joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1403b87e1
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
neg al
push r14
sbb r14w, 0x2735
push r13
adc r14b, r12b
rcr r14b, cl
push r12
sub eax, r13d
push rsi
sub ax, r11w
cdqe
sbb r14b, 0xa3
push rdi
inc dil
shr sil, cl
push rbx
add al, 0x5f
clc
sub dil, 0xd8
sub rsp, 0x20
btr r14w, si
sub edi, r9d
mov rsi, r8
mov rdi, rdx
btr ax, ax
and r14b, 0xe2
ror al, 6
mov r14, rcx
adc al, r15b
shl bl, 0x60
add bl, spl
mov rbx, qword [rcx]
movsxd rax, ebp
movzx rax, r14w
cdqe
mov rcx, qword [rcx + 0x10]
sub rcx, rbx
shrd rax, rcx, 0x68
movzx rax, r12w
sar rcx, 4
sal ax, cl
movabs rax, 0xf0f0f0f0f0f0f0f1
test r10b, 0x7c
cmp r14b, 0x14
imul rcx, rax
test r14, 0x138f3f00
jmp 0x1403b8885
cmp rcx, r8
jmp 0x1403b888d
jae 0x1403b88fe
mov rcx, r14
mov rdx, rsi
jmp 0x1403b889e
call fcn.1403b8b19
mov rbx, qword [r14]
mov cl, 0x54
movsx dx, r8b
movzx edx, bx
nop word [rax + rax]
movzx cx, sil
mov rcx, rbx
setge dh
movzx edx, r14w
mov rdx, rdi
jmp 0x1403b88d0
call fcn.1403b936c
add rbx, 0x110
test r10b, cl
add rdi, 0x110
jmp 0x1403b88eb
dec rsi
jmp 0x1403b88f3
jne 0x1403b88be
jmp 0x1403b8ab8
mov r13, qword [r14 + 8]
sar r12d, cl
movsx r15d, cx
xor r12w, 0x2204
mov r12, r13
shl r15w, 0xf4
test cl, 0x83
bt r15, rsp
sub r12, rbx
rol r15b, 0x40
bt r15w, dx
add r15b, r9b
sar r12, 4
neg r15w
imul r12, rax
jmp 0x1403b893e
mov r15, r12
jmp 0x1403b8946
sub r15, rsi
jae 0x1403b8a0f
cmp rbx, r13
jmp 0x1403b8957
je 0x1403b89af
nop word cs:[rax + rax]
bswap cx
movzx ecx, r8w
mov dl, r12b
mov rcx, rbx
not dl
xchg dh, dh
mov rdx, rdi
jmp 0x1403b8984
call fcn.1403b8dda
add rbx, 0x110
test r9b, r13b
add rdi, 0x110
jmp 0x1403b89a0
cmp rbx, qword [r14 + 8]
jmp 0x1403b89a9
jne 0x1403b8975
cmp rsi, r12
jmp 0x1403b89b7
je 0x1403b8ab8
nop dword [rax + rax]
mov rcx, rbx
setae dl
xchg dh, dl
jmp 0x1403b89d2
mov rdx, rdi
jmp 0x1403b89da
call fcn.1403b936c
add rbx, 0x110
cmp bpl, r13b
cmp r11d, 0x38771028
add rdi, 0x110
jmp 0x1403b89fc
inc r15
jmp 0x1403b8a04
jne 0x1403b89c5
jmp 0x1403b8ab8
imul r15, rsi, 0x110
stc
test r11, 0x26245eb4
jmp 0x1403b8a23
add r15, rbx
cmc
test r10, 0x794c7a82
test bpl, sil
test rsi, rsi
jmp 0x1403b8a39
je 0x1403b8a73
nop
mov ch, 0x27
mov rcx, rbx
mov rdx, rdi
jmp 0x1403b8a4e
call fcn.1403b8dda
add rbx, 0x110
jmp 0x1403b8a5f
add rdi, 0x110
dec rsi
jne 0x1403b8a43
mov r13, qword [r14 + 8]
cmp r15, r13
jmp 0x1403b8a7b
je 0x1403b8ab5
mov rsi, r15
movzx cx, r12b
mov ecx, 0x26d55f0
setg ch
nop word [rax + rax]
mov rcx, rsi
call fcn.1403b3157
add rsi, 0x110
test r12w, 0xbe6
cmp rsi, r13
jne 0x1403b8a97
mov rbx, r15
mov qword [r14 + 8], rbx
bsf r12w, r14w
add rsp, 0x20
movzx r13, r9w
movzx di, sil
movzx r14d, r14w
pop rbx
jmp 0x1403b8ae0
pop rdi
setns r14b
movsxd r14, ebx
pop rsi
movsxd r13, r11d
seto r12b
mov r12d, 0x3a843210
pop r12
setne r13b
movzx r13, r15w
pop r13
jmp 0x1403b8b0a
pop r14
cmovbe r15w, sp
movzx r15w, r15b
pop r15
ret
Function at 0x1403c270d
