joyce8/EMBER2024-capa huggingface dataset:
Function at 0x58aaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58ab89
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x64734e737c855d43
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x5494
movabs rdx, 0x303050802040108
mov qword [rsp + 0x22], rdx
movabs rdx, 0x106070103010303
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x58ab0a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1a]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x58ab48
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x58ab7b
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x58ab6f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1a]
nop
cmp rsi, 0xa
jb 0x58aaf0
jmp 0x58ab63
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457f40
mov eax, edi
mov ecx, 0xa
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0058aaa0

Function at 0x58b8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58b9bf
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x696f008b87fcf4f8
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x316e49696f008b87
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1e9d74c265156504
mov qword [rsp + 0x26], rdx
movabs rdx, 0x11020900030f110a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb020407050f0f0a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x3010b020407050f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70404010d120005
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58b942
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x58b979
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x58b9b1
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x58b9a5
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x58b925
jmp 0x58b994
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x13
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1a
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0058b8a0
Function at 0x58c300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x58c489
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x8a67b478efa0538b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x21ed6ee9e7176170
mov qword [rsp + 0x25], rdx
movabs rdx, 0x6874f1661921ed6e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x17463662e090969
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6320a661dc821c02
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe0855fff60d15996
mov qword [rsp + 0x42], rdx
movabs rdx, 0x2a1020262b1d0025
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x11f1202281e2a10
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d1d0b0c071e2505
mov qword [rsp + 0x58], rdx
movabs rdx, 0x18220403010e1228
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf27182019181600
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1e1c250a2c0a2003
mov qword [rsp + 0x70], rdx
movabs rdx, 0x18201f1229181017
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x58c40a
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x36
jge 0x58c442
movzx edx, byte [rsp + rax + 0x4a]
lea rsi, [rax + 1]
cmp rsi, 0x36
jae 0x58c47b
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x58c46f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x2d
jb 0x58c3ed
nop
jmp 0x58c463
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x2d
call fcn.00446000
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00457f40
mov eax, edi
mov ecx, 0x2d
call fcn.00457f40
mov rax, rsi
mov ecx, 0x36
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0058c300
Function at 0x58c4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58c5ff
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xe2696f4f4b5e6e35
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x643ff8373969e269
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20d943f920617407
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd5de294f4073cd2b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6570661904ae4cc0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x51405022014231e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0b051e0720210e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x211d031f21050c12
mov qword [rsp + 0x50], rdx
movabs rdx, 0x131a1622131c0407
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb041e20190a2317
mov qword [rsp + 0x60], rdx
movabs rdx, 0x904230e1b1d17
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x58c580
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 7]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x30
jge 0x58c5bc
movzx edx, byte [rsp + rax + 0x40]
lea rsi, [rax + 1]
cmp rsi, 0x30
jae 0x58c5f1
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x58c5e5
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 7]
cmp rsi, 0x26
jb 0x58c562
jmp 0x58c5d7
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x26
call fcn.00446000
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x26
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x26
call fcn.00457f40
mov rax, rsi
mov ecx, 0x30
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0058c4a0
Function at 0x58ce60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58cf7f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x66044678206fd1b2
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc37f7e696fca1066
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc4b5c27fcb207a77
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd14120006130f01
mov qword [rsp + 0x34], rdx
movabs rdx, 0x130c080501090601
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x5050e06130c0805
mov qword [rsp + 0x40], rdx
movabs rdx, 0x712120816100415
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x58cf00
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x58cf3c
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x58cf71
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x58cf65
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6d]
cmp rsi, 0x17
jb 0x58cee5
jmp 0x58cf57
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x17
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1c
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0058ce60

Function at 0x58cfa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58d09f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xcf64d7a969761869
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4f9faaa0aa6fa2cf
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40b0e08010b0e07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x305040b0e08010b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc040a04050a030d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x58d024
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x26]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x26]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x58d05b
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x58d091
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x58d085
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x58d007
jmp 0x58d076
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0xf
call fcn.00457f40
mov rax, rsi
mov ecx, 0x12
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0058cfa0
Function at 0x58d0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58d1cb
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6f01a8fe554bc76e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x496f01a8fe554bc7
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7106fb10b65b701
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50c09030902100d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x805060f10010a05
mov qword [rsp + 0x38], rdx
movabs rdx, 0x410040a090c0504
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58d153
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x58d18a
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x18
jae 0x58d1bd
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x58d1b1
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x58d136
jmp 0x58d1a5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457f40
mov eax, edi
mov ecx, 0x11
call fcn.00457f40
mov rax, rsi
mov ecx, 0x18
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0058d0c0

