joyce8/EMBER2024-capa huggingface dataset:
Function at 0x541640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x541712
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x566c7775eccf6956
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xcc5ad26b
movabs rdx, 0x207050a0b080507
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb03090508050a05
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5416ab
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x77
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x5416dc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x541705
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x77
add r8d, edx
cmp rsi, 0xc
jb 0x541691
jmp 0x5416f7
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00541640

Function at 0x5426e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5427b2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x66b29febd1607cb
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x57a1
movabs rdx, 0x307050504070501
mov qword [rsp + 0x22], rdx
movabs rdx, 0x801000402080307
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x54274d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x4e]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x4e]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x54277a
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5427a5
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x542730
jmp 0x542795
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xa
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005426e0
Function at 0x548b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x548c92
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x5056655f61655131
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x58655056655f6165
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x651169746e64566f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x656c7f5860526e83
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x323a6f629a8e3820
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1d1c1510000a170a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1b121c1f1d1c1510
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14091d1b1500151d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160b1c04211b0714
mov qword [rsp + 0x50], rdx
movabs rdx, 0x30c1e1906101401
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x548c2c
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffffe3
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x24
jge 0x548c5d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x548c85
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffffe3
add r8d, edx
cmp rsi, 0x22
jb 0x548c12
jmp 0x548c78
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x22
call fcn.0044ba20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x22
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0x22
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00548b60
Function at 0x5496e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5497a8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x5374e3e55cbfed77
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x101070403020505
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2040403
xor eax, eax
jmp 0x549740
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xffffff80
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x549771
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x54979b
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xffffff80
add r8d, edx
cmp rsi, 8
jb 0x549722
jmp 0x54978f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00461e80
mov eax, edi
mov ecx, 8
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005496e0
Function at 0x54b0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54b1b2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xfd6daf74058e9cc9
mov qword [rsp + 0x19], rdx
movabs rdx, 0x74ea88fd6daf7405
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x302000001000807
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9070305
xor eax, eax
jmp 0x54b14b
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x63
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x54b17c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x54b1a5
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x63
add r8d, edx
cmp rsi, 0xb
jb 0x54b131
jmp 0x54b197
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0054b0e0

Function at 0x5513c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5514a8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xe556e121611590e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xfa0e0faca8ee1098
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe0c0d080c010604
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd0000040b070e0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe07090a0f010302
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x551441
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x4d
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x551472
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x55149b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x4d
add r8d, edx
cmp rsi, 0x10
jb 0x551427
jmp 0x55148f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461e80
mov eax, edi
mov ecx, 0x10
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005513c0
Function at 0x55c580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55c692
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6520f1f97407f9f6
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1063742077667272
mov qword [rsp + 0x23], rdx
movabs rdx, 0x677c036e8d106374
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8518659263020120
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2120a0d1318100d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50010041c0a0d16
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12130201010b0a19
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170f131c1b010a18
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x55c631
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x6b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x20
jge 0x55c65e
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x55c685
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x55c614
jmp 0x55c679
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461e80
mov eax, edi
mov ecx, 0x1d
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0055c580

Function at 0x55c8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55c9bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xb4efdffe55fb2125
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x296445b4efdffe55
mov qword [rsp + 0x22], rdx
movabs rdx, 0x909060407090703
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x303070305020909
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x55c955
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x55c988
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x55c9af
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x55c938
jmp 0x55c9a3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.0055c8e0
Function at 0x55c9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55caab
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x5245a0cf9ba8a7d1
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xc442
movabs rdx, 0x303000502090309
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1020403
xor eax, eax
jmp 0x55ca46
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x55ca77
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x55ca9e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x55ca29
jmp 0x55ca92
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461e80
mov eax, edi
mov ecx, 0xa
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0055c9e0

Function at 0x55cac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55cb8b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xb3d1dd3045e321cf
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x42
movabs rdx, 0x402040804040606
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5050007
xor eax, eax
jmp 0x55cb24
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x7f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x7f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x55cb57
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x55cb7e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x55cb07
jmp 0x55cb72
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0055cac0

Function at 0x55d7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55d868
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x486452137465e3f9
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x20
movabs rdx, 0x105000104070004
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0
xor eax, eax
jmp 0x55d803
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x55d830
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x55d85b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x55d7e6
jmp 0x55d84f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0055d7a0
Function at 0x55e1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55e2b6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x3f36687cc47bcef0
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc73f36687cc47bce
mov qword [rsp + 0x20], rdx
movabs rdx, 0xfb6665644cc05af2
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc04090b070705
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5030a0902091010
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9090401080002
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x55e253
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x55e282
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x55e2a9
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x55e236
nop
jmp 0x55e29d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461e80
mov eax, edi
mov ecx, 0x11
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.0055e1c0