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rsi
push rdi
bsf di, r15w
push rbx
shr esi, cl
sub rsp, 0x20
cmovl esi, esi
btc si, 0x78
movzx di, r15b
mov rsi, rcx
cwde
jmp 0x1403c2734
lea rax, [0x1400be020]
btr di, 0x45
add di, si
mov qword [rcx], rax
xor rdi, rcx
cmp r10w, si
sbb dil, r13b
mov rdi, qword [rcx + 0x78]
test rdi, rdi
je 0x1403c277a
mov rcx, rdi
call fcn.1400f3485
mov rcx, rdi
jmp 0x1403c276d
call fcn.1401a4c3b
mov qword [rsi + 0x78], 0
mov rax, qword [rsi + 0x70]
test di, r11w
cmp rax, 8
jb 0x1403c27ff
mov rcx, qword [rsi + 0x58]
sar dl, cl
test dil, 0x85
shr dl, cl
lea rdx, [rax + rax]
add rdx, 2
stc
test bpl, r13b
cmp esp, esp
cmp rdx, 0x1000
jb 0x1403c27fa
mov rbx, qword [rcx - 8]
cmc
cmp r11w, 0x6c31
add rcx, 0xfffffffffffffff8
test r8b, r9b
cmc
test sil, 0xaf
sub rcx, rbx
jmp 0x1403c27d2
cmp rcx, 0x20
jae 0x1403c2948
lea rax, [rax + rax]
cmovns ecx, esp
add rax, 0x29
jmp 0x1403c27ec
mov rdx, rax
movzx ecx, bp
mov rcx, rbx
jmp 0x1403c27fa
call fcn.14011afca
movaps xmm0, xmmword [0x1400bd3f0]
stc
movsx rbx, r12w
ror edi, 0xef
movups xmmword [rsi + 0x68], xmm0
adc di, 0x12f4
cbw
mov word [rsi + 0x58], 0
sub rdi, 0x2d984df4
movzx edi, sp
lea rax, [0x1400bdb70]
mov qword [rsi], rax
bsr rbx, rbx
mov rdi, qword [rsi + 0x40]
movsxd rbx, r9d
ror bl, 0x68
mov rbx, qword [rsi + 0x48]
clc
jmp 0x1403c284b
cmp rdi, rbx
jmp 0x1403c2853
jne 0x1403c2871
jmp 0x1403c28c1
add rdi, 8
stc
cmp rdi, rbx
jmp 0x1403c286b
je 0x1403c28a5
mov rcx, qword [rdi]
test r10, rsp
stc
test rcx, rcx
jmp 0x1403c2880
je 0x1403c285e
mov rax, qword [rcx]
cqo
not rdx
xchg dl, dh
mov edx, 1
jmp 0x1403c289a
call qword [rax + 0xb8]
jmp 0x1403c285e
mov rdi, qword [rsi + 0x40]
cmp rdi, qword [rsi + 0x48]
je 0x1403c28c1
mov qword [rsi + 0x48], rdi
clc
jmp 0x1403c28c1
test rdi, rdi
jmp 0x1403c28c9
je 0x1403c2937
mov rdx, qword [rsi + 0x50]
sub rdx, rdi
cmp rdx, 0x1000
jb 0x1403c2911
mov rax, qword [rdi - 8]
clc
cmp r9d, r11d
add rdi, 0xfffffffffffffff8
sub rdi, rax
stc
cmp dil, 0x92
test dil, al
cmp rdi, 0x20
jae 0x1403c2948
add rdx, 0x27
shl rdi, cl
bswap cx
mov rdi, rax
add rsi, 0x40
movzx ecx, r10w
mov rcx, rdi
jmp 0x1403c2921
call fcn.14011afca
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
sbb bx, ax
mov qword [rsi + 0x10], 0
add rsp, 0x20
pop rbx
pop rdi
setbe sil
movzx si, r10b
pop rsi
ret
call fcn.1404b2c7d
int3
Function at 0x1403c9f23
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
dec r15b
adc r15w, cx
push r14
bsr r14, r9
push r13
btc r14w, 0x7d
stc
push r12
push rsi
add sil, bl
btc r14, 0x82
stc
push rdi
push rbx
stc
movsx esi, cx
sub rsp, 0x30
bsf si, r10w
mov r12b, 0x58
setne r12b
movaps xmmword [rsp + 0x20], xmm6
or esi, 0x5d6d5abb
add r12, 0x351a0113
mov r15, r9
mov r12, r8
mov r14, rdx
ror r13b, cl
sar r13b, 0xac
mov r13, rcx
mov rsi, qword [rcx]
test rsi, rsi
jmp 0x1403c9f8d
je 0x1403ca0c6
mov rbx, qword [r13 + 8]
cmp rsi, rbx
jmp 0x1403c9f9f
je 0x1403ca06c
