joyce8/EMBER2024-capa huggingface dataset:
Function at 0x527380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xbf847e54b9743786
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x500030403040301
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x705
xor eax, eax
jmp 0x5273d4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0xe]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x527408
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x527445
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0xe]
nop dword [rax + rax]
cmp rbx, 8
jb 0x5273ba
jmp 0x527437
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x527421
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x527415
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460ec0
mov eax, esi
mov ecx, 8
call fcn.00460ec0
nop
int3

Function at 0x528180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x464a0545428b2ba6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x402070302030401
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x207
xor eax, eax
jmp 0x5281d4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x528208
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x528245
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x58]
nop dword [rax + rax]
cmp rbx, 8
jb 0x5281ba
jmp 0x528237
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x528221
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x528215
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460ec0
mov eax, esi
mov ecx, 8
call fcn.00460ec0
nop
int3
Function at 0x529160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x310905c091df7986
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4070003040300
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x5291ad
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x5291dc
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x529217
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x54]
cmp rbx, 8
jb 0x529193
jmp 0x52920b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5291f5
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x5291e9
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00460ec0
mov eax, esi
mov ecx, 8
nop
call fcn.00460ec0
nop
int3

Function at 0x52a300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x21f93f7f2dac2be3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1020506060203
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2050307
xor eax, eax
jmp 0x52a357
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0x79]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0x79]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x52a388
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x52a3c5
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x52a33b
jmp 0x52a3b7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x52a3a1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x52a395
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460ec0
mov eax, esi
mov ecx, 8
call fcn.00460ec0
nop
int3
Function at 0x52aa40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x759322683acbce1b
mov qword [rsp + 0x18], rax
movabs rax, 0x1df4fb3ea36db6c8
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x22]
movzx ecx, byte [rsp + 0x1b]
add eax, ecx
movzx ecx, byte [rsp + 0x1a]
movzx edx, byte [rsp + 0x21]
add ecx, edx
movzx edx, byte [rsp + 0x1d]
movzx ebx, byte [rsp + 0x20]
sub edx, ebx
movzx ebx, byte [rsp + 0x26]
movzx esi, byte [rsp + 0x27]
add ebx, esi
movzx esi, byte [rsp + 0x23]
movzx edi, byte [rsp + 0x1e]
xor esi, edi
movzx edi, byte [rsp + 0x1f]
movzx r8d, byte [rsp + 0x19]
sub edi, r8d
movzx r8d, byte [rsp + 0x18]
movzx r9d, byte [rsp + 0x24]
add r8d, r9d
movzx r9d, byte [rsp + 0x1c]
movzx r10d, byte [rsp + 0x25]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x52ab26
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x52ab1a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x52c340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xb37cf0d9c24fed34
mov qword [rsp + 0x20], rdx
movabs rdx, 0x104000701040100
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x52c38f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0xe]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x52c3ba
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x52c3f5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x52c373
jmp 0x52c3e9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x52c3d3
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x52c3c7
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00460ec0
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00460ec0
nop
int3
Function at 0x52c420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xffeac4b63692cd66
mov qword [rsp + 0x20], rdx
movabs rdx, 0x305040006010504
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x52c46f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x80]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x52c49a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x52c4d5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x52c453
jmp 0x52c4c9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x52c4b3
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x52c4a7
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00460ec0
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00460ec0
nop
int3

Function at 0x52d920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xa6bb193149f6d308
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x604030601020705
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2000306
xor eax, eax
jmp 0x52d975
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x50]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x52d9a8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x52d9e5
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x50]
nop dword [rax]
cmp rbx, 8
jb 0x52d95b
jmp 0x52d9d7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x52d9c1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x52d9b5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460ec0
mov eax, esi
mov ecx, 8
call fcn.00460ec0
nop
int3
Function at 0x52dd00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xb4d5e0d02ffd3c90
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x107050203060405
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1040103
xor eax, eax
jmp 0x52dd55
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x52dd88
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x52ddc5
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x3d]
nop dword [rax]
cmp rbx, 8
jb 0x52dd3b
jmp 0x52ddb7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x52dda1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x52dd95
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460ec0
mov eax, esi
mov ecx, 8
call fcn.00460ec0
nop
int3

