joyce8/EMBER2024-capa huggingface dataset:
Function at 0x53f7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53f89b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x206457cd30556e69
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc6149452206457cd
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65bbcb6f704bbb72
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe0911090d0e0209
mov qword [rsp + 0x32], rdx
movabs rdx, 0x503030408030a03
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe0e120d02050503
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50b03050a090508
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x53f839
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x79]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x53f86b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x53f88e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x79]
cmp rsi, 0x14
jb 0x53f81f
jmp 0x53f882
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.0053f7a0

Function at 0x53ff60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54006c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc78337d3cbc56ed2
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x9d4726f44a9aa6e
mov qword [rsp + 0x23], rdx
movabs rdx, 0x6909d4726f44a9aa
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65a712f97265746a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf09160b0e04110f
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb03050309160f15
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x150a07060b030503
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa11170f00021709
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x540008
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x74]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x54003c
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x54005f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x74]
cmp rsi, 0x19
jb 0x53ffee
jmp 0x540053
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0053ff60
Function at 0x540080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54019d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x664296661c4aa76
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xbfc807d3cbcbcc5f
mov qword [rsp + 0x27], rdx
movabs rdx, 0x6166726574b06dbf
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb925e36e692d65dd
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1d111e0907080401
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe101d111e090708
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2190f000e0d0211
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd1c01070a020e08
mov qword [rsp + 0x50], rdx
movabs rdx, 0x17010d070c0b0501
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x540140
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x39]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x39]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x54016d
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x540190
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1f
jb 0x54011d
jmp 0x540184
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1f
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00461020
mov eax, edi
mov ecx, 0x1f
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00540080

Function at 0x541340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x541495
push rbp
mov rbp, rsp
sub rsp, 0xa8
movabs rdx, 0x47939dbfb7c56696
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6e6163b6cbdfc970
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5cb96e6163b6cbdf
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3fcb8d206465fdf1
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x836877b9baa99b8a
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb474aa6fa7af68e5
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc8cba8cd69207126
mov qword [rsp + 0x46], rdx
movabs rdx, 0x8f7ea061c8741069
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xe13110922071901
mov qword [rsp + 0x56], rdx
lea rdi, [rsp + 0x58]
lea rsi, [0x00626672]
nop word [rax + rax]
nop word [rax + rax]
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0046165a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x541434
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x27]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x27]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x52
jge 0x541462
movzx edx, byte [rsp + rax + 0x56]
movzx esi, byte [rsp + rax + 0x57]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3a
jae 0x541488
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x3a
jb 0x541417
nop
jmp 0x54147c
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x3a
call fcn.0044bb20
add rsp, 0xa8
pop rbp
ret
mov eax, esi
mov ecx, 0x3a
call fcn.00461020
mov eax, edi
mov ecx, 0x3a
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00541340
Function at 0x545ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x545f9d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd972f0d720ea66e6
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x64
movabs rdx, 0x102040407000208
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x502
xor eax, eax
nop
jmp 0x545f40
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x6e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x6e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x545f6d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x545f90
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x545f22
jmp 0x545f84
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00545ee0

