joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5324c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5325f2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x2e911f2cf1694666
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x206fed526bbd0973
mov qword [rsp + 0x22], rdx
movabs rdx, 0x75a62c6f6a6dcc2f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1edfe0314ec46279
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10d0e0c1e131d06
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x91b0c041e171c03
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1807090e0e1b091b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x150a091a1818161c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5031f0503100d0a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x10c1a04111f1e04
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x53258c
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x2e
jge 0x5325be
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x5325e5
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 0x20
jb 0x532572
jmp 0x5325d9
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x20
call fcn.0044a140
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
call fcn.0045f500
mov eax, edi
mov ecx, 0x20
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005324c0
Function at 0x532b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x532c46
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x46d7e7ce6c52a305
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6d3873bdf53a332a
mov qword [rsp + 0x23], rdx
movabs rdx, 0x9e26f76f626d3873
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3bf7398101341c2e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x140a0c041b051306
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe1c02151216020a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x419170a190a0a19
mov qword [rsp + 0x48], rdx
movabs rdx, 0x516091700080100
mov qword [rsp + 0x50], rdx
movabs rdx, 0x11717081a0b0718
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x532be0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x28
jge 0x532c0d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x532c34
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x532bc3
jmp 0x532c28
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.0044a140
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045f500
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00532b20

Function at 0x536840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x536988
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x47650d6f64fd6110
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1f64616572345174
mov qword [rsp + 0x24], rdx
movabs rdx, 0x27706f4b3c432962
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4768200a6d776869
mov qword [rsp + 0x34], rdx
movabs rdx, 0x7628203a72474a61
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x120a031b0f1a1f22
mov qword [rsp + 0x44], rdx
movabs rdx, 0x260010171b0b1a21
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x904030f26001017
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c07170000021b0b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x40f10141c190a17
mov qword [rsp + 0x60], rdx
movabs rdx, 0x21020f0511131917
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x536920
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2c
jge 0x536952
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x53697b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
cmp rsi, 0x28
jb 0x536902
jmp 0x53696f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x28
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x28
call fcn.0045f500
mov eax, edi
mov ecx, 0x28
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00536840
Function at 0x5369a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x536b1c
sub rsp, 0xd0
mov qword [rsp + 0xc8], rbp
lea rbp, [rsp + 0xc8]
movabs rdx, 0xd7617b56cd2e70be
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4372f967b0656871
mov qword [rsp + 0x22], rdx
movabs rdx, 0x707a3d984372f967
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20731520ba667151
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6eb258068773656c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x16973aa77bc15a6
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x6e622f645f28c3c6
mov qword [rsp + 0x46], rdx
movabs rdx, 0x5a328d7150337014
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xa54e8b9c74496f4b
mov qword [rsp + 0x56], rdx
movabs rdx, 0x72650cb7067f20c5
mov qword [rsp + 0x5e], rdx
movabs rdx, 0x842071924361502
mov qword [rsp + 0x66], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x0064bde2]
nop word [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045fb0c
mov rbp, qword [rbp]
xor eax, eax
jmp 0x536ab4
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x62
jge 0x536ae2
movzx edx, byte [rsp + rax + 0x66]
movzx esi, byte [rsp + rax + 0x67]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x4c
jae 0x536b0f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x4c
jb 0x536a97
nop
jmp 0x536b03
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x4c
call fcn.0044a140
mov rbp, qword [rsp + 0xc8]
add rsp, 0xd0
ret
mov eax, esi
mov ecx, 0x4c
call fcn.0045f500
mov eax, edi
mov ecx, 0x4c
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.005369a0
Function at 0x536cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x536e12
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x6a764c6f510f466f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x49ed655e52655c3f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x416c576849ed655e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x186365161463fb75
mov qword [rsp + 0x32], rdx
movabs rdx, 0x423167f15548878b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x5925733020704072
mov qword [rsp + 0x42], rdx
movabs rdx, 0x80e1b1309220f15
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x131724201623091e
mov qword [rsp + 0x52], rdx
movabs rdx, 0x1101021e1c201317
mov qword [rsp + 0x58], rdx
movabs rdx, 0x503291d12201613
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2b1c2607010c0125
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1f1c131806220c0b
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x536dad
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x3f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2e
jge 0x536dda
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x536e05
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x2c
jb 0x536d90
jmp 0x536df5
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x2c
call fcn.0044a140
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x2c
nop dword [rax]
call fcn.0045f500
mov eax, edi
mov ecx, 0x2c
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00536cc0
Function at 0x536f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x5370d6
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x25f527429b656123
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x940903655d69e364
mov qword [rsp + 0x25], rdx
movabs rdx, 0x42696b720e940903
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa72615734086574
mov qword [rsp + 0x32], rdx
movabs rdx, 0x692674e826e0064d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x2f6c6217742067e1
mov qword [rsp + 0x42], rdx
movabs rdx, 0x92c0f2c02141713
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2c13170f0923092c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x15141e0b121c190f
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb0c001d0217201f
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1051d0d10171325
mov qword [rsp + 0x68], rdx
movabs rdx, 0x32c041812290621
mov qword [rsp + 0x70], rdx
movabs rdx, 0xc2c2309090e2101
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x537067
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x36
jge 0x53709c
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2d
jae 0x5370c9
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0x2d
jb 0x53704d
jmp 0x5370bd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x2d
call fcn.0044a140
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2d
call fcn.0045f500
mov eax, edi
mov ecx, 0x2d
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.00536f60
Function at 0x5393c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53948b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x260c247330613b30
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x5324
movabs rdx, 0x306060106030800
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x705
xor eax, eax
jmp 0x539425
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x27]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x27]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xa
jge 0x539457
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xa
jae 0x53947e
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x539408
jmp 0x539472
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f500
mov eax, edi
mov ecx, 0xa
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005393c0

