joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400aa1a0
Capabilities:
Encode data using base64

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x90
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rbx
test byte [rbx], al
mov rax, qword [rbx]
mov qword [rsp + 0x30], rax
movups xmm0, xmmword [rbx + 8]
movups xmmword [rsp + 0x38], xmm0
movups xmm0, xmmword [rbx + 0x18]
movups xmmword [rsp + 0x48], xmm0
movups xmm0, xmmword [rbx + 0x28]
movups xmmword [rsp + 0x58], xmm0
movups xmm0, xmmword [rbx + 0x38]
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 9
jmp 0x1400aa1fd
mov rax, qword [rsp + 0x28]
cmp qword [rsp + 0x20], rax
jg 0x1400aa20e
jmp 0x1400aa319
mov rax, qword [rsp + 0x28]
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x28]
lea rax, [rsp + rax*8 + 0x30]
mov rax, qword [rax]
mov qword [rsp + 0x18], rax
mov rax, qword [rsp + 0xa0]
test byte [rax], al
add rax, 0x18
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 8]
mov qword [rsp + 0x10], rcx
test byte [rax], al
mov rdx, rcx
sar rdx, 0x3f
shr rdx, 0x3d
add rdx, rcx
sar rdx, 3
add rax, rdx
movzx eax, byte [rax]
mov rdx, rcx
sar rdx, 0x3f
shr rdx, 0x3d
add rdx, rcx
and rdx, 0xfffffffffffffff8
sub rcx, rdx
test rcx, rcx
jge 0x1400aa285
nop dword [rax + rax]
jmp 0x1400aa322
mov edx, 1
shl edx, cl
cmp rcx, 0x20
sbb ebx, ebx
and edx, ebx
test dl, al
setne byte [rsp + 7]
jmp 0x1400aa29d
jne 0x1400aa2a2
nop
jmp 0x1400aa2d8
mov rax, qword [rsp + 0xa8]
test byte [rax], al
mov rdx, qword [rsp + 8]
lea rax, [rax + rdx*8]
lea rax, [rax + 0xc0]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
test byte [rax], al
mov rdx, qword [rsp + 0x18]
mov qword [rax], rdx
jmp 0x1400aa30d
mov rax, qword [rsp + 0xa8]
test byte [rax], al
mov rdx, qword [rsp + 8]
lea rax, [rax + rdx*8]
lea rax, [rax + 0xc0]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
test byte [rax], al
mov qword [rax], 0
jmp 0x1400aa30d
jmp 0x1400aa30f
inc qword [rsp + 0x28]
jmp 0x1400aa1fd
add rsp, 0x90
pop rbp
ret
call fcn.14002a6a0
nop
int3
Function at 0x1400c1740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x1400c1926
push rbp
mov rbp, rsp
sub rsp, 0xa0
movups xmmword [rsp + 0x70], xmm15
lea rdx, [rsp + 0x43]
mov qword [rsp + 0x98], rdx
test byte [rdx], al
movabs rsi, 0x7077635a27a17072
mov qword [rdx], rsi
movabs rsi, 0x3f86758478707763
mov qword [rdx + 5], rsi
movabs rsi, 0x6f2074757b9d615e
mov qword [rdx + 0xd], rsi
movabs rsi, 0x7966a17c7f982066
mov qword [rdx + 0x15], rsi
movabs rsi, 0x86ef702dbc4a8cb0
mov qword [rdx + 0x1d], rsi
mov rdx, qword [rsp + 0x98]
test byte [rdx], al
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], 0x25
mov qword [rsp + 0x90], 0x25
movabs rdx, 0x806090d021f0401
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x803070c1f070806
mov qword [rsp + 0x20], rdx
movabs rdx, 0x19100b1d021a1f02
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf23021e24211c18
mov qword [rsp + 0x30], rdx
movabs rdx, 0x200f0d030c040b17
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x68], 0
jmp 0x1400c1834
cmp qword [rsp + 0x68], 0x26
jl 0x1400c1845
nop dword [rax]
jmp 0x1400c18fc
mov rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x68]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x68]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x10]
mov byte [rsp + 0x40], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x42], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x80]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x10
mov byte [rsp + 0x41], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x68]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x80]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x10
mov byte [rdx], sil
movzx edx, byte [rsp + 0x42]
add rdx, qword [rsp + 0x80]
movzx esi, byte [rsp + 0x41]
mov byte [rdx], sil
jmp 0x1400c18f1
add qword [rsp + 0x68], 2
jmp 0x1400c1834
mov rbx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
add rsp, 0xa0
pop rbp
ret
call fcn.140056be0
jmp fcn.1400c1740
Function at 0x1400c1ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x1400c1d78
push rbp
mov rbp, rsp
sub rsp, 0xa0
movups xmmword [rsp + 0x70], xmm15
lea rdx, [rsp + 0x49]
mov qword [rsp + 0x98], rdx
test byte [rdx], al
movabs rsi, 0x7b58a7656c66a572
mov qword [rdx], rsi
movabs rsi, 0x79a36f8988419d20
mov qword [rdx + 8], rsi
movabs rsi, 0x32726d9bc3936e79
mov qword [rdx + 0xf], rsi
movabs rsi, 0x207580d3748678ae
mov qword [rdx + 0x17], rsi
mov rdx, qword [rsp + 0x98]
test byte [rdx], al
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], 0x1f
mov qword [rsp + 0x90], 0x1f
movabs rdx, 0x11180c161b1d1301
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1717101011051d07
