joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5f8920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f8a1f
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xb1c9d065b8635e9f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6cba723ea3b1c9d0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x608080b07090501
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1030608080b0709
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1070808070608
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5f89a4
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x5f89db
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x5f8a11
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5f8a05
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x5f8987
jmp 0x5f89f6
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0xd
call fcn.00457f40
mov rax, rsi
mov ecx, 0x12
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.005f8920

Function at 0x5f8a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f8b29
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xca74bf1e6e1e6443
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xc850
movabs rdx, 0x805020409010702
mov qword [rsp + 0x22], rdx
movabs rdx, 0x509090508010805
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x5f8aaa
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x5f8ae8
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x5f8b1b
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5f8b0f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
nop
cmp rsi, 0xa
jb 0x5f8a90
jmp 0x5f8b03
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457f40
mov eax, edi
mov ecx, 0xa
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005f8a40
Function at 0x5f9000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f90e9
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x43ed23651b025022
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x4e705b54
movabs rdx, 0x300050b02070603
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1030609060b0300
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5f906e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x5f90a8
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0xe
jae 0x5f90db
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5f90cf
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x5f9051
jmp 0x5f90c3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457f40
mov eax, edi
mov ecx, 0xc
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005f9000

Function at 0x5f9640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f9753
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x757be92478d44b5d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6f36e2757be92478
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6edbda5df57a693a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x104080e0601090f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x11090b110104080e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf06010502100600
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5f96d0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x5f970d
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
nop
cmp rsi, 0x14
jae 0x5f9745
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5f9734
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0x13
jb 0x5f96b6
jmp 0x5f9728
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457f40
mov eax, edi
mov ecx, 0x13
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x14
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005f9640
Function at 0x5f9c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f9d7f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6d6c757c6c7c6c57
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x65613c6431746e75
mov qword [rsp + 0x26], rdx
movabs rdx, 0x104060203010b06
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x802010406020301
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc04070e0c0d0803
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5f9d01
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x10]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x12
jge 0x5f9d3d
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x5f9d71
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5f9d65
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x10]
cmp rsi, 0x10
jb 0x5f9ce7
jmp 0x5f9d58
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x10
call fcn.00457f40
mov rax, rsi
mov ecx, 0x12
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.005f9c80

Function at 0x5fa5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5fa6cd
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x726f3e20a7656503
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x617d6101f192726f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30005080c000303
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x50a0908000a0300
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x5fa655
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x5fa68c
movzx edx, byte [rsp + rax + 0x1c]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x5fa6bf
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5fa6b3
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x5fa638
jmp 0x5fa6a7
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457f40
mov eax, edi
mov ecx, 0xe
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005fa5e0
Function at 0x5fb2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5fb3d3
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x68b5a4eb64b1ada8
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6c2c7468b5a4eb64
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x100040009040206
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6000905
xor eax, eax
jmp 0x5fb34b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x5fb38d
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
nop word [rax + rax]
cmp rsi, 0xc
jae 0x5fb3c5
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5fb3b4
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
cmp rsi, 0xb
jb 0x5fb331
jmp 0x5fb3a8
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457f40
mov eax, edi
mov ecx, 0xb
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0xc
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005fb2e0

Function at 0x5fb3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5fb4cd
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x455f7447ed635054
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1b2619721668455f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9030c07000d090d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60b010704010409
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5fb455
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x5fb48c
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x5fb4bf
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5fb4b3
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x5fb438
jmp 0x5fb4a7
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457f40
mov eax, edi
mov ecx, 0xe
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005fb3e0
Function at 0x5fb4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5fb5df
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6a64a44ff66904ec
mov qword [rsp + 0x19], rdx
movabs rdx, 0x653b610bc56a64a4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x309090b09030500
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4010309090b0903
mov qword [rsp + 0x28], rdx
movabs rdx, 0x705090403080801
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5fb564
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x5fb59b
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x5fb5d1
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5fb5c5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x5fb547
jmp 0x5fb5b6
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0xd
call fcn.00457f40
mov rax, rsi
mov ecx, 0x12
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.005fb4e0

Function at 0x5fcd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5fce53
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2d576544596e5857
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x653359615c2d5765
mov qword [rsp + 0x20], rdx
movabs rdx, 0x80500050b000405
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6080a010b030300
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5fcdd2
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 1]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x5fce0e
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x5fce45
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5fce35
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 1]
cmp rsi, 0xd
jb 0x5fcdb8
jmp 0x5fce29
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457f40
mov eax, edi
mov ecx, 0xd
nop dword [rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005fcd60
Function at 0x5fd3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5fd4ad
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xd31cdf6fc5141c18
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd7d41bea6dd31cdf
mov qword [rsp + 0x20], rdx
movabs rdx, 0x205020c0a0a0203
mov qword [rsp + 0x28], rdx
movabs rdx, 0x109090b09070006
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5fd435
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x5b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x5fd46c
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x5fd49f
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5fd493
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x5fd418
jmp 0x5fd487
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457f40
mov eax, edi
mov ecx, 0xd
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005fd3c0

