joyce8/EMBER2024-capa huggingface dataset:
Function at 0x577340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57742c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x77736f6e5775798a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7c735c708477736f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x576462675f41656b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40a0f1209130807
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf1101130003040a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0d06030d0e0510
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5773ca
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x5773fc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x57741f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
cmp rsi, 0x15
jb 0x5773b0
jmp 0x577413
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00577340

Function at 0x5779a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577abd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x62bd0e5a277465c3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7252739b44792269
mov qword [rsp + 0x23], rdx
movabs rdx, 0x257252739b447922
mov qword [rsp + 0x24], rdx
movabs rdx, 0x772b92ee72e074a4
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x170900161809030c
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc17090517090016
mov qword [rsp + 0x38], rdx
movabs rdx, 0x180e0c0018031800
mov qword [rsp + 0x40], rdx
movabs rdx, 0x900110711101011
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110c131815060413
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x577a60
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x48]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x48]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x577a8d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x577ab0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x577a3d
jmp 0x577aa4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005779a0
Function at 0x577bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577cc8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x72f0309e481f6531
mov qword [rsp + 0x19], rdx
movabs rdx, 0xeb70a1722797469
mov qword [rsp + 0x21], rdx
movabs rdx, 0x7470690eb70a1722
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd340fff528477237
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x61906040b180d13
mov qword [rsp + 0x34], rdx
movabs rdx, 0x161a0c0c05170e17
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf131600161a0c0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe05130415021903
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x577c6b
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x5a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x5a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1c
jge 0x577c98
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x577cbb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1b
jb 0x577c4e
jmp 0x577caf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1b
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00461020
mov eax, edi
mov ecx, 0x1b
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00577bc0

Function at 0x578680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57876c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x75536469f46f9ef3
mov qword [rsp + 0x19], rdx
movabs rdx, 0x72eaff74f30a1775
mov qword [rsp + 0x20], rdx
movabs rdx, 0x166e156f43797a69
mov qword [rsp + 0x28], rdx
movabs rdx, 0x101071009021416
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc070a010a100009
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80d080901030809
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x57870a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x57873c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x57875f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0x17
jb 0x5786f0
jmp 0x578753
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00578680
Function at 0x5789e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x578ac6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb2b642926507bfb5
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6655bbb1b1129db2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x90d08000d05050a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa05050a0c07090d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90d040b06010201
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x578a60
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x60]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x578a92
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x578ab7
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x60]
cmp rsi, 0xf
jb 0x578a42
jmp 0x578aab
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005789e0

Function at 0x57ae00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57aedd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x80f7729bb065c7f2
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6e659b6f9f9e1dbd
mov qword [rsp + 0x20], rdx
movabs rdx, 0x608010d04080904
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4080a0300040406
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0d080807040a0b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x57ae80
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x57aead
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x57aed0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x57ae62
jmp 0x57aec4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0057ae00
Function at 0x57b000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57b0c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x76d365cfe6e07041
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xc3c154d4
movabs rdx, 0xb0b06020a000409
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80309080a040b0b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x57b068
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x57b097
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x57b0ba
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x57b04b
jmp 0x57b0ae
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057b000

Function at 0x57b5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57b6cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc332cb567239750d
mov qword [rsp + 0x19], rdx
movabs rdx, 0xdc69c8c332cb5672
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xdfe95e666e6fc2df
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10000a0611040704
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1102000810000a06
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc100a05070b1211
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x57b66a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x79]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x57b69c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x57b6bf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x79]
cmp rsi, 0x13
jb 0x57b650
jmp 0x57b6b3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057b5e0
Function at 0x57b6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57b7e8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x72e2227972652380
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x616eb5df29061335
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1407e9636935616e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6e99aa7461fa7266
mov qword [rsp + 0x30], rdx
movabs rdx, 0x91b141616101616
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1141400151c0a09
mov qword [rsp + 0x40], rdx
movabs rdx, 0x101306180d10180c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x810180505150b01
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x57b78b
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x6e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x6e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x20
jge 0x57b7b8
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x57b7db
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x57b76e
jmp 0x57b7cf
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461020
mov eax, edi
mov ecx, 0x1e
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057b6e0

