joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5d5000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d50e6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5868713f55463a54
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6f70664528655868
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa000609020b0c0b
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5040a000609020b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa0607010b050b05
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x5d5080
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 7]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x5d50b2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5d50d7
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 7]
cmp rsi, 0xe
jb 0x5d5062
jmp 0x5d50cb
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460fc0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005d5000

Function at 0x5d5a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d5afd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7561515b61245554
mov qword [rsp + 0x35], rdx
movabs rdx, 0x585a587561515b61
mov qword [rsp + 0x38], rdx
movabs rdx, 0x686c4041544c6f3d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd040d050b000205
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x31001091206040a
mov qword [rsp + 0x23], rdx
movabs rdx, 0x10d031001091206
mov qword [rsp + 0x25], rdx
movabs rdx, 0xf05050f0f060608
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x5d5aa0
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x22]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x22]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x5d5acd
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5d5af0
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x5d5a7f
jmp 0x5d5ae4
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00460fc0
mov eax, edi
mov ecx, 0x13
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.005d5a00
Function at 0x5d5cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d5e0c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x61503718c11b3ed5
mov qword [rsp + 0x51], rdx
movabs rdx, 0xb3d5ac614e68b161
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd21e048150cf4ecd
mov qword [rsp + 0x60], rdx
movabs rdx, 0xfcb35f558b6102cd
mov qword [rsp + 0x68], rdx
movabs rdx, 0x73952e4192ae9936
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1a1713001f21000c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5080f2224231a17
mov qword [rsp + 0x21], rdx
movabs rdx, 0x210f010111201619
mov qword [rsp + 0x29], rdx
movabs rdx, 0x251422201d000d03
mov qword [rsp + 0x31], rdx
movabs rdx, 0xd0e161419131d17
mov qword [rsp + 0x39], rdx
movabs rdx, 0x50304021f151a0d
mov qword [rsp + 0x41], rdx
movabs rdx, 0x1e1d180f14000c11
mov qword [rsp + 0x49], rdx
xor eax, eax
jmp 0x5d5da4
movzx r9d, byte [rsp + rsi + 0x51]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x24]
mov byte [rsp + rdi + 0x51], dl
mov byte [rsp + rsi + 0x51], r8b
add rax, 2
cmp rax, 0x36
jge 0x5d5ddc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x27
jae 0x5d5dff
movzx r8d, byte [rsp + rdi + 0x51]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x24]
cmp rsi, 0x27
jb 0x5d5d8a
jmp 0x5d5df3
xor eax, eax
lea rbx, [rsp + 0x51]
mov ecx, 0x27
call fcn.0045b720
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x27
call fcn.00460fc0
mov eax, edi
mov ecx, 0x27
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005d5cc0

Function at 0x5d75c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d76cc
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb9c717b04edfd796
mov qword [rsp + 0x36], rdx
movabs rdx, 0x9ecf446f54957574
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xf4449ecf446f5495
mov qword [rsp + 0x40], rdx
movabs rdx, 0x626537cfc6de1d72
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160e140410040f04
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x13000f17150f00
mov qword [rsp + 0x22], rdx
movabs rdx, 0x110602010013000f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1506000705070a10
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x5d7668
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5d769c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x5d76bf
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
cmp rsi, 0x1a
jb 0x5d764e
jmp 0x5d76b3
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.0045b720
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1a
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005d75c0
Function at 0x5d8000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d80dd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3f722c3347596f31
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x48654d5e463f722c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7050508020c0704
mov qword [rsp + 0x19], rdx
movabs rdx, 0x50407050508020c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x60a030208090000
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x5d8080
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x5d80ad
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5d80d0
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x5d8062
jmp 0x5d80c4
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00460fc0
mov eax, edi
mov ecx, 0xd
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.005d8000

