joyce8/EMBER2024-capa huggingface dataset:
Function at 0x59b2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59b39d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x756968ec6d753c48
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xdd475f66e74715f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8090f00000a0800
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd07040404010809
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd080e0e0e000c07
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x59b340
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x59b36d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x59b390
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x59b322
jmp 0x59b384
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461b40
mov eax, edi
mov ecx, 0x10
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.0059b2c0

Function at 0x59b540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59b60c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x73b68b9fe5976547
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd3c16d944e73b68b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2040c0b03060506
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0c060b09050204
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59b5af
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x59b5dc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x59b5ff
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x59b592
jmp 0x59b5f3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461b40
mov eax, edi
mov ecx, 0xd
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0059b540
Function at 0x59b980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59ba66
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xff3d4955f31de347
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x21396ea1013cf072
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1070f0f0b0a0f0c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x703010901070f0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70e0e0f06020a01
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x59ba00
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x59ba32
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x59ba57
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
cmp rsi, 0x10
jb 0x59b9e2
jmp 0x59ba4b
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461b40
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0059b980

Function at 0x59ba80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59bb5d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb26cf4fe53fcff47
mov qword [rsp + 0x18], rdx
movabs rdx, 0x773eaf51b6b0b26c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa04020b0b010c0b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9040a04020b0b01
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0801070a09050b
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x59bb00
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x39]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x39]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x59bb2d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x59bb50
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x59bae2
jmp 0x59bb44
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461b40
mov eax, edi
mov ecx, 0xe
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.0059ba80
Function at 0x59c720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59c81b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8b8e73727f98aadf
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6d83a372699cc98b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60bfa16c5c74b982
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5100608071507
mov qword [rsp + 0x36], rdx
movabs rdx, 0x7120f140502090c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x10d07120f140502
mov qword [rsp + 0x40], rdx
movabs rdx, 0x161212060f03020d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x59c7b9
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x59c7eb
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x59c80e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0x17
jb 0x59c79f
jmp 0x59c802
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461b40
mov eax, edi
mov ecx, 0x17
call fcn.00461b40
nop
nop dword [rax + rax]
call fcn.0045f8c0
jmp fcn.0059c720

Function at 0x59c840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59c93d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe72d65e1b856d947
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x69ae6517bacd6f11
mov qword [rsp + 0x26], rdx
movabs rdx, 0x57797227a11114c0
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70703020e040b11
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1103021410011311
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc08110302141001
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1112040106100a01
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x59c8e0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x59c90d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x59c930
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x59c8bf
jmp 0x59c924
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461b40
mov eax, edi
mov ecx, 0x18
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.0059c840
Function at 0x59cf20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59cfec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x799c8575bd8e9b84
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7b887581a770799c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0a080306010002
mov qword [rsp + 0x28], rdx
movabs rdx, 0x608010509010d00
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59cf8f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x59cfbc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x59cfdf
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x59cf72
jmp 0x59cfd3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461b40
mov eax, edi
mov ecx, 0xe
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0059cf20

Function at 0x59d100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59d1cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x95a59641f5eb8846
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5793a1df4995a596
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb030302070a0105
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb06020b06090b03
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59d16f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x20]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x20]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x59d19c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x59d1bf
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x59d152
jmp 0x59d1b3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461b40
mov eax, edi
mov ecx, 0xd
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0059d100
Function at 0x59d700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59d7ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x50f9e42fc4eab25e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7250f9e42fc4eab2
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd65b6c6f63df74ea
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1000020101030509
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20202040b0f1000
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf060110010f0b0b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x59d78d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x69]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x69]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x59d7ba
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x59d7dd
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x59d770
jmp 0x59d7d1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461b40
mov eax, edi
mov ecx, 0x11
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0059d700

Function at 0x59e4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59e592
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1874205268552367
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x656d176e49187420
mov qword [rsp + 0x22], rdx
movabs rdx, 0x502070a08010501
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4040a0708020502
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59e52c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x11]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x59e55e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x59e585
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x11]
cmp rsi, 0xd
jb 0x59e512
jmp 0x59e575
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00461b40
mov eax, edi
mov ecx, 0xd
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0059e4c0
Function at 0x59ede0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59ee9d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3552d7e9d2e4db48
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x74eb
movabs rdx, 0x103060500010706
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4020807
xor eax, eax
jmp 0x59ee40
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x59ee6d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x59ee90
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x59ee23
jmp 0x59ee84
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044c140
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461b40
mov eax, edi
mov ecx, 0xa
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.0059ede0

Function at 0x59fd80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59fe58
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xaa1be2657972d013
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x6c74dc54
movabs rdx, 0x103050801060a06
mov qword [rsp + 0x26], rdx
movabs rdx, 0x709010305080106
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6070900050001
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59fdf7
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x5d]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x5d]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x59fe28
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x59fe4b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x59fdda
jmp 0x59fe3f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461b40
mov eax, edi
mov ecx, 0xc
call fcn.00461b40
nop
call fcn.0045f8c0
nop dword [rax]
jmp fcn.0059fd80

Function at 0x59fe80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59ff52
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xaf686465a9a84dad
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb33fb5b866206faf
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1060e060e0d030b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x200020b060b0c07
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59feec
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x59ff1e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x59ff45
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 0xf
jb 0x59fed2
jmp 0x59ff35
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00461b40
mov eax, edi
mov ecx, 0xf
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0059fe80
Function at 0x59ff60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a003d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x75648bbf843070fd
mov qword [rsp + 0x18], rdx
movabs rdx, 0x8df53898fe727564
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2050302020d0b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90c000205030202
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4050a040d0d0b03
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x59ffe0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x7d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x7d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x5a000d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5a0030
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x59ffc2
jmp 0x5a0024
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461b40
mov eax, edi
mov ecx, 0xe
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.0059ff60

