joyce8/EMBER2024-capa huggingface dataset:
Function at 0x58c540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58c63c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x8186648d9d8a8faa
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x508186648d9d8a8f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x74936de14e688492
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30a03090a01030d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf06020500050f09
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf090d05100a0407
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58c5d0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x58c608
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x58c62f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2c]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x58c5b6
jmp 0x58c623
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0058c540

Function at 0x58c660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58c74b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x8e08bf1bada740bb
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xba6fc4d51c709b8e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x103050201020007
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4040a03060c0103
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30c040b0a08050e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x58c6e4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x16
jge 0x58c717
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x58c73e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x58c6c7
jmp 0x58c732
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xf
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0058c660
Function at 0x58d2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58d3d2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x6a877d768f986d47
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9778506f72696f6b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x596a69886f769778
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x886881838358698f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x12060b0305020108
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x90c1d191b0e0f1d
mov qword [rsp + 0x44], rdx
movabs rdx, 0x11d130c090c1d19
mov qword [rsp + 0x48], rdx
movabs rdx, 0x41515161a181c0f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x130f141d070c1018
mov qword [rsp + 0x58], rdx
movabs rdx, 0x213081a1a031113
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x58d36c
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x2c
jge 0x58d39e
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x58d3c5
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2e]
cmp rsi, 0x1e
jb 0x58d352
jmp 0x58d3b9
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.0044a200
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1e
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0058d2a0

Function at 0x58e920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58ea1c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xc1afbbddd1d6c147
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa5adc1afbbddd1d6
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb93f6d61d36830e3
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20804010d010911
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11100b0b020a0404
mov qword [rsp + 0x38], rdx
movabs rdx, 0x503070a0611100b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58e9b0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x58e9e8
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x58ea0f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7f]
nop word [rax + rax]
cmp rsi, 0x12
jb 0x58e996
jmp 0x58ea03
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0058e920
Function at 0x591020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5910f2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xec59fe45781f05f5
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x577f
movabs rdx, 0x3070202080606
mov qword [rsp + 0x22], rdx
movabs rdx, 0x105010806000003
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x59108d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x5910ba
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5910e5
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x591070
jmp 0x5910d5
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xa
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00591020

Function at 0x5915e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5916f2
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x75657550210b053e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6547433e2d43cc36
mov qword [rsp + 0x22], rdx
movabs rdx, 0x35746547433e2d43
mov qword [rsp + 0x24], rdx
movabs rdx, 0x52752d52343b446f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0911131301020d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x190e0c0d03081704
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x3190b0b190e0c0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x15160b080014150b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x591691
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x3f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1c
jge 0x5916be
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5916e5
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x591674
jmp 0x5916d9
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1a
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005915e0
Function at 0x593220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5932eb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x4d65386151554f12
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7652975
movabs rdx, 0x3000b0305030209
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x2010003
xor eax, eax
jmp 0x593287
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x5932b7
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xc
jae 0x5932de
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x59326a
jmp 0x5932d2
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00593220

Function at 0x593ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x593c72
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf4a406ada7eb060a
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x64614cb7
movabs rdx, 0x203090402060904
mov qword [rsp + 0x28], rdx
movabs rdx, 0x902010507000908
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x593c0e
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x593c3b
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x593c65
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x593bf1
jmp 0x593c56
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00593ba0
Function at 0x595bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x595cc8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xeb64a86148149aa3
mov qword [rsp + 0x18], rdx
movabs rdx, 0x992d52b1eb64a861
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa8ddbd84976da337
mov qword [rsp + 0x24], rdx
movabs rdx, 0x13050b0911111212
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70a0a08080c080b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x20a0012070a0a08
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0d01080a080f10
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x595c60
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x56]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x595c92
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x595cbb
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x56]
cmp rsi, 0x14
jb 0x595c45
jmp 0x595caf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x14
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00595bc0

Function at 0x596f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x597008
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xe3454a6f232d4938
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3931c908e3454a6f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2aea40f52a16746e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe06001012060207
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0b0a08130a1309
mov qword [rsp + 0x34], rdx
movabs rdx, 0x30001110a0b0a08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60208130f05020f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x596fa2
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x45]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x45]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1c
jge 0x596fcf
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x596ffb
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x596f85
jmp 0x596fef
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x14
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00596f00
Function at 0x597c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x597d28
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x68bb567023b7fab6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x65b01211a4357768
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9010b0602030007
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30c0109010b06
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0b0307070a0b0d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x597cc1
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x597cf3
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x597d1b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
cmp rsi, 0xf
jb 0x597ca7
jmp 0x597d0f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xf
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00597c40

