joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140088940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140088a8b
push rbp
mov rbp, rsp
sub rsp, 0x68
movups xmmword [rsp + 0x38], xmm15
lea rdx, [rsp + 0x28]
mov qword [rsp + 0x60], rdx
test byte [rdx], al
movabs rsi, 0xf24f69f3657a7ee7
mov qword [rdx], rsi
mov rdx, qword [rsp + 0x60]
test byte [rdx], al
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], 8
mov qword [rsp + 0x58], 8
movabs rdx, 0x20700060102
mov qword [rsp + 0x1b], rdx
mov word [rsp + 0x23], 0x401
mov qword [rsp + 0x30], 0
jmp 0x1400889b0
cmp qword [rsp + 0x30], 0xa
jl 0x1400889bd
jmp 0x140088a6a
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x30]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x30]
lea rdi, [rsp + rdi + 0x1c]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x72]
mov byte [rsp + 0x25], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
mov byte [rsp + 0x27], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x48]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + 0x26], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x30]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x48]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x72]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x27]
add rdx, qword [rsp + 0x48]
movzx esi, byte [rsp + 0x26]
mov byte [rdx], sil
jmp 0x140088a5f
add qword [rsp + 0x30], 2
jmp 0x1400889b0
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rbx
add rsp, 0x68
pop rbp
ret
call fcn.140056be0
jmp fcn.140088940
Function at 0x1400892e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14008942b
push rbp
mov rbp, rsp
sub rsp, 0x68
movups xmmword [rsp + 0x38], xmm15
lea rdx, [rsp + 0x28]
mov qword [rsp + 0x60], rdx
test byte [rdx], al
movabs rsi, 0x19660d6d6fb34641
mov qword [rdx], rsi
mov rdx, qword [rsp + 0x60]
test byte [rdx], al
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], 8
mov qword [rsp + 0x58], 8
movabs rdx, 0x107000502010707
mov qword [rsp + 0x1b], rdx
mov word [rsp + 0x23], 0x700
mov qword [rsp + 0x30], 0
jmp 0x140089350
cmp qword [rsp + 0x30], 0xa
jl 0x14008935d
jmp 0x14008940a
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x30]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x30]
lea rdi, [rsp + rdi + 0x1c]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x25]
mov byte [rsp + 0x25], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
mov byte [rsp + 0x27], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x48]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + 0x26], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x30]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x48]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x25]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x27]
add rdx, qword [rsp + 0x48]
movzx esi, byte [rsp + 0x26]
mov byte [rdx], sil
jmp 0x1400893ff
add qword [rsp + 0x30], 2
jmp 0x140089350
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rbx
add rsp, 0x68
pop rbp
ret
call fcn.140056be0
jmp fcn.1400892e0
Function at 0x14008ab60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14008acb7
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2e]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0xd46753402976d04e
mov qword [rdx], rsi
mov word [rdx + 8], 0xe258
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xa
mov qword [rsp + 0x60], 0xa
movabs rdx, 0x508080001070403
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4030309080508
mov qword [rsp + 0x23], rdx
mov qword [rsp + 0x38], 0
jmp 0x14008abde
cmp qword [rsp + 0x38], 0xe
jl 0x14008abeb
jmp 0x14008ac96
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1e]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x67]
mov byte [rsp + 0x2b], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
mov byte [rsp + 0x2d], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffff99
mov byte [rsp + 0x2c], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffff99
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2d]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x2c]
mov byte [rdx], sil
jmp 0x14008ac8b
add qword [rsp + 0x38], 2
jmp 0x14008abde
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
nop dword [rax]
jmp fcn.14008ab60
Function at 0x14008c460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14008c5c6
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2b]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0x5f03ac61e56e3508
mov qword [rdx], rsi
