joyce8/EMBER2024-capa huggingface dataset:
Function at 0x3260776c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3260777bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2ebd46b22ab52ebd
mov qword [rsp + 0x39], rdx
movabs rdx, 0x31c1baa231c63b2e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xcab52ebbc1b1993c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15020d0500131016
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1109090803111212
mov qword [rsp + 0x27], rdx
movabs rdx, 0xf04110909080311
mov qword [rsp + 0x29], rdx
movabs rdx, 0xc0c06040d0b120b
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x326077759
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x61]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1a
jge 0x32607778b
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x3260777ae
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x61]
cmp rsi, 0x17
jb 0x32607773f
jmp 0x3260777a2
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.32601d600
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.326033020
mov eax, edi
mov ecx, 0x17
call fcn.326033020
nop
nop dword [rax + rax]
call fcn.326030d20
jmp fcn.3260776c0

Function at 0x3260777e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3260778ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3053575d9e677562
mov qword [rsp + 0x32], rdx
movabs rdx, 0x3367b248a02e3053
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5f6a2e2b91645337
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90f110409010b0a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1512100005060601
mov qword [rsp + 0x22], rdx
movabs rdx, 0x14040304020c040a
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x32607786d
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x16]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x16]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x18
jge 0x32607789a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x3260778bd
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x326077850
jmp 0x3260778b1
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.32601d600
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.326033020
mov eax, edi
mov ecx, 0x16
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.3260777e0
Function at 0x3260778e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3260779cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x69add59894cf9e70
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xa169add59894cf9e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xeb65606eace1e395
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50c0a0e06041004
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x80b050c0a0e0604
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1090e0802080c03
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x32607796a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x48]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x32607799c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x3260779bf
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x48]
cmp rsi, 0x11
jb 0x326077950
jmp 0x3260779b3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.32601d600
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.326033020
mov eax, edi
mov ecx, 0x11
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.3260778e0

Function at 0x3260790e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3260791ec
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x20d0be6e6e8d68a4
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x8ad8e48af56d4e1b
mov qword [rsp + 0x45], rdx
movabs rdx, 0x209fa18ad8e48af5
mov qword [rsp + 0x48], rdx
movabs rdx, 0x94a210ba72a366ad
mov qword [rsp + 0x50], rdx
movabs rdx, 0x100d00181319190b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x111717080e000915
mov qword [rsp + 0x27], rdx
movabs rdx, 0x50c0c0610111117
mov qword [rsp + 0x2d], rdx
movabs rdx, 0xc0208000f1a0e06
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x326079188
movzx r9d, byte [rsp + rsi + 0x3d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rdi + 0x3d], dl
mov byte [rsp + rsi + 0x3d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x3260791bc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1b
jae 0x3260791df
movzx r8d, byte [rsp + rdi + 0x3d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
cmp rsi, 0x1b
jb 0x32607916e
jmp 0x3260791d3
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.32601d600
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.326033020
mov eax, edi
mov ecx, 0x1b
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.3260790e0
Function at 0x32607a6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x32607a76c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd61c1518c31cccb3
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x73dc65d6
movabs rdx, 0x501030702060903
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x409050500090501
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x32607a705
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x32607a73c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x32607a75f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
cmp rsi, 0xb
jb 0x32607a6eb
jmp 0x32607a753
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.32601d600
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.326033020
mov eax, edi
mov ecx, 0xb
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.32607a6a0

Function at 0x32607d160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x32607d23d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xcf6f5cefe06f694e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x736bef56d420cf6f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5070005090a0300
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb00090605070005
mov qword [rsp + 0x22], rdx
movabs rdx, 0x40903070301040b
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x32607d1e0
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x32607d20d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x32607d230
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0xe
jb 0x32607d1c2
jmp 0x32607d224
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
call fcn.32601d600
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.326033020
mov eax, edi
mov ecx, 0xe
call fcn.326033020
nop
nop dword [rax]
call fcn.326030d20
jmp fcn.32607d160
Function at 0x32607d560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x32607d64a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x819a6e6f80767d66
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6f34819a6e6f8076
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa8846f9a206f9382
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7020e01070a0b09
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1001080409090702
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x906030809110608
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x32607d5ed
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 2]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 2]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x16
jge 0x32607d61a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x32607d63d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x32607d5d0
jmp 0x32607d631
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.32601d600
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.326033020
mov eax, edi
mov ecx, 0x12
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.32607d560

