joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1408c8c31
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov dword [r9], edx
jmp 0x1408d0b21
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x1408ca2ef
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov byte ss:[rax], cl
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408ca3b1
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408caaaa
Capabilities:
Encrypt data using rc4 prga

Disassembly:
not rsi
and r12b, 0xf0
mov qword [rsp + rsi*2 + 0x3da0], rdx
add dword [rsp + rsi + 0x1ed1], esi
mov rsp, r12

Function at 0x1408cae6e
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp], 0x2d35b80b
sal dil, cl
jmp 0x1408d36d0
mov word [r9], di
push 0xfffffffff595d2a1
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x1408cb3fb
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push 0xffffffff8485b797
mov qword [r9], rdi
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408cbcec
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add r9, 4
shld di, bx, cl
mov word [r9], di
mov qword [rsp], 0xffffffffe3be5416
jmp 0x1408e3759

Function at 0x1408cbd86
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add r9, 4
shrd r11w, r8w, cl
jmp 0x1408e915c
mov word [r9], r11w
push 0xffffffffebabfda2
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408cc4e6
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408cddd2
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp], 0xfffffffff21d2802
mov word [r9], dx
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408ce34c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ebx, dword [r9 + rcx - 0x6d3237a0]
mov cl, byte [rcx + r9 - 0x6d32379c]
add r9, 2
jmp 0x1409094e3

Function at 0x1408ce624
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp], 0x37287900
mov dword [r9 + 4], eax
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408cf373
Capabilities:
Encrypt data using rc4 prga

Disassembly:
not cx
push 0xffffffff86983d11
not dword [rsp + 0x12]
mov word [r9], cx
mov qword [rsp + 8], 0x33a28933
push 0xffffffffb49b0811
lea rsp, [rsp + 0x20]
jmp fcn.1408caaed

Function at 0x1408cfa1b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov word [rax], r11w
lea rsp, [rsp + 0x30]
jmp fcn.1408caaed

Function at 0x1408cfb27
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rax], r8
jmp 0x1408f8df1
push 0xffffffffc525cd91
jmp 0x140902fb5
lea rsp, [rsp + 0x20]
jmp fcn.1408caaed

Function at 0x1408cfcb2
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x1408ef6ae
mov word [r9], r8w
push 0x30a95c13
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408cfd99
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov dword [r9], edi
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed
Function at 0x1408cfe53
Capabilities:
Encrypt data using rc4 prga

Disassembly:
movsx r8d, cx
mov r8w, word [r9 + r8 - 0x588a]
and rcx, 0x5727c73b
mov qword [rsp + rcx - 0x1327400a], rcx
mov cl, byte [r9 + rcx*4 - 0x4c9d0026]
adc r9, 2
sal r8w, cl
push 0x6ca79a2c
mov word [r9], r8w
push 0xffffffffe91b3f34
jmp 0x14090550d
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x1408d0781
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x20]
jmp fcn.1408caaed

Function at 0x1408d0835
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x1408d0920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x1408d90fe
shrd r8d, ebx, cl
mov dword [r9], r8d
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408d1128
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408d1f5e
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408d2157
Capabilities:
Encrypt data using rc4 prga

Disassembly:
adc r9, 8
and rdi, r8
not rdi
mov qword [r9], rdi
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408d33e2
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add r9, 8
and rdx, r8
push 0xffffffff9abe3007
not rdx
mov qword [r9], rdx
jmp 0x1408e0986
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408d34b4
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov dword [r9], r8d
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408d3aac
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x30]
jmp fcn.1408caaed

Function at 0x1408d5c14
Capabilities:
Encrypt data using rc4 prga

Disassembly:
adc r9, 8
not r11
not rbx
and r11, rbx
mov qword [r9], r11
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408d757b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov dword [r9], edx
jmp 0x1408da30d
mov edx, dword ss:[rcx]
add r9, 4
jmp 0x1408ca6da
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408d75ce
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x28]
jmp fcn.1408caaed

