joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1804111e0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
mov rsi, rcx
mov rcx, rsi
call fcn.18063b2b0
mov rcx, rax
and rcx, 8
cmp rcx, 0
sete cl
test cl, 1
jne 0x18041120a
jmp 0x1804112a2
mov rbx, rsi
add rbx, 0x28
mov eax, dword [0x18079ab48]
xor eax, dword [0x18079ab4c]
add eax, 0x88289d88
or eax, 0x56127621
or eax, 0x4a159398
cmp eax, 0x99c5016a
je 0x180411408
mov eax, dword [0x18079ab50]
xor eax, dword [0x18079ab54]
and eax, 0x5cae6050
mov ecx, 0xf12f2157
xor edx, edx
div ecx
mov ecx, 0x895f29f6
xor edx, edx
div ecx
mov edi, eax
mov rcx, qword [rbx]
call fcn.18063f660
mov qword [rsp + 0x30], rax
cmp edi, 0x453480b1
ja 0x180411408
jmp 0x180411277
mov qword [rsp + 0x38], rdx
mov rcx, rsi
add rcx, 0x30
call fcn.18034ffd0
movabs rax, 0x8000000000000007
mov qword [rsi + 0x30], rax
lea rcx, [rsp + 0x30]
call fcn.18063f700
jmp 0x180411310
and rax, 0x10
cmp rax, 0
sete al
test al, 1
jne 0x180411310
jmp 0x1804112b3
mov rcx, rsi
add rcx, 0xc8
call fcn.180640280
mov eax, dword [0x18079ab58]
sub eax, dword [0x18079ab5c]
sub eax, 0xb877a21f
or eax, 0xd4ebce90
add eax, 0x710a640
cmp eax, 0xe6183ef5
je 0x180411422
jmp 0x1804112ea
mov eax, dword [0x18079ab60]
imul eax, dword [0x18079ab64]
xor eax, 0xe5f048d2
sub eax, 0xcb6f4c28
imul eax, eax, 0x55044029
cmp eax, 0x2efc2f4
je 0x1804112ea
jmp 0x180411310
mov qword [rsp + 0x28], rsi
mov rdi, rsi
add rdi, 0x20
lea rdx, [rsp + 0x28]
mov rcx, rdi
call fcn.180643730
cmp rax, 0
sete al
mov edx, 2
mov ecx, 1
test al, 1
cmovne rdx, rcx
mov rcx, rsi
call fcn.18063b2e0
test al, 1
jne 0x180411354
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
mov rax, qword [rdi]
lock dec qword [rax]
sete al
test al, 1
jne 0x180411364
jmp 0x18041136e
mov rcx, rdi
call fcn.1804be730
jmp 0x18041136e
mov rcx, rsi
add rcx, 0x30
call fcn.1803fdae0
mov rax, rsi
add rax, 0xd8
mov r8, qword [rax]
cmp r8, 0
je 0x1804113f0
mov eax, dword [0x18079ab68]
xor edx, edx
div dword [0x18079ab6c]
xor eax, 0xfbbbb62
imul eax, eax, 0x68b08d70
and eax, 0x5b36a8ac
cmp eax, 0xb027b2d1
jae 0x18041142f
jmp 0x1804113b3
mov eax, dword [0x18079ab70]
and eax, dword [0x18079ab74]
and eax, 0x9442f284
mov ecx, 0x1a07932e
xor edx, edx
div ecx
mov ecx, 0x92ab51fd
xor edx, edx
div ecx
mov rcx, rsi
add rcx, 0xe0
cmp eax, 0xebe4d53e
jae 0x1804113b3
jmp 0x1804113e9
mov rcx, qword [rcx]
call qword [r8 + 0x18]
mov rcx, rsi
mov edx, 0x100
mov r8d, 0x80
call fcn.1804cafa0
jmp 0x18041134c
or bh, byte [rdi + 0x6c267dd3]
sbb dh, byte [rax + rcx*2]
mov ecx, dword [rbx]
call fcn.18063f660
mov qword [rsp + 0x30], rax
jmp 0x180411237
ret 0xc93d
sal byte [rdi - 0x4eaa7844], cl
loopne 0x180411446
jmp 0x1804113b1
in al, dx
cmp byte [rax - 0x77], cl
invalid
Function at 0x180412400
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
