joyce8/EMBER2024-capa huggingface dataset:
Function at 0x582020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x49e9f27ac687c2de
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x205070005000300
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3000606
xor eax, eax
nop
jmp 0x582080
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0x63]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x5820ab
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5820ea
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x582062
jmp 0x5820de
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x5820c4
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x5820b8
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x583740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xdc8e2f2a49790327
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x607040406000703
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7040306
xor eax, eax
nop
jmp 0x5837a0
movzx r8d, byte [rsp + rbx + 0x1c]
add r8d, 0xfffffff1
add edx, r8d
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x5837ce
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58380d
movzx edi, byte [rsp + rsi + 0x1c]
add edi, 0xfffffff1
add edi, edx
cmp rbx, 8
jb 0x583782
jmp 0x583801
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x5837e7
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x5837db
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3
Function at 0x584100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5841d2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xacab6c9fe2d5afa7
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x72f4be2e
movabs rdx, 0xb070302030a0409
mov qword [rsp + 0x28], rdx
movabs rdx, 0x403020a010506
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58416e
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x58419b
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5841c5
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x584151
jmp 0x5841b6
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00584100

Function at 0x584ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x584c72
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x466b115c735a5b5e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4f3d48466b115c73
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x901080902020507
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x400080a
xor eax, eax
jmp 0x584c0e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x1f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x584c3b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x584c65
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x584bf1
jmp 0x584c56
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00584ba0
Function at 0x5856e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5857b2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2eac3d6c6c9d68d7
mov qword [rsp + 0x19], rdx
movabs rdx, 0xfc2cd42eac3d6c6c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa0a0909060a09
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8020205
xor eax, eax
jmp 0x58574e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x58577b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5857a5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x585731
jmp 0x585796
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005856e0

Function at 0x5857c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585888
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xc7f25a92b889f175
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x56c
movabs rdx, 0x701040707050909
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6030602
xor eax, eax
jmp 0x585823
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x67
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x585854
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x58587b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x67
add r8d, edx
cmp rsi, 0xa
jb 0x585809
jmp 0x58586f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461e80
mov eax, edi
mov ecx, 0xa
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005857c0

Function at 0x585c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585d32
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x742cf5e9746efa77
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x6cee59e1
movabs rdx, 0xa060a0109090908
mov qword [rsp + 0x28], rdx
movabs rdx, 0x605040904010a08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x585cce
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x585cfb
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x585d25
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x585cb1
jmp 0x585d16
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00585c60
Function at 0x585ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585f92
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xaafc69748a6d7377
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6c6c64b2
movabs rdx, 0x601080207060307
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x1010704
xor eax, eax
jmp 0x585f24
movzx r9d, byte [rsp + rsi + 0x24]
add r9d, 0xffffffb3
add edx, r9d
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
cmp rax, 0xc
jge 0x585f5b
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xc
jae 0x585f85
movzx r8d, byte [rsp + rdi + 0x24]
add r8d, 0xffffffb3
add r8d, edx
cmp rsi, 0xc
jb 0x585f0a
jmp 0x585f76
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00585ec0

Function at 0x5861a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5862e6
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x70b08a6547af7b94
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6e7b70b08a6547af
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x628f817e88ab7669
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6c7ce6936391fe0b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x57c7c77753848462
mov qword [rsp + 0x34], rdx
movabs rdx, 0x81e0e111200191a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x200d0f0c072005
mov qword [rsp + 0x44], rdx
movabs rdx, 0x140f051000200d0f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2013120b1f02060b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2101801131f161b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1c200d0d0709171c
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x586280
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x2c
jge 0x5862ad
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x5862d4
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x22
jb 0x586262
jmp 0x5862c8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x22
call fcn.0044ba20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x22
call fcn.00461e80
mov eax, edi
mov ecx, 0x22
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005861a0
Function at 0x589920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x589a16
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6c170f131203e615
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7361656c170f1312
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xfcc6eddedd999665
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2060100030c050d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1204110c02060100
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe05100f11030312
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5899b0
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x58
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x5899e2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x589a09
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x58
add r8d, edx
cmp rsi, 0x13
jb 0x589996
nop
jmp 0x5899fd
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461e80
mov eax, edi
mov ecx, 0x13
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.00589920

