joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401816a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x14018185e
push rbp
mov rbp, rsp
sub rsp, 0x90
movups xmmword [rsp + 0x60], xmm15
lea rdx, [rsp + 0x3f]
mov qword [rsp + 0x88], rdx
test byte [rdx], al
movabs rsi, 0xf24a6592b589d889
mov qword [rdx], rsi
movabs rsi, 0xdb91abb720956ecd
mov qword [rdx + 8], rsi
movabs rsi, 0x9ddb91abb720956e
mov qword [rdx + 9], rsi
movabs rsi, 0x816d8da5bb647261
mov qword [rdx + 0x11], rsi
mov rdx, qword [rsp + 0x88]
test byte [rdx], al
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], 0x19
mov qword [rsp + 0x80], 0x19
movabs rdx, 0x15080a1607161016
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd0d15080a160716
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1818041006140c03
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30e0f0e08000c01
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0a15060c020403
mov qword [rsp + 0x34], rdx
mov qword [rsp + 0x58], 0
nop
jmp 0x140181782
cmp qword [rsp + 0x58], 0x22
jl 0x14018178f
jmp 0x14018183a
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x58]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0xc]
mov byte [rsp + 0x3c], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x3e], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xfffffff4
mov byte [rsp + 0x3d], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x70]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xfffffff4
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3e]
add rdx, qword [rsp + 0x70]
movzx esi, byte [rsp + 0x3d]
mov byte [rdx], sil
jmp 0x14018182f
add qword [rsp + 0x58], 2
jmp 0x140181782
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
add rsp, 0x90
pop rbp
ret
nop
call fcn.140056be0
jmp fcn.1401816a0
Function at 0x140181880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x140181a2d
push rbp
mov rbp, rsp
sub rsp, 0x90
movups xmmword [rsp + 0x60], xmm15
lea rdx, [rsp + 0x3e]
mov qword [rsp + 0x88], rdx
test byte [rdx], al
movabs rsi, 0x764c69604e6a5b42
mov qword [rdx], rsi
movabs rsi, 0x4afe5b625c406c64
mov qword [rdx + 8], rsi
movabs rsi, 0x5d4e4afe5b625c40
mov qword [rdx + 0xa], rsi
movabs rsi, 0x5f6d5e5d205a7258
mov qword [rdx + 0x12], rsi
mov rdx, qword [rsp + 0x88]
test byte [rdx], al
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], 0x1a
mov qword [rsp + 0x80], 0x1a
movabs rdx, 0xd0e060f03160b11
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x101190208061604
mov qword [rsp + 0x27], rdx
movabs rdx, 0xa0c121401011902
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x12170c0d10160302
mov qword [rsp + 0x33], rdx
mov qword [rsp + 0x58], 0
jmp 0x140181951
cmp qword [rsp + 0x58], 0x1c
jl 0x14018195e
jmp 0x140181a09
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x58]
lea rdi, [rsp + rdi + 0x20]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x22]
mov byte [rsp + 0x3b], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x20]
movzx edx, byte [rdx]
mov byte [rsp + 0x3d], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x22
mov byte [rsp + 0x3c], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x20]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x70]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x22
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3d]
add rdx, qword [rsp + 0x70]
movzx esi, byte [rsp + 0x3c]
mov byte [rdx], sil
jmp 0x1401819fe
add qword [rsp + 0x58], 2
jmp 0x140181951
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
add rsp, 0x90
pop rbp
ret
call fcn.140056be0
jmp fcn.140181880
Function at 0x140181a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x140181c04
push rbp
mov rbp, rsp
sub rsp, 0x98
movups xmmword [rsp + 0x68], xmm15
lea rdx, [rsp + 0x43]
mov qword [rsp + 0x90], rdx
test byte [rdx], al
movabs rsi, 0xcf956168cb9cc2f7
mov qword [rdx], rsi
movabs rsi, 0xa6738a6e61f534ac
mov qword [rdx + 8], rsi
movabs rsi, 0x64cddade4fa6738a
mov qword [rdx + 0xd], rsi
movabs rsi, 0x65f99e93e391200a
mov qword [rdx + 0x15], rsi
mov rdx, qword [rsp + 0x90]
test byte [rdx], al
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], 0x1d
mov qword [rsp + 0x88], 0x1d
movabs rdx, 0x70d180210160202
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1312150906091116
mov qword [rsp + 0x20], rdx
movabs rdx, 0x21b081700190702
mov qword [rsp + 0x28], rdx
movabs rdx, 0x190f0f1519020603
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1a1001091811100a
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x60], 0
jmp 0x140181b23
cmp qword [rsp + 0x60], 0x28
jl 0x140181b30
jmp 0x140181bdd
mov rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x60]
lea rsi, [rsp + rsi + 0x18]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x60]
lea rdi, [rsp + rdi + 0x19]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x7b]
mov byte [rsp + 0x40], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
mov byte [rsp + 0x42], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x78]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x7b]
mov byte [rsp + 0x41], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x60]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x78]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x7b]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x42]
add rdx, qword [rsp + 0x78]
movzx esi, byte [rsp + 0x41]
mov byte [rdx], sil
jmp 0x140181bd2
add qword [rsp + 0x60], 2
jmp 0x140181b23
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rbx
add rsp, 0x98
pop rbp
ret
call fcn.140056be0
jmp fcn.140181a40
Function at 0x140182720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x1401828a6
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movups xmmword [rsp + 0x50], xmm15
lea rdx, [rsp + 0x36]
mov qword [rsp + 0x78], rdx
test byte [rdx], al
movabs rsi, 0x48a15d9ba48988d7
mov qword [rdx], rsi
movabs rsi, 0x482848a15d9ba489
mov qword [rdx + 2], rsi
movabs rsi, 0x65a96998dd64868b
mov qword [rdx + 0xa], rsi
mov rdx, qword [rsp + 0x78]
test byte [rdx], al
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], 0x12
mov qword [rsp + 0x70], 0x12
movabs rdx, 0x80301000d050700
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x4030e0a05020106
mov qword [rsp + 0x23], rdx
movabs rdx, 0x70b060904090610
mov qword [rsp + 0x2b], rdx
mov qword [rsp + 0x48], 0
jmp 0x1401827c8
cmp qword [rsp + 0x48], 0x18
jl 0x1401827d5
jmp 0x140182885
mov rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x48]
lea rdi, [rsp + rdi + 0x1c]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x47]
mov byte [rsp + 0x33], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
mov byte [rsp + 0x35], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x47]
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x60]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x47]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x35]
add rdx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0x34]
mov byte [rdx], sil
jmp 0x140182877
add qword [rsp + 0x48], 2
nop dword [rax]
jmp 0x1401827c8
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
sub rsp, 0xffffffffffffff80
pop rbp
ret
call fcn.140056be0
jmp fcn.140182720
Function at 0x1401848c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x140184a6d
push rbp
mov rbp, rsp
sub rsp, 0x90
movups xmmword [rsp + 0x60], xmm15
lea rdx, [rsp + 0x3e]
mov qword [rsp + 0x88], rdx
test byte [rdx], al
movabs rsi, 0xda2a50e074c7d557
mov qword [rdx], rsi
movabs rsi, 0x9f74eeb263696623
mov qword [rdx + 8], rsi
movabs rsi, 0x28e9f74eeb26369
mov qword [rdx + 0xa], rsi
movabs rsi, 0x6d07699c208cefb5
mov qword [rdx + 0x12], rsi
mov rdx, qword [rsp + 0x88]
test byte [rdx], al
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], 0x1a
mov qword [rsp + 0x80], 0x1a
movabs rdx, 0xd18100604061006
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x190c1416070f0701
mov qword [rsp + 0x27], rdx
movabs rdx, 0x13110106190c1416
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x213110d13081218
mov qword [rsp + 0x33], rdx
mov qword [rsp + 0x58], 0
jmp 0x140184991
cmp qword [rsp + 0x58], 0x1c
jl 0x14018499e
jmp 0x140184a49
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x58]
lea rdi, [rsp + rdi + 0x20]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x2a]
mov byte [rsp + 0x3b], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x20]
movzx edx, byte [rdx]
mov byte [rsp + 0x3d], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffd6
mov byte [rsp + 0x3c], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x20]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x70]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffd6
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3d]
add rdx, qword [rsp + 0x70]
movzx esi, byte [rsp + 0x3c]
mov byte [rdx], sil