mov rsi, rcx
mov rcx, rsi
call fcn.18063b2b0
Function at 0x180413480
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r12
push rsi
push rdi
push rbx
Function at 0x180415690
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x18
Function at 0x180417bf0
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x20
mov rsi, rcx
mov al, byte [0x1807afe04]
mov ecx, 8
mov edx, 8
call fcn.1804caf90
mov rcx, rax
mov eax, dword [0x18079b5f0]
and eax, dword [0x18079b5f4]
or eax, 0xc15a51dc
and eax, 0xc95286b0
add eax, 0x72d3c4b7
cmp eax, 0x96f1c52e
je 0x180417cdd
jmp 0x180417c38
mov eax, dword [0x18079b5f8]
sub eax, dword [0x18079b5fc]
add eax, 0x56876354
xor eax, 0x502b8e9b
imul eax, eax, 0xb7460995
cmp rcx, 0
sete r8b
cmp eax, 0xc87674f1
jb 0x180417c38
jmp 0x180417c65
mov eax, dword [0x18079b600]
sub eax, dword [0x18079b604]
sub eax, 0xdf112465
add eax, 0x428ece28
imul eax, eax, 0xac7207
cmp eax, 0x1482af98
je 0x180417cea
mov eax, dword [0x18079b608]
and eax, dword [0x18079b60c]
mov r9d, 0x4896042e
xor edx, edx
div r9d
imul eax, eax, 0xfbce5750
or eax, 0xdb77ed6e
cmp eax, 0x65770af3
je 0x180417cea
test r8b, 1
jne 0x180417ccc
jmp 0x180417cb9
mov qword [rcx], rsi
lea rdx, [0x1806c6a10]
mov rax, rcx
add rsp, 0x20
pop rsi
ret
mov ecx, 8
mov edx, 8
add byte [rdx + 8], bh
call fcn.18063bc30
ud2
test eax, 0xd595188a
cmp eax, 0xff4ce95d
invalid
js 0x180417cd0
and ebx, dword ss:[rax - 0x64]
pushfq
retf 0x94eb
Function at 0x180425c50
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
cmp rsi, 0
sete al
test al, 1
jne 0x180425c66
jmp 0x180425c6d
add rsp, 0x28
pop rdi
pop rsi
ret
mov eax, dword [0x18079cb28]
or eax, dword [0x18079cb2c]
imul eax, eax, 0x820861ed
sub eax, 0xcb575fba
add eax, 0x356fe4b8
cmp eax, 0x9b0f51a7
jbe 0x180425d25
jmp 0x180425c96
mov eax, dword [0x18079cb30]
xor edx, edx
div dword [0x18079cb34]
mov edi, eax
xor edi, 0x8ea62f1d
add edi, 0xa2f8da11
sub edi, 0x6842563c
mov rcx, rsi
call fcn.18063b3a0
cmp edi, 0xe70bac01
je 0x180425c96
jmp 0x180425cca
test al, 1
jne 0x180425cd0
jmp 0x180425c66
mov rcx, rsi
call fcn.18063bbc0
mov eax, dword [0x18079cb38]
or eax, dword [0x18079cb3c]
mov ecx, 0xfe18acbd
xor edx, edx
div ecx
or eax, 0x1b49c781
sub eax, 0x187975d9
cmp eax, 0x9e65f57
jae 0x180425d3a
mov eax, dword [0x18079cb40]
and eax, dword [0x18079cb44]
add eax, 0xe7dce333
xor eax, 0x5756648a
sub eax, 0x9df96e0b
cmp eax, 0x76ee52e4
je 0x180425d3a
jmp 0x180425c66
shr byte [rdx + 0x59d8ef2c], 0xa4
retf 0x8948
adc r12d, r9d
movsd dword [rdi], dword [rsi]
mov ch, 0xcb
insb byte [rdi], dx
outsb dx, byte [rsi]
jmp 0x180425cfe
Function at 0x180429d40
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x10d8
call fcn.180698e80
sub rsp, rax
mov rsi, r9
mov rdi, rdx
mov rbx, rcx
lea rcx, [rsp + 0x40]
mov rdx, r8
mov r8d, 0x1098
call fcn.1806a7400
