joyce8/EMBER2024-capa huggingface dataset:
Function at 0x65ff7d30
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x65ff7e0c
sub esp, 0x28
mov dword [esp + 0x1e], 0x533e442f
mov dword [esp + 0x20], 0x6328533e
mov dword [esp + 0x24], 0x4b2e1a3d
mov dword [esp + 0x14], 0x6060104
mov dword [esp + 0x16], 0x7020606
mov dword [esp + 0x1a], 0x809
xor eax, eax
jmp 0x65ff7d93
movzx edi, byte [esp + ebx + 0x1e]
sub edi, edx
lea edx, [edi + 0x30]
mov byte [esp + ebp + 0x1e], dl
lea edx, [esi + 0x30]
mov byte [esp + ebx + 0x1e], dl
add eax, 2
cmp eax, 0xa
jge 0x65ff7dc3
movzx edx, byte [esp + eax + 0x14]
movzx ebx, byte [esp + eax + 0x15]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 0xa
jae 0x65ff7dff
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x1e]
sub esi, edx
cmp ebx, 0xa
jb 0x65ff7d7b
jmp 0x65ff7df3
mov dword [esp], 0
lea eax, [esp + 0x1e]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.65f4fbe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], ecx
add esp, 0x28
ret
mov eax, ebx
mov ecx, 0xa
call fcn.65f649b0
mov eax, ebp
mov ecx, 0xa
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.65ff7d30
Function at 0x65ffe280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x65ffe35b
sub esp, 0x2c
mov dword [esp + 0x14], 0xc7b86e15
mov dword [esp + 0x16], 0x612dc7b8
mov dword [esp + 0x1a], 0x3a8d0cb9
mov dword [esp + 0x1e], 0x7060804
lea edi, [esp + 0x20]
lea esi, [0x661ef244]
call fcn.65f65002
xor eax, eax
jmp 0x65ffe2e2
movzx edi, byte [esp + ebx + 0x14]
sub edi, edx
lea edx, [edi - 0x4b]
mov byte [esp + ebp + 0x14], dl
lea edx, [esi - 0x4b]
mov byte [esp + ebx + 0x14], dl
add eax, 2
cmp eax, 0xe
jge 0x65ffe312
movzx edx, byte [esp + eax + 0x1e]
movzx ebx, byte [esp + eax + 0x1f]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 0xa
jae 0x65ffe34e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x14]
sub esi, edx
cmp ebx, 0xa
jb 0x65ffe2ca
jmp 0x65ffe342
mov dword [esp], 0
lea eax, [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.65f4fbe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
add esp, 0x2c
ret
mov eax, ebx
mov ecx, 0xa
call fcn.65f649b0
mov eax, ebp
mov ecx, 0xa
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.65ffe280
Function at 0x660114d0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x660115c1
sub esp, 0x1c
mov ecx, dword [esp + 0x20]
test byte [ecx], al
mov edx, dword [esp + 0x24]
and edx, 0x7f
shl edx, 5
add ecx, edx
mov dword [esp + 0x18], ecx
xor eax, eax
jmp 0x6601150c
mov ebx, dword [esp + 0xc]
inc ebx
mov ecx, dword [esp + 0x18]
mov eax, ebx
cmp eax, 4
jge 0x66011545
mov dword [esp + 0xc], eax
lea edx, [ecx + eax*8]
mov dword [esp], edx
call fcn.65f01590
mov eax, dword [esp + 0x24]
cmp dword [esp + 4], eax
sete cl
mov edx, dword [esp + 0x28]
cmp dword [esp + 8], edx
sete bl
and ebx, ecx
test bl, bl
je 0x66011501
mov byte [esp + 0x2c], 1
add esp, 0x1c
ret
xor eax, eax
mov edx, 0x84222325
jmp 0x6601154f
inc eax
cmp eax, 4
jge 0x66011564
mov dword [esp + 0x14], eax
lea ebx, [ecx + eax*8]
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
xor esi, esi
jmp 0x660115ba
and edx, 3
lea eax, [ecx + edx*8]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
call fcn.65f015d0
mov byte [esp + 0x2c], 0