movabs rsi, 0x10b3a110475f03ac
mov qword [rdx + 5], rsi
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xd
mov qword [rsp + 0x60], 0xd
movabs rdx, 0x10c0a010c0b0c05
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3000609090a010c
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x38], 0
jmp 0x14008c4e6
cmp qword [rsp + 0x38], 0xe
jl 0x14008c4f3
jmp 0x14008c5a5
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x53]
mov byte [rsp + 0x28], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x2a], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + 0x29], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x53]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2a]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x29]
mov byte [rdx], sil
jmp 0x14008c595
add qword [rsp + 0x38], 2
nop dword [rax + rax]
jmp 0x14008c4e6
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
jmp fcn.14008c460
Function at 0x1400915e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140091755
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x48], xmm15
lea rdx, [rsp + 0x33]
mov qword [rsp + 0x70], rdx
test byte [rdx], al
movabs rsi, 0xc76dbb72e573c584
mov qword [rdx], rsi
movabs rsi, 0xc7d5a7cac7c76dbb
mov qword [rdx + 5], rsi
mov rdx, qword [rsp + 0x70]
test byte [rdx], al
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0xd
mov qword [rsp + 0x68], 0xd
movabs rdx, 0x301070c000c03
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x90b000301070c00
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5030c080a00000c
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x40], 0
jmp 0x140091675
cmp qword [rsp + 0x40], 0x12
jl 0x140091685
nop dword [rax]
jmp 0x140091732
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x40]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x70]
mov byte [rsp + 0x30], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x32], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + 0x31], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x58]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x70]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x32]
add rdx, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x31]
mov byte [rdx], sil
jmp 0x140091727
add qword [rsp + 0x40], 2
jmp 0x140091675
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
xor eax, eax
nop
call fcn.140053e40
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
add rsp, 0x78
pop rbp
ret
call fcn.140056be0
jmp fcn.1400915e0
Function at 0x140091e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140091f7a
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2c]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0x4d716a6a577a6069
mov qword [rdx], rsi
mov dword [rdx + 8], 0x4b657969
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xc
mov qword [rsp + 0x60], 0xc
movabs rdx, 0xb040605080602
mov qword [rsp + 0x19], rdx
movabs rdx, 0x308060101010204
mov qword [rsp + 0x21], rdx
mov qword [rsp + 0x38], 0
jmp 0x140091e9f
cmp qword [rsp + 0x38], 0x10
jl 0x140091eac
jmp 0x140091f59
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1a]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0xf]
mov byte [rsp + 0x29], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
mov byte [rsp + 0x2b], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0xf]
mov byte [rsp + 0x2a], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0xf]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2b]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x2a]
mov byte [rdx], sil
jmp 0x140091f4e
add qword [rsp + 0x38], 2
jmp 0x140091e9f
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
nop
jmp fcn.140091e20
Function at 0x140095b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x140095cc6
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movups xmmword [rsp + 0x50], xmm15
lea rdx, [rsp + 0x37]
mov qword [rsp + 0x78], rdx
test byte [rdx], al
movabs rsi, 0x146d6fdf5f17ce4f
mov qword [rdx], rsi
movabs rsi, 0x8146d6fdf5f17ce
mov qword [rdx + 1], rsi
movabs rsi, 0x6ed7508f45bf415f
mov qword [rdx + 9], rsi
mov rdx, qword [rsp + 0x78]
test byte [rdx], al
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], 0x11
mov qword [rsp + 0x70], 0x11
movabs rdx, 0x40e07010f080b0c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x60d04060c020604
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe070b080608060b
mov qword [rsp + 0x2c], rdx
mov qword [rsp + 0x48], 0
jmp 0x140095be8
cmp qword [rsp + 0x48], 0x18
jl 0x140095bf5
