joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14011eac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x14011eca8
push rbp
mov rbp, rsp
sub rsp, 0xa0
movups xmmword [rsp + 0x70], xmm15
lea rdx, [rsp + 0x4a]
mov qword [rsp + 0x98], rdx
test byte [rdx], al
movabs rsi, 0x915eac46be3f69c
mov qword [rdx], rsi
movabs rsi, 0x68e23126b405f270
mov qword [rdx + 8], rsi
movabs rsi, 0x6f17012a6f2068e2
mov qword [rdx + 0xe], rsi
movabs rsi, 0x74d00d006f732d2a
mov qword [rdx + 0x16], rsi
mov rdx, qword [rsp + 0x98]
test byte [rdx], al
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], 0x1e
mov qword [rsp + 0x90], 0x1e
movabs rdx, 0x20e0a1a0e0404
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf0d0f040502010d
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc090f0d0f040502
mov qword [rsp + 0x27], rdx
movabs rdx, 0xc051216141a0e0c
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1305130b071b1c1c
mov qword [rsp + 0x37], rdx
movabs rdx, 0x1c060c1c06040002
mov qword [rsp + 0x3f], rdx
mov qword [rsp + 0x68], 0
jmp 0x14011ebb5
cmp qword [rsp + 0x68], 0x2a
jl 0x14011ebc5
nop dword [rax]
jmp 0x14011ec7e
mov rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x68]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x68]
lea rdi, [rsp + rdi + 0x1e]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x2a]
mov byte [rsp + 0x47], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
mov byte [rsp + 0x49], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x80]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x2a]
mov byte [rsp + 0x48], dl
mov rdx, qword [rsp + 0x68]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x68]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x80]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x2a]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x49]
add rdx, qword [rsp + 0x80]
movzx esi, byte [rsp + 0x48]
mov byte [rdx], sil
jmp 0x14011ec73
add qword [rsp + 0x68], 2
jmp 0x14011ebb5
mov rbx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
add rsp, 0xa0
pop rbp
ret
call fcn.140056be0
jmp fcn.14011eac0
Function at 0x14011fca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x14011fe51
push rbp
mov rbp, rsp
sub rsp, 0x90
movups xmmword [rsp + 0x60], xmm15
lea rdx, [rsp + 0x3f]
mov qword [rsp + 0x88], rdx
test byte [rdx], al
movabs rsi, 0x744b632e5b3e6f6e
mov qword [rdx], rsi
movabs rsi, 0x61206563ef1e514d
mov qword [rdx + 8], rsi
movabs rsi, 0x4f61206563ef1e51
mov qword [rdx + 9], rsi
movabs rsi, 0x5b2d476e64304520
mov qword [rdx + 0x11], rsi
mov rdx, qword [rsp + 0x88]
test byte [rdx], al
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], 0x19
mov qword [rsp + 0x80], 0x19
movabs rdx, 0x617070a02060b16
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb101803040b1309
mov qword [rsp + 0x24], rdx
movabs rdx, 0x604091217151708
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x16021210080f040f
mov qword [rsp + 0x34], rdx
mov qword [rsp + 0x58], 0
jmp 0x14011fd71
cmp qword [rsp + 0x58], 0x20
jl 0x14011fd7e
jmp 0x14011fe2d
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x58]
lea rdi, [rsp + rdi + 0x1d]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0xf]
mov byte [rsp + 0x3c], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
mov byte [rsp + 0x3e], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0xf]
mov byte [rsp + 0x3d], dl
mov rdx, qword [rsp + 0x58]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x58]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x70]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0xf]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3e]
add rdx, qword [rsp + 0x70]
movzx esi, byte [rsp + 0x3d]
mov byte [rdx], sil
nop
jmp 0x14011fe22
add qword [rsp + 0x58], 2
jmp 0x14011fd71
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
add rsp, 0x90
pop rbp
ret
call fcn.140056be0
jmp fcn.14011fca0
Function at 0x140120240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x14012043b
push rbp
mov rbp, rsp
sub rsp, 0xa8
movups xmmword [rsp + 0x78], xmm15
lea rdx, [rsp + 0x4b]
