joyce8/EMBER2024-capa huggingface dataset:
Function at 0x542d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x542df2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb6757f6982658679
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x97548cb6757f6982
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0601050203070a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x207090007080600
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x542d8c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x542dbe
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x542de5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 0xb
jb 0x542d72
jmp 0x542dd5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00454ec0
mov eax, edi
mov ecx, 0xb
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00542d20

Function at 0x5434c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5435bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xed09676fea4b6547
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x25d47272d87403ed
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf3e462e969f6fdd7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x15130f090f070d0c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x100916110816110e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf14060302061009
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd160d0211110a0f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x543560
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x54358d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5435b0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x17
jb 0x54353f
jmp 0x5435a4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00454ec0
mov eax, edi
mov ecx, 0x17
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.005434c0
Function at 0x5435e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5436bd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7685674e64746273
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x737a7f7272877c61
mov qword [rsp + 0x22], rdx
movabs rdx, 0x607030c0d0c0004
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0a0003040607
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30309070e060103
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x543660
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x54368d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5436b0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x543642
jmp 0x5436a4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00454ec0
mov eax, edi
mov ecx, 0x10
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.005435e0

Function at 0x544560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54465b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x38d86576e1746547
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1170ed38d86576e1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1cf975b418529a3f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80f11120a0c120c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60e0e08070b0c11
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1203060e0e08070b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe060c120f080e0f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5445f9
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x17]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1a
jge 0x54462b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x54464e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x17]
cmp rsi, 0x13
jb 0x5445df
jmp 0x544642
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00454ec0
mov eax, edi
mov ecx, 0x13
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.00544560
Function at 0x546180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x546247
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd732b44088744547
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xd36c3d6e
movabs rdx, 0x904010905030906
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7090b06050b0904
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5461e8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x546217
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x54623a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x5461cb
jmp 0x54622e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00454ec0
mov eax, edi
mov ecx, 0xc
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00546180
Function at 0x5484c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5485aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb8d6e6957c23abb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x994473bd0b8d6e69
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb729dd9cdbd36572
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1201111311110807
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80610060b001201
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0208120f01100f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x54854d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x3f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x3f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x54857a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x54859d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x548530
jmp 0x548591
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00454ec0
mov eax, edi
mov ecx, 0x14
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.005484c0

Function at 0x5497c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x549892
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xffee65dfe1ec614d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc4e854e347ffee65
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80407020706020a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4030b02090c0804
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x54982c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x54985e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x549885
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0xd
jb 0x549812
jmp 0x549875
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00454ec0
mov eax, edi
mov ecx, 0xd
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.005497c0
Function at 0x54a060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54a11d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8893064590e6704f
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x79f0
movabs rdx, 0x903020207090608
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9070805
xor eax, eax
jmp 0x54a0c0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x7d]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x54a0ed
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x54a110
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x54a0a3
jmp 0x54a104
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00454ec0
mov eax, edi
mov ecx, 0xa
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.0054a060

Function at 0x54a9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54aaa6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xcbc07381630bc1a1
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5714bc72c60adbcb
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0a0408070d0909
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7020c0a0408070d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd07000004090601
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x54aa40
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x54aa72
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x54aa97
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5f]
cmp rsi, 0xf
jb 0x54aa22
jmp 0x54aa8b
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00454ec0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0054a9c0
Function at 0x54ab60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54ac4a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe3e18073a29b7250
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc66f9f64e3e18073
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc3af79a569df7385
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x11070c040b0e1204
mov qword [rsp + 0x32], rdx
movabs rdx, 0x905100e06101107
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20302130b030311
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x54abed
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x14]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x54ac1a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x54ac3d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x54abd0
jmp 0x54ac31
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00454ec0
mov eax, edi
mov ecx, 0x14
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0054ab60

Function at 0x54c340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54c418
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe7fd6579dcdb64ee
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xe2788072
movabs rdx, 0x1000102010407
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20a000100010201
mov qword [rsp + 0x28], rdx
movabs rdx, 0x702000b03060209
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x54c3b7
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x77]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x54c3e8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x54c40b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x54c39a
jmp 0x54c3ff
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00454ec0
mov eax, edi
mov ecx, 0xc
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.0054c340
Function at 0x54c540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54c63d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6fff9a6fbed1179a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x8399d1aa75697f6c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6e8ab6746973e17a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x216060916011015
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd0306160d100f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x50e0c110916000d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0c0a0a0c021606
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x54c5e0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x54c60d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x54c630
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x54c5bf
jmp 0x54c624
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00454ec0
mov eax, edi
mov ecx, 0x18
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.0054c540

