joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5595a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5596a8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xf136a846555e4853
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4b09733a033558df
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2b6f307469732ffe
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x607050b0a0e1517
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10040607050b0a0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb1106010b0c0c08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4030111030c1105
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf09021509040b10
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x55964b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x40]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x40]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x559678
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x55969b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x55962e
jmp 0x55968f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00460ec0
mov eax, edi
mov ecx, 0x18
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005595a0

Function at 0x559a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x559aec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6d6c757543695853
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x696c726e6d6c7575
mov qword [rsp + 0x20], rdx
movabs rdx, 0x563c794b745a2172
mov qword [rsp + 0x28], rdx
movabs rdx, 0x613060e020a110a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9070a100d100906
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd010606120d0605
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x559a8a
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x559abc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x559adf
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0x14
jb 0x559a70
jmp 0x559ad3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00460ec0
mov eax, edi
mov ecx, 0x14
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00559a00
Function at 0x55b2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55b3cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe3632e7250296ffe
mov qword [rsp + 0x19], rdx
movabs rdx, 0x72bcd272507373e3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2273ff442c95fa69
mov qword [rsp + 0x28], rdx
movabs rdx, 0x160c001101100d01
mov qword [rsp + 0x30], rdx
movabs rdx, 0x116131105100d01
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1412070007000216
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x55b36a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x55b39c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x55b3bf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0x17
jb 0x55b350
jmp 0x55b3b3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00460ec0
mov eax, edi
mov ecx, 0x17
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0055b2e0

Function at 0x55ee40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55ef2a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2965571d411b2e47
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x531745742965571d
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd0a3f4461451748
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x120d04010a021213
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1305070e1211120d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10c020e100e0a11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x55eecd
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x55eefa
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x55ef1d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x55eeb0
jmp 0x55ef11
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00460ec0
mov eax, edi
mov ecx, 0x14
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0055ee40
Function at 0x55f240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55f33d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6c76729a4775654a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x857c3e83696c7672
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e816a65896d756f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb070e12040500
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb13120609110a0a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x9060b1312060911
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50002100c020907
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x55f2e0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x13]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x13]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x55f30d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x55f330
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x55f2bf
jmp 0x55f324
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460ec0
mov eax, edi
mov ecx, 0x15
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.0055f240

Function at 0x55ffc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5600bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x732d493de939502c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x664e6e34653d732d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x34406974356dfe16
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa15150203060f0f
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe14040c010f0006
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x3140e0800110e14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150b0c0603050e01
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x560060
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x3a]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x3a]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x56008d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5600b0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x56003f
jmp 0x5600a4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00460ec0
mov eax, edi
mov ecx, 0x16
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.0055ffc0
Function at 0x5622e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5623fa
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xb89f53744ebf74aa
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x8b87dbdfbd979e74
mov qword [rsp + 0x22], rdx
movabs rdx, 0x95f58b87dbdfbd97
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9ce07576a21e9bd1
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9150709160d0d12
mov qword [rsp + 0x34], rdx
movabs rdx, 0x14180c0009150709
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb17190f0a130e00
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1410020611181214
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1714140611061414
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x562397
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x24
jge 0x5623c9
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5623ed
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4f]
cmp rsi, 0x1a
jb 0x56237d
jmp 0x5623e1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044b900
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00460ec0
nop
call fcn.0045ec40
nop
jmp fcn.005622e0

Function at 0x563360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56344a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e52725070756e45
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5d59655f6e527250
mov qword [rsp + 0x22], rdx
movabs rdx, 0x78847365886b6449
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc03070b0c080f09
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1209030a0a080c03
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120f0f030c0e0b06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5633ed
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x16]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x16]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x56341a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x56343d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x5633d0
jmp 0x563431
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00460ec0
mov eax, edi
mov ecx, 0x14
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00563360
Function at 0x564340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x564487
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x94748b62cf73b333
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc39c878a6994748b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9e869065788c6385
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0067b7d4e79e388
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb19e6f96b2a38be1
mov qword [rsp + 0x36], rdx
movabs rdx, 0x23030e09051a1b00
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x50623030e09051a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1d170f15030d0101
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe1417010f12101f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1e1319171b19201c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x100b0c0a17231624
mov qword [rsp + 0x60], rdx
movabs rdx, 0x210123240a072100
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x564427
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x32
jge 0x564457
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x56447a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x25
jb 0x56440a
jmp 0x56446e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
call fcn.0044b900
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00460ec0
mov eax, edi
mov ecx, 0x25
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00564340

