joyce8/EMBER2024-capa huggingface dataset:
Function at 0x613a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x613b89
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x2074754f244b693a
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa5492074754f244b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4f195b322f691b69
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7456ec276c4b3b72
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4c6170cceb33701f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x201803091d160b0d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1c10171a03162018
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1f21130e0f210014
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1702210d1e081104
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3130f1608031c0e
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x613b0f
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x26
jge 0x613b48
movzx edx, byte [rsp + rax + 0x3a]
lea rsi, [rax + 1]
nop
cmp rsi, 0x26
jae 0x613b7b
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x613b6f
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x22
jb 0x613af2
jmp 0x613b63
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x22
call fcn.00446000
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x22
call fcn.00457f40
mov eax, edi
mov ecx, 0x22
call fcn.00457f40
mov rax, rsi
mov ecx, 0x26
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00613a40
Function at 0x6158a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6159c9
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x632046325574124e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x562b5c74382f6c6c
mov qword [rsp + 0x25], rdx
movabs rdx, 0x4a424df36e562b5c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x556c1b6152752074
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe1305010018120a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x11140e0b0f031213
mov qword [rsp + 0x42], rdx
movabs rdx, 0xd1a01181c0e1114
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a011412111a0911
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x615951
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x30]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x30]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x615988
movzx edx, byte [rsp + rax + 0x3a]
lea rsi, [rax + 1]
cmp rsi, 0x1e
jae 0x6159bb
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x6159af
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x615934
jmp 0x6159a3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00457f40
mov eax, edi
mov ecx, 0x1d
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1e
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.006158a0

Function at 0x616580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6166b3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x70030d2a2f740cc3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x73e726716572f937
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa1d073e726716572
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe3bbf9c9f2e83263
mov qword [rsp + 0x30], rdx
movabs rdx, 0x15061117180e1900
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1315161514190108
mov qword [rsp + 0x40], rdx
movabs rdx, 0x617040e140d090e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x518190609100013
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x61662e
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1d]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x61666d
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x20
jae 0x6166a5
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x616694
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1d]
cmp rsi, 0x1a
jb 0x616614
jmp 0x616688
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457f40
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x20
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00616580
Function at 0x616ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x616fe9
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x8720f674700406af
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x178e0afd6f1dba65
mov qword [rsp + 0x25], rdx
movabs rdx, 0xcc7596178e0afd6f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x197e73066c088d58
mov qword [rsp + 0x30], rdx
movabs rdx, 0x914051200041011
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10000e19150c070e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x702090113170e09
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf01110a0a171a0d
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x616f71
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x77]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x20
jge 0x616fa8
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x616fdb
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x616fcf
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1b
jb 0x616f54
jmp 0x616fc3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00457f40
mov eax, edi
mov ecx, 0x1b
call fcn.00457f40
mov rax, rsi
mov ecx, 0x20
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00616ec0
Function at 0x61a300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61a43f
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x342b03f3c3743368
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9e44af2202e1c6d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x721247f2502209e4
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xdff9263365c97020
mov qword [rsp + 0x34], rdx
movabs rdx, 0x13110c1a0d031d05
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x120e0f1513110c1a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf1d0d151815071a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd011d0604050a1c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b10140915060a0e
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x61a3c0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x61a3fc
movzx edx, byte [rsp + rax + 0x3c]
lea rsi, [rax + 1]
cmp rsi, 0x24
jae 0x61a431
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x61a425
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x16]
cmp rsi, 0x1e
jb 0x61a3a3
jmp 0x61a417
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.00446000
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x1e
call fcn.00457f40
mov rax, rsi
mov ecx, 0x24
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0061a300
Function at 0x61cd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61ce33
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x2a65e873dcf5bc4a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2d2a65e873dcf5bc
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x676ea16499631445
mov qword [rsp + 0x24], rdx
movabs rdx, 0x705010100050207
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30a0c0207050101
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0a0c00030e0c07
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x61cdb0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x61cded
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
nop
cmp rsi, 0x14
jae 0x61ce25
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x61ce14
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4e]
cmp rsi, 0x11
jb 0x61cd96
jmp 0x61ce08
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457f40
mov eax, edi
mov ecx, 0x11
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x14
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0061cd20

Function at 0x61ce40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61cf5f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xf37463682fc3016e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xeb726fb4947974f3
mov qword [rsp + 0x24], rdx
movabs rdx, 0xcc656c64eb1de893
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x208010e01070a08
mov qword [rsp + 0x34], rdx
movabs rdx, 0x9120b0f120b0f12
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa16100509120b0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0e100910120911
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x61cee0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x61cf1c
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x61cf51
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x61cf45
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0x17
jb 0x61cec5
jmp 0x61cf37
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x17
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1c
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0061ce40
Function at 0x61cf80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61d093
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xb2a2286ef9d82773
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd9feb2a2286ef9d8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9b90a79a6f63bce6
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb080f050301070a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1009060b01030f0b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1110070e010e1102
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x61d010
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x61d04d
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
nop
cmp rsi, 0x18
jae 0x61d085
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x61d074
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
cmp rsi, 0x12
jb 0x61cff6
jmp 0x61d068
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457f40
mov eax, edi
mov ecx, 0x12
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x18
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0061cf80

