joyce8/EMBER2024-capa huggingface dataset:
Function at 0x576700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5767cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xff740f4c64cb6fe3
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5745cb7919beff74
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5070b0907060907
mov qword [rsp + 0x28], rdx
movabs rdx, 0x700000c08080205
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x57676f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x53]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x53]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x57679c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5767bf
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x576752
jmp 0x5767b3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00576700

Function at 0x5769c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x576a7d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc4f2418cfd956ff3
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x63e8
movabs rdx, 0x407000203060704
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8000700
xor eax, eax
jmp 0x576a20
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x576a4d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x576a70
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x576a03
jmp 0x576a64
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005769c0

Function at 0x577920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5779ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6575824674a6ae4d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x90a86b6575824674
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6030a0102090808
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20906080501080a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x57798f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x5779bc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5779df
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x577972
jmp 0x5779d3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00577920
Function at 0x579700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5797b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x65dffa71ccf17a84
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x304020106050006
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x302
xor eax, eax
jmp 0x579755
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6d]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x579788
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x5797ab
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6d]
nop
cmp rsi, 8
jb 0x57973b
jmp 0x57979f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.00579700

Function at 0x579920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x579a06
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa77b65a58f83658d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7b85979a74925a72
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0309060a0a0c0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4070e0309060a0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0a0400040f0702
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x5799a0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x29]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x5799d2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5799f7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x29]
cmp rsi, 0x10
jb 0x579982
jmp 0x5799eb
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00579920
Function at 0x57a3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57a49d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x68616680445a7b9f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x88a7446c7f9aa595
mov qword [rsp + 0x24], rdx
movabs rdx, 0x739469a76fae9acf
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10160e0a000e070e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x120a0a1604070801
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x10b0a02120a0a16
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40f091410120e11
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x57a440
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 2]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 2]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x57a46d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x57a490
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x57a41f
jmp 0x57a484
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0057a3a0
Function at 0x57b600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57b6cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5002c50746f302bf
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x14ba121369175002
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40a0c040b050601
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb02080d0002040a
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x57b66f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x57b69c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x57b6bf
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x57b652
jmp 0x57b6b3
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057b600

Function at 0x57dfe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57e0bd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x94987c8da96b6956
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc96365b66f6c9498
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6070d0a0a030502
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40a06070d0a0a03
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0606030d040807
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x57e060
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x57e08d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x57e0b0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x57e042
jmp 0x57e0a4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0057dfe0

Function at 0x57f6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57f752
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0xf114f50f1ad56328
mov qword [rsp + 0x20], rdx
movabs rdx, 0x403050602060700
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x57f6ee
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x57f722
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x57f745
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
cmp rsi, 8
jb 0x57f6d4
nop
jmp 0x57f739
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057f6a0
Function at 0x581c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x581da7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x5be273cc44657481
mov qword [rsp + 0x19], rdx
movabs rdx, 0x54656da7cd68455b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4edf7461736f625b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x28577455d2654161
mov qword [rsp + 0x30], rdx
movabs rdx, 0xfd5b746d74f701dc
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1c18080a1e021a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x250b08150a0b0f15
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c26201023071120
mov qword [rsp + 0x50], rdx
movabs rdx, 0x20232500181f1204
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb06041a07210411
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x581d49
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x4e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x4e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x28
jge 0x581d77
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x27
jae 0x581d9a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x27
jb 0x581d2c
jmp 0x581d8e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x27
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x27
call fcn.00461020
mov eax, edi
mov ecx, 0x27
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00581c80

