joyce8/EMBER2024-capa huggingface dataset:
Function at 0x513940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x513a48
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x203ed45445526543
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x6a175d6972652937
mov qword [rsp + 0x43], rdx
movabs rdx, 0x471a3c740c6a175d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6559615a3f647239
mov qword [rsp + 0x50], rdx
movabs rdx, 0x90615120513080e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x503051304090606
mov qword [rsp + 0x25], rdx
movabs rdx, 0x10181913020d0503
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1a0a030f1b12141b
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x5139eb
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 + 0x30]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 + 0x30]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
cmp rax, 0x1e
jge 0x513a18
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x513a3b
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x5139ce
jmp 0x513a2f
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.0044d560
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00462f80
mov eax, edi
mov ecx, 0x1d
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.00513940

Function at 0x513e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x513f4c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x151073d39d20235c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf08b31c06200007
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1f4ed520c4b706a9
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10e000d05151304
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1214010e000d0515
mov qword [rsp + 0x20], rdx
movabs rdx, 0x14001706070d0f15
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50c0b0416040910
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf08070b07030911
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x513ee8
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x36]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x22
jge 0x513f1c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x513f3f
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x36]
cmp rsi, 0x18
jb 0x513ece
jmp 0x513f33
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.0044d560
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00462f80
mov eax, edi
mov ecx, 0x18
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.00513e40
Function at 0x515dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x515eac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74536c69747a6a7b
mov qword [rsp + 0x35], rdx
movabs rdx, 0x5f6e6274536c6974
mov qword [rsp + 0x38], rdx
movabs rdx, 0x646769af2022ab8f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120d0a000b0c0f0b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x110b05120f01010b
mov qword [rsp + 0x25], rdx
movabs rdx, 0x12110212110b080f
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x515e4a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x25]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x18
jge 0x515e7c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x515e9f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x25]
cmp rsi, 0x13
jb 0x515e30
jmp 0x515e93
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d560
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462f80
mov eax, edi
mov ecx, 0x13
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.00515dc0

Function at 0x516b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x516c08
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6874756f533f2eee
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x6130694d65104154
mov qword [rsp + 0x42], rdx
movabs rdx, 0x226e053353206130
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe346192f4864eae7
mov qword [rsp + 0x50], rdx
movabs rdx, 0x19171b1b0e0a1d13
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc15021900191602
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8131b000c0e1212
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1c1d001b0a121a1d
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x516bab
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
cmp rax, 0x20
jge 0x516bd8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x516bfb
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x516b8e
jmp 0x516bef
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.0044d560
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00462f80
mov eax, edi
mov ecx, 0x1e
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.00516b00
Function at 0x51a080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51a19d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xe50c2b3bf4384651
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x661005320150b2d
mov qword [rsp + 0x47], rdx
movabs rdx, 0x2a0661005320150b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf0553654295e1b2b
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd0111020f040a03
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x80a060a0d011102
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1202091609091610
mov qword [rsp + 0x27], rdx
movabs rdx, 0x206050307170618
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1306161704001417
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x51a140
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 + 0x40]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 + 0x40]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x51a16d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x51a190
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x51a11d
jmp 0x51a184
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.0044d560
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00462f80
mov eax, edi
mov ecx, 0x19
call fcn.00462f80
nop
nop dword [rax]
call fcn.00460ca0
jmp fcn.0051a080