Function at 0x1408d9965
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub r8d, r8d
or r8b, byte [r8 + r9 + 8]
add r9, 0xa
mov byte [rcx], r8b
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408d9ef5
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov di, word [r9]
mov cl, byte [r9 + 2]
add r9, 2
mov qword [rsp], 0xffffffffd99cbe1b
sal di, cl
jmp 0x1408e1b1f

Function at 0x1408da3f5
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov rdx, qword ss:[r11]
mov qword [r9], rdx
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408da726
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov dword [r9], edi
lea rsp, [rsp + 0x20]
jmp fcn.1408caaed

Function at 0x1408dad3a
Capabilities:
Encrypt data using rc4 prga

Disassembly:
shr rdx, cl
push 0xffffffffd3b9b4b1
mov qword [r9], rdx
push 0xffffffffd7a5733b
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed
Function at 0x1408dad96
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [r9], rdi
jmp 0x140907f7b
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408db0b3
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov word [r9], ax
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408dc4bd
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mul ecx
mov dword [r9], edx
jmp 0x1408e7be7
mov dword [r9 + 4], eax
push 0xffffffffd71f2019
push 0x65a420ad
lea rsp, [rsp + 0x20]
jmp fcn.1408caaed

Function at 0x1408dcc2a
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ebp, 0x1d9e3127
mov rsi, r10
lea rcx, [rbp + rbp + 0x1088c7ba]
add cl, bpl
add rcx, rbp
movabs rcx, 0
sbb rsi, rcx
lea rbp, [0x1408e9f50]
sub r10, 1
mov ebp, 0x4fb595a0
dec ebp
sar bp, 0xc1
movzx ebp, byte [r10 + rbp - 0x4fb5cacf]
push 0xffffffffe936ec95
xor bpl, r9b
sub bpl, 0xa0
rol bpl, 1
neg bpl
sal byte [rsp + 5], 0x26
not bpl
neg bpl
or word [rsp + 6], 0x38ad
not bpl
call fcn.1408ebaa5
mov qword [rbp + riz - 8], rax
call fcn.1408e46f1
mov r8, qword [rsi]
add rsi, 8
mov r9d, 0xfa820826
mov r10, r8
mov r9, rsi
jmp 0x1408caac3
jmp 0x1408dcbd9
add r10, 2
mov ebp, 0x6d101783
movzx ebp, word [r11 + rbp - 0x6d101783]
add r11, 2
shr qword [rsp + 8], 0x5b
shl qword [rsp + 8], 0x2f
xor bp, bx
neg bp
mov qword [rsp], 0x5bafb816
inc bp
push 0x18317393
xor bp, 0xdc04
dec dword [rsp + 0x10]
call fcn.1408d9ce7
add rsi, 8
call fcn.1408fe063
call fcn.1408f8f0e
lea rsp, [rsp + 8]
jmp 0x1408f85b0
jmp 0x1408eb802

Function at 0x1408de596
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub bpl, 0xa5
ror bpl, 1
sub bpl, 0xbb
ror bpl, 1
xor bl, bpl
call fcn.1408d26de
mov rdi, qword [r9]
mov r11d, 0xf1a0528e
push r11
xchg word [rsp + 1], r11w
mov r11, qword ss:[rdi]
mov qword [r9], r11
lea rsp, [rsp + 8]
jmp fcn.1408caaed
add rsi, 0xa
mov byte [rbp + riz], r8b
call fcn.1408f50bf
movzx ebp, byte [r10]
add r10, 1
xor bpl, bl
push 0x741ec60f
jmp 0x1408de580

Function at 0x1408debc7
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x28]
jmp fcn.1408caaed

Function at 0x1408dfe13
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp], rdi
add dil, byte [r9 + riz + 2]
add r9, 2
jmp 0x14090a44e
shl word [rsp + 5], 0xa8
neg dword [rsp + 3]
or r8b, dil
not r8b
mov word [r9], r8w
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408dff3a
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add r9, 2
add dx, ax
push 0xffffffff8a1f402f
mov word [r9], dx
push 0xffffffff882e888e
lea rsp, [rsp + 0x20]
jmp fcn.1408caaed

Function at 0x1408dffbe
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x30]
jmp fcn.1408caaed

