joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5365c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5366ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1005bb0b06000766
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x66ffd21005bb0b06
mov qword [rsp + 0x22], rdx
movabs rdx, 0xeca4690e1315180f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1104050e01000908
mov qword [rsp + 0x32], rdx
movabs rdx, 0x20e070b0c091104
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0f040606011203
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x53664a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x53667c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x53669f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
cmp rsi, 0x13
jb 0x536630
jmp 0x536693
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00454ec0
mov eax, edi
mov ecx, 0x13
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.005365c0

Function at 0x538980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x538a6c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4e512b25ae53fa4d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6d2a4e512b25ae53
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x41403c69de1ff165
mov qword [rsp + 0x22], rdx
movabs rdx, 0x308110d0005030c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2060f01030c0308
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf10041110030b04
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x538a0a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x11]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x538a3c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x538a5f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x11]
cmp rsi, 0x12
jb 0x5389f0
jmp 0x538a53
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00454ec0
mov eax, edi
mov ecx, 0x12
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00538980
Function at 0x538a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x538b52
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8a65150da60e1043
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x65efb1a80c8a6515
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa050a0a01010905
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80b040208030702
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x538aec
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x538b1e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x538b45
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
cmp rsi, 0xd
jb 0x538ad2
jmp 0x538b35
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00454ec0
mov eax, edi
mov ecx, 0xd
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00538a80

Function at 0x5398a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x539986
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1072507470cca543
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x50221eda742c341d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x909010e0809080f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa020909010e0809
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0c0c0c090a070d
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x539920
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x539952
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x539977
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3d]
cmp rsi, 0x10
jb 0x539902
jmp 0x53996b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00454ec0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.005398a0
Function at 0x539b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x539c6c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa5a7939daf79728e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x62aca5a7939daf79
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa98ea698748e65aa
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3040c100706080a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x110c060e03040c10
mov qword [rsp + 0x30], rdx
movabs rdx, 0x900040c0f04050a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x539c0a
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x539c3c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x539c5f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0x12
jb 0x539bf0
jmp 0x539c53
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00454ec0
mov eax, edi
mov ecx, 0x12
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00539b80

Function at 0x53a1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53a2ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x695781650de8777e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xda776f876e695781
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6574758c6f999ae9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9100d0210030d02
mov qword [rsp + 0x32], rdx
movabs rdx, 0x90d050c05110910
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0e0f020011050f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x53a24a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x53a27c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x53a29f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3d]
cmp rsi, 0x15
jb 0x53a230
jmp 0x53a293
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00454ec0
mov eax, edi
mov ecx, 0x15
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0053a1c0
Function at 0x53a620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53a70c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x302c6164c51b65c8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x26e3323b302c6164
mov qword [rsp + 0x22], rdx
movabs rdx, 0x732a29fc651d0c3c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90710030611000d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x2120d0b080a0907
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe081008100c0c0c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x53a6aa
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x53a6dc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x53a6ff
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2e]
cmp rsi, 0x14
jb 0x53a690
jmp 0x53a6f3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00454ec0
mov eax, edi
mov ecx, 0x14
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0053a620

Function at 0x53a720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53a7fd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xaecc616490a8f778
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb29ed4f2dfaffbae
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10d00000c0d0a02
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x60b020d010d0000
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30b060706080e09
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x53a7a0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x53a7cd
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x53a7f0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x53a782
jmp 0x53a7e4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00454ec0
mov eax, edi
mov ecx, 0xf
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.0053a720
Function at 0x53b280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53b346
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6f276cfbc6ac2543
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x78c1
movabs rdx, 0x303020406020801
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x802
xor eax, eax
jmp 0x53b2e0
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x69]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x53b312
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x53b337
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x69]
cmp rsi, 0xa
jb 0x53b2c2
jmp 0x53b32b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00454ec0
mov eax, edi
mov ecx, 0xa
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0053b280

Function at 0x53c160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53c22c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa3a865ee61967263
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x8f397da3a865ee61
mov qword [rsp + 0x20], rdx
movabs rdx, 0x90604020409
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70809060a08020a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x53c1cf
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x53c1fc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x53c21f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x53c1b2
jmp 0x53c213
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00454ec0
mov eax, edi
mov ecx, 0xb
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0053c160
Function at 0x53d2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53d3a8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa6bf658e6193726a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x789b8a96b489b8da
mov qword [rsp + 0x26], rdx
movabs rdx, 0x74838a99acea8ac0
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7080e080d06090f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x140807080e080d06
mov qword [rsp + 0x38], rdx
movabs rdx, 0x14120f1411020600
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd13100a040c1516
mov qword [rsp + 0x48], rdx
movabs rdx, 0x70a0b0b14000e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x53d34b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 6]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x53d378
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x53d39b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x53d32e
jmp 0x53d38f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00443420
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00454ec0
mov eax, edi
mov ecx, 0x18
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0053d2a0

