joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18005b470
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x18005b470
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xe8
cmp qword [0x180640d00], 0
jne 0x18005b59b
lea rax, [rsp + 0x80]
lea rcx, str.Ld__krixHcd
mov rdi, rax
mov rsi, rcx
mov ecx, 0x5a
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x2c
movzx eax, word [rsp + rax + 0x80]
test eax, eax
je 0x18005b4cc
mov dword [rsp + 0x2c], 1
jmp 0x18005b4d4
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x18005b53d
mov dword [rsp + 0x24], 0
jmp 0x18005b4fd
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x2d
jge 0x18005b53d
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x80]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x80], ax
jmp 0x18005b4f3
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640d00], rax
mov dword [rsp + 0x28], 0
jmp 0x18005b583
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x2d
jge 0x18005b59b
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x80], cx
jmp 0x18005b579
xorps xmm0, xmm0
movsd qword [rsp + 0x60], xmm0
xorps xmm0, xmm0
movsd qword [rsp + 0x68], xmm0
xorps xmm0, xmm0
movsd qword [rsp + 0x70], xmm0
mov rax, qword [0x180640d00]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x100]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18005b608
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x100]
call qword [rsp + 0x58]
nop
lea rax, [rsp + 0x60]
mov rdi, qword [rsp + 0x108]
mov rsi, rax
mov ecx, 0x18
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x108]
add rsp, 0xe8
pop rdi
pop rsi
ret
Function at 0x18005b710
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x18005b710
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xb8
cmp qword [0x1806409c0], 0
jne 0x18005b828
lea rax, [rsp + 0x70]
lea rcx, str.ZyegbxciIdazdboex_LiFmncj__n
mov rdi, rax
mov rsi, rcx
mov ecx, 0x3e
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x1e
movzx eax, word [rsp + rax + 0x70]
test eax, eax
je 0x18005b765
mov dword [rsp + 0x2c], 1
jmp 0x18005b76d
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x18005b7d0
mov dword [rsp + 0x24], 0
jmp 0x18005b796
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x1f
jge 0x18005b7d0
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x70]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x70], ax
jmp 0x18005b78c
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x1806409c0], rax
mov dword [rsp + 0x28], 0
jmp 0x18005b813
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x1f
jge 0x18005b828
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x70], cx
jmp 0x18005b809
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0x60], eax
lea rax, [rsp + 0x68]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
mov rax, qword [0x1806409c0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xd0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18005b896
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xd0]
call qword [rsp + 0x58]
nop
mov rax, qword [rsp + 0x68]
add rsp, 0xb8
pop rdi
pop rsi
ret
Function at 0x18005b910
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x18005b910
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xb8
cmp qword [0x1806409f0], 0
jne 0x18005ba29
lea rax, [rsp + 0x70]
lea rcx, [0x1802870e0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x36
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x1a
movzx eax, word [rsp + rax + 0x70]
test eax, eax
je 0x18005b966
mov dword [rsp + 0x2c], 1
jmp 0x18005b96e
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x18005b9d1
mov dword [rsp + 0x24], 0
jmp 0x18005b997
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x1b
jge 0x18005b9d1
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x70]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x70], ax
jmp 0x18005b98d
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov qword [0x1806409f0], rax
mov dword [rsp + 0x28], 0
jmp 0x18005ba14
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x1b
jge 0x18005ba29
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x70], cx
jmp 0x18005ba0a
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x4c], 0
mov dword [rsp + 0x48], 0
mov rax, qword [0x1806409f0]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0xd0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18005ba94
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0xd0]
call qword [rsp + 0x68]
nop
lea rax, [rsp + 0x40]
mov rdi, qword [rsp + 0xd8]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0xd8]
add rsp, 0xb8
pop rdi
pop rsi
ret
Function at 0x18005bb30
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x18005bb30
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xd8
cmp qword [0x180640a70], 0
jne 0x18005bc44
lea rax, [rsp + 0x60]
lea rcx, [0x180287440]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x6c
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x35
movzx eax, word [rsp + rax + 0x60]
test eax, eax
je 0x18005bb81
mov dword [rsp + 0x2c], 1
jmp 0x18005bb89
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x18005bbec
mov dword [rsp + 0x24], 0
jmp 0x18005bbb2
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x36
jge 0x18005bbec
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x60]
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x34]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x60], ax
jmp 0x18005bba8
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640a70], rax
mov dword [rsp + 0x28], 0
jmp 0x18005bc2f
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x36
jge 0x18005bc44
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x60], cx
jmp 0x18005bc25
lea rax, [rsp + 0x30]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov rax, qword [0x180640a70]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xf0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18005bca7
