joyce8/EMBER2024-capa huggingface dataset:
Function at 0x54cd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54ce46
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7164844d71695546
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x667b694666676a71
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80606050e07020d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe04040903080806
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0d070a0a010803
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x54cde0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x54ce12
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x54ce37
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0xf
jb 0x54cdc2
jmp 0x54ce2b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460ec0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0054cd60

Function at 0x54d1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54d28c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb462120365ab1446
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8208a4b462120365
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2040a0108090807
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1040705
xor eax, eax
jmp 0x54d225
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x56]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x54d25c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x54d27f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x56]
cmp rsi, 0xb
jb 0x54d20b
jmp 0x54d273
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460ec0
mov eax, edi
mov ecx, 0xb
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0054d1c0
Function at 0x54d940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54da26
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5426de6fabe86547
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xadf1c46f34b3ba54
mov qword [rsp + 0x26], rdx
movabs rdx, 0x603080d020c030a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe090603080d020c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0608020302050c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x54d9c0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x54d9f2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x54da17
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4f]
cmp rsi, 0xf
jb 0x54d9a2
jmp 0x54da0b
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460ec0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0054d940

Function at 0x54ea20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54eb1b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x72e9bec4ae7417cd
mov qword [rsp + 0x18], rdx
movabs rdx, 0x23201cbacdc572e9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5773122569587453
mov qword [rsp + 0x26], rdx
movabs rdx, 0x130610000c010b12
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1300080b0d0d0512
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc011300080b0d0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1303040d1309060a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x54eab9
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1a
jge 0x54eaeb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x54eb0e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6f]
cmp rsi, 0x16
jb 0x54ea9f
jmp 0x54eb02
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00460ec0
mov eax, edi
mov ecx, 0x16
call fcn.00460ec0
nop
nop dword [rax + rax]
call fcn.0045ec40
jmp fcn.0054ea20
Function at 0x54eb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54ec3b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x726976daa4f46516
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd1856ec8a29e6f72
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc852bc36acbe0a01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9131210041516
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1411020f0b091311
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x100e03120f141411
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa100402030d0316
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x54ebd9
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x54ec0b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x54ec2e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0x17
jb 0x54ebbf
jmp 0x54ec22
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00460ec0
mov eax, edi
mov ecx, 0x17
call fcn.00460ec0
nop
nop dword [rax + rax]
call fcn.0045ec40
jmp fcn.0054eb40

Function at 0x550100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5501ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6d69a9619874659f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xaec79a7973508fab
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe97c75a4cf996f73
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130d08120f050017
mov qword [rsp + 0x18], rdx
movabs rdx, 0x130e120c14160e16
mov qword [rsp + 0x20], rdx
movabs rdx, 0x120b030d09000d
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x55018a
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x5501bc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5501df
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 0x18
jb 0x550170
jmp 0x5501d3
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00460ec0
mov eax, edi
mov ecx, 0x18
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00550100
Function at 0x550200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5502fb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5e752f1f5c323545
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x46275e752f1f5c32
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x43273d353c656c53
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30f020d0e0d0308
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0f0a0e000e1009
mov qword [rsp + 0x36], rdx
movabs rdx, 0x7040d0f0a0e000e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20f050211010700
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x550299
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 2]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1a
jge 0x5502cb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5502ee
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 2]
cmp rsi, 0x12
jb 0x55027f
jmp 0x5502e2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460ec0
mov eax, edi
mov ecx, 0x12
call fcn.00460ec0
nop
nop dword [rax + rax]
call fcn.0045ec40
jmp fcn.00550200

Function at 0x550320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55041d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb37f64894d776581
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa765b37f64894d77
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x848c6e9f6c674b7a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0f040a09110c0f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0f070a000c0b09
mov qword [rsp + 0x36], rdx
movabs rdx, 0x100e0f0f070a000c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc060f0002110c0a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5503c0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x5503ed
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x550410
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x55039f
jmp 0x550404
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460ec0
mov eax, edi
mov ecx, 0x12
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.00550320
Function at 0x550a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x550b7b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x764265534443664d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x704b617642655344
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4941757e5431352f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0e110d12030f0f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1107110c09060704
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1061107110c0906
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb020312090e03
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x550b19
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xb]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1a
jge 0x550b4b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x550b6e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xb]
cmp rsi, 0x13
jb 0x550aff
jmp 0x550b62
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00460ec0
mov eax, edi
mov ecx, 0x13
call fcn.00460ec0
nop
nop dword [rax + rax]
call fcn.0045ec40
jmp fcn.00550a80

