joyce8/EMBER2024-capa huggingface dataset:
Function at 0x51b700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x51b8d2
push rbp
mov rbp, rsp
sub rsp, 0xb0
movabs rdx, 0xbe6e616d156f52bf
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd92e636e6f5320be
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65d8ce9d28ecb672
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20ec7d1443e9d3ad
mov qword [rsp + 0x32], rdx
movabs rdx, 0x7cc973adeac6f36d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x126c6966c5fba48f
mov qword [rsp + 0x42], rdx
movabs rdx, 0x6282259397dae820
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x20c5fcffc38bb065
mov qword [rsp + 0x52], rdx
movabs rdx, 0xaf3537c438908a31
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x1839193c36293226
mov qword [rsp + 0x62], rdx
movabs rdx, 0x2713180023393b11
mov qword [rsp + 0x6a], rdx
movabs rdx, 0x1730430e46262713
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1b313018011d300d
mov qword [rsp + 0x78], rdx
movabs rdx, 0x20460d462e222027
mov qword [rsp + 0x80], rdx
movabs rdx, 0x211229071f234022
mov qword [rsp + 0x88], rdx
movabs rdx, 0x4633143d2a353211
mov qword [rsp + 0x90], rdx
movabs rdx, 0x41091a4309461c3a
mov qword [rsp + 0x98], rdx
movabs rdx, 0x1d15302503112821
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x3110214334401138
mov qword [rsp + 0xa8], rdx
xor eax, eax
jmp 0x51b867
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x4e
jge 0x51b89c
movzx edx, byte [rsp + rax + 0x62]
movzx esi, byte [rsp + rax + 0x63]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x47
jae 0x51b8c5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4f]
cmp rsi, 0x47
jb 0x51b84d
jmp 0x51b8b6
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x47
call fcn.0044e180
add rsp, 0xb0
pop rbp
ret
mov eax, esi
mov ecx, 0x47
nop dword [rax]
call fcn.00463f80
mov eax, edi
mov ecx, 0x47
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0051b700

Function at 0x51f840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51f907
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1f204c143265fc2f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3d52501f204c1432
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10a010603070104
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3090508
xor eax, eax
jmp 0x51f8a8
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x51f8d7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x51f8fa
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x51f88b
jmp 0x51f8ee
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00463f80
mov eax, edi
mov ecx, 0xb
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0051f840
Function at 0x51ffe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x52011b
push rbp
mov rbp, rsp
sub rsp, 0xa0
movabs rdx, 0x5ea46e5fcf2ef1cd
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8473b1db6446dc5e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x91db729a44666fd3
mov qword [rsp + 0x28], rdx
movabs rdx, 0x66f96e5d8a7441b5
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb44c70ea165f6c69
mov qword [rsp + 0x38], rdx
movabs rdx, 0x965376bf47fcc2c1
mov qword [rsp + 0x40], rdx
movabs rdx, 0x448c45d950295f6a
mov qword [rsp + 0x48], rdx
lea rdi, [rsp + 0x50]
lea rsi, [0x00f73e08]
nop word [rax + rax]
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004645da
mov rbp, qword [rbp]
xor eax, eax
jmp 0x5200b1
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x72]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x50
jge 0x5200e8
movzx edx, byte [rsp + rax + 0x50]
movzx esi, byte [rsp + rax + 0x51]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x37
jae 0x52010e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x72]
nop dword [rax + rax]
cmp rsi, 0x37
jb 0x520097
jmp 0x520102
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x37
call fcn.0044e180
add rsp, 0xa0
pop rbp
ret
mov eax, esi
mov ecx, 0x37
call fcn.00463f80
mov eax, edi
mov ecx, 0x37
call fcn.00463f80
nop
nop dword [rax + rax]
call fcn.00461d00
jmp fcn.0051ffe0

Function at 0x5238c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5239da
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xfa65f49e01746547
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9f9a8aeeee6fed2d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x320a9f9a8aeeee6f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65341af5cefb7945
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc03150c12160d0d
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf0c150e0c03150c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x408090411180d08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x151514070b091205
mov qword [rsp + 0x48], rdx
movabs rdx, 0x17150910040b090c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x523977
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x23]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x24
jge 0x5239a9
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5239cd
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x23]
cmp rsi, 0x1a
jb 0x52395d
jmp 0x5239c1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044e180
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00463f80
mov eax, edi
mov ecx, 0x1a
call fcn.00463f80
nop
call fcn.00461d00
nop
jmp fcn.005238c0
Function at 0x52f720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52f7f8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd917448ad6bae703
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xeabcb844
movabs rdx, 0x90409000b04060b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x304090409000b04
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2010a010a0b0707
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x52f797
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x7a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x7a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x52f7c8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x52f7eb
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x52f77a
jmp 0x52f7df
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00463f80
mov eax, edi
mov ecx, 0xc
call fcn.00463f80
nop
call fcn.00461d00
nop dword [rax]
jmp fcn.0052f720

