joyce8/EMBER2024-capa huggingface dataset:
Function at 0x53dd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53de7d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x635c666fa5655f1b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65fd205b659a6f6c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6f0efa8c726faa13
mov qword [rsp + 0x50], rdx
movabs rdx, 0xca6f97fa0165b9b3
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f100a141f100a00
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x191d1b0c1f100a14
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3161d0e06151b1d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa1d18110e141c0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10306121c03100c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x53de20
movzx r9d, byte [rsp + rsi + 0x40]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x40], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x40], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x53de4d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x53de70
movzx r8d, byte [rsp + rdi + 0x40]
sub r8d, edx
cmp rsi, 0x20
jb 0x53ddfd
jmp 0x53de64
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x20
call fcn.0045b720
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00460fc0
mov eax, edi
mov ecx, 0x20
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.0053dd60

Function at 0x53dea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53dfbd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x635c666fa5655f1b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65fd205b659a6f6c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6f0efa8c726faa13
mov qword [rsp + 0x50], rdx
movabs rdx, 0xca6f97fa0165b9b3
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f100a141f100a00
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x191d1b0c1f100a14
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3161d0e06151b1d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa1d18110e141c0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10306121c03100c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x53df60
movzx r9d, byte [rsp + rsi + 0x40]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x40], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x40], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x53df8d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x53dfb0
movzx r8d, byte [rsp + rdi + 0x40]
sub r8d, edx
cmp rsi, 0x20
jb 0x53df3d
jmp 0x53dfa4
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x20
call fcn.0045b720
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00460fc0
mov eax, edi
mov ecx, 0x20
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.0053dea0
Function at 0x542080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x542207
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0x1b0796bb7865972d
mov qword [rsp + 0x61], rdx
movabs rdx, 0xcfb68e5522a69db8
mov qword [rsp + 0x69], rdx
movabs rdx, 0x617072d387e1edcf
mov qword [rsp + 0x70], rdx
movabs rdx, 0x18b9c2cdd6d1e968
mov qword [rsp + 0x78], rdx
movabs rdx, 0x4314e4c228c2c9ed
mov qword [rsp + 0x80], rdx
movabs rdx, 0xfb9c67897c7377dc
mov qword [rsp + 0x88], rdx
movabs rdx, 0x282b05141f16001d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb00100c282b0514
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1d0a270e052d1a16
mov qword [rsp + 0x29], rdx
movabs rdx, 0x423252e090e1700
mov qword [rsp + 0x31], rdx
movabs rdx, 0x16221a0813210601
mov qword [rsp + 0x39], rdx
movabs rdx, 0x2d2a112b071e160c
mov qword [rsp + 0x41], rdx
movabs rdx, 0x1900182405201b07
mov qword [rsp + 0x49], rdx
movabs rdx, 0xd2e1c1720111a0a
mov qword [rsp + 0x51], rdx
movabs rdx, 0x10f19112a25121e
mov qword [rsp + 0x59], rdx
xor eax, eax
jmp 0x5421a2
movzx r9d, byte [rsp + rsi + 0x61]
sub r9d, edx
lea edx, [r9 - 0x11]
mov byte [rsp + rdi + 0x61], dl
lea edx, [r8 - 0x11]
mov byte [rsp + rsi + 0x61], dl
add rax, 2
cmp rax, 0x44
jge 0x5421cf
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x5421fa
movzx r8d, byte [rsp + rdi + 0x61]
sub r8d, edx
cmp rsi, 0x2f
jb 0x542185
jmp 0x5421ee
xor eax, eax
lea rbx, [rsp + 0x61]
mov ecx, 0x2f
nop dword [rax + rax]
call fcn.0045b720
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.00460fc0
mov eax, edi
mov ecx, 0x2f
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00542080

