joyce8/EMBER2024-capa huggingface dataset:
Function at 0x562180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x621905f72650266e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x605070507020200
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3040704
xor eax, eax
nop
jmp 0x5621e0
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x4d]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x56220f
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56224e
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x4d]
cmp rbx, 8
jb 0x5621c2
jmp 0x562242
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x562228
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x56221c
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x563620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xdca8bef70d0cc1b8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x602050202010106
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x563675
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x36]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x5636a2
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5636e6
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x563659
nop
jmp 0x5636da
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5636c0
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5636af
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x5638e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xcf8abb827b83a372
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x302050301060704
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 2
xor eax, eax
nop
jmp 0x563940
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 1]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x56396b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5639aa
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x563922
jmp 0x56399e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x563984
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x563978
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x564120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x5286f85ac9644ba1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x306000707030400
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x706
xor eax, eax
nop
jmp 0x564180
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5641af
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5641ee
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x55]
cmp rbx, 8
jb 0x564162
jmp 0x5641e2
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5641c8
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5641bc
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x564200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0xbd30d2809baafde6
mov qword [rsp + 0x18], rax
movabs rax, 0x89d758406784d025
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1a]
movzx ecx, byte [rsp + 0x19]
add eax, ecx
movzx ecx, byte [rsp + 0x26]
movzx edx, byte [rsp + 0x1f]
movzx ebx, byte [rsp + 0x27]
movzx esi, byte [rsp + 0x1c]
movzx edi, byte [rsp + 0x21]
movzx r8d, byte [rsp + 0x23]
movzx r9d, byte [rsp + 0x1b]
movzx r10d, byte [rsp + 0x1e]
movzx r11d, byte [rsp + 0x1d]
movzx r12d, byte [rsp + 0x22]
movzx r13d, byte [rsp + 0x18]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x24]
movzx r13d, byte [rsp + 0x20]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x25]
mov byte [rsp + 0xf], al
sub ecx, edx
mov byte [rsp + 0x10], cl
lea eax, [rsi + rbx]
mov byte [rsp + 0x11], al
sub edi, r8d
mov byte [rsp + 0x12], dil
lea eax, [r10 + r9]
mov byte [rsp + 0x13], al
xor r11d, r12d
mov byte [rsp + 0x14], r11b
movzx eax, byte [rsp + 6]
sub eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
sub eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x564306
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x5642fa
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
nop
ret

Function at 0x565140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0xe72c75440cf4f15c
mov qword [rsp + 0x18], rax
movabs rax, 0xa817276f1d540781
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x24]
movzx ecx, byte [rsp + 0x1a]
xor eax, ecx
movzx ecx, byte [rsp + 0x19]
movzx edx, byte [rsp + 0x22]
movzx ebx, byte [rsp + 0x20]
movzx esi, byte [rsp + 0x1d]
movzx edi, byte [rsp + 0x1e]
movzx r8d, byte [rsp + 0x1c]
movzx r9d, byte [rsp + 0x26]
movzx r10d, byte [rsp + 0x1b]
movzx r11d, byte [rsp + 0x21]
movzx r12d, byte [rsp + 0x27]
movzx r13d, byte [rsp + 0x18]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x23]
movzx r13d, byte [rsp + 0x1f]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x25]
mov byte [rsp + 0xf], al
lea eax, [rdx + rcx]
mov byte [rsp + 0x10], al
lea eax, [rsi + rbx]
mov byte [rsp + 0x11], al
lea eax, [r8 + rdi]
mov byte [rsp + 0x12], al
lea eax, [r10 + r9]
mov byte [rsp + 0x13], al
sub r11d, r12d
mov byte [rsp + 0x14], r11b
movzx eax, byte [rsp + 6]
add eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
sub eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x565247
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x56523b
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
Function at 0x5653c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x8df71e6e3c20781
mov qword [rsp + 0x20], rdx
movabs rdx, 0x706050702040102
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x565415
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x56]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x565442
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x565486
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x5653f9
nop
jmp 0x56547a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x565460
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x56544f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x566740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x8f550446d4bef620
mov qword [rsp + 0x20], rdx
movabs rdx, 0x602060004000100
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x566793
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x5667c8
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x566807
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x27]
nop word [rax + rax]
cmp rbx, 8
jb 0x566779
jmp 0x5667fb
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5667e1
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x5667d5
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x566960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x12d3162dab1f8dbc
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x206060600030301
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7060202
xor eax, eax
nop
jmp 0x5669c0
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x70]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x70]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x5669eb
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x566a2a
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x5669a2
jmp 0x566a1e
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x566a04
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x5669f8
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x567da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xb65199e4194d80b8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x603010604010307
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1010406
xor eax, eax
nop
jmp 0x567e00
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x5f]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x567e2f
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x567e6e