add esp, 0x1c
ret
mov edi, ebp
and edi, 0xff
xor edx, edi
shr ebp, 8
mov edi, ebx
shl edi, 0x18
mov dword [esp + 0x10], edi
mov eax, edx
mov edi, 0x1b3
mul edi
inc esi
mov edi, dword [esp + 0x10]
or ebp, edi
shr ebx, 8
mov edx, eax
mov eax, dword [esp + 0x14]
cmp esi, 8
jl 0x6601158b
jmp 0x6601154e
call fcn.65f63530
jmp fcn.660114d0
Function at 0x66015320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x660153fc
sub esp, 0x28
mov dword [esp + 0x15], 0x957f6f9b
mov dword [esp + 0x16], 0xaa957f6f
mov dword [esp + 0x1a], 0x4f46c274
mov dword [esp + 0x1e], 0x6030200
mov dword [esp + 0x20], 0x5060603
mov dword [esp + 0x24], 0x1030401
xor eax, eax
jmp 0x66015381
movzx edi, byte [esp + ebx + 0x15]
lea edx, [edi + edx - 0x2d]
mov byte [esp + ebp + 0x15], dl
xchg esi, eax
mov byte [esp + ebx + 0x15], al
xchg esi, eax
add eax, 2
cmp eax, 0xa
jge 0x660153b3
movzx edx, byte [esp + eax + 0x1e]
movzx ebx, byte [esp + eax + 0x1f]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 9
jae 0x660153ef
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x15]
lea esi, [esi + edx - 0x2d]
cmp ebx, 9
jb 0x6601536b
jmp 0x660153e3
mov dword [esp], 0
lea eax, [esp + 0x15]
mov dword [esp + 4], eax
mov dword [esp + 8], 9
call fcn.65f4fbe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], ecx
add esp, 0x28
ret
mov eax, ebx
mov ecx, 9
call fcn.65f649b0
mov eax, ebp
mov ecx, 9
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.66015320

Function at 0x66015a30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x66015b0c
sub esp, 0x28
mov dword [esp + 0x1e], 0x73625540
mov dword [esp + 0x20], 0x4b5f7362
mov dword [esp + 0x24], 0x55494155
mov dword [esp + 0x14], 0x4050809
mov dword [esp + 0x16], 0x4060405
mov dword [esp + 0x1a], 0x1040002
xor eax, eax
jmp 0x66015a91
movzx edi, byte [esp + ebp + 0x1e]
xor edi, ebx
xchg edi, eax
mov byte [esp + edx + 0x1e], al
xchg edi, eax
xchg esi, eax
mov byte [esp + ebp + 0x1e], al
xchg esi, eax
add eax, 2
cmp eax, 0xa
jge 0x66015ac3
movzx edx, byte [esp + eax + 0x14]
movzx ebx, byte [esp + eax + 0x15]
mov ebp, ebx
xor ebx, edx
movzx edx, dl
lea ebx, [eax + ebx + 0x19]
cmp edx, 0xa
jae 0x66015aff
xchg ebp, eax
movzx eax, al
xchg ebp, eax
movzx esi, byte [esp + edx + 0x1e]
xor esi, ebx
cmp ebp, 0xa
jb 0x66015a7b
jmp 0x66015af3
mov dword [esp], 0
lea eax, [esp + 0x1e]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.65f4fbe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], ecx
add esp, 0x28
ret
mov eax, ebp
mov ecx, 0xa
call fcn.65f649b0
mov eax, edx
mov ecx, 0xa
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.66015a30
Function at 0x66015d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x66015e4c
sub esp, 0x24
mov dword [esp + 0x1c], 0xa0611927
mov dword [esp + 0x20], 0xa74ed273
mov dword [esp + 0x14], 0x10305
mov dword [esp + 0x18], 0x1010700
xor eax, eax
jmp 0x66015dd3
movzx edi, byte [esp + ebx + 0x1c]
sub edi, edx
lea edx, [edi - 0x59]
mov byte [esp + ebp + 0x1c], dl
lea edx, [esi - 0x59]
mov byte [esp + ebx + 0x1c], dl
add eax, 2
cmp eax, 8
jge 0x66015e03
movzx edx, byte [esp + eax + 0x14]
movzx ebx, byte [esp + eax + 0x15]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x66015e3f
