joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5896c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5897a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x292222790a797527
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x9d9b63690c658729
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2050a020d06080a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe0602050a020d06
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0700030600070a
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x589740
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x36]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x589772
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x589797
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x36]
cmp rsi, 0xf
jb 0x589722
jmp 0x58978b
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461b40
mov eax, edi
mov ecx, 0xf
nop
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.005896c0

Function at 0x5897c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5898dd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x67673a2b7256756b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3c6b565672496774
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2a5a3c6b56567249
mov qword [rsp + 0x26], rdx
movabs rdx, 0x57869c7d4e656761
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x504020d11100f0f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x90c0504020d1110
mov qword [rsp + 0x38], rdx
movabs rdx, 0x18070b0b040817
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90a08110e160c00
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf0611060c0707
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x589880
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x22]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x22]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x5898ad
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5898d0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1a
jb 0x58985d
jmp 0x5898c4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.0044c140
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461b40
mov eax, edi
mov ecx, 0x1a
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.005897c0
Function at 0x58aa00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58aadd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe55c6dcaf974c5db
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x73c87535caf151e5
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7080b060b08060a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1000707080b06
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0a0d0309040704
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x58aa80
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x58aaad
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x58aad0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x58aa62
jmp 0x58aac4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461b40
mov eax, edi
mov ecx, 0xf
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.0058aa00
Function at 0x58d260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58d346
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3c2b693c50746553
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2cf72d5835e17481
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0b080d0c0c0704
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa0d0e0b080d0c0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0a060d060f0f0c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x58d2e0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x33]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x58d312
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x58d337
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x33]
cmp rsi, 0x10
jb 0x58d2c2
jmp 0x58d32b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461b40
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0058d260

Function at 0x58dee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58dfcc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74116ef979176554
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9cb574116ef97917
mov qword [rsp + 0x20], rdx
movabs rdx, 0x56bc65121c4f0669
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4090b10030a0811
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0d110204110806
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60b0d0e020b0e03
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58df6a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x58df9c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x58dfbf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0x12
jb 0x58df50
jmp 0x58dfb3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461b40
mov eax, edi
mov ecx, 0x12
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0058dee0
Function at 0x58f9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58fab2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x282b61752330c9f7
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x332528d734282b61
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7090208030c0003
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70b0b01060a0709
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58fa4c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x58fa7e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x58faa5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0xd
jb 0x58fa32
jmp 0x58fa95
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00461b40
mov eax, edi
mov ecx, 0xd
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0058f9e0
Function at 0x593ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x593c72
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x697c8e8e736c706f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6e81518e8f697c8e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10b0604050b0908
mov qword [rsp + 0x28], rdx
movabs rdx, 0x600070a03060b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x593c0c
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x593c3e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x593c65
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
cmp rsi, 0xd
jb 0x593bf2
jmp 0x593c55
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00461b40
mov eax, edi
mov ecx, 0xd
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00593ba0

Function at 0x593d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x593e5d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4802406e1148e815
mov qword [rsp + 0x18], rdx
movabs rdx, 0x112d07224802406e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x22fcd172405365bf
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1060c0013110909
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1305000b0313080a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x20f12061305000b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10c0b0700060912
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x593e00
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x593e2d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x593e50
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x593ddf
jmp 0x593e44
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461b40
mov eax, edi
mov ecx, 0x14
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.00593d60
Function at 0x594000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5940cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb0c61cf2f430a9d
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x64693747
movabs rdx, 0x906010700060407
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x401070309000906
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x594065
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x59409c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x5940bf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 0xc
jb 0x59404b
jmp 0x5940b3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461b40
mov eax, edi
mov ecx, 0xc
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00594000

Function at 0x594cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x594dac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xbabbbf50c2957a45
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc09c73a6babbbf50
mov qword [rsp + 0x20], rdx
movabs rdx, 0x78ad73836c75c2a1
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50d0a030b120c06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x212050a0d070c02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110070b0b08020d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x594d4a
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x594d7c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x594d9f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0x14
jb 0x594d30
jmp 0x594d93
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461b40
mov eax, edi
mov ecx, 0x14
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00594cc0
Function at 0x5950a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59518c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c759b474d749047
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd1c6c759b474d74
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x265c06120a10561
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10050408040b0d0b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10b0c0f09051005
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb09100f11010c08
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x59512a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x43]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x59515c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x59517f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x43]
cmp rsi, 0x12
jb 0x595110
jmp 0x595173
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461b40
mov eax, edi
mov ecx, 0x12
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.005950a0

