joyce8/EMBER2024-capa huggingface dataset:
Function at 0x557960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x4dd518862d667a8e
mov qword [rsp + 0x18], rax
movabs rax, 0x22240fc017ff5a5a
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x20]
movzx ecx, byte [rsp + 0x1b]
add eax, ecx
movzx ecx, byte [rsp + 0x1d]
movzx edx, byte [rsp + 0x27]
sub ecx, edx
movzx edx, byte [rsp + 0x1f]
movzx ebx, byte [rsp + 0x24]
add edx, ebx
movzx ebx, byte [rsp + 0x22]
movzx esi, byte [rsp + 0x21]
xor ebx, esi
movzx esi, byte [rsp + 0x19]
movzx edi, byte [rsp + 0x25]
sub esi, edi
movzx edi, byte [rsp + 0x18]
movzx r8d, byte [rsp + 0x26]
sub edi, r8d
movzx r8d, byte [rsp + 0x1e]
movzx r9d, byte [rsp + 0x1c]
sub r8d, r9d
movzx r9d, byte [rsp + 0x1a]
movzx r10d, byte [rsp + 0x23]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x557a46
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x557a3a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x557b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x7bbc675d333cd35
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x200020706010107
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x704
xor eax, eax
jmp 0x557b96
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 4]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 4]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x557bc2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x557c05
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x557b7a
nop
jmp 0x557bf6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x557be0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x557bcf
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.004610a0
mov eax, esi
mov ecx, 8
call fcn.004610a0
nop
int3
Function at 0x557d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xadd597c60eb6ee9f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x605060704040504
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x501
xor eax, eax
jmp 0x557d74
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x557da8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x557de5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x75]
nop dword [rax + rax]
cmp rbx, 8
jb 0x557d5a
jmp 0x557dd7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x557dc1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x557db5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.004610a0
mov eax, esi
mov ecx, 8
call fcn.004610a0
nop
int3

Function at 0x5586c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x4f57afde3d5093bb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x703030201010605
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x601
xor eax, eax
jmp 0x558714
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x50]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x558748
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x558785
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x50]
nop dword [rax + rax]
cmp rbx, 8
jb 0x5586fa
jmp 0x558777
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x558761
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x558755
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.004610a0
mov eax, esi
mov ecx, 8
call fcn.004610a0
nop
int3
Function at 0x558a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x4a7b62c2b4a4cebd
mov qword [rsp + 0x18], rax
movabs rax, 0x1e19ebdbd629fb2d
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1a]
movzx ecx, byte [rsp + 0x21]
add eax, ecx
movzx ecx, byte [rsp + 0x25]
movzx edx, byte [rsp + 0x26]
add ecx, edx
movzx edx, byte [rsp + 0x1d]
movzx ebx, byte [rsp + 0x18]
sub edx, ebx
movzx ebx, byte [rsp + 0x1f]
movzx esi, byte [rsp + 0x1b]
add ebx, esi
movzx esi, byte [rsp + 0x27]
movzx edi, byte [rsp + 0x1e]
add esi, edi
movzx edi, byte [rsp + 0x22]
movzx r8d, byte [rsp + 0x20]
sub edi, r8d
movzx r8d, byte [rsp + 0x24]
movzx r9d, byte [rsp + 0x19]
xor r8d, r9d
movzx r9d, byte [rsp + 0x1c]
movzx r10d, byte [rsp + 0x23]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x558b06
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x558afa
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x558da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x7954ef810b8fd1df
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7030406070302
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7030607
xor eax, eax
jmp 0x558df7
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0x3a]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0x3a]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x558e28
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x558e65
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x558ddb
jmp 0x558e57
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x558e41
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x558e35
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.004610a0
mov eax, esi
mov ecx, 8
call fcn.004610a0
nop
int3
Function at 0x55a440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x4f81fed1a1c9b8d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x602070407020103
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x405
xor eax, eax
jmp 0x55a494
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x55a4c8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55a505
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x39]
nop dword [rax + rax]
cmp rbx, 8
jb 0x55a47a
jmp 0x55a4f7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55a4e1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55a4d5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.004610a0
mov eax, esi
mov ecx, 8
call fcn.004610a0
nop
int3

Function at 0x55a620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x93ac876eb86c7215
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x503040706000103
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x607
xor eax, eax
jmp 0x55a674
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x11]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x55a6a8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55a6e5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x11]
nop dword [rax + rax]
cmp rbx, 8
jb 0x55a65a
jmp 0x55a6d7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55a6c1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55a6b5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.004610a0
mov eax, esi
mov ecx, 8
call fcn.004610a0
nop
int3
Function at 0x55b4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xdaaae4e53cdfa2bf
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x307070102000207
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x505
xor eax, eax
jmp 0x55b4f6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x72]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x55b522
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55b565
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x55b4da
nop
jmp 0x55b556
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55b540
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x55b52f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.004610a0
mov eax, esi
mov ecx, 8
call fcn.004610a0
nop
int3

