joyce8/EMBER2024-capa huggingface dataset:
Function at 0x580280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58035d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6f09651e29e77044
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf3aecf228165c315
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc0b0e0d01010206
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90f08010c0b0e0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe040d0f040c0803
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x580300
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x61]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x58032d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x580350
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x5802e2
jmp 0x580344
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00463f80
mov eax, edi
mov ecx, 0x10
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.00580280

Function at 0x580620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58071b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc7baef4965bd43c4
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x756f40a36d756cc7
mov qword [rsp + 0x26], rdx
movabs rdx, 0xebd9bd69d3427499
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x601020c16120705
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1050415010f0111
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x141101050415010f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb00050601021515
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5806b9
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x5806eb
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x58070e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x17
jb 0x58069f
jmp 0x580702
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00463f80
mov eax, edi
mov ecx, 0x17
call fcn.00463f80
nop
nop dword [rax + rax]
call fcn.00461d00
jmp fcn.00580620
Function at 0x580820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5808fd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x747b63d10f8d7544
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4d00fdbcbc6c6574
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc030b020a0d0c0e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90b0d020c030b02
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb04030406030b04
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x5808a0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x5808cd
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5808f0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x580882
jmp 0x5808e4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00463f80
mov eax, edi
mov ecx, 0xf
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.00580820

Function at 0x580dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x580edd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x35f66c4364e38bbf
mov qword [rsp + 0x19], rdx
movabs rdx, 0x10a8ed1261680c63
mov qword [rsp + 0x21], rdx
movabs rdx, 0x2f740110a8ed1261
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6e6f0b748b636905
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1300020d010e0809
mov qword [rsp + 0x34], rdx
movabs rdx, 0x60d120e1300020d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1809160109160c12
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf01020d0c071810
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1810011210131609
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x580e80
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x5a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x5a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x580ead
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x580ed0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1b
jb 0x580e5d
jmp 0x580ec4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1b
call fcn.0044e180
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00463f80
mov eax, edi
mov ecx, 0x1b
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.00580dc0
Function at 0x580f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x581008
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x73021705116e05f8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xff0395dd80e343f4
mov qword [rsp + 0x24], rdx
movabs rdx, 0x168c027aff0395dd
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe6e6fef001c6369
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1706180b120f1605
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1810161801110d11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x18030f1b080e051b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa13000a0300040c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x580fab
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x77]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x20
jge 0x580fd8
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x580ffb
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x580f8e
jmp 0x580fef
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.0044e180
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00463f80
mov eax, edi
mov ecx, 0x1c
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00580f00

Function at 0x583c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x583d26
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xcc6dbd6f43e9d447
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xcec44a694ce450cc
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd02050d0d070208
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70c0d02050d0d07
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc050e0e07010209
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x583cc0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x583cf2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x583d17
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0xf
jb 0x583ca2
jmp 0x583d0b
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00463f80
mov eax, edi
mov ecx, 0xf
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00583c40
Function at 0x583d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x583e2a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x752e2f5a3b2c5b47
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6474752e2f5a3b2c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5e6a0f656d544e72
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc1102050505020f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3050c1102050505
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x501040903060210
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x583dcd
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x26]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x26]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x12
jge 0x583dfa
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x583e1d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x583db0
jmp 0x583e11
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00463f80
mov eax, edi
mov ecx, 0x12
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00583d40

Function at 0x5854c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5855bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7ea969698da0d189
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9473a0b27ea96969
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb7780e40b8a3e462
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa11070f110d0113
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10a100710070600
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x2090d130500010a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80e10080b130603
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x585560
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x58558d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5855b0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x58553f
jmp 0x5855a4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00463f80
mov eax, edi
mov ecx, 0x14
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.005854c0
Function at 0x585a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585b3d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x49656c89ac74c05b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xad1a61235874f4e4
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb2f583b6ad1a6123
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb34501bdc3b90b48
mov qword [rsp + 0x32], rdx
movabs rdx, 0x151200111111080b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe171609131b1512
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170804030c11180b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170c00160a111001
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf12111516191911
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x585ae0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x2a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x585b0d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x585b30
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1c
jb 0x585abd
jmp 0x585b24
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.0044e180
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00463f80
mov eax, edi
mov ecx, 0x1c
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.00585a20

