joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140155ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140155ffa
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2c]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0x6433b6e9e3a6765a
mov qword [rdx], rsi
mov dword [rdx + 8], 0xea6c79ee
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xc
mov qword [rsp + 0x60], 0xc
movabs rdx, 0x7050b0904010901
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x503020800050705
mov qword [rsp + 0x21], rdx
mov qword [rsp + 0x38], 0
jmp 0x140155f1f
cmp qword [rsp + 0x38], 0xe
jl 0x140155f2c
jmp 0x140155fd9
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1c]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x74]
mov byte [rsp + 0x29], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
mov byte [rsp + 0x2b], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + 0x2a], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x74]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2b]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x2a]
mov byte [rdx], sil
jmp 0x140155fce
add qword [rsp + 0x38], 2
jmp 0x140155f1f
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
nop
jmp fcn.140155ea0
Function at 0x140156d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140156e75
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x48], xmm15
lea rdx, [rsp + 0x31]
mov qword [rsp + 0x70], rdx
test byte [rdx], al
movabs rsi, 0x74547c684471976c
mov qword [rdx], rsi
movabs rsi, 0x756575636c656574
mov qword [rdx + 7], rsi
mov rdx, qword [rsp + 0x70]
test byte [rdx], al
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0xf
mov qword [rsp + 0x68], 0xf
movabs rdx, 0x6000500040a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2020e0100000600
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x90b0202090e0206
mov qword [rsp + 0x26], rdx
mov qword [rsp + 0x40], 0
jmp 0x140156d95
cmp qword [rsp + 0x40], 0x14
jl 0x140156da5
nop dword [rax]
jmp 0x140156e50
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x40]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 7]
mov byte [rsp + 0x2e], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x30], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
movzx edx, byte [rdx]
sub edx, edi
add edx, 7
mov byte [rsp + 0x2f], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x58]
movzx esi, byte [rsi]
sub esi, edi
add esi, 7
mov byte [rdx], sil
movzx edx, byte [rsp + 0x30]
add rdx, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x2f]
mov byte [rdx], sil
jmp 0x140156e45
add qword [rsp + 0x40], 2
jmp 0x140156d95
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
xor eax, eax
nop dword [rax]
call fcn.140053e40
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
add rsp, 0x78
pop rbp
ret
call fcn.140056be0
jmp fcn.140156d00
Function at 0x140156e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140156ff5
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x48], xmm15
lea rdx, [rsp + 0x32]
mov qword [rsp + 0x70], rdx
test byte [rdx], al
movabs rsi, 0x6156bec25367863a
mov qword [rdx], rsi
movabs rsi, 0x29dfb484a8476156
mov qword [rdx + 6], rsi
mov rdx, qword [rsp + 0x70]
test byte [rdx], al
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0xe
mov qword [rsp + 0x68], 0xe
movabs rdx, 0x40a000b050d0d08
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x401040a000b050d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x80104010b090c0c
mov qword [rsp + 0x27], rdx
mov qword [rsp + 0x40], 0
jmp 0x140156f15
cmp qword [rsp + 0x40], 0x12
jl 0x140156f25
nop dword [rax]
jmp 0x140156fd2
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x40]
lea rdi, [rsp + rdi + 0x1e]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x71]
mov byte [rsp + 0x2f], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
mov byte [rsp + 0x31], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x71]
mov byte [rsp + 0x30], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x58]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x71]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x31]
add rdx, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x30]
mov byte [rdx], sil
jmp 0x140156fc7
add qword [rsp + 0x40], 2
jmp 0x140156f15
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
xor eax, eax
nop
call fcn.140053e40
