joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5b6de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b6edd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc3dcb679a5b0754b
mov qword [rsp + 0x39], rdx
movabs rdx, 0x63bf4cc8b2909cc3
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc5baf774b6ae53d2
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3120d140f0f0911
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd1611070b15060f
mov qword [rsp + 0x27], rdx
movabs rdx, 0x70d1611070b15
mov qword [rsp + 0x29], rdx
movabs rdx, 0xa020008050f0007
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x5b6e80
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x5b6ead
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5b6ed0
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x5b6e5f
jmp 0x5b6ec4
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0046d060
mov eax, edi
mov ecx, 0x17
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.005b6de0

Function at 0x5b6f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b707d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7265cabd72f8eaec
mov qword [rsp + 0x34], rdx
movabs rdx, 0xcaec69ff7265cabd
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf8f0840f746174dc
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0b0a0a04041210
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x210050400050211
mov qword [rsp + 0x22], rdx
movabs rdx, 0x804021005040005
mov qword [rsp + 0x24], rdx
movabs rdx, 0x201130505120a13
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x5b7020
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x5b704d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5b7070
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x5b6fff
jmp 0x5b7064
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0046d060
mov eax, edi
mov ecx, 0x14
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.005b6f80
Function at 0x5bb3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bb4c8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x72131fc685619cba
mov qword [rsp + 0x35], rdx
movabs rdx, 0x6c7296f8b5ba69cc
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xd69c66c7296f8b5
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd772b404edc6eb91
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd10030c131a1614
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1718140a05120013
mov qword [rsp + 0x21], rdx
movabs rdx, 0x41512081718140a
mov qword [rsp + 0x25], rdx
movabs rdx, 0xb0318160501060b
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x5bb46b
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x2f]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x2f]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x1c
jge 0x5bb498
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x5bb4bb
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x1b
jb 0x5bb44e
jmp 0x5bb4af
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x1b
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.0046d060
mov eax, edi
mov ecx, 0x1b
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005bb3c0

Function at 0x5c1840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c1906
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x78724171637e7852
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x5d5f
movabs rdx, 0x3090901040207
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x500
xor eax, eax
jmp 0x5c18a0
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5c18d2
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5c18f7
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
cmp rsi, 0xa
jb 0x5c1882
jmp 0x5c18eb
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0046d060
mov eax, edi
mov ecx, 0xa
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005c1840
Function at 0x5c2580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c266c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x49c10ca342bccbae
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x74fd49c10ca342bc
mov qword [rsp + 0x30], rdx
movabs rdx, 0x98b4bfba612872af
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0c04060c040404
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf0002010f0c0406
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa0e080e11101005
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x5c260a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x62]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x14
jge 0x5c263c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5c265f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x62]
cmp rsi, 0x12
jb 0x5c25f0
jmp 0x5c2653
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046d060
mov eax, edi
mov ecx, 0x12
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005c2580

Function at 0x5c3b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c3be6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x28174f2573204143
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x483b6428
movabs rdx, 0x50709040a010906
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x2050909
xor eax, eax
jmp 0x5c3b80
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x17]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x5c3bb2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5c3bd7
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x17]
cmp rsi, 0xb
jb 0x5c3b64
jmp 0x5c3bcb
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046d060
mov eax, edi
mov ecx, 0xb
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005c3b20
Function at 0x5c5160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c5232
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5b4265703c657243
mov qword [rsp + 0x29], rdx
movabs rdx, 0x575e58517564695b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0b0104080a0706
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6030b0d070a0c0b
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x5c51cc
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx - 7]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x5c51fe
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5c5225
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 7]
cmp rsi, 0xf
jb 0x5c51b2
jmp 0x5c5215
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.0046d060
mov eax, edi
mov ecx, 0xf
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005c5160

Function at 0x5c5560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c562c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xaf4d17a2f5dc7243
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc7895041516af4d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3030709050a0b02
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9080d0204080303
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x5c55cf
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x72]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x5c55fc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5c561f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x5c55b2
jmp 0x5c5613
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0046d060
mov eax, edi
mov ecx, 0xe
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005c5560
Function at 0x5c7740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c783b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x68564974656c8887
mov qword [rsp + 0x39], rdx
movabs rdx, 0x686f2d6b6a654368
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4179695968687451
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110c01001116140a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe12070b010115
mov qword [rsp + 0x27], rdx
movabs rdx, 0x5000e12070b01
mov qword [rsp + 0x29], rdx
movabs rdx, 0x90b130f0c111308
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x5c77d9
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1a]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1a
jge 0x5c780b
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5c782e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1a]
cmp rsi, 0x17
jb 0x5c77bf
jmp 0x5c7822
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0046d060
mov eax, edi
mov ecx, 0x17
call fcn.0046d060
nop
nop dword [rax + rax]
call fcn.0046ad80
jmp fcn.005c7740

Function at 0x5c9760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c987a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa8a1654ef58c69dd
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe54e99d96e046ab7
mov qword [rsp + 0x46], rdx
movabs rdx, 0xa51ce54e99d96e04
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7548d774ab6369f0
mov qword [rsp + 0x50], rdx
movabs rdx, 0x309001819120f10
mov qword [rsp + 0x18], rdx
movabs rdx, 0x802091103120309
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x180a030c1707120c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6100f0012071915
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0d000f0d180f00
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x5c9817
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5f]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x26
jge 0x5c9849
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5c986d
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5f]
cmp rsi, 0x1a
jb 0x5c97fd
jmp 0x5c9861
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00467060
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0046d060
mov eax, edi
mov ecx, 0x1a
call fcn.0046d060
nop
call fcn.0046ad80
nop
jmp fcn.005c9760
Function at 0x5cb420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cb4f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x654dc5f96d1f6f46
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xff2a43fb3602654d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc04080b04050d02
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc050b0b0a0c0902
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x5cb48c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0x10
jge 0x5cb4be
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5cb4e5
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0xe
jb 0x5cb472
jmp 0x5cb4d5
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.0046d060
mov eax, edi
mov ecx, 0xe
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005cb420

