joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180037520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov eax, 0x1b7c1a12
mov r8d, 0x25ac49aa
jmp 0x180037550
movzx eax, word [rsp + 4]
mov rdx, qword [rsp + 0x28]
mov word [rdx], ax
mov eax, 0x26d5af8e
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0x1b7c1a11
jg 0x180037590
cmp eax, 0xd10172d8
jg 0x1800375c0
cmp eax, 0x8bdb69ec
je 0x180037615
cmp eax, 0xca60151d
jne 0x1800376f0
mov qword [rsp + 0x18], rcx
mov rax, qword [rsp + 0x18]
add rax, 0x10
mov qword [rsp + 0x30], rax
mov eax, 0x24150d06
jmp 0x180037550
cmp eax, 0x25ac49a9
jg 0x1800375f0
cmp eax, 0x1b7c1a12
je 0x180037622
cmp eax, 0x24150d06
jne 0x180037550
mov rax, qword [rsp + 0x30]
mov word [rax], 0
mov eax, 0x9ac10189
jmp 0x180037550
cmp eax, 0xd10172d9
je 0x18003762c
cmp eax, 0xe2835b53
jne 0x180037550
mov qword [rsp + 8], r9
mov rax, qword [rsp + 8]
cmp rax, 7
mov eax, 0xca60151d
cmovb eax, r8d
jmp 0x180037550
cmp eax, 0x25ac49aa
je 0x1800376ca
cmp eax, 0x26d5af8e
jne 0x180037550
mov eax, 0xe2835b53
mov r9, qword [rsp + 0x20]
jmp 0x180037550
mov eax, 0xe2835b53
xor r9d, r9d
jmp 0x180037550
mov eax, 0x8bdb69ec
jmp 0x180037550
mov rax, qword [rsp + 0x28]
movzx r10d, word [rax]
mov r11, qword [rsp + 8]
mov eax, 0x7dc08983
nop
cmp eax, 0x4a22be85
je 0x180037531
cmp eax, 0x7dc08983
jne 0x180037640
mov dword [rsp + 0x14], r10d
mov eax, 0xb6c7733c
nop dword [rax]
cmp eax, 0x15cdd920
je 0x180037681
cmp eax, 0xb6c7733c
jne 0x180037660
movzx eax, word [rcx]
add ax, r11w
mov word [rsp + 2], ax
mov eax, 0x15cdd920
jmp 0x180037660
movzx eax, word [rsp + 2]
mov word [rsp + 6], ax
mov eax, 0x5ec8cbb6
cmp eax, 0x8ebbb30
je 0x1800376b6
cmp eax, 0x5ec8cbb6
jne 0x180037690
movzx eax, word [rsp + 6]
mov edx, dword [rsp + 0x14]
xor dx, ax
mov word [rsp + 2], dx
mov eax, 0x8ebbb30
jmp 0x180037690
movzx eax, word [rsp + 2]
mov word [rsp + 4], ax
mov eax, 0x4a22be85
jmp 0x180037640
mov rax, qword [rsp + 8]
add rax, 1
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
lea rax, [rcx + rax*2]
mov qword [rsp + 0x28], rax
mov eax, 0xd10172d9
jmp 0x180037550
cmp eax, 0x9ac10189
jne 0x180037550
mov rax, qword [rsp + 0x18]
add rax, 2
add rsp, 0x38
ret
Function at 0x18006cb90
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rsi
push rdi
sub rsp, 0x38
mov eax, 0xd1c56891
mov r8d, 0xb178ff8c
jmp 0x18006cbb0
mov eax, 0x859ccb5e
mov r9, qword [rsp + 0x20]
nop dword [rax]
cmp eax, 0xb3fec9ad
jle 0x18006cbe0
cmp eax, 0x2917ef7c
jg 0x18006cc10
cmp eax, 0xc6ed432f
je 0x18006cd03
cmp eax, 0xd1c56891
jne 0x18006cd59
mov eax, 0x2917ef7d
jmp 0x18006cbb0
cmp eax, 0xa63e472f
jg 0x18006ccd0
cmp eax, 0x859ccb5e
je 0x18006cd1d
cmp eax, 0x9aa1e0a7
jne 0x18006cbb0
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x28], rax
mov eax, 0xb3fec9ae
jmp 0x18006cbb0
cmp eax, 0x2917ef7d
je 0x18006cd39
cmp eax, 0x3cc7233a
jne 0x18006cbb0
mov rax, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x20]
movzx r10d, word [rax + rdx*2]
