joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5a9020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a90eb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x957cc4926e9770ac
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x64ce
movabs rdx, 0x705060406000804
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x207
xor eax, eax
jmp 0x5a9085
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x25]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x25]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xa
jge 0x5a90b7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xa
jae 0x5a90de
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x5a9068
jmp 0x5a90d2
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461e80
mov eax, edi
mov ecx, 0xa
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005a9020

Function at 0x5a97c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a98a8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2273b7db630a2084
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5704bae783c92273
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80a070c0c090504
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb080a070c0c09
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0200040105070b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5a9841
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x43
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x12
jge 0x5a9872
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5a989b
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x43
add r8d, edx
cmp rsi, 0xe
jb 0x5a9827
jmp 0x5a988f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461e80
mov eax, edi
mov ecx, 0xe
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005a97c0
Function at 0x5aafa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ab08b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x59f455f6fde76554
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57f3fa6f74f151c6
mov qword [rsp + 0x26], rdx
movabs rdx, 0x509060800000507
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x500050906080000
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3040d0e0a020707
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5ab024
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x70]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x70]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x5ab057
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x5ab07e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x5ab007
jmp 0x5ab072
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461e80
mov eax, edi
mov ecx, 0x10
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005aafa0

Function at 0x5ab960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5aba56
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x65275b135c496561
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4853104665275b13
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5765526f74496572
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x120611020e020206
mov qword [rsp + 0x32], rdx
movabs rdx, 0x40502090b041206
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30a00080a0b0203
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5ab9f3
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x27]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x27]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x5aba22
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5aba49
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x5ab9d6
nop
jmp 0x5aba3d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461e80
mov eax, edi
mov ecx, 0x14
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.005ab960
Function at 0x5aba80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5abb93
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xf01166354497343d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4f4530fd341b21d7
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7309313dbc25e3e6
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf0b02090b110c06
mov qword [rsp + 0x34], rdx
movabs rdx, 0x160f100c0f0b0209
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0c15040c0a0802
mov qword [rsp + 0x40], rdx
movabs rdx, 0x112141309131309
mov qword [rsp + 0x48], rdx
movabs rdx, 0x20d060007000f09
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5abb2e
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x13
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x24
jge 0x5abb5f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5abb86
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x13
add r8d, edx
cmp rsi, 0x18
jb 0x5abb14
jmp 0x5abb7a
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461e80
mov eax, edi
mov ecx, 0x18
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005aba80
Function at 0x5aebc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5aeca8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x657f7f76758e696e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8e868ba45973657f
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd05050a0c0b0203
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0c0d060d05050a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x602090309000504
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5aec41
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffe3
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x14
jge 0x5aec72
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5aec9b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffe3
add r8d, edx
cmp rsi, 0xe
jb 0x5aec27
jmp 0x5aec8f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461e80
mov eax, edi
mov ecx, 0xe
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005aebc0
Function at 0x5afe20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5afef2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6c4a6a754f2e6568
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3c6339746f726c4a
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0b0703050d0001
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb060b0000020705
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5afe8e
movzx r9d, byte [rsp + rsi + 0x1a]
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x5afebb
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5afee5
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, edx
cmp rsi, 0xe
jb 0x5afe78
jmp 0x5afed6
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xe
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005afe20

Function at 0x5b1060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b1128
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x783f1008392ffb41
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x605040104010303
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x202
xor eax, eax
nop
jmp 0x5b10c0
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0x2c
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5b10f1
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x5b111b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0x2c
add r8d, edx
cmp rsi, 8
jb 0x5b10a2
jmp 0x5b110f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00461e80
mov eax, edi
mov ecx, 8
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005b1060
Function at 0x5b16e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b17c8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xc807b07374070fee
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6fafb48774a1c807
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6070b0100080302
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20b06070b010008
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa070b070308050c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5b1761
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0xffffffa3
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x12
jge 0x5b1792
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5b17bb
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0xffffffa3
add r8d, edx
cmp rsi, 0xe
jb 0x5b1747
jmp 0x5b17af
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461e80
mov eax, edi
mov ecx, 0xe
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005b16e0

Function at 0x5b19c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b1ab6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6574c9655c430c4e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa1c30f61b76574c9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x65abeb9a6507ae1d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb010d0f05030e13
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0b0d1212050c08
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd120b1105110a05
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5b1a50
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffa1
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x5b1a82
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5b1aa9
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffa1
add r8d, edx
cmp rsi, 0x15
jb 0x5b1a36
nop
jmp 0x5b1a9d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461e80
mov eax, edi
mov ecx, 0x15
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.005b19c0
Function at 0x5b1ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b1c08
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xd87903077551ff02
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1058880872c9fa24
mov qword [rsp + 0x25], rdx
movabs rdx, 0x6f1058880872c9fa
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6883ea746f6250e0
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x180104170f080807
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf0f180104170f08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110d1504050c070d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130e16040f090711
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe13070a0100040e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5b1ba0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x55
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x5b1bd1
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5b1bfb
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x55
add r8d, edx
cmp rsi, 0x19
jb 0x5b1b83
jmp 0x5b1bef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005b1ae0

