joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5605a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x9710f1508833fecb
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1050201030406
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5605f3
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0xb]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x560628
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x560667
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0xb]
nop word [rax + rax]
cmp rbx, 8
jb 0x5605d9
jmp 0x56065b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x560641
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x560635
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x561600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x84a69b2e587ce8e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x406060006050702
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x306
xor eax, eax
nop
jmp 0x561660
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x5b]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x56168b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5616ca
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x561642
jmp 0x5616be
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5616a4
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x561698
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x5616e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x8b612893ebd505a9
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x303000204060603
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6040407
xor eax, eax
nop
jmp 0x561740
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x3c]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x56176b
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5617aa
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x561722
jmp 0x56179e
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x561784
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x561778
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x562d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xd6d9251f2ab5181b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x605000606070106
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x562d73
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x562da8
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x562de7
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x1d]
nop word [rax + rax]
cmp rbx, 8
jb 0x562d59
jmp 0x562ddb
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x562dc1
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x562db5
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x563a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x2e351289dd6119ac
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x602050603040607
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x301
xor eax, eax
nop
jmp 0x563ae0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x21]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x563b0b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x563b4a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x563ac2
jmp 0x563b3e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x563b24
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x563b18
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x5641a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xa248564769b7036b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x207010206060004
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5641f3
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x564228
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x564267
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x5c]
nop word [rax + rax]
cmp rbx, 8
jb 0x5641d9
jmp 0x56425b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x564241
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x564235
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x5663e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xa46796b772175d49
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x504000401060402
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x502
xor eax, eax
nop
jmp 0x566440
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x56]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x56646b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5664aa
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x566422
jmp 0x56649e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x566484
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x566478
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x5664c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x3494c1dedada167e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x100010403030201
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x566513
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x566548
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x566587
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x52]
nop word [rax + rax]
cmp rbx, 8
jb 0x5664f9
jmp 0x56657b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x566561
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x566555
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x569b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x90c9f2a963595c2a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x204010600060403
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 2
xor eax, eax
nop
jmp 0x569ba0
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x569bcf
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x569c0e
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x4e]
cmp rbx, 8
jb 0x569b82
jmp 0x569c02
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x569be8
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x569bdc
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x569c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0x435c2bb98904c217
mov qword [rsp + 0x18], rax
movabs rax, 0xbf664d75c7286a6c
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1f]
movzx ecx, byte [rsp + 0x1b]
sub eax, ecx
movzx ecx, byte [rsp + 0x21]
movzx edx, byte [rsp + 0x19]
movzx ebx, byte [rsp + 0x27]
movzx esi, byte [rsp + 0x1c]
movzx edi, byte [rsp + 0x25]
movzx r8d, byte [rsp + 0x26]
movzx r9d, byte [rsp + 0x23]
movzx r10d, byte [rsp + 0x22]
movzx r11d, byte [rsp + 0x1e]
movzx r12d, byte [rsp + 0x1a]
movzx r13d, byte [rsp + 0x20]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x18]
movzx r13d, byte [rsp + 0x24]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x1d]
mov byte [rsp + 0xf], al
sub ecx, edx
mov byte [rsp + 0x10], cl
lea eax, [rsi + rbx]
mov byte [rsp + 0x11], al
sub edi, r8d
mov byte [rsp + 0x12], dil
lea eax, [r10 + r9]
mov byte [rsp + 0x13], al
lea eax, [r12 + r11]
mov byte [rsp + 0x14], al
movzx eax, byte [rsp + 6]
add eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
xor eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x569d26
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x569d1a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
nop
ret
Function at 0x569d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xa3a02035e9c797a7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x101010702020407
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4060307
xor eax, eax
nop
jmp 0x569dc0
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x6e]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x6e]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x569deb
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x569e2a
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x569da2
jmp 0x569e1e
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x569e04
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x569df8
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x569e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x7b8a4d9bd5555d4f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4060304040005
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x569e93
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x569ec8
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x569f07
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x75]
nop word [rax + rax]
cmp rbx, 8
jb 0x569e79
jmp 0x569efb
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x569ee1
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x569ed5
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x569f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0xb7f6bd78ce5150db
mov qword [rsp + 0x18], rax
movabs rax, 0x19d602f7e05254a8
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1e]
movzx ecx, byte [rsp + 0x1d]
add eax, ecx
movzx ecx, byte [rsp + 0x18]
movzx edx, byte [rsp + 0x25]
movzx ebx, byte [rsp + 0x1c]
movzx esi, byte [rsp + 0x19]
movzx edi, byte [rsp + 0x20]
movzx r8d, byte [rsp + 0x1b]
movzx r9d, byte [rsp + 0x21]
movzx r10d, byte [rsp + 0x22]
movzx r11d, byte [rsp + 0x1a]
movzx r12d, byte [rsp + 0x27]
movzx r13d, byte [rsp + 0x1f]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x24]
movzx r13d, byte [rsp + 0x26]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x23]
mov byte [rsp + 0xf], al
sub ecx, edx
mov byte [rsp + 0x10], cl
sub ebx, esi
mov byte [rsp + 0x11], bl
sub edi, r8d
mov byte [rsp + 0x12], dil
lea eax, [r10 + r9]
mov byte [rsp + 0x13], al
xor r11d, r12d
mov byte [rsp + 0x14], r11b
movzx eax, byte [rsp + 6]
sub eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
sub eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x56a025
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x56a019
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret

Function at 0x56ad00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x9f5c889d6b8ffd46
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5010003030202
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x206
xor eax, eax
nop
jmp 0x56ad60
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x19]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x56ad8b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56adca
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x56ad42
jmp 0x56adbe
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x56ada4
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x56ad98
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x56c3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x5cf696af1fc43c9f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x704050001040704
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x56c433
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x13]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x56c468
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56c4a7
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x13]
nop word [rax + rax]
cmp rbx, 8
jb 0x56c419
jmp 0x56c49b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x56c481
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x56c475
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x56d860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56d932
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x86336c8d879a7b4b
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xb44c9e88
movabs rdx, 0x8070a02090b0b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9010204030b0008
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x56d8cb
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x56d8fd
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x56d925
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2b]
cmp rsi, 0xc
jb 0x56d8b1
jmp 0x56d918
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0056d860
Function at 0x56d940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56da12
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6def636f6aa35bea
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6cee696def636f6a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x609080302070708
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8000100
xor eax, eax
jmp 0x56d9ae
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x56d9db
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x56da05
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x56d991
jmp 0x56d9f6
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0056d940

Function at 0x56dc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56dd4b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6ccbd5c0c696f481
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xea
movabs rdx, 0x406030106000801
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2040508
xor eax, eax
jmp 0x56dce4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x56dd17
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x56dd3e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x56dcc7
jmp 0x56dd32
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0056dc80

Function at 0x56f1e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56f2ab
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x32ad0033ba73ba77
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6c08642e
movabs rdx, 0x10a060504040503
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x3010104
xor eax, eax
jmp 0x56f247
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x56f277
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xc
jae 0x56f29e
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x56f22a
jmp 0x56f292
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0056f1e0
Function at 0x570720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x570828
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x976553276c187542
mov qword [rsp + 0x18], rdx
movabs rdx, 0xde8db1e317a132d8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2a2d6f0e4a692663
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70c0e0f0f0f1414
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9110e0d0b040a11
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe16080902170c0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9070d0d0f16130c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5707c2
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x20
jge 0x5707ef
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x57081b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x18
jb 0x5707a5
jmp 0x57080f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x18
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00570720

Function at 0x570840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x570948
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xda5d65e462c36843
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe0e2d1f0d9da5d65
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcdc8f8694dedf743
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70f120612101010
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe0913060812120a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x8030e0913060812
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8040f0814020b0c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5708e0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6a]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x570912
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x57093b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6a]
cmp rsi, 0x15
jb 0x5708c5
jmp 0x57092f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x15
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00570840