Function at 0x5cc040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cc126
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf894a77d09fe0b88
mov qword [rsp + 0x31], rdx
movabs rdx, 0x91fc996f06dd08f8
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90004030d010605
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x701080e0c0e0900
mov qword [rsp + 0x21], rdx
movabs rdx, 0x905070302060a0c
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x5cc0c0
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x5cc0f2
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5cc117
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
cmp rsi, 0xf
jb 0x5cc0a2
jmp 0x5cc10b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0046d060
mov eax, edi
mov ecx, 0xf
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005cc040
Function at 0x5ceca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ced8c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x650310b9436dce47
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xcb6e650310b9436d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2424ab2d2f226854
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe09021011040402
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd0c0e0902101104
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1106110f0e05010e
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x5ced2a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3a]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x5ced5c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5ced7f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3a]
cmp rsi, 0x12
jb 0x5ced10
jmp 0x5ced73
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046d060
mov eax, edi
mov ecx, 0x12
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005ceca0

Function at 0x5d1100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d11fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc623c6a94ccf0e47
mov qword [rsp + 0x39], rdx
movabs rdx, 0xbbd6972c00db3c6
mov qword [rsp + 0x40], rdx
movabs rdx, 0x57ae676f25c8b7b9
mov qword [rsp + 0x48], rdx
movabs rdx, 0x70a080d04100211
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x100e0f0815121505
mov qword [rsp + 0x23], rdx
movabs rdx, 0x50801070602100e
mov qword [rsp + 0x29], rdx
movabs rdx, 0xa0d130d04091111
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x5d1199
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1e
jge 0x5d11cb
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5d11ee
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3d]
cmp rsi, 0x17
jb 0x5d117f
jmp 0x5d11e2
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0046d060
mov eax, edi
mov ecx, 0x17
call fcn.0046d060
nop
nop dword [rax + rax]
call fcn.0046ad80
jmp fcn.005d1100
Function at 0x5d14a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d159d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x64565e512f36543b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x5c5d64565e512f36
mov qword [rsp + 0x38], rdx
movabs rdx, 0x57638d6a6c316e3a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30401070a070602
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80506090a10060c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x606080506090a10
mov qword [rsp + 0x26], rdx
movabs rdx, 0x100f00000e100304
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x5d1540
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 + 0x22]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 + 0x22]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x5d156d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5d1590
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x5d151f
jmp 0x5d1584
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046d060
mov eax, edi
mov ecx, 0x12
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.005d14a0

Function at 0x5d19e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d1ac6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x64fca5b106a63d0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x266104906f39687
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10d0204020109
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa080b0500010d02
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4060a030b0f0409
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x5d1a60
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x51]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x5d1a92
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5d1ab7
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x51]
cmp rsi, 0x10
jb 0x5d1a42
jmp 0x5d1aab
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0046d060
mov eax, edi
mov ecx, 0x10
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005d19e0
Function at 0x5d3c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d3d0c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8ea3658151a5d647
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x64659ab7aea6c1d7
mov qword [rsp + 0x47], rdx
movabs rdx, 0xb464659ab7aea6c1
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb3dc7495ce53b16f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x80d0d1714060102
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6100a0a0c060912
mov qword [rsp + 0x27], rdx
movabs rdx, 0x70b180915041212
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x206090f08070d07
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x5d3ca8
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x43]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x20
jge 0x5d3cdc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x5d3cff
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x43]
cmp rsi, 0x19
jb 0x5d3c8e
jmp 0x5d3cf3
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00467060
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0046d060
mov eax, edi
mov ecx, 0x19
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005d3c00

Function at 0x5d4520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d460c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x658f7384530b91a2
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x75c5cc658f738453
mov qword [rsp + 0x30], rdx
movabs rdx, 0x577d6f6f89976d72
mov qword [rsp + 0x38], rdx
movabs rdx, 0x806000c0a090802
mov qword [rsp + 0x19], rdx
movabs rdx, 0x202060d0806000c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa0e100c11010d04
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x5d45aa
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x36]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x14
jge 0x5d45dc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5d45ff
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x36]
cmp rsi, 0x13
jb 0x5d4590
jmp 0x5d45f3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0046d060
mov eax, edi
mov ecx, 0x13
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005d4520
Function at 0x5d4620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d4747
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x2a7473ae12e63cec
mov qword [rsp + 0x43], rdx
movabs rdx, 0x4a57b90f2152505c
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x4cd655445f4a57b9
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf6467dc75201640
mov qword [rsp + 0x58], rdx
movabs rdx, 0x160d0016041913
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1913030d0203171c
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1151913030d0203
mov qword [rsp + 0x23], rdx
movabs rdx, 0x16110713040a0000
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xb0f1c08190f0c19
mov qword [rsp + 0x33], rdx
movabs rdx, 0xd0f0e1b11170210
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x5d46e9
movzx r9d, byte [rsp + rsi + 0x43]
sub r9d, edx
lea edx, [r9 + 0x49]
mov byte [rsp + rdi + 0x43], dl
lea edx, [r8 + 0x49]
mov byte [rsp + rsi + 0x43], dl
add rax, 2
cmp rax, 0x2a
jge 0x5d4717
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x5d473a
movzx r8d, byte [rsp + rdi + 0x43]
sub r8d, edx
cmp rsi, 0x1d
jb 0x5d46cc
jmp 0x5d472e
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.00467060
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0046d060
mov eax, edi
mov ecx, 0x1d
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005d4620