joyce8/EMBER2024-capa huggingface dataset:
Function at 0x53a980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53aa7b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x37545573242a3425
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x725d5a3c38375455
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2e653b3e1d0b764f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1212020d0f050a07
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x10101108010b030b
mov qword [rsp + 0x25], rdx
movabs rdx, 0x91405011010
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xd0d0a0a01101212
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x53aa19
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx + 8]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x53aa4b
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x53aa6e
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 8]
cmp rsi, 0x15
jb 0x53a9ff
jmp 0x53aa62
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0046d060
mov eax, edi
mov ecx, 0x15
call fcn.0046d060
nop
nop dword [rax + rax]
call fcn.0046ad80
jmp fcn.0053a980

Function at 0x53b820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53b906
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x655158546ed2ed5c
mov qword [rsp + 0x31], rdx
movabs rdx, 0xc1cbdfe0dc42e165
mov qword [rsp + 0x38], rdx
movabs rdx, 0x601000c0805020c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe0601000c0805
mov qword [rsp + 0x21], rdx
movabs rdx, 0x10801090b0c0d0a
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x53b8a0
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x53b8d2
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x53b8f7
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x78]
cmp rsi, 0xf
jb 0x53b882
jmp 0x53b8eb
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0046d060
mov eax, edi
mov ecx, 0xf
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0053b820
Function at 0x53c120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53c20c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb8656ba5da327c98
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x966eaab8656ba5da
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6eb77e74617e7d6f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80103030208110a
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd00070408010303
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc100a1004030a01
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x53c1aa
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x14
jge 0x53c1dc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x53c1ff
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 0x13
jb 0x53c190
jmp 0x53c1f3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0046d060
mov eax, edi
mov ecx, 0x13
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0053c120

Function at 0x53cf00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53cfe7
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5a7048525f746522
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x71215a7048525f74
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3b78455a32264e72
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40903030908030d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe0e050e04090303
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x40704110c030004
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x53cf86
movzx r9d, byte [rsp + rsi + 0x2e]
add edx, r9d
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x14
jge 0x53cfb7
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x12
jae 0x53cfda
movzx r8d, byte [rsp + rdi + 0x2e]
add r8d, edx
cmp rsi, 0x12
jb 0x53cf70
jmp 0x53cfce
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046d060
mov eax, edi
mov ecx, 0x12
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0053cf00
Function at 0x53ee00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53eefb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x612d19eecacf79d3
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x74630f75cc70612d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5db374ddb390cfd7
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1510120115060b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x205010f070e0312
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0b0f0904040205
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x110400060214030b
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x53ee99
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x75]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x53eecb
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x53eeee
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x75]
cmp rsi, 0x16
jb 0x53ee7f
jmp 0x53eee2
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0046d060
mov eax, edi
mov ecx, 0x16
call fcn.0046d060
nop
nop dword [rax + rax]
call fcn.0046ad80
jmp fcn.0053ee00

Function at 0x53ef20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53f006
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x82b4761156c27412
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2b6e2cbeb5c87461
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50a090d0f000700
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd040a0b0007050a
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc090f060d040b02
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x53efa0
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6b]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x53efd2
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x53eff7
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6b]
cmp rsi, 0x10
jb 0x53ef82
jmp 0x53efeb
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0046d060
mov eax, edi
mov ecx, 0x10
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0053ef20
Function at 0x540480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54057d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x45e26f7274e26644
mov qword [rsp + 0x39], rdx
movabs rdx, 0xe7f0dde469516e45
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65500342b3cbebbd
mov qword [rsp + 0x48], rdx
movabs rdx, 0x21015130f121215
mov qword [rsp + 0x19], rdx
movabs rdx, 0x90e130a16011511
mov qword [rsp + 0x21], rdx
movabs rdx, 0x20b0b0d0c0c010e
mov qword [rsp + 0x29], rdx
movabs rdx, 0x14021613060b060f
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x540520
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x54054d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x540570
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x5404ff
jmp 0x540564
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0046d060
mov eax, edi
mov ecx, 0x17
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.00540480

Function at 0x545dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x545f07
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x6d735f78796a8e4e
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x4f636d735f78796a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x66747c74636c6720
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6c2f6870294c582e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x87888b54514545d0
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1c1b09011b18150b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5141c1b09011b18
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb06051414001d1e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x18171b0807100c20
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1309041511131402
mov qword [rsp + 0x36], rdx
movabs rdx, 0x21060b13040d1c0f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1f0b20040003201a
mov qword [rsp + 0x46], rdx
xor eax, eax
jmp 0x545ea7
movzx r9d, byte [rsp + rsi + 0x4e]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x4e], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x4e], dl
add rax, 2
cmp rax, 0x32
jge 0x545ed7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x545efa
movzx r8d, byte [rsp + rdi + 0x4e]
sub r8d, edx
cmp rsi, 0x22
jb 0x545e8a
jmp 0x545eee
xor eax, eax
lea rbx, [rsp + 0x4e]
mov ecx, 0x22
call fcn.00467060
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.0046d060
mov eax, edi
mov ecx, 0x22
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00545dc0
Function at 0x545f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x545ff2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x16b7630c6572e0aa
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x735965aa6216b763
mov qword [rsp + 0x30], rdx
movabs rdx, 0x109040406000701
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x9070b0c09040109
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x545f8c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4a]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0xe
jge 0x545fbe
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x545fe5
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4a]
cmp rsi, 0xd
jb 0x545f72
jmp 0x545fd5
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.0046d060
mov eax, edi
mov ecx, 0xd
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00545f20

