joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180070700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x180070700
movss dword [rsp + 0x10], xmm1
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x98
cmp qword [0x180640cf0], 0
jne 0x18007081a
lea rax, [rsp + 0x60]
lea rcx, str.HefoedlMi
mov rdi, rax
mov rsi, rcx
mov ecx, 0x30
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x17
movzx eax, word [rsp + rax + 0x60]
test eax, eax
je 0x180070757
mov dword [rsp + 0x2c], 1
jmp 0x18007075f
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x1800707c2
mov dword [rsp + 0x24], 0
jmp 0x180070788
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x18
jge 0x1800707c2
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x60]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x60], ax
jmp 0x18007077e
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640cf0], rax
mov dword [rsp + 0x28], 0
jmp 0x180070805
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x18
jge 0x18007081a
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x60], cx
jmp 0x1800707fb
movss xmm0, dword [rsp + 0xb8]
movss dword [rsp + 0x34], xmm0
mov rax, qword [0x180640cf0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18007087b
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x34]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xb0]
call qword [rsp + 0x58]
nop
add rsp, 0x98
pop rdi
pop rsi
ret
Function at 0x180070a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x180070a00
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xb8
cmp qword [0x1806409b0], 0
jne 0x180070b1d
lea rax, [rsp + 0x70]
lea rcx, str.ZyegbxciIdazdboex_XiFmncj__n
mov rdi, rax
mov rsi, rcx
mov ecx, 0x3e
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x1e
movzx eax, word [rsp + rax + 0x70]
test eax, eax
je 0x180070a5a
mov dword [rsp + 0x2c], 1
jmp 0x180070a62
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x180070ac5
mov dword [rsp + 0x24], 0
jmp 0x180070a8b
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x1f
jge 0x180070ac5
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x70]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x70], ax
jmp 0x180070a81
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x1806409b0], rax
mov dword [rsp + 0x28], 0
jmp 0x180070b08
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x1f
jge 0x180070b1d
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x70], cx
jmp 0x180070afe
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x68], rax
mov rax, qword [0x1806409b0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xd0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x180070b87
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xd0]
call qword [rsp + 0x58]
nop
add rsp, 0xb8
pop rdi
pop rsi
ret
Function at 0x180070e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x180070e20
mov byte [rsp + 0x10], dl
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xa8
cmp qword [0x180640ca0], 0
jne 0x180070f38
lea rax, [rsp + 0x60]
lea rcx, [0x1802881e0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x1f
movzx eax, word [rsp + rax + 0x60]
test eax, eax
je 0x180070e75
mov dword [rsp + 0x2c], 1
jmp 0x180070e7d
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x180070ee0
mov dword [rsp + 0x24], 0
jmp 0x180070ea6
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x20
jge 0x180070ee0
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x60]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x60], ax
jmp 0x180070e9c
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640ca0], rax
mov dword [rsp + 0x28], 0
jmp 0x180070f23
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x20
jge 0x180070f38
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x60], cx
jmp 0x180070f19
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0x21], al
mov rax, qword [0x180640ca0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xc0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x180070f96
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x21]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xc0]
call qword [rsp + 0x58]
nop
add rsp, 0xa8
pop rdi
pop rsi
ret
Function at 0x180071000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x180071000
mov byte [rsp + 0x10], dl
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xb8
cmp qword [0x180640990], 0
jne 0x180071118
lea rax, [rsp + 0x60]
lea rcx, str.ZyegbxciIdazdboex_XiYidoixHyy
mov rdi, rax
mov rsi, rcx
mov ecx, 0x50
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x27
movzx eax, word [rsp + rax + 0x60]
test eax, eax
je 0x180071055
mov dword [rsp + 0x2c], 1
jmp 0x18007105d
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x1800710c0
mov dword [rsp + 0x24], 0
jmp 0x180071086
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x28
jge 0x1800710c0
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x60]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x60], ax
jmp 0x18007107c
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640990], rax
mov dword [rsp + 0x28], 0
jmp 0x180071103
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x28
jge 0x180071118
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x60], cx