mov eax, dword [0x18079d318]
add eax, dword [0x18079d31c]
add eax, 0xc9b61b81
or eax, 0xf46e222b
xor eax, 0x1960ed22
cmp eax, 0x3b95ba49
jbe 0x18042ddb0
Function at 0x180432ec0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r12
push rsi
push rdi
Function at 0x18043cb90
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
mov r8, rdx
mov rdx, rcx
mov eax, 0x20
call fcn.180698e80
sub rsp, rax
mov rsi, rsp
sub rsp, 0x20
mov rcx, rsi
call fcn.1806739b0
add rsp, 0x20
mov rdi, qword [rsi]
cmp rdi, 0
sete cl
mov r8, rsi
add r8, 8
mov eax, dword [0x18079f270]
add eax, dword [0x18079f274]
xor eax, 0x98931a72
add eax, 0xf485b2ca
mov r9d, 0x60fe40dc
xor edx, edx
div r9d
cmp eax, 0xfcc245ef
je 0x18043d7f9
mov eax, dword [0x18079f278]
or eax, dword [0x18079f27c]
and eax, 0xbf69fadd
xor eax, 0xd2a20ae7
or eax, 0xeb3dff99
mov rdx, qword [r8]
cmp eax, 0xa7182056
je 0x18043d7f9
test cl, 1
jne 0x18043d722
jmp 0x18043cc3c
mov rbx, qword [rsi + 0x10]
mov r8, qword [rsi + 0x18]
xor r14d, r14d
cmp rdx, r8
je 0x18043ccf5
lea r13, [rbp - 0x60]
add r13, 2
xor r9d, r9d
jmp 0x18043cc5d
sub rsp, 0x20
mov ecx, 1
call fcn.18067a780
add rsp, 0x20
mov rcx, rax
mov rsi, rdx
mov eax, dword [0x18079f410]
sub eax, dword [0x18079f414]
and eax, 0xc1f63e0
imul eax, eax, 0xbe9f7648
or eax, 0x761d2708
cmp eax, 0x97b02b83
je 0x18043da35
mov eax, dword [0x18079f418]
or eax, dword [0x18079f41c]
or eax, 0xb49b845b
mov r8d, 0x59845540
xor edx, edx
div r8d
imul eax, eax, 0x9d8f033c
cmp eax, 0x83b32ae3
je 0x18043da35
jmp 0x18043d790
mov esi, 0x5f36a2ed
adc dh, cl
push rcx
cmp byte [rbx + rdi*8], al
sub ecx, 0xfffffffe
invalid
invalid
call qword [rsi + 0x66]
and dword [rcx - 0x72], esi
push rsi
and word [rcx - 0x72], si
jl 0x18043d9e5
jbe 0x18043da51
jl 0x18043da34
invalid
jmp 0x18043d7b8

Function at 0x18043da60
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x30

Function at 0x18043e920
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, rcx
mov eax, dword [0x18079f5c0]
imul eax, dword [0x18079f5c4]
add eax, 0x5340e689
imul eax, eax, 0x364dc2f9
and eax, 0xd5dac96c
cmp eax, 0xfeef1d93
ja 0x18043edb8
mov eax, dword [0x18079f5c8]
add eax, dword [0x18079f5cc]
xor eax, 0x8e872ddb
and eax, 0xfb05fc03
mov ecx, 0x7a8466ad
xor edx, edx
div ecx
mov rcx, rsi
add rcx, 0xb8
cmp eax, 0x975c82ab
ja 0x18043edb8
jmp 0x18043e988
movzx eax, byte [rcx]
mov ecx, dword [0x18079f5d0]
or ecx, dword [0x18079f5d4]
or ecx, 0x6fda00e8
and ecx, 0xbdd022eb
add ecx, 0x3ddf4c8f
cmp ecx, 0x6e9387e2
jb 0x18043edc5
in al, 0xdc
invalid
Function at 0x18044a880
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x20
mov rsi, rcx
mov al, byte [rsi + 0x108]
cmp al, 3
sete cl
mov eax, dword [0x1807a0d80]
sub eax, dword [0x1807a0d84]
mov r8d, 0x7c5df6dd
xor edx, edx
div r8d
imul eax, eax, 0xdfe9106
and eax, 0xd6d68ca3
