joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14012faa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14012fc06
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2b]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0xf351217038676559
mov qword [rdx], rsi
movabs rsi, 0x5719492262f35121
mov qword [rdx + 5], rsi
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xd
mov qword [rsp + 0x60], 0xd
movabs rdx, 0x603080b05060307
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x8060a00090603
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x38], 0
jmp 0x14012fb26
cmp qword [rsp + 0x38], 0xe
jl 0x14012fb33
jmp 0x14012fbe5
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0xf]
mov byte [rsp + 0x28], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x2a], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0xf]
mov byte [rsp + 0x29], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0xf]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2a]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x29]
mov byte [rdx], sil
jmp 0x14012fbd5
add qword [rsp + 0x38], 2
nop dword [rax + rax]
jmp 0x14012fb26
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
jmp fcn.14012faa0
Function at 0x140132d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x140132f2a
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x36]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x17d872c07472e552
mov qword [rdx], rsi
movabs rsi, 0x9cc266b4f47265bf
mov qword [rdx + 8], rsi
movabs rsi, 0xb79a9cc266b4f472
mov qword [rdx + 0xa], rsi
movabs rsi, 0xc9960b746e3143b8
mov qword [rdx + 0x12], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x1a
mov qword [rsp + 0x78], 0x1a
movabs rdx, 0x10b0014120c110e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x70817080f0f010b
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1400070817080f0f
mov qword [rsp + 0x23], rdx
movabs rdx, 0x10190608181404
mov qword [rsp + 0x2b], rdx
mov qword [rsp + 0x50], 0
jmp 0x140132e4e
cmp qword [rsp + 0x50], 0x1a
jl 0x140132e5b
jmp 0x140132f06
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x1a]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x2f]
mov byte [rsp + 0x33], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
mov byte [rsp + 0x35], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffd1
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffd1
mov byte [rdx], sil
movzx edx, byte [rsp + 0x35]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x34]
mov byte [rdx], sil
jmp 0x140132efb
add qword [rsp + 0x50], 2
jmp 0x140132e4e
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
ret
call fcn.140056be0
jmp fcn.140132d80
Function at 0x140134dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140134f19
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2e]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0x551f574e373f6344
mov qword [rdx], rsi
mov word [rdx + 8], 0x3d3d
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xa
mov qword [rsp + 0x60], 0xa
movabs rdx, 0x701030209090104
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x908060905020701
mov qword [rsp + 0x23], rdx
mov qword [rsp + 0x38], 0
jmp 0x140134e3e
cmp qword [rsp + 0x38], 0xe
jl 0x140134e4b
jmp 0x140134ef8
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1e]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0xd]
mov byte [rsp + 0x2b], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
mov byte [rsp + 0x2d], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0xd]
mov byte [rsp + 0x2c], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0xd]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2d]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x2c]
mov byte [rdx], sil
jmp 0x140134eed
add qword [rsp + 0x38], 2
jmp 0x140134e3e
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
nop
jmp fcn.140134dc0
Function at 0x140134f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1401350c6
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movups xmmword [rsp + 0x50], xmm15
lea rdx, [rsp + 0x37]
mov qword [rsp + 0x78], rdx
test byte [rdx], al
movabs rsi, 0x7a8f636c6c8cae8d
mov qword [rdx], rsi
movabs rsi, 0x647a8f636c6c8cae
mov qword [rdx + 1], rsi
movabs rsi, 0x9e658984968cdf6a
mov qword [rdx + 9], rsi
mov rdx, qword [rsp + 0x78]
test byte [rdx], al
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], 0x11
mov qword [rsp + 0x70], 0x11
movabs rdx, 0x60109100400000a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20b04070e0c0601
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10030d040c09060d
mov qword [rsp + 0x2c], rdx
mov qword [rsp + 0x48], 0
jmp 0x140134fe8
cmp qword [rsp + 0x48], 0x16
jl 0x140134ff5
jmp 0x1401350a5
mov rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x48]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x2e]
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x36], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + 0x35], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x60]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x2e]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x36]