Function at 0x57b800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57b8fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x724653f57265b079
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1f6f84099a057772
mov qword [rsp + 0x20], rdx
movabs rdx, 0x57adabeae5fa836b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1514140a010e15
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90b100c1200080e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x613150e0a0c0e10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13140c1304110115
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x57b899
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x50]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x20
jge 0x57b8cb
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x57b8ee
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x50]
cmp rsi, 0x17
jb 0x57b87f
jmp 0x57b8e2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.0057b800
Function at 0x57c2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57c3ec
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x18e74c5baa17e7e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xbf679a61acd27901
mov qword [rsp + 0x26], rdx
movabs rdx, 0xfc75b0a45699adf4
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20c16040a140f07
mov qword [rsp + 0x36], rdx
movabs rdx, 0x409020c16040a14
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0e16060a140704
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1301130900031011
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0e060f04090004
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x57c388
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x47]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x22
jge 0x57c3bc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x17
jae 0x57c3df
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x47]
cmp rsi, 0x17
jb 0x57c36e
jmp 0x57c3d3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0057c2e0

Function at 0x57d380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57d47b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd985181309b293d5
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x74f765fe114f6cd9
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf27488a803f76553
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6060605070514
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6050412000b130a
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd1106050412000b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7030701160a0702
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x57d419
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x40]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x57d44b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x57d46e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x40]
cmp rsi, 0x17
jb 0x57d3ff
jmp 0x57d462
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.0057d380
Function at 0x57d4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57d59b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6465e8613b15299a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1c75a8a8536465e8
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe9fca6e0fdf6fbd
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x302101300100f0e
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe130f10010c1212
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf0f0d140e130f10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x510100a12141209
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x57d539
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x32]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x57d56b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x57d58e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x32]
cmp rsi, 0x15
jb 0x57d51f
jmp 0x57d582
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.0057d4a0

Function at 0x57d5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57d6dd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x58f9265a974659b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xfc8411ceef5374f6
mov qword [rsp + 0x22], rdx
movabs rdx, 0xff740469fc8411ce
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6c44d077fb247ff9
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd110806130f050a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x180e0d110806130f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x171a0500111a1814
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0e03190c0b1915
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa1607080519110a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x57d680
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x6f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x6f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x57d6ad
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x57d6d0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x57d65d
jmp 0x57d6c4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0057d5c0
Function at 0x580940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x580a2c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xdc5b65297418d245
mov qword [rsp + 0x19], rdx
movabs rdx, 0x631d3d697472dedc
mov qword [rsp + 0x20], rdx
movabs rdx, 0xecfc61683f4a1417
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc01060607041102
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1215040d10000f04
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc12110f16110812
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5809ca
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x15]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x5809fc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x580a1f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x15]
cmp rsi, 0x17
jb 0x5809b0
jmp 0x580a13
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00580940

Function at 0x581400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58152c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x710f6874701d74e0
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x75710f6874701d74
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x697495ce77ede669
mov qword [rsp + 0x24], rdx
movabs rdx, 0x24506589bfb963a7
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7965b7650561df2b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2181a05121a140d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x11e191502181a05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1e1314111e0c1201
mov qword [rsp + 0x48], rdx
movabs rdx, 0x131c1a130d060e0c
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc140b19050a1e
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5814c6
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x35]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x5814fc
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x21
jae 0x58151f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x35]
cmp rsi, 0x21
jb 0x5814ac
jmp 0x581513
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00461020
mov eax, edi
mov ecx, 0x21
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00581400
Function at 0x583440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58350c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8f69cacad79fbda7
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x726d
movabs rdx, 0x304090005020305
mov qword [rsp + 0x22], rdx
movabs rdx, 0x703060807010304
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x5834a4
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x5834dc
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x5834ff
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0xa
jb 0x58348a
jmp 0x5834f3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00583440

Function at 0x583ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x583d8c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5446490a44455657
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x496c5446490a4445
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57673f340e705b4d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf07010d0702040b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0e07070f07010d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5050001030e090b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x583d2a
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xa]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x583d5c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x583d7f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xa]
cmp rsi, 0x12
jb 0x583d10
jmp 0x583d73
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00583ca0
Function at 0x5846a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58476c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1b29654efa35feef
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x14784c3d
movabs rdx, 0x400060b0401030b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x203000408090007
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x584705
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1d]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x58473c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x58475f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1d]
cmp rsi, 0xc
jb 0x5846eb
jmp 0x584753
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005846a0

Function at 0x584820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5848dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd3aa9cd2c76572be
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xc32a
movabs rdx, 0x606090308040500
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x407
xor eax, eax
jmp 0x584880
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x5848ad
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5848d0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x584862
jmp 0x5848c4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00584820