joyce8/EMBER2024-capa huggingface dataset:
Function at 0x576b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x576c1d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x494d65e76165a004
mov qword [rsp + 0x18], rdx
movabs rdx, 0xfef9451c6574494d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0d0a00040c0a01
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc000c0d0a00040c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0a0d0701040d
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x576bc0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x3b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x3b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x576bed
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x576c10
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x576ba2
jmp 0x576c04
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004610a0
mov eax, edi
mov ecx, 0xe
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.00576b40

Function at 0x578a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x578b1a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x81707967615c5a82
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x56657d6e6f63698c
mov qword [rsp + 0x25], rdx
movabs rdx, 0x4e56657d6e6f6369
mov qword [rsp + 0x26], rdx
movabs rdx, 0x59736d3b627e3853
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x505080f01140700
mov qword [rsp + 0x36], rdx
movabs rdx, 0x18140505080f0114
mov qword [rsp + 0x38], rdx
movabs rdx, 0x101130106000f0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa04001218141506
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1302160810161314
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x578ab7
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x22
jge 0x578ae9
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x578b0d
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1b]
cmp rsi, 0x19
jb 0x578a9d
jmp 0x578b01
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044bb80
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.004610a0
mov eax, edi
mov ecx, 0x19
call fcn.004610a0
nop
call fcn.0045ee20
nop
jmp fcn.00578a00
Function at 0x57ac60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57ad3d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfa4dfa6543e76fde
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3dde67e4e873fa4d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5090309000d0003
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa0405090309000d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x702000009070c0a
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x57ace0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x57ad0d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x57ad30
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x57acc2
jmp 0x57ad24
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004610a0
mov eax, edi
mov ecx, 0xe
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.0057ac60

Function at 0x57ad60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57ae4a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xfc766ee14a3a392d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7431656d040442fc
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3201144669394dd8
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf04130801110009
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0f15031404020d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0314161407100a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x57aded
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x57ae1a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x57ae3d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x57add0
jmp 0x57ae31
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004610a0
mov eax, edi
mov ecx, 0x17
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.0057ad60
Function at 0x57b680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57b76c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x219eab3d0474c947
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x65fa219eab3d0474
mov qword [rsp + 0x20], rdx
movabs rdx, 0xcdd43ab91ac4e472
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc070f08040b0504
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11011060f070e04
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb04100611030d01
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x57b70a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x57b73c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x57b75f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2f]
cmp rsi, 0x12
jb 0x57b6f0
jmp 0x57b753
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004610a0
mov eax, edi
mov ecx, 0x12
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.0057b680

Function at 0x57c4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57c5db
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x454b4a415d426557
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5a39454b4a415d42
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5d6d6d5270727b3f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0d060004100f0b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x302110608060d03
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa07030211060806
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70e0b081105090f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x57c579
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1a
jge 0x57c5ab
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x57c5ce
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
cmp rsi, 0x12
jb 0x57c55f
jmp 0x57c5c2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004610a0
mov eax, edi
mov ecx, 0x12
call fcn.004610a0
nop
nop dword [rax + rax]
call fcn.0045ee20
jmp fcn.0057c4e0
Function at 0x57d8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57d9c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x966c7d757c9d6585
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcf67b461cb68a087
mov qword [rsp + 0x26], rdx
movabs rdx, 0x50f0d0d02090b03
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe00050f0d0d0209
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80d050803020207
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x57d960
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x36]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x57d992
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x57d9b7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x36]
cmp rsi, 0x10
jb 0x57d942
jmp 0x57d9ab
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004610a0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.0057d8e0

Function at 0x57e2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57e39d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x9783c66ff58d6c7c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7883b56972826c66
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8050e08030f02
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0700020008050e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x607010a02070e0a
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x57e340
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x57e36d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x57e390
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x57e322
jmp 0x57e384
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004610a0
mov eax, edi
mov ecx, 0x10
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.0057e2c0
Function at 0x57e7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57e8cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c34bad5ad8c68a8
mov qword [rsp + 0x18], rdx
movabs rdx, 0x48a96c34bad5ad8c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa01345659fe98961
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1001000c040c0110
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6050103110b1001
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3020305100d0408
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x57e86a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x57e89c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x57e8bf
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 0x12
jb 0x57e850
jmp 0x57e8b3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004610a0
mov eax, edi
mov ecx, 0x12
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.0057e7e0

