joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5d8660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d8798
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x690b70e974ccf88d
mov qword [rsp + 0x4f], rdx
movabs rdx, 0xa690b70e974ccf8
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb526b1aaa87223b3
mov qword [rsp + 0x58], rdx
movabs rdx, 0x99c77db30f646165
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb8d6bea1c1d3c462
mov qword [rsp + 0x68], rdx
movabs rdx, 0xa1d091d20061e1a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4052001051d1a01
mov qword [rsp + 0x27], rdx
movabs rdx, 0x14161e0e20020008
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xd080d0f0c051510
mov qword [rsp + 0x37], rdx
movabs rdx, 0xd17181d1a1c1d0d
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x161b1f020a020800
mov qword [rsp + 0x47], rdx
xor eax, eax
jmp 0x5d8738
movzx r9d, byte [rsp + rsi + 0x4f]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x4f], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x4f], dl
add rax, 2
cmp rax, 0x30
jge 0x5d8768
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x5d878b
movzx r8d, byte [rsp + rdi + 0x4f]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x21
jb 0x5d871b
jmp 0x5d877f
xor eax, eax
lea rbx, [rsp + 0x4f]
mov ecx, 0x21
call fcn.00467060
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.0046d060
mov eax, edi
mov ecx, 0x21
call fcn.0046d060
nop
call fcn.0046ad80
nop dword [rax]
jmp fcn.005d8660

Function at 0x5da1e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5da2ac
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3f540928234b544c
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xe45
movabs rdx, 0x204050209060904
mov qword [rsp + 0x18], rdx
movabs rdx, 0x702020301010204
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x5da244
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x13]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
cmp rax, 0xe
jge 0x5da27c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x5da29f
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x13]
cmp rsi, 0xa
jb 0x5da22a
jmp 0x5da293
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0046d060
mov eax, edi
mov ecx, 0xa
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005da1e0
Function at 0x5dd580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5dd69d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2e26011772654441
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xef443e384c2b2a3e
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1cdbef443e384c2b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x101d6d1442c50d24
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1905041510190a18
mov qword [rsp + 0x18], rdx
movabs rdx, 0x130e06160c141905
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe0d080c0f081912
mov qword [rsp + 0x26], rdx
movabs rdx, 0x110c07101601060b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x12080908140a0c00
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x5dd640
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 0x4c]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 0x4c]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x5dd66d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5dd690
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x5dd61d
jmp 0x5dd684
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00467060
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0046d060
mov eax, edi
mov ecx, 0x1a
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.005dd580

Function at 0x5dd760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5dd82c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x136e6f432e1b6552
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x57253a13
movabs rdx, 0x307030a0808070a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa090a0802090307
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x5dd7c5
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x14]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x5dd7fc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x5dd81f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x14]
cmp rsi, 0xc
jb 0x5dd7ab
jmp 0x5dd813
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0046d060
mov eax, edi
mov ecx, 0xc
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005dd760
Function at 0x5e5a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e5b5a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xda631a7225e01553
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x211b1e72977a3dc8
mov qword [rsp + 0x46], rdx
movabs rdx, 0x5326211b1e72977a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xfd94ddcea3783428
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10a031918140207
mov qword [rsp + 0x18], rdx
movabs rdx, 0x13160a151210010a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd05151401071518
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe091513020f080f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1817070a0e07180b
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x5e5af7
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x35]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x26
jge 0x5e5b29
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5e5b4d
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x35]
cmp rsi, 0x1a
jb 0x5e5add
jmp 0x5e5b41
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00467060
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0046d060
mov eax, edi
mov ecx, 0x1a
call fcn.0046d060
nop
call fcn.0046ad80
nop
jmp fcn.005e5a40

