joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5872a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x587367
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6658646c4a61567a
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x7a6d6949
movabs rdx, 0x308000b04070401
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60b00060a01020b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x587308
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0xd]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0xd]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x587337
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x58735a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x5872eb
jmp 0x58734e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004610a0
mov eax, edi
mov ecx, 0xc
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.005872a0

Function at 0x587380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58747b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7869bfad45746566
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xda7097c36b976578
mov qword [rsp + 0x22], rdx
movabs rdx, 0x57656962806b72b4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40c0e04090f040b
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb070e0c0b090509
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x40a0d100f0e0b07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x400140c11081200
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x587419
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x58744b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x58746e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
cmp rsi, 0x17
jb 0x5873ff
jmp 0x587462
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004610a0
mov eax, edi
mov ecx, 0x17
call fcn.004610a0
nop
nop dword [rax + rax]
call fcn.0045ee20
jmp fcn.00587380
Function at 0x587ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x587f9d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x50bdaacd2ed5d953
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3fce46c54e3c50bd
mov qword [rsp + 0x24], rdx
movabs rdx, 0x50302080c0a0606
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x202040505030208
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0d0901090d0b0b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x587f40
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x58]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x58]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x587f6d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x587f90
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x587f22
jmp 0x587f84
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004610a0
mov eax, edi
mov ecx, 0xe
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.00587ec0

Function at 0x587fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x588087
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3b656c26400cd553
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3d192e3b656c2640
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x102090302010808
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x704010a
xor eax, eax
jmp 0x588028
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x3b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x3b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x588057
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x58807a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x58800b
jmp 0x58806e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044bb80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004610a0
mov eax, edi
mov ecx, 0xb
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00587fc0
Function at 0x588900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5889d2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x576f719c508e6553
mov qword [rsp + 0x28], rdx
movabs rdx, 0x787379b786c67486
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc08070b0204040a
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf08050d0a020802
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x58896c
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x58899e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5889c5
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0x10
jb 0x588952
jmp 0x5889b5
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.004610a0
mov eax, edi
mov ecx, 0x10
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00588900

Function at 0x588cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x588d7e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x273a1274530e71dc
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x65272e6e
movabs rdx, 0x509010705000100
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x602090a
xor eax, eax
jmp 0x588d21
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 0x48]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 0x48]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x588d4e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x588d71
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x588d04
jmp 0x588d65
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044bb80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004610a0
mov eax, edi
mov ecx, 0xc
call fcn.004610a0
nop
nop
call fcn.0045ee20
jmp fcn.00588cc0
Function at 0x589c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x589d06
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xad69bfa761ce6e55
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6582699d9ff98aad
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa09090b0d090502
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x40a0a050a09090b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80b0504070d0b04
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x589ca0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x59]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x589cd2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x589cf7
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x59]
cmp rsi, 0xf
jb 0x589c82
jmp 0x589ceb
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004610a0
mov eax, edi
mov ecx, 0xf
nop
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00589c20

Function at 0x589d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x589e3d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x4668967485596f55
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x8c7f65a2736999bb
mov qword [rsp + 0x25], rdx
movabs rdx, 0x768c7f65a2736999
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6574959c5c45747f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1415080106070515
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf0b141508010607
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1611101305050a02
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1110f09030f0b14
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0b110c050e0b0f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x589de0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0xd]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0xd]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x589e0d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x589e30
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x589dbd
jmp 0x589e24
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044bb80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004610a0
mov eax, edi
mov ecx, 0x19
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.00589d20
Function at 0x58be60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58bf4c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f4a5a314759384e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x666e495e486f4a5a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5f4546742f6d5255
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x101302140e04100e
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd040801090c1013
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1010d050e101208
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x58beea
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x58bf1c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x58bf3f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0x15
jb 0x58bed0
jmp 0x58bf33
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004610a0
mov eax, edi
mov ecx, 0x15
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.0058be60

Function at 0x58c000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58c0cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6550685472525f63
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x3f395546
movabs rdx, 0xb0a0201020400
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60901050909000b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58c065
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 2]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x58c09c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x58c0bf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 2]
cmp rsi, 0xc
jb 0x58c04b
jmp 0x58c0b3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004610a0
mov eax, edi
mov ecx, 0xc
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.0058c000
Function at 0x58c1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58c2a8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x427f4552b511f8f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6974456d8cdf6623
mov qword [rsp + 0x27], rdx
movabs rdx, 0x6f6974456d8cdf66
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9b1edfbc6f72e72b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x160a0b010b161207
mov qword [rsp + 0x38], rdx
movabs rdx, 0x306050005160416
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1600051611151118
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd080d1115170a07
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x58c24b
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x61]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x58c278
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x58c29b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x58c22e
jmp 0x58c28f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.0044bb80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004610a0
mov eax, edi
mov ecx, 0x19
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.0058c1a0

