joyce8/EMBER2024-capa huggingface dataset:
Function at 0x54b1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x54b306
sub rsp, 0xc0
mov qword [rsp + 0xb8], rbp
lea rbp, [rsp + 0xb8]
movabs rdx, 0x2387fb326f6f4019
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x72753c2c20631623
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5a70829183259463
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5e2a6e044dce0a97
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6e432c20324bbf5e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x876c69f7d865e721
mov qword [rsp + 0x44], rdx
movabs rdx, 0x50656f44fd72fa3b
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x2078c220280e741f
mov qword [rsp + 0x54], rdx
movabs rdx, 0xd0d96030ede83031
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x46200e140b052e32
mov qword [rsp + 0x64], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x00762668]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045835a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x54b299
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x54
jge 0x54b2cb
movzx edx, byte [rsp + rax + 0x64]
movzx esi, byte [rsp + rax + 0x65]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x54b2f8
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 0x47
jb 0x54b27f
jmp 0x54b2ec
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x47
call fcn.00444d40
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
mov eax, esi
mov ecx, 0x47
call fcn.00457d20
mov eax, edi
mov ecx, 0x47
nop
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.0054b1a0

Function at 0x54c5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54c6f2
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xa66e72c99618e911
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3d3a323a204925ed
mov qword [rsp + 0x22], rdx
movabs rdx, 0x333126613d3a323a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xeee68e53f1c9345
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x112020800071503
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1b13111613061a18
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x9141b1311161306
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe1215040d1b03
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf1b170a17120c1a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x18140f0f0d13140e
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x54c68f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x5b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x2a
jge 0x54c6bc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x54c6e5
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x54c672
jmp 0x54c6d7
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.00444d40
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
nop
call fcn.00457d20
mov eax, edi
mov ecx, 0x1c
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.0054c5c0
Function at 0x5509a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x550ad2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xc8a5726574b99574
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x736569bfae6e34d4
mov qword [rsp + 0x25], rdx
movabs rdx, 0x47e0681361709f73
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2c2b2f61ae9fe17e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x101e131a081d1e1d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1c0b131909001817
mov qword [rsp + 0x44], rdx
movabs rdx, 0xe1018151c0b1319
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60e18161d010801
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc1a090b091a1800
mov qword [rsp + 0x58], rdx
movabs rdx, 0x9021e0700180c17
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x550a6f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x15]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x15]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x2c
jge 0x550a9c
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x550ac5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1f
jb 0x550a52
jmp 0x550ab7
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1f
call fcn.00444d40
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x1f
nop
call fcn.00457d20
mov eax, edi
mov ecx, 0x1f
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005509a0

Function at 0x5511c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5512d2
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x50b36cba447496b7
mov qword [rsp + 0x18], rdx
movabs rdx, 0x10748fba726f66d2
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6e6f10748fba726f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3690bcdef7ad57bf
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x180f1918031608
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd15000812070f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x60f17131614000d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40c070106191704
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x551271
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1e
jge 0x55129e
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5512c5
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x551254
jmp 0x5512b9
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457d20
mov eax, edi
mov ecx, 0x1a
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005511c0
Function at 0x5634c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x563586
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xafb3e009873d65d6
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x504070305000203
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6000507
xor eax, eax
jmp 0x563520
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x41]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x41]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x56354d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x563574
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 8
jb 0x563502
jmp 0x563568
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00457d20
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005634c0

Function at 0x5637e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5638e8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xb96f9192469a9482
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x90c34020b96f9192
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x206787653ec5697f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0b040f07020511
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb0a091202021103
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb0b0a09120202
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1311000c130a0100
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x563880
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x5638b2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5638db
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
cmp rsi, 0x14
jb 0x563865
jmp 0x5638cf
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457d20
mov eax, edi
mov ecx, 0x14
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005637e0
Function at 0x563ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x563c96
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x63cfad4ccc6e6063
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6163cfad4ccc6e60
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20829f844b924073
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1090c03050c0e0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb060a030f090403
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50e0c0b0b0c0d0d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x563c33
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 4]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 4]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x563c62
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x563c89
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x563c16
nop
jmp 0x563c7d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457d20
mov eax, edi
mov ecx, 0x11
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.00563ba0

Function at 0x564920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x564a28
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x734ee134915d31e9
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4cf9dc4372e4c873
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf1cbf1456593d7e9
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x100d03051100110a
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf050f0b0a140c07
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x160e06150f050f0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8150208050c0916
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5649c0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x48]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x5649f2
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x564a1b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x48]
cmp rsi, 0x17
jb 0x5649a5
jmp 0x564a0f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457d20
mov eax, edi
mov ecx, 0x17
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00564920
Function at 0x565280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x565376
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x748e6e7f20a99fb0
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8c573d748e6e7f20
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc874619c72828081
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x904010906071201
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb02070c12010904
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40f080b04000d0a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x565313
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 8]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 8]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x565342
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x565369
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x5652f6
nop
jmp 0x56535d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457d20
mov eax, edi
mov ecx, 0x13
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.00565280

