joyce8/EMBER2024-capa huggingface dataset:
Function at 0x576ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x576e36
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
movabs rdx, 0x328486c7888ad3c4
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7e9c9c696bcd9970
mov qword [rsp + 0x22], rdx
movabs rdx, 0x208969689e3d66ef
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5f9a42a465bdd7d4
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf678a4177c207416
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x2566b94e56ca7b9
mov qword [rsp + 0x42], rdx
movabs rdx, 0x21d0a0420062b1c
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2f06271f1007021d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1607000116292e1c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x191910021e242506
mov qword [rsp + 0x60], rdx
movabs rdx, 0x28051f1a1f272519
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1d2c181a130d1e1e
mov qword [rsp + 0x70], rdx
movabs rdx, 0x101e2e1327162012
mov qword [rsp + 0x78], rdx
movabs rdx, 0xf271a092619032f
mov qword [rsp + 0x80], rdx
movabs rdx, 0x1d2d16050e021323
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x576dcb
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffff8a
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x46
jge 0x576dfc
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x576e29
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffff8a
add r8d, edx
cmp rsi, 0x30
jb 0x576db1
jmp 0x576e1d
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x30
call fcn.004446e0
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov eax, esi
mov ecx, 0x30
call fcn.00457420
mov eax, edi
mov ecx, 0x30
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.00576ca0
Function at 0x576e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x576fd2
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x2f6c53697372e85a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xec676e69831e7826
mov qword [rsp + 0x27], rdx
movabs rdx, 0x3749205d6eec676e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x695a616588737369
mov qword [rsp + 0x34], rdx
movabs rdx, 0x636e3f6159224d54
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x64659b655e1e6d6a
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1400220f0a0108
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x8221e0f00140022
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a0b1b13010f27
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d110a1720061825
mov qword [rsp + 0x60], rdx
movabs rdx, 0x9140b140b130605
mov qword [rsp + 0x68], rdx
movabs rdx, 0xf1f0a1400101a18
mov qword [rsp + 0x70], rdx
movabs rdx, 0x232229282a1b060b
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x576f6a
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x34
jge 0x576f97
movzx edx, byte [rsp + rax + 0x4c]
movzx esi, byte [rsp + rax + 0x4d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x576fc5
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x2d
jb 0x576f4d
jmp 0x576fb8
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x2d
call fcn.004446e0
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2d
nop
call fcn.00457420
mov eax, edi
mov ecx, 0x2d
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00576e60
Function at 0x577da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577eb3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xb8846ebb6d67ac88
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x85bc78859b948770
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20a285bc78859b94
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3c65764469c98a82
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb040e1916070113
mov qword [rsp + 0x38], rdx
movabs rdx, 0x14190b0014191010
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb1514060a091300
mov qword [rsp + 0x48], rdx
movabs rdx, 0x406160412040f0c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x577e4e
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffc9
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x577e7f
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x577ea6
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffc9
add r8d, edx
cmp rsi, 0x1a
jb 0x577e34
jmp 0x577e9a
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.004446e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457420
mov eax, edi
mov ecx, 0x1a
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00577da0

Function at 0x578bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x578cc8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xc1fa72754dbe16e6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc27abcccf80abe20
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9fb06f6cceb76dc1
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20a010d03100712
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd0c0e0f1310160b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x2160d0c0e0f1310
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1113170906130009
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x578c60
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffff99
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x578c91
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x578cbb
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffff99
add r8d, edx
cmp rsi, 0x18
jb 0x578c45
jmp 0x578caf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457420
mov eax, edi
mov ecx, 0x18
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00578bc0
Function at 0x579f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57a032
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x43161f7447444131
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x5003
movabs rdx, 0x5010803070706
mov qword [rsp + 0x22], rdx
movabs rdx, 0x202010209050005
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x579fcd
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x2d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x2d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x579ffa
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x57a025
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x579fb0
jmp 0x57a015
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0xa
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00579f60