mov qword [rsp + 0xa0], rdx
test byte [rdx], al
movabs rsi, 0x6f6856657527550d
mov qword [rdx], rsi
movabs rsi, 0x726c7353486f6856
mov qword [rdx + 5], rsi
movabs rsi, 0x6420525f52583d0e
mov qword [rdx + 0xd], rsi
movabs rsi, 0xf52064656e696459
mov qword [rdx + 0x15], rsi
movabs rsi, 0x445e43ee39617461
mov qword [rdx + 0x1d], rsi
mov rdx, qword [rsp + 0xa0]
test byte [rdx], al
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x90], 0x25
mov qword [rsp + 0x98], 0x25
movabs rdx, 0xe1623020924020d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x21101c200a0d1106
mov qword [rsp + 0x26], rdx
movabs rdx, 0x22221101c200a0d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x51001061511020a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8120616000b0823
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9021106120a0f0b
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x70], 0
jmp 0x140120343
cmp qword [rsp + 0x70], 0x2a
jl 0x140120350
jmp 0x140120409
mov rdx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x70]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x70]
lea rdi, [rsp + rdi + 0x1f]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x1d]
mov byte [rsp + 0x48], dl
mov rdx, qword [rsp + 0x70]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
mov byte [rsp + 0x4a], dl
mov rdx, qword [rsp + 0x70]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x88]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + 0x49], dl
mov rdx, qword [rsp + 0x70]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x70]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x88]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x1d]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x4a]
add rdx, qword [rsp + 0x88]
movzx esi, byte [rsp + 0x49]
mov byte [rdx], sil
jmp 0x1401203fe
add qword [rsp + 0x70], 2
jmp 0x140120343
mov rbx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x90]
xor eax, eax
nop dword [rax + rax]
call fcn.140053e40
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], rbx
add rsp, 0xa8
pop rbp
ret
nop dword [rax + rax]
call fcn.140056be0
jmp fcn.140120240
Function at 0x1401269e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140126b55
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x48], xmm15
lea rdx, [rsp + 0x31]
mov qword [rsp + 0x70], rdx
test byte [rdx], al
movabs rsi, 0x20d2d17573d86f8d
mov qword [rdx], rsi
movabs rsi, 0x1dc8a0cf24722e20
mov qword [rdx + 7], rsi
mov rdx, qword [rsp + 0x70]
test byte [rdx], al
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0xf
mov qword [rsp + 0x68], 0xf
movabs rdx, 0xe0b0a080b000a0c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2050e0b0a080b00
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe080d020005060e
mov qword [rsp + 0x26], rdx
mov qword [rsp + 0x40], 0
jmp 0x140126a75
cmp qword [rsp + 0x40], 0x12
jl 0x140126a85
nop dword [rax]
jmp 0x140126b32
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x40]
lea rdi, [rsp + rdi + 0x1d]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x3b]
mov byte [rsp + 0x2e], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
mov byte [rsp + 0x30], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + 0x2f], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x58]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x3b]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x30]
add rdx, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x2f]
mov byte [rdx], sil
jmp 0x140126b27
add qword [rsp + 0x40], 2
jmp 0x140126a75
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
xor eax, eax
nop
call fcn.140053e40
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
add rsp, 0x78
pop rbp
ret
call fcn.140056be0
jmp fcn.1401269e0
Function at 0x140127800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x1401279d8
push rbp
mov rbp, rsp
sub rsp, 0x98
movups xmmword [rsp + 0x68], xmm15
lea rdx, [rsp + 0x3e]
mov qword [rsp + 0x90], rdx
test byte [rdx], al
movabs rsi, 0x7992736d94466f95
mov qword [rdx], rsi
movabs rsi, 0x4e207992736d9446
mov qword [rdx + 2], rsi
