joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5ffa00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ffadc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x54c41510d40461bc
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1b0d6554c41510d4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x502000909040403
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90a06090502
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5ffa75
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x5ffaa8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5ffacf
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x5ffa58
jmp 0x5ffac3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.005ffa00

Function at 0x5ffcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ffd9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x10f53517a7fff34f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x134f9510f53517a7
mov qword [rsp + 0x20], rdx
movabs rdx, 0x60a030705020800
mov qword [rsp + 0x28], rdx
movabs rdx, 0x701000402040008
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5ffd35
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x6b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x6b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x5ffd68
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5ffd8f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x5ffd18
jmp 0x5ffd83
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.005ffcc0
Function at 0x600a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x600b1c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4a6ca077737d7a82
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6b8a964a6ca07773
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa09010809020205
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x508010400080a09
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x600ab2
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffdb
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x600ae8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x600b0f
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffdb
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x600a98
jmp 0x600b03
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.00600a40

Function at 0x6021c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x602376
sub rsp, 0xa0
mov qword [rsp + 0x98], rbp
lea rbp, [rsp + 0x98]
movabs rdx, 0xc214c6576425947e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6664e0c214c65764
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6659bdc7bc214672
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa845ca639b796a44
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x61a363443bdcf342
mov qword [rsp + 0x36], rdx
movabs rdx, 0x95209a824c821aeb
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa8406ffb35728910
mov qword [rsp + 0x46], rdx
movabs rdx, 0x504131f1d242721
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x3201242c26282723
mov qword [rsp + 0x56], rdx
movabs rdx, 0x2e023201242c2628
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2f0e1e292b1b2a1d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x312525191c161a11
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe0d030d0a041b06
mov qword [rsp + 0x70], rdx
movabs rdx, 0x510071b2e0f1814
mov qword [rsp + 0x78], rdx
movabs rdx, 0xe2408291d1e1914
mov qword [rsp + 0x80], rdx
movabs rdx, 0x2b1e000c0e233110
mov qword [rsp + 0x88], rdx
movabs rdx, 0x2142700250e1603
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x60230f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x14]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x4a
jge 0x60233c
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x33
jae 0x602369
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x33
jb 0x6022f2
jmp 0x60235d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x33
call fcn.0044ba20
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov eax, esi
mov ecx, 0x33
call fcn.00461e80
mov eax, edi
mov ecx, 0x33
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.006021c0
Function at 0x609220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x609387
sub rsp, 0xc0
mov qword [rsp + 0xb8], rbp
lea rbp, [rsp + 0xb8]
movabs rdx, 0xed61a53b886f84f6
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7a4f351d6950ee33
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6c5e677826655255
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xfc11852c2a3a7233
mov qword [rsp + 0x34], rdx
movabs rdx, 0x3d5260204236423a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xea5c7378617a6e77
mov qword [rsp + 0x44], rdx
movabs rdx, 0x613f2be354495350
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x6c0d9f6d75fc206f
mov qword [rsp + 0x54], rdx
movabs rdx, 0x4071f3708370a30
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x31001318321b0c09
mov qword [rsp + 0x64], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x006ac560]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0046249a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x609320
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x5c
jge 0x60934d
movzx edx, byte [rsp + rax + 0x5c]
movzx esi, byte [rsp + rax + 0x5d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x40
jae 0x60937a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x40
jb 0x6092ff
jmp 0x60936e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x40
call fcn.0044ba20
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
mov eax, esi
mov ecx, 0x40
call fcn.00461e80
mov eax, edi
mov ecx, 0x40
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00609220
Function at 0x60ed60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x60ef17
sub rsp, 0xa0
mov qword [rsp + 0x98], rbp
lea rbp, [rsp + 0x98]
movabs rdx, 0xff22578af44f5336
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd3eb6fff22578af4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10157074625172
mov qword [rsp + 0x26], rdx
movabs rdx, 0xebe90aab1b10e2c9
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x619a69e572744633
mov qword [rsp + 0x36], rdx
movabs rdx, 0x575993e6e2ed2d7
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe0306f6f66b165d7
mov qword [rsp + 0x46], rdx
movabs rdx, 0xd12120618251a18
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x15160c19002a1e0d
mov qword [rsp + 0x56], rdx
movabs rdx, 0x51a15160c19002a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1423280c1c092500
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2a0d1f0a0311250a
mov qword [rsp + 0x68], rdx
movabs rdx, 0x192327310d07322d
mov qword [rsp + 0x70], rdx
movabs rdx, 0x27091f041803171f
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1a0d312b0d282018
mov qword [rsp + 0x80], rdx
movabs rdx, 0x20240712042d121b
mov qword [rsp + 0x88], rdx
movabs rdx, 0xf051721100f130e
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x60eeac
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x4d
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x4a
jge 0x60eedd
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x33
jae 0x60ef0a
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x4d
add r8d, edx
cmp rsi, 0x33
jb 0x60ee92
jmp 0x60eefe
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x33
call fcn.0044ba20
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov eax, esi
mov ecx, 0x33
call fcn.00461e80
mov eax, edi
mov ecx, 0x33
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax]
jmp fcn.0060ed60

