joyce8/EMBER2024-capa huggingface dataset:
Function at 0x565ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x45ddedac2ce761d9
mov qword [rsp + 0x18], rax
movabs rax, 0xb6012c5e81c17bbd
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1e]
movzx ecx, byte [rsp + 0x1c]
add eax, ecx
movzx ecx, byte [rsp + 0x21]
movzx edx, byte [rsp + 0x25]
xor ecx, edx
movzx edx, byte [rsp + 0x26]
movzx ebx, byte [rsp + 0x24]
sub edx, ebx
movzx ebx, byte [rsp + 0x22]
movzx esi, byte [rsp + 0x27]
add ebx, esi
movzx esi, byte [rsp + 0x1b]
movzx edi, byte [rsp + 0x1d]
sub esi, edi
movzx edi, byte [rsp + 0x20]
movzx r8d, byte [rsp + 0x1f]
add edi, r8d
movzx r8d, byte [rsp + 0x23]
movzx r9d, byte [rsp + 0x19]
sub r8d, r9d
movzx r9d, byte [rsp + 0x1a]
movzx r10d, byte [rsp + 0x18]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x565f86
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x565f7a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x566020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x40b1b414e19faf9a
mov qword [rsp + 0x18], rax
movabs rax, 0x262af8c634ebacf2
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1f]
movzx ecx, byte [rsp + 0x20]
xor eax, ecx
movzx ecx, byte [rsp + 0x22]
movzx edx, byte [rsp + 0x1e]
add ecx, edx
movzx edx, byte [rsp + 0x1c]
movzx ebx, byte [rsp + 0x19]
sub edx, ebx
movzx ebx, byte [rsp + 0x1b]
movzx esi, byte [rsp + 0x26]
sub ebx, esi
movzx esi, byte [rsp + 0x25]
movzx edi, byte [rsp + 0x24]
sub esi, edi
movzx edi, byte [rsp + 0x1a]
movzx r8d, byte [rsp + 0x23]
add edi, r8d
movzx r8d, byte [rsp + 0x27]
movzx r9d, byte [rsp + 0x21]
add r8d, r9d
movzx r9d, byte [rsp + 0x1d]
movzx r10d, byte [rsp + 0x18]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x566106
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x5660fa
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x5684e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x74567224051608a3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x406020302020307
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x301
xor eax, eax
jmp 0x568536
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x7f]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x568562
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5685a5
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x56851a
nop
jmp 0x568596
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x568580
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x56856f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x569260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x6d6045b0dfe08d36
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x304070703010600
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x70206
xor eax, eax
jmp 0x5692b5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x5692e8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x569325
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x79]
nop dword [rax]
cmp rbx, 8
jb 0x56929b
jmp 0x569317
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x569301
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x5692f5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x569340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x72e7de3e98659c64
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x202040703060202
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x100
xor eax, eax
jmp 0x569394
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x18]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x5693c8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x569405
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x18]
nop dword [rax + rax]
cmp rbx, 8
jb 0x56937a
jmp 0x5693f7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5693e1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5693d5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x569420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x926a5858de79697e
mov qword [rsp + 0x18], rax
movabs rax, 0x77096d861e1ff1ec
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x19]
movzx ecx, byte [rsp + 0x1b]
sub eax, ecx
movzx ecx, byte [rsp + 0x27]
movzx edx, byte [rsp + 0x25]
xor ecx, edx
movzx edx, byte [rsp + 0x1f]
movzx ebx, byte [rsp + 0x20]
add edx, ebx
movzx ebx, byte [rsp + 0x23]
movzx esi, byte [rsp + 0x1c]
add ebx, esi
movzx esi, byte [rsp + 0x21]
movzx edi, byte [rsp + 0x26]
add esi, edi
movzx edi, byte [rsp + 0x22]
movzx r8d, byte [rsp + 0x1a]
add edi, r8d
movzx r8d, byte [rsp + 0x1d]
movzx r9d, byte [rsp + 0x18]
add r8d, r9d
movzx r9d, byte [rsp + 0x1e]
movzx r10d, byte [rsp + 0x24]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x569506
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x5694fa
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x569880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xbf46a892803964b3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x305050707000305
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 7
xor eax, eax
jmp 0x5698d4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x569908
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x569945
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x52]
nop dword [rax + rax]
cmp rbx, 8
jb 0x5698ba
jmp 0x569937
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x569921
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x569915
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x56a3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x3467bc8a2ede8692
mov qword [rsp + 0x20], rdx
movabs rdx, 0x605020505050101
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x56a40d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x51]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x56a43c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56a477
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x51]
cmp rbx, 8
jb 0x56a3f3
jmp 0x56a46b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x56a455
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x56a449
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop
call fcn.00461020
nop
int3

