joyce8/EMBER2024-capa huggingface dataset:
Function at 0x550d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x2e1b47f4b1736601
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x203060102040603
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1060100
xor eax, eax
jmp 0x550db5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0xd]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x550de8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x550e25
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0xd]
nop dword [rax]
cmp rbx, 8
jb 0x550d9b
jmp 0x550e17
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x550e01
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x550df5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x552260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x30d3931a884d0a56
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3010504030305
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x700
xor eax, eax
jmp 0x5522b6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x69]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x69]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x5522e2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x552325
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x55229a
nop
jmp 0x552316
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x552300
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5522ef
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x553580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x7b89b94f08305d4b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x405040502040600
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5535cf
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0xe]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x5535fa
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x553635
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x5535b3
jmp 0x553629
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x553613
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x553607
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00461020
nop
int3
Function at 0x553f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xc3d4967a7bade734
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x605020007000103
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7060001
xor eax, eax
jmp 0x553f77
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0x12]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0x12]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x553fa8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x553fe5
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x553f5b
jmp 0x553fd7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x553fc1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x553fb5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x554a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x3fa75e1c32707fbe
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x707010701070707
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x502
xor eax, eax
jmp 0x554ab4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x554ae8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x554b25
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x3c]
nop dword [rax + rax]
cmp rbx, 8
jb 0x554a9a
jmp 0x554b17
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x554b01
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x554af5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x554b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xc5cf278321f8b841
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x407070105020601
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6000200
xor eax, eax
jmp 0x554b95
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x64]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x554bc8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x554c05
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x64]
nop dword [rax]
cmp rbx, 8
jb 0x554b7b
jmp 0x554bf7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x554be1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x554bd5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x5550e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x569f22ae224c4733
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5010601000604
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x55512d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x55515c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x555197
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x5b]
cmp rbx, 8
jb 0x555113
jmp 0x55518b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x555175
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x555169
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop
call fcn.00461020
nop
int3

Function at 0x556ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x556da7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x452ee24e61f64264
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x6c12
movabs rdx, 0x804010101020805
mov qword [rsp + 0x22], rdx
movabs rdx, 0x107050704010804
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x556d47
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x30]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x30]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x556d77
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x556d9a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x556d2a
jmp 0x556d8e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00556ce0
Function at 0x558580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55864c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb4b0691968f3746a
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6cd064e0
movabs rdx, 0x30a08030a040702
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40300070206030a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5585e5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x55861c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x55863f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 0xc
jb 0x5585cb
jmp 0x558633
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00558580

Function at 0x558960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x558a7d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x44b6c9f7b793b643
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf7913a25346976aa
mov qword [rsp + 0x27], rdx
movabs rdx, 0xeba9d11698f7913a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd4acca994c04a763
mov qword [rsp + 0x34], rdx
movabs rdx, 0x101619141308020b
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x12011c1c10161914
mov qword [rsp + 0x40], rdx
movabs rdx, 0x19021a050e01040f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x191b11040d191c17
mov qword [rsp + 0x50], rdx
movabs rdx, 0x40f031b061c030c
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x558a20
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x27]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x27]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x558a4d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x558a70
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1d
jb 0x5589fd
jmp 0x558a64
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461020
mov eax, edi
mov ecx, 0x1d
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00558960
Function at 0x558ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x558c8a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x28505e354d5d4914
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf5428505e354d5d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x723a28322d1f691d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x706070910020c0f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1040c020d060706
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd090009050c090a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x558c2d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x29]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x29]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x558c5a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x558c7d
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x558c10
jmp 0x558c71
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00558ba0

Function at 0x558ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x558d8c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f63e7dfb71e19de
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6b6f63e7dfb71e19
mov qword [rsp + 0x20], rdx
movabs rdx, 0x15aa758572846e2b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30d050d0006040b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x41002050b0f09
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb04010109000d06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x558d2a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x37]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x558d5c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x558d7f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x37]
cmp rsi, 0x11
jb 0x558d10
jmp 0x558d73
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00558ca0
Function at 0x558da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x558e9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xeb487460e1c2646d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7261fd0668eb4874
mov qword [rsp + 0x22], rdx
movabs rdx, 0xdf4b07588e695ee9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x61112070a091012
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd141304130e060b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x8000611130e0d14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x308000208040400
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x558e39
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x558e6b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x558e8e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 0x15
jb 0x558e1f
jmp 0x558e82
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00558da0