jmp 0x1800710f9
movzx eax, byte [rsp + 0xd8]
mov byte [rsp + 0x21], al
mov rax, qword [0x180640990]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xd0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x180071176
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x21]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xd0]
call qword [rsp + 0x58]
nop
add rsp, 0xb8
pop rdi
pop rsi
ret
Function at 0x180071390
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x180071390
mov byte [rsp + 0x10], dl
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xb8
cmp qword [0x180640cb0], 0
jne 0x1800714a8
lea rax, [rsp + 0x60]
lea rcx, [0x180288230]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x46
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x22
movzx eax, word [rsp + rax + 0x60]
test eax, eax
je 0x1800713e5
mov dword [rsp + 0x2c], 1
jmp 0x1800713ed
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x180071450
mov dword [rsp + 0x24], 0
jmp 0x180071416
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x23
jge 0x180071450
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x60]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x60], ax
jmp 0x18007140c
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640cb0], rax
mov dword [rsp + 0x28], 0
jmp 0x180071493
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x23
jge 0x1800714a8
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x60], cx
jmp 0x180071489
movzx eax, byte [rsp + 0xd8]
mov byte [rsp + 0x21], al
mov rax, qword [0x180640cb0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xd0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x180071506
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x21]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xd0]
call qword [rsp + 0x58]
nop
add rsp, 0xb8
pop rdi
pop rsi
ret
Function at 0x180071570
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x180071570
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xe8
cmp qword [0x180640970], 0
jne 0x1800716a0
lea rax, [rsp + 0x80]
lea rcx, str.GjxoyekgEdxxkeooOudjach_Ynx_nodZjkfinj_
mov rdi, rax
mov rsi, rcx
mov ecx, 0x60
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x2f
movzx eax, word [rsp + rax + 0x80]
test eax, eax
je 0x1800715d1
mov dword [rsp + 0x2c], 1
jmp 0x1800715d9
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x180071642
mov dword [rsp + 0x24], 0
jmp 0x180071602
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x30
jge 0x180071642
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x80]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x80], ax
jmp 0x1800715f8
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640970], rax
mov dword [rsp + 0x28], 0
jmp 0x180071688
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x30
jge 0x1800716a0
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x80], cx
jmp 0x18007167e
mov dword [rsp + 0x60], 0
lea rax, [rsp + 0x68]
mov rdi, rax
xor eax, eax
mov ecx, 0x10
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x68]
mov rdi, rax
mov rsi, qword [rsp + 0x110]
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rax, qword [0x180640970]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x100]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18007172f
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x100]
call qword [rsp + 0x58]
nop
add rsp, 0xe8
pop rdi
pop rsi
ret
Function at 0x1800717b0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x1800717b0
mov dword [rsp + 0x20], r9d
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xe8
cmp qword [0x180640b30], 0
jne 0x1800718e5
lea rax, [rsp + 0x80]
lea rcx, str.LdJxbnbk_ibbofn_Ynx_ndch_oXxoeocgDcldfbkb
mov rdi, rax
mov rsi, rcx
mov ecx, 0x5e
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x2e
movzx eax, word [rsp + rax + 0x80]
test eax, eax
je 0x180071816
mov dword [rsp + 0x2c], 1
jmp 0x18007181e
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x180071887
mov dword [rsp + 0x24], 0
jmp 0x180071847
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x2f
jge 0x180071887
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x80]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x80], ax
jmp 0x18007183d
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640b30], rax
mov dword [rsp + 0x28], 0
jmp 0x1800718cd
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x2f
jge 0x1800718e5
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x80], cx
jmp 0x1800718c3
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x60], rax
movzx eax, byte [rsp + 0x110]
mov byte [rsp + 0x68], al
mov eax, dword [rsp + 0x118]
mov dword [rsp + 0x6c], eax
lea rax, [rsp + 0x70]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
mov rax, qword [0x180640b30]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x100]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18007196c
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x100]
call qword [rsp + 0x58]
nop
movzx eax, byte [rsp + 0x70]
add rsp, 0xe8
pop rdi
pop rsi
ret
Function at 0x1800798e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x1800798e0
movss dword [rsp + 0x18], xmm2
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xd8
cmp qword [0x180641000], 0
