joyce8/EMBER2024-capa huggingface dataset:
Function at 0x583660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x583768
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xf880773a3093766a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3e24a7e8f880773a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20676e2b7eb961ff
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1030b1005060808
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf070c0210090a06
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb010c030f070c02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7090e0506071001
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x583702
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x76]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1c
jge 0x58372f
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x58375b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x5836e5
jmp 0x58374f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457d20
mov eax, edi
mov ecx, 0x14
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00583660

Function at 0x583780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58384b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x36e83220222d2e41
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x20f3
movabs rdx, 0x507020808080103
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x600
xor eax, eax
jmp 0x5837e5
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x46]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xa
jge 0x583817
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xa
jae 0x58383e
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x5837c8
jmp 0x583832
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457d20
mov eax, edi
mov ecx, 0xa
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00583780
Function at 0x583860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x583988
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x81c4190f116fcf97
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x9dff946f1cf12334
mov qword [rsp + 0x23], rdx
movabs rdx, 0x649dff946f1cf123
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1b0f65c0bd0076bd
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80809070d011411
mov qword [rsp + 0x34], rdx
movabs rdx, 0x918030008080907
mov qword [rsp + 0x38], rdx
movabs rdx, 0x170309150d000115
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140e09140f140b01
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd110605130a1504
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x583920
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x583952
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x58397b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x39]
cmp rsi, 0x19
jb 0x583903
jmp 0x58396f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457d20
mov eax, edi
mov ecx, 0x19
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00583860
Function at 0x583aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x583c52
sub rsp, 0xa0
mov qword [rsp + 0x98], rbp
lea rbp, [rsp + 0x98]
movabs rdx, 0x630764b7a5a7b373
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x653e6f630764b7a5
mov qword [rsp + 0x22], rdx
movabs rdx, 0x66b8e0c575c6da72
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x208320d689967372
mov qword [rsp + 0x32], rdx
movabs rdx, 0x615eae20deeea864
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x9259556788696e6e
mov qword [rsp + 0x42], rdx
movabs rdx, 0x4b4609beae729c86
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x1e1c301020012009
mov qword [rsp + 0x52], rdx
movabs rdx, 0x420282b10061e1c
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd0c031e1d2f1d32
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2f031d2c17212602
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2b2e0f032119322f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x10312e1320170116
mov qword [rsp + 0x78], rdx
movabs rdx, 0x150d171911303224
mov qword [rsp + 0x80], rdx
movabs rdx, 0x1c2f2a3115132f00
mov qword [rsp + 0x88], rdx
movabs rdx, 0x1500200c00300329
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x583be0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x73]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x46
jge 0x583c12
movzx edx, byte [rsp + rax + 0x52]
movzx esi, byte [rsp + rax + 0x53]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x33
jae 0x583c45
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x73]
cmp rsi, 0x33
jb 0x583bc3
jmp 0x583c35
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x33
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov eax, esi
mov ecx, 0x33
nop dword [rax]
call fcn.00457d20
mov eax, edi
mov ecx, 0x33
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00583aa0
Function at 0x585800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x585966
sub rsp, 0xc0
mov qword [rsp + 0xb8], rbp
lea rbp, [rsp + 0xb8]
movabs rdx, 0x6a816d356e697324
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x75d964609f6d766a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6ba452406f208576
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x74732f575069b074
mov qword [rsp + 0x36], rdx
movabs rdx, 0x866135202ed3a283
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x676e5f7972340577
mov qword [rsp + 0x46], rdx
movabs rdx, 0x17926ed28f5f8e6d
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xee6a207267201c8d
mov qword [rsp + 0x56], rdx
movabs rdx, 0x6a25204f740d0320
mov qword [rsp + 0x5e], rdx
movabs rdx, 0x130f181a46003000
mov qword [rsp + 0x66], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x00762612]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045835a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x5858f9
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x48]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x52
jge 0x58592b
movzx edx, byte [rsp + rax + 0x66]
movzx esi, byte [rsp + rax + 0x67]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x585958
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x48]
cmp rsi, 0x47
jb 0x5858df
jmp 0x58594c
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x47
call fcn.00444d40
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
mov eax, esi
mov ecx, 0x47
call fcn.00457d20
mov eax, edi
mov ecx, 0x47
nop
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00585800
Function at 0x585980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x585ae7
sub rsp, 0xd0
mov qword [rsp + 0xc8], rbp
lea rbp, [rsp + 0xc8]
movabs rdx, 0x6e9beb3a2fc1f26a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x75e864546cd3e36e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7373202503d56b73
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc33bdcff6e9de2f7
mov qword [rsp + 0x34], rdx
movabs rdx, 0x671174e650a77286
