joyce8/EMBER2024-capa huggingface dataset:
Function at 0x520900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x520a08
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x3466715958597a54
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2443fb744c202753
mov qword [rsp + 0x48], rdx
movabs rdx, 0x65793c544b56585b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x13050708070d0907
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x902051213050708
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1011030308080e08
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0e040008160615
mov qword [rsp + 0x30], rdx
movabs rdx, 0x61008130e0e0f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5209ab
movzx r9d, byte [rsp + rsi + 0x40]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x40], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x40], dl
add rax, 2
cmp rax, 0x24
jge 0x5209d8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5209fb
movzx r8d, byte [rsp + rdi + 0x40]
sub r8d, edx
cmp rsi, 0x18
jb 0x52098e
jmp 0x5209ef
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.00467060
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.0046d060
mov eax, edi
mov ecx, 0x18
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00520900

Function at 0x521700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5217ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6b2a094c4be7f953
mov qword [rsp + 0x31], rdx
movabs rdx, 0x646461131c20336b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9433692bd78b7261
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8050215160d020b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x806120d0301160d
mov qword [rsp + 0x21], rdx
movabs rdx, 0x130b0d120a160d11
mov qword [rsp + 0x29], rdx
xor eax, eax
jmp 0x52178a
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
cmp rax, 0x18
jge 0x5217bc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5217df
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0x17
jb 0x521770
jmp 0x5217d3
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0046d060
mov eax, edi
mov ecx, 0x17
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00521700
Function at 0x521800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5218ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc1c820bcd4cbc461
mov qword [rsp + 0x35], rdx
movabs rdx, 0xd9b461c1c820bcd4
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65c534547e647224
mov qword [rsp + 0x40], rdx
movabs rdx, 0x103090e10000e0b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe110a02040b1110
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1111070004060b00
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x52188d
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x53]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x53]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x18
jge 0x5218ba
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5218dd
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x521870
jmp 0x5218d1
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0046d060
mov eax, edi
mov ecx, 0x13
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00521800

Function at 0x522f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52305d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x7de1213f339a6faa
mov qword [rsp + 0x43], rdx
movabs rdx, 0x20be732345206169
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x646e221a1120be73
mov qword [rsp + 0x50], rdx
movabs rdx, 0x666d69308f029bec
mov qword [rsp + 0x58], rdx
movabs rdx, 0x12160e001c021c02
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x515121012160e00
mov qword [rsp + 0x23], rdx
movabs rdx, 0x70017051c180e00
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x20006051c050c19
mov qword [rsp + 0x33], rdx
movabs rdx, 0xe02101103041802
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x523000
movzx r9d, byte [rsp + rsi + 0x43]
sub r9d, edx
lea edx, [r9 + 0x5a]
mov byte [rsp + rdi + 0x43], dl
lea edx, [r8 + 0x5a]
mov byte [rsp + rsi + 0x43], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x52302d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x523050
movzx r8d, byte [rsp + rdi + 0x43]
sub r8d, edx
cmp rsi, 0x1d
jb 0x522fdd
jmp 0x523044
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.00467060
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0046d060
mov eax, edi
mov ecx, 0x1d
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.00522f40
Function at 0x524720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52481b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xdd500e38a16b6153
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x316e12745319dd50
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6507bf32e8a4df2e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1011130307060505
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb1211100414120f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30e04060b121110
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x813050d10110e04
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x5247b9
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5247eb
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x52480e
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0x16
jb 0x52479f
jmp 0x524802
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0046d060
mov eax, edi
mov ecx, 0x16
call fcn.0046d060
nop
nop dword [rax + rax]
call fcn.0046ad80
jmp fcn.00524720

Function at 0x524b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x524bfd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3a432e4656415a49
mov qword [rsp + 0x35], rdx
movabs rdx, 0x3d6ee63a432e4656
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5d6d275465535b61
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2060800010f0605
mov qword [rsp + 0x19], rdx
movabs rdx, 0x50e0d0007060400
mov qword [rsp + 0x21], rdx
movabs rdx, 0x403120f050e0d00
mov qword [rsp + 0x25], rdx
movabs rdx, 0xd0c0e0305100a00
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x524ba0
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x24]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x24]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x524bcd
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x524bf0
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x524b7f
jmp 0x524be4
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0046d060
mov eax, edi
mov ecx, 0x13
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.00524b00
Function at 0x524c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x524d1d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1d961b2bff4e2
mov qword [rsp + 0x39], rdx
movabs rdx, 0xb96cba74ebb9b100
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb2fd6954e5647293
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa0f050a0c0f120d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x215050606000a01
mov qword [rsp + 0x23], rdx
movabs rdx, 0x10e0a0d09050215
mov qword [rsp + 0x29], rdx
movabs rdx, 0x160e08070e0302
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x524cc0
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x524ced
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x524d10
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x524c9f
jmp 0x524d04
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0046d060
mov eax, edi
mov ecx, 0x17
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.00524c20

Function at 0x526040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52612a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74531e0af3f543b6
mov qword [rsp + 0x35], rdx
movabs rdx, 0x15b9b374531e0af3
mov qword [rsp + 0x38], rdx
movabs rdx, 0x484f00eea641590
mov qword [rsp + 0x40], rdx
movabs rdx, 0x111105080b0e0301
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc10031000100208
mov qword [rsp + 0x25], rdx
movabs rdx, 0x40a020f11120e09
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x5260cd
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x7e]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x7e]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x18
jge 0x5260fa
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x52611d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x5260b0
jmp 0x526111
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0046d060
mov eax, edi
mov ecx, 0x13
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00526040
Function at 0x526f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52700a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xea9507e8726f7aec
mov qword [rsp + 0x34], rdx
movabs rdx, 0x646e61f9ea9507e8
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc864aaf0943a77dc
mov qword [rsp + 0x40], rdx
movabs rdx, 0x506100e0f110612
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10060d0d00130812
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10040c07110d0810
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x526fad
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x18
jge 0x526fda
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x526ffd
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x526f90
jmp 0x526ff1
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0046d060
mov eax, edi
mov ecx, 0x14
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00526f20

