joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140064760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400648c6
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x48], xmm15
lea rdx, [rsp + 0x32]
mov qword [rsp + 0x70], rdx
test byte [rdx], al
movabs rsi, 0xb638abb0372739b2
mov qword [rdx], rsi
movabs rsi, 0x35afbaa740aeb638
mov qword [rdx + 6], rsi
mov rdx, qword [rsp + 0x70]
test byte [rdx], al
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0xe
mov qword [rsp + 0x68], 0xe
movabs rdx, 0x20b090b00070009
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x80c050a0b040204
mov qword [rsp + 0x27], rdx
mov qword [rsp + 0x40], 0
jmp 0x1400647e6
cmp qword [rsp + 0x40], 0x10
jl 0x1400647f3
jmp 0x1400648a5
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x40]
lea rdi, [rsp + rdi + 0x20]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x72]
mov byte [rsp + 0x2f], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x20]
movzx edx, byte [rdx]
mov byte [rsp + 0x31], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + 0x30], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x20]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x58]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x72]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x31]
add rdx, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x30]
mov byte [rdx], sil
jmp 0x140064895
add qword [rsp + 0x40], 2
nop dword [rax + rax]
jmp 0x1400647e6
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
add rsp, 0x78
pop rbp
ret
call fcn.140056be0
jmp fcn.140064760
Function at 0x140065040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1400651c6
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movups xmmword [rsp + 0x50], xmm15
lea rdx, [rsp + 0x37]
mov qword [rsp + 0x78], rdx
test byte [rdx], al
movabs rsi, 0xea34f8f43036a28d
mov qword [rdx], rsi
movabs rsi, 0x37ea34f8f43036a2
mov qword [rdx + 1], rsi
movabs rsi, 0x3598e852f23395b1
mov qword [rdx + 9], rsi
mov rdx, qword [rsp + 0x78]
test byte [rdx], al
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], 0x11
mov qword [rsp + 0x70], 0x11
movabs rdx, 0xd0c070d090501
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x90004000f0a000d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x40e0107000c0e0e
mov qword [rsp + 0x2c], rdx
mov qword [rsp + 0x48], 0
jmp 0x1400650e8
cmp qword [rsp + 0x48], 0x16
jl 0x1400650f5
jmp 0x1400651a5
mov rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x48]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x70]
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x36], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + 0x35], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x60]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x70]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x36]
add rdx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0x35]
mov byte [rdx], sil
jmp 0x140065197
add qword [rsp + 0x48], 2
nop dword [rax]
jmp 0x1400650e8
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
sub rsp, 0xffffffffffffff80
pop rbp
ret
call fcn.140056be0
jmp fcn.140065040
Function at 0x140066460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x1400665fe
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x3b]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0xd93534cbcecbd1c9
mov qword [rdx], rsi
movabs rsi, 0xb5d552595ad93534
mov qword [rdx + 5], rsi
movabs rsi, 0xd5cf31c7303d93c8
mov qword [rdx + 0xd], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x15
mov qword [rsp + 0x78], 0x15
movabs rdx, 0xa0e130c0f0100
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc0a0011130a0801
mov qword [rsp + 0x24], rdx
movabs rdx, 0x809040d0c0a0011
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb011407030c0208
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x50], 0
nop
jmp 0x140066522
cmp qword [rsp + 0x50], 0x1c
jl 0x14006652f
jmp 0x1400665da
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x1d]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x79]
mov byte [rsp + 0x38], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
mov byte [rsp + 0x3a], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffff87
mov byte [rsp + 0x39], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffff87
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3a]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x39]
mov byte [rdx], sil
jmp 0x1400665cf
add qword [rsp + 0x50], 2
jmp 0x140066522
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
ret
nop
call fcn.140056be0
jmp fcn.140066460
Function at 0x14006b4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x14006b679
push rbp
mov rbp, rsp
sub rsp, 0x98
movups xmmword [rsp + 0x68], xmm15