Function at 0x5473c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5474bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x38313b3a2e332945
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3a42542e313f3a38
mov qword [rsp + 0x22], rdx
movabs rdx, 0x434b4c331c083640
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc00140715111616
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf0800100e150d00
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x90c040705010f08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12050d0c0e161515
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x547459
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x21]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x54748b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5474ae
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x21]
cmp rsi, 0x17
jb 0x54743f
jmp 0x5474a2
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.005473c0
Function at 0x548d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x6f384d4c57274c65
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x304010703050304
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x700
xor eax, eax
jmp 0x548db6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x44]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x44]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x548de2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x548e25
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x548d9a
nop
jmp 0x548e16
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x548e00
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x548def
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x549b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xac139e0c2cfd81d5
mov qword [rsp + 0x18], rax
movabs rax, 0x6fa1fc4b3b80f463
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x20]
movzx ecx, byte [rsp + 0x1b]
add eax, ecx
movzx ecx, byte [rsp + 0x25]
movzx edx, byte [rsp + 0x21]
sub ecx, edx
movzx edx, byte [rsp + 0x1a]
movzx ebx, byte [rsp + 0x1e]
add edx, ebx
movzx ebx, byte [rsp + 0x19]
movzx esi, byte [rsp + 0x1f]
xor ebx, esi
movzx esi, byte [rsp + 0x23]
movzx edi, byte [rsp + 0x18]
add esi, edi
movzx edi, byte [rsp + 0x24]
movzx r8d, byte [rsp + 0x27]
sub edi, r8d
movzx r8d, byte [rsp + 0x1d]
movzx r9d, byte [rsp + 0x26]
sub r8d, r9d
movzx r9d, byte [rsp + 0x22]
movzx r10d, byte [rsp + 0x1c]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x549c66
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x549c5a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x549f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x12c9d62048869867
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x105070700000304
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x307
xor eax, eax
jmp 0x549fd4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x20]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x54a008
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54a045
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x20]
nop dword [rax + rax]
cmp rbx, 8
jb 0x549fba
jmp 0x54a037
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x54a021
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x54a015
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x54a060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xddbaa737269dca21
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x304010204060704
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2040400
xor eax, eax
jmp 0x54a0b5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x54a0e8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54a125
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x46]
nop dword [rax]
cmp rbx, 8
jb 0x54a09b
jmp 0x54a117
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x54a101
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x54a0f5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x54a6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x34367e18af57e2b7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x505050402040300
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 3
xor eax, eax
jmp 0x54a716
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x14]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x54a742
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54a785
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x54a6fa
nop
jmp 0x54a776
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x54a760
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x54a74f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x54b460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x234dbee0de11d735
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x602010000060205
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4060100
xor eax, eax
jmp 0x54b4b5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x54b4e8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54b525
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x10]
nop dword [rax]
cmp rbx, 8
jb 0x54b49b
jmp 0x54b517
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x54b501
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x54b4f5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x54c920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x7aae98130532b01d
mov qword [rsp + 0x18], rax
movabs rax, 0x3927e2de591d517b
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x26]
movzx ecx, byte [rsp + 0x1d]
sub eax, ecx
movzx ecx, byte [rsp + 0x1a]
movzx edx, byte [rsp + 0x25]
add ecx, edx
movzx edx, byte [rsp + 0x24]
movzx ebx, byte [rsp + 0x1c]
sub edx, ebx
movzx ebx, byte [rsp + 0x18]
movzx esi, byte [rsp + 0x20]
sub ebx, esi
movzx esi, byte [rsp + 0x1f]
movzx edi, byte [rsp + 0x21]
sub esi, edi
movzx edi, byte [rsp + 0x22]
movzx r8d, byte [rsp + 0x1e]
xor edi, r8d
movzx r8d, byte [rsp + 0x27]
movzx r9d, byte [rsp + 0x23]
add r8d, r9d
movzx r9d, byte [rsp + 0x19]
movzx r10d, byte [rsp + 0x1b]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x54ca06
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x54c9fa
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x54e860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xe2970ff0e13c509a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x707060703030201
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x205
xor eax, eax
jmp 0x54e8b4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x33]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x54e8e8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54e925
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x33]
nop dword [rax + rax]
cmp rbx, 8
jb 0x54e89a
jmp 0x54e917
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x54e901
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x54e8f5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x54eb20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x48b8d2ba56c99a3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x603050303030304
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1030305
xor eax, eax
jmp 0x54eb75
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x23]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x54eba8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54ebe5
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x23]
nop dword [rax]
cmp rbx, 8
jb 0x54eb5b
jmp 0x54ebd7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x54ebc1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x54ebb5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x54f3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xdf7cf53ebe307640
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x506040005070502
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1010400
xor eax, eax
jmp 0x54f435
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x54f468
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54f4a5
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x54]
nop dword [rax]
cmp rbx, 8
jb 0x54f41b
jmp 0x54f497
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x54f481
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x54f475
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x550280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xe721550f8174406
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2030702060004
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5502cf
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x6f]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x6f]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x5502fa
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x550335
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x5502b3
jmp 0x550329
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x550313
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x550307
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00461020
nop
int3

Function at 0x550840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x2a97132d15ade8b6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x505020103000205
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x205
xor eax, eax
jmp 0x550894
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x74]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x5508c8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x550905
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x74]
nop dword [rax + rax]
cmp rbx, 8
jb 0x55087a
jmp 0x5508f7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5508e1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5508d5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x550c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x642ebe5639ecff9b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x303020704070100
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2050404
xor eax, eax
jmp 0x550cd7
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x67]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x550d08
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x550d45
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x550cbb
jmp 0x550d37
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x550d21
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x550d15
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3