joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140175500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x140175686
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movups xmmword [rsp + 0x50], xmm15
lea rdx, [rsp + 0x35]
mov qword [rsp + 0x78], rdx
test byte [rdx], al
movabs rsi, 0x8e6d7c2787987a96
mov qword [rdx], rsi
movabs rsi, 0xeb79898e6d7c2787
mov qword [rdx + 3], rsi
movabs rsi, 0x9b9d699620647261
mov qword [rdx + 0xb], rsi
mov rdx, qword [rsp + 0x78]
test byte [rdx], al
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], 0x13
mov qword [rsp + 0x70], 0x13
movabs rdx, 0x309080005040a07
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x120700080108090a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6060211040f0f12
mov qword [rsp + 0x2a], rdx
mov qword [rsp + 0x48], 0
jmp 0x1401755a8
cmp qword [rsp + 0x48], 0x18
jl 0x1401755b5
jmp 0x140175665
mov rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x48]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 4]
mov byte [rsp + 0x32], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xfffffffc
mov byte [rsp + 0x33], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x60]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xfffffffc
mov byte [rdx], sil
movzx edx, byte [rsp + 0x34]
add rdx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0x33]
mov byte [rdx], sil
jmp 0x140175655
add qword [rsp + 0x48], 2
nop dword [rax + rax]
jmp 0x1401755a8
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
sub rsp, 0xffffffffffffff80
pop rbp
ret
call fcn.140056be0
jmp fcn.140175500
Function at 0x1401756a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x140175826
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movups xmmword [rsp + 0x50], xmm15
lea rdx, [rsp + 0x35]
mov qword [rsp + 0x78], rdx
test byte [rdx], al
movabs rsi, 0x16b977b46e690bbd
mov qword [rdx], rsi
movabs rsi, 0x646e6116b977b46e
mov qword [rdx + 3], rsi
movabs rsi, 0x226d69fd2088a91b
mov qword [rdx + 0xb], rsi
mov rdx, qword [rsp + 0x78]
test byte [rdx], al
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], 0x13
mov qword [rsp + 0x70], 0x13
movabs rdx, 0x100010d04050b06
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60f0c050100010d
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb070112040b050f
mov qword [rsp + 0x2a], rdx
mov qword [rsp + 0x48], 0
jmp 0x140175748
cmp qword [rsp + 0x48], 0x14
jl 0x140175755
jmp 0x140175805
mov rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x48]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x69]
mov byte [rsp + 0x32], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x69
mov byte [rsp + 0x33], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x60]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x69
mov byte [rdx], sil
movzx edx, byte [rsp + 0x34]
add rdx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0x33]
mov byte [rdx], sil
jmp 0x1401757f5
add qword [rsp + 0x48], 2
nop dword [rax + rax]
jmp 0x140175748
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
sub rsp, 0xffffffffffffff80
pop rbp
ret
call fcn.140056be0
jmp fcn.1401756a0
Function at 0x140175840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x1401759f1
push rbp
mov rbp, rsp
sub rsp, 0x90
movups xmmword [rsp + 0x60], xmm15
lea rdx, [rsp + 0x41]
mov qword [rsp + 0x88], rdx
test byte [rdx], al
movabs rsi, 0xdb70d55067d11353
mov qword [rdx], rsi
movabs rsi, 0xfda9612e532006db
mov qword [rdx + 7], rsi
movabs rsi, 0x436d69268f347212
mov qword [rdx + 0xf], rsi
mov rdx, qword [rsp + 0x88]
test byte [rdx], al
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], 0x17
mov qword [rsp + 0x80], 0x17
movabs rdx, 0x7110b1111160604
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x161307110b111116
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x160f020612121608
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1605110411110605
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1104040e160d0401
mov qword [rsp + 0x36], rdx
mov qword [rsp + 0x58], 0
jmp 0x140175912
cmp qword [rsp + 0x58], 0x22
jl 0x14017591f
jmp 0x1401759cd
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x58]
lea rdi, [rsp + rdi + 0x1d]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x7b]
mov byte [rsp + 0x3e], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
mov byte [rsp + 0x40], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x7b]
mov byte [rsp + 0x3f], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x70]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x7b]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x40]
add rdx, qword [rsp + 0x70]
movzx esi, byte [rsp + 0x3f]
mov byte [rdx], sil
nop
jmp 0x1401759c2
add qword [rsp + 0x58], 2
jmp 0x140175912
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
add rsp, 0x90
pop rbp
ret
call fcn.140056be0
jmp fcn.140175840
Function at 0x140175a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x140175b9e
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x3d]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x19512669cf24ba52
mov qword [rdx], rsi
movabs rsi, 0x8bd6c919512669cf
mov qword [rdx + 3], rsi
movabs rsi, 0x29345165d71ae120
mov qword [rdx + 0xb], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x13
mov qword [rsp + 0x78], 0x13
movabs rdx, 0x807120e09100806
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x403090a04030109
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5090c040403090a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4021207050d0111
mov qword [rsp + 0x32], rdx
mov qword [rsp + 0x50], 0
nop
jmp 0x140175ac2
cmp qword [rsp + 0x50], 0x1c
jl 0x140175acf
jmp 0x140175b7a
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x65]
