joyce8/EMBER2024-capa huggingface dataset:
Function at 0x59ee80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59ef6b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xeb8ad8753c6789f8
mov qword [rsp + 0x18], rdx
movabs rdx, 0x86f7e9a46f6637c0
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0f0e0903060c01
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80606050f000e09
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5090f0d00070d07
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x59ef04
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x18
jge 0x59ef37
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x59ef5e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x59eee7
jmp 0x59ef52
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457420
mov eax, edi
mov ecx, 0x10
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0059ee80

Function at 0x59f640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59f766
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xb1649b7369675e52
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x75838f697672a953
mov qword [rsp + 0x23], rdx
movabs rdx, 0x7d446c728275838f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6b64a4ad65816474
mov qword [rsp + 0x30], rdx
movabs rdx, 0x13150e1b1a051007
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1007061c1c090114
mov qword [rsp + 0x40], rdx
movabs rdx, 0x151a0517140f1906
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15100f0f0701130e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6101b17190d0110
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x59f700
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x28
jge 0x59f72d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x59f754
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x59f6e3
jmp 0x59f748
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.004446e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00457420
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0059f640
Function at 0x59fd00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59fe08
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x65fe0d274b3c2a53
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5563646a62432165
mov qword [rsp + 0x26], rdx
movabs rdx, 0x573616fa7563653b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x16060f0905160408
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1408090104020e0c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x916140809010402
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1504020408061302
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x59fda0
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 6
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x59fdd1
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x59fdfb
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 6
add r8d, edx
cmp rsi, 0x17
jb 0x59fd85
jmp 0x59fdef
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457420
mov eax, edi
mov ecx, 0x17
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0059fd00

Function at 0x5a0020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a0148
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x3075fc2c0054655e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x23f973653a2de069
mov qword [rsp + 0x25], rdx
movabs rdx, 0x8f23f973653a2de0
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd247613f28371e70
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x100f000702041009
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe100f00070204
mov qword [rsp + 0x38], rdx
movabs rdx, 0x915001403021810
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb12121517141710
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa130f140b020514
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5a00e0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 9
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x5a0111
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5a013b
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 9
add r8d, edx
cmp rsi, 0x19
jb 0x5a00c3
jmp 0x5a012f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457420
mov eax, edi
mov ecx, 0x19
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005a0020
Function at 0x5a29c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a2ad3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xf7abb946d6a1d091
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc3a26606f1abc0e5
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9669e8a4dce0cc61
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc09070815111107
mov qword [rsp + 0x36], rdx
movabs rdx, 0x60f0c0907081511
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90a050313060b14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1707051212011106
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0e0c0014000201
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5a2a6e
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffa7
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x5a2a9f
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5a2ac6
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffa7
add r8d, edx
cmp rsi, 0x18
jb 0x5a2a54
jmp 0x5a2aba
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.004446e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457420
mov eax, edi
mov ecx, 0x18
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005a29c0

Function at 0x5a3ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a3e26
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x41264d2a3f441f43
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2f41264d2a3f441f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x28e836525d657219
mov qword [rsp + 0x24], rdx
movabs rdx, 0x72588b213d2c6926
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70f0053200617644
mov qword [rsp + 0x34], rdx
movabs rdx, 0x90f1f1304141e09
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x150d061011131613
mov qword [rsp + 0x44], rdx
movabs rdx, 0x7012015150d0610
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8191d0d0e17111c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c0c0609030d1105
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd07080202061910
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x5a3dc0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x49]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x49]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x2c
jge 0x5a3ded
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x5a3e14
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x21
jb 0x5a3da2
jmp 0x5a3e08
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
call fcn.004446e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
call fcn.00457420
mov eax, edi
mov ecx, 0x21
nop dword [rax + rax]
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005a3ce0
Function at 0x5a4d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a4e28
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x4437b52e3c6ddedb
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xda77ac1f6e4437b5
mov qword [rsp + 0x22], rdx
movabs rdx, 0xce3ec722ee8503b1
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf14000704071310
mov qword [rsp + 0x32], rdx
movabs rdx, 0x120e0c0a03060904
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x141403040612120e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5101110140d0101
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5a4dc0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffff83
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x5a4df1
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5a4e1b
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffff83
add r8d, edx
cmp rsi, 0x15
jb 0x5a4da5
jmp 0x5a4e0f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457420
mov eax, edi
mov ecx, 0x15
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005a4d20

Function at 0x5a5f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a601c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x76d5657a32aa0743
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5799a97d6e8e76d5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1080b0408060803
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80c020a060a0808
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5a5fb5
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x5a5fe8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5a600f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x5a5f98
jmp 0x5a6003
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457420
mov eax, edi
mov ecx, 0xe
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.005a5f40
Function at 0x5a6a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a6b28
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x75d265eb70865a43
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcdfe69fe5b7475d2
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1040c0a0d0b0102
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x901060101040c0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1030d0903030602
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5a6ac1
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0x70
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x14
jge 0x5a6af2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5a6b1b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0x70
add r8d, edx
cmp rsi, 0xe
jb 0x5a6aa7
jmp 0x5a6b0f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457420
mov eax, edi
mov ecx, 0xe
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005a6a40