movabs rsi, 0x9075226572657a65
mov qword [rdx + 0xa], rsi
movabs rsi, 0x72876e7563203a84
mov qword [rdx + 0x12], rsi
movabs rsi, 0x5163696c6f6b4c83
mov qword [rdx + 0x1a], rsi
mov rdx, qword [rsp + 0x90]
test byte [rdx], al
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], 0x22
mov qword [rsp + 0x88], 0x22
movabs rdx, 0x1a091a0018111a02
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2121a091a001811
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6100b1d1b06030b
mov qword [rsp + 0x23], rdx
movabs rdx, 0x191619001c051a1b
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x10211205210f1603
mov qword [rsp + 0x33], rdx
mov qword [rsp + 0x60], 0
jmp 0x1401278f1
cmp qword [rsp + 0x60], 0x22
jl 0x1401278fe
jmp 0x1401279ad
mov rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x60]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x60]
lea rdi, [rsp + rdi + 0x1a]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x2d]
mov byte [rsp + 0x3b], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
mov byte [rsp + 0x3d], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x78]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + 0x3c], dl
mov rdx, qword [rsp + 0x60]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x60]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x78]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi - 0x2d]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3d]
add rdx, qword [rsp + 0x78]
movzx esi, byte [rsp + 0x3c]
mov byte [rdx], sil
nop
jmp 0x1401279a2
add qword [rsp + 0x60], 2
jmp 0x1401278f1
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
xor eax, eax
nop dword [rax]
call fcn.140053e40
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rbx
add rsp, 0x98
pop rbp
ret
call fcn.140056be0
nop dword [rax]
jmp fcn.140127800
Function at 0x14012be60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14012bfba
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2d]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0x320c451475e63f05
mov qword [rdx], rsi
mov dword [rdx + 7], 0xf4050132
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xb
mov qword [rsp + 0x60], 0xb
movabs rdx, 0x104080601020609
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa07040905000101
mov qword [rsp + 0x22], rdx
mov qword [rsp + 0x38], 0
jmp 0x14012bedf
cmp qword [rsp + 0x38], 0x10
jl 0x14012beec
jmp 0x14012bf99
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1b]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x1f]
mov byte [rsp + 0x2a], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
mov byte [rsp + 0x2c], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + 0x2b], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 0x1f]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2c]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x2b]
mov byte [rdx], sil
jmp 0x14012bf8e
add qword [rsp + 0x38], 2
jmp 0x14012bedf
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
nop
jmp fcn.14012be60
Function at 0x14012d100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x14012d29e
push rbp
mov rbp, rsp
sub rsp, 0x88
movups xmmword [rsp + 0x58], xmm15
lea rdx, [rsp + 0x3c]
mov qword [rsp + 0x80], rdx
test byte [rdx], al
movabs rsi, 0x24074174f3320f1b
mov qword [rdx], rsi
movabs rsi, 0x10f0560f24074174
mov qword [rdx + 4], rsi
movabs rsi, 0x4e742c6521166f43
mov qword [rdx + 0xc], rsi
mov rdx, qword [rsp + 0x80]
test byte [rdx], al
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 0x14
mov qword [rsp + 0x78], 0x14
movabs rdx, 0xe0a09111302000b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe06080e070a0301
mov qword [rsp + 0x25], rdx
movabs rdx, 0x9010f0a0e06080e
mov qword [rsp + 0x29], rdx
movabs rdx, 0x80a13090e0a0b03
mov qword [rsp + 0x31], rdx
mov qword [rsp + 0x50], 0
nop
jmp 0x14012d1c2
cmp qword [rsp + 0x50], 0x1c
jl 0x14012d1cf
jmp 0x14012d27a
mov rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1d]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x50]
lea rdi, [rsp + rdi + 0x1e]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x3e]