Function at 0x5982c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x598392
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x361d3a7546096956
mov qword [rsp + 0x19], rdx
movabs rdx, 0x39d40a361d3a7546
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x203090a02060209
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5060708
xor eax, eax
jmp 0x59832b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x59835d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x598385
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
cmp rsi, 0xb
jb 0x598311
jmp 0x598378
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005982c0
Function at 0x598ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x598b9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xc46ce181ba289fd6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xcec379d2c90ec46c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc010800020d0405
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3090d0a07000507
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x598b32
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x598b68
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x598b8f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6d]
nop dword [rax]
cmp rsi, 0xe
jb 0x598b18
jmp 0x598b83
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xe
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.00598ac0

Function at 0x599860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x599968
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x61b8c4dc4669c2ca
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x55e761b8c4dc4669
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7925e55f5d4de273
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10c00090d0e0007
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf000f0601080d04
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10000f000f060108
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0e05000e070b03
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x599900
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x599932
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x59995b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x78]
cmp rsi, 0x12
jb 0x5998e5
jmp 0x59994f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00599860
Function at 0x59aaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59abb6
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x490d2965dcc0e8c3
mov qword [rsp + 0x19], rdx
movabs rdx, 0xbed4e7d9d16fc16e
mov qword [rsp + 0x21], rdx
movabs rdx, 0xd5bed4e7d9d16fc1
mov qword [rsp + 0x22], rdx
movabs rdx, 0x53cabaccc9c4421e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x305010502000d0e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10110c0601151216
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1814030b17161011
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc131413090f100b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x59ab4e
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x59ab82
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x59aba9
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0x19
jb 0x59ab34
nop
jmp 0x59ab9d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x19
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.0059aaa0

Function at 0x59c260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x59c3f7
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
movabs rdx, 0xef90d3c20619d548
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf536721d3c4f7f74
mov qword [rsp + 0x27], rdx
movabs rdx, 0xcc4cd220fd6552f5
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xfc13f761cf1e4e0b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x69225fb601c26dc5
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe875f5611ecc6808
mov qword [rsp + 0x46], rdx
movabs rdx, 0x25090a0b170f0118
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xd0725090a0b170f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x211a052e29290900
mov qword [rsp + 0x58], rdx
movabs rdx, 0x25152a1929062318
mov qword [rsp + 0x60], rdx
movabs rdx, 0x4251e031f04141d
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe0c060216142715
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2e2122072c120f05
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1c22041817131c00
mov qword [rsp + 0x80], rdx
movabs rdx, 0xd141f29021f1a1d
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x59c38b
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xd]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x42
jge 0x59c3bd
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x59c3ea
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xd]
cmp rsi, 0x2f
jb 0x59c371
jmp 0x59c3de
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x2f
call fcn.0044a200
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov eax, esi
mov ecx, 0x2f
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x2f
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax]
jmp fcn.0059c260
Function at 0x5a0b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a0c36
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x44ae4407c0bb92a2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa944fb9b7274ff81
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa5fc6976a944fb9b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x74730d456fbd6e49
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80419160d180f03
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1603040d03031801
mov qword [rsp + 0x42], rdx
movabs rdx, 0x9020c1308061603
mov qword [rsp + 0x48], rdx
movabs rdx, 0x200020d16041200
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5a0bce
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x67]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x5a0c02
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5a0c29
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x67]
cmp rsi, 0x1c
jb 0x5a0bb4
nop
jmp 0x5a0c1d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1c
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.005a0b20

Function at 0x5a2a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a2b68
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x47f069d5d456cec4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xec63652dc0d874e0
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7963d576ee74ef65
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa01170c04080c02
mov qword [rsp + 0x34], rdx
movabs rdx, 0x110b00120b0a1315
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x6150502110b0012
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3060f030a0c02
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5a2b02
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1c
jge 0x5a2b2f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5a2b5b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x5a2ae5
jmp 0x5a2b4f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x18
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005a2a60