joyce8/EMBER2024-capa huggingface dataset:
Function at 0x590240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x590356
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xca1dc525ead66510
mov qword [rsp + 0x19], rdx
movabs rdx, 0x658069763083b165
mov qword [rsp + 0x21], rdx
movabs rdx, 0x50658069763083b1
mov qword [rsp + 0x22], rdx
movabs rdx, 0xbb9b952ddba96f72
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0e0b0300070903
mov qword [rsp + 0x32], rdx
movabs rdx, 0x14130a170713150e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x204140318061413
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16051518020e0b17
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5902ee
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x80]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x590322
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x590349
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x80]
cmp rsi, 0x19
jb 0x5902d4
nop
jmp 0x59033d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f500
mov eax, edi
mov ecx, 0x19
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.00590240
Function at 0x592180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x592276
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x77646e7c66406f48
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6c7d77646e7c6640
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7e76677241785456
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8090a03090003
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20c020003110300
mov qword [rsp + 0x38], rdx
movabs rdx, 0x411070409040803
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x592213
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x592242
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x592269
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x5921f6
nop
jmp 0x59225d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f500
mov eax, edi
mov ecx, 0x12
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.00592180

Function at 0x593740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59381c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x1b1b49ded2f52104
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6f1d6e20f80e0a14
mov qword [rsp + 0x30], rdx
movabs rdx, 0x304090404060a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x108020c000b0e07
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x5937b2
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3a]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x5937e8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x59380f
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3a]
nop dword [rax]
cmp rsi, 0x10
jb 0x593798
jmp 0x593803
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f500
mov eax, edi
mov ecx, 0x10
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.00593740
Function at 0x593b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x593c08
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xda6f130c691c372a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x704070402000105
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x701
xor eax, eax
nop
jmp 0x593ba0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x593bd2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x593bfb
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 8
jb 0x593b82
jmp 0x593bef
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f500
mov eax, edi
mov ecx, 8
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00593b40

Function at 0x594a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x594b68
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xc172b8dc55e3653a
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf844e2f52bbe6e59
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5779dc503e631be5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x11090f0c0d090508
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50708111509140d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x150b0413000a0210
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150405150a110b0d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x594b00
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6d]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x594b32
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x594b5b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6d]
cmp rsi, 0x18
jb 0x594ae5
jmp 0x594b4f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f500
mov eax, edi
mov ecx, 0x18
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00594a60
Function at 0x595460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x595548
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xbc6eae0c656d4674
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa6fed72b7bc6eae
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60c0c0706070c01
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc01060c0c070607
mov qword [rsp + 0x28], rdx
movabs rdx, 0x107080507040a01
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5954e1
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x595513
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x59553b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
cmp rsi, 0xd
jb 0x5954c7
jmp 0x59552f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f500
mov eax, edi
mov ecx, 0xd
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00595460

Function at 0x595b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x595bd2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x8161f59443da3934
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x7016
movabs rdx, 0x401050201040107
mov qword [rsp + 0x22], rdx
movabs rdx, 0x501000804020401
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x595b6a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x595b9c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x595bc5
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2f]
cmp rsi, 0xa
jb 0x595b50
jmp 0x595bb7
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.0045f500
mov eax, edi
mov ecx, 0xa
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00595b00
Function at 0x595be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x595cd6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x506d750245413fb2
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb2506d750245413f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6e4a86f3db99555
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1040c100f0c0a00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90c040b01040c10
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10e0c01010f0b08
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x595c73
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x595ca2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x595cc9
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x595c56
nop
jmp 0x595cbd
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f500
mov eax, edi
mov ecx, 0x11
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.00595be0

Function at 0x595dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x595e86
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6bafb39e8c5b5357
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x603020205030304
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x703
xor eax, eax
nop
jmp 0x595e20
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x16]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x16]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x595e4d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x595e74
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 8
jb 0x595e02
jmp 0x595e68
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f500
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00595dc0
Function at 0x596300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5963dc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xecd9dea452f75357
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5ddfc6ecd9dea452
mov qword [rsp + 0x22], rdx
movabs rdx, 0x706050604050a09
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x208090404040706
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x596375
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x6f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x6f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x5963a8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5963cf
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x596358
jmp 0x5963c3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f500
mov eax, edi
mov ecx, 0xb
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.00596300

