joyce8/EMBER2024-capa huggingface dataset:
Function at 0x55b160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55b21d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x97414ebe73957975
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x97
movabs rdx, 0x700080408020707
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x803
xor eax, eax
nop
jmp 0x55b1c0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x55b1ed
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x55b210
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x55b1a2
jmp 0x55b204
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00460fc0
mov eax, edi
mov ecx, 9
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.0055b160

Function at 0x55b240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55b2f8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x41e645ea3a377954
mov qword [rsp + 0x28], rdx
movabs rdx, 0x402030605060605
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x604
xor eax, eax
jmp 0x55b295
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7a]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x55b2c8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x55b2eb
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7a]
nop
cmp rsi, 8
jb 0x55b27b
jmp 0x55b2df
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00460fc0
mov eax, edi
mov ecx, 8
call fcn.00460fc0
nop
call fcn.0045ece0
nop dword [rax]
jmp fcn.0055b240

Function at 0x55b940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55b9fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe7c83719bb612043
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xfb4f
movabs rdx, 0x401060707070705
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x7090307
xor eax, eax
jmp 0x55b9a0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x55b9cd
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x55b9f0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x55b983
jmp 0x55b9e4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460fc0
mov eax, edi
mov ecx, 0xa
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.0055b940
Function at 0x55c480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55c56a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x72897a7b646f438a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x657572897a7b646f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6f60596c69908364
mov qword [rsp + 0x38], rdx
movabs rdx, 0x811110a0a060c11
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4080811110a0a06
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5100b1000050f05
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x55c50d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0xf]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0xf]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x12
jge 0x55c53a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x55c55d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x55c4f0
jmp 0x55c551
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460fc0
mov eax, edi
mov ecx, 0x12
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0055c480

Function at 0x55c580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55c66c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xaca583659cc1efcd
mov qword [rsp + 0x35], rdx
movabs rdx, 0x70918daca583659c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x645a746dc5bc9e6c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5010f020d010e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x60507060d0e0005
mov qword [rsp + 0x25], rdx
movabs rdx, 0xd090811080c0302
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x55c60a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x16
jge 0x55c63c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x55c65f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0x13
jb 0x55c5f0
jmp 0x55c653
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00460fc0
mov eax, edi
mov ecx, 0x13
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0055c580
Function at 0x55e360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55e4ac
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0xb74894665bed9a62
mov qword [rsp + 0x52], rdx
movabs rdx, 0xb084b0866585b748
mov qword [rsp + 0x58], rdx
movabs rdx, 0x919d8266208aa061
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2bc092297948684f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x567065744a639867
mov qword [rsp + 0x70], rdx
movabs rdx, 0x192310080d0f1402
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x801051b19231008
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb1a0a0716150714
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x11301141b051c1f
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa062518051c1f1a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x210b211d00200c0a
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1703170b06081a14
mov qword [rsp + 0x4a], rdx
xor eax, eax
jmp 0x55e444
movzx r9d, byte [rsp + rsi + 0x52]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x40]
mov byte [rsp + rdi + 0x52], dl
mov byte [rsp + rsi + 0x52], r8b
add rax, 2
cmp rax, 0x34
jge 0x55e47c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x26
jae 0x55e49f
movzx r8d, byte [rsp + rdi + 0x52]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x40]
cmp rsi, 0x26
jb 0x55e42a
jmp 0x55e493
xor eax, eax
lea rbx, [rsp + 0x52]
mov ecx, 0x26
call fcn.0045b720
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.00460fc0
mov eax, edi
mov ecx, 0x26
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0055e360

