joyce8/EMBER2024-capa huggingface dataset:
Function at 0x6156c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x615847
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0x77aabd6f0566ec4b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x159d16a0dc746970
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6e2064020fa3fff2
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe5653469c961382d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2d1221866efaa7ee
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa11cbd0b6ef0fa3b
mov qword [rsp + 0x44], rdx
movabs rdx, 0x80e200f29140c2b
mov qword [rsp + 0x4c], rdx
movabs rdx, 0xd12081b1b24132c
mov qword [rsp + 0x54], rdx
movabs rdx, 0x2001121f0d12081b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x210e051b07002f03
mov qword [rsp + 0x60], rdx
movabs rdx, 0x180c0126242f062d
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1000241b072e0c2d
mov qword [rsp + 0x70], rdx
movabs rdx, 0x27192a2f1103222d
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1d28250b0e2b1b2e
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x6157e0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x3c
jge 0x61580d
movzx edx, byte [rsp + rax + 0x4c]
movzx esi, byte [rsp + rax + 0x4d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x61583a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x30
jb 0x6157bf
jmp 0x61582e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x30
call fcn.0044ba20
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x30
call fcn.00461e80
mov eax, edi
mov ecx, 0x30
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.006156c0

Function at 0x615860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x615986
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x63539f2332c43ad4
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x21202c7265b1cf0e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x206e656bce21202c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5832b06c206f2acd
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd0109100a000f02
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x51b0a080d010910
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1a041c1c01160a03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c151b0a02010504
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa08080805150d1a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x615920
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x43]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x43]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x24
jge 0x61594d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x615974
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1d
jb 0x615903
jmp 0x615968
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.0044ba20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461e80
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00615860
Function at 0x616dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x616e92
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x4272724263607836
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x493c
movabs rdx, 0x704040400020208
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4000207090704
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x616e2a
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 5
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x616e5b
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x616e85
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 5
add r8d, edx
cmp rsi, 0xa
jb 0x616e10
jmp 0x616e76
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xa
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00616dc0
Function at 0x619460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61954b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xe7e4a57361a3ce43
mov qword [rsp + 0x19], rdx
movabs rdx, 0xdb9a259b27e7e4a5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80a01060c0a0708
mov qword [rsp + 0x26], rdx
movabs rdx, 0x50c080a01060c0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x609020b01050207
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x6194e4
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x2f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x2f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x619517
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x61953e
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x6194c7
jmp 0x619532
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461e80
mov eax, edi
mov ecx, 0xd
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00619460

Function at 0x619560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61963c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x5e804689a87a4c51
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7e4967a77250855e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x608030e0b080e02
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb020e0007040e02
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x6195d2
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffd9
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x619608
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x61962f
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffd9
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xf
jb 0x6195b8
jmp 0x619623
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461e80
mov eax, edi
mov ecx, 0xf
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.00619560
Function at 0x619d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x619e52
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xacde3028f3476f26
mov qword [rsp + 0x19], rdx
movabs rdx, 0x740626acde3028f3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x403090003070608
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4070805
xor eax, eax
jmp 0x619dee
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x619e1b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x619e45
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x619dd1
jmp 0x619e36
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00619d80

Function at 0x61aa20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61ab08
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x131a4eac4673b270
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9a006972c2131a4e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0608080b0706
mov qword [rsp + 0x26], rdx
movabs rdx, 0x501000c0608080b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4070404040c0701
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x61aaa1
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffa7
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x61aad2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x61aafb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffa7
add r8d, edx
cmp rsi, 0xd
jb 0x61aa87
jmp 0x61aaef
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461e80
mov eax, edi
mov ecx, 0xd
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0061aa20
Function at 0x61ab20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61abf2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6e2872542f1b4151
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6eef084a
movabs rdx, 0x10906080a010206
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x402030900010109
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x61ab8e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x61abbb
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x61abe5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x61ab71
jmp 0x61abd6
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0061ab20

Function at 0x61ca00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61cb52
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x865271a79c65ee7b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9342414231088652
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf242024fa77398b7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x831c9c76b12d437b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x5ebf3085ada1f865
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x25210f221e110812
mov qword [rsp + 0x42], rdx
movabs rdx, 0x9161a0225062521
mov qword [rsp + 0x48], rdx
movabs rdx, 0x80e1e100d12251c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x15161507011c1a07
mov qword [rsp + 0x58], rdx
movabs rdx, 0x41b03200e1d080d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x25131d051f1f051f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x151c19070519241f
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x61caed
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x36
jge 0x61cb1a
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x61cb45
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x26
jb 0x61cad0
jmp 0x61cb35
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x26
call fcn.0044ba20
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x26
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0x26
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0061ca00
Function at 0x61f6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61f7f2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x410f25efb8f14320
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x531f2390845410f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x38101b3727260b59
mov qword [rsp + 0x28], rdx
movabs rdx, 0xce19cd7e2e622e9
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7d304333f1f51946
mov qword [rsp + 0x38], rdx
movabs rdx, 0x201b051a0c190b13
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16211303110c17
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe00171f1110041c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d1c18201d02051c
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd090f0414061014
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x61f78c
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xfffffffe
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x28
jge 0x61f7bd
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x61f7e5
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xfffffffe
add r8d, edx
cmp rsi, 0x26
jb 0x61f772
jmp 0x61f7d8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x26
call fcn.0044ba20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x26
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0x26
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0061f6c0