Function at 0x595260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59535b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x635c0a9e170aa047
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbf0080a635c0a9e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6ea1697461027222
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0b061205011201
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc07090204020e08
mov qword [rsp + 0x36], rdx
movabs rdx, 0x9120c0709020402
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc03070303070a12
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5952f9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x59532b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x59534e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
cmp rsi, 0x14
jb 0x5952df
jmp 0x595342
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461b40
mov eax, edi
mov ecx, 0x14
call fcn.00461b40
nop
nop dword [rax + rax]
call fcn.0045f8c0
jmp fcn.00595260
Function at 0x596060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x596132
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9061988d768f7254
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x57816d61a8859061
mov qword [rsp + 0x20], rdx
movabs rdx, 0x902040807030504
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30202020c070907
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5960cc
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x5960fe
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x596125
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 0xe
jb 0x5960b2
jmp 0x596115
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00461b40
mov eax, edi
mov ecx, 0xe
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00596060

Function at 0x597240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59734c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x449da1d86b74ab9e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x659c896f92e873a1
mov qword [rsp + 0x26], rdx
movabs rdx, 0x65bf69b1659c896f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x968ec84c768cccb1
mov qword [rsp + 0x32], rdx
movabs rdx, 0x104191517050608
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x10001410121b0a10
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1914030e190b1000
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa1a1b150d16010d
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5972e8
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x59731c
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x59733f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 0x1c
jb 0x5972ce
jmp 0x597333
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.0044c140
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461b40
mov eax, edi
mov ecx, 0x1c
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00597240
Function at 0x597440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59752a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc869a0c87c746553
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x82d96d75c3c869a0
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc4b376a8e6638b97
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd080e0c080b1410
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1103130d0b141205
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4100b0c08070704
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5974cd
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x13]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x13]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x5974fa
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x59751d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x5974b0
jmp 0x597511
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461b40
mov eax, edi
mov ecx, 0x15
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00597440

Function at 0x597940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x597a3b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xed69c4707c890753
mov qword [rsp + 0x18], rdx
movabs rdx, 0x73d4ccf4748ded69
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8dedc37ebede44f9
mov qword [rsp + 0x26], rdx
movabs rdx, 0x12020c030c15010e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1305081510121008
mov qword [rsp + 0x36], rdx
movabs rdx, 0x150b130508151012
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0c110702140a08
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5979d9
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1a
jge 0x597a0b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x597a2e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0x16
jb 0x5979bf
jmp 0x597a22
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461b40
mov eax, edi
mov ecx, 0x16
call fcn.00461b40
nop
nop dword [rax + rax]
call fcn.0045f8c0
jmp fcn.00597940
Function at 0x599e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x599f1a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x5369447036d3dd88
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xdf73c4d613f4be43
mov qword [rsp + 0x27], rdx
movabs rdx, 0x56614b7391df73c4
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x57733c614761fa03
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1140a0d12160810
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x15000f1801140a0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0f0f0802151a03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1030009160b020f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1616101a1a09020c
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x599eb7
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x24
jge 0x599ee9
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x599f0d
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 0x1d
jb 0x599e9d
jmp 0x599f01
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.0044c140
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461b40
mov eax, edi
mov ecx, 0x1d
call fcn.00461b40
nop
call fcn.0045f8c0
nop
jmp fcn.00599e00

Function at 0x59a8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59a9dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x536944d4d474658d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x740d31f826ed1714
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd56397cf65441bc7
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x140d0c1015041700
mov qword [rsp + 0x36], rdx
movabs rdx, 0x80d150317001504
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe00080d15031700
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc100c0a0b091115
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x59a980
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x59a9ad
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x59a9d0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x59a95f
jmp 0x59a9c4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461b40
mov eax, edi
mov ecx, 0x18
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.0059a8e0
Function at 0x59ad20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59ae0a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc57fd37017746553
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xca43b45b6ec57fd3
mov qword [rsp + 0x20], rdx
movabs rdx, 0xcc660d497345d26c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb1410100e12030c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10100610050a070c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x91010091406100e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x59adad
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x46]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x46]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x59adda
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x59adfd
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x59ad90
jmp 0x59adf1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461b40
mov eax, edi
mov ecx, 0x15
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0059ad20

Function at 0x59b1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59b2a6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x570545bbd052c0f7
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa165b37563570545
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3010306060c0701
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0203010306060c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0103000a04000c
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x59b240
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x61]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x59b272
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x59b297
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x61]
cmp rsi, 0xd
jb 0x59b222
jmp 0x59b28b
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461b40
mov eax, edi
mov ecx, 0xd
nop
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0059b1c0