joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5a9540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x5a96c9
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x605e17f1769567b4
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x4020f63a69637f61
mov qword [rsp + 0x23], rdx
movabs rdx, 0x17451374614020f6
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1b5767203d685f68
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7e3920906f2023ff
mov qword [rsp + 0x38], rdx
movabs rdx, 0x17353e42811c6562
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1232a1204012c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa0f0926130d011c
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd0015141e1c1d13
mov qword [rsp + 0x58], rdx
movabs rdx, 0x171702162b291215
mov qword [rsp + 0x60], rdx
movabs rdx, 0x141b16210c1a2927
mov qword [rsp + 0x68], rdx
movabs rdx, 0xf24172106070318
mov qword [rsp + 0x70], rdx
movabs rdx, 0x5050d281b260215
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x5a964a
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x3f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x38
jge 0x5a9682
movzx edx, byte [rsp + rax + 0x48]
lea rsi, [rax + 1]
cmp rsi, 0x38
jae 0x5a96bb
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x5a96af
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x2d
jb 0x5a962d
nop
jmp 0x5a96a3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x2d
call fcn.00443880
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00456360
mov eax, edi
mov ecx, 0x2d
call fcn.00456360
mov rax, rsi
mov ecx, 0x38
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.005a9540

Function at 0x5bd500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bd60b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7759564b726f6a42
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x527759564b726f6a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4c715b5494536f6a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80d0709020a030c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0e090f080d0709
mov qword [rsp + 0x30], rdx
movabs rdx, 0x203050502010103
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5bd593
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 4]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 4]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x5bd5ca
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x5bd5fd
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5bd5f1
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x5bd576
jmp 0x5bd5e5
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00443880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456360
mov eax, edi
mov ecx, 0x11
call fcn.00456360
mov rax, rsi
mov ecx, 0x14
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.005bd500
Function at 0x5c2280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c2393
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6efe7372f1530842
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6735064c65744c6e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x72e7475520480848
mov qword [rsp + 0x28], rdx
movabs rdx, 0x15120614080f140c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10010301120d0602
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1114010d15100003
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5c2310
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x5c234d
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
nop
cmp rsi, 0x18
jae 0x5c2385
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5c2374
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0x17
jb 0x5c22f6
jmp 0x5c2368
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00443880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456360
mov eax, edi
mov ecx, 0x17
nop dword [rax + rax]
call fcn.00456360
mov rax, rsi
mov ecx, 0x18
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.005c2280

Function at 0x5c23a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c24d3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xadb773ae71927243
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xaa9ea6a6888f6fad
mov qword [rsp + 0x26], rdx
movabs rdx, 0xce6e7c66a25468c3
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40d0c0c0e04070f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x316040d0c0c0e04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120f030f13060b07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1405090f12130702
mov qword [rsp + 0x48], rdx
movabs rdx, 0x905040e090a1204
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5c244e
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x22
jge 0x5c248d
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x22
jae 0x5c24c5
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5c24b4
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 0x17
jb 0x5c2434
jmp 0x5c24a8
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00443880
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456360
mov eax, edi
mov ecx, 0x17
nop dword [rax + rax]
call fcn.00456360
mov rax, rsi
mov ecx, 0x22
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.005c23a0
Function at 0x5c3d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c3ebf
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x316552ae38396808
mov qword [rsp + 0x18], rdx
movabs rdx, 0x20ae62310411f0ac
mov qword [rsp + 0x20], rdx
movabs rdx, 0x960e20ae62310411
mov qword [rsp + 0x22], rdx
movabs rdx, 0x22274273a9faab31
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x130b09151704000f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x140207110210130b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x91215130218130e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x17030c1908030f12
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa17071715030a0b
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5c3e40
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x14]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x26
jge 0x5c3e7c
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
cmp rsi, 0x26
jae 0x5c3eb1
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5c3ea5
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x14]
cmp rsi, 0x1a
jb 0x5c3e23
jmp 0x5c3e97
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00443880
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
nop
call fcn.00456360
mov eax, edi
mov ecx, 0x1a
call fcn.00456360
mov rax, rsi
mov ecx, 0x26
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.005c3d80

Function at 0x5c3f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c408b
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6ff30e9760659a96
mov qword [rsp + 0x30], rdx
movabs rdx, 0x32ac7a6c65686cd8
mov qword [rsp + 0x38], rdx
movabs rdx, 0x862568f0145d6e53
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd17161703140608
mov qword [rsp + 0x18], rdx
movabs rdx, 0x140e011617001217
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1416041417050d13
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x5c4013
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x76]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
cmp rax, 0x18
jge 0x5c404a
movzx edx, byte [rsp + rax + 0x18]
lea rsi, [rax + 1]
cmp rsi, 0x18
jae 0x5c407d
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5c4071
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x18
jb 0x5c3ff6
jmp 0x5c4065
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.00443880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456360
mov eax, edi
mov ecx, 0x18
call fcn.00456360
mov rax, rsi
mov ecx, 0x18
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.005c3f80
Function at 0x5d51e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d52b8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x909a94a8aa88467c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x203010006070706
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5020204
xor eax, eax
jmp 0x5d5240
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x14]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x5d5277
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x5d52aa
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x5d529e
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 8
jb 0x5d5222
jmp 0x5d5292
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00443880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00456360
mov eax, edi
mov ecx, 8
call fcn.00456360
mov rax, rsi
mov ecx, 0xc
call fcn.00456360
nop
call fcn.00453c40
nop dword [rax]
jmp fcn.005d51e0

