joyce8/EMBER2024-capa huggingface dataset:
Function at 0x50fd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50fe4a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e3c023f686be839
mov qword [rsp + 0x32], rdx
movabs rdx, 0x236e623cd64a6e3c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x52f695423413a3a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x815111111010610
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa010511090d0e14
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf0e0b140400040d
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x50fded
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x18
jge 0x50fe1a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x50fe3d
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x50fdd0
jmp 0x50fe31
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x16
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.0050fd60

Function at 0x514e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x514f1d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7427dcffd87361d9
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x53206be6d46cb872
mov qword [rsp + 0x44], rdx
movabs rdx, 0x640f3f4e53206be6
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8f6d691b2064a749
mov qword [rsp + 0x50], rdx
movabs rdx, 0x110609101009041b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1203110609101009
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9060b1b040c150c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30d001101140d14
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5140c0403051805
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x514ec0
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 - 0x51]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x514eed
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x514f10
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x514e9d
jmp 0x514f04
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.00447380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x1c
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.00514e00
Function at 0x5157e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5158db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2a0d48fe15646f4c
mov qword [rsp + 0x39], rdx
movabs rdx, 0xf4fff774ae20852a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65fdbc542a430a61
mov qword [rsp + 0x48], rdx
movabs rdx, 0x411061007071412
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd15030d02120a0a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x150c140e0d15030d
mov qword [rsp + 0x29], rdx
movabs rdx, 0x408040812040e0a
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x515879
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4b]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1c
jge 0x5158ab
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5158ce
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4b]
cmp rsi, 0x17
jb 0x51585f
jmp 0x5158c2
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00447380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x17
call fcn.0045a8c0
nop
nop dword [rax + rax]
call fcn.004585e0
jmp fcn.005157e0

Function at 0x517720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51780c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9cda99d2f5b2da82
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6456a5749cda99d2
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65b26954e05d959d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa06120704010302
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2020e0f040c0a06
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0d07000109050a
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x5177aa
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x48]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x16
jge 0x5177dc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5177ff
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x48]
cmp rsi, 0x14
jb 0x517790
jmp 0x5177f3
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x14
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.00517720
Function at 0x5181e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5182cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x9561c4e3205a2446
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xc9561c4e3205a24
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb6d69ff20b9feeb
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb020a0110080407
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5040b020a011008
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2090705040d0b04
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x51826a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x51829c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5182bf
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
cmp rsi, 0x11
jb 0x518250
jmp 0x5182b3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00447380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x11
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.005181e0

Function at 0x5182e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5183cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e7d3ba2a9756f47
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xae6e7d3ba2a9756f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x65a269cc37647261
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf02060402080d02
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2060f0206040208
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5080101050c030c
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x51836a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x51839c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5183bf
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0x11
jb 0x518350
jmp 0x5183b3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00447380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x11
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.005182e0
Function at 0x518c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x518cea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8cb561698ee67552
mov qword [rsp + 0x33], rdx
movabs rdx, 0x4939474d78cb561
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8f90cfc42048c461
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0e120c02110b03
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x13120c111211070f
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa020a081414060a
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x518c8d
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x18
jge 0x518cba
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x518cdd
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x518c70
jmp 0x518cd1
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x15
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.00518c00

Function at 0x51a280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51a36a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x741c207571676140
mov qword [rsp + 0x35], rdx
movabs rdx, 0x776361741c207571
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7773694c4f646c66
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20c0b0b000f000b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe0603110c02020c
mov qword [rsp + 0x25], rdx
movabs rdx, 0x90a0a04120f120a
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x51a30d
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x18]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x18]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jge 0x51a33a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x51a35d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x51a2f0
jmp 0x51a351
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x13
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.0051a280
Function at 0x51adc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51aeda
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x83b97280747361c4
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xe43f2034606f6c1d
mov qword [rsp + 0x45], rdx
movabs rdx, 0x646efce43f203460
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe56d1e54c564cb20
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a0c0f0b0b1a1a18
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x131a0c0f0b0b1a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x141a0c0e04161408
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa0e0a06060a0010
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x7000c0f0a0a0706
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x51ae77
movzx r9d, byte [rsp + rsi + 0x3d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x3d], dl
mov byte [rsp + rsi + 0x3d], r8b
add rax, 2
cmp rax, 0x22
jge 0x51aea9
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x51aecd
movzx r8d, byte [rsp + rdi + 0x3d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
cmp rsi, 0x1b
jb 0x51ae5d
jmp 0x51aec1
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.00447380
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1b
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x1b
call fcn.0045a8c0
nop
call fcn.004585e0
nop
jmp fcn.0051adc0