Function at 0x52e740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xa750c2a2871b839f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x701010706050206
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x52e78f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 1]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 1]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x52e7ba
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x52e7f5
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x52e773
jmp 0x52e7e9
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x52e7d3
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x52e7c7
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00460ec0
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00460ec0
nop
int3
Function at 0x52eb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xc67b1b9a8ca8f41
mov qword [rsp + 0x18], rax
movabs rax, 0xd8df1809dfcbbec
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x25]
movzx ecx, byte [rsp + 0x21]
add eax, ecx
movzx ecx, byte [rsp + 0x1c]
movzx edx, byte [rsp + 0x26]
sub ecx, edx
movzx edx, byte [rsp + 0x1e]
movzx ebx, byte [rsp + 0x18]
add edx, ebx
movzx ebx, byte [rsp + 0x1a]
movzx esi, byte [rsp + 0x1f]
sub ebx, esi
movzx esi, byte [rsp + 0x23]
movzx edi, byte [rsp + 0x27]
add esi, edi
movzx edi, byte [rsp + 0x1d]
movzx r8d, byte [rsp + 0x24]
add edi, r8d
movzx r8d, byte [rsp + 0x1b]
movzx r9d, byte [rsp + 0x20]
xor r8d, r9d
movzx r9d, byte [rsp + 0x19]
movzx r10d, byte [rsp + 0x22]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x52ec66
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x52ec5a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x52f140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xa4fa4e86cfca43ed
mov qword [rsp + 0x20], rdx
movabs rdx, 0x604020103040300
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x52f18d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x52f1bc
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x52f1f7
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x1d]
cmp rbx, 8
jb 0x52f173
jmp 0x52f1eb
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x52f1d5
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x52f1c9
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00460ec0
mov eax, esi
mov ecx, 8
nop
call fcn.00460ec0
nop
int3
Function at 0x530300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xa80ce5000e32a939
mov qword [rsp + 0x18], rax
movabs rax, 0x82e66e1c154f2e6e
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x20]
movzx ecx, byte [rsp + 0x18]
add eax, ecx
movzx ecx, byte [rsp + 0x1c]
movzx edx, byte [rsp + 0x23]
sub ecx, edx
movzx edx, byte [rsp + 0x1f]
movzx ebx, byte [rsp + 0x26]
xor edx, ebx
movzx ebx, byte [rsp + 0x1e]
movzx esi, byte [rsp + 0x25]
add ebx, esi
movzx esi, byte [rsp + 0x1d]
movzx edi, byte [rsp + 0x21]
add esi, edi
movzx edi, byte [rsp + 0x19]
movzx r8d, byte [rsp + 0x24]
sub edi, r8d
movzx r8d, byte [rsp + 0x22]
movzx r9d, byte [rsp + 0x1a]
add r8d, r9d
movzx r9d, byte [rsp + 0x27]
movzx r10d, byte [rsp + 0x1b]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x5303e6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x5303da
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x531940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x5d50d965e63f7896
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x405030707030104
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x706
xor eax, eax
jmp 0x531994
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x37]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x5319c8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x531a05
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x37]
nop dword [rax + rax]
cmp rbx, 8
jb 0x53197a
jmp 0x5319f7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5319e1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5319d5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460ec0
mov eax, esi
mov ecx, 8
call fcn.00460ec0
nop
int3
Function at 0x532220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x3014e89fb61f3d3c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6000600060505
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x301
xor eax, eax
jmp 0x532276
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x43]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x43]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x5322a2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5322e5
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x53225a
nop
jmp 0x5322d6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5322c0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5322af
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00460ec0
mov eax, esi
mov ecx, 8
call fcn.00460ec0
nop
int3

Function at 0x532b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xf076196cbc34be9a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x500040001030102
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x202
xor eax, eax
jmp 0x532b94
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x73]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x532bc8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x532c05
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x73]
nop dword [rax + rax]
cmp rbx, 8
jb 0x532b7a
jmp 0x532bf7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x532be1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x532bd5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460ec0
mov eax, esi
mov ecx, 8
call fcn.00460ec0
nop
int3

Function at 0x5358e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5359a6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc66483be33160fd8
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xe
movabs rdx, 0x102000508070704
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 4
xor eax, eax
nop
jmp 0x535940
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x535972
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x535997
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4d]
cmp rsi, 9
jb 0x535922
jmp 0x53598b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00460ec0
mov eax, edi
mov ecx, 9
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005358e0
Function at 0x536160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x536238
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x754d3d2469746173
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x6c484748
movabs rdx, 0xa06050504080703
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5090a0605050408
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0405050106090a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5361d4
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x12
jge 0x536208
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x53622b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
nop
cmp rsi, 0xc
jb 0x5361ba
jmp 0x53621f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
mov eax, edi
mov ecx, 0xc
call fcn.00460ec0
nop
call fcn.0045ec40
nop dword [rax]
jmp fcn.00536160

Function at 0x5364c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53658c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x643010570d092015
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x4d4d
movabs rdx, 0x809030604000105
mov qword [rsp + 0x22], rdx
movabs rdx, 0x303050203010809
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x536524
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x18]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x53655c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x53657f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x18]
cmp rsi, 0xa
jb 0x53650a
jmp 0x536573
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460ec0
mov eax, edi
mov ecx, 0xa
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005364c0

Function at 0x536c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x536d47
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb9fb3262daa2bb91
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x6c6c
movabs rdx, 0x102000106030700
mov qword [rsp + 0x22], rdx
movabs rdx, 0x604060003000102
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x536ce7
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x26]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x26]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x536d17
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x536d3a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x536cca
jmp 0x536d2e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460ec0
mov eax, edi
mov ecx, 0xa
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00536c80
Function at 0x5385e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5386cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x72a50b6573a96cb8
mov qword [rsp + 0x18], rdx
movabs rdx, 0x7e7672a50b6573a9
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb98656cf918065bc
mov qword [rsp + 0x22], rdx
movabs rdx, 0x900050e0602060f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe020a050d100900
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9050c0c11050e02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x53866a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4a]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x53869c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5386bf
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4a]
cmp rsi, 0x12
jb 0x538650
jmp 0x5386b3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460ec0
mov eax, edi
mov ecx, 0x12
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005385e0

Function at 0x5391e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5392cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9e6d7265767e6c43
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x746b615d67699e6d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6e77695370707853
mov qword [rsp + 0x28], rdx
movabs rdx, 0x140108100802070c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100b0e15090c1102
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf060902110a0b10
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x53926a
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x23]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x18
jge 0x53929c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5392bf
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x23]
cmp rsi, 0x16
jb 0x539250
jmp 0x5392b3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00460ec0
mov eax, edi
mov ecx, 0x16
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005391e0