Function at 0x60f220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x60f328
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6e0a105b1f6f3553
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1351515d6e0a105b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x296c69384842552d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x501000e10080505
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80d0f090a0a000b
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc05080d0f090a0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4000f03010f0506
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x60f2c2
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1a
jge 0x60f2ef
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x60f31b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x60f2a5
jmp 0x60f30f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461e80
mov eax, edi
mov ecx, 0x14
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0060f220
Function at 0x60fb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x60fc52
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6fe1cb6f12bb7125
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xbcb4badfb8b2366f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0ccba21e6206605
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x15000d160d0c130b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x80f15000d160d0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50d141401080203
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0d001500050a15
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6090f1200130b02
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x60fbf1
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x22
jge 0x60fc1e
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x60fc45
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x60fbd4
jmp 0x60fc39
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461e80
mov eax, edi
mov ecx, 0x17
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0060fb40

Function at 0x611a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x611b52
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x61f93ca84d9a6515
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa865b561f93ca84d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5080a0a06020002
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4020804
xor eax, eax
jmp 0x611aeb
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffab
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x611b1c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x611b45
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffab
add r8d, edx
cmp rsi, 0xb
jb 0x611ad1
jmp 0x611b37
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00611a80
Function at 0x611c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x611d48
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x68a774247073a718
mov qword [rsp + 0x18], rdx
movabs rdx, 0x722d1c27da1d655d
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe040b060608010f
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0d010b01080d0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x800060406010a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x611ce1
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x31
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x18
jge 0x611d12
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x611d3b
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x31
add r8d, edx
cmp rsi, 0x10
jb 0x611cc7
jmp 0x611d2f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461e80
mov eax, edi
mov ecx, 0x10
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00611c60

Function at 0x611d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x611e3c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x68ee67f384e46502
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x57cd7768ee67f384
mov qword [rsp + 0x22], rdx
movabs rdx, 0x608030000020808
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x403090003070608
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x611dd2
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x6d
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x611e08
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x611e2f
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x6d
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x611db8
jmp 0x611e23
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.00611d60
Function at 0x611e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x611f28
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x9bd6dc49909a6fa9
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xc1cd
movabs rdx, 0x300000509030708
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7020206
xor eax, eax
jmp 0x611ec3
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffffbb
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x611ef4
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x611f1b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffffbb
add r8d, edx
cmp rsi, 0xa
jb 0x611ea9
jmp 0x611f0f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461e80
mov eax, edi
mov ecx, 0xa
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00611e60

Function at 0x612640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6126fc
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0x2634266908740d45
mov qword [rsp + 0x20], rdx
movabs rdx, 0x605010605030700
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x612694
movzx r9d, byte [rsp + rsi + 0x20]
add r9d, 0x26
add edx, r9d
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x6126c8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x6126ef
movzx r8d, byte [rsp + rdi + 0x20]
add r8d, 0x26
add r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x61267a
jmp 0x6126e3
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044ba20
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.00461e80
mov eax, edi
mov ecx, 8
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.00612640

Function at 0x613000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6130cb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x75e50bb343bc9f53
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xfdfe
movabs rdx, 0x802060505090101
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2090504
xor eax, eax
jmp 0x613066
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x3a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x3a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x613097
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x6130be
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x613049
jmp 0x6130b2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461e80
mov eax, edi
mov ecx, 0xa
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00613000
Function at 0x6130e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6131bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x644f73304f5a6a52
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x65503e74700f644f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0803060b07040b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8020407010c0c04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x613155
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x1f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x613188
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x6131af
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x613138
jmp 0x6131a3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461e80
mov eax, edi
mov ecx, 0xe
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.006130e0

Function at 0x6134e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6135cb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6ffe6e6ff4df65e3
mov qword [rsp + 0x18], rdx
movabs rdx, 0x8d06276ed2dc65bd
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30d0b02080d0300
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf0f06060e03060f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0300020b0a0600
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x613564
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x4c]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x4c]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x18
jge 0x613597
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x6135be
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x613547
jmp 0x6135b2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461e80
mov eax, edi
mov ecx, 0x10
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.006134e0
Function at 0x615400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x615508
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6e1ba9be2766c250
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd8116101296e1ba9
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe72891ccdec2e777
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x140d03081412030e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x140f061113010412
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc0f1200140d140f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130b0b1210090510
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x6154a0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x31
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x6154d1
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x6154fb
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x31
add r8d, edx
cmp rsi, 0x15
jb 0x615485
jmp 0x6154ef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461e80
mov eax, edi
mov ecx, 0x15
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00615400

Function at 0x615520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x6156a7
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0xff7c636f695d3352
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x657249720a646165
mov qword [rsp + 0x25], rdx
movabs rdx, 0x334e12026ce66a65
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2d7669747779566e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6b4f2840654e576b
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x6477f8523d746f34
mov qword [rsp + 0x44], rdx
movabs rdx, 0xb2521131401100d
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x221e142111010720
mov qword [rsp + 0x54], rdx
movabs rdx, 0x26130227221e1421
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a20020516141529
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1f01000020152a2c
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2305220d29201218
mov qword [rsp + 0x70], rdx
movabs rdx, 0x192224061a162d02
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1001002d22262918
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x615640
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x3c
jge 0x61566d
movzx edx, byte [rsp + rax + 0x4c]
movzx esi, byte [rsp + rax + 0x4d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x61569a
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x2f
jb 0x61561f
jmp 0x61568e
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x2f
call fcn.0044ba20
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x2f
call fcn.00461e80
mov eax, edi
mov ecx, 0x2f
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00615520