mov r11, qword [rsp + 8]
mov esi, 0xcc22224f
nop dword [rax + rax]
cmp esi, 0x176d51f8
je 0x18006cd46
cmp esi, 0xcc22224f
jne 0x18006cc40
mov dword [rsp + 0x14], r10d
mov esi, 0x5a027bc1
nop
cmp esi, 0x2a49c3e5
je 0x18006ccbb
cmp esi, 0x5a027bc1
jne 0x18006cc60
mov esi, 0x145fe085
nop word cs:[rax + rax]
nop
cmp esi, 0x5a16ca5f
je 0x18006cca3
cmp esi, 0x145fe085
jne 0x18006cc80
movzx esi, word [rcx]
add si, r11w
mov word [rsp + 6], si
mov esi, 0x5a16ca5f
jmp 0x18006cc80
movzx esi, word [rsp + 6]
mov edi, dword [rsp + 0x14]
xor di, si
mov word [rsp + 4], di
mov esi, 0x2a49c3e5
jmp 0x18006cc60
movzx esi, word [rsp + 4]
mov word [rsp + 2], si
mov esi, 0x176d51f8
jmp 0x18006cc40
cmp eax, 0xa63e4730
je 0x18006cba3
cmp eax, 0xb178ff8c
jne 0x18006cbb0
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 8]
add rax, 1
mov qword [rsp + 0x20], rax
mov eax, 0x3cc7233a
jmp 0x18006cbb0
mov qword [rsp + 0x18], rcx
mov rax, qword [rsp + 0x18]
mov word [rax + 6], 0
mov eax, 0x9aa1e0a7
jmp 0x18006cbb0
mov qword [rsp + 8], r9
mov rax, qword [rsp + 8]
cmp rax, 2
mov eax, 0xc6ed432f
cmovb eax, r8d
jmp 0x18006cbb0
mov eax, 0x859ccb5e
xor r9d, r9d
jmp 0x18006cbb0
movzx edi, word [rsp + 2]
mov word [rax + rdx*2], di
mov eax, 0xa63e4730
jmp 0x18006cbb0
cmp eax, 0xb3fec9ae
jne 0x18006cbb0
mov rax, qword [rsp + 0x28]
add rax, 2
add rsp, 0x38
pop rdi
pop rsi
ret
Function at 0x18006cd80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x40
mov eax, 0x66d7f84b
mov r8d, 0xd377d59d
jmp 0x18006cdb0
movzx eax, word [rsp + 4]
mov rdx, qword [rsp + 0x20]
mov word [rdx], ax
mov eax, 0xdca3b075
mov r9, qword [rsp + 0x18]
nop dword [rax + rax]
cmp eax, 0xdf3949be
jle 0x18006cde0
cmp eax, 0x5300b7ad
jle 0x18006ce10
cmp eax, 0x66d7f84b
je 0x18006ce92
cmp eax, 0x71ca5251
jne 0x18006cf59
mov eax, 0xdca3b075
xor r9d, r9d
jmp 0x18006cdb0
cmp eax, 0xd377d59c
jg 0x18006ce60
cmp eax, 0x89cd9c76
je 0x18006ce9c
cmp eax, 0xb26d13d2
jne 0x18006cdb0
mov rax, qword [rsp + 0x10]
mov word [rax + 0xc], 0
mov eax, 0x5300b7ae
jmp 0x18006cdb0
cmp eax, 0xdf3949bf
je 0x18006cf3b
cmp eax, 0x97ea069
jne 0x18006cdb0
mov rax, qword [rsp + 0x28]
add rax, 1
mov qword [rsp + 0x18], rax
mov rax, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x18]
lea rax, [rax + rdx*2]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
movzx eax, word [rax]
mov word [rsp + 2], ax
mov eax, 0x89cd9c76
jmp 0x18006cdb0
cmp eax, 0xd377d59d
je 0x18006cf4a
cmp eax, 0xdca3b075
jne 0x18006cdb0
mov qword [rsp + 0x28], r9
mov rax, qword [rsp + 0x28]
cmp rax, 5
mov eax, 0xdf3949bf
cmovb eax, r8d
jmp 0x18006cdb0
mov eax, 0x71ca5251
jmp 0x18006cdb0
movzx eax, word [rsp + 2]
mov edx, 0xa343601b
nop word cs:[rax + rax]
cmp edx, 0x4fd2db37
je 0x18006cd91
cmp edx, 0xa343601b
jne 0x18006ceb0
mov dword [rsp + 8], eax
mov edx, 0xb689cd09
nop dword [rax]
cmp edx, 0xd535a2aa
je 0x18006cf24
cmp edx, 0xb689cd09
jne 0x18006ced0
mov qword [rsp + 0x38], rcx
mov edx, 0x3fc54d7d