Function at 0x1408e07db
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add r9, 2
mov qword [rsp], 0xffffffffc62c1a88
add dl, dil
mov word [r9], dx
not dword [rsp]
jmp 0x1408eb866
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408e1595
Capabilities:
Encrypt data using rc4 prga

Disassembly:
or r11b, al
push 0xffffffffd88a363d
not r11b
mov word [r9], r11w
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed
Function at 0x1408e1d15
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov edi, dword [r9]
mov eax, dword [r9 + 4]
mul edi
mov dword [r9], edx
push 0xffffffffdd0544b0
mov dword [r9 + 4], eax
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408e1def
Capabilities:
Encrypt data using rc4 prga

Disassembly:
not ecx
not ebx
jmp 0x1409059a7
jmp 0x1408d89ef
or ecx, ebx
mov dword [r9], ecx
push 0x362bd02f
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408e29e1
Capabilities:
Encrypt data using rc4 prga

Disassembly:
or dil, al
not dil
mov word [r9], di
jmp 0x1408f9d25
or al, byte [r9 + riz + 2]
jmp 0x14090595f
lea rsp, [rsp + 8]
jmp fcn.1408caaed
add r9, 2
jmp 0x1408d19d8

Function at 0x1408e2cf1
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push 0x11a3da34
lea rsp, [rsp + 0x20]
jmp 0x1408cb261
movsx eax, bx
mov rax, qword [r8 + rax*4 - 0x6ec4]
pop rdi
movzx r10d, bx
lea r8, [r8 + r10*4 - 0x6ebc]
mov r10, rax
mov r9, r8
xadd bl, bh
movzx edi, bl
jno 0x1408caac3
mov dword [r9], edx
not byte [rsp + 7]
push 0x697901a
mov dword [r9 + 4], eax
push 0x7159030
jmp 0x1408e2b60

Function at 0x1408e404c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + rcx - 0x6abb], r11
pop rax
jmp 0x1408caac3

Function at 0x1408e4130
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp], 0x711ac00c
mov word [r9], bx
lea rsp, [rsp + 8]
jmp fcn.1408caaed
jmp 0x1408d35e7

Function at 0x1408e545b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov word [r9], r11w
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408e5778
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov rax, qword [r9]
mov r8d, 0x2a96bcba
mov r8, qword [r9 + r8 - 0x2a96bcb2]
jmp 0x1408f949b

Function at 0x1408e6f91
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov word [r9], dx
lea rsp, [rsp + 0x20]
jmp fcn.1408caaed

Function at 0x1408e71db
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub r11, r11
xor r9b, r8b
add r8, rsp
call fcn.1408deb90
push 0xfffffffffe20febc
call fcn.14090ab21
mov dx, word [r9]
mov ecx, 0xe32426b5
push rcx
not cl
mov cl, byte [r9 + 2]
add r9, 2
sal word [rsp + 2], 0xcc
sal dx, cl
mov word [r9], dx
lea rsp, [rsp + 8]
jmp fcn.1408caaed
or ebx, ebx
rol r11, 0xaf
rol r8b, 1
shl r11d, 0xa7
sub r11b, 0x8e
inc r8b
jmp 0x1408e71c3

Function at 0x1408e728b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp], 0xffffffffc217f991
mov rdx, qword [r9]
mov eax, dword [rsp + 1]
mov eax, dword [rdx]
not word [rsp + 4]
add r9, 4
mov dword [r9], eax
jmp 0x1408f9b6f
push 0xffffffff82864d89
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408e7faa
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add r9, 0xa
push 0x19342f20
jmp 0x1409050cc
mov rbx, qword [r9]
mov edi, 0xae9052bf
mov dil, byte [r9 + 8]
jmp 0x1408e6450
mov byte ss:[rbx], dil
push 0xffffffffd33828ba
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x1408e900c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov r8, qword [r9]
mov r11b, byte [r9 + 8]
add r9, 0xa
mov byte [r8], r11b
mov qword [rsp], 0xffffffffbdb92921
lea rsp, [rsp + 8]
jmp fcn.1408caaed
Function at 0x1408e9197
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov rdx, rbx
sub rbx, 2
call fcn.1408e87df
mov r11, qword [r9]
mov ebx, dword [r9 + 8]
add r9, 0xc
push 0x121ec123
mov dword ss:[r11], ebx
mov dword [rsp + 4], 0x309fa106
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408ebcdd
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push 0xffffffffbb1ddb20
adc r9, 4
shld bx, dx, cl
mov word [r9], bx
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408ebcfb
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov dword ss:[rcx], eax
not dword [rsp + 0xb]
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x1408ecbf6
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push 0xfffffffffa1fdf99
push 0xffffffffb11166a1
lea rsp, [rsp + 0x28]
jmp fcn.1408caaed