movaps xmm6, xmmword [0x1400bd3f0]
jmp 0x1403c9fb1
jmp 0x1403c9fe0
call fcn.14011afca
movups xmmword [rsi + 0x10], xmm6
cmc
stc
jmp 0x1403c9fc6
mov word [rsi], 0
test r8b, r15b
add rsi, 0x20
cmp rsi, rbx
jmp 0x1403c9fda
je 0x1403ca068
mov rax, qword [rsi + 0x18]
clc
cmp rax, 8
jmp 0x1403c9fee
jb 0x1403c9fbb
mov rcx, qword [rsi]
sar dh, cl
btc rdx, rsi
lea rdx, [rax + rax]
add rdx, 2
cmc
cmp cx, sp
stc
cmp rdx, 0x1000
jmp 0x1403ca016
jb 0x1403c9fb6
mov rdi, qword [rcx - 8]
cmp r11, rsp
add rcx, 0xfffffffffffffff8
test r10b, al
cmc
sub rcx, rdi
jmp 0x1403ca033
cmp rcx, 0x20
jmp 0x1403ca03c
jae 0x1403ca154
add rax, rax
sub edx, 0x666e2aaf
add rax, 0x29
cdq
mov cl, r8b
mov rdx, rax
not ch
movsx ecx, r15w
movzx rcx, r14w
mov rcx, rdi
jmp 0x1403c9fb6
mov rsi, qword [r13]
mov rdx, qword [r13 + 0x10]
cmp r15, rbx
stc
test r11w, ax
sub rdx, rsi
cmp rdx, 0x1000
jmp 0x1403ca087
jb 0x1403ca0b9
mov rax, qword [rsi - 8]
add rsi, 0xfffffffffffffff8
sub rsi, rax
jmp 0x1403ca0a1
cmp rsi, 0x20
jae 0x1403ca154
add rdx, 0x27
movzx rsi, r8w
movsxd rcx, ebp
mov rsi, rax
mov rcx, rsi
jmp 0x1403ca0c1
call fcn.14011afca
mov qword [r13], r14
shl r12, 5
rol edi, cl
movsx edi, si
sub esi, 0x2cad4ce6
lea r12, [r12 + r14]
sal rbx, 0x3c
rcr di, 0x21
mov qword [r13 + 8], r12
xor r12b, 0xf5
bswap bx
shl r15, 5
cmovnp r12w, r12w
movsx bx, r8b
and bh, 0x1a
lea r15, [r15 + r14]
btc r12, 0x52
mov qword [r13 + 0x10], r15
sar rdi, 0xd7
movaps xmm6, xmmword [rsp + 0x20]
add rsp, 0x30
not di
jmp 0x1403ca127
pop rbx
not r14b
xchg di, r14w
pop rdi
not r12b
movzx r14w, bl
pop rsi
movzx r14, r10w
bswap r14w
pop r12
movsx r13d, ax
pop r13
bswap r14d
mov r15d, r13d
pop r14
pop r15
ret
call fcn.1404b2c7d
int3
Function at 0x1403d8868
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
btr r15w, r12w
movzx r15, ax
mov r15d, 0xe803ffa
push r14
push r13
xor r15w, 0x37cc
push r12
shld r15, rcx, 0xdd
cmp bl, sil
push rsi
test cl, r11b
and r13b, 0x6e
shrd r13w, r8w, 0xde
push rdi
rcl r14b, 0xfc
push rbp
mov r12w, bp
sbb r12b, r13b
cmp bp, r10w
push rbx
sub rsp, 0x38
mov r13w, dx
shl r14b, cl
movaps xmmword [rsp + 0x20], xmm6
mov r14, r9
mov r15, r8
mov r12, rdx
rcr r13b, cl
and r13b, spl
bts bx, r14w
mov r13, rcx
cmc
add bl, r8b
sar bx, cl
mov rbx, qword [rcx]
test rbx, rbx
je 0x1403d8a02
mov rdi, qword [r13 + 8]
cmp rbx, rdi
jmp 0x1403d88f3
je 0x1403d89b0
lea rsi, [0x1400beb30]
jmp 0x1403d8905
xorps xmm6, xmm6
jmp 0x1403d8948
lea rbp, [rbx + 0x18]
jmp 0x1403d8916
call fcn.14011afca
movups xmmword [rbp], xmm6
test r8, 0x52821de5
test r14w, r13w
mov qword [rbp + 0x10], 0
add rbx, 0x30
test r12b, 0x5d
cmp rbx, rdi
jmp 0x1403d8942
je 0x1403d89ac
mov qword [rbx], rsi
mov rcx, qword [rbx + 0x18]
test rcx, rcx
jmp 0x1403d8957
je 0x1403d8932
mov rdx, qword [rbx + 0x28]
sub rdx, rcx
test r13b, r13b
cmp rdx, 0x1000
jmp 0x1403d8973
jb 0x1403d890d
mov rax, qword [rcx - 8]
test dh, 0xd5
cmp bx, r12w
add rcx, 0xfffffffffffffff8
sub rcx, rax
clc
cmp rcx, 0x20
jmp 0x1403d8995