Function at 0x54d820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54d92c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xecfc6c03d94b1cc5
mov qword [rsp + 0x41], rdx
movabs rdx, 0x63f26c665d5020ec
mov qword [rsp + 0x48], rdx
movabs rdx, 0xef3d1748404bc0f7
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7110a09150d0111
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x141407110a09150d
mov qword [rsp + 0x21], rdx
movabs rdx, 0x15121006040f1015
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1314111416000403
mov qword [rsp + 0x31], rdx
movabs rdx, 0x40f041602030012
mov qword [rsp + 0x39], rdx
xor eax, eax
jmp 0x54d8c8
movzx r9d, byte [rsp + rsi + 0x41]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xe]
mov byte [rsp + rdi + 0x41], dl
mov byte [rsp + rsi + 0x41], r8b
add rax, 2
cmp rax, 0x22
jge 0x54d8fc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x17
jae 0x54d91f
movzx r8d, byte [rsp + rdi + 0x41]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xe]
cmp rsi, 0x17
jb 0x54d8ae
jmp 0x54d913
xor eax, eax
lea rbx, [rsp + 0x41]
mov ecx, 0x17
call fcn.0045b720
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00460fc0
mov eax, edi
mov ecx, 0x17
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0054d820
Function at 0x54df60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54e04c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x87fa619b33323130
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x8e87fa619b333231
mov qword [rsp + 0x30], rdx
movabs rdx, 0x83a045447b5b7055
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40b0f0c080a0608
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x100b0b0a040b0f0c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x910090705060c0b
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x54dfea
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x14
jge 0x54e01c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x54e03f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0x11
jb 0x54dfd0
jmp 0x54e033
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00460fc0
mov eax, edi
mov ecx, 0x11
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0054df60

Function at 0x54e300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54e3ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xbedac63433c131b9
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x38bedac63433c131
mov qword [rsp + 0x30], rdx
movabs rdx, 0x983f65b886e58c39
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0f10060c00050a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf070a0f10060c00
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa020b070d0d0b0a
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x54e38d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 0x48]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 0x48]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x12
jge 0x54e3ba
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x54e3dd
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x54e370
jmp 0x54e3d1
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00460fc0
mov eax, edi
mov ecx, 0x11
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0054e300
Function at 0x54f4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54f5e8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x906e9b2096749b29
mov qword [rsp + 0x39], rdx
movabs rdx, 0x97537594dbbb61a3
mov qword [rsp + 0x41], rdx
movabs rdx, 0xb06e619aa23b0a97
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa965de7024e52074
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1005001a0903131c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x50f1907070b01
mov qword [rsp + 0x21], rdx
movabs rdx, 0xc0e1912010f001a
mov qword [rsp + 0x29], rdx
movabs rdx, 0x131e0a050008160d
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x54f58b
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
cmp rax, 0x20
jge 0x54f5b8
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x54f5db
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x1f
jb 0x54f56e
jmp 0x54f5cf
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x1f
call fcn.0045b720
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1f
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0054f4e0

Function at 0x54f740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54f80c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6faa7694766e61a5
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xb07a8991
movabs rdx, 0x809080b00090406
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4050a09030b0809
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x54f7a5
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x54f7dc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x54f7ff
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 0xc
jb 0x54f78b
jmp 0x54f7f3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460fc0
mov eax, edi
mov ecx, 0xc
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0054f740
Function at 0x5505c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x550718
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x6ceb6e7265f36ee5
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xa8f2720ce0dc5b20
mov qword [rsp + 0x56], rdx
movabs rdx, 0x6163a8f2720ce0dc
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb172d4fd7460a22d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x9cbadfc46d697410
mov qword [rsp + 0x68], rdx
movabs rdx, 0x4fc3510dc942f814
mov qword [rsp + 0x70], rdx
movabs rdx, 0x120c1a2219241a22
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1f0b2519120c1a22
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe1f27140a000928
mov qword [rsp + 0x26], rdx
movabs rdx, 0x140b232617021628
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0c270f1729060c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1f0e122116231e0b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1923131f20282625
mov qword [rsp + 0x46], rdx
xor eax, eax
jmp 0x5506b3
movzx r9d, byte [rsp + rsi + 0x4e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x4e], dl
mov byte [rsp + rsi + 0x4e], r8b
add rax, 2
cmp rax, 0x34
jge 0x5506e8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2a
jae 0x55070b
movzx r8d, byte [rsp + rdi + 0x4e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
nop dword [rax]
cmp rsi, 0x2a
jb 0x550699
jmp 0x5506ff
xor eax, eax
lea rbx, [rsp + 0x4e]
mov ecx, 0x2a
call fcn.0045b720
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2a
call fcn.00460fc0
mov eax, edi
mov ecx, 0x2a
call fcn.00460fc0
nop
call fcn.0045ece0
nop dword [rax]
jmp fcn.005505c0

