joyce8/EMBER2024-capa huggingface dataset:
Function at 0x579720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x3dd7e6ca90256616
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x307020203060102
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0
xor eax, eax
nop
jmp 0x579780
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0x68
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5797ae
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5797ed
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0x68
add edi, edx
cmp rbx, 8
jb 0x579762
jmp 0x5797e1
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5797c7
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5797bb
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x579920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xcfcce69e7ea7cd13
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x400020600070101
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x102
xor eax, eax
nop
jmp 0x579980
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x1b]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x1b]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x5799ab
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5799ea
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x579962
jmp 0x5799de
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5799c4
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5799b8
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3
Function at 0x57a1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0x29d112ce3663c3b7
mov qword [rsp + 0x18], rax
movabs rax, 0x8ac93289a08da899
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1d]
movzx ecx, byte [rsp + 0x21]
add eax, ecx
movzx ecx, byte [rsp + 0x18]
movzx edx, byte [rsp + 0x25]
movzx ebx, byte [rsp + 0x24]
movzx esi, byte [rsp + 0x1f]
movzx edi, byte [rsp + 0x1c]
movzx r8d, byte [rsp + 0x26]
movzx r9d, byte [rsp + 0x22]
movzx r10d, byte [rsp + 0x19]
movzx r11d, byte [rsp + 0x1a]
movzx r12d, byte [rsp + 0x27]
movzx r13d, byte [rsp + 0x23]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x1e]
movzx r13d, byte [rsp + 0x1b]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x20]
mov byte [rsp + 0xf], al
sub ecx, edx
mov byte [rsp + 0x10], cl
sub ebx, esi
mov byte [rsp + 0x11], bl
xor edi, r8d
mov byte [rsp + 0x12], dil
sub r9d, r10d
mov byte [rsp + 0x13], r9b
lea eax, [r12 + r11]
mov byte [rsp + 0x14], al
movzx eax, byte [rsp + 6]
sub eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
sub eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x57a2c5
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x57a2b9
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret

Function at 0x57a420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xb798cfaed4b8ca3a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x305020500050105
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x57a473
movzx r8d, byte [rsp + rbx + 0x20]
add r8d, 0x71
add edx, r8d
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x57a4a2
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57a4e6
movzx edi, byte [rsp + rsi + 0x20]
add edi, 0x71
add edi, edx
cmp rbx, 8
jb 0x57a459
nop
jmp 0x57a4da
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x57a4c0
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x57a4af
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3
Function at 0x57a500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xac02e6c6d33e02a4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x306010502070703
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x57a555
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x10]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x57a582
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57a5c6
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x57a539
nop
jmp 0x57a5ba
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x57a5a0
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x57a58f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x57a720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x6d71fbe52da9089a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x105070304020201
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x307
xor eax, eax
nop
jmp 0x57a780
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0xd]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0xd]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x57a7ab
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57a7ea
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x57a762
jmp 0x57a7de
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x57a7c4
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x57a7b8
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3
Function at 0x57a940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xf2fab9e1f2c03054
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x700000001010004
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x101
xor eax, eax
nop
jmp 0x57a9a0
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xffffff88
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x57a9ce
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57aa0d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xffffff88
add edi, edx
cmp rbx, 8
jb 0x57a982
jmp 0x57aa01
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x57a9e7
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x57a9db
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x57be40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0xbeeecd313fb786c3
mov qword [rsp + 0x18], rax
movabs rax, 0x7aaed16776dad32a
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x26]
movzx ecx, byte [rsp + 0x20]
xor eax, ecx
movzx ecx, byte [rsp + 0x21]
movzx edx, byte [rsp + 0x1a]
movzx ebx, byte [rsp + 0x27]
movzx esi, byte [rsp + 0x1c]
movzx edi, byte [rsp + 0x1b]
movzx r8d, byte [rsp + 0x18]
movzx r9d, byte [rsp + 0x19]
movzx r10d, byte [rsp + 0x1e]
movzx r11d, byte [rsp + 0x1f]
movzx r12d, byte [rsp + 0x22]
movzx r13d, byte [rsp + 0x24]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x23]
movzx r13d, byte [rsp + 0x1d]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x25]
mov byte [rsp + 0xf], al
sub ecx, edx
mov byte [rsp + 0x10], cl
lea eax, [rsi + rbx]
mov byte [rsp + 0x11], al
sub edi, r8d
mov byte [rsp + 0x12], dil
lea eax, [r10 + r9]
mov byte [rsp + 0x13], al
sub r11d, r12d
mov byte [rsp + 0x14], r11b
movzx eax, byte [rsp + 6]
add eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
sub eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x57bf46
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x57bf3a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
nop
ret
Function at 0x57bf80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x1b1178412ab5aca9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x504070407070107
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x505
xor eax, eax
nop
jmp 0x57bfe0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x52]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x57c00b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57c04a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x57bfc2
jmp 0x57c03e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x57c024
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x57c018
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x57c1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xe74430ec3b186145
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x205030402050703
