joyce8/EMBER2024-capa huggingface dataset:
Function at 0x565320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x3e6a9eeb4546a77d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x104050704050702
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4000202
xor eax, eax
jmp 0x565375
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x5653a8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5653e5
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 5]
nop dword [rax]
cmp rbx, 8
jb 0x56535b
jmp 0x5653d7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x5653c1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x5653b5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3

Function at 0x5660c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x2fd3ec44875a6a51
mov qword [rsp + 0x18], rax
movabs rax, 0x23e19f4f93af809b
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1a]
movzx ecx, byte [rsp + 0x22]
sub eax, ecx
movzx ecx, byte [rsp + 0x1b]
movzx edx, byte [rsp + 0x25]
sub ecx, edx
movzx edx, byte [rsp + 0x21]
movzx ebx, byte [rsp + 0x26]
xor edx, ebx
movzx ebx, byte [rsp + 0x20]
movzx esi, byte [rsp + 0x1e]
sub ebx, esi
movzx esi, byte [rsp + 0x23]
movzx edi, byte [rsp + 0x1f]
sub esi, edi
movzx edi, byte [rsp + 0x27]
movzx r8d, byte [rsp + 0x19]
add edi, r8d
movzx r8d, byte [rsp + 0x24]
movzx r9d, byte [rsp + 0x1c]
add r8d, r9d
movzx r9d, byte [rsp + 0x1d]
movzx r10d, byte [rsp + 0x18]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x5661a6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x56619a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x566440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x29b7d0757ed4a01
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x105050402020700
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7030003
xor eax, eax
jmp 0x566495
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x5664c8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x566505
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x5d]
nop dword [rax]
cmp rbx, 8
jb 0x56647b
jmp 0x5664f7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x5664e1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x5664d5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3

Function at 0x566c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x404975749fec6d01
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x701020502030600
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x602
xor eax, eax
jmp 0x566cd6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x64]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x566d02
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x566d45
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x566cba
nop
jmp 0x566d36
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x566d20
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x566d0f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3
Function at 0x568e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x11b60f98ffd7562e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x603000707050607
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x607
xor eax, eax
jmp 0x568e54
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x568e88
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x568ec5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x35]
nop dword [rax + rax]
cmp rbx, 8
jb 0x568e3a
jmp 0x568eb7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x568ea1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x568e95
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3

Function at 0x569160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xbc2df11c10311993
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x607060003070007
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5030006
xor eax, eax
jmp 0x5691b5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x31]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x5691e8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x569225
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x31]
nop dword [rax]
cmp rbx, 8
jb 0x56919b
jmp 0x569217
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x569201
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x5691f5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3
Function at 0x56aa40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56ab07
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xbfa2ccc0098f6e64
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x1422
movabs rdx, 0x305080203040307
mov qword [rsp + 0x22], rdx
movabs rdx, 0x608080609030305
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x56aaa7
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x5f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x5f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x56aad7
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x56aafa
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x56aa8a
jmp 0x56aaee
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00463f80
mov eax, edi
mov ecx, 0xa
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0056aa40

Function at 0x56b660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56b726
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x75a9b3eea5617370
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x2e
movabs rdx, 0x606040605070806
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x304
xor eax, eax
nop
jmp 0x56b6c0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x56b6f2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x56b717
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
cmp rsi, 9
jb 0x56b6a2
jmp 0x56b70b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00463f80
mov eax, edi
mov ecx, 9
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0056b660

Function at 0x56c720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56c7ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc8c10f09bdc76580
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6cb32cc8c10f09bd
mov qword [rsp + 0x20], rdx
movabs rdx, 0x504000703060309
mov qword [rsp + 0x28], rdx
movabs rdx, 0x206060804050606
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x56c78f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x47]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x56c7bc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x56c7df
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x56c772
jmp 0x56c7d3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00463f80
mov eax, edi
mov ecx, 0xb
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0056c720
Function at 0x5721a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5722ac
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7d6263553c783e47
mov qword [rsp + 0x18], rdx
movabs rdx, 0x516b6e6951795b52
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7069516b6e695179
mov qword [rsp + 0x22], rdx
movabs rdx, 0x874d5051475b3d85
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x207181412141914
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd070c0e17090119
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x30b041901060d07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x160f031308140906
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x572248
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x14]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1e
jge 0x57227c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x57229f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x14]
cmp rsi, 0x1a
jb 0x57222e
jmp 0x572293
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00463f80
mov eax, edi
mov ecx, 0x1a
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.005721a0

