joyce8/EMBER2024-capa huggingface dataset:
Function at 0x56eac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56eb9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4a44dae14464b6da
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5ac74fe163f0df4a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7000c0e0c0d0b09
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd05040e0c080100
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x56eb32
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x56eb68
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x56eb8f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
nop dword [rax]
cmp rsi, 0xf
jb 0x56eb18
jmp 0x56eb83
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f500
mov eax, edi
mov ecx, 0xf
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.0056eac0

Function at 0x56f2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56f3c8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x65b207b5c16facef
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe87565b207b5c16f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1b8344356eab43af
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe11060306100f03
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x506110a1103000e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x40c0506110a1103
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11010e0e090306
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x56f360
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5e]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x56f392
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x56f3bb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5e]
cmp rsi, 0x12
jb 0x56f345
jmp 0x56f3af
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f500
mov eax, edi
mov ecx, 0x12
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0056f2c0
Function at 0x5708e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5709cb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xbbbc17189f65d5bc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x572002aec4e7bbbc
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80a050a090a0400
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa050c080a050a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60307050b03010c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x570964
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x44]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x44]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x570997
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x5709be
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x570947
jmp 0x5709b2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f500
mov eax, edi
mov ecx, 0xe
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005708e0

Function at 0x570ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x570bab
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x61a4b3d0f21772db
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57caa70f50d0180b
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0a05050c080605
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20e0a060d0a0505
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd030300040d0902
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x570b44
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x14
jge 0x570b77
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x570b9e
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x570b27
jmp 0x570b92
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f500
mov eax, edi
mov ecx, 0x10
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00570ac0
Function at 0x571520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x571628
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x79d6c2b773e3cda2
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6fa26d79d6c2b773
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x28b3a386ac8fe36c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4040209060f120f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe10110d0c090e11
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf0501090e10110d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4000e030f09060e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5715c0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x5715f2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x57161b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
cmp rsi, 0x13
jb 0x5715a5
jmp 0x57160f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f500
mov eax, edi
mov ecx, 0x13
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00571520
Function at 0x572580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x572668
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7461635f6c704444
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x556c64bbd316e274
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa0a090e010a0409
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa040a040a0a090e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80b0b010904010b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x572601
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x77]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x572633
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x57265b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x77]
cmp rsi, 0xf
jb 0x5725e7
jmp 0x57264f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f500
mov eax, edi
mov ecx, 0xf
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00572580

Function at 0x572ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x572da8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x736f6ca52d2b6911
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x65
movabs rdx, 0x200020304040402
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x400
xor eax, eax
jmp 0x572d43
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x65]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x65]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x572d70
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x572d9b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x572d26
jmp 0x572d8f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f500
mov eax, edi
mov ecx, 9
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00572ce0
Function at 0x5748e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5749c8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xdbc0dcdbc599d243
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa372e9a266bbe865
mov qword [rsp + 0x22], rdx
movabs rdx, 0x607090a02090c07
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6000a050f0d0607
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4030d0306010407
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x574961
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x80]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x574993
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5749bb
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x80]
cmp rsi, 0x10
jb 0x574947
jmp 0x5749af
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f500
mov eax, edi
mov ecx, 0x10
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005748e0

Function at 0x574d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x574e76
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x69826e45f0655946
mov qword [rsp + 0x19], rdx
movabs rdx, 0xfcffd9e35a6ff069
mov qword [rsp + 0x20], rdx
movabs rdx, 0x197367f81edde7d9
mov qword [rsp + 0x28], rdx
movabs rdx, 0x13080f16010b0c0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf120d11060c1113
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb03100c120e0f10
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x574e13
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x574e42
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x574e69
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x574df6
nop
jmp 0x574e5d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f500
mov eax, edi
mov ecx, 0x17
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.00574d80
Function at 0x5754c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5755a8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x766d6d6fd87a8176
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xee835adc4c156e76
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3000c070c0d0109
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90103000c070c0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0e090c030d0209
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x575541
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x12
jge 0x575573
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x57559b
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 0xf
jb 0x575527
jmp 0x57558f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f500
mov eax, edi
mov ecx, 0xf
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005754c0
Function at 0x5774c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5775d6
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x71656c775574664d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x69476185366f6d3f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6e6f69476185366f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x656c64265648794c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x121504120e0c0408
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc16010904070b12
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb0c01030c160109
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1601090c0b030015
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x57756e
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5775a2
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5775c9
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0x1a
jb 0x577554
nop
jmp 0x5775bd
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f500
mov eax, edi
mov ecx, 0x1a
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.005774c0