Function at 0x53d4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53d58c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x69461f7fbab76544
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xfbcd6c69461f7fba
mov qword [rsp + 0x22], rdx
movabs rdx, 0x90a040a0a090502
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20903030402090a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x53d52f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x4b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x53d55c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x53d57f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x53d512
jmp 0x53d573
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00454ec0
mov eax, edi
mov ecx, 0xb
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0053d4c0
Function at 0x53de40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53df0c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9a6f7250c373d4c5
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2d453b9a6f7250c3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2000807010a0a07
mov qword [rsp + 0x28], rdx
movabs rdx, 0x900010100090703
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x53deaf
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x53dedc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x53deff
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x53de92
jmp 0x53def3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00454ec0
mov eax, edi
mov ecx, 0xb
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0053de40

Function at 0x53df20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53e02c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e8dc173618a7845
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6a676d8559726976
mov qword [rsp + 0x23], rdx
movabs rdx, 0x916a676d85597269
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8c877fb57d72747f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x21015180506110c
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb11170f0e040e18
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x60e150b0b11170f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe170e0e16140f02
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x53dfc8
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x53dffc
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x53e01f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2e]
cmp rsi, 0x19
jb 0x53dfae
jmp 0x53e013
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00454ec0
mov eax, edi
mov ecx, 0x19
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0053df20
Function at 0x53e900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53ea1a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x73f5696964289046
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x90d920756ce2d82e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd38e90d920756ce2
mov qword [rsp + 0x26], rdx
movabs rdx, 0xae0c2dd86f271a27
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40a02160d0f1619
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe08040a02160d0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x180902120d130d01
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110a081717111017
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1114181304011906
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x53e9b7
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x22
jge 0x53e9e9
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x53ea0d
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0x1a
jb 0x53e99d
jmp 0x53ea01
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.00443420
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00454ec0
nop
call fcn.00452c40
nop
jmp fcn.0053e900

Function at 0x53f080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53f14c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x74bedfdadfb8dbde
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe35d49bbe074bedf
mov qword [rsp + 0x22], rdx
movabs rdx, 0x900030a08020b04
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x105030c06040900
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x53f0ef
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x53f11c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x53f13f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x53f0d2
jmp 0x53f133
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00454ec0
mov eax, edi
mov ecx, 0xd
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0053f080
Function at 0x5406c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5407bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb469cf20ee196564
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x19f6e61172501bb4
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa517156fecb66fbc
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1605001200001507
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1511160f020e020f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x512150416141511
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd14080b0d030c14
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x540760
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x71]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x71]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x54078d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5407b0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x17
jb 0x54073f
jmp 0x5407a4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00454ec0
mov eax, edi
mov ecx, 0x17
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.005406c0

Function at 0x540a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x540b52
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x616d6d90a1009247
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf9656ee74c063361
mov qword [rsp + 0x20], rdx
movabs rdx, 0x304080108040308
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe0b040209080303
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x540aec
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x540b1e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x540b45
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0xf
jb 0x540ad2
jmp 0x540b35
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00454ec0
mov eax, edi
mov ecx, 0xf
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00540a80
Function at 0x542540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54262a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xba74aef645c0dd01
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x646fba74aef645c0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd3739384dbcf50a1
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf0a0411020a0c00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x104110c0f0a0411
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4050d0407110e00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5425cd
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x5425fa
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x54261d
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x5425b0
jmp 0x542611
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00454ec0
mov eax, edi
mov ecx, 0x12
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00542540

Function at 0x5427c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5428dd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8589766b67477297
mov qword [rsp + 0x18], rdx
movabs rdx, 0x695588b6786f8e6e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x95a4695588b6786f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7d82ab7489667959
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x16050d0c1512010e
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb02020703091605
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb170c1006181900
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1419100b0c0c0b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x12040d1201030311
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x542880
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x5428ad
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5428d0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x54285d
jmp 0x5428c4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00443420
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.005427c0