joyce8/EMBER2024-capa huggingface dataset:
Function at 0x519100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5191ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x61e653aa506172ed
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3ac761e653aa5061
mov qword [rsp + 0x30], rdx
movabs rdx, 0x658ed4e19464cdd0
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb090a0310060f10
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd04060f0b090a03
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6000d060b0a080e
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x51918d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 - 0x61]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 - 0x61]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x14
jge 0x5191ba
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5191dd
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x519170
jmp 0x5191d1
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460fc0
mov eax, edi
mov ecx, 0x12
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00519100

Function at 0x519fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51a0bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe7319959dcb6557
mov qword [rsp + 0x39], rdx
movabs rdx, 0x64db61745395e80e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xcd226954d9066261
mov qword [rsp + 0x48], rdx
movabs rdx, 0x916081104040903
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x307160405100211
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1502030716040510
mov qword [rsp + 0x29], rdx
movabs rdx, 0x515110d0d120504
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x51a060
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x51a08d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x51a0b0
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x51a03f
jmp 0x51a0a4
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0045b720
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00460fc0
mov eax, edi
mov ecx, 0x17
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.00519fc0
Function at 0x51a3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51a4aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x616f0c205d167249
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6421616f0c205d16
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1da63eecd132a0b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110e060f05110305
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc02100b0d06110e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb080a0a0d0f1106
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x51a44d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x68]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x68]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x16
jge 0x51a47a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x51a49d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x51a430
jmp 0x51a491
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460fc0
mov eax, edi
mov ecx, 0x12
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0051a3c0

Function at 0x51bac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51bbdd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6f742bb6d7202ee6
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xfe7453f2eaafe1ea
mov qword [rsp + 0x46], rdx
movabs rdx, 0x16efe7453f2eaaf
mov qword [rsp + 0x48], rdx
movabs rdx, 0x445adfed207b5b01
mov qword [rsp + 0x50], rdx
movabs rdx, 0x181709070f131919
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x30a181709070f13
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x40013190511140b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x17190f16110c1905
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x908120b09170512
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x51bb80
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x51bbad
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x51bbd0
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x51bb5d
jmp 0x51bbc4
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0045b720
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1a
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.0051bac0
Function at 0x51c640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51c748
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd67483bbbb20c857
mov qword [rsp + 0x36], rdx
movabs rdx, 0xaad41f20e36953df
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x64d8aad41f20e369
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe9d74b5420dcb661
mov qword [rsp + 0x48], rdx
movabs rdx, 0x19040f0d10090501
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x140819170f03070e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30f140819170f03
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1917100f1303180b
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x51c6eb
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 - 0x51]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x1a
jge 0x51c718
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x51c73b
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x1a
jb 0x51c6ce
jmp 0x51c72f
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.0045b720
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1a
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0051c640

Function at 0x51ca80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51cb6a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x150ed94c2e7461ce
mov qword [rsp + 0x32], rdx
movabs rdx, 0x2e61617416b6150e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65266954356420e0
mov qword [rsp + 0x40], rdx
movabs rdx, 0x508031407060704
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc0611090e0508
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd0f0c0905110500
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x51cb0d
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0x5a]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0x5a]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x51cb3a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x51cb5d
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x51caf0
jmp 0x51cb51
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00460fc0
mov eax, edi
mov ecx, 0x16
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0051ca80
Function at 0x51d880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51d99a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x11ba61c3084e6586
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x53206570d6a6d10e
mov qword [rsp + 0x44], rdx
movabs rdx, 0xd5cda36453206570
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb324e60420af7661
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1507030b1a030007
mov qword [rsp + 0x18], rdx
movabs rdx, 0x101302021507030b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x909181302081215
mov qword [rsp + 0x24], rdx
movabs rdx, 0x13130418111900
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x816161a06021b0a
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x51d937
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x24
jge 0x51d969
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x51d98d
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0x1c
jb 0x51d91d
jmp 0x51d981
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.0045b720
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1c
call fcn.00460fc0
nop
call fcn.0045ece0
nop
jmp fcn.0051d880

Function at 0x51f1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51f2aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd3b2a372a57375d2
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1ebd3b2a372a573
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa8b385a763a0bd65
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc07090e0f000e09
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe0c03090b0e0411
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60d1007050f1008
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x51f24d
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x18
jge 0x51f27a
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x51f29d
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x51f230
jmp 0x51f291
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460fc0
mov eax, edi
mov ecx, 0x12
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0051f1c0
Function at 0x522500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5225ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x20484c6f6672545d
mov qword [rsp + 0x33], rdx
movabs rdx, 0x646e14624320484c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x716d46652032695e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x61112050a06080f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe12061114090611
mov qword [rsp + 0x23], rdx
movabs rdx, 0x6000d050a01110e
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x52258d
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 + 0x28]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 + 0x28]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x16
jge 0x5225ba
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5225dd
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x522570
jmp 0x5225d1
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460fc0
mov eax, edi
mov ecx, 0x15
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00522500