nop word [rax + rax]
cmp edx, 0xb1d6fe10
je 0x18006cf14
cmp edx, 0x3fc54d7d
jne 0x18006cef0
mov rdx, qword [rsp + 0x38]
movzx edx, word [rdx]
mov word [rsp + 6], dx
mov edx, 0xb1d6fe10
jmp 0x18006cef0
movzx edx, word [rsp + 6]
mov dword [rsp + 0xc], edx
mov edx, 0xd535a2aa
jmp 0x18006ced0
mov edx, dword [rsp + 8]
xor edx, dword [rsp + 0xc]
mov word [rsp + 4], dx
mov edx, 0x4fd2db37
jmp 0x18006ceb0
mov qword [rsp + 0x10], rcx
mov eax, 0xb26d13d2
jmp 0x18006cdb0
mov qword [rsp + 0x30], rcx
mov eax, 0x97ea069
jmp 0x18006cdb0
cmp eax, 0x5300b7ae
jne 0x18006cdb0
mov rax, qword [rsp + 0x10]
add rax, 2
add rsp, 0x40
ret
Function at 0x18006dac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x48
mov eax, 0x62a57fc3
mov r8d, 0xbd256a9b
jmp 0x18006daf0
movzx eax, word [rsp + 4]
mov rdx, qword [rsp + 0x28]
mov word [rdx], ax
mov eax, 0x29656706
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0x3f307df3
jle 0x18006db20
cmp eax, 0x765c8795
jg 0x18006db60
cmp eax, 0x4707764f
je 0x18006dbc5
cmp eax, 0x62a57fc3
jne 0x18006dca1
mov eax, 0x1fab8e3e
jmp 0x18006daf0
cmp eax, 0x1fab8e3d
jg 0x18006dba0
cmp eax, 0xac18a8f3
je 0x18006dbe3
cmp eax, 0xbd256a9b
jne 0x18006daf0
mov rax, qword [rsp + 0x30]
add rax, 1
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
lea rax, [rcx + rax*2]
mov qword [rsp + 0x28], rax
mov eax, 0xac18a8f3
jmp 0x18006daf0
cmp eax, 0x765c8796
je 0x18006dc77
cmp eax, 0x7a2bb2c8
jne 0x18006daf0
mov qword [rsp + 0x30], r9
mov rax, qword [rsp + 0x30]
cmp rax, 5
mov eax, 0x765c8796
cmovb eax, r8d
jmp 0x18006daf0
cmp eax, 0x1fab8e3e
je 0x18006dc94
cmp eax, 0x29656706
jne 0x18006daf0
mov eax, 0x7a2bb2c8
mov r9, qword [rsp + 0x20]
jmp 0x18006daf0
mov rax, qword [rsp + 0x38]
mov word [rax], 0
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x40], rax
mov eax, 0x3f307df4
jmp 0x18006daf0
mov rax, qword [rsp + 0x28]
movzx eax, word [rax]
mov edx, 0x2f30ac8a
cmp edx, 0x7810e9e
je 0x18006dad1
cmp edx, 0x2f30ac8a
jne 0x18006dbf0
mov dword [rsp + 0x14], eax
mov edx, 0xdb33b217
nop dword [rax]
cmp edx, 0x7175653
je 0x18006dc2c
cmp edx, 0xdb33b217
jne 0x18006dc10
mov qword [rsp + 8], rcx
mov edx, 0x7175653
jmp 0x18006dc10
mov rdx, qword [rsp + 8]
movzx edx, word [rdx]
mov word [rsp + 6], dx
mov edx, 0x3eab18db
nop
cmp edx, 0x4f678131
je 0x18006dc60
cmp edx, 0x3eab18db
jne 0x18006dc40
movzx edx, word [rsp + 6]
mov dword [rsp + 8], edx
mov edx, 0x4f678131
jmp 0x18006dc40
mov edx, dword [rsp + 0x14]
xor edx, dword [rsp + 8]
mov word [rsp + 4], dx
mov edx, 0x7810e9e
jmp 0x18006dbf0
mov qword [rsp + 0x18], rcx
mov rax, qword [rsp + 0x18]
add rax, 0xc
mov qword [rsp + 0x38], rax
mov eax, 0x4707764f
jmp 0x18006daf0
mov eax, 0x7a2bb2c8
xor r9d, r9d
jmp 0x18006daf0
cmp eax, 0x3f307df4
jne 0x18006daf0
mov rax, qword [rsp + 0x40]
add rax, 2
add rsp, 0x48
ret
Function at 0x18006e460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x48
mov eax, 0xcf4e8458
mov r8d, 0xe6794e3f
jmp 0x18006e490
mov eax, dword [rsp + 0x10]
