joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400e76a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400e77c6
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xa47463656c815172
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6e9ab996206e49b1
mov qword [rsp + 0x27], rdx
movabs rdx, 0xa3b2aa7f8b6e9ab9
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf79bba8c833a587c
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc1907151a11010d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x11213020c190715
mov qword [rsp + 0x40], rdx
movabs rdx, 0x111c181616111c08
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11b171710150212
mov qword [rsp + 0x50], rdx
movabs rdx, 0x140d07120e1b080d
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x1400e7760
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 2]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x24
jge 0x1400e778d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x1400e77b4
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1d
jb 0x1400e7743
jmp 0x1400e77a8
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.140047e60
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400e76a0

Function at 0x1400e9760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400e98a6
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x3af40bf0aa0165b6
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8dd7e849203af40b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x35fb639964f51072
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9a662d8e6fbb2066
mov qword [rsp + 0x34], rdx
movabs rdx, 0xec2938237b4d298a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1d24061e1f1d0021
mov qword [rsp + 0x44], rdx
movabs rdx, 0x13190a0c17141c05
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x1d20110213190a0c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x171321000b06031f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2051d1f14222104
mov qword [rsp + 0x60], rdx
movabs rdx, 0x62123040b0f0e0a
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x1400e9840
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x75]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x75]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x2c
jge 0x1400e986d
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x1400e9894
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x25
jb 0x1400e9822
jmp 0x1400e9888
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x25
call fcn.140047e60
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x25
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x25
nop dword [rax + rax]
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400e9760
Function at 0x1400ec4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400ec5c6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xbcecb4cc6ca45072
mov qword [rsp + 0x19], rdx
movabs rdx, 0x24a49c65756c612a
mov qword [rsp + 0x21], rdx
movabs rdx, 0x4618824a49c6575
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3cab5c6ed48c7965
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x107121906191504
mov qword [rsp + 0x34], rdx
movabs rdx, 0x12080e1a01071219
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1519150e18151916
mov qword [rsp + 0x40], rdx
movabs rdx, 0x191902120f0d120e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5160e0114100d14
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1400ec560
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x16]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x16]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x24
jge 0x1400ec58d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x1400ec5b4
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1b
jb 0x1400ec543
jmp 0x1400ec5a8
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1b
call fcn.140047e60
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1b
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x1b
nop dword [rax + rax]
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400ec4a0

Function at 0x1400eca20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400ecb1c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x56715f6567798a8f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x612e56715f656779
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x848369732e6e6d63
mov qword [rsp + 0x22], rdx
movabs rdx, 0x106050e11100001
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20b0708030c0106
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20a050611050f06
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1400ecab0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x1400ecae8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1400ecb0f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
nop word [rax + rax]
cmp rsi, 0x12
jb 0x1400eca96
jmp 0x1400ecb03
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.140047e60
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x12
call fcn.14005c7c0
nop
nop dword [rax]
call fcn.14005a140
jmp fcn.1400eca20
Function at 0x1400f1cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400f1d92
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x434d485c47664fda
mov qword [rsp + 0x19], rdx
movabs rdx, 0x500c53434d485c47
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa01000a06040907
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5030103
xor eax, eax
jmp 0x1400f1d2b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x14]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x1400f1d5d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1400f1d85
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x14]
cmp rsi, 0xb
jb 0x1400f1d11
jmp 0x1400f1d78
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.140047e60
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.14005c7c0
mov eax, edi
mov ecx, 0xb
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400f1cc0