Function at 0x1408eed64
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov word [rdi], r8w
push 0xffffffffb0202590
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed
or rdx, rdi
jmp 0x1408eed5c
mov qword [rbx], rdx
call fcn.14090815b
jmp 0x1408f774f
mov r8d, 0x8f8a5320
shr r8d, 0xd7
mov rdi, qword [r9 + r8*8 - 0x8f8]
neg r8b
mov r8w, word [r8 + r9 - 0x1d9]
push 0xffffffffeaa02b81
neg qword [rsp]
push 0x1b3d740c
add r9, 0xa
jmp 0x1408d0c89
add rbx, 8
not rdx
not rdi
jmp 0x1408e3db1

Function at 0x1408ef634
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add r9, 6
mov word [r9], di
push 0xffffffffc73e3538
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408f0b0a
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [r9], rdx
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408f1051
Capabilities:
Encrypt data using rc4 prga

Disassembly:
call fcn.1408f48c9
movzx r10d, word [r8]
jmp 0x1408d5c67
xor r10w, r9w
jmp 0x1408f1011
sar eax, 0xd4
mov al, byte [r9 + 8]
push 0xffffffffea314aa7
adc r9, 0xa
mov byte ss:[r8], al
push 0xffffffffcd8f571a
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed
push 0xffffffffdbbcf825
add r10w, 0x4317
dec byte [rsp + 5]
neg r10w
sub r10w, 0x31b2
sal qword [rsp], 0xd4
sub dword [rsp + 3], 0xf8a532ad
not r10w
xor r9w, r10w
xor qword [rsp], 0x4594e429
lea r10, [rsp + r10 + 8]
call fcn.1408fb8dd
mov r8, qword [r9]
mov eax, 0xbe235386
jmp 0x1408e5469
push 0x5d9f74b8
lea rsp, [rsp + 0x10]
jne 0x1408cf1a6
mov rax, qword [rbp + riz]
call fcn.1409013b9
push 0xffffffffd59e860a
mov qword [r9], rdx
mov qword [r9 + 8], rax
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408f1ea5
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add r9, 2
shr ebx, cl
mov dword [r9], ebx
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed
Function at 0x1408f2b8e
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sal edx, 3
mov rax, rbp
add rax, rdx
mov qword [rbp + riz - 8], rax
lea rsp, [rsp + 0x10]
mov qword [rbp + riz - 0x10], rsp
sub rsp, rcx
push 0x12bafdab
lea rsp, [rsp + 8]
and rsp, 0xfffffffffffffff0
add rsp, rcx
call fcn.1408f82b2
movzx edi, byte [rsi]
shl edx, 0x9e
xor dil, r10b
inc dx
or dx, 0x7123
adc dil, 6
push rdx
rol dil, 1
call fcn.1408f4fd5
mov r10, qword [rbx]
add rbx, 8
push 0xffffffffc0b87cad
xor r10, r11
inc r10
sar qword [rsp], 0x66
not r10
call fcn.1408e946b
mov edx, 0xbda3fb36
mov ecx, 0x7a2c8fa6
mov rdx, qword [rcx + r9 - 0x7a2c8fa6]
mov cl, byte [r9 + rcx - 0x7a2c8f9e]
jmp 0x1408e1a97
sal ecx, 3
push rax
add dword [rsp], eax
jbe 0x1408f2b1a
mov rdi, qword [rdi]
lea rsp, [rsp + 8]
jmp fcn.1409020fe