Function at 0x55efa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55f09d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x79c6bd1fc46f4974
mov qword [rsp + 0x39], rdx
movabs rdx, 0x44c083856f91c479
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf102d5fdc920730f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0f0116160f1304
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x308050f160b0c12
mov qword [rsp + 0x25], rdx
movabs rdx, 0xd0615090308050f
mov qword [rsp + 0x29], rdx
movabs rdx, 0x4050b1408030913
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x55f040
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x55f06d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x55f090
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x55f01f
jmp 0x55f084
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0045b720
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00460fc0
mov eax, edi
mov ecx, 0x17
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.0055efa0
Function at 0x55f800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55f8ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x94bea69aa06c6993
mov qword [rsp + 0x37], rdx
movabs rdx, 0x7d94bea69aa06c69
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1ca389df7534637f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x603040e0d060d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5070f08050f0007
mov qword [rsp + 0x27], rdx
movabs rdx, 0xe0c100904030b
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x55f88a
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x18
jge 0x55f8bc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x55f8df
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2c]
cmp rsi, 0x11
jb 0x55f870
jmp 0x55f8d3
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00460fc0
mov eax, edi
mov ecx, 0x11
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0055f800
Function at 0x566a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x566b0a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xed6446e3e4766e86
mov qword [rsp + 0x34], rdx
movabs rdx, 0x28534e44ed6446e3
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf273707170d9e772
mov qword [rsp + 0x40], rdx
movabs rdx, 0x102050313050d0e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x704030b000102
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb13020110111110
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x566aad
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x16
jge 0x566ada
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x566afd
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x566a90
jmp 0x566af1
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00460fc0
mov eax, edi
mov ecx, 0x14
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00566a20

Function at 0x566b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x566c3a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x4d95d2d7d8203124
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xbfafbd6f720020a9
mov qword [rsp + 0x47], rdx
movabs rdx, 0xddbfafbd6f720020
mov qword [rsp + 0x48], rdx
movabs rdx, 0xaccc9191e2733654
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1406100118041212
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x704071214061001
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x140d140016120717
mov qword [rsp + 0x27], rdx
movabs rdx, 0x8100a0a03000811
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xa100e170405150f
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x566bd7
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7d]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x24
jge 0x566c09
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x566c2d
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7d]
cmp rsi, 0x19
jb 0x566bbd
jmp 0x566c21
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.0045b720
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00460fc0
mov eax, edi
mov ecx, 0x19
call fcn.00460fc0
nop
call fcn.0045ece0
nop
jmp fcn.00566b20
Function at 0x566fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x567086
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9a6cbb9b2c73fbd2
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xdf
movabs rdx, 0x407010100070108
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x8050508
xor eax, eax
nop
jmp 0x567020
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x567052
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x567077
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
cmp rsi, 9
jb 0x567002
jmp 0x56706b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00460fc0
mov eax, edi
mov ecx, 9
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00566fc0

Function at 0x5670a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x567166
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5a3e68302e50326b
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x33353a63
movabs rdx, 0x708050005000808
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x8060208
xor eax, eax
jmp 0x567100
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x25]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x567132
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x567157
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x25]
cmp rsi, 0xc
jb 0x5670e4
jmp 0x56714b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460fc0
mov eax, edi
mov ecx, 0xc
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.005670a0

Function at 0x56a3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56a46c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x69f8920b6d621343
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x10073069
movabs rdx, 0xa0a050101000805
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x505080609090104
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x56a405
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x56a43c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x56a45f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0xb
jb 0x56a3eb
jmp 0x56a453
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460fc0
mov eax, edi
mov ecx, 0xb
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0056a3a0
Function at 0x57ed40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57ee3b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1113213065d2e069
mov qword [rsp + 0x35], rdx
movabs rdx, 0xcd0bc1113213065
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6e7484b163750080
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0f0c0f10090110
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x110100b1108040f
mov qword [rsp + 0x23], rdx
movabs rdx, 0x2010110100b1108
mov qword [rsp + 0x25], rdx
movabs rdx, 0x80705010611100a
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x57edd9
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x31]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x57ee0b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x57ee2e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x31]
cmp rsi, 0x13
jb 0x57edbf
jmp 0x57ee22
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00460fc0
mov eax, edi
mov ecx, 0x13
call fcn.00460fc0
nop
nop dword [rax + rax]
call fcn.0045ece0
jmp fcn.0057ed40