Function at 0x5dfae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5dfbfd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x98b4bd6f75c5658c
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xf873976367dfa185
mov qword [rsp + 0x43], rdx
movabs rdx, 0x6c45741c35f87397
mov qword [rsp + 0x48], rdx
movabs rdx, 0x57736dbf726150af
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf0b0400050c1911
mov qword [rsp + 0x19], rdx
movabs rdx, 0x11020f0b0400050c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7080d19080c130c
mov qword [rsp + 0x23], rdx
movabs rdx, 0xe0a090d07111115
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x90e060906100b09
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x5dfba0
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 - 0x14]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x5dfbcd
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x5dfbf0
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x5dfb7d
jmp 0x5dfbe4
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.0045b720
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1d
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.005dfae0
Function at 0x5e0f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e101d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xdf69963475edfb53
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x152f3b0b25c4f6c4
mov qword [rsp + 0x47], rdx
movabs rdx, 0x28152f3b0b25c4f6
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe9df7434653737f0
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa0111170b020509
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7080a0111170b02
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x130f0e091001110b
mov qword [rsp + 0x27], rdx
movabs rdx, 0x15120e181008100c
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x13170e170d040707
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x5e0fc0
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 + 0x5a]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 + 0x5a]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x5e0fed
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5e1010
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x5e0f9d
jmp 0x5e1004
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.0045b720
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00460fc0
mov eax, edi
mov ecx, 0x19
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.005e0f00

Function at 0x5e1040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e1178
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x473ce5ea0e303121
mov qword [rsp + 0x47], rdx
movabs rdx, 0x65473ce5ea0e3031
mov qword [rsp + 0x48], rdx
movabs rdx, 0x52de63c4e065e12c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x27947bb2c696f2d
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe501e05a65304755
mov qword [rsp + 0x60], rdx
movabs rdx, 0x191d1d0d120f141d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x151a19160a151f04
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1a1d201d060f151a
mov qword [rsp + 0x27], rdx
movabs rdx, 0x16061f010a0c2003
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x121b09180a0516
mov qword [rsp + 0x37], rdx
movabs rdx, 0x11030204111e0c16
mov qword [rsp + 0x3f], rdx
xor eax, eax
jmp 0x5e1115
movzx r9d, byte [rsp + rsi + 0x47]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x47], dl
mov byte [rsp + rsi + 0x47], r8b
add rax, 2
cmp rax, 0x2e
jge 0x5e1148
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x5e116b
movzx r8d, byte [rsp + rdi + 0x47]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
nop
cmp rsi, 0x21
jb 0x5e10fb
jmp 0x5e115f
xor eax, eax
lea rbx, [rsp + 0x47]
mov ecx, 0x21
call fcn.0045b720
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00460fc0
mov eax, edi
mov ecx, 0x21
call fcn.00460fc0
nop
call fcn.0045ece0
nop dword [rax]
jmp fcn.005e1040
Function at 0x5e5440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e550c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6c8ea843e0daddcf
mov qword [rsp + 0x28], rdx
movabs rdx, 0x73a1b6a76e69cf64
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10c030509060900
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd0c0d020300050e
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x5e54af
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x26]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x26]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x5e54dc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5e54ff
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
cmp rsi, 0x10
jb 0x5e5492
jmp 0x5e54f3
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00460fc0
mov eax, edi
mov ecx, 0x10
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005e5440

Function at 0x5e5600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e56e6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xbecb6957f0696545
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xb766cc0c24becb69
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0308080c0a060b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7010b0308080c0a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc09010a0906070a
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x5e5680
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x5e56b2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5e56d7
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
cmp rsi, 0xd
jb 0x5e5662
jmp 0x5e56cb
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
nop
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00460fc0
mov eax, edi
mov ecx, 0xd
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005e5600
Function at 0x5e7880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e7966
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf1e758dc6fdcda49
mov qword [rsp + 0x31], rdx
movabs rdx, 0x82f5676973f6f4f1
mov qword [rsp + 0x38], rdx
movabs rdx, 0x703090d0e030408
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe090703090d0e03
mov qword [rsp + 0x21], rdx
movabs rdx, 0x206010e06050c02
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x5e7900
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x5e7932
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5e7957
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
cmp rsi, 0xf
jb 0x5e78e2
jmp 0x5e794b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460fc0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005e7880

