joyce8/EMBER2024-capa huggingface dataset:
Function at 0x56e2c0
Capabilities:
Hash data using sha384
Hash data using sha512

Disassembly:
mov rcx, qword [rax + 0xd0]
cmp rcx, 6
jne 0x56e345
movabs rcx, 0xcbbb9d5dc1059ed8
mov qword [rax], rcx
movabs rcx, 0x629a292a367cd507
mov qword [rax + 8], rcx
movabs rcx, 0x9159015a3070dd17
mov qword [rax + 0x10], rcx
movabs rcx, 0x152fecd8f70e5939
mov qword [rax + 0x18], rcx
movabs rcx, 0x67332667ffc00b31
mov qword [rax + 0x20], rcx
movabs rcx, 0x8eb44a8768581511
mov qword [rax + 0x28], rcx
movabs rcx, 0xdb0c2e0d64f98fa7
mov qword [rax + 0x30], rcx
movabs rcx, 0x47b5481dbefa4fa4
mov qword [rax + 0x38], rcx
nop dword [rax]
jmp 0x56e4a6
cmp rcx, 0xe
jne 0x56e3c0
movabs rcx, 0x8c3d37c819544da2
mov qword [rax], rcx
movabs rcx, 0x73e1996689dcd4d6
mov qword [rax + 8], rcx
movabs rcx, 0x1dfab7ae32ff9c82
mov qword [rax + 0x10], rcx
movabs rcx, 0x679dd514582f9fcf
mov qword [rax + 0x18], rcx
movabs rcx, 0xf6d2b697bd44da8
mov qword [rax + 0x20], rcx
movabs rcx, 0x77e36f7304c48942
mov qword [rax + 0x28], rcx
movabs rcx, 0x3f9d85a86a1d36c8
mov qword [rax + 0x30], rcx
movabs rcx, 0x1112e6ad91d692a1
mov qword [rax + 0x38], rcx
jmp 0x56e4a6
cmp rcx, 0xf
jne 0x56e437
movabs rcx, 0x22312194fc2bf72c
mov qword [rax], rcx
movabs rcx, 0x9f555fa3c84c64c2
mov qword [rax + 8], rcx
movabs rcx, 0x2393b86b6f53b151
mov qword [rax + 0x10], rcx
movabs rcx, 0x963877195940eabd
mov qword [rax + 0x18], rcx
movabs rcx, 0x96283ee2a88effe3
mov qword [rax + 0x20], rcx
movabs rcx, 0xbe5e1e2553863992
mov qword [rax + 0x28], rcx
movabs rcx, 0x2b0199fc2c85b8aa
mov qword [rax + 0x30], rcx
movabs rcx, 0xeb72ddc81c52ca2
mov qword [rax + 0x38], rcx
jmp 0x56e4a6
movabs rcx, 0x6a09e667f3bcc908
mov qword [rax], rcx
movabs rcx, 0xbb67ae8584caa73b
mov qword [rax + 8], rcx
movabs rcx, 0x3c6ef372fe94f82b
mov qword [rax + 0x10], rcx
movabs rcx, 0xa54ff53a5f1d36f1
mov qword [rax + 0x18], rcx
movabs rcx, 0x510e527fade682d1
mov qword [rax + 0x20], rcx
movabs rcx, 0x9b05688c2b3e6c1f
mov qword [rax + 0x28], rcx
movabs rcx, 0x1f83d9abfb41bd6b
mov qword [rax + 0x30], rcx
movabs rcx, 0x5be0cd19137e2179
mov qword [rax + 0x38], rcx
movups xmmword [rax + 0xc0], xmm15
ret
Function at 0x574620
Capabilities:
Encode data using base64

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x574774
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
mov qword [rsp + 0x88], rbx
mov rcx, qword [rax]
mov qword [rsp + 0x20], rcx
movups xmm0, xmmword [rax + 8]
movups xmmword [rsp + 0x28], xmm0
movups xmm0, xmmword [rax + 0x18]
movups xmmword [rsp + 0x38], xmm0
lea rax, [rsp + 0x20]
nop
call fcn.00574100
mov qword [rsp + 0x10], 0
movups xmmword [rsp + 0x48], xmm15
movups xmmword [rsp + 0x50], xmm15
movups xmmword [rsp + 0x60], xmm15
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x48], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x58], rcx
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x68], rcx
mov rcx, qword [rsp + 0x88]
xor eax, eax
jmp 0x5746c4
inc rax
mov rcx, rbx
cmp rax, 5
jge 0x574715
imul rdx, rax, 0x33
mov rsi, rdx
sar rdx, 0x3f
shr rdx, 0x3d
add rdx, rsi
sar rdx, 3
mov rdi, rdx
shl rdx, 3
sub rsi, rdx
cmp rsi, 0x40
sbb rdx, rdx
mov r8, qword [rsp + rax*8 + 0x48]
mov rbx, rcx
mov rcx, rsi
shl r8, cl
and r8, rdx
mov qword [rsp + 0x10], r8
mov rdx, qword [rsp + 0x10]
mov qword [rsp + 0x18], rdx
xor ecx, ecx
jmp 0x574740
test byte [rcx], al
mov rax, rcx
mov ebx, 0x20
mov rcx, rbx
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
movzx r8d, byte [rbx + rsi]
or r8d, edx
mov byte [rbx + rsi], r8b
