joyce8/EMBER2024-capa huggingface dataset:
Function at 0x51aac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51abc8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x696e423a416f4153
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x646e5316521b6e65
mov qword [rsp + 0x26], rdx
movabs rdx, 0x653965124664657b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1609050b08151604
mov qword [rsp + 0x36], rdx
movabs rdx, 0x14130d0404031106
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc0214130d040403
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16070a0210070903
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x51ab62
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1a
jge 0x51ab8f
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x51abbb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x51ab45
jmp 0x51abaf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457d20
mov eax, edi
mov ecx, 0x18
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.0051aac0
Function at 0x51d720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51d828
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x64005f8df2dfdcd9
mov qword [rsp + 0x18], rdx
movabs rdx, 0x20d6eaecd3753c65
mov qword [rsp + 0x20], rdx
movabs rdx, 0x71fa69f384e9ba0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x141406160409060f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa050c1610111304
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa170b00100e1017
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd01040512020309
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x51d7c0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x51d7f2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x51d81b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
cmp rsi, 0x18
jb 0x51d7a5
jmp 0x51d80f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457d20
mov eax, edi
mov ecx, 0x18
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.0051d720

Function at 0x51e080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51e1a8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x756b945e6157866f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5c6f542b6f3c6e79
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7d9561745c6f542b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5c6d69548e8a7261
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x8051212170f0f0f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x130b08051212170f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70d010a00040016
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0d0e0e08081b05
mov qword [rsp + 0x48], rdx
movabs rdx, 0x21b0e0c1b0e0106
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x51e140
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x51e172
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x51e19b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2b]
cmp rsi, 0x1c
jb 0x51e123
jmp 0x51e18f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457d20
mov eax, edi
mov ecx, 0x1c
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.0051e080
Function at 0x51e1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51e2d2
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xa73d7f87dd7efe4e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x61b4a30c936ea96c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x939761b4a30c936e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x659fa7542064a761
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50702030b11060c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50e0e010e020506
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10100902050e0201
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1317131818090d04
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x51e271
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x13]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x13]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x51e29e
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x51e2c5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x51e254
jmp 0x51e2b9
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.00444d40
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457d20
mov eax, edi
mov ecx, 0x1a
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.0051e1c0
Function at 0x520f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x521072
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xdb7c6eb90820b7ee
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6e83f190f7526983
mov qword [rsp + 0x23], rdx
movabs rdx, 0x646e83f190f75269
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc09698a08e17261
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x150e00130a0c150e
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd08060d070c0c03
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x150b180d0d08060d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb010a1714040707
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x521011
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x73]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x52103e
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x521065
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x520ff4
jmp 0x521059
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457d20
mov eax, edi
mov ecx, 0x19
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00520f60
Function at 0x522980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x522a88
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xe68259f641ec644f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x796ee68259f641ec
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x65cb59547434a461
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5060c0610050306
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10703060f061002
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb04010703060f06
mov qword [rsp + 0x38], rdx
movabs rdx, 0x607060209070d06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x522a22
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1a
jge 0x522a4f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x522a7b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x522a05
jmp 0x522a6f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457d20
mov eax, edi
mov ecx, 0x12
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00522980

Function at 0x5230e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5231e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x5a046bf5c86194c0
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf5b3390c9b5a046b
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0c415d3ac649599
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x707080a10050d0c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x90e130404060e08
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x10e14090e1304
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12030d0b06111212
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x523182
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1c
jge 0x5231af
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5231db
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x523165
jmp 0x5231cf
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457d20
mov eax, edi
mov ecx, 0x15
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.005230e0
Function at 0x523200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x523308
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x747c9f65986b6167
mov qword [rsp + 0x18], rdx
movabs rdx, 0x327842746a83747c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x706d5d547d647281
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe06030e080b1111
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe15110913000d05
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe030e1511091300
mov qword [rsp + 0x38], rdx
movabs rdx, 0x511070c13040d0c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5232a0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x27]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x5232d2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5232fb
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x27]
cmp rsi, 0x16
jb 0x523285
jmp 0x5232ef
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457d20
mov eax, edi
mov ecx, 0x16
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00523200
Function at 0x527f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x528072
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xb9e66ae0dd6ecaa9
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8620dd706f72b1a7
mov qword [rsp + 0x24], rdx
movabs rdx, 0xce6e5a748620dd70
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd5ba6954a79572d0
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8111711091b01
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1a1a0d1b1b11070f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x913031113131314
mov qword [rsp + 0x48], rdx
movabs rdx, 0x16170406171a0517
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x528011
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x20
jge 0x52803e
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x528065
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x527ff4
jmp 0x528059
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.00444d40
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457d20
mov eax, edi
mov ecx, 0x1c
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00527f60