Function at 0x54c8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54c99b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x14920604fe18fa18
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x69440d6e14920604
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1679e2d6b4fc65ef
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10020f0f1002020c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe01001310130006
mov qword [rsp + 0x36], rdx
movabs rdx, 0x9020e0100131013
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf05031111000407
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x54c939
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x54c96b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x54c98e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4c]
cmp rsi, 0x14
jb 0x54c91f
jmp 0x54c982
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00454ec0
mov eax, edi
mov ecx, 0x14
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.0054c8a0
Function at 0x54d7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54d858
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5058456e65696d6c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x204070600070503
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1040407
xor eax, eax
jmp 0x54d7f6
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 6]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x54d828
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x54d84b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 6]
cmp rsi, 8
jb 0x54d7dc
jmp 0x54d83f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00454ec0
mov eax, edi
mov ecx, 8
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.0054d7a0

Function at 0x54f7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54f8ac
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf7376ef06d022f54
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x96f4f7376ef06d02
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf8eb65e4fd4f62e8
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa09110101010d06
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x100e0a0911010101
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4080711020a0a0d
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x54f84a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x54f87c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x54f89f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
cmp rsi, 0x12
jb 0x54f830
jmp 0x54f893
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00454ec0
mov eax, edi
mov ecx, 0x12
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0054f7c0
Function at 0x551b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x551c7b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x53aeaceaa6d46173
mov qword [rsp + 0x19], rdx
movabs rdx, 0x886e6953aeaceaa6
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd3e4c6ab6235253e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0f0606060f0403
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x210020c11120a02
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc04000c0210020c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0f0c0604050d04
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x551c19
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1c
jge 0x551c4b
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x551c6e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7d]
cmp rsi, 0x13
jb 0x551bff
jmp 0x551c62
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00454ec0
mov eax, edi
mov ecx, 0x13
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.00551b80

Function at 0x552be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x552ccc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f9f9b95478e869d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x66eb909a986f9f9b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6e6f96b19d6dbd6f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x212110a0100050b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x90e0805070a0212
mov qword [rsp + 0x38], rdx
movabs rdx, 0x204100202060809
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x552c6a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x552c9c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x552cbf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
cmp rsi, 0x15
jb 0x552c50
jmp 0x552cb3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00454ec0
mov eax, edi
mov ecx, 0x15
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00552be0
Function at 0x553760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55385b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x9279767369509781
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x616e896d82987379
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6e68707d836d8d6f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40d0a0100130311
mov qword [rsp + 0x32], rdx
movabs rdx, 0x150401141300130f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd020a0b16051504
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150a050707070a11
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5537f9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x55382b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x55384e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 0x18
jb 0x5537df
jmp 0x553842
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00454ec0
mov eax, edi
mov ecx, 0x18
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.00553760

Function at 0x553ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x553bcc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x386e40745853744e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5c696c613b02fa38
mov qword [rsp + 0x20], rdx
movabs rdx, 0x47616f636f3f3f53
mov qword [rsp + 0x28], rdx
movabs rdx, 0x160c1415070e0c08
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc03131605050c09
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0f0310110e0a13
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x553b6a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 1]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x553b9c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x553bbf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 1]
cmp rsi, 0x17
jb 0x553b50
jmp 0x553bb3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00454ec0
mov eax, edi
mov ecx, 0x17
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00553ae0
Function at 0x5555c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55569d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xcd4fe825563850f0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x62e5e1b1dcf07272
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb010b04020d0c06
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0303010b010b04
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0c00070b0e0501
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x555640
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x64]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x64]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x55566d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x555690
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x555622
jmp 0x555684
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00454ec0
mov eax, edi
mov ecx, 0x10
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.005555c0

Function at 0x5556c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5557aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74e77465576c746b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbcb9472652074e7
mov qword [rsp + 0x20], rdx
movabs rdx, 0x28b5656254bf9e6e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1015030b1411080f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf06000b140f0600
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc100f000f0d0b0c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x55574d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x41]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x41]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x18
jge 0x55577a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x55579d
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x555730
jmp 0x555791
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00454ec0
mov eax, edi
mov ecx, 0x16
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.005556c0