joyce8/EMBER2024-capa huggingface dataset:
Function at 0x57c2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57c3dc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xeff16d699dec8eec
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf76e49650e6feff1
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6efb690ae5f47275
mov qword [rsp + 0x40], rdx
movabs rdx, 0x91014120e030314
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x710030001010910
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd0d01060e110207
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x57c370
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x16
jge 0x57c3a8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x57c3cf
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
nop word [rax + rax]
cmp rsi, 0x16
jb 0x57c356
jmp 0x57c3c3
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f500
mov eax, edi
mov ecx, 0x16
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.0057c2e0

Function at 0x57cd80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57ceb2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x6d48f847f44130c9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x476d48f847f44130
mov qword [rsp + 0x20], rdx
movabs rdx, 0x56211533656d5547
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe330526523486c6f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x61742b1c6050086e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6130f00180f1e03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1d1a140d1e05200f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c020e1d1e1d0820
mov qword [rsp + 0x50], rdx
movabs rdx, 0x505141a18170805
mov qword [rsp + 0x58], rdx
movabs rdx, 0x161d181c01090a04
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x57ce4f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x48]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x48]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x28
jge 0x57ce7c
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x57cea5
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x21
jb 0x57ce32
jmp 0x57ce97
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x21
call fcn.0044a140
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
nop
call fcn.0045f500
mov eax, edi
mov ecx, 0x21
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0057cd80
Function at 0x57cec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57cfb6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x1a75fe735e02114d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfcfd1a75fe735e02
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5765c3c81407740a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x909090301020a0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0e0c0905000e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0a070a080d0407
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x57cf53
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x68]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x68]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x57cf82
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x57cfa9
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x57cf36
nop
jmp 0x57cf9d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f500
mov eax, edi
mov ecx, 0x12
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.0057cec0

Function at 0x57cfe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57d10b
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xc679d06fba748a96
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc380ba68746192cc
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6c9556538ce29756
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x57e1c5bb4e656d73
mov qword [rsp + 0x36], rdx
movabs rdx, 0x121c031405000714
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1012011c1305071d
mov qword [rsp + 0x46], rdx
movabs rdx, 0x180d1012011c1305
mov qword [rsp + 0x48], rdx
movabs rdx, 0x800091e081d0e0f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1006031d070810
mov qword [rsp + 0x58], rdx
movabs rdx, 0x10181609140e0111
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x57d0a9
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
mov byte [rsp + rdi + 0x1e], r9b
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x2a
jge 0x57d0d7
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x57d0fe
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x20
jb 0x57d092
jmp 0x57d0f2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x20
call fcn.0044a140
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
call fcn.0045f500
mov eax, edi
mov ecx, 0x20
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0057cfe0
Function at 0x57d400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57d548
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x676c383c4d577a44
mov qword [rsp + 0x19], rdx
movabs rdx, 0x61676c383c4d577a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x72682db36fe74b4c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4172253941d91935
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x313a3a1705744962
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0001070e13090b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1e0b1a0d1a1e0108
mov qword [rsp + 0x42], rdx
movabs rdx, 0x9151c131c071e0b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x511051320041603
mov qword [rsp + 0x50], rdx
movabs rdx, 0x712001202030a1a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x181f15181d110a1d
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x57d4e0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2e
jge 0x57d512
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x57d53b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
cmp rsi, 0x21
jb 0x57d4c2
jmp 0x57d52f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x21
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
call fcn.0045f500
mov eax, edi
mov ecx, 0x21
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0057d400

Function at 0x57e6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57e7b2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6fc4d2496b636f15
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6591bfb8
movabs rdx, 0x409000006050a00
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9080008000a0409
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x57e74e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x5a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x5a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x57e77b
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x57e7a5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x57e731
jmp 0x57e796
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f500
mov eax, edi
mov ecx, 0xc
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0057e6e0
Function at 0x57f880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57f952
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x65f44c33e6650217
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x3b61
movabs rdx, 0x505050006050404
mov qword [rsp + 0x22], rdx
movabs rdx, 0x900010009030505
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x57f8ea
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x57f91c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x57f945
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 0xa
jb 0x57f8d0
jmp 0x57f937
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.0045f500
mov eax, edi
mov ecx, 0xa
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0057f880

Function at 0x5802e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5803a9
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x652614bc476cc418
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x1ffa
movabs rdx, 0x800090409030601
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9060504
xor eax, eax
jmp 0x580343
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x48]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x580375
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x58039c
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x48]
cmp rsi, 0xa
jb 0x580329
jmp 0x580390
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f500
mov eax, edi
mov ecx, 0xa
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005802e0
Function at 0x5837a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x583872
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x37c872d6bfebeabd
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x6564d5c3
movabs rdx, 0x301010706020309
mov qword [rsp + 0x28], rdx
movabs rdx, 0x902040100080902
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58380b
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x58383d
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x583865
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0xc
jb 0x5837f1
jmp 0x583858
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.0045f500
mov eax, edi
mov ecx, 0xc
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005837a0