Function at 0x5e6ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e6fbd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb061a069aa960695
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa6b700636fc30965
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0f03030209000d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf010d0f03030209
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa02000507010e0f
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x5e6f60
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x39]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x39]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x5e6f8d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5e6fb0
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x5e6f42
jmp 0x5e6fa4
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0046d060
mov eax, edi
mov ecx, 0x10
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.005e6ee0
Function at 0x5e7b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e7c08
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x72278e74edf6abac
mov qword [rsp + 0x37], rdx
movabs rdx, 0xc6124721192cca5
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x410c6124721192cc
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1dbede6269721c6e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x20316090a030f01
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x11060d080011170d
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf05091211060d08
mov qword [rsp + 0x27], rdx
movabs rdx, 0x18160d0b0d000f18
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x5e7bab
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 + 0x72]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1c
jge 0x5e7bd8
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5e7bfb
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x5e7b8e
jmp 0x5e7bef
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0046d060
mov eax, edi
mov ecx, 0x19
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005e7b00

Function at 0x5e8cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e8d8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf3ea33117472ff16
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6d779726575f3ea
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50601040d0c0007
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1040500010d0506
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x5e8d2f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x5e8d5c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5e8d7f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x5e8d12
jmp 0x5e8d73
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0046d060
mov eax, edi
mov ecx, 0xe
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005e8cc0
Function at 0x5e8da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e8e7d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfd6ce57ea572a8db
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x6bccfaa4ccfd6ce5
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3080b0a08000704
mov qword [rsp + 0x19], rdx
movabs rdx, 0x40103080b0a0800
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x50b01090a0b05
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x5e8e20
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x26]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x26]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x5e8e4d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5e8e70
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x5e8e02
jmp 0x5e8e64
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.0046d060
mov eax, edi
mov ecx, 0xd
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.005e8da0

Function at 0x5eca00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ecafb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x535f7c6470726b7b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5e5f49755e746783
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6d55886f615e726a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb1415150c050004
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5100e120b010602
mov qword [rsp + 0x24], rdx
movabs rdx, 0x160f080805100e12
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe09061403051517
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5eca99
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1a]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5ecacb
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5ecaee
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1a]
cmp rsi, 0x18
jb 0x5eca7f
jmp 0x5ecae2
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.0046d060
mov eax, edi
mov ecx, 0x18
call fcn.0046d060
nop
nop dword [rax + rax]
call fcn.0046ad80
jmp fcn.005eca00
Function at 0x5edfc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x5ee147
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0x6150736fa3d6c69e
mov qword [rsp + 0x61], rdx
movabs rdx, 0x6f5465d28b5784ad
mov qword [rsp + 0x69], rdx
movabs rdx, 0x76cc74bd0280526f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x24886fdee6ab97cd
mov qword [rsp + 0x78], rdx
movabs rdx, 0x69bb5f51c0e6b1d6
mov qword [rsp + 0x80], rdx
movabs rdx, 0x9a75b95fb1cb7580
mov qword [rsp + 0x88], rdx
movabs rdx, 0x222b0a1e231f1708
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x282e2302222b0a1e
mov qword [rsp + 0x21], rdx
movabs rdx, 0x32e292b1f251701
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1c1f1901252b0a2c
mov qword [rsp + 0x31], rdx
movabs rdx, 0x170223292125122a
mov qword [rsp + 0x39], rdx
movabs rdx, 0xc0a1d001a280223
mov qword [rsp + 0x41], rdx
movabs rdx, 0x2519090b29272013
mov qword [rsp + 0x49], rdx
movabs rdx, 0x250a1811082a2c2c
mov qword [rsp + 0x51], rdx
movabs rdx, 0x2c1b0a0121282b15
mov qword [rsp + 0x59], rdx
xor eax, eax
jmp 0x5ee0e2
movzx r9d, byte [rsp + rsi + 0x61]
sub r9d, edx
lea edx, [r9 + 0xf]
mov byte [rsp + rdi + 0x61], dl
lea edx, [r8 + 0xf]
mov byte [rsp + rsi + 0x61], dl
add rax, 2
cmp rax, 0x44
jge 0x5ee10f
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x5ee13a
movzx r8d, byte [rsp + rdi + 0x61]
sub r8d, edx
cmp rsi, 0x2f
jb 0x5ee0c5
jmp 0x5ee12e
xor eax, eax
lea rbx, [rsp + 0x61]
mov ecx, 0x2f
nop dword [rax + rax]
call fcn.00467060
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.0046d060
mov eax, edi
mov ecx, 0x2f
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005edfc0

