joyce8/EMBER2024-capa huggingface dataset:
Function at 0x553600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x5f694262856cb416
mov qword [rsp + 0x20], rdx
movabs rdx, 0x705000707050004
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x553653
movzx r8d, byte [rsp + rbx + 0x20]
add r8d, 0x2e
add edx, r8d
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x553682
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5536c6
movzx edi, byte [rsp + rsi + 0x20]
add edi, 0x2e
add edi, edx
cmp rbx, 8
jb 0x553639
nop
jmp 0x5536ba
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5536a0
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x55368f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3

Function at 0x554040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x1a47e3357578c7aa
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x304010607060102
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x107
xor eax, eax
nop
jmp 0x5540a0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x23]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x5540cb
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55410a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x554082
jmp 0x5540fe
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5540e4
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5540d8
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3
Function at 0x5554c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0x11a50c98d7426c39
mov qword [rsp + 0x18], rax
movabs rax, 0xeae16b11a9f7e381
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1d]
movzx ecx, byte [rsp + 0x1c]
add eax, ecx
movzx ecx, byte [rsp + 0x1b]
movzx edx, byte [rsp + 0x22]
movzx ebx, byte [rsp + 0x26]
movzx esi, byte [rsp + 0x18]
movzx edi, byte [rsp + 0x1a]
movzx r8d, byte [rsp + 0x1e]
movzx r9d, byte [rsp + 0x23]
movzx r10d, byte [rsp + 0x21]
movzx r11d, byte [rsp + 0x20]
movzx r12d, byte [rsp + 0x25]
movzx r13d, byte [rsp + 0x19]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x24]
movzx r13d, byte [rsp + 0x1f]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x27]
mov byte [rsp + 0xf], al
lea eax, [rdx + rcx]
mov byte [rsp + 0x10], al
sub ebx, esi
mov byte [rsp + 0x11], bl
lea eax, [r8 + rdi]
mov byte [rsp + 0x12], al
sub r9d, r10d
mov byte [rsp + 0x13], r9b
xor r11d, r12d
mov byte [rsp + 0x14], r11b
movzx eax, byte [rsp + 6]
add eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
sub eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x5555c6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x5555ba
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
nop
ret

Function at 0x555aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xbb343bd61be25a00
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x404000406020606
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x306
xor eax, eax
nop
jmp 0x555b00
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x4b]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x555b2b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x555b6a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x555ae2
jmp 0x555b5e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x555b44
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x555b38
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3
Function at 0x555ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xa1b920dae6511d86
mov qword [rsp + 0x20], rdx
movabs rdx, 0x200030401010707
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x555f35
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x76]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x555f62
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x555fa6
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x555f19
nop
jmp 0x555f9a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x555f80
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x555f6f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3

Function at 0x556680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x5e4da3329e5debb2
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x305010205070607
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5050501
xor eax, eax
nop
jmp 0x5566e0
movzx r8d, byte [rsp + rbx + 0x1c]
add r8d, 0x73
add edx, r8d
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x55670e
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55674d
movzx edi, byte [rsp + rsi + 0x1c]
add edi, 0x73
add edi, edx
cmp rbx, 8
jb 0x5566c2
jmp 0x556741
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x556727
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x55671b
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3
Function at 0x558120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xd2afa22539e44aac
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x104070507010503
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x602
xor eax, eax
nop
jmp 0x558180
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xffffff88
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5581ae
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5581ed
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xffffff88
add edi, edx
cmp rbx, 8
jb 0x558162
jmp 0x5581e1
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5581c7
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5581bb
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3

Function at 0x558340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xf6af0a5b55fbe1c2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x200070400050403
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x304
xor eax, eax
nop
jmp 0x5583a0
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xffffffa9
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5583ce
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55840d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xffffffa9
add edi, edx
cmp rbx, 8
jb 0x558382
jmp 0x558401
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5583e7
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5583db
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3
Function at 0x5584c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xb29d35fa37284b43
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5060005020307
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x558515
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x38]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x558542
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x558586
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x5584f9
nop
jmp 0x55857a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x558560
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x55854f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3

