joyce8/EMBER2024-capa huggingface dataset:
Function at 0x55fee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xe22a8767fe3d5f25
mov qword [rsp + 0x18], rax
movabs rax, 0x17ac3e14a07ea5d7
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1e]
movzx ecx, byte [rsp + 0x1d]
add eax, ecx
movzx ecx, byte [rsp + 0x1f]
movzx edx, byte [rsp + 0x19]
sub ecx, edx
movzx edx, byte [rsp + 0x1c]
movzx ebx, byte [rsp + 0x1a]
sub edx, ebx
movzx ebx, byte [rsp + 0x26]
movzx esi, byte [rsp + 0x20]
xor ebx, esi
movzx esi, byte [rsp + 0x27]
movzx edi, byte [rsp + 0x24]
add esi, edi
movzx edi, byte [rsp + 0x25]
movzx r8d, byte [rsp + 0x18]
sub edi, r8d
movzx r8d, byte [rsp + 0x23]
movzx r9d, byte [rsp + 0x22]
add r8d, r9d
movzx r9d, byte [rsp + 0x1b]
movzx r10d, byte [rsp + 0x21]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x55ffc6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x55ffba
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x561040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x91032ce11fc4c75c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x107050600060507
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x56108f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x49]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x49]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x5610ba
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5610f5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x561073
jmp 0x5610e9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5610d3
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x5610c7
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.004610a0
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.004610a0
nop
int3
Function at 0x561ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x561c67
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2ec9d07448d7e8d8
mov qword [rsp + 0x19], rdx
movabs rdx, 0xca5642ec9d07448
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x500030209060a00
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2010902
xor eax, eax
jmp 0x561c08
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x561c37
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x561c5a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x561beb
jmp 0x561c4e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044bb80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004610a0
mov eax, edi
mov ecx, 0xb
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00561ba0

Function at 0x5628e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5629b8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8b334a66756c6544
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x6c6c6472
movabs rdx, 0x508070000080802
mov qword [rsp + 0x26], rdx
movabs rdx, 0x700050807000008
mov qword [rsp + 0x28], rdx
movabs rdx, 0x805070708070304
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x562957
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0xc]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x562988
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5629ab
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x56293a
jmp 0x56299f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004610a0
mov eax, edi
mov ecx, 0xc
call fcn.004610a0
nop
call fcn.0045ee20
nop dword [rax]
jmp fcn.005628e0

Function at 0x563a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x563b06
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc7939e9a720d7375
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6ccb
movabs rdx, 0x505060402080206
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x708
xor eax, eax
jmp 0x563aa0
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x72]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x563ad2
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x563af7
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x72]
cmp rsi, 0xa
jb 0x563a82
jmp 0x563aeb
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.0044bb80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004610a0
mov eax, edi
mov ecx, 0xa
nop
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00563a40
Function at 0x5676a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56778c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x65caca20ff651243
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6c2b65caca20ff65
mov qword [rsp + 0x30], rdx
movabs rdx, 0x791aae6e06286e4b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6010f060f0f1106
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc0806010f060f0f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30f10040504110d
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x56772a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x56775c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x56777f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0x12
jb 0x567710
jmp 0x567773
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004610a0
mov eax, edi
mov ecx, 0x12
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.005676a0

Function at 0x5677a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56788c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7a7a417d70797287
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x827977777a7a417d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x578e45605d6e648c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x41211090b0c0f
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf0b08060a070004
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0f100006120d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x56782a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x56785c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x56787f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
cmp rsi, 0x14
jb 0x567810
jmp 0x567873
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004610a0
mov eax, edi
mov ecx, 0x14
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.005677a0
Function at 0x567b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x567c0a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6c7b6aaa70797e87
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8661656c7b6aaa70
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4e787a896e809b86
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa04060412000b05
mov qword [rsp + 0x32], rdx
movabs rdx, 0x40d120106100a04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x105120c0101100f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x567bad
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 9]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 9]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x567bda
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x567bfd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x567b90
jmp 0x567bf1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004610a0
mov eax, edi
mov ecx, 0x13
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00567b20

Function at 0x568180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x568266
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6b5890697c675d78
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9a9f4e658f6f7365
mov qword [rsp + 0x20], rdx
movabs rdx, 0x506000d0b0f0e06
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2030f0101090b0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50f05050f030706
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x568200
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1b]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x18
jge 0x568232
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x568257
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1b]
cmp rsi, 0x10
jb 0x5681e2
jmp 0x56824b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004610a0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00568180
Function at 0x568f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56901d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x58f115652e126511
mov qword [rsp + 0x18], rdx
movabs rdx, 0x72d9ecda8b79ce12
mov qword [rsp + 0x20], rdx
movabs rdx, 0xbea572d9ecda8b79
mov qword [rsp + 0x22], rdx
movabs rdx, 0x11226f2347d1c9e9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x212130910111007
mov qword [rsp + 0x32], rdx
movabs rdx, 0x21814050c100212
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1805130900070c07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3190805060b100d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110810160e160610
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x568fc0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x568fed
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x569010
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x568f9d
jmp 0x569004
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044bb80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004610a0
mov eax, edi
mov ecx, 0x1a
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.00568f00