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
add rsp, 0x78
pop rbp
ret
call fcn.140056be0
jmp fcn.140156e80
Function at 0x14015c960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x14015cb01
push rbp
mov rbp, rsp
sub rsp, 0x90
movups xmmword [rsp + 0x60], xmm15
lea rdx, [rsp + 0x41]
mov qword [rsp + 0x88], rdx
test byte [rdx], al
movabs rsi, 0x8969cd7590fac8af
mov qword [rdx], rsi
movabs rsi, 0xaecd6498cc927a89
mov qword [rdx + 7], rsi
movabs rsi, 0x7e9386872064cce5
mov qword [rdx + 0xf], rsi
mov rdx, qword [rsp + 0x88]
test byte [rdx], al
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], 0x17
mov qword [rsp + 0x80], 0x17
movabs rdx, 0x7130f0b0a130016
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1001020110030d05
mov qword [rsp + 0x26], rdx
movabs rdx, 0x100d0403140c0e0b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x150508161402090f
mov qword [rsp + 0x36], rdx
mov qword [rsp + 0x58], 0
jmp 0x14015ca23
cmp qword [rsp + 0x58], 0x20
jl 0x14015ca30
jmp 0x14015cadd
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x58]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x4f]
mov byte [rsp + 0x3e], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x40], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + 0x3f], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x70]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x4f]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x40]
add rdx, qword [rsp + 0x70]
movzx esi, byte [rsp + 0x3f]
mov byte [rdx], sil
jmp 0x14015cad2
add qword [rsp + 0x58], 2
jmp 0x14015ca23
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
add rsp, 0x90
pop rbp
ret
call fcn.140056be0
jmp fcn.14015c960
Function at 0x140167340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x1401674ea
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x37]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x380475faf72053b6
mov qword [rdx], rsi
movabs rsi, 0x6e152b532028433e
mov qword [rdx + 8], rsi
movabs rsi, 0x276e152b53202843
mov qword [rdx + 9], rsi
movabs rsi, 0x3a25df3228274f61
mov qword [rdx + 0x11], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x19
mov qword [rsp + 0x78], 0x19
movabs rdx, 0x1614040e00170003
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd080a0e09070613
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10030d080a0e0907
mov qword [rsp + 0x24], rdx
movabs rdx, 0x418120618131015
mov qword [rsp + 0x2c], rdx
mov qword [rsp + 0x50], 0
jmp 0x14016740e
cmp qword [rsp + 0x50], 0x1a
jl 0x14016741b
jmp 0x1401674c6
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x49]
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x36], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x49
mov byte [rsp + 0x35], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x49
mov byte [rdx], sil
movzx edx, byte [rsp + 0x36]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x35]
mov byte [rdx], sil
jmp 0x1401674bb
add qword [rsp + 0x50], 2
jmp 0x14016740e
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
ret
call fcn.140056be0
jmp fcn.140167340
Function at 0x140169800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x1401699d8
push rbp
mov rbp, rsp
sub rsp, 0xa0
movups xmmword [rsp + 0x70], xmm15
lea rdx, [rsp + 0x4a]
mov qword [rsp + 0x98], rdx
test byte [rdx], al
movabs rsi, 0xb6ed75dbdc7e9245
mov qword [rdx], rsi
movabs rsi, 0xc163697265e5f993
mov qword [rdx + 8], rsi
movabs rsi, 0x646c6162537fc163
mov qword [rdx + 0xe], rsi
movabs rsi, 0x65ec0ddb20a902f4
mov qword [rdx + 0x16], rsi
mov rdx, qword [rsp + 0x98]
test byte [rdx], al
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], 0x1e
mov qword [rsp + 0x90], 0x1e
movabs rdx, 0x100f081401070610
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6181c0918020412
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1417081310091607
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xf1a090103181201
mov qword [rsp + 0x37], rdx
movabs rdx, 0x40312080a100a1b
mov qword [rsp + 0x3f], rdx
mov qword [rsp + 0x68], 0
jmp 0x1401698e6
cmp qword [rsp + 0x68], 0x28
jl 0x1401698f3
jmp 0x1401699ad
mov rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x68]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x68]
lea rdi, [rsp + rdi + 0x20]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x53]
mov byte [rsp + 0x47], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x20]