Function at 0x5b2180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b2288
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xa198c57f65c174d5
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7e69ad616d72bea1
mov qword [rsp + 0x20], rdx
movabs rdx, 0x78b69f90c8ed50b1
mov qword [rsp + 0x28], rdx
movabs rdx, 0x702110000021215
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50004130c150608
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60e1215140f00
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20f16110f1105
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5b2220
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffc1
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x5b2251
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5b227b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffc1
add r8d, edx
cmp rsi, 0x17
jb 0x5b2205
jmp 0x5b226f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461e80
mov eax, edi
mov ecx, 0x17
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005b2180
Function at 0x5b3880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b396b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x9a95cbe9479674e8
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9cbfe873969a95cb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa0b0b0a07050a04
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2020a0b0b0a0705
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60806000406070c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5b3904
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x5b3937
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x5b395e
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x5b38e7
jmp 0x5b3952
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461e80
mov eax, edi
mov ecx, 0xd
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005b3880

Function at 0x5b4f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b505c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x52692d436e553958
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5550692e61065269
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50008080a070d04
mov qword [rsp + 0x28], rdx
movabs rdx, 0x102020c0c08070d
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5b4ff2
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xb
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x5b5028
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5b504f
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xb
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xe
jb 0x5b4fd8
jmp 0x5b5043
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461e80
mov eax, edi
mov ecx, 0xe
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.005b4f80
Function at 0x5b7c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b7d12
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x5d64445c443f2c53
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5d51806ceb526c61
mov qword [rsp + 0x27], rdx
movabs rdx, 0x485d51806ceb526c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x72656c33744273fa
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa02130f01100211
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0a110f0f150b0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf140a1515060304
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130d071104070b0e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5b7cb1
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x30]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x30]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x5b7cde
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5b7d05
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x5b7c94
jmp 0x5b7cf9
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005b7c00

Function at 0x5b8b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b8c08
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x11d644f6c5ce3053
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x76651f6574ba30cf
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2d40e8e049ddc4c1
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x14150d0a09160416
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa07100916060212
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x170a0a0710091606
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11100804030a0111
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5b8ba0
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0x7f
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x5b8bd1
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5b8bfb
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0x7f
add r8d, edx
cmp rsi, 0x18
jb 0x5b8b85
jmp 0x5b8bef
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461e80
mov eax, edi
mov ecx, 0x18
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005b8b00
Function at 0x5b9540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b9648
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x45696e706e69837f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x87596d766e45696e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4d667a4d25637e71
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb02090c01001200
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc0505111203020c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x111140e0d0c05
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0b030e0203100c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5b95e0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffffe5
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x5b9611
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5b963b
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffffe5
add r8d, edx
cmp rsi, 0x15
jb 0x5b95c5
jmp 0x5b962f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461e80
mov eax, edi
mov ecx, 0x15
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005b9540
Function at 0x5ba740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ba853
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x8657886e5e726548
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7a63527665545b53
mov qword [rsp + 0x21], rdx
movabs rdx, 0x6864527a63527665
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6d3c495f636e6174
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x171a070204050f08
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1208001007050612
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x5190a1912080010
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1103030d050f0905
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5ba7ee
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffe5
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5ba81f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x5ba846
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffe5
add r8d, edx
cmp rsi, 0x1b
jb 0x5ba7d4
jmp 0x5ba83a
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1b
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00461e80
mov eax, edi
mov ecx, 0x1b
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005ba740

Function at 0x5ba860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ba973
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x47bf44f375d16553
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa691dda2e192a588
mov qword [rsp + 0x23], rdx
movabs rdx, 0xaaa691dda2e192a5
mov qword [rsp + 0x24], rdx
movabs rdx, 0x920a749865706f7f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2040f0918060f17
mov qword [rsp + 0x34], rdx
movabs rdx, 0x4150f101502090d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc090a0604150f10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80e0f0e0f0b1118
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5ba90e
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffbb
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5ba93f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5ba966
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffbb
add r8d, edx
cmp rsi, 0x19
jb 0x5ba8f4
jmp 0x5ba95a
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005ba860
Function at 0x5bbda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bbe96
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x536c8f7065934453
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8263657a91626265
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6d5479767a5d6465
mov qword [rsp + 0x40], rdx
movabs rdx, 0x91202020b0f1605
mov qword [rsp + 0x18], rdx
movabs rdx, 0x31309171516060c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1130a0a0c171201
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x5bbe30
movzx r9d, byte [rsp + rsi + 0x30]
add r9d, 0xffffffdd
add edx, r9d
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x5bbe62
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5bbe89
movzx r8d, byte [rsp + rdi + 0x30]
add r8d, 0xffffffdd
add r8d, edx
cmp rsi, 0x18
jb 0x5bbe16
nop
jmp 0x5bbe7d
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461e80
mov eax, edi
mov ecx, 0x18
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.005bbda0