Function at 0x547680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x547732
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x6c74d16fa68473bb
mov qword [rsp + 0x20], rdx
movabs rdx, 0x300030005020305
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x5476ce
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x547702
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x547725
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 8
jb 0x5476b4
nop
jmp 0x547719
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00467060
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0046d060
mov eax, edi
mov ecx, 8
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00547680
Function at 0x54a6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54a7a8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x73e051ef3f63e3d2
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x3d5e70b4d46e46e6
mov qword [rsp + 0x47], rdx
movabs rdx, 0x203d5e70b4d46e46
mov qword [rsp + 0x48], rdx
movabs rdx, 0x45e80f754d644bcb
mov qword [rsp + 0x50], rdx
movabs rdx, 0x30e05180c121109
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x12000f0016011000
mov qword [rsp + 0x27], rdx
movabs rdx, 0xb0f11010e171808
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x40b05060c000003
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x54a74b
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 - 0x4e]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 - 0x4e]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
cmp rax, 0x20
jge 0x54a778
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x54a79b
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x54a72e
jmp 0x54a78f
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00467060
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0046d060
mov eax, edi
mov ecx, 0x19
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0054a6a0

Function at 0x55afa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55b058
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x67b4e8c274536dbc
mov qword [rsp + 0x28], rdx
movabs rdx, 0x100060400040405
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x405
xor eax, eax
jmp 0x55aff5
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x55b028
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x55b04b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
nop
cmp rsi, 8
jb 0x55afdb
jmp 0x55b03f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0046d060
mov eax, edi
mov ecx, 8
call fcn.0046d060
nop
call fcn.0046ad80
nop dword [rax]
jmp fcn.0055afa0
Function at 0x55b080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55b13d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x80f6e468b4652cf8
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x20
movabs rdx, 0x500060006070306
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x5030106
xor eax, eax
nop
jmp 0x55b0e0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x47]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x47]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x55b10d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x55b130
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x55b0c2
jmp 0x55b124
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0046d060
mov eax, edi
mov ecx, 9
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.0055b080

Function at 0x55bd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55be4a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x9936ab34a74431ab
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x389936ab34a74431
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8c464513b9ba9a26
mov qword [rsp + 0x38], rdx
movabs rdx, 0x509100602070a00
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd05050910060207
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb0c100705030506
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x55bded
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x12
jge 0x55be1a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x55be3d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x55bdd0
jmp 0x55be31
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0046d060
mov eax, edi
mov ecx, 0x11
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0055bd60
Function at 0x55d120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55d20a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x698975b0c083b396
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x38698975b0c083b3
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6ec4457787737e79
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9070704030f1000
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20b030d09070704
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1050f0c060a0101
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x55d1ad
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x14
jge 0x55d1da
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x55d1fd
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x55d190
jmp 0x55d1f1
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0046d060
mov eax, edi
mov ecx, 0x11
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0055d120

Function at 0x55da20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55daec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf7747561f9fe74eb
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xf5656575
movabs rdx, 0x3080b0703020b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x800010b0b0003
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x55da85
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x70]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x55dabc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x55dadf
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x70]
cmp rsi, 0xc
jb 0x55da6b
jmp 0x55dad3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0046d060
mov eax, edi
mov ecx, 0xc
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0055da20
Function at 0x55eee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55efdb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x206469ff464f17c4
mov qword [rsp + 0x38], rdx
movabs rdx, 0x503ee7477536da28
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6ea5ca350f6fda33
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160d090015030c11
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3130102040d0416
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10090f0f0a161400
mov qword [rsp + 0x28], rdx
movabs rdx, 0x803020e140c0304
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x55ef79
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x20
jge 0x55efab
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x55efce
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0x18
jb 0x55ef5f
jmp 0x55efc2
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.0046d060
mov eax, edi
mov ecx, 0x18
call fcn.0046d060
nop
nop dword [rax + rax]
call fcn.0046ad80
jmp fcn.0055eee0
Function at 0x5612c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x561492
push rbp
mov rbp, rsp
sub rsp, 0xb0
movabs rdx, 0x7589626065749f33
mov qword [rsp + 0x6a], rdx
movabs rdx, 0x20d1727866897589
mov qword [rsp + 0x70], rdx
movabs rdx, 0x6232a3f165623efa
mov qword [rsp + 0x78], rdx
movabs rdx, 0x61a6875b84877d74
mov qword [rsp + 0x80], rdx
movabs rdx, 0x77706d2073fe565c
mov qword [rsp + 0x88], rdx
movabs rdx, 0x5406656f85356182
mov qword [rsp + 0x90], rdx
movabs rdx, 0x745974786eb85d8d
mov qword [rsp + 0x98], rdx
movabs rdx, 0x738565638cae7320
mov qword [rsp + 0xa0], rdx
movabs rdx, 0xc28a76722f236966
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x3413431544104428
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc1b3038082e1914
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1b1d1d191b120c1b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2628062d261c250a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x3217400c35392313
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1e2e2934201c1f25
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1a181e2f18010e41
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x3a2534231700042b
mov qword [rsp + 0x52], rdx
movabs rdx, 0x3c3f20201c301030
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x2c453c2517050f39
mov qword [rsp + 0x62], rdx
xor eax, eax
jmp 0x561427
movzx r9d, byte [rsp + rsi + 0x6a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x6a], dl
mov byte [rsp + rsi + 0x6a], r8b
add rax, 2
cmp rax, 0x4e
jge 0x56145c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x46
jae 0x561485
movzx r8d, byte [rsp + rdi + 0x6a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0x46
jb 0x56140d
jmp 0x561476
xor eax, eax
lea rbx, [rsp + 0x6a]
mov ecx, 0x46
call fcn.00467060
add rsp, 0xb0
pop rbp
ret
mov eax, esi
mov ecx, 0x46
nop dword [rax]
call fcn.0046d060
mov eax, edi
mov ecx, 0x46
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005612c0