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb1c170f0f011c12
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x71c0b14190a1609
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb0f1c110613180e
mov qword [rsp + 0x3e], rdx
mov qword [rsp + 0x68], 0
jmp 0x1400c1c86
cmp qword [rsp + 0x68], 0x28
jl 0x1400c1c93
jmp 0x1400c1d4a
mov rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x68]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x68]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0xc]
mov byte [rsp + 0x46], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x48], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x80]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xc
mov byte [rsp + 0x47], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x68]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x80]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xc
mov byte [rdx], sil
movzx edx, byte [rsp + 0x48]
add rdx, qword [rsp + 0x80]
movzx esi, byte [rsp + 0x47]
mov byte [rdx], sil
jmp 0x1400c1d3f
add qword [rsp + 0x68], 2
jmp 0x1400c1c86
mov rbx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
xor eax, eax
nop dword [rax]
call fcn.140053e40
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
add rsp, 0xa0
pop rbp
ret
call fcn.140056be0
nop dword [rax]
jmp fcn.1400c1ba0
Function at 0x1400c8780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x1400c89c8
push rbp
mov rbp, rsp
sub rsp, 0xb8
movups xmmword [rsp + 0x88], xmm15
lea rdx, [rsp + 0x57]
mov qword [rsp + 0xb0], rdx
test byte [rdx], al
movabs rsi, 0x2159ec544970464d
mov qword [rdx], rsi
movabs rsi, 0x5c61444774783b5d
mov qword [rdx + 8], rsi
movabs rsi, 0x215c61444774783b
mov qword [rdx + 9], rsi
movabs rsi, 0xbfd5cc6f32209e
mov qword [rdx + 0x11], rsi
movabs rsi, 0xf364b0ad7375764f
mov qword [rdx + 0x19], rsi
movabs rsi, 0x27403a6139f0744a
mov qword [rdx + 0x21], rsi
mov rdx, qword [rsp + 0xb0]
test byte [rdx], al
mov qword [rsp + 0x98], rdx
mov qword [rsp + 0xa0], 0x29
mov qword [rsp + 0xa8], 0x29
movabs rdx, 0x70d211d111a1e21
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd280d1208240419
mov qword [rsp + 0x22], rdx
movabs rdx, 0x230c0d280d120824
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd1928151e0f100f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1d26041117061827
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1e2805200127200c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x619132626212612
mov qword [rsp + 0x44], rdx
movabs rdx, 0x7191620091e1a20
mov qword [rsp + 0x4c], rdx
mov qword [rsp + 0x80], 0
jmp 0x1400c88b5
cmp qword [rsp + 0x80], 0x3a
nop
jl 0x1400c88c7
jmp 0x1400c8998
mov rdx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x80]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x80]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x21]
mov byte [rsp + 0x54], dl
mov rdx, qword [rsp + 0x80]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x56], dl
mov rdx, qword [rsp + 0x80]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x98]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x21]
mov byte [rsp + 0x55], dl
mov rdx, qword [rsp + 0x80]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x98]
mov rsi, qword [rsp + 0x80]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x98]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x21]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x56]
add rdx, qword [rsp + 0x98]
movzx esi, byte [rsp + 0x55]
mov byte [rdx], sil
jmp 0x1400c898a
add qword [rsp + 0x80], 2
jmp 0x1400c88b5
mov rbx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0xa0]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rbx
add rsp, 0xb8
pop rbp
ret
call fcn.140056be0
jmp fcn.1400c8780
Function at 0x1400cae60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1400cafe6
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movups xmmword [rsp + 0x50], xmm15
lea rdx, [rsp + 0x37]
mov qword [rsp + 0x78], rdx
test byte [rdx], al
movabs rsi, 0xe2c663fb9666f49d
mov qword [rdx], rsi
movabs rsi, 0x7be2c663fb9666f4
mov qword [rdx + 1], rsi
movabs rsi, 0x9865852e65a0a9a8
mov qword [rdx + 9], rsi
mov rdx, qword [rsp + 0x78]
test byte [rdx], al
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], 0x11
mov qword [rsp + 0x70], 0x11
movabs rdx, 0x909060009100410
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80e01010909
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0a030901030709
mov qword [rsp + 0x2c], rdx
mov qword [rsp + 0x48], 0
jmp 0x1400caf08
cmp qword [rsp + 0x48], 0x16
jl 0x1400caf15
jmp 0x1400cafc5
mov rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x48]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x1f]
