joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5895a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5896bd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x65d30072500c15cd
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xae9a74f5a24c7373
mov qword [rsp + 0x24], rdx
movabs rdx, 0x27c26e9cae9a74f5
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc77261e0d16d6112
mov qword [rsp + 0x30], rdx
movabs rdx, 0x180a0c06020e1806
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0218190b120f02
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1171b0b00120010
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb051419050a0e02
mov qword [rsp + 0x50], rdx
movabs rdx, 0x20118130b101802
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x589660
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x7c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x7c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x58968d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5896b0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x58963d
jmp 0x5896a4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005895a0

Function at 0x589a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x589b2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1f4b354856474e3d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3754290a2f4e651f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x60d000a0e0c050b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb02010407040509
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x589acf
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x589afc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x589b1f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x589ab2
jmp 0x589b13
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00589a60
Function at 0x58c1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58c27d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x276fff1f19b11819
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc50f2b9f22276fff
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9040a01050c0b02
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70809040a01050c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30405040b000105
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x58c220
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x58c24d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x58c270
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x58c202
jmp 0x58c264
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0058c1a0

Function at 0x58cd00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58cdfb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6f4ac9b3b7076595
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x726e49a1606f4ac9
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80a39b8c9d6dcea4
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4000e09050d0402
mov qword [rsp + 0x34], rdx
movabs rdx, 0x111003100c001309
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x110c0d1411100310
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1314020903080212
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x58cd99
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x58cdcb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x58cdee
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0x15
jb 0x58cd7f
jmp 0x58cde2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.0058cd00
Function at 0x58e7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x58e967
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0xdbbc73f330b9a6c1
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xce498e8161a368bf
mov qword [rsp + 0x27], rdx
movabs rdx, 0xaae574c23716e1ce
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe69aa53a467428ce
mov qword [rsp + 0x36], rdx
movabs rdx, 0x697e5f55b9ca6d90
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x857574eba3532a74
mov qword [rsp + 0x46], rdx
movabs rdx, 0xe061e162a070c22
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x10180e061e162a07
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe021628062b1118
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e102e1b0d1a030c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2a2511060e250a1f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x17081e01120c1121
mov qword [rsp + 0x70], rdx
movabs rdx, 0x12211c180d1c1b
mov qword [rsp + 0x78], rdx
movabs rdx, 0x160d2b0f1d180e0d
mov qword [rsp + 0x80], rdx
movabs rdx, 0x13152a0422150c2e
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x58e902
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x13]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x13]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x42
jge 0x58e92f
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x58e95a
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x2f
jb 0x58e8e5
jmp 0x58e94e
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x2f
nop dword [rax + rax]
call fcn.0044bb20
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.00461020
mov eax, edi
mov ecx, 0x2f
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0058e7e0

Function at 0x58fc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58fd2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9187cf696e1054f0
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x30ff657a696d9187
mov qword [rsp + 0x20], rdx
movabs rdx, 0x807010c00060101
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80707020d020500
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58fccf
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x7f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x7f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x58fcfc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x58fd1f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x58fcb2
jmp 0x58fd13
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0058fc60
Function at 0x5904a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59058a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf662722c6d5d6e45
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x64e6f662722c6d5d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7365d5f2bedcddb8
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0b0b0a0902040d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6090d0b0b0a0902
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x907080c0e020f0d
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x59052d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x12
jge 0x59055a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x59057d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x590510
jmp 0x590571
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005904a0

Function at 0x590c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x590d7d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6c8f838443536549
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x8b7b87866c8f8384
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x767887976d614e65
mov qword [rsp + 0x26], rdx
movabs rdx, 0x50b021103000609
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5020a0208061013
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa0805020a020806
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1010040913060b04
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x590d20
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 9]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 9]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x590d4d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x590d70
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x590cff
jmp 0x590d64
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00590c80
Function at 0x5942a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59439b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa1690946ba74b67c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe9124412ff2ea169
mov qword [rsp + 0x20], rdx
movabs rdx, 0xff97b66e7272a76e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x131511000e00080d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90a0705090e000f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x130d0c0d090f040c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x708010e03041411
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x594339
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x59436b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x59438e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6b]
cmp rsi, 0x16
jb 0x59431f
jmp 0x594382
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.005942a0

