joyce8/EMBER2024-capa huggingface dataset:
Function at 0x550c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x7f6cb1f51cbb0451
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x703010407030007
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2060700
xor eax, eax
jmp 0x550cb5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x550ce8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x550d25
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x2e]
nop dword [rax]
cmp rbx, 8
jb 0x550c9b
jmp 0x550d17
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x550d01
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x550cf5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x550dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x123d0a72cbf450a3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x603060401040504
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7020705
xor eax, eax
jmp 0x550e15
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x550e48
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x550e85
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x2b]
nop dword [rax]
cmp rbx, 8
jb 0x550dfb
jmp 0x550e77
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x550e61
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x550e55
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x550f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x3f81719962bdd7a7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x704050203010703
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x305
xor eax, eax
jmp 0x550f74
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x550fa8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x550fe5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x2e]
nop dword [rax + rax]
cmp rbx, 8
jb 0x550f5a
jmp 0x550fd7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x550fc1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x550fb5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x551080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x2d388f2d698e3c15
mov qword [rsp + 0x20], rdx
movabs rdx, 0x105060002000003
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5510cd
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x5510fc
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x551137
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x74]
cmp rbx, 8
jb 0x5510b3
jmp 0x55112b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x551115
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x551109
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop
call fcn.00461020
nop
int3
Function at 0x552100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xbc70eac9a4782974
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x202050602070407
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3000104
xor eax, eax
jmp 0x552155
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x27]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x552188
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5521c5
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x27]
nop dword [rax]
cmp rbx, 8
jb 0x55213b
jmp 0x5521b7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x5521a1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x552195
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x553700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xcab9fe4d9fbafca1
mov qword [rsp + 0x18], rax
movabs rax, 0x7e8edacf09aa973a
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x20]
movzx ecx, byte [rsp + 0x1a]
xor eax, ecx
movzx ecx, byte [rsp + 0x23]
movzx edx, byte [rsp + 0x26]
add ecx, edx
movzx edx, byte [rsp + 0x18]
movzx ebx, byte [rsp + 0x21]
add edx, ebx
movzx ebx, byte [rsp + 0x22]
movzx esi, byte [rsp + 0x24]
add ebx, esi
movzx esi, byte [rsp + 0x27]
movzx edi, byte [rsp + 0x19]
sub esi, edi
movzx edi, byte [rsp + 0x1c]
movzx r8d, byte [rsp + 0x25]
add edi, r8d
movzx r8d, byte [rsp + 0x1b]
movzx r9d, byte [rsp + 0x1f]
sub r8d, r9d
movzx r9d, byte [rsp + 0x1d]
movzx r10d, byte [rsp + 0x1e]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x5537e6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x5537da
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x553e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xbefffa3daa40cdcc
mov qword [rsp + 0x18], rax
movabs rax, 0xcdf3a7c727ca1618
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x19]
movzx ecx, byte [rsp + 0x22]
add eax, ecx
movzx ecx, byte [rsp + 0x1a]
movzx edx, byte [rsp + 0x26]
add ecx, edx
movzx edx, byte [rsp + 0x24]
movzx ebx, byte [rsp + 0x20]
sub edx, ebx
movzx ebx, byte [rsp + 0x23]
movzx esi, byte [rsp + 0x1d]
add ebx, esi
movzx esi, byte [rsp + 0x21]
movzx edi, byte [rsp + 0x1e]
add esi, edi
movzx edi, byte [rsp + 0x25]
movzx r8d, byte [rsp + 0x1f]
add edi, r8d
movzx r8d, byte [rsp + 0x1b]
movzx r9d, byte [rsp + 0x18]
add r8d, r9d
movzx r9d, byte [rsp + 0x1c]
movzx r10d, byte [rsp + 0x27]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
xor r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x553f46
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x553f3a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x554620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x9e93e7ff9efc6657
mov qword [rsp + 0x18], rax
movabs rax, 0xdd1fbe97cfca0c62
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x18]
movzx ecx, byte [rsp + 0x20]
add eax, ecx
movzx ecx, byte [rsp + 0x1f]
movzx edx, byte [rsp + 0x25]
xor ecx, edx
movzx edx, byte [rsp + 0x19]
movzx ebx, byte [rsp + 0x1b]
sub edx, ebx
movzx ebx, byte [rsp + 0x1c]
movzx esi, byte [rsp + 0x27]
add ebx, esi
movzx esi, byte [rsp + 0x26]
movzx edi, byte [rsp + 0x21]
sub esi, edi
movzx edi, byte [rsp + 0x23]
movzx r8d, byte [rsp + 0x1e]
sub edi, r8d
movzx r8d, byte [rsp + 0x1d]
movzx r9d, byte [rsp + 0x22]
add r8d, r9d
movzx r9d, byte [rsp + 0x1a]
movzx r10d, byte [rsp + 0x24]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x554706
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x5546fa
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x554c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xe4d8793d107fd4d6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x106030500000402
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 4
xor eax, eax
jmp 0x554c54
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x554c88
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x554cc5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x10]
nop dword [rax + rax]
cmp rbx, 8
jb 0x554c3a
jmp 0x554cb7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x554ca1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x554c95
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x555060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x7dd084bdda770257
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x705070100070103
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x404
xor eax, eax
jmp 0x5550b6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x1d]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x5550e2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x555125
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x55509a
nop
jmp 0x555116
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x555100
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5550ef
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x555880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x555946
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc6b372dcdedd6643
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6c2d1dc2
movabs rdx, 0x80306070903070a
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x4020a04
xor eax, eax
jmp 0x5558e0
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7a]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x555912
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x555937
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7a]
cmp rsi, 0xc
jb 0x5558c4
jmp 0x55592b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00555880
Function at 0x556c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x556cfd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6c64c632d3655bbb
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xa4
movabs rdx, 0x103000005010005
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x801
xor eax, eax
nop
jmp 0x556ca0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x27]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x27]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x556ccd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x556cf0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x556c82
jmp 0x556ce4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00556c40

