joyce8/EMBER2024-capa huggingface dataset:
Function at 0x519d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x519e48
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe2675a6fa3a82e9b
mov qword [rsp + 0x37], rdx
movabs rdx, 0x5c61f553d2a08f6c
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xe45c61f553d2a08f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x656d69e1be2aaed5
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110a0a130f140915
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x911070a030f0010
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa0d0911070a030f
mov qword [rsp + 0x27], rdx
movabs rdx, 0x7120a0502070b
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x519deb
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x1f]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1a
jge 0x519e18
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x519e3b
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x519dce
jmp 0x519e2f
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456420
mov eax, edi
mov ecx, 0x19
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00519d40

Function at 0x51a7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51a8bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8ae90073e46bd4e7
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x3fccf974836c8ae9
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2de46954db7772ed
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140e07090c0e0e15
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb060000090d0c05
mov qword [rsp + 0x26], rdx
movabs rdx, 0x110610030b060000
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x901080903071114
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x51a859
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x51a88b
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x51a8ae
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0x16
jb 0x51a83f
jmp 0x51a8a2
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456420
mov eax, edi
mov ecx, 0x16
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.0051a7c0
Function at 0x51c240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51c35a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x70acab7774b678ba
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x9ae97453cd98aec7
mov qword [rsp + 0x47], rdx
movabs rdx, 0xc29ae97453cd98ae
mov qword [rsp + 0x48], rdx
movabs rdx, 0x923a7ea420647261
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf0e1015000b0907
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6100f0e1015000b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x18080f0804150205
mov qword [rsp + 0x27], rdx
movabs rdx, 0xa07021017050f0f
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xb090b00070b0116
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x51c2f7
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x40]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x22
jge 0x51c329
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x51c34d
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x40]
cmp rsi, 0x19
jb 0x51c2dd
jmp 0x51c341
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456420
mov eax, edi
mov ecx, 0x19
call fcn.00456420
nop
call fcn.00454140
nop
jmp fcn.0051c240

Function at 0x51ec00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51ed0c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xeec4b6cb3fe9e8
mov qword [rsp + 0x41], rdx
movabs rdx, 0xac6eedea53da8100
mov qword [rsp + 0x48], rdx
movabs rdx, 0x44254ed20d97261
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe0c16130b010801
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x9150e0c16130b01
mov qword [rsp + 0x21], rdx
movabs rdx, 0x207050502140704
mov qword [rsp + 0x29], rdx
movabs rdx, 0x90c040c11060206
mov qword [rsp + 0x31], rdx
movabs rdx, 0x1411041309090003
mov qword [rsp + 0x39], rdx
xor eax, eax
jmp 0x51eca8
movzx r9d, byte [rsp + rsi + 0x41]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rdi + 0x41], dl
mov byte [rsp + rsi + 0x41], r8b
add rax, 2
cmp rax, 0x22
jge 0x51ecdc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x17
jae 0x51ecff
movzx r8d, byte [rsp + rdi + 0x41]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6f]
cmp rsi, 0x17
jb 0x51ec8e
jmp 0x51ecf3
xor eax, eax
lea rbx, [rsp + 0x41]
mov ecx, 0x17
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456420
mov eax, edi
mov ecx, 0x17
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0051ec00
Function at 0x520de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x520edb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb5f2745dd5c06143
mov qword [rsp + 0x32], rdx
movabs rdx, 0x116e76aec919b5f2
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd00169c92012b2c7
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1012090d06151505
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa14020315090402
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70e0a1402031509
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf0b060a0b081203
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x520e79
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6d]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x1a
jge 0x520eab
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x520ece
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6d]
cmp rsi, 0x16
jb 0x520e5f
jmp 0x520ec2
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456420
mov eax, edi
mov ecx, 0x16
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.00520de0

