joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400ec9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400ecaa8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4523736c64716968
mov qword [rsp + 0x37], rdx
movabs rdx, 0x6e61676d515d6010
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6a6e61676d515d60
mov qword [rsp + 0x40], rdx
movabs rdx, 0x507e56966b647236
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb0818000a0a1316
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc09021714060216
mov qword [rsp + 0x21], rdx
movabs rdx, 0x2060c150d050c09
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1013160c06110205
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x1400eca4b
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1e
jge 0x1400eca78
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x1400eca9b
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x1400eca2e
jmp 0x1400eca8f
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.140046d40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.140059800
mov eax, edi
mov ecx, 0x19
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400ec9a0

Function at 0x1400f0d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400f0dec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xac0061640df5614d
mov qword [rsp + 0x33], rdx
movabs rdx, 0xed6e613353ac0061
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf7b1d6431f74ac1c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130f0c07110c1012
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe0f0d0913090913
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf0c060302141307
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x1400f0d8a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x48]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x1400f0dbc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1400f0ddf
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x48]
cmp rsi, 0x15
jb 0x1400f0d70
jmp 0x1400f0dd3
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.140046d40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.140059800
mov eax, edi
mov ecx, 0x15
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400f0d00
Function at 0x1400f3420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400f351b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x530ef4f25669fca7
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x898f8650530ef4f2
mov qword [rsp + 0x40], rdx
movabs rdx, 0x656d83e1f0f0f686
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6090f060603110f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x501091008110b04
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0c04060a0a0501
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80e110006000a0d
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x1400f34b9
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x1e
jge 0x1400f34eb
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1400f350e
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
cmp rsi, 0x14
jb 0x1400f349f
jmp 0x1400f3502
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x14
call fcn.140046d40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.140059800
mov eax, edi
mov ecx, 0x14
call fcn.140059800
nop
nop dword [rax + rax]
call fcn.140057520
jmp fcn.1400f3420

Function at 0x1400f3540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400f363d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x90ef4120ee73fc57
mov qword [rsp + 0x39], rdx
movabs rdx, 0xe9852a7453ef9290
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb012454c9260161
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc080c110d0e0306
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc100e1509071401
mov qword [rsp + 0x27], rdx
movabs rdx, 0x11090c100e150907
mov qword [rsp + 0x29], rdx
movabs rdx, 0x912160809070901
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x1400f35e0
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x76]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x1400f360d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1400f3630
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x1400f35bf
jmp 0x1400f3624
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.140046d40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.140059800
mov eax, edi
mov ecx, 0x17
call fcn.140059800
nop
nop dword [rax]
call fcn.140057520
jmp fcn.1400f3540
Function at 0x1400f3660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400f375b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xaf6be0c76e01de1c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1c6e619a5325af6b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa71c69252020ea02
mov qword [rsp + 0x48], rdx
movabs rdx, 0x805150d12060112
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4140d0a0e000f0a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1202120503100f0a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa07100502140710
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x1400f36f9
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x20
jge 0x1400f372b
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x1400f374e
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 0x16
jb 0x1400f36df
jmp 0x1400f3742
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.140046d40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.140059800
mov eax, edi
mov ecx, 0x16
call fcn.140059800
nop
nop dword [rax + rax]
call fcn.140057520
jmp fcn.1400f3660

Function at 0x1400f45e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400f46e8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6110bdbc36616cf9
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x2c46a2536efff818
mov qword [rsp + 0x47], rdx
movabs rdx, 0xf42c46a2536efff8
mov qword [rsp + 0x48], rdx
movabs rdx, 0x831069910ac5cd61
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe150d1018090310
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x171514040f170e09
mov qword [rsp + 0x27], rdx
movabs rdx, 0x512120b060a1500
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x171210081310050d
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x1400f468b
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
cmp rax, 0x20
jge 0x1400f46b8
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x1400f46db
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x1400f466e
jmp 0x1400f46cf
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.140046d40
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.140059800
mov eax, edi
mov ecx, 0x19
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400f45e0
Function at 0x1400f8d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400f8e6c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x9c02ad754520b2c4
mov qword [rsp + 0x41], rdx
movabs rdx, 0x9d0ca38a6c20b79c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x65a8705454b0a3f3
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf07060d0d060511
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd100f07060d0d06
mov qword [rsp + 0x21], rdx
movabs rdx, 0x12010b150a070014
mov qword [rsp + 0x29], rdx
movabs rdx, 0x12070e110608140c
mov qword [rsp + 0x31], rdx
movabs rdx, 0x60b05110a0c140d
mov qword [rsp + 0x39], rdx
xor eax, eax
jmp 0x1400f8e08
movzx r9d, byte [rsp + rsi + 0x41]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x41], dl
mov byte [rsp + rsi + 0x41], r8b
add rax, 2
cmp rax, 0x22
jge 0x1400f8e3c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x17
jae 0x1400f8e5f
movzx r8d, byte [rsp + rdi + 0x41]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 0x17
jb 0x1400f8dee
jmp 0x1400f8e53
xor eax, eax
lea rbx, [rsp + 0x41]
mov ecx, 0x17
call fcn.140046d40
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.140059800
mov eax, edi
mov ecx, 0x17
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400f8d60

