joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5e2c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e2d16
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xdb75b61ece29fe51
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x77cd65ccd872306c
mov qword [rsp + 0x22], rdx
movabs rdx, 0xec1377cd65ccd872
mov qword [rsp + 0x24], rdx
movabs rdx, 0xcd656d444e654a61
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70b0c04110c1613
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1190905130f0204
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x205131001190905
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc131019030e1604
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5e2cae
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5e2ce2
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5e2d09
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
cmp rsi, 0x1a
jb 0x5e2c94
nop
jmp 0x5e2cfd
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457d20
mov eax, edi
mov ecx, 0x1a
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.005e2c00

Function at 0x5e4e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e4f4b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xcfcc23694637cccc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2e74a97d3469c6c1
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80b0f050702050c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf00080b0f050702
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0d090701060508
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5e4ee4
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x5e4f17
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x5e4f3e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x5e4ec7
jmp 0x5e4f32
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457d20
mov eax, edi
mov ecx, 0x10
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005e4e60
Function at 0x5e9840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e991c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x55f8d90474326956
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb72c0b086e55f8d9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x60b05040a0c0c05
mov qword [rsp + 0x28], rdx
movabs rdx, 0x602090a0a060a02
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5e98b2
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x5e98e8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5e990f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
nop dword [rax]
cmp rsi, 0xd
jb 0x5e9898
jmp 0x5e9903
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457d20
mov eax, edi
mov ecx, 0xd
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.005e9840

Function at 0x5eae40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5eaf0b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x74b59d73c2181454
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x652a69d4
movabs rdx, 0x302010806060501
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0xa010602
xor eax, eax
jmp 0x5eaea7
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 0x5d]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 0x5d]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x5eaed7
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xc
jae 0x5eaefe
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x5eae8a
jmp 0x5eaef2
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457d20
mov eax, edi
mov ecx, 0xc
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005eae40
Function at 0x5eb540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5eb61c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xe30abfa47374bfd4
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd0666e497465e30a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70606030105040d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x307000d000d0006
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5eb5b5
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x5eb5e8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5eb60f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x5eb598
jmp 0x5eb603
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457d20
mov eax, edi
mov ecx, 0xe
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.005eb540

Function at 0x5ec480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ec588
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x7319531c65fb224d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x666e176daac27319
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6ef7bec261f21b25
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb10021002090109
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x806001413130b08
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf01080600141313
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120b0e1314041412
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5ec522
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x77]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1a
jge 0x5ec54f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5ec57b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x5ec505
jmp 0x5ec56f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457d20
mov eax, edi
mov ecx, 0x16
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005ec480
Function at 0x5ec9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5eca9c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xfa65a06544bb74d5
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x74afb98e4621fa65
mov qword [rsp + 0x20], rdx
movabs rdx, 0x65f6c11f006ed08d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf121100020b1214
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1211110c0c080007
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50e140e000a130e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5eca30
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x58]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x18
jge 0x5eca68
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5eca8f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x58]
nop word [rax + rax]
cmp rsi, 0x16
jb 0x5eca16
jmp 0x5eca83
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457d20
mov eax, edi
mov ecx, 0x16
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.005ec9a0
Function at 0x5ee9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5eeabc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2246675a69562653
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5a56513e1e20f422
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4020a0e0b0b0e09
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb07070d010c0d08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5eea52
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x5eea88
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5eeaaf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
nop dword [rax]
cmp rsi, 0xf
jb 0x5eea38
jmp 0x5eeaa3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457d20
mov eax, edi
mov ecx, 0xf
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.005ee9e0

Function at 0x5f0360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f04a8
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x9a162aeb9d06a455
mov qword [rsp + 0x19], rdx
movabs rdx, 0x11fe713159a162a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6168f765edf776ef
mov qword [rsp + 0x26], rdx
movabs rdx, 0xfe429699fffe56e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x736ed069e00911d1
mov qword [rsp + 0x36], rdx
movabs rdx, 0x61e1a1a0718051e
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x8030109160b1f1c
mov qword [rsp + 0x46], rdx
movabs rdx, 0x160f08030109160b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x41b0620171e1018
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7020f0c121d1908
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd090a2208171c0a
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x5f0440
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2a
jge 0x5f0472
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x5f049b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
cmp rsi, 0x25
jb 0x5f0422
jmp 0x5f048f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x25
call fcn.00457d20
mov eax, edi
mov ecx, 0x25
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005f0360
Function at 0x5f04c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f05ab
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4e32b0b9a0de90af
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb01245ffb8614e32
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc09030106000205
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa090c0903010600
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0a0d050a000409
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5f0544
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x12
jge 0x5f0577
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x5f059e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x5f0527
jmp 0x5f0592
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457d20
mov eax, edi
mov ecx, 0xe
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005f04c0