Function at 0x1400f2a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x1400f2c52
sub rsp, 0xb0
mov qword [rsp + 0xa8], rbp
lea rbp, [rsp + 0xa8]
movabs rdx, 0x58be4ad1e213a872
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb1a565c8663b7220
mov qword [rsp + 0x26], rdx
movabs rdx, 0x65b64bd55628b1a5
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7650a1caae050f7
mov qword [rsp + 0x34], rdx
movabs rdx, 0x594f8161206e1b20
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xead59669c2e95c6e
mov qword [rsp + 0x44], rdx
movabs rdx, 0x229258cf6697423
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x2658051ed400700f
mov qword [rsp + 0x54], rdx
movabs rdx, 0x3235332832242924
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x2d2325320f16332b
mov qword [rsp + 0x64], rdx
movabs rdx, 0xe0313282d232532
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1143d31283c062c
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1d02240c013a292b
mov qword [rsp + 0x78], rdx
movabs rdx, 0x32e131907122707
mov qword [rsp + 0x80], rdx
movabs rdx, 0xa31362832382733
mov qword [rsp + 0x88], rdx
movabs rdx, 0xa13333b1039253c
mov qword [rsp + 0x90], rdx
movabs rdx, 0x2d341b1238051004
mov qword [rsp + 0x98], rdx
movabs rdx, 0x18101a1f13143406
mov qword [rsp + 0xa0], rdx
xor eax, eax
jmp 0x1400f2be4
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x4c
jge 0x1400f2c17
movzx edx, byte [rsp + rax + 0x5c]
movzx esi, byte [rsp + rax + 0x5d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x3e
jae 0x1400f2c45
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x3e
jb 0x1400f2bc7
jmp 0x1400f2c38
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x3e
call fcn.140047e60
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
mov eax, esi
mov ecx, 0x3e
nop
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x3e
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400f2a80
Function at 0x1400f9120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400f921c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x437427ef5b266559
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xaea9d9437427ef5b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6c6932e649b4654c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x902100a0d0a0907
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100502080b030400
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa080b0f04031009
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1400f91b0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x77]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x1400f91e8
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x1400f920f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x77]
nop word [rax + rax]
cmp rsi, 0x13
jb 0x1400f9196
jmp 0x1400f9203
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.140047e60
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x13
call fcn.14005c7c0
nop
nop dword [rax]
call fcn.14005a140
jmp fcn.1400f9120

Function at 0x1400f96c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400f97bc
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xec863bba966eefe
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x40ec863bba966ee
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x74adf52eaa75a3b4
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa040c090f0c040c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0803040a040c09
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7060400010e0108
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1400f9750
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x1400f9788
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1400f97af
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x1400f9736
jmp 0x1400f97a3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.140047e60
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x11
call fcn.14005c7c0
nop
nop dword [rax]
call fcn.14005a140
jmp fcn.1400f96c0
Function at 0x1400fc1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400fc2e8
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xfddbf3656c66a438
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x9ffddbf3656c66a4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6e0420f22e656946
mov qword [rsp + 0x28], rdx
movabs rdx, 0xab90efe439f4e564
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7067e961cf20e49a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1601130113180f1e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71714081814200c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc15060c13080d05
mov qword [rsp + 0x50], rdx
movabs rdx, 0x818000f07180013
mov qword [rsp + 0x58], rdx
movabs rdx, 0x201613162019121a
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf1c201615001620
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x1400fc280
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x30
jge 0x1400fc2b2
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x1400fc2db
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
cmp rsi, 0x21
jb 0x1400fc262
jmp 0x1400fc2cf
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x21
nop
call fcn.140047e60
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x21
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x21
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400fc1a0

Function at 0x1400fdae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400fdba8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x17d66c531e6c29b5
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x86
movabs rdx, 0x7030108070006
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x600
xor eax, eax
jmp 0x1400fdb40
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x1400fdb72
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1400fdb9b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3d]
cmp rsi, 9
jb 0x1400fdb26
jmp 0x1400fdb8f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.140047e60
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.14005c7c0
mov eax, edi
mov ecx, 9
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400fdae0
Function at 0x1400ff140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1400ff2c6
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0xea74cda16c2ae07e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x696b89dcc5611920
mov qword [rsp + 0x20], rdx
movabs rdx, 0xbea0696b89dcc561
mov qword [rsp + 0x22], rdx
movabs rdx, 0xbeee5ba3fbfea125
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x61207401d2c77520
mov qword [rsp + 0x32], rdx
movabs rdx, 0x7574f0356dc7fe72
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x72313290c051202
mov qword [rsp + 0x42], rdx
movabs rdx, 0xb001e1027122426
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x1d07121413070b00
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10b04241c1d0b18
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1110090d11021807
mov qword [rsp + 0x60], rdx
movabs rdx, 0x12171512040b100d
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1d24070e19102723
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1b050e1017021e16
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x1400ff256
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x3e
jge 0x1400ff288
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2a
jae 0x1400ff2b5
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6c]
cmp rsi, 0x2a
jb 0x1400ff23c
jmp 0x1400ff2a9
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x2a
call fcn.140047e60
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2a
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x2a
nop dword [rax]
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400ff140