cmp eax, 0x5c24b283
ja 0x18044ac2c
mov eax, dword [0x1807a0d88]
sub eax, dword [0x1807a0d8c]
or eax, 0x461756b4
or eax, 0x11a6b3be
or eax, 0x7d7fac86
cmp eax, 0x8b87332e
jbe 0x18044ac2c
test cl, 1
jne 0x18044a8f3
jmp 0x18044a8ed
mov rax, rsi
add rax, 0x100
mov cl, byte [rax]
movzx eax, cl
test cl, cl
je 0x18044a922
jmp 0x18044a907
sub eax, 3
je 0x18044aac9
jmp 0x18044a8ed
mov eax, dword [0x1807a0d90]
sub eax, dword [0x1807a0d94]
xor eax, 0x187b8164
mov ecx, 0x72916e0e
xor edx, edx
div ecx
mov ecx, 0x6c14f556
xor edx, edx
div ecx
cmp eax, 0x5dea530c
je 0x18044ac39
mov eax, dword [0x1807a0d98]
xor edx, edx
div dword [0x1807a0d9c]
add eax, 0x86fb9dbc
or eax, 0xc4ec195c
add eax, 0x8d5e40a7
mov r8, qword [rsi + 0xa8]
cmp eax, 0xa6e814dd
je 0x18044ac39
jmp 0x18044a981
cmp r8, 0
sete al
test al, 1
jne 0x18044aa51
jmp 0x18044a992
mov eax, dword [0x1807a0da0]
xor edx, edx
div dword [0x1807a0da4]
sub eax, 0x7abf36a2
add eax, 0xa6ee1afe
mov ecx, 0x990854db
cdq
mov r8, rsi
add r8, 0x60
mov eax, dword [0x1807a0dd0]
cli
invalid
xor eax, 0xf8052b00
invalid
xor eax, 0xb45f3500
xor byte [rbx + 0x25], ch
pop rdi
invalid
mov dl, 0xbd
add eax, 0xea1f1e73
jae 0x18044ab07
invalid
invalid
cmp eax, 0x69c7d662
je 0x18044ac75
cwde
mov esi, 0x4b2333ba
xchg esp, eax
test eax, 0xfffc87e9
invalid
clc
outsb dx, byte [rsi]
fcom dword [rcx + rax*2 - 0xe97497e]
leave
sub ecx, ebx

Function at 0x18044acb0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
cmp byte [rax - 0x77], cl
invalid
mov r8, qword [rsi]
add r8, 0xfffffffffffffffd
cmp r8, 0xc
setb r9b
mov eax, dword [0x1807a0e00]
add eax, dword [0x1807a0e04]
xor eax, 0xdd382cf2
mov ecx, 0xff0c8589
xor edx, edx
div ecx
mov ecx, 0xa2dd70a2
xor edx, edx
div ecx
cmp eax, 0x2e68e8b9
jae 0x18044bea1
jmp case.0x180443fae.115
sbb al, al
push 0xffffffffffffffe2
invalid

Function at 0x18044c180
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rcx, rsi
call fcn.1804538a0
mov rbx, rsi
add rbx, 0x18
mov rcx, qword [rbx]
cmp rcx, 0xffffffffffffffff
je 0x18044c420
mov r14, rsi
add r14, 0x20
mov rdi, qword [r14]
cmp rdi, 0
je 0x18044c41a
mov rcx, rdi
call fcn.1806595d0
mov rcx, qword [rdi]
mov rax, 0xffffffffffffffff

Function at 0x18044c7a0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rax, rsi
add rax, 0x68
mov cl, byte [rax]
mov eax, dword [0x1807a1160]
or eax, dword [str.W__u_]
mov r8d, 0xe2a7637f
xor edx, edx
div r8d
or eax, 0x17c51920
and eax, 0x6761887b
cmp eax, 0x8095c2c
jae 0x18044ccc8
std
xor byte [0x178666695], bl
and eax, edi
Function at 0x18044cdb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rcx, rsi
add rcx, 0x59
mov eax, dword [0x1807a1230]
or eax, dword [0x1807a1234]
or eax, 0x9eacca0f
Function at 0x180451dc0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
push rax
mov rbp, rsp

Function at 0x180452190
