joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5d6a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d6b33
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xad9dbfd164da9d68
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8bad9dbfd164da9d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe72b392c7980f20
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0107020e100410
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd06100801070a01
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb040c0b07050405
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5d6ab0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x48]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x5d6aed
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
nop
cmp rsi, 0x16
jae 0x5d6b25
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5d6b14
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x48]
cmp rsi, 0x11
jb 0x5d6a96
jmp 0x5d6b08
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457f40
mov eax, edi
mov ecx, 0x11
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x16
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005d6a20

Function at 0x5d77e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d78ff
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x7eb2abcbc1a41265
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf36e1974d19db563
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65b561a1d6856d20
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50f011412140f0a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x30a161414010206
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x130b0a13030a1614
mov qword [rsp + 0x40], rdx
movabs rdx, 0x904040b0b070d09
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5d7882
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1c
jge 0x5d78b9
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x5d78f1
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5d78e5
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x5d7865
jmp 0x5d78d4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x18
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1c
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.005d77e0
Function at 0x5d87c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d88d3
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x71677d7c72732886
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6471677d7c727328
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x516f69726e8a7377
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf08090b000f050a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70104030f08090b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80d0f00100f0d05
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5d8850
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x18]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x5d888d
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
nop
cmp rsi, 0x14
jae 0x5d88c5
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5d88b4
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x18]
cmp rsi, 0x11
jb 0x5d8836
jmp 0x5d88a8
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457f40
mov eax, edi
mov ecx, 0x11
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x14
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005d87c0
Function at 0x5d9b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d9c86
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
lea rax, [0x0064f000]
nop
call fcn.0040b9a0
movabs rcx, 0xcb619ae5e0ada356
mov qword [rax], rcx
movabs rcx, 0x9126651eb6bf9df3
mov qword [rax + 8], rcx
movabs rcx, 0x958cf78c14a935b9
mov qword [rax + 0x10], rcx
movabs rcx, 0xf97c75f0e2299e8e
mov qword [rax + 0x18], rcx
movabs rcx, 0x7141c121117031c
mov qword [rsp + 0x16], rcx
movabs rcx, 0x151d0b03100b0708
mov qword [rsp + 0x1e], rcx
movabs rcx, 0x3151d0b03100b
mov qword [rsp + 0x20], rcx
movabs rcx, 0x71a150a1e0e091d
mov qword [rsp + 0x28], rcx
movabs rcx, 0x71307111f18110b
mov qword [rsp + 0x30], rcx
movabs rcx, 0xe140e000b0111
mov qword [rsp + 0x38], rcx
xor ecx, ecx
jmp 0x5d9c14
movzx r9d, byte [rsi + rax]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rax + rdi], dl
lea edx, [r8 + 0x31]
mov byte [rax + rsi], dl
add rcx, 2
cmp rcx, 0x2a
jge 0x5d9c4a
movzx edx, byte [rsp + rcx + 0x16]
lea rsi, [rcx + 1]
cmp rsi, 0x2a
jae 0x5d9c74
movzx esi, byte [rsp + rcx + 0x17]
mov edi, edx
xor edx, esi
add edx, ecx
cmp rdi, 0x20
jae 0x5d9c68
movzx r8d, byte [rdi + rax]
sub r8d, edx
cmp rsi, 0x20
jb 0x5d9bfa
jmp 0x5d9c5c
mov ebx, 0x20
mov rcx, rbx
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x20
call fcn.00457f40
mov eax, edi
mov ecx, 0x20
call fcn.00457f40
mov rax, rsi
mov ecx, 0x2a
nop dword [rax]
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005d9b40