Function at 0x57bf60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movups xmmword [rsp + 0x58], xmm15
movabs rdx, 0x562b4d00594d2325
mov qword [rsp + 0x24], rdx
movabs rdx, 0x221d45004a00452a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3050f0103070208
mov qword [rsp + 0x34], rdx
movabs rdx, 0x90b070603050f01
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0b08090d090300
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x57bfe0
movzx r8d, byte [rsp + rbx + 0x24]
add r8d, 0xffffffcc
add edx, r8d
mov byte [rsp + rsi + 0x24], dl
mov byte [rsp + rbx + 0x24], dil
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x57c00e
movzx edx, byte [rsp + rax + 0x34]
movzx ebx, byte [rsp + rax + 0x35]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 0x10
jae 0x57c04a
movzx edi, byte [rsp + rsi + 0x24]
add edi, 0xffffffcc
add edi, edx
cmp rbx, 0x10
jb 0x57bfc3
jmp 0x57c03e
movups xmmword [rsp + 0x14], xmm15
xor eax, eax
jmp 0x57c024
movzx ecx, byte [rsp + rax + 0x24]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 0x10
jl 0x57c018
movups xmm0, xmmword [rsp + 0x14]
movups xmmword [rsp + 0x58], xmm0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, ebx
mov ecx, 0x10
call fcn.00457420
mov eax, esi
mov ecx, 0x10
call fcn.00457420
nop
int3
Function at 0x57c240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57c328
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7d737220a98e8f7b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6ca08f7b887d7372
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1000a0a0301020b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0301000a0a0301
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc06000707020908
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x57c2c1
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffdf
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x57c2f2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x57c31b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffdf
add r8d, edx
cmp rsi, 0xd
jb 0x57c2a7
jmp 0x57c30f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457420
mov eax, edi
mov ecx, 0xd
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0057c240
Function at 0x57cfe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57d0d6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xb2e3d1c7c67652f7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xdf534e44b2e3d1c7
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc573b9348a4dc546
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0c0e01060d13
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1010060e0c0b0c07
mov qword [rsp + 0x38], rdx
movabs rdx, 0x505110304100f0b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x57d070
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xffffff82
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x57d0a2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x57d0c9
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xffffff82
add r8d, edx
cmp rsi, 0x14
jb 0x57d056
nop
jmp 0x57d0bd
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457420
mov eax, edi
mov ecx, 0x14
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.0057cfe0
Function at 0x57ea60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57eb26
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6b51614970d535c9
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2040206000104
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x10601
xor eax, eax
jmp 0x57eac0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x69]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x69]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x57eaed
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x57eb14
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 8
jb 0x57eaa2
jmp 0x57eb08
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00457420
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0057ea60

Function at 0x57eca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57ed68
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xfeb4ac143606af69
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xd1
movabs rdx, 0x102060708040205
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x207
xor eax, eax
jmp 0x57ed03
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x57ed30
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x57ed5b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x57ece6
jmp 0x57ed4f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00457420
mov eax, edi
mov ecx, 9
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0057eca0
Function at 0x57f8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57f9f2
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x61fe699595206fd6
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe4ad4e61a484a862
mov qword [rsp + 0x23], rdx
movabs rdx, 0xd5e4ad4e61a484a8
mov qword [rsp + 0x24], rdx
movabs rdx, 0x64aa75a2482073a7
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1404100306100d0a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x110a0617150e0403
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x110b03110a0617
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110b0900000f1111
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x57f991
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x19]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x19]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x57f9be
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x57f9e5
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x57f974
jmp 0x57f9d9
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457420
mov eax, edi
mov ecx, 0x19
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0057f8e0

