joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5411c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54129c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf6f2065508573b4
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x8dcf735ae30f6f20
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9090b000308020c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x208070902070909
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x541232
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x77
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x541268
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x54128f
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x77
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xd
jb 0x541218
jmp 0x541283
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457420
mov eax, edi
mov ecx, 0xd
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.005411c0

Function at 0x542ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x542c26
sub rsp, 0xd0
mov qword [rsp + 0xc8], rbp
lea rbp, [rsp + 0xc8]
movabs rdx, 0x765cea3bc4745062
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x833a726b15ba765c
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd7797d60657e867b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7b9d649c6990a74e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x65b8a6305cbf733e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x4b20806f5cdbc772
mov qword [rsp + 0x42], rdx
movabs rdx, 0x6f7b8893a5207b44
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x7346b1a263141fc1
mov qword [rsp + 0x52], rdx
movabs rdx, 0x6e396530206ca366
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x421b091703230524
mov qword [rsp + 0x62], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x00672d0a]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00457a4c
mov rbp, qword [rbp]
xor eax, eax
jmp 0x542bb9
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xffffff9d
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x66
jge 0x542bea
movzx edx, byte [rsp + rax + 0x62]
movzx esi, byte [rsp + rax + 0x63]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x46
jae 0x542c17
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xffffff9d
add r8d, edx
cmp rsi, 0x46
jb 0x542b9f
jmp 0x542c0b
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x46
call fcn.004446e0
mov rbp, qword [rsp + 0xc8]
add rsp, 0xd0
ret
mov eax, esi
mov ecx, 0x46
call fcn.00457420
mov eax, edi
mov ecx, 0x46
nop
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00542ac0
Function at 0x555f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x556092
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x790e61a220e76f74
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x627c38c620790e61
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6e5e99e3b73476f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xea58207976f2ef63
mov qword [rsp + 0x32], rdx
movabs rdx, 0x747075b956d51111
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1e1e1d0609060a1e
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1e0b201f1e061e1e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e1714140e151b02
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1718121c04160e13
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2115111d18021f17
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x55602c
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x54
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x26
jge 0x55605d
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x556085
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x54
add r8d, edx
cmp rsi, 0x25
jb 0x556012
jmp 0x556078
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x25
call fcn.004446e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x25
nop
call fcn.00457420
mov eax, edi
mov ecx, 0x25
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00555f60

Function at 0x556ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x556fc6
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x279920f77169617d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20362020be654e1a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x74e8676e69d074f2
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc3259ec27236624c
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd051c0e0307050d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1a0403120d051c0e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1d1a1f1800040b09
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b1c1c1a081b0e1b
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe100b1f06160810
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x556f60
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x4b]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x24
jge 0x556f8d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x556fb4
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x20
jb 0x556f43
jmp 0x556fa8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.004446e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x20
call fcn.00457420
mov eax, edi
mov ecx, 0x20
nop dword [rax + rax]
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00556ea0
Function at 0x559700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x559852
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x2093e1bb7720bde2
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7edfb3f1b138c274
mov qword [rsp + 0x22], rdx
movabs rdx, 0x748a6f8b88b2a99e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x54f38b6cd2dce069
mov qword [rsp + 0x32], rdx
movabs rdx, 0x63db203a60a76461
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x160316230f030d1b
mov qword [rsp + 0x42], rdx
movabs rdx, 0xb0b0b010d001603
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc270b0904022603
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10110f0a1312221e
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe040c160619091f
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf0005091e00141d
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1a1e131e19230a0d
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x5597ed
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x36
jge 0x55981a
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x559845
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x28
jb 0x5597d0
jmp 0x559835
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x28
call fcn.004446e0
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x28
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0x28
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00559700
Function at 0x55a5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55a6c8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6edbbb63f1e53a99
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2040fca364fc05bf
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa463e86d2040fca3
mov qword [rsp + 0x26], rdx
movabs rdx, 0xaddfbe3b41e594e1
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1b0e0d090503191b
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa061b0e0d090503
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b11130e16141a15
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20d080017180d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x103060301030c06
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x55a660
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x76
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x55a691
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x55a6bb
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x76
add r8d, edx
cmp rsi, 0x1c
jb 0x55a643
jmp 0x55a6af
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457420
mov eax, edi
mov ecx, 0x1c
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0055a5a0