Function at 0x521c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x521d7a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xfa7541145520cfa0
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x9c06169a861f3cc
mov qword [rsp + 0x44], rdx
movabs rdx, 0xea24bf9f09c06169
mov qword [rsp + 0x48], rdx
movabs rdx, 0xfdcd18541a127295
mov qword [rsp + 0x50], rdx
movabs rdx, 0x710141903081408
mov qword [rsp + 0x18], rdx
movabs rdx, 0x110e0e1007101419
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80200071a170b13
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1616130b10120104
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1b070f0209111113
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x521d17
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x24
jge 0x521d49
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x521d6d
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0x1c
jb 0x521cfd
jmp 0x521d61
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00456420
mov eax, edi
mov ecx, 0x1c
call fcn.00456420
nop
call fcn.00454140
nop
jmp fcn.00521c60
Function at 0x522460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52255b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2b16dfbddc30c01c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x64c8842f17202b16
mov qword [rsp + 0x40], rdx
movabs rdx, 0x658f2b5429067261
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50c09101103130b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x14140a0200130c07
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb01001414140a02
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0600050b040106
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x5224f9
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x52252b
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x52254e
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0x16
jb 0x5224df
jmp 0x522542
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456420
mov eax, edi
mov ecx, 0x16
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.00522460

Function at 0x522cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x522dc8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa87361ab88537841
mov qword [rsp + 0x37], rdx
movabs rdx, 0xa1bba0d5c88b7e86
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x8ca1bba0d5c88b7e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa36dd360b264be61
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe031210080a0a18
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x70d010c100f1416
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc090b0c070d010c
mov qword [rsp + 0x27], rdx
movabs rdx, 0xd040f1403151601
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x522d6b
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x14]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1c
jge 0x522d98
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x522dbb
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x522d4e
jmp 0x522daf
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456420
mov eax, edi
mov ecx, 0x19
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00522cc0
Function at 0x524a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x524aea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb81974cd20983476
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x24b81974cd209834
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1d2569af6da4ba61
mov qword [rsp + 0x38], rdx
movabs rdx, 0x802060f10000c00
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd0104100b000802
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa0202080d070f06
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x524a8d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 0x4a]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 0x4a]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x16
jge 0x524aba
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x524add
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x524a70
jmp 0x524ad1
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456420
mov eax, edi
mov ecx, 0x11
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00524a00

Function at 0x524b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x524bea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2030455b61236542
mov qword [rsp + 0x33], rdx
movabs rdx, 0x336e614f63203045
mov qword [rsp + 0x38], rdx
movabs rdx, 0x684b4d6763215161
mov qword [rsp + 0x40], rdx
movabs rdx, 0x610050c0e090202
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x812131310100610
mov qword [rsp + 0x23], rdx
movabs rdx, 0x110204140f050f10
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x524b8d
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 + 0x2c]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 + 0x2c]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x16
jge 0x524bba
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x524bdd
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x524b70
jmp 0x524bd1
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456420
mov eax, edi
mov ecx, 0x15
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00524b00
Function at 0x525aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x525b9d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb5a2dd3867d61b56
mov qword [rsp + 0x39], rdx
movabs rdx, 0x64d8b9e1c78accb5
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa1d9bed88a64e361
mov qword [rsp + 0x48], rdx
movabs rdx, 0x150d061309120a01
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb05140b1614070a
mov qword [rsp + 0x27], rdx
movabs rdx, 0x8130b05140b1614
mov qword [rsp + 0x29], rdx
movabs rdx, 0x100202080402080c
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x525b40
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x525b6d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x525b90
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x525b1f
jmp 0x525b84
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456420
mov eax, edi
mov ecx, 0x17
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.00525aa0

