joyce8/EMBER2024-capa huggingface dataset:
Function at 0x562720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5627e7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfe093e6508ca65d5
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xebb5da0e
movabs rdx, 0x603030b02080507
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0900070a070906
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x562788
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x70]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x70]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x5627b7
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x5627da
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x56276b
jmp 0x5627ce
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00562720

Function at 0x562f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x562fcc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2e32bfb5a9a58873
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8d87572e32bfb5a9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x508020201030401
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa01080302090508
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x562f6f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x11]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x11]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x562f9c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x562fbf
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x562f52
jmp 0x562fb3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00562f00

Function at 0x5631c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x563286
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x64443269723f733d
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x1117
movabs rdx, 0x906020606040400
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x408
xor eax, eax
jmp 0x563220
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 8]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x563252
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x563277
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 8]
cmp rsi, 0xa
jb 0x563202
jmp 0x56326b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005631c0
Function at 0x5632a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x563367
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x81946eb2b9988f88
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa1966081946eb2b9
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa06060301090704
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7080002
xor eax, eax
jmp 0x563308
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x19]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x19]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x563337
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x56335a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x5632eb
jmp 0x56334e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005632a0

Function at 0x563420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5634e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x886482717f6e693c
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x8d
movabs rdx, 0x804050005080703
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x403
xor eax, eax
nop
jmp 0x563480
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x17]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5634b2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x5634d7
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x17]
cmp rsi, 9
jb 0x563462
jmp 0x5634cb
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00563420
Function at 0x564180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56426c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xdf2a1361c45f34be
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe01fdf2a1361c45f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x59f5073291ff69a4
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60c07010d090305
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90a05000f0f0d11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9010a10090d0508
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x56420a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x56423c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x56425f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0x12
jb 0x5641f0
jmp 0x564253
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00564180
Function at 0x5666e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5667dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xcfad7297ab6e31fa
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xaa67d069c574cfad
mov qword [rsp + 0x20], rdx
movabs rdx, 0xbc648ddc6fbd8c9f
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd10101207130012
mov qword [rsp + 0x30], rdx
movabs rdx, 0x603040e04120b0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0e150001100e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x913150f13100e10
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x566780
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x5667ad
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5667d0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x56675f
jmp 0x5667c4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005666e0

Function at 0x566b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x566bcc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xedf17c74fceddf43
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf9efff7becebedf1
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0503080a050506
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0d090b06010207
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x566b6f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x566b9c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x566bbf
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x566b52
jmp 0x566bb3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00566b00
Function at 0x567460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56755b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2a736e5966727544
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x364c586b652a736e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6565276542367444
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf0a0c0909050111
mov qword [rsp + 0x34], rdx
movabs rdx, 0x131314070d030a10
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x314140913131407
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb090b10120a0904
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5674f9
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x10]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x56752b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x56754e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x10]
cmp rsi, 0x15
jb 0x5674df
jmp 0x567542
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00567460
Function at 0x56a920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56aa0c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa9926b0154b7b396
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6601fda9926b0154
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x30bceba4bd6d72af
mov qword [rsp + 0x24], rdx
movabs rdx, 0x710041211020904
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0b080007100412
mov qword [rsp + 0x30], rdx
movabs rdx, 0x907010f09040600
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x56a9aa
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x56a9dc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x56a9ff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0x13
jb 0x56a990
jmp 0x56a9f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0056a920

Function at 0x56c120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56c206
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7987cfa19a6bcb9b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8f26a0c7718e7987
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10a080104090c08
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50d0b08010a0801
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6010a03090d0007
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x56c1a0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x56c1d2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x56c1f7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
cmp rsi, 0xe
jb 0x56c182
jmp 0x56c1eb
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0056c120
Function at 0x56c8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56c97d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x61b943539cac8482
mov qword [rsp + 0x18], rdx
movabs rdx, 0xab7277d87f9c61b9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6020d060a090606
mov qword [rsp + 0x26], rdx
movabs rdx, 0x206020d060a09
mov qword [rsp + 0x28], rdx
movabs rdx, 0x803010d0d09060b
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x56c920
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x13]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x13]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x56c94d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x56c970
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x56c902
jmp 0x56c964
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0056c8a0

