joyce8/EMBER2024-capa huggingface dataset:
Function at 0x517f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x517fdc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x326c5778726d316f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5773734d6464326c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4080c0300050906
mov qword [rsp + 0x28], rdx
movabs rdx, 0x901010602040a08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x517f72
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffffef
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x517fa8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x517fcf
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffffef
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xe
jb 0x517f58
jmp 0x517fc3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457420
mov eax, edi
mov ecx, 0xe
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.00517f00

Function at 0x518300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x518408
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x748842697364654d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8274867488426973
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8e80834365577f70
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10010102030b0c0a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90201110b120b06
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd09090201110b12
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3080a060c060b11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5183a2
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x5183cf
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5183fb
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x518385
jmp 0x5183ef
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop dword [rax + rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457420
mov eax, edi
mov ecx, 0x13
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00518300
Function at 0x518960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x518a56
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xdd63d8e8bbdab5a9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8ba75fafdd63d8e8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6f666e4989af98ad
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd0404090a02070d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x90e05080a0d0d04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8030c01000b0a0f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5189f3
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x518a22
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x518a49
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x5189d6
nop
jmp 0x518a3d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457420
mov eax, edi
mov ecx, 0x14
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.00518960

Function at 0x51bf80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51c066
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x47213b705a523b43
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x62441565
movabs rdx, 0x5010a0606010707
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60105010a060601
mov qword [rsp + 0x28], rdx
movabs rdx, 0x309030002080b05
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x51c000
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x51c02d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x51c054
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xc
jb 0x51bfe2
jmp 0x51c048
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457420
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0051bf80
Function at 0x520b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x520cc8
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xb4c126b0bc74ce69
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa618ac4620b4c126
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x685e6b6e16203a08
mov qword [rsp + 0x26], rdx
movabs rdx, 0xabe9226055bbb6b8
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20652f797405c41a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x61d1f101f051609
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1406220a0b06010d
mov qword [rsp + 0x46], rdx
movabs rdx, 0x3061406220a0b06
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e151c011f0a181a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b1704031a181605
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7051f13180c1917
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x520c60
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffff90
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2a
jge 0x520c91
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x520cbb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffff90
add r8d, edx
cmp rsi, 0x25
jb 0x520c42
jmp 0x520caf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x25
call fcn.00457420
mov eax, edi
mov ecx, 0x25
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00520b80
Function at 0x522820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x522987
sub rsp, 0xd0
mov qword [rsp + 0xc8], rbp
lea rbp, [rsp + 0xc8]
movabs rdx, 0x9f4a619ab007aac5
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x72bcaae26fd0be9f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6571a1a4e6bd3ede
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xbfb9089851741572
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6ef773be7beffbfa
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x12c516c73551b967
mov qword [rsp + 0x44], rdx
movabs rdx, 0xe50c73ee206dea8b
mov qword [rsp + 0x4c], rdx
movabs rdx, 0xa07861c82808cd25
mov qword [rsp + 0x54], rdx
movabs rdx, 0xff573735389be875
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x34221b0437071d22
mov qword [rsp + 0x64], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x00672ca4]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00457a4c
mov rbp, qword [rbp]
xor eax, eax
jmp 0x522920
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 8]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 8]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x64
jge 0x52294d
movzx edx, byte [rsp + rax + 0x64]
movzx esi, byte [rsp + rax + 0x65]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x52297a
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x47
jb 0x5228ff
jmp 0x52296e
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x47
call fcn.004446e0
mov rbp, qword [rsp + 0xc8]
add rsp, 0xd0
ret
mov eax, esi
mov ecx, 0x47
call fcn.00457420
mov eax, edi
mov ecx, 0x47
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00522820

Function at 0x5242e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x524408
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x927f3870cc3a8f4d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6593cd61877baa65
mov qword [rsp + 0x24], rdx
movabs rdx, 0x67796a616593cd61
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7970386594a79182
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30d030d1b071600
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9091b0015170b16
mov qword [rsp + 0x40], rdx
movabs rdx, 0x503191b0e1b1401
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a150a061b0e0d09
mov qword [rsp + 0x50], rdx
movabs rdx, 0x180d1b11130e1614
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5243a0
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xffffffcc
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x5243d1
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5243fb
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xffffffcc
add r8d, edx
cmp rsi, 0x1c
jb 0x524383
jmp 0x5243ef
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457420
mov eax, edi
mov ecx, 0x1c
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005242e0
Function at 0x52a820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52a946
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x49cabde4facb1cea
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xbd7461f3b8241c07
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1a18203dbd7461f3
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe88ce82e906e6115
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1021814121a1103
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6081a1301130b0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1703050110020901
mov qword [rsp + 0x48], rdx
movabs rdx, 0x20b03030f141a11
mov qword [rsp + 0x50], rdx
movabs rdx, 0x18000c1b04190603
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x52a8e0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x28
jge 0x52a90d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x52a934
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x52a8c3
jmp 0x52a928
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.004446e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457420
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0052a820