add rdx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0x35]
mov byte [rdx], sil
jmp 0x140135097
add qword [rsp + 0x48], 2
nop dword [rax]
jmp 0x140134fe8
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
sub rsp, 0xffffffffffffff80
pop rbp
ret
call fcn.140056be0
jmp fcn.140134f40
Function at 0x140139740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x1401398de
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x6f8d658961897272
mov qword [rdx], rsi
movabs rsi, 0x32a66c9d9697708b
mov qword [rdx + 8], rsi
movabs rsi, 0x666183a58b7d6e8e
mov qword [rdx + 0x10], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x18
mov qword [rsp + 0x78], 0x18
movabs rdx, 0x817000a0c15090d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1502160004141217
mov qword [rsp + 0x23], rdx
movabs rdx, 0x80e150216000414
mov qword [rsp + 0x25], rdx
movabs rdx, 0x804061515100b13
mov qword [rsp + 0x2d], rdx
mov qword [rsp + 0x50], 0
nop
jmp 0x140139802
cmp qword [rsp + 0x50], 0x1a
jl 0x14013980f
jmp 0x1401398ba
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x1c]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 4]
mov byte [rsp + 0x35], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
mov byte [rsp + 0x37], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
sub edx, edi
add edx, 4
mov byte [rsp + 0x36], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
sub esi, edi
add esi, 4
mov byte [rdx], sil
movzx edx, byte [rsp + 0x37]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x36]
mov byte [rdx], sil
jmp 0x1401398af
add qword [rsp + 0x50], 2
jmp 0x140139802
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
ret
nop
call fcn.140056be0
jmp fcn.140139740
Function at 0x140139e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140139fb5
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x48], xmm15
lea rdx, [rsp + 0x31]
mov qword [rsp + 0x70], rdx
test byte [rdx], al
movabs rsi, 0x30492e37f8121a0a
mov qword [rdx], rsi
movabs rsi, 0x3d3a72f9c52bd730
mov qword [rdx + 7], rsi
mov rdx, qword [rsp + 0x70]
test byte [rdx], al
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0xf
mov qword [rsp + 0x68], 0xf
movabs rdx, 0x80b040900010200
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa050e0d080b0409
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80b070208030705
mov qword [rsp + 0x26], rdx
mov qword [rsp + 0x40], 0
jmp 0x140139ed5
cmp qword [rsp + 0x40], 0x14
jl 0x140139ee5
nop dword [rax]
jmp 0x140139f92
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x40]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x27]
mov byte [rsp + 0x2e], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x30], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + 0x2f], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x58]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x27]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x30]
add rdx, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x2f]
mov byte [rdx], sil
jmp 0x140139f87
add qword [rsp + 0x40], 2
jmp 0x140139ed5
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
xor eax, eax
nop
call fcn.140053e40
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
add rsp, 0x78
pop rbp
ret
call fcn.140056be0
jmp fcn.140139e40
Function at 0x140139fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14013a115
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2d]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0xecf5e9fbde69e345
mov qword [rdx], rsi
mov dword [rdx + 7], 0x73c3edec
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xb
mov qword [rsp + 0x60], 0xb
movabs rdx, 0x406030805060104
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6070904
mov qword [rsp + 0x38], 0
jmp 0x14013a038
cmp qword [rsp + 0x38], 0xc
nop
jl 0x14013a047
jmp 0x14013a0f4
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x78]
mov byte [rsp + 0x2a], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x2c], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + 0x2b], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x78]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2c]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x2b]
mov byte [rdx], sil
jmp 0x14013a0e9
add qword [rsp + 0x38], 2
jmp 0x14013a038
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
jmp fcn.140139fc0
Function at 0x14013a120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14013a275
push rbp
mov rbp, rsp
sub rsp, 0x68
movups xmmword [rsp + 0x38], xmm15
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x60], rdx
test byte [rdx], al
movabs rsi, 0xc0e9e343616eed63
mov qword [rdx], rsi
mov byte [rdx + 8], 0x65
mov rdx, qword [rsp + 0x60]
test byte [rdx], al
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], 9
mov qword [rsp + 0x58], 9
movabs rdx, 0x305010603060007
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x507
