joyce8/EMBER2024-capa huggingface dataset:
Function at 0x574e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x574eeb
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x1644dc4639e11746
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5765a66934cc1644
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7080b0809060701
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30607080b080906
mov qword [rsp + 0x28], rdx
movabs rdx, 0x901060502070802
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x574e84
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x12
jge 0x574eb7
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x574ede
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x574e67
jmp 0x574ed2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f380
mov eax, edi
mov ecx, 0xe
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00574e00
Function at 0x575360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x575448
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x3f22f6462e3f2a46
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe91e21560e035374
mov qword [rsp + 0x20], rdx
movabs rdx, 0x90e0b0905010c0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x307030d030f0c01
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc05020109060d0e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5753e1
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x13
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x18
jge 0x575412
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x57543b
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x13
add r8d, edx
cmp rsi, 0x10
jb 0x5753c7
jmp 0x57542f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f380
mov eax, edi
mov ecx, 0x10
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00575360

Function at 0x575540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57561c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x745a0d2e646e6936
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x32364e0d2a745a0d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9090a080a050b0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0a00040609090a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5755b5
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x28]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x28]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x5755e8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x57560f
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xd
jb 0x575598
jmp 0x575603
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f380
mov eax, edi
mov ecx, 0xd
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.00575540
Function at 0x575d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x575dfc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xd773d05264d89a00
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc3cfb71fc0d773d0
mov qword [rsp + 0x22], rdx
movabs rdx, 0x90b0007020b01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb000c0a08050009
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x575d92
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffff90
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x575dc8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x575def
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffff90
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xd
jb 0x575d78
jmp 0x575de3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f380
mov eax, edi
mov ecx, 0xd
call fcn.0045f380
nop
nop dword [rax]
call fcn.0045cd20
jmp fcn.00575d20

Function at 0x5767e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5768cb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xac4d74611e3b2805
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf5c2ed61c9aaac4d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb08090c0303070c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0d0b010b08090c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x708010c09020007
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x576864
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x51]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x51]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x576897
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x5768be
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x576847
jmp 0x5768b2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f380
mov eax, edi
mov ecx, 0xe
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.005767e0
Function at 0x576b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x576c36
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xec2514a305076511
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4365fcdcb56e6f17
mov qword [rsp + 0x38], rdx
movabs rdx, 0x742565f7d36c7227
mov qword [rsp + 0x40], rdx
movabs rdx, 0x205050b08061010
mov qword [rsp + 0x18], rdx
movabs rdx, 0x14070d030d161308
mov qword [rsp + 0x20], rdx
movabs rdx, 0x130303140c000400
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x576bd0
movzx r9d, byte [rsp + rsi + 0x30]
add r9d, 0x4d
add edx, r9d
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x576c02
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x576c29
movzx r8d, byte [rsp + rdi + 0x30]
add r8d, 0x4d
add r8d, edx
cmp rsi, 0x18
jb 0x576bb6
nop
jmp 0x576c1d
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f380
mov eax, edi
mov ecx, 0x18
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.00576b40

Function at 0x577700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5777eb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xf706d9a61dd6511
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x57b7cba24eb3ff50
mov qword [rsp + 0x22], rdx
movabs rdx, 0x709080e0e040709
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd020e0803020709
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30c0003080d0a0e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x577784
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x16
jge 0x5777b7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x5777de
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x577767
jmp 0x5777d2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f380
mov eax, edi
mov ecx, 0x10
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00577700
Function at 0x577800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5778eb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x1c161dbce0b72447
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xdfbe6f2ed50e1c16
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6010808080c0903
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd04070506010808
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4090d030a020202
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x577884
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x5c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x5c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x5778b7
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x5778de
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x577867
jmp 0x5778d2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f380
mov eax, edi
mov ecx, 0xe
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00577800

Function at 0x577900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577a26
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x2f006efe545cef5d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6e276522f0344e6c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1e446e276522f034
mov qword [rsp + 0x22], rdx
movabs rdx, 0x51666e3047fd3205
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1206070110040e16
mov qword [rsp + 0x32], rdx
movabs rdx, 0x914190c11121206
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2110b0610060919
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3061215100a1900
mov qword [rsp + 0x48], rdx
movabs rdx, 0x161319040e070703
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5779c0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x40]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x40]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x26
jge 0x5779ed
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x577a14
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x5779a3
jmp 0x577a08
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f380
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00577900
Function at 0x577a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577b48
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x9cf1b2a743bcb547
mov qword [rsp + 0x18], rdx
movabs rdx, 0x7fac02259cf1b2a7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5779b86f1d1e6587
mov qword [rsp + 0x24], rdx
movabs rdx, 0x61104080f010b06
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc050e110f0a0107
mov qword [rsp + 0x34], rdx
movabs rdx, 0x50b04050c050e11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1102070e02040902
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x577ae2
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1c
jge 0x577b0f
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x577b3b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x577ac5
jmp 0x577b2f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f380
mov eax, edi
mov ecx, 0x14
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00577a40