Function at 0x57a680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57a792
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x65f4b9721cbf65f0
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd0696bc1e65773b6
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc315d0696bc1e657
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf86cd0cb853ab65
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x19060f1900160b0f
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc02051015161006
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x608191118180c02
mov qword [rsp + 0x40], rdx
movabs rdx, 0x131313030b000f17
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x57a731
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1e
jge 0x57a75e
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x57a785
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x57a714
jmp 0x57a779
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f500
mov eax, edi
mov ecx, 0x1a
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0057a680
Function at 0x57ae80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57af68
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xaff1c27453b8c447
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x31be2cd7a8bd75af
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6010c0e07050d09
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10b0e0c06010c0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc01060a02020e0e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x57af01
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x57af33
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x57af5b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
cmp rsi, 0xf
jb 0x57aee7
jmp 0x57af4f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f500
mov eax, edi
mov ecx, 0xf
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0057ae80

Function at 0x57b200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57b2fc
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xcbb6bd16b1746547
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd119c3cbb6bd16b1
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57c308931e639f6a
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0a10090b07040b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80504110e0a1009
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90f1110060a0c03
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x57b290
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x67]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x57b2c8
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x57b2ef
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x67]
nop word [rax + rax]
cmp rsi, 0x13
jb 0x57b276
jmp 0x57b2e3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f500
mov eax, edi
mov ecx, 0x13
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.0057b200
Function at 0x57b840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57b948
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x65746a79cfb19490
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x738fbb99696e7465
mov qword [rsp + 0x22], rdx
movabs rdx, 0x877769a7c2646946
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90b02020315150c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x110d081303150215
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x31216010802110d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16050803050915
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x57b8e2
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1e
jge 0x57b90f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x57b93b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x17
jb 0x57b8c5
jmp 0x57b92f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f500
mov eax, edi
mov ecx, 0x17
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0057b840

Function at 0x57bfa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57c086
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x1dfdf665b8e0ce1c
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x57c213c5
movabs rdx, 0x90a02080a08030a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5090a02080a08
mov qword [rsp + 0x28], rdx
movabs rdx, 0x802030101020706
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x57c020
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x57c04d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x57c074
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xc
jb 0x57c002
jmp 0x57c068
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045f500
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0057bfa0
Function at 0x57c0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57c1b6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xd7ca93da5474d687
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xbf72b5b3d372ccce
mov qword [rsp + 0x25], rdx
movabs rdx, 0x4c241e6465bf72b5
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7c2767b97567c312
mov qword [rsp + 0x32], rdx
movabs rdx, 0x909070b1c011b06
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x150615050c000104
mov qword [rsp + 0x42], rdx
movabs rdx, 0x12050c1213041506
mov qword [rsp + 0x48], rdx
movabs rdx, 0x604190d160f0c08
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x57c14e
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x57c182
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x57c1a9
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x1d
jb 0x57c134
nop
jmp 0x57c19d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.0044a140
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045f500
mov eax, edi
mov ecx, 0x1d
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.0057c0a0

Function at 0x57c1e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57c2cb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6d8463713c744b47
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x537fa2748e7f6d84
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa0c090a030d0904
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x701040b0a0c090a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa060b080c03040a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x57c264
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x57c297
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x57c2be
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x57c247
jmp 0x57c2b2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f500
mov eax, edi
mov ecx, 0xe
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0057c1e0