jae 0x1403d8acb
add rdx, 0x27
mov rcx, rax
jmp 0x1403d89a7
jmp 0x1403d890d
mov rbx, qword [r13]
mov rdx, qword [r13 + 0x10]
test r9b, 7
sub rdx, rbx
cmp rdx, 0x1000
jmp 0x1403d89c7
jb 0x1403d89f5
mov rax, qword [rbx - 8]
add rbx, 0xfffffffffffffff8
sub rbx, rax
cmp rbx, 0x20
jae 0x1403d8acb
add rdx, 0x27
movzx rcx, r13w
mov rbx, rax
movzx rcx, r15w
movsx rcx, r8w
mov rcx, rbx
jmp 0x1403d89fd
call fcn.14011afca
mov qword [r13], r12
add esi, 0x345170c8
cdqe
xor bpl, cl
lea rax, [r15 + r15*2]
adc bl, 0x3e
and r15b, r12b
rol di, 0x77
shl rax, 4
add rax, r12
movsx edi, sp
adc bpl, 0x1c
sub r15b, sil
mov qword [r13 + 8], rax
lea rax, [r14 + r14*2]
rcr si, 0x36
sbb r15b, dil
bt esi, r12d
shl rax, 4
btr rsi, rcx
or r14, 0x79ce193b
lea rax, [rax + r12]
sal r15b, cl
mov qword [r13 + 0x10], rax
btc rdi, rdi
movaps xmm6, xmmword [rsp + 0x20]
mov edi, r14d
bt bx, 0x50
setg r15b
add rsp, 0x38
movzx r12, r15w
mov ebp, 0x5bab1fcf
cmovno r13w, r13w
pop rbx
movzx r13d, r14w
pop rbp
movsx r12, dx
not r15w
jmp 0x1403d8a97
pop rdi
movsx r12d, r15w
pop rsi
cmovne r12, rdi
movsx r15w, r15b
jmp 0x1403d8aab
pop r12
movsx r14, di
mov r15d, 0x38c33016
movzx r14w, r10b
pop r13
movsx r15w, r9b
pop r14
movsxd r15, esp
pop r15
ret
call fcn.1404b2c7d
int3
Function at 0x1403e0c42
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
test sil, 0x2c
push r14
cmc
clc
push rsi
stc
push rdi
push rbx
rcl di, cl
add edi, r11d
sub rsp, 0x30
not dil
movaps xmmword [rsp + 0x20], xmm6
rcl dil, 0x17
cmp sil, 0x42
mov rdi, qword [rcx]
test si, 0x53f
cmc
test rdi, rdi
jmp 0x1403e0c7b
je 0x1403e0ded
mov r14, rcx
bsf bx, r13w
sar bl, cl
mov rbx, qword [rcx + 8]
test r12d, edi
clc
cmp rdi, rbx
jmp 0x1403e0c9b
je 0x1403e0d72
lea r15, [0x1400bed30]
movaps xmm6, xmmword [0x1400bd400]
jmp 0x1403e0cb4
jmp 0x1403e0ce4
call fcn.14011afca
movups xmmword [rdi + 0x20], xmm6
cmp r10b, 0x28
cmc
mov byte [rdi + 0x10], 0
jmp 0x1403e0cd1
add rdi, 0x38
clc
cmp rdi, rbx
jmp 0x1403e0cde
je 0x1403e0d66
mov qword [rdi], r15
mov rax, qword [rdi + 0x28]
stc
cmp rax, 0x10
jb 0x1403e0cbe
mov rcx, qword [rdi + 0x10]
adc rdx, 0x5f682d70
sbb dh, bh
lea rdx, [rax + 1]
jmp 0x1403e0d10
cmp rdx, 0x1000
jmp 0x1403e0d1c
jb 0x1403e0cb9
mov rsi, qword [rcx - 8]
cmp bx, 0x189b
stc
test ecx, r12d
add rcx, 0xfffffffffffffff8
test ebx, r13d
test dil, 0xed
sub rcx, rsi
cmp rcx, 0x20
jmp 0x1403e0d46
jae 0x1403e0e22
add rax, 0x28
mov rdx, rax
mov ch, ah
movzx rcx, r11w
mov rcx, rsi
jmp 0x1403e0d61
jmp 0x1403e0cb9
mov rdi, qword [r14]
sal dl, cl
xor dh, bl
movzx dx, spl
mov rdx, qword [r14 + 0x10]
sub rdx, rdi
cmp rdx, 0x1000
jmp 0x1403e0d85
jb 0x1403e0dc3
mov rax, qword [rdi - 8]
cmc
test bpl, r10b
add rdi, 0xfffffffffffffff8
test bpl, dil
sub rdi, rax
cmp r11b, 0xf8
jmp 0x1403e0da6
cmp rdi, 0x20
jmp 0x1403e0daf
jae 0x1403e0e22
add rdx, 0x27
xchg cl, dil
mov rdi, rax
movzx rcx, bx
mov rcx, rdi
jmp 0x1403e0dcb
call fcn.14011afca
xorps xmm0, xmm0
movups xmmword [r14], xmm0
