joyce8/EMBER2024-capa huggingface dataset:
Function at 0x6602a6f0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602a7db
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0xa50deb87
mov dword [esp + 0x16], 0x444f626b
mov dword [esp + 0x1a], 0x5010501
mov dword [esp + 0x1c], 0x5070501
mov dword [esp + 0x20], 0x7070107
xor eax, eax
jmp 0x6602a75b
movzx edi, byte [esp + ebx + 0x12]
sub edi, edx
lea edx, [edi + 0x2c]
mov byte [esp + ebp + 0x12], dl
lea edx, [esi + 0x2c]
mov byte [esp + ebx + 0x12], dl
add eax, 2
cmp eax, 0xa
jge 0x6602a78b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6602a7ce
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
sub esi, edx
cmp ebx, 8
jb 0x6602a743
jmp 0x6602a7c2
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x6602a7a9
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x6602a79f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.6602a6f0

Function at 0x6602a7f0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602a8db
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0xb7d17020
mov dword [esp + 0x16], 0xb8dc9d33
mov dword [esp + 0x1a], 0x1050602
mov dword [esp + 0x1c], 0x7000105
mov dword [esp + 0x20], 0x5020404
xor eax, eax
jmp 0x6602a85b
movzx edi, byte [esp + ebx + 0x12]
sub edi, edx
lea edx, [edi + 5]
mov byte [esp + ebp + 0x12], dl
lea edx, [esi + 5]
mov byte [esp + ebx + 0x12], dl
add eax, 2
cmp eax, 0xa
jge 0x6602a88b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6602a8ce
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
sub esi, edx
cmp ebx, 8
jb 0x6602a843
jmp 0x6602a8c2
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x6602a8a9
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x6602a89f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.6602a7f0
Function at 0x6602aff0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602b0d2
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x10], 0xeb679d6
mov dword [esp + 0x14], 0x3801c445
lea edi, [esp + 0x18]
lea esi, [0x661eefac]
call fcn.65f65002
xor eax, eax
jmp 0x6602b050
movzx edi, byte [esp + ebx + 0x10]
lea edx, [edi + edx + 0x67]
mov byte [esp + ebp + 0x10], dl
xchg esi, eax
mov byte [esp + ebx + 0x10], al
xchg esi, eax
add eax, 2
cmp eax, 0xc
jge 0x6602b082
movzx edx, byte [esp + eax + 0x18]
movzx ebx, byte [esp + eax + 0x19]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6602b0c5
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x10]
lea esi, [esi + edx + 0x67]
cmp ebx, 8
jb 0x6602b03a
jmp 0x6602b0b9
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
xor eax, eax
jmp 0x6602b0a0
movzx ecx, byte [esp + eax + 0x10]
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 8
jl 0x6602b096
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.6602aff0

Function at 0x6602c070
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602c152
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x10], 0x2b4419b8
mov dword [esp + 0x14], 0x22662af3
lea edi, [esp + 0x18]
lea esi, [0x661eefb8]
call fcn.65f65002
xor eax, eax
jmp 0x6602c0d0
movzx edi, byte [esp + ebx + 0x10]
lea edx, [edi + edx - 0x29]
mov byte [esp + ebp + 0x10], dl
xchg esi, eax
mov byte [esp + ebx + 0x10], al
xchg esi, eax
add eax, 2
cmp eax, 0xc
jge 0x6602c102
movzx edx, byte [esp + eax + 0x18]
movzx ebx, byte [esp + eax + 0x19]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6602c145
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x10]
lea esi, [esi + edx - 0x29]
cmp ebx, 8
jb 0x6602c0ba
jmp 0x6602c139
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
xor eax, eax
jmp 0x6602c120
movzx ecx, byte [esp + eax + 0x10]
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 8
jl 0x6602c116
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.6602c070
Function at 0x6602c300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602c3e3
sub esp, 0x20
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], 0xda6937a3
mov dword [esp + 0x1c], 0x808358cd
mov dword [esp + 8], 0x1030601
mov dword [esp + 0xc], 0x3060305
xor eax, eax
jmp 0x6602c363
movzx edi, byte [esp + ebx + 0x18]
sub edi, edx
lea edx, [edi - 0x54]
mov byte [esp + ebp + 0x18], dl
lea edx, [esi - 0x54]
mov byte [esp + ebx + 0x18], dl
add eax, 2
cmp eax, 8
jge 0x6602c393
movzx edx, byte [esp + eax + 8]
movzx ebx, byte [esp + eax + 9]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6602c3d6
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x18]
sub esi, edx
cmp ebx, 8
jb 0x6602c34b
jmp 0x6602c3ca
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
xor eax, eax
jmp 0x6602c3b1
movzx ecx, byte [esp + eax + 0x18]
mov byte [esp + eax + 0x10], cl
inc eax
cmp eax, 8
jl 0x6602c3a7
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
add esp, 0x20
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.6602c300

