joyce8/EMBER2024-capa huggingface dataset:
Function at 0x565e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x3bb1e6135917800b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x305010702000502
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x302
xor eax, eax
jmp 0x565e76
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x11]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x11]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x565ea2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x565ee5
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x565e5a
nop
jmp 0x565ed6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x565ec0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x565eaf
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461b40
mov eax, esi
mov ecx, 8
call fcn.00461b40
nop
int3

Function at 0x566be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x96ed5bdcad04b359
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x105050600050204
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x204
xor eax, eax
jmp 0x566c36
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x3d]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x3d]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x566c62
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x566ca5
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x566c1a
nop
jmp 0x566c96
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x566c80
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x566c6f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461b40
mov eax, esi
mov ecx, 8
call fcn.00461b40
nop
int3

Function at 0x5682a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x568367
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x517d6c9778835e40
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x7f6c737c
movabs rdx, 0x4080b0307000203
mov qword [rsp + 0x28], rdx
movabs rdx, 0x606010609090008
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x568308
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x568337
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x56835a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x5682eb
jmp 0x56834e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461b40
mov eax, edi
mov ecx, 0xc
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.005682a0
Function at 0x568aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x568b66
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6c7977327e7f7147
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x4e
movabs rdx, 0x200060103050805
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x502
xor eax, eax
nop
jmp 0x568b00
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x18]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x568b32
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x568b57
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x18]
cmp rsi, 9
jb 0x568ae2
jmp 0x568b4b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044c140
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461b40
mov eax, edi
mov ecx, 9
nop
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00568aa0

Function at 0x568b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x568c3d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2b644e2e0c617349
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x17
movabs rdx, 0x4080405030407
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 7
xor eax, eax
nop
jmp 0x568be0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x568c0d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x568c30
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x568bc2
jmp 0x568c24
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.0044c140
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461b40
mov eax, edi
mov ecx, 9
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.00568b80

Function at 0x568e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x568f27
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2018c47075cc34c5
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xbece2b2e
movabs rdx, 0xb0900070b0a0006
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50005010900020b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x568ec8
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x568ef7
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x568f1a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x568eab
jmp 0x568f0e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461b40
mov eax, edi
mov ecx, 0xc
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00568e60
Function at 0x569480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56954c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x49416e4708659be3
mov qword [rsp + 0x19], rdx
movabs rdx, 0x406c6449416e4708
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x106030a03070007
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4070604
xor eax, eax
jmp 0x5694e5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x56951c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x56953f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
cmp rsi, 0xb
jb 0x5694cb
jmp 0x569533
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044c140
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461b40
mov eax, edi
mov ecx, 0xb
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00569480

Function at 0x569a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x569add
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x67815533a3327340
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6c6b
movabs rdx, 0x806050807070308
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 5
xor eax, eax
jmp 0x569a80
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 1]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 1]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x569aad
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x569ad0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x569a62
jmp 0x569ac4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044c140
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461b40
mov eax, edi
mov ecx, 0xa
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.00569a20
Function at 0x569c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x569d5b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xbb5f0465a7f605c9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x646fd330aabb5f04
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7332c01b0ebcd9ef
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x103080f090a1112
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100713100d0e0500
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa0e000210071310
mov qword [rsp + 0x40], rdx
movabs rdx, 0x131203100e070d00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x569cf9
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x62]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x569d2b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x569d4e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x62]
cmp rsi, 0x15
jb 0x569cdf
jmp 0x569d42
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461b40
mov eax, edi
mov ecx, 0x15
call fcn.00461b40
nop
nop dword [rax + rax]
call fcn.0045f8c0
jmp fcn.00569c60

Function at 0x56bcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56bdbd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5374f99c13dbd18e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x93f6e0160e695374
mov qword [rsp + 0x20], rdx
movabs rdx, 0x28a1c990a04c89c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1111000f120b0a01
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0305110f100c02
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0104140e010d04
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9050b030415130d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x56bd60
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x56bd8d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x56bdb0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x56bd3f
jmp 0x56bda4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461b40
mov eax, edi
mov ecx, 0x16
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.0056bcc0
Function at 0x56cc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56cd0c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc297ef740f1fbc43
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x736197c297ef740f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7478edfcfb6fb3b8
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0302020f100107
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe050b100f020b10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6080c0f0e0e050f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x56ccaa
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x56]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x56ccdc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x56ccff
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x56]
cmp rsi, 0x13
jb 0x56cc90
jmp 0x56ccf3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461b40
mov eax, edi
mov ecx, 0x13
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.0056cc20

