joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5392e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x539475
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0x6b2bf4e6426e6f10
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x8a372746b2bf4e6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3f6c2c75c6653dfb
mov qword [rsp + 0x26], rdx
movabs rdx, 0x43ff6363059d2b35
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf965266f27f94913
mov qword [rsp + 0x36], rdx
movabs rdx, 0x733b07487463f675
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1fb96f32ab044438
mov qword [rsp + 0x46], rdx
movabs rdx, 0x2828121906070b07
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x2f26282812190607
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2f28162e0f2a0d26
mov qword [rsp + 0x58], rdx
movabs rdx, 0x31d16302c0a1133
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc052f2e1a17232d
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2c051c112d0d0d25
mov qword [rsp + 0x70], rdx
movabs rdx, 0x621321a2f071725
mov qword [rsp + 0x78], rdx
movabs rdx, 0x151a1f0c002a1b13
mov qword [rsp + 0x80], rdx
movabs rdx, 0x141105071e142904
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x53940e
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 9]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x42
jge 0x539442
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x34
jae 0x539468
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 9]
cmp rsi, 0x34
jb 0x5393f4
nop
jmp 0x53945c
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x34
call fcn.0044b900
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x34
call fcn.00460ec0
mov eax, edi
mov ecx, 0x34
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005392e0

Function at 0x53bb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53bc1d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x4ff963ca032f6586
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1d6373cab9d94417
mov qword [rsp + 0x23], rdx
movabs rdx, 0xff709f1d6373cab9
mov qword [rsp + 0x26], rdx
movabs rdx, 0x68bb9235654c0bfe
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x180b0310060b0807
mov qword [rsp + 0x36], rdx
movabs rdx, 0x12180b0310060b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100c0f0014100008
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa12120904171919
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2041309070213
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x53bbc0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x53bbed
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x53bc10
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1b
jb 0x53bb9d
jmp 0x53bc04
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1b
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1b
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.0053bb00
Function at 0x53bd80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53bea7
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xc7755161039c651b
mov qword [rsp + 0x18], rdx
movabs rdx, 0xde6545f54c645fb0
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5afeaf63e869de65
mov qword [rsp + 0x26], rdx
movabs rdx, 0xdb086474d36f4365
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70e110d031b0216
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc12000813111316
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x90a0c1200081311
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1504080b191d0a14
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc081b070f051d15
mov qword [rsp + 0x50], rdx
movabs rdx, 0x902071c15040f03
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x53be49
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x2a
jge 0x53be77
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x53be9a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1e
jb 0x53be2c
jmp 0x53be8e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
call fcn.0044b900
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1e
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0053bd80

Function at 0x53c4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53c5e8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6447a269530765fb
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf6f9573e4874d765
mov qword [rsp + 0x21], rdx
movabs rdx, 0x41f6f9573e4874d7
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf739483c21d843fd
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc020918050e0c11
mov qword [rsp + 0x32], rdx
movabs rdx, 0x900170c000f0913
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x121815050e150900
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf051406120d160b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x53c58b
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x53c5b8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x53c5db
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x53c56e
jmp 0x53c5cf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00460ec0
mov eax, edi
mov ecx, 0x19
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0053c4e0
Function at 0x53fc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53fcec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6165047915657551
mov qword [rsp + 0x18], rdx
movabs rdx, 0x4831616504791565
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x73bacac9a65322cc
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70e09080d08090d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb030f080e0a070e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa05090e07081007
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x53fc8a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x53fcbc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x53fcdf
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3c]
cmp rsi, 0x12
jb 0x53fc70
jmp 0x53fcd3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460ec0
mov eax, edi
mov ecx, 0x12
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0053fc00

Function at 0x540d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x540e1e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4b54dbc74dd86552
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x666cea4e
movabs rdx, 0x905040803030702
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x4030202
xor eax, eax
jmp 0x540dc1
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x64]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x64]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x540dee
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x540e11
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x540da4
jmp 0x540e05
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
mov eax, edi
mov ecx, 0xc
call fcn.00460ec0
nop
nop
call fcn.0045ec40
jmp fcn.00540d60
Function at 0x5414c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5415cc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x4a60de65693d4132
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2620734052796a69
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5436372526207340
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6c24724f6e6f4651
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf15100e09020c0b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12000f0605050307
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1a01051a1a1a110e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x18120c0913140110
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x541568
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 3]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x20
jge 0x54159c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x5415bf
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 3]
cmp rsi, 0x1c
jb 0x54154e
jmp 0x5415b3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1c
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005414c0