Function at 0x550b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x550c88
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xdb649e6ea5cfaeb8
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc49dd1ac920d7261
mov qword [rsp + 0x46], rdx
movabs rdx, 0x7420c49dd1ac920d
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf1df36a8fa5006e2
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd0a041807141202
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe050b0d0f030116
mov qword [rsp + 0x26], rdx
movabs rdx, 0x120e040a130e1912
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20b0c0000151403
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x550c2b
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
cmp rax, 0x20
jge 0x550c58
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x550c7b
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x550c0e
jmp 0x550c6f
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0045b720
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1a
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00550b80
Function at 0x550f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x550fdd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x749ec44d526675b7
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc88f98f197e3c96f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf000a040f000a00
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x90d0b0c0f000a04
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3060d0e06050b0d
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x550f80
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x550fad
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x550fd0
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x550f62
jmp 0x550fc4
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00460fc0
mov eax, edi
mov ecx, 0x10
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.00550f00

Function at 0x551240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55133d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb9062eee9eb3e365
mov qword [rsp + 0x39], rdx
movabs rdx, 0xdce93a92656691b9
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9567cc99c4c3ec6f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10d0e120600120d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x140408000b031400
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1316101014021404
mov qword [rsp + 0x29], rdx
movabs rdx, 0xb1112121007010d
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x5512e0
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x55130d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x551330
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x5512bf
jmp 0x551324
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0045b720
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00460fc0
mov eax, edi
mov ecx, 0x17
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.00551240
Function at 0x551360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x551495
push rbp
mov rbp, rsp
sub rsp, 0xa0
movabs rdx, 0xa3422e216f747900
mov qword [rsp + 0x6a], rdx
movabs rdx, 0x5b3a2c4a0860a342
mov qword [rsp + 0x70], rdx
movabs rdx, 0x7222496558227034
mov qword [rsp + 0x78], rdx
movabs rdx, 0x203083e61ddaf057
mov qword [rsp + 0x80], rdx
movabs rdx, 0x6f667c74612f836e
mov qword [rsp + 0x88], rdx
movabs rdx, 0x5a315820846f4b20
mov qword [rsp + 0x90], rdx
movabs rdx, 0xe74d575260816f6e
mov qword [rsp + 0x98], rdx
lea rdi, [rsp + 0x1a]
lea rsi, [0x00676ab0]
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004615da
mov rbp, qword [rbp]
xor eax, eax
jmp 0x551434
movzx r9d, byte [rsp + rsi + 0x6a]
sub r9d, edx
lea edx, [r9 + 0x5b]
mov byte [rsp + rdi + 0x6a], dl
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x6a], dl
add rax, 2
cmp rax, 0x50
jge 0x551462
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x36
jae 0x551488
movzx r8d, byte [rsp + rdi + 0x6a]
sub r8d, edx
cmp rsi, 0x36
jb 0x551417
nop
jmp 0x55147c
xor eax, eax
lea rbx, [rsp + 0x6a]
mov ecx, 0x36
call fcn.0045b720
add rsp, 0xa0
pop rbp
ret
mov eax, esi
mov ecx, 0x36
call fcn.00460fc0
mov eax, edi
mov ecx, 0x36
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00551360

