joyce8/EMBER2024-capa huggingface dataset:
Function at 0x59d820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59d91b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x96ba869e5c717473
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcf5d78a1778196ba
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6e6f7576615572a2
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x40704060e0d0e0d
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb1208050c13120e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x13020a0d0b120805
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3000c090d090510
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x59d8b9
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1c
jge 0x59d8eb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x59d90e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2b]
cmp rsi, 0x16
jb 0x59d89f
jmp 0x59d902
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.0059d820

Function at 0x59df60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59e098
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x4322526f345e1b2d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x32656d17323ac443
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4a5332615074ec6f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x382e5f555f335161
mov qword [rsp + 0x34], rdx
movabs rdx, 0xfe75f01f1f53f74f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x300000722022608
mov qword [rsp + 0x44], rdx
movabs rdx, 0x14201d0105261507
mov qword [rsp + 0x4c], rdx
movabs rdx, 0xa231d2414201d01
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1f08191618010514
mov qword [rsp + 0x58], rdx
movabs rdx, 0x60e051f15090300
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1d0b100b0e14021e
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x59e035
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xc]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x2c
jge 0x59e068
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x27
jae 0x59e08b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xc]
nop
cmp rsi, 0x27
jb 0x59e01b
jmp 0x59e07f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x27
call fcn.0044bb20
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x27
call fcn.00461020
mov eax, edi
mov ecx, 0x27
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.0059df60
Function at 0x59e2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59e3dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8ba67465e3567fd4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf769a2ee17d48ba6
mov qword [rsp + 0x22], rdx
movabs rdx, 0x999460f9ae04976e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x610150f0112130a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x140f020d0206110b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf0a03080006140f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100b121109150711
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x59e380
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x70]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x70]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x59e3ad
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x59e3d0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x59e35f
jmp 0x59e3c4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0059e2e0

Function at 0x5a0020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a010a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf7538cd3c105021
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe5430f7538cd3c10
mov qword [rsp + 0x20], rdx
movabs rdx, 0x57656d611a652c54
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd09080500020400
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb030b0d0007
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa01070b02000408
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5a00ad
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x5a00da
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5a00fd
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x5a0090
jmp 0x5a00f1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005a0020
Function at 0x5a06e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a07ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x726f332e4e40d556
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x41726f332e4e40d5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4e45745b6443e547
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9040b080901080a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc100005030d0400
mov qword [rsp + 0x38], rdx
movabs rdx, 0x902020201100b09
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5a076d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x5a079a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5a07bd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x5a0750
jmp 0x5a07b1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005a06e0

Function at 0x5a1f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a201d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xbab54470a4749453
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb7838ebe98a4d96c
mov qword [rsp + 0x23], rdx
movabs rdx, 0x7e72b1b7838ebe98
mov qword [rsp + 0x26], rdx
movabs rdx, 0xdf9fa6a6a2cf9ca8
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x140e06071612010e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1015140e06071612
mov qword [rsp + 0x38], rdx
movabs rdx, 0x180606031a0c0a19
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130f0b0b090f120c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1715071a03100d09
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5a1fc0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0xf]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0xf]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x5a1fed
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x5a2010
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1b
jb 0x5a1f9d
jmp 0x5a2004
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1b
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00461020
mov eax, edi
mov ecx, 0x1b
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005a1f00
Function at 0x5a2820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a2928
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf1cd8b3c3bfa130b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x64479e472747365
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x27636906064479e4
mov qword [rsp + 0x40], rdx
movabs rdx, 0x74733a236f405049
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc05070610020605
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1016051800070f01
mov qword [rsp + 0x20], rdx
movabs rdx, 0x150c020310160518
mov qword [rsp + 0x24], rdx
movabs rdx, 0x181300190f040601
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x5a28cb
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x1c
jge 0x5a28f8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5a291b
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x1c
jb 0x5a28ae
jmp 0x5a290f
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005a2820

Function at 0x5a3100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a3227
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xe6bb76d5d802ea5a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x85f0fbe1ece5740b
mov qword [rsp + 0x27], rdx
movabs rdx, 0xd8694ccb4dddff85
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6de86961dfeafedf
mov qword [rsp + 0x36], rdx
movabs rdx, 0x70c0e170d031e13
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x19011e0f1d0f0a04
mov qword [rsp + 0x46], rdx
movabs rdx, 0x160019011e0f1d0f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d020a160607121a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5031816100f1a1e
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb0b110506030813
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x5a31c9
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x5f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x5f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x2a
jge 0x5a31f7
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x5a321a
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1f
jb 0x5a31ac
jmp 0x5a320e
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1f
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00461020
mov eax, edi
mov ecx, 0x1f
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005a3100
Function at 0x5a38c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a39cc
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x32e55122501d3c53
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6563241a1b445165
mov qword [rsp + 0x23], rdx
movabs rdx, 0x276563241a1b4451
mov qword [rsp + 0x24], rdx
movabs rdx, 0x203c1c07303109f1
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90312020b14120c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1301051604050616
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x17140c0613010516
mov qword [rsp + 0x40], rdx
movabs rdx, 0x15070d1212111018
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5a3968
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x14]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5a399c
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x5a39bf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x14]
cmp rsi, 0x19
jb 0x5a394e
jmp 0x5a39b3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005a38c0

