joyce8/EMBER2024-capa huggingface dataset:
Function at 0x53f0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53f1bd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x75138cdc0a426504
mov qword [rsp + 0x18], rdx
movabs rdx, 0x570be6236209e619
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3020e050004030d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90e0b0e09030a0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8080c0c0c020609
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x53f160
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x71]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x71]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x53f18d
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x53f1b0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x53f142
jmp 0x53f1a4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00454ec0
mov eax, edi
mov ecx, 0x10
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.0053f0e0

Function at 0x540fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5410da
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6c0af8784674d704
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe03144e960a8cae
mov qword [rsp + 0x23], rdx
movabs rdx, 0x480e03144e960a8c
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf4f8f88f6e099379
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8180916120d0e15
mov qword [rsp + 0x34], rdx
movabs rdx, 0x10a0b1208180916
mov qword [rsp + 0x38], rdx
movabs rdx, 0x131304121618000a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100f0a060e170b00
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd0b0506120f1006
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x541077
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x5410a9
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5410cd
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 0x19
jb 0x54105d
jmp 0x5410c1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00443420
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00454ec0
mov eax, edi
mov ecx, 0x19
call fcn.00454ec0
nop
call fcn.00452c40
nop
jmp fcn.00540fc0
Function at 0x541dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x541eaa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c75926f4dca7b7f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x91746c75926f4dca
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9e8d6d62cfc26669
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd101002080b110c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x51108010d080d10
mov qword [rsp + 0x30], rdx
movabs rdx, 0x110e0910090c05
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x541e4d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x541e7a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x541e9d
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x541e30
jmp 0x541e91
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00454ec0
mov eax, edi
mov ecx, 0x12
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00541dc0

Function at 0x542480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54257b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4f3f652a22342747
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6070284f3f652a22
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x743738583f53645b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd100d030a070110
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6030b110d080b0e
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb0406030b110d08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10b0f0a02100d02
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x542519
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 3]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1a
jge 0x54254b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x54256e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 3]
cmp rsi, 0x13
jb 0x5424ff
jmp 0x542562
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00454ec0
mov eax, edi
mov ecx, 0x13
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.00542480
Function at 0x5446c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5447dd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x65747379fa74656c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x68722f0065725048
mov qword [rsp + 0x27], rdx
movabs rdx, 0x41ef2e502b68722f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x733d734f172f4561
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc14181b1b130311
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x190d12180c14181b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x191b1008111b1b10
mov qword [rsp + 0x48], rdx
movabs rdx, 0x13170c1218031714
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa171a0f10190016
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x544780
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x34]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x34]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x5447ad
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x5447d0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1d
jb 0x54475d
jmp 0x5447c4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.00443420
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1d
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.005446c0

Function at 0x545420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54551b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa665c88cf6c581d0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x98021c86ad6fa665
mov qword [rsp + 0x24], rdx
movabs rdx, 0x71916974b66d72ac
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x150003000c070e09
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa0b0a070b070205
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd0214110a0b0a07
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0b140403011505
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5454b9
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x45]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5454eb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x54550e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x45]
cmp rsi, 0x16
jb 0x54549f
jmp 0x545502
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00454ec0
mov eax, edi
mov ecx, 0x16
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.00545420
Function at 0x547120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x547206
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x918e98848cab9e5f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x79aacdf989c6b91
mov qword [rsp + 0x22], rdx
movabs rdx, 0x108080e0707010b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9030c0c06020108
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa040600010d0905
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x5471a0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x43]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x5471d2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5471f7
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x43]
cmp rsi, 0xf
jb 0x547182
jmp 0x5471eb
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00454ec0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00547120

Function at 0x54abc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54acbd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6563b3446461c0b7
mov qword [rsp + 0x19], rdx
movabs rdx, 0xbe726f0e096563b3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x261565c60c6ca643
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf140e0f13011000
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x110f0c0908051406
mov qword [rsp + 0x36], rdx
movabs rdx, 0x140e110f0c090805
mov qword [rsp + 0x38], rdx
movabs rdx, 0x14050106000e0c0c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x54ac60
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x39]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x39]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x54ac8d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x54acb0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x54ac3f
jmp 0x54aca4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00454ec0
mov eax, edi
mov ecx, 0x15
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.0054abc0
Function at 0x54bae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54bbc6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6f736e0f25742920
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa5ab2236856c6f73
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10d040a0a090d03
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa010d040a0a09
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40d0b0d0a0c0909
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x54bb60
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x54bb92
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x54bbb7
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
cmp rsi, 0xe
jb 0x54bb42
jmp 0x54bbab
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00454ec0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0054bae0

