joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ff1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ff29d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe363658c3665a4d9
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xdec1c08865e36365
mov qword [rsp + 0x40], rdx
movabs rdx, 0xcf3674d2f2659d6c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa04141114000013
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa100404090c070e
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1030e110a10
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x130a140b09131401
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4ff240
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4ff26d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ff290
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4ff21f
jmp 0x4ff284
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456440
mov eax, edi
mov ecx, 0x15
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.004ff1a0

Function at 0x4ff400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ff51d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x509913b9689914ca
mov qword [rsp + 0x42], rdx
movabs rdx, 0x699e9e73af4eb5ac
mov qword [rsp + 0x4a], rdx
movabs rdx, 0xb605a91f06b3699e
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd4c90d66d54f7465
mov qword [rsp + 0x58], rdx
movabs rdx, 0x208110913190d0e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x100a14090b110208
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1b000d1401071504
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1201101209000512
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1c051219071d1306
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x4ff4c0
movzx r9d, byte [rsp + rsi + 0x42]
sub r9d, edx
lea edx, [r9 - 0x28]
mov byte [rsp + rdi + 0x42], dl
lea edx, [r8 - 0x28]
mov byte [rsp + rsi + 0x42], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4ff4ed
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4ff510
movzx r8d, byte [rsp + rdi + 0x42]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4ff49d
jmp 0x4ff504
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x1e
call fcn.00444780
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00456440
mov eax, edi
mov ecx, 0x1e
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.004ff400
Function at 0x501280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50133d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf3e46337d86465e7
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x20
movabs rdx, 0x604060200030302
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x706
xor eax, eax
nop
jmp 0x5012e0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x76]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x50130d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x501330
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x5012c2
jmp 0x501324
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456440
mov eax, edi
mov ecx, 9
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.00501280

Function at 0x5028e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50299d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x77647c6920726670
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x72
movabs rdx, 0x502070007000205
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x101
xor eax, eax
nop
jmp 0x502940
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x50296d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x502990
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x502922
jmp 0x502984
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456440
mov eax, edi
mov ecx, 9
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.005028e0
Function at 0x50a060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50a168
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x3d05fa4f18663b45
mov qword [rsp + 0x36], rdx
movabs rdx, 0x54623565755a4c56
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x6b6e54623565755a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8245616672657446
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1203050d18030318
mov qword [rsp + 0x18], rdx
movabs rdx, 0x60d0d0701090500
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd0d060e0a03060d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x41106190f09120e
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x50a10b
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x1e
jge 0x50a138
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x50a15b
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x1a
jb 0x50a0ee
jmp 0x50a14f
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456440
mov eax, edi
mov ecx, 0x1a
call fcn.00456440
nop
call fcn.00454160
jmp fcn.0050a060

Function at 0x50a180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50a26c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x51fefa653c666514
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xc351fefa653c6665
mov qword [rsp + 0x30], rdx
movabs rdx, 0xeada2f036575d29f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90a030f00090607
mov qword [rsp + 0x19], rdx
movabs rdx, 0x10050d0809090a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x50010080709030e
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x50a20a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x16
jge 0x50a23c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50a25f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
cmp rsi, 0x11
jb 0x50a1f0
jmp 0x50a253
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456440
mov eax, edi
mov ecx, 0x11
call fcn.00456440
nop
call fcn.00454160
jmp fcn.0050a180
Function at 0x510ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x510bca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2e747d901066580a
mov qword [rsp + 0x35], rdx
movabs rdx, 0x541002e747d9010
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa603bc5c420c6520
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb10040812110405
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa0d09050a010b0f
mov qword [rsp + 0x25], rdx
movabs rdx, 0x110d05110d0b0300
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x510b6d
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x75]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x75]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x18
jge 0x510b9a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x510bbd
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x510b50
jmp 0x510bb1
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456440
mov eax, edi
mov ecx, 0x13
call fcn.00456440
nop
call fcn.00454160
jmp fcn.00510ae0

