joyce8/EMBER2024-capa huggingface dataset:
Function at 0x564100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5641fb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xffefde61866dc8ea
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf8e804f07affefde
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd66f645a490374cf
mov qword [rsp + 0x26], rdx
movabs rdx, 0x503060a0911020f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9060b0f080507
mov qword [rsp + 0x36], rdx
movabs rdx, 0x50f0009060b0f08
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0d14010d120c0b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x564199
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x64]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1a
jge 0x5641cb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5641ee
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x64]
cmp rsi, 0x15
jb 0x56417f
jmp 0x5641e2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00564100
Function at 0x566180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x566266
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7a8d8a437674818a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x854b6f92536e7a8d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x70d0d000a060a06
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc070d0d000a06
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3030d0803050102
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x566200
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x566232
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x566257
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1c]
cmp rsi, 0xe
jb 0x5661e2
jmp 0x56624b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00566180

Function at 0x566280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56639d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1c1c7243d372372b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x50279c0194339fe
mov qword [rsp + 0x22], rdx
movabs rdx, 0x911d635a050279c0
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd53218746ea7e065
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x30d0e0f0719131b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x120b030d0e0f0719
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6100c1603061b15
mov qword [rsp + 0x40], rdx
movabs rdx, 0x61b000c09160606
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10d131a08001b09
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x566340
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x56636d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x566390
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x56631d
jmp 0x566384
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00566280
Function at 0x567160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56724c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x646e3654746c652c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6e646e3654746c65
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e67646f5f227078
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0f080f08020f05
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80d0f080f0802
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0c08040a0a0b04
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5671ea
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 8]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x56721c
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x56723f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 8]
cmp rsi, 0x11
jb 0x5671d0
jmp 0x567233
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00567160

Function at 0x567260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56735b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x406aa461009ee0b
mov qword [rsp + 0x18], rdx
movabs rdx, 0xdab49a034b7212ae
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1600a468439c7499
mov qword [rsp + 0x28], rdx
movabs rdx, 0x31710050e07120c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb080e00020d0715
mov qword [rsp + 0x38], rdx
movabs rdx, 0x808060110050100
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf080b090216070c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5672f9
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x44]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x20
jge 0x56732b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x56734e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x44]
cmp rsi, 0x18
jb 0x5672df
jmp 0x567342
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00567260
Function at 0x5687c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5688a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x915510b0079fe6f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x91fefc1a6204a161
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd0e00060c0a040f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x809040709090d0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x906030109000a06
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x568840
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x568872
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x568897
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5e]
cmp rsi, 0x10
jb 0x568822
jmp 0x56888b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005687c0

Function at 0x569e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x569f0c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfc61481375fb6c84
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xcbee6ffc61481375
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8080a030a000904
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x702080a09020808
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x569eaf
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x569edc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x569eff
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x569e92
jmp 0x569ef3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00569e40
Function at 0x56d6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56d7da
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xce93cb435e57c5f1
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4e65676e467743d6
mov qword [rsp + 0x25], rdx
movabs rdx, 0x96efe54e65676e46
mov qword [rsp + 0x28], rdx
movabs rdx, 0xefe1714b61e52df7
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1a13031018120a0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50a1918061501
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1715061015071911
mov qword [rsp + 0x48], rdx
movabs rdx, 0x71814070210070b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x807021512171011
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x56d777
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x28
jge 0x56d7a9
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x56d7cd
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0x1b
jb 0x56d75d
jmp 0x56d7c1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.0044bb20
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00461020
mov eax, edi
mov ecx, 0x1b
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.0056d6c0

Function at 0x56d8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56d9b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6c63554664787d82
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x577c7a7646746c63
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0b070a02010005
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc0605050c0c0b0b
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x56d94c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x14]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x56d97e
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x56d9a5
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x14]
cmp rsi, 0xe
jb 0x56d932
jmp 0x56d995
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0056d8e0
Function at 0x56de80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56df5d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xca72eb0e646ee34f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x21196da8b6afbd1a
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc0a090900010c0b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4050c0e0c0a0909
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0b080901080f07
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x56df00
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x56df2d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x56df50
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x56dee2
jmp 0x56df44
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0056de80