Function at 0x5865e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5866a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa740c61cdbfe847
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xb66f1972
movabs rdx, 0x10b050107070703
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30502020903010b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x586648
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x41]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x41]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x586677
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x58669a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x58662b
jmp 0x58668e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00463f80
mov eax, edi
mov ecx, 0xc
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.005865e0
Function at 0x586e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x586f4c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xac34100e400d4d03
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4665ac34100e400d
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe865f43df22f1324
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2010b020a030c0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x110b000f070b0e0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x41105000f060b0e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x586eea
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x586f1c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x586f3f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1e]
cmp rsi, 0x12
jb 0x586ed0
jmp 0x586f33
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00463f80
mov eax, edi
mov ecx, 0x12
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00586e60

Function at 0x587180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58728c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x64656daf6a82d30a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x646e769c65700c50
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf9a314b3f4f736ac
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0d021110011004
mov qword [rsp + 0x36], rdx
movabs rdx, 0x16130c0d02111001
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1416150d120c0111
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1201151312131504
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1009001617101703
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x587228
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x58725c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x58727f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0x18
jb 0x58720e
jmp 0x587273
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044e180
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00463f80
mov eax, edi
mov ecx, 0x18
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00587180
Function at 0x588d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x588de7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x611e64be30c39c47
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xb86cce0e
movabs rdx, 0x904020801010103
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0b020106010904
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x588d88
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x47]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x588db7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x588dda
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x588d6b
jmp 0x588dce
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00463f80
mov eax, edi
mov ecx, 0xc
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00588d20

Function at 0x58a1e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58a2b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x436b636954746bc4
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2a7c3e3781c436b
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb010c0a0c000c0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd01080b0b0b0109
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58a24c
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x58a27e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x58a2a5
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
cmp rsi, 0xe
jb 0x58a232
jmp 0x58a295
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00463f80
mov eax, edi
mov ecx, 0xe
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0058a1e0

Function at 0x58c040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58c112
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x72a569bff761bfc6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2c78180c01f272a5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1030b0a0a090d0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4010a00060d080a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58c0ac
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x58c0de
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x58c105
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 0xe
jb 0x58c092
jmp 0x58c0f5
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00463f80
mov eax, edi
mov ecx, 0xe
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0058c040
Function at 0x58c820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58c8e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1c72b4f561af6fdb
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xa6
movabs rdx, 0x800080202070400
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x405
xor eax, eax
nop
jmp 0x58c880
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x58c8b2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x58c8d7
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 9
jb 0x58c862
jmp 0x58c8cb
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00463f80
mov eax, edi
mov ecx, 9
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0058c820

Function at 0x58cb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58cc38
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x81ec2927f163f64c
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xfe0d3637
movabs rdx, 0x10b0107050a0403
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60b010b0107050a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80506070b040901
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58cbd7
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x58cc08
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x58cc2b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x58cbba
jmp 0x58cc1f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00463f80
mov eax, edi
mov ecx, 0xc
call fcn.00463f80
nop
call fcn.00461d00
nop dword [rax]
jmp fcn.0058cb60

Function at 0x58d660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58d72c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xdaf458d811ff708f
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xf17f
movabs rdx, 0x907060202080003
mov qword [rsp + 0x22], rdx
movabs rdx, 0x503000405000907
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x58d6c4
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x69]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x58d6fc
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x58d71f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x69]
cmp rsi, 0xa
jb 0x58d6aa
jmp 0x58d713
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00463f80
mov eax, edi
mov ecx, 0xa
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0058d660
Function at 0x58eaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58ebba
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x294616797265034e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20c44ac1c99b7207
mov qword [rsp + 0x23], rdx
movabs rdx, 0x4a20c44ac1c99b72
mov qword [rsp + 0x24], rdx
movabs rdx, 0x74819e0713b3b106
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x160c060e0f0b060d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x130612160c060e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd13071316160a15
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc051507000d170c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf01130e08061114
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x58eb57
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x58eb89
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x58ebad
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
cmp rsi, 0x19
jb 0x58eb3d
jmp 0x58eba1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044e180
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00463f80
mov eax, edi
mov ecx, 0x19
call fcn.00463f80
nop
call fcn.00461d00
nop
jmp fcn.0058eaa0

Function at 0x590340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59042c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x65a9c87543d76590
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd744929565a9c875
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc17b7292c2a09e9c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2060b0f0e0e1309
mov qword [rsp + 0x32], rdx
movabs rdx, 0x50c080d0f060206
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb120013090c1000
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5903ca
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x5903fc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x59041f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
cmp rsi, 0x14
jb 0x5903b0
jmp 0x590413
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00463f80
mov eax, edi
mov ecx, 0x14
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00590340