joyce8/EMBER2024-capa huggingface dataset:
Function at 0x588ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x588bbc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x8e9a7fc06dbb6fa8
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbea06773ba738e9a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4000d02060a0705
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd040a000009020c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x588b55
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x588b88
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x588baf
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x588b38
jmp 0x588ba3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xe
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.00588ae0

Function at 0x58a6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58a79c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xa189870443d99c9e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x508c6ea189870443
mov qword [rsp + 0x20], rdx
movabs rdx, 0x64044d05ae630a86
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1000e0f02110007
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6050b090f0f0c04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6070b0500090910
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58a730
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x58a768
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x58a78f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
nop word [rax + rax]
cmp rsi, 0x13
jb 0x58a716
jmp 0x58a783
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x13
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0058a6a0
Function at 0x58b160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58b268
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xd6746922454cffee
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6484d6746922454c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf0206ee08a5b990d
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0810110f0e0002
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa110a0b01040a0c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x70a110a0b0104
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0e0e0d010e0a0c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58b202
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1a
jge 0x58b22f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x58b25b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x58b1e5
jmp 0x58b24f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0058b160

Function at 0x58b8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58b97c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x54391657464f563c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3b374b5439165746
mov qword [rsp + 0x20], rdx
movabs rdx, 0x905060804060806
mov qword [rsp + 0x28], rdx
movabs rdx, 0x902010500090a02
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58b912
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x58b948
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x58b96f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
nop dword [rax]
cmp rsi, 0xb
jb 0x58b8f8
jmp 0x58b963
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0058b8a0
Function at 0x58cb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58cc88
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6cd3646f76ee54f4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x46ed6cd3646f76ee
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8a8b6d946bf86c9d
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0000001100110a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc020c0e10110a11
mov qword [rsp + 0x36], rdx
movabs rdx, 0x100a0c020c0e1011
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8000301080611
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58cc20
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x58cc52
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x58cc7b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
cmp rsi, 0x12
jb 0x58cc05
jmp 0x58cc6f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0058cb80

Function at 0x58d340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58d43c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6cf60276ffe71547
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xecef866cf60276ff
mov qword [rsp + 0x20], rdx
movabs rdx, 0xfdafb70f7e6d765
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50f121203100610
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc020c08010c030c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11050e0a010d0908
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58d3d0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x61]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x58d408
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x58d42f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x61]
nop word [rax + rax]
cmp rsi, 0x13
jb 0x58d3b6
jmp 0x58d423
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x13
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0058d340
Function at 0x58ebc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58ecd6
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x1bc37b2b5105cec9
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2f656c20df6f4348
mov qword [rsp + 0x23], rdx
movabs rdx, 0xd32f656c20df6f43
mov qword [rsp + 0x24], rdx
movabs rdx, 0xdb34daceb353dbb4
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x15020c0216180f08
mov qword [rsp + 0x34], rdx
movabs rdx, 0x811171201050f0b
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc101208111712
mov qword [rsp + 0x40], rdx
movabs rdx, 0x704070414060114
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x58ec6e
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x58eca2
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x58ecc9
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
cmp rsi, 0x19
jb 0x58ec54
nop
jmp 0x58ecbd
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x19
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.0058ebc0

Function at 0x58f200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58f2d2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x61e29e74b6144f47
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6557640e
movabs rdx, 0x205030506010a03
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x105080501060205
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58f26e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x41]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x41]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x58f29b
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x58f2c5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x58f251
jmp 0x58f2b6
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0058f200
Function at 0x5922e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5923e8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x1c6ec1695774eb1e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x69fb229c1c6ec169
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5708df6fce446572
mov qword [rsp + 0x24], rdx
movabs rdx, 0x90f0706120e000b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1120b0e00080b07
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1206080501120b0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa01010f11110a11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x592380
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x67]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x5923b2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5923db
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x67]
cmp rsi, 0x14
jb 0x592365
jmp 0x5923cf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x14
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005922e0

