joyce8/EMBER2024-capa huggingface dataset:
Function at 0x586ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xddcab874d1226de6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x202060401060600
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 6
xor eax, eax
nop
jmp 0x586c00
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x6c]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x6c]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x586c2b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x586c6a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x586be2
jmp 0x586c5e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x586c44
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x586c38
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3

Function at 0x586c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x30797f676dba84e1
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x505040006070304
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2010407
xor eax, eax
nop
jmp 0x586ce0
movzx r8d, byte [rsp + rbx + 0x1c]
add r8d, 0xffffff85
add edx, r8d
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x586d0e
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x586d4d
movzx edi, byte [rsp + rsi + 0x1c]
add edi, 0xffffff85
add edi, edx
cmp rbx, 8
jb 0x586cc2
jmp 0x586d41
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x586d27
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x586d1b
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3
Function at 0x587e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x95ace3d778487c58
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7070706060203
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x204
xor eax, eax
nop
jmp 0x587e60
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 2
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x587e8e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x587ecd
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 2
add edi, edx
cmp rbx, 8
jb 0x587e42
jmp 0x587ec1
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x587ea7
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x587e9b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3

Function at 0x588ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x91424f33948e399d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x201050504060305
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x501
xor eax, eax
nop
jmp 0x588c00
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0x39
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x588c2e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x588c6d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0x39
add edi, edx
cmp rbx, 8
jb 0x588be2
jmp 0x588c61
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x588c47
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x588c3b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3
Function at 0x588d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0xbd2681f5e82ab6a1
mov qword [rsp + 0x18], rax
movabs rax, 0x326b2b2e13bbd73
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1f]
movzx ecx, byte [rsp + 0x27]
sub eax, ecx
movzx ecx, byte [rsp + 0x1e]
movzx edx, byte [rsp + 0x18]
movzx ebx, byte [rsp + 0x1d]
movzx esi, byte [rsp + 0x23]
movzx edi, byte [rsp + 0x21]
movzx r8d, byte [rsp + 0x19]
movzx r9d, byte [rsp + 0x25]
movzx r10d, byte [rsp + 0x1b]
movzx r11d, byte [rsp + 0x22]
movzx r12d, byte [rsp + 0x24]
movzx r13d, byte [rsp + 0x1c]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x26]
movzx r13d, byte [rsp + 0x20]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x1a]
mov byte [rsp + 0xf], al
sub ecx, edx
mov byte [rsp + 0x10], cl
xor ebx, esi
mov byte [rsp + 0x11], bl
sub edi, r8d
mov byte [rsp + 0x12], dil
sub r9d, r10d
mov byte [rsp + 0x13], r9b
lea eax, [r12 + r11]
mov byte [rsp + 0x14], al
movzx eax, byte [rsp + 6]
sub eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
add eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x588e25
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x588e19
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret

Function at 0x589b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xde902fe54d34d89
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x607020107020103
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x604
xor eax, eax
nop
jmp 0x589be0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x2c]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x2c]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x589c0b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x589c4a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x589bc2
jmp 0x589c3e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x589c24
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x589c18
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3
Function at 0x589d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x1acc448eb76579b2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x506010501060404
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x101
xor eax, eax
nop
jmp 0x589da0
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xffffffa4
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x589dce
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x589e0d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xffffffa4
add edi, edx
cmp rbx, 8
jb 0x589d82
jmp 0x589e01
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x589de7
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x589ddb
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3

Function at 0x58a220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x1625ff82c0d5d2b4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x503060502030304
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x601
xor eax, eax
nop
jmp 0x58a280
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x22]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x22]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x58a2ab
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58a2ea
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x58a262
jmp 0x58a2de
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x58a2c4
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x58a2b8
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3
Function at 0x58a300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xb1626fc835538873
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x701000204030701
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6020203
xor eax, eax
nop
jmp 0x58a360
movzx r8d, byte [rsp + rbx + 0x1c]
add r8d, 0x46
add edx, r8d
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x58a38e
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58a3cd
movzx edi, byte [rsp + rsi + 0x1c]
add edi, 0x46
add edi, edx
cmp rbx, 8
jb 0x58a342
jmp 0x58a3c1
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x58a3a7
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x58a39b
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3

