joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400a4980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1400a4b06
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0xbfa834cf7e6c75be
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xbba309f0685b1e1
mov qword [rsp + 0x23], rdx
movabs rdx, 0xdfe88d0bba309f06
mov qword [rsp + 0x26], rdx
movabs rdx, 0xfa8a200b8bb7f16b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2081ae9f2026e632
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa58c2461721197a0
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xb081d0f2a06071c
mov qword [rsp + 0x46], rdx
movabs rdx, 0x23112125031a041d
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x2023112125031a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x130c10240f0b041b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2921171509122914
mov qword [rsp + 0x60], rdx
movabs rdx, 0x815040b16230a0e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2815082123071d20
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1f160309030b0719
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x1400a4a96
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x71]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x3a
jge 0x1400a4ac8
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2b
jae 0x1400a4af5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x71]
cmp rsi, 0x2b
jb 0x1400a4a7c
jmp 0x1400a4ae9
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x2b
call fcn.140047e60
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2b
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x2b
nop dword [rax]
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400a4980
Function at 0x1400a5680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x1400a5832
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
movabs rdx, 0xbabeae6588143bf2
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x75babeae6588143b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xffdd6e6969a0ae1c
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb3612964a43385d2
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe5f869909efc73de
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa74ef284f9756db5
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb30c66fdf7469fe
mov qword [rsp + 0x44], rdx
movabs rdx, 0x81928270f181f19
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x2119091008192827
mov qword [rsp + 0x50], rdx
movabs rdx, 0x18022f1413190d06
mov qword [rsp + 0x58], rdx
movabs rdx, 0x161e1f2026263011
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2f20121c00290d24
mov qword [rsp + 0x68], rdx
movabs rdx, 0x28251d0927170b1d
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2714011b03160f25
mov qword [rsp + 0x78], rdx
movabs rdx, 0x150b1b0a2f060528
mov qword [rsp + 0x80], rdx
movabs rdx, 0x72c2e1c1d16120b
mov qword [rsp + 0x88], rdx
xor eax, eax
nop
jmp 0x1400a57c0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x44
jge 0x1400a57f2
movzx edx, byte [rsp + rax + 0x4c]
movzx esi, byte [rsp + rax + 0x4d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x1400a5825
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0x31
jb 0x1400a57a2
jmp 0x1400a5815
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x31
nop
call fcn.140047e60
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov eax, esi
mov ecx, 0x31
nop dword [rax]
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x31
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400a5680
Function at 0x1400b1cc0
Capabilities:
Hash data using fnv

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400b1f0c
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
mov ebx, dword [rax + 0x2c]
nop dword [rax + rax]
test ebx, ebx
jne 0x1400b1d6c
mov qword [rsp + 0x88], rax
lea rbx, [0x1408c28c0]
mov rcx, rax
lea rax, [0x140be1d40]
call fcn.14006da00
test cl, cl
jne 0x1400b1d51
mov rax, qword [rsp + 0x88]
call fcn.1400ae6c0
mov ecx, 1
mov rdi, rax
mov rsi, rbx
lea rax, [rsp + 0x30]
lea rbx, [0x14096aa58]
call fcn.140047ac0
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x28], rbx
nop dword [rax]
call fcn.1400b33e0
mov rcx, qword [rsp + 0x88]
xor edx, edx
jmp 0x1400b1d8e
lea rdx, [0x1408c2600]
cmp rax, rdx
jne 0x1400b1d7c
test byte [rbx], al
mov rax, rbx
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
nop
call fcn.140057480
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov rbx, rdx
lea rcx, [0x1408272e0]
call fcn.14000b060
inc rdx
cmp rbx, rdx
jle 0x1400b1dd8
mov rsi, qword [rax + rdx*8]
cmp qword [rsi + 0x30], rcx
jne 0x1400b1d8b
lea rax, [0x140be1d40]
lea rbx, [0x1408c28c0]
lea rdi, [0x1408c2600]
call fcn.14006dbc0
lea rdx, [0x1408c2600]
nop
cmp rax, rdx
jne 0x1400b1efc
test byte [rbx], al
mov rax, rbx
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
lea rcx, [0x14080cc60]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], 0
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x50], rcx
lea rax, [0x140862420]
nop
call fcn.14000daa0
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x50]
test byte [rcx], al
cmp dword [0x140c37b50], 0
jne 0x1400b1e3a
mov rdx, qword [rcx]
mov qword [rax], rdx
movups xmm0, xmmword [rcx + 8]
movups xmmword [rax + 8], xmm0
movups xmm0, xmmword [rcx + 0x18]
movups xmmword [rax + 0x18], xmm0
movups xmm0, xmmword [rcx + 0x28]
movups xmmword [rax + 0x28], xmm0
jmp 0x1400b1e49
mov rbx, rax
lea rax, [0x140862420]
call fcn.140013fa0
mov rax, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x28]
xor ecx, ecx
xor edi, edi
xor esi, esi
mov r8d, esi
nop dword [rax]
call fcn.1400adb00
nop
call fcn.140057580
mov rsi, qword [rsp + 0x60]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x2c], 0
mov rcx, qword [rsp + 0x88]
mov edx, dword [rcx + 0x10]
xor eax, eax
jmp 0x1400b1e97
imul edx, edx, 0x1000193
xor edx, 0x2a
mov eax, 1
cmp rax, 1
jl 0x1400b1e89
mov dword [rsi + 0x10], edx
cmp dword [0x140c37b50], 0
jne 0x1400b1eaf
mov qword [rsi + 0x30], rcx
jmp 0x1400b1eb8
lea rdi, [rsi + 0x30]
call fcn.14005c420
lea rax, [0x140be1d40]
lea rbx, [0x1408c28c0]
lea rdi, [0x1408c2600]
call fcn.14006dbc0
lea rdx, [0x1408c2600]
cmp rax, rdx
jne 0x1400b1eed
test byte [rbx], al
mov rax, rbx
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov rbx, rdx
lea rcx, [0x1408272e0]
call fcn.14000b060
mov rbx, rdx
lea rcx, [0x1408272e0]
call fcn.14000b060
nop
mov qword [rsp + 8], rax
call fcn.14005a140
mov rax, qword [rsp + 8]
nop dword [rax + rax]
jmp fcn.1400b1cc0
Function at 0x1400cf080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400cf1a8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x2e2f63176c08bb72
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x63f06c1b6546613b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x464b2c2e63f06c1b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3e0b9cc230200a23
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x17111914140c0e13
mov qword [rsp + 0x36], rdx
movabs rdx, 0x41117111914140c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x61a0c08150c0218
mov qword [rsp + 0x40], rdx
movabs rdx, 0x119191b0218141b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11019120a061312
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1400cf140
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x1400cf172
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x1400cf19b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
cmp rsi, 0x1c
jb 0x1400cf123
jmp 0x1400cf18f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
nop
call fcn.140047e60
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x1c
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400cf080