xor eax, dword [rsp + 0x14]
mov rdx, qword [rsp + 0x28]
mov word [rdx], ax
mov eax, 0x90bdbd8d
mov r9, qword [rsp + 0x20]
nop dword [rax + rax]
cmp eax, 0xcf4e8457
jg 0x18006e4d0
cmp eax, 0xa53ed08d
jg 0x18006e510
cmp eax, 0x822f1097
je 0x18006e5e7
cmp eax, 0x90bdbd8d
jne 0x18006e62c
mov qword [rsp + 8], r9
mov rax, qword [rsp + 8]
cmp rax, 5
mov eax, 0x314eaab4
cmovb eax, r8d
jmp 0x18006e490
cmp eax, 0x314eaab3
jg 0x18006e550
cmp eax, 0xcf4e8458
je 0x18006e5fb
cmp eax, 0xe6794e3f
jne 0x18006e490
mov qword [rsp + 0x38], rcx
mov rax, qword [rsp + 8]
add rax, 1
mov qword [rsp + 0x20], rax
mov eax, 0xb048f161
jmp 0x18006e490
cmp eax, 0xa53ed08e
je 0x18006e605
cmp eax, 0xb048f161
jne 0x18006e490
mov rax, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x20]
lea rax, [rax + rdx*2]
mov qword [rsp + 0x28], rax
mov eax, 0x68a5f068
jmp 0x18006e490
cmp eax, 0x314eaab4
je 0x18006e612
cmp eax, 0x68a5f068
jne 0x18006e490
mov rax, qword [rsp + 0x28]
movzx edx, word [rax]
mov rax, qword [rsp + 8]
mov dword [rsp + 0x10], edx
mov edx, 0x171ea427
nop dword [rax]
cmp edx, 0x6fedf451
je 0x18006e471
cmp edx, 0x171ea427
jne 0x18006e580
movzx edx, word [rcx]
mov word [rsp + 6], dx
mov edx, 0xb3f4361d
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp edx, 0xcc7ac809
je 0x18006e5d4
cmp edx, 0xb3f4361d
jne 0x18006e5b0
movzx edx, word [rsp + 6]
add rdx, rax
mov qword [rsp + 0x40], rdx
mov edx, 0xcc7ac809
jmp 0x18006e5b0
mov rdx, qword [rsp + 0x40]
movzx edx, dx
mov dword [rsp + 0x14], edx
mov edx, 0x6fedf451
jmp 0x18006e580
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x30], rax
mov eax, 0x848d9f90
jmp 0x18006e490
mov eax, 0xa53ed08e
jmp 0x18006e490
mov eax, 0x90bdbd8d
xor r9d, r9d
jmp 0x18006e490
mov qword [rsp + 0x18], rcx
mov rax, qword [rsp + 0x18]
mov word [rax + 0xc], 0
mov eax, 0x822f1097
jmp 0x18006e490
cmp eax, 0x848d9f90
jne 0x18006e490
mov rax, qword [rsp + 0x30]
add rax, 2
add rsp, 0x48
ret
Function at 0x18006e810
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x48
mov eax, 0x7cb27c8d
mov r8d, 0xdd38c784
jmp 0x18006e830
mov eax, 0xbaafb5ec
mov r9, qword [rsp + 0x20]
nop dword [rax + rax]
cmp eax, 0xc7e778d9
jle 0x18006e860
cmp eax, 0x7692ec94
jg 0x18006e8c0
cmp eax, 0xd3c80b43
je 0x18006e821
cmp eax, 0xdd38c784
jne 0x18006e9b3
mov qword [rsp + 0x40], rcx
mov eax, 0xa781fbec
jmp 0x18006e830
cmp eax, 0xbaafb5eb
jg 0x18006e8e0
cmp eax, 0x8cea7960
je 0x18006e918
cmp eax, 0xa781fbec
jne 0x18006e830
mov rax, qword [rsp + 0x28]
add rax, 1
mov qword [rsp + 0x20], rax
mov r10, qword [rsp + 0x40]
mov r11, qword [rsp + 0x20]
movzx eax, word [r10 + r11*2]
mov dword [rsp + 0x14], eax
mov eax, 0x18526f2d
nop
cmp eax, 0x4ea35fa2
je 0x18006e925
cmp eax, 0x18526f2d
jne 0x18006e8a0
mov qword [rsp + 8], rcx
mov eax, 0x4ea35fa2
jmp 0x18006e8a0
cmp eax, 0x7692ec95
je 0x18006e966
cmp eax, 0x7cb27c8d
jne 0x18006e830
mov eax, 0x8cea7960
jmp 0x18006e830
cmp eax, 0xbaafb5ec
je 0x18006e983
cmp eax, 0xbddf1a9f