Function at 0x5a6b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a6c12
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x95c184747365d843
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x5797889e
movabs rdx, 0xa08030707010603
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5050907030a0a08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5a6bab
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffd5
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x5a6bdc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5a6c05
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffd5
add r8d, edx
cmp rsi, 0xc
jb 0x5a6b91
jmp 0x5a6bf7
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00457420
mov eax, edi
mov ecx, 0xc
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005a6b40
Function at 0x5a6ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a6f72
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x35a33920dbf47243
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x652c
movabs rdx, 0x803020403040406
mov qword [rsp + 0x22], rdx
movabs rdx, 0x802070504060803
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x5a6f0a
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x24
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x5a6f3b
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5a6f65
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x24
add r8d, edx
cmp rsi, 0xa
jb 0x5a6ef0
jmp 0x5a6f56
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0xa
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005a6ea0

Function at 0x5a7fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a80a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6ffe651b65140dc7
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc2d4d483275e66f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3c746ede0befe231
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80810130e160111
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd16121001130012
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x8020d1612100113
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40b040610080a0f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5a8042
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x53]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x53]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1a
jge 0x5a806f
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5a809b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x5a8025
jmp 0x5a808f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457420
mov eax, edi
mov ecx, 0x17
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005a7fa0
Function at 0x5a88c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a89d2
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6e7b646e61707573
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6e7e955397718f74
mov qword [rsp + 0x25], rdx
movabs rdx, 0x746e7e955397718f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6977436e62725b6f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x110a0a140c161208
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1808060c0d17180e
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x16001808060c0d17
mov qword [rsp + 0x40], rdx
movabs rdx, 0x17090a17010c0a0b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5a8971
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x1a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x5a899e
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5a89c5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x5a8954
jmp 0x5a89b9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457420
mov eax, edi
mov ecx, 0x19
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005a88c0

Function at 0x5a90c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a91d2
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xc1a7d1ea649ed034
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4e65a16e83684374
mov qword [rsp + 0x26], rdx
movabs rdx, 0x668c74a24e65a16e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xcdd4a2207483e369
mov qword [rsp + 0x32], rdx
movabs rdx, 0x18061b0004011b18
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x20d150d001a1616
mov qword [rsp + 0x42], rdx
movabs rdx, 0x50001001019020d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a071a1b000b0412
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5a9171
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x5a919e
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5a91c5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1c
jb 0x5a9154
jmp 0x5a91b9
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.004446e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457420
mov eax, edi
mov ecx, 0x1c
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005a90c0
Function at 0x5aa720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5aa808
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x9bf6740e6dfe6d03
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf9f9dcfc7af79bf6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60b020701080804
mov qword [rsp + 0x26], rdx
movabs rdx, 0x209060b02070108
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa020c0c010d0008
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5aa7a1
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x5e
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x12
jge 0x5aa7d2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5aa7fb
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x5e
add r8d, edx
cmp rsi, 0xe
jb 0x5aa787
jmp 0x5aa7ef
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457420
mov eax, edi
mov ecx, 0xe
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005aa720

Function at 0x5abae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5abbc8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xa7736e925b747ea1
mov qword [rsp + 0x18], rdx
movabs rdx, 0x65b3787e6564a773
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x70c0c000c07
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40a0000070c0c00
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70100030a080b0c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5abb61
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0xffffffdb
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x12
jge 0x5abb92
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5abbbb
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0xffffffdb
add r8d, edx
cmp rsi, 0xe
jb 0x5abb47
jmp 0x5abbaf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457420
mov eax, edi
mov ecx, 0xe
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005abae0
Function at 0x5ad280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ad352
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x5e65f26950fffded
mov qword [rsp + 0x19], rdx
movabs rdx, 0x654a745e65f26950
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x307020109050208
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x50703
xor eax, eax
jmp 0x5ad2eb
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x70
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x5ad31c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5ad345
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x70
add r8d, edx
cmp rsi, 0xb
jb 0x5ad2d1
jmp 0x5ad337
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00457420
mov eax, edi
mov ecx, 0xb
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005ad280

Function at 0x5adc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5adce8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x504ea7924cb714b1
mov qword [rsp + 0x18], rdx
movabs rdx, 0x28fab4c4e100bab
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40a060e0c00020d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe0c0905080e000e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0a0d0901020006
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5adc81
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x4b
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x18
jge 0x5adcb2
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5adcdb
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x4b
add r8d, edx
cmp rsi, 0x10
jb 0x5adc67
jmp 0x5adccf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457420
mov eax, edi
mov ecx, 0x10
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005adc00