Function at 0x51bee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51bfec
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1c978b8474726f4e
mov qword [rsp + 0x37], rdx
movabs rdx, 0xd761d4f32073f571
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xf7d761d4f32073f5
mov qword [rsp + 0x40], rdx
movabs rdx, 0x736df1af20fc72ff
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd18130513071513
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd06180c180a1108
mov qword [rsp + 0x21], rdx
movabs rdx, 0x409030d0a050d06
mov qword [rsp + 0x27], rdx
movabs rdx, 0x9090f1113100d16
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x51bf88
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1e
jge 0x51bfbc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x51bfdf
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 0x19
jb 0x51bf6e
jmp 0x51bfd3
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.0044d560
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00462f80
mov eax, edi
mov ecx, 0x19
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.0051bee0
Function at 0x51f900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51fa0c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x86615f605f718772
mov qword [rsp + 0x37], rdx
movabs rdx, 0x7577717260726117
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x7375777172607261
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4b137c643b5c7261
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0c02070a0d16
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf0e180510040101
mov qword [rsp + 0x21], rdx
movabs rdx, 0xb17100714080f0e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x50c000f13030815
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x51f9a8
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x23]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1e
jge 0x51f9dc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x51f9ff
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x23]
cmp rsi, 0x19
jb 0x51f98e
jmp 0x51f9f3
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.0044d560
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00462f80
mov eax, edi
mov ecx, 0x19
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.0051f900

Function at 0x51fa20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51fb3a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x571598d586686c86
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x9d6174df3f6b137f
mov qword [rsp + 0x47], rdx
movabs rdx, 0x539d6174df3f6b13
mov qword [rsp + 0x48], rdx
movabs rdx, 0xcb7dbec681649c61
mov qword [rsp + 0x50], rdx
movabs rdx, 0x100b090c060b1006
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x151810100b090c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x60609020b07170c
mov qword [rsp + 0x27], rdx
movabs rdx, 0x60f171604060512
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x914170800030410
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x51fad7
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x24
jge 0x51fb09
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x51fb2d
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 0x19
jb 0x51fabd
jmp 0x51fb21
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.0044d560
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00462f80
mov eax, edi
mov ecx, 0x19
call fcn.00462f80
nop
call fcn.00460ca0
nop
jmp fcn.0051fa20
Function at 0x520a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x520b9d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8c6ef09d8453f878
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6dadb8a7bea58b32
mov qword [rsp + 0x47], rdx
movabs rdx, 0xa36dadb8a7bea58b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xbba4798a20cd72ad
mov qword [rsp + 0x50], rdx
movabs rdx, 0x913110d180e0803
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5070b010913110d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc18160515070c
mov qword [rsp + 0x27], rdx
movabs rdx, 0x180b0e07000f0a17
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x10090411010d1811
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x520b40
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x520b6d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x520b90
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x520b1d
jmp 0x520b84
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.0044d560
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00462f80
mov eax, edi
mov ecx, 0x19
call fcn.00462f80
nop
nop dword [rax]
call fcn.00460ca0
jmp fcn.00520a80

Function at 0x521680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52177b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa308696c807433c5
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc0fa61c275c9a308
mov qword [rsp + 0x40], rdx
movabs rdx, 0xca3dc654c1357220
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3150710110e0610
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa1415000107100d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x911110c0d060a14
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1300010708060a13
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x521719
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7f]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x52174b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x52176e
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7f]
cmp rsi, 0x16
jb 0x5216ff
jmp 0x521762
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.0044d560
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00462f80
mov eax, edi
mov ecx, 0x16
call fcn.00462f80
nop
nop dword [rax + rax]
call fcn.00460ca0
jmp fcn.00521680
Function at 0x523fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5240cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e61af53df54d8a3
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x2a6e61af53df54d8
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd03426540b0be92e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90e030c000c010a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf05090e030c000c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa08080f100a0b01
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x52406a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x52409c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5240bf
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2e]
cmp rsi, 0x11
jb 0x524050
jmp 0x5240b3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d560
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462f80
mov eax, edi
mov ecx, 0x11
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.00523fe0

