
mov r8, r9
rol r8, 1
cmp eax, 0x8cd51f6b
ja 0x180306d67
jmp 0x180306ceb
mov eax, dword [0x1807803e0]
and eax, dword [0x1807803e4]
mov r10d, 0x2a153392
xor edx, edx
div r10d
imul eax, eax, 0x45594e77
mov r10d, 0x8d7ce9d3
xor edx, edx
div r10d
cmp eax, 0x7bc6db94
je 0x180306d78
mov eax, dword [0x1807803e8]
sub eax, dword [0x1807803ec]
and eax, 0x9b32e292
mov r10d, 0x1d1d00e6
xor edx, edx
div r10d
mov edx, eax
xor edx, 0x79256816
mov r10, r8
xor r10, r9
and r10, 0xffff
mov rax, rcx
add rax, r10
cmp edx, 0xad48ef3d
jae 0x180306d78
ret
xchg edi, eax
add al, 0x27
mov esi, 0xe973470d
jmp 0x130306d66
scasd eax, dword [rdi]
and esp, esp
sub eax, 0x427c62
jb 0x180306de0
invalid
invalid
add bl, ch
add byte [rbx + 0x47960f05], cl
add byte [rbx], ah
add eax, 0x47960d
mov eax, dword [0x1807803f8]
and eax, dword [0x1807803fc]
sub eax, 0x21eeb1ed
imul eax, eax, 0x61f09f08
or eax, 0x8c05f643
mov rdx, r8
shr rdx, 0xb
xor rdx, r8
mov r9, rdx
rol r9, 1
xor r9, rdx
cmp eax, 0x74df092e
jb 0x180306de3
jmp 0x180306e1b
mov eax, dword [0x180780400]
sub eax, dword [0x180780404]
imul eax, eax, 0xbcb66421
and eax, 0x16a32797
mov r8d, 0x10a22532
xor edx, edx
div r8d
cmp eax, 0x3f5f3d4a
jae 0x180306ef3
mov eax, dword [0x180780408]
and eax, dword [0x18078040c]
imul eax, eax, 0x8bf3c769
sub eax, 0xc7f90985
or eax, 0x8a57d976
xor r8d, r8d
sub r8, r9
xor r8, 0x53ea98d1
mov r10, r8
rol r10, 6
cmp eax, 0xa07b24f1
je 0x180306ef3
jmp 0x180306e81
mov eax, dword [0x180780410]
xor eax, dword [0x180780414]
or eax, 0x411f48df
imul eax, eax, 0x93d10d00
mov r9d, 0xcf48ac2f
xor edx, edx
div r9d
cmp eax, 0x921d1a5c
jae 0x180306f04
mov eax, dword [0x180780418]
or eax, dword [0x18078041c]
or eax, 0xbb21ff3b
xor eax, 0xfa519e2e
imul edx, eax, 0xc4ec3581
mov r9, r10
xor r9, r8
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp edx, 0x75026711
je 0x180306f04
ret
imul ecx, dword [rsi + 5], 0x2d55dafb
bswap esi
invalid
push rdx
int3
Function at 0x180306fc0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
rol rax, 3
xor rax, rdx
xor rax, 0x46632bf7
mov edx, dword [0x180780430]
sub edx, dword [0x180780434]
imul edx, edx, 0x5bf9322b
sub edx, 0x4caebcd9
imul edx, edx, 0xa51d6cd5
cmp edx, 0xd325052c
ja 0x18030709b
mov edx, dword [0x180780438]
sub edx, dword [0x18078043c]
and edx, 0xf6b7001d
and edx, 0xcc2e89a1
and edx, 0x33123f83
mov r9, rax
add r9, 0x285be3dc
xor r9, 0x54c6ae19
mov r8, r9
rol r8, 1
xor r8, r9
and r8, 0xffff
cmp edx, 0xae4644a0
je 0x18030709b
jmp 0x180307043
mov eax, dword [0x180780440]
xor eax, dword [0x180780444]
or eax, 0x85833618
xor eax, 0x45f0a20d
mov r9d, 0xb7189364
xor edx, edx
div r9d
cmp eax, 0x8e492836
je 0x1803070a8
jmp 0x18030706d
mov eax, dword [0x180780448]
imul eax, dword [0x18078044c]
imul edx, eax, 0xacea0ee6
and edx, 0x81d70eb2
xor edx, 0x142bc20e
mov rax, rcx
add rax, r8
cmp edx, 0x2b92be6c
je 0x18030706d
ret
scasd eax, dword [rdi]
invalid
pop rcx
xlatb
sti
sbb al, 0xc2
sar dword [rbx + rbp*8 - 0x47], 0xcc
int3