inc rcx
nop dword [rax + rax]
cmp rcx, 8
jge 0x5746be
movzx edx, byte [rsp + rcx + 0x18]
lea rsi, [rdi + rcx]
cmp rsi, 0x20
jge 0x5746be
test byte [rbx], al
nop
cmp rsi, 0x20
jb 0x57472c
mov rax, rsi
mov ecx, 0x20
call fcn.00457f40
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
nop
call fcn.00455860
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.00574620
Function at 0x575a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x575b33
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
lea rax, [0x0064f000]
nop
call fcn.0040b9a0
movabs rcx, 0x5d80f766d6626658
mov qword [rax], rcx
movabs rcx, 0x665de4cc66666646
mov qword [rax + 8], rcx
movabs rcx, 0xc466d658d6e666e5
mov qword [rax + 0x10], rcx
movabs rcx, 0x664347662c62cdf7
mov qword [rax + 0x18], rcx
movabs rcx, 0x191e17171d141b1e
mov qword [rsp + 0x16], rcx
movabs rcx, 0x80c191e17171d14
mov qword [rsp + 0x18], rcx
movabs rcx, 0x15130d1b100c1a0c
mov qword [rsp + 0x20], rcx
movabs rcx, 0x61d12020e0c0307
mov qword [rsp + 0x28], rcx
movabs rcx, 0xe1d030c14120518
mov qword [rsp + 0x30], rcx
xor ecx, ecx
jmp 0x575ac5
movzx r9d, byte [rsi + rax]
sub r9d, edx
lea edx, [r9 - 0x5a]
mov byte [rax + rdi], dl
lea edx, [r8 - 0x5a]
mov byte [rax + rsi], dl
add rcx, 2
cmp rcx, 0x22
jge 0x575afb
movzx edx, byte [rsp + rcx + 0x16]
lea rsi, [rcx + 1]
cmp rsi, 0x22
jae 0x575b25
movzx esi, byte [rsp + rcx + 0x17]
mov edi, edx
xor edx, esi
add edx, ecx
cmp rdi, 0x20
jae 0x575b19
movzx r8d, byte [rdi + rax]
sub r8d, edx
cmp rsi, 0x20
jb 0x575aab
jmp 0x575b0d
mov ebx, 0x20
mov rcx, rbx
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x20
call fcn.00457f40
mov eax, edi
mov ecx, 0x20
call fcn.00457f40
mov rax, rsi
mov ecx, 0x22
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00575a00
Function at 0x5767a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5768d3
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
lea rax, [0x0064f000]
nop
call fcn.0040b9a0
movabs rcx, 0x75014ddb56d805b3
mov qword [rax], rcx
movabs rcx, 0x22c60a219d41d801
mov qword [rax + 8], rcx
movabs rcx, 0x8cc7488b4002a899
mov qword [rax + 0x10], rcx
movabs rcx, 0xc67903ee926fb973
mov qword [rax + 0x18], rcx
movabs rcx, 0xb0f10020c061d00
mov qword [rsp + 0x16], rcx
movabs rcx, 0x1e080b0f10020c06
mov qword [rsp + 0x18], rcx
movabs rcx, 0x1e1519130104121e
mov qword [rsp + 0x20], rcx
movabs rcx, 0x141f080b0e00080e
mov qword [rsp + 0x28], rcx
movabs rcx, 0xf03111f010c1b15
mov qword [rsp + 0x30], rcx
xor ecx, ecx
jmp 0x576865
movzx r9d, byte [rsi + rax]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rax + rdi], dl
lea edx, [r8 - 0x2a]
mov byte [rax + rsi], dl
add rcx, 2
cmp rcx, 0x22
jge 0x57689b
movzx edx, byte [rsp + rcx + 0x16]
lea rsi, [rcx + 1]
cmp rsi, 0x22
jae 0x5768c5
movzx esi, byte [rsp + rcx + 0x17]
mov edi, edx
xor edx, esi
add edx, ecx
cmp rdi, 0x20
jae 0x5768b9
movzx r8d, byte [rdi + rax]
sub r8d, edx
cmp rsi, 0x20
jb 0x57684b
jmp 0x5768ad
mov ebx, 0x20
mov rcx, rbx
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x20
call fcn.00457f40
mov eax, edi
mov ecx, 0x20
call fcn.00457f40
mov rax, rsi
mov ecx, 0x22
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005767a0
Function at 0x57a000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x70]
cmp r12, qword [r14 + 0x10]
jbe 0x57a200
sub rsp, 0xf0
mov qword [rsp + 0xe8], rbp
lea rbp, [rsp + 0xe8]
movups xmmword [rsp + 0xf8], xmm15
movups xmmword [rsp + 0x108], xmm15
movups xmmword [rsp + 0x118], xmm15
movups xmmword [rsp + 0x128], xmm15
movabs rdx, 0x3a362e945eb3f33c
mov qword [rsp + 0x54], rdx
