joyce8/EMBER2024-capa huggingface dataset:
Function at 0x595a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x595b88
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6ea1a0c1aeca65d1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xaa7317196ea1a0c1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa465726fbb4dc9bd
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0f0c080c060006
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0b0c0309090e0b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x90d0f0b0c030909
mov qword [rsp + 0x38], rdx
movabs rdx, 0x130f080b0f020504
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x595b20
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffff9c
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x595b51
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x595b7b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffff9c
add r8d, edx
cmp rsi, 0x14
jb 0x595b05
jmp 0x595b6f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461e80
mov eax, edi
mov ecx, 0x14
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00595a80

Function at 0x595ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x595cd2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xe02965d314ea44ad
mov qword [rsp + 0x18], rdx
movabs rdx, 0xca003643fc3f79d9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x34243657461163a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2e28300e3a0dc947
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe1d070800190f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb17100f0d16081f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa1d171e1b011e04
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc0611021a1c041f
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb1a101911190302
mov qword [rsp + 0x58], rdx
movabs rdx, 0x181c190c19021117
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x595c6f
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x30
jge 0x595c9c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x595cc5
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x20
jb 0x595c52
jmp 0x595cb7
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.0044ba20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0x20
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00595ba0
Function at 0x598a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x598b6b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x87745f9185c5ae82
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x578d69acbf658774
mov qword [rsp + 0x24], rdx
movabs rdx, 0x40c000109030206
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70300040c0001
mov qword [rsp + 0x30], rdx
movabs rdx, 0x305000b0a050506
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x598b04
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x598b37
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x598b5e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x598ae7
jmp 0x598b52
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461e80
mov eax, edi
mov ecx, 0xe
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00598a80

Function at 0x5994a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59957c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6e4d916461727243
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5790937873546e4d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2080b0805020c0c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80c090402070208
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x599512
movzx r9d, byte [rsp + rsi + 0x2a]
add r9d, 0xffffffea
add edx, r9d
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x599548
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x59956f
movzx r8d, byte [rsp + rdi + 0x2a]
add r8d, 0xffffffea
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xe
jb 0x5994f8
jmp 0x599563
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461e80
mov eax, edi
mov ecx, 0xe
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.005994a0
Function at 0x59a820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59a946
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x949f65748f976580
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7b619b7278549d6f
mov qword [rsp + 0x23], rdx
movabs rdx, 0x8798c474847b619b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7e4185b18f4ccc62
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf061700001a0f13
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd161b071b02101b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb020919161c0d06
mov qword [rsp + 0x48], rdx
movabs rdx, 0x61a0d141b0f0219
mov qword [rsp + 0x50], rdx
movabs rdx, 0x91b091218031a1c
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x59a8e0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x13]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x13]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x28
jge 0x59a90d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x59a934
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x59a8c3
jmp 0x59a928
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.0044ba20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461e80
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0059a820

Function at 0x59c080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59c168
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xb972b5f8647da7f4
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5c717ceca74b972
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb0a0204000d0901
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0b0a0204000d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2040a050404070c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59c101
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0xffffff97
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x12
jge 0x59c132
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x59c15b
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0xffffff97
add r8d, edx
cmp rsi, 0xe
jb 0x59c0e7
jmp 0x59c14f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461e80
mov eax, edi
mov ecx, 0xe
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0059c080
Function at 0x59c180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59c2a8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x730e59d16433b6db
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4d4cd0d0af3f3dc9
mov qword [rsp + 0x22], rdx
movabs rdx, 0xcb164d4cd0d0af3f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x57ddd741cf3ad534
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb1218060b050911
mov qword [rsp + 0x34], rdx
movabs rdx, 0x216050a0b121806
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1401170c150a0a0e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10d0210160e0418
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb05110802001613
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x59c240
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x73
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x59c271
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x59c29b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x73
add r8d, edx
cmp rsi, 0x1a
jb 0x59c223
jmp 0x59c28f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461e80
mov eax, edi
mov ecx, 0x1a
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0059c180
Function at 0x59d7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59d8ab
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x65569fc5b075cd46
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd58ff7b4664fb565
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4060e0104080c0b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8010d0c040b0406
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50e040e0b040304
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x59d844
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x16
jge 0x59d877
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x59d89e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x59d827
jmp 0x59d892
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461e80
mov eax, edi
mov ecx, 0xf
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0059d7c0

