joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140109080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1401091f5
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x48], xmm15
lea rdx, [rsp + 0x32]
mov qword [rsp + 0x70], rdx
test byte [rdx], al
movabs rsi, 0x6f6f05249ef0698d
mov qword [rdx], rsi
movabs rsi, 0x9054004c6c9a6f6f
mov qword [rdx + 6], rsi
mov rdx, qword [rsp + 0x70]
test byte [rdx], al
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0xe
mov qword [rsp + 0x68], 0xe
movabs rdx, 0x30c0500080c0a04
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc0b030c0500080c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2050d020a050408
mov qword [rsp + 0x27], rdx
mov qword [rsp + 0x40], 0
jmp 0x140109115
cmp qword [rsp + 0x40], 0x12
jl 0x140109125
nop dword [rax]
jmp 0x1401091d2
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x40]
lea rdi, [rsp + rdi + 0x1e]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x58]
mov byte [rsp + 0x2f], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
mov byte [rsp + 0x31], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + 0x30], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x58]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x58]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x31]
add rdx, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x30]
mov byte [rdx], sil
jmp 0x1401091c7
add qword [rsp + 0x40], 2
jmp 0x140109115
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
xor eax, eax
nop
call fcn.140053e40
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
add rsp, 0x78
pop rbp
ret
call fcn.140056be0
jmp fcn.140109080
Function at 0x14010b260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x14010b3fe
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x39]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x70fcff3a3b26f041
mov qword [rdx], rsi
movabs rsi, 0x793d5113323c70
mov qword [rdx + 7], rsi
movabs rsi, 0xdc526163366d2f74
mov qword [rdx + 0xf], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x17
mov qword [rsp + 0x78], 0x17
movabs rdx, 0xc0810030e12060e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4020a0916060401
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50b061204020a09
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40203150e160900
mov qword [rsp + 0x2e], rdx
mov qword [rsp + 0x50], 0
nop
jmp 0x14010b322
cmp qword [rsp + 0x50], 0x1c
jl 0x14010b32f
jmp 0x14010b3da
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x41]
mov byte [rsp + 0x36], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x38], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x41
mov byte [rsp + 0x37], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x41
mov byte [rdx], sil
movzx edx, byte [rsp + 0x38]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x37]
mov byte [rdx], sil
jmp 0x14010b3cf
add qword [rsp + 0x50], 2
jmp 0x14010b322
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
ret
nop
call fcn.140056be0
jmp fcn.14010b260
Function at 0x14010f1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x14010f35e
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x3c]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x3d0561c1ec796eb0
mov qword [rdx], rsi
movabs rsi, 0x6e6565213d0561c1
mov qword [rdx + 4], rsi
movabs rsi, 0x8e7e6ba976a7ceb0
mov qword [rdx + 0xc], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x14
mov qword [rsp + 0x78], 0x14
movabs rdx, 0x13080e07130c1010
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x310120c0e060306
mov qword [rsp + 0x25], rdx
movabs rdx, 0x80007080310120c
mov qword [rsp + 0x29], rdx
movabs rdx, 0x130406120d0701
mov qword [rsp + 0x31], rdx
mov qword [rsp + 0x50], 0
nop
jmp 0x14010f282
cmp qword [rsp + 0x50], 0x1c
jl 0x14010f28f
jmp 0x14010f33a
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x1e]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x34]
mov byte [rsp + 0x39], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
mov byte [rsp + 0x3b], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffcc
mov byte [rsp + 0x3a], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffcc
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3b]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x3a]
mov byte [rdx], sil
jmp 0x14010f32f
add qword [rsp + 0x50], 2
jmp 0x14010f282
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
ret
nop
call fcn.140056be0
jmp fcn.14010f1c0
Function at 0x14010ff60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x14011016c