movabs rdx, 0x3c3468471c1477ea
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x432c6741c478087
mov qword [rsp + 0x64], rdx
movabs rdx, 0x3c305a204bb46e00
mov qword [rsp + 0x6c], rdx
movabs rdx, 0x70622f271f608107
mov qword [rsp + 0x74], rdx
movabs rdx, 0x6c912d25a4940d70
mov qword [rsp + 0x7c], rdx
movabs rdx, 0x3b3379bc8b540cb0
mov qword [rsp + 0x84], rdx
movabs rdx, 0x395866a3646f2a99
mov qword [rsp + 0x8c], rdx
movabs rdx, 0x2e0d34021a281727
mov qword [rsp + 0x94], rdx
lea rdi, [rsp + 0x98]
lea rsi, [0x006c96f8]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045857a
mov rbp, qword [rbp]
xor eax, eax
nop
jmp 0x57a120
movzx r8d, byte [rsp + rbx + 0x54]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rsp + rsi + 0x54], dl
mov byte [rsp + rbx + 0x54], dil
add rax, 2
nop dword [rax]
cmp rax, 0x54
jge 0x57a168
movzx edx, byte [rsp + rax + 0x94]
lea rbx, [rax + 1]
cmp rbx, 0x54
jae 0x57a1f2
movzx ebx, byte [rsp + rax + 0x95]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 0x40
jae 0x57a1e6
movzx edi, byte [rsp + rsi + 0x54]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x6c]
nop
cmp rbx, 0x40
jb 0x57a102
jmp 0x57a1da
movups xmmword [rsp + 0x14], xmm15
movups xmmword [rsp + 0x24], xmm15
movups xmmword [rsp + 0x34], xmm15
movups xmmword [rsp + 0x44], xmm15
xor eax, eax
jmp 0x57a190
movzx ecx, byte [rsp + rax + 0x54]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 0x40
jl 0x57a184
movups xmm0, xmmword [rsp + 0x14]
movups xmmword [rsp + 0xf8], xmm0
movups xmm0, xmmword [rsp + 0x24]
movups xmmword [rsp + 0x108], xmm0
movups xmm0, xmmword [rsp + 0x34]
movups xmmword [rsp + 0x118], xmm0
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rsp + 0x128], xmm0
mov rbp, qword [rsp + 0xe8]
add rsp, 0xf0
ret
mov eax, ebx
mov ecx, 0x40
call fcn.00457f40
mov eax, esi
mov ecx, 0x40
call fcn.00457f40
mov rax, rbx
mov ecx, 0x54
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0057a000
Function at 0x57a220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x78]
cmp r12, qword [r14 + 0x10]
jbe 0x57a433
sub rsp, 0xf8
mov qword [rsp + 0xf0], rbp
lea rbp, [rsp + 0xf0]
movups xmmword [rsp + 0x100], xmm15
movups xmmword [rsp + 0x110], xmm15
movups xmmword [rsp + 0x120], xmm15
movups xmmword [rsp + 0x130], xmm15
movabs rdx, 0x9a77b008eb9e8b18
mov qword [rsp + 0x52], rdx
movabs rdx, 0x8701a36e4a118019
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x74022ad6c525ac74
mov qword [rsp + 0x62], rdx
movabs rdx, 0x231129acf613b1d7
mov qword [rsp + 0x6a], rdx
movabs rdx, 0x24cce30c34368ab5
mov qword [rsp + 0x72], rdx
movabs rdx, 0xd97519e858e69727
mov qword [rsp + 0x7a], rdx
movabs rdx, 0xba428eae409a3ef5
mov qword [rsp + 0x82], rdx
movabs rdx, 0x1250929e518c3fad
mov qword [rsp + 0x8a], rdx
movabs rdx, 0x3c1303363c051b09
mov qword [rsp + 0x92], rdx
movabs rdx, 0x2d0c2e0c363c023d
mov qword [rsp + 0x9a], rdx
lea rdi, [rsp + 0xa0]
lea rsi, [0x006ca924]
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045857a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x57a353
movzx r8d, byte [rsp + rbx + 0x52]
sub r8d, edx
lea edx, [r8 - 0x3b]
mov byte [rsp + rsi + 0x52], dl
lea edx, [rdi - 0x3b]
mov byte [rsp + rbx + 0x52], dl
add rax, 2
cmp rax, 0x5e
jge 0x57a399
movzx edx, byte [rsp + rax + 0x92]
lea rbx, [rax + 1]
cmp rbx, 0x5e
jae 0x57a425
movzx ebx, byte [rsp + rax + 0x93]
mov esi, edx
xor edx, ebx
add edx, eax
nop dword [rax]
cmp rsi, 0x40
jae 0x57a417
movzx edi, byte [rsp + rsi + 0x52]
sub edi, edx
cmp rbx, 0x40
jb 0x57a337
jmp 0x57a40b
movups xmmword [rsp + 0x12], xmm15
