joyce8/EMBER2024-capa huggingface dataset:
Function at 0x555060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55517d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x20f037efd1eff4ff
mov qword [rsp + 0x19], rdx
movabs rdx, 0x20257237eb1d1f22
mov qword [rsp + 0x21], rdx
movabs rdx, 0x2f9d93bebcb2f20
mov qword [rsp + 0x28], rdx
movabs rdx, 0x78d7648d2f3f41cf
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1b0e160a1716111d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x15021d14030e1403
mov qword [rsp + 0x40], rdx
movabs rdx, 0x813060804110115
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5020b0215000903
mov qword [rsp + 0x50], rdx
movabs rdx, 0x11151912180c101a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x555120
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x55514d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x555170
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1f
jb 0x5550fd
jmp 0x555164
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.0044e180
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00463f80
mov eax, edi
mov ecx, 0x1f
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.00555060

Function at 0x556220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5562dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xcf86638616d3752a
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x74
movabs rdx, 0x702070603070004
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2040002
xor eax, eax
nop
jmp 0x556280
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x5562ad
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x5562d0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x556262
jmp 0x5562c4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00463f80
mov eax, edi
mov ecx, 9
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.00556220
Function at 0x55a540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55a62c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xae62f8fc820e0674
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xdbf618619cae62f8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2ce952fb080ffc69
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1100a0f01140211
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe04040810070110
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc130305120b1203
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x55a5ca
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x55a5fc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x55a61f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
cmp rsi, 0x15
jb 0x55a5b0
jmp 0x55a613
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00463f80
mov eax, edi
mov ecx, 0x15
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0055a540

Function at 0x55a640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55a706
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x44917280997f8762
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x72
movabs rdx, 0x102060307060303
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7020104
xor eax, eax
nop
jmp 0x55a6a0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x18]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x55a6d2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x55a6f7
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x18]
cmp rsi, 9
jb 0x55a682
jmp 0x55a6eb
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00463f80
mov eax, edi
mov ecx, 9
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0055a640
Function at 0x55c820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x5435dd217d77bd2
mov qword [rsp + 0x20], rdx
movabs rdx, 0x703070605020005
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x55c86f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x3e]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x55c89a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55c8d5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x55c853
jmp 0x55c8c9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x55c8b3
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x55c8a7
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00463f80
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00463f80
nop
int3

Function at 0x55cc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xeadd06c20887c7a6
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x703060204020701
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6040602
xor eax, eax
jmp 0x55ccb5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x73]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x55cce8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55cd25
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x73]
nop dword [rax]
cmp rbx, 8
jb 0x55cc9b
jmp 0x55cd17
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x55cd01
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x55ccf5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3
Function at 0x55cd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xedf176a8402ce4f3
mov qword [rsp + 0x18], rax
movabs rax, 0xfd4489329b97fc58
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x21]
add eax, ecx
movzx ecx, byte [rsp + 0x24]
movzx edx, byte [rsp + 0x22]
add ecx, edx
movzx edx, byte [rsp + 0x25]
movzx ebx, byte [rsp + 0x27]
xor edx, ebx
movzx ebx, byte [rsp + 0x1f]
movzx esi, byte [rsp + 0x1d]
sub ebx, esi
movzx esi, byte [rsp + 0x1a]
movzx edi, byte [rsp + 0x20]
add esi, edi
movzx edi, byte [rsp + 0x19]
movzx r8d, byte [rsp + 0x18]
add edi, r8d
movzx r8d, byte [rsp + 0x26]
movzx r9d, byte [rsp + 0x1b]
add r8d, r9d
movzx r9d, byte [rsp + 0x1c]
movzx r10d, byte [rsp + 0x1e]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x55ce26
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x55ce1a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x55d580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x50499d454b0579ab
mov qword [rsp + 0x18], rax
movabs rax, 0xdec99060decbb63e
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x24]
movzx ecx, byte [rsp + 0x1f]
add eax, ecx
movzx ecx, byte [rsp + 0x27]
movzx edx, byte [rsp + 0x1b]
add ecx, edx
movzx edx, byte [rsp + 0x26]
movzx ebx, byte [rsp + 0x21]
add edx, ebx
movzx ebx, byte [rsp + 0x19]
movzx esi, byte [rsp + 0x25]
xor ebx, esi
movzx esi, byte [rsp + 0x1c]
movzx edi, byte [rsp + 0x18]
sub esi, edi
movzx edi, byte [rsp + 0x1e]
movzx r8d, byte [rsp + 0x20]
add edi, r8d
movzx r8d, byte [rsp + 0x22]
movzx r9d, byte [rsp + 0x1a]
sub r8d, r9d
movzx r9d, byte [rsp + 0x23]
movzx r10d, byte [rsp + 0x1d]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x55d666
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x55d65a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x55de40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x871d7e12f677b881
mov qword [rsp + 0x18], rax
movabs rax, 0xc690410f81de4d7
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x20]
movzx ecx, byte [rsp + 0x19]
add eax, ecx
movzx ecx, byte [rsp + 0x1c]
movzx edx, byte [rsp + 0x1b]
add ecx, edx
movzx edx, byte [rsp + 0x1f]
movzx ebx, byte [rsp + 0x1a]
sub edx, ebx
movzx ebx, byte [rsp + 0x24]
movzx esi, byte [rsp + 0x1e]
add ebx, esi
movzx esi, byte [rsp + 0x25]
movzx edi, byte [rsp + 0x27]
add esi, edi
movzx edi, byte [rsp + 0x23]
movzx r8d, byte [rsp + 0x21]
add edi, r8d
movzx r8d, byte [rsp + 0x1d]
movzx r9d, byte [rsp + 0x18]
sub r8d, r9d
movzx r9d, byte [rsp + 0x22]
movzx r10d, byte [rsp + 0x26]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
xor r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x55df26
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x55df1a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x55e240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x19c9306f64a72d4f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x707030502010500
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x303
xor eax, eax
jmp 0x55e294
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x55e2c8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55e305
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x54]
nop dword [rax + rax]
cmp rbx, 8
jb 0x55e27a
jmp 0x55e2f7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55e2e1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55e2d5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3
Function at 0x55e320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x6a09a7553fc250bb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6000102010701
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x606
xor eax, eax
jmp 0x55e374
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x62]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x55e3a8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55e3e5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x62]
nop dword [rax + rax]
cmp rbx, 8
jb 0x55e35a
jmp 0x55e3d7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55e3c1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55e3b5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3