mov byte [rsp + 0x3a], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x3c], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x65
mov byte [rsp + 0x3b], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x65
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3c]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x3b]
mov byte [rdx], sil
jmp 0x140175b6f
add qword [rsp + 0x50], 2
jmp 0x140175ac2
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
ret
nop
call fcn.140056be0
jmp fcn.140175a00
Function at 0x140175bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x140175d61
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x3c]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x53eb693db4feb053
mov qword [rdx], rsi
movabs rsi, 0x64b67b6353eb693d
mov qword [rdx + 4], rsi
movabs rsi, 0x861ec54bcf87261
mov qword [rdx + 0xc], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x14
mov qword [rsp + 0x78], 0x14
movabs rdx, 0x3130f0900131212
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x412060e010402
mov qword [rsp + 0x27], rdx
movabs rdx, 0x211000412060e01
mov qword [rsp + 0x29], rdx
movabs rdx, 0x2120a0306081101
mov qword [rsp + 0x31], rdx
mov qword [rsp + 0x50], 0
nop
jmp 0x140175c82
cmp qword [rsp + 0x50], 0x1a
jl 0x140175c8f
jmp 0x140175d3c
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x20]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x65]
mov byte [rsp + 0x39], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x20]
movzx edx, byte [rdx]
mov byte [rsp + 0x3b], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x65]
mov byte [rsp + 0x3a], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x20]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x65]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3b]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x3a]
mov byte [rdx], sil
jmp 0x140175d31
add qword [rsp + 0x50], 2
jmp 0x140175c82
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
nop
ret
call fcn.140056be0
jmp fcn.140175bc0
Function at 0x1401771c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x140177346
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movups xmmword [rsp + 0x50], xmm15
lea rdx, [rsp + 0x35]
mov qword [rsp + 0x78], rdx
test byte [rdx], al
movabs rsi, 0x5053596f796b0d3e
mov qword [rdx], rsi
movabs rsi, 0x2565675053596f79
mov qword [rdx + 3], rsi
movabs rsi, 0x6860565477584d61
mov qword [rdx + 0xb], rsi
mov rdx, qword [rsp + 0x78]
test byte [rdx], al
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], 0x13
mov qword [rsp + 0x70], 0x13
movabs rdx, 0x807050e00080a0e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x100c0d0d0a090807
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70d080e011112
mov qword [rsp + 0x2a], rdx
mov qword [rsp + 0x48], 0
jmp 0x140177268
cmp qword [rsp + 0x48], 0x16
jl 0x140177275
jmp 0x140177325
mov rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x48]
lea rdi, [rsp + rdi + 0x1d]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0xc]
mov byte [rsp + 0x32], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0xc]
mov byte [rsp + 0x33], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x60]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0xc]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x34]
add rdx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0x33]
mov byte [rdx], sil
jmp 0x140177317
add qword [rsp + 0x48], 2
nop dword [rax]
jmp 0x140177268
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
sub rsp, 0xffffffffffffff80
pop rbp
ret
call fcn.140056be0
jmp fcn.1401771c0
Function at 0x140177f20
Capabilities:
Encrypt data using rc4 prga
Resolve function by parsing pe exports

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x1401780de
push rbp
mov rbp, rsp
sub rsp, 0x90
movups xmmword [rsp + 0x60], xmm15
lea rdx, [rsp + 0x3f]
mov qword [rsp + 0x88], rdx
test byte [rdx], al
movabs rsi, 0x7e6f319766914d86
mov qword [rdx], rsi
movabs rsi, 0x597b719383898077
mov qword [rdx + 8], rsi
movabs rsi, 0x8e597b7193838980
mov qword [rdx + 9], rsi
movabs rsi, 0x656d4166878e726e
mov qword [rdx + 0x11], rsi
mov rdx, qword [rsp + 0x88]
test byte [rdx], al
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], 0x19
mov qword [rsp + 0x80], 0x19
movabs rdx, 0x301100d01011509
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa13000f0301100d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x41501130a0d1103
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc090b160c0b0514
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd020e150a080f07
mov qword [rsp + 0x34], rdx
mov qword [rsp + 0x58], 0
nop
jmp 0x140178002
cmp qword [rsp + 0x58], 0x24
jl 0x14017800f
jmp 0x1401780ba
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x18]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x58]
lea rdi, [rsp + rdi + 0x19]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x14]
mov byte [rsp + 0x3c], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
mov byte [rsp + 0x3e], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x14
mov byte [rsp + 0x3d], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x70]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x14
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3e]
add rdx, qword [rsp + 0x70]
movzx esi, byte [rsp + 0x3d]
mov byte [rdx], sil
jmp 0x1401780af
add qword [rsp + 0x58], 2
jmp 0x140178002
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
add rsp, 0x90
pop rbp
ret
nop
call fcn.140056be0
jmp fcn.140177f20
Function at 0x14017a740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x14017a8df
push rbp
mov rbp, rsp
sub rsp, 0x90
movups xmmword [rsp + 0x60], xmm15
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x88], rdx
test byte [rdx], al