Function at 0x55a6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x55a855
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x555b27547367736f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x14ec76537354204d
mov qword [rsp + 0x27], rdx
movabs rdx, 0x286d81456f14ec76
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7464e374500c4240
mov qword [rsp + 0x34], rdx
movabs rdx, 0x5a47541e36666f20
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x36c6232742067ff
mov qword [rsp + 0x44], rdx
movabs rdx, 0x27172c1518240d1b
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x11b140c27172c15
mov qword [rsp + 0x50], rdx
movabs rdx, 0x50c2c0a02211705
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1513161516021425
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1220080605222304
mov qword [rsp + 0x68], rdx
movabs rdx, 0x14291a200d111606
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2220e270f071a27
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x55a7e7
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffdb
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x34
jge 0x55a81b
movzx edx, byte [rsp + rax + 0x4c]
movzx esi, byte [rsp + rax + 0x4d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2d
jae 0x55a848
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffdb
add r8d, edx
cmp rsi, 0x2d
jb 0x55a7cd
jmp 0x55a83c
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x2d
call fcn.004446e0
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00457420
mov eax, edi
mov ecx, 0x2d
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0055a6e0
Function at 0x55f2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55f428
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x9900616dfb057429
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4e66197704699900
mov qword [rsp + 0x22], rdx
movabs rdx, 0x11e512eb69336314
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3a40e23220042049
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa25205d0fdcfc53
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x12180d251e030b12
mov qword [rsp + 0x42], rdx
movabs rdx, 0x90e0910070b151e
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x60b061b1420090e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x210d061c14070913
mov qword [rsp + 0x58], rdx
movabs rdx, 0x16130014141c1007
mov qword [rsp + 0x60], rdx
movabs rdx, 0x91b120b1f1a020b
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x55f3c0
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xfffffffc
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2e
jge 0x55f3f1
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x55f41b
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xfffffffc
add r8d, edx
cmp rsi, 0x26
jb 0x55f3a2
jmp 0x55f40f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x26
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x26
call fcn.00457420
mov eax, edi
mov ecx, 0x26
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0055f2e0

Function at 0x55f880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55f9b2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x5e724a7c74697264
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x737f65635e724a7c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x795b087d93c1a56b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4692783320934074
mov qword [rsp + 0x32], rdx
movabs rdx, 0x42256e0c765d5b20
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa0d160d13130e
mov qword [rsp + 0x42], rdx
movabs rdx, 0x70f13070e21000a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc231e15140d1a10
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf21160a15181505
mov qword [rsp + 0x58], rdx
movabs rdx, 0x51b041421112013
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x55f94c
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffc8
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x26
jge 0x55f97d
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x55f9a5
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffc8
add r8d, edx
cmp rsi, 0x24
jb 0x55f932
jmp 0x55f998
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x24
call fcn.004446e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x24
nop
call fcn.00457420
mov eax, edi
mov ecx, 0x24
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0055f880
Function at 0x560280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5603c6
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x20737b6518e55750
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb4f6506de0dc7f6
mov qword [rsp + 0x24], rdx
movabs rdx, 0x73fb65f892725020
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd12e202c7625002b
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa00cc3e65c0fd810
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x50103202123270e
mov qword [rsp + 0x44], rdx
movabs rdx, 0x503251f1e0b2001
mov qword [rsp + 0x4c], rdx
movabs rdx, 0xb1601050503251f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x130a161416010e22
mov qword [rsp + 0x58], rdx
movabs rdx, 0x21180c1f24192321
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2627090f1802080a
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x560360
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x6b]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x2c
jge 0x56038d
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x5603b4
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x28
jb 0x560342
jmp 0x5603a8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x28
call fcn.004446e0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x28
call fcn.00457420
mov eax, edi
mov ecx, 0x28
nop dword [rax + rax]
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00560280
Function at 0x560e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x560ef6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xc55680b1161e6c5
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6e697e738f2a0c55
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1f5002be6f690f61
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40b061505090b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9130b08150b0004
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4030f0612070115
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x560e90
movzx r9d, byte [rsp + rsi + 0x32]
add r9d, 0x3d
add edx, r9d
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x16
jge 0x560ec2
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x560ee9
movzx r8d, byte [rsp + rdi + 0x32]
add r8d, 0x3d
add r8d, edx
cmp rsi, 0x16
jb 0x560e76
nop
jmp 0x560edd
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457420
mov eax, edi
mov ecx, 0x16
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.00560e00
Function at 0x567880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x567968
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x20ffb6196138bdfe
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe40f69ff64060920
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20d0d0e050d0401
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60b020d0d0e050d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80d0204020d0900
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x567901
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x50
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x12
jge 0x567932
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x56795b
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x50
add r8d, edx
cmp rsi, 0xf
jb 0x5678e7
jmp 0x56794f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457420
mov eax, edi
mov ecx, 0xf
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00567880

