joyce8/EMBER2024-capa huggingface dataset:
Function at 0x53b0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53b1db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x20746e658e6d8488
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x208d747092656b20
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8c5f6f6a20a57374
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3000d130a101116
mov qword [rsp + 0x36], rdx
movabs rdx, 0x106130a16021310
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x10060106130a1602
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0b151015080b02
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x53b179
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x53b1ab
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x53b1ce
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0x17
jb 0x53b15f
jmp 0x53b1c2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.0053b0e0

Function at 0x53b480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53b56a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4ed36cede2b1f77a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x68dd674ed36cede2
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe85f786de12de320
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd10110209030702
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0e0c070d101102
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4100d0201120606
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x53b50d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x53b53a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x53b55d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x53b4f0
jmp 0x53b551
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0053b480
Function at 0x53cf60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53d026
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3b69726f012ede46
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x20
movabs rdx, 0x801080803020302
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8000703
xor eax, eax
nop
jmp 0x53cfc0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x53cff2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x53d017
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 9
jb 0x53cfa2
jmp 0x53d00b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0053cf60

Function at 0x53d040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53d0fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x366f477469440245
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x5631
movabs rdx, 0x200010207050508
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x905
xor eax, eax
jmp 0x53d0a0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x27]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x27]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x53d0cd
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x53d0f0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x53d082
jmp 0x53d0e4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0053d040

Function at 0x53f300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53f3cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x66fa15200442610c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x4e320f722466fa15
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa02050203000006
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20c0b0b06000208
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x53f36f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x3b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x3b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x53f39c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x53f3bf
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x53f352
jmp 0x53f3b3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0053f300
Function at 0x53f7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53f8ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x674854654449594b
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5417674854654449
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6a6e37763c3d654f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc060302030f0d02
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10a060f050c06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x110a070a08060c09
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x53f86d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x27]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x27]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x53f89a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x53f8bd
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x53f850
jmp 0x53f8b1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0053f7e0

Function at 0x53ffa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54008c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6d260e4327fa3334
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2f696d260e4327fa
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb7a66936083f1b62
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30d01100c000d05
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20e0504030d0110
mov qword [rsp + 0x30], rdx
movabs rdx, 0x106090e090b110b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x54002a
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x26]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x54005c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x54007f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x26]
cmp rsi, 0x12
jb 0x540010
jmp 0x540073
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0053ffa0
Function at 0x545f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54606a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x67614767653c2d65
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x64335e6761476765
mov qword [rsp + 0x22], rdx
movabs rdx, 0x695869526342154e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb050209010b1108
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb0d02090a120b05
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0709060b00060f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x54600d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x54603a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x54605d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x545ff0
jmp 0x546051
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00545f80

Function at 0x547da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x5ed6c29339aae88c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x706020104030707
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x303
xor eax, eax
jmp 0x547df6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x1f]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x547e22
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x547e65
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x547dda
nop
jmp 0x547e56
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x547e40
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x547e2f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x548000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xc869b6b94ff8538a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x706040506070402
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x54804f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x32]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x54807a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5480b5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x548033
jmp 0x5480a9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x548093
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x548087
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00461020
nop
int3

