joyce8/EMBER2024-capa huggingface dataset:
Function at 0x59e3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59e4b6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x666e6c6d77807463
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6177526f666e6c6d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x836c99466b4a7b41
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf09030e0c05020d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3020f130e040a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80f0d08110d0a0a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x59e453
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x13]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x13]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x59e482
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x59e4a9
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x59e436
nop
jmp 0x59e49d
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x14
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.0059e3c0

Function at 0x59e920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59ea28
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xfe11a1b0a5c48a52
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1cab07fe11a1b0a5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x659f004fac6e6f60
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe08020302010b09
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10050a010b06010f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x110a081010050a01
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70a040709070302
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x59e9c0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x59e9f2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x59ea1b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x41]
cmp rsi, 0x13
jb 0x59e9a5
jmp 0x59ea0f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x13
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0059e920
Function at 0x59ed40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59ee36
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xae656cc1446c74ad
mov qword [rsp + 0x32], rdx
movabs rdx, 0x530b9e23e8a3ae65
mov qword [rsp + 0x38], rdx
movabs rdx, 0x656c626154ab6f2e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb040b0e10080a08
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x90b10040d090b04
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd000c0d0b0707
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x59edd3
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x2c]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x2c]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x59ee02
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x59ee29
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x59edb6
nop
jmp 0x59ee1d
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x16
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.0059ed40
Function at 0x5a03a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a0472
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x876217746547f7ef
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2536018762177465
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x701090a07070001
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8050100
xor eax, eax
jmp 0x5a040b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x37]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x5a043d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5a0465
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x37]
cmp rsi, 0xb
jb 0x5a03f1
jmp 0x5a0458
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005a03a0

Function at 0x5a0ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a0d88
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x776d846e6972625a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3244705565966f77
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5010a0007090600
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x50c05010a000709
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0007070707000a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5a0d21
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1a]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x12
jge 0x5a0d53
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5a0d7b
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1a]
cmp rsi, 0xf
jb 0x5a0d07
jmp 0x5a0d6f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xf
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005a0ca0
Function at 0x5a26e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a2808
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x4361657375745853
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5b6461438b597f53
mov qword [rsp + 0x25], rdx
movabs rdx, 0x575b6461438b597f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5869695b3132725c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90a160a11040b0f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x814090a160a1104
mov qword [rsp + 0x38], rdx
movabs rdx, 0x180110080c131705
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1014050c0e181612
mov qword [rsp + 0x48], rdx
movabs rdx, 0x415141009130612
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5a27a0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1c]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x5a27d2
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5a27fb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1c]
cmp rsi, 0x19
jb 0x5a2783
jmp 0x5a27ef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x19
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005a26e0
Function at 0x5a2d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a2e68
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xffe7d7d275f65074
mov qword [rsp + 0x18], rdx
movabs rdx, 0x790984e4c7d461db
mov qword [rsp + 0x20], rdx
movabs rdx, 0xce724ad9790984e4
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd4f3f5d5a372fe6d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf110d0d0c1b0d17
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1a0e1a0f110d0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb19021a17160600
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1701050f15100704
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170a0818180f1113
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5a2e00
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5a]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x5a2e32
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5a2e5b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5a]
cmp rsi, 0x1c
jb 0x5a2de3
jmp 0x5a2e4f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1c
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005a2d40
Function at 0x5a50c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a51f2
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xc3b9bb7003742b53
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc0d63305842353af
mov qword [rsp + 0x20], rdx
movabs rdx, 0x80fcf67352c3c0d6
mov qword [rsp + 0x26], rdx
movabs rdx, 0xbb9aec61726199d7
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x814111c01130d09
mov qword [rsp + 0x36], rdx
movabs rdx, 0x111c01070c0a1613
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1c0c111c01070c0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b0d0c070903060e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170b0f091d1b1110
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa06080d0515050c
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5a518c
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x2a
jge 0x5a51be
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x5a51e5
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
cmp rsi, 0x1e
jb 0x5a5172
jmp 0x5a51d9
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1e
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005a50c0
Function at 0x5a5de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a5ee8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x476a6f6288747566
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6b83596c65a98d6a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8c8a6c7665884f92
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x120a080f0e010917
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd110508030115
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x60e0d120e17000d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x81610090d150a04
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5a5e82
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x15]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x15]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1e
jge 0x5a5eaf
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5a5edb
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x5a5e65
jmp 0x5a5ecf
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x18
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005a5de0
Function at 0x5aa9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5aaae8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xcee274dddb71bd57
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x670d0ef72f6cee2
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc9ea75cfece157ed
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x207150f0d0d030e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x3010a080b060e01
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x10f0f0f070e0301
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1115141412040710
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5aaa80
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x5aaab2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5aaadb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0x16
jb 0x5aaa65
jmp 0x5aaacf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x16
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005aa9e0

