joyce8/EMBER2024-capa huggingface dataset:
Function at 0x569fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56a0d6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xb29a0c9c6fbfdc94
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x68a1eeb29a0c9c6f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x966e67e3679aad20
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10080f100200050f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x112060d10000f01
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70c04010512090f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x56a073
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x56a0a2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x56a0c9
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x56a056
nop
jmp 0x56a0bd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461e80
mov eax, edi
mov ecx, 0x13
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.00569fe0
Function at 0x56ac60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56adb2
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x796e614855bb6f75
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb254a645df796e61
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20ba7aacc26f6974
mov qword [rsp + 0x26], rdx
movabs rdx, 0x313ed06140a96f95
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40e0338635368828
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1a021e1323180818
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x11001a021e132318
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b23120821131808
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2411041702150a10
mov qword [rsp + 0x50], rdx
movabs rdx, 0x80818180303100a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1c110b1e1b181b0c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2411151a24091004
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x56ad4a
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffaf
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x32
jge 0x56ad7b
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x56ada5
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffaf
add r8d, edx
cmp rsi, 0x25
jb 0x56ad30
jmp 0x56ad96
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
call fcn.0044ba20
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x25
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0x25
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0056ac60

Function at 0x56c500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56c5bc
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0x576f32113165754c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x703050004050305
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x56c557
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 + 0x26]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 + 0x26]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x56c588
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x56c5af
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x56c53a
jmp 0x56c5a3
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044ba20
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.00461e80
mov eax, edi
mov ecx, 8
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.0056c500
Function at 0x56f080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56f176
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xeaa2b56cc676d17b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x88532144eaa2b56c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x89736e8070bd7572
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70d100705000609
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1100b100513070d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30103050d0e0613
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x56f113
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x45]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x45]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x56f142
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x56f169
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x56f0f6
nop
jmp 0x56f15d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461e80
mov eax, edi
mov ecx, 0x14
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.0056f080

Function at 0x56fe20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56fef2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xd0b9800063826ee4
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x8374
movabs rdx, 0x902000109070902
mov qword [rsp + 0x22], rdx
movabs rdx, 0x204000600050902
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x56fe8d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x7a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x7a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x56feba
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x56fee5
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x56fe70
jmp 0x56fed5
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xa
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0056fe20
Function at 0x56ff00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x570028
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x3d5869534b765969
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x116b2665553a4f4e
mov qword [rsp + 0x25], rdx
movabs rdx, 0x69116b2665553a4f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x49020640376557e8
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x901111617041509
mov qword [rsp + 0x36], rdx
movabs rdx, 0x809090111161704
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7040a010d0f0c08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1403031106010409
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb180f160d0b1214
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x56ffc0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xfffffffb
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x56fff1
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x57001b
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xfffffffb
add r8d, edx
cmp rsi, 0x19
jb 0x56ffa3
jmp 0x57000f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0056ff00

Function at 0x570ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x570f66
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6b04a46200c2926c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x502020203030106
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1030103
xor eax, eax
jmp 0x570f00
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x28]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x28]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x570f2d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x570f54
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 8
jb 0x570ee2
jmp 0x570f48
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00461e80
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00570ea0
Function at 0x570f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x571048
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x7361ab1e03184c6d
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x13
movabs rdx, 0x408030305030501
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x102
xor eax, eax
jmp 0x570fe3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x68]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x68]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x571010
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x57103b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x570fc6
jmp 0x57102f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00570f80

Function at 0x571060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x571132
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
lea rax, [0x0064cb00]
nop
call fcn.0040d100
movabs rcx, 0xcf3f524a817d
mov qword [rax], rcx
mov dword [rax + 8], 0x4b43009c
movabs rcx, 0xb01040401050100
mov qword [rsp + 0x10], rcx
movabs rcx, 0x302080300000a0b
mov qword [rsp + 0x18], rcx
xor ecx, ecx
jmp 0x5710d5
movzx r9d, byte [rsi + rax]
sub r9d, edx
lea edx, [r9 - 0x3b]
mov byte [rax + rdi], dl
lea edx, [r8 - 0x3b]
mov byte [rax + rsi], dl
add rcx, 2
cmp rcx, 0x10
jge 0x571102
movzx edx, byte [rsp + rcx + 0x10]
movzx esi, byte [rsp + rcx + 0x11]
mov edi, edx
xor edx, esi
add edx, ecx
cmp rdi, 0xc
jae 0x571125
movzx r8d, byte [rdi + rax]
sub r8d, edx
cmp rsi, 0xc
jb 0x5710bb
nop
jmp 0x571114
mov ebx, 0xc
mov rcx, rbx
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00571060

