joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5bb360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bb428
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6ccfd825046972dd
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x29
movabs rdx, 0x406080300060305
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0
xor eax, eax
jmp 0x5bb3c0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x3c
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x5bb3f1
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x5bb41b
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x3c
add r8d, edx
cmp rsi, 9
jb 0x5bb3a6
jmp 0x5bb40f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00457420
mov eax, edi
mov ecx, 9
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005bb360

Function at 0x5bd7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bd8a8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7561d1d20d24ed24
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd8632017fc74b075
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb020b050a030004
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa0e0b020b050a03
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa000e080a010c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5bd841
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x3d
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x12
jge 0x5bd872
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5bd89b
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x3d
add r8d, edx
cmp rsi, 0xf
jb 0x5bd827
jmp 0x5bd88f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457420
mov eax, edi
mov ecx, 0xf
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005bd7c0
Function at 0x5bdd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x5bdec6
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0x6150dda4a16cc052
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6fa294b96ea268f1
mov qword [rsp + 0x21], rdx
movabs rdx, 0x7b697d613865606f
mov qword [rsp + 0x28], rdx
movabs rdx, 0xab7aed8d43584e82
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7f5337965f0e76a4
mov qword [rsp + 0x38], rdx
movabs rdx, 0x73ab46917498b67e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1f05121c0508121c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x102b0a011e122329
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd2d162c2128271c
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe0c08261920041b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2820140d101f0320
mov qword [rsp + 0x68], rdx
movabs rdx, 0xb0a21251d27171b
mov qword [rsp + 0x70], rdx
movabs rdx, 0x10e26271e0b2620
mov qword [rsp + 0x78], rdx
movabs rdx, 0x240a1a21162b2705
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x5bde59
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffab
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x40
jge 0x5bde8a
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x5bdeb7
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffab
add r8d, edx
cmp rsi, 0x2f
jb 0x5bde3f
jmp 0x5bdeab
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2f
call fcn.004446e0
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x2f
call fcn.00457420
mov eax, edi
mov ecx, 0x2f
nop
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005bdd40

Function at 0x5be480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5be556
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x5336406e606c744c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x675638613b533640
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6080a000503060a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9090a060b090c08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5be4f1
movzx r9d, byte [rsp + rsi + 0x1b]
inc r9d
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x5be522
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5be549
movzx r8d, byte [rsp + rdi + 0x1b]
inc r8d
add r8d, edx
cmp rsi, 0xd
jb 0x5be4d8
nop
jmp 0x5be53d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457420
mov eax, edi
mov ecx, 0xd
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.005be480
Function at 0x5beea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bef72
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4a68615a723c6f3c
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x645b636b
movabs rdx, 0x20604060a0908
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x706090807090002
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5bef0e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0xf]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0xf]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x5bef3b
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5bef65
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x5beef1
jmp 0x5bef56
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0xc
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005beea0

Function at 0x5bef80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bf052
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6a45020f97476f43
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf9b106a45020f97
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x309040a08080306
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5060903
xor eax, eax
jmp 0x5befeb
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x53
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x5bf01c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5bf045
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x53
add r8d, edx
cmp rsi, 0xb
jb 0x5befd1
jmp 0x5bf037
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00457420
mov eax, edi
mov ecx, 0xb
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005bef80
Function at 0x5c0180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c0288
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xb2962521d39c65bd
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x346ed5c8b2962521
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8bcf0474616d7235
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x110b000504040413
mov qword [rsp + 0x32], rdx
movabs rdx, 0x5080605030b0709
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x20c020313080508
mov qword [rsp + 0x40], rdx
movabs rdx, 0x400000306021112
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5c0220
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffff81
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x5c0251
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5c027b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffff81
add r8d, edx
cmp rsi, 0x14
jb 0x5c0205
jmp 0x5c026f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457420
mov eax, edi
mov ecx, 0x14
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005c0180