Function at 0x1400ffb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400ffbc8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x3a74e146a466dcd2
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xee
movabs rdx, 0x103050008040304
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x804
xor eax, eax
jmp 0x1400ffb60
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x1400ffb92
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1400ffbbb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
cmp rsi, 9
jb 0x1400ffb46
jmp 0x1400ffbaf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.140047e60
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.14005c7c0
mov eax, edi
mov ecx, 9
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400ffb00
Function at 0x1400ffd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400ffde8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x14086314e20317ec
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x66
movabs rdx, 0x8010607030008
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4020004
xor eax, eax
jmp 0x1400ffd81
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x1400ffdb3
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1400ffddb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 9
jb 0x1400ffd67
jmp 0x1400ffdcf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.140047e60
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.14005c7c0
mov eax, edi
mov ecx, 9
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400ffd20

Function at 0x1400ffe00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400fff08
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6e26706ab71310c6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e305fce6e26706a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x204d73e0b3f9e66e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2040906120a0e02
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80607060e120f05
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x803010301020806
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9000702020a0d10
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1400ffea2
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x1400ffecf
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1400ffefb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x1400ffe85
jmp 0x1400ffeef
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.140047e60
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x14
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400ffe00
Function at 0x140103c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x140103e06
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0xda74158e84ac4b87
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc03dc0a540206b1
mov qword [rsp + 0x23], rdx
movabs rdx, 0xde0c03dc0a540206
mov qword [rsp + 0x24], rdx
movabs rdx, 0x61afd9ea1bad0cfe
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xfedcc67301c11564
mov qword [rsp + 0x34], rdx
movabs rdx, 0x175e661740e1c67
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1b24220110030723
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1c280724150d101e
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x813070b1c280724
mov qword [rsp + 0x50], rdx
movabs rdx, 0x716140317021e22
mov qword [rsp + 0x58], rdx
movabs rdx, 0x200a082605241607
mov qword [rsp + 0x60], rdx
movabs rdx, 0x201b09170f11130c
mov qword [rsp + 0x68], rdx
movabs rdx, 0x4211f120b051b
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1f001e1a040e0210
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x140103d96
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x3c
jge 0x140103dc8
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x140103df5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
cmp rsi, 0x29
jb 0x140103d7c
jmp 0x140103de9
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x29
call fcn.140047e60
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x29
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x29
nop dword [rax]
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.140103c80
Function at 0x140104a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140104b96
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x7e20628d768abe20
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x73a0653c696461aa
mov qword [rsp + 0x22], rdx
movabs rdx, 0x836173a0653c6964
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6575817d76887384
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe040312080e010e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x170714010c010214
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x802130317071401
mov qword [rsp + 0x40], rdx
movabs rdx, 0x507161711050b12
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x140104b2e
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x140104b62
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x140104b89
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 0x1a
jb 0x140104b14
nop
jmp 0x140104b7d
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.140047e60
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x1a
call fcn.14005c7c0
nop
call fcn.14005a140
nop dword [rax + rax]
jmp fcn.140104a80

Function at 0x1401e2280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1401e2348
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x67d6a7724853aea6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6030000030506
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x100
xor eax, eax
nop
jmp 0x1401e22e0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x1401e2312
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x1401e233b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
cmp rsi, 8
jb 0x1401e22c2
jmp 0x1401e232f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.140047e60
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.14005c7c0
mov eax, edi
mov ecx, 8
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1401e2280