joyce8/EMBER2024-capa huggingface dataset:
Function at 0x326060600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3260606c6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5c6141484e744047
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x5e
movabs rdx, 0x805010807030500
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x7050405
xor eax, eax
nop
jmp 0x326060660
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x326060692
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x3260606b7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
cmp rsi, 9
jb 0x326060642
jmp 0x3260606ab
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.32601d600
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.326033020
mov eax, edi
mov ecx, 9
nop
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.326060600

Function at 0x326060b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x326060c4c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x6f2076bc739143b8
mov qword [rsp + 0x53], rdx
movabs rdx, 0x6e6197b49a6f2076
mov qword [rsp + 0x58], rdx
movabs rdx, 0xbf65bc5d31ad9711
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf1ca6fa74baa8d41
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe5e9b29e0543747f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x4081c0e2224120e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe191411171b0408
mov qword [rsp + 0x23], rdx
movabs rdx, 0x21220a00090e1703
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1604190f0d211f23
mov qword [rsp + 0x33], rdx
movabs rdx, 0x81c021d23070a01
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xe1820201f191d
mov qword [rsp + 0x43], rdx
movabs rdx, 0x210e0512101b0511
mov qword [rsp + 0x4b], rdx
xor eax, eax
jmp 0x326060be4
movzx r9d, byte [rsp + rsi + 0x53]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x53], dl
mov byte [rsp + rsi + 0x53], r8b
add rax, 2
cmp rax, 0x36
jge 0x326060c1c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x25
jae 0x326060c3f
movzx r8d, byte [rsp + rdi + 0x53]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
cmp rsi, 0x25
jb 0x326060bca
jmp 0x326060c33
xor eax, eax
lea rbx, [rsp + 0x53]
mov ecx, 0x25
call fcn.32601d600
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.326033020
mov eax, edi
mov ecx, 0x25
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.326060b00
Function at 0x326061040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x32606113b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb9706de3deed7270
mov qword [rsp + 0x38], rdx
movabs rdx, 0xde3474582064b5d4
mov qword [rsp + 0x40], rdx
movabs rdx, 0x74c5d266e4ff9e38
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1103120302041003
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x70c0c090e160707
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3071312070c0c09
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7160c0f09081315
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x3260610d9
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7a]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1c
jge 0x32606110b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x32606112e
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7a]
cmp rsi, 0x18
jb 0x3260610bf
jmp 0x326061122
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.32601d600
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.326033020
mov eax, edi
mov ecx, 0x18
call fcn.326033020
nop
nop dword [rax + rax]
call fcn.326030d20
jmp fcn.326061040

Function at 0x326061160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x32606125b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf8f5aa70789d1701
mov qword [rsp + 0x32], rdx
movabs rdx, 0x74656d7b6407f8f5
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0886b878876ed6f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70815110a140205
mov qword [rsp + 0x18], rdx
movabs rdx, 0x14010e0a13051200
mov qword [rsp + 0x20], rdx
movabs rdx, 0x150614010e0a1305
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa140f0510050002
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x3260611f9
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x1a
jge 0x32606122b
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x32606124e
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0x16
jb 0x3260611df
jmp 0x326061242
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.32601d600
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.326033020
mov eax, edi
mov ecx, 0x16
call fcn.326033020
nop
nop dword [rax + rax]
call fcn.326030d20
jmp fcn.326061160
Function at 0x326061280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x32606136c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xdde06570786539ce
mov qword [rsp + 0x33], rdx
movabs rdx, 0xd43bae3441dde065
mov qword [rsp + 0x38], rdx
movabs rdx, 0x707e187320cd7536
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0c0107130a0a0b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf080f0900060c0c
mov qword [rsp + 0x23], rdx
movabs rdx, 0x70f0f0d0b0f1207
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x32606130a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x32606133c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x32606135f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x15
jb 0x3260612f0
jmp 0x326061353
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.32601d600
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.326033020
mov eax, edi
mov ecx, 0x15
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.326061280