Function at 0x57fc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57fd88
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x65071dbd5074d272
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6e699c727ae373bc
mov qword [rsp + 0x22], rdx
movabs rdx, 0xbb676e699c727ae3
mov qword [rsp + 0x24], rdx
movabs rdx, 0x494565dd69da1365
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1301080b000d000a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x5050111050a0506
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x604161905050111
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1140d160108010d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x57fd2b
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x46]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x46]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1c
jge 0x57fd58
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x57fd7b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x57fd0e
jmp 0x57fd6f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004610a0
mov eax, edi
mov ecx, 0x1a
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.0057fc80
Function at 0x580b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x580c0c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3c743279de740e1e
mov qword [rsp + 0x19], rdx
movabs rdx, 0xba41e32137e6343c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6521695465f9b934
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0a0511110e0807
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0f0b15050e0105
mov qword [rsp + 0x38], rdx
movabs rdx, 0x900101010090003
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x580baa
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x580bdc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x580bff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
cmp rsi, 0x17
jb 0x580b90
jmp 0x580bf3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004610a0
mov eax, edi
mov ecx, 0x17
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00580b20

Function at 0x581a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x581b26
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3d4c306556745a1b
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x5f52
movabs rdx, 0x7090907000101
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6080805
xor eax, eax
jmp 0x581ac0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xb]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x581af2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x581b17
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xb]
cmp rsi, 0xa
jb 0x581aa3
jmp 0x581b0b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
nop
call fcn.0044bb80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004610a0
mov eax, edi
mov ecx, 0xa
nop
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00581a60
Function at 0x582be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x582cc6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xea3127773c45fa49
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa3732646fa1c2aea
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0c0802030b0c07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc090e0c0802030b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x906050a0c0c010e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x582c60
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x582c92
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x582cb7
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1f]
cmp rsi, 0xf
jb 0x582c42
jmp 0x582cab
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004610a0
mov eax, edi
mov ecx, 0xf
nop
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00582be0

Function at 0x582f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x583038
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x72fa694c504d1544
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x57797261
movabs rdx, 0x403060406010106
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20b040306040601
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3040b010001020b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x582fd7
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x583008
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x58302b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x582fba
jmp 0x58301f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004610a0
mov eax, edi
mov ecx, 0xc
call fcn.004610a0
nop
call fcn.0045ee20
nop dword [rax]
jmp fcn.00582f60
Function at 0x583340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x583406
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x10fcfd206ba36f1c
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x7527
movabs rdx, 0x202060005040902
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8090702
xor eax, eax
jmp 0x5833a0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x5833d2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5833f7
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 0xa
jb 0x583383
jmp 0x5833eb
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
nop
call fcn.0044bb80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004610a0
mov eax, edi
mov ecx, 0xa
nop
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00583340

Function at 0x583420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5834e7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9073d1416b8a334c
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x1363c175
movabs rdx, 0x402090b0b070b02
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x209070505010402
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x583488
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x5834b7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x5834da
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x58346b
jmp 0x5834ce
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004610a0
mov eax, edi
mov ecx, 0xc
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00583420

Function at 0x583880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x583952
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x75684c7830646f37
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x78795b558175684c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x407040a0b080c03
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50c0709080006
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5838ec
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x12]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x58391e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x583945
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x12]
cmp rsi, 0xd
jb 0x5838d2
jmp 0x583935
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.004610a0
mov eax, edi
mov ecx, 0xd
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00583880
Function at 0x584f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x584fc6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x514045d649d37550
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xc7d5
movabs rdx, 0x904020602070306
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x803
xor eax, eax
jmp 0x584f60
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x75]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x584f92
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x584fb7
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x75]
cmp rsi, 0xa
jb 0x584f42
jmp 0x584fab
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.0044bb80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004610a0
mov eax, edi
mov ecx, 0xa
nop
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00584f00

Function at 0x586520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58661b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xff7a656f69e4656c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2aee6cff7a656f69
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa6d9ed7383ef43da
mov qword [rsp + 0x24], rdx
movabs rdx, 0x610000e000a1208
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2080009100e07
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa11060a00020800
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20d02040d040b12
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5865b9
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5865eb
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x58660e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5e]
cmp rsi, 0x13
jb 0x58659f
jmp 0x586602
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004610a0
mov eax, edi
mov ecx, 0x13
call fcn.004610a0
nop
nop dword [rax + rax]
call fcn.0045ee20
jmp fcn.00586520
Function at 0x586d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x586ddd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x71cfff709a77a53
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8f126f99f9a6071c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80609010a0d0404
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd05060808060901
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6030c07090a0302
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x586d80
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x586dad
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x586dd0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x586d62
jmp 0x586dc4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004610a0
mov eax, edi
mov ecx, 0xe
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.00586d00

Function at 0x5870e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5871db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf4613549594a4b57
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6d5e26516c44746c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5a404b4b47745665
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1040e1701131507
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70f07110c13160c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x215031705171714
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd03030201000004
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x587179
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x20
jge 0x5871ab
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5871ce
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
cmp rsi, 0x18
jb 0x58715f
jmp 0x5871c2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004610a0
mov eax, edi
mov ecx, 0x18
call fcn.004610a0
nop
nop dword [rax + rax]
call fcn.0045ee20
jmp fcn.005870e0