Function at 0x58a4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x43f008a0227c9740
mov qword [rsp + 0x20], rdx
movabs rdx, 0x402060004040202
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x58a515
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x28]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x28]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x58a542
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58a586
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x58a4f9
nop
jmp 0x58a57a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x58a560
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x58a54f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3
Function at 0x58b280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xd9fa221d6a98ddbe
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x607020704030402
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x306
xor eax, eax
nop
jmp 0x58b2e0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x56]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x58b30b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58b34a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x58b2c2
jmp 0x58b33e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x58b324
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x58b318
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3

Function at 0x58b360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x55786949a1abb85f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x305040004020402
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x404
xor eax, eax
nop
jmp 0x58b3c0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x2d]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x58b3eb
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58b42a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x58b3a2
jmp 0x58b41e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x58b404
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x58b3f8
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3
Function at 0x58b8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x514e72a2b0d9a7ac
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x201040106040307
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x407
xor eax, eax
nop
jmp 0x58b940
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x11]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x58b96b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58b9aa
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x58b922
jmp 0x58b99e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x58b984
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x58b978
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3

Function at 0x58bbe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xb4eba05969d267a7
mov qword [rsp + 0x20], rdx
movabs rdx, 0x107050602050404
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x58bc35
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x72]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x58bc62
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58bca6
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x58bc19
nop
jmp 0x58bc9a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x58bc80
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x58bc6f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3
Function at 0x58c020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x5479458b4a6eb090
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x306010204010306
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x702
xor eax, eax
nop
jmp 0x58c080
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xfffffff5
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x58c0ae
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58c0ed
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xfffffff5
add edi, edx
cmp rbx, 8
jb 0x58c062
jmp 0x58c0e1
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x58c0c7
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x58c0bb
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3

Function at 0x58c7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0x94fee2bda0259847
mov qword [rsp + 0x18], rax
movabs rax, 0x48145566e30bef70
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x19]
movzx ecx, byte [rsp + 0x22]
add eax, ecx
movzx ecx, byte [rsp + 0x1e]
movzx edx, byte [rsp + 0x25]
movzx ebx, byte [rsp + 0x1a]
movzx esi, byte [rsp + 0x18]
movzx edi, byte [rsp + 0x1b]
movzx r8d, byte [rsp + 0x1d]
movzx r9d, byte [rsp + 0x21]
movzx r10d, byte [rsp + 0x24]
movzx r11d, byte [rsp + 0x23]
movzx r12d, byte [rsp + 0x1c]
movzx r13d, byte [rsp + 0x27]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x26]
movzx r13d, byte [rsp + 0x20]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x1f]
mov byte [rsp + 0xf], al
sub ecx, edx
mov byte [rsp + 0x10], cl
lea eax, [rsi + rbx]
mov byte [rsp + 0x11], al
lea eax, [r8 + rdi]
mov byte [rsp + 0x12], al
sub r9d, r10d
mov byte [rsp + 0x13], r9b
xor r11d, r12d
mov byte [rsp + 0x14], r11b
movzx eax, byte [rsp + 6]
add eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
add eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x58c8c6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x58c8ba
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
nop
ret
Function at 0x58cd00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x9c3f4db8052f6e99
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x604000304060106
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x507
xor eax, eax
nop
jmp 0x58cd60
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x69]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x69]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x58cd8b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58cdca
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x58cd42
jmp 0x58cdbe
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x58cda4
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x58cd98
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3

Function at 0x58cf20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x463c0f5c69f22c2e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x502050007040506
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x304
xor eax, eax
nop
jmp 0x58cf80
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0x32
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x58cfae
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58cfed
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0x32
add edi, edx
cmp rbx, 8
jb 0x58cf62
jmp 0x58cfe1
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x58cfc7
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x58cfbb
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3
Function at 0x58d620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x5e94b4f9eba5c09f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1050006010406
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1040600
xor eax, eax
nop
jmp 0x58d680
movzx r8d, byte [rsp + rbx + 0x1c]
add r8d, 0x55
add edx, r8d
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x58d6ae
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58d6ed
movzx edi, byte [rsp + rsi + 0x1c]
add edi, 0x55
add edi, edx
cmp rbx, 8
jb 0x58d662
jmp 0x58d6e1
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x58d6c7
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x58d6bb
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3

Function at 0x58e4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xae4c66755bbdefc4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x300050404040606
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x58e535
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x62]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x62]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x58e562
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58e5a6
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x58e519
nop
jmp 0x58e59a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x58e580
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x58e56f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3