Function at 0x596480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x596549
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xd06b59bae2cb5361
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x57c6
movabs rdx, 0x500040004020703
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8000404
xor eax, eax
jmp 0x5964e3
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7f]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x596515
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x59653c
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7f]
cmp rsi, 0xa
jb 0x5964c9
jmp 0x596530
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f500
mov eax, edi
mov ecx, 0xa
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00596480
Function at 0x597d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x597e56
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xb1b475cea9a89a57
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x539f72967cb1b475
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8b6fef6f69737365
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20a030205021314
mov qword [rsp + 0x32], rdx
movabs rdx, 0x91209040607020a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60b070509050801
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x597df3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x11]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x11]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x597e22
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x597e49
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x597dd6
nop
jmp 0x597e3d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f500
mov eax, edi
mov ecx, 0x15
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.00597d60

Function at 0x597e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x597f5c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4d0d650820ef1057
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x79370378654d0d65
mov qword [rsp + 0x22], rdx
movabs rdx, 0x60a040309040b0b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1020401010b060a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x597ef5
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x597f28
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x597f4f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xd
jb 0x597ed8
jmp 0x597f43
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f500
mov eax, edi
mov ecx, 0xd
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.00597e80
Function at 0x597f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59807c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7972d28232c59137
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xbe7972d28232c591
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc9656b6f54cfc473
mov qword [rsp + 0x26], rdx
movabs rdx, 0x801030203041005
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80a080103020304
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb040a0b0a020004
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x598010
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x598048
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x59806f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x597ff6
jmp 0x598063
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f500
mov eax, edi
mov ecx, 0x11
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.00597f80

Function at 0x5acc40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5acd12
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x37686c656e25626b
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x396c6c6f
movabs rdx, 0xb06090b07090901
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x809080708020b06
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5accab
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xf]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x5accdd
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5acd05
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xf]
cmp rsi, 0xc
jb 0x5acc91
jmp 0x5accf8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.0045f500
mov eax, edi
mov ecx, 0xc
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005acc40
Function at 0x5ad5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ad6e6
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
lea rax, [0x005c0e60]
nop
call fcn.0040c880
movabs rcx, 0x9165066f72928012
mov qword [rax], rcx
movabs rcx, 0xd1c196d69ae89165
mov qword [rax + 6], rcx
movabs rcx, 0xaa806f6de8b7809a
mov qword [rax + 0xe], rcx
movabs rcx, 0x9110c0b0c050701
mov qword [rsp + 0x12], rcx
movabs rcx, 0xb0d000f020a0d0b
mov qword [rsp + 0x1a], rcx
movabs rcx, 0x810020d0d090b0d
mov qword [rsp + 0x20], rcx
movabs rcx, 0xe05151510140e0f
mov qword [rsp + 0x28], rcx
xor ecx, ecx
jmp 0x5ad688
movzx r9d, byte [rsi + rax]
sub r9d, edx
lea edx, [r9 - 0x17]
mov byte [rax + rdi], dl
lea edx, [r8 - 0x17]
mov byte [rax + rsi], dl
add rcx, 2
cmp rcx, 0x1e
jge 0x5ad6b6
movzx edx, byte [rsp + rcx + 0x12]
movzx esi, byte [rsp + rcx + 0x13]
mov edi, edx
xor edx, esi
add edx, ecx
nop
cmp rdi, 0x16
jae 0x5ad6d4
movzx r8d, byte [rdi + rax]
sub r8d, edx
cmp rsi, 0x16
jb 0x5ad66e
jmp 0x5ad6c8
mov ebx, 0x16
mov rcx, rbx
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f500
mov eax, edi
mov ecx, 0x16
nop dword [rax + rax]
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005ad5e0