movups xmmword [rsp + 0x22], xmm15
movups xmmword [rsp + 0x32], xmm15
movups xmmword [rsp + 0x42], xmm15
xor eax, eax
jmp 0x57a3c1
movzx ecx, byte [rsp + rax + 0x52]
mov byte [rsp + rax + 0x12], cl
inc rax
cmp rax, 0x40
jl 0x57a3b5
movups xmm0, xmmword [rsp + 0x12]
movups xmmword [rsp + 0x100], xmm0
movups xmm0, xmmword [rsp + 0x22]
movups xmmword [rsp + 0x110], xmm0
movups xmm0, xmmword [rsp + 0x32]
movups xmmword [rsp + 0x120], xmm0
movups xmm0, xmmword [rsp + 0x42]
movups xmmword [rsp + 0x130], xmm0
mov rbp, qword [rsp + 0xf0]
add rsp, 0xf8
ret
mov eax, ebx
mov ecx, 0x40
call fcn.00457f40
mov eax, esi
mov ecx, 0x40
nop
call fcn.00457f40
mov rax, rbx
mov ecx, 0x5e
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0057a220
Function at 0x57a440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x57a646
sub rsp, 0xb8
mov qword [rsp + 0xb0], rbp
lea rbp, [rsp + 0xb0]
movups xmmword [rsp + 0xc0], xmm15
movups xmmword [rsp + 0xd0], xmm15
movups xmmword [rsp + 0xe0], xmm15
movabs rdx, 0x75a61b2d9b8c5669
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6e658918a15f047b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7665117be114505b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x839c50c76677c61
mov qword [rsp + 0x58], rdx
movabs rdx, 0x87668f08782a6c0a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x66c7a502883f0304
mov qword [rsp + 0x68], rdx
movabs rdx, 0x825112d1f220704
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1825262e08271d22
mov qword [rsp + 0x78], rdx
movabs rdx, 0x808211a2609172f
mov qword [rsp + 0x80], rdx
movabs rdx, 0x1f1e221306090311
mov qword [rsp + 0x88], rdx
movabs rdx, 0x423010d0b180b02
mov qword [rsp + 0x90], rdx
movabs rdx, 0x22142a2e0b0e260e
mov qword [rsp + 0x98], rdx
movabs rdx, 0x9021d100e0a1e0a
mov qword [rsp + 0xa0], rdx
movabs rdx, 0xf1b16110100192b
mov qword [rsp + 0xa8], rdx
xor eax, eax
jmp 0x57a585
movzx r8d, byte [rsp + rbx + 0x40]
sub r8d, edx
lea edx, [r8 - 0xf]
mov byte [rsp + rsi + 0x40], dl
lea edx, [rdi - 0xf]
mov byte [rsp + rbx + 0x40], dl
add rax, 2
cmp rax, 0x40
jge 0x57a5be
movzx edx, byte [rsp + rax + 0x70]
lea rbx, [rax + 1]
cmp rbx, 0x40
jae 0x57a635
movzx ebx, byte [rsp + rax + 0x71]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 0x30
jae 0x57a629
movzx edi, byte [rsp + rsi + 0x40]
sub edi, edx
cmp rbx, 0x30
jb 0x57a569
jmp 0x57a61d
movups xmmword [rsp + 0x10], xmm15
movups xmmword [rsp + 0x20], xmm15
movups xmmword [rsp + 0x30], xmm15
xor eax, eax
jmp 0x57a5e0
movzx ecx, byte [rsp + rax + 0x40]
mov byte [rsp + rax + 0x10], cl
inc rax
cmp rax, 0x30
jl 0x57a5d4
movups xmm0, xmmword [rsp + 0x10]
movups xmmword [rsp + 0xc0], xmm0
movups xmm0, xmmword [rsp + 0x20]
movups xmmword [rsp + 0xd0], xmm0
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [rsp + 0xe0], xmm0
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov eax, ebx
mov ecx, 0x30
call fcn.00457f40
mov eax, esi
mov ecx, 0x30
call fcn.00457f40
mov rax, rbx
mov ecx, 0x40
nop dword [rax]
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0057a440
Function at 0x585aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585b7f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x8562b9eb35781f7c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x104050400050404
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x704
xor eax, eax
nop
jmp 0x585b00
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x585b3c
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x585b71
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x585b65