Function at 0x58a520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58a628
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6c5258696d477545
mov qword [rsp + 0x19], rdx
movabs rdx, 0x796c655e476c5258
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5a7845737574816b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2090c090012070e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1405020406010804
mov qword [rsp + 0x36], rdx
movabs rdx, 0x214140502040601
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0f090401040d0f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58a5c0
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffec
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x58a5f1
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x58a61b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffec
add r8d, edx
cmp rsi, 0x15
jb 0x58a5a5
jmp 0x58a60f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461e80
mov eax, edi
mov ecx, 0x15
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0058a520
Function at 0x58c320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58c432
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x8391c2655374a2d6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x956bfa907f799069
mov qword [rsp + 0x25], rdx
movabs rdx, 0x69956bfa907f7990
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9c9245c0726f7470
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd180c1700160b05
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1815180e16150e00
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x15071815180e1615
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90e0b060f010616
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x58c3d1
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x58c3fe
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x58c425
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x58c3b4
jmp 0x58c419
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0058c320

Function at 0x58f1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58f2a8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7c4d7fa26e656208
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfe72575f616e7c4d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5040004010d0400
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0b0705040004
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0504070b0a070a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x58f241
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0x64
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x14
jge 0x58f272
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x58f29b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0x64
add r8d, edx
cmp rsi, 0xe
jb 0x58f227
jmp 0x58f28f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461e80
mov eax, edi
mov ecx, 0xe
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0058f1c0
Function at 0x58f360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58f448
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x5a5a68c14865703e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe3d5cbeae0e0c45a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4040e04060b0e07
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0308000c040404
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0b0d090a080e09
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x58f3e1
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x79
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x16
jge 0x58f412
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x58f43b
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x79
add r8d, edx
cmp rsi, 0xf
jb 0x58f3c7
jmp 0x58f42f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461e80
mov eax, edi
mov ecx, 0xf
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0058f360

Function at 0x592100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x592212
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xbdf3c4625bd56545
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb0df6465de79eb69
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe7eeb0df6465de79
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70756f72f26ce85e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0f020e070e0315
mov qword [rsp + 0x38], rdx
movabs rdx, 0x141104050500020d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20512030d090206
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1112050913101503
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5921b1
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x5921de
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x592205
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x592194
jmp 0x5921f9
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461e80
mov eax, edi
mov ecx, 0x1a
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00592100
Function at 0x592ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x592bd3
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x372fcbb253cb65c4
mov qword [rsp + 0x19], rdx
movabs rdx, 0xbf3373bdbc79bf25
mov qword [rsp + 0x21], rdx
movabs rdx, 0xc8bf3373bdbc79bf
mov qword [rsp + 0x22], rdx
movabs rdx, 0x23f825d472bccfc8
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe05070e160f1802
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc060c1313151217
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf08110206100c06
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70f090c120b0004
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x592b6e
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffff87
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x592b9f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x592bc6
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffff87
add r8d, edx
cmp rsi, 0x19
jb 0x592b54
jmp 0x592bba
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00592ac0

Function at 0x593440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x593548
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x9f746b5d7a83648a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x667c669f746b5d7a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7a8369589e9a5578
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf00080d0e040111
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x31108060f03060c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x112040903110806
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90207090b060906
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5934e2
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x10]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x10]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1c
jge 0x59350f
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x59353b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x5934c5
jmp 0x59352f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
nop dword [rax + rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461e80
mov eax, edi
mov ecx, 0x13
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00593440
Function at 0x593a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x593ae8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x66725364665a744e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6e47496d76667253
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x70c0b0302060b07
mov qword [rsp + 0x26], rdx
movabs rdx, 0x309070c0b030206
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4020a0404060c00
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x593a81
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xfffffff3
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x593ab2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x593adb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xfffffff3
add r8d, edx
cmp rsi, 0xd
jb 0x593a67
jmp 0x593acf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461e80
mov eax, edi
mov ecx, 0xd
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00593a00

Function at 0x595740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x595853
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x65bb8f1918aa9243
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf69bac2057ce2b4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x74610f69bac2057c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x74a915a26e6fab65
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x60d0c0f0304050b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x108021709161717
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x18050c1601080217
mov qword [rsp + 0x40], rdx
movabs rdx, 0x41804030b03130a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5957ee
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffff9a
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x59581f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x595846
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffff9a
add r8d, edx
cmp rsi, 0x1a
jb 0x5957d4
jmp 0x59583a
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461e80
mov eax, edi
mov ecx, 0x1a
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00595740