Function at 0x52a800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52a916
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6ca8959b7da165d8
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x9a959c5374646ec0
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc49a959c5374646e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x65843b402064f161
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60e150b080f1002
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd020502040f1205
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x30d020502040f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170d160d100e0316
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x52a8ae
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1a
jge 0x52a8e2
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x52a909
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 0x19
jb 0x52a894
nop
jmp 0x52a8fd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457d20
mov eax, edi
mov ecx, 0x19
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.0052a800
Function at 0x52f680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52f7d2
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x6546203a5d6d6474
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5c7e616320714f1b
mov qword [rsp + 0x21], rdx
movabs rdx, 0x655c7e616320714f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3f6e350e6e6f0528
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf66f6e6a2519f546
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc9652051234f6468
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1e16251b23112101
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1e1d182512081d0e
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x1f1a1a260a091e1d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1f0f192008150e16
mov qword [rsp + 0x58], rdx
movabs rdx, 0x241d030f2808181c
mov qword [rsp + 0x60], rdx
movabs rdx, 0xa28082319062618
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x52f76a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2e
jge 0x52f79c
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x52f7c5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
cmp rsi, 0x29
jb 0x52f750
jmp 0x52f7b7
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x29
call fcn.00444d40
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x29
nop
call fcn.00457d20
mov eax, edi
mov ecx, 0x29
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.0052f680

Function at 0x53bc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xf88ecbe89501add0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x102060400070507
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3020600
xor eax, eax
nop
jmp 0x53bc80
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0x5b]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x53bcab
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x53bcea
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x53bc62
jmp 0x53bcde
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x53bcc4
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x53bcb8
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00457d20
mov eax, esi
mov ecx, 8
call fcn.00457d20
nop
int3
Function at 0x53c660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53c728
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x858d9569af8250c3
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x8f
movabs rdx, 0x806050108000803
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8020706
xor eax, eax
jmp 0x53c6c1
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x53c6f3
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x53c71b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 9
jb 0x53c6a7
jmp 0x53c70f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00457d20
mov eax, edi
mov ecx, 9
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.0053c660

Function at 0x53c740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53c81c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x1c605e655a595848
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5a32641c605e655a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x305010902000900
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70a0606070a0305
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x53c7b5
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x53c7e8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x53c80f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x53c798
jmp 0x53c803
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457d20
mov eax, edi
mov ecx, 0xb
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.0053c740
Function at 0x53caa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53cba8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x82726ea893aa8741
mov qword [rsp + 0x19], rdx
movabs rdx, 0x72d090656b82726e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xbb78a3a1cf8d9a8c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x110d131002111001
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7020e12040a0e14
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb0607020e12040a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0a010f03050506
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x53cb42
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1a
jge 0x53cb6f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x53cb9b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x53cb25
jmp 0x53cb8f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457d20
mov eax, edi
mov ecx, 0x15
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.0053caa0

Function at 0x53d460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53d532
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6f54fc838c8e6952
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xdfefea01
movabs rdx, 0x802050105010903
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb08050904080a0a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x53d4ce
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x53d4fb
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x53d525
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x53d4b1
jmp 0x53d516
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00457d20
mov eax, edi
mov ecx, 0xc
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.0053d460
Function at 0x540740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x540809
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x654b63db53ec56ba
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xcc4c
movabs rdx, 0x206010902040108
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2000806
xor eax, eax
jmp 0x5407a3
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x5407d5
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5407fc
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0xa
jb 0x540789
jmp 0x5407f0
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457d20
mov eax, edi
mov ecx, 0xa
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00540740
Function at 0x548420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5484e8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x9ea2ae677e898875
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x703020507050603
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x101
xor eax, eax
nop
jmp 0x548480
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5484b2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x5484db
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 8
jb 0x548462
jmp 0x5484cf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00457d20
mov eax, edi
mov ecx, 8
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00548420

Function at 0x548500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5485d2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x364324704e3b6a4e
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x5044
movabs rdx, 0x101080502090103
mov qword [rsp + 0x22], rdx
movabs rdx, 0x900000706080101
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x54856a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x54859c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5485c5
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
cmp rsi, 0xa
jb 0x548550
jmp 0x5485b7
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.00457d20
mov eax, edi
mov ecx, 0xa
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.00548500