Function at 0x550e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x550f26
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x46344434974dc47
mov qword [rsp + 0x18], rdx
movabs rdx, 0x733058bf64320463
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb0a070c0c0a0805
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30c0b0a070c0c0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x500070505040401
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x550ec0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x13]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x550ef2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x550f17
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x13]
cmp rsi, 0xe
jb 0x550ea2
jmp 0x550f0b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460ec0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00550e40
Function at 0x552660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55275d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6581736868806573
mov qword [rsp + 0x19], rdx
movabs rdx, 0x464365447c309565
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7b6d6d8a8c958b55
mov qword [rsp + 0x28], rdx
movabs rdx, 0x160b060e030b090d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60306110a1013
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4020f0004131414
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0214120812100e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x552700
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x15]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x15]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x55272d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x552750
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x5526df
jmp 0x552744
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00460ec0
mov eax, edi
mov ecx, 0x17
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.00552660

Function at 0x552f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55305a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x134af53e542d4a47
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x727265235fa050d2
mov qword [rsp + 0x25], rdx
movabs rdx, 0x28371564da727265
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd3d5404753b2061
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1a16101608170a19
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x6010a0b0c191a16
mov qword [rsp + 0x40], rdx
movabs rdx, 0x191a171a100b121c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1212191b051c170c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x131704041c020714
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x552ff7
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 8]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x26
jge 0x553029
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x55304d
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 8]
cmp rsi, 0x1d
jb 0x552fdd
jmp 0x553041
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.0044b900
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1d
call fcn.00460ec0
nop
call fcn.0045ec40
nop
jmp fcn.00552f40
Function at 0x553620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x553728
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x24d9657313154e47
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1dc723144434654d
mov qword [rsp + 0x25], rdx
movabs rdx, 0x2856011dc7231444
mov qword [rsp + 0x28], rdx
movabs rdx, 0x73510a61752f59fc
mov qword [rsp + 0x30], rdx
movabs rdx, 0x150a151806100e0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf061207100c0302
mov qword [rsp + 0x40], rdx
movabs rdx, 0x190b190d0815110c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x106131013130214
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5536cb
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x49]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x49]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x20
jge 0x5536f8
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x55371b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1b
jb 0x5536ae
jmp 0x55370f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1b
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00553620
Function at 0x5571e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5572fd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x24107551169bd3cb
mov qword [rsp + 0x18], rdx
movabs rdx, 0xdb689aab2929641d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8474db689aab2929
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7d752521741502d2
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8160f0006010e01
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1211020307170816
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa030c120d0c120c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140c060f11191919
mov qword [rsp + 0x48], rdx
movabs rdx, 0x120c12130e0b1100
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5572a0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x68]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x68]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x5572cd
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5572f0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x55727d
jmp 0x5572e4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.005571e0

Function at 0x557320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5573fd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa63773c42e2db789
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x57d3a8723bd532a6
mov qword [rsp + 0x26], rdx
movabs rdx, 0x602060a07000104
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20d0602060a0700
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc090a060306060d
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x5573a0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x5573cd
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5573f0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x557382
jmp 0x5573e4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460ec0
mov eax, edi
mov ecx, 0xf
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.00557320
Function at 0x5586c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5587ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5353624447644a2c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x59553f744c535362
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5739514124476864
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x110f0b0d100b030c
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb1213000b0a110f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1080c0513070602
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x55874a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x55877c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x55879f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
cmp rsi, 0x15
jb 0x558730
jmp 0x558793
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460ec0
mov eax, edi
mov ecx, 0x15
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005586c0

Function at 0x558a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x558aea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3646725046474824
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x4836467250464748
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x534e1612fd293d73
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa0c0d060b000e03
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2060c100a0c0d06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30f010807030a0f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x558a8d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x558aba
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x558add
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x558a70
jmp 0x558ad1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00460ec0
mov eax, edi
mov ecx, 0x11
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00558a00
Function at 0x5593c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55948c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6273857c868f6579
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x64a38372
movabs rdx, 0x50403020609030a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5060a0700070504
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x559425
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x55945c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x55947f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
cmp rsi, 0xc
jb 0x55940b
jmp 0x559473
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
mov eax, edi
mov ecx, 0xc
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005593c0

Function at 0x5594a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x559586
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x54ed96e076746553
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc70978ffe8ec1854
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30b0c0d0c05080b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x904030e030b0c0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa040905060b0409
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x559520
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x559552
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x559577
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0xf
jb 0x559502
jmp 0x55956b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460ec0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005594a0