Function at 0x576cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x576d92
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x7461564528341e46
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xf455
movabs rdx, 0x800050209030902
mov qword [rsp + 0x22], rdx
movabs rdx, 0x509010405010800
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x576d2a
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x11
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x576d5b
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x576d85
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x11
add r8d, edx
cmp rsi, 0xa
jb 0x576d10
jmp 0x576d76
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xa
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00576cc0
Function at 0x577080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577188
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x2c25b1362ef82eae
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x53c837a826b6342c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1fb2b1c62eaec82e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x14090713100d0e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x110a021116090209
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc0d110a02111609
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb09060b1115050d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x577120
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x66
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x577151
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x57717b
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x66
add r8d, edx
cmp rsi, 0x17
jb 0x577105
jmp 0x57716f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461e80
mov eax, edi
mov ecx, 0x17
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00577080

Function at 0x5771a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5772a8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x78347ca9e74a2e32
mov qword [rsp + 0x18], rdx
movabs rdx, 0x71b6d68c9aa47834
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x312e802e30697d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x903080804020909
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc12120b0c04090f
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe050c12120b0c04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7020a120d080f04
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x577242
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x2a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1a
jge 0x57726f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x57729b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x577225
jmp 0x57728f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461e80
mov eax, edi
mov ecx, 0x16
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005771a0
Function at 0x577ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xa91edc1bdc663dc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5060400060702
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x602
xor eax, eax
nop
jmp 0x577d00
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x3c]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x577d2b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x577d6a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x577ce2
jmp 0x577d5e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x577d44
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x577d38
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x577e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xb71fc9c021afa993
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6020607000307
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x305
xor eax, eax
nop
jmp 0x577ec0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x10]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x10]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x577eeb
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x577f2a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x577ea2
jmp 0x577f1e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x577f04
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x577ef8
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3
Function at 0x5780c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xd3b0c5bea6644b4f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x607010403030506
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1000703
xor eax, eax
nop
jmp 0x578120
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0xa]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x57814b
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57818a
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x578102
jmp 0x57817e
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x578164
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x578158
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x5781a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x8b30187ee1b05f88
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x607050104060403
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x105
xor eax, eax
nop
jmp 0x578200
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x5a]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x5a]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x57822b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x57826a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x5781e2
jmp 0x57825e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x578244
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x578238
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3
Function at 0x5784e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x54086403acade1e5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x501020401030505
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x500
xor eax, eax
nop
jmp 0x578540
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0x51
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x57856e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5785ad
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0x51
add edi, edx
cmp rbx, 8
jb 0x578522
jmp 0x5785a1
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x578587
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x57857b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x578940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x19d81f7c5ae42a6a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x506020601030000
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6000405
xor eax, eax
nop
jmp 0x5789a0
movzx r8d, byte [rsp + rbx + 0x1c]
add r8d, 0xffffffc1
add edx, r8d
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x5789ce
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x578a0d
movzx edi, byte [rsp + rsi + 0x1c]
add edi, 0xffffffc1
add edi, edx
cmp rbx, 8
jb 0x578982
jmp 0x578a01
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x5789e7
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x5789db
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3
Function at 0x578da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x74fd61327db8bb8f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x504020502030501
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x403
xor eax, eax
nop
jmp 0x578e00
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xffffffa3
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x578e2e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x578e6d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xffffffa3
add edi, edx
cmp rbx, 8
jb 0x578de2
jmp 0x578e61
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x578e47
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x578e3b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x578f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x762b6c8b7551e87
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x604010705070107
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2040102
xor eax, eax
nop
jmp 0x578f80
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0x73]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0x73]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x578fab
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x578fea
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x578f62
jmp 0x578fde
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x578fc4
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x578fb8
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3