jne 0x18006e830
mov rax, qword [rsp + 0x30]
mov word [rax], 0
mov rax, qword [rsp + 0x18]
add rax, 2
mov qword [rsp + 0x38], rax
mov eax, 0xc7e778da
jmp 0x18006e830
mov eax, 0xbaafb5ec
xor r9d, r9d
jmp 0x18006e830
mov rax, qword [rsp + 8]
movzx eax, word [rax]
mov word [rsp + 6], ax
mov eax, 0xd8f7d3ff
nop word [rax + rax]
cmp eax, 0xc808d61
je 0x18006e99f
cmp eax, 0xd8f7d3ff
jne 0x18006e940
movzx eax, word [rsp + 6]
mov edx, dword [rsp + 0x14]
xor dx, ax
mov word [rsp + 8], dx
mov eax, 0xc808d61
jmp 0x18006e940
mov qword [rsp + 0x18], rcx
mov rax, qword [rsp + 0x18]
add rax, 6
mov qword [rsp + 0x30], rax
mov eax, 0xbddf1a9f
jmp 0x18006e830
mov qword [rsp + 0x28], r9
mov rax, qword [rsp + 0x28]
cmp rax, 2
mov eax, 0x7692ec95
cmovb eax, r8d
jmp 0x18006e830
movzx eax, word [rsp + 8]
mov word [r10 + r11*2], ax
mov eax, 0xd3c80b43
jmp 0x18006e830
cmp eax, 0xc7e778da
jne 0x18006e830
mov rax, qword [rsp + 0x38]
add rsp, 0x48
ret
Function at 0x18006eba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x48
mov eax, 0xc570cc33
mov r8d, 0xf33082c9
jmp 0x18006ebc0
mov eax, 0x2624a9af
mov r9, qword [rsp + 0x10]
nop dword [rax + rax]
cmp eax, 0xd3bdc61c
jle 0x18006ec00
cmp eax, 0x2624a9ae
jg 0x18006ec30
cmp eax, 0xf33082c9
je 0x18006ec80
cmp eax, 0x172306f6
jne 0x18006ed80
mov rax, qword [rsp + 0x18]
movzx edx, word [rsp + 4]
mov word [rax], dx
mov eax, 0x8efd7d8f
jmp 0x18006ebc0
cmp eax, 0xb46739ec
jg 0x18006ec60
cmp eax, 0x8efd7d8f
je 0x18006ebb1
cmp eax, 0x9805b73a
jne 0x18006ebc0
mov rax, qword [rsp + 0x28]
add rax, 2
mov qword [rsp + 0x30], rax
mov eax, 0xd3bdc61d
jmp 0x18006ebc0
cmp eax, 0x2624a9af
je 0x18006ed3b
cmp eax, 0x30cbf290
jne 0x18006ebc0
mov eax, 0x2624a9af
xor r9d, r9d
jmp 0x18006ebc0
cmp eax, 0xb46739ed
je 0x18006ed57
cmp eax, 0xc570cc33
jne 0x18006ebc0
mov eax, 0x30cbf290
jmp 0x18006ebc0
mov rax, qword [rsp + 0x20]
add rax, 1
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x10]
lea rax, [rcx + rax*2]
mov qword [rsp + 0x18], rax
mov rax, qword [rsp + 0x18]
movzx eax, word [rax]
mov edx, 0xff4f1707
nop dword [rax]
cmp edx, 0xc0c848e2
je 0x18006ed6c
cmp edx, 0xff4f1707
jne 0x18006ecb0
mov edx, 0x6505276d
nop dword [rax]
cmp edx, 0x1ab5965b
je 0x18006ed24
cmp edx, 0x6505276d
jne 0x18006ecd0
mov dword [rsp + 8], eax
mov qword [rsp + 0x38], rcx
mov edx, 0xdc46f306
nop
cmp edx, 0xc7fe706f
je 0x18006ed11
cmp edx, 0xdc46f306
jne 0x18006ecf0
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x40], rdx
mov edx, 0xc7fe706f
jmp 0x18006ecf0
mov rdx, qword [rsp + 0x40]
movzx edx, word [rdx]
mov dword [rsp + 0xc], edx
mov edx, 0x1ab5965b
jmp 0x18006ecd0
mov edx, dword [rsp + 8]
xor edx, dword [rsp + 0xc]
mov word [rsp + 6], dx
mov edx, 0xc0c848e2
jmp 0x18006ecb0
mov qword [rsp + 0x20], r9
mov rax, qword [rsp + 0x20]
cmp rax, 5
mov eax, 0xb46739ed
cmovb eax, r8d
jmp 0x18006ebc0
mov word [rcx + 0xc], 0
mov qword [rsp + 0x28], rcx
mov eax, 0x9805b73a
jmp 0x18006ebc0
movzx eax, word [rsp + 6]
mov word [rsp + 4], ax
