joyce8/EMBER2024-capa huggingface dataset:
Function at 0x523360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x2d5b63d827dae8c8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x507060306030201
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 6
xor eax, eax
jmp 0x5233b6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x29]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x29]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x5233e2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x523425
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x52339a
nop
jmp 0x523416
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x523400
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5233ef
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3

Function at 0x523440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x11716ce5369fa3bc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x401020001030704
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 3
xor eax, eax
jmp 0x523496
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x6e]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x6e]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x5234c2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x523505
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x52347a
nop
jmp 0x5234f6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5234e0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5234cf
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x523520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xcefd89b4a8dc0287
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x503040001050307
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 4
xor eax, eax
jmp 0x523576
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x5e]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x5e]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x5235a2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5235e5
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x52355a
nop
jmp 0x5235d6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5235c0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x5235af
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3

Function at 0x5240c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xf058f8cf72df0cb
mov qword [rsp + 0x18], rax
movabs rax, 0x5b4e28112d8e8ba6
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x20]
movzx ecx, byte [rsp + 0x19]
add eax, ecx
movzx ecx, byte [rsp + 0x23]
movzx edx, byte [rsp + 0x1c]
sub ecx, edx
movzx edx, byte [rsp + 0x26]
movzx ebx, byte [rsp + 0x1f]
sub edx, ebx
movzx ebx, byte [rsp + 0x1d]
movzx esi, byte [rsp + 0x1a]
sub ebx, esi
movzx esi, byte [rsp + 0x25]
movzx edi, byte [rsp + 0x24]
sub esi, edi
movzx edi, byte [rsp + 0x1b]
movzx r8d, byte [rsp + 0x1e]
xor edi, r8d
movzx r8d, byte [rsp + 0x21]
movzx r9d, byte [rsp + 0x22]
add r8d, r9d
movzx r9d, byte [rsp + 0x27]
movzx r10d, byte [rsp + 0x18]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x5241a6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x52419a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x5253c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xb7d5973e87389734
mov qword [rsp + 0x20], rdx
movabs rdx, 0x400030500040005
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x52540f
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi - 0x56]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x52543a
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x525475
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x5253f3
jmp 0x525469
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x525453
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x525447
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00454ec0
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
nop
int3

Function at 0x5255a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xf5c80dc3fb188531
mov qword [rsp + 0x18], rax
movabs rax, 0x1f573b9a91dd8782
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1d]
movzx ecx, byte [rsp + 0x21]
add eax, ecx
movzx ecx, byte [rsp + 0x23]
movzx edx, byte [rsp + 0x27]
add ecx, edx
movzx edx, byte [rsp + 0x1c]
movzx ebx, byte [rsp + 0x24]
sub edx, ebx
movzx ebx, byte [rsp + 0x1a]
movzx esi, byte [rsp + 0x25]
xor ebx, esi
movzx esi, byte [rsp + 0x26]
movzx edi, byte [rsp + 0x22]
add esi, edi
movzx edi, byte [rsp + 0x20]
movzx r8d, byte [rsp + 0x1f]
add edi, r8d
movzx r8d, byte [rsp + 0x19]
movzx r9d, byte [rsp + 0x18]
add r8d, r9d
movzx r9d, byte [rsp + 0x1b]
movzx r10d, byte [rsp + 0x1e]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x525686
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x52567a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x5256a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x69ca9b426f9d4010
mov qword [rsp + 0x18], rax
movabs rax, 0x60955b21655dc72
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x22]
movzx ecx, byte [rsp + 0x1f]
add eax, ecx
movzx ecx, byte [rsp + 0x26]
movzx edx, byte [rsp + 0x18]
add ecx, edx
movzx edx, byte [rsp + 0x21]
movzx ebx, byte [rsp + 0x25]
add edx, ebx
movzx ebx, byte [rsp + 0x19]
movzx esi, byte [rsp + 0x20]
xor ebx, esi
movzx esi, byte [rsp + 0x23]
movzx edi, byte [rsp + 0x27]
add esi, edi
movzx edi, byte [rsp + 0x24]
movzx r8d, byte [rsp + 0x1b]
sub edi, r8d
movzx r8d, byte [rsp + 0x1c]
movzx r9d, byte [rsp + 0x1d]
sub r8d, r9d
movzx r9d, byte [rsp + 0x1a]
movzx r10d, byte [rsp + 0x1e]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x525786
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x52577a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x526c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x9919c11510237e91
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x205040206060304
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x302
xor eax, eax
jmp 0x526c96
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x47]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x526cc2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x526d05
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x526c7a
nop
jmp 0x526cf6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x526ce0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x526ccf
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x527440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x527507
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa996f164688fa993
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x6cf4a211
movabs rdx, 0x306020702000408
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50a090101040a05
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5274a8
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x2a]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x5274d7
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x5274fa
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x52748b
jmp 0x5274ee
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00454ec0
mov eax, edi
mov ecx, 0xc
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00527440