Function at 0x5e7980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e7a7d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7f69e2dacb6fc34c
mov qword [rsp + 0x35], rdx
movabs rdx, 0x55fbdf7f69e2dacb
mov qword [rsp + 0x38], rdx
movabs rdx, 0x57e8e66fbf616ffd
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110906040a080106
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x807101002100c0e
mov qword [rsp + 0x23], rdx
movabs rdx, 0x403080710100210
mov qword [rsp + 0x25], rdx
movabs rdx, 0x8010b0e05050e06
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x5e7a20
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x69]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x69]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x5e7a4d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5e7a70
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x5e79ff
jmp 0x5e7a64
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00460fc0
mov eax, edi
mov ecx, 0x13
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.005e7980
Function at 0x5ebf60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ec05b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x756b6834bc415315
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x2d3b090147756b68
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb22e0be34e1b16e9
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd0e14050503130a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x309050d080b0f0b
mov qword [rsp + 0x25], rdx
movabs rdx, 0x911120314000309
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x40c0d090e111313
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x5ebff9
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1e]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x5ec02b
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5ec04e
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1e]
cmp rsi, 0x15
jb 0x5ebfdf
jmp 0x5ec042
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.0045b720
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460fc0
mov eax, edi
mov ecx, 0x15
call fcn.00460fc0
nop
nop dword [rax + rax]
call fcn.0045ece0
jmp fcn.005ebf60

Function at 0x5ed900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ed9c7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6f2d0f4830c24109
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x7436
movabs rdx, 0x108030002000606
mov qword [rsp + 0x18], rdx
movabs rdx, 0x402030305030108
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x5ed967
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x5ed997
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x5ed9ba
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x5ed94a
jmp 0x5ed9ae
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460fc0
mov eax, edi
mov ecx, 0xa
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005ed900
Function at 0x5f03c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f04a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe0446c4b32144355
mov qword [rsp + 0x31], rdx
movabs rdx, 0xd35e122863614ce0
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb030309080208
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd070d0e0e07000b
mov qword [rsp + 0x21], rdx
movabs rdx, 0x40901070d000c04
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x5f0440
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xe]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x5f0472
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5f0497
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xe]
cmp rsi, 0xf
jb 0x5f0422
jmp 0x5f048b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460fc0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005f03c0

Function at 0x5f04c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f058c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7499648c93928587
mov qword [rsp + 0x29], rdx
movabs rdx, 0x76c461f078206f74
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa06020d0b0e0104
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2030b0600010e06
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x5f052f
movzx r9d, byte [rsp + rsi + 0x29]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x29], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x29], dl
add rax, 2
cmp rax, 0x10
jge 0x5f055c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5f057f
movzx r8d, byte [rsp + rdi + 0x29]
sub r8d, edx
cmp rsi, 0xf
jb 0x5f0512
jmp 0x5f0573
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460fc0
mov eax, edi
mov ecx, 0xf
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005f04c0
Function at 0x5f05a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f066c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x899b8a656ea55763
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x8a6ce0c8
movabs rdx, 0x201080109020006
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x701050b09010201
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x5f0605
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x36]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x5f063c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x5f065f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x36]
cmp rsi, 0xc
jb 0x5f05eb
jmp 0x5f0653
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460fc0
mov eax, edi
mov ecx, 0xc
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005f05a0

Function at 0x5f0c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f0d1d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1a64c1acd8728320
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd1d02d20658d1a64
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0d080707010d05
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd030c0d08070701
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x508050b040b070b
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x5f0cc0
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x5f0ced
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5f0d10
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x5f0ca2
jmp 0x5f0d04
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460fc0
mov eax, edi
mov ecx, 0xe
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.005f0c40
Function at 0x5f2bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f2c86
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x111bb6bdd7df2a28
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xde09
movabs rdx, 0x402080701000905
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x3060902
xor eax, eax
jmp 0x5f2c20
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x48]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x5f2c52
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5f2c77
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x48]
cmp rsi, 0xa
jb 0x5f2c03
jmp 0x5f2c6b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460fc0
mov eax, edi
mov ecx, 0xa
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005f2bc0

Function at 0x5f2ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f2d6c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1ec5f92891166535
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xeb25db1e
movabs rdx, 0x80a060008000003
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x908070502040000
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x5f2d05
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x5f2d3c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x5f2d5f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
cmp rsi, 0xb
jb 0x5f2ceb
jmp 0x5f2d53
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460fc0
mov eax, edi
mov ecx, 0xb
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005f2ca0