joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400b09a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400b0a8a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x20c6736163edee30
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xcd6e20c6736163ed
mov qword [rsp + 0x30], rdx
movabs rdx, 0x38e413d761623ac9
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10070e060a020906
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x901000110070e06
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf070b110206090f
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x1400b0a2d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x14
jge 0x1400b0a5a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x1400b0a7d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x1400b0a10
jmp 0x1400b0a71
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.140046d40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.140059800
mov eax, edi
mov ecx, 0x12
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400b09a0

Function at 0x1400b0de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400b0e9d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xaf0c00c2c86eecc4
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x15
movabs rdx, 0x601040708040507
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x3010600
xor eax, eax
nop
jmp 0x1400b0e40
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x47]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x1400b0e6d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1400b0e90
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x1400b0e22
jmp 0x1400b0e84
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.140046d40
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.140059800
mov eax, edi
mov ecx, 9
call fcn.140059800
nop
nop dword [rax]
call fcn.140057520
jmp fcn.1400b0de0
Function at 0x1400b0ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400b0f98
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb8be5ffe1d7af043
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xc196f21
movabs rdx, 0x202070404050601
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x308020207040405
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7010a0b02070404
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x1400b0f37
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x12
jge 0x1400b0f68
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x1400b0f8b
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x1400b0f1a
jmp 0x1400b0f7f
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.140046d40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.140059800
mov eax, edi
mov ecx, 0xc
call fcn.140059800
nop
call fcn.140057520
nop dword [rax]
jmp fcn.1400b0ec0

Function at 0x1400b1940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400b1a3d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd7bd6901cc4d04c9
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x6511ca31d7bd6901
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b68709521f3bf72
mov qword [rsp + 0x48], rdx
movabs rdx, 0x13080d0410000104
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe080a0e0d08020a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2031307060e0e08
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90a0f0906010f06
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x1400b19e0
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x1400b1a0d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x1400b1a30
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x14
jb 0x1400b19bf
jmp 0x1400b1a24
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x14
call fcn.140046d40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.140059800
mov eax, edi
mov ecx, 0x14
call fcn.140059800
nop
nop dword [rax]
call fcn.140057520
jmp fcn.1400b1940
Function at 0x1400b2740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400b2826
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x445f0948306e164e
mov qword [rsp + 0x31], rdx
movabs rdx, 0x61071e6e69d76f44
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc010c0c0d010305
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x90701040c010c0c
mov qword [rsp + 0x21], rdx
movabs rdx, 0xd00050c030c0d07
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x1400b27c0
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x1400b27f2
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1400b2817
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
cmp rsi, 0xf
jb 0x1400b27a2
jmp 0x1400b280b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.140046d40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.140059800
mov eax, edi
mov ecx, 0xf
nop
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400b2740

Function at 0x1400b3c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400b3cd8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69f985cc1ade6199
mov qword [rsp + 0x28], rdx
movabs rdx, 0x203040403060403
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x3040500
xor eax, eax
jmp 0x1400b3c76
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x47]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xc
jge 0x1400b3ca8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x1400b3ccb
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x47]
cmp rsi, 8
jb 0x1400b3c5c
jmp 0x1400b3cbf
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.140046d40
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.140059800
mov eax, edi
mov ecx, 8
call fcn.140059800
nop
call fcn.140057520
nop dword [rax]
jmp fcn.1400b3c20
Function at 0x1400b6540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400b660c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xdeeb6d045f7d134e
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x697261de
movabs rdx, 0x702010205090407
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x609050702010702
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x1400b65a5
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x1400b65dc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x1400b65ff
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6c]
cmp rsi, 0xb
jb 0x1400b658b
jmp 0x1400b65f3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.140046d40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.140059800
mov eax, edi
mov ecx, 0xb
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400b6540

Function at 0x1400b6620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400b66de
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x675946583c6e5b3b
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x69506167
movabs rdx, 0x403030001050709
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x1060407
xor eax, eax
jmp 0x1400b6681
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x1400b66ae
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x1400b66d1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x1400b6664
jmp 0x1400b66c5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.140046d40
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.140059800
mov eax, edi
mov ecx, 0xb
call fcn.140059800
nop
nop
call fcn.140057520
jmp fcn.1400b6620
Function at 0x1400b6b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400b6c06
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe46ef3cd694d67f3
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xd9d8697261e46ef3
mov qword [rsp + 0x30], rdx
movabs rdx, 0x205030705010403
mov qword [rsp + 0x19], rdx
movabs rdx, 0x402020503070501
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x4070c0b030b0500
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x1400b6ba0
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x73]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x1400b6bd2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x1400b6bf7
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x73]
cmp rsi, 0xd
jb 0x1400b6b82
jmp 0x1400b6beb
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
nop
call fcn.140046d40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.140059800
mov eax, edi
mov ecx, 0xd
nop
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400b6b20

Function at 0x1400b7640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400b770c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x48795ea5ff96ca6
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x6edcfb04
movabs rdx, 0x505080705000806
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x904000202080505
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x1400b76a5
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x1400b76dc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x1400b76ff
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5e]
cmp rsi, 0xb
jb 0x1400b768b
jmp 0x1400b76f3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.140046d40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.140059800
mov eax, edi
mov ecx, 0xb
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400b7640
Function at 0x1400b7a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400b7b06
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x575e495755416c4f
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x3151
movabs rdx, 0x405080604020802
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x3070709
xor eax, eax
jmp 0x1400b7aa0
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 5]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x1400b7ad2
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x1400b7af7
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 5]
cmp rsi, 0xa
jb 0x1400b7a83
jmp 0x1400b7aeb
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.140046d40
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.140059800
mov eax, edi
mov ecx, 0xa
nop
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400b7a40