mov eax, 0x172306f6
jmp 0x18006ebc0
cmp eax, 0xd3bdc61d
jne 0x18006ebc0
mov rax, qword [rsp + 0x30]
add rsp, 0x48
ret
Function at 0x18006f3d0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov eax, 0xc88193a1
mov r8d, 0x18965f1e
jmp 0x18006f400
movzx eax, word [rsp + 6]
mov rdx, qword [rsp + 0x28]
mov word [rdx], ax
mov eax, 0x25a44614
mov rdx, qword [rsp + 0x20]
nop dword [rax + rax]
cmp eax, 0x1b817d7a
jg 0x18006f450
cmp eax, 0xd7ffa585
jle 0x18006f480
cmp eax, 0xdf61d19f
je 0x18006f4cd
cmp eax, 0x18965f1e
jne 0x18006f5b3
mov rax, qword [rsp + 0x30]
add rax, 1
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
lea rax, [rcx + rax*2]
mov qword [rsp + 0x28], rax
mov eax, 0x5575fe35
jmp 0x18006f400
cmp eax, 0x272ff0f6
jg 0x18006f4a0
cmp eax, 0x1b817d7b
je 0x18006f4dc
cmp eax, 0x25a44614
jne 0x18006f400
mov qword [rsp + 0x30], rdx
mov rax, qword [rsp + 0x30]
cmp rax, 5
mov eax, 0xdf61d19f
cmovb eax, r8d
jmp 0x18006f400
cmp eax, 0xa60f69e7
je 0x18006f4f1
cmp eax, 0xc88193a1
jne 0x18006f400
mov eax, 0x272ff0f7
jmp 0x18006f400
cmp eax, 0x272ff0f7
je 0x18006f5a7
cmp eax, 0x5575fe35
jne 0x18006f400
mov rax, qword [rsp + 0x28]
movzx eax, word [rax]
mov word [rsp + 4], ax
mov eax, 0xa60f69e7
jmp 0x18006f400
mov qword [rsp + 0x18], rcx
mov eax, 0x1b817d7b
jmp 0x18006f400
mov rax, qword [rsp + 0x18]
mov word [rax + 0xc], 0
mov eax, 0xd7ffa586
jmp 0x18006f400
movzx eax, word [rsp + 4]
mov edx, 0x91c7387d
nop dword [rax + rax]
cmp edx, 0xa6138920
je 0x18006f3e1
cmp edx, 0x91c7387d
jne 0x18006f500
mov dword [rsp + 0x14], eax
mov qword [rsp + 8], rcx
mov edx, 0xa56c5491
nop word cs:[rax + rax]
nop dword [rax]
cmp edx, 0x5a59db82
je 0x18006f554
cmp edx, 0xa56c5491
jne 0x18006f530
mov rdx, qword [rsp + 8]
movzx edx, word [rdx]
mov word [rsp + 2], dx
mov edx, 0x5a59db82
jmp 0x18006f530
movzx edx, word [rsp + 2]
mov word [rsp + 2], dx
mov edx, 0xfe06158c
nop word cs:[rax + rax]
nop dword [rax]
cmp edx, 0x93376fae
je 0x18006f590
cmp edx, 0xfe06158c
jne 0x18006f570
movzx edx, word [rsp + 2]
mov dword [rsp + 8], edx
mov edx, 0x93376fae
jmp 0x18006f570
mov edx, dword [rsp + 0x14]
xor edx, dword [rsp + 8]
mov word [rsp + 6], dx
mov edx, 0xa6138920
jmp 0x18006f500
mov eax, 0x25a44614
xor edx, edx
jmp 0x18006f400
cmp eax, 0xd7ffa586
jne 0x18006f400
mov rax, qword [rsp + 0x18]
add rax, 2
add rsp, 0x38
ret
Function at 0x18006f5d0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x48
mov eax, 0xfd9f8e2e
mov r8d, 0x51b0e551
jmp 0x18006f600
movzx eax, word [rsp + 6]
mov rdx, qword [rsp + 0x20]
mov word [rdx], ax
mov eax, 0x1222ede3
mov rdx, qword [rsp + 0x18]
nop dword [rax + rax]
cmp eax, 0xc10a874
jg 0x18006f640
cmp eax, 0xd9804044
jle 0x18006f670
cmp eax, 0xfd9f8e2e
je 0x18006f6c2
cmp eax, 0x791d53f
jne 0x18006f7ac
mov rax, qword [rsp + 0x20]
movzx eax, word [rax]
mov word [rsp + 4], ax
mov eax, 0x98770d86
jmp 0x18006f600
cmp eax, 0x51b0e550
jg 0x18006f6a0
cmp eax, 0xc10a875
je 0x18006f6cc
cmp eax, 0x1222ede3