Function at 0x55b580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xf4c4d14706b9eb5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1070705010306
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x304
xor eax, eax
jmp 0x55b5d6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x29]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x29]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x55b602
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55b645
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x55b5ba
nop
jmp 0x55b636
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55b620
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x55b60f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.004610a0
mov eax, esi
mov ecx, 8
call fcn.004610a0
nop
int3
Function at 0x55bb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x8f855e6fcdd546f7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3050303010306
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4040600
xor eax, eax
jmp 0x55bb97
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x1a]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x55bbc8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55bc05
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x55bb7b
jmp 0x55bbf7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x55bbe1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x55bbd5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.004610a0
mov eax, esi
mov ecx, 8
call fcn.004610a0
nop
int3

Function at 0x55c000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xd61a2a1ff04920c5
mov qword [rsp + 0x18], rax
movabs rax, 0xd4914e5e2e4f976b
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1d]
movzx ecx, byte [rsp + 0x20]
sub eax, ecx
movzx ecx, byte [rsp + 0x23]
movzx edx, byte [rsp + 0x24]
sub ecx, edx
movzx edx, byte [rsp + 0x19]
movzx ebx, byte [rsp + 0x27]
sub edx, ebx
movzx ebx, byte [rsp + 0x1c]
movzx esi, byte [rsp + 0x22]
sub ebx, esi
movzx esi, byte [rsp + 0x26]
movzx edi, byte [rsp + 0x25]
xor esi, edi
movzx edi, byte [rsp + 0x1e]
movzx r8d, byte [rsp + 0x21]
add edi, r8d
movzx r8d, byte [rsp + 0x18]
movzx r9d, byte [rsp + 0x1f]
add r8d, r9d
movzx r9d, byte [rsp + 0x1a]
movzx r10d, byte [rsp + 0x1b]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x55c0e6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x55c0da
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x55c100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x7c2102d1c9b4330b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x302040004020206
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x55c14d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x76]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x55c17c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55c1b7
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x76]
cmp rbx, 8
jb 0x55c133
jmp 0x55c1ab
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x55c195
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x55c189
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.004610a0
mov eax, esi
mov ecx, 8
nop
call fcn.004610a0
nop
int3

Function at 0x55c2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x607be10032709e2b
mov qword [rsp + 0x18], rax
movabs rax, 0x3e8b4e58cadc1cc3
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1b]
movzx ecx, byte [rsp + 0x26]
sub eax, ecx
movzx ecx, byte [rsp + 0x1a]
movzx edx, byte [rsp + 0x1e]
add ecx, edx
movzx edx, byte [rsp + 0x25]
movzx ebx, byte [rsp + 0x1c]
xor edx, ebx
movzx ebx, byte [rsp + 0x22]
movzx esi, byte [rsp + 0x19]
add ebx, esi
movzx esi, byte [rsp + 0x27]
movzx edi, byte [rsp + 0x18]
sub esi, edi
movzx edi, byte [rsp + 0x20]
movzx r8d, byte [rsp + 0x23]
add edi, r8d
movzx r8d, byte [rsp + 0x1d]
movzx r9d, byte [rsp + 0x1f]
sub r8d, r9d
movzx r9d, byte [rsp + 0x24]
movzx r10d, byte [rsp + 0x21]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x55c3c6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x55c3ba
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x55c3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x6f09772ade5f9e18
mov qword [rsp + 0x18], rax
movabs rax, 0x39cfd0e5ce698cbd
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x25]
movzx ecx, byte [rsp + 0x1d]
xor eax, ecx
movzx ecx, byte [rsp + 0x27]
movzx edx, byte [rsp + 0x1a]
add ecx, edx
movzx edx, byte [rsp + 0x26]
movzx ebx, byte [rsp + 0x18]
sub edx, ebx
movzx ebx, byte [rsp + 0x1b]
movzx esi, byte [rsp + 0x1f]
add ebx, esi
movzx esi, byte [rsp + 0x19]
movzx edi, byte [rsp + 0x1c]
sub esi, edi
movzx edi, byte [rsp + 0x24]
movzx r8d, byte [rsp + 0x21]
sub edi, r8d
movzx r8d, byte [rsp + 0x20]
movzx r9d, byte [rsp + 0x22]
add r8d, r9d
movzx r9d, byte [rsp + 0x23]
movzx r10d, byte [rsp + 0x1e]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x55c4c6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x55c4ba
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x55c4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x78b284e51829d7f
mov qword [rsp + 0x18], rax
movabs rax, 0xfc990bc55d60398
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1c]
movzx ecx, byte [rsp + 0x20]
sub eax, ecx
movzx ecx, byte [rsp + 0x24]
movzx edx, byte [rsp + 0x1b]
add ecx, edx
movzx edx, byte [rsp + 0x1a]
movzx ebx, byte [rsp + 0x22]
add edx, ebx
movzx ebx, byte [rsp + 0x1e]
movzx esi, byte [rsp + 0x1f]
xor ebx, esi
movzx esi, byte [rsp + 0x23]
movzx edi, byte [rsp + 0x1d]
sub esi, edi
movzx edi, byte [rsp + 0x26]
movzx r8d, byte [rsp + 0x27]
sub edi, r8d
movzx r8d, byte [rsp + 0x21]
movzx r9d, byte [rsp + 0x18]
sub r8d, r9d
movzx r9d, byte [rsp + 0x19]
movzx r10d, byte [rsp + 0x25]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x55c5c6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x55c5ba
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x55d220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x3b2ebc12e44da843
mov qword [rsp + 0x20], rdx
movabs rdx, 0x700060405040500
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x55d26f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x76]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x55d29a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55d2d5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x55d253
jmp 0x55d2c9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x55d2b3
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x55d2a7
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.004610a0
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.004610a0
nop
int3