Function at 0x559260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55935d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5c4e375c666125ef
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x654e1a25325c4e37
mov qword [rsp + 0x22], rdx
movabs rdx, 0x534a67665b6e5cd7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x13010d090001130a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x710040b14010409
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe010d0b06050710
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11050a0408030800
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x559300
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x55932d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x559350
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x5592df
jmp 0x559344
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00559260
Function at 0x55a3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x55a54c
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x397221d266e2c43
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x6e2b36e80397221d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x742cfe32c42b0767
mov qword [rsp + 0x58], rdx
movabs rdx, 0x702172f973242d28
mov qword [rsp + 0x60], rdx
movabs rdx, 0xa691ed54350b29
mov qword [rsp + 0x68], rdx
movabs rdx, 0x7365447929691875
mov qword [rsp + 0x70], rdx
movabs rdx, 0x50824749033e601
mov qword [rsp + 0x78], rdx
movabs rdx, 0x32e160d251a271c
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf121504032e160d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x16010a2d14210604
mov qword [rsp + 0x24], rdx
movabs rdx, 0x122c15110511052f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x101e090531220504
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2114321d31073308
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x2314090e20180a0a
mov qword [rsp + 0x44], rdx
xor eax, eax
jmp 0x55a4e7
movzx r9d, byte [rsp + rsi + 0x4c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x4c], dl
mov byte [rsp + rsi + 0x4c], r8b
add rax, 2
cmp rax, 0x34
jge 0x55a51c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x34
jae 0x55a53f
movzx r8d, byte [rsp + rdi + 0x4c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0x34
jb 0x55a4cd
jmp 0x55a533
xor eax, eax
lea rbx, [rsp + 0x4c]
mov ecx, 0x34
call fcn.0044bb20
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x34
call fcn.00461020
mov eax, edi
mov ecx, 0x34
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0055a3e0

Function at 0x55ad80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55ae6a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb163dd747084728b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7f7269c9b163dd74
mov qword [rsp + 0x20], rdx
movabs rdx, 0x77c4aacb74b7a743
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80808080d020210
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20b050e08120e0b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x71100130d080d0e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x55ae0d
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x55ae3a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x55ae5d
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x55adf0
jmp 0x55ae51
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0055ad80
Function at 0x55b540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55b60c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x659a0ba21d6ce544
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xfb63947694659a0b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x40a06010c08030c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50a080c0401040a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x55b5af
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x79]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x79]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x55b5dc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x55b5ff
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x55b592
jmp 0x55b5f3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0055b540

Function at 0x55b620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55b70a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x773246765840ac1
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa76c01b65077324
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc6fa20f76f68b46e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf0e130a0a020c01
mov qword [rsp + 0x32], rdx
movabs rdx, 0x111411000f0e0f0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70f130211120509
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x55b6ad
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x68]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x68]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x55b6da
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x55b6fd
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x55b690
jmp 0x55b6f1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0055b620
Function at 0x55b720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55b7f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7461bcc0f4701544
mov qword [rsp + 0x28], rdx
movabs rdx, 0x781b6e0120137d7f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb04030e080b0409
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc09010b05090a04
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x55b78c
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x40]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x55b7be
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x55b7e5
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x40]
cmp rsi, 0x10
jb 0x55b772
jmp 0x55b7d5
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0x10
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0055b720

Function at 0x562240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x56233d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb6656679dd43b8d7
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4bd8d2fdb6656679
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x16d24ecbd461e92e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x710130b010c01
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1030111020f0202
mov qword [rsp + 0x36], rdx
movabs rdx, 0x120501030111020f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1210080d0a091308
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5622e0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x58]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x58]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x56230d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x562330
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x5622bf
jmp 0x562324
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00562240