joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5bcb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bcc3c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xc22569c76d1b0345
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xcb190ac22569c76d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1040a0a07080606
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa08010102090104
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5bcbd2
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x49
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x5bcc08
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5bcc2f
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x49
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x5bcbb8
jmp 0x5bcc23
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.005bcb60

Function at 0x5be0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5be1cb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x786264898f7a7449
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x858762be73a29378
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0b0d0b03010206
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80d0b0b0d0b0301
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0e090e08070401
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5be164
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x5be197
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x5be1be
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x5be147
jmp 0x5be1b2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461e80
mov eax, edi
mov ecx, 0xf
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005be0e0
Function at 0x5bef80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bf068
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6669d673a0db2989
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7845c5241d25b879
mov qword [rsp + 0x24], rdx
movabs rdx, 0x400010b02000905
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0a09050400010b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd000302030d0002
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5bf001
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x3e
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x14
jge 0x5bf032
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5bf05b
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x3e
add r8d, edx
cmp rsi, 0x10
jb 0x5befe7
jmp 0x5bf04f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461e80
mov eax, edi
mov ecx, 0x10
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005bef80

Function at 0x5bf080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bf15c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xba646483659a728e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x576fc9da49ba6464
mov qword [rsp + 0x22], rdx
movabs rdx, 0x904000a0a02070a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x909040907070904
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5bf0f2
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffffca
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x5bf128
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5bf14f
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffffca
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xd
jb 0x5bf0d8
jmp 0x5bf143
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461e80
mov eax, edi
mov ecx, 0xd
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.005bf080
Function at 0x5bf980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bfa48
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6c745359b37575a5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x205010301030100
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x304
xor eax, eax
nop
jmp 0x5bf9e0
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffe1
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5bfa11
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x5bfa3b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffe1
add r8d, edx
cmp rsi, 8
jb 0x5bf9c2
jmp 0x5bfa2f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00461e80
mov eax, edi
mov ecx, 8
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005bf980

Function at 0x5c0b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c0bd2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x667251744541d75f
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xc9cd
movabs rdx, 0x509070300010500
mov qword [rsp + 0x22], rdx
movabs rdx, 0x808050803070509
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x5c0b6a
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x7d
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x5c0b9b
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5c0bc5
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x7d
add r8d, edx
cmp rsi, 0xa
jb 0x5c0b50
jmp 0x5c0bb6
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xa
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005c0b00
Function at 0x5c19e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c1abc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6e0b636fef82a767
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x657cfe6e0b636fef
mov qword [rsp + 0x22], rdx
movabs rdx, 0x109020806020303
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x108060806090109
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5c1a55
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x5c1a88
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5c1aaf
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x5c1a38
jmp 0x5c1aa3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.005c19e0

Function at 0x5c2260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c2326
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xc67792648dc768b3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2030500070702
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x700
xor eax, eax
nop
jmp 0x5c22c0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x14]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x5c22ed
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x5c2314
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 8
jb 0x5c22a2
jmp 0x5c2308
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00461e80
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005c2260
Function at 0x5c4360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c4486
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xe408204d74a3a0dc
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x61def3f86e6d4fc1
mov qword [rsp + 0x25], rdx
movabs rdx, 0xbe61def3f86e6d4f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xaf73746a6536755c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd09150d0e110915
mov qword [rsp + 0x36], rdx
movabs rdx, 0x60d0d09150d0e11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10704000c13130c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1113011513060d04
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb18060910080402
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5c4420
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x22
jge 0x5c444d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5c4474
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x5c4403
jmp 0x5c4468
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005c4360
Function at 0x5da840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5da966
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x2f655769236322d5
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbf7600d93a052d21
mov qword [rsp + 0x22], rdx
movabs rdx, 0x67161c265afbf76
mov qword [rsp + 0x28], rdx
movabs rdx, 0xcb7902bbd0d91229
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1d01050f121c0d0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b1a0e000f171d00
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3171910011b1410
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc18120005101415
mov qword [rsp + 0x50], rdx
movabs rdx, 0x19081d0016090e1c
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5da900
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x79]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x79]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x28
jge 0x5da92d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x5da954
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x5da8e3
jmp 0x5da948
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.0044ba20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461e80
mov eax, edi
mov ecx, 0x1e
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005da840