Function at 0x61d300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61d3f3
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x85c789a953f61525
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6b7a1085c789a953
mov qword [rsp + 0x22], rdx
movabs rdx, 0x402010907080a07
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x706090805040402
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x61d372
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x65]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x61d3ae
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x61d3e5
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x61d3d5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x65]
cmp rsi, 0xb
jb 0x61d358
jmp 0x61d3c9
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457f40
mov eax, edi
mov ecx, 0xb
nop dword [rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0061d300
Function at 0x61d780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61d8b3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x235870756776656c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6c27694872256969
mov qword [rsp + 0x26], rdx
movabs rdx, 0x347465616c276948
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x703f365d68666455
mov qword [rsp + 0x32], rdx
movabs rdx, 0x170a0e0002131b0f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd15100718070c0a
mov qword [rsp + 0x42], rdx
movabs rdx, 0x14070b00131a0d15
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60e0f0304020d09
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x61d82e
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x61d86d
movzx edx, byte [rsp + rax + 0x3a]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x1e
jae 0x61d8a5
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x61d894
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1b]
cmp rsi, 0x1c
jb 0x61d814
jmp 0x61d888
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457f40
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1e
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0061d780

Function at 0x61d8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61d9f3
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xe1c0242f9bba2574
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7261d01c203b261f
mov qword [rsp + 0x25], rdx
movabs rdx, 0x737261d01c203b26
mov qword [rsp + 0x26], rdx
movabs rdx, 0x212d6674ece0d0ee
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc070818110d1113
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1118031109050112
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x20c111803110905
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10c131401110106
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x61d96e
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1a
jge 0x61d9ad
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x1a
jae 0x61d9e5
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x61d9d4
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0x19
jb 0x61d954
jmp 0x61d9c8
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457f40
mov eax, edi
mov ecx, 0x19
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1a
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0061d8c0
Function at 0x61e4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61e59f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xb7e1000024c79a52
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x50a7a7a57cdcb7e1
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20c08030c0a0a09
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x801080b020c0803
mov qword [rsp + 0x30], rdx
movabs rdx, 0x108030703060808
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x61e524
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x61e55b
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x61e591
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x61e585
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x61e507
jmp 0x61e576
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0xe
call fcn.00457f40
mov rax, rsi
mov ecx, 0x14
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0061e4a0

Function at 0x61e5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61e69f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x657703b5670b6d54
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xb30a
movabs rdx, 0x405010409040004
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x90208
xor eax, eax
jmp 0x61e626
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x61e65d
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x61e691
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x61e685
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x61e609
jmp 0x61e678
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0xa
call fcn.00457f40
mov rax, rsi
mov ecx, 0xc
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0061e5c0
Function at 0x61ea00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61eadf
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x3595653d612f3b
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 7
movabs rdx, 0x801070508050300
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6060106
xor eax, eax
jmp 0x61ea61
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x61ea9d
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x61ead1
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x61eac5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 9
jb 0x61ea47
jmp 0x61eab8
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop
call fcn.00457f40
mov eax, edi
mov ecx, 9
call fcn.00457f40
mov rax, rsi
mov ecx, 0xc
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0061ea00

Function at 0x61ec80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61ed73
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x840000f0030810ff
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xffffefff
movabs rdx, 0x2020b0101020307
mov qword [rsp + 0x28], rdx
movabs rdx, 0x107010304090904
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x61eceb
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x61ed2d
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
nop word [rax + rax]
cmp rsi, 0x10
jae 0x61ed65
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x61ed54
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x72]
cmp rsi, 0xc
jb 0x61ecd1
jmp 0x61ed48
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457f40
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0061ec80
Function at 0x61fa60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61fb3f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x8084ffff84ffc680
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x600010100070306
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x703
xor eax, eax
nop
jmp 0x61fac0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x35]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x61fafc
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x61fb31
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x61fb25
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x35]
cmp rsi, 8
jb 0x61faa2
jmp 0x61fb17
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
nop
call fcn.00457f40
mov eax, edi
mov ecx, 8
call fcn.00457f40
mov rax, rsi
mov ecx, 0xa
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0061fa60

Function at 0x61fb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61fc38
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xf502a0a09e418607
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2010703060102
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x405
xor eax, eax
nop
jmp 0x61fbc0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x61fbf7
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x61fc2a
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x61fc1e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 8
jb 0x61fba2
jmp 0x61fc12
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00457f40
mov eax, edi
mov ecx, 8
call fcn.00457f40
mov rax, rsi
mov ecx, 0xa
call fcn.00457f40
nop
call fcn.00455860
nop dword [rax]
jmp fcn.0061fb60