Function at 0x593ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x593fcb
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x591b64692c38613f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x302337564d591b64
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa080c0a0b060003
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7020a080c0a0b06
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30c0506090b0606
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x593f64
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x24]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x24]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x593f97
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x593fbe
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x593f47
jmp 0x593fb2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xd
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00593ee0
Function at 0x595d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x595e32
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x736ec0cbe15f6548
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x34e8d1d4
movabs rdx, 0x90a03020b000900
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50b0b0a03080400
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x595dcb
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x595dfd
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x595e25
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0xc
jb 0x595db1
jmp 0x595e18
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00595d60

Function at 0x596b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x596c6b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x39825cccda4e6553
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x734b75e865da6939
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90d020405040d07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x206090d02040504
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2070b0406030206
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x596c04
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x596c37
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x596c5e
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x596be7
jmp 0x596c52
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xf
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00596b80
Function at 0x597ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x597c72
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x434f643145675c2e
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x58574d60
movabs rdx, 0xb09080701040700
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2020b0a01000b09
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x597c0e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x597c3b
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x597c65
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x597bf1
jmp 0x597c56
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00597ba0

Function at 0x597c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x597d88
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xfdfa91fbf8cc9015
mov qword [rsp + 0x19], rdx
movabs rdx, 0x56a2f765f78566fd
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5798dce6a109870a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x110d020004101413
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60508070315020a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90412040c010a09
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf04070306110c0a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x597d22
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x73]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x597d4f
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x597d7b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x597d05
jmp 0x597d6f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00597c80
Function at 0x597f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x598046
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x586eae76e489aec4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7070705010302
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 2
xor eax, eax
nop
jmp 0x597fe0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x43]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x43]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x59800d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x598034
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 8
jb 0x597fc2
jmp 0x598028
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00597f80

Function at 0x598360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x598492
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xfabd72f646726521
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6d6ffabd72f64672
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4e6e6f6974926cdc
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe4615c108c97136f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x98fc643a4d6e73f4
mov qword [rsp + 0x32], rdx
movabs rdx, 0x161e140c2102061e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1e2013150520161e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x21191a0617210002
mov qword [rsp + 0x48], rdx
movabs rdx, 0x200a0c1a071a071b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x130c0c070414140a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x59842c
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x43]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x26
jge 0x59845e
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x598485
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x43]
cmp rsi, 0x22
jb 0x598412
jmp 0x598479
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x22
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x22
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x22
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00598360
Function at 0x599d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x599df6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x7499081a0172aba6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4a657499081a0172
mov qword [rsp + 0x20], rdx
movabs rdx, 0x74f7993099bfcb6f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50e0d0e0d0d0d0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60d0104051004
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0c0e100c030104
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x599d93
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x599dc2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x599de9
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x599d76
nop
jmp 0x599ddd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.00599d00
Function at 0x59b8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59b99c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x9ef61752102c62c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x78cabebd657509ef
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20c0a01030c0b06
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb0c0c000c07020c
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x59b935
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x45]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x45]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x59b968
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x59b98f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x59b918
jmp 0x59b983
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xe
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0059b8c0
Function at 0x59bf40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59c048
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x4df56ffd74693e0f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1e0e2174f03a4df5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7333a119c3627d19
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1413000f110b0106
mov qword [rsp + 0x30], rdx
movabs rdx, 0x808120c010d0909
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb000b00130b1413
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0b04040909140b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x59bfe0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x59c012
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x59c03b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 0x16
jb 0x59bfc5
jmp 0x59c02f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x16
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0059bf40

Function at 0x59d360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59d468
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x5a4a99652a7456ad
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd9c19c7fb15a4a99
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc06fc69e61ab72e5
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa01050c03010d0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf07090b05080309
mov qword [rsp + 0x36], rdx
movabs rdx, 0x9000f07090b0508
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb120f12110a140d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x59d402
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x26]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x26]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1a
jge 0x59d42f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x59d45b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x59d3e5
jmp 0x59d44f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x15
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0059d360