joyce8/EMBER2024-capa huggingface dataset:
Function at 0x591de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x591ecc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6cd36ebdc974cbc2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x66096b656cd36ebd
mov qword [rsp + 0x22], rdx
movabs rdx, 0x25afac74934352c3
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90e0f0c0c130d0f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x110d09060e090e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90604120301010a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x591e6a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x591e9c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x591ebf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0x14
jb 0x591e50
jmp 0x591eb3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00463f80
mov eax, edi
mov ecx, 0x14
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00591de0

Function at 0x5921a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59229d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5e706d846f747b5b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x946148658369505e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x617c616683765556
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x312041300000e12
mov qword [rsp + 0x34], rdx
movabs rdx, 0x160a1311151100
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf03040700160a13
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1060f1110120e01
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x592240
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x16]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x16]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x59226d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x592290
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x59221f
jmp 0x592284
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00463f80
mov eax, edi
mov ecx, 0x17
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.005921a0
Function at 0x592560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59264c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9b63a0684ba46553
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc26f8f7f6e79859b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7e736f6f597f7069
mov qword [rsp + 0x28], rdx
movabs rdx, 0x511070b05020e04
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100e1604080c0404
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa100b0209110312
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5925ea
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x59261c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x59263f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 0x17
jb 0x5925d0
jmp 0x592633
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00463f80
mov eax, edi
mov ecx, 0x17
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00592560

Function at 0x593820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5938f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x61887233655c6e74
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7a73375a46618872
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc01050a060606
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7040907020a0200
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59388c
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x12]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x5938be
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5938e5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x12]
cmp rsi, 0xd
jb 0x593872
jmp 0x5938d5
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00463f80
mov eax, edi
mov ecx, 0xd
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00593820
Function at 0x5949c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x594a9d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb4961f80daf0416
mov qword [rsp + 0x18], rdx
movabs rdx, 0xaa0a65f8fe060b49
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3080d0808060104
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20303080d080806
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd03000a0c090702
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x594a40
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x594a6d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x594a90
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x594a22
jmp 0x594a84
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00463f80
mov eax, edi
mov ecx, 0xe
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.005949c0

Function at 0x595060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59512c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x514a7f7b7480676d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x837170727988514a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1050d050d040c06
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90b050004020809
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5950cf
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 5]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 5]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x5950fc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x59511f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x5950b2
jmp 0x595113
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00463f80
mov eax, edi
mov ecx, 0xe
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00595060
Function at 0x596f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59701d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x49079808a596c6f0
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xaad1ad6d9d6fc06e
mov qword [rsp + 0x25], rdx
movabs rdx, 0xddaad1ad6d9d6fc0
mov qword [rsp + 0x26], rdx
movabs rdx, 0x73f96563bac950d1
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9040d0001111317
mov qword [rsp + 0x36], rdx
movabs rdx, 0x91709040d000111
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd000d0b04100e05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1701020903131306
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6140b0504110f03
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x596fc0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0xf]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0xf]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x596fed
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x597010
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x596f9d
jmp 0x597004
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044e180
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00463f80
mov eax, edi
mov ecx, 0x19
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.00596f00
Function at 0x599180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x599252
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xec69648b6ed06d43
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7813047a0024ec69
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2080c020805090b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x708050405040801
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5991ec
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x59921e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x599245
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 0xe
jb 0x5991d2
jmp 0x599235
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00463f80
mov eax, edi
mov ecx, 0xe
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00599180