Function at 0x5da1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5da2e9
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x8d72807784738bf2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5d69d25585ba8174
mov qword [rsp + 0x27], rdx
movabs rdx, 0x895d69d25585ba81
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9177ab6474cad773
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1300180f0905040c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1304010b04000312
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30a181004000a10
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160d00070a0b00
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5da271
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x5da2a8
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x5da2db
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5da2cf
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x5da254
jmp 0x5da2c3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457f40
mov eax, edi
mov ecx, 0x19
call fcn.00457f40
mov rax, rsi
mov ecx, 0x20
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005da1c0
Function at 0x5da300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5da45f
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x266e6920ad736c2b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf19864d26c24266e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x94326674a925e1d5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3a67a961d36378eb
mov qword [rsp + 0x30], rdx
movabs rdx, 0x65e7a4fd7365562a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1d14151f0014160e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x15111d1f03191113
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc13110e1e0f1624
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10191b220a071d03
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1500071f231f130d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x100e000823221510
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x5da3e0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x30
jge 0x5da41c
movzx edx, byte [rsp + rax + 0x40]
lea rsi, [rax + 1]
cmp rsi, 0x30
jae 0x5da451
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x5da445
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1c]
cmp rsi, 0x26
jb 0x5da3c2
jmp 0x5da437
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x26
call fcn.00446000
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x26
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x26
call fcn.00457f40
mov rax, rsi
mov ecx, 0x30
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.005da300
Function at 0x5dd720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x5dd8bf
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0xecbc296f69897361
mov qword [rsp + 0x18], rdx
movabs rdx, 0x65d2799105a29dbe
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6e2007d8d7720359
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1f65768de667b824
mov qword [rsp + 0x30], rdx
movabs rdx, 0xada3a874fb756f0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb71e9fad98996d6f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x801152b2a1b0c13
mov qword [rsp + 0x48], rdx
movabs rdx, 0x61018200c192a2e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x251a060502200b0b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2b2e02180d092610
mov qword [rsp + 0x60], rdx
movabs rdx, 0xd0e2b182d0b1313
mov qword [rsp + 0x68], rdx
movabs rdx, 0x141c0a071f232f19
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2d01100d1102001f
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2c271c0c2e02230a
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x5dd840
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0xe]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x40
jge 0x5dd877
movzx edx, byte [rsp + rax + 0x48]
lea rsi, [rax + 1]
cmp rsi, 0x40
jae 0x5dd8b1
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x5dd8a5
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x30
jb 0x5dd81f
jmp 0x5dd898
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x30
call fcn.00446000
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x30
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x30
call fcn.00457f40
mov rax, rsi
mov ecx, 0x40
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.005dd720
Function at 0x5ddde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x5ddfa6
sub rsp, 0xa0
mov qword [rsp + 0x98], rbp
lea rbp, [rsp + 0x98]
movabs rdx, 0x3a372e6f691a7545
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x20d3aa650b2a613a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6e441132343e1413
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x22ed7506650f5a6f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x192d031f65306073
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x422a272c61096876
mov qword [rsp + 0x44], rdx
movabs rdx, 0x814141cc26201563
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x14190220251b280d
mov qword [rsp + 0x54], rdx
movabs rdx, 0x3536000d14190220
mov qword [rsp + 0x58], rdx
movabs rdx, 0x30290c2e2811062b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x361b181e36141717
mov qword [rsp + 0x68], rdx
movabs rdx, 0x242b25151b0f3326
mov qword [rsp + 0x70], rdx
movabs rdx, 0x19260c1e1d212c12
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1119321307212b19
mov qword [rsp + 0x80], rdx
movabs rdx, 0x609151334262d19
mov qword [rsp + 0x88], rdx
movabs rdx, 0x331b0a3010232e10
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x5ddf20
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x20]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x44
jge 0x5ddf5c
movzx edx, byte [rsp + rax + 0x54]
lea rsi, [rax + 1]
cmp rsi, 0x44
jae 0x5ddf95
movzx esi, byte [rsp + rax + 0x55]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x37
jae 0x5ddf89
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x20]
cmp rsi, 0x37
jb 0x5ddf03
jmp 0x5ddf7d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x37
call fcn.00446000
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov eax, esi
mov ecx, 0x37
call fcn.00457f40
mov eax, edi
mov ecx, 0x37
call fcn.00457f40
mov rax, rsi
mov ecx, 0x44
nop dword [rax]
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005ddde0
Function at 0x5de860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5de94d
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xc374bd0e25dfbfbf
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6c9bac374bd0e25
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20904010008080a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x509050307070101
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5de8d5
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x4a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x4a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x5de90c
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x5de93f
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5de933
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x5de8b8
jmp 0x5de927
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457f40
mov eax, edi
mov ecx, 0xb
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005de860