Function at 0x5d6460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x5d6626
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
movabs rdx, 0x160563001aa5af1d
mov qword [rsp + 0x19], rdx
movabs rdx, 0xeca6034884c9182c
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa9eca6034884c918
mov qword [rsp + 0x22], rdx
movabs rdx, 0xda7eb2e465019246
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb9bd53504453d9e8
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc26f680d6e1508fe
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xbe0a6f1c98da2b74
mov qword [rsp + 0x42], rdx
movabs rdx, 0xb9b6747369ecf088
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2c3825030a100d23
mov qword [rsp + 0x52], rdx
movabs rdx, 0x10372217092f2a2c
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x4162a0a321037
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1a2b331323193119
mov qword [rsp + 0x68], rdx
movabs rdx, 0x162810300b160e01
mov qword [rsp + 0x70], rdx
movabs rdx, 0xb2d2130070e282d
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1812192d0f22201f
mov qword [rsp + 0x80], rdx
movabs rdx, 0x1538181821020106
mov qword [rsp + 0x88], rdx
xor eax, eax
nop
jmp 0x5d65a0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2c]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x3e
jge 0x5d65dc
movzx edx, byte [rsp + rax + 0x52]
lea rsi, [rax + 1]
cmp rsi, 0x3e
jae 0x5d6615
movzx esi, byte [rsp + rax + 0x53]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x39
jae 0x5d6609
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2c]
cmp rsi, 0x39
jb 0x5d6582
jmp 0x5d65fd
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x39
call fcn.00443880
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov eax, esi
mov ecx, 0x39
call fcn.00456360
mov eax, edi
mov ecx, 0x39
call fcn.00456360
mov rax, rsi
mov ecx, 0x3e
nop dword [rax]
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.005d6460
Function at 0x5d7160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d726b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x926e286f6d73dc36
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa6ee926e286f6d73
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x65defe6dc912733d
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc0f080705100509
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7000a100c090c0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0d0f0001071010
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5d71f3
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x52]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x5d722a
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0x16
jae 0x5d725d
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5d7251
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x5d71d6
jmp 0x5d7245
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00443880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456360
mov eax, edi
mov ecx, 0x12
call fcn.00456360
mov rax, rsi
mov ecx, 0x16
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.005d7160

Function at 0x5d77e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d78eb
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x8b425c6e8e82675c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7365537d748b425c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8e68882e85726f9b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1407121405040d0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x301050210131202
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140a1313010d0905
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5d7873
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x5d78aa
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x18
jae 0x5d78dd
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5d78d1
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x5d7856
jmp 0x5d78c5
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00443880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456360
mov eax, edi
mov ecx, 0x15
call fcn.00456360
mov rax, rsi
mov ecx, 0x18
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.005d77e0
Function at 0x5d9120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d91ff
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x9f6895a294aa6f84
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6c88
movabs rdx, 0x302080007020405
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x705
xor eax, eax
jmp 0x5d9182
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
cmp rax, 0xa
jge 0x5d91be
movzx edx, byte [rsp + rax + 0x1c]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x5d91f1
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5d91e5
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0xa
jb 0x5d9168
jmp 0x5d91d9
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00443880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00456360
mov eax, edi
mov ecx, 0xa
call fcn.00456360
mov rax, rsi
mov ecx, 0xa
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.005d9120
Function at 0x5dea40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x48]
cmp r12, qword [r14 + 0x10]
jbe 0x5debdf
sub rsp, 0xc8
mov qword [rsp + 0xc0], rbp
lea rbp, [rsp + 0xc0]
movabs rdx, 0x45b341ce5646c753
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6d7364fc96b4425c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb1af6d7364fc96b4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9ce8f3d8d820577c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x726b75430222fc3d
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc191ff65998ac065
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x61f46d31495cec6f
mov qword [rsp + 0x42], rdx
movabs rdx, 0xd9888cd74a440b20
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x206e52089c14e765
mov qword [rsp + 0x52], rdx
movabs rdx, 0xc5f94e124279703a
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x32e352901184648
mov qword [rsp + 0x62], rdx
movabs rdx, 0x34313d061a37010b
mov qword [rsp + 0x6a], rdx
lea rdi, [rsp + 0x70]
lea rsi, [0x006cda08]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045699a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x5deb60
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x5e
jge 0x5deb97
movzx edx, byte [rsp + rax + 0x62]
lea rsi, [rax + 1]
cmp rsi, 0x5e
jae 0x5debd1
movzx esi, byte [rsp + rax + 0x63]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x4a
jae 0x5debc5
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x4a
jb 0x5deb3d
jmp 0x5debb8
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x4a
call fcn.00443880
mov rbp, qword [rsp + 0xc0]
add rsp, 0xc8
ret
mov eax, esi
mov ecx, 0x4a
nop
call fcn.00456360
mov eax, edi
mov ecx, 0x4a
call fcn.00456360
mov rax, rsi
mov ecx, 0x5e
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.005dea40