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x40004
xor eax, eax
nop
jmp 0x57c200
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x38]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x57c22b
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57c26a
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x57c1e2
jmp 0x57c25e
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x57c244
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x57c238
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3
Function at 0x57c280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x362bd92a9c9f5d47
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2050105070705
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x307
xor eax, eax
nop
jmp 0x57c2e0
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xfffffffb
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x57c30e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57c34d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xfffffffb
add edi, edx
cmp rbx, 8
jb 0x57c2c2
jmp 0x57c341
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x57c327
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x57c31b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x57c540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xd6c321a724c5d1b8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x705050406050302
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x304
xor eax, eax
nop
jmp 0x57c5a0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x21]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x57c5cb
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57c60a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x57c582
jmp 0x57c5fe
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x57c5e4
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x57c5d8
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3
Function at 0x57d260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x5dc57aa39e6993ab
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10606040307
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x502
xor eax, eax
nop
jmp 0x57d2c0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x15]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x15]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x57d2eb
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57d32a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x57d2a2
jmp 0x57d31e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x57d304
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x57d2f8
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x57d6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x77d6980bf47ede17
mov qword [rsp + 0x20], rdx
movabs rdx, 0x303070404010004
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x57d6f3
movzx r8d, byte [rsp + rbx + 0x20]
add r8d, 0x7c
add edx, r8d
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x57d722
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57d766
movzx edi, byte [rsp + rsi + 0x20]
add edi, 0x7c
add edi, edx
cmp rbx, 8
jb 0x57d6d9
nop
jmp 0x57d75a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x57d740
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x57d72f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3
Function at 0x57e920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x9afca6b32ef37b92
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x707050402010406
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7070207
xor eax, eax
nop
jmp 0x57e980
movzx r8d, byte [rsp + rbx + 0x1c]
add r8d, 0xffffffdf
add edx, r8d
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x57e9ae
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57e9ed
movzx edi, byte [rsp + rsi + 0x1c]
add edi, 0xffffffdf
add edi, edx
cmp rbx, 8
jb 0x57e962
jmp 0x57e9e1
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x57e9c7
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x57e9bb
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x57f0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xfd493f83c3aec33d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x100040501010304
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x307
xor eax, eax
nop
jmp 0x57f120
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x7c]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x7c]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x57f14b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57f18a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x57f102
jmp 0x57f17e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x57f164
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x57f158
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3
Function at 0x57fbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x3aa9fad7f6954494
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x105060702020603
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x103
xor eax, eax
nop
jmp 0x57fc20
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 2
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x57fc4e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57fc8d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 2
add edi, edx
cmp rbx, 8
jb 0x57fc02
jmp 0x57fc81
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x57fc67
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x57fc5b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x57fd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xc53ac3f7c1b717a7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x106030106050406
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x501
xor eax, eax
nop
jmp 0x57fda0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x3c]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x57fdcb
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57fe0a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x57fd82
jmp 0x57fdfe
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x57fde4
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x57fdd8
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3
Function at 0x57fe20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x2d847aaaa3250d65
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x505030304050203
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5050005
xor eax, eax
nop
jmp 0x57fe80
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x4a]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x4a]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x57feab
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57feea
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x57fe62
jmp 0x57fede
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x57fec4
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x57feb8
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x580800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x363f8b807ae11f8c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x306010106010104
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3030307
xor eax, eax
nop
jmp 0x580860
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x51]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x58088b
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5808ca
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x580842
jmp 0x5808be
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x5808a4
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x580898
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3