Function at 0x6602d1f0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602d2d3
sub esp, 0x20
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], 0xadc1c390
mov dword [esp + 0x1c], 0xb57ea3ac
mov dword [esp + 8], 0x6030702
mov dword [esp + 0xc], 0x2050501
xor eax, eax
jmp 0x6602d251
movzx edi, byte [esp + ebx + 0x18]
lea edx, [edi + edx - 0x41]
mov byte [esp + ebp + 0x18], dl
xchg esi, eax
mov byte [esp + ebx + 0x18], al
xchg esi, eax
add eax, 2
cmp eax, 8
jge 0x6602d283
movzx edx, byte [esp + eax + 8]
movzx ebx, byte [esp + eax + 9]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6602d2c6
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x18]
lea esi, [esi + edx - 0x41]
cmp ebx, 8
jb 0x6602d23b
jmp 0x6602d2ba
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
xor eax, eax
jmp 0x6602d2a1
movzx ecx, byte [esp + eax + 0x18]
mov byte [esp + eax + 0x10], cl
inc eax
cmp eax, 8
jl 0x6602d297
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
add esp, 0x20
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.6602d1f0
Function at 0x6602d2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602d3cb
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0xfa4b559b
mov dword [esp + 0x16], 0xa9031061
mov dword [esp + 0x1a], 0x7060005
mov dword [esp + 0x1c], 0x2000706
mov dword [esp + 0x20], 0x6070302
xor eax, eax
jmp 0x6602d34b
movzx edi, byte [esp + ebx + 0x12]
sub edi, edx
lea edx, [edi + 0x48]
mov byte [esp + ebp + 0x12], dl
lea edx, [esi + 0x48]
mov byte [esp + ebx + 0x12], dl
add eax, 2
cmp eax, 0xa
jge 0x6602d37b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6602d3be
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
sub esi, edx
cmp ebx, 8
jb 0x6602d333
jmp 0x6602d3b2
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x6602d399
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x6602d38f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.6602d2e0

Function at 0x6602de20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602df03
sub esp, 0x20
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], 0xb62f72e0
mov dword [esp + 0x1c], 0x650c29da
mov dword [esp + 8], 0x30307
mov dword [esp + 0xc], 0x3060001
xor eax, eax
jmp 0x6602de83
movzx edi, byte [esp + ebx + 0x18]
sub edi, edx
lea edx, [edi + 0x28]
mov byte [esp + ebp + 0x18], dl
lea edx, [esi + 0x28]
mov byte [esp + ebx + 0x18], dl
add eax, 2
cmp eax, 8
jge 0x6602deb3
movzx edx, byte [esp + eax + 8]
movzx ebx, byte [esp + eax + 9]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6602def6
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x18]
sub esi, edx
cmp ebx, 8
jb 0x6602de6b
jmp 0x6602deea
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
xor eax, eax
jmp 0x6602ded1
movzx ecx, byte [esp + eax + 0x18]
mov byte [esp + eax + 0x10], cl
inc eax
cmp eax, 8
jl 0x6602dec7
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
add esp, 0x20
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.6602de20
Function at 0x6602dfb0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602e09b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0xb0aca38b
mov dword [esp + 0x16], 0x35f174d9
mov dword [esp + 0x1a], 0x1000406
mov dword [esp + 0x1c], 0x4050100
mov dword [esp + 0x20], 0x3020702
xor eax, eax
jmp 0x6602e01b
movzx edi, byte [esp + ebx + 0x12]
sub edi, edx
lea edx, [edi - 0x1f]
mov byte [esp + ebp + 0x12], dl
lea edx, [esi - 0x1f]
mov byte [esp + ebx + 0x12], dl
add eax, 2
cmp eax, 0xa
jge 0x6602e04b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6602e08e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
sub esi, edx
cmp ebx, 8
jb 0x6602e003
jmp 0x6602e082
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x6602e069
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x6602e05f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.6602dfb0

