joyce8/EMBER2024-capa huggingface dataset:
Function at 0x577100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5771dd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd86570e3d6b9ea4d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2add2d7453d86570
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb030207070003
mov qword [rsp + 0x26], rdx
movabs rdx, 0x200000b03020707
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10c040301040a07
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x577180
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x5771ad
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5771d0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x577162
jmp 0x5771c4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461b40
mov eax, edi
mov ecx, 0xd
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.00577100

Function at 0x577200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5772fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xcdfaed19d72ac43
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x741126f70cdfaed1
mov qword [rsp + 0x22], rdx
movabs rdx, 0x82c972da9ef06d65
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40e0e0705100a09
mov qword [rsp + 0x32], rdx
movabs rdx, 0x812100e0a091208
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x103070612040812
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6130a080509070f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x577299
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x5772cb
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5772ee
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4e]
cmp rsi, 0x14
jb 0x57727f
jmp 0x5772e2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461b40
mov eax, edi
mov ecx, 0x14
call fcn.00461b40
nop
nop dword [rax + rax]
call fcn.0045f8c0
jmp fcn.00577200
Function at 0x578720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57880c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf1eaf665fa9ade0b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x64f1eaf665fa9ade
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x69570a46d5f3694c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1000100e0e0002
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb000f0b00100010
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc070506100c0301
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5787aa
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x5787dc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5787ff
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 0x11
jb 0x578790
jmp 0x5787f3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461b40
mov eax, edi
mov ecx, 0x11
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00578720

Function at 0x57ab20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57abfd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc6c6a5d3b29a8e8d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xcfac63a7c7d8b26e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10f020b070e0008
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x105020a0a04010f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x403090706070c0e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x57aba0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x57abcd
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x57abf0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x57ab82
jmp 0x57abe4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461b40
mov eax, edi
mov ecx, 0x10
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.0057ab20
Function at 0x57af40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57b026
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x61ae9c7461a01a27
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc3c41969b4bfced3
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0b090e000d0801
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0d0005060f0e0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa08020608080e08
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x57afc0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6a]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x18
jge 0x57aff2
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x57b017
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6a]
cmp rsi, 0x10
jb 0x57afa2
jmp 0x57b00b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461b40
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0057af40

Function at 0x57c680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57c788
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf901646ec5767802
mov qword [rsp + 0x19], rdx
movabs rdx, 0x271b6de60472de0b
mov qword [rsp + 0x21], rdx
movabs rdx, 0x6e271b6de60472de
mov qword [rsp + 0x22], rdx
movabs rdx, 0x57007f6e638726f2
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x911120e02110f16
mov qword [rsp + 0x32], rdx
movabs rdx, 0x603131210060b17
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x14140e0c08120603
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1400130c16000f07
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x57c72b
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x57c758
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x57c77b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x57c70e
jmp 0x57c76f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461b40
mov eax, edi
mov ecx, 0x19
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0057c680
Function at 0x57e5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57e6bd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2a2a236188721fa2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5765b80a22302a2a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5070b0001050003
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x603070005070b00
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb060a090708000a
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x57e660
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x52]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x52]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x57e68d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x57e6b0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x57e642
jmp 0x57e6a4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461b40
mov eax, edi
mov ecx, 0xe
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.0057e5e0

Function at 0x57f840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57f90c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3b4eee502c744f1c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5215232265533b4e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x60b000707050c07
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70104080a030d06
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x57f8af
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x34]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x34]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x57f8dc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x57f8ff
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x57f892
jmp 0x57f8f3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461b40
mov eax, edi
mov ecx, 0xe
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0057f840
Function at 0x580520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5805f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x89768f7244755f82
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x9295778d7089768f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb05080c070b000c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0b070207090001
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58058c
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x21]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x5805be
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5805e5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x21]
cmp rsi, 0xd
jb 0x580572
jmp 0x5805d5
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00461b40
mov eax, edi
mov ecx, 0xd
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00580520

