joyce8/EMBER2024-capa huggingface dataset:
Function at 0x583720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x544e71005d5f7956
mov qword [rsp + 0x28], rdx
movabs rdx, 0x201020004040704
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x400
xor eax, eax
jmp 0x583776
movzx r8d, byte [rsp + rbx + 0x28]
sub r8d, edx
lea edx, [r8 + 0x71]
mov byte [rsp + rsi + 0x28], dl
lea edx, [rdi + 0x71]
mov byte [rsp + rbx + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x5837a2
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5837e5
movzx edi, byte [rsp + rsi + 0x28]
sub edi, edx
cmp rbx, 8
jb 0x58375a
nop
jmp 0x5837d6
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x5837c0
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5837af
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00460fc0
mov eax, esi
mov ecx, 8
call fcn.00460fc0
nop
int3

Function at 0x584320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xbc918a84cdfc2e5d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1030407030306
mov qword [rsp + 0x14], rdx
mov dword [rsp + 0x1c], 0x3060105
xor eax, eax
jmp 0x584375
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x4c]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xc
jge 0x5843a8
movzx edx, byte [rsp + rax + 0x14]
movzx ebx, byte [rsp + rax + 0x15]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5843e5
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x4c]
nop dword [rax]
cmp rbx, 8
jb 0x58435b
jmp 0x5843d7
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x5843c1
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x5843b5
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460fc0
mov eax, esi
mov ecx, 8
call fcn.00460fc0
nop
int3
Function at 0x584b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x9d72ed723360e4e8
mov qword [rsp + 0x28], rdx
movabs rdx, 0x300060000030301
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x400
xor eax, eax
jmp 0x584b76
movzx r8d, byte [rsp + rbx + 0x28]
sub r8d, edx
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x28], dl
lea edx, [rdi + 0x54]
mov byte [rsp + rbx + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x584ba2
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x584be5
movzx edi, byte [rsp + rsi + 0x28]
sub edi, edx
cmp rbx, 8
jb 0x584b5a
nop
jmp 0x584bd6
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x584bc0
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x584baf
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00460fc0
mov eax, esi
mov ecx, 8
call fcn.00460fc0
nop
int3

Function at 0x58b5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xa430c512f02d84b5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x506010604030605
mov qword [rsp + 0x14], rdx
mov dword [rsp + 0x1c], 0x6050104
xor eax, eax
jmp 0x58b5f5
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x57]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xc
jge 0x58b628
movzx edx, byte [rsp + rax + 0x14]
movzx ebx, byte [rsp + rax + 0x15]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58b665
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x57]
nop dword [rax]
cmp rbx, 8
jb 0x58b5db
jmp 0x58b657
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x58b641
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x58b635
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460fc0
mov eax, esi
mov ecx, 8
call fcn.00460fc0
nop
int3
Function at 0x58d8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x729fb400d835009e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x503050205060203
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x601
xor eax, eax
jmp 0x58d934
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x28]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xa
jge 0x58d968
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58d9a5
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x28]
nop dword [rax + rax]
cmp rbx, 8
jb 0x58d91a
jmp 0x58d997
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x58d981
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x58d975
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460fc0
mov eax, esi
mov ecx, 8
call fcn.00460fc0
nop
int3

Function at 0x58dce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xcad432c301bb2fbe
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20703010600
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x58dd2d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x16]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x58dd5c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58dd97
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x16]
cmp rbx, 8
jb 0x58dd13
jmp 0x58dd8b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x58dd75
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x58dd69
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00460fc0
mov eax, esi
mov ecx, 8
nop
call fcn.00460fc0
nop
int3

Function at 0x58ea00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x586e61a25a647e7d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x405000000060600
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x58ea4f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x4b]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x58ea7a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58eab5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x58ea33
jmp 0x58eaa9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x58ea93
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x58ea87
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00460fc0
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00460fc0
nop
int3
Function at 0x590820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xc057d17aeb442394
mov qword [rsp + 0x28], rdx
movabs rdx, 0x503050302060201
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x607
xor eax, eax
jmp 0x590874
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xa
jge 0x5908a8
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5908e5
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x7b]
nop dword [rax + rax]
cmp rbx, 8
jb 0x59085a
jmp 0x5908d7
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x5908c1
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x5908b5
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460fc0
mov eax, esi
mov ecx, 8
call fcn.00460fc0
nop
int3

Function at 0x5923e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x56f738fc309b5688
mov qword [rsp + 0x28], rdx
movabs rdx, 0x102030205050302
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x503
xor eax, eax
jmp 0x592434
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x13]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xa
jge 0x592468
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5924a5
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x13]
nop dword [rax + rax]
cmp rbx, 8
jb 0x59241a
jmp 0x592497
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x592481
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x592475
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460fc0
mov eax, esi
mov ecx, 8
call fcn.00460fc0
nop
int3
Function at 0x5928e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x63472f1634794ffd
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1010700070600
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x59292f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x28]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x28]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x59295a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x592995
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x592913
jmp 0x592989
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x592973
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x592967
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00460fc0
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00460fc0
nop
int3

Function at 0x593ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x593b86
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x32906998894d6482
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x65778c7b
movabs rdx, 0x4030602000a090b
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x8090304
xor eax, eax
jmp 0x593b20
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x593b52
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x593b77
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 0xc
jb 0x593b04
jmp 0x593b6b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460fc0
mov eax, edi
mov ecx, 0xc
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00593ac0