jmp 0x140095ca5
mov rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x48]
lea rdi, [rsp + rdi + 0x1d]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x62]
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
mov byte [rsp + 0x36], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x62
mov byte [rsp + 0x35], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x60]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x62
mov byte [rdx], sil
movzx edx, byte [rsp + 0x36]
add rdx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0x35]
mov byte [rdx], sil
jmp 0x140095c95
add qword [rsp + 0x48], 2
nop dword [rax + rax]
jmp 0x140095be8
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
sub rsp, 0xffffffffffffff80
pop rbp
ret
call fcn.140056be0
jmp fcn.140095b40
Function at 0x140097440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400975a7
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x48], xmm15
lea rdx, [rsp + 0x34]
mov qword [rsp + 0x70], rdx
test byte [rdx], al
movabs rsi, 0xb99468b012093c1d
mov qword [rdx], rsi
mov dword [rdx + 8], 0xbd6eb506
mov rdx, qword [rsp + 0x70]
test byte [rdx], al
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0xc
mov qword [rsp + 0x68], 0xc
movabs rdx, 0x70b060403080701
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb07070b06040308
mov qword [rsp + 0x21], rdx
movabs rdx, 0x101020601090400
mov qword [rsp + 0x29], rdx
mov qword [rsp + 0x40], 0
jmp 0x1400974ce
cmp qword [rsp + 0x40], 0x12
jl 0x1400974db
jmp 0x140097586
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x40]
lea rdi, [rsp + rdi + 0x20]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x68]
mov byte [rsp + 0x31], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x20]
movzx edx, byte [rdx]
mov byte [rsp + 0x33], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x68
mov byte [rsp + 0x32], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x20]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x58]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x68
mov byte [rdx], sil
movzx edx, byte [rsp + 0x33]
add rdx, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x32]
mov byte [rdx], sil
jmp 0x14009757b
add qword [rsp + 0x40], 2
jmp 0x1400974ce
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
add rsp, 0x78
pop rbp
ret
call fcn.140056be0
jmp fcn.140097440
Function at 0x140099c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140099d46
push rbp
mov rbp, rsp
sub rsp, 0x68
movups xmmword [rsp + 0x38], xmm15
lea rdx, [rsp + 0x28]
mov qword [rsp + 0x60], rdx
test byte [rdx], al
movabs rsi, 0x6d6187697086938e
mov qword [rdx], rsi
mov rdx, qword [rsp + 0x60]
test byte [rdx], al
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], 8
mov qword [rsp + 0x58], 8
movabs rdx, 0x205040301040400
mov qword [rsp + 0x1d], rdx
mov qword [rsp + 0x30], 0
jmp 0x140099c69
cmp qword [rsp + 0x30], 8
jl 0x140099c76
jmp 0x140099d25
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x30]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x30]
lea rdi, [rsp + rdi + 0x1e]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x11]
mov byte [rsp + 0x25], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
mov byte [rsp + 0x27], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x48]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffef
mov byte [rsp + 0x26], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x30]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x48]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffef
mov byte [rdx], sil
movzx edx, byte [rsp + 0x27]
add rdx, qword [rsp + 0x48]
movzx esi, byte [rsp + 0x26]
mov byte [rdx], sil
jmp 0x140099d16
add qword [rsp + 0x30], 2
nop dword [rax]
jmp 0x140099c69
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rbx
add rsp, 0x68
pop rbp
ret
call fcn.140056be0
jmp fcn.140099c00
Function at 0x14009d2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x14009d466
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movups xmmword [rsp + 0x50], xmm15
lea rdx, [rsp + 0x34]
mov qword [rsp + 0x78], rdx
test byte [rdx], al
movabs rsi, 0xe369cdde5f8b44cf
mov qword [rdx], rsi
movabs rsi, 0x4a79dfc2e369cdde
mov qword [rdx + 4], rsi
movabs rsi, 0xcd6f74c23ae6d5b8
mov qword [rdx + 0xc], rsi
mov rdx, qword [rsp + 0x78]
test byte [rdx], al
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], 0x14
mov qword [rsp + 0x70], 0x14
movabs rdx, 0x90710020c0d0f0b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x10080b000f0c0907