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x659d2d5472743f2c
mov qword [rsp + 0x44], rdx
movabs rdx, 0x26ed24ed20d74140
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x5cdf206c6168553e
mov qword [rsp + 0x54], rdx
movabs rdx, 0xa80bc282740e9420
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x30930083e133731
mov qword [rsp + 0x64], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x00764aa4]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045834c
mov rbp, qword [rbp]
xor eax, eax
jmp 0x585a80
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x33]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x33]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x64
jge 0x585aad
movzx edx, byte [rsp + rax + 0x64]
movzx esi, byte [rsp + rax + 0x65]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x585ada
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x47
jb 0x585a5f
jmp 0x585ace
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x47
call fcn.00444d40
mov rbp, qword [rsp + 0xc8]
add rsp, 0xd0
ret
mov eax, esi
mov ecx, 0x47
call fcn.00457d20
mov eax, edi
mov ecx, 0x47
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00585980
Function at 0x589320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x5894d2
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
movabs rdx, 0xe9ede5204e4f530b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x65c0cee9ede5204e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x667ad627394f20e9
mov qword [rsp + 0x26], rdx
movabs rdx, 0x15141d451cd6e79d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5e11c92261742764
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6e4d370ecbef67ee
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x3fd3e80c6672dff1
mov qword [rsp + 0x46], rdx
movabs rdx, 0x252b0e2509002709
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x141c252b0e250900
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2017261711271517
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2622091110231f19
mov qword [rsp + 0x60], rdx
movabs rdx, 0x182c150d29252008
mov qword [rsp + 0x68], rdx
movabs rdx, 0x914162921001c07
mov qword [rsp + 0x70], rdx
movabs rdx, 0x18311c2f30281306
mov qword [rsp + 0x78], rdx
movabs rdx, 0x270e0f1120171005
mov qword [rsp + 0x80], rdx
movabs rdx, 0x61a190b220e2307
mov qword [rsp + 0x88], rdx
xor eax, eax
nop
jmp 0x589460
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xc]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x42
jge 0x589492
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x33
jae 0x5894c5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xc]
cmp rsi, 0x33
jb 0x589442
jmp 0x5894b5
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x33
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov eax, esi
mov ecx, 0x33
nop dword [rax]
call fcn.00457d20
mov eax, edi
mov ecx, 0x33
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00589320
Function at 0x58a1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x58a326
sub rsp, 0xc0
mov qword [rsp + 0xb8], rbp
lea rbp, [rsp + 0xb8]
movabs rdx, 0x6e69ba3a6e6fbc9b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc2090a3f20c526e
mov qword [rsp + 0x22], rdx
movabs rdx, 0xacd3d0c2b1cfc2a5
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1a1d5f673e537274
mov qword [rsp + 0x32], rdx
movabs rdx, 0x3d61d648ecc47572
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc0ddab6c729ba42c
mov qword [rsp + 0x42], rdx
movabs rdx, 0x61a29fb2206f74ca
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x8e76d96c2ac0f172
mov qword [rsp + 0x52], rdx
movabs rdx, 0x96bb206f7474a420
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x3738112426144001
mov qword [rsp + 0x62], rdx
lea rdi, [rsp + 0x68]
lea rsi, str.87__v_n_E_n
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045835a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x58a2b9
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x56
jge 0x58a2eb
movzx edx, byte [rsp + rax + 0x62]
movzx esi, byte [rsp + rax + 0x63]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x58a318
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6c]
cmp rsi, 0x47
jb 0x58a29f
jmp 0x58a30c
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x47
call fcn.00444d40
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
mov eax, esi
mov ecx, 0x47
call fcn.00457d20
mov eax, edi
mov ecx, 0x47
nop
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.0058a1c0
Function at 0x58a340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x58a4c6
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x63af0e298e8f5389
mov qword [rsp + 0x19], rdx
movabs rdx, 0x84451363af0e298e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x666fe40f2d6f2550
mov qword [rsp + 0x24], rdx
movabs rdx, 0xbcd920cc3b79850a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x61ffef3361b65464
mov qword [rsp + 0x34], rdx
movabs rdx, 0x47752067fcfde96e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x13416f468bd7653e
mov qword [rsp + 0x44], rdx
movabs rdx, 0x42d1a191000131d
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x606251f042d1a19
mov qword [rsp + 0x50], rdx
movabs rdx, 0x240f140603020f17
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f061a2620322e1f
mov qword [rsp + 0x60], rdx
movabs rdx, 0x505020306102b0e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x80c1c2a1021080a
mov qword [rsp + 0x70], rdx
movabs rdx, 0xb2409160f062f31
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x58a459
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x34
jge 0x58a488
movzx edx, byte [rsp + rax + 0x4c]
movzx esi, byte [rsp + rax + 0x4d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x33
jae 0x58a4b5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop
cmp rsi, 0x33
jb 0x58a43c
jmp 0x58a4a9
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x33
call fcn.00444d40
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x33
call fcn.00457d20
mov eax, edi
mov ecx, 0x33
nop dword [rax]
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.0058a340

Function at 0x5901a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5902a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x924720dd757ca320
mov qword [rsp + 0x19], rdx
movabs rdx, 0x823d60846163a192
mov qword [rsp + 0x20], rdx
movabs rdx, 0x786570796f2f307a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x107070411080108
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10102160e0d0107
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70910160c121101
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120707100b090f03
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x590240
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x590272
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x59029b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 0x17
jb 0x590225