cmovle si, dx
bt r15d, 0x16
mov qword [r14 + 0x10], 0
bt bx, 0xa2
movaps xmm6, xmmword [rsp + 0x20]
and bl, r8b
add rsp, 0x30
movzx r14w, r14b
pop rbx
movsxd r15, esp
pop rdi
xchg r14b, sil
mov sil, 0x65
pop rsi
setne r15b
not r14b
movsx r14d, dx
pop r14
xchg r15b, r15b
pop r15
jmp 0x1403e0e21
ret
call fcn.1404b2c7d
int3
Function at 0x1403e740c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
cmp rdx, 0x5f4c29ec
stc
clc
push r14
push rsi
cmc
clc
push rdi
sal dil, 0x54
dec dil
push rbx
sub rsp, 0x30
xadd dil, dil
movaps xmmword [rsp + 0x20], xmm6
shr edi, cl
stc
mov rdi, qword [rcx]
test r11d, r12d
cmc
clc
test rdi, rdi
jmp 0x1403e7445
je 0x1403e75c4
mov r14, rcx
inc bl
xor bx, 0x6f8e
mov rbx, qword [rcx + 8]
stc
cmp al, r13b
cmp rdi, rbx
jmp 0x1403e7465
je 0x1403e7551
lea r15, [0x1400bed10]
jmp 0x1403e7477
movaps xmm6, xmmword [0x1400bd400]
jmp 0x1403e74ac
call fcn.14011afca
movups xmmword [rdi + 0x20], xmm6
test r14d, 0x34516474
mov byte [rdi + 0x10], 0
add rdi, 0x50
cmp rsi, rdx
cmp rdi, rbx
jmp 0x1403e74a6
je 0x1403e7542
mov qword [rdi], r15
movsx ecx, sp
lea rcx, [rdi + 0x38]
jmp 0x1403e74bb
call fcn.1403e0c42
mov rax, qword [rdi + 0x28]
cmc
cmp rax, 0x10
jmp 0x1403e74ce
jb 0x1403e7488
mov rcx, qword [rdi + 0x10]
cdq
sbb dh, 0xdf
not dh
lea rdx, [rax + 1]
cmp rdx, 0x1000
jmp 0x1403e74ee
jb 0x1403e7483
mov rsi, qword [rcx - 8]
cmp dx, cx
add rcx, 0xfffffffffffffff8
sub rcx, rsi
cmp r9, 0x46330e3d
cmp rcx, 0x20
jmp 0x1403e7512
jae 0x1403e7610
add rax, 0x28
mov cl, r14b
cmovle edx, r12d
movzx dx, r15b
mov rdx, rax
cmovns cx, r12w
movsx ecx, sp
not ch
mov rcx, rsi
jmp 0x1403e753d
jmp 0x1403e7483
mov rdi, qword [r14]
btr dx, 0xde
movzx rdx, dx
or rdx, r10
mov rdx, qword [r14 + 0x10]
cmp r11b, 0x16
sub rdx, rdi
test bpl, 0x5a
clc
cmp rdx, 0x1000
jmp 0x1403e756d
jb 0x1403e75a8
mov rax, qword [rdi - 8]
test r15w, 0x5877
add rdi, 0xfffffffffffffff8
test r12w, 0x326e
sub rdi, rax
stc
cmp rdi, 0x20
jae 0x1403e7610
add rdx, 0x27
mov rdi, rax
movzx cx, r10b
movsx ecx, r14w
not cx
mov rcx, rdi
jmp 0x1403e75b0
call fcn.14011afca
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], 0
movaps xmm6, xmmword [rsp + 0x20]
test r9b, dl
shl r15b, cl
rol bx, 0x49
add rsp, 0x30
movzx r15, si
pop rbx
movzx r15w, r14b
pop rdi
jmp 0x1403e75ef
pop rsi
movsx r14w, r12b
jmp 0x1403e75fe
pop r14
setae r15b
movsx r15d, r9w
pop r15
jmp 0x1403e760f
ret
call fcn.1404b2c7d
int3
Function at 0x1403f0fe5
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
push r14
stc
clc
bswap r14
push r13
clc
push r12
shld r13, rsp, 0xa0
push rsi
shr r13b, 0x52
sar r12, cl
btr r12w, 0x7e
push rdi
rol r15, cl
btc r15w, 0xe6
sub r14b, 0x61
push rbx
shl r15b, 0xe9
rcr r15b, cl
sub r14b, 0x2c
sub rsp, 0x30
movzx r14w, sil
bswap si
or r13b, bpl
movaps xmmword [rsp + 0x20], xmm6
shl r13b, cl
sbb r12w, bx
mov r15, r9
adc rsi, 0x65ec479b
rcr r14, cl
shl r13b, cl
mov r12, r8
shr r13w, cl
xor sil, al
jmp 0x1403f105a
mov r14, rdx
mov r13, rcx