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x30]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xf0]
call qword [rsp + 0x58]
nop
movss xmm0, dword [rsp + 0x30]
add rsp, 0xd8
pop rdi
pop rsi
ret
Function at 0x18005bd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x18005bd20
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xa8
cmp qword [0x180640cd0], 0
jne 0x18005be34
lea rax, [rsp + 0x60]
lea rcx, [0x1802882c8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x36
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x1a
movzx eax, word [rsp + rax + 0x60]
test eax, eax
je 0x18005bd71
mov dword [rsp + 0x2c], 1
jmp 0x18005bd79
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x18005bddc
mov dword [rsp + 0x24], 0
jmp 0x18005bda2
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x1b
jge 0x18005bddc
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x60]
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x34]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x60], ax
jmp 0x18005bd98
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640cd0], rax
mov dword [rsp + 0x28], 0
jmp 0x18005be1f
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x1b
jge 0x18005be34
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x60], cx
jmp 0x18005be15
lea rax, [rsp + 0x30]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov rax, qword [0x180640cd0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xc0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18005be97
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x30]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xc0]
call qword [rsp + 0x58]
nop
movss xmm0, dword [rsp + 0x30]
add rsp, 0xa8
pop rdi
pop rsi
ret
Function at 0x18005bf10
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x18005bf10
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xa8
cmp qword [0x180640b60], 0
jne 0x18005c024
lea rax, [rsp + 0x60]
lea rcx, str.LdJxbnbk_ibbofn_MnxGjtBnmf
mov rdi, rax
mov rsi, rcx
mov ecx, 0x3e
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x1e
movzx eax, word [rsp + rax + 0x60]
test eax, eax
je 0x18005bf61
mov dword [rsp + 0x2c], 1
jmp 0x18005bf69
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x18005bfcc
mov dword [rsp + 0x24], 0
jmp 0x18005bf92
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x1f
jge 0x18005bfcc
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x60]
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x34]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x60], ax
jmp 0x18005bf88
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640b60], rax
mov dword [rsp + 0x28], 0
jmp 0x18005c00f
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x1f
jge 0x18005c024
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x60], cx
jmp 0x18005c005
lea rax, [rsp + 0x30]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov rax, qword [0x180640b60]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xc0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18005c087
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x30]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xc0]
call qword [rsp + 0x58]
nop
movss xmm0, dword [rsp + 0x30]
add rsp, 0xa8
pop rdi
pop rsi
ret
Function at 0x18005c100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x18005c100
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xd8
cmp qword [0x180640d70], 0
jne 0x18005c22b
lea rax, [rsp + 0x80]
lea rcx, str.ZgmsnIdbycfgix_Ko
mov rdi, rax
mov rsi, rcx
mov ecx, 0x44
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x21
movzx eax, word [rsp + rax + 0x80]
test eax, eax
je 0x18005c15c
mov dword [rsp + 0x2c], 1
jmp 0x18005c164
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x18005c1cd
mov dword [rsp + 0x24], 0
jmp 0x18005c18d
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x22
jge 0x18005c1cd
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x80]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x80], ax
jmp 0x18005c183
lea rax, [rsp + 0x80]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov qword [0x180640d70], rax
mov dword [rsp + 0x28], 0
jmp 0x18005c213
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x22
jge 0x18005c22b
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x80], cx
jmp 0x18005c209
lea rax, [rsp + 0x40]
mov rdi, rax
xor eax, eax
mov ecx, 0xc
rep stosb byte [rdi], al
mov rax, qword [0x180640d70]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0xf0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18005c28e
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0xf0]
call qword [rsp + 0x68]
nop
cvtss2sd xmm0, dword [rsp + 0x44]
movsd qword [rsp + 0x78], xmm0
cvtss2sd xmm0, dword [rsp + 0x40]
movsd qword [rsp + 0x70], xmm0
mov rax, qword [rsp + 0xf8]
movsd xmm0, qword [rsp + 0x70]
movsd qword [rax], xmm0
mov rax, qword [rsp + 0xf8]
movsd xmm0, qword [rsp + 0x78]
movsd qword [rax + 8], xmm0
mov rax, qword [rsp + 0xf8]
add rsp, 0xd8
pop rdi
pop rsi
ret
Function at 0x18005c360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x18005c360
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xc8
cmp qword [0x180640b00], 0
jne 0x18005c48b
lea rax, [rsp + 0x80]
lea rcx, str.Ldikcd_Ko
mov rdi, rax
mov rsi, rcx
mov ecx, 0x3a
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x1c
movzx eax, word [rsp + rax + 0x80]
test eax, eax
je 0x18005c3bc
mov dword [rsp + 0x2c], 1
jmp 0x18005c3c4
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x18005c42d
mov dword [rsp + 0x24], 0
jmp 0x18005c3ed
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x1d
jge 0x18005c42d
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x80]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x80], ax