Function at 0x326063b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x326063c1d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2a5563656c17113a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x66bae046b03e4525
mov qword [rsp + 0x42], rdx
movabs rdx, 0x6c4b3c6e442066ba
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd365e6793920645a
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd0e1b130b0e1d1b
mov qword [rsp + 0x18], rdx
movabs rdx, 0x190e0d0e1b130b0e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb080a0101011419
mov qword [rsp + 0x22], rdx
movabs rdx, 0x216131107111600
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7160e060c130c0b
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x326063bc0
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 + 0x40]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 + 0x40]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x326063bed
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x326063c10
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x326063b9d
jmp 0x326063c04
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.32601d600
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.326033020
mov eax, edi
mov ecx, 0x1e
call fcn.326033020
nop
nop dword [rax]
call fcn.326030d20
jmp fcn.326063b00
Function at 0x326065400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3260654fd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2e09e9e56c74eafb
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd6f42e09e9e56c74
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6e4141808e7b290
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2040a100909100b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x40f0a1100100c05
mov qword [rsp + 0x24], rdx
movabs rdx, 0x408040f0a110010
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1080d06060b110e
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x3260654a0
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 - 0x73]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x3260654cd
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x3260654f0
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x32606547f
jmp 0x3260654e4
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.32601d600
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.326033020
mov eax, edi
mov ecx, 0x12
call fcn.326033020
nop
nop dword [rax]
call fcn.326030d20
jmp fcn.326065400

Function at 0x326065940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x326065a98
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x2eb5798ae4d139d1
mov qword [rsp + 0x4f], rdx
movabs rdx, 0x55076320752af4da
mov qword [rsp + 0x57], rdx
movabs rdx, 0x6c55076320752af4
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7845720546f193cc
mov qword [rsp + 0x60], rdx
movabs rdx, 0xd26465595feae4a9
mov qword [rsp + 0x68], rdx
movabs rdx, 0x916f9e1072847469
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1d121b0106161d15
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3231d121b010616
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1420030b05090e04
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1d1c0f1713192603
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x90615081125110a
mov qword [rsp + 0x37], rdx
movabs rdx, 0x1b0317020a0e0f12
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x1a1d28200e1b0011
mov qword [rsp + 0x47], rdx
xor eax, eax
jmp 0x326065a33
movzx r9d, byte [rsp + rsi + 0x4f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x4f], dl
mov byte [rsp + rsi + 0x4f], r8b
add rax, 2
cmp rax, 0x32
jge 0x326065a68
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x326065a8b
movzx r8d, byte [rsp + rdi + 0x4f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
nop dword [rax]
cmp rsi, 0x29
jb 0x326065a19
jmp 0x326065a7f
xor eax, eax
lea rbx, [rsp + 0x4f]
mov ecx, 0x29
call fcn.32601d600
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.326033020
mov eax, edi
mov ecx, 0x29
call fcn.326033020
nop
call fcn.326030d20
nop dword [rax]
jmp fcn.326065940
Function at 0x326065ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x326065f8a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xfb65f6476cfc6572
mov qword [rsp + 0x37], rdx
movabs rdx, 0xffb65f6476cfc65
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc44e0bfa9a58c897
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6070b06070c0509
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd0b100d0d0f0402
mov qword [rsp + 0x27], rdx
movabs rdx, 0x8050e100e0a0e02
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x326065f2d
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 + 0x77]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x18
jge 0x326065f5a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x326065f7d
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x11
jb 0x326065f10
jmp 0x326065f71
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.32601d600
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.326033020
mov eax, edi
mov ecx, 0x11
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.326065ea0

Function at 0x3260660c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3260661ec
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x3aa163b26cc44f72
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x9a3aa163b26cc44f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xab6994aba77298cd
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa0a1934120a7659b
mov qword [rsp + 0x50], rdx
movabs rdx, 0xce8c6e53df20dd6f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x11020410160c0420
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe1d11020410160c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6170a180a1a1c13
mov qword [rsp + 0x27], rdx
movabs rdx, 0x111f01080809130d
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x18152018130d1804
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x326066186
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x22
jge 0x3260661bc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x21
jae 0x3260661df
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4e]
cmp rsi, 0x21
jb 0x32606616c
jmp 0x3260661d3
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x21
call fcn.32601d600
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.326033020
mov eax, edi
mov ecx, 0x21
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.3260660c0
Function at 0x3260677c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3260678f8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xac74ca91bbba3ea3
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x2a4d09614eac74ca
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6f2083283d22c62e
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe8eefafe206e2066
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe66808f5ef9e6565
mov qword [rsp + 0x68], rdx
movabs rdx, 0xb110c180008190e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2212041f00050f01
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1f100a1105071f1f
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xf231f02211c0807
mov qword [rsp + 0x33], rdx
movabs rdx, 0x200a220400192302
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x240f031a051b241d
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x326067895
movzx r9d, byte [rsp + rsi + 0x4b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x4b], dl
mov byte [rsp + rsi + 0x4b], r8b
add rax, 2
cmp rax, 0x30
jge 0x3260678c8
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x3260678eb
movzx r8d, byte [rsp + rdi + 0x4b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
nop
cmp rsi, 0x25
jb 0x32606787b
jmp 0x3260678df
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x25
call fcn.32601d600
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.326033020
mov eax, edi
mov ecx, 0x25
call fcn.326033020
nop
call fcn.326030d20
nop dword [rax]
jmp fcn.3260677c0