Function at 0x541a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x541b7a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x3c451efd3e74363e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x28e30a2c56fd2669
mov qword [rsp + 0x22], rdx
movabs rdx, 0x55528e30a2c56fd
mov qword [rsp + 0x24], rdx
movabs rdx, 0xedfbdefc241c6f74
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0f05160d170300
mov qword [rsp + 0x34], rdx
movabs rdx, 0x161015050b0f0516
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11905070d04070e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x617180d0a061811
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140109110404050c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x541b17
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x12]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x24
jge 0x541b49
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x541b6d
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x12]
cmp rsi, 0x1a
jb 0x541afd
jmp 0x541b61
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044b900
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00460ec0
nop
call fcn.0045ec40
nop
jmp fcn.00541a60
Function at 0x5428a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x542986
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x45073e4b547441eb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xbc1e3b3854214507
mov qword [rsp + 0x24], rdx
movabs rdx, 0x400070104060d06
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80c000d04000701
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50d080b0a0c040a
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x542920
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x542952
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x542977
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x16]
cmp rsi, 0xe
jb 0x542902
jmp 0x54296b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460ec0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005428a0

Function at 0x542f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x543052
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x87656c74827f8c6c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x806563a88387656c
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc09000508070203
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc03010c0c010c09
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x542fec
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x54301e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x543045
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 0xd
jb 0x542fd2
jmp 0x543035
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00460ec0
mov eax, edi
mov ecx, 0xd
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00542f80
Function at 0x5447a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54489d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x13a5b4a71b91a3b8
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2c596d113a5b4a7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa8fe9474046efc6e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x13120109020f110d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x504050206011107
mov qword [rsp + 0x34], rdx
movabs rdx, 0x3080305040502
mov qword [rsp + 0x38], rdx
movabs rdx, 0x811130a0613110b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x544840
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x2f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x2f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x54486d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x544890
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x54481f
jmp 0x544884
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00460ec0
mov eax, edi
mov ecx, 0x14
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.005447a0

Function at 0x546420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5464fd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe09cfd9b071472a5
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9529aa6aa24f798d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x60f0f0e0d040403
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3060f0b0d05080f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70e04020f0f0700
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x5464a0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x7a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x7a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x5464cd
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5464f0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x546482
jmp 0x5464e4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00460ec0
mov eax, edi
mov ecx, 0x10
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.00546420
Function at 0x547b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x547c46
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5d60636263436f6d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x654a6940556c5b59
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa03000c0e000806
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0607090a03000c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x207040402020906
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x547be0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xd]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x547c12
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x547c37
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xd]
cmp rsi, 0x10
jb 0x547bc2
jmp 0x547c2b
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00460ec0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00547b60

Function at 0x547f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x547fdd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x474565be1e577243
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5778a4744f654745
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x302030409090903
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb09030203040909
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7030b0207070209
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x547f80
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x547fad
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x547fd0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x547f62
jmp 0x547fc4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460ec0
mov eax, edi
mov ecx, 0xe
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.00547f00
Function at 0x548500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5485d2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7782656bab8872d9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8d7b5c7782656bab
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20202030003030a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7090a0406080202
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x54856c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x54859e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5485c5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2c]
cmp rsi, 0xb
jb 0x548552
jmp 0x5485b5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00460ec0
mov eax, edi
mov ecx, 0xb
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00548500

Function at 0x548c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x548cfd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc87a65826192db27
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc84638d09ef05ec
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe04020a0f040700
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10607090a040e04
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9010b0e0f080e0c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x548ca0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x548ccd
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x548cf0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x548c82
jmp 0x548ce4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00460ec0
mov eax, edi
mov ecx, 0x10
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.00548c20
Function at 0x549400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5494cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8538651a9d36a0b4
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x57ad736563918538
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2030c0808060c04
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10c010307000808
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x54946f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x54949c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5494bf
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x549452
jmp 0x5494b3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460ec0
mov eax, edi
mov ecx, 0xe
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00549400

Function at 0x54b720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54b83d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xeafecc1464ad0a7a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4dccb764e7b44cb0
mov qword [rsp + 0x24], rdx
movabs rdx, 0x75aa4dccb764e7b4
mov qword [rsp + 0x26], rdx
movabs rdx, 0xca593b2c29a746e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x919071902161018
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1914091907190216
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80d00140417140c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa14070b0e150601
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10117050007060a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x54b7e0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x54b80d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x54b830
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1a
jb 0x54b7bd
jmp 0x54b824
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.0054b720
Function at 0x54bee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54bfac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7465659e8a6e6889
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7665ad85a3746565
mov qword [rsp + 0x22], rdx
movabs rdx, 0x603090104000a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0c060801010006
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x54bf4f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x13]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x13]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x54bf7c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x54bf9f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x54bf32
jmp 0x54bf93
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00460ec0
mov eax, edi
mov ecx, 0xd
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0054bee0

Function at 0x54c840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54c91d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7186f3a643b6919
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3425e14d43fb1907
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc09070c0c060208
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0004060c09070c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20b0e040d000c0c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x54c8c0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x54c8ed
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x54c910
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x54c8a2
jmp 0x54c904
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460ec0
mov eax, edi
mov ecx, 0xf
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.0054c840