Function at 0x5656a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5657a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xceab3580336e31bb
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb3056241c5c100ce
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5f46cf45656bc17e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4100402080e0607
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe060009060d09
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x110e000e06000906
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa090e02140f09
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x565742
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x73]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1a
jge 0x56576f
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x56579b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x565725
jmp 0x56578f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457d20
mov eax, edi
mov ecx, 0x17
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005656a0
Function at 0x5657c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x565886
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x473c35427c4c3742
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x50
movabs rdx, 0x600010602010307
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8070403
xor eax, eax
jmp 0x565820
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
mov byte [rsp + rdi + 0x1b], r9b
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x56584d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x565874
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x565807
jmp 0x565868
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00457d20
mov eax, edi
mov ecx, 9
nop dword [rax + rax]
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005657c0

Function at 0x566760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x5668f6
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0x74512ce214320422
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc1f5d674512ce214
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf453bb646165280e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x22036e206405756f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x79c3613d6e659b20
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1c654f1ec1ee641d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x6528f152f2a90d24
mov qword [rsp + 0x46], rdx
movabs rdx, 0x27212e152b0c3011
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x1f2d09251f062a04
mov qword [rsp + 0x56], rdx
movabs rdx, 0x21081f2d09251f06
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2e2d121e122d2228
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1a31012a0c05270b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2100151c2112282a
mov qword [rsp + 0x70], rdx
movabs rdx, 0x23031100192c102a
mov qword [rsp + 0x78], rdx
movabs rdx, 0xa020b151e1f0a26
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x566888
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 1]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x3a
jge 0x5668bc
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x33
jae 0x5668e9
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 1]
cmp rsi, 0x33
jb 0x56686e
jmp 0x5668dd
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x33
call fcn.00444d40
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x33
call fcn.00457d20
mov eax, edi
mov ecx, 0x33
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.00566760
Function at 0x566ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x566c7c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x5828441b423d242e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x523f3b5828441b42
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8090209070a0409
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x600000a01020809
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x566c15
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0xf]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0xf]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x566c48
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x566c6f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x566bf8
jmp 0x566c63
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457d20
mov eax, edi
mov ecx, 0xb
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.00566ba0

Function at 0x569120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x569216
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xb4d1baa0f33251bb
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x58b4d1baa0f33251
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd7c0e66e6362f0ce
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8010f030d0e0700
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40508010f030d0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x510080106090e0a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5691b3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x7d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x5691e2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x569209
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x569196
nop
jmp 0x5691fd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457d20
mov eax, edi
mov ecx, 0x11
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.00569120
Function at 0x580600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x580732
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x51a00a1aaafe6ecf
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc97851a00a1aaafe
mov qword [rsp + 0x40], rdx
movabs rdx, 0x326cff6dccba65bf
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6574fd25b461b663
mov qword [rsp + 0x50], rdx
movabs rdx, 0x927061637374cc0a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1303051c1a15071a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4211303051c1a15
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf150f0a001b0602
mov qword [rsp + 0x26], rdx
movabs rdx, 0x130309020c051717
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4111600050d0c1a
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x5806cf
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
cmp rax, 0x22
jge 0x5806fc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x580725
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x22
jb 0x5806b2
jmp 0x580717
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x22
call fcn.00444d40
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x22
nop
call fcn.00457d20
mov eax, edi
mov ecx, 0x22
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00580600

Function at 0x580860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x580968
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6f74f67231e8f738
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x76f40ca9266f74f6
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc8048261fb201065
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3080e0b0e120209
mov qword [rsp + 0x32], rdx
movabs rdx, 0x50e0e140a13050b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb02000a01050e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1213100b100a1005
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x580902
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x50]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x50]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x58092f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x58095b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x5808e5
jmp 0x58094f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457d20
mov eax, edi
mov ecx, 0x15
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00580860
Function at 0x5813c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58151f
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x209a6e9280907191
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x89a165628472a638
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf6e89a165628472
mov qword [rsp + 0x24], rdx
movabs rdx, 0x818f668a8b556e75
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x956c2086bd95869f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x676b5372317f5daa
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1206200025162008
mov qword [rsp + 0x44], rdx
movabs rdx, 0x240f0e0012062000
mov qword [rsp + 0x48], rdx
movabs rdx, 0x180821031d280422
mov qword [rsp + 0x50], rdx
movabs rdx, 0x16201a030e021506
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2820200b02040904
mov qword [rsp + 0x60], rdx
movabs rdx, 0x11231c1e01030120
mov qword [rsp + 0x68], rdx
movabs rdx, 0x191b022128011427
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x5814b9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x34
jge 0x5814eb
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2a
jae 0x581512
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
cmp rsi, 0x2a
jb 0x58149f
jmp 0x581506
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x2a
call fcn.00444d40
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x2a
call fcn.00457d20
mov eax, edi
mov ecx, 0x2a
call fcn.00457d20
nop
nop
call fcn.004556c0
jmp fcn.005813c0

Function at 0x582b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x582bd2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x4ab5d11c73d2d1d4
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd6292d4ab5d11c73
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6020408090105
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9080a02
xor eax, eax
jmp 0x582b6b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x74]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x582b9d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x582bc5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x74]
cmp rsi, 0xb
jb 0x582b51
jmp 0x582bb8
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00457d20
mov eax, edi
mov ecx, 0xb
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00582b00