joyce8/EMBER2024-capa huggingface dataset:
Function at 0x51c820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51c8dc
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0x6c74aab08abd7377
mov qword [rsp + 0x20], rdx
movabs rdx, 0x404020403050504
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x51c877
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x1f]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x51c8a8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x51c8cf
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x51c85a
jmp 0x51c8c3
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00444360
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.00456a60
mov eax, edi
mov ecx, 8
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.0051c820

Function at 0x51c900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51ca32
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x4b5631697416115e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x584b563169741611
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x412b37b456fd7222
mov qword [rsp + 0x22], rdx
movabs rdx, 0x542064657409bb70
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x730f2f743465e36f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x9010b1c1c0d121f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x20f1c1a060f0901
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1e000c131f070205
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1208180c0e18050c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x50f0918102019
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x51c9cf
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x4d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x4d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x26
jge 0x51c9fc
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x51ca25
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x21
jb 0x51c9b2
jmp 0x51ca17
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x21
call fcn.00444360
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x21
nop
call fcn.00456a60
mov eax, edi
mov ecx, 0x21
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.0051c900
Function at 0x51e400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51e516
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x3b6f09e0dd3a2c6f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd47232ed30c173e7
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2379221ad47232ed
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd9e6229dea6ed612
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf1908030115070d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc191718040b031b
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1819131a14080c19
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5100111100a1713
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x51e4ae
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x51e4e2
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x51e509
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0x1c
jb 0x51e494
nop
jmp 0x51e4fd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.00444360
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00456a60
mov eax, edi
mov ecx, 0x1c
call fcn.00456a60
nop
call fcn.00454400
nop dword [rax + rax]
jmp fcn.0051e400

Function at 0x5202c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x520392
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xd27473c37665c12f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x74c36fd27473c376
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x904090904010107
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4010704
xor eax, eax
jmp 0x52032e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x52035b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x520385
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x520311
jmp 0x520376
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00444360
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00456a60
mov eax, edi
mov ecx, 0xb
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.005202c0
Function at 0x5241c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5242d6
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x4900c56946e22b27
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf27471c6e82a666e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf5ec6e03f27471c6
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc845086c64313e2e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50f0b1215160506
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb0d020b010c0a05
mov qword [rsp + 0x20], rdx
movabs rdx, 0x12101b140b0d020b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x19011406140b0013
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x52426e
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5242a2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5242c9
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0x1c
jb 0x524254
nop
jmp 0x5242bd
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x1c
call fcn.00444360
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00456a60
mov eax, edi
mov ecx, 0x1c
call fcn.00456a60
nop
call fcn.00454400
nop dword [rax + rax]
jmp fcn.005241c0

Function at 0x5254e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5255e8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x43948d7845bc847f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x646643948d7845bc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9073adc07b865cab
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc110a080e0c0d0b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10611020d0b0811
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf010611020d0b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10e080511000111
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x525582
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 5]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 5]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1a
jge 0x5255af
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5255db
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x525565
jmp 0x5255cf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop dword [rax + rax]
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456a60
mov eax, edi
mov ecx, 0x12
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.005254e0
Function at 0x531a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x531b48
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x3a2a6fe5b1fb6dfc
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xb3
movabs rdx, 0x404000404030804
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3060602
xor eax, eax
jmp 0x531ae1
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x531b13
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x531b3b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2f]
cmp rsi, 9
jb 0x531ac7
jmp 0x531b2f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00444360
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00456a60
mov eax, edi
mov ecx, 9
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.00531a80