jmp 0x59028f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457d20
mov eax, edi
mov ecx, 0x17
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005901a0
Function at 0x592340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59243c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xa1d2043334f3bcd
mov qword [rsp + 0x18], rdx
movabs rdx, 0x27050a1d2043334f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4ce01d504c27662f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf0e0a1100110c08
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd08020706080f0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x304010a0910020e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5923d0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x17]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x592408
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x59242f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x17]
nop word [rax + rax]
cmp rsi, 0x12
jb 0x5923b6
jmp 0x592423
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457d20
mov eax, edi
mov ecx, 0x12
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.00592340
Function at 0x59cae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x59cc98
sub rsp, 0xa0
mov qword [rsp + 0x98], rbp
lea rbp, [rsp + 0x98]
movabs rdx, 0xf620743ee9e6f3e6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb7fd65db65e16e4e
mov qword [rsp + 0x25], rdx
movabs rdx, 0x74b7fd65db65e16e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x61cbde0c4e6c62e1
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd5618f654be5f979
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf420f95620cffe69
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe1f691eaeb72d075
mov qword [rsp + 0x46], rdx
movabs rdx, 0xfe8f6f4e6352e95d
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x2f350e2f03223238
mov qword [rsp + 0x56], rdx
movabs rdx, 0x30082f350e2f0322
mov qword [rsp + 0x58], rdx
movabs rdx, 0x72615190a370325
mov qword [rsp + 0x60], rdx
movabs rdx, 0x4382828051a2e1b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x381a2c081c231122
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1632002035042328
mov qword [rsp + 0x78], rdx
movabs rdx, 0x201111631253017
mov qword [rsp + 0x80], rdx
movabs rdx, 0x14032a252a332c2d
mov qword [rsp + 0x88], rdx
movabs rdx, 0x182f151e030c230f
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x59cc2c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x48]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x42
jge 0x59cc5e
movzx edx, byte [rsp + rax + 0x56]
movzx esi, byte [rsp + rax + 0x57]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x39
jae 0x59cc8b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x48]
cmp rsi, 0x39
jb 0x59cc12
jmp 0x59cc7f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x39
call fcn.00444d40
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov eax, esi
mov ecx, 0x39
call fcn.00457d20
mov eax, edi
mov ecx, 0x39
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax]
jmp fcn.0059cae0

Function at 0x59d2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59d386
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe8ec49b22027c3ef
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x102060400070507
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3020600
xor eax, eax
jmp 0x59d320
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x5b]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x59d34d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x59d374
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 8
jb 0x59d302
jmp 0x59d368
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00457d20
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.0059d2c0
Function at 0x59d940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59da0b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x768043736a5e8043
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x8445
movabs rdx, 0x207070103090303
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x601
xor eax, eax
jmp 0x59d9a5
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xa
jge 0x59d9d7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xa
jae 0x59d9fe
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x59d988
jmp 0x59d9f2
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457d20
mov eax, edi
mov ecx, 0xa
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.0059d940
Function at 0x5a1b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a1c72
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x5e796572622b7180
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x927866275e796572
mov qword [rsp + 0x20], rdx
movabs rdx, 0x612075a480658061
mov qword [rsp + 0x28], rdx
movabs rdx, 0x756fbd65728b562b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa986a96470656372
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140d141303071f01
mov qword [rsp + 0x40], rdx
movabs rdx, 0x914220b01080f21
mov qword [rsp + 0x48], rdx
movabs rdx, 0x600010f0d080b03
mov qword [rsp + 0x50], rdx
movabs rdx, 0x111101060a020300
mov qword [rsp + 0x58], rdx
movabs rdx, 0x231623101f131619
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x5a1c0f
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x28
jge 0x5a1c3c
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x5a1c65
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x24
jb 0x5a1bf2
jmp 0x5a1c57
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x24
call fcn.00444d40
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x24
nop
call fcn.00457d20
mov eax, edi
mov ecx, 0x24
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005a1b40

Function at 0x5a3ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movups xmmword [rsp + 0x58], xmm15
movabs rdx, 0x69beb678b7b4b400
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa72b625eb0ae1a6d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90a0e0c08070d0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70301020b0a0e08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6050c050f0b0504
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5a3c20
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x5b]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x5a3c4b
movzx edx, byte [rsp + rax + 0x30]
movzx ebx, byte [rsp + rax + 0x31]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 0x10
jae 0x5a3c87
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 0x10
jb 0x5a3c03
jmp 0x5a3c7b
movups xmmword [rsp + 0x10], xmm15
xor eax, eax
jmp 0x5a3c61
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x10], cl
inc rax
cmp rax, 0x10
jl 0x5a3c55
movups xmm0, xmmword [rsp + 0x10]
movups xmmword [rsp + 0x58], xmm0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, ebx
mov ecx, 0x10
call fcn.00457d20
mov eax, esi
mov ecx, 0x10
call fcn.00457d20
nop
int3