Function at 0x55e2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55e3d6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xa52417345eed1d30
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf5a52417345eed1d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4dade72a63ec5739
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80f060d08070d10
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30b01080603010a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2080602050e0f0f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x55e370
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x31
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x55e3a2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x55e3c9
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x31
add r8d, edx
cmp rsi, 0x11
jb 0x55e356
nop
jmp 0x55e3bd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461e80
mov eax, edi
mov ecx, 0x11
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.0055e2e0
Function at 0x55e400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55e4f6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6928e13433e23130
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb76928e13433e231
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa9c667b0f462b5f3
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20d07080c0e0f09
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60a020d07080c0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0505050c050810
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x55e490
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x6d
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x55e4c2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x55e4e9
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x6d
add r8d, edx
cmp rsi, 0x11
jb 0x55e476
nop
jmp 0x55e4dd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461e80
mov eax, edi
mov ecx, 0x11
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.0055e400
Function at 0x5613a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5614c6
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x9e5c834c691a4a5c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6e69576864636e5a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6551656d6c4f6e69
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x746c756f69752e18
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4140f0d01190f10
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x211191600060414
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1205040814141d0a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c1d100a19081d0c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x18170718180b1204
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x561460
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x26
jge 0x56148d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x5614b4
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1e
jb 0x561443
jmp 0x5614a8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.0044ba20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461e80
mov eax, edi
mov ecx, 0x1e
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005613a0
Function at 0x561be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x561d26
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xd7733f60cf723a74
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xbdea90f8d7733f60
mov qword [rsp + 0x20], rdx
movabs rdx, 0x77277247f12665d7
mov qword [rsp + 0x28], rdx
movabs rdx, 0x31748c8cccecf2d7
mov qword [rsp + 0x30], rdx
movabs rdx, 0xfc6ebeaad5a3654c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x161e1b0b0a011621
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1141e20000e190f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe00090717001f03
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe2319231823000c
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa120c041c0c1605
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc1c08160a15050b
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x561cc0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x30
jge 0x561ced
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x561d14
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x24
jb 0x561ca2
jmp 0x561d08
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x24
call fcn.0044ba20
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x24
call fcn.00461e80
mov eax, edi
mov ecx, 0x24
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00561be0

Function at 0x564800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x564967
sub rsp, 0xc0
mov qword [rsp + 0xb8], rbp
lea rbp, [rsp + 0xb8]
movabs rdx, 0xbb453a5969e95662
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20ebf19c8ffdbb45
mov qword [rsp + 0x24], rdx
movabs rdx, 0x214241fc65d35c26
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7665c07031cabd2c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x9b176fe0cb81f008
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x7c4f218141cfbdc
mov qword [rsp + 0x44], rdx
movabs rdx, 0x612074186e65cfa8
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x11461f24c0752f96
mov qword [rsp + 0x54], rdx
movabs rdx, 0x660152a03f4328ac
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x411f0c042b172b0a
mov qword [rsp + 0x64], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x006aac98]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0046249a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x564900
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x6c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x6c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x54
jge 0x56492d
movzx edx, byte [rsp + rax + 0x64]
movzx esi, byte [rsp + rax + 0x65]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x46
jae 0x56495a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x46
jb 0x5648df
jmp 0x56494e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x46
call fcn.0044ba20
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
mov eax, esi
mov ecx, 0x46
call fcn.00461e80
mov eax, edi
mov ecx, 0x46
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00564800
Function at 0x566280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x566348
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe500e2841b70b6e5
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xe6
movabs rdx, 0x705030603040301
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8000004
xor eax, eax
jmp 0x5662e1
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x5c
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x566312
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x56633b
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x5c
add r8d, edx
cmp rsi, 9
jb 0x5662c7
jmp 0x56632f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00566280

Function at 0x566ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x566d72
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x75d8f4ecf0d6020d
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x73d4ecf1
movabs rdx, 0x700040902010308
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6000700050a0700
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x566d0b
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0x68
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x566d3c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x566d65
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0x68
add r8d, edx
cmp rsi, 0xc
jb 0x566cf1
jmp 0x566d57
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00566ca0
Function at 0x568140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x568286
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x63fe664ccc466e69
mov qword [rsp + 0x18], rdx
movabs rdx, 0x15204e23516963fe
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x412ef6662c612935
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe9650474d8af3d54
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x12701b5c206f7467
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1d1b110603191425
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x15031b0e0a172513
mov qword [rsp + 0x46], rdx
movabs rdx, 0x181915031b0e0a17
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2515021d140d150f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x180b22171d201a23
mov qword [rsp + 0x58], rdx
movabs rdx, 0x9161119220e0414
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x568220
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x2a
jge 0x56824d
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x568274
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x26
jb 0x568202
jmp 0x568268
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x26
call fcn.0044ba20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x26
call fcn.00461e80
mov eax, edi
mov ecx, 0x26
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00568140