shl esi, cl
mov rsi, qword [rcx]
jmp 0x1403f106a
test rsi, rsi
jmp 0x1403f1072
je 0x1403f1199
mov rbx, qword [r13 + 8]
cmc
cmp esp, 0x47c41f1f
cmp rsi, rbx
jmp 0x1403f108b
je 0x1403f113d
movaps xmm6, xmmword [0x1400bd400]
jmp 0x1403f109d
jmp 0x1403f10d0
call fcn.14011afca
movups xmmword [rsi + 0x10], xmm6
mov byte [rsi], 0
cmp rdi, r10
cmc
test r11b, 0x16
add rsi, 0x20
cmp r8b, r8b
jmp 0x1403f10c2
cmp rsi, rbx
jmp 0x1403f10ca
je 0x1403f1136
mov rax, qword [rsi + 0x18]
stc
test r13w, r12w
cmp rax, 0x10
jmp 0x1403f10e2
jb 0x1403f10a7
mov rcx, qword [rsi]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1403f10a2
mov rdi, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
cmc
stc
test spl, 0x77
sub rcx, rdi
cmp rcx, 0x20
jmp 0x1403f1116
jae 0x1403f121f
add rax, 0x28
movzx rdx, ax
mov ecx, ebp
mov rdx, rax
mov rcx, rdi
jmp 0x1403f1131
jmp 0x1403f10a2
mov rsi, qword [r13]
cmp dl, r15b
mov rdx, qword [r13 + 0x10]
sub rdx, rsi
cmp rdx, 0x1000
jmp 0x1403f1150
jb 0x1403f1191
mov rax, qword [rsi - 8]
test r11b, 0xf
add rsi, 0xfffffffffffffff8
sub rsi, rax
cmp sp, 0x2058
stc
cmp rsi, 0x20
jmp 0x1403f1174
jae 0x1403f121f
add rdx, 0x27
movzx ecx, cx
movsx cx, r11b
xchg cx, si
mov rsi, rax
jmp 0x1403f1191
mov rcx, rsi
call fcn.14011afca
mov qword [r13], r14
setno dil
shrd esi, edx, 0xe1
sub ebx, ebp
shl r12, 5
jmp 0x1403f11b0
add r12, r14
inc sil
mov qword [r13 + 8], r12
not edi
mov r12w, 0x669f
shl r15, 5
dec r12b
movzx r12, ax
or r12b, r14b
add r15, r14
jmp 0x1403f11db
mov qword [r13 + 0x10], r15
movaps xmm6, xmmword [rsp + 0x20]
btc bx, ax
add rsp, 0x30
movsx bx, r9b
pop rbx
pop rdi
movsx r13w, r10b
movsx r13, r15w
movzx r15w, sil
pop rsi
movsx r15d, si
pop r12
pop r13
bswap r14d
seto r15b
pop r14
mov r15w, r14w
pop r15
jmp 0x1403f121e
ret
call fcn.1404b2c7d
int3
Function at 0x1403f2bb7
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
test r11, 0x3b0c41bd
clc
push r14
neg r14b
push r12
rcr r14b, 0xc
shld r14w, bp, 0x7a
mov r14d, r14d
push rsi
shld r14w, ax, 0xa
adc r14b, cl
push rdi
clc
cmovp r14w, r11w
push rbx
movzx r14, r11w
ror r14b, 8
sub rsp, 0x28
movsx r14, dx
bt r14w, 7
mov r14, r8
test rdx, rdx
jmp 0x1403f2c08
je 0x1403f2dd9
mov rdi, rdx
mov r12, rcx
clc
cmp r9b, 0xec
sub ebx, ebx
jmp 0x1403f2c20
jmp 0x1403f2c52
mov rcx, r15
cmovle dx, r9w
cdq
mov rdx, rsi
jmp 0x1403f2c36
call fcn.1403b7e97
add rbx, 0x50
jmp 0x1403f2c44
dec rdi
jmp 0x1403f2c4c
je 0x1403f2dd1
mov eax, dword [r12 + rbx + 8]
clc
mov dword [r14 + rbx + 8], eax
cmc
clc
cmp r9w, 0x2ee7
cmp r14, r12
je 0x1403f2c3b
cmp qword [r12 + rbx + 0x28], 0x10
jmp 0x1403f2c79
jb 0x1403f2c8e
mov r9, qword [r12 + rbx + 0x10]
jmp 0x1403f2c89
jmp 0x1403f2c9e
lea r9, [r12 + rbx]
add r9, 0x10
add sil, r12b
shrd rsi, r9, 0xc4
lea r15, [r14 + rbx]
cmc
ror sil, 0x7e
shl si, cl
add r15, 0x10
mov rsi, qword [r12 + rbx + 0x20]
cmc
cmp r11w, r15w
sbb al, bpl
mov rax, qword [r14 + rbx + 0x28]
cmp rax, rsi
jae 0x1403f2cdd
mov rcx, r15
movzx edx, r11w