Function at 0x5952c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x595386
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6607215368564f73
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x3c6c6466
movabs rdx, 0xa0604010705060a
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x4020406
xor eax, eax
jmp 0x595320
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x595352
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x595377
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 9]
cmp rsi, 0xb
jb 0x595304
jmp 0x59536b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460fc0
mov eax, edi
mov ecx, 0xb
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005952c0
Function at 0x595e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x595f1d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x64b3ffaef4f67e79
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xfac5
movabs rdx, 0x303010204060009
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x8050902
xor eax, eax
jmp 0x595ec0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x595eed
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x595f10
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x595ea3
jmp 0x595f04
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460fc0
mov eax, edi
mov ecx, 0xa
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.00595e60

Function at 0x595f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x595ffe
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9ba76ed69764fc75
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x6c95ac9b
movabs rdx, 0x601040309090104
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x7020308
xor eax, eax
jmp 0x595fa1
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x27]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x27]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x595fce
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x595ff1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x595f84
jmp 0x595fe5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460fc0
mov eax, edi
mov ecx, 0xb
call fcn.00460fc0
nop
nop
call fcn.0045ece0
jmp fcn.00595f40

Function at 0x59a0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59a1b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf1e96fe8746e6f43
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf5ec6a085b93f1e9
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa09060b0806080a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x70a0c060d040608
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x59a14c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6a]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0x10
jge 0x59a17e
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x59a1a5
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6a]
cmp rsi, 0xe
jb 0x59a132
jmp 0x59a195
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00460fc0
mov eax, edi
mov ecx, 0xe
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0059a0e0
Function at 0x59ace0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59addb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5374729076e50643
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6d67160510145374
mov qword [rsp + 0x38], rdx
movabs rdx, 0xaa6451f46fdce6de
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1013040213020a0d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1150a0801130f10
mov qword [rsp + 0x20], rdx
movabs rdx, 0x90101150a080113
mov qword [rsp + 0x22], rdx
movabs rdx, 0x15020f04080b120e
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x59ad79
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x1a
jge 0x59adab
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x59adce
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
cmp rsi, 0x16
jb 0x59ad5f
jmp 0x59adc2
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00460fc0
mov eax, edi
mov ecx, 0x16
call fcn.00460fc0
nop
nop dword [rax + rax]
call fcn.0045ece0
jmp fcn.0059ace0

Function at 0x59b1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59b2bd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x434041165a2c7243
mov qword [rsp + 0x34], rdx
movabs rdx, 0xda3f567543404116
mov qword [rsp + 0x38], rdx
movabs rdx, 0x37736231746e6f54
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2090a0b13100904
mov qword [rsp + 0x18], rdx
movabs rdx, 0x100706020a020909
mov qword [rsp + 0x20], rdx
movabs rdx, 0x60c070210070602
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1310030b12110a12
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x59b260
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x59b28d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x59b2b0
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x59b23f
jmp 0x59b2a4
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00460fc0
mov eax, edi
mov ecx, 0x14
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.0059b1c0
Function at 0x59cbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59ccbb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xbdcfecb186196e45
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xc093bda469bdcfec
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa2c6cd7301e3a198
mov qword [rsp + 0x48], rdx
movabs rdx, 0x910100c0f051012
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x21406140a020413
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa0d0b0513120214
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xe03070e04100f0d
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x59cc59
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x59cc8b
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x59ccae
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4e]
cmp rsi, 0x15
jb 0x59cc3f
jmp 0x59cca2
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.0045b720
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460fc0
mov eax, edi
mov ecx, 0x15
call fcn.00460fc0
nop
nop dword [rax + rax]
call fcn.0045ece0
jmp fcn.0059cbc0

Function at 0x59cce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59cd98
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9969aab4b575edcb
mov qword [rsp + 0x28], rdx
movabs rdx, 0x507040300000401
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0
xor eax, eax
jmp 0x59cd38
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x59cd68
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x59cd8b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x59cd1b
jmp 0x59cd7f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00460fc0
mov eax, edi
mov ecx, 8
call fcn.00460fc0
nop
call fcn.0045ece0
nop dword [rax]
jmp fcn.0059cce0
Function at 0x59df60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59e06c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x726963fc046d65ea
mov qword [rsp + 0x36], rdx
movabs rdx, 0x72fa73e13379f127
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc16f72fa73e13379
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf36b4b534f086fe6
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1614181008120e06
mov qword [rsp + 0x18], rdx
movabs rdx, 0x11000b1719090302
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40c0c1406041100
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe04120b10180317
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x59e008
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1e
jge 0x59e03c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x59e05f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0x1a
jb 0x59dfee
jmp 0x59e053
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.0045b720
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1a
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0059df60

Function at 0x59fc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59fd4c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x751d64e51eb60c16
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xcd62751d64e51eb6
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7974071b6fc139be
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb010c0903010f06
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9040e020a0a0b01
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0e000a0b000a01
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x59fcea
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x43]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x16
jge 0x59fd1c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x59fd3f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x43]
cmp rsi, 0x12
jb 0x59fcd0
jmp 0x59fd33
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460fc0
mov eax, edi
mov ecx, 0x12
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0059fc60