Function at 0x5df280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5df3e9
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x1f69204d23d2eefd
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x55d6761f69204d23
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x359e0b82529e1afc
mov qword [rsp + 0x26], rdx
movabs rdx, 0xfd377f12037b00f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x93bde4770fd9653c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x210f14000f12141b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x210a210f14000f12
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0420032022031b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x180a1d0a22030001
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc1a0f17011e190d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x70a11210b1209
mov qword [rsp + 0x60], rdx
movabs rdx, 0x191013020b090a21
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x5df36a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x32
jge 0x5df3a8
movzx edx, byte [rsp + rax + 0x3e]
lea rsi, [rax + 1]
cmp rsi, 0x32
jae 0x5df3db
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x5df3cf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1f]
nop
cmp rsi, 0x23
jb 0x5df350
jmp 0x5df3c3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x23
call fcn.00446000
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x23
call fcn.00457f40
mov eax, edi
mov ecx, 0x23
call fcn.00457f40
mov rax, rsi
mov ecx, 0x32
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005df280
Function at 0x5e4c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e4d18
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7461635247143e53
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e535c6a6b5b5c46
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0101080b09040a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa020b0101080b09
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0d08000e030b0a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5e4ca0
movzx r9d, byte [rsp + rsi + 0x1e]
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x5e4cd7
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x5e4d0a
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5e4cfe
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, edx
cmp rsi, 0x10
jb 0x5e4c87
jmp 0x5e4cf2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457f40
mov eax, edi
mov ecx, 0x10
call fcn.00457f40
mov rax, rsi
mov ecx, 0x12
call fcn.00457f40
nop
call fcn.00455860
nop dword [rax]
jmp fcn.005e4c20

Function at 0x5e52a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e5393
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x838763856c71878f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6694925d976f6983
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb060c0c0a010b00
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2070401020d0b00
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5e5312
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x26]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x5e534e
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x5e5385
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5e5375
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x26]
cmp rsi, 0xf
jb 0x5e52f8
jmp 0x5e5369
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457f40
mov eax, edi
mov ecx, 0xf
nop dword [rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005e52a0
Function at 0x5e53a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e547f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6ece1465670b6d12
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xbc
movabs rdx, 0x600000005020206
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x208
xor eax, eax
jmp 0x5e5403
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x49]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x49]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x5e543a
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x5e5471
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x5e5465
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x5e53e6
jmp 0x5e5455
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 9
call fcn.00457f40
mov rax, rsi
mov ecx, 0xa
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.005e53a0

Function at 0x5e54a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e558d
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6b1f19ce12c60669
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6c29212b2b6b1f19
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0a0102020b070a
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb03060805010304
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5e5515
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x62]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x62]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x5e554c
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x5e557f
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5e5573
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x5e54f8
jmp 0x5e5567
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457f40
mov eax, edi
mov ecx, 0xd
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005e54a0
Function at 0x5e7120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e725f
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xb161676980b9b06d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x61a9b2ab6da193dd
mov qword [rsp + 0x22], rdx
movabs rdx, 0x85aeaf6761a9b2ab
mov qword [rsp + 0x26], rdx
movabs rdx, 0x81c91061c0b5abcb
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80d111902011210
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1114080d11190201
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9050c0715131a09
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16150c1b0a0d0d07
mov qword [rsp + 0x48], rdx
movabs rdx, 0x151417150311150e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5e71e0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x5e721c
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
cmp rsi, 0x22
jae 0x5e7251
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5e7245
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 0x1c
jb 0x5e71c3
jmp 0x5e7237
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x1c
call fcn.00457f40
mov rax, rsi
mov ecx, 0x22
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.005e7120
Function at 0x5f3dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f3edf
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x547820c7dac8b8f8
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x20c1f34061765478
mov qword [rsp + 0x20], rdx
movabs rdx, 0x71347f6c82b136a7
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30a001114140107
mov qword [rsp + 0x30], rdx
movabs rdx, 0x314040f0f0b0107
mov qword [rsp + 0x38], rdx
movabs rdx, 0x201000b04110604
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0c1413100e0611
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5f3e60
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x5f3e9c
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x5f3ed1
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5f3ec5
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7d]
cmp rsi, 0x16
jb 0x5f3e45
jmp 0x5f3eb7
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x16
call fcn.00457f40
mov rax, rsi
mov ecx, 0x20
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.005f3dc0