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi

Function at 0x180452e80
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rbx, qword [rsi + 8]
mov rcx, qword [rsi + 0x18]
mov rax, rcx
sub rax, rbx
mov r8d, 0x28
xor edx, edx
div r8
mov rdi, rax
cmp rcx, rbx
je 0x180453108
xor eax, eax
jmp 0x180452eb5

Function at 0x1804538a0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
mov rsi, rcx
mov rax, rsi
add rax, 0x18
mov rcx, qword [rax]
mov rbx, qword [rsi + 0x20]
mov qword [rax], 0xffffffffffffffff
mov dword [rax], 0xffffffff
cmp rcx, 0xffffffffffffffff
sete al
test al, 1
jne 0x180453e42
test dword [rdi + 5], ebp
add byte [rax], al
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
Function at 0x180454c50
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rax
mov rbp, rsp
mov r8, rdx
mov eax, dword [0x1807a1fc0]
sub eax, dword [0x1807a1fc4]
imul eax, eax, 0x798bf159
imul eax, eax, 0x1f2ce960
and eax, 0xd97a4869
cmp eax, 0x87eaa30b
jbe 0x180454d2c
jmp 0x180454c83
jmp rbp
Function at 0x180456190
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov r12, qword [rdx + 8]
mov rax, qword [rdx + 0x10]
imul rcx, rax, 0x18
mov rdi, r12
add rdi, rcx
mov r15, qword [rdx]
cmp rax, 0
sete al
test al, 1
mov r13, r12
jne 0x1804561f0
jmp 0x1804561c8
mov rax, r12
mov r13, rax
jmp 0x1804561d0
add r13, 0x18
mov rbx, qword [rax]
mov r14, qword [rax + 8]
movabs rcx, 0x8000000000000000
cmp rbx, rcx
jne 0x1804562e0
jmp 0x1804561f0
mov rax, rdi
sub rax, r13
mov ecx, 0x18
xor edx, edx
div rcx
mov rbx, rax
cmp rdi, r13
je 0x1804562ab
xor edi, edi
jmp 0x180456210
imul rcx, rdi, 0x18
mov rax, r13
add rax, rcx
add rdi, 1
mov rdx, qword [rax]
cmp rdx, 0
je 0x180456298
mov ecx, dword [0x1807a2230]
add ecx, dword [0x1807a2234]
or ecx, 0x554df543
xor ecx, 0xe29b17f
and ecx, 0xcbd5bdaa
cmp ecx, 0xafbd32d6
jae 0x180456428
mov ecx, dword [0x1807a2238]
or ecx, dword [0x1807a223c]
imul r8d, ecx, 0x9fd693be
and r8d, 0x9617a2d6
and r8d, 0xc2ca2dbc
mov rcx, rax
add rcx, 8
cmp r8d, 0xca1e3f03
jae 0x180456428
jmp 0x180456288
mov rcx, qword [rcx]
mov r8d, 1
call fcn.1804cafa0
jmp 0x180456298
cmp rdi, rbx
sete al
test al, 1
jne 0x1804562a7
jmp 0x180456210
jmp 0x1804562ab
jmp 0x1804562ab
cmp r15, 0
sete al
test al, 1
jne 0x1804562cc
jmp 0x1804562b8
imul rdx, r15, 0x18
mov rcx, r12
mov r8d, 8
call fcn.1804cafa0
jmp 0x1804562cc
mov rax, rsi
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x20], r15
add rax, 0x10
mov r15, qword [rax]
mov eax, dword [0x1807a2240]
xor edx, edx
div dword [0x1807a2244]
xor eax, 0x7e4c46eb
imul eax, eax, 0xcb5fe157
imul eax, eax, 0x4fa0821a
cmp eax, 0x900d514b
je 0x180456435
jmp 0x180456318
mov eax, dword [0x1807a2248]
xor eax, dword [0x1807a224c]
or eax, 0xf30b2f18
xor eax, 0xc318d82e
mov ecx, 0x92fd7a83
xor edx, edx
div ecx
mov ebp, eax
mov rcx, rsi
mov rdx, r14
