joyce8/EMBER2024-capa huggingface dataset:
Function at 0x534b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x534c07
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x888262696c737544
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9a976c656b7a9465
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70d0d0f0509070d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6020d070d0e050a
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x534ba9
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
mov byte [rsp + rdi + 0x28], r9b
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x534bd7
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x10
jae 0x534bfa
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
cmp rsi, 0x10
jb 0x534b92
jmp 0x534bee
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045cd80
mov eax, edi
mov ecx, 0x10
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00534b40

Function at 0x5351e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5352ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4acc4c2e282f7551
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x34764acc4c2e282f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xea2fe9dd744b6563
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40e0f1110040906
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7060510040e0f11
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3020c0203020610
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x53526d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x14
jge 0x53529a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5352bd
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x535250
jmp 0x5352b1
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00449780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045cd80
mov eax, edi
mov ecx, 0x12
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.005351e0
Function at 0x535800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5358cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x50da51ef6ee572ed
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xfe68fc50
movabs rdx, 0xa09050609030a08
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6090309050204
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x535865
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x53589c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x5358bf
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x72]
cmp rsi, 0xb
jb 0x53584b
jmp 0x5358b3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045cd80
mov eax, edi
mov ecx, 0xb
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00535800

Function at 0x537660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x537787
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x6de6ef05f6294c7d
mov qword [rsp + 0x47], rdx
movabs rdx, 0x656de6ef05f6294c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa9d301a0656d1587
mov qword [rsp + 0x50], rdx
movabs rdx, 0x756f4d65080104e3
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb6f88305d2507474
mov qword [rsp + 0x60], rdx
movabs rdx, 0x30f001c191d1e03
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x120e05060f190101
mov qword [rsp + 0x27], rdx
movabs rdx, 0xd111c1920140409
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x10040a1304020109
mov qword [rsp + 0x37], rdx
movabs rdx, 0x11140f041d1f1001
mov qword [rsp + 0x3f], rdx
xor eax, eax
jmp 0x537729
movzx r9d, byte [rsp + rsi + 0x47]
sub r9d, edx
lea edx, [r9 - 0x6b]
mov byte [rsp + rdi + 0x47], dl
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x47], dl
add rax, 2
cmp rax, 0x28
jge 0x537757
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x21
jae 0x53777a
movzx r8d, byte [rsp + rdi + 0x47]
sub r8d, edx
cmp rsi, 0x21
jb 0x53770c
jmp 0x53776e
xor eax, eax
lea rbx, [rsp + 0x47]
mov ecx, 0x21
call fcn.00449780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.0045cd80
mov eax, edi
mov ecx, 0x21
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00537660
Function at 0x538240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5382fe
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x655971463c5c5d67
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x57624565
movabs rdx, 0x102010103060509
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x1010600
xor eax, eax
jmp 0x5382a1
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 + 0x13]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 + 0x13]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x5382ce
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5382f1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x538284
jmp 0x5382e5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00449780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045cd80
mov eax, edi
mov ecx, 0xb
call fcn.0045cd80
nop
nop
call fcn.0045aaa0
jmp fcn.00538240

Function at 0x539300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53941a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x89bfc49b46a69553
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa0746170adbc986e
mov qword [rsp + 0x46], rdx
movabs rdx, 0x95a2a0746170adbc
mov qword [rsp + 0x48], rdx
movabs rdx, 0x94bd64ae71d3ea42
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1507021613020c14
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa0b050615070216
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x161110051801190b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1050904020f0c06
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa18060502180409
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x5393b7
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x40]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x24
jge 0x5393e9
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x53940d
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x40]
cmp rsi, 0x1a
jb 0x53939d
jmp 0x539401
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00449780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045cd80
mov eax, edi
mov ecx, 0x1a
call fcn.0045cd80
nop
call fcn.0045aaa0
nop
jmp fcn.00539300
Function at 0x539440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x539507
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xdd646bc2f1ccc0e3
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x62d5d06c
movabs rdx, 0x1060b030a040a09
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x103070400020106
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x5394a8
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jge 0x5394d7
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x5394fa
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x53948b
jmp 0x5394ee
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045cd80
mov eax, edi
mov ecx, 0xc
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00539440