lea rdx, [rsp + 0x41]
mov qword [rsp + 0x90], rdx
test byte [rdx], al
movabs rsi, 0x33833638362e4e3b
mov qword [rdx], rsi
movabs rsi, 0x32363f2d3a473b37
mov qword [rdx + 8], rsi
movabs rsi, 0x375a39516d465832
mov qword [rdx + 0xf], rsi
movabs rsi, 0x563258294b743829
mov qword [rdx + 0x17], rsi
mov rdx, qword [rsp + 0x90]
test byte [rdx], al
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], 0x1f
mov qword [rsp + 0x88], 0x1f
movabs rdx, 0x1e1c061c1c121510
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x912131a19131101
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd000b1a060a1e0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x21b170f0c150b00
mov qword [rsp + 0x36], rdx
mov qword [rsp + 0x60], 0
jmp 0x14006b594
cmp qword [rsp + 0x60], 0x20
jl 0x14006b5a5
nop dword [rax]
jmp 0x14006b652
mov rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x60]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x60]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x2d]
mov byte [rsp + 0x3e], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x40], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x78]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + 0x3f], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x60]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x78]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x2d]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x40]
add rdx, qword [rsp + 0x78]
movzx esi, byte [rsp + 0x3f]
mov byte [rdx], sil
jmp 0x14006b647
add qword [rsp + 0x60], 2
jmp 0x14006b594
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rbx
add rsp, 0x98
pop rbp
ret
call fcn.140056be0
nop
jmp fcn.14006b4c0
Function at 0x14006e660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x14006e848
push rbp
mov rbp, rsp
sub rsp, 0xa0
movups xmmword [rsp + 0x70], xmm15
lea rdx, [rsp + 0x44]
mov qword [rsp + 0x98], rdx
test byte [rdx], al
movabs rsi, 0x303239a330a7fb34
mov qword [rdx], rsi
movabs rsi, 0xdef3802303239a3
mov qword [rdx + 4], rsi
movabs rsi, 0x1375dcc9dc3207c0
mov qword [rdx + 0xc], rsi
movabs rsi, 0x6c4360c3204f039
mov qword [rdx + 0x14], rsi
movabs rsi, 0xdd9295ec093336c5
mov qword [rdx + 0x1c], rsi
mov rdx, qword [rsp + 0x98]
test byte [rdx], al
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], 0x24
mov qword [rsp + 0x90], 0x24
movabs rdx, 0xc1b122210040415
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x81f1a1b22020c1b
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1311200a1b221518
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1131a16131c0b0d
mov qword [rsp + 0x31], rdx
movabs rdx, 0x21804120f232112
mov qword [rsp + 0x39], rdx
mov qword [rsp + 0x68], 0
jmp 0x14006e754
cmp qword [rsp + 0x68], 0x26
jl 0x14006e765
nop dword [rax]
jmp 0x14006e81e
mov rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x68]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x68]
lea rdi, [rsp + rdi + 0x1c]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0xd]
mov byte [rsp + 0x41], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
mov byte [rsp + 0x43], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x80]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0xd]
mov byte [rsp + 0x42], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x68]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x80]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0xd]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x43]
add rdx, qword [rsp + 0x80]
movzx esi, byte [rsp + 0x42]
mov byte [rdx], sil
jmp 0x14006e813
add qword [rsp + 0x68], 2
jmp 0x14006e754
mov rbx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
add rsp, 0xa0
pop rbp
ret
call fcn.140056be0
jmp fcn.14006e660
Function at 0x14006e860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x14006ea6e
push rbp
mov rbp, rsp
sub rsp, 0xb0
movups xmmword [rsp + 0x80], xmm15
lea rdx, [rsp + 0x53]
mov qword [rsp + 0xa8], rdx
test byte [rdx], al
movabs rsi, 0x30dc76c1b6329da3
mov qword [rdx], rsi
movabs rsi, 0xd9355a393430dc76
mov qword [rdx + 5], rsi
movabs rsi, 0x11f9eb0030effa1e
mov qword [rdx + 0xd], rsi
movabs rsi, 0x14d6eed7ed447a2c
mov qword [rdx + 0x15], rsi
movabs rsi, 0x353236c8de9c14ff
mov qword [rdx + 0x1d], rsi
mov rdx, qword [rsp + 0xa8]
test byte [rdx], al
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0x98], 0x25
mov qword [rsp + 0xa0], 0x25
movabs rdx, 0x503001e141c161e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc150503001e141c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x13001715170d1d0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1a0d0118040a1513
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11130e0a06201a21
mov qword [rsp + 0x38], rdx
