joyce8/EMBER2024-capa huggingface dataset:
Function at 0x559c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x756e8d82015f4ece
mov qword [rsp + 0x20], rdx
movabs rdx, 0x702060503040700
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x559cad
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x559cdc
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x559d17
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x42]
cmp rbx, 8
jb 0x559c93
jmp 0x559d0b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x559cf5
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x559ce9
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461b40
mov eax, esi
mov ecx, 8
nop
call fcn.00461b40
nop
int3

Function at 0x55a480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x23fc61411cbb44d5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x301050102010301
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1000701
xor eax, eax
jmp 0x55a4d5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x55a508
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55a545
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x3f]
nop dword [rax]
cmp rbx, 8
jb 0x55a4bb
jmp 0x55a537
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x55a521
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x55a515
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461b40
mov eax, esi
mov ecx, 8
call fcn.00461b40
nop
int3
Function at 0x55ac40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xc94da8144fe58b6f
mov qword [rsp + 0x18], rax
movabs rax, 0x4b0392363a0f6f30
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x1e]
add eax, ecx
movzx ecx, byte [rsp + 0x1b]
movzx edx, byte [rsp + 0x25]
sub ecx, edx
movzx edx, byte [rsp + 0x1a]
movzx ebx, byte [rsp + 0x27]
add edx, ebx
movzx ebx, byte [rsp + 0x1d]
movzx esi, byte [rsp + 0x22]
add ebx, esi
movzx esi, byte [rsp + 0x24]
movzx edi, byte [rsp + 0x21]
xor esi, edi
movzx edi, byte [rsp + 0x19]
movzx r8d, byte [rsp + 0x18]
add edi, r8d
movzx r8d, byte [rsp + 0x26]
movzx r9d, byte [rsp + 0x20]
add r8d, r9d
movzx r9d, byte [rsp + 0x1f]
movzx r10d, byte [rsp + 0x1c]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x55ad26
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x55ad1a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x55b780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xb16e8c92e8752384
mov qword [rsp + 0x18], rax
movabs rax, 0xa7dcdcbf20e5e3a9
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x19]
movzx ecx, byte [rsp + 0x1e]
add eax, ecx
movzx ecx, byte [rsp + 0x24]
movzx edx, byte [rsp + 0x1c]
add ecx, edx
movzx edx, byte [rsp + 0x1d]
movzx ebx, byte [rsp + 0x26]
sub edx, ebx
movzx ebx, byte [rsp + 0x21]
movzx esi, byte [rsp + 0x20]
add ebx, esi
movzx esi, byte [rsp + 0x1b]
movzx edi, byte [rsp + 0x18]
xor esi, edi
movzx edi, byte [rsp + 0x27]
movzx r8d, byte [rsp + 0x1a]
sub edi, r8d
movzx r8d, byte [rsp + 0x23]
movzx r9d, byte [rsp + 0x1f]
add r8d, r9d
movzx r9d, byte [rsp + 0x25]
movzx r10d, byte [rsp + 0x22]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x55b866
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x55b85a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x55c9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x202c6aae078a2d8c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x700060507050701
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x203
xor eax, eax
jmp 0x55c9f4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x1e]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x55ca28
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55ca65
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x1e]
nop dword [rax + rax]
cmp rbx, 8
jb 0x55c9da
jmp 0x55ca57
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55ca41
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55ca35
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461b40
mov eax, esi
mov ecx, 8
call fcn.00461b40
nop
int3

Function at 0x55dd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xe28476da15e05d2d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x605000305040403
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7050205
xor eax, eax
jmp 0x55dd75
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x55dda8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55dde5
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x68]
nop dword [rax]
cmp rbx, 8
jb 0x55dd5b
jmp 0x55ddd7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x55ddc1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x55ddb5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461b40
mov eax, esi
mov ecx, 8
call fcn.00461b40
nop
int3
Function at 0x55e180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x7b0ea2f3d968ff19
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x50204010703
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x407
xor eax, eax
jmp 0x55e1d6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x55]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x55e202
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55e245
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x55e1ba
nop
jmp 0x55e236
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55e220
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x55e20f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461b40
mov eax, esi
mov ecx, 8
call fcn.00461b40
nop
int3

Function at 0x55f3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xfeaf4159ee6be1be
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x400000305070004
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x403
xor eax, eax
jmp 0x55f434
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x70]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x55f468
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55f4a5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x70]
nop dword [rax + rax]
cmp rbx, 8
jb 0x55f41a
jmp 0x55f497
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55f481
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55f475
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461b40
mov eax, esi
mov ecx, 8
call fcn.00461b40
nop
int3
Function at 0x55fea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x3669ad61fb534c01
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x601050303050703
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2000501
xor eax, eax
jmp 0x55fef5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x55ff28
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55ff65
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x2e]
nop dword [rax]
cmp rbx, 8
jb 0x55fedb
jmp 0x55ff57
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x55ff41
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x55ff35
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461b40
mov eax, esi
mov ecx, 8
call fcn.00461b40
nop
int3