Function at 0x526a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x526b5d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6ce865f19677b74e
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xa4425f8538646e90
mov qword [rsp + 0x47], rdx
movabs rdx, 0x9fa4425f8538646e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x654ebe548392b27c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x103160c160c040d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x12080103160c160c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x16110d0f140e0f06
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1110170b030b100d
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x61308110111010f
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x526b00
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 + 4]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 + 4]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x526b2d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x526b50
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x526add
jmp 0x526b44
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456420
mov eax, edi
mov ecx, 0x19
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.00526a40
Function at 0x528f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5290ac
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x656deceb3e506a7f
mov qword [rsp + 0x49], rdx
movabs rdx, 0xdcdf65ea6974e55b
mov qword [rsp + 0x51], rdx
movabs rdx, 0xdc5bd4dd4ce96fdc
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6acc69e877d1dc59
mov qword [rsp + 0x60], rdx
movabs rdx, 0x180500001e04110c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x150e010e181a1705
mov qword [rsp + 0x27], rdx
movabs rdx, 0x309150e010e181a
mov qword [rsp + 0x29], rdx
movabs rdx, 0x141a0805170f0204
mov qword [rsp + 0x31], rdx
movabs rdx, 0x181b121600050419
mov qword [rsp + 0x39], rdx
movabs rdx, 0x161d14091513150e
mov qword [rsp + 0x41], rdx
xor eax, eax
jmp 0x529046
movzx r9d, byte [rsp + rsi + 0x49]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x49], dl
mov byte [rsp + rsi + 0x49], r8b
add rax, 2
cmp rax, 0x2a
jge 0x52907c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1f
jae 0x52909f
movzx r8d, byte [rsp + rdi + 0x49]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0x1f
jb 0x52902c
jmp 0x529093
xor eax, eax
lea rbx, [rsp + 0x49]
mov ecx, 0x1f
call fcn.00444780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00456420
mov eax, edi
mov ecx, 0x1f
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00528f80

Function at 0x530e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x530ebe
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x357585703a617261
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6c89642e
movabs rdx, 0x702070603020a06
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x4010501
xor eax, eax
jmp 0x530e61
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x530e8e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x530eb1
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x530e44
jmp 0x530ea5
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456420
mov eax, edi
mov ecx, 0xc
call fcn.00456420
nop
nop
call fcn.00454140
jmp fcn.00530e00
Function at 0x530ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x530fcc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x72cacd55c1cf1ef1
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x74146d6972cacd55
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0beb92ebcaa7628
mov qword [rsp + 0x38], rdx
movabs rdx, 0x502120401110a0c
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1311001205021204
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3060a0f0e12000c
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x530f6a
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x68]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x14
jge 0x530f9c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x530fbf
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x68]
cmp rsi, 0x14
jb 0x530f50
jmp 0x530fb3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456420
mov eax, edi
mov ecx, 0x14
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00530ee0

Function at 0x531720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5317e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6b666d57705e5d22
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x6c
movabs rdx, 0x202040601040705
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x50105
xor eax, eax
nop
jmp 0x531780
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 3]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x5317b2
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x5317d7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 3]
cmp rsi, 9
jb 0x531762
jmp 0x5317cb
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456420
mov eax, edi
mov ecx, 9
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00531720
Function at 0x533680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x533746
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x12e865140965e1b9
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5774fc0c
movabs rdx, 0x606090308080000
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x1000407
xor eax, eax
jmp 0x5336e0
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x57]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x533712
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x533737
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x57]
cmp rsi, 0xc
jb 0x5336c4
jmp 0x53372b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456420
mov eax, edi
mov ecx, 0xc
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00533680

Function at 0x534540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53465d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x5e61a7a846968ecc
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6f8661c06c748850
mov qword [rsp + 0x47], rdx
movabs rdx, 0x9c6f8661c06c7488
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa59d6c6467949778
mov qword [rsp + 0x50], rdx
movabs rdx, 0x21205090c170901
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc14021205090c17
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1817090407100b0f
mov qword [rsp + 0x27], rdx
movabs rdx, 0x12001805171112
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1309021801070e04
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x534600
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x53462d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x534650
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x5345dd
jmp 0x534644
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456420
mov eax, edi
mov ecx, 0x19
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.00534540