Function at 0x55d660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x58e79415f904a68a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x104030502020505
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x506
xor eax, eax
jmp 0x55d6b4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x55d6e8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55d725
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x5e]
nop dword [rax + rax]
cmp rbx, 8
jb 0x55d69a
jmp 0x55d717
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55d701
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55d6f5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.004610a0
mov eax, esi
mov ecx, 8
call fcn.004610a0
nop
int3

Function at 0x55eae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xfeb8ae028b1bab9d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x402030302050401
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x55eb2d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x29]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x55eb5c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55eb97
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x29]
cmp rbx, 8
jb 0x55eb13
jmp 0x55eb8b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x55eb75
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x55eb69
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.004610a0
mov eax, esi
mov ecx, 8
nop
call fcn.004610a0
nop
int3
Function at 0x55ec40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x3df31814ce4d7f6
mov qword [rsp + 0x18], rax
movabs rax, 0xa28e66a938e81327
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x26]
movzx ecx, byte [rsp + 0x1d]
add eax, ecx
movzx ecx, byte [rsp + 0x20]
movzx edx, byte [rsp + 0x23]
sub ecx, edx
movzx edx, byte [rsp + 0x18]
movzx ebx, byte [rsp + 0x19]
sub edx, ebx
movzx ebx, byte [rsp + 0x1e]
movzx esi, byte [rsp + 0x24]
xor ebx, esi
movzx esi, byte [rsp + 0x27]
movzx edi, byte [rsp + 0x1f]
sub esi, edi
movzx edi, byte [rsp + 0x21]
movzx r8d, byte [rsp + 0x22]
sub edi, r8d
movzx r8d, byte [rsp + 0x1c]
movzx r9d, byte [rsp + 0x25]
add r8d, r9d
movzx r9d, byte [rsp + 0x1a]
movzx r10d, byte [rsp + 0x1b]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x55ed26
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x55ed1a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x55f860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x37a52ba98829d4b8
mov qword [rsp + 0x18], rax
movabs rax, 0x7a82cc0e747d1c67
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1b]
movzx ecx, byte [rsp + 0x24]
add eax, ecx
movzx ecx, byte [rsp + 0x19]
movzx edx, byte [rsp + 0x27]
sub ecx, edx
movzx edx, byte [rsp + 0x25]
movzx ebx, byte [rsp + 0x1e]
xor edx, ebx
movzx ebx, byte [rsp + 0x1d]
movzx esi, byte [rsp + 0x1c]
sub ebx, esi
movzx esi, byte [rsp + 0x23]
movzx edi, byte [rsp + 0x1a]
add esi, edi
movzx edi, byte [rsp + 0x18]
movzx r8d, byte [rsp + 0x20]
add edi, r8d
movzx r8d, byte [rsp + 0x1f]
movzx r9d, byte [rsp + 0x26]
sub r8d, r9d
movzx r9d, byte [rsp + 0x21]
movzx r10d, byte [rsp + 0x22]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x55f946
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x55f93a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret