joyce8/EMBER2024-capa huggingface dataset:
Function at 0x562240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56231c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xfa6f6f72fa840143
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x8798f0017265fa6f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x60c0d0206060d03
mov qword [rsp + 0x28], rdx
movabs rdx, 0x103060a02070d0b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5622b5
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x7d]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x5622e8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x56230f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x562298
jmp 0x562303
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f380
mov eax, edi
mov ecx, 0xe
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.00562240

Function at 0x565600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x565713
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x721175b322740f47
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7260746544fb0969
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70697260746544fb
mov qword [rsp + 0x28], rdx
movabs rdx, 0xce756ffca9724e4f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4050616160e0513
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3060d0315150d12
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30305090a010609
mov qword [rsp + 0x48], rdx
movabs rdx, 0x319131512040d04
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5656ae
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0x4d
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x5656df
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x565706
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0x4d
add r8d, edx
cmp rsi, 0x1a
jb 0x565694
jmp 0x5656fa
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f380
mov eax, edi
mov ecx, 0x1a
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00565600
Function at 0x566da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x566ea8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x1415926f547465c0
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc16e751415926f54
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x54a9b5746130c8dd
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb080a000d0c0c06
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa0d0010120a080b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x8110a0d0010120a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7000705080a060d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x566e40
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x3f
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x566e71
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x566e9b
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x3f
add r8d, edx
cmp rsi, 0x13
jb 0x566e25
jmp 0x566e8f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f380
mov eax, edi
mov ecx, 0x13
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00566da0

Function at 0x566ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x566fa8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd770738dd38d6db0
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6692998c65a861d7
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc030c0d09030d07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb060c030c0d0903
mov qword [rsp + 0x30], rdx
movabs rdx, 0x404070204090007
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x566f41
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffce
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x12
jge 0x566f72
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x566f9b
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffce
add r8d, edx
cmp rsi, 0xf
jb 0x566f27
jmp 0x566f8f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f380
mov eax, edi
mov ecx, 0xf
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00566ec0
Function at 0x5677c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5678e6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x36e2cef35a5d5349
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3979374237225505
mov qword [rsp + 0x23], rdx
movabs rdx, 0x6539793742372255
mov qword [rsp + 0x24], rdx
movabs rdx, 0x603c4270253f6373
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x170608040408140c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x507130917060804
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0b03160a0f170a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x180217030d181707
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4090a180f030c01
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x567880
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x3f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x24
jge 0x5678ad
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5678d4
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x567863
jmp 0x5678c8
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f380
mov eax, edi
mov ecx, 0x19
nop dword [rax + rax]
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.005677c0

Function at 0x567900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5679cb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x3f64318561b5d049
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x8f69
movabs rdx, 0x207090704050904
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5090104
xor eax, eax
jmp 0x567966
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x57]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x57]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x567997
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x5679be
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x567949
jmp 0x5679b2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f380
mov eax, edi
mov ecx, 0xa
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00567900
Function at 0x568fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5690cb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xf6d4f9ecf3dbf7e8
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6ee2fffbcdf261f6
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6000d0d00090a0a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40206000d0d0009
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0b010105030607
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x569064
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x569097
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x5690be
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x569047
jmp 0x5690b2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f380
mov eax, edi
mov ecx, 0xf
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00568fe0

Function at 0x5690e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5691e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x11ca5379cf317551
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa762696c11ca5379
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb4242f275a6ea932
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc080a03080a130d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x7061310100b130f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa0c0f03080a0706
mov qword [rsp + 0x40], rdx
movabs rdx, 0x101202110c0d0713
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x569182
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x5691af
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5691db
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x569165
jmp 0x5691cf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f380
mov eax, edi
mov ecx, 0x14
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.005690e0
Function at 0x56a100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56a208
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xa38aa96f07676552
mov qword [rsp + 0x19], rdx
movabs rdx, 0xea142a61b0ce89a3
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd6046cf4f304c76b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc090f0f080e0a11
mov qword [rsp + 0x30], rdx
movabs rdx, 0x913160c120a090d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50a120313070d0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc12060908100815
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x56a1a2
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x56a1cf
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x56a1fb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x56a185
jmp 0x56a1ef
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f380
mov eax, edi
mov ecx, 0x17
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0056a100