Function at 0x578580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x578668
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x177669de9fec6547
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd6c5ca6ebb177669
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb070307020c0409
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4040b070307020c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40303080a0b0c08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x578601
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffff8e
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x578632
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x57865b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffff8e
add r8d, edx
cmp rsi, 0xd
jb 0x5785e7
jmp 0x57864f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f380
mov eax, edi
mov ecx, 0xd
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00578580
Function at 0x578680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x578788
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xaaa536b99fe5ed47
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xaa89656dd58eaaa5
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa30030fad2725730
mov qword [rsp + 0x28], rdx
movabs rdx, 0x15120d0502030609
mov qword [rsp + 0x30], rdx
movabs rdx, 0x14040e0c01061313
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3080d030f031306
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4150c040d110706
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x578722
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x28]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x28]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x20
jge 0x57874f
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x57877b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x578705
jmp 0x57876f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f380
mov eax, edi
mov ecx, 0x16
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00578680

Function at 0x578cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x578dd3
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x1a093f6912744b47
mov qword [rsp + 0x18], rdx
movabs rdx, 0x323461aab302432f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6e46323461aab302
mov qword [rsp + 0x22], rdx
movabs rdx, 0x366c643eb71b4216
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6160c0110090b10
mov qword [rsp + 0x32], rdx
movabs rdx, 0x3120f1907141513
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x10901130a050312
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1080e0905161309
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x578d6e
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x11
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1e
jge 0x578d9f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x578dc6
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x11
add r8d, edx
cmp rsi, 0x1a
jb 0x578d54
jmp 0x578dba
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f380
mov eax, edi
mov ecx, 0x1a
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00578cc0
Function at 0x5797c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5798c8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xd91b676f4c743493
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x82633f72c76cd6d9
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9973676fafe01920
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd1000130f0a0c07
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1110060e0a161300
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1101001110060e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12070e130d080607
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x579860
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffff85
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x579891
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5798bb
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffff85
add r8d, edx
cmp rsi, 0x17
jb 0x579845
jmp 0x5798af
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f380
mov eax, edi
mov ecx, 0x17
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.005797c0

Function at 0x579e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x579f56
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6cb5644b23176528
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xaa656cb5644b2317
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57656db5c8df6caf
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa09060009020a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2030e0d000a0906
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3020a0c03060c04
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x579ef3
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x579f22
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x579f49
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x579ed6
nop
jmp 0x579f3d
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f380
mov eax, edi
mov ecx, 0x12
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.00579e60
Function at 0x57b120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57b232
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xabe6a1ac5074a147
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb98e9b65b550739d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4c495588a5a5b98e
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb3a1858b75a9e2bb
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1206111d0f0b1604
mov qword [rsp + 0x38], rdx
movabs rdx, 0x111d10120f0d170d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40f011c0518100b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x80712160e0d1a1b
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x57b1d1
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x20
jge 0x57b1fe
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x57b225
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x57b1b4
jmp 0x57b219
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045f380
mov eax, edi
mov ecx, 0x1e
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0057b120
Function at 0x57c720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57c833
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xd374738a06c6aa98
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa7c840f065f6056d
mov qword [rsp + 0x25], rdx
movabs rdx, 0xb3d05564a0a7c840
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0b4679b75a16ef5
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1713030a020e0901
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1c0a1b0f0d101515
mov qword [rsp + 0x42], rdx
movabs rdx, 0x14040c0714101c0a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x151900170c030107
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x57c7ce
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffff9e
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x57c7ff
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x57c826
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffff9e
add r8d, edx
cmp rsi, 0x1d
jb 0x57c7b4
jmp 0x57c81a
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045f380
mov eax, edi
mov ecx, 0x1d
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0057c720

Function at 0x57cc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57cd13
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x5741ea85bf86547
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xcc9e50650dba546d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x174111c80f63cc9e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x651cdf51246cbb5a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb030a0516020a1b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x17041c191a0f0e15
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b0f151a040b1a12
mov qword [rsp + 0x48], rdx
movabs rdx, 0x131107170211041b
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x57ccae
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x38
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x57ccdf
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x57cd06
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x38
add r8d, edx
cmp rsi, 0x1e
jb 0x57cc94
jmp 0x57ccfa
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045f380
mov eax, edi
mov ecx, 0x1e
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0057cc00