Function at 0x56dcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56dd87
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd70a46ccb676577
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8899db0d70a46ccb
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x609030609070800
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5060a00
xor eax, eax
jmp 0x56dd28
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x56dd57
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x56dd7a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x56dd0b
jmp 0x56dd6e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0056dcc0
Function at 0x56fec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56ffcc
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe2ccc2cad64a25fd
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x726373d658c174b7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7069726373d658c1
mov qword [rsp + 0x24], rdx
movabs rdx, 0x27c32072475ded74
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x19130b0a00081314
mov qword [rsp + 0x34], rdx
movabs rdx, 0x50a0703080002
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc02031300050a07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1304010418060617
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x56ff68
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x56ff9c
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x56ffbf
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x1a
jb 0x56ff4e
jmp 0x56ffb3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0056fec0
Function at 0x571b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x571c1a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6125eb0974182d47
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x17021cf165312574
mov qword [rsp + 0x22], rdx
movabs rdx, 0x74faf3cd17021cf1
mov qword [rsp + 0x26], rdx
movabs rdx, 0x74dff7fa6ef43df1
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x190a141012150e0d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1401190a14101215
mov qword [rsp + 0x38], rdx
movabs rdx, 0x916000204051515
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf1009060c09050e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1104010d180a1a01
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x571bb7
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x22
jge 0x571be9
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x571c0d
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0x1c
jb 0x571b9d
jmp 0x571c01
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.00571b00
Function at 0x572940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x572a4c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8b8bad4674728da4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x867c7c8a74728073
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8157867c7c8a7472
mov qword [rsp + 0x28], rdx
movabs rdx, 0x63726f81617b9b73
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8120c1406050700
mov qword [rsp + 0x38], rdx
movabs rdx, 0x14190f0019130601
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf150d0010080e09
mov qword [rsp + 0x48], rdx
movabs rdx, 0x808070011160507
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5729e8
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x572a1c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x572a3f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2e]
cmp rsi, 0x1a
jb 0x5729ce
jmp 0x572a33
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00572940

Function at 0x572a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x572b5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2a6b69fc74208843
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcfd0c9f02a6b69fc
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe0176fb2936e3a83
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf06130b060c0b01
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4080c011010090c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf06131210040408
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf09020d020a0b07
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x572b00
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x61]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x572b2d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x572b50
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x572adf
jmp 0x572b44
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00572a60
Function at 0x572b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x572c6a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa387a6c05f7268ac
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb5a387a6c05f7268
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9e6da87b6e908aa5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50a090d07080e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x300100e060b0e04
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf080a0a0104050d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x572c0d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x572c3a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x572c5d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x572bf0
jmp 0x572c51
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00572b80

Function at 0x572d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x572e5d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xc8bcbd46bf5f0843
mov qword [rsp + 0x18], rdx
movabs rdx, 0x7d696669547209f5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3a617d6966695472
mov qword [rsp + 0x22], rdx
movabs rdx, 0x74afbeb306bfe165
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80f0611080b1618
mov qword [rsp + 0x32], rdx
movabs rdx, 0x60102130b0f080f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140f150509070b0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1707061402130914
mov qword [rsp + 0x48], rdx
movabs rdx, 0x209050601010303
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x572e00
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x572e2d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x572e50
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x572ddd
jmp 0x572e44
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00572d40
Function at 0x573480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x573552
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7965706674757873
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6b56436253796570
mov qword [rsp + 0x22], rdx
movabs rdx, 0x907020a00010b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90104000c0009
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5734ec
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x10]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x57351e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x573545
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x10]
cmp rsi, 0xd
jb 0x5734d2
jmp 0x573535
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00573480

Function at 0x573de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x573eca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xdb65441f068ba736
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa3db65441f068ba7
mov qword [rsp + 0x20], rdx
movabs rdx, 0x74e5c2bd824fc2d0
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0e0203030c0409
mov qword [rsp + 0x30], rdx
movabs rdx, 0x807090a0102000c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc07030f0307020f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x573e6d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x573e9a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x573ebd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x573e50
jmp 0x573eb1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00573de0