joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5cdb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cdc7c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6ed570f774f10cf7
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7b779836ed570f7
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf5ee6c6f74a7dffd
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa01130d110c0e02
mov qword [rsp + 0x18], rdx
movabs rdx, 0x10801080a01130d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6040c12010b02
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x5cdc10
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x56]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x14
jge 0x5cdc48
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5cdc6f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x56]
nop word [rax + rax]
cmp rsi, 0x14
jb 0x5cdbf6
jmp 0x5cdc63
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457d20
mov eax, edi
mov ecx, 0x14
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.005cdb80

Function at 0x5cf140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cf22b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x430cfc8219256eb2
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa012182b1c076d28
mov qword [rsp + 0x24], rdx
movabs rdx, 0x603020a0a0f0604
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5000d0b0603020a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20c08080e030c05
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5cf1c4
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x14
jge 0x5cf1f7
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x5cf21e
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x5cf1a7
jmp 0x5cf212
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457d20
mov eax, edi
mov ecx, 0x10
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005cf140
Function at 0x5d1180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d1268
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xb9c563936e6e6fbb
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf9fa8d7f98d6d9f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb08060d080f0c0a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0b070000000b08
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0e0f000d04080d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5d1201
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x43]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x5d1233
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5d125b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x43]
cmp rsi, 0x10
jb 0x5d11e7
jmp 0x5d124f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457d20
mov eax, edi
mov ecx, 0x10
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005d1180

Function at 0x5d2480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d255c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x1825bc74611f72ff
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa142209d28111825
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20808050a0c0d00
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0a0b0907060c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5d24f5
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x65]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x65]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x5d2528
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5d254f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x5d24d8
jmp 0x5d2543
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457d20
mov eax, edi
mov ecx, 0xe
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.005d2480
Function at 0x5d3de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d3ec8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6fdb90b3bfd2b544
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x896fbc236e6f786f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20808020b080806
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x108040c02080802
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0408030e050403
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5d3e61
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x5d3e93
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5d3ebb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3d]
cmp rsi, 0xf
jb 0x5d3e47
jmp 0x5d3eaf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457d20
mov eax, edi
mov ecx, 0xf
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005d3de0

Function at 0x5d43a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d44b2
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x58451a43201d525d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5b2a5f5b440b5076
mov qword [rsp + 0x21], rdx
movabs rdx, 0x745b2a5f5b440b50
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5773675e38727449
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30a0511030e0c14
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4110d1511110c02
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1090e0e070b0411
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14010300070f0c00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5d4451
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x33]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x33]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x5d447e
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5d44a5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x5d4434
jmp 0x5d4499
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457d20
mov eax, edi
mov ecx, 0x19
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005d43a0
Function at 0x5d4aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d4bc6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x14134e464222cda
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x362b2e30f5683b40
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa177b61d362b2e30
mov qword [rsp + 0x26], rdx
movabs rdx, 0x576e6f1cf7612969
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x18180c040c131812
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe0218180c040c13
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd01000b10151108
mov qword [rsp + 0x40], rdx
movabs rdx, 0x18090608050c070f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40f0b000f17060f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5d4b60
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x22
jge 0x5d4b8d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5d4bb4
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x5d4b43
jmp 0x5d4ba8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.00444d40
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457d20
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005d4aa0

Function at 0x5d4e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d4f36
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x4f726946b16eccc4
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc88549ecc4aad074
mov qword [rsp + 0x22], rdx
movabs rdx, 0xdf6fc88549ecc4aa
mov qword [rsp + 0x24], rdx
movabs rdx, 0x57bc3469c1313edc
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x131407120c0d0013
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1112010e17000909
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf0314151112010e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb13180c01180a00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5d4ece
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5d4f02
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5d4f29
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x1a
jb 0x5d4eb4
nop
jmp 0x5d4f1d
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457d20
mov eax, edi
mov ecx, 0x1a
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.005d4e20
Function at 0x5d4f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d504b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7aad696d876e698f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9665b6dc91c3e2d7
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb00060c000800
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc06090d070f000b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3090a0d00040d0a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5d4fe4
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x13]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x13]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x16
jge 0x5d5017
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x5d503e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x5d4fc7
jmp 0x5d5032
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457d20
mov eax, edi
mov ecx, 0x10
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005d4f60
Function at 0x5d6300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d63e8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xf545c12773751641
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x65c86946300be2f5
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd07080609050701
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70a0d0708060905
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa06050409060100
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5d6381
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x20]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x12
jge 0x5d63b3
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5d63db
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x20]
cmp rsi, 0xf
jb 0x5d6367
jmp 0x5d63cf
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457d20
mov eax, edi
mov ecx, 0xf
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005d6300