Function at 0x5c0c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c0d5c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x346146556e31723d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60386d5b5a443461
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40a000402040d05
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc000d080709040a
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x5c0cf2
movzx r9d, byte [rsp + rsi + 0x2a]
add r9d, 4
add edx, r9d
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x5c0d28
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5c0d4f
movzx r8d, byte [rsp + rdi + 0x2a]
add r8d, 4
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xe
jb 0x5c0cd8
jmp 0x5c0d43
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457420
mov eax, edi
mov ecx, 0xe
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.005c0c80
Function at 0x5c2820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c2928
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x45f2443d75743cdf
mov qword [rsp + 0x18], rdx
movabs rdx, 0x517844fe753d45f2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x573e666e49ac03ad
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60004100c060e0e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80e000c0a0f0c04
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1406080e000c0a0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa15140d0c0f0801
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5c28c2
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x4d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x4d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1a
jge 0x5c28ef
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5c291b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x5c28a5
jmp 0x5c290f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457420
mov eax, edi
mov ecx, 0x16
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005c2820
Function at 0x5c4480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c4588
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xdefc1b70cccc0a0e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xfc0c987bccb774f2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x653b6976c7bf3134
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8070a13010e0b0d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6120c0a0205000b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x513060a030a0612
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1608110d0f160310
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5c4522
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1e
jge 0x5c454f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5c457b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x5c4505
jmp 0x5c456f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
nop dword [rax + rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457420
mov eax, edi
mov ecx, 0x18
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005c4480

Function at 0x5c4680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c4776
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x4f3c447055605077
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x255159734f3c4470
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6f834052573d7663
mov qword [rsp + 0x28], rdx
movabs rdx, 0x300110608021213
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0106100c0f0e0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa081101090c0a0b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5c4710
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xfffffff5
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x5c4742
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5c4769
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xfffffff5
add r8d, edx
cmp rsi, 0x14
jb 0x5c46f6
nop
jmp 0x5c475d
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457420
mov eax, edi
mov ecx, 0x14
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.005c4680
Function at 0x5c6200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c62eb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x617367436c755871
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x553f69636f695755
mov qword [rsp + 0x22], rdx
movabs rdx, 0x60c010d0e00080f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf050d0f0507060c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10c07030d0b070f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5c6284
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x16]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x16]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x16
jge 0x5c62b7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x5c62de
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x5c6267
jmp 0x5c62d2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457420
mov eax, edi
mov ecx, 0x10
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005c6200

Function at 0x5c75a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c768b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xf47fa7c1c60f12c2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xccc96f63d7c3c6f4
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3040d0602060706
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70a03040d060206
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80a00050e09010a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5c7624
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x4b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x5c7657
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x5c767e
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x5c7607
jmp 0x5c7672
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457420
mov eax, edi
mov ecx, 0xf
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005c75a0
Function at 0x5c78e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c79bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x429e67fd8dc2e6ab
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x57c46f429e67fd8d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3060203040909
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x300090601060003
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5c7955
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x5c7988
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5c79af
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x5c7938
jmp 0x5c79a3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457420
mov eax, edi
mov ecx, 0xb
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.005c78e0

Function at 0x5c7d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c7e68
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x7a617b7d7448487c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x69556a726957647a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7c77614c427f7265
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6150e021310090d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x511091110140709
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa080c0702160511
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe00130407010404
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5c7e02
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x1b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x1b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1e
jge 0x5c7e2f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5c7e5b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x17
jb 0x5c7de5
jmp 0x5c7e4f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457420
mov eax, edi
mov ecx, 0x17
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005c7d60
Function at 0x5c8280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c8388
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x56183d14fa74290a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4a6e6f41692b0356
mov qword [rsp + 0x24], rdx
movabs rdx, 0x582a05065611296e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1304080103001510
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1114060016010916
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x140a131411140600
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80b040e08110512
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5c8322
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1c
jge 0x5c834f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5c837b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x5c8305
jmp 0x5c836f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457420
mov eax, edi
mov ecx, 0x17
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005c8280

Function at 0x5c8740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c8828
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd8179d65d86edecb
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x78459f8275da94d2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8010d0d060d07
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10a0d0c0c030008
mov qword [rsp + 0x30], rdx
movabs rdx, 0x909050809010a00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5c87c1
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffffbd
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x5c87f2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5c881b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffffbd
add r8d, edx
cmp rsi, 0x10
jb 0x5c87a7
jmp 0x5c880f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457420
mov eax, edi
mov ecx, 0x10
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005c8740
Function at 0x5c95e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c96a6
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x462c636f483e606b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10302030600
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2000703
xor eax, eax
jmp 0x5c9640
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0xf]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0xf]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x5c966d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x5c9694
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 8
jb 0x5c9622
jmp 0x5c9688
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00457420
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005c95e0

Function at 0x5c9b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c9c88
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xd76bfcfa1628e5b9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x76723b198fd76bfc
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5724ca7056d26336
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1100f0f11030308
mov qword [rsp + 0x34], rdx
movabs rdx, 0x305000701050f13
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x7120a03050007
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd1104020a090510
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5c9c22
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x65]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x65]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1c
jge 0x5c9c4f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5c9c7b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x5c9c05
jmp 0x5c9c6f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457420
mov eax, edi
mov ecx, 0x15
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005c9b80