Function at 0x6602e570
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602e653
sub esp, 0x20
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], 0xdc06e5b6
mov dword [esp + 0x1c], 0xea787486
mov dword [esp + 8], 0x5030605
mov dword [esp + 0xc], 0x5010206
xor eax, eax
jmp 0x6602e5d3
movzx edi, byte [esp + ebx + 0x18]
sub edi, edx
lea edx, [edi + 0x6c]
mov byte [esp + ebp + 0x18], dl
lea edx, [esi + 0x6c]
mov byte [esp + ebx + 0x18], dl
add eax, 2
cmp eax, 8
jge 0x6602e603
movzx edx, byte [esp + eax + 8]
movzx ebx, byte [esp + eax + 9]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6602e646
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x18]
sub esi, edx
cmp ebx, 8
jb 0x6602e5bb
jmp 0x6602e63a
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
xor eax, eax
jmp 0x6602e621
movzx ecx, byte [esp + eax + 0x18]
mov byte [esp + eax + 0x10], cl
inc eax
cmp eax, 8
jl 0x6602e617
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
add esp, 0x20
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.6602e570
Function at 0x6602e790
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602e872
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x10], 0x93665148
mov dword [esp + 0x14], 0x49c24e0c
lea edi, [esp + 0x18]
lea esi, [0x661eefc4]
call fcn.65f65002
xor eax, eax
jmp 0x6602e7f0
movzx edi, byte [esp + ebx + 0x10]
lea edx, [edi + edx + 0x19]
mov byte [esp + ebp + 0x10], dl
xchg esi, eax
mov byte [esp + ebx + 0x10], al
xchg esi, eax
add eax, 2
cmp eax, 0xc
jge 0x6602e822
movzx edx, byte [esp + eax + 0x18]
movzx ebx, byte [esp + eax + 0x19]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6602e865
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x10]
lea esi, [esi + edx + 0x19]
cmp ebx, 8
jb 0x6602e7da
jmp 0x6602e859
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
xor eax, eax
jmp 0x6602e840
movzx ecx, byte [esp + eax + 0x10]
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 8
jl 0x6602e836
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.6602e790

Function at 0x6602f650
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602f73b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0xa361c426
mov dword [esp + 0x16], 0xa86f5264
mov dword [esp + 0x1a], 0x70107
mov dword [esp + 0x1c], 0x5030007
mov dword [esp + 0x20], 0x5050106
xor eax, eax
jmp 0x6602f6b9
movzx edi, byte [esp + ebx + 0x12]
lea edx, [edi + edx + 0x6c]
mov byte [esp + ebp + 0x12], dl
xchg esi, eax
mov byte [esp + ebx + 0x12], al
xchg esi, eax
add eax, 2
cmp eax, 0xa
jge 0x6602f6eb
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6602f72e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
lea esi, [esi + edx + 0x6c]
cmp ebx, 8
jb 0x6602f6a3
jmp 0x6602f722
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x6602f709
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x6602f6ff
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.6602f650
Function at 0x6602fb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602fbeb
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0xcb617400
mov dword [esp + 0x16], 0x8732dc89
mov dword [esp + 0x1a], 0x2010707
mov dword [esp + 0x1c], 0x6050201
mov dword [esp + 0x20], 0x3000607
xor eax, eax
jmp 0x6602fb6b
movzx edi, byte [esp + ebx + 0x12]
sub edi, edx
lea edx, [edi - 0x29]
mov byte [esp + ebp + 0x12], dl
lea edx, [esi - 0x29]
mov byte [esp + ebx + 0x12], dl
add eax, 2
cmp eax, 0xa
jge 0x6602fb9b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6602fbde
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
sub esi, edx
cmp ebx, 8
jb 0x6602fb53
jmp 0x6602fbd2
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x6602fbb9
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x6602fbaf
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.6602fb00

