joyce8/EMBER2024-capa huggingface dataset:
Function at 0x555740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55583d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x356bdcd39cccce52
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1dd56eaa4641356b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa943dd9dd043dbda
mov qword [rsp + 0x48], rdx
movabs rdx, 0x12010807080d0315
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x100815110414130a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80d0c02010f1304
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x511050f0e04080f
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x5557e0
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 - 0x47]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x55580d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x555830
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x5557bf
jmp 0x555824
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.004669c0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0046c880
mov eax, edi
mov ecx, 0x16
call fcn.0046c880
nop
nop dword [rax]
call fcn.0046a5a0
jmp fcn.00555740

Function at 0x556160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x556227
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe4ed83f7d2f68874
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x79dbea75
movabs rdx, 0x703000a01090607
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4090a0a0302050a
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x5561c8
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x77]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x5561f7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x55621a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x5561ab
jmp 0x55620e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.004669c0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0046c880
mov eax, edi
mov ecx, 0xc
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.00556160
Function at 0x558080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55816a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x76ea7401e841ca0c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x700d61faf42776ea
mov qword [rsp + 0x38], rdx
movabs rdx, 0xead575df65c41a65
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100f120a14100903
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x40901060c120915
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80a000612090114
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x55810d
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0x5d]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0x5d]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x18
jge 0x55813a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x55815d
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x5580f0
jmp 0x558151
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.004669c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0046c880
mov eax, edi
mov ecx, 0x16
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.00558080

Function at 0x5594c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5595aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4105669c9dfc7175
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6fef4105669c9dfc
mov qword [rsp + 0x38], rdx
movabs rdx, 0xfc77f2f4e4606be1
mov qword [rsp + 0x40], rdx
movabs rdx, 0x304010b07100d03
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb0a0e0411010a0c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7021006020a0f08
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x55954d
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 - 0x6f]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 - 0x6f]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x18
jge 0x55957a
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x55959d
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x559530
jmp 0x559591
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.004669c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046c880
mov eax, edi
mov ecx, 0x12
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.005594c0
Function at 0x55c9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x55cb55
push rbp
mov rbp, rsp
sub rsp, 0x98
movabs rdx, 0x78adaff16e74b27c
mov qword [rsp + 0x62], rdx
movabs rdx, 0xc7fa728ee22078ad
mov qword [rsp + 0x68], rdx
movabs rdx, 0x799e6c62e795f28a
mov qword [rsp + 0x70], rdx
movabs rdx, 0x736e4fac788fcedf
mov qword [rsp + 0x78], rdx
movabs rdx, 0x64a174b5b797f9a0
mov qword [rsp + 0x80], rdx
movabs rdx, 0x706972637365b93e
mov qword [rsp + 0x88], rdx
movabs rdx, 0x65ad79a990ae1274
mov qword [rsp + 0x90], rdx
movabs rdx, 0x200a042022090f24
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x70b240f0005200a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x31161b0e0511191e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x310c18010517140a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x504003426121a1a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1f181221172f0a09
mov qword [rsp + 0x42], rdx
movabs rdx, 0x171514181a0a0331
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x14041a170d221910
mov qword [rsp + 0x52], rdx
movabs rdx, 0x190f322730210615
mov qword [rsp + 0x5a], rdx
xor eax, eax
jmp 0x55caf4
movzx r9d, byte [rsp + rsi + 0x62]
sub r9d, edx
lea edx, [r9 + 0x12]
mov byte [rsp + rdi + 0x62], dl
lea edx, [r8 + 0x12]
mov byte [rsp + rsi + 0x62], dl
add rax, 2
cmp rax, 0x46
jge 0x55cb22
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x36
jae 0x55cb48
movzx r8d, byte [rsp + rdi + 0x62]
sub r8d, edx
cmp rsi, 0x36
jb 0x55cad7
nop
jmp 0x55cb3c
xor eax, eax
lea rbx, [rsp + 0x62]
mov ecx, 0x36
call fcn.004669c0
add rsp, 0x98
pop rbp
ret
mov eax, esi
mov ecx, 0x36
call fcn.0046c880
mov eax, edi
mov ecx, 0x36
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.0055c9c0
Function at 0x55cb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55cc98
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x65637e7066bd9ebb
mov qword [rsp + 0x46], rdx
movabs rdx, 0x759d65637e7066bd
mov qword [rsp + 0x48], rdx
movabs rdx, 0x65a56974e130924c
mov qword [rsp + 0x50], rdx
movabs rdx, 0xcf6c6f73e865cab3
mov qword [rsp + 0x58], rdx
movabs rdx, 0x203a946f9c72ccb5
mov qword [rsp + 0x60], rdx
movabs rdx, 0x150010131a0a1b19
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1912151b00190b02
mov qword [rsp + 0x22], rdx
movabs rdx, 0x90d0b081912151b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1d1f1d010a091910
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1b0712160d160a12
mov qword [rsp + 0x36], rdx
movabs rdx, 0x3190c0a010a0515
mov qword [rsp + 0x3e], rdx
xor eax, eax
jmp 0x55cc35
movzx r9d, byte [rsp + rsi + 0x46]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3e]
mov byte [rsp + rdi + 0x46], dl
mov byte [rsp + rsi + 0x46], r8b
add rax, 2
cmp rax, 0x2c
jge 0x55cc68
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x55cc8b
movzx r8d, byte [rsp + rdi + 0x46]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3e]
nop
cmp rsi, 0x22
jb 0x55cc1b
jmp 0x55cc7f
xor eax, eax
lea rbx, [rsp + 0x46]
mov ecx, 0x22
call fcn.004669c0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.0046c880
mov eax, edi
mov ecx, 0x22
call fcn.0046c880
nop
call fcn.0046a5a0
nop dword [rax]
jmp fcn.0055cb60

