joyce8/EMBER2024-capa huggingface dataset:
Function at 0x54bca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xdbff2ab8296c5157
mov qword [rsp + 0x18], rax
movabs rax, 0xcb5405ab5c115f4b
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x25]
movzx ecx, byte [rsp + 0x21]
sub eax, ecx
movzx ecx, byte [rsp + 0x1f]
movzx edx, byte [rsp + 0x1c]
xor ecx, edx
movzx edx, byte [rsp + 0x1a]
movzx ebx, byte [rsp + 0x27]
add edx, ebx
movzx ebx, byte [rsp + 0x22]
movzx esi, byte [rsp + 0x26]
sub ebx, esi
movzx esi, byte [rsp + 0x1e]
movzx edi, byte [rsp + 0x18]
add esi, edi
movzx edi, byte [rsp + 0x19]
movzx r8d, byte [rsp + 0x20]
sub edi, r8d
movzx r8d, byte [rsp + 0x24]
movzx r9d, byte [rsp + 0x1d]
sub r8d, r9d
movzx r9d, byte [rsp + 0x23]
movzx r10d, byte [rsp + 0x1b]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x54bd86
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x54bd7a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x54c2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xa14b560c27dd9349
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x100040600020201
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x703
xor eax, eax
jmp 0x54c2f4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x54c328
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54c365
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x5f]
nop dword [rax + rax]
cmp rbx, 8
jb 0x54c2da
jmp 0x54c357
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x54c341
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x54c335
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x54cae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x6aebf19ae97f8570
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x507000506000100
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 1
xor eax, eax
jmp 0x54cb36
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x25]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x54cb62
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54cba5
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x54cb1a
nop
jmp 0x54cb96
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x54cb80
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x54cb6f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x54cbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xb7a97c319a05e20c
mov qword [rsp + 0x18], rax
movabs rax, 0x591405c0af237aed
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x24]
movzx ecx, byte [rsp + 0x21]
xor eax, ecx
movzx ecx, byte [rsp + 0x22]
movzx edx, byte [rsp + 0x20]
add ecx, edx
movzx edx, byte [rsp + 0x19]
movzx ebx, byte [rsp + 0x1d]
add edx, ebx
movzx ebx, byte [rsp + 0x25]
movzx esi, byte [rsp + 0x1c]
add ebx, esi
movzx esi, byte [rsp + 0x1f]
movzx edi, byte [rsp + 0x23]
sub esi, edi
movzx edi, byte [rsp + 0x1e]
movzx r8d, byte [rsp + 0x1b]
add edi, r8d
movzx r8d, byte [rsp + 0x26]
movzx r9d, byte [rsp + 0x18]
sub r8d, r9d
movzx r9d, byte [rsp + 0x27]
movzx r10d, byte [rsp + 0x1a]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x54cca6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x54cc9a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x54df00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x69097784751c135b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x404020004050705
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x104
xor eax, eax
jmp 0x54df54
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x54df88
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54dfc5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x7e]
nop dword [rax + rax]
cmp rbx, 8
jb 0x54df3a
jmp 0x54dfb7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x54dfa1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x54df95
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x54e840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x44470cd07ee4a1af
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x604020701070204
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x605
xor eax, eax
jmp 0x54e894
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x54e8c8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54e905
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x5d]
nop dword [rax + rax]
cmp rbx, 8
jb 0x54e87a
jmp 0x54e8f7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x54e8e1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x54e8d5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x54e9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xf7d385cfaf795113
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6030402070502
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x54e9ed
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x54ea1c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54ea57
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x4e]
cmp rbx, 8
jb 0x54e9d3
jmp 0x54ea4b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x54ea35
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x54ea29
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop
call fcn.00461020
nop
int3