Function at 0x5f0bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f0c9d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x723fc5242172e807
mov qword [rsp + 0x31], rdx
movabs rdx, 0x28060a463c181872
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe010509060d05
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa08030d000e0105
mov qword [rsp + 0x21], rdx
movabs rdx, 0x30d0b050a040c05
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x5f0c40
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 + 0x3f]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x5f0c6d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5f0c90
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x5f0c22
jmp 0x5f0c84
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0046d060
mov eax, edi
mov ecx, 0xf
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.005f0bc0
Function at 0x5f1040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f112c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x79dae5974da0cc47
mov qword [rsp + 0x36], rdx
movabs rdx, 0x11d379dae5974da0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5765ec61dddd9ed5
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10b0908020a0f09
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2060605020c060d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40b070d09050f0d
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x5f10ca
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x18
jge 0x5f10fc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5f111f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 0x12
jb 0x5f10b0
jmp 0x5f1113
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046d060
mov eax, edi
mov ecx, 0x12
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005f1040

Function at 0x5f3c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f3d48
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4369b5967589652f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x64ba294746b1d96c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x6f20e7d464ba2947
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130a45656d614e9c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa020e100b021404
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1b14100904040505
mov qword [rsp + 0x20], rdx
movabs rdx, 0x120e100d1b141009
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb051111020a1a00
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x5f3ceb
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x77]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x1c
jge 0x5f3d18
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5f3d3b
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x1c
jb 0x5f3cce
jmp 0x5f3d2f
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x1c
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0046d060
mov eax, edi
mov ecx, 0x1c
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005f3c40
Function at 0x5f71e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f72fa
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1e290b7038744553
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x172d703128ece1f5
mov qword [rsp + 0x45], rdx
movabs rdx, 0x29cdad172d703128
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa26ce77b740c2014
mov qword [rsp + 0x50], rdx
movabs rdx, 0x12180e060117030d
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb0c151012180e06
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x130f010f0314031a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x515090714091211
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x12121a080a070717
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x5f7297
movzx r9d, byte [rsp + rsi + 0x3d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x3d], dl
mov byte [rsp + rsi + 0x3d], r8b
add rax, 2
cmp rax, 0x24
jge 0x5f72c9
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x5f72ed
movzx r8d, byte [rsp + rdi + 0x3d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0x1b
jb 0x5f727d
jmp 0x5f72e1
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.00467060
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1b
call fcn.0046d060
mov eax, edi
mov ecx, 0x1b
call fcn.0046d060
nop
call fcn.0046ad80
nop
jmp fcn.005f71e0

Function at 0x5fa640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5fa73d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x866e67b27b746553
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x60bd84735d866e67
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5765969b9d919e78
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3050507100e070f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x40a130f0c050411
mov qword [rsp + 0x27], rdx
movabs rdx, 0xb100e08040a130f
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x10080312110a0d0d
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x5fa6e0
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x5fa70d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5fa730
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x5fa6bf
jmp 0x5fa724
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0046d060
mov eax, edi
mov ecx, 0x15
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.005fa640
Function at 0x5faa20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5fab0c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f0636ff65344853
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf14616596f0636ff
mov qword [rsp + 0x38], rdx
movabs rdx, 0x253b613b3b654b6c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0b1304120d0b05
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1302080f05020f0b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10131009040b0613
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x5faaaa
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 8]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x16
jge 0x5faadc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5faaff
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 8]
cmp rsi, 0x14
jb 0x5faa90
jmp 0x5faaf3
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0046d060
mov eax, edi
mov ecx, 0x14
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005faa20

Function at 0x5fbaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5fbb9d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x32392c6f424cf6fd
mov qword [rsp + 0x35], rdx
movabs rdx, 0x2a1e4732392c6f42
mov qword [rsp + 0x38], rdx
movabs rdx, 0x481a6455ec2f24c5
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2120d0e0b120011
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd050a0008020107
mov qword [rsp + 0x21], rdx
movabs rdx, 0x6070c030d050a00
mov qword [rsp + 0x25], rdx
movabs rdx, 0x50f060800110908
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x5fbb40
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x5fbb6d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5fbb90
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x5fbb1f
jmp 0x5fbb84
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0046d060
mov eax, edi
mov ecx, 0x13
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.005fbaa0