Function at 0x5572a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x557367
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1b32b76c6cc303f8
mov qword [rsp + 0x19], rdx
movabs rdx, 0xfa22ff1b32b76c6c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20a020905020705
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x80a0100
xor eax, eax
jmp 0x557308
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x79]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x79]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x557337
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x55735a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x5572eb
jmp 0x55734e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005572a0

Function at 0x557900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5579cc
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x418bd7c038c27318
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x876c
movabs rdx, 0x503090402070500
mov qword [rsp + 0x22], rdx
movabs rdx, 0x606050602060503
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x557964
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x65]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x55799c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x5579bf
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x65]
cmp rsi, 0xa
jb 0x55794a
jmp 0x5579b3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00557900
Function at 0x558320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55840a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x729f709731ae4d16
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6f42729f709731ae
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x70d1a47edb81529
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10060c0c0f020f04
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80008100e111006
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa020b030f0c0d0f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5583ad
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x52]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x52]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x5583da
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5583fd
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x558390
jmp 0x5583f1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00558320

Function at 0x559540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55962c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7265535650563c43
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4a76726553565056
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x414756664b3e6524
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa100e031105010f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf0e0d100a100e03
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40e02010c0c0902
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5595ca
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x5595fc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x55961f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
cmp rsi, 0x12
jb 0x5595b0
jmp 0x559613
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00559540
Function at 0x5598c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x559a5b
push rbp
mov rbp, rsp
sub rsp, 0x98
movabs rdx, 0x674e89876eff8d5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x72dab8650674e898
mov qword [rsp + 0x20], rdx
movabs rdx, 0x82a4efaac4f0a98a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x539cb974aa74abe5
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb451a0439662999f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9365bc799cf998ba
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb772a874abc6dfbc
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7202f2d1417132f
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd2d00020d261501
mov qword [rsp + 0x58], rdx
movabs rdx, 0x53304190f010e0a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2331092124221121
mov qword [rsp + 0x68], rdx
movabs rdx, 0x120d1c090f092e2c
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2104070a27292420
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1015270c180a2018
mov qword [rsp + 0x80], rdx
movabs rdx, 0x2c2b05182c33001e
mov qword [rsp + 0x88], rdx
movabs rdx, 0x1f171a1d14291725
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x5599f1
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x75]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x48
jge 0x559a28
movzx edx, byte [rsp + rax + 0x50]
movzx esi, byte [rsp + rax + 0x51]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x34
jae 0x559a4e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x75]
nop dword [rax + rax]
cmp rsi, 0x34
jb 0x5599d7
jmp 0x559a42
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x34
call fcn.0044bb20
add rsp, 0x98
pop rbp
ret
mov eax, esi
mov ecx, 0x34
call fcn.00461020
mov eax, edi
mov ecx, 0x34
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.005598c0

Function at 0x55a4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55a5bb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x72c22a13be657d43
mov qword [rsp + 0x18], rdx
movabs rdx, 0x7356031d72c22a13
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57f80000eb152d5c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1050d120a120609
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0e10090903050c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x80e050d0a0e1009
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40c11080d0f120d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x55a559
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1c
jge 0x55a58b
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x55a5ae
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0x14
jb 0x55a53f
jmp 0x55a5a2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.0055a4c0
Function at 0x55b260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55b346
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x29612b3e6c703f44
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1bc96e3fbd3854d6
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0f0e0c0b0c040a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf010e0f0e0c0b0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7050c0705050508
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x55b2e0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x23]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x55b312
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x55b337
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x23]
cmp rsi, 0x10
jb 0x55b2c2
jmp 0x55b32b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0055b260

Function at 0x55b360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55b44a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xfb173d306d356e1b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x874203f106efb17
mov qword [rsp + 0x38], rdx
movabs rdx, 0x337365f7cbf65225
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1210150e0d110007
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa11060d100b1210
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1205060204090f10
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x55b3ed
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0x51]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0x51]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x55b41a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x55b43d
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x55b3d0
jmp 0x55b431
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0055b360