Function at 0x5b37c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b389d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74ed65721333f552
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5728457922e06574
mov qword [rsp + 0x24], rdx
movabs rdx, 0x101090206090609
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd09030a01010902
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0a0602060a0103
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x5b3840
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x5b386d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5b3890
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x5b3822
jmp 0x5b3884
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461b40
mov eax, edi
mov ecx, 0xf
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.005b37c0
Function at 0x5bb3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bb4d8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x3e645b6c5e769262
mov qword [rsp + 0x18], rdx
movabs rdx, 0x65205f553e645b6c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x974036665466e84
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb4749a3d675b7e20
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf2820661d409542
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc1d00011f09191b
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1219230f0c121315
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1212191d1219230f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c0d110c0b0c0900
mov qword [rsp + 0x50], rdx
movabs rdx, 0x516010b09181f03
mov qword [rsp + 0x58], rdx
movabs rdx, 0x807150800220c1e
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x5bb475
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x27]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x2c
jge 0x5bb4a8
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x5bb4cb
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x27]
nop
cmp rsi, 0x24
jb 0x5bb45b
jmp 0x5bb4bf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x24
call fcn.0044c140
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00461b40
mov eax, edi
mov ecx, 0x24
call fcn.00461b40
nop
call fcn.0045f8c0
nop dword [rax]
jmp fcn.005bb3a0

Function at 0x5bb500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bb638
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xd1b02026c9c861aa
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x65fa6585697420cd
mov qword [rsp + 0x26], rdx
movabs rdx, 0xba97ac0269748365
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6420e872e174fa91
mov qword [rsp + 0x36], rdx
movabs rdx, 0x42bad73ad36e946f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x82708191b180807
mov qword [rsp + 0x46], rdx
movabs rdx, 0x2121141d231f0716
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x1d082121141d231f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2303160e0c002511
mov qword [rsp + 0x58], rdx
movabs rdx, 0x16060826030f2604
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1418161602171d15
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x5bb5d8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2a
jge 0x5bb608
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x5bb62b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x28
jb 0x5bb5bb
jmp 0x5bb61f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x28
call fcn.0044c140
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.00461b40
mov eax, edi
mov ecx, 0x28
call fcn.00461b40
nop
call fcn.0045f8c0
nop dword [rax]
jmp fcn.005bb500
Function at 0x5bbaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bbbd8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xd46f972057d33a61
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6572d46f972057d3
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xdd743e909f876461
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc88a6580946371c8
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x76a2a370657daa31
mov qword [rsp + 0x32], rdx
movabs rdx, 0x121e1f0116121203
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x161a07111a0d1c16
mov qword [rsp + 0x42], rdx
movabs rdx, 0x30c1c1e050d161a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe15021813190511
mov qword [rsp + 0x50], rdx
movabs rdx, 0x20010d051b070f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2180c190f13110c
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x5bbb78
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x2e
jge 0x5bbba8
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x5bbbcb
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x22
jb 0x5bbb5b
jmp 0x5bbbbf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x22
call fcn.0044c140
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00461b40
mov eax, edi
mov ecx, 0x22
call fcn.00461b40
nop
call fcn.0045f8c0
nop dword [rax]
jmp fcn.005bbaa0

Function at 0x5bbc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bbd1a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1e65746468c7b6b1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x289aa61473df7574
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd77289aa61473df
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6be7337228701c07
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20c071517120a12
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa0f0011020c0715
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110d0c040e190704
mov qword [rsp + 0x40], rdx
movabs rdx, 0x131111010b0f0e0b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x18071007190b0c0e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5bbcb7
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x24
jge 0x5bbce9
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5bbd0d
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
cmp rsi, 0x1a
jb 0x5bbc9d
jmp 0x5bbd01
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044c140
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461b40
mov eax, edi
mov ecx, 0x1a
call fcn.00461b40
nop
call fcn.0045f8c0
nop
jmp fcn.005bbc00
Function at 0x5befe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bf138
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x78de30552cebe156
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3d68dfb56cdea317
mov qword [rsp + 0x20], rdx
movabs rdx, 0x11e0c7f53d68dfb5
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb574ab6c2e64c5d1
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1bcc195636683052
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd6c90b4d27936c61
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1208171918130a08
mov qword [rsp + 0x44], rdx
movabs rdx, 0x2222102212081719
mov qword [rsp + 0x48], rdx
movabs rdx, 0x92729121e15210f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x60b010d112a1923
mov qword [rsp + 0x58], rdx
movabs rdx, 0x19260217032b0115
mov qword [rsp + 0x60], rdx
movabs rdx, 0x181412210222130c
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2b09151b060f1409
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x5bf0d3
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x34
jge 0x5bf108
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x5bf12b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
nop dword [rax]
cmp rsi, 0x2c
jb 0x5bf0b9
jmp 0x5bf11f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x2c
call fcn.0044c140
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2c
call fcn.00461b40
mov eax, edi
mov ecx, 0x2c
call fcn.00461b40
nop
call fcn.0045f8c0
nop dword [rax]
jmp fcn.005befe0