mov qword [rsp + 0x30], 0
jmp 0x14013a194
cmp qword [rsp + 0x30], 0xa
jl 0x14013a1a5
nop dword [rax]
jmp 0x14013a250
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x30]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x30]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x73]
mov byte [rsp + 0x24], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x26], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x48]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffff8d
mov byte [rsp + 0x25], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x30]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x48]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffff8d
mov byte [rdx], sil
movzx edx, byte [rsp + 0x26]
add rdx, qword [rsp + 0x48]
movzx esi, byte [rsp + 0x25]
mov byte [rdx], sil
jmp 0x14013a245
add qword [rsp + 0x30], 2
jmp 0x14013a194
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
xor eax, eax
nop dword [rax]
call fcn.140053e40
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rbx
add rsp, 0x68
pop rbp
ret
call fcn.140056be0
jmp fcn.14013a120
Function at 0x14013bcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14013be15
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2d]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0x9b866990a38372c1
mov qword [rdx], rsi
mov dword [rdx + 7], 0x8f72bb9b
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xb
mov qword [rsp + 0x60], 0xb
movabs rdx, 0xa03070002060008
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x4000804
mov qword [rsp + 0x38], 0
jmp 0x14013bd38
cmp qword [rsp + 0x38], 0xc
nop
jl 0x14013bd47
jmp 0x14013bdf2
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x1b]
mov byte [rsp + 0x2a], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x2c], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffe5
mov byte [rsp + 0x2b], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffe5
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2c]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x2b]
mov byte [rdx], sil
jmp 0x14013bde7
add qword [rsp + 0x38], 2
jmp 0x14013bd38
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
nop
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
jmp fcn.14013bcc0
Function at 0x14013eea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14013eff8
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2d]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0x54fdf72f461765eb
mov qword [rdx], rsi
mov dword [rdx + 7], 0xe5702154
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xb
mov qword [rsp + 0x60], 0xb
movabs rdx, 0x504040604050a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x80a0802080a0005
mov qword [rsp + 0x22], rdx
mov qword [rsp + 0x38], 0
jmp 0x14013ef1f
cmp qword [rsp + 0x38], 0x10
jl 0x14013ef2c
jmp 0x14013efd7
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x3a]
mov byte [rsp + 0x2a], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x2c], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x3a
mov byte [rsp + 0x2b], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x3a
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2c]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x2b]
mov byte [rdx], sil
jmp 0x14013efcc
add qword [rsp + 0x38], 2
jmp 0x14013ef1f
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
nop dword [rax]
jmp fcn.14013eea0
Function at 0x140140000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140140175
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x48], xmm15
lea rdx, [rsp + 0x32]
mov qword [rsp + 0x70], rdx
test byte [rdx], al
movabs rsi, 0xefd1dde1af7465ab
mov qword [rdx], rsi
movabs rsi, 0xfd73ad0ba9a0efd1
mov qword [rdx + 6], rsi
mov rdx, qword [rsp + 0x70]
test byte [rdx], al
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0xe
mov qword [rsp + 0x68], 0xe
movabs rdx, 0x3090a030d090b05
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x706080b03090a03
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x307060409000404
mov qword [rsp + 0x27], rdx
mov qword [rsp + 0x40], 0
jmp 0x140140095
cmp qword [rsp + 0x40], 0x14
jl 0x1401400a5
nop dword [rax]
jmp 0x140140150
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x40]
lea rdi, [rsp + rdi + 0x1c]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x30]
mov byte [rsp + 0x2f], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
mov byte [rsp + 0x31], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffd0
mov byte [rsp + 0x30], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x58]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffd0
mov byte [rdx], sil
movzx edx, byte [rsp + 0x31]
add rdx, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x30]
mov byte [rdx], sil
jmp 0x140140145
add qword [rsp + 0x40], 2
jmp 0x140140095
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
xor eax, eax
nop dword [rax]
call fcn.140053e40
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
add rsp, 0x78
pop rbp
ret
call fcn.140056be0
jmp fcn.140140000