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x36], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffe1
mov byte [rsp + 0x35], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x60]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffe1
mov byte [rdx], sil
movzx edx, byte [rsp + 0x36]
add rdx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0x35]
mov byte [rdx], sil
jmp 0x1400cafb5
add qword [rsp + 0x48], 2
nop dword [rax + rax]
jmp 0x1400caf08
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
sub rsp, 0xffffffffffffff80
pop rbp
ret
call fcn.140056be0
jmp fcn.1400cae60
Function at 0x1400cc800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x1400cc9aa
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x37]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x867392ba8e628373
mov qword [rdx], rsi
movabs rsi, 0x6920738637377026
mov qword [rdx + 8], rsi
movabs rsi, 0x7c69207386373770
mov qword [rdx + 9], rsi
movabs rsi, 0x50996c2e958a2044
mov qword [rdx + 0x11], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x19
mov qword [rsp + 0x78], 0x19
movabs rdx, 0xd03171418010502
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x40b0c170a0d0907
mov qword [rsp + 0x22], rdx
movabs rdx, 0x110040b0c170a0d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa0c0b1407111302
mov qword [rsp + 0x2c], rdx
mov qword [rsp + 0x50], 0
jmp 0x1400cc8ce
cmp qword [rsp + 0x50], 0x1a
jl 0x1400cc8db
jmp 0x1400cc986
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 6]
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x36], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
sub edx, edi
add edx, 6
mov byte [rsp + 0x35], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
sub esi, edi
add esi, 6
mov byte [rdx], sil
movzx edx, byte [rsp + 0x36]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x35]
mov byte [rdx], sil
jmp 0x1400cc97b
add qword [rsp + 0x50], 2
jmp 0x1400cc8ce
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
ret
call fcn.140056be0
jmp fcn.1400cc800
Function at 0x1400d03c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x1400d0584
push rbp
mov rbp, rsp
sub rsp, 0x98
movups xmmword [rsp + 0x68], xmm15
lea rdx, [rsp + 0x44]
mov qword [rsp + 0x90], rdx
test byte [rdx], al
movabs rsi, 0x6728616d45470673
mov qword [rdx], rsi
movabs rsi, 0x6435652c2d0a6916
mov qword [rdx + 8], rsi
movabs rsi, 0x512d3f4e6435652c
mov qword [rdx + 0xc], rsi
movabs rsi, 0x536c65cc40097f62
mov qword [rdx + 0x14], rsi
mov rdx, qword [rsp + 0x90]
test byte [rdx], al
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], 0x1c
mov qword [rsp + 0x88], 0x1c
movabs rdx, 0x408120f07071206
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf10090215150408
mov qword [rsp + 0x21], rdx
movabs rdx, 0xe18100914061003
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1140a070c0f0416
mov qword [rsp + 0x31], rdx
movabs rdx, 0x1b1817130f110e17
mov qword [rsp + 0x39], rdx
mov qword [rsp + 0x60], 0
jmp 0x1400d04a3
cmp qword [rsp + 0x60], 0x26
jl 0x1400d04b0
jmp 0x1400d055d
mov rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x60]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x60]
lea rdi, [rsp + rdi + 0x1c]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x11]
mov byte [rsp + 0x41], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
mov byte [rsp + 0x43], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x78]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x11]
mov byte [rsp + 0x42], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x60]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x78]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x11]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x43]
add rdx, qword [rsp + 0x78]
movzx esi, byte [rsp + 0x42]
mov byte [rdx], sil
jmp 0x1400d0552
add qword [rsp + 0x60], 2
jmp 0x1400d04a3
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rbx
add rsp, 0x98
pop rbp
ret
call fcn.140056be0
jmp fcn.1400d03c0
Function at 0x1400d1620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x1400d182c
push rbp
mov rbp, rsp
sub rsp, 0xb0
movups xmmword [rsp + 0x80], xmm15
lea rdx, [rsp + 0x53]
mov qword [rsp + 0xa8], rdx
test byte [rdx], al
movabs rsi, 0xdf79bcae6c1a6574
mov qword [rdx], rsi
movabs rsi, 0xbc754ab7dcdf79bc
mov qword [rdx + 5], rsi
movabs rsi, 0xa43573f074bfb171
mov qword [rdx + 0xd], rsi
movabs rsi, 0xdccc2d2eb27a20b4
mov qword [rdx + 0x15], rsi
movabs rsi, 0xa663e208f53c6599
mov qword [rdx + 0x1d], rsi
mov rdx, qword [rsp + 0xa8]
test byte [rdx], al
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0x98], 0x25
mov qword [rsp + 0xa0], 0x25
movabs rdx, 0x1415190f180c1306