Function at 0x180307540
Capabilities:
Encode data using xor

Disassembly:
xor eax, eax
sub rax, rdx
mov r8, rax
shr r8, 3
xor r8, rax
xor r8, 0xffffffffa2f09400
mov eax, dword [0x1807804c0]
or eax, dword [0x1807804c4]
xor eax, 0x869035cb
mov r9d, 0xc23657fd
xor edx, edx
div r9d
and eax, 0x4b642610
cmp eax, 0xed115fb7
je 0x180307619
jmp 0x180307584
mov eax, dword [0x1807804c8]
imul eax, dword [0x1807804cc]
imul eax, eax, 0x169332d9
mov r9d, 0x1f157122
xor edx, edx
div r9d
xor eax, 0xa9a11e31
mov rdx, r8
add rdx, 0xffffffff8693f633
cmp eax, 0x8fe2dc1e
je 0x180307584
jmp 0x1803075ba
mov eax, dword [0x1807804d0]
add eax, dword [0x1807804d4]
or eax, 0xb3243d92
sub eax, 0x273d7f
or eax, 0x5b3f2975
cmp eax, 0x40812612
je 0x18030762a
mov eax, dword [0x1807804d8]
add eax, dword [0x1807804dc]
xor eax, 0xce9c914c
or eax, 0xead1df5d
imul r8d, eax, 0xa7adf776
mov r9, rdx
rol r9, 1
xor r9, rdx
and r9, 0xffff
mov rax, rcx
add rax, r9
cmp r8d, 0x4fc6d62d
je 0x18030762a
ret
leave
jbe 0x180307698
jnp 0x1803075ff
loop 0x18030769f
sar byte [rcx - 0x16c1f0c8], 0x58
invalid
jmp 0x1512ea4db
cmc
xor edx, edx
div r8d
add eax, 0xf423693e
mov rdx, r10
imul esp, dword ds:[rbx], 0xd2894cf4
xor rdx, r9
and rdx, 0xffff
mov r8, rcx
add r8, rdx
cmp eax, 0x32655f92
jb 0x18030770c
jmp 0x1803076bf
mov eax, dword [0x1807804f0]
xor eax, dword [0x1807804f4]
or eax, 0x4b9b9530
add eax, 0x93c5dcd8
imul eax, eax, 0xe3823fb3
cmp eax, 0x2017d62b
je 0x18030771d
mov eax, dword [0x1807804f8]
xor eax, dword [0x1807804fc]
or eax, 0xaf761507
mov ecx, 0xb6804697
xor edx, edx
div ecx
sub eax, 0x86e1e0b4
cmp eax, 0x4215a4ad
jb 0x18030771d
mov rax, r8
ret
fcmovbe st(0), st(5)
push 0xffffffffffffffeb
mov edi, 0x80044113
mov byte [rbx - 0x9c1648], 0xff
call qword [rcx - 0x63]
push rcx
popfq
sbb bl, byte gs:[rcx]
insb byte [rdi], dx
mov r11, gs
mov ebx, 0xcccccccc
int3
Function at 0x180307b90
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
xor r8, 0x14d8f9b1
add r8, 0x4d568c2f
xor r8, 0x22b01a25
mov r9, r8
rol r9, 3
mov eax, dword [0x180780570]
xor eax, dword [0x180780574]
add eax, 0x8eb0217d
mov r10d, 0x6075a89f
xor edx, edx
div r10d
mov r10d, 0x1ad12a5
xor edx, edx
div r10d
cmp eax, 0xd187591a
jae 0x180307c18
jmp 0x180307bdf
mov eax, dword [0x180780578]
and eax, dword [0x18078057c]
xor eax, 0x88709691
imul edx, eax, 0x189736d1
sub edx, 0xe3a732d4
mov r10, r9
xor r10, r8
and r10, 0xffff
mov rax, rcx
add rax, r10
cmp edx, 0x636828a5
jb 0x180307bdf
ret
cdq
sbb eax, 0xcae8d5b9
and byte [rsi + 0x74], bh
jns 0x180307c4c
cli
jmp 0x180307bdd
ret 0x3104