movzx edx, byte [rdx]
mov byte [rsp + 0x49], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x80]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + 0x48], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x68]
lea rsi, [rsp + rsi + 0x20]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x80]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x53]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x49]
add rdx, qword [rsp + 0x80]
movzx esi, byte [rsp + 0x48]
mov byte [rdx], sil
nop
jmp 0x1401699a2
add qword [rsp + 0x68], 2
jmp 0x1401698e6
mov rbx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
xor eax, eax
nop
call fcn.140053e40
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
add rsp, 0xa0
pop rbp
ret
call fcn.140056be0
nop dword [rax]
jmp fcn.140169800
Function at 0x14016f3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x14016f581
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x39]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x6b50614b1f091550
mov qword [rdx], rsi
movabs rsi, 0x646e07425566396b
mov qword [rdx + 7], rsi
movabs rsi, 0x650b3c544d457254
mov qword [rdx + 0xf], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x17
mov qword [rsp + 0x78], 0x17
movabs rdx, 0x14000a11120a0a14
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6140c08140309
mov qword [rsp + 0x20], rdx
movabs rdx, 0x80b140f150f0006
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf04030102120814
mov qword [rsp + 0x2e], rdx
mov qword [rsp + 0x50], 0
nop
jmp 0x14016f4a2
cmp qword [rsp + 0x50], 0x1e
jl 0x14016f4af
jmp 0x14016f55c
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x18]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x19]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x11]
mov byte [rsp + 0x36], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
mov byte [rsp + 0x38], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x11]
mov byte [rsp + 0x37], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x11]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x38]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x37]
mov byte [rdx], sil
jmp 0x14016f551
add qword [rsp + 0x50], 2
jmp 0x14016f4a2
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
nop
ret
call fcn.140056be0
jmp fcn.14016f3e0
Function at 0x140170040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x1401701df
push rbp
mov rbp, rsp
sub rsp, 0x90
movups xmmword [rsp + 0x60], xmm15
lea rdx, [rsp + 0x41]
mov qword [rsp + 0x88], rdx
test byte [rdx], al
movabs rsi, 0x6ee034bfddc46529
mov qword [rdx], rsi
movabs rsi, 0x31c3c34a53c7ec6e
mov qword [rdx + 7], rsi
movabs rsi, 0x476d94dd20d37212
mov qword [rdx + 0xf], rsi
mov rdx, qword [rsp + 0x88]
test byte [rdx], al
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], 0x17
mov qword [rsp + 0x80], 0x17
movabs rdx, 0x9140406040f0d13
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2130e0c00161605
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60c11140516030b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20803030c110404
mov qword [rsp + 0x36], rdx
mov qword [rsp + 0x58], 0
jmp 0x140170103
cmp qword [rsp + 0x58], 0x20
jl 0x140170110
jmp 0x1401701bb
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x58]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x51]
mov byte [rsp + 0x3e], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x40], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffaf
mov byte [rsp + 0x3f], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x70]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffaf
mov byte [rdx], sil
movzx edx, byte [rsp + 0x40]
add rdx, qword [rsp + 0x70]
movzx esi, byte [rsp + 0x3f]
mov byte [rdx], sil
jmp 0x1401701b0
add qword [rsp + 0x58], 2
jmp 0x140170103
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
add rsp, 0x90
pop rbp
ret
nop
call fcn.140056be0
jmp fcn.140170040
Function at 0x140171540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1401716c6
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movups xmmword [rsp + 0x50], xmm15
lea rdx, [rsp + 0x35]
mov qword [rsp + 0x78], rdx
test byte [rdx], al
movabs rsi, 0x5920516d95737544
mov qword [rdx], rsi
movabs rsi, 0x653a6d5920516d95
mov qword [rdx + 3], rsi
movabs rsi, 0x6731763a6e6f5a7b
mov qword [rdx + 0xb], rsi
mov rdx, qword [rsp + 0x78]
test byte [rdx], al