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5f]
cmp rsi, 8
jb 0x585ae2
jmp 0x585b57
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
nop
call fcn.00457f40
mov eax, edi
mov ecx, 8
call fcn.00457f40
mov rax, rsi
mov ecx, 0xa
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.00585aa0

Function at 0x585ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585d7f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x624c323835444ceb
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x3b20
movabs rdx, 0x904090001060802
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x902
xor eax, eax
jmp 0x585d05
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x33]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x33]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xa
jge 0x585d3c
movzx edx, byte [rsp + rax + 0x1c]
lea rsi, [rax + 1]
cmp rsi, 0xa
jae 0x585d71
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x585d65
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x585ce8
jmp 0x585d57
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0xa
call fcn.00457f40
mov rax, rsi
mov ecx, 0xa
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.00585ca0
Function at 0x585da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585e98
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xa0df2be0bee9dcf6
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x7370fcf6
movabs rdx, 0x402060102070404
mov qword [rsp + 0x26], rdx
movabs rdx, 0x803040206010207
mov qword [rsp + 0x28], rdx
movabs rdx, 0x509060007010807
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x585e20
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x52]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x52]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x585e57
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x585e8a
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x585e7e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xc
jb 0x585e02
jmp 0x585e72
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457f40
mov eax, edi
mov ecx, 0xc
call fcn.00457f40
mov rax, rsi
mov ecx, 0x12
call fcn.00457f40
nop
call fcn.00455860
nop dword [rax]
jmp fcn.00585da0

Function at 0x585fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5860c9
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6ec807ab3563145f
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x6979
movabs rdx, 0x202000801060406
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5080208020202
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x58604d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x6b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x6b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x586088
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0xe
jae 0x5860bb
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5860af
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x586030
jmp 0x5860a3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457f40
mov eax, edi
mov ecx, 0xa
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.00585fe0
Function at 0x5860e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5861c0
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe619321335baf361
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xe3fa
movabs rdx, 0x402010401060404
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7090108
xor eax, eax
jmp 0x586143
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x58617f
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x5861b2
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5861a6
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
cmp rsi, 0xa
jb 0x586129
jmp 0x58619a
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457f40
mov eax, edi
mov ecx, 0xa
call fcn.00457f40
mov rax, rsi
mov ecx, 0xc
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005860e0

Function at 0x5861e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5862c9
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x61ff43043fa33f61
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xe8dd
movabs rdx, 0x605040303020109
mov qword [rsp + 0x22], rdx
movabs rdx, 0x401080104010605
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x58624d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x586288
movzx edx, byte [rsp + rax + 0x22]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0xe
jae 0x5862bb
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5862af
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x586230
jmp 0x5862a3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457f40
mov eax, edi
mov ecx, 0xa
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.005861e0
Function at 0x5864a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58659f
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6923d0c4ce0a44b5
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xb0fbd074
movabs rdx, 0x3020a0b060b0900
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10503020a0b060b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0005000a030104
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x586520
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x58655c
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x586591
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x586585
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0xc
jb 0x586502
jmp 0x586577
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0xc
call fcn.00457f40
mov rax, rsi
mov ecx, 0x12
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.005864a0
Function at 0x58a8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58a993
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0x8271764152737954
mov qword [rsp + 0x20], rdx
movabs rdx, 0x207020502020603
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x58a917
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x58a94e
movzx edx, byte [rsp + rax + 0x18]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x58a985
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x58a975
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x58a8fa
jmp 0x58a969
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00446000
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.00457f40
mov eax, edi
mov ecx, 8
nop dword [rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 8
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0058a8c0

Function at 0x58a9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58aa7f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x53382e7336613c5e
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x77
movabs rdx, 0x600060301000105
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3080703
xor eax, eax
jmp 0x58aa04
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x58aa3b
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x58aa71
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x58aa65
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x58a9e7
jmp 0x58aa56
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 9
call fcn.00457f40
mov rax, rsi
mov ecx, 0xc
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0058a9a0