Function at 0x5722c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5723da
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xadf4636590fdae47
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8ff673cbd8797469
mov qword [rsp + 0x23], rdx
movabs rdx, 0xe770748ff673cbd8
mov qword [rsp + 0x26], rdx
movabs rdx, 0x68c86710b694adac
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60e170216130714
mov qword [rsp + 0x36], rdx
movabs rdx, 0x206060e17021613
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1701170e0c010b19
mov qword [rsp + 0x40], rdx
movabs rdx, 0x19030f1212120c0b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x150c0f0e15061003
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x572377
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x22
jge 0x5723a9
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x5723cd
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4e]
cmp rsi, 0x1b
jb 0x57235d
jmp 0x5723c1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1b
call fcn.0044e180
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00463f80
mov eax, edi
mov ecx, 0x1b
call fcn.00463f80
nop
call fcn.00461d00
nop
jmp fcn.005722c0
Function at 0x574880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57493d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xfc169f561bc7358
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x64a2
movabs rdx, 0x808060802000800
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6070004
xor eax, eax
jmp 0x5748e0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x60]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x60]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x57490d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x574930
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x5748c3
jmp 0x574924
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00463f80
mov eax, edi
mov ecx, 0xa
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.00574880

Function at 0x574960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x574a3d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x51136cec6cf925f6
mov qword [rsp + 0x18], rdx
movabs rdx, 0x64384721486f5113
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20a040103010002
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc04020a04010301
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9070b0106060c00
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x5749e0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x44]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x44]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x574a0d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x574a30
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x5749c2
jmp 0x574a24
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00463f80
mov eax, edi
mov ecx, 0xe
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.00574960

Function at 0x575a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x575b4c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd34d02c1d3657e4f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xbdcb65b1616ed34d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70101050c0c0105
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x30a040d0a050701
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x575aef
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x57]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x57]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x575b1c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x575b3f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x575ad2
jmp 0x575b33
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00463f80
mov eax, edi
mov ecx, 0xe
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00575a80
Function at 0x57a240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57a34c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa5b12e0bdb2d3c43
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x556925722243f174
mov qword [rsp + 0x22], rdx
movabs rdx, 0x413ad92663695569
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6572281ffc091872
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1309121506181303
mov qword [rsp + 0x38], rdx
movabs rdx, 0x14031b070f060d0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4191b021a051309
mov qword [rsp + 0x48], rdx
movabs rdx, 0x102170b02181414
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x57a2e8
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x15]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x57a31c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x57a33f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x15]
cmp rsi, 0x1e
jb 0x57a2ce
jmp 0x57a333
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.0044e180
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00463f80
mov eax, edi
mov ecx, 0x1e
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0057a240

Function at 0x57a360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57a468
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1a70754463223204
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3c34434f7453343f
mov qword [rsp + 0x21], rdx
movabs rdx, 0x7453634f663a2c3c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x572e6574f3342112
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100e070817081a0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x109180219110000
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8031d03130c0f0f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130f101e150a0e02
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x57a40b
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x47]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x47]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x57a438
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x57a45b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1f
jb 0x57a3ee
jmp 0x57a44f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.0044e180
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00463f80
mov eax, edi
mov ecx, 0x1f
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0057a360
Function at 0x57ac00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57acec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x99b4abb7e9e865dc
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf761c24399b4abb7
mov qword [rsp + 0x30], rdx
movabs rdx, 0x657286eab0a649fa
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20b001104070903
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf09060c020b0011
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x602050e110b0210
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x57ac8a
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x58]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x14
jge 0x57acbc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x57acdf
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x58]
cmp rsi, 0x14
jb 0x57ac70
jmp 0x57acd3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00463f80
mov eax, edi
mov ecx, 0x14
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0057ac00

Function at 0x57b540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57b62a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc6ea3c47b5cace2b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc8d4c6ea3c47b5ca
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4eab6eca4aea53de
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1105030500100e01
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50d031002111007
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc060a0503030908
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x57b5cd
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x57b5fa
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x57b61d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x57b5b0
jmp 0x57b611
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00463f80
mov eax, edi
mov ecx, 0x12
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0057b540
Function at 0x57bc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57bd7d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x3d7265667452654e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5c69744c45286b40
mov qword [rsp + 0x26], rdx
movabs rdx, 0x61684353302d1451
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7963690f44426e4a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x130a041a1c0c1208
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1311130a041a1c0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40f0b08121b0c04
mov qword [rsp + 0x48], rdx
movabs rdx, 0x13000702100b1018
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1414021a091b1304
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x57bd20
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x57bd4d
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x57bd70
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x20
jb 0x57bcfd
jmp 0x57bd64
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x20
call fcn.0044e180
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00463f80
mov eax, edi
mov ecx, 0x20
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.0057bc60
Function at 0x57dde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57deac
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6081767482586591
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x7949
movabs rdx, 0x407030205080200
mov qword [rsp + 0x22], rdx
movabs rdx, 0x407060306040407
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x57de44
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x13]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x57de7c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x57de9f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x13]
cmp rsi, 0xa
jb 0x57de2a
jmp 0x57de93
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00463f80
mov eax, edi
mov ecx, 0xa
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0057dde0

Function at 0x57ec20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57ecec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x94687c746165ae98
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xb49b6e9c
movabs rdx, 0x70001070b00000a
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb060a05000b0508
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x57ec85
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x57ecbc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x57ecdf
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2c]
cmp rsi, 0xc
jb 0x57ec6b
jmp 0x57ecd3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00463f80
mov eax, edi
mov ecx, 0xc
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0057ec20