Function at 0x1400cf800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x1400cf91c
sub rsp, 0xd0
mov qword [rsp + 0xc8], rbp
lea rbp, [rsp + 0xc8]
movabs rdx, 0x2e74630c6ce065f8
mov qword [rsp + 0x1d], rdx
lea rdi, [rsp + 0x22]
lea rsi, [0x1408d0912]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.14005ce3a
mov rbp, qword [rbp]
movabs rdx, 0x2508330f3011524a
mov qword [rsp + 0x72], rdx
lea rdi, [rsp + 0x78]
lea rsi, [0x140976c5a]
nop word [rax + rax]
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.14005ce3a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x1400cf8b4
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x4b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x56
jge 0x1400cf8e2
movzx edx, byte [rsp + rax + 0x72]
movzx esi, byte [rsp + rax + 0x73]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x55
jae 0x1400cf90f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x55
jb 0x1400cf897
nop
jmp 0x1400cf903
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x55
call fcn.140047e60
mov rbp, qword [rsp + 0xc8]
add rsp, 0xd0
ret
mov eax, esi
mov ecx, 0x55
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x55
call fcn.14005c7c0
nop
nop dword [rax]
call fcn.14005a140
jmp fcn.1400cf800
Function at 0x1400cf940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400cfa08
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x36403506d2742045
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x65
movabs rdx, 0x507040505030100
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x604
xor eax, eax
jmp 0x1400cf9a0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x1400cf9d2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1400cf9fb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 9
jb 0x1400cf986
jmp 0x1400cf9ef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.140047e60
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.14005c7c0
mov eax, edi
mov ecx, 9
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400cf940

Function at 0x1400cfa20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400cfb48
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x96e806f6ce8480a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6153b23de0498484
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0e66153b23de049
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8173e20146593
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x180e160e0c0e0917
mov qword [rsp + 0x34], rdx
movabs rdx, 0x18121407180e160e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1801080b19160c05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50b110d070709
mov qword [rsp + 0x48], rdx
movabs rdx, 0x918100c17020317
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1400cfae0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x1400cfb12
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1400cfb3b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4e]
cmp rsi, 0x1a
jb 0x1400cfac3
jmp 0x1400cfb2f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
nop
call fcn.140047e60
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x1a
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400cfa20
Function at 0x1400d0e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d0f48
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x73ab6dedacf61acb
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x99611a0210a9f6f6
mov qword [rsp + 0x22], rdx
movabs rdx, 0x63147312666f1317
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7140c0602090404
mov qword [rsp + 0x32], rdx
movabs rdx, 0x3040a080f0a0d17
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf160d0b10040304
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb000311140b0c01
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x1400d0ee2
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x7c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x7c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1e
jge 0x1400d0f0f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1400d0f3b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x1400d0ec5
jmp 0x1400d0f2f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
nop dword [rax + rax]
call fcn.140047e60
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x18
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400d0e40