Function at 0x5aba60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5abb2b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x748a960aa8415394
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x70a8
movabs rdx, 0x404050608050300
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3050800
xor eax, eax
jmp 0x5abac6
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x70]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x70]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x5abaf7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x5abb1e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x5abaa9
jmp 0x5abb12
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xa
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005aba60
Function at 0x5abc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5abd5c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6ef4f0f1e2de5ce1
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x656d676ef4f0f1e2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x402000208020306
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x405010505060402
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5abcf2
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x77]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x5abd28
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5abd4f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x77]
nop dword [rax]
cmp rsi, 0xb
jb 0x5abcd8
jmp 0x5abd43
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.005abc80

Function at 0x5acee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5acfd6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x312765dbe6535436
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xfd312765dbe65354
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e0f2e3b0e726529
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70d09090e06030f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0c070d09090e06
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf00040408080408
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5acf73
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x5acfa2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5acfc9
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x5acf56
nop
jmp 0x5acfbd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.005acee0
Function at 0x5ad920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ada08
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x92415465cbaf32e0
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x20d4c56fc7c76f92
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70605050003030c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa01070605050003
mov qword [rsp + 0x30], rdx
movabs rdx, 0x209020005070a0d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5ad9a1
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x12
jge 0x5ad9d3
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5ad9fb
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0xf
jb 0x5ad987
jmp 0x5ad9ef
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xf
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005ad920

Function at 0x5c10e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c11a8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2633e6c53644761
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x56
movabs rdx, 0x508080700060003
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8030103
xor eax, eax
jmp 0x5c1141
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x5c1173
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x5c119b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
cmp rsi, 9
jb 0x5c1127
jmp 0x5c118f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005c10e0
Function at 0x5c1740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c183c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6fb2ac96d169b2d2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9a636fb2ac96d169
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd1ab1bdea4227373
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0e0601000f110d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4030e0409100004
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0f04110511090c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5c17d0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x5c1808
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5c182f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
nop word [rax + rax]
cmp rsi, 0x12
jb 0x5c17b6
jmp 0x5c1823
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.005c1740

Function at 0x5c2540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c2617
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
lea rax, [0x005d64c0]
nop
call fcn.0040c940
movabs rcx, 0x74467883776e7445
mov qword [rax], rcx
movabs rcx, 0x8a74707657744678
mov qword [rax + 5], rcx
movabs rcx, 0x602020c090c0a0a
mov qword [rsp + 0x10], rcx
movabs rcx, 0x50a050905040203
mov qword [rsp + 0x18], rcx
xor ecx, ecx
jmp 0x5c25c0
movzx r9d, byte [rsi + rax]
sub r9d, edx
lea edx, [r9 + 9]
mov byte [rax + rdi], dl
lea edx, [r8 + 9]
mov byte [rax + rsi], dl
add rcx, 2
nop dword [rax]
cmp rcx, 0x10
jge 0x5c25ec
movzx edx, byte [rsp + rcx + 0x10]
movzx esi, byte [rsp + rcx + 0x11]
mov edi, edx
xor edx, esi
add edx, ecx
cmp rdi, 0xd
jae 0x5c260a
movzx r8d, byte [rdi + rax]
sub r8d, edx
cmp rsi, 0xd
jb 0x5c25a2
jmp 0x5c25fe
mov ebx, 0xd
mov rcx, rbx
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xd
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax]
jmp fcn.005c2540
Function at 0x5c3660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c37b2
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x691e580c37617144
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4328690c2d36c859
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2d735e5a4328690c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x414f505c6149e719
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6166732f79912b69
mov qword [rsp + 0x38], rdx
movabs rdx, 0x685e555933115a42
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2627150c201c0615
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40e141b0e091300
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8060b23112a1e24
mov qword [rsp + 0x58], rdx
movabs rdx, 0x621062b1f26270a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x40a290d09091b02
mov qword [rsp + 0x68], rdx
movabs rdx, 0x24121f1b1808272b
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x5c374d
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x40]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x40]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x30
jge 0x5c377a
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x5c37a5
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x2c
jb 0x5c3730
jmp 0x5c3795
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x2c
call fcn.0044a200
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x2c
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x2c
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005c3660