Function at 0x527480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x527588
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x49536a81746b6168
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xd5365632c2e6573
mov qword [rsp + 0x45], rdx
movabs rdx, 0x646e610d5365632c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x635f478820647461
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a020d02060c050b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x51a090f0f1819
mov qword [rsp + 0x25], rdx
movabs rdx, 0x20a060f170c1a19
mov qword [rsp + 0x2d], rdx
movabs rdx, 0xb0d04140b020c18
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x52752b
movzx r9d, byte [rsp + rsi + 0x3d]
sub r9d, edx
lea edx, [r9 + 0x1d]
mov byte [rsp + rdi + 0x3d], dl
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x3d], dl
add rax, 2
cmp rax, 0x20
jge 0x527558
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x52757b
movzx r8d, byte [rsp + rdi + 0x3d]
sub r8d, edx
cmp rsi, 0x1b
jb 0x52750e
jmp 0x52756f
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.0044d560
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00462f80
mov eax, edi
mov ecx, 0x1b
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.00527480
Function at 0x531360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xcb34cfb47807a778
mov qword [rsp + 0x28], rdx
movabs rdx, 0x706070407000602
mov qword [rsp + 0x14], rdx
mov dword [rsp + 0x1c], 0x3040007
xor eax, eax
jmp 0x5313b7
movzx r8d, byte [rsp + rbx + 0x28]
sub r8d, edx
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x28], dl
lea edx, [rdi - 0x23]
mov byte [rsp + rbx + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x5313e8
movzx edx, byte [rsp + rax + 0x14]
movzx ebx, byte [rsp + rax + 0x15]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x531425
movzx edi, byte [rsp + rsi + 0x28]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x53139b
jmp 0x531417
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x531401
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x5313f5
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00462f80
mov eax, esi
mov ecx, 8
call fcn.00462f80
nop
int3

Function at 0x5316c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53178c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x44510f5115761229
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x3d6c64f9
movabs rdx, 0x307060105060801
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4040b0100010307
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x531725
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x13]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x53175c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x53177f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x13]
cmp rsi, 0xc
jb 0x53170b
jmp 0x531773
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d560
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462f80
mov eax, edi
mov ecx, 0xc
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.005316c0

Function at 0x532320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5323dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe8e6cb339e32b0d8
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xaca8
movabs rdx, 0x900030501000901
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x6080700
xor eax, eax
jmp 0x532380
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x5323ad
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5323d0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x532363
jmp 0x5323c4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044d560
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462f80
mov eax, edi
mov ecx, 0xa
call fcn.00462f80
nop
nop dword [rax]
call fcn.00460ca0
jmp fcn.00532320
Function at 0x5331a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53327d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc9eff0546ed5704f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5f3a5e6761d8c9ef
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc060b04050b020c
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5020c060b04050b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb0b070604080b0d
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x533220
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x53324d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x533270
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x533202
jmp 0x533264
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044d560
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00462f80
mov eax, edi
mov ecx, 0xe
call fcn.00462f80
nop
nop dword [rax]
call fcn.00460ca0
jmp fcn.005331a0

Function at 0x5332a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53336c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc39d6aa28965704f
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xb4bdb885
movabs rdx, 0xb03090b030a0407
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x50b090804040604
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x533305
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x53333c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x53335f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2f]
cmp rsi, 0xc
jb 0x5332eb
jmp 0x533353
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d560
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462f80
mov eax, edi
mov ecx, 0xc
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.005332a0
Function at 0x534a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x534b06
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc272062afd14c3a3
mov qword [rsp + 0x30], rdx
movabs rdx, 0x14a0da721026d183
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa080402020d0009
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe0b00010a0e0a08
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50f09000007030a
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x534aa0
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x40]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x534ad2
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x534af7
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x40]
cmp rsi, 0x10
jb 0x534a82
jmp 0x534aeb
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.0044d560
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00462f80
mov eax, edi
mov ecx, 0x10
nop
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.00534a20

Function at 0x536aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x536b9b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xcac442a7c106754d
mov qword [rsp + 0x35], rdx
movabs rdx, 0x3a54bbcac442a7c1
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7fbe634365646222
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12110708060c0a10
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa0b08070211120c
mov qword [rsp + 0x23], rdx
movabs rdx, 0x3060a0b08070211
mov qword [rsp + 0x25], rdx
movabs rdx, 0x10030206040b0410
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x536b39
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x536b6b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x536b8e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0x13
jb 0x536b1f
jmp 0x536b82
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d560
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462f80
mov eax, edi
mov ecx, 0x13
call fcn.00462f80
nop
nop dword [rax + rax]
call fcn.00460ca0
jmp fcn.00536aa0