Function at 0x527060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52715d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xbaf478e8dfa6e343
mov qword [rsp + 0x39], rdx
movabs rdx, 0xe4e320a16f72a2ba
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa872d8a20dc3dc20
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10d0e120600120d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x140408000b031400
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1316101014021404
mov qword [rsp + 0x29], rdx
movabs rdx, 0xb1112121007010d
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x527100
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x52712d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x527150
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x5270df
jmp 0x527144
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0045b720
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00460fc0
mov eax, edi
mov ecx, 0x17
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.00527060
Function at 0x5289e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x528a9e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xbe64699d61918e48
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x90c49bb7
movabs rdx, 0x70002040b080a04
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x9010b00
xor eax, eax
jmp 0x528a41
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x528a6e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x528a91
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x528a24
jmp 0x528a85
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460fc0
mov eax, edi
mov ecx, 0xc
call fcn.00460fc0
nop
nop
call fcn.0045ece0
jmp fcn.005289e0

Function at 0x52b880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xb960cf32eeeda786
mov qword [rsp + 0x20], rdx
movabs rdx, 0x700020407000200
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x52b8cf
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x1b]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x52b8fa
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x52b935
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x52b8b3
jmp 0x52b929
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x52b913
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x52b907
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00460fc0
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00460fc0
nop
int3

Function at 0x52d980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52da5d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x246f02724e0f3dff
mov qword [rsp + 0x31], rdx
movabs rdx, 0x316c083f40071424
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0c010a01050200
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x80208080e0c010a
mov qword [rsp + 0x21], rdx
movabs rdx, 0xe0e07000b030309
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x52da00
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x52da2d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x52da50
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x52d9e2
jmp 0x52da44
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460fc0
mov eax, edi
mov ecx, 0xf
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.0052d980
Function at 0x52f9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52fa66
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6f73796f7fe465f8
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7343ccde
movabs rdx, 0x5000b0809030b02
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x8000902
xor eax, eax
jmp 0x52fa00
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x52fa32
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x52fa57
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
cmp rsi, 0xc
jb 0x52f9e4
jmp 0x52fa4b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460fc0
mov eax, edi
mov ecx, 0xc
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.0052f9a0

Function at 0x530700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53082c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6d836cad56886547
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x656d836cad568865
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe56d8846a09495dd
mov qword [rsp + 0x48], rdx
movabs rdx, 0x92ce9265ba926cb6
mov qword [rsp + 0x50], rdx
movabs rdx, 0x578ca29e6f8474dc
mov qword [rsp + 0x58], rdx
movabs rdx, 0x410110b090e0919
mov qword [rsp + 0x19], rdx
movabs rdx, 0x131d160f1e190410
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x170a18140c041717
mov qword [rsp + 0x27], rdx
movabs rdx, 0xb1b060b020c1802
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x101f1e041a0a1f17
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x5307c6
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x43]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x26
jge 0x5307fc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x21
jae 0x53081f
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x43]
cmp rsi, 0x21
jb 0x5307ac
jmp 0x530813
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x21
call fcn.0045b720
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00460fc0
mov eax, edi
mov ecx, 0x21
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00530700
Function at 0x531140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53120c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa599656098609ede
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x5774c265ada59965
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2070301080a070a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa00000004060207
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x5311af
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0xe
jge 0x5311dc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5311ff
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x531192
jmp 0x5311f3
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00460fc0
mov eax, edi
mov ecx, 0xd
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.00531140

Function at 0x532440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5324fe
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4f4663636f6c3755
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4645666c
movabs rdx, 0x9090b090701010b
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x5090701
xor eax, eax
jmp 0x5324a1
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 0x18]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 0x18]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x5324ce
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5324f1
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x532484
jmp 0x5324e5
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460fc0
mov eax, edi
mov ecx, 0xc
call fcn.00460fc0
nop
nop
call fcn.0045ece0
jmp fcn.00532440
Function at 0x532de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x532edb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e21cc68776572d3
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6d6e6fe069f86e21
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc9650f6c4230e4b5
mov qword [rsp + 0x40], rdx
movabs rdx, 0x503100303080a0f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x604080808041000
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1415060408080804
mov qword [rsp + 0x22], rdx
movabs rdx, 0x40e0008130e150e
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x532e79
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x1a
jge 0x532eab
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x532ece
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
cmp rsi, 0x16
jb 0x532e5f
jmp 0x532ec2
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00460fc0
mov eax, edi
mov ecx, 0x16
call fcn.00460fc0
nop
nop dword [rax + rax]
call fcn.0045ece0
jmp fcn.00532de0

Function at 0x533d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x533dbd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6512414f1f411d57
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6074
movabs rdx, 0x909090404060103
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x1050301
xor eax, eax
jmp 0x533d60
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x533d8d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x533db0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x533d43
jmp 0x533da4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0045b720
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460fc0
mov eax, edi
mov ecx, 0xa
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.00533d00