joyce8/EMBER2024-capa huggingface dataset:
Function at 0x529100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5291f6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x16b20cebf065851d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x646ea10f5320e716
mov qword [rsp + 0x20], rdx
movabs rdx, 0x656d8e0720118b07
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40001110f070607
mov qword [rsp + 0x30], rdx
movabs rdx, 0x14010c0410040b05
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1310040111081403
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x529190
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x52
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x5291c2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5291e9
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x52
add r8d, edx
cmp rsi, 0x17
jb 0x529176
nop
jmp 0x5291dd
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461e80
mov eax, edi
mov ecx, 0x17
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.00529100
Function at 0x52a8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52a9b6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x970200090d74b541
mov qword [rsp + 0x19], rdx
movabs rdx, 0x640fdaf7f920fd97
mov qword [rsp + 0x20], rdx
movabs rdx, 0x909e69c52064da0d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x15130b1601010113
mov qword [rsp + 0x30], rdx
movabs rdx, 0x130c130d070b030d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0f08050a100406
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x52a950
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x4d
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x52a982
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x52a9a9
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x4d
add r8d, edx
cmp rsi, 0x17
jb 0x52a936
nop
jmp 0x52a99d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461e80
mov eax, edi
mov ecx, 0x17
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.0052a8c0

Function at 0x52ada0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52ae96
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x3c057436cc42dc47
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x883c057436cc42dc
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa32c6922e8c72361
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf0a04040406070d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0603080f0a0404
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100c0d070b0b0f01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x52ae33
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x52ae62
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x52ae89
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x52ae16
nop
jmp 0x52ae7d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461e80
mov eax, edi
mov ecx, 0x11
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.0052ada0
Function at 0x52cb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52cc76
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xa69e6344f06d8e52
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa0d69774c3a69e63
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf8a8690320ddff97
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4010a0d0f040b0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x140f130307041106
mov qword [rsp + 0x38], rdx
movabs rdx, 0x614060e0f0c0813
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x52cc13
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x2b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x2b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x52cc42
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x52cc69
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x52cbf6
nop
jmp 0x52cc5d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461e80
mov eax, edi
mov ecx, 0x15
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.0052cb80

Function at 0x52dca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52dd96
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x745ab257b1bb6c0c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xba7361745ab257b1
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc3b369541171b5fa
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb090e0605000212
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9060a0b040c0b04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1050a0d0d0e1103
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x52dd30
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffff9a
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x52dd62
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x52dd89
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffff9a
add r8d, edx
cmp rsi, 0x13
jb 0x52dd16
nop
jmp 0x52dd7d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461e80
mov eax, edi
mov ecx, 0x13
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.0052dca0
Function at 0x52ddc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52dee6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xe9e594dfe642df9a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6eda1cbacd46e7ee
mov qword [rsp + 0x25], rdx
movabs rdx, 0x646eda1cbacd46e7
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf06db854d964b2a3
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd04160e0412080c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x40c0d04160e0412
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20a14050b040e0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40a070d110b000b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa06110309180e01
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x52de80
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x22
jge 0x52dead
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x52ded4
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x52de63
jmp 0x52dec8
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0052ddc0

Function at 0x52df00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52e012
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x76d69a6167220442
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6196681a266cffe4
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9e6e6196681a266c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x396d690f24643ff1
mov qword [rsp + 0x30], rdx
movabs rdx, 0x507110506150d16
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb050c0805110e08
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe01110c16111202
mov qword [rsp + 0x48], rdx
movabs rdx, 0x70e191302021309
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x52dfb1
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x5f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x5f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x52dfde
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x52e005
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x52df94
jmp 0x52dff9
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461e80
mov eax, edi
mov ecx, 0x1a
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0052df00
Function at 0x52e160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52e256
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x28170417c7c8c746
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57be28170417c7c8
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc72ac30320d57236
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8080d0f110d0908
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60106020304050e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70609080a10040c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x52e1f3
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x52e222
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x52e249
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x52e1d6
nop
jmp 0x52e23d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461e80
mov eax, edi
mov ecx, 0x12
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.0052e160