mov byte [rsp + 0x39], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1e]
movzx edx, byte [rdx]
mov byte [rsp + 0x3b], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x3e
mov byte [rsp + 0x3a], dl
mov rdx, qword [rsp + 0x50]
lea rdx, [rsp + rdx + 0x1d]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
lea rsi, [rsp + rsi + 0x1e]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x68]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x3e
mov byte [rdx], sil
movzx edx, byte [rsp + 0x3b]
add rdx, qword [rsp + 0x68]
movzx esi, byte [rsp + 0x3a]
mov byte [rdx], sil
jmp 0x14012d26f
add qword [rsp + 0x50], 2
jmp 0x14012d1c2
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
add rsp, 0x88
pop rbp
ret
nop
call fcn.140056be0
jmp fcn.14012d100
Function at 0x14012e240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14012e39a
push rbp
mov rbp, rsp
sub rsp, 0x70
movups xmmword [rsp + 0x40], xmm15
lea rdx, [rsp + 0x2c]
mov qword [rsp + 0x68], rdx
test byte [rdx], al
movabs rsi, 0x741949455a744551
mov qword [rdx], rsi
mov dword [rdx + 8], 0x46534650
mov rdx, qword [rsp + 0x68]
test byte [rdx], al
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], 0xc
mov qword [rsp + 0x60], 0xc
movabs rdx, 0x10a010304050503
mov qword [rsp + 0x19], rdx
movabs rdx, 0x80b050b090608
mov qword [rsp + 0x21], rdx
mov qword [rsp + 0x38], 0
jmp 0x14012e2bf
cmp qword [rsp + 0x38], 0x10
jl 0x14012e2cc
jmp 0x14012e379
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x38]
lea rdi, [rsp + rdi + 0x1a]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 1]
mov byte [rsp + 0x29], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x1a]
movzx edx, byte [rdx]
mov byte [rsp + 0x2b], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
movzx edx, byte [rdx]
lea edx, [rdi + rdx]
lea edx, [rdx + 1]
mov byte [rsp + 0x2a], dl
mov rdx, qword [rsp + 0x38]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x38]
lea rsi, [rsp + rsi + 0x1a]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x50]
movzx esi, byte [rsi]
lea esi, [rdi + rsi]
lea esi, [rsi + 1]
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2b]
add rdx, qword [rsp + 0x50]
movzx esi, byte [rsp + 0x2a]
mov byte [rdx], sil
jmp 0x14012e36e
add qword [rsp + 0x38], 2
jmp 0x14012e2bf
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
add rsp, 0x70
pop rbp
ret
call fcn.140056be0
nop
jmp fcn.14012e240
Function at 0x14012eda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x14012ef26
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movups xmmword [rsp + 0x50], xmm15
lea rdx, [rsp + 0x36]
mov qword [rsp + 0x78], rdx
test byte [rdx], al
movabs rsi, 0xb417e276b6f6f4c
mov qword [rdx], rsi
movabs rsi, 0xfe0b417e276b6f
mov qword [rdx + 2], rsi
movabs rsi, 0x57659159fd7df6e7
mov qword [rdx + 0xa], rsi
mov rdx, qword [rsp + 0x78]
test byte [rdx], al
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], 0x12
mov qword [rsp + 0x70], 0x12
movabs rdx, 0x5090a0e0c0e0705
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc0d070405090a0e
mov qword [rsp + 0x23], rdx
movabs rdx, 0x80b070809090f08
mov qword [rsp + 0x2b], rdx
mov qword [rsp + 0x48], 0
jmp 0x14012ee48
cmp qword [rsp + 0x48], 0x14
jl 0x14012ee55
jmp 0x14012ef05
mov rdx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x1f]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x48]
lea rdi, [rsp + rdi + 0x20]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x7e]
mov byte [rsp + 0x33], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x20]
movzx edx, byte [rdx]
mov byte [rsp + 0x35], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffff82
mov byte [rsp + 0x34], dl
mov rdx, qword [rsp + 0x48]
lea rdx, [rsp + rdx + 0x1f]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x48]
lea rsi, [rsp + rsi + 0x20]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x60]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffff82
mov byte [rdx], sil
movzx edx, byte [rsp + 0x35]
add rdx, qword [rsp + 0x60]
movzx esi, byte [rsp + 0x34]
mov byte [rdx], sil