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x1c]
sub esi, edx
cmp ebx, 8
jb 0x66015dbb
jmp 0x66015e33
mov dword [esp], 0
lea eax, [esp + 0x1c]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.65f4fbe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.66015d80
Function at 0x6601e250
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6601e323
sub esp, 0x2c
mov dword [esp + 0x16], 0x69216a6f
mov dword [esp + 0x18], 0x682f6921
mov dword [esp + 0x1c], 0x5255636f
lea edi, [esp + 0x20]
lea esi, [0x661ef06c]
call fcn.65f65002
xor eax, eax
jmp 0x6601e2a8
movzx edi, byte [esp + ebp + 0x16]
xor edi, ebx
xchg edi, eax
mov byte [esp + edx + 0x16], al
xchg edi, eax
xchg esi, eax
mov byte [esp + ebp + 0x16], al
xchg esi, eax
add eax, 2
cmp eax, 0xc
jge 0x6601e2da
movzx edx, byte [esp + eax + 0x20]
movzx ebx, byte [esp + eax + 0x21]
mov ebp, ebx
xor ebx, edx
movzx edx, dl
lea ebx, [eax + ebx + 0x11]
cmp edx, 0xa
jae 0x6601e316
xchg ebp, eax
movzx eax, al
xchg ebp, eax
movzx esi, byte [esp + edx + 0x16]
xor esi, ebx
cmp ebp, 0xa
jb 0x6601e292
jmp 0x6601e30a
mov dword [esp], 0
lea eax, [esp + 0x16]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.65f4fbe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
add esp, 0x2c
ret
mov eax, ebp
mov ecx, 0xa
call fcn.65f649b0
mov eax, edx
mov ecx, 0xa
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.6601e250
Function at 0x66023fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x660240b3
sub esp, 0x2c
mov dword [esp + 0x17], 0x65f68069
mov dword [esp + 0x18], 0x9d65f680
mov dword [esp + 0x1c], 0x8efef501
lea edi, [esp + 0x20]
lea esi, [0x661eef7c]
call fcn.65f65002
xor eax, eax
jmp 0x6602403a
movzx edi, byte [esp + ebx + 0x17]
sub edi, edx
lea edx, [edi - 0x7e]
mov byte [esp + ebp + 0x17], dl
lea edx, [esi - 0x7e]
mov byte [esp + ebx + 0x17], dl
add eax, 2
cmp eax, 0xc
jge 0x6602406a
movzx edx, byte [esp + eax + 0x20]
movzx ebx, byte [esp + eax + 0x21]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 9
jae 0x660240a6
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x17]
sub esi, edx
cmp ebx, 9
jb 0x66024022
jmp 0x6602409a
mov dword [esp], 0
lea eax, [esp + 0x17]
mov dword [esp + 4], eax
mov dword [esp + 8], 9
call fcn.65f4fbe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
add esp, 0x2c
ret
mov eax, ebx
mov ecx, 9
call fcn.65f649b0
mov eax, ebp
mov ecx, 9
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.66023fe0

Function at 0x660247a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602487a
sub esp, 0x40
mov dword [esp + 0x15], 0x72a5738f
lea edi, [esp + 0x16]
lea esi, [0x66116478]
call fcn.65f64fee
mov dword [esp + 0x2a], 0x21304
lea edi, [esp + 0x2c]
lea esi, [0x661efae4]
call fcn.65f64fee
xor eax, eax
jmp 0x660247ff
movzx edi, byte [esp + ebx + 0x15]
lea edx, [edi + edx - 0x2e]
mov byte [esp + ebp + 0x15], dl
xchg esi, eax
mov byte [esp + ebx + 0x15], al
xchg esi, eax
add eax, 2
cmp eax, 0x16
jge 0x66024831
movzx edx, byte [esp + eax + 0x2a]
movzx ebx, byte [esp + eax + 0x2b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 0x15
jae 0x6602486d
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x15]
lea esi, [esi + edx - 0x2e]
cmp ebx, 0x15
jb 0x660247e9
jmp 0x66024861
mov dword [esp], 0
