joyce8/EMBER2024-capa huggingface dataset:
Function at 0x556f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x5b69cd02da5126c3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x301050105000206
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x104
xor eax, eax
nop
jmp 0x556f60
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x4d]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x556f8f
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x556fce
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x4d]
cmp rbx, 8
jb 0x556f42
jmp 0x556fc2
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x556fa8
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x556f9c
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f500
mov eax, esi
mov ecx, 8
call fcn.0045f500
nop
int3

Function at 0x557320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xb788e982ab5222a4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x106020505060101
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 3
xor eax, eax
nop
jmp 0x557380
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x20]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x20]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x5573ab
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5573ea
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x557362
jmp 0x5573de
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5573c4
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5573b8
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f500
mov eax, esi
mov ecx, 8
call fcn.0045f500
nop
int3
Function at 0x558ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x93f166e09353b45b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x507000105010405
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x558b35
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x61]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x61]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x558b62
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x558ba6
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x558b19
nop
jmp 0x558b9a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x558b80
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x558b6f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f500
mov eax, esi
mov ecx, 8
call fcn.0045f500
nop
int3

Function at 0x55a740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55a81c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7af8010a80b873eb
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x68f4647af8010a80
mov qword [rsp + 0x20], rdx
movabs rdx, 0x500070205030405
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa02020a02060309
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x55a7b2
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x55a7e8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x55a80f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6d]
nop dword [rax]
cmp rsi, 0xb
jb 0x55a798
jmp 0x55a803
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f500
mov eax, edi
mov ecx, 0xb
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.0055a740
Function at 0x55aa20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55aae8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xeefbf76cb9f61c08
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6c
movabs rdx, 0x503060000010101
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x207
xor eax, eax
jmp 0x55aa80
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x69]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x55aab2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x55aadb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x69]
cmp rsi, 9
jb 0x55aa66
jmp 0x55aacf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f500
mov eax, edi
mov ecx, 9
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0055aa20

Function at 0x55abe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55aca8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6c64030dbad00f00
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6c
movabs rdx, 0x304030405020400
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x401
xor eax, eax
jmp 0x55ac43
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x67]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x67]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x55ac70
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x55ac9b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x55ac26
jmp 0x55ac8f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f500
mov eax, edi
mov ecx, 9
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0055abe0
Function at 0x55b9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55ba9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x3a212d32ee6580f3
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6c01cb3a212d32ee
mov qword [rsp + 0x20], rdx
movabs rdx, 0x508060403080103
mov qword [rsp + 0x28], rdx
movabs rdx, 0x509010309030007
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x55ba35
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x55ba68
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x55ba8f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x55ba18
jmp 0x55ba83
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f500
mov eax, edi
mov ecx, 0xb
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.0055b9c0

Function at 0x55bac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55bb9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x10176fbfbdd01876
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x85131f10176fbfbd
mov qword [rsp + 0x22], rdx
movabs rdx, 0x802010a03060409
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x909080607010802
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x55bb35
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x55bb68
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x55bb8f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x55bb18
jmp 0x55bb83
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f500
mov eax, edi
mov ecx, 0xb
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.0055bac0
Function at 0x55c580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55c6c8
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xd85f9717cb5f4dd8
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6ea4d85f9717cb5f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x65ebad7ba7f17d69
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8bbfded863816697
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x75659cf2e00c74a7
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1e1c1d0c07210407
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x181621141d1c2112
mov qword [rsp + 0x44], rdx
movabs rdx, 0x21001e0518162114
mov qword [rsp + 0x48], rdx
movabs rdx, 0x21090e030f1f1f17
mov qword [rsp + 0x50], rdx
movabs rdx, 0x19080e0b1a09101a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x416050c1819090d
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x55c660
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x59]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2c
jge 0x55c692
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x55c6bb
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x59]
cmp rsi, 0x22
jb 0x55c642
jmp 0x55c6af
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x22
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x22
call fcn.0045f500
mov eax, edi
mov ecx, 0x22
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0055c580