Function at 0x56d4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56d5bd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x193dbddc3a74d047
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x197970933d317427
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6f11706919797093
mov qword [rsp + 0x26], rdx
movabs rdx, 0xfad872126ecaded5
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x16120e081b080d16
mov qword [rsp + 0x36], rdx
movabs rdx, 0x81616120e081b08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x180412060b0c150a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5010316010f1607
mov qword [rsp + 0x48], rdx
movabs rdx, 0x120c1b161a141504
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x56d560
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x56d58d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x56d5b0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x56d53d
jmp 0x56d5a4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.0044c140
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461b40
mov eax, edi
mov ecx, 0x1c
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.0056d4a0
Function at 0x56f620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56f73d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa23614074404349
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x520d1c3d74373857
mov qword [rsp + 0x25], rdx
movabs rdx, 0x55520d1c3d743738
mov qword [rsp + 0x26], rdx
movabs rdx, 0x454d534954381540
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x61704120d020901
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1307061704120d02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20e04040f100c18
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1507100e02161513
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa0818110e171407
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x56f6e0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x56f70d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x56f730
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x56f6bd
jmp 0x56f724
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044c140
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461b40
mov eax, edi
mov ecx, 0x19
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.0056f620

Function at 0x56fa00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56fb1d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x328f9bc76156a1a6
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xae799bfc06ea5a65
mov qword [rsp + 0x23], rdx
movabs rdx, 0x3cae799bfc06ea5a
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf9b907c1b116b773
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x11718160a070f10
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd09130c01171816
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0b000f17130400
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa180d1806000a13
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb0c151614120705
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x56fac0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x2a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x56faed
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x56fb10
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x56fa9d
jmp 0x56fb04
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044c140
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461b40
mov eax, edi
mov ecx, 0x19
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.0056fa00
Function at 0x571480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57156a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7289538f72f19e81
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb37d958d7289538f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5732679b66ac6fa5
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb000b0206010108
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0a000909100b00
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0a0c0e08020904
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x57150d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x57153a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x57155d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x5714f0
jmp 0x571551
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461b40
mov eax, edi
mov ecx, 0x14
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00571480

Function at 0x572840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57291d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x838ea47551679b52
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc39091b0d675b4d8
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1060e0508090d0b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0701060e050809
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc070a080d070809
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x5728c0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x5728ed
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x572910
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x5728a2
jmp 0x572904
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461b40
mov eax, edi
mov ecx, 0x10
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.00572840
Function at 0x572940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x572a26
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x897279cc82a665f5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57749e6e939c7d6a
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc030d0e0e000d04
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0b080d0c030d0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x807070709050208
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x5729c0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x32]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x5729f2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x572a17
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x32]
cmp rsi, 0x10
jb 0x5729a2
jmp 0x572a0b
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461b40
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00572940

Function at 0x573140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57323d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xabb6aec6a8f0c553
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7440b9ba69c7dcab
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3b74c29e754a6553
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70c13110c02160a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x50d0113060b030a
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x816050d0113060b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1404090309050801
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5731e0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x57320d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x573230
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x5731bf
jmp 0x573224
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461b40
mov eax, edi
mov ecx, 0x17
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.00573140
Function at 0x575200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5752d2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb96f896d747187a0
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbb90e8805365b96f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7010d0100020b07
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50a010a0c0b0404
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x57526c
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x32]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x57529e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5752c5
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x32]
cmp rsi, 0xe
jb 0x575252
jmp 0x5752b5
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00461b40
mov eax, edi
mov ecx, 0xe
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00575200

Function at 0x5752e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5753fd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x38483b433d726058
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4b33557234341121
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4e411a694b335572
mov qword [rsp + 0x28], rdx
movabs rdx, 0x393d49546e3f5665
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11a030f1209070b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120d060513000116
mov qword [rsp + 0x40], rdx
movabs rdx, 0x818001b010d0a0e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x191508180111180a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x90e151501120115
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5753a0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x39]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x39]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x5753cd
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5753f0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x57537d
jmp 0x5753e4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.0044c140
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461b40
mov eax, edi
mov ecx, 0x1c
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.005752e0