lea eax, [esp + 0x15]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x15
call fcn.65f4fbe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
add esp, 0x40
ret
mov eax, ebx
mov ecx, 0x15
call fcn.65f649b0
mov eax, ebp
mov ecx, 0x15
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.660247a0
Function at 0x66024890
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x66024963
sub esp, 0x2c
mov dword [esp + 0x15], 0xe56f7210
mov dword [esp + 0x18], 0x626e5de5
mov dword [esp + 0x1c], 0xebf36170
lea edi, [esp + 0x20]
lea esi, [0x661eef88]
call fcn.65f65002
xor eax, eax
jmp 0x660248e8
movzx edi, byte [esp + ebx + 0x15]
lea edx, [edi + edx + 0x77]
mov byte [esp + ebp + 0x15], dl
xchg esi, eax
mov byte [esp + ebx + 0x15], al
xchg esi, eax
add eax, 2
cmp eax, 0xc
jge 0x6602491a
movzx edx, byte [esp + eax + 0x20]
movzx ebx, byte [esp + eax + 0x21]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 0xb
jae 0x66024956
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x15]
lea esi, [esi + edx + 0x77]
cmp ebx, 0xb
jb 0x660248d2
jmp 0x6602494a
mov dword [esp], 0
lea eax, [esp + 0x15]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
call fcn.65f4fbe0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
add esp, 0x2c
ret
mov eax, ebx
mov ecx, 0xb
call fcn.65f649b0
mov eax, ebp
mov ecx, 0xb
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.66024890

Function at 0x66025a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x66025b6b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0xfd8ea79a
mov dword [esp + 0x16], 0xb13bd321
mov dword [esp + 0x1a], 0x5030007
mov dword [esp + 0x1c], 0x2060503
mov dword [esp + 0x20], 0x4040304
xor eax, eax
jmp 0x66025aeb
movzx edi, byte [esp + ebx + 0x12]
sub edi, edx
lea edx, [edi - 0x26]
mov byte [esp + ebp + 0x12], dl
lea edx, [esi - 0x26]
mov byte [esp + ebx + 0x12], dl
add eax, 2
cmp eax, 0xa
jge 0x66025b1b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x66025b5e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
sub esi, edx
cmp ebx, 8
jb 0x66025ad3
jmp 0x66025b52
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x66025b39
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x66025b2f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.66025a80
Function at 0x66025b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x66025c9f
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
lea edi, [esp + 0x14]
lea esi, [0x66114562]
call fcn.65f64ff8
mov dword [esp + 0xb], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
movzx eax, byte [esp + 0x1f]
movzx ecx, byte [esp + 0x18]
add eax, ecx
movzx ecx, byte [esp + 0x22]
movzx edx, byte [esp + 0x1e]
sub ecx, edx
movzx edx, byte [esp + 0x20]
movzx ebx, byte [esp + 0x16]
add edx, ebx
movzx ebx, byte [esp + 0x1b]
movzx ebp, byte [esp + 0x23]
add ebx, ebp
movzx ebp, byte [esp + 0x1a]
movzx esi, byte [esp + 0x14]
add ebp, esi
movzx esi, byte [esp + 0x1d]
movzx edi, byte [esp + 0x17]
add esi, edi
xchg esi, eax
mov byte [esp + 2], al
xchg esi, eax
movzx edi, byte [esp + 0x21]
movzx esi, byte [esp + 0x19]
xor edi, esi
movzx esi, byte [esp + 0x15]
xchg esi, eax
mov byte [esp + 1], al
xchg esi, eax
movzx esi, byte [esp + 0x1c]
mov byte [esp + 0xb], al
mov byte [esp + 0xc], cl