Function at 0x55ee20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55eefc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x65888674a58c7143
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb8d363699e7f6588
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50c0306030c0d0d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1060208010d0909
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x55ee92
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x55eec8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x55eeef
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
nop dword [rax]
cmp rsi, 0xe
jb 0x55ee78
jmp 0x55eee3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f500
mov eax, edi
mov ecx, 0xe
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.0055ee20
Function at 0x560320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56041c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x76d32b536d34f3e8
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x53d1d6636976d32b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x573a45d2b87459ef
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x202130210000101
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0a0d0d0e020202
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb13020205131106
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5603b0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x5603e8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x56040f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
nop word [rax + rax]
cmp rsi, 0x15
jb 0x560396
jmp 0x560403
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f500
mov eax, edi
mov ecx, 0x15
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.00560320
Function at 0x5612e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x561406
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x75e61fe13e74c8dc
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xec639130c5a5a169
mov qword [rsp + 0x27], rdx
movabs rdx, 0x742991ec639130c5
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb074676ea096a06f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x151a101105151a07
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1a0a0c0d0f09151a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1000031503010004
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb140b110609030d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x414001603090401
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5613a0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x21]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x21]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x26
jge 0x5613cd
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x5613f4
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1b
jb 0x561383
jmp 0x5613e8
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1b
call fcn.0044a140
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1b
call fcn.0045f500
mov eax, edi
mov ecx, 0x1b
nop dword [rax + rax]
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005612e0
Function at 0x5620e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5621e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x7558647a78505573
mov qword [rsp + 0x19], rdx
movabs rdx, 0x726f6d5d75417b75
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7239866f6d654f52
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20414040c020f08
mov qword [rsp + 0x30], rdx
movabs rdx, 0x308040b00011103
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc030b0316150408
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12100b0610160610
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x562180
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x5621b2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5621db
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
cmp rsi, 0x17
jb 0x562165
jmp 0x5621cf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f500
mov eax, edi
mov ecx, 0x17
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005620e0
Function at 0x565160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56525c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x76765d7a72725451
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6f2d8e7676765d7a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x72486769906e5783
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0c060b0f060709
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb0b0a120d0c060b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x50a040702021301
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x5651f0
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1b]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x14
jge 0x565228
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x56524f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1b]
nop word [rax + rax]
cmp rsi, 0x14
jb 0x5651d6
jmp 0x565243
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f500
mov eax, edi
mov ecx, 0x14
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.00565160

Function at 0x5656e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5657e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xd7fb7e797205af51
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf61893ed9ff0e6d7
mov qword [rsp + 0x26], rdx
movabs rdx, 0xdd73126461d3f76b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1610070510130211
mov qword [rsp + 0x36], rdx
movabs rdx, 0x60a140d0b0b0e09
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc01060a140d0b0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0807060c010102
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x565782
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1a
jge 0x5657af
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5657db
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x565765
jmp 0x5657cf
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f500
mov eax, edi
mov ecx, 0x17
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005656e0
Function at 0x565c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x565cf2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x65ec526cc367f6f0
mov qword [rsp + 0x19], rdx
movabs rdx, 0xecddf965ec526cc3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa0801060506050a
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9000303
xor eax, eax
jmp 0x565c8e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x565cbb
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x565ce5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x565c71
jmp 0x565cd6
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.0045f500
mov eax, edi
mov ecx, 0xb
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00565c20
Function at 0x5679c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x567ad2
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xa981b565bbd3be53
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xbb6364cf84797469
mov qword [rsp + 0x27], rdx
movabs rdx, 0xf4bb6364cf847974
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe1d175447285f49d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x61201120706100f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0b0c0b03171616
mov qword [rsp + 0x40], rdx
movabs rdx, 0x502180317130f0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x310020d11050201
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x567a71
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x567a9e
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x567ac5
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x567a54
jmp 0x567ab9
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.0044a140
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f500
mov eax, edi
mov ecx, 0x19
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005679c0

Function at 0x568660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x568748
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x43980065ffed8e45
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6fa51015e6ea0043
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc00030d0c070d00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x106090b0c00030d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60803020a000501
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5686e1
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x568713
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x56873b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
cmp rsi, 0xf
jb 0x5686c7
jmp 0x56872f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f500
mov eax, edi
mov ecx, 0xf
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00568660
Function at 0x56c300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56c408
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x968bd2337472a203
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6f5797d968bd233
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xaa6f8d6fa1536d09
mov qword [rsp + 0x24], rdx
movabs rdx, 0x11080404120f06
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70f120f060a0405
mov qword [rsp + 0x34], rdx
movabs rdx, 0x10c0c0a070f120f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc13000c0a0b0f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x56c3a2
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x7a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x7a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1c
jge 0x56c3cf
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x56c3fb
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x56c385
jmp 0x56c3ef
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f500
mov eax, edi
mov ecx, 0x14
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0056c300

Function at 0x56dfe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56e0e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x7470a62f69a665b1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xafb0c18a7470a62f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb4cc73c385a7f87c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd050d0f10090f03
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb0c020a0b120402
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x13050f000a0f0b0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100908050e100f12
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x56e080
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x56e0b2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x56e0db
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
cmp rsi, 0x14
jb 0x56e065
jmp 0x56e0cf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f500
mov eax, edi
mov ecx, 0x14
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0056dfe0