mov r8, r15
call fcn.180667620
cmp rbx, 0
sete al
cmp ebp, 0xd462b608
ja 0x180456318
test al, 1
mov r15, qword [rsp + 0x20]
jne 0x180456374
jmp 0x180456361
mov rcx, r14
mov rdx, rbx
mov r8d, 1
call fcn.1804cafa0
jmp 0x180456374
mov eax, dword [0x1807a2250]
imul eax, dword [0x1807a2254]
xor eax, 0xe55d2342
imul eax, eax, 0x1a2cdb76
xor eax, 0xafa11f98
cmp eax, 0x58ecec10
jb 0x180456454
mov eax, dword [0x1807a2258]
sub eax, dword [0x1807a225c]
mov ecx, 0x91f381c6
xor edx, edx
div ecx
mov ecx, 0x2b8e7dca
xor edx, edx
div ecx
xor eax, 0xfa55288
cmp r13, rdi
sete cl
cmp eax, 0xa43a87d4
je 0x180456454
jmp 0x1804563d2
mov eax, dword [0x1807a2260]
sub eax, dword [str.0t]
add eax, 0x163dddc0
sub eax, 0x1c02c42b
sub eax, 0x5a4ccd4c
add bl, byte [rbp + 0x5a4ccd4c]
cmp eax, 0xb1fbc70a
je 0x180456461
mov eax, dword [0x1807a2268]
xor eax, dword [0x1807a226c]
or eax, 0x9687b247
imul eax, eax, 0x476cee33
add eax, 0xf44a58e8
cmp eax, 0x8c6f4976
je 0x180456461
test cl, 1
mov rax, r13
jne 0x1804562a9
jmp 0x1804561d0
lahf
cmp edi, dword [r9 - 0x5f]
mov ebp, 0x1ce93680
invalid
jg 0x1804563e6
stc
retf 0x1f5e
fsubr qword [rdx + rcx*2]
fldcw word [rcx + 0x4b]
xor dl, dh
jmp 0x18045639c
invalid
Function at 0x18045a8b0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, r8
mov rbx, rdx
mov rdi, rcx
mov rax, qword [r9 + 8]
cmp rax, 0
sete cl
mov eax, dword [0x1807a2960]
imul eax, dword [0x1807a2964]
imul eax, eax, 0xbde49042
mov r8d, 0xd60bd54
xor edx, edx
div r8d
imul eax, eax, 0x63d7a1a7
cmp eax, 0xcc114233
ja 0x18045ab2d
mov eax, dword [0x1807a2968]
add eax, dword [0x1807a296c]
mov r8d, 0x4bade1c
xor edx, edx
div r8d
add eax, 0xd1971fc9
add eax, 0xacb83326
cmp eax, 0xa8f4ce49
ja 0x18045ab2d
test cl, 1
jne 0x18045a9e1
jmp 0x18045a931
mov rcx, qword [r9]
mov rdx, qword [r9 + 0x10]
cmp rdx, 0
sete al
test al, 1
jne 0x18045a945
jmp 0x18045a975
cmp rsi, 0
sete al
test al, 1
jne 0x18045a952
jmp 0x18045a95c
xor ecx, ecx
add rcx, rbx
jmp 0x18045ab06
mov al, byte [0x1807afe04]
mov rcx, rsi
mov rdx, rbx
call fcn.1804caf90
mov rcx, rax
jmp 0x18045ab06
cmp rdx, rsi
setbe al
mov r8, rbx
mov r9, rsi
call fcn.1804cafb0
mov rcx, rax
mov eax, dword [0x1807a2970]
xor eax, dword [0x1807a2974]
add eax, 0x1188417b
imul eax, eax, 0x761bccf8
imul eax, eax, 0x30681fca
cmp eax, 0xac23cf9b
ja 0x18045ab3a
jmp 0x18045a9b3
mov eax, dword [0x1807a2978]
sub eax, dword [0x1807a297c]
and eax, 0x2ef4c6f4
mov r8d, 0x245caf6a
xor edx, edx
div r8d
imul eax, eax, 0x4ae36c06
cmp eax, 0x906ee9c7
ja 0x18045a9b3
jmp 0x18045ab06
cmp rsi, 0
sete al
test al, 1
jne 0x18045a9ee
jmp 0x18045aa4a
mov eax, dword [0x1807a2980]
and eax, dword [0x1807a2984]
xor eax, 0x563408b9
sub eax, 0x6377687b
sub eax, 0xcfb12b16
cmp eax, 0xfbe31143
je 0x18045ab47
mov eax, dword [0x1807a2988]
or eax, dword [0x1807a298c]
add eax, 0xf7d5dc1a