jne 0x180079a11
lea rax, [rsp + 0x80]
lea rcx, [0x1802895d0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x50
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x27
movzx eax, word [rsp + rax + 0x80]
test eax, eax
je 0x180079942
mov dword [rsp + 0x2c], 1
jmp 0x18007994a
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x1800799b3
mov dword [rsp + 0x24], 0
jmp 0x180079973
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x28
jge 0x1800799b3
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x80]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x80], ax
jmp 0x180079969
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180641000], rax
mov dword [rsp + 0x28], 0
jmp 0x1800799f9
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x28
jge 0x180079a11
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x80], cx
jmp 0x1800799ef
movss xmm0, dword [rsp + 0x100]
movss dword [rsp + 0x60], xmm0
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x74], 0
mov dword [rsp + 0x70], 0
mov rax, qword [0x180641000]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xf0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x180079a8b
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xf0]
call qword [rsp + 0x58]
nop
lea rax, [rsp + 0x68]
mov rdi, qword [rsp + 0xf8]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0xf8]
add rsp, 0xd8
pop rdi
pop rsi
ret
Function at 0x18007a220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x18007a220
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x118
cmp qword [0x180640ec0], 0
jne 0x18007a350
lea rax, [rsp + 0xc0]
lea rcx, [0x180288e90]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x48
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x23
movzx eax, word [rsp + rax + 0xc0]
test eax, eax
je 0x18007a281
mov dword [rsp + 0x2c], 1
jmp 0x18007a289
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x18007a2f2
mov dword [rsp + 0x24], 0
jmp 0x18007a2b2
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x24
jge 0x18007a2f2
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0xc0]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0xc0], ax
jmp 0x18007a2a8
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640ec0], rax
mov dword [rsp + 0x28], 0
jmp 0x18007a338
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x24
jge 0x18007a350
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0xc0], cx
jmp 0x18007a32e
mov rax, qword [rsp + 0x138]
movsd xmm0, qword [rax + 8]
movsd qword [rsp + 0x58], xmm0
mov rax, qword [rsp + 0x138]
movsd xmm0, qword [rax]
movsd qword [rsp + 0x50], xmm0
movsd xmm0, qword [rsp + 0x50]
movsd qword [rsp + 0x80], xmm0
movsd xmm0, qword [rsp + 0x58]
movsd qword [rsp + 0x88], xmm0
xorps xmm0, xmm0
movsd qword [rsp + 0x90], xmm0
mov rax, qword [rsp + 0x140]
movsd xmm0, qword [rax + 8]
movsd qword [rsp + 0x68], xmm0
mov rax, qword [rsp + 0x140]
movsd xmm0, qword [rax]
movsd qword [rsp + 0x60], xmm0
movsd xmm0, qword [rsp + 0x60]
movsd qword [rsp + 0x98], xmm0
movsd xmm0, qword [rsp + 0x68]
movsd qword [rsp + 0xa0], xmm0
xorps xmm0, xmm0
movsd qword [rsp + 0xa8], xmm0
lea rax, [rsp + 0xb0]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
mov rax, qword [0x180640ec0]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x130]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18007a457
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x78], rax
lea r8, [rsp + 0x80]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x130]
call qword [rsp + 0x78]
nop
movsd xmm0, qword [rsp + 0xb0]
add rsp, 0x118
pop rdi
pop rsi
ret
Function at 0x18007a500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x18007a500
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xf8
cmp qword [0x180640eb0], 0
jne 0x18007a630
lea rax, [rsp + 0xa0]
lea rcx, [0x180288e30]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x44
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x21
movzx eax, word [rsp + rax + 0xa0]
test eax, eax
je 0x18007a561
mov dword [rsp + 0x2c], 1
jmp 0x18007a569
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x18007a5d2
mov dword [rsp + 0x24], 0
jmp 0x18007a592
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x22
jge 0x18007a5d2
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0xa0]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0xa0], ax
jmp 0x18007a588
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640eb0], rax
mov dword [rsp + 0x28], 0
jmp 0x18007a618
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x22
jge 0x18007a630
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0xa0], cx
jmp 0x18007a60e
lea rax, [rsp + 0x60]
mov rdi, rax
mov rsi, qword [rsp + 0x118]
mov ecx, 0x18
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x78]
mov rdi, rax
mov rsi, qword [rsp + 0x120]
mov ecx, 0x18
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x90]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
mov rax, qword [0x180640eb0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x110]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18007a6c4
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x110]
call qword [rsp + 0x58]
nop
movsd xmm0, qword [rsp + 0x90]
add rsp, 0xf8
pop rdi
pop rsi
ret