Function at 0x56afc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x1c200289851f58ba
mov qword [rsp + 0x20], rdx
movabs rdx, 0x607030002010601
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x56b00f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x19]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x56b03a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56b075
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x56aff3
jmp 0x56b069
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x56b053
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x56b047
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00461020
nop
int3
Function at 0x56cba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xe4f8a3d58d4b382
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x507030102000102
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x603
xor eax, eax
jmp 0x56cbf6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 3]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x56cc22
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56cc65
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x56cbda
nop
jmp 0x56cc56
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x56cc40
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x56cc2f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x56d0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xd6616056643422f2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x403070701010200
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x406
xor eax, eax
jmp 0x56d134
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x7c]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x56d168
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56d1a5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x7c]
nop dword [rax + rax]
cmp rbx, 8
jb 0x56d11a
jmp 0x56d197
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x56d181
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x56d175
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x56db20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xa60a07b2279ec250
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x206060303050305
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6000604
xor eax, eax
jmp 0x56db75
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x1c]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x56dba8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56dbe5
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x1c]
nop dword [rax]
cmp rbx, 8
jb 0x56db5b
jmp 0x56dbd7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x56dbc1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x56dbb5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x56eb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x2541b29f47f3acd
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x105070706000004
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5000605
xor eax, eax
jmp 0x56eb55
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x1c]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x56eb88
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56ebc5
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x1c]
nop dword [rax]
cmp rbx, 8
jb 0x56eb3b
jmp 0x56ebb7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x56eba1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x56eb95
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x56ebe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xf2585420b665a409
mov qword [rsp + 0x18], rax
movabs rax, 0x899ad804b341f26d
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1a]
movzx ecx, byte [rsp + 0x1d]
add eax, ecx
movzx ecx, byte [rsp + 0x23]
movzx edx, byte [rsp + 0x20]
add ecx, edx
movzx edx, byte [rsp + 0x1c]
movzx ebx, byte [rsp + 0x1e]
sub edx, ebx
movzx ebx, byte [rsp + 0x24]
movzx esi, byte [rsp + 0x25]
add ebx, esi
movzx esi, byte [rsp + 0x27]
movzx edi, byte [rsp + 0x26]
xor esi, edi
movzx edi, byte [rsp + 0x1f]
movzx r8d, byte [rsp + 0x1b]
sub edi, r8d
movzx r8d, byte [rsp + 0x21]
movzx r9d, byte [rsp + 0x22]
sub r8d, r9d
movzx r9d, byte [rsp + 0x18]
movzx r10d, byte [rsp + 0x19]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x56ecc6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x56ecba
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x5704a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x570567
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x55f333514e4c4c0d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe3d4555f333514e
mov qword [rsp + 0x22], rdx
mov qword [rsp + 0x2a], 0x2040a06
movabs rdx, 0xa07010308090000
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x570509
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x30]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x30]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x570537
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x57055a
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x5704ec
jmp 0x57054e
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005704a0
Function at 0x570580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57064c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa52edbd1e4ddeabe
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xd56c
movabs rdx, 0x103020105000702
mov qword [rsp + 0x22], rdx
movabs rdx, 0x904050303050103
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x5705e4
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x57061c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x57063f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
cmp rsi, 0xa
jb 0x5705ca
jmp 0x570633
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00570580

Function at 0x570ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x570f6c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xeefdab702374e26e
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xeaea33d8
movabs rdx, 0x5090105090a0607
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1030801060b0509
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x570f05
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x570f3c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x570f5f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0xc
jb 0x570eeb
jmp 0x570f53
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00570ea0

Function at 0x5712e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57139d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xadf8ebec3365caed
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x84
movabs rdx, 0x408080407050104
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x600
xor eax, eax
nop
jmp 0x571340
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x57136d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x571390
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x571322
jmp 0x571384
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005712e0
Function at 0x574740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x57483b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6bb790799265668b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9e4da2906bb79079
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7073b37388b5ae6d
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb09060e11090308
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf110e11110f120d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x50f0f110e11110f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6040e1101001204
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5747d9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x38]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x57480b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x57482e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x38]
cmp rsi, 0x14
jb 0x5747bf
jmp 0x574822
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00574740

Function at 0x576720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5767ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa9e5eeba709c7243
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xeb6f649be352a9e5
mov qword [rsp + 0x30], rdx
movabs rdx, 0x209090504090a06
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x404070a0d070209
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x57678f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x2a]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x5767bc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5767df
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x576772
jmp 0x5767d3
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00576720