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], 0x13
mov qword [rsp + 0x70], 0x13
movabs rdx, 0xf0f051009090b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x70704080705000f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x100f120b12071003
mov qword [rsp + 0x2a], rdx
mov qword [rsp + 0x48], 0
jmp 0x1401715e8
cmp qword [rsp + 0x48], 0x16
jl 0x1401715f5
jmp 0x1401716a5
mov rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x48]
lea rdi, [rsp + rdi + 0x1d]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x12]
mov byte [rsp + 0x32], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x12
mov byte [rsp + 0x33], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x60]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x12
mov byte [rdx], sil
movzx edx, byte [rsp + 0x34]
add rdx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0x33]
mov byte [rdx], sil
jmp 0x140171695
add qword [rsp + 0x48], 2
nop dword [rax + rax]
jmp 0x1401715e8
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
sub rsp, 0xffffffffffffff80
pop rbp
ret
call fcn.140056be0
jmp fcn.140171540
Function at 0x140174060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x14017421e
push rbp
mov rbp, rsp
sub rsp, 0x90
movups xmmword [rsp + 0x60], xmm15
lea rdx, [rsp + 0x3f]
mov qword [rsp + 0x88], rdx
test byte [rdx], al
movabs rsi, 0xd29fef921e72a2d3
mov qword [rdx], rsi
movabs rsi, 0x635b74669999eea4
mov qword [rdx + 8], rsi
movabs rsi, 0xec635b74669999ee
mov qword [rdx + 9], rsi
movabs rsi, 0x20eb9ddd9c64aaf9
mov qword [rdx + 0x11], rsi
mov rdx, qword [rsp + 0x88]
test byte [rdx], al
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], 0x19
mov qword [rsp + 0x80], 0x19
movabs rdx, 0x1203040a140e1810
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6111203040a140e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1617011007121707
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8070908150905
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0b01180806050f
mov qword [rsp + 0x34], rdx
mov qword [rsp + 0x58], 0
nop
jmp 0x140174142
cmp qword [rsp + 0x58], 0x22
jl 0x14017414f
jmp 0x1401741fa
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x58]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x1f]
mov byte [rsp + 0x3c], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x3e], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffe1
mov byte [rsp + 0x3d], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x70]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffe1
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3e]
add rdx, qword [rsp + 0x70]
movzx esi, byte [rsp + 0x3d]
mov byte [rdx], sil
jmp 0x1401741ef
add qword [rsp + 0x58], 2
jmp 0x140174142
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
add rsp, 0x90
pop rbp
ret
nop
call fcn.140056be0
jmp fcn.140174060
Function at 0x140174240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x1401743e1
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x39]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x676df45166ce8551
mov qword [rdx], rsi
movabs rsi, 0x6464df74e2dfec67
mov qword [rdx + 7], rsi
movabs rsi, 0x6cc8535420cb8fe5
mov qword [rdx + 0xf], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x17
mov qword [rsp + 0x78], 0x17
movabs rdx, 0x140603100a150301
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1106080514160d05
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc030403070c1106
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20f0f0601140409
mov qword [rsp + 0x2e], rdx
mov qword [rsp + 0x50], 0
nop
jmp 0x140174302
cmp qword [rsp + 0x50], 0x1e
jl 0x14017430f
jmp 0x1401743bc
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x18]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x19]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x6a]
mov byte [rsp + 0x36], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
mov byte [rsp + 0x38], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x6a]
mov byte [rsp + 0x37], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x6a]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x38]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x37]
mov byte [rdx], sil
jmp 0x1401743b1
add qword [rsp + 0x50], 2
jmp 0x140174302
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
nop
ret
call fcn.140056be0
jmp fcn.140174240