joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5ca180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ca24b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6d726119602ec457
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x705b
movabs rdx, 0x807080802030403
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4080103
xor eax, eax
jmp 0x5ca1e6
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x5ca217
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x5ca23e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x5ca1c9
jmp 0x5ca232
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457420
mov eax, edi
mov ecx, 0xa
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005ca180

Function at 0x5cade0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5caeb2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2c91d76f1b2c6593
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x7417
movabs rdx, 0x200070700060508
mov qword [rsp + 0x22], rdx
movabs rdx, 0x603060602080200
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x5cae4a
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x3f
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x5cae7b
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5caea5
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x3f
add r8d, edx
cmp rsi, 0xa
jb 0x5cae30
jmp 0x5cae96
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0xa
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005cade0
Function at 0x5cb2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cb3ab
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x27bc451846531706
mov qword [rsp + 0x19], rdx
movabs rdx, 0x95084a6d4327bc45
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80b04050b0a0c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc00080b04050b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70c04000600010a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5cb344
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x6d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x6d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x5cb377
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x5cb39e
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x5cb327
jmp 0x5cb392
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457420
mov eax, edi
mov ecx, 0xd
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005cb2c0

Function at 0x5dff40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e0028
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x128c7469b04986ba
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd345957a7d9f128c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30d030d0d070800
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7090b08030d030d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd060109090d00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5dffc1
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffcc
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x14
jge 0x5dfff2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5e001b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffcc
add r8d, edx
cmp rsi, 0xe
jb 0x5dffa7
jmp 0x5e000f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457420
mov eax, edi
mov ecx, 0xe
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005dff40
Function at 0x5e31a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e32f2
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x308a0111fa3008ba
mov qword [rsp + 0x18], rdx
movabs rdx, 0xdbfefe111434308a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30432d33a8ac912d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x304d2d30e60030e8
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9eaddbe6dbe330e7
mov qword [rsp + 0x36], rdx
movabs rdx, 0x111e230c1e0b160a
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1004111e230c1e0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1225201c22190625
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6181e03090c0f0f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2400050b1218040a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2024210d01200106
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1b000a030124000f
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x5e328a
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 3
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x32
jge 0x5e32bb
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x5e32e5
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 3
add r8d, edx
cmp rsi, 0x26
jb 0x5e3270
jmp 0x5e32d6
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x26
call fcn.004446e0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x26
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0x26
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005e31a0

Function at 0x5e7860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e79a8
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xcfc24c346943be00
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa0391f41a8a8cfc2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7c53afd435aa342d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3772aab145cb9b35
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe87be79fabb4bfb4
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb050d2014181b23
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x2510060b072101
mov qword [rsp + 0x46], rdx
movabs rdx, 0x121e002510060b07
mov qword [rsp + 0x48], rdx
movabs rdx, 0x82218241e080306
mov qword [rsp + 0x50], rdx
movabs rdx, 0x30915221b132506
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1705241c13051a1f
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x5e7940
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x60
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2a
jge 0x5e7971
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x5e799b
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x60
add r8d, edx
cmp rsi, 0x26
jb 0x5e7922
jmp 0x5e798f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x26
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x26
call fcn.00457420
mov eax, edi
mov ecx, 0x26
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005e7860
Function at 0x5e8ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e8bb6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xfa1a7241691f61fb
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0dfa1a7241691f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1311fc17631db523
mov qword [rsp + 0x38], rdx
movabs rdx, 0x210070e0b110009
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3110210070e0b11
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80f0c060a0a110f
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x5e8b50
movzx r9d, byte [rsp + rsi + 0x2e]
add r9d, 0x3d
add edx, r9d
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x5e8b82
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5e8ba9
movzx r8d, byte [rsp + rdi + 0x2e]
add r8d, 0x3d
add r8d, edx
cmp rsi, 0x12
jb 0x5e8b36
nop
jmp 0x5e8b9d
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457420
mov eax, edi
mov ecx, 0x12
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.005e8ac0

Function at 0x5e94a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e9588
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x360d4d41651829bc
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x43126132f9d44636
mov qword [rsp + 0x22], rdx
movabs rdx, 0x508060200010109
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90a0b0701060508
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90d0e0200090e06
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5e9521
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x19
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x16
jge 0x5e9552
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5e957b
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x19
add r8d, edx
cmp rsi, 0xf
jb 0x5e9507
jmp 0x5e956f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457420
mov eax, edi
mov ecx, 0xf
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005e94a0
Function at 0x5e96a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5e97a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xa5c472ec7eefe5ef
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe8418140ca5c472
mov qword [rsp + 0x22], rdx
movabs rdx, 0x727e7e630597f874
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb040f1310080906
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc13130601021207
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x307101003100c13
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40e120a000f010e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5e9742
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x5e976f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5e979b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x5e9725
jmp 0x5e978f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457420
mov eax, edi
mov ecx, 0x15
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005e96a0

