joyce8/EMBER2024-capa huggingface dataset:
Function at 0x57de40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57df46
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6d76b28656748193
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xac8ced49796d76b2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9dc06f7da77a8f88
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50a130e0b0d0513
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0e0f06040a1101
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x8080d140d050e0e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc100b0b06001404
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x57dee0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
mov byte [rsp + rdi + 0x1d], r9b
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x57df0d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x57df34
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x57dec5
jmp 0x57df28
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f380
mov eax, edi
mov ecx, 0x15
nop dword [rax + rax]
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0057de40

Function at 0x57f580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57f652
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xcdc1c50c763b124c
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x636f
movabs rdx, 0x307060504060402
mov qword [rsp + 0x22], rdx
movabs rdx, 0x301040607040307
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x57f5ed
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x5d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x5d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x57f61a
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x57f645
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x57f5d0
jmp 0x57f635
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.0045f380
mov eax, edi
mov ecx, 0xa
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0057f580
Function at 0x581300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5813eb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x73d6cc795f8f7f51
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xac6a63b476aaba73
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0b010205030e06
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3080e0b01020503
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb03080d060e0906
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x581384
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x13]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x13]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x5813b7
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x5813de
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x581367
jmp 0x5813d2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f380
mov eax, edi
mov ecx, 0xf
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00581300

Function at 0x581400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x581526
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6ca6247925201721
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xacebc315c3722633
mov qword [rsp + 0x22], rdx
movabs rdx, 0x350dacebc315c372
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1b27a83e7465f011
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30d060b0e090d0f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1315190b030d060b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf1106171018180e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x605021301020d01
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160802020c101200
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5814c0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x6e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x6e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x24
jge 0x5814ed
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x581514
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x5814a3
jmp 0x581508
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f380
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00581400
Function at 0x581660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x581732
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x72956f438d60728a
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x83756b6f
movabs rdx, 0x2000703060b0300
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb090a0a01020200
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5816ce
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 6]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x5816fb
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x581725
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x5816b1
jmp 0x581716
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f380
mov eax, edi
mov ecx, 0xc
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00581660

Function at 0x582ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x582b9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xe1446c6c447465da
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3ab2e24342d7c83c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0d0c0f0a0b0708
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf0700090c0a0f0d
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x582b35
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x582b68
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x582b8f
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0x10
jb 0x582b18
jmp 0x582b83
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f380
mov eax, edi
mov ecx, 0x10
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.00582ac0
Function at 0x583c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x583d28
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6cbc2e880fef851e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x66c5ce656cbc2e88
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb26f6974956d206f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x60501130d040f01
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd00050906001302
mov qword [rsp + 0x34], rdx
movabs rdx, 0x301030f0d000509
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50d050d13000a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x583cc0
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x36
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x583cf1
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x583d1b
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x36
add r8d, edx
cmp rsi, 0x14
jb 0x583ca5
jmp 0x583d0f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f380
mov eax, edi
mov ecx, 0x14
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00583c20

Function at 0x583e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x583f08
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xa5ae37a54e1165f4
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5261d6a503b2cba5
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf2761b6bb65b8c0
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90c0a16100f0508
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1207050015001209
mov qword [rsp + 0x38], rdx
movabs rdx, 0x130a04080e070208
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb15160607160b00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x583ea0
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffff8b
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x583ed1
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x583efb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffff8b
add r8d, edx
cmp rsi, 0x17
jb 0x583e85
jmp 0x583eef
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f380
mov eax, edi
mov ecx, 0x17
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00583e00
Function at 0x584200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x584308
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x65886f72172e6553
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x47fe21f450269965
mov qword [rsp + 0x24], rdx
movabs rdx, 0xaca71490421303a1
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x210090b02060f10
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe0d0b1108141506
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x61616130e0d0b11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150c131114030d13
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5842a2
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1c
jge 0x5842cf
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5842fb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x584285
jmp 0x5842ef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f380
mov eax, edi
mov ecx, 0x17
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00584200
Function at 0x5848c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x584992
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xeb70d074eae06553
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xd8eff072
movabs rdx, 0x90207050506030b
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x80a0808
xor eax, eax
jmp 0x584924
movzx r9d, byte [rsp + rsi + 0x24]
add r9d, 0x73
add edx, r9d
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
cmp rax, 0xc
jge 0x58495b
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xc
jae 0x584985
movzx r8d, byte [rsp + rdi + 0x24]
add r8d, 0x73
add r8d, edx
cmp rsi, 0xc
jb 0x58490a
jmp 0x584976
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f380
mov eax, edi
mov ecx, 0xc
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.005848c0