movabs rsi, 0xbae4178c6570614d
mov qword [rdx], rsi
movabs rsi, 0xac3ef6b8537ea7a1
mov qword [rdx + 8], rsi
movabs rsi, 0xe38e69b120640f9a
mov qword [rdx + 0x10], rsi
mov rdx, qword [rsp + 0x88]
test byte [rdx], al
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], 0x18
mov qword [rsp + 0x80], 0x18
movabs rdx, 0x1706000416100e11
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x9061408050a170d
mov qword [rsp + 0x27], rdx
movabs rdx, 0xe051711000a0906
mov qword [rsp + 0x2d], rdx
movabs rdx, 0xf1705000f0e070c
mov qword [rsp + 0x35], rdx
mov qword [rsp + 0x58], 0
jmp 0x14017a803
cmp qword [rsp + 0x58], 0x1e
jl 0x14017a810
jmp 0x14017a8bb
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x58]
lea rdi, [rsp + rdi + 0x20]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x25]
mov byte [rsp + 0x3d], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x20]
movzx edx, byte [rdx]
mov byte [rsp + 0x3f], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffdb
mov byte [rsp + 0x3e], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x20]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x70]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffdb
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3f]
add rdx, qword [rsp + 0x70]
movzx esi, byte [rsp + 0x3e]
mov byte [rdx], sil
jmp 0x14017a8b0
add qword [rsp + 0x58], 2
jmp 0x14017a803
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
add rsp, 0x90
pop rbp
ret
nop
call fcn.140056be0
jmp fcn.14017a740
Function at 0x14017c640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x14017c7ea
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x37]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x83730b45b8185542
mov qword [rdx], rsi
movabs rsi, 0xc40bb699d26ecb65
mov qword [rdx + 8], rsi
movabs rsi, 0xdec40bb699d26ecb
mov qword [rdx + 9], rsi
movabs rsi, 0xd21f69fed204f661
mov qword [rdx + 0x11], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x19
mov qword [rsp + 0x78], 0x19
movabs rdx, 0xb1413120c101000
mov qword [rsp + 0x18], rdx
movabs rdx, 0x717021818031510
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe050d0907170218
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc0c090d170d0f09
mov qword [rsp + 0x2c], rdx
mov qword [rsp + 0x50], 0
jmp 0x14017c70e
cmp qword [rsp + 0x50], 0x1c
jl 0x14017c71b
jmp 0x14017c7c6
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x18]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x19]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x73]
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
mov byte [rsp + 0x36], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x73
mov byte [rsp + 0x35], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x73
mov byte [rdx], sil
movzx edx, byte [rsp + 0x36]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x35]
mov byte [rdx], sil
jmp 0x14017c7bb
add qword [rsp + 0x50], 2
jmp 0x14017c70e
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
ret
call fcn.140056be0
jmp fcn.14017c640
Function at 0x14017fb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x14017fce1
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x3b]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x5a761822dd1cdf29
mov qword [rdx], rsi
movabs rsi, 0x5f026dda05a7618
mov qword [rdx + 5], rsi
movabs rsi, 0x4e5695471562d61
mov qword [rdx + 0xd], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x15
mov qword [rsp + 0x78], 0x15
movabs rdx, 0xb00031001080f00
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa050313000b0b07
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe09070013080a05
mov qword [rsp + 0x28], rdx
movabs rdx, 0x140c040e02030102
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x50], 0
nop
jmp 0x14017fc02
cmp qword [rsp + 0x50], 0x1e
jl 0x14017fc0f
jmp 0x14017fcbc
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x2c]
mov byte [rsp + 0x38], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x3a], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x2c]
mov byte [rsp + 0x39], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x2c]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3a]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x39]
mov byte [rdx], sil
jmp 0x14017fcb1
add qword [rsp + 0x50], 2
jmp 0x14017fc02
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
nop
ret
call fcn.140056be0
jmp fcn.14017fb40
Function at 0x14017fd00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x14017fea1
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x39]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x7672676067726f56
mov qword [rdx], rsi
movabs rsi, 0x747064745a644b76
mov qword [rdx + 7], rsi
movabs rsi, 0x606d2d59206b7285
mov qword [rdx + 0xf], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x17
mov qword [rsp + 0x78], 0x17
movabs rdx, 0xc16020d0f070a13
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x411081414110e02
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2070e1404110814
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4140e090d02040e
mov qword [rsp + 0x2e], rdx
mov qword [rsp + 0x50], 0
nop
jmp 0x14017fdc2
cmp qword [rsp + 0x50], 0x1c
jl 0x14017fdcf
jmp 0x14017fe7c
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x1f]
mov byte [rsp + 0x36], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x38], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + 0x37], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x1f]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x38]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x37]
mov byte [rdx], sil
jmp 0x14017fe71
add qword [rsp + 0x50], 2
jmp 0x14017fdc2
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
nop
ret
call fcn.140056be0
jmp fcn.14017fd00