Function at 0x52e280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52e3a8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xf919f0781f0cf443
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20ea1066693e61b6
mov qword [rsp + 0x23], rdx
movabs rdx, 0xed740509e920ea10
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9e6dee5467647b85
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1603060308120218
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1608040d08151112
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1405181306110a13
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130a0e1c071c0711
mov qword [rsp + 0x50], rdx
movabs rdx, 0x21006010d151a03
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x52e340
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x4d
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x52e371
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x52e39b
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x4d
add r8d, edx
cmp rsi, 0x1d
jb 0x52e323
jmp 0x52e38f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461e80
mov eax, edi
mov ecx, 0x1d
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0052e280
Function at 0x52e3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52e4c8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x4e0c413e61772f48
mov qword [rsp + 0x18], rdx
movabs rdx, 0xfa99b874533b4e0c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x42f82b54421fdd61
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60d100b070c0c10
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x406151110150d13
mov qword [rsp + 0x36], rdx
movabs rdx, 0x80b040615111015
mov qword [rsp + 0x38], rdx
movabs rdx, 0x101011405040f11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x52e460
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x13
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x52e491
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x52e4bb
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x13
add r8d, edx
cmp rsi, 0x16
jb 0x52e445
jmp 0x52e4af
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461e80
mov eax, edi
mov ecx, 0x16
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0052e3c0
Function at 0x52ea60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52eb68
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x16466c56662d4cff
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa26e454e5316466c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x656d12ebfa2e7237
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10100f070c070d11
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9040d0f09021000
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf0d09040d0f0902
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0107120a0c060f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x52eb02
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x39]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x39]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1a
jge 0x52eb2f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x52eb5b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x52eae5
jmp 0x52eb4f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461e80
mov eax, edi
mov ecx, 0x15
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0052ea60
Function at 0x52efe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52f112
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xf0e9f4e6089d6183
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5e6d656d698b20e0
mov qword [rsp + 0x25], rdx
movabs rdx, 0x663669aa75e7ef5e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2e8fee73fed77200
mov qword [rsp + 0x34], rdx
movabs rdx, 0x302151d0a0a1313
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1a171e0305120317
mov qword [rsp + 0x44], rdx
movabs rdx, 0x11070e031a171e03
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa1c0510131b0002
mov qword [rsp + 0x50], rdx
movabs rdx, 0x306001a0312151e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x204020f1908131d
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x52f0ac
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x56
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x2c
jge 0x52f0dd
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x52f105
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x56
add r8d, edx
cmp rsi, 0x1f
jb 0x52f092
jmp 0x52f0f8
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1f
call fcn.0044ba20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x1f
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0x1f
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0052efe0

Function at 0x533880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x533968
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xd58b6e19731822e4
mov qword [rsp + 0x19], rdx
movabs rdx, 0x17d26d8d23d58b6e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9090101040b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x800000009090101
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90c040207040406
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x533901
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x3d
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x533932
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x53395b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x3d
add r8d, edx
cmp rsi, 0xd
jb 0x5338e7
jmp 0x53394f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461e80
mov eax, edi
mov ecx, 0xd
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00533880
Function at 0x53d860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53d992
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xfaa56520f0696b00
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x80faa56520f0696b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8603598a73eaff98
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc470f9f473f56482
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6e4aff83e9656874
mov qword [rsp + 0x38], rdx
movabs rdx, 0x13080c0303101e0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa181f111e0c07
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60f090f1309131d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x201816151c1e1e1f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x707070e030b0e07
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x53d92c
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x5c
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x28
jge 0x53d95d
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x53d985
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x5c
add r8d, edx
cmp rsi, 0x21
jb 0x53d912
jmp 0x53d978
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x21
call fcn.0044ba20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0x21
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0053d860

Function at 0x53e4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53e5b2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x32849c7d66ce7d6b
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x886c9a47
movabs rdx, 0x305090205050205
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80805060401020b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x53e54b
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xffffffd9
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x53e57c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x53e5a5
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xffffffd9
add r8d, edx
cmp rsi, 0xc
jb 0x53e531
jmp 0x53e597
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0053e4e0
Function at 0x53f520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53f616
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x75baafbcae730bf1
mov qword [rsp + 0x19], rdx
movabs rdx, 0xaa75baafbcae730b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x36a091adb33d3e63
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10b0006010a0b01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa05000e0c03010b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60d080b040f040d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x53f5b0
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffaa
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x53f5e2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x53f609
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffaa
add r8d, edx
cmp rsi, 0x11
jb 0x53f596
nop
jmp 0x53f5fd
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461e80
mov eax, edi
mov ecx, 0x11
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.0053f520

Function at 0x53f640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53f748
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x24507c644174465d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3d285d3d24507c64
mov qword [rsp + 0x22], rdx
movabs rdx, 0x73144f736b3b6856
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60f00000d080705
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0a090a000d0911
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa12120b0b050e0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90b0501010b0f0c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x53f6e0
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xfffffff6
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x53f711
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x53f73b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xfffffff6
add r8d, edx
cmp rsi, 0x14
jb 0x53f6c5
jmp 0x53f72f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461e80
mov eax, edi
mov ecx, 0x14
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0053f640
Function at 0x53f940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53fa28
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x11193ae8d51a6547
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1f61f66e689e747c
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc0c05040d040a07
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf0603080f070c0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2080d0c0c030c0c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x53f9c1
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x36
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x53f9f2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x53fa1b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x36
add r8d, edx
cmp rsi, 0x10
jb 0x53f9a7
jmp 0x53fa0f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461e80
mov eax, edi
mov ecx, 0x10
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0053f940