joyce8/EMBER2024-capa huggingface dataset:
Function at 0x54d100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54d1f6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6f626567206c5a62
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5c6f626567206c5a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3f546f622044471b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x806100f09081008
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1000060a0a0b0806
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10010001100f0410
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x54d193
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x27]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x27]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x54d1c2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x54d1e9
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x54d176
nop
jmp 0x54d1dd
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.0054d100

Function at 0x54d220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x54d392
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x63d1f2c61d7306bf
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc3def1200a7d6569
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20b9c3def1200a7d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6f896501aa06f566
mov qword [rsp + 0x30], rdx
movabs rdx, 0xfe93621c40c1721e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x68b9db6e7d2b4c21
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2127201e1c202310
mov qword [rsp + 0x48], rdx
movabs rdx, 0x13050a160a03181c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1e1e0d27100b16
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf1525241324280d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x230e010323062427
mov qword [rsp + 0x68], rdx
movabs rdx, 0x10281d22040f0f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x141025221c0d001a
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x54d32a
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x6b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x38
jge 0x54d357
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2a
jae 0x54d385
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x2a
jb 0x54d30d
jmp 0x54d378
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x2a
call fcn.0044a200
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2a
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x2a
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0054d220
Function at 0x54d3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54d4a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x20f16e65cc1917ed
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20b274c6ba650020
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb4ba6f49bb31bd58
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x11010a1500060301
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10f12080f130301
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x31013061602010f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60b16000d011211
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x54d442
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1e
jge 0x54d46f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x54d49b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x17
jb 0x54d425
jmp 0x54d48f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0054d3a0

Function at 0x54e220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54e352
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x79744daa63b290e8
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2079744daa63b290
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2073a1be40966e30
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20e4dce570abb474
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2996a7cfd9343eb2
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc1701150e050e03
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1e190c1701150e05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16150006131f041c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b161c0b170e0902
mov qword [rsp + 0x50], rdx
movabs rdx, 0x120d02160b1d0b00
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x54e2ec
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x22
jge 0x54e31e
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x54e345
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x72]
cmp rsi, 0x21
jb 0x54e2d2
jmp 0x54e339
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x21
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x21
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x21
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0054e220
Function at 0x553aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x553b6b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xf164b57365f82ab5
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x73
movabs rdx, 0x101070000020205
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x205
xor eax, eax
jmp 0x553b04
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x45]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x45]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x553b37
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x553b5e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x553ae7
jmp 0x553b52
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00553aa0

Function at 0x554200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5542c8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x7327f63863b9312f
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x2338
movabs rdx, 0x808090105040402
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x506
xor eax, eax
jmp 0x554262
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x36]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
cmp rax, 0xa
jge 0x554294
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5542bb
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x36]
cmp rsi, 0xa
jb 0x554248
jmp 0x5542af
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xa
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00554200
Function at 0x555520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5555fd
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
lea rax, [0x005d4800]
nop
call fcn.0040c940
movabs rcx, 0x4cbaba0098625405
mov qword [rax], rcx
mov dword [rax + 8], 0xff55f3c0
movabs rcx, 0xa01060500020008
mov qword [rsp + 0x16], rcx
movabs rcx, 0x5060a0106050002
mov qword [rsp + 0x18], rcx
movabs rcx, 0x308030809070809
mov qword [rsp + 0x20], rcx
xor ecx, ecx
jmp 0x5555a1
movzx r9d, byte [rsi + rax]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rax + rdi], dl
mov byte [rax + rsi], r8b
add rcx, 2
cmp rcx, 0x12
jge 0x5555d2
movzx edx, byte [rsp + rcx + 0x16]
movzx esi, byte [rsp + rcx + 0x17]
mov edi, edx
xor edx, esi
add edx, ecx
cmp rdi, 0xc
jae 0x5555f0
movzx r8d, byte [rdi + rax]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0xc
jb 0x55558a
jmp 0x5555e4
mov ebx, 0xc
mov rcx, rbx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.00555520
Function at 0x556920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x556a06
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x200463fa7398a636
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xaf73b6a6
movabs rdx, 0x106020100010608
mov qword [rsp + 0x26], rdx
movabs rdx, 0x902010602010001
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20000040404020b
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x5569a0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x72]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x5569cd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5569f4
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xc
jb 0x556982
jmp 0x5569e8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00556920

Function at 0x55a1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55a288
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x70edf0f16974e3e1
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x74
movabs rdx, 0x301060400000306
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x501
xor eax, eax
jmp 0x55a223
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x76]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x55a250
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x55a27b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x55a206
jmp 0x55a26f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0055a1c0
Function at 0x55b780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55b852
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x869b6eaea4ef72ba
mov qword [rsp + 0x19], rdx
movabs rdx, 0x947069869b6eaea4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x30a000603020604
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xa070600
xor eax, eax
jmp 0x55b7eb
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x38]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x55b81d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x55b845
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x38]
cmp rsi, 0xb
jb 0x55b7d1
jmp 0x55b838
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0055b780

Function at 0x55bc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55bd88
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xe8152ef3d533da25
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe2153301ca0734e8
mov qword [rsp + 0x26], rdx
movabs rdx, 0x332eec1baf310b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70a0d06110e0004
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1112070313121303
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x903111207031312
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0001000f0a0e00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x55bd20
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xd]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x55bd52
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x55bd7b
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xd]
cmp rsi, 0x17
jb 0x55bd05
jmp 0x55bd6f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0055bc80
Function at 0x55cb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x1225d7cb774219bd
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7020006070701
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x404
xor eax, eax
nop
jmp 0x55cba0
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x55cbcf
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55cc0e
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x4f]
cmp rbx, 8
jb 0x55cb82
jmp 0x55cc02
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55cbe8
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55cbdc
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x55cc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x9a7297249d212d8d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x103020006030501
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x404
xor eax, eax
nop
jmp 0x55cc80
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x6c]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x55ccaf
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55ccee
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x6c]
cmp rbx, 8
jb 0x55cc62
jmp 0x55cce2
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55ccc8
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55ccbc
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x55da80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x48026354287f29b0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x703050503060504
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x404
xor eax, eax
nop
jmp 0x55dae0
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x69]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x55db0f
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55db4e
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x69]
cmp rbx, 8
jb 0x55dac2
jmp 0x55db42
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55db28
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55db1c
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x55db60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xba08fef6366ab360
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x400010202070205
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x500
xor eax, eax
nop
jmp 0x55dbc0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x4e]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x4e]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x55dbeb
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55dc2a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x55dba2
jmp 0x55dc1e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55dc04
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55dbf8
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x55dee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x19fc431e70a105e7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x303050305000105
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x304
xor eax, eax
nop
jmp 0x55df40
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x20]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x20]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x55df6b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55dfaa
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x55df22
jmp 0x55df9e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55df84
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55df78
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x5601c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xa260c5fe73cbef5d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x400060100020607
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x560213
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x560248
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x560287
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x4b]
nop word [rax + rax]
cmp rbx, 8
jb 0x5601f9
jmp 0x56027b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x560261
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x560255
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x560600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xfbd2b8b2a6443590
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x401040102010601
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x407
xor eax, eax
nop
jmp 0x560660
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x21]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x56068b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5606ca
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x560642
jmp 0x5606be
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5606a4
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x560698
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x561f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xea667852f26c5da8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x600050703070406
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x407
xor eax, eax
nop
jmp 0x561fe0
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x56200f
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56204e
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x54]
cmp rbx, 8
jb 0x561fc2
jmp 0x562042
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x562028
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x56201c
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3