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x5f]
cmp rbx, 8
jb 0x567de2
jmp 0x567e62
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x567e48
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x567e3c
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x568480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x85b509a720f055b2
mov qword [rsp + 0x20], rdx
movabs rdx, 0x604020204040603
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5684d5
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x6b]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x568502
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x568546
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x5684b9
nop
jmp 0x56853a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x568520
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x56850f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x568560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x4a1f24cbc70267b0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1030504030306
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x403
xor eax, eax
nop
jmp 0x5685c0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x57]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x5685eb
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56862a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x5685a2
jmp 0x56861e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x568604
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5685f8
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x569080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x7b11e9b008db5d00
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x500040600020600
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x505
xor eax, eax
nop
jmp 0x5690e0
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x56910f
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56914e
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x63]
cmp rbx, 8
jb 0x5690c2
jmp 0x569142
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x569128
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x56911c
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x569160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xf6b048e0cfde3cb3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x402060404030601
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x401
xor eax, eax
nop
jmp 0x5691c0
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0xf]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5691ef
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56922e
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0xf]
cmp rbx, 8
jb 0x5691a2
jmp 0x569222
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x569208
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5691fc
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x5694e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x6403e719e830f5c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x307050001020006
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x569533
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x56]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x569568
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5695a7
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x56]
nop word [rax + rax]
cmp rbx, 8
jb 0x569519
jmp 0x56959b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x569581
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x569575
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x569a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x5bc6d282f3204e03
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x504010500040005
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x601
xor eax, eax
nop
jmp 0x569ac0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0xb]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0xb]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x569aeb
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x569b2a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x569aa2
jmp 0x569b1e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x569b04
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x569af8
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x569d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x94fc27067924f180
mov qword [rsp + 0x20], rdx
movabs rdx, 0x107020104070706
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x569d53
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x40]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x569d88
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x569dc7
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x40]
nop word [rax + rax]
cmp rbx, 8
jb 0x569d39
jmp 0x569dbb
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x569da1
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x569d95
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x56a640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x378b096c3d7fd144
mov qword [rsp + 0x20], rdx
movabs rdx, 0x407050001060300
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x56a693
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x53]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x56a6c8
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56a707
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x53]
nop word [rax + rax]
cmp rbx, 8
jb 0x56a679
jmp 0x56a6fb
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x56a6e1
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x56a6d5
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x56a720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x12b1483e53afd8f3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x201040707050203
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4000201
xor eax, eax
nop
jmp 0x56a780
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0x2e]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0x2e]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x56a7ab
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56a7ea
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x56a762
jmp 0x56a7de
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x56a7c4
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x56a7b8
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x56aaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0xc9f0119d8e378d7b
mov qword [rsp + 0x18], rax
movabs rax, 0x98fdd90d66785df1
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1c]
movzx ecx, byte [rsp + 0x1d]
sub eax, ecx
movzx ecx, byte [rsp + 0x25]
movzx edx, byte [rsp + 0x19]
movzx ebx, byte [rsp + 0x27]
movzx esi, byte [rsp + 0x21]
movzx edi, byte [rsp + 0x26]
movzx r8d, byte [rsp + 0x23]
movzx r9d, byte [rsp + 0x1b]
movzx r10d, byte [rsp + 0x18]
movzx r11d, byte [rsp + 0x22]
movzx r12d, byte [rsp + 0x24]
movzx r13d, byte [rsp + 0x1a]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x20]
movzx r13d, byte [rsp + 0x1e]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x1f]
mov byte [rsp + 0xf], al
sub ecx, edx
mov byte [rsp + 0x10], cl
lea eax, [rsi + rbx]
mov byte [rsp + 0x11], al
sub edi, r8d
mov byte [rsp + 0x12], dil
sub r9d, r10d
mov byte [rsp + 0x13], r9b
lea eax, [r12 + r11]
mov byte [rsp + 0x14], al
movzx eax, byte [rsp + 6]
sub eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
xor eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x56aba6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x56ab9a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
nop
ret