movabs rdx, 0x121f111e040f1e03
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf191812121d1b05
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x78], 0
jmp 0x14006e975
cmp qword [rsp + 0x78], 0x32
jl 0x14006e985
nop dword [rax]
jmp 0x14006ea3e
mov rdx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x78]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x78]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x16]
mov byte [rsp + 0x50], dl
mov rdx, qword [rsp + 0x78]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x52], dl
mov rdx, qword [rsp + 0x78]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x90]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + 0x51], dl
mov rdx, qword [rsp + 0x78]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x78]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x90]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x16]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x52]
add rdx, qword [rsp + 0x90]
movzx esi, byte [rsp + 0x51]
mov byte [rdx], sil
jmp 0x14006ea33
add qword [rsp + 0x78], 2
jmp 0x14006e975
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x98]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], rbx
add rsp, 0xb0
pop rbp
ret
call fcn.140056be0
jmp fcn.14006e860
Function at 0x14007e440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x48]
cmp r12, qword [r14 + 0x10]
jbe 0x14007e688
push rbp
mov rbp, rsp
sub rsp, 0xc0
movups xmmword [rsp + 0x90], xmm15
lea rdx, [rsp + 0x5c]
mov qword [rsp + 0xb8], rdx
test byte [rdx], al
movabs rsi, 0xa5c932df745a756d
mov qword [rdx], rsi
movabs rsi, 0x71307ec7f05074f8
mov qword [rdx + 8], rsi
movabs rsi, 0x371faacc71307ec7
mov qword [rdx + 0xc], rsi
movabs rsi, 0x30c1130b1ee45ebc
mov qword [rdx + 0x14], rsi
movabs rsi, 0xca036975ed62bde7
mov qword [rdx + 0x1c], rsi
movabs rsi, 0xbf5becb99e6f663a
mov qword [rdx + 0x24], rsi
mov rdx, qword [rsp + 0xb8]
test byte [rdx], al
mov qword [rsp + 0xa0], rdx
mov qword [rsp + 0xa8], 0x2c
mov qword [rsp + 0xb0], 0x2c
movabs rdx, 0xd06171402260c18
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb12221902141c07
mov qword [rsp + 0x21], rdx
movabs rdx, 0xb1f13230208180f
mov qword [rsp + 0x29], rdx
movabs rdx, 0xd161e0624290427
mov qword [rsp + 0x31], rdx
movabs rdx, 0x112818292416221d
mov qword [rsp + 0x39], rdx
movabs rdx, 0x211017161a202b13
mov qword [rsp + 0x41], rdx
movabs rdx, 0x200f23152b230616
mov qword [rsp + 0x49], rdx
movabs rdx, 0x21262917192a160d
mov qword [rsp + 0x51], rdx
mov qword [rsp + 0x88], 0
jmp 0x14007e575
cmp qword [rsp + 0x88], 0x40
nop
jl 0x14007e587
jmp 0x14007e658
mov rdx, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x88]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x88]
lea rdi, [rsp + rdi + 0x1a]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x58]
mov byte [rsp + 0x59], dl
mov rdx, qword [rsp + 0x88]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
mov byte [rsp + 0x5b], dl
mov rdx, qword [rsp + 0x88]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0xa0]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + 0x5a], dl
mov rdx, qword [rsp + 0x88]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x88]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0xa0]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x58]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x5b]
add rdx, qword [rsp + 0xa0]
movzx esi, byte [rsp + 0x5a]
mov byte [rdx], sil
jmp 0x14007e64a
add qword [rsp + 0x88], 2
jmp 0x14007e575
mov rbx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xa8]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rbx
add rsp, 0xc0
pop rbp
ret
call fcn.140056be0
jmp fcn.14007e440
Function at 0x14007e6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x14007e8b7
push rbp
mov rbp, rsp
sub rsp, 0xb0
movups xmmword [rsp + 0x80], xmm15
lea rdx, [rsp + 0x4d]
mov qword [rsp + 0xa8], rdx
test byte [rdx], al
movabs rsi, 0xb86237bbb76c6b84
mov qword [rdx], rsi
movabs rsi, 0x203add3174f8db71
mov qword [rdx + 8], rsi
movabs rsi, 0xc842ed203add3174
mov qword [rdx + 0xb], rsi
movabs rsi, 0x84bcbd81becb9365
mov qword [rdx + 0x13], rsi
movabs rsi, 0x209cd16220b869c5
mov qword [rdx + 0x1b], rsi
movabs rsi, 0xbc466ec040bb66b5
mov qword [rdx + 0x23], rsi
mov rdx, qword [rsp + 0xa8]
test byte [rdx], al
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0x98], 0x2b
mov qword [rsp + 0xa0], 0x2b
movabs rdx, 0xa17230721201001
mov qword [rsp + 0x18], rdx
movabs rdx, 0x31f0a1723072120
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2911160105290318
mov qword [rsp + 0x22], rdx
movabs rdx, 0x170a12190a100b15
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x290a0417260d081b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x18140d29102523