Function at 0x564fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5650dd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1db884707f45800f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x641606f071fe61cb
mov qword [rsp + 0x22], rdx
movabs rdx, 0xfddc2cf7641606f0
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7f96c8896d61096d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x31a121b19110610
mov qword [rsp + 0x36], rdx
movabs rdx, 0x80c031a121b1911
mov qword [rsp + 0x38], rdx
movabs rdx, 0x71a03190b030a02
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11501050d0a1312
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd100005030e0018
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x565080
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x5650ad
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5650d0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x56505d
jmp 0x5650c4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1c
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.00564fc0
Function at 0x5678e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5679fa
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x47e0da70e774f820
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd8f269bee4df7479
mov qword [rsp + 0x23], rdx
movabs rdx, 0xd1d8f269bee4df74
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd50874b171ed5f83
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x51112170e081814
mov qword [rsp + 0x34], rdx
movabs rdx, 0x314011305111217
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1408081117051814
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60b0c10150a0010
mov qword [rsp + 0x48], rdx
movabs rdx, 0x80e18030f11110c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x567997
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x5679c9
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5679ed
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5e]
cmp rsi, 0x19
jb 0x56797d
jmp 0x5679e1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044b900
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00460ec0
mov eax, edi
mov ecx, 0x19
call fcn.00460ec0
nop
call fcn.0045ec40
nop
jmp fcn.005678e0

Function at 0x568180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56827d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x32b8b3d775532f9a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf96e65aa32b8b3d7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa074ba1f3d88665
mov qword [rsp + 0x26], rdx
movabs rdx, 0x121005020b010107
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x130e0108080f0d0b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x7130e0108080f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x610000e06050604
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x568220
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x56824d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x568270
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x5681ff
jmp 0x568264
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00460ec0
mov eax, edi
mov ecx, 0x14
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.00568180
Function at 0x5696c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x569792
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2983cf036c652153
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x18ce1e75ee2983cf
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10a0b0a06050606
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6070c040508010a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x56972c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x56975e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x569785
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
cmp rsi, 0xd
jb 0x569712
jmp 0x569775
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00460ec0
mov eax, edi
mov ecx, 0xd
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005696c0

Function at 0x5697a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x569872
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd9c6ec547269ef6e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe35073c86fd9c6ec
mov qword [rsp + 0x20], rdx
movabs rdx, 0x904090b00060703
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10701030c060509
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x56980c
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x77]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x56983e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x569865
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x77]
cmp rsi, 0xd
jb 0x5697f2
jmp 0x569855
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00460ec0
mov eax, edi
mov ecx, 0xd
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005697a0

Function at 0x569ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x569f6c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9b83677f806d7f55
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x57886f9b83677f80
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7010603010402
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x300090903010007
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x569f0f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 6]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x569f3c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x569f5f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x569ef2
jmp 0x569f53
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460ec0
mov eax, edi
mov ecx, 0xb
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00569ea0
Function at 0x56c5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56c66c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6f746fd4d7cb6523
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xcd5861bae6626f74
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40d020d0200030a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x402030902030c04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x56c60f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x56c63c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x56c65f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x56c5f2
jmp 0x56c653
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460ec0
mov eax, edi
mov ecx, 0xe
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0056c5a0

Function at 0x56c680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56c766
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6276170dfbbb0455
mov qword [rsp + 0x19], rdx
movabs rdx, 0x40fc049e10627617
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x908050c020002
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa00000908050c02
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4020b0102020c03
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x56c700
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x51]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x56c732
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x56c757
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x51]
cmp rsi, 0xd
jb 0x56c6e2
jmp 0x56c74b
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00460ec0
mov eax, edi
mov ecx, 0xd
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0056c680
Function at 0x580760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x58084a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xfd260c6fb7672fd7
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x52be07fd260c6fb7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x57cb72b5bf023265
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6110e0908050c07
mov qword [rsp + 0x32], rdx
movabs rdx, 0x70105050d0c0611
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf00080c03011107
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5807ed
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x58081a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x58083d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x5807d0
jmp 0x580831
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00460ec0
mov eax, edi
mov ecx, 0x13
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00580760

Function at 0x580d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x580e66
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf761756e8cd5e0f3
mov qword [rsp + 0x19], rdx
movabs rdx, 0x570cfa6ce6f76175
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1000203030b0a0b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa0b01000203030b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7080b0b02080706
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x580e00
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x580e32
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x580e57
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
cmp rsi, 0xd
jb 0x580de2
jmp 0x580e4b
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00460ec0
mov eax, edi
mov ecx, 0xd
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00580d80
Function at 0x5821e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5822c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x721411d7ebc90452
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x70c3134813741072
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0a02020d050407
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7060c0a02020d05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x303010805020804
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x582260
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x582292
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5822b7
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 0xf
jb 0x582242
jmp 0x5822ab
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460ec0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005821e0