joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400d0de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d0eb2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x77696936a0d971ac
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x60326a9c71776969
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60a020a00090701
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x605000c03050809
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x1400d0e4c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x45]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0x10
jge 0x1400d0e7e
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1400d0ea5
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x45]
cmp rsi, 0xd
jb 0x1400d0e32
jmp 0x1400d0e95
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.140046d40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.140059800
mov eax, edi
mov ecx, 0xd
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400d0de0

Function at 0x1400d17c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d18a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb1bb38383b3fb2b1
mov qword [rsp + 0x30], rdx
movabs rdx, 0xbf3a363eb24ec1b0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40e020e0a0c0309
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6080f000c0f0601
mov qword [rsp + 0x20], rdx
movabs rdx, 0x90a00020b0e0807
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x1400d1840
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x69]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x18
jge 0x1400d1872
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x1400d1897
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x69]
cmp rsi, 0x10
jb 0x1400d1822
jmp 0x1400d188b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.140046d40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.140059800
mov eax, edi
mov ecx, 0x10
nop
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400d17c0
Function at 0x1400d21c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d22aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x595c37323f7e4b32
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5f33595c37323f7e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x564731414039366d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa060a1010020105
mov qword [rsp + 0x18], rdx
movabs rdx, 0x503100a090e0a06
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1107060d0d0e0302
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x1400d224d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 6]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 6]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x16
jge 0x1400d227a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1400d229d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x1400d2230
jmp 0x1400d2291
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.140046d40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.140059800
mov eax, edi
mov ecx, 0x12
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400d21c0

Function at 0x1400d3a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d3b4c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x3000380d1a31da24
mov qword [rsp + 0x37], rdx
movabs rdx, 0xea1bb4f7370b0634
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x1eea1bb4f7370b06
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd6323138f4e8f4ff
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1418000f09000312
mov qword [rsp + 0x19], rdx
movabs rdx, 0x113111314100c0a
mov qword [rsp + 0x21], rdx
movabs rdx, 0x30d180a0e0c0113
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1104100006130403
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x1400d3ae8
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1e
jge 0x1400d3b1c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x1400d3b3f
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
cmp rsi, 0x19
jb 0x1400d3ace
jmp 0x1400d3b33
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.140046d40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.140059800
mov eax, edi
mov ecx, 0x19
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400d3a40
Function at 0x1400d4a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d4b48
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xca37ead9de3973d9
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x323885d332373731
mov qword [rsp + 0x44], rdx
movabs rdx, 0x687da533323885d3
mov qword [rsp + 0x48], rdx
movabs rdx, 0x22d4d0773985c8e4
mov qword [rsp + 0x50], rdx
movabs rdx, 0x16190113150c1512
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30c07010d111b18
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4001a131905030c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x110d11031b141811
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x1400d4aeb
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
cmp rax, 0x1e
jge 0x1400d4b18
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x1400d4b3b
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x1400d4ace
jmp 0x1400d4b2f
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.140046d40
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.140059800
mov eax, edi
mov ecx, 0x1c
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400d4a40

Function at 0x1400d6180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d62ac
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x976337584c694fc9
mov qword [rsp + 0x48], rdx
movabs rdx, 0x305059669ab97c44
mov qword [rsp + 0x50], rdx
movabs rdx, 0x395c3477a3335f74
mov qword [rsp + 0x58], rdx
movabs rdx, 0x3591888c43373059
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb0b07130a161c06
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x71d11021d001e06
mov qword [rsp + 0x24], rdx
movabs rdx, 0x70c100b071d1102
mov qword [rsp + 0x28], rdx
movabs rdx, 0x13181d0e060d1316
mov qword [rsp + 0x30], rdx
movabs rdx, 0x81400040c010900
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb03091b080b110d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1400d6246
movzx r9d, byte [rsp + rsi + 0x48]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4a]
mov byte [rsp + rdi + 0x48], dl
mov byte [rsp + rsi + 0x48], r8b
add rax, 2
cmp rax, 0x2c
jge 0x1400d627c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x1400d629f
movzx r8d, byte [rsp + rdi + 0x48]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4a]
cmp rsi, 0x20
jb 0x1400d622c
jmp 0x1400d6293
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x20
call fcn.140046d40
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.140059800
mov eax, edi
mov ecx, 0x20
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400d6180
Function at 0x1400d84e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d860c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x303650f2afe5ed46
mov qword [rsp + 0x43], rdx
movabs rdx, 0x30ef328334303650
mov qword [rsp + 0x48], rdx
movabs rdx, 0x935c30cc30ee3133
mov qword [rsp + 0x50], rdx
movabs rdx, 0x313633ea34369ead
mov qword [rsp + 0x58], rdx
movabs rdx, 0x359675a872e33143
mov qword [rsp + 0x60], rdx
movabs rdx, 0x11230414201d1601
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x911131d05030f
mov qword [rsp + 0x23], rdx
movabs rdx, 0x90404180f0b0518
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x22191f02051119
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1d21201504020100
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x1400d85a6
movzx r9d, byte [rsp + rsi + 0x43]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rdi + 0x43], dl
mov byte [rsp + rsi + 0x43], r8b
add rax, 2
cmp rax, 0x28
jge 0x1400d85dc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x1400d85ff
movzx r8d, byte [rsp + rdi + 0x43]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2e]
cmp rsi, 0x25
jb 0x1400d858c
jmp 0x1400d85f3
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x25
call fcn.140046d40
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.140059800
mov eax, edi
mov ecx, 0x25
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400d84e0