Function at 0x59a720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59a858
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xb863cf627573f65d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd45393a9a7b863cf
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe368437aa7d68572
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa27a766faa657f78
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc09ec06936968a69
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc230c0018201e05
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1b141e110c091414
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x1a1f16151f071b14
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1823080e01081a10
mov qword [rsp + 0x58], rdx
movabs rdx, 0x240e1b221a000a01
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc1c0f1c2318111a
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x59a7f8
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 4]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 4]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x2e
jge 0x59a828
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x59a84b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x25
jb 0x59a7db
jmp 0x59a83f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x25
call fcn.0044e180
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00463f80
mov eax, edi
mov ecx, 0x25
call fcn.00463f80
nop
call fcn.00461d00
nop dword [rax]
jmp fcn.0059a720
Function at 0x59d500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59d61a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x77f7dc70e0e2e5f1
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x36375760fdc002b
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf5036375760fdc00
mov qword [rsp + 0x24], rdx
movabs rdx, 0x57e2887265e36f72
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd03050a100f1608
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100316060d03050a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80706020b09130d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6170d1713070816
mov qword [rsp + 0x48], rdx
movabs rdx, 0x80113030f080017
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x59d5b7
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x59d5e9
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x59d60d
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
cmp rsi, 0x19
jb 0x59d59d
jmp 0x59d601
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044e180
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00463f80
mov eax, edi
mov ecx, 0x19
call fcn.00463f80
nop
call fcn.00461d00
nop
jmp fcn.0059d500
Function at 0x59e660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59e74c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4f0244709f7410c1
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xaca065704f024470
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe2ac4be299d6a697
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100a0e1312060101
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3000f12100a0e13
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe0c130a0f0b0d01
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x59e6ea
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x59]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x14
jge 0x59e71c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x59e73f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x59]
cmp rsi, 0x14
jb 0x59e6d0
jmp 0x59e733
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00463f80
mov eax, edi
mov ecx, 0x14
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0059e660

Function at 0x59eba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59ecbd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xccc34470207465b8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2e296976074474bd
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc5c3aebb67492e29
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xce73bf09104cae6c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x190b00031b18120e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x6141118131a190b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x111415071808151b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x191d13000b08170f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1714121214110f14
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x59ec60
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x59ec8d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x59ecb0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1e
jb 0x59ec3d
jmp 0x59eca4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.0044e180
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00463f80
mov eax, edi
mov ecx, 0x1e
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.0059eba0
Function at 0x59fba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59fc9d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5cedf33d4aea48f3
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6f4624775cedf33d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6828504c27370021
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5000e1004110206
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1207090d0002050c
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc061207090d0002
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0d0f0d09020307
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x59fc40
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x3b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x3b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x59fc6d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x59fc90
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x59fc1f
jmp 0x59fc84
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00463f80
mov eax, edi
mov ecx, 0x14
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.0059fba0

Function at 0x5a0700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a07e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x746b73657e71a686
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5f77496e939db358
mov qword [rsp + 0x24], rdx
movabs rdx, 0x801030b0a0900
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80b030a00080103
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0a020e020b0d03
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x5a0780
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x5a07b2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5a07d7
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
cmp rsi, 0x10
jb 0x5a0762
jmp 0x5a07cb
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00463f80
mov eax, edi
mov ecx, 0x10
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.005a0700
Function at 0x5a0f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a104c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9faf678573af06a4
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5779729faf678573
mov qword [rsp + 0x20], rdx
movabs rdx, 0x807040402020401
mov qword [rsp + 0x28], rdx
movabs rdx, 0x602040406040900
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5a0fef
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x5a101c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5a103f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x5a0fd2
jmp 0x5a1033
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00463f80
mov eax, edi
mov ecx, 0xb
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.005a0f80

Function at 0x5a24a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a2567
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xdcdac2564174546f
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x5776cd6e
movabs rdx, 0x507040004060107
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90604040a0507
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5a2508
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x5a2537
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x5a255a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x5a24eb
jmp 0x5a254e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00463f80
mov eax, edi
mov ecx, 0xc
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.005a24a0
Function at 0x5a29e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a2adb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x51396f65777a5336
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x265a72656a4f5139
mov qword [rsp + 0x20], rdx
movabs rdx, 0x34674d4c43106540
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1506090c040308
mov qword [rsp + 0x30], rdx
movabs rdx, 0x209141215150207
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140d150d04131011
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3000c040e150e11
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5a2a79
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x12]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x5a2aab
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5a2ace
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x12]
cmp rsi, 0x16
jb 0x5a2a5f
jmp 0x5a2ac2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00463f80
mov eax, edi
mov ecx, 0x16
call fcn.00463f80
nop
nop dword [rax + rax]
call fcn.00461d00
jmp fcn.005a29e0

Function at 0x5a3540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a360c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x406f4d3e4d6f6c38
mov qword [rsp + 0x19], rdx
movabs rdx, 0x31ba48406f4d3e4d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x90004070503
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xa08000a
xor eax, eax
jmp 0x5a35a5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x20]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x5a35dc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x5a35ff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x20]
cmp rsi, 0xb
jb 0x5a358b
jmp 0x5a35f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00463f80
mov eax, edi
mov ecx, 0xb
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.005a3540