joyce8/EMBER2024-capa huggingface dataset:
Function at 0x54d320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54d3e8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x869e41d6796d9cc3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2040103060400
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x702
xor eax, eax
nop
jmp 0x54d380
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x32]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x54d3b2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x54d3db
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x32]
cmp rsi, 8
jb 0x54d362
jmp 0x54d3cf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0054d320

Function at 0x54d400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54d4d2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x63290f3424395b48
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x73371b63
movabs rdx, 0x3030a0900020a05
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa030906010304
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x54d46e
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x54d49b
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x54d4c5
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x54d451
jmp 0x54d4b6
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0054d400
Function at 0x54d7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54d88b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x28610111325a434f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5c6f1a39f8652861
mov qword [rsp + 0x24], rdx
movabs rdx, 0x70507090a0b04
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb02000300070507
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40502090a0d020a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x54d824
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x54d857
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x54d87e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x54d807
jmp 0x54d872
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xe
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0054d7a0
Function at 0x54f320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54f428
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xe9ab616d8609c4ce
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb2606eacaef204e9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x838dd0425b7c73ac
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10e0a0302080313
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1600031209081511
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0a07020e08140d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110800160d0b0206
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x54f3c0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x58]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x54f3f2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x54f41b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x58]
cmp rsi, 0x17
jb 0x54f3a5
jmp 0x54f40f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0054f320
Function at 0x5506a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5507f2
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x7ed03a24d796c374
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x44c9647ed03a24d7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd3da74de69d9739c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x203163611557deca
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa49816485f369028
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf14041c0d16080a
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1e200f14041c0d16
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa110a100d192015
mov qword [rsp + 0x48], rdx
movabs rdx, 0x201919051e0b1c1f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x11921221304021c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x50d202002150911
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1213070308161306
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x55078a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x70]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x32
jge 0x5507bc
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x5507e5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x70]
cmp rsi, 0x23
jb 0x550770
jmp 0x5507d7
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x23
call fcn.0044a200
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x23
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x23
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005506a0

Function at 0x550800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x550946
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x794f156da69ad4f2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe8794f156da69ad4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8d1d1e194436cb47
mov qword [rsp + 0x28], rdx
movabs rdx, 0x202af5611c49d949
mov qword [rsp + 0x30], rdx
movabs rdx, 0x583500c6e5ddf2a6
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30a1900091a1d02
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0f1b1c17021a10
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d051008120b1900
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1e160d1c1a1e1420
mov qword [rsp + 0x58], rdx
movabs rdx, 0x130a1d010c171a20
mov qword [rsp + 0x60], rdx
movabs rdx, 0x5201d050b1c0611
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x5508e0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x30
jge 0x55090d
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x550934
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x21
jb 0x5508c2
jmp 0x550928
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x21
call fcn.0044a200
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x21
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x21
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00550800
Function at 0x551600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x5517a7
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
movabs rdx, 0x7573b4cd656d616e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6193edc36f187573
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x247d176753a24511
mov qword [rsp + 0x26], rdx
movabs rdx, 0x618f72b3545f8a61
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xba7942627228a674
mov qword [rsp + 0x36], rdx
movabs rdx, 0x7720df1e9f1b7473
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x29fe20add66823b4
mov qword [rsp + 0x46], rdx
movabs rdx, 0xe1231231714152f
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x19230e1231231714
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1314101a321f1c0c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x10251410052e3422
mov qword [rsp + 0x60], rdx
movabs rdx, 0x303230e210b2807
mov qword [rsp + 0x68], rdx
movabs rdx, 0x15032f122a152129
mov qword [rsp + 0x70], rdx
movabs rdx, 0x130a0f221f182407
mov qword [rsp + 0x78], rdx
movabs rdx, 0x15222311041a0e0d
mov qword [rsp + 0x80], rdx
movabs rdx, 0x18230a2b0a180823
mov qword [rsp + 0x88], rdx
xor eax, eax
nop
jmp 0x551740
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x42
jge 0x55176d
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x36
jae 0x55179a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x36
jb 0x551722
jmp 0x55178e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x36
call fcn.0044a200
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov eax, esi
mov ecx, 0x36
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x36
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00551600
Function at 0x554c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x554d1c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x5165ab1a65a7af98
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2fb47272655165ab
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20104050b000b01
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40c010b01070c07
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x554cb2
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x554ce8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x554d0f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
nop dword [rax]
cmp rsi, 0xd
jb 0x554c98
jmp 0x554d03
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xd
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.00554c40
Function at 0x556320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5563eb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x65afea66726e716c
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x73
movabs rdx, 0x603020503000105
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5000200
xor eax, eax
jmp 0x556384
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x5563b7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x5563de
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x556367
jmp 0x5563d2
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00556320