Function at 0x5d69c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d6a9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xd2e23a8f40cbb447
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x79c9c9d2e23a8f40
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1070600040303
mov qword [rsp + 0x28], rdx
movabs rdx, 0x203080901040508
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5d6a32
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x75]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x5d6a68
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5d6a8f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x75]
nop dword [rax]
cmp rsi, 0xb
jb 0x5d6a18
jmp 0x5d6a83
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457d20
mov eax, edi
mov ecx, 0xb
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.005d69c0
Function at 0x5d7e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d7f5c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x651172358e22cd47
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x69fcd7b865117235
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5779b4b9be63bc2d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60209090404010f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4040c0608110602
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30a0d0610020a06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5d7ef0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x67]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x5d7f28
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5d7f4f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x67]
nop word [rax + rax]
cmp rsi, 0x14
jb 0x5d7ed6
jmp 0x5d7f43
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457d20
mov eax, edi
mov ecx, 0x14
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.005d7e60

Function at 0x5d8fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d90d6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x49ef6c148f2b3f47
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9cc613272fb02a5
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd9db09cc613272fb
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65a0646e2f0628dd
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0a0e1501030801
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc02060a01100603
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1804030910111412
mov qword [rsp + 0x48], rdx
movabs rdx, 0x131110010414150f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5d906e
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x26]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x5d90a2
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5d90c9
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x26]
cmp rsi, 0x1a
jb 0x5d9054
nop
jmp 0x5d90bd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.00444d40
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457d20
mov eax, edi
mov ecx, 0x1a
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.005d8fc0
Function at 0x5dcb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5dcc52
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x18639272e3742f47
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6e1f47cfebe712bf
mov qword [rsp + 0x20], rdx
movabs rdx, 0x53eb6e1f47cfebe7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7851bb386937e667
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa16080e05160807
mov qword [rsp + 0x32], rdx
movabs rdx, 0x905180d010a0109
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb130c0c14080905
mov qword [rsp + 0x40], rdx
movabs rdx, 0x181708030d10120d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5dcbf1
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x4b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1e
jge 0x5dcc1e
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5dcc45
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x5dcbd4
jmp 0x5dcc39
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457d20
mov eax, edi
mov ecx, 0x1a
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005dcb40

Function at 0x5dcc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5dcd76
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xa1b0bedca29f2e47
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x74659412046f4364
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc474659412046f43
mov qword [rsp + 0x26], rdx
movabs rdx, 0x737574617453acc3
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1030b0111021012
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb0d070d070c0406
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x2050b0d070d070c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120b0c030206020d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5dcd0e
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x45]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1a
jge 0x5dcd42
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5dcd69
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x45]
cmp rsi, 0x19
jb 0x5dccf4
nop
jmp 0x5dcd5d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457d20
mov eax, edi
mov ecx, 0x19
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.005dcc60
Function at 0x5dfe20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5dff52
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x950ed0fafa0f6547
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20614eff7cd40be1
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7d3eaefb846d9df
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x12d76dfff7656d75
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1f1c071b0c090b0f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf1b02060803090b
mov qword [rsp + 0x44], rdx
movabs rdx, 0xf0411170f1b0206
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4041f0a1404141c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1503101517090a16
mov qword [rsp + 0x58], rdx
movabs rdx, 0x4031309150b1e05
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x5dfeec
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x56]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x2c
jge 0x5dff1e
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x5dff45
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x56]
cmp rsi, 0x20
jb 0x5dfed2
jmp 0x5dff39
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.00444d40
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
call fcn.00457d20
mov eax, edi
mov ecx, 0x20
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005dfe20

Function at 0x5e1a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e1b08
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x3e23730d176394d
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x57
movabs rdx, 0x401070401060307
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x503
xor eax, eax
jmp 0x5e1aa3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x5e1ad0
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x5e1afb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x5e1a86
jmp 0x5e1aef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00457d20
mov eax, edi
mov ecx, 9
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005e1a40
Function at 0x5e21c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e22e6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x76afa95174cb7a71
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc7d6a18280439486
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9a74c7d6a1828043
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9eae94b4748eea6f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x600010207080f05
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1405060001020708
mov qword [rsp + 0x38], rdx
movabs rdx, 0x17180f130c0b0e00
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1130f0916090013
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11170e1413090d19
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5e2280
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
mov byte [rsp + rdi + 0x1c], r9b
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x5e22ad
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5e22d4
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1a
jb 0x5e2263
jmp 0x5e22c8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.00444d40
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457d20
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005e21c0

Function at 0x5e2300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e23eb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x336e739f636f72f0
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x93b6903a080ffa33
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa0604060e060a0c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x60b0d0b0a060406
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9000d090e080b09
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5e2384
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x71]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x71]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x14
jge 0x5e23b7
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x5e23de
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x5e2367
jmp 0x5e23d2
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457d20
mov eax, edi
mov ecx, 0xf
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005e2300