Function at 0x51b820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51b90c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x83566c748b87974e
mov qword [rsp + 0x33], rdx
movabs rdx, 0x2d6e91928d83566c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65687d6d7e3f7270
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2080f07100c0901
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x403040a130c0208
mov qword [rsp + 0x23], rdx
movabs rdx, 0x40811060d040812
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x51b8aa
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2b]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x51b8dc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x51b8ff
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2b]
cmp rsi, 0x15
jb 0x51b890
jmp 0x51b8f3
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x15
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.0051b820
Function at 0x52f980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52fa8c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x22ed022d36303032
mov qword [rsp + 0x37], rdx
movabs rdx, 0x330bf0f0ec8dc30
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x120330bf0f0ec8dc
mov qword [rsp + 0x40], rdx
movabs rdx, 0xff012937330b2130
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa060f0714160707
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x518100c0913100d
mov qword [rsp + 0x25], rdx
movabs rdx, 0xb070518100c0913
mov qword [rsp + 0x27], rdx
movabs rdx, 0xa120c1713050c06
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x52fa28
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1a
jge 0x52fa5c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x52fa7f
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
cmp rsi, 0x19
jb 0x52fa0e
jmp 0x52fa73
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00447380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x19
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.0052f980

Function at 0x52faa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52fbe7
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x743d302d361f3a32
mov qword [rsp + 0x4d], rdx
movabs rdx, 0x863319743d302d36
mov qword [rsp + 0x50], rdx
movabs rdx, 0x45f821602b3d3555
mov qword [rsp + 0x58], rdx
movabs rdx, 0x302d42396d640e37
mov qword [rsp + 0x60], rdx
movabs rdx, 0x5aa57837301b4c97
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1d1306191c131411
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1d201d1306191c13
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1018011b0714080e
mov qword [rsp + 0x25], rdx
movabs rdx, 0xd0d221002072214
mov qword [rsp + 0x2d], rdx
movabs rdx, 0xf090f20181a0a21
mov qword [rsp + 0x35], rdx
movabs rdx, 0x121921010a16150d
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x10821161c0b0d01
mov qword [rsp + 0x45], rdx
xor eax, eax
jmp 0x52fb87
movzx r9d, byte [rsp + rsi + 0x4d]
sub r9d, edx
lea edx, [r9 + 0x27]
mov byte [rsp + rdi + 0x4d], dl
lea edx, [r8 + 0x27]
mov byte [rsp + rsi + 0x4d], dl
add rax, 2
cmp rax, 0x32
jge 0x52fbb7
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x23
jae 0x52fbda
movzx r8d, byte [rsp + rdi + 0x4d]
sub r8d, edx
cmp rsi, 0x23
jb 0x52fb6a
jmp 0x52fbce
xor eax, eax
lea rbx, [rsp + 0x4d]
mov ecx, 0x23
call fcn.00447380
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x23
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.0052faa0
Function at 0x53a0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53a1a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1de526706c6816d0
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x53690d12
movabs rdx, 0xa09090a0800090b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa05060801070a09
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x53a148
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x61]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jge 0x53a177
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x53a19a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x53a12b
jmp 0x53a18e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00447380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xc
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.0053a0e0

Function at 0x53a1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53a28c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x32dd6c65df91c226
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x566cdee8
movabs rdx, 0x301000802080000
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x90b03030600030b
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x53a225
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x53a25c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x53a27f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0xc
jb 0x53a20b
jmp 0x53a273
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00447380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xc
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.0053a1c0

Function at 0x53a3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53a45d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6c8f2e879761737a
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xf7
movabs rdx, 0x304080806040004
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x400
xor eax, eax
nop
jmp 0x53a400
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x79]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x79]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x53a42d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x53a450
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x53a3e2
jmp 0x53a444
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0045a8c0
mov eax, edi
mov ecx, 9
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.0053a3a0
Function at 0x53b5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53b6a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4aff3554dac51c2f
mov qword [rsp + 0x31], rdx
movabs rdx, 0x34f6332f3828614a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30d030e0607020e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x10a030d030e0607
mov qword [rsp + 0x21], rdx
movabs rdx, 0xc0b03050e000709
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x53b640
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x53b672
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x53b697
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
cmp rsi, 0xf
jb 0x53b622
jmp 0x53b68b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00447380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xf
nop
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.0053b5c0

Function at 0x53b6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53b77e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6f54b75165bc1b52
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x66776510
movabs rdx, 0x2080401020a0801
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x5080501
xor eax, eax
jmp 0x53b721
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x46]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x46]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x53b74e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x53b771
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x53b704
jmp 0x53b765
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xc
call fcn.0045a8c0
nop
nop
call fcn.004585e0
jmp fcn.0053b6c0
Function at 0x53cc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53cce6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa491d17593adc093
mov qword [rsp + 0x30], rdx
movabs rdx, 0x928cd35bb6dd888f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x705090a0202000d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x70600050b080108
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50e0c030903080f
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x53cc80
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x18
jge 0x53ccb2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x53ccd7
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
cmp rsi, 0x10
jb 0x53cc62
jmp 0x53cccb
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00447380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x10
nop
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.0053cc00

Function at 0x540580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54063e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x266c6e7574860cb0
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7972651d
movabs rdx, 0x10800020105
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x80207
xor eax, eax
jmp 0x5405e1
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x54060e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x540631
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x5405c4
jmp 0x540625
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xc
call fcn.0045a8c0
nop
nop
call fcn.004585e0
jmp fcn.00540580

Function at 0x5413a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x54145d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc789a593a1b7538d
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x8dea
movabs rdx, 0x603080200090407
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x5040208
xor eax, eax
jmp 0x541400
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x2b]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x2b]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x54142d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x541450
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x5413e3
jmp 0x541444
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xa
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.005413a0