Function at 0x600460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x600549
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xf372915ff2889797
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x9989
movabs rdx, 0x802010505080307
mov qword [rsp + 0x22], rdx
movabs rdx, 0x509000800090802
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x6004cd
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x7f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x7f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x600508
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0xe
jae 0x60053b
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x60052f
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x6004b0
jmp 0x600523
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457f40
mov eax, edi
mov ecx, 0xa
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00600460
Function at 0x600980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x600a6d
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x8997ae73a674b67a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa778c48997ae73a6
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0805000a03080a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x603060107000a08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x6009f5
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x12]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x12]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x600a2c
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x600a5f
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x600a53
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x6009d8
jmp 0x600a47
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457f40
mov eax, edi
mov ecx, 0xb
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00600980

Function at 0x600b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x600c5f
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xa97c53d39051a052
mov qword [rsp + 0x18], rdx
movabs rdx, 0x7278489c896ca97c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa06040d0709070a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30c0a06040d0709
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0c08080d0d0801
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x600be1
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x12
jge 0x600c1d
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x600c51
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x600c45
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0xe
jb 0x600bc7
jmp 0x600c38
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0xe
call fcn.00457f40
mov rax, rsi
mov ecx, 0x12
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.00600b60
Function at 0x6041e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x60433f
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x96726c6946246f69
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3a207494ee72eb21
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3e6980738b6d2010
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8fc1022f653de867
mov qword [rsp + 0x34], rdx
movabs rdx, 0x97fbf37a246dd905
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1c200e1a0f17191d
mov qword [rsp + 0x44], rdx
movabs rdx, 0xc13070b0c1f1023
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x211e1e150c13070b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1302061f1324261d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2715061f09021f0b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x250b08150b200c08
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x6042c0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2c
jge 0x6042fc
movzx edx, byte [rsp + rax + 0x44]
lea rsi, [rax + 1]
cmp rsi, 0x2c
jae 0x604331
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x604325
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1a]
cmp rsi, 0x28
jb 0x6042a2
jmp 0x604317
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x28
call fcn.00446000
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x28
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x28
call fcn.00457f40
mov rax, rsi
mov ecx, 0x2c
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.006041e0
Function at 0x6054a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x60559f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x904d71735e804552
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7275457b7653904d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x606060d05060509
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6020d0c0606060d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3060a04090d0a07
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x605524
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x60555b
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x605591
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x605585
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x605507
jmp 0x605576
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0xe
call fcn.00457f40
mov rax, rsi
mov ecx, 0x14
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.006054a0

Function at 0x6065c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6066d3
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xc6741ad86eca6f16
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa018230ac6741ad8
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc025a3081bd96472
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe09100e0a020a04
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7050d070b110a13
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0f091108000b05
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x606650
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x60668d
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
nop
cmp rsi, 0x18
jae 0x6066c5
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x6066b4
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
cmp rsi, 0x14
jb 0x606636
jmp 0x6066a8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457f40
mov eax, edi
mov ecx, 0x14
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x18
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.006065c0
Function at 0x60e2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x60e3f8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x65435f655c61684d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x726e49535b596961
mov qword [rsp + 0x23], rdx
movabs rdx, 0x2769276044526972
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6351392b385f4343
mov qword [rsp + 0x32], rdx
movabs rdx, 0x16001d0a141c1706
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd000c1b031c1600
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc1e011c12181a12
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb03131a110a110d
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd091d0b1e0e091e
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x60e380
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x26
jge 0x60e3b7
movzx edx, byte [rsp + rax + 0x3a]
lea rsi, [rax + 1]
cmp rsi, 0x26
jae 0x60e3ea
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x60e3de
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1f
jb 0x60e363
jmp 0x60e3d2
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1f
call fcn.00446000
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00457f40
mov eax, edi
mov ecx, 0x1f
call fcn.00457f40
mov rax, rsi
mov ecx, 0x26
call fcn.00457f40
nop
call fcn.00455860
nop dword [rax]
jmp fcn.0060e2c0

Function at 0x6119c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x611aa9
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x62e0db53b851dca2
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x47963075
movabs rdx, 0x3010509020a0b0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6050a01000004
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x611a2e
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x64]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x64]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x611a68
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x10
jae 0x611a9b
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x611a8f
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x611a11
jmp 0x611a83
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457f40
mov eax, edi
mov ecx, 0xc
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.006119c0