Function at 0x54bf80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54c07d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xfbac668be5ad709d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x72baec54f0b8e9d5
mov qword [rsp + 0x22], rdx
movabs rdx, 0xafec69c7ed748665
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1030709110d1708
mov qword [rsp + 0x32], rdx
movabs rdx, 0x611130a17131617
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb02091400040611
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170107010c070e02
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x54c020
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x54c04d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x54c070
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x54bfff
jmp 0x54c064
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00454ec0
mov eax, edi
mov ecx, 0x18
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.0054bf80
Function at 0x54c6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54c767
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x726f727249767553
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x6b706b4d
movabs rdx, 0xb0809010303080b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3030a0b0a0a0202
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x54c708
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 6]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 6]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x54c737
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x54c75a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x54c6eb
jmp 0x54c74e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00454ec0
mov eax, edi
mov ecx, 0xc
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0054c6a0

Function at 0x54f8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54f9a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c6f6e51745d5870
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x78695063673d6f79
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60a0807080d080b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe06060a0807080d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0104000b0d0205
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x54f940
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xd]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x54f972
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x54f997
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xd]
cmp rsi, 0x10
jb 0x54f922
jmp 0x54f98b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00454ec0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0054f8c0

Function at 0x54f9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54fa86
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3c483eea74433856
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3c0e0975
movabs rdx, 0x70a05010901040a
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0xb020604
xor eax, eax
jmp 0x54fa20
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x23]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x54fa52
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x54fa77
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x23]
cmp rsi, 0xc
jb 0x54fa04
jmp 0x54fa6b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00454ec0
mov eax, edi
mov ecx, 0xc
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0054f9c0
Function at 0x54fd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54fdec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x836c9187a3726994
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xcfaa966c87836c91
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb080a08040c0c0b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x507080003080505
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x54fd8f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x12]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x12]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x54fdbc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x54fddf
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x54fd72
jmp 0x54fdd3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00454ec0
mov eax, edi
mov ecx, 0xd
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0054fd20

Function at 0x54fe00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54ff1d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x40415a5447375624
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5a465f4965766966
mov qword [rsp + 0x26], rdx
movabs rdx, 0x53656c3e5a465f49
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5b6418633265403c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x515171519020014
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd19081b0c020515
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71418160210180d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7010f0e040e0e02
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b0e080f141a180f
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x54fec0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x54feed
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x54ff10
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1c
jb 0x54fe9d
jmp 0x54ff04
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.00443420
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1c
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.0054fe00
Function at 0x551860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x551927
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa99ab8460b4374a8
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xef176946
movabs rdx, 0xb05000b07040603
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40b030a07030b05
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5518c8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x6e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x6e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x5518f7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x55191a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x5518ab
jmp 0x55190e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00454ec0
mov eax, edi
mov ecx, 0xc
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00551860

Function at 0x551a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x551b08
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7b64705f7583746b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8e748896516f5c79
mov qword [rsp + 0x21], rdx
movabs rdx, 0x808e748896516f5c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x817365635d5f9996
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40d000812090506
mov qword [rsp + 0x32], rdx
movabs rdx, 0x130214000b06110f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x18080706080c1302
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0f091810041311
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x551aab
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x551ad8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x551afb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x551a8e
jmp 0x551aef
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00454ec0
mov eax, edi
mov ecx, 0x19
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00551a00
Function at 0x5530c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x55321d
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x750aea35fbab852
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6fa2cb04614e97b6
mov qword [rsp + 0x21], rdx
movabs rdx, 0x768da4c6eeddd96f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4eb8aab792f84e83
mov qword [rsp + 0x30], rdx
movabs rdx, 0xaf85ca5577656d61
mov qword [rsp + 0x38], rdx
movabs rdx, 0xabc574eb74531d74
mov qword [rsp + 0x40], rdx
movabs rdx, 0x220305071203261d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x24070426022d2d2d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a11282b150e1112
mov qword [rsp + 0x58], rdx
movabs rdx, 0x19040907171a0710
mov qword [rsp + 0x60], rdx
movabs rdx, 0x222b120825251901
mov qword [rsp + 0x68], rdx
movabs rdx, 0xc1301041c1c141b
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1713222e280d1705
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x5531c0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0x38
jge 0x5531ed
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x553210
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x2f
jb 0x55319e
jmp 0x553204
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2f
call fcn.00443420
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.00454ec0
mov eax, edi
mov ecx, 0x2f
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.005530c0

Function at 0x5542a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55436c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x652c1c4753431815
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x422b75f6
movabs rdx, 0x103000a0306080a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0b040300050103
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x554305
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x55433c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x55435f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1a]
cmp rsi, 0xc
jb 0x5542eb
jmp 0x554353
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00454ec0
mov eax, edi
mov ecx, 0xc
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.005542a0