Function at 0x52a260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52a35d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x70faf72cda2e543
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x98a3070faf72cda2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9f99aea133f1b37e
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa01030207080706
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9020f030b0f100a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x60b09020f030b0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb05040e0c0b0811
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x52a300
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x20]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x20]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x52a32d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x52a350
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x52a2df
jmp 0x52a344
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00454ec0
mov eax, edi
mov ecx, 0x12
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.0052a260
Function at 0x52b1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52b29d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf4a06567f80d6815
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6573a28872f4a065
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x570ab2695b6ed964
mov qword [rsp + 0x26], rdx
movabs rdx, 0x13090607100d0d10
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa00060e030d0b0a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x60a00060e030d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90a0d0610120902
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x52b240
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x52b26d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x52b290
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x52b21f
jmp 0x52b284
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00454ec0
mov eax, edi
mov ecx, 0x15
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.0052b1a0
Function at 0x52d8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52d992
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd361e4386caf2344
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5acd6e65c66fda38
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40b0e0804040507
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe020209090f010e
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x52d92c
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x72]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x52d95e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x52d985
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x72]
cmp rsi, 0x10
jb 0x52d912
jmp 0x52d975
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.00454ec0
mov eax, edi
mov ecx, 0x10
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0052d8c0

Function at 0x52f840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52f948
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x77496401b9746587
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8365ca96e5746ec8
mov qword [rsp + 0x27], rdx
movabs rdx, 0xb18365ca96e5746e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7e749980818f938d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80d04040414150c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120d140b18131008
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0815121503000d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1007161110140b10
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x52f8eb
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 1]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 1]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x52f918
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x52f93b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x52f8ce
jmp 0x52f92f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.00443420
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00454ec0
mov eax, edi
mov ecx, 0x19
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0052f840
Function at 0x531be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x531cfd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x3b532d662e34e304
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x230c1565e6e4c30a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1fbc230c1565e6e4
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc76567e8413e4f73
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa0a09030b0d1611
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe150a0a09030b0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10a0f11190f1405
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1308030803100003
mov qword [rsp + 0x48], rdx
movabs rdx, 0x302150711000a0d
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x531ca0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x531ccd
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x531cf0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1a
jb 0x531c7d
jmp 0x531ce4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.00443420
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1a
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.00531be0

Function at 0x533340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x533407
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x22346f063b672513
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7919e422346f063b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x607090304000708
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1000406
xor eax, eax
jmp 0x5333a8
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x5333d7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x5333fa
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x53338b
jmp 0x5333ee
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00454ec0
mov eax, edi
mov ecx, 0xb
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00533340
Function at 0x5348a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53496c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x55def1f265e670a6
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xd0c659e3
movabs rdx, 0x80b020502010407
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4090400090a06
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x534905
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7a]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x53493c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x53495f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7a]
cmp rsi, 0xc
jb 0x5348eb
jmp 0x534953
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00454ec0
mov eax, edi
mov ecx, 0xc
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.005348a0

Function at 0x534980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x534a66
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6972696e8c74f66a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7e6c9f41dca773aa
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3030b01030a08
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10a0d0b0003030b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50f000f0f080b0d
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x534a00
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x534a32
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x534a57
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2e]
cmp rsi, 0x10
jb 0x5349e2
jmp 0x534a4b
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00454ec0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00534980
Function at 0x535020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53513a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x867563a4537490f2
mov qword [rsp + 0x18], rdx
movabs rdx, 0xba000008adf198fe
mov qword [rsp + 0x20], rdx
movabs rdx, 0x88077069ba000008
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6c7711e20befe989
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc191909130d0b18
mov qword [rsp + 0x34], rdx
movabs rdx, 0x40718140c191909
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe1807010d170e17
mov qword [rsp + 0x40], rdx
movabs rdx, 0x160d12120708001a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x180a150f04000a12
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5350d7
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x24
jge 0x535109
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x53512d
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4f]
cmp rsi, 0x1c
jb 0x5350bd
jmp 0x535121
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
call fcn.00443420
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1c
call fcn.00454ec0
nop
call fcn.00452c40
nop
jmp fcn.00535020

Function at 0x5364c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53659d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x50657268dbe84ad8
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd9df4449545e5065
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa0708000b08010d
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0c0a0708000b08
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa03070b020000
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x536540
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x53656d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x536590
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x536522
jmp 0x536584
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00454ec0
mov eax, edi
mov ecx, 0xe
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.005364c0