Function at 0x5394a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53957c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x75656f73736a6c8b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xaba47f75656f7373
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6050205090a02
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x707060508050006
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x539512
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x539548
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x53956f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2e]
nop dword [rax]
cmp rsi, 0xb
jb 0x5394f8
jmp 0x539563
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f500
mov eax, edi
mov ecx, 0xb
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.005394a0
Function at 0x539920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x539a28
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x5f658679956b4389
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x65f35f658679956b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc35c866c7305e2e5
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb110f0503000d0c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5020c000304000a
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf0705020c000304
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf080f100303050c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5399c0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x5399f2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x539a1b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 0x12
jb 0x5399a5
jmp 0x539a0f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f500
mov eax, edi
mov ecx, 0x12
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00539920

Function at 0x539f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x53a0f2
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0xe7676eb073406170
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xca456ea56b343ab4
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1a2c691374035d6f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc4cb242028707974
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6c4c61ff3a387427
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x74659f73d774c862
mov qword [rsp + 0x44], rdx
movabs rdx, 0xc08072d1e1f0829
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x7072c120c08072d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x9230a1e24071224
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1404161f0f042b2d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x8170214070f1b1d
mov qword [rsp + 0x68], rdx
movabs rdx, 0x14242a1628110426
mov qword [rsp + 0x70], rdx
movabs rdx, 0x80e0c0c22292d0c
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x53a08a
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x34
jge 0x53a0b7
movzx edx, byte [rsp + rax + 0x4c]
movzx esi, byte [rsp + rax + 0x4d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x53a0e5
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x30
jb 0x53a06d
jmp 0x53a0d8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x30
call fcn.0044a140
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x30
nop
call fcn.0045f500
mov eax, edi
mov ecx, 0x30
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00539f80
Function at 0x53b1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53b2a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x196e084b26e12474
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe0466e695ad42419
mov qword [rsp + 0x24], rdx
movabs rdx, 0x73029d028207372
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9081607140d1613
mov qword [rsp + 0x34], rdx
movabs rdx, 0x9070e0308031605
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x90d080209070e03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14010e040a140803
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x53b242
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1c
jge 0x53b26f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x53b29b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x53b225
jmp 0x53b28f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f500
mov eax, edi
mov ecx, 0x17
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0053b1a0
Function at 0x53e100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53e1cb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x206f5b7469562b5b
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x4333
movabs rdx, 0x507080909080109
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2010005
xor eax, eax
jmp 0x53e166
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x1b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x1b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x53e197
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x53e1be
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x53e149
jmp 0x53e1b2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f500
mov eax, edi
mov ecx, 0xa
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0053e100

Function at 0x5405c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5406e6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x45b2b36fcbedbd4a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1eafc073c8e5c224
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd8c8b81f1eafc073
mov qword [rsp + 0x24], rdx
movabs rdx, 0x656703cc73652520
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6050d1207001901
mov qword [rsp + 0x34], rdx
movabs rdx, 0x312111306050d12
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd071508070e0b00
mov qword [rsp + 0x40], rdx
movabs rdx, 0x181005190a191909
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf00120b12020e13
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x540680
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x24
jge 0x5406ad
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5406d4
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1c
jb 0x540663
jmp 0x5406c8
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
call fcn.0044a140
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0045f500
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005405c0
Function at 0x540b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x540bfc
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6d20a0b790b19387
mov qword [rsp + 0x18], rdx
movabs rdx, 0xba8d6d20a0b790b1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x67ec84cd61bb9c62
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb04020b050e0810
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0c090b080b04
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0f05010309050b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x540b90
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x540bc8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x540bef
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
nop word [rax + rax]
cmp rsi, 0x12
jb 0x540b76
jmp 0x540be3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f500
mov eax, edi
mov ecx, 0x12
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.00540b00

Function at 0x541320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x541416
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd5d4ded3df8565dd
mov qword [rsp + 0x18], rdx
movabs rdx, 0x73c7d5d4ded3df85
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xceca527661a15362
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6020b0406080c08
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1111000f10040602
mov qword [rsp + 0x30], rdx
movabs rdx, 0x507040700000303
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5413b3
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x5413e2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x541409
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x541396
nop
jmp 0x5413fd
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f500
mov eax, edi
mov ecx, 0x12
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.00541320
Function at 0x541440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x541508
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x656c0666b6287c34
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xf7
movabs rdx, 0x803080000010005
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2000008
xor eax, eax
jmp 0x5414a1
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x5414d3
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x5414fb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 9
jb 0x541487
jmp 0x5414ef
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f500
mov eax, edi
mov ecx, 9
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00541440

Function at 0x541800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x541912
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x20b7b009617cccad
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd26b72bf771b0c6e
mov qword [rsp + 0x21], rdx
movabs rdx, 0x6105721045ce15d2
mov qword [rsp + 0x28], rdx
movabs rdx, 0x78f7646e1520f104
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1a121d1a060a0917
mov qword [rsp + 0x38], rdx
movabs rdx, 0x405151809001818
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11d1013101a1718
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6111a10020f0c05
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5418b1
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x5418de
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x541905
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1f
jb 0x541894
jmp 0x5418f9
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.0044a140
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1f
call fcn.0045f500
mov eax, edi
mov ecx, 0x1f
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00541800