Function at 0x1408f2f29
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408f315b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov r10, qword [rsp + 0x38]
mov qword [rsp + 0x30], 0xffffffffeb20298a
lea rsp, [rsp + 0x40]
jmp fcn.1408caaed

Function at 0x1408f36c6
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add r9, 6
shld r8d, edi, cl
mov dword [r9], r8d
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408f400a
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add r9, 4
mov dword [r9], ebx
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408f463e
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x1409010f0
and cl, dil
not cl
mov word [r9], cx
push 0xffffffffcd27c198
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x1408f4773
Capabilities:
Encrypt data using rc4 prga

Disassembly:
not eax
not r11d
and eax, r11d
jmp 0x1408ff5b1
mov dword [r9], eax
jmp 0x1408f3f2a

Function at 0x1408f53b8
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov dword [r8], ebx
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x1408f614e
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov r8, qword [rdi + r8*4 - 0x2a49c80c]
mov qword [r9], r8
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408f76c7
Capabilities:
Encrypt data using rc4 prga

Disassembly:
call fcn.1408dab09
mov eax, dword [r10 + 4]
push 0xffffffffdf37f589
add r10, 4
add ebx, eax
call fcn.1408e6e64
mov ebx, 0x220b68b9
mov rax, qword [rbx + r9 - 0x220b68b9]
not rbx
ror rbx, 0x8e
mov ebx, dword [rax]
adc r9, 4
push 0x4d02e106
mov dword [r9], ebx
push 0x591359a0
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408f83cb
Capabilities:
Encrypt data using rc4 prga

Disassembly:
not dx
mov word [r9], dx
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x1408f8617
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [r9], rdi
push 0x231f4f06
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x1408f8a0f
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov word [r9], r11w
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408fa62c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
not r8b
mov word [r9], r8w
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed
Function at 0x1408fb4c2
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov rdi, qword [r9 + rdi - 0x549c260c]
add r9, 0x10
not dword [rsp + 0xc]
mov qword [rcx], rdi
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408fb851
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add r9, 0xa
mov word ss:[rdx], di
lea rsp, [rsp + 8]
jmp fcn.1408caaed
jmp 0x1408f914b

Function at 0x1408fbeeb
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov r8d, 0x15106712
mov rdx, qword [r8 + r9 - 0x15106712]
mov r8b, byte [r9 + r8 - 0x1510670a]
add r9, 0xa
mov byte ss:[rdx], r8b
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408fc495
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408fd17f
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov rax, qword [rbp + rbx*8 + 0x20]
push 0xfffffffff3ba8e87
mov qword [rsp], rax
lea rsp, [rsp + 8]
jmp fcn.1408caaed
lea rsp, [rsp + 0x18]
jne 0x1408e3abb
mov r9d, 0xb988ae84
mov r9, rax
call fcn.1408ea856
mov edi, 0x4e3dfdb0
mov edx, dword [r9 + rdi - 0x4e3dfdb0]
mov edi, dword [rdi + r9 - 0x4e3dfdac]
push 0xffffffffb1b01eac
add r9, 4
or edx, edi
not edx
mov dword [r9], edx
jmp 0x1408ef68e

Function at 0x1408fd9e1
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp], 0xffffffffddb0950b
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x1408fe667
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov dword [r9], edi
lea rsp, [rsp + 0x20]
jmp fcn.1408caaed

Function at 0x1408fe88c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov word [r9], bx
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x1408ff76d
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x1408ff891
Capabilities:
Encrypt data using rc4 prga

Disassembly:
shr r8w, cl
mov word [r9], r8w
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1408ffb0b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
rep movsb byte [rdi], byte [rsi]
pop rsi
popfq
mov esi, 0x3237cf2b
pop rsi
jmp fcn.1408caaed

Function at 0x140900cf2
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x140900d12
Capabilities:
Encrypt data using rc4 prga

Disassembly:
shrd edx, edi, cl
jmp 0x14090596b
mov dword [r9], edx
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x140901352
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [r9], rax
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed
or rax, rdx
not rax
jmp 0x1408eec4e