jmp 0x140184a3e
add qword [rsp + 0x58], 2
jmp 0x140184991
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
add rsp, 0x90
pop rbp
ret
call fcn.140056be0
jmp fcn.1401848c0
Function at 0x140194ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x60
mov qword [rsp + 0x70], 0
lea rax, [rsp + 0x17]
mov qword [rsp + 0x58], rax
test byte [rax], al
movabs rcx, 0x6a9851d44fef3249
mov qword [rax], rcx
mov rax, qword [rsp + 0x58]
test byte [rax], al
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 8
mov qword [rsp + 0x50], 8
movabs rax, 0x20700060102
mov qword [rsp + 3], rax
mov word [rsp + 0xb], 0x401
mov qword [rsp + 0x28], 0
jmp 0x140194d09
cmp qword [rsp + 0x28], 0xa
jl 0x140194d16
jmp 0x140194dc5
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x28]
lea rcx, [rsp + rcx + 3]
movzx ecx, byte [rcx]
mov rdx, qword [rsp + 0x28]
lea rdx, [rsp + rdx + 4]
movzx edx, byte [rdx]
xor ecx, edx
lea edx, [rax + rcx]
lea eax, [rax + rcx]
lea eax, [rax + 0x72]
mov byte [rsp + 0x15], al
mov rax, qword [rsp + 0x28]
lea rax, [rsp + rax + 4]
movzx eax, byte [rax]
mov byte [rsp + 0x16], al
mov rax, qword [rsp + 0x28]
lea rax, [rsp + rax + 3]
movzx eax, byte [rax]
add rax, qword [rsp + 0x40]
movzx eax, byte [rax]
lea eax, [rdx + rax]
lea eax, [rax + 0x72]
mov byte [rsp + 0x1f], al
mov rax, qword [rsp + 0x28]
lea rax, [rsp + rax + 3]
movzx eax, byte [rax]
add rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x28]
lea rcx, [rsp + rcx + 4]
movzx ecx, byte [rcx]
add rcx, qword [rsp + 0x40]
movzx ecx, byte [rcx]
lea ecx, [rdx + rcx]
lea ecx, [rcx + 0x72]
mov byte [rax], cl
movzx eax, byte [rsp + 0x16]
add rax, qword [rsp + 0x40]
movzx ecx, byte [rsp + 0x1f]
mov byte [rax], cl
jmp 0x140194db6
add qword [rsp + 0x28], 2
nop dword [rax]
jmp 0x140194d09
mov qword [rsp + 0xd], 0
mov qword [rsp + 0x38], 0
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x30], rax
jmp 0x140194de3
mov rax, qword [rsp + 0x38]
cmp qword [rsp + 0x30], rax
jg 0x140194df1
jmp 0x140194e16
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + rax + 0xd]
mov rdx, qword [rsp + 0x40]
add rax, rdx
movzx eax, byte [rax]
mov byte [rcx], al
jmp 0x140194e0f
inc qword [rsp + 0x38]
jmp 0x140194de3
mov rax, qword [rsp + 0xd]
mov qword [rsp + 0x70], rax
add rsp, 0x60
pop rbp
ret
Function at 0x140196200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140196355
push rbp
mov rbp, rsp
sub rsp, 0x68
movups xmmword [rsp + 0x38], xmm15
lea rdx, [rsp + 0x27]
mov qword [rsp + 0x60], rdx
test byte [rdx], al
movabs rsi, 0x3864640c070d0470
mov qword [rdx], rsi
mov byte [rdx + 8], 0x9f
mov rdx, qword [rsp + 0x60]
test byte [rdx], al
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], 9
mov qword [rsp + 0x58], 9
movabs rdx, 0x705040404080103
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x2070507
mov qword [rsp + 0x30], 0
jmp 0x140196275
cmp qword [rsp + 0x30], 0xc
jl 0x140196285
nop dword [rax]
jmp 0x140196330
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x30]
lea rsi, [rsp + rsi + 0x18]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x30]
lea rdi, [rsp + rdi + 0x19]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x6e]
mov byte [rsp + 0x24], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
mov byte [rsp + 0x26], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x48]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x6e
mov byte [rsp + 0x25], dl
mov rdx, qword [rsp + 0x30]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x30]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x48]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x6e
mov byte [rdx], sil
movzx edx, byte [rsp + 0x26]
add rdx, qword [rsp + 0x48]
movzx esi, byte [rsp + 0x25]
mov byte [rdx], sil
jmp 0x140196325
add qword [rsp + 0x30], 2
jmp 0x140196275
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
xor eax, eax
nop dword [rax]
call fcn.140053e40
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rbx
add rsp, 0x68
pop rbp
ret
call fcn.140056be0
jmp fcn.140196200
Function at 0x140196360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1401964ba
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2d]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0x2eabc119b1ba0875
mov qword [rdx], rsi
mov dword [rdx + 7], 0xa516642e
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xb
mov qword [rsp + 0x60], 0xb
movabs rdx, 0x1040a0605040903