Function at 0x585640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0xb7020c930bfa7350
mov qword [rsp + 0x18], rax
movabs rax, 0x8cdf1d0d10735c00
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x20]
movzx ecx, byte [rsp + 0x27]
add eax, ecx
movzx ecx, byte [rsp + 0x1b]
movzx edx, byte [rsp + 0x1f]
movzx ebx, byte [rsp + 0x19]
movzx esi, byte [rsp + 0x22]
movzx edi, byte [rsp + 0x23]
movzx r8d, byte [rsp + 0x18]
movzx r9d, byte [rsp + 0x21]
movzx r10d, byte [rsp + 0x24]
movzx r11d, byte [rsp + 0x26]
movzx r12d, byte [rsp + 0x25]
movzx r13d, byte [rsp + 0x1e]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x1c]
movzx r13d, byte [rsp + 0x1a]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x1d]
mov byte [rsp + 0xf], al
lea eax, [rdx + rcx]
mov byte [rsp + 0x10], al
sub ebx, esi
mov byte [rsp + 0x11], bl
sub edi, r8d
mov byte [rsp + 0x12], dil
sub r9d, r10d
mov byte [rsp + 0x13], r9b
xor r11d, r12d
mov byte [rsp + 0x14], r11b
movzx eax, byte [rsp + 6]
add eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
sub eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x585746
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x58573a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
nop
ret
Function at 0x585c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xe91b961c1fe5ee8a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x103070105030605
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x401
xor eax, eax
nop
jmp 0x585c80
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0x2a
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x585cae
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x585ced
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0x2a
add edi, edx
cmp rbx, 8
jb 0x585c62
jmp 0x585ce1
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x585cc7
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x585cbb
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3

Function at 0x585d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x8f8aa0fb02883bae
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x606030302070603
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x402
xor eax, eax
nop
jmp 0x585d60
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x2e]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x585d8b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x585dca
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x585d42
jmp 0x585dbe
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x585da4
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x585d98
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3
Function at 0x585de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xc5776688f53ee601
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x106000300070400
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x203
xor eax, eax
nop
jmp 0x585e40
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xffffff89
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x585e6e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x585ead
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xffffff89
add edi, edx
cmp rbx, 8
jb 0x585e22
jmp 0x585ea1
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x585e87
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x585e7b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3

Function at 0x585ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xf23ed8d24652db1b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x100030201010707
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x205
xor eax, eax
nop
jmp 0x585f20
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0x59
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x585f4e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x585f8d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0x59
add edi, edx
cmp rbx, 8
jb 0x585f02
jmp 0x585f81
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x585f67
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x585f5b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3
Function at 0x586580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x9a3b3b48cbf9a960
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x206000406050500
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 5
xor eax, eax
nop
jmp 0x5865e0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x49]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x49]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x58660b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x58664a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x5865c2
jmp 0x58663e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x586624
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x586618
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457420
mov eax, esi
mov ecx, 8
call fcn.00457420
nop
int3

Function at 0x5869c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0x82cb736ee9dc9207
mov qword [rsp + 0x18], rax
movabs rax, 0x48daa5569caab70
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1c]
movzx ecx, byte [rsp + 0x22]
sub eax, ecx
movzx ecx, byte [rsp + 0x27]
movzx edx, byte [rsp + 0x1b]
movzx ebx, byte [rsp + 0x26]
movzx esi, byte [rsp + 0x1e]
movzx edi, byte [rsp + 0x1d]
movzx r8d, byte [rsp + 0x18]
movzx r9d, byte [rsp + 0x1a]
movzx r10d, byte [rsp + 0x25]
movzx r11d, byte [rsp + 0x24]
movzx r12d, byte [rsp + 0x1f]
movzx r13d, byte [rsp + 0x19]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x21]
movzx r13d, byte [rsp + 0x23]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x20]
mov byte [rsp + 0xf], al
sub ecx, edx
mov byte [rsp + 0x10], cl
lea eax, [rsi + rbx]
mov byte [rsp + 0x11], al
lea eax, [r8 + rdi]
mov byte [rsp + 0x12], al
xor r9d, r10d
mov byte [rsp + 0x13], r9b
lea eax, [r12 + r11]
mov byte [rsp + 0x14], al
movzx eax, byte [rsp + 6]
sub eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
sub eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x586ac6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x586aba
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
nop
ret