Function at 0x140901aff
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov r8d, dword [r9 + rbx*2 - 0x7e35134e]
mov ebx, dword [r9 + rbx*2 - 0x7e35134a]
push 0xffffffffbc21e907
dec word [rsp + 1]
add r9, 4
not r8d
not ebx
ror word [rsp + 4], 4
or r8d, ebx
mov dword [r9], r8d
lea rsp, [rsp + 8]
jmp fcn.1408caaed
call fcn.1408cecb9
mov r8d, 0xc5a84c92
mov ebx, 0x3f1a89a7
jmp 0x1408e3f91

Function at 0x140903be3
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov word [r9], bx
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed
Function at 0x140904366
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push 0xffffffff81210b28
not edx
push 0xffffffff8b8e9bb0
mov dword [r9], edx
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x1409046e1
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [r9], rdi
lea rsp, [rsp + 8]
jmp fcn.1408caaed

Function at 0x140904796
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x140904cef
Capabilities:
Encrypt data using rc4 prga

Disassembly:
shld edx, ebx, cl
push 0xffffffffee827d95
mov dword [r9], edx
push 0x449cf918
lea rsp, [rsp + 0x20]
jmp fcn.1408caaed

Function at 0x140904eff
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push 0xffffffffe232dc00
lea rsp, [rsp + 0x20]
jmp fcn.1408caaed
push 0x3685c517
mov qword [r9], r8
jmp 0x1408ccc43

Function at 0x140905146
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov word [r9], r8w
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x1409064e5
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov word [r9], bx
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed
shr bl, cl
jmp 0x1408cce9f

Function at 0x14090673a
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x1408eceac
call rax
mov rsp, qword [rbp + riz - 0x10]
mov rbp, qword [rbp + riz - 8]
mov esi, 0x1c3fddab
mov qword [rbp + rsi*4 - 0x70ff76ac], rax
jmp 0x1409034c9
bswap esi
mov r9, rbp
movzx ebp, sil
pop rsi
movsx r10d, bp
pop rbp
pop r10
push 0xfffffffff5ba1a18
lea rsp, [rsp + 8]
jmp fcn.1408caaed
mov rax, qword [rax + rbp - 0x852]
sub rsp, 0x18
jmp 0x1408cf259

Function at 0x14090770c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add r9, 4
mov dword [r9], ecx
lea rsp, [rsp + 0x18]
jmp fcn.1408caaed

Function at 0x14090860b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x20]
jmp fcn.1408caaed

Function at 0x140908e2e
Capabilities:
Encrypt data using rc4 prga

Disassembly:
adc r9, 4
not dword [rsp + 8]
shld r11w, bx, cl
mov word [r9], r11w
mov qword [rsp], 0x51d6505
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed

Function at 0x140909d87
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push 0xffffffff993fdb16
add r9, 8
add rcx, rax
jmp 0x1408ca37a
inc di
ror di, 1
jmp 0x140909d52
push 0x733158ae
add di, 0x86
xor di, 0x3c0e
xor bx, di
lea rdi, [rsp + rdi + 0x20]
call fcn.1408f8f3d
mov esi, 0x4caf6b02
shl rsi, 0xb6
mov rdx, qword [r8]
lea rsi, [rsi*8 + 0x223b922c]
call fcn.1408e8bb9
mov ecx, 0x1b87bbc
mov rcx, qword [rcx + r9 - 0x1b87bbc]
mov rax, qword [r9 + 8]
jmp 0x1408d2c6c

Function at 0x14090a207
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed
add r9, 2
add r11w, cx
mov qword [rsp], 0xe92bb10
push 0x1b97cd3b
mov word [r9], r11w
jmp 0x1408ea795

Function at 0x14090a7fb
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea rsp, [rsp + 0x10]
jmp fcn.1408caaed
mov word [r9], cx
jmp 0x1408cb9b3

Function at 0x14090aca8
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov rdi, qword [r9]
pop r11
mov r11b, byte [r9 + 8]
add r9, 0xa
mov byte es:[rdi], r11b
jmp fcn.1408caaed