Function at 0x53b880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53b9a7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x41f7420896c6921
mov qword [rsp + 0x45], rdx
movabs rdx, 0xca20c1041f742089
mov qword [rsp + 0x48], rdx
movabs rdx, 0x201c6fa10ee7ffd5
mov qword [rsp + 0x50], rdx
movabs rdx, 0x20ea72cf2c707507
mov qword [rsp + 0x58], rdx
movabs rdx, 0x656e9e6c14801f2c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x71c03131d07070f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe0020000c08071c
mov qword [rsp + 0x25], rdx
movabs rdx, 0x171e160b0e191e0a
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x190e19190606040d
mov qword [rsp + 0x35], rdx
movabs rdx, 0xc1c1304111b161e
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x53b949
movzx r9d, byte [rsp + rsi + 0x45]
sub r9d, edx
lea edx, [r9 + 0x72]
mov byte [rsp + rdi + 0x45], dl
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x45], dl
add rax, 2
cmp rax, 0x26
jge 0x53b977
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x23
jae 0x53b99a
movzx r8d, byte [rsp + rdi + 0x45]
sub r8d, edx
cmp rsi, 0x23
jb 0x53b92c
jmp 0x53b98e
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x23
call fcn.00449780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.0045cd80
mov eax, edi
mov ecx, 0x23
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0053b880
Function at 0x540b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x48]
cmp r12, qword [r14 + 0x10]
jbe 0x540cbb
push rbp
mov rbp, rsp
sub rsp, 0xc0
movabs rdx, 0xe642614993b370e0
mov qword [rsp + 0x79], rdx
movabs rdx, 0xb475ff706f6020e6
mov qword [rsp + 0x80], rdx
movabs rdx, 0x1c36840702b3f6d8
mov qword [rsp + 0x88], rdx
movabs rdx, 0x2dcefe6f3e3ad257
mov qword [rsp + 0x90], rdx
movabs rdx, 0x6e6973d462c36e62
mov qword [rsp + 0x98], rdx
movabs rdx, 0xf65269c52a659367
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x6b632bf1e6f71a20
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x4aa9c532282e2165
mov qword [rsp + 0xb0], rdx
movabs rdx, 0x29f1b335fd3d4578
mov qword [rsp + 0xb8], rdx
movabs rdx, 0x3b3204112a0b2a3f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3e101a3c1701183d
mov qword [rsp + 0x25], rdx
lea rdi, [rsp + 0x29]
lea rsi, [0x005ef408]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045d3ba
mov rbp, qword [rbp]
xor eax, eax
jmp 0x540c57
movzx r9d, byte [rsp + rsi + 0x79]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x79], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x79], dl
add rax, 2
cmp rax, 0x5c
jge 0x540c88
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x540cae
movzx r8d, byte [rsp + rdi + 0x79]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x47
jb 0x540c3a
jmp 0x540ca2
xor eax, eax
lea rbx, [rsp + 0x79]
mov ecx, 0x47
call fcn.00449780
add rsp, 0xc0
pop rbp
ret
mov eax, esi
mov ecx, 0x47
call fcn.0045cd80
mov eax, edi
mov ecx, 0x47
call fcn.0045cd80
nop
nop dword [rax + rax]
call fcn.0045aaa0
jmp fcn.00540b40

Function at 0x542a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x542b3a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x13201c6f20121b75
mov qword [rsp + 0x40], rdx
movabs rdx, 0xcf6e6c646573e2b3
mov qword [rsp + 0x48], rdx
movabs rdx, 0x792266be18b3274
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6e09a97417c0c67f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x51916161812151a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x21d051916161812
mov qword [rsp + 0x20], rdx
movabs rdx, 0x12051311010f0d09
mov qword [rsp + 0x28], rdx
movabs rdx, 0x16111b091811051e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x81511011707021b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x542ad7
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x22
jge 0x542b09
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x542b2d
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0x20
jb 0x542abd
jmp 0x542b21
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x20
call fcn.00449780
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x20
call fcn.0045cd80
mov eax, edi
mov ecx, 0x20
call fcn.0045cd80
nop
call fcn.0045aaa0
nop
jmp fcn.00542a20
Function at 0x542b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x542c7a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x13201c6f20121b75
mov qword [rsp + 0x40], rdx
movabs rdx, 0xcf6e6c646573e2b3
mov qword [rsp + 0x48], rdx
movabs rdx, 0x792266be18b3274
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6e09a97417c0c67f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x51916161812151a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x21d051916161812
mov qword [rsp + 0x20], rdx
movabs rdx, 0x12051311010f0d09
mov qword [rsp + 0x28], rdx
movabs rdx, 0x16111b091811051e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x81511011707021b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x542c17
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x22
jge 0x542c49
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x542c6d
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0x20
jb 0x542bfd
jmp 0x542c61
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x20
call fcn.00449780
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x20
call fcn.0045cd80
mov eax, edi
mov ecx, 0x20
call fcn.0045cd80
nop
call fcn.0045aaa0
nop
jmp fcn.00542b60