Function at 0x180308210
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180780610]
or eax, dword [0x180780614]
imul eax, eax, 0x5e4cd856
imul eax, eax, 0xeba7435
or eax, 0x85701d27
cmp eax, 0x8a33a173
jb 0x1803082e0
jmp 0x18030823d
mov eax, dword [0x180780618]
or eax, dword [0x18078061c]
and eax, 0x4f0da17e
mov r9d, 0x2d801c02
xor edx, edx
div r9d
xor eax, 0x9fdcf3a0
mov r9, 0xffffffffe4629b2b
sub r9, r8
cmp eax, 0xfef47e54
je 0x18030823d
jmp 0x180308271
mov eax, dword [0x180780620]
xor edx, edx
div dword [0x180780624]
or eax, 0xbf0ecc2
sub eax, 0x78d235a5
imul eax, eax, 0x8a99b90
cmp eax, 0x9cfcbbdf
je 0x1803082f1
mov edx, dword [0x180780628]
imul edx, dword [0x18078062c]
sub edx, 0x8ca7297c
sub edx, 0x17d40c8e
add edx, 0x1968cc86
mov rax, r9
xor rax, 0x761afa38
mov r8, rax
rol r8, 6
xor r8, rax
and r8, 0xffff
mov rax, rcx
add rax, r8
cmp edx, 0x68f1259
je 0x1803082f1
jmp 0x1803082df
ret
imul r15d, ecx, 0xffffff9c
invalid
mov esp, 0xfc23aa07
stosd dword [rdi], eax
invalid

Function at 0x180308430
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov eax, dword [0x180780650]
or eax, dword [0x180780654]
xor eax, 0xac0f2e75
and eax, 0x60f646fa
mov r9d, 0x217002c7
xor edx, edx
div r9d
cmp eax, 0x8bb53b2f
je 0x1803084c7
jmp 0x18030845d
mov eax, dword [0x180780658]
and eax, dword [0x18078065c]
mov r9d, 0x292e1256
xor edx, edx
div r9d
sub eax, 0x7e21dec0
mov r9d, 0x4da781f0
xor edx, edx
div r9d
mov rdx, r8
rol rdx, 2
xor rdx, r8
xor rdx, 0xffffffffed9fa83a
imul r9, rdx, 0xffffffffece4ecbd
mov rdx, r9
rol rdx, 5
xor rdx, r9
mov r9, rdx
rol r9, 7
cmp eax, 0x5917587d
jae 0x18030845d
jmp 0x1803084b6
xor r9, rdx
and r9, 0xffff
add rcx, r9
mov rax, rcx
ret
invalid

Function at 0x1803089a0
Capabilities:
Encode data using xor

Disassembly:
mov r8, rdx
mov r9, r8
shr r9, 0xa
mov eax, dword [0x1807806d0]
and eax, dword [0x1807806d4]
mov r10d, 0x284159c6
xor edx, edx
div r10d
and eax, 0xbf3e42c9
sub eax, 0xa6113368
cmp eax, 0xb5478fbc
ja 0x180308a31
jmp 0x1803089d4
mov eax, dword [0x1807806d8]
or eax, dword [0x1807806dc]
and eax, 0xb680757f
xor eax, 0x3197508a
mov r10d, 0xb5a71d0a
xor edx, edx
div r10d
mov rdx, r9
xor rdx, r8
add rdx, 0xffffffff8cbf180b
xor rdx, 0xffffffffedab1363
imul r10, rdx, 0xffffffffcfc08c3b
mov rdx, r10
rol rdx, 5
xor rdx, r10
and rdx, 0xffff
cmp eax, 0x3e9688e0
je 0x1803089d4
jmp 0x180308a2a
add rcx, rdx
mov rax, rcx
ret
mov ebp, 0xde24cb8f
mov al, 0xff
xchg ecx, eax
jmp 0x1803089d2