Function at 0x52b2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52b372
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xc16f724de0ca38d8
mov qword [rsp + 0x19], rdx
movabs rdx, 0x37b4d3c16f724de0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x30801070704030a
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2070009
xor eax, eax
jmp 0x52b30b
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffff8a
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x52b33c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x52b365
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffff8a
add r8d, edx
cmp rsi, 0xb
jb 0x52b2f1
jmp 0x52b357
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00457420
mov eax, edi
mov ecx, 0xb
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0052b2a0
Function at 0x536e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x536f12
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xc593a3414299716d
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x9c0d93a6
movabs rdx, 0x70705090806070a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1000a020b070707
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x536eae
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x3f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x3f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x536edb
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x536f05
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x536e91
jmp 0x536ef6
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0xc
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00536e40

Function at 0x537700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5377f6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xab36ee90a4a631f3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf2ab36ee90a4a631
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x21f4f644f84284e4
mov qword [rsp + 0x24], rdx
movabs rdx, 0x409000203050007
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9000f1004090002
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8050f080c0e0a05
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x537790
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x3d
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x5377c2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5377e9
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x3d
add r8d, edx
cmp rsi, 0x11
jb 0x537776
nop
jmp 0x5377dd
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457420
mov eax, edi
mov ecx, 0x11
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.00537700
Function at 0x537820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x537916
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x77e535dd2a327f30
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe777e535dd2a327f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb46d766424626e39
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf01060403010706
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0f0e080c08040a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70e10100a060e0a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5378b0
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffb0
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x5378e2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x537909
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffb0
add r8d, edx
cmp rsi, 0x11
jb 0x537896
nop
jmp 0x5378fd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457420
mov eax, edi
mov ecx, 0x11
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.00537820

Function at 0x538380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x538476
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x37b056be33b031d9
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xae37b056be33b031
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x78666511acb3e1de
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa0c0608000c0504
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0a0a0c0608000c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb040b090202090a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x538410
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x76
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x538442
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x538469
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x76
add r8d, edx
cmp rsi, 0x11
jb 0x5383f6
nop
jmp 0x53845d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457420
mov eax, edi
mov ecx, 0x11
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.00538380
Function at 0x53bb20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53bc72
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x79730a53fc727493
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6c7e999779730a53
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x108a54e5a1722125
mov qword [rsp + 0x26], rdx
movabs rdx, 0xbb8acd656573271e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xabcd9e7863056595
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1907040c23151814
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd001907040c2315
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120e0821200c0a20
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa08051c0a1a140f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5111a1319220f09
mov qword [rsp + 0x58], rdx
movabs rdx, 0x131e212014160f1b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x510120d0e032314
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x53bc0a
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x3d
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x32
jge 0x53bc3b
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x53bc65
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x3d
add r8d, edx
cmp rsi, 0x24
jb 0x53bbf0
jmp 0x53bc56
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x24
call fcn.004446e0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x24
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0x24
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0053bb20

Function at 0x53c6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53c7bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xea65e05ee6e25c90
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x72dadfea65e05ee6
mov qword [rsp + 0x22], rdx
movabs rdx, 0x103040409030500
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x402080107030103
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x53c755
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x6b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x53c788
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x53c7af
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x53c738
jmp 0x53c7a3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457420
mov eax, edi
mov ecx, 0xb
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.0053c6e0
Function at 0x53fca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53fde8
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x20aac8a0b71a8f69
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x866f6f0f20aac8a0
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf250ab88a39578fc
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9ab98db71972065
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6f707b3a7384aca9
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1a0c0105011b1318
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11040e0308131d0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x221b192202132216
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf0d0606221d131a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x21a1c1218160b18
mov qword [rsp + 0x60], rdx
movabs rdx, 0x122310211e080310
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x53fd80
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xffffff9e
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x30
jge 0x53fdb1
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x53fddb
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xffffff9e
add r8d, edx
cmp rsi, 0x24
jb 0x53fd62
jmp 0x53fdcf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x24
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x24
call fcn.00457420
mov eax, edi
mov ecx, 0x24
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0053fca0

Function at 0x540740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x540836
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x2037d92058611838
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x374808401a2037d9
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf3c60c74ef482041
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1305080b13050f03
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10050d0112061412
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90c000b000a060d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5407d0
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x13
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x540802
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x540829
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x13
add r8d, edx
cmp rsi, 0x15
jb 0x5407b6
nop
jmp 0x54081d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457420
mov eax, edi
mov ecx, 0x15
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.00540740