Function at 0x32607d980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x32607da88
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x614f4953e5406f65
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x46563c7463750d06
mov qword [rsp + 0x46], rdx
movabs rdx, 0x61fa46563c746375
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4d6c15502b696146
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd0215060f02170f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe19090612070810
mov qword [rsp + 0x26], rdx
movabs rdx, 0x806070e03060816
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x900021002160806
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x32607da2b
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 0x34]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 0x34]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
cmp rax, 0x20
jge 0x32607da58
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x32607da7b
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x32607da0e
jmp 0x32607da6f
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.32601d600
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.326033020
mov eax, edi
mov ecx, 0x1a
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.32607d980
Function at 0x32607ee00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x32607eefd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x729c521f9bcc1664
mov qword [rsp + 0x35], rdx
movabs rdx, 0x9ada9e729c521f9b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc1da70a0a620ad6f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11090f0c010f0e0f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe0e0f0411060c06
mov qword [rsp + 0x23], rdx
movabs rdx, 0x5090e0e0f041106
mov qword [rsp + 0x25], rdx
movabs rdx, 0x12080a030f080302
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x32607eea0
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x16]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x16]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x32607eecd
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x32607eef0
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x32607ee7f
jmp 0x32607eee4
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.32601d600
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.326033020
mov eax, edi
mov ecx, 0x13
call fcn.326033020
nop
nop dword [rax]
call fcn.326030d20
jmp fcn.32607ee00

Function at 0x3260815a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x326081686
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3190d1066f6d031c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0de7220d9299b23
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0009050b060e09
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7040b0009050b06
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf08000c01090a0e
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x326081620
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x326081652
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x326081677
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0x10
jb 0x326081602
jmp 0x32608166b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.32601d600
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.326033020
mov eax, edi
mov ecx, 0x10
nop
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.3260815a0
Function at 0x326081ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x326081dec
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x74dbef0ac5acd873
mov qword [rsp + 0x37], rdx
movabs rdx, 0x20ee53d4a865a7a9
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x5520ee53d4a865a7
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa36574726fc470e2
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10e0e05100b130c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x20e031305041105
mov qword [rsp + 0x25], rdx
movabs rdx, 0x805020e03130504
mov qword [rsp + 0x27], rdx
movabs rdx, 0x8180d090d06130c
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x326081d88
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1a
jge 0x326081dbc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x326081ddf
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
cmp rsi, 0x19
jb 0x326081d6e
jmp 0x326081dd3
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.32601d600
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.326033020
mov eax, edi
mov ecx, 0x19
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.326081ce0

Function at 0x3260838a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x32608395e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6215cf1470ce7236
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x1c6c0162
movabs rdx, 0x602080007000007
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x505040a
xor eax, eax
jmp 0x326083901
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 + 0x6e]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 + 0x6e]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x32608392e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x326083951
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x3260838e4
jmp 0x326083945
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.32601d600
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.326033020
mov eax, edi
mov ecx, 0xb
call fcn.326033020
nop
nop
call fcn.326030d20
jmp fcn.3260838a0
Function at 0x326083980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x326083a3d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x642eef12f7f901ed
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xf0
movabs rdx, 0x800090200040100
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x3050408
xor eax, eax
jmp 0x3260839e0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x326083a0d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x326083a30
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x3260839c3
jmp 0x326083a24
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.32601d600
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.326033020
mov eax, edi
mov ecx, 0xa
call fcn.326033020
nop
nop dword [rax]
call fcn.326030d20
jmp fcn.326083980