Function at 0x56a2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56a39c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x79592b5651494d52
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3905244b26663f40
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0e04060b010e0e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x20e0f05080d0109
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x56a332
movzx r9d, byte [rsp + rsi + 0x28]
add r9d, 0x16
add edx, r9d
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x56a368
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x56a38f
movzx r8d, byte [rsp + rdi + 0x28]
add r8d, 0x16
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0x10
jb 0x56a318
jmp 0x56a383
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f380
mov eax, edi
mov ecx, 0x10
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.0056a2c0
Function at 0x56ada0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56ae72
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x767474e3c8706552
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x57728363
movabs rdx, 0xa0a060308040a09
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x3030904
xor eax, eax
jmp 0x56ae04
movzx r9d, byte [rsp + rsi + 0x24]
add r9d, 0x74
add edx, r9d
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
cmp rax, 0xc
jge 0x56ae3b
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xc
jae 0x56ae65
movzx r8d, byte [rsp + rdi + 0x24]
add r8d, 0x74
add r8d, edx
cmp rsi, 0xc
jb 0x56adea
jmp 0x56ae56
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f380
mov eax, edi
mov ecx, 0xc
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0056ada0

Function at 0x56b1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56b2a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x656a75788e745353
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x75602e6062348365
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7184696268635758
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1608060b13060c01
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd0112040b0b0901
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd0f0e0e0d011204
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5101003160b0e15
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x56b242
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x1f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1c
jge 0x56b26f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x56b29b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x56b225
jmp 0x56b28f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f380
mov eax, edi
mov ecx, 0x17
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0056b1a0
Function at 0x56b2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56b3c8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xda91ac254e39e5d6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xbabd32a99dda91ac
mov qword [rsp + 0x22], rdx
movabs rdx, 0x99c3660d27b074c5
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70605100c090a10
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa11090c040a0201
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc0c01070f000a11
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0108140d09130b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x56b360
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffff84
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x56b391
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x56b3bb
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffff84
add r8d, edx
cmp rsi, 0x15
jb 0x56b345
jmp 0x56b3af
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f380
mov eax, edi
mov ecx, 0x15
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0056b2c0
Function at 0x56d8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56da06
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x39213d440b72ea9a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6612bf726543371f
mov qword [rsp + 0x24], rdx
movabs rdx, 0xfe650e34b9fd6612
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3d2c0074e3ef2d05
mov qword [rsp + 0x32], rdx
movabs rdx, 0x917190e0d080018
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe0600181c070917
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13001b0110111503
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d05130801120310
mov qword [rsp + 0x50], rdx
movabs rdx, 0x13131b1513161103
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x56d9a0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x5c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x5c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x26
jge 0x56d9cd
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x56d9f4
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1e
jb 0x56d983
jmp 0x56d9e8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.0044a0a0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045f380
mov eax, edi
mov ecx, 0x1e
nop dword [rax + rax]
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0056d8e0

Function at 0x56f960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56fa56
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x250ad4d0b1d2bcc6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x43d0250ad4d0b1d2
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe6b798b5cba97265
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1107070305080d11
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe10060402071101
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10d0f030400020c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x56f9f0
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffff91
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x56fa22
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x56fa49
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffff91
add r8d, edx
cmp rsi, 0x12
jb 0x56f9d6
nop
jmp 0x56fa3d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f380
mov eax, edi
mov ecx, 0x12
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.0056f960
Function at 0x570600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x570708
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x637a77646e747d47
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x516f3e65637a7764
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6d814f2269435d6d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd030b11010a060f
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe120c0f0e071213
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb05070503090e12
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120b090d11061210
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5706a0
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffe9
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x5706d1
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5706fb
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffe9
add r8d, edx
cmp rsi, 0x14
jb 0x570685
jmp 0x5706ef
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f380
mov eax, edi
mov ecx, 0x14
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00570600

Function at 0x571960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x571a32
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6eb620653cad6cd1
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd66cd76eb620653c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5000505080a0006
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2050503
xor eax, eax
jmp 0x5719cb
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffff8a
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x5719fc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x571a25
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffff8a
add r8d, edx
cmp rsi, 0xb
jb 0x5719b1
jmp 0x571a17
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.0045f380
mov eax, edi
mov ecx, 0xb
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00571960
Function at 0x572300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5723d2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x1d4628c906659dc1
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb165c51d4628c906
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x804030305000407
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x30a0100
xor eax, eax
jmp 0x57236b
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffff9d
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x57239c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5723c5
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffff9d
add r8d, edx
cmp rsi, 0xb
jb 0x572351
jmp 0x5723b7
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.0045f380
mov eax, edi
mov ecx, 0xb
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00572300

Function at 0x573d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x573df2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xaf4665a1d79db0a3
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9bff6caf4665a1d7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa09030907020309
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1040200
xor eax, eax
jmp 0x573d8e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x573dbb
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x573de5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x573d71
jmp 0x573dd6
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.0045f380
mov eax, edi
mov ecx, 0xb
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00573d20

Function at 0x574740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x574808
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x5f372163606e4656
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x65
movabs rdx, 0x701030500010501
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x604
xor eax, eax
jmp 0x5747a3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x16]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x16]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x5747d0
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x5747fb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x574786
jmp 0x5747ef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f380
mov eax, edi
mov ecx, 9
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00574740