Function at 0x580600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5806ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd01f76a10a74b6cb
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x15d40ec66e83d01f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7873a66e69e27453
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0a1513010b0808
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa01001303130106
mov qword [rsp + 0x38], rdx
movabs rdx, 0x81008080c070304
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58068d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x45]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x45]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x18
jge 0x5806ba
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5806dd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x580670
jmp 0x5806d1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461b40
mov eax, edi
mov ecx, 0x16
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00580600
Function at 0x582120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5821f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x980b1ea508746547
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7365b9a9eb1910c0
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50d030807080d08
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa0b09060c060409
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x58218c
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4a]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x5821be
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5821e5
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4a]
cmp rsi, 0x10
jb 0x582172
jmp 0x5821d5
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.00461b40
mov eax, edi
mov ecx, 0x10
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00582120

Function at 0x582820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58290c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4c7550434d657454
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3a654c7550434d65
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5739452564446e61
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5000d0c01020905
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70e0d0405000d0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50d0e0405100907
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5828aa
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x5828dc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5828ff
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0x12
jb 0x582890
jmp 0x5828f3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461b40
mov eax, edi
mov ecx, 0x12
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00582820
Function at 0x582920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x582a1b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6490785a4e74326d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7b76515575756650
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65657a615f656565
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1704000d0f0e060b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x5120a0b1510100e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x917121305120a0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf00010f1517000c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5829b9
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5829eb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x582a0e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
cmp rsi, 0x18
jb 0x58299f
jmp 0x582a02
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461b40
mov eax, edi
mov ecx, 0x18
call fcn.00461b40
nop
nop dword [rax + rax]
call fcn.0045f8c0
jmp fcn.00582920

Function at 0x584300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5843ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x740312681c7410c7
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4b740312681c7410
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe665adf1f7070f9f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80901060b0e0010
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80d000d0a0a0809
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30509050c080b10
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x58438d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x6d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x6d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x5843ba
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5843dd
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x584370
jmp 0x5843d1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461b40
mov eax, edi
mov ecx, 0x11
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00584300
Function at 0x584840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58492a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xcb749bdf9dcf836d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa3d19ecb749bdf9d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x57f89c6f96636572
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1102010708081005
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0e11090a110a04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x308030200001101
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5848cd
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x14]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x5848fa
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x58491d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x5848b0
jmp 0x584911
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461b40
mov eax, edi
mov ecx, 0x13
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00584840

Function at 0x586940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x586a6c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x5bc0ced4ce576947
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6d61bc68cf613877
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe0ef56c87fde2034
mov qword [rsp + 0x28], rdx
movabs rdx, 0x71e11c614e653075
mov qword [rsp + 0x30], rdx
movabs rdx, 0x21e12030d1d1d04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1902171f16070807
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1911170213010111
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140817131306101e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1e011d040609041d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x40b17061e0d1305
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x586a06
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x30
jge 0x586a3c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x586a5f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 0x20
jb 0x5869ec
jmp 0x586a53
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.0044c140
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00461b40
mov eax, edi
mov ecx, 0x20
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00586940
Function at 0x587560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x587646
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa80db74c8ff503ee
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf3a245f172b9a80d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1020606000a0708
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa0601020606000a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30c0501020d0c
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x5875e0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x56]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x587612
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x587637
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x56]
cmp rsi, 0xe
jb 0x5875c2
jmp 0x58762b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461b40
mov eax, edi
mov ecx, 0xe
nop
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00587560

Function at 0x588080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x588147
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6f8b65ca83636f84
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xa4877b75
movabs rdx, 0x404090604090903
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0006080a000b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5880e8
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 6]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x588117
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x58813a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x5880cb
jmp 0x58812e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461b40
mov eax, edi
mov ecx, 0xc
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00588080
Function at 0x588480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58854c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x56cf88ad9eb6ffd
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5798d7056cf88ad9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x907070000070205
mov qword [rsp + 0x28], rdx
movabs rdx, 0x308000704080907
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5884ef
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x58851c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x58853f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x5884d2
jmp 0x588533
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461b40
mov eax, edi
mov ecx, 0xb
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00588480

Function at 0x5888a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58895d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc965bc456ebd1a4f
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x571d
movabs rdx, 0x207010807010501
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7070207
xor eax, eax
jmp 0x588900
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x60]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x60]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x58892d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x588950
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x5888e3
jmp 0x588944
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044c140
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461b40
mov eax, edi
mov ecx, 0xa
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.005888a0