Function at 0x558da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x7b155ee311ffff85
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4030002020406
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x106
xor eax, eax
nop
jmp 0x558e00
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0x38
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x558e2e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x558e6d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0x38
add edi, edx
cmp rbx, 8
jb 0x558de2
jmp 0x558e61
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x558e47
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x558e3b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3
Function at 0x558fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0xbd0f4a488f22526c
mov qword [rsp + 0x18], rax
movabs rax, 0x2a5e87f36e880e38
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x21]
movzx ecx, byte [rsp + 0x25]
add eax, ecx
movzx ecx, byte [rsp + 0x26]
movzx edx, byte [rsp + 0x1b]
movzx ebx, byte [rsp + 0x1a]
movzx esi, byte [rsp + 0x24]
movzx edi, byte [rsp + 0x20]
movzx r8d, byte [rsp + 0x1e]
movzx r9d, byte [rsp + 0x22]
movzx r10d, byte [rsp + 0x19]
movzx r11d, byte [rsp + 0x1f]
movzx r12d, byte [rsp + 0x18]
movzx r13d, byte [rsp + 0x1d]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x27]
movzx r13d, byte [rsp + 0x1c]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x23]
mov byte [rsp + 0xf], al
sub ecx, edx
mov byte [rsp + 0x10], cl
sub ebx, esi
mov byte [rsp + 0x11], bl
sub edi, r8d
mov byte [rsp + 0x12], dil
xor r9d, r10d
mov byte [rsp + 0x13], r9b
lea eax, [r12 + r11]
mov byte [rsp + 0x14], al
movzx eax, byte [rsp + 6]
sub eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
sub eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x5590c5
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x5590b9
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret

Function at 0x559620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x261a4c838299a99c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5020005050401
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 4
xor eax, eax
nop
jmp 0x559680
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xffffff82
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5596ae
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5596ed
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xffffff82
add edi, edx
cmp rbx, 8
jb 0x559662
jmp 0x5596e1
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5596c7
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5596bb
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3
Function at 0x559bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x39f7334146bd770
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4040503060000
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x706
xor eax, eax
nop
jmp 0x559c20
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xffffff88
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x559c4e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x559c8d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xffffff88
add edi, edx
cmp rbx, 8
jb 0x559c02
jmp 0x559c81
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x559c67
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x559c5b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3

Function at 0x559ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x5328ff72e87344fd
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x605000303070405
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x205
xor eax, eax
nop
jmp 0x559d00
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xffffff93
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x559d2e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x559d6d
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xffffff93
add edi, edx
cmp rbx, 8
jb 0x559ce2
jmp 0x559d61
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x559d47
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x559d3b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3
Function at 0x55a0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x871871645120a553
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x202010103070603
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x500
xor eax, eax
nop
jmp 0x55a100
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x47]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x47]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x55a12b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55a16a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x55a0e2
jmp 0x55a15e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55a144
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55a138
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3

Function at 0x55a180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x8e6316664cdab876
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x601030406000602
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x207
xor eax, eax
nop
jmp 0x55a1e0
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x14]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x55a20b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55a24a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x55a1c2
jmp 0x55a23e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55a224
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55a218
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3
Function at 0x55a500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x4d6e03f6a9956fd
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x404040001060506
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x30305
xor eax, eax
nop
jmp 0x55a560
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0xc]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x55a58b
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55a5ca
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x55a542
jmp 0x55a5be
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x55a5a4
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x55a598
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3

Function at 0x55a5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x9a81a8137a8cf303
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x505020701070107
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 1
xor eax, eax
nop
jmp 0x55a640
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xffffffdf
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x55a66e
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55a6ad
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xffffffdf
add edi, edx
cmp rbx, 8
jb 0x55a622
jmp 0x55a6a1
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x55a687
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x55a67b
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3
Function at 0x55aca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xc2ae68c31d8581dd
mov qword [rsp + 0x20], rdx
movabs rdx, 0x502050500020701
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x55acf5
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x33]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x33]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x55ad22
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55ad66
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x55acd9
nop
jmp 0x55ad5a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x55ad40
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x55ad2f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3

Function at 0x55bba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xedf766b909d80db7
mov qword [rsp + 0x20], rdx
movabs rdx, 0x207020701070603
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x55bbf3
movzx r8d, byte [rsp + rbx + 0x20]
add r8d, 0xb
add edx, r8d
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x55bc22
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x55bc66
movzx edi, byte [rsp + rsi + 0x20]
add edi, 0xb
add edi, edx
cmp rbx, 8
jb 0x55bbd9
nop
jmp 0x55bc5a
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x55bc40
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x55bc2f
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f380
mov eax, esi
mov ecx, 8
call fcn.0045f380
nop
int3