Function at 0x1400d12c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d1412
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x41b37048e2cee579
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6146ae8941b37048
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2efa6c08f365696e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5fee64f0a3b549fa
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3159d66c61da7404
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa0f0f0d15231222
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x21131b100a0f0f0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4151c120f140d1a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a22002222180815
mov qword [rsp + 0x50], rdx
movabs rdx, 0x160921101e1a051e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x60e06151c170004
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1700060403010223
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x1400d13aa
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x34
jge 0x1400d13dc
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x1400d1405
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
cmp rsi, 0x24
jb 0x1400d1390
jmp 0x1400d13f7
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x24
call fcn.140047e60
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x24
nop
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x24
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400d12c0
Function at 0x1400d5a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d5ba8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x75614d6f8b237259
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x632a1c4b205f5251
mov qword [rsp + 0x22], rdx
movabs rdx, 0x61497064632a1c4b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5a60736663538267
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3020c100d110215
mov qword [rsp + 0x36], rdx
movabs rdx, 0x61303020c100d11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1706020a101b03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130e1312050c1603
mov qword [rsp + 0x48], rdx
movabs rdx, 0x13090c031a080a02
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x1400d5b40
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x1400d5b72
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x1400d5b9b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1a]
cmp rsi, 0x1c
jb 0x1400d5b23
jmp 0x1400d5b8f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
nop
call fcn.140047e60
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x1c
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400d5a80

Function at 0x1400d6fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d706b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xc0acb76268646162
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xb
movabs rdx, 0x805070805080804
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3060306
xor eax, eax
jmp 0x1400d7004
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x1400d7037
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x1400d705e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x1400d6fe7
jmp 0x1400d7052
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.140047e60
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.14005c7c0
mov eax, edi
mov ecx, 9
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400d6fa0
Function at 0x1400d8200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d82cb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xda2665d9213c25d3
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x23d3
movabs rdx, 0x104090000000908
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6060307
xor eax, eax
jmp 0x1400d8266
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x52]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x52]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x1400d8297
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x1400d82be
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x1400d8249
jmp 0x1400d82b2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.140047e60
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.14005c7c0
mov eax, edi
mov ecx, 0xa
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400d8200

Function at 0x1400d82e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d83ab
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xb530956c873c2084
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x8ea4
movabs rdx, 0x607050806030805
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x90609
xor eax, eax
jmp 0x1400d8346
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 9]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 9]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x1400d8377
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x1400d839e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x1400d8329
jmp 0x1400d8392
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.140047e60
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.14005c7c0
mov eax, edi
mov ecx, 0xa
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400d82e0
Function at 0x1400d8b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d8c52
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xd76e9f2022a9d1ee
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb50fd76e9f2022a9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x56752a3820752fa0
mov qword [rsp + 0x26], rdx
movabs rdx, 0x67e31920d36168db
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xfa8c2182b6746f50
mov qword [rsp + 0x36], rdx
movabs rdx, 0x51d051d1e072011
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x51e051d051d1e07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1f07110f020a0a1b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x215150501121803
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5031f0b0f080320
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa011e001e09171b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1210e090d170205
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x1400d8bed
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x32
jge 0x1400d8c1a
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x1400d8c45
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x22
jb 0x1400d8bd0
jmp 0x1400d8c35
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x22
call fcn.140047e60
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x22
nop dword [rax]
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x22
call fcn.14005c7c0
nop
call fcn.14005a140
jmp fcn.1400d8b00
Function at 0x1400e4420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400e44fc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xff8d96f520c9611d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x65d869ff8d96f520
mov qword [rsp + 0x20], rdx
movabs rdx, 0x505050005060206
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5070906060204
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1400e4492
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x61]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x1400e44c8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1400e44ef
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x61]
nop dword [rax]
cmp rsi, 0xb
jb 0x1400e4478
jmp 0x1400e44e3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.140047e60
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.14005c7c0
mov eax, edi
mov ecx, 0xb
call fcn.14005c7c0
nop
nop dword [rax]
call fcn.14005a140
jmp fcn.1400e4420

Function at 0x1400e5060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400e5156
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x204e65356f72675b
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf4204e65356f7267
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x79586c6a5f656579
mov qword [rsp + 0x22], rdx
movabs rdx, 0x60f0504060805
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6000c0f0a010006
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10030e0602050d04
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x1400e50f3
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x1400e5122
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x1400e5149
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x1400e50d6
nop
jmp 0x1400e513d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.140047e60
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.14005c7c0
mov eax, edi
mov ecx, 0x11
call fcn.14005c7c0
nop
call fcn.14005a140
nop dword [rax + rax]
jmp fcn.1400e5060