Function at 0x5e9f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ea016
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6a726b4165664850
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x234543366a726b41
mov qword [rsp + 0x20], rdx
movabs rdx, 0x615b574472472232
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf12050d0b0f0701
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9110508010508
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120e070a090c0100
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5e9fb0
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xfffffffb
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x5e9fe2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5ea009
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xfffffffb
add r8d, edx
cmp rsi, 0x14
jb 0x5e9f96
nop
jmp 0x5e9ffd
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457420
mov eax, edi
mov ecx, 0x14
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.005e9f20
Function at 0x5eb0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5eb1d6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x610405edcb07fa53
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x64d5610405edcb07
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x97fc756f01159a12
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0d111103040204
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc1011060b0d1111
mov qword [rsp + 0x30], rdx
movabs rdx, 0x103050a080d0809
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5eb173
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x5eb1a2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5eb1c9
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x5eb156
nop
jmp 0x5eb1bd
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457420
mov eax, edi
mov ecx, 0x12
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.005eb0e0

Function at 0x5eb200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5eb2f6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x61859e828a6e6194
mov qword [rsp + 0x19], rdx
movabs rdx, 0xbb8d8461859e828a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb087797475a66dce
mov qword [rsp + 0x24], rdx
movabs rdx, 0x902040c12120d0b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa03000e0902040c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x12030d0805031106
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5eb290
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffc8
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x5eb2c2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5eb2e9
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffc8
add r8d, edx
cmp rsi, 0x13
jb 0x5eb276
nop
jmp 0x5eb2dd
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457420
mov eax, edi
mov ecx, 0x13
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.005eb200
Function at 0x5ebe80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ebf52
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x32806cac9c97888c
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x729fb82e
movabs rdx, 0xa01090406030902
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60009010b000902
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5ebeee
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x5ebf1b
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5ebf45
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x5ebed1
jmp 0x5ebf36
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0xc
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005ebe80

Function at 0x5ec5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ec6d6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x9a767eb103d48c52
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb76c9a767eb103d4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x656e886174efa585
mov qword [rsp + 0x24], rdx
movabs rdx, 0x210030f03040505
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4100a090210030f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100b01070c100a08
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5ec673
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x15]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x15]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x5ec6a2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5ec6c9
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x5ec656
nop
jmp 0x5ec6bd
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457420
mov eax, edi
mov ecx, 0x12
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.005ec5e0
Function at 0x5f23c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f24d2
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xa1b172bc755174b6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8da78b87ac77ef8a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xcb6f69b4c1e09f82
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb0a080817100604
mov qword [rsp + 0x36], rdx
movabs rdx, 0x9000b0a08081710
mov qword [rsp + 0x38], rdx
movabs rdx, 0x101107080c0e1313
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0d041213090f0c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11101406040a0010
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5f2471
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x5f249e
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5f24c5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x5f2454
jmp 0x5f24b9
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.004446e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457420
mov eax, edi
mov ecx, 0x18
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005f23c0
Function at 0x5f3d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f3e16
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x7c45646441827f50
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6884eac6b17c4564
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8c8665818a75c885
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1409140b090b140e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x908020701110a01
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80d090b13100911
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5f3db3
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x5f3de2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5f3e09
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x5f3d96
nop
jmp 0x5f3dfd
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457420
mov eax, edi
mov ecx, 0x15
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.005f3d20

Function at 0x5f3e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f3f36
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6586f8c3af898850
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5174ef6586f8c3af
mov qword [rsp + 0x22], rdx
movabs rdx, 0x610c61a812bdb5d8
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50802050b050b0e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x41111080f010508
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0b050c03060e08
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5f3ed3
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x5f3f02
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5f3f29
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x5f3eb6
nop
jmp 0x5f3f1d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457420
mov eax, edi
mov ecx, 0x13
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.005f3e40
Function at 0x5f6c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f6d2b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x61748e7de384fa7a
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x34
movabs rdx, 0x203030403000802
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8010805
xor eax, eax
jmp 0x5f6cc4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x5f6cf7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x5f6d1e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x5f6ca7
jmp 0x5f6d12
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00457420
mov eax, edi
mov ecx, 9
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005f6c60

Function at 0x5f72e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5f73d6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x98c10e8fb474987a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x77536598c10e8fb4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7c666e49c05c77d5
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70b0b030605070e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10505030506070b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3070d00040a120c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5f7370
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffcc
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x5f73a2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5f73c9
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffcc
add r8d, edx
cmp rsi, 0x13
jb 0x5f7356
nop
jmp 0x5f73bd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457420
mov eax, edi
mov ecx, 0x13
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.005f72e0