Function at 0x1400fc780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400fc88c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1fd2c820a06ecb21
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x202cafc0696382d9
mov qword [rsp + 0x43], rdx
movabs rdx, 0x641bdbd353202caf
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3899de547c4072c2
mov qword [rsp + 0x50], rdx
movabs rdx, 0x412170303170508
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe01130618071c0e
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1b0018091a110e01
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x15060c1c120d031b
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x1400fc828
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x1400fc85c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x1400fc87f
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0x1d
jb 0x1400fc80e
jmp 0x1400fc873
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.140046d40
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.140059800
mov eax, edi
mov ecx, 0x1d
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400fc780
Function at 0x1400fc8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400fc9a8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xaa73d5ab35c6c030
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb574c0a3b664bdee
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x64c4b574c0a3b664
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0fe12a13d64bfc7
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf070016170d1919
mov qword [rsp + 0x18], rdx
movabs rdx, 0x90d181316040b01
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd0c13051008090d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x410021204151203
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x1400fc94b
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 - 0x3b]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 - 0x3b]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x1e
jge 0x1400fc978
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x1400fc99b
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x1a
jb 0x1400fc92e
jmp 0x1400fc98f
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.140046d40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.140059800
mov eax, edi
mov ecx, 0x1a
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400fc8a0

Function at 0x1400fc9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400fcabd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x61bf7cb99272a78d
mov qword [rsp + 0x39], rdx
movabs rdx, 0xd46e7a4b53b47361
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9e6e718182644161
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4120e1212131312
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x50c061010090505
mov qword [rsp + 0x25], rdx
movabs rdx, 0x141301050c0610
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1603041015130b12
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x1400fca60
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 2]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 2]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x1400fca8d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x1400fcab0
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x1400fca3f
jmp 0x1400fcaa4
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.140046d40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.140059800
mov eax, edi
mov ecx, 0x17
call fcn.140059800
nop
nop dword [rax]
call fcn.140057520
jmp fcn.1400fc9c0
Function at 0x140102900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1401029fd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2fadc91d7014b0be
mov qword [rsp + 0x35], rdx
movabs rdx, 0xd591732fadc91d70
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa8722d1625d8281a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x505071202000600
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x50c0a0707090b06
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf0a050c0a070709
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1009070e0110040d
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x1401029a0
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x1401029cd
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x1401029f0
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x14010297f
jmp 0x1401029e4
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.140046d40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.140059800
mov eax, edi
mov ecx, 0x13
call fcn.140059800
nop
nop dword [rax]
call fcn.140057520
jmp fcn.140102900

Function at 0x140105a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140105b26
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x869d61916c6891a6
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x87897f2e
movabs rdx, 0x7070a0600070104
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0xb0a0906
xor eax, eax
jmp 0x140105ac0
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x26]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x140105af2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x140105b17
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x26]
cmp rsi, 0xc
jb 0x140105aa4
jmp 0x140105b0b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.140046d40
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.140059800
mov eax, edi
mov ecx, 0xc
nop
call fcn.140059800
nop
call fcn.140057520
jmp fcn.140105a60
Function at 0x140105c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140105cdd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x14c60d6970c2087f
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x6c
movabs rdx, 0x707050601020006
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 1
xor eax, eax
nop
jmp 0x140105c80
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x140105cad
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x140105cd0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x140105c62
jmp 0x140105cc4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.140046d40
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.140059800
mov eax, edi
mov ecx, 9
call fcn.140059800
nop
nop dword [rax]
call fcn.140057520
jmp fcn.140105c20

Function at 0x140107440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140107518
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa46a7e7d618baea8
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x58748b65
movabs rdx, 0x60b00050701
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4090000060b0005
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x101020205040702
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x1401074b4
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x12
jge 0x1401074e8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x14010750b
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
nop
cmp rsi, 0xc
jb 0x14010749a
jmp 0x1401074ff
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.140046d40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.140059800
mov eax, edi
mov ecx, 0xc
call fcn.140059800
nop
call fcn.140057520
nop dword [rax]
jmp fcn.140107440
Function at 0x140107840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140107918
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x85a087857d9d728f
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x4f5c5d6c
movabs rdx, 0x605040706030002
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x109060504070603
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb0a030105000300
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x1401078b4
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x12
jge 0x1401078e8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x14010790b
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
nop
cmp rsi, 0xc
jb 0x14010789a
jmp 0x1401078ff
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.140046d40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.140059800
mov eax, edi
mov ecx, 0xc
call fcn.140059800
nop
call fcn.140057520
nop dword [rax]
jmp fcn.140107840

Function at 0x1401082a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14010838a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c041e6f4d74dcc3
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3166c041e6f4d74
mov qword [rsp + 0x30], rdx
movabs rdx, 0x38650e61da656c3d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x600090f05110d06
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf010a110600090f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1106080d0d0f0806
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x14010832d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x14
jge 0x14010835a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x14010837d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x140108310
jmp 0x140108371
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.140046d40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.140059800
mov eax, edi
mov ecx, 0x12
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1401082a0
Function at 0x1401083a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14010846c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd04e3c0054352330
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x313d224a16d04e3c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0704070205010c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6090b0408000a07
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x14010840f
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0xe
jge 0x14010843c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x14010845f
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x1401083f2
jmp 0x140108453
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.140046d40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.140059800
mov eax, edi
mov ecx, 0xd
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1401083a0

Function at 0x1401087c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1401088ec
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x9774a86f56858647
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x879774a86f568586
mov qword [rsp + 0x40], rdx
movabs rdx, 0x56926570656c614e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x75964d74cf756c72
mov qword [rsp + 0x50], rdx
movabs rdx, 0x577488c58d8d9d6e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1702070f171a0812
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8121c1d1d141702
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1b1d0505141c0d12
mov qword [rsp + 0x27], rdx
movabs rdx, 0x514150205011e1c
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xe060e1d0b01111e
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x140108886
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x31]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x26
jge 0x1401088bc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x21
jae 0x1401088df
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x31]
cmp rsi, 0x21
jb 0x14010886c
jmp 0x1401088d3
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x21
call fcn.140046d40
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.140059800
mov eax, edi
mov ecx, 0x21
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1401087c0