Function at 0x5df520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5df61f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x3152145754ac0647
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x342be90a1e61d05c
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0f070c01050202
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90909020e0f070c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd00020d0b07020d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5df5a4
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x14
jge 0x5df5db
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x5df611
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5df605
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x5df587
jmp 0x5df5f6
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00443880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.00456360
mov eax, edi
mov ecx, 0x10
call fcn.00456360
mov rax, rsi
mov ecx, 0x14
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.005df520
Function at 0x5dfba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5dfc78
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x747f737674688b73
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x706060304040301
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x104
xor eax, eax
nop
jmp 0x5dfc00
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 2]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x5dfc37
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x5dfc6a
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x5dfc5e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 8
jb 0x5dfbe2
jmp 0x5dfc52
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00443880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00456360
mov eax, edi
mov ecx, 8
call fcn.00456360
mov rax, rsi
mov ecx, 0xa
call fcn.00456360
nop
call fcn.00453c40
nop dword [rax]
jmp fcn.005dfba0

Function at 0x5dfca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5dfd75
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x19], 0xe78944ee
mov dword [rsp + 0x1c], 0x459873e7
movabs rdx, 0x3050203040502
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x5dfcf5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 8
jge 0x5dfd31
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x5dfd67
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 7
jae 0x5dfd5b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
cmp rsi, 7
jb 0x5dfcdb
jmp 0x5dfd4f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 7
nop dword [rax]
call fcn.00443880
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 7
call fcn.00456360
mov eax, edi
mov ecx, 7
call fcn.00456360
mov rax, rsi
mov ecx, 8
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.005dfca0
Function at 0x5e7300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e743f
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x3e4a563a20755d21
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x427257746e0e6a74
mov qword [rsp + 0x25], rdx
movabs rdx, 0x125b65427257746e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5460556f6c162246
mov qword [rsp + 0x30], rdx
movabs rdx, 0x606130919041509
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140f000902041806
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf1907140a031a01
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3060d18140f1119
mov qword [rsp + 0x50], rdx
movabs rdx, 0x130612120a131105
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5e73c0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x16]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x5e73fc
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
cmp rsi, 0x28
jae 0x5e7431
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x5e7425
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x16]
cmp rsi, 0x1b
jb 0x5e73a3
jmp 0x5e7417
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.00443880
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1b
nop
call fcn.00456360
mov eax, edi
mov ecx, 0x1b
call fcn.00456360
mov rax, rsi
mov ecx, 0x28
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.005e7300
Function at 0x5ed3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x5ed573
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
movabs rdx, 0x6162536d61653243
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x716b2c7016936361
mov qword [rsp + 0x26], rdx
movabs rdx, 0x56753f29656d5d46
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x706f736d7360642c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x245b0773fe6b6f4a
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x4c53455e70658a3c
mov qword [rsp + 0x46], rdx
movabs rdx, 0xa05b654b5c617537
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x192f001f0f012118
mov qword [rsp + 0x56], rdx
movabs rdx, 0x322d1b282e0a1905
mov qword [rsp + 0x5e], rdx
movabs rdx, 0x2213322d1b282e0a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x271b25330a142b35
mov qword [rsp + 0x68], rdx
movabs rdx, 0x130513152415322f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x28011f002c090936
mov qword [rsp + 0x78], rdx
movabs rdx, 0xa082c0d000d0927
mov qword [rsp + 0x80], rdx
movabs rdx, 0x2124161515101f0f
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x5ed4ee
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x44]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x44]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x3a
jge 0x5ed528
movzx edx, byte [rsp + rax + 0x56]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x3a
jae 0x5ed565
movzx esi, byte [rsp + rax + 0x57]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x37
jae 0x5ed555
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x37
jb 0x5ed4d1
jmp 0x5ed549
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x37
call fcn.00443880
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov eax, esi
mov ecx, 0x37
call fcn.00456360
mov eax, edi
mov ecx, 0x37
nop dword [rax]
call fcn.00456360
mov rax, rsi
mov ecx, 0x3a
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.005ed3c0