Function at 0x569700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56982c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x7f75537b876d3848
mov qword [rsp + 0x18], rdx
movabs rdx, 0x4f6375656f5c6b4a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7c8575795a9d4f63
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5f6672836e6e8842
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1204101707181305
mov qword [rsp + 0x36], rdx
movabs rdx, 0x703180d02101a14
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1c170703180d0210
mov qword [rsp + 0x40], rdx
movabs rdx, 0x121c001609111510
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4090b080117100a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d0f050513020f13
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5697c6
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x27]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x2a
jge 0x5697fc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1e
jae 0x56981f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x27]
cmp rsi, 0x1e
jb 0x5697ac
jmp 0x569813
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
call fcn.0044bb80
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.004610a0
mov eax, edi
mov ecx, 0x1e
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00569700
Function at 0x569840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56994c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7228cf46ba746531
mov qword [rsp + 0x19], rdx
movabs rdx, 0x72bf4698c6a97469
mov qword [rsp + 0x21], rdx
movabs rdx, 0xd372bf4698c6a974
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6c03845377e67470
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x100e0616000d0c04
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa00140506140e17
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x613060406170a00
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60b16170d0c0e03
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5698e8
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x56991c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x56993f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7a]
cmp rsi, 0x19
jb 0x5698ce
jmp 0x569933
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004610a0
mov eax, edi
mov ecx, 0x19
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00569840

Function at 0x56ba60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56bb5b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7cefe8756e6f6f4c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xfd6c0376ca7cefe8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x98a6e99e90aefed
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50f14130f0c1114
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa03101412070607
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x70d0d03050c0a03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120a06080e05120c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x56baf9
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x56bb2b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x56bb4e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5e]
cmp rsi, 0x15
jb 0x56badf
jmp 0x56bb42
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004610a0
mov eax, edi
mov ecx, 0x15
call fcn.004610a0
nop
nop dword [rax + rax]
call fcn.0045ee20
jmp fcn.0056ba60
Function at 0x56d200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56d2fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x635232172131c40
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd76f25d6de692106
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3f226ccaa609256b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1001615140b1611
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc0e080613081007
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x80b080a12020c0e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20c0c0a08051404
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x56d299
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x56d2cb
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x56d2ee
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2e]
cmp rsi, 0x17
jb 0x56d27f
jmp 0x56d2e2
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004610a0
mov eax, edi
mov ecx, 0x17
call fcn.004610a0
nop
nop dword [rax + rax]
call fcn.0045ee20
jmp fcn.0056d200

Function at 0x5706a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57077d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd075a916537465cd
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x17256e1bc174bcd0
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa0d000708050808
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd040a0d00070805
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0807000e070e05
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x570720
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x61]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x57074d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x570770
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x570702
jmp 0x570764
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004610a0
mov eax, edi
mov ecx, 0xf
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.005706a0
Function at 0x571100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5711dd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x72fbf97472f57353
mov qword [rsp + 0x19], rdx
movabs rdx, 0x890096189272fbf9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc06050b0603010b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa020c06050b0603
mov qword [rsp + 0x28], rdx
movabs rdx, 0x606020908090908
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x571180
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x7e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x7e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x5711ad
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5711d0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x571162
jmp 0x5711c4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.004610a0
mov eax, edi
mov ecx, 0xd
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.00571100
Function at 0x573180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57326c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4e19652a74dacc43
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xbc614e19652a74da
mov qword [rsp + 0x20], rdx
movabs rdx, 0xba826eda3cd043ba
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6020e01020c0b0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0b0d0604021009
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2010209110d0109
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x57320a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x57323c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x57325f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0x12
jb 0x5731f0
jmp 0x573253
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004610a0
mov eax, edi
mov ecx, 0x12
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00573180

Function at 0x573500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5735ec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e8a864f8b6e969d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x74b1828c6e8a864f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x88879270b3539365
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0a020006111312
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa0d08050f0a0200
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x81210060f030901
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x57358a
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x31]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x14
jge 0x5735bc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5735df
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x31]
cmp rsi, 0x14
jb 0x573570
jmp 0x5735d3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004610a0
mov eax, edi
mov ecx, 0x14
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00573500
Function at 0x574de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x574eca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3d70c8ef625c6e44
mov qword [rsp + 0x19], rdx
movabs rdx, 0x643d70c8ef625c6e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xfbf0724625d269f9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x100c0c1007100305
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x100205010102100c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb090c02040f0604
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x574e6d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x70]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x70]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x574e9a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x574ebd
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x574e50
jmp 0x574eb1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004610a0
mov eax, edi
mov ecx, 0x11
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.00574de0

Function at 0x575ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x575b7d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc9096c96c3fdd343
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x78cb
movabs rdx, 0x708040807060207
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3030701
xor eax, eax
jmp 0x575b20
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x575b4d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x575b70
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x575b03
jmp 0x575b64
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044bb80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004610a0
mov eax, edi
mov ecx, 0xa
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.00575ac0