mov byte [esp + 0xd], dl
mov byte [esp + 0xe], bl
xchg ebp, eax
mov byte [esp + 0xf], al
xchg ebp, eax
movzx eax, byte [esp + 2]
mov byte [esp + 0x10], al
xchg edi, eax
mov byte [esp + 0x11], al
xchg edi, eax
movzx eax, byte [esp + 1]
add eax, esi
mov byte [esp + 0x12], al
mov dword [esp + 3], 0
mov dword [esp + 7], 0
xor eax, eax
jmp 0x66025c86
movzx ecx, byte [esp + eax + 0xb]
mov byte [esp + eax + 3], cl
inc eax
cmp eax, 8
jl 0x66025c7c
mov eax, dword [esp + 3]
mov ecx, dword [esp + 7]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
call fcn.65f63530
jmp fcn.66025b80

Function at 0x66025cb0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x66025d9b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0x25bfc2ae
mov dword [esp + 0x16], 0xe3cc4c1e
mov dword [esp + 0x1a], 0x6060106
mov dword [esp + 0x1c], 0x2050606
mov dword [esp + 0x20], 0x7070505
xor eax, eax
jmp 0x66025d19
movzx edi, byte [esp + ebx + 0x12]
lea edx, [edi + edx + 0x68]
mov byte [esp + ebp + 0x12], dl
xchg esi, eax
mov byte [esp + ebx + 0x12], al
xchg esi, eax
add eax, 2
cmp eax, 0xa
jge 0x66025d4b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x66025d8e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
lea esi, [esi + edx + 0x68]
cmp ebx, 8
jb 0x66025d03
jmp 0x66025d82
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x66025d69
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x66025d5f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.66025cb0
Function at 0x66025db0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x66025e93
sub esp, 0x20
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], 0xd06bd443
mov dword [esp + 0x1c], 0x3d1c664c
mov dword [esp + 8], 0x40006
mov dword [esp + 0xc], 0x1010702
xor eax, eax
jmp 0x66025e11
movzx edi, byte [esp + ebx + 0x18]
lea edx, [edi + edx + 0x33]
mov byte [esp + ebp + 0x18], dl
xchg esi, eax
mov byte [esp + ebx + 0x18], al
xchg esi, eax
add eax, 2
cmp eax, 8
jge 0x66025e43
movzx edx, byte [esp + eax + 8]
movzx ebx, byte [esp + eax + 9]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x66025e86
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x18]
lea esi, [esi + edx + 0x33]
cmp ebx, 8
jb 0x66025dfb
jmp 0x66025e7a
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
xor eax, eax
jmp 0x66025e61
movzx ecx, byte [esp + eax + 0x18]
mov byte [esp + eax + 0x10], cl
inc eax
cmp eax, 8
jl 0x66025e57
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
add esp, 0x20
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.66025db0

Function at 0x66027320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602743f
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
lea edi, [esp + 0x14]
lea esi, [0x661145b2]
call fcn.65f64ff8
mov dword [esp + 0xb], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
movzx eax, byte [esp + 0x21]
movzx ecx, byte [esp + 0x20]
add eax, ecx
movzx ecx, byte [esp + 0x17]
movzx edx, byte [esp + 0x22]
add ecx, edx
movzx edx, byte [esp + 0x1c]
movzx ebx, byte [esp + 0x16]
sub edx, ebx
movzx ebx, byte [esp + 0x15]
movzx ebp, byte [esp + 0x19]
xor ebx, ebp
movzx ebp, byte [esp + 0x1f]
movzx esi, byte [esp + 0x1b]
add ebp, esi
movzx esi, byte [esp + 0x18]
movzx edi, byte [esp + 0x23]
sub esi, edi