Function at 0x553140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x5532b5
push rbp
mov rbp, rsp
sub rsp, 0xb8
movabs rdx, 0xd1616ebf6e3f6ac3
mov qword [rsp + 0x73], rdx
movabs rdx, 0x433ee56306d1616e
mov qword [rsp + 0x78], rdx
movabs rdx, 0x951dc36f33727a69
mov qword [rsp + 0x80], rdx
movabs rdx, 0x3303da614dfeec61
mov qword [rsp + 0x88], rdx
movabs rdx, 0x96cf61db20cc658f
mov qword [rsp + 0x90], rdx
movabs rdx, 0x684e83a5c874756f
mov qword [rsp + 0x98], rdx
movabs rdx, 0x1746999b45391f3
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x698cd18f69827720
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x3ae869b99d634fd3
mov qword [rsp + 0xb0], rdx
movabs rdx, 0x1240e401d17400d
mov qword [rsp + 0x1d], rdx
lea rdi, [rsp + 0x23]
lea rsi, [0x00676c1a]
nop word [rax + rax]
nop word [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004615da
mov rbp, qword [rbp]
xor eax, eax
jmp 0x553254
movzx r9d, byte [rsp + rsi + 0x73]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x73], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x73], dl
add rax, 2
cmp rax, 0x56
jge 0x553282
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x45
jae 0x5532a8
movzx r8d, byte [rsp + rdi + 0x73]
sub r8d, edx
cmp rsi, 0x45
jb 0x553237
nop
jmp 0x55329c
xor eax, eax
lea rbx, [rsp + 0x73]
mov ecx, 0x45
call fcn.0045b720
add rsp, 0xb8
pop rbp
ret
mov eax, esi
mov ecx, 0x45
call fcn.00460fc0
mov eax, edi
mov ecx, 0x45
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00553140
Function at 0x557860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x5579d5
push rbp
mov rbp, rsp
sub rsp, 0xb8
movabs rdx, 0xd1616ebf6e3f6ac3
mov qword [rsp + 0x73], rdx
movabs rdx, 0x433ee56306d1616e
mov qword [rsp + 0x78], rdx
movabs rdx, 0x951dc36f33727a69
mov qword [rsp + 0x80], rdx
movabs rdx, 0x3303da614dfeec61
mov qword [rsp + 0x88], rdx
movabs rdx, 0x96cf61db20cc658f
mov qword [rsp + 0x90], rdx
movabs rdx, 0x684e83a5c874756f
mov qword [rsp + 0x98], rdx
movabs rdx, 0x1746999b45391f3
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x698cd18f69827720
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x3ae869b99d634fd3
mov qword [rsp + 0xb0], rdx
movabs rdx, 0x1240e401d17400d
mov qword [rsp + 0x1d], rdx
lea rdi, [rsp + 0x23]
lea rsi, [0x00676c1a]
nop word [rax + rax]
nop word [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004615da
mov rbp, qword [rbp]
xor eax, eax
jmp 0x557974
movzx r9d, byte [rsp + rsi + 0x73]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x73], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x73], dl
add rax, 2
cmp rax, 0x56
jge 0x5579a2
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x45
jae 0x5579c8
movzx r8d, byte [rsp + rdi + 0x73]
sub r8d, edx
cmp rsi, 0x45
jb 0x557957
nop
jmp 0x5579bc
xor eax, eax
lea rbx, [rsp + 0x73]
mov ecx, 0x45
call fcn.0045b720
add rsp, 0xb8
pop rbp
ret
mov eax, esi
mov ecx, 0x45
call fcn.00460fc0
mov eax, edi
mov ecx, 0x45
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00557860

Function at 0x5597a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55987d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x20a4d29ba66e6fb7
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc09a8aea8fe4b963
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf000a040f000a00
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x90d0b0c0f000a04
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3060d0e06050b0d
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x559820
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x55984d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x559870
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x559802
jmp 0x559864
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00460fc0
mov eax, edi
mov ecx, 0x10
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.005597a0