jne 0x18006f600
mov qword [rsp + 0x28], rdx
mov rax, qword [rsp + 0x28]
cmp rax, 5
mov eax, 0xb78412f7
cmovb eax, r8d
jmp 0x18006f600
cmp eax, 0x98770d86
je 0x18006f6ee
cmp eax, 0xb78412f7
jne 0x18006f600
mov qword [rsp + 0x10], rcx
mov rax, qword [rsp + 0x10]
add rax, 0xc
mov qword [rsp + 0x30], rax
mov eax, 0xc10a875
jmp 0x18006f600
cmp eax, 0x51b0e551
je 0x18006f786
cmp eax, 0x6f74c581
jne 0x18006f600
mov eax, 0x1222ede3
xor edx, edx
jmp 0x18006f600
mov eax, 0x6f74c581
jmp 0x18006f600
mov rax, qword [rsp + 0x30]
mov word [rax], 0
mov rax, qword [rsp + 0x10]
add rax, 2
mov qword [rsp + 0x38], rax
mov eax, 0xd9804045
jmp 0x18006f600
movzx eax, word [rsp + 4]
mov edx, 0xe6a176c8
nop dword [rax + rax]
cmp edx, 0xeeb5d673
je 0x18006f5e1
cmp edx, 0xe6a176c8
jne 0x18006f700
mov edx, 0xf34d9538
nop dword [rax]
cmp edx, 0x3fda02a1
je 0x18006f76f
cmp edx, 0xf34d9538
jne 0x18006f720
mov dword [rsp + 8], eax
mov edx, 0xb6792b80
nop dword [rax]
cmp edx, 0x4ba6a7a4
je 0x18006f75c
cmp edx, 0xb6792b80
jne 0x18006f740
mov qword [rsp + 0x40], rcx
mov edx, 0x4ba6a7a4
jmp 0x18006f740
mov rdx, qword [rsp + 0x40]
movzx edx, word [rdx]
mov dword [rsp + 0xc], edx
mov edx, 0x3fda02a1
jmp 0x18006f720
mov edx, dword [rsp + 8]
xor edx, dword [rsp + 0xc]
mov word [rsp + 6], dx
mov edx, 0xeeb5d673
jmp 0x18006f700
mov rax, qword [rsp + 0x28]
add rax, 1
mov qword [rsp + 0x18], rax
mov rax, qword [rsp + 0x18]
lea rax, [rcx + rax*2]
mov qword [rsp + 0x20], rax
mov eax, 0x791d53f
jmp 0x18006f600
cmp eax, 0xd9804045
jne 0x18006f600
mov rax, qword [rsp + 0x38]
add rsp, 0x48
ret
Function at 0x1800703a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rsi
sub rsp, 0x40
mov eax, 0x15f081fc
mov r8d, 0xd4f65313
jmp 0x1800703c0
mov eax, 0xaaf2ec86
mov r9, qword [rsp + 0x20]
nop dword [rax]
cmp eax, 0xf55c4eb3
jle 0x1800703f0
cmp eax, 0x40a6c91c
jle 0x180070430
cmp eax, 0x40a6c91d
je 0x180070530
cmp eax, 0x4b53d77c
jne 0x180070587
mov eax, 0xaaf2ec86
xor r9d, r9d
jmp 0x1800703c0
cmp eax, 0xd2490d2a
jg 0x180070450
cmp eax, 0xaaf2ec86
je 0x18007053a
cmp eax, 0xc1945496
jne 0x1800703c0
mov qword [rsp + 0x18], rcx
mov rax, qword [rsp + 0x18]
add rax, 0xc
mov qword [rsp + 0x28], rax
mov eax, 0xd2490d2b
jmp 0x1800703c0
cmp eax, 0xf55c4eb4
je 0x1800703b2
cmp eax, 0x15f081fc
jne 0x1800703c0
mov eax, 0x4b53d77c
jmp 0x1800703c0
cmp eax, 0xd2490d2b
je 0x180070556
cmp eax, 0xd4f65313
jne 0x1800703c0
mov rax, qword [rsp + 8]
add rax, 1
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
movzx r10d, word [rcx + rax*2]
mov r11, qword [rsp + 8]
mov edx, 0x27c4dc8f
nop dword [rax + rax]
cmp edx, 0xcb830b8b
je 0x180070574
cmp edx, 0x27c4dc8f
jne 0x180070490
mov edx, 0x208e40b1
nop dword [rax]
cmp edx, 0xd71c0afb
je 0x180070515
cmp edx, 0x208e40b1
jne 0x1800704b0
mov dword [rsp + 0x14], r10d
movzx edx, word [rcx]
mov word [rsp + 6], dx
mov edx, 0xd8f22ccb
nop word cs:[rax + rax]
nop dword [rax]
cmp edx, 0x33a2544a
je 0x180070501
cmp edx, 0xd8f22ccb