xchg esi, eax
mov byte [esp + 2], al
xchg esi, eax
movzx edi, byte [esp + 0x1a]
movzx esi, byte [esp + 0x1d]
add esi, edi
movzx edi, byte [esp + 0x1e]
xchg edi, eax
mov byte [esp + 1], al
xchg edi, eax
movzx edi, byte [esp + 0x14]
mov byte [esp + 0xb], al
mov byte [esp + 0xc], cl
mov byte [esp + 0xd], dl
mov byte [esp + 0xe], bl
xchg ebp, eax
mov byte [esp + 0xf], al
xchg ebp, eax
movzx eax, byte [esp + 2]
mov byte [esp + 0x10], al
xchg esi, eax
mov byte [esp + 0x11], al
xchg esi, eax
movzx eax, byte [esp + 1]
add eax, edi
mov byte [esp + 0x12], al
mov dword [esp + 3], 0
mov dword [esp + 7], 0
xor eax, eax
jmp 0x66027426
movzx ecx, byte [esp + eax + 0xb]
mov byte [esp + eax + 3], cl
inc eax
cmp eax, 8
jl 0x6602741c
mov eax, dword [esp + 3]
mov ecx, dword [esp + 7]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
call fcn.65f63530
jmp fcn.66027320
Function at 0x66027580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6602766b
sub esp, 0x24
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x12], 0x5da54f9b
mov dword [esp + 0x16], 0x19ff9d14
mov dword [esp + 0x1a], 0x5020004
mov dword [esp + 0x1c], 0x2060502
mov dword [esp + 0x20], 0x3010306
xor eax, eax
jmp 0x660275eb
movzx edi, byte [esp + ebx + 0x12]
sub edi, edx
lea edx, [edi - 0x56]
mov byte [esp + ebp + 0x12], dl
lea edx, [esi - 0x56]
mov byte [esp + ebx + 0x12], dl
add eax, 2
cmp eax, 0xa
jge 0x6602761b
movzx edx, byte [esp + eax + 0x1a]
movzx ebx, byte [esp + eax + 0x1b]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x6602765e
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x12]
sub esi, edx
cmp ebx, 8
jb 0x660275d3
jmp 0x66027652
mov dword [esp + 0xa], 0
mov dword [esp + 0xe], 0
xor eax, eax
jmp 0x66027639
movzx ecx, byte [esp + eax + 0x12]
mov byte [esp + eax + 0xa], cl
inc eax
cmp eax, 8
jl 0x6602762f
mov eax, dword [esp + 0xa]
mov ecx, dword [esp + 0xe]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
add esp, 0x24
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.66027580

Function at 0x66029d90
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x663127c4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x66029e73
sub esp, 0x20
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], 0xde9d2693
mov dword [esp + 0x1c], 0x5efc840b
mov dword [esp + 8], 0x5010701
mov dword [esp + 0xc], 0x2070507
xor eax, eax
jmp 0x66029df1
movzx edi, byte [esp + ebx + 0x18]
lea edx, [edi + edx + 0x7b]
mov byte [esp + ebp + 0x18], dl
xchg esi, eax
mov byte [esp + ebx + 0x18], al
xchg esi, eax
add eax, 2
cmp eax, 8
jge 0x66029e23
movzx edx, byte [esp + eax + 8]
movzx ebx, byte [esp + eax + 9]
mov ebp, edx
xor edx, ebx
xchg ebp, eax
movzx eax, al
xchg ebp, eax
add edx, eax
cmp ebp, 8
jae 0x66029e66
movzx ebx, bl
movzx esi, byte [esp + ebp + 0x18]
lea esi, [esi + edx + 0x7b]
cmp ebx, 8
jb 0x66029ddb
jmp 0x66029e5a
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
xor eax, eax
jmp 0x66029e41
movzx ecx, byte [esp + eax + 0x18]
mov byte [esp + eax + 0x10], cl
inc eax
cmp eax, 8
jl 0x66029e37
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
add esp, 0x20
ret
mov eax, ebx
mov ecx, 8
call fcn.65f649b0
mov eax, ebp
mov ecx, 8
call fcn.65f649b0
nop
call fcn.65f63530
jmp fcn.66029d90