jmp 0x14012eef5
add qword [rsp + 0x48], 2
nop dword [rax + rax]
jmp 0x14012ee48
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
sub rsp, 0xffffffffffffff80
pop rbp
ret
call fcn.140056be0
jmp fcn.14012eda0
Function at 0x14012ef40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14012f0bc
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x48], xmm15
lea rdx, [rsp + 0x2f]
mov qword [rsp + 0x70], rdx
test byte [rdx], al
movabs rsi, 0x46414975540f2959
mov qword [rdx], rsi
movabs rsi, 0xf046414975540f29
mov qword [rdx + 1], rsi
movabs rsi, 0x5247155337333946
mov qword [rdx + 9], rsi
mov rdx, qword [rsp + 0x70]
test byte [rdx], al
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0x11
mov qword [rsp + 0x68], 0x11
movabs rdx, 0x80e0f0c0e080209
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1050809080e0f0c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x305000b0a000710
mov qword [rsp + 0x24], rdx
mov qword [rsp + 0x40], 0
jmp 0x14012efe3
cmp qword [rsp + 0x40], 0x14
jl 0x14012eff0
jmp 0x14012f09b
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x18]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x40]
lea rdi, [rsp + rdi + 0x19]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx - 0x34]
mov byte [rsp + 0x2c], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x19]
movzx edx, byte [rdx]
mov byte [rsp + 0x2e], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0x34
mov byte [rsp + 0x2d], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x18]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x19]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x58]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0x34
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2e]
add rdx, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x2d]
mov byte [rdx], sil
jmp 0x14012f090
add qword [rsp + 0x40], 2
jmp 0x14012efe3
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
xor eax, eax
call fcn.140053e40
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
add rsp, 0x78
pop rbp
ret
nop dword [rax]
call fcn.140056be0
jmp fcn.14012ef40
Function at 0x14012f0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14012f255
push rbp
mov rbp, rsp
sub rsp, 0x78
movups xmmword [rsp + 0x48], xmm15
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x70], rdx
test byte [rdx], al
movabs rsi, 0x8a872bb0abfb44f
mov qword [rdx], rsi
movabs rsi, 0x9d06febebe734065
mov qword [rdx + 8], rsi
mov rdx, qword [rsp + 0x70]
test byte [rdx], al
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0x10
mov qword [rsp + 0x68], 0x10
movabs rdx, 0xc090706040f0d07
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb030c090706040f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb0e0c0d02010e0c
mov qword [rsp + 0x25], rdx
mov qword [rsp + 0x40], 0
jmp 0x14012f175
cmp qword [rsp + 0x40], 0x12
jl 0x14012f185
nop dword [rax]
jmp 0x14012f230
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1b]
movzx esi, byte [rsi]
mov rdi, qword [rsp + 0x40]
lea rdi, [rsp + rdi + 0x1c]
movzx edi, byte [rdi]
xor esi, edi
lea edi, [rdx + rsi]
lea edx, [rdx + rsi]
lea edx, [rdx + 0x40]
mov byte [rsp + 0x2d], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1c]
movzx edx, byte [rdx]
mov byte [rsp + 0x2f], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
movzx edx, byte [rdx]
sub edx, edi
add edx, 0xffffffc0
mov byte [rsp + 0x2e], dl
mov rdx, qword [rsp + 0x40]
lea rdx, [rsp + rdx + 0x1b]
movzx edx, byte [rdx]
add rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x40]
lea rsi, [rsp + rsi + 0x1c]
movzx esi, byte [rsi]
add rsi, qword [rsp + 0x58]
movzx esi, byte [rsi]
sub esi, edi
add esi, 0xffffffc0
mov byte [rdx], sil
movzx edx, byte [rsp + 0x2f]
add rdx, qword [rsp + 0x58]
movzx esi, byte [rsp + 0x2e]
mov byte [rdx], sil
jmp 0x14012f225
add qword [rsp + 0x40], 2
jmp 0x14012f175
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
xor eax, eax
nop dword [rax]
call fcn.140053e40
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
add rsp, 0x78
pop rbp
ret
call fcn.140056be0
jmp fcn.14012f0e0