Function at 0x581dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x581f32
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x8786a6f090dc7418
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xbbbcb7a2e3445874
mov qword [rsp + 0x27], rdx
movabs rdx, 0x8b2574c1a165b8bb
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4291c9618640cb7d
mov qword [rsp + 0x36], rdx
movabs rdx, 0xed8fc2555f42d889
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xec757461ad539ceb
mov qword [rsp + 0x46], rdx
movabs rdx, 0x17000a251e0f2002
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x412061a0b28151f
mov qword [rsp + 0x56], rdx
movabs rdx, 0x3090412061a0b28
mov qword [rsp + 0x58], rdx
movabs rdx, 0x18201c2e171d1e07
mov qword [rsp + 0x60], rdx
movabs rdx, 0x280e0f251f021921
mov qword [rsp + 0x68], rdx
movabs rdx, 0x51d25130316050c
mov qword [rsp + 0x70], rdx
movabs rdx, 0x21211d2119261c10
mov qword [rsp + 0x78], rdx
movabs rdx, 0xf0d271602122a24
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x581ed0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x3a
jge 0x581efd
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x581f25
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x2f
jb 0x581eb3
jmp 0x581f17
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x2f
call fcn.0044bb20
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
nop
call fcn.00461020
mov eax, edi
mov ecx, 0x2f
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00581dc0
Function at 0x586680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58678c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x842145701d28653e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5244793e45410e4c
mov qword [rsp + 0x24], rdx
movabs rdx, 0xca5069495244793e
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf034f84c003f3614
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0b160605170614
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10120a081b100802
mov qword [rsp + 0x40], rdx
movabs rdx, 0x909051a131a1215
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3000319090c1907
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x586728
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x20
jge 0x58675c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x58677f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x16]
cmp rsi, 0x1c
jb 0x58670e
jmp 0x586773
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00586680
Function at 0x589c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x589d3a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x5394449c5b85d896
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x74b9c38dba6dcd83
mov qword [rsp + 0x25], rdx
movabs rdx, 0x5b74b9c38dba6dcd
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5787659069949f09
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x170c1108060d0b00
mov qword [rsp + 0x36], rdx
movabs rdx, 0x901170c1108060d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9041700080e080e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1513040612030208
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1803090901100a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x589cd7
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x22
jge 0x589d09
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x589d2d
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0x19
jb 0x589cbd
jmp 0x589d21
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.00589c20

Function at 0x58b820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58b8fd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa7a1c668d98df58a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x909eabe6a557a7a1
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10a0b02050102
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x60c0b0d00010a0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa050702030a090d
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x58b8a0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x1e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x1e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x58b8cd
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x58b8f0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x58b882
jmp 0x58b8e4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0058b820
Function at 0x58bcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58bd78
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4d1b645f69551e2c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20701020706
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x407
xor eax, eax
jmp 0x58bd18
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x58bd48
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x58bd6b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x58bcfb
jmp 0x58bd5f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.0058bcc0

Function at 0x58d740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58d81d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xdb69df65566e8fdd
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7845c4cc13d554dd
mov qword [rsp + 0x26], rdx
movabs rdx, 0x50c0d0801010a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0700050c0d0801
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc050b00010d0a0c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x58d7c0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x5d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x5d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x58d7ed
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x58d810
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x58d7a2
jmp 0x58d804
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0058d740

Function at 0x58e760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58e81d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xaa27e72c534153d7
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xf02a
movabs rdx, 0x406060500090607
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5080009
xor eax, eax
jmp 0x58e7c0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x58e7ed
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x58e810
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x58e7a3
jmp 0x58e804
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0058e760
Function at 0x5911c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59128c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x74e3b1656cceccb5
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5e051b116c17c974
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe010608050e0600
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0b09020d0d0b05
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x59122f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x59125c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x59127f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x591212
jmp 0x591273
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005911c0
Function at 0x5a7640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a76f3
push rbp
mov rbp, rsp
sub rsp, 0x20
lea rax, [0x005b9e60]
call fcn.0040c6c0
movabs rcx, 0xa4a90dd6a56f0d0f
mov qword [rax], rcx
movabs rcx, 0x105020005030207
mov qword [rsp + 0x14], rcx
mov dword [rsp + 0x1c], 0x7040607
xor ecx, ecx
jmp 0x5a76a0
movzx r9d, byte [rsi + rax]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rax + rdi], dl
lea edx, [r8 + 0x69]
mov byte [rax + rsi], dl
add rcx, 2
cmp rcx, 0xc
jge 0x5a76cc
movzx edx, byte [rsp + rcx + 0x14]
movzx esi, byte [rsp + rcx + 0x15]
mov edi, edx
xor edx, esi
add edx, ecx
cmp rdi, 8
jae 0x5a76e6
movzx r8d, byte [rdi + rax]
sub r8d, edx
cmp rsi, 8
jb 0x5a7686
jmp 0x5a76da
mov ebx, 8
mov rcx, rbx
add rsp, 0x20
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005a7640

Function at 0x5a79e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a7a9d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x646edd1c0774c52b
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x116f
movabs rdx, 0x904050401010204
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3000105
xor eax, eax
jmp 0x5a7a40
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x5a7a6d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5a7a90
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x5a7a23
jmp 0x5a7a84
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005a79e0