jne 0x1800704e0
movzx edx, word [rsp + 6]
mov qword [rsp + 0x38], rdx
mov edx, 0x33a2544a
jmp 0x1800704e0
mov rdx, qword [rsp + 0x38]
add edx, r11d
mov word [rsp + 4], dx
mov edx, 0xd71c0afb
jmp 0x1800704b0
movzx edx, word [rsp + 4]
mov esi, dword [rsp + 0x14]
xor si, dx
mov word [rsp + 2], si
mov edx, 0xcb830b8b
jmp 0x180070490
mov eax, 0xf55c4eb4
jmp 0x1800703c0
mov qword [rsp + 8], r9
mov rax, qword [rsp + 8]
cmp rax, 5
mov eax, 0xc1945496
cmovb eax, r8d
jmp 0x1800703c0
mov rax, qword [rsp + 0x28]
mov word [rax], 0
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x30], rax
mov eax, 0x7233b2ef
jmp 0x1800703c0
movzx edx, word [rsp + 2]
mov word [rcx + rax*2], dx
mov eax, 0x40a6c91d
jmp 0x1800703c0
cmp eax, 0x7233b2ef
jne 0x1800703c0
mov rax, qword [rsp + 0x30]
add rax, 2
add rsp, 0x40
pop rsi
ret
Function at 0x180070b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x50
mov eax, 0x8948292d
mov r8d, 0x679d5173
jmp 0x180070b50
mov eax, dword [rsp + 0x1c]
xor eax, dword [rsp + 0x10]
mov word [rsp + 6], ax
mov eax, 0x1032d5bc
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0x2d9ce4f4
jg 0x180070b90
cmp eax, 0xc9dc9d8e
jle 0x180070bc0
cmp eax, 0xfc060eb7
je 0x180070c23
cmp eax, 0x1032d5bc
jne 0x180070cf2
mov rax, qword [rsp + 0x30]
movzx edx, word [rsp + 6]
mov word [rax], dx
mov eax, 0xfc060eb7
mov r9, qword [rsp + 0x28]
jmp 0x180070b50
cmp eax, 0x679d5172
jg 0x180070bf0
cmp eax, 0x2d9ce4f5
je 0x180070c3f
cmp eax, 0x5bf21beb
jne 0x180070b50
mov rax, qword [rsp + 0x40]
mov word [rax], 0
mov eax, 0xc9dc9d8f
jmp 0x180070b50
cmp eax, 0x8948292d
je 0x180070c8f
cmp eax, 0xabf75e86
jne 0x180070b50
mov eax, 0xfc060eb7
xor r9d, r9d
jmp 0x180070b50
cmp eax, 0x679d5173
je 0x180070c99
cmp eax, 0x70c3d713
jne 0x180070b50
mov qword [rsp + 0x20], rcx
mov rax, qword [rsp + 0x20]
add rax, 0xc
mov qword [rsp + 0x40], rax
mov eax, 0x5bf21beb
jmp 0x180070b50
mov qword [rsp + 0x38], r9
mov rax, qword [rsp + 0x38]
cmp rax, 5
mov eax, 0x70c3d713
cmovb eax, r8d
jmp 0x180070b50
mov rax, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x28]
lea rax, [rax + rdx*2]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
movzx eax, word [rax]
mov dword [rsp + 0x1c], eax
mov qword [rsp + 8], rcx
mov eax, 0xe6d2b66a
nop dword [rax + rax]
cmp eax, 0x6cb399d4
je 0x180070cb6
cmp eax, 0xe6d2b66a
jne 0x180070c70
mov rax, qword [rsp + 8]
mov qword [rsp + 0x10], rax
mov eax, 0x6cb399d4
jmp 0x180070c70
mov eax, 0xabf75e86
jmp 0x180070b50
mov qword [rsp + 0x48], rcx
mov rax, qword [rsp + 0x38]
add rax, 1
mov qword [rsp + 0x28], rax
mov eax, 0x2d9ce4f5
jmp 0x180070b50
mov rax, qword [rsp + 0x10]
movzx eax, word [rax]
mov word [rsp + 8], ax
mov eax, 0x69b940f8
nop dword [rax + rax]
cmp eax, 0xde6572a2
je 0x180070b31
cmp eax, 0x69b940f8
jne 0x180070cd0
movzx eax, word [rsp + 8]
mov dword [rsp + 0x10], eax
mov eax, 0xde6572a2
jmp 0x180070cd0
cmp eax, 0xc9dc9d8f
jne 0x180070b50
mov rax, qword [rsp + 0x20]
add rax, 2
add rsp, 0x50
ret