Function at 0x5ad700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ad813
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
lea rax, [0x005c0ec0]
nop
call fcn.0040c880
movabs rcx, 0x545759564e4d541a
mov qword [rax], rcx
movabs rcx, 0x636b4a74683f5454
mov qword [rax + 7], rcx
movabs rcx, 0x7240743a7c4c785c
mov qword [rax + 0xf], rcx
movabs rcx, 0x104150111061302
mov qword [rsp + 0x16], rcx
movabs rcx, 0x807010415011106
mov qword [rsp + 0x18], rcx
movabs rcx, 0x130e050608120c00
mov qword [rsp + 0x20], rcx
movabs rcx, 0x8140f0e0e0c020a
mov qword [rsp + 0x28], rcx
movabs rcx, 0x60d1312100c0009
mov qword [rsp + 0x30], rcx
xor ecx, ecx
jmp 0x5ad7b7
movzx r9d, byte [rsi + rax]
sub r9d, edx
lea edx, [r9 + 0x29]
mov byte [rax + rdi], dl
lea edx, [r8 + 0x29]
mov byte [rax + rsi], dl
add rcx, 2
cmp rcx, 0x22
jge 0x5ad7e8
movzx edx, byte [rsp + rcx + 0x16]
movzx esi, byte [rsp + rcx + 0x17]
mov edi, edx
xor edx, esi
add edx, ecx
cmp rdi, 0x17
jae 0x5ad806
movzx r8d, byte [rdi + rax]
sub r8d, edx
nop dword [rax + rax]
cmp rsi, 0x17
jb 0x5ad79d
jmp 0x5ad7fa
mov ebx, 0x17
mov rcx, rbx
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f500
mov eax, edi
mov ecx, 0x17
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005ad700
Function at 0x5ad820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ad906
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
lea rax, [0x005c0bc0]
nop
call fcn.0040c880
movabs rcx, 0x746efc76e0fd7e00
mov qword [rax], rcx
movabs rcx, 0x7565587369773f52
mov qword [rax + 8], rcx
movabs rcx, 0x40d05040d0a0f
mov qword [rsp + 0x12], rcx
movabs rcx, 0xb0f020f02010004
mov qword [rsp + 0x18], rcx
movabs rcx, 0xf0b030a090a020b
mov qword [rsp + 0x20], rcx
xor ecx, ecx
jmp 0x5ad8a8
movzx r9d, byte [rsi + rax]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rax + rdi], dl
mov byte [rax + rsi], r8b
add rcx, 2
cmp rcx, 0x16
jge 0x5ad8db
movzx edx, byte [rsp + rcx + 0x12]
movzx esi, byte [rsp + rcx + 0x13]
mov edi, edx
xor edx, esi
add edx, ecx
nop
cmp rdi, 0x10
jae 0x5ad8f9
movzx r8d, byte [rdi + rax]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6c]
cmp rsi, 0x10
jb 0x5ad891
jmp 0x5ad8ed
mov ebx, 0x10
mov rcx, rbx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f500
mov eax, edi
mov ecx, 0x10
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005ad820

Function at 0x5ad920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ada13
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
lea rax, [0x005c0c80]
nop
call fcn.0040c880
movabs rcx, 0x226e367a4577242d
mov qword [rax], rcx
movabs rcx, 0x57226e367a457724
mov qword [rax + 1], rcx
movabs rcx, 0x6c501d4b65ea6972
mov qword [rax + 9], rcx
movabs rcx, 0xd04070b07010007
mov qword [rsp + 0x16], rcx
movabs rcx, 0xe0f0d04070b0701
mov qword [rsp + 0x18], rcx
movabs rcx, 0xf05070f07070d07
mov qword [rsp + 0x20], rcx
xor ecx, ecx
jmp 0x5ad9b6
movzx r9d, byte [rsi + rax]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1c]
mov byte [rax + rdi], dl
mov byte [rax + rsi], r8b
add rcx, 2
cmp rcx, 0x12
jge 0x5ad9e8
movzx edx, byte [rsp + rcx + 0x16]
movzx esi, byte [rsp + rcx + 0x17]
mov edi, edx
xor edx, esi
add edx, ecx
cmp rdi, 0x11
jae 0x5ada06
movzx r8d, byte [rdi + rax]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1c]
nop
cmp rsi, 0x11
jb 0x5ad99f
jmp 0x5ad9fa
mov ebx, 0x11
mov rcx, rbx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f500
mov eax, edi
mov ecx, 0x11
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005ad920