Function at 0x55e760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xa75a6edba6efce96
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x103060102050704
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x702
xor eax, eax
jmp 0x55e7b6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x75]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x75]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x55e7e2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55e825
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x55e79a
nop
jmp 0x55e816
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55e800
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x55e7ef
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3
Function at 0x55e840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xa1ffe6c1ca3df69e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x304030701070303
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 1
xor eax, eax
jmp 0x55e896
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 5]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x55e8c2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55e905
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x55e87a
nop
jmp 0x55e8f6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55e8e0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x55e8cf
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3

Function at 0x55ec80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x1d881048a0df4bb2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x205020306070005
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x104
xor eax, eax
jmp 0x55ecd4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x55ed08
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55ed45
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x66]
nop dword [rax + rax]
cmp rbx, 8
jb 0x55ecba
jmp 0x55ed37
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55ed21
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55ed15
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3
Function at 0x55fac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x169fdda66e56fce5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x405030506000003
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1010302
xor eax, eax
jmp 0x55fb17
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0x26]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0x26]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x55fb48
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55fb85
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x55fafb
jmp 0x55fb77
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x55fb61
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x55fb55
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3

Function at 0x562600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xef44efde426443eb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x102010703050702
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x500
xor eax, eax
jmp 0x562654
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x562688
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5626c5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x4e]
nop dword [rax + rax]
cmp rbx, 8
jb 0x56263a
jmp 0x5626b7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5626a1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x562695
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3
Function at 0x562be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x257eeecf8be42eef
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x504010403050700
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1060404
xor eax, eax
jmp 0x562c37
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x76]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x562c68
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x562ca5
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x562c1b
jmp 0x562c97
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x562c81
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x562c75
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3

Function at 0x562dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x967c590ba2fceb18
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x107050506000002
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7020105
xor eax, eax
jmp 0x562e15
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x3a]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x562e48
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x562e85
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x3a]
nop dword [rax]
cmp rbx, 8
jb 0x562dfb
jmp 0x562e77
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x562e61
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x562e55
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3
Function at 0x563120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x7c2da1fbd120ab45
mov qword [rsp + 0x18], rax
movabs rax, 0xa0d31574dcf860d5
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x24]
movzx ecx, byte [rsp + 0x1b]
sub eax, ecx
movzx ecx, byte [rsp + 0x1e]
movzx edx, byte [rsp + 0x19]
sub ecx, edx
movzx edx, byte [rsp + 0x25]
movzx ebx, byte [rsp + 0x1f]
xor edx, ebx
movzx ebx, byte [rsp + 0x1d]
movzx esi, byte [rsp + 0x23]
add ebx, esi
movzx esi, byte [rsp + 0x22]
movzx edi, byte [rsp + 0x20]
add esi, edi
movzx edi, byte [rsp + 0x18]
movzx r8d, byte [rsp + 0x26]
sub edi, r8d
movzx r8d, byte [rsp + 0x27]
movzx r9d, byte [rsp + 0x1c]
add r8d, r9d
movzx r9d, byte [rsp + 0x21]
movzx r10d, byte [rsp + 0x1a]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x563206
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x5631fa
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x565240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xa71a4e71363b0ada
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x504020503070403
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 5
xor eax, eax
jmp 0x565296
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x1f]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x5652c2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x565305
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x56527a
nop
jmp 0x5652f6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5652e0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5652cf
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00463f80
mov eax, esi
mov ecx, 8
call fcn.00463f80
nop
int3