or eax, 0x124c2cf6
mov ecx, 0xd3bcdce3
xor edx, edx
div ecx
cmp eax, 0x166c747d
jae 0x18045ab47
jmp 0x18045aa40
xor ecx, ecx
add rcx, rbx
jmp 0x18045ab06
mov eax, dword [0x1807a2990]
imul eax, dword [0x1807a2994]
and eax, 0x98b66bad
imul eax, eax, 0xfaf805e4
imul eax, eax, 0x325babbf
cmp eax, 0x6eedbe2c
je 0x18045ab54
jmp 0x18045aa75
mov eax, dword [0x1807a2998]
sub eax, dword [0x1807a299c]
imul eax, eax, 0x97b71291
imul eax, eax, 0x7ae85926
or eax, 0x12dbd1a3
mov cl, byte [0x1807afe04]
cmp rbx, 0
setne cl
cmp eax, 0x57032ae3
je 0x18045aa75
jmp 0x18045aaa8
mov eax, dword [0x1807a29a0]
xor edx, edx
div dword [0x1807a29a4]
and eax, 0x437e4b57
imul eax, eax, 0xf6f76b92
imul eax, eax, 0x3dddbb24
cmp eax, 0x7185a75e
ja 0x18045ab6b
jmp 0x18045aad4
mov eax, dword [0x1807a29a8]
add eax, dword [0x1807a29ac]
sub eax, 0xb4c1f521
and eax, 0x5dfc87d
xor eax, 0xbbc4f3a8
cmp eax, 0x163c9abe
jbe 0x18045aad4
jmp 0x18045aaf8
mov rcx, rsi
mov rdx, rbx
call fcn.1804caf90
mov rcx, rax
cmp rcx, 0
sete al
cmp rcx, 0
cmove rcx, rbx
and al, 1
movzx eax, al
mov qword [rdi + 8], rcx
mov qword [rdi + 0x10], rsi
mov qword [rdi], rax
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
invalid
or ch, al
add dword [rax + 0x3bc5f605], edi
jmp 0x18045a9b1
int3
invalid
ficom word [rsi + 3]
push rcx
mov eax, dword [rax - 0x45978432]
pop rbp
jmp 0x18045aad2
Function at 0x18045ade0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x18
lea rbp, [rsp + 0x10]
Function at 0x18045c470
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx

Function at 0x18045d620
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rax, rsi
add rax, 8
mov rbx, qword [rax]
cmp rbx, 0
je 0x18045da07
mov r14, qword [rsi + 0x18]
cmp r14, 0
Function at 0x18047a5a0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
Function at 0x180486350
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
movabs rax, 0x8000000000000000
xor edx, edx
mov r8d, 8
cmp qword [rcx], rax
cmove rdx, r8
add rcx, rdx
mov eax, dword [0x1807a7260]
add eax, dword [0x1807a7264]
sub eax, 0xe3a6a1d
mov r8d, 0xad27ad0e
xor edx, edx
div r8d
add eax, 0x58c8ff3d
cmp eax, 0x41ba9770
je 0x180486494
jmp 0x18048639e
mov eax, dword [0x1807a7268]
add eax, dword [0x1807a726c]
xor eax, 0x41dc8299
xor eax, 0xebc1fb08
and eax, 0x6f557f7
mov r8, qword [rcx]
cmp eax, 0xe61408fd
ja 0x18048639e
jmp 0x1804863c5
cmp r8, 0
je 0x180486443
mov eax, dword [0x1807a7270]
add eax, dword [0x1807a7274]
mov r9d, 0xc58dd4a6
xor edx, edx
div r9d
xor eax, 0x20f8bba9
imul eax, eax, 0x11130ac6
cmp eax, 0xec0404d3
je 0x1804864a1
mov eax, dword [0x1807a7278]
xor edx, edx
div dword [0x1807a727c]
imul eax, eax, 0xa71863f3
mov r9d, 0x5e5280f0
xor edx, edx
div r9d
mov r9d, 0xcddeb3b5
xor edx, edx
div r9d
mov rdx, rcx
add rdx, 8
cmp eax, 0xa7723426
ja 0x1804864a1
jmp 0x180486432
