joyce8/EMBER2024-capa huggingface dataset:
Function at 0x584ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x584bac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xdc2765c361657cb7
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd0dd6ddc2765c361
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4ca1d8e1706369b1
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1100e000f07120f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x90a0b1206120110
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1004061110060011
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x584b4a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7d]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x584b7c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x584b9f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7d]
cmp rsi, 0x13
jb 0x584b30
jmp 0x584b93
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00584ac0

Function at 0x585940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585a1d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc39db1ce69b2d9ab
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6ca2b6c796a591c3
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb090a0106070408
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb090d0b090a01
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa05020c08090607
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x5859c0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x5859ed
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x585a10
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x5859a2
jmp 0x585a04
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00585940
Function at 0x585a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585b26
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb513c6636c70b307
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xabc107b09fb88cb5
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa09010c06000604
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10d0a09010c0600
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8000e0605070b04
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x585ac0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x60]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x585af2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x585b17
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x60]
cmp rsi, 0xf
jb 0x585aa2
jmp 0x585b0b
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00585a40

Function at 0x585b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585c12
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf06fde69f8ea6f45
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x73f8cef06fde69f8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x805090908040207
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x909010301090805
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x585bac
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x585bde
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x585c05
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 0xb
jb 0x585b92
jmp 0x585bf5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00585b40
Function at 0x5879c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x587a9d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6f13adacd16e9346
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2cdaeaa0dd6f13ad
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x604050901030408
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb01060405090103
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa040c010a040a0c
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x587a40
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x2b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x2b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x587a6d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x587a90
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x587a22
jmp 0x587a84
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005879c0

Function at 0x5894c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5895da
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6f237d18e7346547
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x190565726386137b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5bb0190565726386
mov qword [rsp + 0x26], rdx
movabs rdx, 0x42666e0d59eed25e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa12101619061119
mov qword [rsp + 0x36], rdx
movabs rdx, 0x2050a1210161906
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30a130915080812
mov qword [rsp + 0x40], rdx
movabs rdx, 0x809020a09060812
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40f16030a14120e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x589577
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x22
jge 0x5895a9
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5895cd
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0x1a
jb 0x58955d
jmp 0x5895c1
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.005894c0
Function at 0x58af40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58b048
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x69515d5679747b47
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5e506461737f4a43
mov qword [rsp + 0x27], rdx
movabs rdx, 0x425e506461737f4a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6465696558617779
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd090714080d0b16
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3180905030c0e0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0312041615060f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf03011507080a01
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x58afeb
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x58b018
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x58b03b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x58afce
jmp 0x58b02f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0058af40

Function at 0x58b9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58ba7d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xaecfbc6f4c746577
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9e65dea69bd9a22f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd00000a0a080b06
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0b0d00000a0a08
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd08070f00090509
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x58ba20
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x25]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x25]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x58ba4d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x58ba70
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x58ba02
jmp 0x58ba64
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0058b9a0
Function at 0x58baa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58bb7d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7418cfb3701365d3
mov qword [rsp + 0x18], rdx
movabs rdx, 0x807cdaa4e33a6c3
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf0c0f0307020604
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa050900070e0402
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0d0c0805040703
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x58bb20
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x4a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x4a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x58bb4d
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x58bb70
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x58bb02
jmp 0x58bb64
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0058baa0

Function at 0x58e0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58e1aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2d74737904e5cffc
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xaebfd72d74737904
mov qword [rsp + 0x22], rdx
movabs rdx, 0x57d1bbdd18a36d72
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x110e07100c100008
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa0d0d030209110e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100f000907080111
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58e14d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x58e17a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x58e19d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x58e130
jmp 0x58e191
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0058e0c0
Function at 0x5903c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5904bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x718d726a564d656a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6c6b92817b718d72
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5772626953746a65
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80e130e09060a00
mov qword [rsp + 0x32], rdx
movabs rdx, 0x902040a0d090b12
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1080f0a02000902
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0e0e10040e0705
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x590459
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x59048b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5904ae
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
cmp rsi, 0x15
jb 0x59043f
jmp 0x5904a2
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.005903c0
Function at 0x591de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x591eb8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x72ccd822be61cd36
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x5d7972bc
movabs rdx, 0x30308000b040601
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80b030308000b04
mov qword [rsp + 0x28], rdx
movabs rdx, 0x104050801080503
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x591e57
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x64]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x64]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x591e88
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x591eab
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x591e3a
jmp 0x591e9f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.00591de0

Function at 0x592880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59294c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc433d6329cd1174d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xda74f034d246c433
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0d0d030b020401
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5090d040a010702
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5928ef
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x53]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x53]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x59291c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x59293f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x5928d2
jmp 0x592933
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00592880
Function at 0x593c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x593d3b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x11e5f6511123430
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xed6f2c42011e5f65
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6448496f69737333
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80705020c0b010c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x305050b0c03080b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x7050305050b0c03
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0c000901111206
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x593cd9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 5]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x593d0b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x593d2e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 5]
cmp rsi, 0x14
jb 0x593cbf
jmp 0x593d22
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00593c40

Function at 0x5942a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5943bd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x9f750c7938b175fa
mov qword [rsp + 0x18], rdx
movabs rdx, 0xfcb6f6aa6fb7906c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf29ffcb6f6aa6fb7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3ff1a4740eded94
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc10150e03120017
mov qword [rsp + 0x32], rdx
movabs rdx, 0x90718020a190c10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9110c1213131600
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70c100d180e0016
mov qword [rsp + 0x48], rdx
movabs rdx, 0x319161805140f15
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x594360
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x76]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x59438d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5943b0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x59433d
jmp 0x5943a4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005942a0
Function at 0x595500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5955cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2f17befe2ade65c3
mov qword [rsp + 0x19], rdx
movabs rdx, 0x737475d0651ddc2f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20508020b090606
mov qword [rsp + 0x28], rdx
movabs rdx, 0x809070204030200
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59556f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x59559c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5955bf
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x595552
jmp 0x5955b3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00595500

Function at 0x5955e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5956db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xffff16c711742d20
mov qword [rsp + 0x18], rdx
movabs rdx, 0x186f731233f4d1ee
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa31569748cf7e02d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x610030a17131306
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc13080b120a0111
mov qword [rsp + 0x38], rdx
movabs rdx, 0x307120f09000409
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40116050c0b100f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x595679
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2a]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x20
jge 0x5956ab
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5956ce
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2a]
cmp rsi, 0x18
jb 0x59565f
jmp 0x5956c2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.005955e0
Function at 0x595de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x595ec6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf2066c1944d7c605
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3a2d72e4293a6572
mov qword [rsp + 0x26], rdx
movabs rdx, 0x104020f0c020406
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40104020f0c02
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0a0c00040e0007
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x595e60
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x595e92
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x595eb7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0x10
jb 0x595e42
jmp 0x595eab
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00595de0

Function at 0x596280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x596347
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x726e72736e716b53
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x4c507073
movabs rdx, 0x108020406080309
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa08030b06030108
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5962e8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0xb]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0xb]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x596317
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x59633a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x5962cb
jmp 0x59632e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00596280

Function at 0x59c9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59ca87
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9d7b527388437769
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xbd6c6962
movabs rdx, 0xb030500030b0508
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4010704060b0b07
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59ca28
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x59ca57
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x59ca7a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x59ca0b
jmp 0x59ca6e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0059c9c0