Function at 0x55ccc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55cd8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe568636cc9727112
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xb87f656c62e56863
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10c01070b0c04
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x70c0304030c0001
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x55cd2f
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0xe
jge 0x55cd5c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x55cd7f
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x55cd12
jmp 0x55cd73
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.004669c0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.0046c880
mov eax, edi
mov ecx, 0xd
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.0055ccc0
Function at 0x55d0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55d172
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x6d160dd10b166e22
mov qword [rsp + 0x20], rdx
movabs rdx, 0x205000003060406
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x55d10e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4f]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x55d142
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x55d165
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4f]
cmp rsi, 8
jb 0x55d0f4
nop
jmp 0x55d159
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.004669c0
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0046c880
mov eax, edi
mov ecx, 8
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.0055d0c0

Function at 0x55daa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55db58
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5f7464305e61585a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x300030401050507
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 5
xor eax, eax
jmp 0x55daf5
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x55db28
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x55db4b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
nop
cmp rsi, 8
jb 0x55dadb
jmp 0x55db3f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0046c880
mov eax, edi
mov ecx, 8
call fcn.0046c880
nop
call fcn.0046a5a0
nop dword [rax]
jmp fcn.0055daa0

Function at 0x55e5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55e6e8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x73699ebe939091a5
mov qword [rsp + 0x37], rdx
movabs rdx, 0xd593bc2081cb88b3
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6cd593bc2081cb88
mov qword [rsp + 0x40], rdx
movabs rdx, 0x78caad8fc81e669e
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe030b140917020d
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb0b0b0804110f13
mov qword [rsp + 0x21], rdx
movabs rdx, 0x151317110a050b0b
mov qword [rsp + 0x27], rdx
movabs rdx, 0x50001021609090f
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x55e68b
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x11]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x11]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1e
jge 0x55e6b8
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x55e6db
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x55e66e
jmp 0x55e6cf
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.004669c0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0046c880
mov eax, edi
mov ecx, 0x19
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.0055e5e0
Function at 0x5624a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x562566
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9adaa4799c9fa8b0
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x86e
movabs rdx, 0x50602010209
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x5030107
xor eax, eax
jmp 0x562500
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x562532
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x562557
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
cmp rsi, 0xa
jb 0x5624e3
jmp 0x56254b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0046c880
mov eax, edi
mov ecx, 0xa
nop
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.005624a0

Function at 0x570040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57010c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa45066cf84d171b6
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x848481a4
movabs rdx, 0x803010200020409
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa09000507090803
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x5700a5
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x5700dc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x5700ff
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
cmp rsi, 0xb
jb 0x57008b
jmp 0x5700f3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.004669c0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046c880
mov eax, edi
mov ecx, 0xb
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.00570040