Function at 0x621760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x621856
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xa8b4ac417cfec68e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x81a59d94a8b4ac41
mov qword [rsp + 0x22], rdx
movabs rdx, 0x61be61edb9d472b2
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x120f0b010802100b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x90301000a08120f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc060705050e0b0a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x6217f3
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x621822
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x621849
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x6217d6
nop
jmp 0x62183d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461e80
mov eax, edi
mov ecx, 0x14
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.00621760
Function at 0x621c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x621d56
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x875d72697a66757e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7a85af875d72697a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7d836957656c4586
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10010a0308091000
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf09070904001001
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6100b0812110708
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x621cf0
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffde
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x621d22
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x621d49
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffde
add r8d, edx
cmp rsi, 0x13
jb 0x621cd6
nop
jmp 0x621d3d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461e80
mov eax, edi
mov ecx, 0x13
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.00621c60

Function at 0x621fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6220b6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xad06bb07153b8ab9
mov qword [rsp + 0x18], rdx
movabs rdx, 0x4779ad06bb07153b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x95995711424c74b8
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe0f0e03020604
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60a02021000000e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x711070304010f05
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x622050
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0xffffffa2
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x622082
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x6220a9
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0xffffffa2
add r8d, edx
cmp rsi, 0x12
jb 0x622036
nop
jmp 0x62209d
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461e80
mov eax, edi
mov ecx, 0x12
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.00621fc0
Function at 0x6226e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6227e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x677f72644b666b70
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x956892658a6d677f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x88669c9d7f5dab8a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x150b040c110f0709
mov qword [rsp + 0x32], rdx
movabs rdx, 0x40d0c0703090600
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc1100130e15040d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc01120810040013
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x622782
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x10]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x10]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1e
jge 0x6227af
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x6227db
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x622765
jmp 0x6227cf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461e80
mov eax, edi
mov ecx, 0x16
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.006226e0

Function at 0x622d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x622e06
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x56336c6a1b59464f
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x5f2e2c39
movabs rdx, 0x3010a07020b0308
mov qword [rsp + 0x26], rdx
movabs rdx, 0x703010a07020b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3010a0400030907
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x622da0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x622dcd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x622df4
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xc
jb 0x622d82
jmp 0x622de8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00622d20
Function at 0x622f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x623052
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xbe33cd0b857f6cb8
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6c06186c
movabs rdx, 0x80209000a070804
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5030704050802
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x622feb
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffff9f
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x62301c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x623045
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffff9f
add r8d, edx
cmp rsi, 0xc
jb 0x622fd1
jmp 0x623037
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00622f80

Function at 0x627d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x627e36
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x82986e616d78567d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7482986e616d7856
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x728785918b654796
mov qword [rsp + 0x24], rdx
movabs rdx, 0x100e0e0c0d060101
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9000f0a100e0e0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf07000206100d01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x627dd0
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffd9
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x627e02
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x627e29
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffd9
add r8d, edx
cmp rsi, 0x11
jb 0x627db6
nop
jmp 0x627e1d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461e80
mov eax, edi
mov ecx, 0x11
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.00627d40
Function at 0x6285c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6286ab
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x48c3425b53365024
mov qword [rsp + 0x18], rdx
movabs rdx, 0x7365463e543a48c3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x70b000006090a08
mov qword [rsp + 0x26], rdx
movabs rdx, 0x209070b00000609
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb04000002000501
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x628644
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x12
jge 0x628677
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x62869e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x628627
jmp 0x628692
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461e80
mov eax, edi
mov ecx, 0xe
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.006285c0

Function at 0x628a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x628b33
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x844edd65b0d474de
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7473df926516bb74
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa69a8abd657473df
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8115a9eb61da72bb
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd0a11151a051903
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x171a00120d1b0a14
mov qword [rsp + 0x42], rdx
movabs rdx, 0x209030d1c12171a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a13070c03021b09
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x628ace
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffffaa
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x628aff
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x628b26
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffffaa
add r8d, edx
cmp rsi, 0x1d
jb 0x628ab4
jmp 0x628b1a
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461e80
mov eax, edi
mov ecx, 0x1d
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00628a20