Function at 0x1400d8620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d8767
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x43f331331e12e5b7
mov qword [rsp + 0x52], rdx
movabs rdx, 0x171d00273e1343f3
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc6243100cb333838
mov qword [rsp + 0x60], rdx
movabs rdx, 0x3534422a1d39350b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x313bfc0231ed4134
mov qword [rsp + 0x70], rdx
movabs rdx, 0x615121100012223
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2511061606151211
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10820101b241900
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x21b101516120622
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc0d1a1508030b0d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x30a041207231b1a
mov qword [rsp + 0x42], rdx
movabs rdx, 0x918061f1416190f
mov qword [rsp + 0x4a], rdx
xor eax, eax
jmp 0x1400d8707
movzx r9d, byte [rsp + rsi + 0x52]
sub r9d, edx
lea edx, [r9 + 0x3d]
mov byte [rsp + rdi + 0x52], dl
lea edx, [r8 + 0x3d]
mov byte [rsp + rsi + 0x52], dl
add rax, 2
cmp rax, 0x34
jge 0x1400d8737
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x26
jae 0x1400d875a
movzx r8d, byte [rsp + rdi + 0x52]
sub r8d, edx
cmp rsi, 0x26
jb 0x1400d86ea
jmp 0x1400d874e
xor eax, eax
lea rbx, [rsp + 0x52]
mov ecx, 0x26
call fcn.140046d40
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.140059800
mov eax, edi
mov ecx, 0x26
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400d8620
Function at 0x1400d9100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d9238
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x39b3dfa736c96de6
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc6efca37bf1c3328
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1af0a0f236d637b3
mov qword [rsp + 0x58], rdx
movabs rdx, 0x36c5311335324837
mov qword [rsp + 0x60], rdx
movabs rdx, 0xbaac6fe8359ea832
mov qword [rsp + 0x68], rdx
movabs rdx, 0x25240a0e08051614
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1c21050012040b27
mov qword [rsp + 0x26], rdx
movabs rdx, 0x21e1c2105001204
mov qword [rsp + 0x28], rdx
movabs rdx, 0x24010e010e1900
mov qword [rsp + 0x30], rdx
movabs rdx, 0x15220d030f1d1726
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10060f260d212112
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x1400d91d5
movzx r9d, byte [rsp + rsi + 0x48]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rdi + 0x48], dl
mov byte [rsp + rsi + 0x48], r8b
add rax, 2
cmp rax, 0x2a
jge 0x1400d9208
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x1400d922b
movzx r8d, byte [rsp + rdi + 0x48]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
nop
cmp rsi, 0x28
jb 0x1400d91bb
jmp 0x1400d921f
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x28
call fcn.140046d40
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.140059800
mov eax, edi
mov ecx, 0x28
call fcn.140059800
nop
call fcn.140057520
nop dword [rax]
jmp fcn.1400d9100

Function at 0x1400dc440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400dc50c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x89994c625c676552
mov qword [rsp + 0x29], rdx
movabs rdx, 0x798e7379624b8c89
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5030e0408060a0a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4060807070d0c05
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x1400dc4af
movzx r9d, byte [rsp + rsi + 0x29]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x29], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x29], dl
add rax, 2
cmp rax, 0x10
jge 0x1400dc4dc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1400dc4ff
movzx r8d, byte [rsp + rdi + 0x29]
sub r8d, edx
cmp rsi, 0xf
jb 0x1400dc492
jmp 0x1400dc4f3
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.140046d40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.140059800
mov eax, edi
mov ecx, 0xf
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400dc440
Function at 0x1400dc840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400dc91d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x439441124515152
mov qword [rsp + 0x31], rdx
movabs rdx, 0x3b51236c655a4f04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50603030207080c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2030d0104030506
mov qword [rsp + 0x21], rdx
movabs rdx, 0x50a02090e020808
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x1400dc8c0
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x1400dc8ed
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1400dc910
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x1400dc8a2
jmp 0x1400dc904
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.140046d40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.140059800
mov eax, edi
mov ecx, 0xf
call fcn.140059800
nop
nop dword [rax]
call fcn.140057520
jmp fcn.1400dc840