mov rdx, rsi
call fcn.1403b7e97
jmp 0x1403f2d26
cmp rax, 0x10
jmp 0x1403f2ce6
jb 0x1403f2cf8
mov r15, qword [r14 + rbx + 0x10]
xchg r8b, cl
movzx rcx, bx
mov qword [r14 + rbx + 0x20], rsi
mov rcx, r15
cqo
cmova r8w, r13w
cwd
mov rdx, r9
movzx r8w, bl
mov r8, rsi
call fcn.14049ffae
mov byte [r15 + rsi], 0
ror rsi, 0x63
btc rsi, r13
mov rsi, qword [r12 + rbx + 0x40]
cmp r9b, r12b
stc
test rax, 0x775e26a6
cmp qword [r12 + rbx + 0x48], 0x10
jmp 0x1403f2d40
jb 0x1403f2d55
mov r9, qword [r12 + rbx + 0x30]
jmp 0x1403f2d50
jmp 0x1403f2d65
lea r9, [r12 + rbx]
lahf
add r9, 0x30
rcr al, cl
sub eax, 0xec23d1f
lea r15, [r14 + rbx]
shr rax, 0xa2
sbb ax, dx
xor rax, 0x37991fbe
add r15, 0x30
mov ah, ah
mov rax, qword [r14 + rbx + 0x48]
cmp r13b, 0x55
clc
cmp rax, rsi
jmp 0x1403f2d8f
jb 0x1403f2c25
cmp rax, 0x10
jmp 0x1403f2d9e
jb 0x1403f2dac
mov r15, qword [r14 + rbx + 0x30]
movsxd rcx, edi
mov qword [r14 + rbx + 0x40], rsi
mov rcx, r15
not r8b
cwd
mov rdx, r9
xchg r8b, r8b
mov r8, rsi
call fcn.14049ffae
mov byte [r15 + rsi], 0
jmp 0x1403f2c3b
lea r14, [r14 + rbx]
adc r12w, r10w
mov rax, r14
inc bx
btc r15d, esi
movzx edi, ax
add rsp, 0x28
pop rbx
movsx r15w, r12b
jmp 0x1403f2df5
pop rdi
pop rsi
pop r12
pop r14
not r15d
movzx r15, r12w
pop r15
ret
Function at 0x14041f0e2
Capabilities:
Encrypt data using speck

Disassembly:
push rsi
xor r10w, bp
mov r10, qword [rcx]
adc r9b, 0x13
sub sil, r14b
cmp r14d, esi
mov rsi, qword [rcx + 0x18]
mov r9d, dword [r10 + 4]
test dl, 8
cmc
test spl, bpl
imul r9d, dword [r10]
cmp dil, bl
test r13b, 0xcf
cmp r8d, 2
jmp 0x14041f117
jne 0x14041f2a4
test r9d, r9d
jmp 0x14041f125
je 0x14041f33c
lea ecx, [r9 - 1]
clc
cmc
cmp ecx, 3
jb 0x14041f22f
mov r11d, r9d
movsx r8d, cx
xor r10b, spl
and r11d, 0xfffffffc
nop word cs:[rax + rax]
sub r8w, 0x7370
movzx r8d, word [rsi]
sal r10d, cl
movzx r10d, word [rsi + 4]
cmp bl, spl
sub ecx, ecx
test al, r11b
cmp r8w, word [rdx]
movzx r8w, r9b
not r8d
setne cl
inc r8b
neg ecx
sal r8w, 0x5e
btr r8d, ebp
mov word [rsi + 2], cx
xor r8w, r8w
bt r8w, 0xcf
sub ecx, ecx
cmp r10w, word [rdx]
setne cl
or r8b, 0x76
movzx r8w, r14b
neg ecx
mov word [rsi + 6], cx
shld r8d, ebp, 0x74
movzx r8d, word [rsi + 8]
cmp sil, r8b
xor ecx, ecx
cmp r8w, word [rdx]
sete r8b
setne cl
adc r8b, 0xea
rol r8, 0xcc
bts r8d, r14d
neg ecx
btr r8w, 0x17
add r8b, 0x8f
mov word [rsi + 0xa], cx
and r8w, cx
cmp r11, 0x2c671d50
movzx r8d, word [rsi + 0xc]
cmc
stc
xor ecx, ecx
sal cl, 0x6d
sar cl, cl
cmp r8w, word [rdx]
setne cl
neg ecx
mov word [rsi + 0xe], cx
clc
cmp r8w, 0x90f
add rsi, 0x10
cmp r8b, 0x41
cmp sil, r8b
add r11d, 0xfffffffc
jmp 0x14041f229
jne 0x14041f15b
test r9b, 3
jmp 0x14041f238
je 0x14041f33c
and r9d, 3
sub r8b, r10b
btr r8w, cx
sub ecx, ecx
btc r8w, r10w
bt r8, 0x59
nop word cs:[rax + rax]
movzx r8d, word [rsi + rcx*4]
cmp dl, 0x1a
cmc
jmp 0x14041f26f
xor eax, eax
shr al, cl
sbb al, 0xb0
cmp r8w, word [rdx]
mov al, 0x24
setne al
cmp bpl, r8b
cmp sp, 0x2d8b