Function at 0x585aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585b72
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x1c6ccabd04b9691e
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xbb058fb6
movabs rdx, 0x409090504020b03
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2030a0005070807
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x585b0e
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x67]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x67]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x585b3b
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x585b65
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x585af1
jmp 0x585b56
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f380
mov eax, edi
mov ecx, 0xc
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00585aa0
Function at 0x585b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x585c52
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xb501681012141656
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6565fab501681012
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x607020305060404
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8070106
xor eax, eax
jmp 0x585bee
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x65]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x65]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x585c1b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x585c45
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x585bd1
jmp 0x585c36
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.0045f380
mov eax, edi
mov ecx, 0xb
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00585b80

Function at 0x586260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58634b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x55026121744f910c
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf7016ff813550261
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x606020104060402
mov qword [rsp + 0x26], rdx
movabs rdx, 0x206060602010406
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1010208000c0b09
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5862e4
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x77]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x586317
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x58633e
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x5862c7
jmp 0x586332
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f380
mov eax, edi
mov ecx, 0xd
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00586260
Function at 0x586b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x586be8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x33aa2f22290c2d57
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x65
movabs rdx, 0x304070104040604
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x502
xor eax, eax
jmp 0x586b83
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x49]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x49]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x586bb0
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x586bdb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x586b66
jmp 0x586bcf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f380
mov eax, edi
mov ecx, 9
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00586b20

Function at 0x586de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x586ed6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xa065639741a2a10c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5378a974a0656397
mov qword [rsp + 0x20], rdx
movabs rdx, 0x73a8b6f7616b50ab
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2000d0711011204
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20209070c091112
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10c040d00021009
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x586e73
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x77]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x586ea2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x586ec9
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x586e56
nop
jmp 0x586ebd
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f380
mov eax, edi
mov ecx, 0x14
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.00586de0
Function at 0x589d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x589e48
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xda4ebc54444de04f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6f68ce72f5ebda4e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xff723cf26de377d9
mov qword [rsp + 0x26], rdx
movabs rdx, 0x910021003000713
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x305090e01120c00
mov qword [rsp + 0x36], rdx
movabs rdx, 0x70f0305090e0112
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1507000e0b08040e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x589de2
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x61]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x61]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1a
jge 0x589e0f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x589e3b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x589dc5
jmp 0x589e2f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f380
mov eax, edi
mov ecx, 0x16
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00589d40

Function at 0x58a060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58a13c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xe74b547491a30ed
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x676e9805950e74b5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x702070407050201
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90202080a090700
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58a0d2
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x57
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x58a108
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x58a12f
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x57
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xd
jb 0x58a0b8
jmp 0x58a123
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f380
mov eax, edi
mov ecx, 0xd
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.0058a060
Function at 0x58bea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58bf96
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6c66645b4d745e47
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x676e65656c66645b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7b435a4e516d5d66
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1101061204100912
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf100b0f11010612
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x13060c040f040d0d
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x58bf33
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x21]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x14
jge 0x58bf62
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x58bf89
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0x14
jb 0x58bf16
nop
jmp 0x58bf7d
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f380
mov eax, edi
mov ecx, 0x14
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.0058bea0

Function at 0x58c840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58c952
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xc77e8a9975a56553
mov qword [rsp + 0x18], rdx
movabs rdx, 0x76208a4464c5c368
mov qword [rsp + 0x20], rdx
movabs rdx, 0x726576208a4464c5
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8573caf15fb99f87
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x191905140e061507
mov qword [rsp + 0x32], rdx
movabs rdx, 0x171608050a060909
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x40a170a14121716
mov qword [rsp + 0x40], rdx
movabs rdx, 0x17021509160d1306
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x58c8f1
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1e
jge 0x58c91e
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x58c945
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x58c8d4
jmp 0x58c939
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f380
mov eax, edi
mov ecx, 0x1a
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0058c840