joyce8/EMBER2024-capa huggingface dataset:
Function at 0x55be60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x2309493eb0c7e4c7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x502040503050106
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 7
xor eax, eax
nop
jmp 0x55bec0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x5a]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x5a]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x55beeb
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55bf2a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x55bea2
jmp 0x55bf1e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55bf04
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55bef8
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3

Function at 0x55c2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x33b8a65c66696cd9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4010404050707
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x702
xor eax, eax
nop
jmp 0x55c340
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x5e]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x5e]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x55c36b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55c3aa
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x55c322
jmp 0x55c39e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55c384
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55c378
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3
Function at 0x55cf40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xa9eea059fb5ec9ce
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x306050401020306
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3020200
xor eax, eax
nop
jmp 0x55cfa0
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 3]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x55cfcb
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55d00a
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x55cf82
jmp 0x55cffe
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x55cfe4
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x55cfd8
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3

Function at 0x55d0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x88b51f9982c9255c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x704040102070001
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x201
xor eax, eax
nop
jmp 0x55d120
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x72]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x55d14b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55d18a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x55d102
jmp 0x55d17e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55d164
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55d158
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3
Function at 0x55d1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xc350c0facdb8d894
mov qword [rsp + 0x20], rdx
movabs rdx, 0x305030201060104
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x55d1f3
movzx r8d, byte [rsp + rbx + 0x20]
add r8d, 0x57
add edx, r8d
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x55d222
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55d266
movzx edi, byte [rsp + rsi + 0x20]
add edi, 0x57
add edi, edx
cmp rbx, 8
jb 0x55d1d9
nop
jmp 0x55d25a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x55d240
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x55d22f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3

Function at 0x55d9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x96d0852c9ff5508c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x704060706030301
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x307
xor eax, eax
nop
jmp 0x55da40
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xffffffab
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x55da6e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55daad
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xffffffab
add edi, edx
cmp rbx, 8
jb 0x55da22
jmp 0x55daa1
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55da87
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55da7b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3
Function at 0x55dac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x9556a588aeed385e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x106010002040506
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x55db13
movzx r8d, byte [rsp + rbx + 0x20]
add r8d, 0x7e
add edx, r8d
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x55db42
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55db86
movzx edi, byte [rsp + rsi + 0x20]
add edi, 0x7e
add edi, edx
cmp rbx, 8
jb 0x55daf9
nop
jmp 0x55db7a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x55db60
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x55db4f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3

Function at 0x55dba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x1d982fbf9344ca87
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x101030602020404
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x403
xor eax, eax
nop
jmp 0x55dc00
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0x33
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x55dc2e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55dc6d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0x33
add edi, edx
cmp rbx, 8
jb 0x55dbe2
jmp 0x55dc61
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55dc47
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55dc3b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3
Function at 0x55dc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xe4862abac113031e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x204010401060004
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x300
xor eax, eax
nop
jmp 0x55dce0
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xffffffe5
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x55dd0e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55dd4d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xffffffe5
add edi, edx
cmp rbx, 8
jb 0x55dcc2
jmp 0x55dd41
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55dd27
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55dd1b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3

Function at 0x55e9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x348fc043e99053cd
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x605010305020502
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 6
xor eax, eax
nop
jmp 0x55ea20
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0x72
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x55ea4e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55ea8d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0x72
add edi, edx
cmp rbx, 8
jb 0x55ea02
jmp 0x55ea81
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55ea67
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55ea5b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3
Function at 0x55ed20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55edf2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xde0e33222b28c863
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6c7a64de0e33222b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x906020301040209
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6070304
xor eax, eax
jmp 0x55ed8b
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x49
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x55edbc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x55ede5
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x49
add r8d, edx
cmp rsi, 0xb
jb 0x55ed71
jmp 0x55edd7
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.0045f380
mov eax, edi
mov ecx, 0xb
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0055ed20

Function at 0x55f1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55f28b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x64b1f9a7586dae7b
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xe6c
movabs rdx, 0x409010504030505
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6000409
xor eax, eax
jmp 0x55f226
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x55f257
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x55f27e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x55f209
jmp 0x55f272
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f380
mov eax, edi
mov ecx, 0xa
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0055f1c0
Function at 0x55f340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55f412
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xa3928291b28d006b
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x9bb9642e
movabs rdx, 0x103020b0103020a
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa07040606010504
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x55f3ae
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x55f3db
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x55f405
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x55f391
jmp 0x55f3f6
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a0a0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f380
mov eax, edi
mov ecx, 0xc
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0055f340

Function at 0x55f900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55f9c8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x777b2e948f7f7488
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x86
movabs rdx, 0x800020700040306
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x604
xor eax, eax
jmp 0x55f963
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0xa]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0xa]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x55f990
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x55f9bb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x55f946
jmp 0x55f9af
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f380
mov eax, edi
mov ecx, 9
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.0055f900

Function at 0x560880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56094b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xdc2e374e27323613
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x6c18
movabs rdx, 0x505010300040705
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8010408
xor eax, eax
jmp 0x5608e6
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x560917
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x56093e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x5608c9
jmp 0x560932
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a0a0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f380
mov eax, edi
mov ecx, 0xa
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00560880
Function at 0x560a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x560b56
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x445f74856d7f6886
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x734a4eb179445f74
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7375b6917453567d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2080b00010e0312
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4020b1108090408
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc1212030c080b0d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x560af3
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x560b22
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x560b49
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x560ad6
nop
jmp 0x560b3d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f380
mov eax, edi
mov ecx, 0x15
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.00560a60
Function at 0x561500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5615f6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6f4f746775714558
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6b6f4f7467757145
mov qword [rsp + 0x20], rdx
movabs rdx, 0x216a4a6f475d3071
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1000020e00061006
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20a0010040f0c09
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90a0a010a090b02
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x561590
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xfffffff4
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x5615c2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5615e9
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xfffffff4
add r8d, edx
cmp rsi, 0x11
jb 0x561576
nop
jmp 0x5615dd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f380
mov eax, edi
mov ecx, 0x11
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.00561500

Function at 0x561e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x561f36
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x4a4f6567bb3668d6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x65d0ce4b434a4f65
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc2bcc569aa6e6fab
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0710120d130208
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa0a030606120b07
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80b001412020b09
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x561ed3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x561f02
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x561f29
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x561eb6
nop
jmp 0x561f1d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f380
mov eax, edi
mov ecx, 0x15
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.00561e40
Function at 0x561f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x562068
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x524b4b33e56168ea
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4d69492a524b4b33
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5214e54708271265
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0e13030b051109
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1009070f1308120d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x71009070f1308
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100806040e060710
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x562000
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 8
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x562031
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x56205b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 8
add r8d, edx
cmp rsi, 0x14
jb 0x561fe5
jmp 0x56204f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f380
mov eax, edi
mov ecx, 0x14
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00561f60

Function at 0x562140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x562232
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7497a18d73b16c78
mov qword [rsp + 0x18], rdx
movabs rdx, 0x75767497a18d73b1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9dae649761486591
mov qword [rsp + 0x22], rdx
movabs rdx, 0x409050900110609
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe07100209040409
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10020a0706050e00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5621cd
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
mov byte [rsp + rdi + 0x18], r9b
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x5621fa
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x562225
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x5621b6
jmp 0x562215
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044a0a0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
nop dword [rax]
call fcn.0045f380
mov eax, edi
mov ecx, 0x12
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.00562140