Function at 0x66030020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6603010b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0xe595bb50
mov dword [esp + 0x16], 0x9e47ed74
mov dword [esp + 0x1a], 0x6030103
mov dword [esp + 0x1c], 0x5000603
mov dword [esp + 0x20], 0x7050203
xor eax, eax
jmp 0x66030089
movzx edi, byte [esp + ebx + 0x12]
lea edx, [edi + edx - 0x4f]
mov byte [esp + ebp + 0x12], dl
xchg esi, eax
mov byte [esp + ebx + 0x12], al
xchg esi, eax
add eax, 2
cmp eax, 0xa
jge 0x660300bb
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x660300fe
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
lea esi, [esi + edx - 0x4f]
cmp ebx, 8
jb 0x66030073
jmp 0x660300f2
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x660300d9
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x660300cf
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.66030020
Function at 0x66030820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x66030902
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x10], 0x1d626729
mov dword [esp + 0x14], 0x4fe956c3
lea edi, [esp + 0x18]
lea esi, [0x661eefd0]
call fcn.65f65002
xor eax, eax
jmp 0x66030882
movzx edi, byte [esp + ebx + 0x10]
sub edi, edx
lea edx, [edi - 0x2d]
mov byte [esp + ebp + 0x10], dl
lea edx, [esi - 0x2d]
mov byte [esp + ebx + 0x10], dl
add eax, 2
cmp eax, 0xc
jge 0x660308b2
movzx edx, byte [esp + eax + 0x18]
movzx ebx, byte [esp + eax + 0x19]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x660308f5
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x10]
sub esi, edx
cmp ebx, 8
jb 0x6603086a
jmp 0x660308e9
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
xor eax, eax
jmp 0x660308d0
movzx ecx, byte [esp + eax + 0x10]
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 8
jl 0x660308c6
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.66030820

Function at 0x66031580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6603166b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0x7021cd9
mov dword [esp + 0x16], 0x85b7419
mov dword [esp + 0x1a], 0x7040400
mov dword [esp + 0x1c], 0x6010704
mov dword [esp + 0x20], 0x6050704
xor eax, eax
jmp 0x660315e9
movzx edi, byte [esp + ebx + 0x12]
lea edx, [edi + edx - 0x66]
mov byte [esp + ebp + 0x12], dl
xchg esi, eax
mov byte [esp + ebx + 0x12], al
xchg esi, eax
add eax, 2
cmp eax, 0xa
jge 0x6603161b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6603165e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
lea esi, [esi + edx - 0x66]
cmp ebx, 8
jb 0x660315d3
jmp 0x66031652
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x66031639
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x6603162f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.66031580
Function at 0x66031ad0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x66031bb3
sub esp, 0x20
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], 0x1b57d874
mov dword [esp + 0x1c], 0xe79e20cf
mov dword [esp + 8], 0x30706
mov dword [esp + 0xc], 0x4030004
xor eax, eax
jmp 0x66031b31
movzx edi, byte [esp + ebx + 0x18]
lea edx, [edi + edx - 0x30]
mov byte [esp + ebp + 0x18], dl
xchg esi, eax
mov byte [esp + ebx + 0x18], al
xchg esi, eax
add eax, 2
cmp eax, 8
jge 0x66031b63
movzx edx, byte [esp + eax + 8]
movzx ebx, byte [esp + eax + 9]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x66031ba6
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x18]
lea esi, [esi + edx - 0x30]
cmp ebx, 8
jb 0x66031b1b
jmp 0x66031b9a
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
xor eax, eax
jmp 0x66031b81
movzx ecx, byte [esp + eax + 0x18]
mov byte [esp + eax + 0x10], cl
inc eax
cmp eax, 8
jl 0x66031b77
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
add esp, 0x20
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.66031ad0

Function at 0x660336a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x66033783
sub esp, 0x20
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], 0xe850b0d5
mov dword [esp + 0x1c], 0xc31f8434
mov dword [esp + 8], 0x5030606
mov dword [esp + 0xc], 0x5000205
xor eax, eax
jmp 0x66033701
movzx edi, byte [esp + ebx + 0x18]
lea edx, [edi + edx - 0x69]
mov byte [esp + ebp + 0x18], dl
xchg esi, eax
mov byte [esp + ebx + 0x18], al
xchg esi, eax
add eax, 2
cmp eax, 8
jge 0x66033733
movzx edx, byte [esp + eax + 8]
movzx ebx, byte [esp + eax + 9]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x66033776
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x18]
lea esi, [esi + edx - 0x69]
cmp ebx, 8
jb 0x660336eb
jmp 0x6603376a
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
xor eax, eax
jmp 0x66033751
movzx ecx, byte [esp + eax + 0x18]
mov byte [esp + eax + 0x10], cl
inc eax
cmp eax, 8
jl 0x66033747
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
add esp, 0x20
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.660336a0