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x91d05211a19272a
mov qword [rsp + 0x42], rdx
mov qword [rsp + 0x78], 0
jmp 0x14007e7c3
cmp qword [rsp + 0x78], 0x32
jl 0x14007e7d0
jmp 0x14007e887
mov rdx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x78]
lea rsi, [rsp + rsi + 0x18]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x78]
lea rdi, [rsp + rdi + 0x19]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x24]
mov byte [rsp + 0x4a], dl
mov rdx, qword [rsp + 0x78]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
mov byte [rsp + 0x4c], dl
mov rdx, qword [rsp + 0x78]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x90]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffdc
mov byte [rsp + 0x4b], dl
mov rdx, qword [rsp + 0x78]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x78]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x90]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffdc
mov byte [rdx], sil
movzx edx, byte [rsp + 0x4c]
add rdx, qword [rsp + 0x90]
movzx esi, byte [rsp + 0x4b]
mov byte [rdx], sil
jmp 0x14007e87c
add qword [rsp + 0x78], 2
jmp 0x14007e7c3
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x98]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], rbx
add rsp, 0xb0
pop rbp
ret
call fcn.140056be0
nop dword [rax]
jmp fcn.14007e6a0
Function at 0x140082cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140082e1f
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x48], xmm15
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x70], rdx
test byte [rdx], al
movabs rsi, 0xeb578f34a23231ad
mov qword [rdx], rsi
movabs rsi, 0x8bf04499959b39f0
mov qword [rdx + 8], rsi
mov rdx, qword [rsp + 0x70]
test byte [rdx], al
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0x10
mov qword [rsp + 0x68], 0x10
movabs rdx, 0xc0a030e060e070f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb03000f05060806
mov qword [rsp + 0x25], rdx
mov qword [rsp + 0x40], 0
jmp 0x140082d46
cmp qword [rsp + 0x40], 0x10
jl 0x140082d53
jmp 0x140082dfe
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x40]
lea rdi, [rsp + rdi + 0x1e]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x4c]
mov byte [rsp + 0x2d], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
mov byte [rsp + 0x2f], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffb4
mov byte [rsp + 0x2e], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x58]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffb4
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2f]
add rdx, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x2e]
mov byte [rdx], sil
jmp 0x140082df3
add qword [rsp + 0x40], 2
jmp 0x140082d46
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
add rsp, 0x78
pop rbp
ret
nop
call fcn.140056be0
jmp fcn.140082cc0
Function at 0x140087e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x140088024
push rbp
mov rbp, rsp
sub rsp, 0x98
movups xmmword [rsp + 0x68], xmm15
lea rdx, [rsp + 0x42]
mov qword [rsp + 0x90], rdx
test byte [rdx], al
movabs rsi, 0xd169e1983add2f73
mov qword [rdx], rsi
movabs rsi, 0x518de12908cd6f0b
mov qword [rdx + 8], rsi
movabs rsi, 0x74d86dc07412518d
mov qword [rdx + 0xe], rsi
movabs rsi, 0x65746174e1e659d6
mov qword [rdx + 0x16], rsi
mov rdx, qword [rsp + 0x90]
test byte [rdx], al
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], 0x1e
mov qword [rsp + 0x88], 0x1e
movabs rdx, 0x40c140b120c0f14
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x160a1801040c140b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x31002141714190d
mov qword [rsp + 0x27], rdx
movabs rdx, 0x170803040e050710
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x120b02180c120817
mov qword [rsp + 0x37], rdx
mov qword [rsp + 0x60], 0
jmp 0x140087f43
cmp qword [rsp + 0x60], 0x24
jl 0x140087f50
jmp 0x140087ffd
mov rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x60]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x60]
lea rdi, [rsp + rdi + 0x1c]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x72]
mov byte [rsp + 0x3f], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
mov byte [rsp + 0x41], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x78]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + 0x40], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x60]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x78]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x72]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x41]
add rdx, qword [rsp + 0x78]
movzx esi, byte [rsp + 0x40]
mov byte [rdx], sil
jmp 0x140087ff2
add qword [rsp + 0x60], 2
jmp 0x140087f43
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rbx
add rsp, 0x98
pop rbp
ret
call fcn.140056be0
jmp fcn.140087e60