jmp 0x18005c3e3
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640b00], rax
mov dword [rsp + 0x28], 0
jmp 0x18005c473
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x1d
jge 0x18005c48b
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x80], cx
jmp 0x18005c469
lea rax, [rsp + 0x60]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
xorps xmm0, xmm0
movsd qword [rsp + 0x68], xmm0
xorps xmm0, xmm0
movsd qword [rsp + 0x70], xmm0
xorps xmm0, xmm0
movsd qword [rsp + 0x78], xmm0
mov rax, qword [0x180640b00]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xe0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18005c509
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xe0]
call qword [rsp + 0x58]
nop
lea rax, [rsp + 0x68]
mov rdi, qword [rsp + 0xe8]
mov rsi, rax
mov ecx, 0x18
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0xe8]
add rsp, 0xc8
pop rdi
pop rsi
ret
Function at 0x18005d0d0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x18005d0d0
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xd8
cmp qword [0x180640fd0], 0
jne 0x18005d200
lea rax, [rsp + 0x80]
lea rcx, [0x1802894c0]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x44
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x21
movzx eax, word [rsp + rax + 0x80]
test eax, eax
je 0x18005d131
mov dword [rsp + 0x2c], 1
jmp 0x18005d139
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x18005d1a2
mov dword [rsp + 0x24], 0
jmp 0x18005d162
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x22
jge 0x18005d1a2
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x80]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x80], ax
jmp 0x18005d158
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640fd0], rax
mov dword [rsp + 0x28], 0
jmp 0x18005d1e8
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x22
jge 0x18005d200
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x80], cx
jmp 0x18005d1de
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x74], 0
mov dword [rsp + 0x70], 0
mov rax, qword [0x180640fd0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xf0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18005d278
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xf0]
call qword [rsp + 0x58]
nop
lea rax, [rsp + 0x68]
mov rdi, qword [rsp + 0xf8]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0xf8]
add rsp, 0xd8
pop rdi
pop rsi
ret
Function at 0x18005d6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x18005d6a0
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xb8
cmp qword [0x180640a90], 0
jne 0x18005d7b4
lea rax, [rsp + 0x60]
lea rcx, str.LdikcdYmdlin_Ko
mov rdi, rax
mov rsi, rcx
mov ecx, 0x50
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x27
movzx eax, word [rsp + rax + 0x60]
test eax, eax
je 0x18005d6f1
mov dword [rsp + 0x2c], 1
jmp 0x18005d6f9
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x18005d75c
mov dword [rsp + 0x24], 0
jmp 0x18005d722
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x28
jge 0x18005d75c
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x60]
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x34]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x60], ax
jmp 0x18005d718
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640a90], rax
mov dword [rsp + 0x28], 0
jmp 0x18005d79f
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x28
jge 0x18005d7b4
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x60], cx
jmp 0x18005d795
lea rax, [rsp + 0x30]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov rax, qword [0x180640a90]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xd0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18005d817
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x30]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xd0]
call qword [rsp + 0x58]
nop
movss xmm0, dword [rsp + 0x30]
add rsp, 0xb8
pop rdi
pop rsi
ret
Function at 0x18005d890
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x18005d890
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xc8
cmp qword [0x180640fe0], 0
jne 0x18005d9c0
lea rax, [rsp + 0x80]
lea rcx, [0x180289520]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
mov eax, 2
imul rax, rax, 0x1f
movzx eax, word [rsp + rax + 0x80]
test eax, eax
je 0x18005d8f1
mov dword [rsp + 0x2c], 1
jmp 0x18005d8f9
mov dword [rsp + 0x2c], 0
movzx eax, byte [rsp + 0x2c]
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
movzx eax, al
test eax, eax
je 0x18005d962
mov dword [rsp + 0x24], 0
jmp 0x18005d922
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0x20
jge 0x18005d962
movsxd rax, dword [rsp + 0x24]
movzx eax, word [rsp + rax*2 + 0x80]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
add eax, 0xa
mov ecx, dword [rsp + 0x30]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x24]
mov word [rsp + rcx*2 + 0x80], ax
jmp 0x18005d918
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
xor r9d, r9d
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180002662
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [0x180640fe0], rax
mov dword [rsp + 0x28], 0
jmp 0x18005d9a8
mov eax, dword [rsp + 0x28]
inc eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0x20
jge 0x18005d9c0
movsxd rax, dword [rsp + 0x28]
xor ecx, ecx
mov word [rsp + rax*2 + 0x80], cx
jmp 0x18005d99e
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x74], 0
mov dword [rsp + 0x70], 0
mov rax, qword [0x180640fe0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xe0]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18005da38
mov eax, 8
imul rax, rax, 0x4f
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xe0]
call qword [rsp + 0x58]
nop
lea rax, [rsp + 0x68]
mov rdi, qword [rsp + 0xe8]
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0xe8]
add rsp, 0xc8
pop rdi
pop rsi
ret