joyce8/EMBER2024-capa huggingface dataset:
Function at 0x59eda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xf75116dfb96d398b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x700060304000306
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x300
xor eax, eax
jmp 0x59edf4
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xa
jge 0x59ee28
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x59ee65
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x64]
nop dword [rax + rax]
cmp rbx, 8
jb 0x59edda
jmp 0x59ee57
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x59ee41
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x59ee35
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.0046d060
mov eax, esi
mov ecx, 8
call fcn.0046d060
nop
int3

Function at 0x5a0bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x80e699e0124da867
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6040306070403
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 7
xor eax, eax
jmp 0x5a0c14
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x60]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xa
jge 0x5a0c48
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5a0c85
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x60]
nop dword [rax + rax]
cmp rbx, 8
jb 0x5a0bfa
jmp 0x5a0c77
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x5a0c61
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x5a0c55
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.0046d060
mov eax, esi
mov ecx, 8
call fcn.0046d060
nop
int3
Function at 0x5a0ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xd376eee075e190c9
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3050400000704
mov qword [rsp + 0x14], rdx
mov dword [rsp + 0x1c], 0x7000600
xor eax, eax
jmp 0x5a0cf7
movzx r8d, byte [rsp + rbx + 0x28]
sub r8d, edx
lea edx, [r8 - 0x20]
mov byte [rsp + rsi + 0x28], dl
lea edx, [rdi - 0x20]
mov byte [rsp + rbx + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x5a0d28
movzx edx, byte [rsp + rax + 0x14]
movzx ebx, byte [rsp + rax + 0x15]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5a0d65
movzx edi, byte [rsp + rsi + 0x28]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x5a0cdb
jmp 0x5a0d57
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x5a0d41
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x5a0d35
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.0046d060
mov eax, esi
mov ecx, 8
call fcn.0046d060
nop
int3

Function at 0x5a17e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xbc19f2dfecb5a196
mov qword [rsp + 0x28], rdx
movabs rdx, 0x404060303020206
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x407
xor eax, eax
jmp 0x5a1834
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x50]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xa
jge 0x5a1868
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5a18a5
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x50]
nop dword [rax + rax]
cmp rbx, 8
jb 0x5a181a
jmp 0x5a1897
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x5a1881
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x5a1875
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.0046d060
mov eax, esi
mov ecx, 8
call fcn.0046d060
nop
int3

Function at 0x5a2800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xa6446f435cd8c694
mov qword [rsp + 0x20], rdx
movabs rdx, 0x301030304040705
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5a284f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x39]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x39]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x5a287a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5a28b5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x5a2833
jmp 0x5a28a9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5a2893
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x5a2887
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.0046d060
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.0046d060
nop
int3
Function at 0x5a2b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xc3086b55f320ae06
mov qword [rsp + 0x28], rdx
movabs rdx, 0x100010505050501
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x700
xor eax, eax
jmp 0x5a2bb4
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xa
jge 0x5a2be8
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5a2c25
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x4b]
nop dword [rax + rax]
cmp rbx, 8
jb 0x5a2b9a
jmp 0x5a2c17
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x5a2c01
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x5a2bf5
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.0046d060
mov eax, esi
mov ecx, 8
call fcn.0046d060
nop
int3

Function at 0x5a4920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x3146852383f50882
mov qword [rsp + 0x28], rdx
movabs rdx, 0x301030001000104
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x707
xor eax, eax
jmp 0x5a4976
movzx r8d, byte [rsp + rbx + 0x28]
sub r8d, edx
lea edx, [r8 + 0x10]
mov byte [rsp + rsi + 0x28], dl
lea edx, [rdi + 0x10]
mov byte [rsp + rbx + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x5a49a2
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5a49e5
movzx edi, byte [rsp + rsi + 0x28]
sub edi, edx
cmp rbx, 8
jb 0x5a495a
nop
jmp 0x5a49d6
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x5a49c0
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5a49af
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.0046d060
mov eax, esi
mov ecx, 8
call fcn.0046d060
nop
int3
Function at 0x5a4a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x950547e3039ae466
mov qword [rsp + 0x28], rdx
movabs rdx, 0x102060200010503
mov qword [rsp + 0x14], rdx
mov dword [rsp + 0x1c], 0x1040403
xor eax, eax
jmp 0x5a4a57
movzx r8d, byte [rsp + rbx + 0x28]
sub r8d, edx
lea edx, [r8 - 0x26]
mov byte [rsp + rsi + 0x28], dl
lea edx, [rdi - 0x26]
mov byte [rsp + rbx + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x5a4a88
movzx edx, byte [rsp + rax + 0x14]
movzx ebx, byte [rsp + rax + 0x15]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5a4ac5
movzx edi, byte [rsp + rsi + 0x28]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x5a4a3b
jmp 0x5a4ab7
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x5a4aa1
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x5a4a95
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.0046d060
mov eax, esi
mov ecx, 8
call fcn.0046d060
nop
int3