Function at 0x568260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x568372
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xcf75a442ac94739b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xaa7409bc7028c9e1
mov qword [rsp + 0x27], rdx
movabs rdx, 0xb9aa7409bc7028c9
mov qword [rsp + 0x28], rdx
movabs rdx, 0xfd3a65a96c6176b9
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4050315000f040a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1810150711070d02
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0a0a000c050f0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa11000309050804
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x568311
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x7d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x7d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x56833e
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x568365
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x5682f4
jmp 0x568359
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.004446e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457420
mov eax, edi
mov ecx, 0x19
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00568260
Function at 0x56bac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56bb88
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x221761c363b35e57
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2000201000407
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6070107
xor eax, eax
jmp 0x56bb20
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x52
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x56bb51
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x56bb7b
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x52
add r8d, edx
cmp rsi, 8
jb 0x56bb02
jmp 0x56bb6f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00457420
mov eax, edi
mov ecx, 8
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0056bac0
Function at 0x56ff00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x570032
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x62fe7475e9386965
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2b6b0362fe7475e9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2906e7b654b1266
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0391b201b06668
mov qword [rsp + 0x30], rdx
movabs rdx, 0x68bdaedf50dddf6e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1061a0c16122219
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8061506190c030d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c110202210c0a18
mov qword [rsp + 0x50], rdx
movabs rdx, 0x60f130f171f1a1d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x308180222090620
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x56ffcc
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x6d
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x28
jge 0x56fffd
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x570025
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x6d
add r8d, edx
cmp rsi, 0x23
jb 0x56ffb2
jmp 0x570018
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x23
call fcn.004446e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x23
nop
call fcn.00457420
mov eax, edi
mov ecx, 0x23
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0056ff00

Function at 0x571040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57111c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4f52a27c9276a86f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7b6e694f52a27c92
mov qword [rsp + 0x22], rdx
movabs rdx, 0x30301030a080205
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9020204010303
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5710b2
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffd0
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x5710e8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x57110f
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffd0
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x571098
jmp 0x571103
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457420
mov eax, edi
mov ecx, 0xb
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.00571040
Function at 0x575a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x575b06
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x52381e41d7a6213c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2030305050203
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3060100
xor eax, eax
jmp 0x575aa0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x575acd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x575af4
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 8
jb 0x575a82
jmp 0x575ae8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00457420
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00575a40

Function at 0x575ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x575f72
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe77f43edc7b66c4d
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x794f
movabs rdx, 0x604000602030709
mov qword [rsp + 0x22], rdx
movabs rdx, 0x602020906040604
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x575f0a
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0xffffffba
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x575f3b
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x575f65
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0xffffffba
add r8d, edx
cmp rsi, 0xa
jb 0x575ef0
jmp 0x575f56
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0xa
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00575ea0