Function at 0x548840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x1521a7bbf5df0d0a
mov qword [rsp + 0x18], rax
movabs rax, 0x3cdd6ae1ff75c67b
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1a]
movzx ecx, byte [rsp + 0x21]
add eax, ecx
movzx ecx, byte [rsp + 0x26]
movzx edx, byte [rsp + 0x24]
add ecx, edx
movzx edx, byte [rsp + 0x1e]
movzx ebx, byte [rsp + 0x22]
sub edx, ebx
movzx ebx, byte [rsp + 0x23]
movzx esi, byte [rsp + 0x19]
add ebx, esi
movzx esi, byte [rsp + 0x1c]
movzx edi, byte [rsp + 0x1b]
add esi, edi
movzx edi, byte [rsp + 0x27]
movzx r8d, byte [rsp + 0x25]
xor edi, r8d
movzx r8d, byte [rsp + 0x20]
movzx r9d, byte [rsp + 0x18]
sub r8d, r9d
movzx r9d, byte [rsp + 0x1d]
movzx r10d, byte [rsp + 0x1f]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x548926
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x54891a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x54a440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xb8ff8a6afca21b53
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x402010300050202
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2000000
xor eax, eax
jmp 0x54a497
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x66]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x54a4c8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54a505
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x54a47b
jmp 0x54a4f7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x54a4e1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x54a4d5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x54a820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xb15dc04a958b5874
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x504020504070100
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x301
xor eax, eax
jmp 0x54a876
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x52]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x52]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x54a8a2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54a8e5
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x54a85a
nop
jmp 0x54a8d6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x54a8c0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x54a8af
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x54a9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x348fbcf979b8e281
mov qword [rsp + 0x20], rdx
movabs rdx, 0x406020506060206
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x54aa2d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x35]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x54aa5c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54aa97
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x35]
cmp rbx, 8
jb 0x54aa13
jmp 0x54aa8b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x54aa75
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x54aa69
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop
call fcn.00461020
nop
int3
Function at 0x54b120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xba16edcadffc7db8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1020300030106
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x703
xor eax, eax
jmp 0x54b176
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x59]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x54b1a2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54b1e5
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x54b15a
nop
jmp 0x54b1d6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x54b1c0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x54b1af
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x54bae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xac8dec0bde675529
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x700010506000706
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 1
xor eax, eax
jmp 0x54bb34
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x54bb68
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54bba5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x35]
nop dword [rax + rax]
cmp rbx, 8
jb 0x54bb1a
jmp 0x54bb97
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x54bb81
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x54bb75
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x54be40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x15b43b5c394300e1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x207020606000100
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x700
xor eax, eax
jmp 0x54be94
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x54bec8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54bf05
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x78]
nop dword [rax + rax]
cmp rbx, 8
jb 0x54be7a
jmp 0x54bef7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x54bee1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x54bed5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x54c020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x3de9209cccf2932e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x302020206010607
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 4
xor eax, eax
jmp 0x54c076
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x2f]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x54c0a2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54c0e5
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x54c05a
nop
jmp 0x54c0d6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x54c0c0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x54c0af
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x54f640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xc07928236707458c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x505020302020003
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x54f68d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x31]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x54f6bc
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x54f6f7
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x31]
cmp rbx, 8
jb 0x54f673
jmp 0x54f6eb
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x54f6d5
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x54f6c9
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop
call fcn.00461020
nop
int3

Function at 0x54f900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x7c255567892f2b5d
mov qword [rsp + 0x18], rax
movabs rax, 0x98ff16cecd7db4fb
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x21]
movzx ecx, byte [rsp + 0x23]
add eax, ecx
movzx ecx, byte [rsp + 0x27]
movzx edx, byte [rsp + 0x1a]
sub ecx, edx
movzx edx, byte [rsp + 0x18]
movzx ebx, byte [rsp + 0x19]
add edx, ebx
movzx ebx, byte [rsp + 0x1c]
movzx esi, byte [rsp + 0x1f]
add ebx, esi
movzx esi, byte [rsp + 0x1d]
movzx edi, byte [rsp + 0x20]
add esi, edi
movzx edi, byte [rsp + 0x1e]
movzx r8d, byte [rsp + 0x1b]
xor edi, r8d
movzx r8d, byte [rsp + 0x24]
movzx r9d, byte [rsp + 0x25]
sub r8d, r9d
movzx r9d, byte [rsp + 0x26]
movzx r10d, byte [rsp + 0x22]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x54f9e6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x54f9da
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x5500e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x20b7e7c7027b06a2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x502010702070401
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x500
xor eax, eax
jmp 0x550134
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x15]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x550168
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5501a5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x15]
nop dword [rax + rax]
cmp rbx, 8
jb 0x55011a
jmp 0x550197
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x550181
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x550175
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3

Function at 0x5502c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x34d03d8a2e92d7af
mov qword [rsp + 0x20], rdx
movabs rdx, 0x605060506000002
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x55030d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x55033c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x550377
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x46]
cmp rbx, 8
jb 0x5502f3
jmp 0x55036b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x550355
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x550349
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00461020
mov eax, esi
mov ecx, 8
nop
call fcn.00461020
nop
int3