push rbp
mov rbp, rsp
sub rsp, 0xb0
movups xmmword [rsp + 0x80], xmm15
lea rdx, [rsp + 0x52]
mov qword [rsp + 0xa8], rdx
test byte [rdx], al
movabs rsi, 0x78957433206c9563
mov qword [rdx], rsi
movabs rsi, 0x73738663b2617895
mov qword [rdx + 6], rsi
movabs rsi, 0xd764e78d758f616e
mov qword [rdx + 0xe], rsi
movabs rsi, 0x81ad72bc68902bf2
mov qword [rdx + 0x16], rsi
movabs rsi, 0x2272b0ae94b46ca6
mov qword [rdx + 0x1e], rsi
mov rdx, qword [rsp + 0xa8]
test byte [rdx], al
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0x98], 0x26
mov qword [rsp + 0xa0], 0x26
movabs rdx, 0x170711181c0e2515
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1d17051617071118
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x20e22220905220e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x91223110411130b
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x2312171121011517
mov qword [rsp + 0x37], rdx
movabs rdx, 0x250b170e100e1a20
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x12121e0006050511
mov qword [rsp + 0x47], rdx
mov qword [rsp + 0x78], 0
jmp 0x140110075
cmp qword [rsp + 0x78], 0x34
jl 0x140110085
nop dword [rax]
jmp 0x14011013c
mov rdx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x78]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x78]
lea rdi, [rsp + rdi + 0x1c]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0xb]
mov byte [rsp + 0x4f], dl
mov rdx, qword [rsp + 0x78]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
mov byte [rsp + 0x51], dl
mov rdx, qword [rsp + 0x78]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x90]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xb
mov byte [rsp + 0x50], dl
mov rdx, qword [rsp + 0x78]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x78]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x90]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xb
mov byte [rdx], sil
movzx edx, byte [rsp + 0x51]
add rdx, qword [rsp + 0x90]
movzx esi, byte [rsp + 0x50]
mov byte [rdx], sil
jmp 0x140110131
add qword [rsp + 0x78], 2
jmp 0x140110075
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x98]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], rbx
add rsp, 0xb0
pop rbp
ret
call fcn.140056be0
jmp fcn.14010ff60
Function at 0x140113fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x140114161
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x3d]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x75fb61a0205e6f84
mov qword [rdx], rsi
movabs rsi, 0x9a7f2075fb61a020
mov qword [rdx + 3], rsi
movabs rsi, 0x73666c6a7e7d5875
mov qword [rdx + 0xb], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x13
mov qword [rsp + 0x78], 0x13
movabs rdx, 0xe000b0b0a0b04
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x709070a0b060202
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0d070d0709070a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x110d0b11040f1102
mov qword [rsp + 0x32], rdx
mov qword [rsp + 0x50], 0
nop
jmp 0x140114082
cmp qword [rsp + 0x50], 0x1c
jl 0x14011408f
jmp 0x14011413c
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x1e]
mov byte [rsp + 0x3a], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x3c], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x1e]
mov byte [rsp + 0x3b], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x1e]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3c]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x3b]
mov byte [rdx], sil
jmp 0x140114131
add qword [rsp + 0x50], 2
jmp 0x140114082
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
nop
ret
call fcn.140056be0
jmp fcn.140113fc0
Function at 0x140114180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1401142e6
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x48], xmm15
lea rdx, [rsp + 0x32]
mov qword [rsp + 0x70], rdx
test byte [rdx], al
movabs rsi, 0x2f6e0a060b356f05
mov qword [rdx], rsi
movabs rsi, 0x4ee42056c202f6e
mov qword [rdx + 6], rsi
mov rdx, qword [rsp + 0x70]
test byte [rdx], al
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0xe
mov qword [rsp + 0x68], 0xe
movabs rdx, 0xd0a000b0502030c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc07020b0a0d0a04
mov qword [rsp + 0x27], rdx
mov qword [rsp + 0x40], 0
jmp 0x140114206
cmp qword [rsp + 0x40], 0x10
jl 0x140114213
jmp 0x1401142c5
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x40]
lea rdi, [rsp + rdi + 0x20]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x23]