Function at 0x5a4ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xd59cfe4c3479038f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6070705040406
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 4
xor eax, eax
jmp 0x5a4b36
movzx r8d, byte [rsp + rbx + 0x28]
sub r8d, edx
lea edx, [r8 + 0x4c]
mov byte [rsp + rsi + 0x28], dl
lea edx, [rdi + 0x4c]
mov byte [rsp + rbx + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x5a4b62
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5a4ba5
movzx edi, byte [rsp + rsi + 0x28]
sub edi, edx
cmp rbx, 8
jb 0x5a4b1a
nop
jmp 0x5a4b96
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x5a4b80
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5a4b6f
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.0046d060
mov eax, esi
mov ecx, 8
call fcn.0046d060
nop
int3
Function at 0x5a4c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x62689200e64788b3
mov qword [rsp + 0x28], rdx
movabs rdx, 0x207050703060102
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x104
xor eax, eax
jmp 0x5a4c96
movzx r8d, byte [rsp + rbx + 0x28]
sub r8d, edx
lea edx, [r8 - 0x70]
mov byte [rsp + rsi + 0x28], dl
lea edx, [rdi - 0x70]
mov byte [rsp + rbx + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x5a4cc2
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5a4d05
movzx edi, byte [rsp + rsi + 0x28]
sub edi, edx
cmp rbx, 8
jb 0x5a4c7a
nop
jmp 0x5a4cf6
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x5a4ce0
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5a4ccf
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.0046d060
mov eax, esi
mov ecx, 8
call fcn.0046d060
nop
int3

Function at 0x5a5520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x346943430c2a6113
mov qword [rsp + 0x20], rdx
movabs rdx, 0x302060500000305
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5a556d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x5a559c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5a55d7
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x66]
cmp rbx, 8
jb 0x5a5553
jmp 0x5a55cb
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5a55b5
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x5a55a9
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.0046d060
mov eax, esi
mov ecx, 8
nop
call fcn.0046d060
nop
int3

Function at 0x5a58e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a59a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5b32e97494799ef4
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x9da4935b
movabs rdx, 0x807050a030005
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x808070a09010008
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x5a5948
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x5a5977
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x5a599a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x5a592b
jmp 0x5a598e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046d060
mov eax, edi
mov ecx, 0xb
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005a58e0
Function at 0x5a7d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a7dec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xafc6c16572655451
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x6c21bdaf
movabs rdx, 0x608000601000900
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x701090705050608
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x5a7d85
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5b]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x5a7dbc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x5a7ddf
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5b]
cmp rsi, 0xb
jb 0x5a7d6b
jmp 0x5a7dd3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046d060
mov eax, edi
mov ecx, 0xb
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005a7d20

Function at 0x5a8da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a8ebd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x74fdc565915fa4dc
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xe049f7cf636eb865
mov qword [rsp + 0x43], rdx
movabs rdx, 0xa67728074e049f7
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe3746e07dedb65f9
mov qword [rsp + 0x50], rdx
movabs rdx, 0x70913091a130c00
mov qword [rsp + 0x19], rdx
movabs rdx, 0x130d070913091a13
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd1a171c14091107
mov qword [rsp + 0x23], rdx
movabs rdx, 0x18030a07050a00
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x190a1a0f1506010f
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x5a8e60
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 - 0x6b]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x5a8e8d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x5a8eb0
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x5a8e3d
jmp 0x5a8ea4
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.00467060
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0046d060
mov eax, edi
mov ecx, 0x1d
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.005a8da0
Function at 0x5ab220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ab30a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x134b5b0c5d6f4723
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4507134b5b0c5d6f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x656c64380c484e59
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0104080d0e0007
mov qword [rsp + 0x18], rdx
movabs rdx, 0x403080a070b01
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x90506040503040e
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x5ab2ad
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x2e]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x2e]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x16
jge 0x5ab2da
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5ab2fd
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x5ab290
jmp 0x5ab2f1
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046d060
mov eax, edi
mov ecx, 0x12
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005ab220

Function at 0x5ab320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ab3ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x536cf85f503a5a4e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4f4e69764165536c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x502090002090502
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x10c0c0d04090403
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x5ab38f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x24]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x24]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jge 0x5ab3bc
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5ab3df
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x5ab372
jmp 0x5ab3d3
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0046d060
mov eax, edi
mov ecx, 0xe
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005ab320
Function at 0x5ad360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ad44c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f57596c84754f6c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6c6c6f57596c8475
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6069536e536f877e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7000d04030a0b0b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3001100010a0711
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd05000204021105
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x5ad3ea
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x18
jge 0x5ad41c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5ad43f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
cmp rsi, 0x12
jb 0x5ad3d0
jmp 0x5ad433
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046d060
mov eax, edi
mov ecx, 0x12
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005ad360

Function at 0x5b43a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b4467
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x89800d70e756d2fc
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6469
movabs rdx, 0x505010004060404
mov qword [rsp + 0x18], rdx
movabs rdx, 0x703050407050505
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x5b4407
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x7c]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x7c]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x5b4437
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x5b445a
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x5b43ea
jmp 0x5b444e
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0046d060
mov eax, edi
mov ecx, 0xa
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005b43a0
Function at 0x5b4480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b4566
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x71d6826c9f8d9467
mov qword [rsp + 0x32], rdx
movabs rdx, 0x837e836e807b71d6
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb07080903090706
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x102000b0b070809
mov qword [rsp + 0x22], rdx
movabs rdx, 0x802050909000c0d
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x5b4500
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x27]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x5b4532
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5b4557
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x27]
cmp rsi, 0xe
jb 0x5b44e2
jmp 0x5b454b
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
nop
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0046d060
mov eax, edi
mov ecx, 0xe
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005b4480

Function at 0x5b5520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b55fd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe152623deae3574d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xde52c5daad54e152
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60c0401020a0d09
mov qword [rsp + 0x18], rdx
movabs rdx, 0x706060c0401020a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb0403080808010c
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x5b55a0
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x5b55cd
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5b55f0
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x5b5582
jmp 0x5b55e4
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0046d060
mov eax, edi
mov ecx, 0xe
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.005b5520