Function at 0x570200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5702c6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4152fd2049411afb
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x3e
movabs rdx, 0x101020403020400
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x8020805
xor eax, eax
nop
jmp 0x570260
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 1]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x570292
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x5702b7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 1]
cmp rsi, 9
jb 0x570242
jmp 0x5702ab
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0046c880
mov eax, edi
mov ecx, 9
nop
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.00570200
Function at 0x571340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57142a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe27b75d4db603170
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x64e27b75d4db6031
mov qword [rsp + 0x30], rdx
movabs rdx, 0x584645d5e1d14173
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70d090608020202
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2090b070d0906
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6030c0c02040506
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x5713cd
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 + 0x72]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x14
jge 0x5713fa
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x57141d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x5713b0
jmp 0x571411
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.004669c0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0046c880
mov eax, edi
mov ecx, 0x11
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.00571340

Function at 0x5719c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x571aac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9fbcceac335fb730
mov qword [rsp + 0x37], rdx
movabs rdx, 0xe19fbcceac335fb7
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc5de652ba0db80ad
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa01060702010f07
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x40f100b04010d08
mov qword [rsp + 0x27], rdx
movabs rdx, 0xc05090806040f06
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x571a4a
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x76]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x18
jge 0x571a7c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x571a9f
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x76]
cmp rsi, 0x11
jb 0x571a30
jmp 0x571a93
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.004669c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0046c880
mov eax, edi
mov ecx, 0x11
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.005719c0
Function at 0x571ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x571baa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x48d0dbdc179431e0
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xa848d0dbdc179431
mov qword [rsp + 0x30], rdx
movabs rdx, 0xde66057ffb626139
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100207060c0d0d03
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc06081010020706
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5081003040e0c
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x571b4d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 + 0x6c]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 + 0x6c]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x14
jge 0x571b7a
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x571b9d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x571b30
jmp 0x571b91
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.004669c0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0046c880
mov eax, edi
mov ecx, 0x11
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.00571ac0

Function at 0x572160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57224c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6edb3595339da3a8
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x386edb3595339da3
mov qword [rsp + 0x30], rdx
movabs rdx, 0x87c5939a911241af
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2070c01090b000e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x20402070c01090b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x10040f10090d1006
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x5721ea
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x71]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x57221c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x57223f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x71]
cmp rsi, 0x11
jb 0x5721d0
jmp 0x572233
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.004669c0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0046c880
mov eax, edi
mov ecx, 0x11
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.00572160
Function at 0x574740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57483b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3a2047656a555758
mov qword [rsp + 0x34], rdx
movabs rdx, 0x51620d613a204765
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4f1542330d646063
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11021011070b0710
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1030c0a13070c0f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20501030c0a1307
mov qword [rsp + 0x24], rdx
movabs rdx, 0x200100b0d09120b
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x5747d9
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1a
jge 0x57480b
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x57482e
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0x14
jb 0x5747bf
jmp 0x574822
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.004669c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0046c880
mov eax, edi
mov ecx, 0x14
call fcn.0046c880
nop
nop dword [rax + rax]
call fcn.0046a5a0
jmp fcn.00574740
Function at 0x577ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577d98
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x716d7e6b70716950
mov qword [rsp + 0x28], rdx
movabs rdx, 0x304070201040405
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x107
xor eax, eax
jmp 0x577d35
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xb]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x577d68
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x577d8b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xb]
nop
cmp rsi, 8
jb 0x577d1b
jmp 0x577d7f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0046c880
mov eax, edi
mov ecx, 8
call fcn.0046c880
nop
call fcn.0046a5a0
nop dword [rax]
jmp fcn.00577ce0

Function at 0x577dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577e86
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1279336cb5206873
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xc56cae12
movabs rdx, 0x806020706030a06
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0xa06070a
xor eax, eax
jmp 0x577e20
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4a]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x577e52
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x577e77
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4a]
cmp rsi, 0xb
jb 0x577e04
jmp 0x577e6b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046c880
mov eax, edi
mov ecx, 0xb
nop
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.00577dc0