mov byte [rsp + 0x2f], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x20]
movzx edx, byte [rdx]
mov byte [rsp + 0x31], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x23]
mov byte [rsp + 0x30], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x20]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x58]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x23]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x31]
add rdx, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x30]
mov byte [rdx], sil
jmp 0x1401142b5
add qword [rsp + 0x40], 2
nop dword [rax + rax]
jmp 0x140114206
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
add rsp, 0x78
pop rbp
ret
call fcn.140056be0
jmp fcn.140114180
Function at 0x140114da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x140114f62
push rbp
mov rbp, rsp
sub rsp, 0x98
movups xmmword [rsp + 0x68], xmm15
lea rdx, [rsp + 0x43]
mov qword [rsp + 0x90], rdx
test byte [rdx], al
movabs rsi, 0xfe595ec94aa3f648
mov qword [rdx], rsi
movabs rsi, 0x15e540616d3c7320
mov qword [rdx + 8], rsi
movabs rsi, 0xe93faf4f3a15e540
mov qword [rdx + 0xd], rsi
movabs rsi, 0x3b3532616c694976
mov qword [rdx + 0x15], rsi
mov rdx, qword [rsp + 0x90]
test byte [rdx], al
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], 0x1d
mov qword [rsp + 0x88], 0x1d
movabs rdx, 0xe071214020e0203
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd011a141c0e1b0a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4120d000f0f0403
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1a1a130712030f00
mov qword [rsp + 0x30], rdx
movabs rdx, 0x611161a11120510
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x60], 0
jmp 0x140114e83
cmp qword [rsp + 0x60], 0x28
jl 0x140114e90
jmp 0x140114f3b
mov rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x60]
lea rsi, [rsp + rsi + 0x18]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x60]
lea rdi, [rsp + rdi + 0x19]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x49]
mov byte [rsp + 0x40], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
mov byte [rsp + 0x42], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x78]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x49
mov byte [rsp + 0x41], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x60]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x78]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x49
mov byte [rdx], sil
movzx edx, byte [rsp + 0x42]
add rdx, qword [rsp + 0x78]
movzx esi, byte [rsp + 0x41]
mov byte [rdx], sil
jmp 0x140114f30
add qword [rsp + 0x60], 2
jmp 0x140114e83
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rbx
add rsp, 0x98
pop rbp
ret
call fcn.140056be0
jmp fcn.140114da0
Function at 0x140114f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1401150e6
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x48], xmm15
lea rdx, [rsp + 0x31]
mov qword [rsp + 0x70], rdx
test byte [rdx], al
movabs rsi, 0x916b8d9b9b96bf6e
mov qword [rdx], rsi
movabs rsi, 0x91bd6f9675439191
mov qword [rdx + 7], rsi
mov rdx, qword [rsp + 0x70]
test byte [rdx], al
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0xf
mov qword [rsp + 0x68], 0xf
movabs rdx, 0x20d0b0807010a01
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa090302050e0404
mov qword [rsp + 0x26], rdx
mov qword [rsp + 0x40], 0
jmp 0x140115006
cmp qword [rsp + 0x40], 0x10
jl 0x140115013
jmp 0x1401150c5
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x40]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x34]
mov byte [rsp + 0x2e], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x30], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x34]
mov byte [rsp + 0x2f], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x58]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x34]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x30]
add rdx, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x2f]
mov byte [rdx], sil
jmp 0x1401150b5
add qword [rsp + 0x40], 2
nop dword [rax + rax]
jmp 0x140115006
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
add rsp, 0x78
pop rbp
ret
call fcn.140056be0
jmp fcn.140114f80
Function at 0x14011a1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x14011a382
push rbp
mov rbp, rsp
sub rsp, 0x98
movups xmmword [rsp + 0x68], xmm15
lea rdx, [rsp + 0x43]
mov qword [rsp + 0x90], rdx
test byte [rdx], al
movabs rsi, 0x212c6e69dbc82dfa
mov qword [rdx], rsi
movabs rsi, 0xed1c74ee6e4e08d4
mov qword [rdx + 8], rsi
movabs rsi, 0x403cf5206eed1c74
mov qword [rdx + 0xd], rsi