Function at 0x59de20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59df28
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x8574658a947c6598
mov qword [rsp + 0x18], rdx
movabs rdx, 0x99656f7ca8b07543
mov qword [rsp + 0x20], rdx
movabs rdx, 0xbd6eaf7645ad6083
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20a0a0f03050c10
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf10090a0d0b0d07
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1705151502151100
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2041005110d1211
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x59dec2
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x20
jge 0x59deef
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x59df1b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x18
jb 0x59dea5
jmp 0x59df0f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
nop dword [rax + rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461e80
mov eax, edi
mov ecx, 0x18
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0059de20
Function at 0x59ec80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59ed92
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x75b48a9bb074ca7a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6ea3658363b7a1bb
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0426ea3658363b7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6fb9c18672686f66
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x611180c0e001101
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc17110407010811
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc070a1600130c17
mov qword [rsp + 0x40], rdx
movabs rdx, 0x105060916140103
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x59ed31
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1e
jge 0x59ed5e
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x59ed85
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x59ed14
jmp 0x59ed79
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461e80
mov eax, edi
mov ecx, 0x1a
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0059ec80

Function at 0x59f500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59f5eb
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6576697438826578
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6b5a826f94657669
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x40c090a03020302
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20c040c090a0302
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb00040c09020802
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59f584
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x59f5b7
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x59f5de
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x59f567
jmp 0x59f5d2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461e80
mov eax, edi
mov ecx, 0xd
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0059f500
Function at 0x59f600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59f6f6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x69697665455e655e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6e6d656d54486969
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5774836e79457e7d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x802040d110900
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1400000f14101407
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0f0e0e0e130c04
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x59f693
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x18
jge 0x59f6c2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x59f6e9
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x59f676
nop
jmp 0x59f6dd
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461e80
mov eax, edi
mov ecx, 0x16
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.0059f600

Function at 0x59fdc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59fec8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x9f657f8f5fa2a947
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5e7abbb89f657f8f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57788885b6b075ae
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9080e021004080c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf050e021109010e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x30b07030f050e02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x905050805080c0a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x59fe60
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0xffffffce
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x59fe91
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x59febb
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0xffffffce
add r8d, edx
cmp rsi, 0x14
jb 0x59fe45
jmp 0x59feaf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461e80
mov eax, edi
mov ecx, 0x14
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0059fdc0
Function at 0x5a2160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a224b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x716f69725032d547
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc7d9dace9879c73b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0208020c0f0708
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2010b0208020c0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0e0707090d0108
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5a21e4
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x5a2217
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x5a223e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x5a21c7
jmp 0x5a2232
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461e80
mov eax, edi
mov ecx, 0x10
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005a2160

Function at 0x5a2960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a2a88
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x7113e32422ed847
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc647410684f3a73
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe049012d0c647410
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3a7265216515e972
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1507110c13121611
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa021507110c1312
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6031b110f1b0703
mov qword [rsp + 0x40], rdx
movabs rdx, 0x310030c09050110
mov qword [rsp + 0x48], rdx
movabs rdx, 0x416181504101612
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5a2a20
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x15
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x5a2a51
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5a2a7b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x15
add r8d, edx
cmp rsi, 0x1c
jb 0x5a2a03
jmp 0x5a2a6f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461e80
mov eax, edi
mov ecx, 0x1c
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005a2960
Function at 0x5a2aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a2b8b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xf9f56f0e088c9547
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc2f13e67e7312f9
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6020d0a06010a0a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0a080a06020d0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc04030b0607080e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5a2b24
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x79]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x79]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x14
jge 0x5a2b57
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x5a2b7e
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x5a2b07
jmp 0x5a2b72
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461e80
mov eax, edi
mov ecx, 0xf
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005a2aa0

Function at 0x5a2dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a2eb6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x457245364f745537
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x66457245364f7455
mov qword [rsp + 0x20], rdx
movabs rdx, 0x37476d556b365e3f
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc07080503030109
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb100a010f0a0010
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8040a0103030d09
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5a2e50
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xfffffff8
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x5a2e82
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5a2ea9
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xfffffff8
add r8d, edx
cmp rsi, 0x11
jb 0x5a2e36
nop
jmp 0x5a2e9d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461e80
mov eax, edi
mov ecx, 0x11
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.005a2dc0
Function at 0x5a2ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a2fbc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x3e30d10fe674493d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4b6f666e4926423e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70109030705060e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x908040909090100
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5a2f52
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x1f
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x5a2f88
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5a2faf
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x1f
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xf
jb 0x5a2f38
jmp 0x5a2fa3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461e80
mov eax, edi
mov ecx, 0xf
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.005a2ee0

Function at 0x5a2fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a30b2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x5948646265676747
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x6c6c6844
movabs rdx, 0x403040802030901
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3070408020b0307
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5a304b
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xfffffff5
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x5a307c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5a30a5
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xfffffff5
add r8d, edx
cmp rsi, 0xc
jb 0x5a3031
jmp 0x5a3097
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005a2fe0