Function at 0x529000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52911d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1b3b7375a05ba7b9
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x619ab7cac8772f61
mov qword [rsp + 0x46], rdx
movabs rdx, 0x6497619ab7cac877
mov qword [rsp + 0x48], rdx
movabs rdx, 0x656dfd98efcf9705
mov qword [rsp + 0x50], rdx
movabs rdx, 0x160c14060e070d0a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1710140e160c1406
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb15020c15091212
mov qword [rsp + 0x26], rdx
movabs rdx, 0x316131201090b0a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60e1013141501
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x5290c0
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x5290ed
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x529110
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x52909d
jmp 0x529104
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00467060
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0046d060
mov eax, edi
mov ecx, 0x1a
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.00529000
Function at 0x529140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x529248
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x420a464720533f07
mov qword [rsp + 0x37], rdx
movabs rdx, 0x243115530649553e
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x5124311553064955
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe6d69522004e556
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9120d1105180e0f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x805110107150713
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa15100806040805
mov qword [rsp + 0x27], rdx
movabs rdx, 0xa090b000409090b
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x5291eb
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1e
jge 0x529218
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x52923b
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x5291ce
jmp 0x52922f
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0046d060
mov eax, edi
mov ecx, 0x19
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00529140

Function at 0x52c3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52c48c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x95b3f574c0d5df62
mov qword [rsp + 0x33], rdx
movabs rdx, 0xc58de3745395b3f5
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe5a0af5420a69bea
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10f14020503060c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x212030a030d010f
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf03140b0700130e
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x52c42a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x59]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x52c45c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x52c47f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x59]
cmp rsi, 0x15
jb 0x52c410
jmp 0x52c473
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0046d060
mov eax, edi
mov ecx, 0x15
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0052c3a0
Function at 0x52e1e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52e2cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6174f3ede8726946
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa96e6174f3ede872
mov qword [rsp + 0x30], rdx
movabs rdx, 0xeb6d697c004365f0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9040c050b110c0e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd0b09040c050b11
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd0e0211030a0202
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x52e26a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x64]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x52e29c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x52e2bf
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x64]
cmp rsi, 0x12
jb 0x52e250
jmp 0x52e2b3
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046d060
mov eax, edi
mov ecx, 0x12
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0052e1e0

Function at 0x52fc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52fd1b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xaf734a6f7172a8b1
mov qword [rsp + 0x39], rdx
movabs rdx, 0xe77b619b538f73af
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb8ab699f8b64ab9f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb130f160b0e1607
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x710130415100509
mov qword [rsp + 0x25], rdx
movabs rdx, 0x600071607101304
mov qword [rsp + 0x29], rdx
movabs rdx, 0x60b0d15010b1216
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x52fcb9
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3e]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1c
jge 0x52fceb
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x52fd0e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3e]
cmp rsi, 0x17
jb 0x52fc9f
jmp 0x52fd02
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0046d060
mov eax, edi
mov ecx, 0x17
call fcn.0046d060
nop
nop dword [rax + rax]
call fcn.0046ad80
jmp fcn.0052fc20
Function at 0x530760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53084c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x744376a5e98381c4
mov qword [rsp + 0x35], rdx
movabs rdx, 0xa66e61744376a5e9
mov qword [rsp + 0x38], rdx
movabs rdx, 0xdb6d735454bd7261
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120a0e12040d120e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x301100d00010003
mov qword [rsp + 0x25], rdx
movabs rdx, 0x90a091206050204
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x5307ea
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x38]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x18
jge 0x53081c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x53083f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x38]
cmp rsi, 0x13
jb 0x5307d0
jmp 0x530833
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0046d060
mov eax, edi
mov ecx, 0x13
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00530760

Function at 0x539880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x539946
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x571b3a7053225061
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6c6c642e
movabs rdx, 0x205070205070606
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x6060103
xor eax, eax
jmp 0x5398e0
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx + 7]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x539912
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x539937
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 7]
cmp rsi, 0xc
jb 0x5398c4
jmp 0x53992b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0046d060
mov eax, edi
mov ecx, 0xc
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00539880
Function at 0x53a120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53a1e7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5d33691c5b4c4c5c
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x6c114d24
movabs rdx, 0xa00040304080109
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x202030200070a00
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x53a188
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jge 0x53a1b7
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x53a1da
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x53a16b
jmp 0x53a1ce
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0046d060
mov eax, edi
mov ecx, 0xc
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0053a120

Function at 0x53a560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53a626
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8d8b88b57093817f
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x4a
movabs rdx, 0x201070707040508
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x600
xor eax, eax
nop
jmp 0x53a5c0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x29]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x53a5f2
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x53a617
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x29]
cmp rsi, 9
jb 0x53a5a2
jmp 0x53a60b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0046d060
mov eax, edi
mov ecx, 9
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0053a560

Function at 0x53a640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53a706
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe41c6e2dedd42175
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x6ce0e6e4
movabs rdx, 0x901090802030307
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x4060803
xor eax, eax
jmp 0x53a6a0
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x53a6d2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x53a6f7
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3d]
cmp rsi, 0xb
jb 0x53a684
jmp 0x53a6eb
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046d060
mov eax, edi
mov ecx, 0xb
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.0053a640