Function at 0x55ff80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x4a2c9825397e14a5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x604010703040404
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 3
xor eax, eax
jmp 0x55ffd4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x560008
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x560045
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x3a]
nop dword [rax + rax]
cmp rbx, 8
jb 0x55ffba
jmp 0x560037
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x560021
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x560015
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461b40
mov eax, esi
mov ecx, 8
call fcn.00461b40
nop
int3
Function at 0x560560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xd27712e4bb08125e
mov qword [rsp + 0x18], rax
movabs rax, 0xc3f899cb2452d981
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x1e]
add eax, ecx
movzx ecx, byte [rsp + 0x1a]
movzx edx, byte [rsp + 0x27]
sub ecx, edx
movzx edx, byte [rsp + 0x19]
movzx ebx, byte [rsp + 0x1c]
add edx, ebx
movzx ebx, byte [rsp + 0x1b]
movzx esi, byte [rsp + 0x24]
xor ebx, esi
movzx esi, byte [rsp + 0x20]
movzx edi, byte [rsp + 0x18]
sub esi, edi
movzx edi, byte [rsp + 0x26]
movzx r8d, byte [rsp + 0x25]
sub edi, r8d
movzx r8d, byte [rsp + 0x22]
movzx r9d, byte [rsp + 0x21]
sub r8d, r9d
movzx r9d, byte [rsp + 0x1f]
movzx r10d, byte [rsp + 0x1d]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x560646
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x56063a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x560760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x8f49e963ad0f669f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x503050202010604
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5607ad
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x57]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x5607dc
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x560817
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x57]
cmp rbx, 8
jb 0x560793
jmp 0x56080b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5607f5
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x5607e9
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461b40
mov eax, esi
mov ecx, 8
nop
call fcn.00461b40
nop
int3
Function at 0x560ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x23d0305dfd184f78
mov qword [rsp + 0x18], rax
movabs rax, 0xb5ad9f099492ca74
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1a]
movzx ecx, byte [rsp + 0x23]
add eax, ecx
movzx ecx, byte [rsp + 0x19]
movzx edx, byte [rsp + 0x1f]
sub ecx, edx
movzx edx, byte [rsp + 0x18]
movzx ebx, byte [rsp + 0x1e]
sub edx, ebx
movzx ebx, byte [rsp + 0x24]
movzx esi, byte [rsp + 0x27]
add ebx, esi
movzx esi, byte [rsp + 0x1b]
movzx edi, byte [rsp + 0x26]
add esi, edi
movzx edi, byte [rsp + 0x22]
movzx r8d, byte [rsp + 0x25]
add edi, r8d
movzx r8d, byte [rsp + 0x1d]
movzx r9d, byte [rsp + 0x20]
xor r8d, r9d
movzx r9d, byte [rsp + 0x1c]
movzx r10d, byte [rsp + 0x21]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x560c86
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x560c7a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x5616a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x688937ef913cb2af
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x402050303020306
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x300
xor eax, eax
jmp 0x5616f4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x4d]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x561728
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x561765
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x4d]
nop dword [rax + rax]
cmp rbx, 8
jb 0x5616da
jmp 0x561757
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x561741
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x561735
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461b40
mov eax, esi
mov ecx, 8
call fcn.00461b40
nop
int3
Function at 0x561800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x93938dbde3a85e56
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x301070004010700
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 2
xor eax, eax
jmp 0x561856
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0xd]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0xd]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x561882
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5618c5
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x56183a
nop
jmp 0x5618b6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5618a0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x56188f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461b40
mov eax, esi
mov ecx, 8
call fcn.00461b40
nop
int3

Function at 0x562320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x1816ccd1292f5a7
mov qword [rsp + 0x20], rdx
movabs rdx, 0x305010507010402
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x56236f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x79]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x56239a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5623d5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x562353
jmp 0x5623c9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5623b3
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x5623a7
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461b40
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00461b40
nop
int3

Function at 0x562960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x15a35c02981374b8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x507010607030101
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5629ad
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0xf]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x5629dc
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x562a17
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0xf]
cmp rbx, 8
jb 0x562993
jmp 0x562a0b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5629f5
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x5629e9
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461b40
mov eax, esi
mov ecx, 8
nop
call fcn.00461b40
nop
int3
Function at 0x5644a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xdc8361305478e29b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x401010105030400
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x705
xor eax, eax
jmp 0x5644f6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x72]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x564522
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x564565
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x5644da
nop
jmp 0x564556
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x564540
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x56452f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461b40
mov eax, esi
mov ecx, 8
call fcn.00461b40
nop
int3

Function at 0x564800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x87fd499008815df7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x706060505000500
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x402
xor eax, eax
jmp 0x564856
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x2d]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x564882
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5648c5
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x56483a
nop
jmp 0x5648b6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5648a0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x56488f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461b40
mov eax, esi
mov ecx, 8
call fcn.00461b40
nop
int3
Function at 0x564be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xf1b4f1ab248bf6ac
mov qword [rsp + 0x18], rax
movabs rax, 0xda9a4f6094f30578
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x18]
movzx ecx, byte [rsp + 0x1f]
add eax, ecx
movzx ecx, byte [rsp + 0x20]
movzx edx, byte [rsp + 0x26]
sub ecx, edx
movzx edx, byte [rsp + 0x24]
movzx ebx, byte [rsp + 0x19]
sub edx, ebx
movzx ebx, byte [rsp + 0x1d]
movzx esi, byte [rsp + 0x1a]
sub ebx, esi
movzx esi, byte [rsp + 0x21]
movzx edi, byte [rsp + 0x23]
sub esi, edi
movzx edi, byte [rsp + 0x1e]
movzx r8d, byte [rsp + 0x25]
xor edi, r8d
movzx r8d, byte [rsp + 0x1c]
movzx r9d, byte [rsp + 0x22]
sub r8d, r9d
movzx r9d, byte [rsp + 0x1b]
movzx r10d, byte [rsp + 0x27]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x564cc6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x564cba
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x565180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x10451f324dc15aa5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x206070200060304
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x207
xor eax, eax
jmp 0x5651d4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x565208
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x565245
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x49]
nop dword [rax + rax]
cmp rbx, 8
jb 0x5651ba
jmp 0x565237
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x565221
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x565215
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461b40
mov eax, esi
mov ecx, 8
call fcn.00461b40
nop
int3