Function at 0x58d1e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58d349
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x63e7d766759fb269
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x21b764c8a08a656f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xbb6121b764c8a08a
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf67365ae20e46f8b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8893d0a565b66975
mov qword [rsp + 0x38], rdx
movabs rdx, 0x687d67d7ec51fac8
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa220501261e200e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e220f141f19050f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c050e23250f081c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x111b06160e0f0c24
mov qword [rsp + 0x60], rdx
movabs rdx, 0x160b1c2005051228
mov qword [rsp + 0x68], rdx
movabs rdx, 0x14020a21240a051f
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x58d2ca
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x71]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x30
jge 0x58d308
movzx edx, byte [rsp + rax + 0x48]
lea rsi, [rax + 1]
cmp rsi, 0x30
jae 0x58d33b
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2a
jae 0x58d32f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x71]
nop
cmp rsi, 0x2a
jb 0x58d2b0
jmp 0x58d323
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x2a
call fcn.00446000
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x2a
call fcn.00457f40
mov eax, edi
mov ecx, 0x2a
call fcn.00457f40
mov rax, rsi
mov ecx, 0x30
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0058d1e0
Function at 0x58e140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58e29f
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x79e61ac8201413b8
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2079e61ac8201413
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xdd1f4a6505730df1
mov qword [rsp + 0x26], rdx
movabs rdx, 0xdde11ab7ea0cb8c5
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xef6e3335ef30b724
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc0906061b09141b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1f0e152018101719
mov qword [rsp + 0x46], rdx
movabs rdx, 0xc111f0e15201810
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c1a1f1a0a050f04
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc11060f0c0e0212
mov qword [rsp + 0x58], rdx
movabs rdx, 0x102161f13001611
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x58e220
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x31]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2a
jge 0x58e25c
movzx edx, byte [rsp + rax + 0x3e]
lea rsi, [rax + 1]
cmp rsi, 0x2a
jae 0x58e291
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x58e285
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x31]
cmp rsi, 0x21
jb 0x58e202
jmp 0x58e277
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x21
call fcn.00446000
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x21
call fcn.00457f40
mov rax, rsi
mov ecx, 0x2a
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0058e140
Function at 0x58efa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x58f13f
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0xdfc9e9e5db140003
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x80da20de830adfc9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3cf16ea018fb88d2
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd6dde6ffbce6c61
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3edf02a6928ec74
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf6cecb6e09207441
mov qword [rsp + 0x40], rdx
movabs rdx, 0x21320ab7d58fd69
mov qword [rsp + 0x48], rdx
movabs rdx, 0x150023122b223412
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b0d0f2606062414
mov qword [rsp + 0x58], rdx
movabs rdx, 0x310f000c1f320e09
mov qword [rsp + 0x60], rdx
movabs rdx, 0x150725080a052b26
mov qword [rsp + 0x68], rdx
movabs rdx, 0x204113526110f03
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2c18042f2f30291d
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1192f2d1b102b1b
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x58f0c0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x4c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x38
jge 0x58f0f7
movzx edx, byte [rsp + rax + 0x50]
lea rsi, [rax + 1]
cmp rsi, 0x38
jae 0x58f131
movzx esi, byte [rsp + rax + 0x51]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x36
jae 0x58f125
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x36
jb 0x58f09f
jmp 0x58f118
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x36
call fcn.00446000
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x36
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x36
call fcn.00457f40
mov rax, rsi
mov ecx, 0x38
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0058efa0