Function at 0x530e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x530f2a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xda78f734c1328c95
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xeada78f734c1328c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x93e9babb1deb6139
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc03060c10071005
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0e0b0f0c03060c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1030b0f060008
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x530ecd
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x49]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x49]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x530efa
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x530f1d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x530eb0
jmp 0x530f11
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00463f80
mov eax, edi
mov ecx, 0x11
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00530e40
Function at 0x534920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x534a47
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x90429b739db9131b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1c90429b739db913
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x77dfb1a5c60065fa
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2742414a66ed73a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x186908fc630d5776
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1a091b0220010b14
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x51f0b151a091b02
mov qword [rsp + 0x40], rdx
movabs rdx, 0x181d0307151f1e00
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf0d1f0c12050309
mov qword [rsp + 0x50], rdx
movabs rdx, 0x31f0f160e0f0807
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5349e9
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x24
jge 0x534a17
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x21
jae 0x534a3a
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x21
jb 0x5349cc
jmp 0x534a2e
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
call fcn.0044e180
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00463f80
mov eax, edi
mov ecx, 0x21
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00534920
Function at 0x537420
Capabilities:
Hash data using fnv

Disassembly:
test byte [rax], al
mov rcx, rbx
and ebx, 0x7f
shl rbx, 5
lea rdx, [rax + rbx]
xor eax, eax
jmp 0x537437
inc rax
cmp rax, 4
jge 0x53744f
lea rbx, [rdx + rax*8]
mov rbx, qword [rbx]
cmp rbx, rcx
jne 0x537434
mov eax, 1
ret
xor eax, eax
movabs rbx, 0xcbf29ce484222325
jmp 0x537460
inc rax
cmp rax, 4
jge 0x53746e
mov rsi, qword [rdx + rax*8]
xor edi, edi
jmp 0x537497
and ebx, 3
lea rdx, [rdx + rbx*8]
xchg qword [rdx], rcx
xor eax, eax
ret
movzx r8d, sil
xor rbx, r8
inc rdi
shr rsi, 8
movabs r8, 0x100000001b3
imul rbx, r8
cmp rdi, 8
jl 0x53747b
jmp 0x53745d

Function at 0x538ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x538c9d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x206e72c5747461b2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb474f1738c694b20
mov qword [rsp + 0x26], rdx
movabs rdx, 0x203ae36ed1c71029
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0810040f110810
mov qword [rsp + 0x36], rdx
movabs rdx, 0x12120e111410140a
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x120412120e111410
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0011120c110e0a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x538c40
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x538c6d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x538c90
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x538c1f
jmp 0x538c84
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00463f80
mov eax, edi
mov ecx, 0x17
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.00538ba0
Function at 0x54c5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54c698
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xfcb3d4c7a3a5d09d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x403060001010700
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x502
xor eax, eax
jmp 0x54c638
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x54c668
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x54c68b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x54c61b
jmp 0x54c67f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00463f80
mov eax, edi
mov ecx, 8
call fcn.00463f80
nop
call fcn.00461d00
nop dword [rax]
jmp fcn.0054c5e0

Function at 0x54cd80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54ce38
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x82756841746a8693
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x603070200050001
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x706
xor eax, eax
jmp 0x54cdd5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x54ce08
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x54ce2b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1b]
nop
cmp rsi, 8
jb 0x54cdbb
jmp 0x54ce1f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00463f80
mov eax, edi
mov ecx, 8
call fcn.00463f80
nop
call fcn.00461d00
nop dword [rax]
jmp fcn.0054cd80