Function at 0x58cbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58ccac
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xfd5a646c41282f52
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4c6340fd5a646c41
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x656c4b45546e264e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8070b06020f0f00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x100c070408070b06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x601100f10080a04
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x58cc4a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 2]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x58cc7c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x58cc9f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 2]
cmp rsi, 0x13
jb 0x58cc30
jmp 0x58cc93
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004610a0
mov eax, edi
mov ecx, 0x13
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.0058cbc0
Function at 0x58e080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58e166
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6f849ac3adf59e9f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7e7c697074189a6f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe020e0402020809
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3060e020e040202
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0000080d01050e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x58e100
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x48]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x58e132
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x58e157
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x48]
cmp rsi, 0xf
jb 0x58e0e2
jmp 0x58e14b
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004610a0
mov eax, edi
mov ecx, 0xf
nop
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.0058e080

Function at 0x58f080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58f152
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6be9b50b57501c8
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb14eba73ba06be9b
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa060c0705000b07
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc030b0808010a06
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x58f0ec
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x58f11e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x58f145
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0xd
jb 0x58f0d2
jmp 0x58f135
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.004610a0
mov eax, edi
mov ecx, 0xd
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.0058f080
Function at 0x58faa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58fb8c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x717d5984416e7751
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6b717d5984416e77
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7b736c6553676e7e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x406070210050901
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1009070504060702
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0e040f030e0106
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x58fb2a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x58fb5c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x58fb7f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0x11
jb 0x58fb10
jmp 0x58fb73
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004610a0
mov eax, edi
mov ecx, 0x11
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.0058faa0

Function at 0x58fba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58fcd8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x62d32ef2e462ae3b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4a01d762d32ef2e4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7168d8c263df58e2
mov qword [rsp + 0x28], rdx
movabs rdx, 0x66c1746fcf3b966e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x29f306f5d7c0f969
mov qword [rsp + 0x38], rdx
movabs rdx, 0x310191512211016
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1000a0f0a1e1421
mov qword [rsp + 0x48], rdx
movabs rdx, 0x190d0806030c0522
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc21120b1f032216
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf201d10051c1622
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1d0b0104091e211c
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x58fc78
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x4c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x30
jge 0x58fca8
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x58fccb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x23
jb 0x58fc5b
jmp 0x58fcbf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x23
call fcn.0044bb80
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.004610a0
mov eax, edi
mov ecx, 0x23
call fcn.004610a0
nop
call fcn.0045ee20
nop dword [rax]
jmp fcn.0058fba0
Function at 0x58fd00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58fe47
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0xe88fc38a75a36ebc
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x91b385b3ece88fc3
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc0fb8e767e979c72
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb069206f9cec3be2
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc9b1a3a8e5e9638c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x111f04040408121d
mov qword [rsp + 0x42], rdx
movabs rdx, 0x7210f081521111f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50c061116121d17
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc230c1a10140408
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa1821081512021c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x202223000615241d
mov qword [rsp + 0x68], rdx
movabs rdx, 0xb10090e09130622
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x58fde7
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 1]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 1]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x36
jge 0x58fe17
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x58fe3a
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x25
jb 0x58fdca
jmp 0x58fe2e
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x25
call fcn.0044bb80
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.004610a0
mov eax, edi
mov ecx, 0x25
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.0058fd00

Function at 0x58fe60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58ff2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc9721a73c7176547
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa8c2d9b40d02c972
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0502030d070907
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc0b0c08030a0c05
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x58fecf
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x4e]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x4e]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x58fefc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x58ff1f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x58feb2
jmp 0x58ff13
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004610a0
mov eax, edi
mov ecx, 0xe
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.0058fe60
Function at 0x592b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x592c9a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x938d4470ffaf6553
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xac638b768f747a65
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa9ac638b768f747a
mov qword [rsp + 0x24], rdx
movabs rdx, 0xea5fccbfcda0d2a0
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x101216020a130218
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1602061410121602
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1818151116101003
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7170f160d0b0716
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9060a1311161606
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x592c37
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x592c69
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x592c8d
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 0x19
jb 0x592c1d
jmp 0x592c81
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044bb80
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.004610a0
mov eax, edi
mov ecx, 0x19
call fcn.004610a0
nop
call fcn.0045ee20
nop
jmp fcn.00592b80

Function at 0x593da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x593ec7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x48533eea2d7465d5
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6548533eea2d7465
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2765e269f865ad14
mov qword [rsp + 0x28], rdx
movabs rdx, 0x13177245fd15407b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5729fcf52d222b4a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11130e181a14101d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1c1b0313000c0a04
mov qword [rsp + 0x48], rdx
movabs rdx, 0x905121e03120c00
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1505150406191017
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe1a1207180a1f10
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x593e69
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x28
jge 0x593e97
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x21
jae 0x593eba
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x21
jb 0x593e4c
jmp 0x593eae
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x21
call fcn.0044bb80
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.004610a0
mov eax, edi
mov ecx, 0x21
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00593da0