Function at 0x510fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51107e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd68cc692206461c2
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x987aa4d6
movabs rdx, 0x604000705080707
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0xa080007
xor eax, eax
jmp 0x511021
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x51104e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x511071
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x511004
jmp 0x511065
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456440
mov eax, edi
mov ecx, 0xb
call fcn.00456440
nop
nop
call fcn.00454160
jmp fcn.00510fc0

Function at 0x5163e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5164a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x69a6fdb16c68700a
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x124264fe
movabs rdx, 0x4000a0406000507
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa0b000b05000508
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x516448
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x6e]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x6e]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x516477
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x51649a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x51642b
jmp 0x51648e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456440
mov eax, edi
mov ecx, 0xc
call fcn.00456440
nop
call fcn.00454160
jmp fcn.005163e0
Function at 0x516940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x516a07
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1317696461677b6e
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x6f6e6437
movabs rdx, 0x706020b0a040706
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa07080a0a070a01
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x5169a8
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x12]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x12]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x5169d7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x5169fa
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x51698b
jmp 0x5169ee
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456440
mov eax, edi
mov ecx, 0xc
call fcn.00456440
nop
call fcn.00454160
jmp fcn.00516940

Function at 0x516a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x516add
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9ea19f69ca888895
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x6c
movabs rdx, 0x600050302020701
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x705
xor eax, eax
nop
jmp 0x516a80
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x25]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x25]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x516aad
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x516ad0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x516a62
jmp 0x516ac4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456440
mov eax, edi
mov ecx, 9
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.00516a20
Function at 0x51d9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51dabb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xccc7f9ba99c3b801
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x6d9ecb2069d1ccc7
mov qword [rsp + 0x40], rdx
movabs rdx, 0x911ef5aaac74b815
mov qword [rsp + 0x48], rdx
movabs rdx, 0x70b12110a0e1115
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80a060c0f130a14
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf150e051201080a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30e02040f040003
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x51da59
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6f]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x51da8b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x51daae
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6f]
cmp rsi, 0x16
jb 0x51da3f
jmp 0x51daa2
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456440
mov eax, edi
mov ecx, 0x16
call fcn.00456440
nop
nop dword [rax + rax]
call fcn.00454160
jmp fcn.0051d9c0

Function at 0x51ddc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51de8c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9ec615d432c2bb57
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xba74
movabs rdx, 0x606050604050103
mov qword [rsp + 0x18], rdx
movabs rdx, 0x906040102070606
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x51de24
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6a]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
cmp rax, 0xe
jge 0x51de5c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x51de7f
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6a]
cmp rsi, 0xa
jb 0x51de0a
jmp 0x51de73
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00456440
mov eax, edi
mov ecx, 0xa
call fcn.00456440
nop
call fcn.00454160
jmp fcn.0051ddc0
Function at 0x5222c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52237d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6b8d7364786d8c73
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x7e83
movabs rdx, 0x109080002020405
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x906
xor eax, eax
jmp 0x522320
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 2]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x52234d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x522370
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x522302
jmp 0x522364
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00456440
mov eax, edi
mov ecx, 0xa
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.005222c0
Function at 0x534260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53434a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x371d55341d525523
mov qword [rsp + 0x37], rdx
movabs rdx, 0x38371d55341d5255
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1e4038640121614c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50f0c0f010e0e10
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x303030b020b0006
mov qword [rsp + 0x27], rdx
movabs rdx, 0x100305020c0b0b09
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x5342ed
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 + 0x21]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x18
jge 0x53431a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x53433d
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x11
jb 0x5342d0
jmp 0x534331
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456440
mov eax, edi
mov ecx, 0x11
call fcn.00456440
nop
call fcn.00454160
jmp fcn.00534260

Function at 0x536140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x536278
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xe3c5256f6d06c354
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x6e6ffd74a2e3c525
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa365a8b8aca76320
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6a8828b073ab64fe
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2ec2cb5b20deafcb
mov qword [rsp + 0x68], rdx
movabs rdx, 0x707051d031c0520
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20221b0212061221
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa1e1a0201060320
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x2101c201c1a0a17
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1e1a1f080f1c1915
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x232319110810141b
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x536215
movzx r9d, byte [rsp + rsi + 0x4b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x4b], dl
mov byte [rsp + rsi + 0x4b], r8b
add rax, 2
cmp rax, 0x30
jge 0x536248
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x53626b
movzx r8d, byte [rsp + rdi + 0x4b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
nop
cmp rsi, 0x25
jb 0x5361fb
jmp 0x53625f
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x25
call fcn.00444780
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00456440
mov eax, edi
mov ecx, 0x25
call fcn.00456440
nop
call fcn.00454160
nop dword [rax]
jmp fcn.00536140
Function at 0x180002670
Capabilities:
Reference sql statements

