joyce8/EMBER2024-capa huggingface dataset:
Function at 0x56ab00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56ac08
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8cf2724674b1e6e0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x580e262f572d543
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc9f10580e262f572
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6571646ced6e4965
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10c0b1606180509
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110e020001171711
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71015010f110b06
mov qword [rsp + 0x48], rdx
movabs rdx, 0x909100d09110c0d
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x56abab
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x56abd8
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x56abfb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x56ab8e
jmp 0x56abef
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0056ab00

Function at 0x56bca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56bd8a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf76544a670a5a943
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xcaf76544a670a5a9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x74b803a2a2a465a0
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc07060b09080608
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2090c07060b0908
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd02040c0e0d010f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x56bd2d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x56bd5a
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x56bd7d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x56bd10
jmp 0x56bd71
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0056bca0
Function at 0x56ce20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56cefd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74703de3342a03ee
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1d12a24927e9ad74
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe000a0a0e08040c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0c09030e000a0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50203010d000304
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x56cea0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x50]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x50]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x56cecd
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x56cef0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x56ce82
jmp 0x56cee4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0056ce20

Function at 0x56dc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56dd3d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4e0e05196ef75012
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1170ff501a64e8c0
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1080f01020f050d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf0a000901080f01
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb04080a0601060f
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x56dce0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x6c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x6c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x56dd0d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x56dd30
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x56dcc2
jmp 0x56dd24
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0056dc60
Function at 0x56e720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56e7ec
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x695aded661dedf43
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb4ce39695aded661
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x409050208060609
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xa060108
xor eax, eax
jmp 0x56e785
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7c]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x56e7bc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x56e7df
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7c]
cmp rsi, 0xb
jb 0x56e76b
jmp 0x56e7d3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0056e720

Function at 0x56eb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56ec46
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1db57f1b12f813ab
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5718630e6a62f116
mov qword [rsp + 0x26], rdx
movabs rdx, 0x108030c0508
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90600000108030c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10400000e070209
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x56ebe0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x56ec12
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x56ec37
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
cmp rsi, 0x10
jb 0x56ebc2
jmp 0x56ec2b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0056eb60
Function at 0x56ef60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56f046
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x144e65a161b00eb8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5265c069c726a96d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40204000b0a0f02
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40b040204000b0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9070207010d0107
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x56efe0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x56f012
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x56f037
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0x10
jb 0x56efc2
jmp 0x56f02b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0056ef60

Function at 0x56f0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56f1ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x72d665dba5c896a6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5773768acad172d6
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb00010a0a090203
mov qword [rsp + 0x28], rdx
movabs rdx, 0x803060208060403
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x56f14f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x56f17c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x56f19f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x56f132
jmp 0x56f193
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0056f0e0
Function at 0x56fc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56fd68
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6f56a5975c6c6568
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x776d4b65595b6b6f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9174826d6f507f7c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3050510090a0016
mov qword [rsp + 0x36], rdx
movabs rdx, 0x40803050510090a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc090a16140d0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x416130c08031003
mov qword [rsp + 0x48], rdx
movabs rdx, 0x30f03030e0e0e08
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x56fd0b
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x15]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x15]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x22
jge 0x56fd38
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x56fd5b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x56fcee
jmp 0x56fd4f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0056fc60

Function at 0x571980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x571a8c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x41d20ebe36c08646
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6f4d65c1b1c79fcc
mov qword [rsp + 0x21], rdx
movabs rdx, 0xd56f4d65c1b1c79f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb3bb0069d1cd26b8
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x610070108170313
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa12130712080501
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x14160a0813090a12
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb1114040c020118
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x571a28
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x571a5c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x571a7f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x19
jb 0x571a0e
jmp 0x571a73
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00571980
Function at 0x571de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x571ebd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x797f517c64656762
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7571747143716d79
mov qword [rsp + 0x24], rdx
movabs rdx, 0x90506090c070200
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10d0b0009050609
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0e050c0d040009
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x571e60
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0xe]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x571e8d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x571eb0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x571e42
jmp 0x571ea4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00571de0