neg eax
jmp 0x14041f28d
mov word [rsi + rcx*4 + 2], ax
inc rcx
cmc
cmp r9d, ecx
jne 0x14041f261
jmp 0x14041f33c
test r9d, r9d
jmp 0x14041f2ac
je 0x14041f33c
movzx r10d, word [rdx]
mov r8d, r9d
cmp r13w, r13w
test r8b, dil
sub ecx, ecx
jmp 0x14041f2c7
jmp 0x14041f2e5
inc rcx
jmp 0x14041f2d7
cmp r8d, ecx
jmp 0x14041f2df
je 0x14041f33c
cmp word [rsi + rcx*8], r10w
jmp 0x14041f2ef
jne 0x14041f2cc
movzx eax, word [rsi + rcx*8 + 2]
cmp dil, bl
test r14b, r12b
cmp ax, word [rdx + 2]
jmp 0x14041f309
jne 0x14041f2cc
movzx eax, word [rsi + rcx*8 + 4]
stc
cmp ax, word [rdx + 4]
jne 0x14041f2cc
mov word [rsi + rcx*8 + 6], 0
movzx r10, r10w
seta r10b
movzx r10d, word [rdx]
jmp 0x14041f337
jmp 0x14041f2cc
pop rsi
ret
Function at 0x140428584
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rsi
movsx si, al
bts rsi, r13
push rdi
rcr si, 0x38
sub rsp, 0x28
adc sil, 0x69
sbb sil, 0xf5
mov rsi, rcx
movzx edi, dx
jmp 0x1404285b0
movzx edx, word [rcx + rdi*4 + 0x834]
cmc
stc
cmp r14b, 0xa9
test dx, dx
jmp 0x1404285c6
js 0x1404285d9
mov rcx, rsi
jmp 0x1404285d4
call fcn.140428584
movsxd rcx, dword [rsi + 0x8860]
test al, bpl
cmp ecx, dword [rsi + 0x8858]
jge 0x14042876e
movsxd rax, dword [rsi + 0x885c]
shld r8w, bx, 0x3a
rcr r8w, cl
lea rax, [rax + rcx]
cqo
mov r8, qword [rsi + 8]
xor dl, r12b
lea edx, [rax + 3]
or ch, 0x82
test eax, eax
mov cx, 0x520c
movsx cx, bl
cmovns edx, eax
movsxd rcx, ebx
rcl ch, cl
mov rcx, qword [rsi + 0x18]
sar edx, 2
jmp 0x140428631
movsxd rdx, edx
jmp 0x140428639
mov byte [rcx + rdx], 1
inc dl
mov rdx, qword [rsi + 0x8838]
cmp r15b, 0x7d
cmc
jmp 0x140428650
movzx edi, byte [rsi + rdi*4 + 0x837]
clc
cmp r9b, 0xde
cmp byte [rdx + rdi*4 + 3], 0x81
jmp 0x140428667
jb 0x1404286a5
movzx ecx, byte [rdx + rdi*4 + 2]
mov byte [r8 + rax], cl
shld cx, ax, 0x30
movzx ecx, byte [rdx + rdi*4 + 1]
cmp dil, r13b
mov byte [r8 + rax + 1], cl
movzx ecx, byte [rdx + rdi*4]
clc
cmc
test r11b, sil
mov byte [r8 + rax + 2], cl
movzx ecx, byte [rdx + rdi*4 + 3]
stc
test r8b, 0xa3
mov byte [r8 + rax + 3], cl
mov eax, dword [rsi + 0x885c]
test r12, 0x183b74ce
add eax, 4
cmc
cmp r9w, dx
mov dword [rsi + 0x885c], eax
cmp eax, dword [rsi + 0x8854]
jmp 0x1404286cb
jl 0x14042876e
mov ecx, dword [rsi + 0x884c]
shrd eax, edx, 0x19
rcl al, 0x62
mov eax, dword [rsi + 0x8858]
stc
test rcx, 0x2bb2a3f
mov dword [rsi + 0x885c], ecx
movzx cx, sil
mov ecx, dword [rsi + 0x8860]
add ecx, dword [rsi + 0x8844]
cmp dh, 0x52
mov dword [rsi + 0x8860], ecx
test rbp, r14
stc
cmp ecx, eax
jmp 0x140428717
jl 0x14042876e
mov ecx, dword [rsi + 0x8840]
nop dword [rax]
clc
test ecx, ecx
jle 0x14042876e
mov edx, dword [rsi + 0x8864]
clc
cmc
test si, 0x4a44
shl edx, cl
mov dword [rsi + 0x8844], edx
sar edx, 1
stc
add edx, dword [rsi + 0x8850]
mov dword [rsi + 0x8860], edx
jmp 0x14042875c
dec ecx
mov dword [rsi + 0x8840], ecx
stc
clc
cmp edx, eax
jge 0x14042872b
add rsp, 0x28
setae dil
pop rdi
setbe sil
pop rsi
jmp 0x140428781
ret