joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5246e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5247a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x10b46712a916064c
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xb16169ee
movabs rdx, 0x5010608050b0603
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3020704020b0501
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x524748
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x524777
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x52479a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x52472b
jmp 0x52478e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005246e0

Function at 0x5249a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x524a9d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2f2db83ac015cabc
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6c2696c5ca12f2d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6d287332b8906863
mov qword [rsp + 0x26], rdx
movabs rdx, 0x309081001010005
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20903020d0c0211
mov qword [rsp + 0x36], rdx
movabs rdx, 0x114020903020d0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1207060006100608
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x524a40
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x524a6d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x524a90
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x524a1f
jmp 0x524a84
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005249a0
Function at 0x527c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x527d47
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x1f443a2f26c36ce4
mov qword [rsp + 0x19], rdx
movabs rdx, 0xdb1f61631e1f443a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2083066942516463
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb014caf9d96e2e6e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4dc951ce20b2352d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x21001213020c211f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xb1321001213020c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70b0323180b1203
mov qword [rsp + 0x48], rdx
movabs rdx, 0x210f080418031c04
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc221e031b050216
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd241d000d221a06
mov qword [rsp + 0x60], rdx
movabs rdx, 0x8061f18190f101d
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x527ce7
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x32
jge 0x527d17
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x527d3a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x25
jb 0x527cca
jmp 0x527d2e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
call fcn.0044bb20
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00461020
mov eax, edi
mov ecx, 0x25
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00527c00
Function at 0x52d4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52d627
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x25e301d0621081af
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7141657325e301d0
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc79b6e9b722673f5
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x591bc3656cc12674
mov qword [rsp + 0x32], rdx
movabs rdx, 0x85353e3a1d3c676e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1b031010000c0a16
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1916230713021b03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e130b030306061e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x21e071e16131608
mov qword [rsp + 0x58], rdx
movabs rdx, 0x21160e12191b0401
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1010151a0e010a1f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x522030601220304
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x52d5c7
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x36
jge 0x52d5f7
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x24
jae 0x52d61a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x24
jb 0x52d5aa
jmp 0x52d60e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x24
call fcn.0044bb20
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00461020
mov eax, edi
mov ecx, 0x24
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0052d4e0
Function at 0x531b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x531c3d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x208e9ddc61d93169
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3465974ce420c3d0
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2f226e6769103465
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8f1e7d273a0f72e8
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1d010608051d060f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0b09020d1c1a05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60214101c161b04
mov qword [rsp + 0x48], rdx
movabs rdx, 0x918081b041c160b
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc011c0f15091516
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x531be0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x531c0d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x531c30
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x531bbd
jmp 0x531c24
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461020
mov eax, edi
mov ecx, 0x1e
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00531b20

Function at 0x531c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x531d7a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x4367e4db5ea1ebe1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x8a45d12064657a69
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10d5ceb58a45d120
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe7632520ded36e27
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf02111b04100413
mov qword [rsp + 0x36], rdx
movabs rdx, 0x5100f02111b0410
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b001a1b13020303
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1021a0417070314
mov qword [rsp + 0x48], rdx
movabs rdx, 0x161217051a13030d
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x531d17
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x22
jge 0x531d49
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x531d6d
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6c]
cmp rsi, 0x1c
jb 0x531cfd
jmp 0x531d61
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.00531c60
Function at 0x531da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x531f20
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x2577ab657347a4eb
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa70462ad97690827
mov qword [rsp + 0x21], rdx
movabs rdx, 0xbe2ac3f16fa70462
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa1b47674cb2042f7
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x697bd02620ea1392
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe10e62bcc11cf3dc
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x22714290601150b
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1a0c022714290601
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a23002b151a1c11
mov qword [rsp + 0x50], rdx
movabs rdx, 0x20c0f28262b2728
mov qword [rsp + 0x58], rdx
movabs rdx, 0x25130f18050c0f15
mov qword [rsp + 0x60], rdx
movabs rdx, 0x122011a21151209
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1401141b08261d2c
mov qword [rsp + 0x70], rdx
movabs rdx, 0x623271f080e2116
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2c271e1e28290f11
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x531ec0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x42
jge 0x531eed
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x531f13
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x2d
jb 0x531ea2
jmp 0x531f07
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2d
call fcn.0044bb20
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00461020
mov eax, edi
mov ecx, 0x2d
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00531da0

Function at 0x532120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x532247
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x677d69640ef9ce62
mov qword [rsp + 0x19], rdx
movabs rdx, 0x652d67677d69640e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6c2764642f203a78
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2368d52420d96e74
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x676e69232428e78c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x131506031e0e011e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x3171f0013150603
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8021109021f091b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x181c161a15111e1a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1f181f021d131716
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5321e9
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x24
jge 0x532217
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x23
jae 0x53223a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x23
jb 0x5321cc
jmp 0x53222e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x23
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00461020
mov eax, edi
mov ecx, 0x23
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00532120
Function at 0x534900
Capabilities:
Hash data using fnv