Function at 0x5da980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5daaa6
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x2ffe762368630621
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x732e69573a8c614c
mov qword [rsp + 0x25], rdx
movabs rdx, 0xd2b3af538801a73
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x68f4613a47be3369
mov qword [rsp + 0x34], rdx
movabs rdx, 0x60419150a0e1011
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1d1b101606041915
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40e100100161814
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc1b1612131a0815
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1000040c08150010
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5daa40
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x24
jge 0x5daa6d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x5daa94
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1f
jb 0x5daa23
jmp 0x5daa88
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1f
call fcn.0044ba20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00461e80
mov eax, edi
mov ecx, 0x1f
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005da980
Function at 0x5e3140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e3248
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xb86e849ffbf94eaa
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa636e60be74a7b8
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe42515295b013ccc
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80a110a0405110f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x12040b0210041600
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x713040313071204
mov qword [rsp + 0x40], rdx
movabs rdx, 0x141305161202080e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5e31e2
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x7f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x7f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1e
jge 0x5e320f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5e323b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x17
jb 0x5e31c5
jmp 0x5e322f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461e80
mov eax, edi
mov ecx, 0x17
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005e3140

Function at 0x5e3640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e3748
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x15eac8d620584112
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa25c1f658374c215
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7a1a1b7325b66564
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa04160d04120515
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1108041506140c04
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x16150a11080415
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0c0e0c0d0807
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5e36e0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x37
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x5e3711
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5e373b
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x37
add r8d, edx
cmp rsi, 0x17
jb 0x5e36c5
jmp 0x5e372f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461e80
mov eax, edi
mov ecx, 0x17
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005e3640
Function at 0x5e3760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e3872
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x538a1ad76279e755
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x41de65207430cc23
mov qword [rsp + 0x23], rdx
movabs rdx, 0xd541de65207430cc
mov qword [rsp + 0x24], rdx
movabs rdx, 0x64253d66eb4bff64
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90705060213090f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1001010309080e0a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe120e0310010103
mov qword [rsp + 0x40], rdx
movabs rdx, 0x402091314061415
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5e3811
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x5e383e
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5e3865
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x5e37f4
jmp 0x5e3859
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005e3760
Function at 0x5fb640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5fb752
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x72af7b91a07533a1
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6593936166816c61
mov qword [rsp + 0x40], rdx
movabs rdx, 0x91639a7045652820
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3aa36ae520679aa1
mov qword [rsp + 0x50], rdx
movabs rdx, 0x181c0413061c000e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x51e0618010a0204
mov qword [rsp + 0x20], rdx
movabs rdx, 0x171d1e1f190e0500
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3181c171f1f0d15
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5fb6f1
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 + 2]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 + 2]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
cmp rax, 0x20
jge 0x5fb71e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x5fb745
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x20
jb 0x5fb6d4
jmp 0x5fb739
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x20
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x20
call fcn.00461e80
mov eax, edi
mov ecx, 0x20
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005fb640

Function at 0x5fb760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5fb892
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x727bcac36cb46e63
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4cb14a61e4ef7cdb
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9d6365c1d0652896
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8dcb387a20670bed
mov qword [rsp + 0x34], rdx
movabs rdx, 0x90614131e08110b
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x100d11181819000a
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1f001e05100d1118
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140417190b141e0e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1f0f1d14021d040e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e090411061c0813
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x5fb82c
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xffffffab
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x2c
jge 0x5fb85d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x5fb885
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xffffffab
add r8d, edx
cmp rsi, 0x20
jb 0x5fb812
jmp 0x5fb878
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.0044ba20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0x20
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005fb760
Function at 0x5fcec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5fcfd3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6a56706a4941fd61
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5e58663f34496e65
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6660116550755e58
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6c6b1a1874696c59
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe1a0c161c0f000e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa040c07031b0b1b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60715141b041302
mov qword [rsp + 0x48], rdx
movabs rdx, 0x116071300110307
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5fcf6e
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffffee
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x5fcf9f
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x5fcfc6
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffffee
add r8d, edx
cmp rsi, 0x1e
jb 0x5fcf54
jmp 0x5fcfba
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461e80
mov eax, edi
mov ecx, 0x1e
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005fcec0

Function at 0x5fdde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5fded6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6f0e48b6f7746661
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe4e6c46ff6f0e48
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6575a038763c3f50
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x11120e0c12080906
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80e040b030f1112
mov qword [rsp + 0x38], rdx
movabs rdx, 0x509090b110d0e05
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5fde73
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x3d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x3d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x5fdea2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5fdec9
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x5fde56
nop
jmp 0x5fdebd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461e80
mov eax, edi
mov ecx, 0x15
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.005fdde0
Function at 0x5fefc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ff0d2
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x70ab6e8d8a636a84
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7d55207fbd744caa
mov qword [rsp + 0x26], rdx
movabs rdx, 0x98b07d55207fbd74
mov qword [rsp + 0x28], rdx
movabs rdx, 0x732520816976916d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0b0101110e0407
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe16100a110b0b08
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc030000061210
mov qword [rsp + 0x48], rdx
movabs rdx, 0x12030a0f13090711
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5ff071
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x5ff09e
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5ff0c5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x5ff054
jmp 0x5ff0b9
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461e80
mov eax, edi
mov ecx, 0x1a
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005fefc0