Function at 0x57f260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57f368
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2235fe741d6f3048
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65d8e76e4fb270fc
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe87eea5370c83b1a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1405081705160d0d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe150e0514050817
mov qword [rsp + 0x20], rdx
movabs rdx, 0x705140d1012110a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1703011106100615
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0b1716061601
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x57f30b
movzx r9d, byte [rsp + rsi + 0x40]
sub r9d, edx
lea edx, [r9 + 0x5b]
mov byte [rsp + rdi + 0x40], dl
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x40], dl
add rax, 2
cmp rax, 0x24
jge 0x57f338
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x57f35b
movzx r8d, byte [rsp + rdi + 0x40]
sub r8d, edx
cmp rsi, 0x18
jb 0x57f2ee
jmp 0x57f34f
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.0045b720
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00460fc0
mov eax, edi
mov ecx, 0x18
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0057f260
Function at 0x580520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58061b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2e31fc6a2e3373ff
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb52e31fc6a2e33
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe59d8a2e860598
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1090509000f0508
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc01100c0b050401
mov qword [rsp + 0x24], rdx
movabs rdx, 0x90a0c01100c0b05
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80f0e050a0c0504
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x5805b9
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7d]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x5805eb
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x58060e
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7d]
cmp rsi, 0x12
jb 0x58059f
jmp 0x580602
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460fc0
mov eax, edi
mov ecx, 0x12
call fcn.00460fc0
nop
nop dword [rax + rax]
call fcn.0045ece0
jmp fcn.00580520

Function at 0x580b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xedcb0e446c6582a4
mov qword [rsp + 0x28], rdx
movabs rdx, 0x101000103070506
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x602
xor eax, eax
jmp 0x580b76
movzx r8d, byte [rsp + rbx + 0x28]
sub r8d, edx
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x28], dl
lea edx, [rdi + 7]
mov byte [rsp + rbx + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x580ba2
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x580be5
movzx edi, byte [rsp + rsi + 0x28]
sub edi, edx
cmp rbx, 8
jb 0x580b5a
nop
jmp 0x580bd6
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x580bc0
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x580baf
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00460fc0
mov eax, esi
mov ecx, 8
call fcn.00460fc0
nop
int3
Function at 0x580c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x53a50f1f972d8fae
mov qword [rsp + 0x20], rdx
movabs rdx, 0x304050301020106
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x580ccf
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x13]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x13]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x580cfa
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x580d35
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x580cb3
jmp 0x580d29
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x580d13
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x580d07
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00460fc0
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00460fc0
nop
int3

Function at 0x581760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x85dcd7889e743d08
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4030407010706
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x603
xor eax, eax
jmp 0x5817b4
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xa
jge 0x5817e8
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x581825
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x72]
nop dword [rax + rax]
cmp rbx, 8
jb 0x58179a
jmp 0x581817
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x581801
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x5817f5
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460fc0
mov eax, esi
mov ecx, 8
call fcn.00460fc0
nop
int3
Function at 0x581d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xa9d6a1cb43644eb0
mov qword [rsp + 0x28], rdx
movabs rdx, 0x400030403050705
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 0x504
xor eax, eax
jmp 0x581d56
movzx r8d, byte [rsp + rbx + 0x28]
sub r8d, edx
lea edx, [r8 + 0xd]
mov byte [rsp + rsi + 0x28], dl
lea edx, [rdi + 0xd]
mov byte [rsp + rbx + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x581d82
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x581dc5
movzx edi, byte [rsp + rsi + 0x28]
sub edi, edx
cmp rbx, 8
jb 0x581d3a
nop
jmp 0x581db6
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x581da0
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x581d8f
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00460fc0
mov eax, esi
mov ecx, 8
call fcn.00460fc0
nop
int3

Function at 0x582b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xf5105e10e6f580bd
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1050307060003
mov qword [rsp + 0x14], rdx
mov dword [rsp + 0x1c], 0x6020703
xor eax, eax
jmp 0x582b77
movzx r8d, byte [rsp + rbx + 0x28]
sub r8d, edx
lea edx, [r8 + 0x16]
mov byte [rsp + rsi + 0x28], dl
lea edx, [rdi + 0x16]
mov byte [rsp + rbx + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x582ba8
movzx edx, byte [rsp + rax + 0x14]
movzx ebx, byte [rsp + rax + 0x15]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x582be5
movzx edi, byte [rsp + rsi + 0x28]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x582b5b
jmp 0x582bd7
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x582bc1
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x582bb5
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460fc0
mov eax, esi
mov ecx, 8
call fcn.00460fc0
nop
int3