Function at 0x573940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x573a12
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xebd76ef27b74fcf4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x364094d92c6ebd7
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd03060009000b0d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x803070d01040d03
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x5739ac
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x5739de
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x573a05
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 0xe
jb 0x573992
jmp 0x5739f5
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00573940
Function at 0x5743a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57448c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xcfddf1844747d47
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1ffb720cfddf1844
mov qword [rsp + 0x22], rdx
movabs rdx, 0x64784503ee7ff653
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x705090a04090f06
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd0d0d0c01090705
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0e0d090c010d12
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x57442a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x57445c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x57447f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5f]
cmp rsi, 0x13
jb 0x574410
jmp 0x574473
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005743a0

Function at 0x574c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x574d6a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x43e8fdc5e5d365c5
mov qword [rsp + 0x18], rdx
movabs rdx, 0x646f43e8fdc5e5d3
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1fd536636b722d65
mov qword [rsp + 0x22], rdx
movabs rdx, 0x31105030503060d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x110210060d030311
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40f100b0b0f0200
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x574d0d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x41]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x41]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x574d3a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x574d5d
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x574cf0
jmp 0x574d51
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00574c80
Function at 0x575280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57539a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6a7b8c696e827971
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7a68616d5f445177
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6d6f7a68616d5f44
mov qword [rsp + 0x26], rdx
movabs rdx, 0x314c6482616c8e42
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x180016020f051305
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe16180016020f05
mov qword [rsp + 0x38], rdx
movabs rdx, 0x802160f13060a11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70102060903010b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1114031903070509
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x575337
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x23]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x22
jge 0x575369
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x57538d
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x23]
cmp rsi, 0x1a
jb 0x57531d
jmp 0x575381
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.00575280

Function at 0x576100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5761fb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x393f4a2d4c74221a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x55393a393f4a2d4c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x304339693c1c4650
mov qword [rsp + 0x26], rdx
movabs rdx, 0x110b070100120b04
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x110d0a050d091211
mov qword [rsp + 0x36], rdx
movabs rdx, 0x9110d0a050d09
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10e061008080c07
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x576199
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 2]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1a
jge 0x5761cb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5761ee
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 2]
cmp rsi, 0x13
jb 0x57617f
jmp 0x5761e2
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00576100
Function at 0x5774e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5775ec
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xe6656d61c8d811de
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6d45e4488070756f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xbf707461c80797eb
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10f0e1609101211
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf08010f0e160910
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110913080212080b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90e0d010b071600
mov qword [rsp + 0x48], rdx
movabs rdx, 0x70f101017031111
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x577588
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x5775bc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x5775df
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5f]
cmp rsi, 0x18
jb 0x57756e
jmp 0x5775d3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005774e0

Function at 0x5777e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5778dd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x79e8917696086547
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x11088179e8917696
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x715867de4983ee4
mov qword [rsp + 0x26], rdx
movabs rdx, 0x605050f03100e0b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20f08030c030d07
mov qword [rsp + 0x36], rdx
movabs rdx, 0x110a020f08030c03
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1010030d09070812
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x577880
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x7a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x7a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x5778ad
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5778d0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x57785f
jmp 0x5778c4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005777e0
Function at 0x579020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57910a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x13282b680d19122b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3713282b680d1912
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57130a614ed574e5
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90f030e0b020301
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe0e090f030e0b02
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5060708020f0e00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5790ad
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x5a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x5a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x5790da
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5790fd
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x579090
jmp 0x5790f1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00579020

Function at 0x579120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5791f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe2152534f674fdde
mov qword [rsp + 0x19], rdx
movabs rdx, 0x576f6618062608e2
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb05030608000103
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0a090401080407
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x57918c
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x35]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x5791be
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5791e5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x35]
cmp rsi, 0xf
jb 0x579172
jmp 0x5791d5
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00579120