Function at 0x326083a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x326083b2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa01b6c69d1dd6581
mov qword [rsp + 0x28], rdx
movabs rdx, 0x234572b95ed3696f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x600060b0f0707
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa0b03020c00020f
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x326083acf
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x326083afc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x326083b1f
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
cmp rsi, 0x10
jb 0x326083ab2
jmp 0x326083b13
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.32601d600
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.326033020
mov eax, edi
mov ecx, 0x10
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.326083a60
Function at 0x326084f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x32608505d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x63efce301b08701e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3fb41d3c063838de
mov qword [rsp + 0x38], rdx
movabs rdx, 0x606080d02000d0e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x8060b0304050606
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd09040d030f0a0c
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x326085000
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x32608502d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x326085050
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x326084fe2
jmp 0x326085044
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.32601d600
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.326033020
mov eax, edi
mov ecx, 0x10
call fcn.326033020
nop
nop dword [rax]
call fcn.326030d20
jmp fcn.326084f80

Function at 0x326085480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x326085566
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x361fe92b03516552
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x4a4c3a3f34361fe9
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70505050304030a
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc06070505050304
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x70a0c0802090b05
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x326085500
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x11]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x326085532
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x326085557
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x11]
cmp rsi, 0xd
jb 0x3260854e2
jmp 0x32608554b
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
nop
call fcn.32601d600
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.326033020
mov eax, edi
mov ecx, 0xd
nop
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.326085480
Function at 0x326085b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x326085c87
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x4a4ccd417472656b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xef1b361242161d20
mov qword [rsp + 0x50], rdx
movabs rdx, 0x4d4c53240e1f3444
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e326f0c532c5439
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf1e1c1211051309
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa0c0914141e0b1a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1106121f0d080718
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1606151c0a0d1013
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1e1e0c14170716
mov qword [rsp + 0x38], rdx
movabs rdx, 0x180e000b1e090b0e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x326085c29
movzx r9d, byte [rsp + rsi + 0x48]
sub r9d, edx
lea edx, [r9 + 0x46]
mov byte [rsp + rdi + 0x48], dl
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x48], dl
add rax, 2
cmp rax, 0x30
jge 0x326085c57
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x326085c7a
movzx r8d, byte [rsp + rdi + 0x48]
sub r8d, edx
cmp rsi, 0x20
jb 0x326085c0c
jmp 0x326085c6e
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x20
call fcn.32601d600
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.326033020
mov eax, edi
mov ecx, 0x20
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.326085b60

Function at 0x326086620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3260866ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5465d1de74c44d43
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x53a5da5ecf5465d1
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc050108070a040b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x9040a0508020904
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x32608668f
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0x10
jge 0x3260866bc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x3260866df
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x326086672
jmp 0x3260866d3
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.32601d600
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.326033020
mov eax, edi
mov ecx, 0xd
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.326086620
Function at 0x326086b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x326086c8c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xfc3233564a694e4d
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf7692a7265394a2b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x61406d652c375769
mov qword [rsp + 0x58], rdx
movabs rdx, 0x366314026f41354d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x180f060100091613
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2061d1815130900
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90702061d181513
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1800000111030316
mov qword [rsp + 0x30], rdx
movabs rdx, 0x51202091a080d0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1f02021c0f191d0a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x326086c26
movzx r9d, byte [rsp + rsi + 0x48]
lea edx, [r9 + rdx]
lea edx, [rdx - 9]
mov byte [rsp + rdi + 0x48], dl
mov byte [rsp + rsi + 0x48], r8b
add rax, 2
cmp rax, 0x2a
jge 0x326086c5c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x326086c7f
movzx r8d, byte [rsp + rdi + 0x48]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 9]
cmp rsi, 0x20
jb 0x326086c0c
jmp 0x326086c73
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x20
call fcn.32601d600
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.326033020
mov eax, edi
mov ecx, 0x20
call fcn.326033020
nop
call fcn.326030d20
jmp fcn.326086b60

Function at 0x326087920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x3260879de
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xae4665accaaaf59d
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xa2aa04ae
movabs rdx, 0xa0902030a0701
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x7040708
xor eax, eax
jmp 0x326087981
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x3260879ae
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x3260879d1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x326087964
jmp 0x3260879c5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.32601d600
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.326033020
mov eax, edi
mov ecx, 0xb
call fcn.326033020
nop
nop
call fcn.326030d20
jmp fcn.326087920