mov qword [rsp + 0x21], rdx
movabs rdx, 0x130508040e0f0d04
mov qword [rsp + 0x29], rdx
mov qword [rsp + 0x48], 0
jmp 0x14009d388
cmp qword [rsp + 0x48], 0x16
jl 0x14009d395
jmp 0x14009d445
mov rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x48]
lea rdi, [rsp + rdi + 0x1c]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x7b]
mov byte [rsp + 0x31], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
mov byte [rsp + 0x33], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + 0x32], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x60]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x7b]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x33]
add rdx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0x32]
mov byte [rdx], sil
jmp 0x14009d437
add qword [rsp + 0x48], 2
nop dword [rax]
jmp 0x14009d388
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
sub rsp, 0xffffffffffffff80
pop rbp
ret
call fcn.140056be0
jmp fcn.14009d2e0
Function at 0x14009eac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x14009ecbb
push rbp
mov rbp, rsp
sub rsp, 0xa8
movups xmmword [rsp + 0x78], xmm15
lea rdx, [rsp + 0x4e]
mov qword [rsp + 0xa0], rdx
test byte [rdx], al
movabs rsi, 0xdb44057217ec3272
mov qword [rdx], rsi
movabs rsi, 0x61abdb44057217ec
mov qword [rdx + 2], rsi
movabs rsi, 0x6f6d67e765e0e575
mov qword [rdx + 0xa], rsi
movabs rsi, 0x9e14f1f260efe972
mov qword [rdx + 0x12], rsi
movabs rsi, 0x746e696ed886c4cd
mov qword [rdx + 0x1a], rsi
mov rdx, qword [rsp + 0xa0]
test byte [rdx], al
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x90], 0x22
mov qword [rsp + 0x98], 0x22
movabs rdx, 0x1e05181905051c00
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x15081c1817030b14
mov qword [rsp + 0x25], rdx
movabs rdx, 0xd1a0e1a08001508
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1a1316101b071617
mov qword [rsp + 0x33], rdx
movabs rdx, 0xc020d1e18071501
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x1616011d05071518
mov qword [rsp + 0x43], rdx
mov qword [rsp + 0x70], 0
jmp 0x14009ebc3
cmp qword [rsp + 0x70], 0x2e
jl 0x14009ebd0
jmp 0x14009ec89
mov rdx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x70]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x70]
lea rdi, [rsp + rdi + 0x1e]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x56]
mov byte [rsp + 0x4b], dl
mov rdx, qword [rsp + 0x70]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
mov byte [rsp + 0x4d], dl
mov rdx, qword [rsp + 0x70]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x88]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x56]
mov byte [rsp + 0x4c], dl
mov rdx, qword [rsp + 0x70]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x70]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x88]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x56]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x4d]
add rdx, qword [rsp + 0x88]
movzx esi, byte [rsp + 0x4c]
mov byte [rdx], sil
jmp 0x14009ec7e
add qword [rsp + 0x70], 2
jmp 0x14009ebc3
mov rbx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x90]
xor eax, eax
nop dword [rax + rax]
call fcn.140053e40
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], rbx
add rsp, 0xa8
pop rbp
ret
nop dword [rax + rax]
call fcn.140056be0
jmp fcn.14009eac0
Function at 0x14009f3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14009f546
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2a]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0xcbce5fb53c0a0a4f
mov qword [rdx], rsi
movabs rsi, 0x74ffc374bdc8cbce
mov qword [rdx + 6], rsi
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xe
mov qword [rsp + 0x60], 0xe
movabs rdx, 0x20b0c0607010307
mov qword [rsp + 0x19], rdx
movabs rdx, 0x90b07060408020b
mov qword [rsp + 0x1f], rdx
mov qword [rsp + 0x38], 0
jmp 0x14009f466
cmp qword [rsp + 0x38], 0xe
jl 0x14009f473
jmp 0x14009f525
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1a]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x6a]
mov byte [rsp + 0x27], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
mov byte [rsp + 0x29], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x6a]
mov byte [rsp + 0x28], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x6a]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x29]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x28]
mov byte [rdx], sil
jmp 0x14009f515
add qword [rsp + 0x38], 2
nop dword [rax + rax]
jmp 0x14009f466
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
jmp fcn.14009f3e0