joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5ae7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ae8cb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x374d3d3a4e22490b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x18662b3365155450
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd020607040a00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9050a0c000d0206
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc09090f0d0a0601
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5ae864
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x14
jge 0x5ae897
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x5ae8be
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x5ae847
jmp 0x5ae8b2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457420
mov eax, edi
mov ecx, 0x10
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005ae7e0

Function at 0x5aec80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5aed52
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xa825c4d1da21651b
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x64cee673
movabs rdx, 0x2000405060a0507
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa090403020200
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5aecee
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x5aed1b
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5aed45
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x5aecd1
jmp 0x5aed36
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0xc
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005aec80
Function at 0x5aed60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5aee86
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x654c4e231de94f63
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3313dc2072284e41
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3249556465723313
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x37ca185c3467d361
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0a1c04171b0d1b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x20c040802040e0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150f0117051b1b03
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf1a1d00190c0902
mov qword [rsp + 0x50], rdx
movabs rdx, 0x303060d1c0c0508
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5aee20
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x47]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x47]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x26
jge 0x5aee4d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x5aee74
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1e
jb 0x5aee03
jmp 0x5aee68
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.004446e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00457420
mov eax, edi
mov ecx, 0x1e
nop dword [rax + rax]
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005aed60

Function at 0x5aefe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5af0cb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xc2b7abfef0f6ae47
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb2e30f695873bac2
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa02010d040c020d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6050803080e0a02
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4080c0707020803
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5af064
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x39]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x39]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x16
jge 0x5af097
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x5af0be
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x5af047
jmp 0x5af0b2
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457420
mov eax, edi
mov ecx, 0xf
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005aefe0
Function at 0x5af1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5af2d2
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x94380475ddab6dcf
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xcb65d0d86dc22bda
mov qword [rsp + 0x25], rdx
movabs rdx, 0x69cb65d0d86dc22b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x73a77461ca53dabf
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x814071717090901
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1702060d0a050c12
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1171702060d0a05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x311020d010f000a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5af271
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x44]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x44]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x5af29e
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5af2c5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x5af254
jmp 0x5af2b9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457420
mov eax, edi
mov ecx, 0x19
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005af1c0

Function at 0x5af9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5afab6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xeeec8b5ee774ea47
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6944cdeeec8b5ee7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x724c856b74ec8a72
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10d110510120c05
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4120f010c06010d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8030f0710011205
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5afa50
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x67
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x5afa82
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5afaa9
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x67
add r8d, edx
cmp rsi, 0x13
jb 0x5afa36
nop
jmp 0x5afa9d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457420
mov eax, edi
mov ecx, 0x13
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.005af9c0
Function at 0x5b1c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b1dc8
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x6d756c685674650f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x656d756c68567465
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd2441eb59c36a14e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x75cbbf0e6d75f94a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf7bfc5699d9ac6ea
mov qword [rsp + 0x32], rdx
movabs rdx, 0x110d171a20200b0e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1c16120f00040f00
mov qword [rsp + 0x42], rdx
movabs rdx, 0xf120a19120d1c16
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b0c200f0c151e1f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c0a040e1b0e00
mov qword [rsp + 0x58], rdx
movabs rdx, 0x121b1b1020190b1b
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x5b1d60
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffff98
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2e
jge 0x5b1d91
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x5b1dbb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffff98
add r8d, edx
cmp rsi, 0x21
jb 0x5b1d42
jmp 0x5b1daf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x21
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
call fcn.00457420
mov eax, edi
mov ecx, 0x21
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005b1c80

Function at 0x5b22c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b23f2
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xf4c6616974b9de49
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x79f4c6616974b9de
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xbc680b0c6fc00165
mov qword [rsp + 0x24], rdx
movabs rdx, 0x462ee2e2256416f7
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7473be4c65aef35a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x190e151617141912
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x7120801190e1516
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1412020d011a0118
mov qword [rsp + 0x48], rdx
movabs rdx, 0x181019010a110b06
mov qword [rsp + 0x50], rdx
movabs rdx, 0x111b171e070a1a02
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5b238c
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffff8b
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x5b23bd
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x5b23e5
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffff8b
add r8d, edx
cmp rsi, 0x21
jb 0x5b2372
jmp 0x5b23d8
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
call fcn.004446e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x21
nop
call fcn.00457420
mov eax, edi
mov ecx, 0x21
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005b22c0
Function at 0x5b2400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b24e8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf23b362621c2c608
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc7317003072f23b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60d07030d010b00
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa04060d07030d01
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30603020b090401
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5b2481
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x27
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x12
jge 0x5b24b2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5b24db
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x27
add r8d, edx
cmp rsi, 0xe
jb 0x5b2467
jmp 0x5b24cf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457420
mov eax, edi
mov ecx, 0xe
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005b2400

Function at 0x5b3080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b3148
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xca6c9a836bb3b9ab
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x78d0
movabs rdx, 0x4000102080807
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7050808
xor eax, eax
jmp 0x5b30e3
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffffbf
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x5b3114
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5b313b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffffbf
add r8d, edx
cmp rsi, 0xa
jb 0x5b30c9
jmp 0x5b312f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457420
mov eax, edi
mov ecx, 0xa
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005b3080
Function at 0x5b3e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b3ecb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6eaeabaadc88184f
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x4774
movabs rdx, 0x904040601060304
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5020204
xor eax, eax
jmp 0x5b3e66
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x5b3e97
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x5b3ebe
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x5b3e49
jmp 0x5b3eb2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457420
mov eax, edi
mov ecx, 0xa
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005b3e00

Function at 0x5b5840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b58fc
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0xc5e555e4edea65e3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x704000206030205
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x5b5894
movzx r9d, byte [rsp + rsi + 0x20]
add r9d, 0x78
add edx, r9d
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x5b58c8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x5b58ef
movzx r8d, byte [rsp + rdi + 0x20]
add r8d, 0x78
add r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x5b587a
jmp 0x5b58e3
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.004446e0
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.00457420
mov eax, edi
mov ecx, 8
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.005b5840
Function at 0x5b6420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b6516
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xa173ac6f72b1f2c4
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf46973b3759b656c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x76b18f7469736f50
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70f1707160317
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa15010a07070e01
mov qword [rsp + 0x20], rdx
movabs rdx, 0x170e1505020c170f
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x5b64b3
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x1f]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
cmp rax, 0x18
jge 0x5b64e2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5b6509
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x18
jb 0x5b6496
nop
jmp 0x5b64fd
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457420
mov eax, edi
mov ecx, 0x18
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.005b6420

Function at 0x5b6c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b6d28
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6944ee231d29658b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd4d291c5666365cc
mov qword [rsp + 0x22], rdx
movabs rdx, 0x30e020d030b03
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50c0b0f00040003
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8080d000e0c030c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5b6cc1
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffff92
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x5b6cf2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5b6d1b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffff92
add r8d, edx
cmp rsi, 0x10
jb 0x5b6ca7
jmp 0x5b6d0f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457420
mov eax, edi
mov ecx, 0x10
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005b6c40
Function at 0x5b75e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b76d6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x412c6c6946422453
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4374412c6c694642
mov qword [rsp + 0x30], rdx
movabs rdx, 0x47733574295c343c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0f11110d0a020d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10b0d0f11110d0a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20b01090c0d0b06
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x5b7670
movzx r9d, byte [rsp + rsi + 0x2e]
add r9d, 0xc
add edx, r9d
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x5b76a2
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5b76c9
movzx r8d, byte [rsp + rdi + 0x2e]
add r8d, 0xc
add r8d, edx
cmp rsi, 0x12
jb 0x5b7656
nop
jmp 0x5b76bd
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457420
mov eax, edi
mov ecx, 0x12
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.005b75e0
Function at 0x5b8a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b8b68
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x64a96b619385bf81
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb094986589690264
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9574b2749165db98
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10203120e0a100a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x12080a1401060002
mov qword [rsp + 0x38], rdx
movabs rdx, 0x116030512030014
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50f140c0d0a0e05
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5b8b02
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x5b8b2f
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5b8b5b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x5b8ae5
jmp 0x5b8b4f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457420
mov eax, edi
mov ecx, 0x17
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005b8a60

Function at 0x5b8e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b8f88
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xdec0c9cc504a2953
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x66dd698dd77373de
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6767de6f42ebea69
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x206060a040d0105
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe0e140b050e1614
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x10150d0e0e0e140b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x706140210110e05
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5b8f22
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1c
jge 0x5b8f4f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5b8f7b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x5b8f05
jmp 0x5b8f6f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457420
mov eax, edi
mov ecx, 0x17
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005b8e80
Function at 0x5b9fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ba0bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x81a6566e758b7255
mov qword [rsp + 0x19], rdx
movabs rdx, 0x716c97467e9a7781
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe0306070709070c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x709010a020a0704
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5ba052
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffdd
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x5ba088
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5ba0af
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffdd
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xf
jb 0x5ba038
jmp 0x5ba0a3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457420
mov eax, edi
mov ecx, 0xf
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.005b9fe0
Function at 0x5baae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5babb2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x5171e55871726956
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xf46271f3
movabs rdx, 0xa0603080905040b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6060a0801060b05
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5bab4b
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x72
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x5bab7c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5baba5
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x72
add r8d, edx
cmp rsi, 0xc
jb 0x5bab31
jmp 0x5bab97
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00457420
mov eax, edi
mov ecx, 0xc
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005baae0

Function at 0x5bae00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5baee8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xbfbead852470697c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6b116f6c1cbfbead
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60304020600060b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x807060304020600
mov qword [rsp + 0x28], rdx
movabs rdx, 0x603050704070702
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5bae81
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffff98
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x5baeb2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5baedb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffff98
add r8d, edx
cmp rsi, 0xd
jb 0x5bae67
jmp 0x5baecf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457420
mov eax, edi
mov ecx, 0xd
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005bae00