Function at 0x533160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53325c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xb636fc347adbf630
mov qword [rsp + 0x19], rdx
movabs rdx, 0x38b636fc347adbf6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf77a07de282922f8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x310030f0710060e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0b090503100310
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0d0201020f0d02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5331f0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x533228
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x53324f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x5331d6
jmp 0x533243
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00444360
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456a60
mov eax, edi
mov ecx, 0x11
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.00533160
Function at 0x536640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x536792
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0xd87307faf0ca3b73
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6c696a9ad87307fa
mov qword [rsp + 0x22], rdx
movabs rdx, 0x77ae2e122ef565db
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xda7416a2bb58891f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x746e516ff80a65bb
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x7111c1721111705
mov qword [rsp + 0x42], rdx
movabs rdx, 0x314040717170711
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4191b020c0c0009
mov qword [rsp + 0x50], rdx
movabs rdx, 0x111821190c12171b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x11e0c1601160200
mov qword [rsp + 0x60], rdx
movabs rdx, 0x15090e2110081510
mov qword [rsp + 0x68], rdx
movabs rdx, 0x910110c19021f05
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x53672a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x36
jge 0x53675c
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x536785
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0x24
jb 0x536710
jmp 0x536777
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x24
call fcn.00444360
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x24
nop
call fcn.00456a60
mov eax, edi
mov ecx, 0x24
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.00536640

Function at 0x537220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x537348
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x673269e2df37c315
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x32e4e83a78da68d5
mov qword [rsp + 0x27], rdx
movabs rdx, 0xb5f937ce31de7632
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x231d25eacd6529c6
mov qword [rsp + 0x36], rdx
movabs rdx, 0x80e1816031b1515
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x111e080e1816031b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2031d01060f1418
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd0a0e1e1a0d1414
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d13001217120804
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5372e0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x537312
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x53733b
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0x1f
jb 0x5372c3
jmp 0x53732f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1f
nop
call fcn.00444360
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00456a60
mov eax, edi
mov ecx, 0x1f
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.00537220
Function at 0x53c1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53c288
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x496914041e65d465
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x705040705010305
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x307
xor eax, eax
nop
jmp 0x53c220
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x53c252
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x53c27b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 8
jb 0x53c202
jmp 0x53c26f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.00444360
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00456a60
mov eax, edi
mov ecx, 8
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.0053c1c0

Function at 0x540180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x540348
sub rsp, 0xa8
mov qword [rsp + 0xa0], rbp
lea rbp, [rsp + 0xa0]
movabs rdx, 0xf54e74c34b856763
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x819eb082463b9997
mov qword [rsp + 0x25], rdx
movabs rdx, 0x74819eb082463b99
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd093cdcd658126ee
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x74617d55818d8e7f
mov qword [rsp + 0x36], rdx
movabs rdx, 0xbe2089b28baf8169
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xb420436e8c522084
mov qword [rsp + 0x46], rdx
movabs rdx, 0xa98b6f9c8a656769
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x70638022e32061d
mov qword [rsp + 0x56], rdx
movabs rdx, 0x371332281203262b
mov qword [rsp + 0x5e], rdx
movabs rdx, 0x119371332281203
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1e1e371c22080a2a
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2315352e1b2a290c
mov qword [rsp + 0x70], rdx
movabs rdx, 0x32430010c2c0f23
mov qword [rsp + 0x78], rdx
movabs rdx, 0x182b0e222e071901
mov qword [rsp + 0x80], rdx
movabs rdx, 0xf17112b25020c1a
mov qword [rsp + 0x88], rdx
movabs rdx, 0x41e021319160b15
mov qword [rsp + 0x90], rdx
movabs rdx, 0x1e090d3432342b19
mov qword [rsp + 0x98], rdx
xor eax, eax
jmp 0x5402e1
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x4a
jge 0x54030e
movzx edx, byte [rsp + rax + 0x56]
movzx esi, byte [rsp + rax + 0x57]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x39
jae 0x54033b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x39
jb 0x5402c4
jmp 0x54032f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x39
call fcn.00444360
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
mov eax, esi
mov ecx, 0x39
call fcn.00456a60
mov eax, edi
mov ecx, 0x39
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.00540180
Function at 0x5426a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x542796
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xb1b578652f180b10
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xcdb1b578652f180b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x301aead109096f43
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7000d080b0b060c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10707000d080b0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0c0d0201020e10
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x542733
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x542762
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x542789
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x542716
nop
jmp 0x54277d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00444360
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456a60
mov eax, edi
mov ecx, 0x11
call fcn.00456a60
nop
call fcn.00454400
nop dword [rax + rax]
jmp fcn.005426a0