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20e1415190f180c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x221b0904080d2108
mov qword [rsp + 0x28], rdx
movabs rdx, 0x13140f20241f1308
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd090d172206071d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x240d060a00230805
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0911061c170023
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x78], 0
jmp 0x1400d1735
cmp qword [rsp + 0x78], 0x32
jl 0x1400d1745
nop dword [rax]
jmp 0x1400d17fc
mov rdx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x78]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x78]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x37]
mov byte [rsp + 0x50], dl
mov rdx, qword [rsp + 0x78]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x52], dl
mov rdx, qword [rsp + 0x78]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x90]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffc9
mov byte [rsp + 0x51], dl
mov rdx, qword [rsp + 0x78]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x78]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x90]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffc9
mov byte [rdx], sil
movzx edx, byte [rsp + 0x52]
add rdx, qword [rsp + 0x90]
movzx esi, byte [rsp + 0x51]
mov byte [rdx], sil
jmp 0x1400d17f1
add qword [rsp + 0x78], 2
jmp 0x1400d1735
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x98]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], rbx
add rsp, 0xb0
pop rbp
ret
call fcn.140056be0
jmp fcn.1400d1620
Function at 0x1400d55c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1400d5746
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movups xmmword [rsp + 0x50], xmm15
lea rdx, [rsp + 0x37]
mov qword [rsp + 0x78], rdx
test byte [rdx], al
movabs rsi, 0xe86e1ae65e53cf61
mov qword [rdx], rsi
movabs rsi, 0x52e86e1ae65e53cf
mov qword [rdx + 1], rsi
movabs rsi, 0xbbe6fc6b706550fa
mov qword [rdx + 9], rsi
mov rdx, qword [rsp + 0x78]
test byte [rdx], al
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], 0x11
mov qword [rsp + 0x70], 0x11
movabs rdx, 0x100a0c0208100900
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe03070205021008
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc03090410010f0e
mov qword [rsp + 0x2c], rdx
mov qword [rsp + 0x48], 0
jmp 0x1400d5668
cmp qword [rsp + 0x48], 0x18
jl 0x1400d5675
jmp 0x1400d5725
mov rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x48]
lea rdi, [rsp + rdi + 0x1d]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x72]
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
mov byte [rsp + 0x36], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + 0x35], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x60]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x72]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x36]
add rdx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0x35]
mov byte [rdx], sil
jmp 0x1400d5717
add qword [rsp + 0x48], 2
nop dword [rax]
jmp 0x1400d5668
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
sub rsp, 0xffffffffffffff80
pop rbp
ret
call fcn.140056be0
jmp fcn.1400d55c0
Function at 0x1400db180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x1400db321
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x3c]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0xd6647ceae0f961dd
mov qword [rdx], rsi
movabs rsi, 0xec197267d6647cea
mov qword [rdx + 4], rsi
movabs rsi, 0x746c75446572c16f
mov qword [rdx + 0xc], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x14
mov qword [rsp + 0x78], 0x14
movabs rdx, 0x40c0a0b0802050a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x30a050d0c000401
mov qword [rsp + 0x27], rdx
movabs rdx, 0x200030a050d0c00
mov qword [rsp + 0x29], rdx
movabs rdx, 0x304040507100310
mov qword [rsp + 0x31], rdx
mov qword [rsp + 0x50], 0
nop
jmp 0x1400db242
cmp qword [rsp + 0x50], 0x1a
jl 0x1400db24f
jmp 0x1400db2fc
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x20]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x72]
mov byte [rsp + 0x39], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x20]
movzx edx, byte [rdx]
mov byte [rsp + 0x3b], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + 0x3a], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x20]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x72]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3b]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x3a]
mov byte [rdx], sil
jmp 0x1400db2f1
add qword [rsp + 0x50], 2
jmp 0x1400db242
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
nop
ret
call fcn.140056be0
jmp fcn.1400db180