Function at 0x5943c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5944bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1d0d442e38747350
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3add256574431d0d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4c264c0f203f5320
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10f12110301080a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x150e0d06130b070c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6100c0f06111407
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12000f141504000d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x594459
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 2]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x59448b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5944ae
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 2]
cmp rsi, 0x16
jb 0x59443f
jmp 0x5944a2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.005943c0
Function at 0x5944e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59460c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x4793b1ac9ddacb44
mov qword [rsp + 0x19], rdx
movabs rdx, 0x878273bd0cf7cde2
mov qword [rsp + 0x21], rdx
movabs rdx, 0xf8c474b2ef878273
mov qword [rsp + 0x26], rdx
movabs rdx, 0x97976d9b998da6f6
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40c0b1615040b08
mov qword [rsp + 0x36], rdx
movabs rdx, 0x300021419061311
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x203030002141906
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14021b080902050e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1141014140a171c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1810150f1b011414
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5945a6
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5b]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2a
jge 0x5945dc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1d
jae 0x5945ff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5b]
cmp rsi, 0x1d
jb 0x59458c
jmp 0x5945f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461020
mov eax, edi
mov ecx, 0x1d
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005944e0
Function at 0x596b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x596c88
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa494470ba74c70b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7491e51b3ae07407
mov qword [rsp + 0x27], rdx
movabs rdx, 0x657491e51b3ae074
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe4b94f24691d4464
mov qword [rsp + 0x30], rdx
movabs rdx, 0x160807080706080e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb170d0301030d08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10b010a0c18180b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1615080300000713
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x596c2b
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x62]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x62]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x596c58
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x596c7b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x596c0e
jmp 0x596c6f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00596b80

Function at 0x5974a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59756c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x658a7b6c7f694367
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5765715c8d658a7b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x900010008020501
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa03020a06030900
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59750f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 6]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 6]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x59753c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x59755f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x5974f2
jmp 0x597553
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005974a0
Function at 0x5996a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59976c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf8d8655f656d59e9
mov qword [rsp + 0x19], rdx
movabs rdx, 0xebe26935f150e4f8
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa000606080b010d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8070d0e0a080804
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59970f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x59973c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x59975f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x5996f2
jmp 0x599753
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005996a0

Function at 0x599780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x599866
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5064a545aeb2697a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x808abb72655064a5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2020b050b0a0302
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0c02020b050b0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0003000505
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x599800
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x599832
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x599857
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0xd
jb 0x5997e2
jmp 0x59984b
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461020
mov eax, edi
mov ecx, 0xd
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00599780
Function at 0x59abc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59acbd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x957093577a885357
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7c855c957093577a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7884459263907172
mov qword [rsp + 0x26], rdx
movabs rdx, 0x120f07110608110f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa05060c06090205
mov qword [rsp + 0x36], rdx
movabs rdx, 0x120a0a05060c0609
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa070d110304020a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x59ac60
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x10]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x10]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x59ac8d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x59acb0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x59ac3f
jmp 0x59aca4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0059abc0

Function at 0x59b300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59b3bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x747261c1eb41a243
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x70c2
movabs rdx, 0x8030300010103
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4030108
xor eax, eax
jmp 0x59b360
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x59b38d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x59b3b0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x59b343
jmp 0x59b3a4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0059b300
Function at 0x59bac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59bb92
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe3cf72d473e149cd
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x49b3db6eb9e3cf72
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa00010b080b0c0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7060b0202080401
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59bb2c
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x59bb5e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x59bb85
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7c]
cmp rsi, 0xd
jb 0x59bb12
jmp 0x59bb75
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0059bac0

Function at 0x5b0b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b0c4c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x327f8365827283ad
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x5c6cac7f
movabs rdx, 0x30b090001050100
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30606000809030b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5b0be5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x5b0c1c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x5b0c3f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0xc
jb 0x5b0bcb
jmp 0x5b0c33
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005b0b80