Function at 0x1400defe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400df0e8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e69473a6535699d
mov qword [rsp + 0x35], rdx
movabs rdx, 0x412714645d2b5976
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x4e6163412714645d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc94b616e20552e5d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x19140a150e190000
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9150f0f00021a15
mov qword [rsp + 0x21], rdx
movabs rdx, 0xd09191209150f0f
mov qword [rsp + 0x25], rdx
movabs rdx, 0x150502130b0509
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x1400df08b
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x3a]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x3a]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x1c
jge 0x1400df0b8
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x1400df0db
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x1b
jb 0x1400df06e
jmp 0x1400df0cf
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x1b
call fcn.140046d40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.140059800
mov eax, edi
mov ecx, 0x1b
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400defe0
Function at 0x1400df3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400df4ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2077636318876fe6
mov qword [rsp + 0x33], rdx
movabs rdx, 0xf5fea9f106207763
mov qword [rsp + 0x38], rdx
movabs rdx, 0xebff92ebe464d9f8
mov qword [rsp + 0x40], rdx
movabs rdx, 0x91206080302130b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x800100a0e090a0e
mov qword [rsp + 0x23], rdx
movabs rdx, 0x3140c0d11111010
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x1400df44a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x57]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x1400df47c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1400df49f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x57]
cmp rsi, 0x15
jb 0x1400df430
jmp 0x1400df493
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.140046d40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.140059800
mov eax, edi
mov ecx, 0x15
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400df3c0

Function at 0x1400e1e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400e1f3b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa1699b976e63b854
mov qword [rsp + 0x39], rdx
movabs rdx, 0x667c948a7e6162a1
mov qword [rsp + 0x40], rdx
movabs rdx, 0x66937892701b729a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8130b0404010705
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3030a0c14151503
mov qword [rsp + 0x21], rdx
movabs rdx, 0x15080d080f0d1214
mov qword [rsp + 0x29], rdx
movabs rdx, 0x816110914090a0e
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x1400e1ed9
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x20
jge 0x1400e1f0b
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1400e1f2e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2f]
cmp rsi, 0x17
jb 0x1400e1ebf
jmp 0x1400e1f22
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.140046d40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.140059800
mov eax, edi
mov ecx, 0x17
call fcn.140059800
nop
nop dword [rax + rax]
call fcn.140057520
jmp fcn.1400e1e40
Function at 0x1400e3e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400e3efd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x936cd372b851dd43
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x50e9612adf936cd3
mov qword [rsp + 0x40], rdx
movabs rdx, 0x52d6d65c51cf6d98
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1112071012090212
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7140f0501080308
mov qword [rsp + 0x25], rdx
movabs rdx, 0x130c0f0c13080714
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x120b0b0e010f070d
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x1400e3ea0
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 - 0x58]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 - 0x58]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x1400e3ecd
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1400e3ef0
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x1400e3e7f
jmp 0x1400e3ee4
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.140046d40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.140059800
mov eax, edi
mov ecx, 0x15
call fcn.140059800
nop
nop dword [rax]
call fcn.140057520
jmp fcn.1400e3e00

Function at 0x1400e3f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400e400c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9daa6c9dad65c047
mov qword [rsp + 0x31], rdx
movabs rdx, 0x649a1b9dd33a599d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa26dc35483de72c0
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1611010a1401110a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6070304030b0b0c
mov qword [rsp + 0x21], rdx
movabs rdx, 0x12090d1408120f0d
mov qword [rsp + 0x29], rdx
xor eax, eax
jmp 0x1400e3faa
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
cmp rax, 0x18
jge 0x1400e3fdc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1400e3fff
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
cmp rsi, 0x17
jb 0x1400e3f90
jmp 0x1400e3ff3
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.140046d40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.140059800
mov eax, edi
mov ecx, 0x17
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400e3f20
Function at 0x1400e53e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400e54ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5744537961bb9075
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x64ac5744537961bb
mov qword [rsp + 0x30], rdx
movabs rdx, 0x65953e547fe672b6
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf040402020c0700
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa0d0c100f040402
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf0808080101060d
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x1400e546d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x14
jge 0x1400e549a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1400e54bd
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x1400e5450
jmp 0x1400e54b1
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.140046d40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.140059800
mov eax, edi
mov ecx, 0x12
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400e53e0

Function at 0x1400e8100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400e81fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x655a4f6c61675c66
mov qword [rsp + 0x38], rdx
movabs rdx, 0x645d3a5841535a6e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6540475420fe3f66
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa0e01150e12110c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb0009090d0c0016
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6050b0009090d0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1011070811010c0f
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x1400e81a0
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x1400e81cd
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x1400e81f0
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x1400e817f
jmp 0x1400e81e4
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.140046d40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.140059800
mov eax, edi
mov ecx, 0x18
call fcn.140059800
nop
nop dword [rax]
call fcn.140057520
jmp fcn.1400e8100