joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5780e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5781bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x584065633c6a6549
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x4478466958584065
mov qword [rsp + 0x20], rdx
movabs rdx, 0x708080904090406
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20609020c000a03
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x578152
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 8]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x578188
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5781af
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 8]
nop dword [rax]
cmp rsi, 0xd
jb 0x578138
jmp 0x5781a3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xd
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.005780e0

Function at 0x57a340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57a452
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x8a751c8e8374d553
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x75e5926544fee369
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70f375e5926544fe
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7265f2efda72ee62
mov qword [rsp + 0x30], rdx
movabs rdx, 0x15160f030a030713
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40e090515011512
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1710030d1617120f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa03120a0e131309
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x57a3f1
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x57a41e
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x57a445
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x57a3d4
jmp 0x57a439
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1a
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0057a340
Function at 0x57b8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57b9c8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x728e747f8c736c90
mov qword [rsp + 0x19], rdx
movabs rdx, 0x89a5a86987728e74
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8030c010a030500
mov qword [rsp + 0x26], rdx
movabs rdx, 0x50b08030c010a03
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80b0a020b050604
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x57b961
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x26]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x57b993
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x57b9bb
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x26]
cmp rsi, 0xd
jb 0x57b947
jmp 0x57b9af
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xd
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0057b8e0

Function at 0x57ce00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57cf12
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x51366e5674445c22
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x63692a3503264543
mov qword [rsp + 0x27], rdx
movabs rdx, 0x3f742d63692a3503
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4a312e43536e495d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x2121810190c171a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x113071006130b07
mov qword [rsp + 0x42], rdx
movabs rdx, 0x90c090d0c0a0113
mov qword [rsp + 0x48], rdx
movabs rdx, 0x18191a0210040000
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x57ceb1
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1e
jge 0x57cede
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x57cf05
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1b
jb 0x57ce94
jmp 0x57cef9
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1b
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1b
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1b
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0057ce00
Function at 0x57d720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57d828
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x4426ffbde272f4c9
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe469406974e46543
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6e4aec4b4344e91e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x16140312110d120a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x120115040d0400
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x303061503010012
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120d0710070f0705
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x57d7c0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x57d7f2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x57d81b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x16]
cmp rsi, 0x18
jb 0x57d7a5
jmp 0x57d80f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x18
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0057d720

Function at 0x57e620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57e752
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x4a4f50d01b79624c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x534a4f50d01b7962
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6926052c433e3169
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8e50655476526966
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x87650965426d2169
mov qword [rsp + 0x32], rdx
movabs rdx, 0x31e0b0a1a131304
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1c0f1e1a0e0e031e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80e000306131c0f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50d011b0f072018
mov qword [rsp + 0x50], rdx
movabs rdx, 0x80d1a10140f151b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x57e6ef
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x39]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x39]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x26
jge 0x57e71c
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x57e745
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x21
jb 0x57e6d2
jmp 0x57e737
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x21
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x21
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x21
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0057e620
Function at 0x57f160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57f248
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xc4cac2d3b104c644
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd7846572616b926f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0904010f0a0e07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x30f0f0904010f0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x309060503070302
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x57f1e1
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x12
jge 0x57f213
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x57f23b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0x10
jb 0x57f1c7
jmp 0x57f22f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0057f160

Function at 0x57f3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57f4dc
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xc69e6365e59c96f1
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x64c69e6365e59c96
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x659ca64674a9f64c
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb00020a070e030b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20b0f0f0b00020a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb02060603000e01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x57f470
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x57f4a8
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x57f4cf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x57f456
jmp 0x57f4c3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0057f3e0
Function at 0x581460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58154b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x4e74638ab5b86305
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1170ff50ca69bc61
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3040f0d010a0400
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20a03040f0d010a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20b0f0f0d09010d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5814e4
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x43]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x43]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x581517
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x58153e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x5814c7
jmp 0x581532
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00581460

Function at 0x581560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58164b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x644ee22e98729dc
mov qword [rsp + 0x18], rdx
movabs rdx, 0xba79c1a27463654f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x704040301000004
mov qword [rsp + 0x28], rdx
movabs rdx, 0x503020005000803
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40d080d0f0c0501
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5815e4
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x18
jge 0x581617
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x58163e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x5815c7
jmp 0x581632
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00581560
Function at 0x581b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x581c28
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xf10611a9d6541b2
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x575220144ce4720f
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0603070c040503
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10b00060d060307
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7070b0705060900
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x581bc1
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x581bf3
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x581c1b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4a]
cmp rsi, 0xf
jb 0x581ba7
jmp 0x581c0f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xf
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00581b40

Function at 0x582d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x582e0b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x5b5076385160755c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57746265705a5b50
mov qword [rsp + 0x24], rdx
movabs rdx, 0x904080503020000
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x700090509040805
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7080b0305000c01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x582da4
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x582dd7
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x582dfe
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x582d87
jmp 0x582df2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xe
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00582d20
Function at 0x5849c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x584ae8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xc9d7647b61ebcdfa
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2a040d6ec4372fe7
mov qword [rsp + 0x25], rdx
movabs rdx, 0x742a040d6ec4372f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2673ab0cd2727453
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe07020800041615
mov qword [rsp + 0x36], rdx
movabs rdx, 0x20e0702080004
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe06140b0116020e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0a0f0914180702
mov qword [rsp + 0x48], rdx
movabs rdx, 0x80e150e160d040b
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x584a80
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x23]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x584ab2
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x584adb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x23]
cmp rsi, 0x19
jb 0x584a63
jmp 0x584acf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x19
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005849c0
Function at 0x586940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x586a48
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xd97629457bdc03b3
mov qword [rsp + 0x19], rdx
movabs rdx, 0x34ab6fac6ed845d9
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb4b6bb39bb12ed53
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7160b0d01120708
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc001115130e1405
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1612080010121203
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150213091408100e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5869e2
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x586a0f
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x586a3b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x5869c5
jmp 0x586a2f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00586940

Function at 0x586a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x586b32
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x72a9ebbfb2b1a484
mov qword [rsp + 0x19], rdx
movabs rdx, 0x92a5aa72a9ebbfb2
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x608040a03090805
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x201
xor eax, eax
jmp 0x586ace
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x586afb
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x586b25
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x586ab1
jmp 0x586b16
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00586a60
Function at 0x587620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x587708
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x75a952fbff90d456
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc2655cdac0726510
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30f06010d0d08
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3030c040c030405
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd00020b050c080b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5876a1
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x18
jge 0x5876d3
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5876fb
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5f]
cmp rsi, 0x10
jb 0x587687
jmp 0x5876ef
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00587620

Function at 0x5888c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5889b6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x41ffcaa78df46547
mov qword [rsp + 0x18], rdx
movabs rdx, 0x227c41ffcaa78df4
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb49d927495aecf9e
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf0b06030d050c10
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8030d090a040f0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd02110f0d020808
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x588953
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x1f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x588982
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5889a9
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x588936
nop
jmp 0x58899d
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.005888c0
Function at 0x58bf00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58bfdc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x3c633e72502b3c35
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3f4de53f543fb43c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0c0d0d0107080d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5020e090d02000b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58bf72
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x58bfa8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x58bfcf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
nop dword [rax]
cmp rsi, 0xf
jb 0x58bf58
jmp 0x58bfc3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xf
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0058bf00