Function at 0x5845a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5846a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x645158495859656f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3f63486570697e64
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7c6d4d50534a7f60
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x502140808051010
mov qword [rsp + 0x34], rdx
movabs rdx, 0x804000505111615
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd0f0e0608040005
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1111060303030e13
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x584640
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x13]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x584672
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x58469b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x13]
cmp rsi, 0x17
jb 0x584625
jmp 0x58468f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f500
mov eax, edi
mov ecx, 0x17
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005845a0
Function at 0x584f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585056
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xd0561daa503b6553
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3f156b4739195433
mov qword [rsp + 0x20], rdx
movabs rdx, 0x253b3f156b473919
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4f45652e28ac742a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1208120719090c06
mov qword [rsp + 0x32], rdx
movabs rdx, 0x70a050e0a140407
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x50f160b020e070a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1508101007110a08
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x584fee
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x12]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1e
jge 0x585022
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x585049
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x12]
cmp rsi, 0x1a
jb 0x584fd4
nop
jmp 0x58503d
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f500
mov eax, edi
mov ecx, 0x1a
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.00584f40

Function at 0x585080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585168
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x3343be0e3c7428d6
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xf26c301d
movabs rdx, 0x907030b05000608
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30907030b0500
mov qword [rsp + 0x28], rdx
movabs rdx, 0x400050101030405
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x585100
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x585132
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x58515b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1d]
cmp rsi, 0xc
jb 0x5850e2
jmp 0x58514f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045f500
mov eax, edi
mov ecx, 0xc
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00585080
Function at 0x5853c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5854b6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6d44426f6d74655b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x756f4d426d44426f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x575752696e42745f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x120b06060506060e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0311000e080b0b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50f0c0803110a04
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x585453
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x585482
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5854a9
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x585436
nop
jmp 0x58549d
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f500
mov eax, edi
mov ecx, 0x14
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.005853c0

Function at 0x585d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585e12
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x112af9a4eba068c7
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xf40df869
movabs rdx, 0xb04020702060803
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0a070003060509
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x585dab
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x585ddd
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x585e05
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0xc
jb 0x585d91
jmp 0x585df8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.0045f500
mov eax, edi
mov ecx, 0xc
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00585d40
Function at 0x5867a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x586872
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x5094857d747c7f7e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x65657a5094857d74
mov qword [rsp + 0x20], rdx
movabs rdx, 0x601000102060601
mov qword [rsp + 0x28], rdx
movabs rdx, 0x800050807070404
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58680f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
mov byte [rsp + rdi + 0x1d], r9b
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x58683c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x586865
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x5867f8
jmp 0x586857
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.0045f500
mov eax, edi
mov ecx, 0xb
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005867a0

Function at 0x58b1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58b2a8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xa874f36eb06c08f8
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6fc269f8a874f36e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc17401affe10d39b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x12010e010f011100
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd11051000071301
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10080d1105100007
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc1103100a0f1310
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58b240
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x67]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x58b272
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x58b29b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x67]
cmp rsi, 0x14
jb 0x58b225
jmp 0x58b28f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f500
mov eax, edi
mov ecx, 0x14
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0058b1a0
Function at 0x58c620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58c70b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xa40c0c02d6722703
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5c444913ef0617a4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x30601060e080801
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4040104070306
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0b0e08010b0905
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x58c6a4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x16
jge 0x58c6d7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x58c6fe
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x58c687
jmp 0x58c6f2
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f500
mov eax, edi
mov ecx, 0xf
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0058c620

Function at 0x58d120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58d228
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xfbf1986f3a144af3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x284347dcfbf1986f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x104034f8036d34da
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7000c080b110506
mov qword [rsp + 0x32], rdx
movabs rdx, 0x902090f13030910
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc030a00060a0902
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5070d110d080112
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x58d1c2
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x58d1ef
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x58d21b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x58d1a5
jmp 0x58d20f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f500
mov eax, edi
mov ecx, 0x14
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0058d120
Function at 0x58d240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58d33c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x726f579e7a477551
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x77726f579e7a4775
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6f638897a8676f69
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40e100a040d040c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd08040e100a040d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20f0f030c0f0310
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x58d2d0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x58d308
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x58d32f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x58d2b6
jmp 0x58d323
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f500
mov eax, edi
mov ecx, 0x11
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.0058d240