Function at 0x556400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5564c6
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x934b7d9f31f13a5b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x706060205060206
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x204
xor eax, eax
nop
jmp 0x556460
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x57]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x57]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x55648d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x5564b4
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 8
jb 0x556442
jmp 0x5564a8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00556400
Function at 0x557c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x557da7
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0x50899bdf209e7f75
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5c8e9d7e2dc2bde
mov qword [rsp + 0x26], rdx
movabs rdx, 0x839c746905c8e9d7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc3b41d632dac5a76
mov qword [rsp + 0x32], rdx
movabs rdx, 0xcae4a5840c51bdc1
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x356f69f263656e91
mov qword [rsp + 0x42], rdx
movabs rdx, 0xf1d050528040704
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x7041324022b0e20
mov qword [rsp + 0x52], rdx
movabs rdx, 0x1921121621090704
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a1d091b24142302
mov qword [rsp + 0x60], rdx
movabs rdx, 0x51e280d0519012b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x142b0c16220b1924
mov qword [rsp + 0x70], rdx
movabs rdx, 0x15051b0d150d2106
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2b1f080a010c211c
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x557d40
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x3e
jge 0x557d6d
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x557d9a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x2c
jb 0x557d1f
jmp 0x557d8e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x2c
call fcn.0044a200
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x2c
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x2c
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00557c20

Function at 0x55bc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55bd68
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x724261654f554a1d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6f5a666165724261
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6d61724e205f6557
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb05110b0f010603
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x11110005020d0e03
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa0f11110005020d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x61403140d06060d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x55bd02
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1a
jge 0x55bd2f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x55bd5b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x55bce5
jmp 0x55bd4f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x15
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0055bc60
Function at 0x55c960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55ca5c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xe387d6a3c134d7cd
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8064656ec7e387d6
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3220283c2f67d573
mov qword [rsp + 0x28], rdx
movabs rdx, 0x61104041001020e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60008071103120e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc080c0405030e01
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x55c9f0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x55ca28
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x55ca4f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7c]
nop word [rax + rax]
cmp rsi, 0x15
jb 0x55c9d6
jmp 0x55ca43
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x15
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0055c960

Function at 0x55cc40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55cd12
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6cb19a4801076c0e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6b5a6f6cb19a4801
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x602020905040409
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3020400
xor eax, eax
jmp 0x55ccae
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x6b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x6b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x55ccdb
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x55cd05
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x55cc91
jmp 0x55ccf6
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0055cc40
Function at 0x55d0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55d1d6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x42317e512e4b566f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x344f42317e512e4b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x54775046523f4c35
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd050e0410090c00
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf020b0c0e090d11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10810110b0e0507
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x55d173
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 2]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x55d1a2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x55d1c9
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x55d156
nop
jmp 0x55d1bd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.0055d0e0

Function at 0x55f720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x3ba1610881f08db
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x507070306020205
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x60202
xor eax, eax
nop
jmp 0x55f780
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0x32]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x55f7ab
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55f7ea
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x55f762
jmp 0x55f7de
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x55f7c4
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x55f7b8
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x55fe00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x1e09268a7edf15a0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x703010404040704
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x405
xor eax, eax
nop
jmp 0x55fe60
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x55fe8f
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55fece
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x6f]
cmp rbx, 8
jb 0x55fe42
jmp 0x55fec2
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55fea8
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55fe9c
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x560180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x5effe65121d76b4a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x202000304070707
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x401
xor eax, eax
nop
jmp 0x5601e0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x6c]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x6c]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x56020b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x56024a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x5601c2
jmp 0x56023e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x560224
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x560218
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3