movabs rsi, 0xcb356f77f2651702
mov qword [rdx + 0x15], rsi
mov rdx, qword [rsp + 0x90]
test byte [rdx], al
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], 0x1d
mov qword [rsp + 0x88], 0x1d
movabs rdx, 0x121507031c01130f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x161316091807021b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1150618070c1b0e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x118140c08001b12
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa001c090c160908
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x60], 0
jmp 0x14011a2a3
cmp qword [rsp + 0x60], 0x28
jl 0x14011a2b0
jmp 0x14011a35b
mov rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x60]
lea rsi, [rsp + rsi + 0x18]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x60]
lea rdi, [rsp + rdi + 0x19]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x4f]
mov byte [rsp + 0x40], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
mov byte [rsp + 0x42], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x78]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x4f
mov byte [rsp + 0x41], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x60]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x78]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x4f
mov byte [rdx], sil
movzx edx, byte [rsp + 0x42]
add rdx, qword [rsp + 0x78]
movzx esi, byte [rsp + 0x41]
mov byte [rdx], sil
jmp 0x14011a350
add qword [rsp + 0x60], 2
jmp 0x14011a2a3
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rbx
add rsp, 0x98
pop rbp
ret
call fcn.140056be0
jmp fcn.14011a1c0
Function at 0x14011dae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x14011dc66
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movups xmmword [rsp + 0x50], xmm15
lea rdx, [rsp + 0x35]
mov qword [rsp + 0x78], rdx
test byte [rdx], al
movabs rsi, 0x526b746365728b7a
mov qword [rdx], rsi
movabs rsi, 0x6e2071526b746365
mov qword [rdx + 3], rsi
movabs rsi, 0x8386866b8d69776f
mov qword [rdx + 0xb], rsi
mov rdx, qword [rsp + 0x78]
test byte [rdx], al
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], 0x13
mov qword [rsp + 0x70], 0x13
movabs rdx, 0x80e0f010e110e0c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf10000d080e0f01
mov qword [rsp + 0x22], rdx
movabs rdx, 0x120d0c0d060e1207
mov qword [rsp + 0x2a], rdx
mov qword [rsp + 0x48], 0
jmp 0x14011db88
cmp qword [rsp + 0x48], 0x14
jl 0x14011db95
jmp 0x14011dc45
mov rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x48]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x10]
mov byte [rsp + 0x32], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x10
mov byte [rsp + 0x33], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x60]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x10
mov byte [rdx], sil
movzx edx, byte [rsp + 0x34]
add rdx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0x33]
mov byte [rdx], sil
jmp 0x14011dc35
add qword [rsp + 0x48], 2
nop dword [rax + rax]
jmp 0x14011db88
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
sub rsp, 0xffffffffffffff80
pop rbp
ret
call fcn.140056be0
jmp fcn.14011dae0
Function at 0x14011e900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x14011ea9e
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x3b]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x6f48b62c7461773a
mov qword [rdx], rsi
movabs rsi, 0x63657220746f48b6
mov qword [rdx + 5], rsi
movabs rsi, 0x656c0adf72c5cbb5
mov qword [rdx + 0xd], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x15
mov qword [rsp + 0x78], 0x15
movabs rdx, 0xf120601051200
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe110f1211010d0e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4110e110f121101
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1111110012121100
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x50], 0
nop
jmp 0x14011e9c2
cmp qword [rsp + 0x50], 0x1a
jl 0x14011e9cf
jmp 0x14011ea7a
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x51]
mov byte [rsp + 0x38], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x3a], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffaf
mov byte [rsp + 0x39], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffaf
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3a]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x39]
mov byte [rdx], sil
jmp 0x14011ea6f
add qword [rsp + 0x50], 2
jmp 0x14011e9c2
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
ret
nop
call fcn.140056be0
jmp fcn.14011e900