Function at 0x5a5340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a543d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x266ebbbba353c453
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfdf6b7f8266ebbbb
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc78f02bca6ede76c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10070d0708020311
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb051304100a0212
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x108100a0f0e0b05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5100f0109030d0f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5a53e0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x30]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x30]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x5a540d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5a5430
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x5a53bf
jmp 0x5a5424
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005a5340
Function at 0x5a5c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a5d52
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9aff0257fea38bab
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x786a7077fc9aff02
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70305080a020700
mov qword [rsp + 0x28], rdx
movabs rdx, 0x200060a020b010a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5a5cec
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x5a5d1e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5a5d45
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
cmp rsi, 0xd
jb 0x5a5cd2
jmp 0x5a5d35
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005a5c80

Function at 0x5a5fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a60c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5cece065d7d5ee47
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x77e24c6e69235253
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5010e0d08070702
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90705010e0d0807
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe03080207060e0a
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x5a6060
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x5a6092
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5a60b7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0x10
jb 0x5a6042
jmp 0x5a60ab
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005a5fe0
Function at 0x5a6f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a707b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6becf1f27473653c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf86ee58469746e6b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x63715142c86eef
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x905001411071614
mov qword [rsp + 0x34], rdx
movabs rdx, 0x906040b16060b0e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1411040906040b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9050c0f060e1309
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5a7019
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x65]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5a704b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5a706e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x65]
cmp rsi, 0x17
jb 0x5a6fff
jmp 0x5a7062
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.005a6f80

Function at 0x5a7b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a7c52
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xeee08a4565253974
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1f0df22d65eee08a
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb07060601060501
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90b0c0102060a09
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5a7bec
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x31]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x5a7c1e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5a7c45
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x31]
cmp rsi, 0xd
jb 0x5a7bd2
jmp 0x5a7c35
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005a7b80
Function at 0x5a8240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a82fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6e6786e443d53ace
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xfd75
movabs rdx, 0x604040500020100
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4090406
xor eax, eax
jmp 0x5a82a0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x7a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x7a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x5a82cd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5a82f0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x5a8283
jmp 0x5a82e4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005a8240

Function at 0x5a93e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a94a7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9d6bf1a9ce9b0d35
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xc3ad
movabs rdx, 0x301070400070508
mov qword [rsp + 0x22], rdx
movabs rdx, 0x803090402010301
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x5a9447
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x5a9477
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x5a949a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x5a942a
jmp 0x5a948e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005a93e0

Function at 0x5aabc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5aac9d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xaa65ae72a7e3b4ef
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb7a18e168faa65ae
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10909070700070c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb05010909070700
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80a0a0708020309
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x5aac40
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x26]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x26]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x5aac6d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5aac90
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x5aac22
jmp 0x5aac84
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005aabc0
Function at 0x5bf540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bf62c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x210c141f52271052
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x45210c141f522710
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2b72f5491c371b73
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40a060a020c010d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0508060d0e030a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0c02100d020b07
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5bf5ca
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x5bf5fc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5bf61f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0x11
jb 0x5bf5b0
jmp 0x5bf613
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005bf540

Function at 0x5bfc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bfd54
push rbp
mov rbp, rsp
sub rsp, 0x30
lea rax, [0x005d5720]
call fcn.0040c6c0
movabs rcx, 0x949f74e672a34d3c
mov qword [rax], rcx
movabs rcx, 0xe4d072eb56a9949f
mov qword [rax + 6], rcx
movabs rcx, 0xa313a31665611552
mov qword [rax + 0xe], rcx
movabs rcx, 0x710040802010a06
mov qword [rsp + 0x10], rcx
movabs rcx, 0x1414140e0e00080d
mov qword [rsp + 0x18], rcx
movabs rcx, 0xf06150c02150e12
mov qword [rsp + 0x20], rcx
movabs rcx, 0x613080e13070013
mov qword [rsp + 0x28], rcx
xor ecx, ecx
jmp 0x5bfd01
movzx r9d, byte [rsi + rax]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rax + rdi], dl
lea edx, [r8 - 0x2a]
mov byte [rax + rsi], dl
add rcx, 2
cmp rcx, 0x20
jge 0x5bfd2d
movzx edx, byte [rsp + rcx + 0x10]
movzx esi, byte [rsp + rcx + 0x11]
mov edi, edx
xor edx, esi
add edx, ecx
cmp rdi, 0x16
jae 0x5bfd47
movzx r8d, byte [rdi + rax]
sub r8d, edx
cmp rsi, 0x16
jb 0x5bfce7
jmp 0x5bfd3b
mov ebx, 0x16
mov rcx, rbx
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005bfc60