Disassembly:
test byte [rax], al
mov rcx, rbx
and ebx, 0x7f
shl rbx, 5
lea rdx, [rax + rbx]
xor eax, eax
jmp 0x534917
inc rax
cmp rax, 4
jge 0x53492f
lea rbx, [rdx + rax*8]
mov rbx, qword [rbx]
cmp rbx, rcx
jne 0x534914
mov eax, 1
ret
xor eax, eax
movabs rbx, 0xcbf29ce484222325
jmp 0x534940
inc rax
cmp rax, 4
jge 0x53494e
mov rsi, qword [rdx + rax*8]
xor edi, edi
jmp 0x534977
and ebx, 3
lea rdx, [rdx + rbx*8]
xchg qword [rdx], rcx
xor eax, eax
ret
movzx r8d, sil
xor rbx, r8
inc rdi
shr rsi, 8
movabs r8, 0x100000001b3
imul rbx, r8
cmp rdi, 8
jl 0x53495b
jmp 0x53493d

Function at 0x534d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x534e3d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa1351bc461d06e69
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb1e19a26101d2823
mov qword [rsp + 0x20], rdx
movabs rdx, 0xaaeadb2a74da2bd6
mov qword [rsp + 0x28], rdx
movabs rdx, 0x110d1208050b120f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6110f0207040e17
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc140e160a0a1516
mov qword [rsp + 0x40], rdx
movabs rdx, 0x906081516041017
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x534de0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x534e0d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x534e30
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x18
jb 0x534dbf
jmp 0x534e24
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00534d40
Function at 0x535b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x535c6c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x20d75e5f61984c69
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3360f46420d75e5f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x747862e75b657205
mov qword [rsp + 0x28], rdx
movabs rdx, 0xfef6353f02dd3761
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2532293ee972e048
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12111101011a0622
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf170f05231d0510
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa081c040e0b1504
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2201f220c18120e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1b1f09191620060e
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x535c06
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 8]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x28
jge 0x535c3c
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x24
jae 0x535c5f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 8]
cmp rsi, 0x24
jb 0x535bec
jmp 0x535c53
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x24
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00461020
mov eax, edi
mov ecx, 0x24
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00535b40

Function at 0x537400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x537547
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x18193627167e6fe2
mov qword [rsp + 0x19], rdx
movabs rdx, 0xcfd76e751b181936
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x497916652ffd6559
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb646ca3ca34e296e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x58c35d1074af3741
mov qword [rsp + 0x36], rdx
movabs rdx, 0x21001213020c211f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xb1321001213020c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70b0323180b1203
mov qword [rsp + 0x48], rdx
movabs rdx, 0x210f080418031c04
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc221e031b050216
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd241d000d221a06
mov qword [rsp + 0x60], rdx
movabs rdx, 0x8061f18190f101d
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x5374e7
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x32
jge 0x537517
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x53753a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x25
jb 0x5374ca
jmp 0x53752e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
call fcn.0044bb20
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00461020
mov eax, edi
mov ecx, 0x25
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00537400
Function at 0x537c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x537d1d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb0150a657400b8b4
mov qword [rsp + 0x18], rdx
movabs rdx, 0x166618cc1f62d363
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10d0200050b0a07
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6090f0a070c0e07
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0c060602020d0e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x537cc0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x537ced
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x537d10
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x537ca2
jmp 0x537d04
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00537c40

Function at 0x537e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x537f1d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf1a2ed1fee8de9ff
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x13
movabs rdx, 0x807060802080003
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4010505
xor eax, eax
nop
jmp 0x537ec0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x537eed
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x537f10
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x537ea2
jmp 0x537f04
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00537e60

Function at 0x538260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53831d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x464eafaa222bfff7
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x79
movabs rdx, 0x5040005050108
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3020102
xor eax, eax
nop
jmp 0x5382c0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x5382ed
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x538310
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x5382a2
jmp 0x538304
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00538260
Function at 0x538b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x538c18
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x22fc35731361db43
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x707010103000706
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x501
xor eax, eax
jmp 0x538bb5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x538be8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x538c0b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
nop
cmp rsi, 8
jb 0x538b9b
jmp 0x538bff
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.00538b60
Function at 0x53ae80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53af6a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe873d172176d0b6e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xbe873d172176d0b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x21428c0916b61d72
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd100e0d0b0d0102
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10070d100e0d0b0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1030f10050c080a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x53af0d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x53af3a
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x53af5d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x53aef0
jmp 0x53af51
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0053ae80

Function at 0x53af80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53b0cc
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x3969e8663e2b4469
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x572e293a3c4e581e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1090572e293a3c4e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6f733572ed721d46
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3c6f423fe463723d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa8741faf52abb32b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc05221f0f25170f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2108050929101d23
mov qword [rsp + 0x50], rdx
movabs rdx, 0x271d2610130a030d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e100d020a120727
mov qword [rsp + 0x60], rdx
movabs rdx, 0x21240c15260e1a01
mov qword [rsp + 0x68], rdx
movabs rdx, 0x21110b0d291e0903
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x53b064
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x30
jge 0x53b09c
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x2a
jae 0x53b0bf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
cmp rsi, 0x2a
jb 0x53b04a
jmp 0x53b0b3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x2a
call fcn.0044bb20
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2a
call fcn.00461020
mov eax, edi
mov ecx, 0x2a
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0053af80