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6060a0902060104
mov qword [rsp + 0x22], rdx
mov qword [rsp + 0x38], 0
jmp 0x1401963df
cmp qword [rsp + 0x38], 0xe
jl 0x1401963ec
jmp 0x140196499
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1d]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x52]
mov byte [rsp + 0x2a], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
mov byte [rsp + 0x2c], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + 0x2b], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x52]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2c]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x2b]
mov byte [rdx], sil
jmp 0x14019648e
add qword [rsp + 0x38], 2
jmp 0x1401963df
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
nop
jmp fcn.140196360
Function at 0x14019cbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14019cd18
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2d]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0x5a90968a577c6fae
mov qword [rdx], rsi
mov dword [rdx + 7], 0x5978825a
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xb
mov qword [rsp + 0x60], 0xb
movabs rdx, 0x304060807000006
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa08030708020205
mov qword [rsp + 0x22], rdx
mov qword [rsp + 0x38], 0
jmp 0x14019cc3f
cmp qword [rsp + 0x38], 0x10
jl 0x14019cc4c
jmp 0x14019ccf7
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 4]
mov byte [rsp + 0x2a], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x2c], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xfffffffc
mov byte [rsp + 0x2b], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xfffffffc
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2c]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x2b]
mov byte [rdx], sil
jmp 0x14019ccec
add qword [rsp + 0x38], 2
jmp 0x14019cc3f
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
nop dword [rax]
jmp fcn.14019cbc0
Function at 0x14019d380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14019d4d8
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2c]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0xc66c612c7472824d
mov qword [rdx], rsi
mov dword [rdx + 8], 0x47523975
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xc
mov qword [rsp + 0x60], 0xc
movabs rdx, 0xb000a0407090107
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa00040b09070b00
mov qword [rsp + 0x21], rdx
mov qword [rsp + 0x38], 0
jmp 0x14019d3ff
cmp qword [rsp + 0x38], 0xe
jl 0x14019d40c
jmp 0x14019d4b7
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1c]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x57]
mov byte [rsp + 0x29], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
mov byte [rsp + 0x2b], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffa9
mov byte [rsp + 0x2a], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffa9
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2b]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x2a]
mov byte [rdx], sil
jmp 0x14019d4ac
add qword [rsp + 0x38], 2
jmp 0x14019d3ff
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
nop dword [rax]
jmp fcn.14019d380
Function at 0x14019da60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14019dbb8
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2d]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0x7b72b968bbd465b2
mov qword [rdx], rsi
mov dword [rdx + 7], 0x82bd447b
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xb
mov qword [rsp + 0x60], 0xb
movabs rdx, 0x50a050503090a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x705070302030005
mov qword [rsp + 0x22], rdx
mov qword [rsp + 0x38], 0
jmp 0x14019dadf
cmp qword [rsp + 0x38], 0xe
jl 0x14019daec
jmp 0x14019db97
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1d]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x1a]
mov byte [rsp + 0x2a], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
mov byte [rsp + 0x2c], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffe6
mov byte [rsp + 0x2b], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffe6
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2c]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x2b]
mov byte [rdx], sil
jmp 0x14019db8c
add qword [rsp + 0x38], 2
jmp 0x14019dadf
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
nop dword [rax]
jmp fcn.14019da60