mov rcx, qword [rdx]
mov rdx, r8
mov r8d, 1
call fcn.1804cafa0
mov eax, dword [0x1807a7280]
add eax, dword [0x1807a7284]
xor eax, 0xb4e2170e
imul eax, eax, 0x85d13e22
imul eax, eax, 0x8f3b06
cmp eax, 0xc3c515bb
jae 0x1804864b2
jmp 0x180486469
mov eax, dword [0x1807a7288]
add eax, dword [0x1807a728c]
mov ecx, 0x81317db3
xor edx, edx
div ecx
sub eax, 0x84ce8917
sub eax, 0x5f14cc90
cmp eax, 0xa571e2b7
ja 0x180486469
add rsp, 0x28
ret
std
add byte [0x101d25f80], cl
push rsp
jmp 0x18048639c
std
pop rbp
or dword [rdx + riz*4 + 0x2e], edx
invalid
or ah, byte [rbx + rsi*4]
invalid

Function at 0x180486640
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rax, rsi
add rax, 0x68
mov al, byte [rax]
mov ecx, dword [0x1807a72c0]
sub ecx, dword [0x1807a72c4]
and ecx, 0xf9dcea0f
sub ecx, 0xf6e5c2be
and ecx, 0x8549ba02
cmp ecx, 0x435801de
je 0x180486a4a
jmp 0x180486680
mov edx, dword [0x1807a72c8]
imul edx, dword [0x1807a72cc]
or edx, 0x754fea0d
sub edx, 0x9994ed91
xor edx, 0xdde590b1
cmp al, 3
sete cl
cmp edx, 0x95faa277
jb 0x180486680
test cl, 1
jne 0x180486708
jmp 0x1804866b3
mov rbx, rsi
add rbx, 0x20
mov al, byte [rsi + 0x60]
mov ecx, dword [0x1807a72e0]
and ecx, dword [0x1807a72e4]
add ecx, 0xaa9dc871
xor ecx, 0x12a3a180
sub ecx, 0xe5de529d
cmp ecx, 0x1085d359
jb 0x180486a64
mov edx, dword [0x1807a72e8]
and edx, dword [0x1807a72ec]
or edx, 0x81f667e9
test byte [rcx + 0x46a1e281], 0x63
jb 0x1804866d6
invalid
stosb byte [rdi], al
mov ebp, 0xb60f7729
enter 0xfffffffffffffa81, 0xfffffffffffffff7
pop rsp
invalid
ror byte [rdi], cl
xchg bl, bh
add al, byte [rax]
invalid
test ecx, ecx
je 0x18048677d
jmp 0x18048676f
sub ecx, 3
je 0x180486a39
add al, byte [rax]
invalid
jmp 0x1804866b3
add rsi, 0x28
add rsi, 0x30
mov rcx, rsi
call fcn.180485ca0
jmp 0x1804866b3
fisubr dword [rcx - 0x33675804]
push 0x52
jmp 0x18048667e
mov esp, 0x6919e947
out 0xdf, al
jmp 0x18048673c
Function at 0x180487570
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rdi, r9
mov rbx, r8
mov rsi, rdx
mov r14, rcx
mov eax, dword [0x1807a74a0]
add eax, dword [0x1807a74a4]
or eax, 0xf319973f
xor eax, 0x36b059f7
and eax, 0x1493f16a
cmp eax, 0xd487cbc9
ja 0x180487a9e
Function at 0x180496770
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
mov eax, dword [0x1807a8f98]
sub eax, dword [0x1807a8f9c]
or eax, 0x75c0c9a4
and eax, 0x5e74709a
sub eax, 0xf9184611
cmp eax, 0x2f7a0b35
jb 0x180496aca

Function at 0x180496b70
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
mov rcx, rsi
call fcn.18064f570
mov eax, dword [0x1807a9018]
xor eax, dword [0x1807a901c]
add eax, 0x3817e7b5
imul eax, eax, 0xe64a27f9
or eax, 0xe1f30a4a
cmp eax, 0xd05c031
jb 0x18049732c
Function at 0x180498260
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x30
mov eax, dword [0x1807a92c0]
sub eax, dword [0x1807a92c4]