Function at 0x54d0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54d158
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x31dc418f7349d343
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x607020206070406
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x102
xor eax, eax
jmp 0x54d0f8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x54d128
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x54d14b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x54d0db
jmp 0x54d13f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00463f80
mov eax, edi
mov ecx, 8
call fcn.00463f80
nop
call fcn.00461d00
nop dword [rax]
jmp fcn.0054d0a0
Function at 0x54f1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54f286
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x80bd9af7a393b183
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x65977cc5a08aa964
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3010c0b09090c00
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x704060207040301
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30d0a000e020504
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x54f220
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x54f252
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x54f277
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3d]
cmp rsi, 0x10
jb 0x54f202
jmp 0x54f26b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00463f80
mov eax, edi
mov ecx, 0x10
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0054f1a0

Function at 0x54f2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54f38c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6f73f92b203d312f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x756f73f92b203d31
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x11fef76220253403
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe010e020f0a0509
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10905000e010e02
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2040b1002090a0a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x54f32a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x54f35c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x54f37f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0x11
jb 0x54f310
jmp 0x54f373
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00463f80
mov eax, edi
mov ecx, 0x11
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0054f2a0
Function at 0x550ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x550cec
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x6c6ef10c790b6f74
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa4747541206c6ef1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe3a30f2f845d1bf
mov qword [rsp + 0x26], rdx
movabs rdx, 0x46de276f0646f98
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x370433d7780b3ec4
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4231b041d031903
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1c0504231b041d03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x191c02120d141a20
mov qword [rsp + 0x48], rdx
movabs rdx, 0x724100f191f0f19
mov qword [rsp + 0x50], rdx
movabs rdx, 0x172013170e02130e
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc21071715240202
mov qword [rsp + 0x60], rdx
movabs rdx, 0x180e07181f13111a
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x550c84
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3c]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x32
jge 0x550cbc
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x25
jae 0x550cdf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3c]
cmp rsi, 0x25
jb 0x550c6a
jmp 0x550cd3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
call fcn.0044e180
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00463f80
mov eax, edi
mov ecx, 0x25
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00550ba0

Function at 0x553ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x553ffa
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x5b20ad8ab4cd0863
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6ca8eae17261a1cc
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc4b8a4b06ca8eae1
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb9e03d3773bfc2ea
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd13161a1a010519
mov qword [rsp + 0x34], rdx
movabs rdx, 0x80805020d13161a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x150e110d12021815
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4130c0307101414
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9140109011b0e03
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x553f97
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x68]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x24
jge 0x553fc9
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x553fed
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x68]
cmp rsi, 0x1c
jb 0x553f7d
jmp 0x553fe1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
call fcn.0044e180
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00463f80
mov eax, edi
mov ecx, 0x1c
call fcn.00463f80
nop
call fcn.00461d00
nop
jmp fcn.00553ee0
Function at 0x554560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55465b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc522e949dc761f69
mov qword [rsp + 0x18], rdx
movabs rdx, 0x20534e56c522e949
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2d73ef6fc8eb2da9
mov qword [rsp + 0x24], rdx
movabs rdx, 0x60101080d13080c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30f050605050401
mov qword [rsp + 0x34], rdx
movabs rdx, 0x603070f030f0506
mov qword [rsp + 0x38], rdx
movabs rdx, 0x506050f1106070e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5545f9
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x18]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1c
jge 0x55462b
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x55464e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x18]
cmp rsi, 0x14
jb 0x5545df
jmp 0x554642
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00463f80
mov eax, edi
mov ecx, 0x14
call fcn.00463f80
nop
nop dword [rax + rax]
call fcn.00461d00
jmp fcn.00554560

Function at 0x5548a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55495d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x65c4e6c0c9dbbfc9
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xdb
movabs rdx, 0x403000106060405
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x802
xor eax, eax
nop
jmp 0x554900
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x55492d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x554950
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x5548e2
jmp 0x554944
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00463f80
mov eax, edi
mov ecx, 9
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.005548a0
Function at 0x554980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x554a47
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x392a333b2b371922
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x33242d3f
movabs rdx, 0x6070901000a03
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa05040a05080006
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5549e8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x13]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x13]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x554a17
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x554a3a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x5549cb
jmp 0x554a2e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00463f80
mov eax, edi
mov ecx, 0xc
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00554980

Function at 0x554a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x554b18
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x192d055d0d1b3a49
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x205050705030505
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5060000
xor eax, eax
jmp 0x554ab9
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x1a]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x554ae8
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x554b0b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
nop
cmp rsi, 8
jb 0x554a9c
jmp 0x554aff
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00463f80
mov eax, edi
mov ecx, 8
call fcn.00463f80
nop
call fcn.00461d00
nop dword [rax]
jmp fcn.00554a60