Function at 0x5f0660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f0772
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x4215cb0fda74d353
mov qword [rsp + 0x18], rdx
movabs rdx, 0x331d72441e167775
mov qword [rsp + 0x20], rdx
movabs rdx, 0x29a2331d72441e16
mov qword [rsp + 0x22], rdx
movabs rdx, 0xfff069f909346ece
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe1110151218030e
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf19010505090604
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1516090106010f19
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf15141809050b0a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5f0711
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x65]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x65]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1e
jge 0x5f073e
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5f0765
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x5f06f4
jmp 0x5f0759
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457d20
mov eax, edi
mov ecx, 0x1a
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005f0660
Function at 0x5f1640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f1768
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x4342fd59f174652a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1e65f93118aa0872
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc06e0b4dd7691e65
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x13b1b0b73102ee1
mov qword [rsp + 0x32], rdx
movabs rdx, 0x151b04061a171c0c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x12041200000b151b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30f06130317040a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d0c0500180f120d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x4091105161b131d
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5f1700
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x37]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x26
jge 0x5f1732
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x5f175b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x37]
cmp rsi, 0x1e
jb 0x5f16e3
jmp 0x5f174f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00457d20
mov eax, edi
mov ecx, 0x1e
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005f1640

Function at 0x5f1980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f1aa6
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xace044eab12ab053
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x72dc7911d174ebbd
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3b65eb6972dc7911
mov qword [rsp + 0x28], rdx
movabs rdx, 0x74091e2b94896e92
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1717060811180916
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0e19110c060909
mov qword [rsp + 0x40], rdx
movabs rdx, 0x190e030417071419
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a14021613090e01
mov qword [rsp + 0x50], rdx
movabs rdx, 0x30817030b040e04
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5f1a40
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x6c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x6c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x28
jge 0x5f1a6d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5f1a94
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x5f1a23
jmp 0x5f1a88
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.00444d40
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457d20
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005f1980
Function at 0x5f2920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f2a48
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x97ba797dd8746553
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd36369f0230d7490
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0abaa339d74d363
mov qword [rsp + 0x28], rdx
movabs rdx, 0x57989f9d72e52684
mov qword [rsp + 0x30], rdx
movabs rdx, 0x18180c170b030312
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7140c0a0f1a030f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b150c1705100a04
mov qword [rsp + 0x48], rdx
movabs rdx, 0x120c130c06121808
mov qword [rsp + 0x50], rdx
movabs rdx, 0x71a030b16171c11
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5f29e0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x5f2a12
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x5f2a3b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0x1e
jb 0x5f29c3
jmp 0x5f2a2f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00457d20
mov eax, edi
mov ecx, 0x1e
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005f2920

Function at 0x5f43c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f44c8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x53cacd117fc6651a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x7463653b09e17465
mov qword [rsp + 0x20], rdx
movabs rdx, 0xbb1eca86762f8838
mov qword [rsp + 0x28], rdx
movabs rdx, 0x100b110014051603
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1713020315061604
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0005001711040b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa10001112101605
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5f4462
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x44]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x44]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x20
jge 0x5f448f
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5f44bb
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x18
jb 0x5f4445
jmp 0x5f44af
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457d20
mov eax, edi
mov ecx, 0x18
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005f43c0
Function at 0x5f44e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f45f2
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x53aecf701e74bc53
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7451656cbcb43265
mov qword [rsp + 0x25], rdx
movabs rdx, 0x377451656cbcb432
mov qword [rsp + 0x26], rdx
movabs rdx, 0x399c6576b972ca2a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1406110e010b0309
mov qword [rsp + 0x36], rdx
movabs rdx, 0x5180e1405101712
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x140605180e140510
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1106050a090e0314
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5f4591
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x4b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x5f45be
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5f45e5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x5f4574
jmp 0x5f45d9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457d20
mov eax, edi
mov ecx, 0x19
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005f44e0

Function at 0x5f4a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f4b56
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x666a3f656f676569
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7f446e45666a3f65
mov qword [rsp + 0x20], rdx
movabs rdx, 0x67447f7072577133
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb060c01050a0410
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe010813120201
mov qword [rsp + 0x38], rdx
movabs rdx, 0x131011031106070d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5f4af3
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x18]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x18]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x5f4b22
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5f4b49
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x5f4ad6
nop
jmp 0x5f4b3d
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457d20
mov eax, edi
mov ecx, 0x14
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.005f4a60
Function at 0x5f5320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f5408
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x262873650a2bf72d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2431c26e69e73aec
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3030e090601070d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa08020603030e09
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0f0f080e080007
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5f53a1
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x14
jge 0x5f53d3
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5f53fb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0x10
jb 0x5f5387
jmp 0x5f53ef
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457d20
mov eax, edi
mov ecx, 0x10
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005f5320

Function at 0x5f6ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f6dd6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x52726c7355644947
mov qword [rsp + 0x30], rdx
movabs rdx, 0x693b425e3e366f0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5779391d2144654f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0b0c150a0e1214
mov qword [rsp + 0x18], rdx
movabs rdx, 0x70d070c1001080c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x100512070e020213
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x5f6d73
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
cmp rax, 0x18
jge 0x5f6da2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5f6dc9
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x18
jb 0x5f6d56
nop
jmp 0x5f6dbd
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457d20
mov eax, edi
mov ecx, 0x18
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.005f6ce0