Function at 0x326068680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3260687d8
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0xf1c701b8eaf67ab1
mov qword [rsp + 0x4f], rdx
movabs rdx, 0xeff569e218206c17
mov qword [rsp + 0x57], rdx
movabs rdx, 0x1eeff569e218206c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x12202c0ae1c2eacc
mov qword [rsp + 0x60], rdx
movabs rdx, 0xcafc26fc32d126f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x6575406156ffe91b
mov qword [rsp + 0x70], rdx
movabs rdx, 0x707000304120f0e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x202070700030412
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7071f1f04041423
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1318041006150111
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x142607051a1c1e0b
mov qword [rsp + 0x37], rdx
movabs rdx, 0x11121200b080522
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x18161a1f0c031001
mov qword [rsp + 0x47], rdx
xor eax, eax
jmp 0x326068776
movzx r9d, byte [rsp + rsi + 0x4f]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x4f], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x4f], dl
add rax, 2
cmp rax, 0x32
jge 0x3260687a8
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x3260687cb
movzx r8d, byte [rsp + rdi + 0x4f]
sub r8d, edx
nop dword [rax + rax]
cmp rsi, 0x29
jb 0x326068759
jmp 0x3260687bf
xor eax, eax
lea rbx, [rsp + 0x4f]
mov ecx, 0x29
call fcn.32601d600
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.326033020
mov eax, edi
mov ecx, 0x29
call fcn.326033020
nop
call fcn.326030d20
nop dword [rax]
jmp fcn.326068680
Function at 0x326068c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x326068cbd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x200269ece92a6e37
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x3d
movabs rdx, 0x603040600020303
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x408
xor eax, eax
nop
jmp 0x326068c60
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x43]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x43]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x326068c8d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x326068cb0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x326068c42
jmp 0x326068ca4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.32601d600
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.326033020
mov eax, edi
mov ecx, 9
call fcn.326033020
nop
nop dword [rax]
call fcn.326030d20
jmp fcn.326068c00

Function at 0x32606b2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x32606b38c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9ea620194f0b12a6
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x72b1660e
movabs rdx, 0x20107080400060a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4040604080a0603
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x32606b325
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x32606b35c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x32606b37f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x54]
cmp rsi, 0xc
jb 0x32606b30b
jmp 0x32606b373
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.32601d600
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.326033020
mov eax, edi
mov ecx, 0xc
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.32606b2c0
Function at 0x32606b7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x32606b89b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x13a4120904f79200
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb6d987613a41209
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3ef3f6667f6f093c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6070c040a0f0501
mov qword [rsp + 0x18], rdx
movabs rdx, 0x11030f0d110b040a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1300020911030f0d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x50312070a0202
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x32606b839
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4f]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1c
jge 0x32606b86b
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x32606b88e
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4f]
cmp rsi, 0x14
jb 0x32606b81f
jmp 0x32606b882
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.32601d600
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.326033020
mov eax, edi
mov ecx, 0x14
call fcn.326033020
nop
nop dword [rax + rax]
call fcn.326030d20
jmp fcn.32606b7a0

Function at 0x32606c220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x32606c30c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x456ca4c9ab6c69b0
mov qword [rsp + 0x2d], rdx
movabs rdx, 0xaa61f4456ca4c9ab
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe1e99afa78ac2079
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8080f000d120407
mov qword [rsp + 0x19], rdx
movabs rdx, 0x110d1008080f00
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3060a08050604
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x32606c2aa
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5a]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x14
jge 0x32606c2dc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x32606c2ff
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5a]
cmp rsi, 0x13
jb 0x32606c290
jmp 0x32606c2f3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.32601d600
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.326033020
mov eax, edi
mov ecx, 0x13
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.32606c220
Function at 0x326076740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x326076806
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xaf727fe77ef6f8ea
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xf3
movabs rdx, 0x305080105080708
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x4000502
xor eax, eax
nop
jmp 0x3260767a0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6d]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x3260767d2
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x3260767f7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6d]
cmp rsi, 9
jb 0x326076782
jmp 0x3260767eb
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.32601d600
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.326033020
mov eax, edi
mov ecx, 9
nop
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.326076740

Function at 0x326077300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3260773bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe7616e625f72e3e2
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6bf6
movabs rdx, 0x109000408070903
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 3
xor eax, eax
jmp 0x326077360
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x32607738d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x3260773b0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x326077342
jmp 0x3260773a4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.32601d600
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.326033020
mov eax, edi
mov ecx, 0xa
call fcn.326033020
nop
nop dword [rax]
call fcn.326030d20
jmp fcn.326077300