Function at 0x1400b82c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400b839d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5f553b4731615a3d
mov qword [rsp + 0x31], rdx
movabs rdx, 0x3a764849684d505f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90c050500030b04
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x60e090c05050003
mov qword [rsp + 0x21], rdx
movabs rdx, 0x10c0c040b030506
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x1400b8340
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 + 0x24]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 + 0x24]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x1400b836d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1400b8390
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x1400b8322
jmp 0x1400b8384
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.140046d40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.140059800
mov eax, edi
mov ecx, 0xf
call fcn.140059800
nop
nop dword [rax]
call fcn.140057520
jmp fcn.1400b82c0
Function at 0x1400ba800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400ba8d2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x65485f2d490fa541
mov qword [rsp + 0x29], rdx
movabs rdx, 0xba69e351de5faa65
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40b0c0e0b0c0e01
mov qword [rsp + 0x19], rdx
movabs rdx, 0x80a02040b0c0402
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x1400ba86c
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x1400ba89e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x1400ba8c5
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0xf
jb 0x1400ba852
jmp 0x1400ba8b5
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.140046d40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.140059800
mov eax, edi
mov ecx, 0xf
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400ba800

Function at 0x1400bab60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400bac1d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x74f863cc31702b01
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x2d2a
movabs rdx, 0x901090608000804
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x803
xor eax, eax
jmp 0x1400babc0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x47]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x47]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x1400babed
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x1400bac10
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x1400baba2
jmp 0x1400bac04
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.140046d40
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.140059800
mov eax, edi
mov ecx, 0xa
call fcn.140059800
nop
nop dword [rax]
call fcn.140057520
jmp fcn.1400bab60
Function at 0x1400be2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400be3b8
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4f3e2c3d7450413c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x36625e5e545b4f3e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9060c0506010c06
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd0b0209060c05
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70d00040a0c0508
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x1400be358
movzx r9d, byte [rsp + rsi + 0x32]
add edx, r9d
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x14
jge 0x1400be388
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x1400be3ab
movzx r8d, byte [rsp + rdi + 0x32]
add r8d, edx
nop dword [rax]
cmp rsi, 0xe
jb 0x1400be342
jmp 0x1400be39f
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
call fcn.140046d40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.140059800
mov eax, edi
mov ecx, 0xe
call fcn.140059800
nop
call fcn.140057520
nop dword [rax]
jmp fcn.1400be2e0

Function at 0x1400bedc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400bee8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd5d53d1774666f53
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x45214fd5
movabs rdx, 0x507080a04070904
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x60805090a070507
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x1400bee25
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7b]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x1400bee5c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x1400bee7f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7b]
cmp rsi, 0xb
jb 0x1400bee0b
jmp 0x1400bee73
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.140046d40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.140059800
mov eax, edi
mov ecx, 0xb
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400bedc0
Function at 0x1400c8e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400c8f1d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xda7c3a6f7a1c90b4
mov qword [rsp + 0x33], rdx
movabs rdx, 0x69aeabe28ada7c3a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x866ec79663be3776
mov qword [rsp + 0x40], rdx
movabs rdx, 0x302141400060e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x30f01010a141109
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa07030f01010a14
mov qword [rsp + 0x23], rdx
movabs rdx, 0x80a110b0703120a
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x1400c8ec0
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 - 0xf]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 - 0xf]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x1400c8eed
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x1400c8f10
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x1400c8e9f
jmp 0x1400c8f04
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.140046d40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.140059800
mov eax, edi
mov ecx, 0x15
call fcn.140059800
nop
nop dword [rax]
call fcn.140057520
jmp fcn.1400c8e20

Function at 0x1400ca5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400ca6ec
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6b5a2e7d69837475
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x745f3a7a7a6e6e81
mov qword [rsp + 0x43], rdx
movabs rdx, 0x6e7b456b23745f3a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x136e726c4f6f1f66
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c000807000b0b0e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x131001020c041507
mov qword [rsp + 0x25], rdx
movabs rdx, 0x6120000131a1310
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x14161c0600180e1a
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x1400ca688
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x1400ca6bc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x1400ca6df
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
cmp rsi, 0x1d
jb 0x1400ca66e
jmp 0x1400ca6d3
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.140046d40
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.140059800
mov eax, edi
mov ecx, 0x1d
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400ca5e0
Function at 0x1400cc360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400cc42c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6fba83787d80ad8b
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x84932b6f
movabs rdx, 0x105020309030906
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x40005080500060a
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x1400cc3c5
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x1400cc3fc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x1400cc41f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0xb
jb 0x1400cc3ab
jmp 0x1400cc413
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.140046d40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.140059800
mov eax, edi
mov ecx, 0xb
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400cc360

Function at 0x1400d0120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d01dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x32da9034e08b8aef
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x96
movabs rdx, 0x1050202030206
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x801
xor eax, eax
nop
jmp 0x1400d0180
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x51]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x1400d01ad
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x1400d01d0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x1400d0162
jmp 0x1400d01c4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.140046d40
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.140059800
mov eax, edi
mov ecx, 9
call fcn.140059800
nop
nop dword [rax]
call fcn.140057520
jmp fcn.1400d0120

Function at 0x1400d0200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400d02c7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9ed8063533810336
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x1032
movabs rdx, 0x509090205010601
mov qword [rsp + 0x18], rdx
movabs rdx, 0x207060105090509
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x1400d0267
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x1400d0297
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x1400d02ba
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x1400d024a
jmp 0x1400d02ae
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.140046d40
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.140059800
mov eax, edi
mov ecx, 0xa
call fcn.140059800
nop
call fcn.140057520
jmp fcn.1400d0200