Function at 0x58f9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58fabf
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x1c6f13621761c721
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x73
movabs rdx, 0x1070301020004
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5000201
xor eax, eax
jmp 0x58fa41
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x58fa7d
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x58fab1
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x58faa5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4f]
cmp rsi, 9
jb 0x58fa27
jmp 0x58fa98
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop
call fcn.00457f40
mov eax, edi
mov ecx, 9
call fcn.00457f40
mov rax, rsi
mov ecx, 0xc
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0058f9e0
Function at 0x58fae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58fbcd
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x242ccd6f68d08adb
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x730069242ccd6f68
mov qword [rsp + 0x22], rdx
movabs rdx, 0x509070602010601
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6000707050509
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58fb55
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x58fb8c
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x58fbbf
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x58fbb3
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x58fb38
jmp 0x58fba7
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457f40
mov eax, edi
mov ecx, 0xb
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0058fae0
Function at 0x598840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59891f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xd39f013acdfad40e
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x36
movabs rdx, 0x201050703050206
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1020005
xor eax, eax
jmp 0x5988a4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x39]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x39]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x5988db
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x598911
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x598905
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x598887
jmp 0x5988f6
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 9
call fcn.00457f40
mov rax, rsi
mov ecx, 0xc
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.00598840

Function at 0x599ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x599d7f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x3d80524774c59c06
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x602060200050000
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x105
xor eax, eax
nop
jmp 0x599d00
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x39]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x599d3c
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x599d71
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x599d65
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x39]
cmp rsi, 8
jb 0x599ce2
jmp 0x599d57
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
nop
call fcn.00457f40
mov eax, edi
mov ecx, 8
call fcn.00457f40
mov rax, rsi
mov ecx, 0xa
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.00599ca0
Function at 0x59cde0
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59cf4b
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movups xmmword [rsp + 0x40], xmm15
mov qword [rsp + 0x20], 0
lea rax, [0x00679ab1]
mov ebx, 6
call fcn.0058a020
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
movups xmmword [rsp + 0x50], xmm15
mov qword [rsp + 0x60], 0
lea rcx, [0x0059cf60]
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x58], rcx
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x60], rcx
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x2b
nop
call fcn.00402e60
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x18]
nop
cmp rcx, 0xffffffffffffffff
je 0x59cf09
mov rdx, qword [rsp + 0x30]
cmp rdx, rcx
jb 0x59cf45
mov qword [rsp + 0x28], rcx
mov rsi, qword [rsp + 0x50]
mov rax, qword [rsp + 0x38]
mov rbx, rcx
lea rdx, [rsp + 0x50]
call rsi
mov rax, qword [rsp + 0x28]
lea rcx, [rax + 1]
mov rbx, qword [rsp + 0x30]
nop
cmp rbx, rcx
jb 0x59cf38
mov rsi, qword [rsp + 0x50]
sub rbx, rax
dec rbx
mov rdi, rbx
neg rbx
sar rbx, 0x3f
and rcx, rbx
mov r8, qword [rsp + 0x38]
lea rax, [r8 + rcx]
mov rbx, rdi
lea rdx, [rsp + 0x50]
call rsi
mov rcx, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
lea rdx, [rsp + 0x50]
call rcx
mov rcx, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov rax, rcx
mov rcx, rbx
nop
call fcn.00458000
call fcn.00457f80
nop
call fcn.00455860
jmp fcn.0059cde0

Function at 0x59d3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59d4df
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x736f8b01148e776c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe26fcb9472736f8b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6ee6f8956ffff19f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50d110112021103
mov qword [rsp + 0x34], rdx
movabs rdx, 0x50412010d110a09
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x3080a0f05041201
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3130c0e0c110213
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x59d460
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x59d49c
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x59d4d1
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x59d4c5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0x15
jb 0x59d445
jmp 0x59d4b7
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x15
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1c
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0059d3c0
Function at 0x59e240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59e31f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6d387267a39a352a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x601010000020306
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x101
xor eax, eax
nop
jmp 0x59e2a0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x59e2dc
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x59e311
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x59e305
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
cmp rsi, 8
jb 0x59e282
jmp 0x59e2f7
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
nop
call fcn.00457f40
mov eax, edi
mov ecx, 8
call fcn.00457f40
mov rax, rsi
mov ecx, 0xa
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0059e240