Function at 0x5430c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x543186
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2064f73e61346e69
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x68babf70
movabs rdx, 0x5090a0a0402090a
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x5050a09
xor eax, eax
jmp 0x543120
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x543152
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x543177
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0xc
jb 0x543104
jmp 0x54316b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.00449780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045cd80
mov eax, edi
mov ecx, 0xc
nop
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.005430c0
Function at 0x543620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54373a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x94a4ac8c20808ea9
mov qword [rsp + 0x44], rdx
movabs rdx, 0x4cc788ac73d973b5
mov qword [rsp + 0x4c], rdx
movabs rdx, 0xd697969c4cc788ac
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6465a57869c8c459
mov qword [rsp + 0x58], rdx
movabs rdx, 0x50f150e16060f13
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe0c0807000a050f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x415191011070012
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb140d121402100f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x4180601020b0719
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x5436d7
movzx r9d, byte [rsp + rsi + 0x44]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x48]
mov byte [rsp + rdi + 0x44], dl
mov byte [rsp + rsi + 0x44], r8b
add rax, 2
cmp rax, 0x26
jge 0x543709
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x54372d
movzx r8d, byte [rsp + rdi + 0x44]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x48]
cmp rsi, 0x1c
jb 0x5436bd
jmp 0x543721
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x1c
call fcn.00449780
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0045cd80
mov eax, edi
mov ecx, 0x1c
call fcn.0045cd80
nop
call fcn.0045aaa0
nop
jmp fcn.00543620

Function at 0x543b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x543bc7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd774a42fbc9b99c0
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x568ba3d7
movabs rdx, 0xa020900070503
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x50803010a07000a
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x543b68
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x17]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x17]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x543b97
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x543bba
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x543b4b
jmp 0x543bae
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045cd80
mov eax, edi
mov ecx, 0xb
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00543b00
Function at 0x54afe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54b0ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6168feaafbb17aac
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x6eb30500
movabs rdx, 0x9090a0401030308
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80209040504
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x54b045
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x54b07c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x54b09f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0xc
jb 0x54b02b
jmp 0x54b093
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045cd80
mov eax, edi
mov ecx, 0xc
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0054afe0

Function at 0x54da80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54db4c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6168feaafbb17aac
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x6eb30500
movabs rdx, 0x9090a0401030308
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80209040504
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x54dae5
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x54db1c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x54db3f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0xc
jb 0x54dacb
jmp 0x54db33
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045cd80
mov eax, edi
mov ecx, 0xc
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0054da80
Function at 0x557300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5573ec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x37173534332e3130
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x3737173534332e31
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2446b83139b9c1c0
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0c0e080d050610
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2060a0c0e080d05
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa0e0b1006050d09
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x55738a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x76]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x5573bc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5573df
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x76]
cmp rsi, 0x11
jb 0x557370
jmp 0x5573d3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00449780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045cd80
mov eax, edi
mov ecx, 0x11
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00557300

Function at 0x559660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55974c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xcf6159cdc6db3192
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x38cf6159cdc6db31
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5846bd5a43634139
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60606000402050b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb07060506060600
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd040e0d040503
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x5596ea
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x14
jge 0x55971c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x55973f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0x11
jb 0x5596d0
jmp 0x559733
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00449780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045cd80
mov eax, edi
mov ecx, 0x11
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00559660