joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5c0de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c0ee8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xedb0726576516f50
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd4a3f2ed64d1edb0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4e6cf2e5d4e1b972
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0d00060f020f0c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60b020a1406080a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x213060b020a1406
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1211151107100807
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5c0e82
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1a
jge 0x5c0eaf
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5c0edb
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x5c0e65
jmp 0x5c0ecf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457d20
mov eax, edi
mov ecx, 0x16
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005c0de0
Function at 0x5c2780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c285c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xb565478faf0272f3
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6dafee6e612cb565
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb03020c040408
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb0c07030b000b
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x5c27f5
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x5c2828
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5c284f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x5c27d8
jmp 0x5c2843
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457d20
mov eax, edi
mov ecx, 0xe
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.005c2780

Function at 0x5c32e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c33e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6fa551d86d759e97
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x53738b63986fa551
mov qword [rsp + 0x22], rdx
movabs rdx, 0x577d8a737daa7977
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf1304041001010f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10a070400010512
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x80806050706010a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60e010d080d0707
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5c3380
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x5c33b2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5c33db
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2b]
cmp rsi, 0x15
jb 0x5c3365
jmp 0x5c33cf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457d20
mov eax, edi
mov ecx, 0x15
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005c32e0
Function at 0x5c3400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c34c8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2228530361759d95
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x604010601010400
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x607
xor eax, eax
nop
jmp 0x5c3460
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5c3492
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x5c34bb
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 8
jb 0x5c3442
jmp 0x5c34af
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00457d20
mov eax, edi
mov ecx, 8
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005c3400

Function at 0x5c3e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c3f92
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xc58e9c9696748397
mov qword [rsp + 0x18], rdx
movabs rdx, 0x7663539d448a7776
mov qword [rsp + 0x20], rdx
movabs rdx, 0x788c7663539d448a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6f88787547779374
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x409181907090708
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10f0511000d0509
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa060d191716010f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9100c1314031008
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5c3f31
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0xb]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0xb]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1e
jge 0x5c3f5e
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5c3f85
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x5c3f14
jmp 0x5c3f79
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457d20
mov eax, edi
mov ecx, 0x1a
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005c3e80
Function at 0x5c41c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c42e8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x665a636574745b75
mov qword [rsp + 0x18], rdx
movabs rdx, 0x626373737a797478
mov qword [rsp + 0x20], rdx
movabs rdx, 0x52765d7465696263
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6c7872366f78824d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x190614070819190c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x811190614070819
mov qword [rsp + 0x38], rdx
movabs rdx, 0x130c1a0307110b11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130f110814170100
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170306111901181c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5c4280
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x27]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x5c42b2
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x5c42db
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x27]
cmp rsi, 0x1e
jb 0x5c4263
jmp 0x5c42cf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00457d20
mov eax, edi
mov ecx, 0x1e
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005c41c0

Function at 0x5c4ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c4fe8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x273a5d3aeb74e303
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x4d291a4b75fa0127
mov qword [rsp + 0x22], rdx
movabs rdx, 0x426e75074335e83a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x705030c11001100
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc080910130c0d08
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf040e0b10050c08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9030d0613160301
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5c4f80
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x5c4fb2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5c4fdb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0x17
jb 0x5c4f65
jmp 0x5c4fcf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457d20
mov eax, edi
mov ecx, 0x17
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005c4ee0
Function at 0x5c5320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c5408
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6e3373a665fd2649
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xef36f2f128abdd6e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10c08040d06040e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe09020b010c0804
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40a02010e0a090b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5c53a1
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2c]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x5c53d3
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5c53fb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2c]
cmp rsi, 0xf
jb 0x5c5387
jmp 0x5c53ef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457d20
mov eax, edi
mov ecx, 0xf
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005c5320

Function at 0x5c5940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c5a36
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x5257746e28544a60
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x655257746e28544a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x646567503c4b6573
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc00010e0d0b0301
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6060c00010e0d0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa050c030b040e0d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5c59d3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x1f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x5c5a02
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5c5a29
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x5c59b6
nop
jmp 0x5c5a1d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457d20
mov eax, edi
mov ecx, 0x11
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.005c5940
Function at 0x5c6fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c7072
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x7672e353645bb14f
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x57c9dc69
movabs rdx, 0x105090902030302
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x50a0505
xor eax, eax
jmp 0x5c7004
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7d]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
cmp rax, 0xc
jge 0x5c703c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xc
jae 0x5c7065
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7d]
cmp rsi, 0xc
jb 0x5c6fea
jmp 0x5c7057
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00457d20
mov eax, edi
mov ecx, 0xc
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005c6fa0