Function at 0x54f180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xb747e04c096d8517
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7070703030205
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3030406
xor eax, eax
jmp 0x54f1d5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x79]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x54f208
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54f245
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x79]
nop dword [rax]
cmp rbx, 8
jb 0x54f1bb
jmp 0x54f237
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x54f221
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x54f215
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x54f260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xccebb82aa6798eda
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6040602000707
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x604
xor eax, eax
jmp 0x54f2b4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x2a]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x54f2e8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54f325
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x2a]
nop dword [rax + rax]
cmp rbx, 8
jb 0x54f29a
jmp 0x54f317
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x54f301
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x54f2f5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x550520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xe87023f771e50df
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2010602000202
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x55056f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x25]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x25]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x55059a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5505d5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x550553
jmp 0x5505c9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5505b3
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x5505a7
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00461020
nop
int3

Function at 0x550ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x49bd56a89cae5122
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4070107060006
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2070202
xor eax, eax
jmp 0x550f17
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0x1a]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x550f48
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x550f85
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x550efb
jmp 0x550f77
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x550f61
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x550f55
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x551fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x967dfaab57cbf3c4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7000305010302
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x606
xor eax, eax
jmp 0x551ff4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 9]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x552028
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x552065
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 9]
nop dword [rax + rax]
cmp rbx, 8
jb 0x551fda
jmp 0x552057
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x552041
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x552035
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x552180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x2caf9d2a114a7705
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x703030103060003
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x503
xor eax, eax
jmp 0x5521d4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x72]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x552208
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x552245
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x72]
nop dword [rax + rax]
cmp rbx, 8
jb 0x5521ba
jmp 0x552237
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x552221
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x552215
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x552920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x6f9c820b6d92dd13
mov qword [rsp + 0x20], rdx
movabs rdx, 0x207060300050506
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x55296f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x16]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x16]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x55299a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5529d5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x552953
jmp 0x5529c9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5529b3
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x5529a7
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00461020
nop
int3
Function at 0x553260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x2816720f5e8e18ac
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x201040406060407
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x607
xor eax, eax
jmp 0x5532b4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x4a]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x5532e8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x553325
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x4a]
nop dword [rax + rax]
cmp rbx, 8
jb 0x55329a
jmp 0x553317
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x553301
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5532f5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x553340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x1fa7b3e70e8cf79f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x106010505010200
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0
xor eax, eax
jmp 0x553394
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x5533c8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x553405
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x78]
nop dword [rax + rax]
cmp rbx, 8
jb 0x55337a
jmp 0x5533f7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5533e1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5533d5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x553420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x2971e136e62cc084
mov qword [rsp + 0x20], rdx
movabs rdx, 0x102070504050701
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x55346d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x55349c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5534d7
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x16]
cmp rbx, 8
jb 0x553453
jmp 0x5534cb
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5534b5
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x5534a9
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop
call fcn.00461020
nop
int3

Function at 0x553ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xe43d08fa03c524a8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x206030500010302
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x201
xor eax, eax
jmp 0x553b34
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x64]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x553b68
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x553ba5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x64]
nop dword [rax + rax]
cmp rbx, 8
jb 0x553b1a
jmp 0x553b97
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x553b81
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x553b75
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x553f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x16b8ac1b7f042378
mov qword [rsp + 0x20], rdx
movabs rdx, 0x102040007070300
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x553f8f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x6e]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x6e]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x553fba
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x553ff5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x553f73
jmp 0x553fe9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x553fd3
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x553fc7
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00461020
nop
int3
Function at 0x554020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x9344c2bc2eb4c8ac
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x105010205020402
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4040302
xor eax, eax
jmp 0x554077
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x7d]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x5540a8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5540e5
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x55405b
jmp 0x5540d7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x5540c1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x5540b5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x554e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x815815dfc66646d1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x100060300030406
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x306
xor eax, eax
jmp 0x554e74
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x554ea8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x554ee5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x39]
nop dword [rax + rax]
cmp rbx, 8
jb 0x554e5a
jmp 0x554ed7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x554ec1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x554eb5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3