joyce8/EMBER2024-capa huggingface dataset:
Function at 0x579280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57936a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf07e739624fb65f7
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x69bb87f07e739624
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5703cc6ff3158472
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7060d0809090010
mov qword [rsp + 0x32], rdx
movabs rdx, 0x403110c08110706
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd02040d0e070311
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x57930d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x75]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x75]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x57933a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x57935d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x5792f0
jmp 0x579351
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00579280
Function at 0x5797e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5798db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x655a7f744e5b6559
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6b724d6b795e7565
mov qword [rsp + 0x26], rdx
movabs rdx, 0x65703a543b5f6975
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x14140205020e040b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1504060f0306080a
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x12001504060f0306
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90c05110e0d0e14
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x579879
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x16]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x5798ab
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5798ce
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x16]
cmp rsi, 0x17
jb 0x57985f
jmp 0x5798c2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.005797e0

Function at 0x579900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x579a0c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x65627379736e5163
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2d7256651c19543d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x758c6a506d6c2d72
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5539695a656c7c46
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1517171412021d11
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf11021210131413
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80103120b0306
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa1414120d1c1a11
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5799a8
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x14]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x5799dc
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x5799ff
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x14]
cmp rsi, 0x1e
jb 0x57998e
jmp 0x5799f3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461020
mov eax, edi
mov ecx, 0x1e
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00579900
Function at 0x579b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x579bcc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x85706d65ed0ddcfb
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x7768d6e7
movabs rdx, 0x9080b080b0802
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7010302000007
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x579b65
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6a]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x579b9c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x579bbf
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6a]
cmp rsi, 0xc
jb 0x579b4b
jmp 0x579bb3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00579b00

Function at 0x57a300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57a40c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xe772910af5c820ac
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe9f472721a24c872
mov qword [rsp + 0x25], rdx
movabs rdx, 0x4cd73de9f472721a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x73f38c963e676e61
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90b100f16110103
mov qword [rsp + 0x38], rdx
movabs rdx, 0x18030e0a0a1907
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3170a020f090402
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1909010710050111
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x57a3a8
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x20
jge 0x57a3dc
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1b
jae 0x57a3ff
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6b]
cmp rsi, 0x1b
jb 0x57a38e
jmp 0x57a3f3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00461020
mov eax, edi
mov ecx, 0x1b
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057a300
Function at 0x57b220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57b34c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x6f75c34b67795a82
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5a80556b477f8c65
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5e4346726f6b3e71
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x66696d6a4c9d6d8d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1e100209181a0905
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd1e001b0a12000c
mov qword [rsp + 0x44], rdx
movabs rdx, 0x120b070e0d1e001b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2020f100e1f0110
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3110916030c1c0f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1704011e15030904
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x57b2e6
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x2c
jge 0x57b31c
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x57b33f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2c]
cmp rsi, 0x20
jb 0x57b2cc
jmp 0x57b333
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00461020
mov eax, edi
mov ecx, 0x20
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057b220

Function at 0x57bc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57bd47
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd815dc24ef9b6f4c
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x1de47275
movabs rdx, 0x60a050604070602
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0405060403060a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x57bce8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x50]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x50]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x57bd17
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x57bd3a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x57bccb
jmp 0x57bd2e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057bc80
Function at 0x57d360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57d41d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x65a633c46ecfc518
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xde0d
movabs rdx, 0x802010105020006
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6090402
xor eax, eax
jmp 0x57d3c0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x51]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x57d3ed
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x57d410
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x57d3a3
jmp 0x57d404
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0057d360

Function at 0x57ec00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57ecb2
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x65e4dc46dbcae1d9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x601000201050503
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x57ec51
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x57ec7e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x57eca5
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x57ec34
jmp 0x57ec95
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057ec00

Function at 0x57f1e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57f2b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x227c65d7a98e6528
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5779726fa09c65d8
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70a080404070007
mov qword [rsp + 0x18], rdx
movabs rdx, 0x60604030b020002
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x57f24c
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x57f27e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x57f2a5
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 0x10
jb 0x57f232
jmp 0x57f295
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0x10
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057f1e0
Function at 0x57f400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57f4cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8620b6b224b3651c
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x106165fd
movabs rdx, 0x2040b050700
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40b030302060008
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x57f465
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x45]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x57f49c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x57f4bf
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x45]
cmp rsi, 0xc
jb 0x57f44b
jmp 0x57f4b3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057f400

Function at 0x580560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58062c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2b4f3d313fd8b053
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x65d969b7
movabs rdx, 0x3020702040a0803
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20a0a0501080302
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5805c5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x5805fc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x58061f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7b]
cmp rsi, 0xc
jb 0x5805ab
jmp 0x580613
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00580560
Function at 0x581240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58134c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4965db6926c76553
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6974221a466fa912
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x6e6f6974221a466f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65eb1f6e61097920
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8140902030c1418
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x12120b0c08050502
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80312120b0c0805
mov qword [rsp + 0x26], rdx
movabs rdx, 0x18090203170d0209
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x5812e8
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x14]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x58131c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x58133f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x14]
cmp rsi, 0x1a
jb 0x5812ce
jmp 0x581333
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00581240

Function at 0x582520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58262c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7dbd6f72508e8a8f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x9e6978729d57788f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa7679e6978729d57
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6a45949386aa7983
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9170f0b0115120d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1311001613141406
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1309131100161314
mov qword [rsp + 0x26], rdx
movabs rdx, 0x12000607190802
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x5825c8
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x5825fc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x58261f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 0x1a
jb 0x5825ae
jmp 0x582613
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00582520
Function at 0x582640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58270c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3486491a37465b2
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xaa6cd918
movabs rdx, 0x80807080b090808
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb07080300040808
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5826a5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4a]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x5826dc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x5826ff
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4a]
cmp rsi, 0xc
jb 0x58268b
jmp 0x5826f3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00582640

Function at 0x583220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5832e7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x325a5e62616c6856
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x2451704e
movabs rdx, 0xa0004000b020905
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3020a0303050206
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x583288
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x13]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x13]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x5832b7
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x5832da
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x58326b
jmp 0x5832ce
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00583220

Function at 0x5839e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x583ab2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd56cbaedbf59d456
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x56d9e0d56cbaedbf
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa01040a020a0403
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x909070502080a01
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x583a4c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x80]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x583a7e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x583aa5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x80]
cmp rsi, 0xb
jb 0x583a32
jmp 0x583a95
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005839e0
Function at 0x583ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x583b8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3b4b61302f726936
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5f5d4b3b4b61302f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x903060806090904
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa06090000070903
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x583b2f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x583b5c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x583b7f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x583b12
jmp 0x583b73
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00583ac0

Function at 0x584300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5843d2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x20e4aeac1b72f656
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe363866cac20e4ae
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3070c0608040108
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0705030703060c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58436c
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x58439e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5843c5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
cmp rsi, 0xd
jb 0x584352
jmp 0x5843b5
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00584300
Function at 0x585fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58608a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6574612672433056
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x4f5d446153657461
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1a32694c4670693e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4080d130a0a1404
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0c000114090b10
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0d130411091311
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58602d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x58605a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x58607d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x586010
jmp 0x586071
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00585fa0

Function at 0x586ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x586c9d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xee03f9fd00fbf852
mov qword [rsp + 0x18], rdx
movabs rdx, 0x46636e1df865ee03
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfa89807e6112510
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa100f05030d1309
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x214050204070e10
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1502021405020407
mov qword [rsp + 0x38], rdx
movabs rdx, 0x111090e03110612
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x586c40
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x586c6d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x586c90
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x586c1f
jmp 0x586c84
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00586ba0