Function at 0x5c72c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c73c8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x850653f6f90a8651
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x652469fe850653f6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb23294b87f9c1817
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0a010711110a0f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x306110f04020707
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1130306110f0402
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa080d0110010c11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5c7362
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1a
jge 0x5c738f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5c73bb
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x5c7345
jmp 0x5c73af
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457d20
mov eax, edi
mov ecx, 0x14
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005c72c0
Function at 0x5c87e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c88cb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x9a72bdef51d7e8f0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5750f64bf5e7644d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x502000e0805070e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90000000502000e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10a09000d070b04
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5c8864
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x14
jge 0x5c8897
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x5c88be
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x5c8847
jmp 0x5c88b2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457d20
mov eax, edi
mov ecx, 0x10
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005c87e0

Function at 0x5c8b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c8c56
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x723e3d4169672cc3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x23027645723e3d41
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40f631b631db3ef9
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0f000e06101201
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe00060e050f0111
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0b0e041306060a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5c8bf3
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x4c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x4c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x5c8c22
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5c8c49
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x5c8bd6
nop
jmp 0x5c8c3d
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457d20
mov eax, edi
mov ecx, 0x14
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.005c8b60
Function at 0x5cb480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cb568
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xdd146665fd17f253
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa97521e3395330f2
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf0b050709080503
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20c050309010f0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20d09060b090205
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5cb501
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x5cb533
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5cb55b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0x10
jb 0x5cb4e7
jmp 0x5cb54f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457d20
mov eax, edi
mov ecx, 0x10
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005cb480

Function at 0x5cb620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cb728
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xcf65001c5474fd53
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x66bcaacf65001c54
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x356d29d27e6da50c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10108090e05070b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc090c0405090511
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10090c090c040509
mov qword [rsp + 0x38], rdx
movabs rdx, 0x804110b12100f12
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5cb6c2
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x6e]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x6e]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x5cb6ef
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5cb71b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x5cb6a5
jmp 0x5cb70f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457d20
mov eax, edi
mov ecx, 0x13
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005cb620
Function at 0x5cc580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cc696
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6c70751c81384543
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4215434536d5ca31
mov qword [rsp + 0x21], rdx
movabs rdx, 0x742a636966690442
mov qword [rsp + 0x28], rdx
movabs rdx, 0x370226741617ded1
mov qword [rsp + 0x30], rdx
movabs rdx, 0x180a1e030e0c0a17
mov qword [rsp + 0x38], rdx
movabs rdx, 0x102091e191a1d0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x151c0c081018191a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9040f0b0a17181e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5cc62e
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1c]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x20
jge 0x5cc662
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x5cc689
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1c]
cmp rsi, 0x1f
jb 0x5cc614
nop
jmp 0x5cc67d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.00444d40
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00457d20
mov eax, edi
mov ecx, 0x1f
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.005cc580
Function at 0x5cd5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cd6c6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xc6df721e1d9531e7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x34566f3e31d2c10
mov qword [rsp + 0x24], rdx
movabs rdx, 0xdc8c034566f3e31d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x292a3729e46f3365
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x18150a100f0f0218
mov qword [rsp + 0x36], rdx
movabs rdx, 0x161918150a100f0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9030b180c150006
mov qword [rsp + 0x40], rdx
movabs rdx, 0x407010a110e1817
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4080113000e1506
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5cd660
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x62]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x62]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x22
jge 0x5cd68d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5cd6b4
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1a
jb 0x5cd643
jmp 0x5cd6a8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.00444d40
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457d20
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005cd5a0

Function at 0x5cd7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cd8d6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x4ed4c4a323c6c8d1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xdba84ed4c4a323c6
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe267830fc7d9b6c4
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb08050a0301010f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc030d110b08050a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2010400000e0906
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5cd873
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x4c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x5cd8a2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5cd8c9
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x5cd856
nop
jmp 0x5cd8bd
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457d20
mov eax, edi
mov ecx, 0x12
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.005cd7e0