Function at 0x5427c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x54291c
sub rsp, 0xb0
mov qword [rsp + 0xa8], rbp
lea rbp, [rsp + 0xa8]
movabs rdx, 0x4fd8de74c6fa2720
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa165c44750c5d0a4
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf1a165c44750c5d0
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf32f9746914d863
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x973602616320e911
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc90a61f6b3208bf5
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x9464a923280ca230
mov qword [rsp + 0x44], rdx
movabs rdx, 0x6ba84bbd9606a411
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x2b340d3425202228
mov qword [rsp + 0x54], rdx
lea rdi, [rsp + 0x58]
lea rsi, [0x005a0dd8]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045709a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x5428b4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x54
jge 0x5428e2
movzx edx, byte [rsp + rax + 0x54]
movzx esi, byte [rsp + rax + 0x55]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x39
jae 0x54290f
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x39
jb 0x542897
nop
jmp 0x542903
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x39
call fcn.00444360
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
mov eax, esi
mov ecx, 0x39
call fcn.00456a60
mov eax, edi
mov ecx, 0x39
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.005427c0
Function at 0x542940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x542af8
sub rsp, 0xa0
mov qword [rsp + 0x98], rbp
lea rbp, [rsp + 0x98]
movabs rdx, 0x3d47a73dabee92ab
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa9a88377039578ac
mov qword [rsp + 0x20], rdx
movabs rdx, 0x243da9a883770395
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6e74b3650f655920
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb561c9b2f9cbdc7e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x7dc9747886c3aec2
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x5b65e9475f647664
mov qword [rsp + 0x42], rdx
movabs rdx, 0xa6f6d9f20eb5874
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x28001103381d1f34
mov qword [rsp + 0x52], rdx
movabs rdx, 0x2108381f15242800
mov qword [rsp + 0x58], rdx
movabs rdx, 0x5251e0b230f361c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x171e03370311331b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x222f112e24372402
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2b133800020d2233
mov qword [rsp + 0x78], rdx
movabs rdx, 0x29052319042d1a34
mov qword [rsp + 0x80], rdx
movabs rdx, 0x3105382a27080a15
mov qword [rsp + 0x88], rdx
movabs rdx, 0x1e012f36242b0e01
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x542a8c
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x46
jge 0x542abe
movzx edx, byte [rsp + rax + 0x52]
movzx esi, byte [rsp + rax + 0x53]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3a
jae 0x542aeb
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0x3a
jb 0x542a72
jmp 0x542adf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x3a
call fcn.00444360
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov eax, esi
mov ecx, 0x3a
call fcn.00456a60
mov eax, edi
mov ecx, 0x3a
call fcn.00456a60
nop
call fcn.00454400
nop dword [rax]
jmp fcn.00542940

Function at 0x543180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54327c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x99f7fde408fa7c9b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa999f7fde408fa7c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xba659094610d7320
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70d0b030e0b0700
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x600070d0b030e0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x702070110040805
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x543210
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x60]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x543248
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x54326f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x60]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x5431f6
jmp 0x543263
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00444360
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456a60
mov eax, edi
mov ecx, 0x11
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.00543180
Function at 0x543a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x543b48
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x3a61b802f465e965
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1264e9480c3a61b8
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20260025bfba3320
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x412050f01080a0f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1103100a0109100a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x70e11101103100a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x121214080c13050f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x543ae0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x543b12
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x543b3b
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1e]
cmp rsi, 0x15
jb 0x543ac5
jmp 0x543b2f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop
call fcn.00444360
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456a60
mov eax, edi
mov ecx, 0x15
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.00543a40

Function at 0x544c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x544cfc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf76873fc36773670
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9b293836f8f2f768
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10b08030107070d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0b090a040b030d
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x544c92
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x544cc8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x544cef
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
nop dword [rax]
cmp rsi, 0xe
jb 0x544c78
jmp 0x544ce3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00444360
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456a60
mov eax, edi
mov ecx, 0xe
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.00544c20