joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5746c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5747aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x576f330f77396155
mov qword [rsp + 0x19], rdx
movabs rdx, 0x64576f330f773961
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x76656960554e354c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x100e0b0104020a02
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0100050a02100e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc03050701020d01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x57474d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x57477a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x57479d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x574730
jmp 0x574791
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005746c0

Function at 0x574b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x574c5d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74e0e3b6e1d76ad3
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc6d1def174e0e3b6
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2058ee9765a19f44
mov qword [rsp + 0x24], rdx
movabs rdx, 0x90612100e0b1310
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0c0c0d13080a05
mov qword [rsp + 0x34], rdx
movabs rdx, 0x40d0e0e0c0c0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100208030102110c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x574c00
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x574c2d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x574c50
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x574bdf
jmp 0x574c44
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00574b60
Function at 0x574d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x574e0a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4974a2f9fd74880a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x74384974a2f9fd74
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd9780a8b61f5fef9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x100e1008010c1100
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf050c04080a100e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0b100e1003030a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x574dad
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x574dda
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x574dfd
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x574d90
jmp 0x574df1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00574d20

Function at 0x574e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x574ee6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x74dd45e74d74ea47
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x796a
movabs rdx, 0x106040403010301
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8080808
xor eax, eax
jmp 0x574e80
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x574eb2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x574ed7
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0xa
jb 0x574e63
jmp 0x574ecb
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00574e20
Function at 0x574f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x574ffb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc050f4ea2b73e1ee
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbaf1f073a86527c7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7463659162fd62e3
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5140e1205120f12
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1200080f1207090d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x120b051012011200
mov qword [rsp + 0x40], rdx
movabs rdx, 0x503050410090f12
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x574f99
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x574fcb
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x574fee
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 0x18
jb 0x574f7f
jmp 0x574fe2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00574f00

Function at 0x575300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5753d2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf60e4865f46f8b43
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x911ef7f60e4865f4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9010a0606060906
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x903010807060901
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x57536c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x62]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x57539e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5753c5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x62]
cmp rsi, 0xb
jb 0x575352
jmp 0x5753b5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00575300
Function at 0x578a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x578b0c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x74a3954e64a19a55
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xdbc54a0e6ede68b7
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb2a3dbc54a0e6ede
mov qword [rsp + 0x24], rdx
movabs rdx, 0x56f99bc0cb1ab66
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5080c190e0d1915
mov qword [rsp + 0x34], rdx
movabs rdx, 0x11501000e011619
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf10170a01150100
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1510021714130611
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x578aa8
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x65]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x578adc
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x578aff
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x65]
cmp rsi, 0x1a
jb 0x578a8e
jmp 0x578af3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00578a00

Function at 0x579a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x579b46
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xeb00e23760fa411
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6551ce46f2e9140e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0103010c0408
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc050106000d0103
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa09070102060009
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x579ae0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x48]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x579b12
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x579b37
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x48]
cmp rsi, 0xf
jb 0x579ac2
jmp 0x579b2b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00579a60
Function at 0x57b5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57b6aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6560722543544747
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5c2b656072254354
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x64690c4849723f2b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80e091004090d01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6080f0e0d02080e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0b0a0b0e0a0a0a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x57b64d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x28]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x28]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x57b67a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x57b69d
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x57b630
jmp 0x57b691
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057b5c0

Function at 0x57d5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57d6a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8f0b8e17c77405ab
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9157c70b0cb9c9ca
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe0c010a040d0603
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90d0a05080b0e0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7030f030c080e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x57d640
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x57d672
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x57d697
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 0x10
jb 0x57d622
jmp 0x57d68b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057d5c0
Function at 0x57e2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57e3c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1da70eee4e07a147
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa107a6041c8d9f50
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0604060a0b0f0d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50201070e09090c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd040d01070f0c0b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x57e360
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x51]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x18
jge 0x57e392
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x57e3b7
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x51]
cmp rsi, 0x10
jb 0x57e342
jmp 0x57e3ab
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057e2e0

Function at 0x57ed60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57ee7a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xdbaa6ff6bd297547
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd0a91065ce50bc94
mov qword [rsp + 0x24], rdx
movabs rdx, 0x849a1aab5bdd0a9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x21b5e4ce26e124e4
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1b191d180b070201
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x2171a080d041b19
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1009151218010f02
mov qword [rsp + 0x48], rdx
movabs rdx, 0x16041c1103060e12
mov qword [rsp + 0x50], rdx
movabs rdx, 0x41b171b171a0d13
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x57ee17
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x26
jge 0x57ee49
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x57ee6d
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
cmp rsi, 0x1e
jb 0x57edfd
jmp 0x57ee61
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.0044bb20
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461020
mov eax, edi
mov ecx, 0x1e
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.0057ed60
Function at 0x581380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58146a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5a75ad6999adb492
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x666e49656e6f5a75
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9e6f7e896caf6dae
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1312000605061512
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10e011002061111
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1006000f15031301
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58140d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x18
jge 0x58143a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x58145d
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x5813f0
jmp 0x581451
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00581380

Function at 0x581560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58161d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf9f70507d003fd67
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x6efd
movabs rdx, 0x205030303000606
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1070804
xor eax, eax
jmp 0x5815c0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x7c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x7c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x5815ed
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x581610
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x5815a3
jmp 0x581604
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00581560
Function at 0x5825e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5826cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe5c56e6994a56503
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc3abad77e5c56e69
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8c9401ecb5b465ba
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x110a0e110c0b060f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x31200030710110a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe1310020e0e0709
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58266a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5a]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x58269c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5826bf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5a]
cmp rsi, 0x14
jb 0x582650
jmp 0x5826b3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005825e0

Function at 0x586500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5865be
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb0121f765c7b614
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x78170e1f
movabs rdx, 0xa09020a01090805
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x60704
xor eax, eax
jmp 0x586561
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 0x61]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x58658e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5865b1
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x586544
jmp 0x5865a5
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
nop
call fcn.0045eda0
jmp fcn.00586500
Function at 0x5865e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5866c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2d0c94ad879a65fe
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xaa7975de9663658a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6030b0704020f04
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf0600050d0f0603
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8040b07000c080b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x586660
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x586692
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5866b7
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0x10
jb 0x586642
jmp 0x5866ab
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005865e0

Function at 0x586760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x586838
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1b9f515bf87365b4
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x4a06504
movabs rdx, 0x50b050504070a0a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x708050b05050407
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0a060a08030003
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5867d4
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x12
jge 0x586808
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x58682b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4d]
nop
cmp rsi, 0xc
jb 0x5867ba
jmp 0x58681f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.00586760
Function at 0x5880e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5881ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb1f8adec46faa2bf
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xac74b1f8adec46fa
mov qword [rsp + 0x20], rdx
movabs rdx, 0x579fb4a75b32f380
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6010e040a070b0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50f00100d010909
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0e020e0e010e0b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58816d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x30]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x30]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x58819a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5881bd
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x588150
jmp 0x5881b1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005880e0

Function at 0x588ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x588db2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x46d11f38122d6527
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x791e6946d11f3812
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70a060002040303
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9050a000007070a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x588d4c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x588d7e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x588da5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0xb
jb 0x588d32
jmp 0x588d95
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00588ce0