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, rcx
mov rdi, r8
mov rcx, qword [rcx + 0x10]
mov rsi, rdx
add rcx, 0x28
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::clear_void____ptr64]
mov rax, qword [rbx + 0x10]
mov r8, rdi
mov rdx, rsi
mov byte [rax + 0x30], 1
mov rax, qword [rbx + 0x10]
mov rcx, qword [rax + 0x10]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.180015e30
Function at 0x1800049b0
Capabilities:
Reference sql statements

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, rcx
mov rdi, r8
mov rcx, qword [rcx + 0x10]
mov rsi, rdx
add rcx, 0x28
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::clear_void____ptr64]
mov rax, qword [rbx + 0x10]
mov r8, rdi
mov rdx, rsi
mov rcx, qword [rax + 0x10]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.180028ae0

Function at 0x180004b50
Capabilities:
Reference sql statements

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rbx, rcx
mov rdi, rdx
mov rcx, qword [rcx + 0x10]
add rcx, 0x28
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::clear_void____ptr64]
mov rax, qword [rbx + 0x10]
mov rdx, rdi
mov byte [rax + 0x30], 1
mov rax, qword [rbx + 0x10]
mov rcx, qword [rax + 0x10]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.180029a40

Function at 0x1800069b0
Capabilities:
Reference sql statements

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rbx, rcx
mov rdi, rdx
mov rcx, qword [rcx + 0x10]
call fcn.180006c70
test al, al
jne 0x1800069d8
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov rax, qword [rbx + 0x10]
mov rdx, rdi
mov rcx, qword [rax + 0x10]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.180028780
Function at 0x18000feb0
Capabilities:
Reference sql statements

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x50
mov esi, r8d
mov rdi, rdx
mov rbp, rcx
lea rdx, str.SELECT_FilterAttributeId_FROM__1_WHERE_FilterAttributeId____LIMIT_1
mov r8d, 0xffffffff
lea rcx, [rsp + 0x38]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromLatin1_char_const____ptr64__int_]
mov dl, 0x20
lea rcx, [rsp + 0x78]
mov rbx, rax
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QChar::constructor_struct_QLatin1Char____ptr64]
mov r8, rdi
lea rdx, [rsp + 0x30]
mov rcx, rbx
movzx r9d, word [rax]
mov word [rsp + 0x20], r9w
xor r9d, r9d
call qword [sym.imp.Qt5Core.dll_public:_class_QString___cdecl_QString::arg_class_QString_const____ptr64__int__class_QChar____ptr64]
mov rdx, rax
mov rcx, rbp
call qword [sym.imp.Qt5Sql.dll_public:_bool___cdecl_QSqlQuery::prepare_class_QString_const____ptr64____ptr64]
lea rcx, [rsp + 0x30]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
lea rcx, [rsp + 0x38]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov edx, esi
lea rcx, [rsp + 0x38]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QVariant::constructor_int____ptr64]
mov r9d, 1
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, rbp
call qword [sym.imp.Qt5Sql.dll_public:_void___cdecl_QSqlQuery::bindValue_int__class_QVariant_const____ptr64__class_QFlags_enum_QSql::ParamTypeFlag_____ptr64]
lea rcx, [rsp + 0x38]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QVariant::destructor_void____ptr64]
mov rcx, rbp
call qword [sym.imp.Qt5Sql.dll_public:_bool___cdecl_QSqlQuery::exec_void____ptr64]
mov rcx, rbp
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x50
pop rdi
jmp qword [sym.imp.Qt5Sql.dll_public:_bool___cdecl_QSqlQuery::next_void____ptr64]