Function at 0x56f600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56f6fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x28382550736d4e46
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x116e65556e574328
mov qword [rsp + 0x24], rdx
movabs rdx, 0x577367354f3f3553
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2010b0e06031000
mov qword [rsp + 0x34], rdx
movabs rdx, 0x70b000312020910
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb0e0513070b0003
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40711030e050813
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x56f699
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1c
jge 0x56f6cb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x56f6ee
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
cmp rsi, 0x17
jb 0x56f67f
jmp 0x56f6e2
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.0056f600
Function at 0x5748c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5749e7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x656f4e0e275a2e3e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3c21667572613273
mov qword [rsp + 0x26], rdx
movabs rdx, 0x57f83f2440723c21
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x340d60334b3f3d51
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1130f1a03141a04
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1d1612180e13171c
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1a0f13031d161218
mov qword [rsp + 0x48], rdx
movabs rdx, 0x409160400131609
mov qword [rsp + 0x50], rdx
movabs rdx, 0x15170a0218191b01
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa0509060c191113
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x574989
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x3b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x3b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2c
jge 0x5749b7
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x5749da
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1e
jb 0x57496c
jmp 0x5749ce
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461020
mov eax, edi
mov ecx, 0x1e
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005748c0

Function at 0x5764c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5765da
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xd7745d796be1e5e3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8572501d6de8546d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb2505473d1ee8572
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8faa57e8e5d6e8f4
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1901030f170a1b05
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1c1613101d1901
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3051a0207071002
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7111a0c1400180f
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc161a141b111500
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x576577
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x62]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x26
jge 0x5765a9
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x5765cd
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x62]
cmp rsi, 0x1e
jb 0x57655d
jmp 0x5765c1
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.0044bb20
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461020
mov eax, edi
mov ecx, 0x1e
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.005764c0
Function at 0x576a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x576b0c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x5e657263546c6f6b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6657646665655060
mov qword [rsp + 0x25], rdx
movabs rdx, 0x5649846436665764
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6865575f5e676861
mov qword [rsp + 0x32], rdx
movabs rdx, 0x712181c0a131a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1c180804190e010f
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1c1c040d020f1c18
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0a141a00101816
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x576aa8
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x17]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x576adc
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x576aff
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x17]
cmp rsi, 0x1d
jb 0x576a8e
jmp 0x576af3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461020
mov eax, edi
mov ecx, 0x1d
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00576a00

Function at 0x577040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5770fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3e731a65464dc047
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xdedb
movabs rdx, 0x703090205070101
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5090807
xor eax, eax
jmp 0x5770a0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x5770cd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5770f0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x577083
jmp 0x5770e4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00577040
Function at 0x577120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577247
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x160e6caeabe1b7ac
mov qword [rsp + 0x19], rdx
movabs rdx, 0x617a896f666eca26
mov qword [rsp + 0x21], rdx
movabs rdx, 0xd30911b186617a89
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2912a704bdfa1079
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1704180d02031917
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1a0e101717011a1a
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1a091a0e10171701
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7060017131b1814
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a08020902110418
mov qword [rsp + 0x50], rdx
movabs rdx, 0x181716121c0d0d
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5771e9
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x2a
jge 0x577217
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x57723a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1d
jb 0x5771cc
jmp 0x57722e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461020
mov eax, edi
mov ecx, 0x1d
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00577120

Function at 0x577260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57735b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe2756c6ff374eadc
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe57c7a6e1de2756c
mov qword [rsp + 0x22], rdx
movabs rdx, 0xcf6e6f2454ff7fc4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30e110b0a0b090e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x808100f080f100b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x100b0808140f0808
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0a090d0b000107
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5772f9
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x57732b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x57734e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0x15
jb 0x5772df
jmp 0x577342
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00577260
Function at 0x5779c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577ae7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xc575d93456f5650b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xfe614e1f74022465
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa6f052ecd467307
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4365ee612b3c3845
mov qword [rsp + 0x34], rdx
movabs rdx, 0x150f0f1d1315051a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x170f0c100a07041f
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1a000207170f0c10
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a09180c0c0a1b07
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d000f0300001403
mov qword [rsp + 0x58], rdx
movabs rdx, 0x71f1318101a1319
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x577a89
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x4f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x4f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x2c
jge 0x577ab7
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x577ada
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x20
jb 0x577a6c
jmp 0x577ace
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00461020
mov eax, edi
mov ecx, 0x20
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005779c0

Function at 0x578040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x578112
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa7f236b8fbb296f5
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3288ee6563b28ba7
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7080d000c060403
mov qword [rsp + 0x28], rdx
movabs rdx, 0x201090c06080d04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5780ac
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x5780de
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x578105
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
cmp rsi, 0xf
jb 0x578092
jmp 0x5780f5
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00578040