joyce8/EMBER2024-capa huggingface dataset:
Function at 0x50cce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50cda8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe334d76970313d97
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xe3
movabs rdx, 0x602050006020105
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x708
xor eax, eax
jmp 0x50cd43
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x50cd70
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x50cd9b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x50cd26
jmp 0x50cd8f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0050cce0

Function at 0x50d4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50d5ab
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x744d636a7b706582
mov qword [rsp + 0x18], rdx
movabs rdx, 0x65765e65559b5f9a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9080304060d080d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40f090b0f04060f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa010f0e0d0a01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50d544
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0xd]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0xd]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x18
jge 0x50d577
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x50d59e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x50d527
jmp 0x50d592
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0050d4c0
Function at 0x50d900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50d9f6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x725070546b2a6f54
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x463048764c725070
mov qword [rsp + 0x22], rdx
movabs rdx, 0x33346051541f4667
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x14080b1312040210
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc0e10130b0a1408
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11211110800080f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50d993
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x2d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x2d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x50d9c2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x50d9e9
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x50d976
nop
jmp 0x50d9dd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x15
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.0050d900

Function at 0x50e1e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50e2e8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x8d0461f27b9af3e9
mov qword [rsp + 0x18], rdx
movabs rdx, 0x81dd72658d0461f2
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x73d4734d650d9d63
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0a02070d0c0703
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd100c0211020e0e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x60704100d100c02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4000a0111030d12
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50e280
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x50e2b2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x50e2db
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0x14
jb 0x50e265
jmp 0x50e2cf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x14
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0050e1e0
Function at 0x50e300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50e3f6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd970e11234ab31be
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf774d970e11234ab
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x57e429b46dd788ab
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb0a0f0401000f0b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2000c0403030b0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5070f0f09100e03
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50e393
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x50e3c2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x50e3e9
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x50e376
nop
jmp 0x50e3dd
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.0050e300

Function at 0x50e500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50e5e8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x65927275c11298b6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf9610eb730c61bbe
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb090d08020f0b0b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa020b090d08020f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x106030c0b080f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50e581
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x62]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x12
jge 0x50e5b3
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x50e5db
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x62]
cmp rsi, 0x10
jb 0x50e567
jmp 0x50e5cf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0050e500
Function at 0x510580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x510652
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x255c5d6853f25554
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6c6558255c5d6853
mov qword [rsp + 0x20], rdx
movabs rdx, 0x708080106050201
mov qword [rsp + 0x28], rdx
movabs rdx, 0x206000802000702
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5105ee
movzx r9d, byte [rsp + rsi + 0x1d]
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x51061b
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x510645
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, edx
cmp rsi, 0xb
jb 0x5105d8
jmp 0x510636
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00510580

Function at 0x510660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51075c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x477217095500fd8d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf7094c65fd477217
mov qword [rsp + 0x22], rdx
movabs rdx, 0x72937508e7ee8d61
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x405110213090c02
mov qword [rsp + 0x32], rdx
movabs rdx, 0x140e0108000e0405
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90b100e13000f11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5106f0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x510728
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x51074f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
nop word [rax + rax]
cmp rsi, 0x15
jb 0x5106d6
jmp 0x510743
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x15
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.00510660
Function at 0x510780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x510888
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x82639bee9aab9845
mov qword [rsp + 0x18], rdx
movabs rdx, 0x8a9d73a982639bee
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa781ae8da6dd7b6d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa0a110e1100040a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30d1113080e0f02
mov qword [rsp + 0x34], rdx
movabs rdx, 0x8050a00030d1113
mov qword [rsp + 0x38], rdx
movabs rdx, 0x501100407120b13
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x510820
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x47]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x510852
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x51087b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x47]
cmp rsi, 0x14
jb 0x510805
jmp 0x51086f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x14
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00510780

Function at 0x510ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x510c9c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x45e6db2b74121ed2
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6dc9b372adc0cb45
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3a46b7bad6d8c8c1
mov qword [rsp + 0x28], rdx
movabs rdx, 0x602160d11040415
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80106120a00050d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x813150c10090f14
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x510c30
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x510c68
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x510c8f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7d]
nop word [rax + rax]
cmp rsi, 0x17
jb 0x510c16
jmp 0x510c83
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.00510ba0
Function at 0x518ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x518c12
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x20706f6654166175
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5e20706f66541661
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x70757e756e13726f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x625f64652b4c6f8e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4c784d5020657131
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1e0e050e1e001114
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb1f0e1a101f1e0e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170211200e1f0e06
mov qword [rsp + 0x48], rdx
movabs rdx, 0x131f20191e040318
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb0e001f081d0c0d
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x518bac
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x26
jge 0x518bde
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x518c05
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
cmp rsi, 0x21
jb 0x518b92
jmp 0x518bf9
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x21
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x21
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x21
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00518ae0

Function at 0x519500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x519628
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x71163120f0630b04
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x4a6d3a7740bce02
mov qword [rsp + 0x23], rdx
movabs rdx, 0xb04a6d3a7740bce
mov qword [rsp + 0x24], rdx
movabs rdx, 0x78b877191200b0c3
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4150c1305070617
mov qword [rsp + 0x34], rdx
movabs rdx, 0x911031404150c13
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9080d050c0d1208
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10131001131601
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50a0d060f0e00
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5195c0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x5195f2
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x51961b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0x19
jb 0x5195a3
jmp 0x51960f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x19
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00519500
Function at 0x519640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x519826
sub rsp, 0xb8
mov qword [rsp + 0xb0], rbp
lea rbp, [rsp + 0xb0]
movabs rdx, 0x796e97ada7fbf174
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x997542f73673fa79
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4370f401742f6572
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2073dc6f6936ab72
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd50114200723b0e4
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe311862200b1232
mov qword [rsp + 0x42], rdx
movabs rdx, 0xd26331243ff41298
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2047616419203465
mov qword [rsp + 0x52], rdx
movabs rdx, 0xc3b0373538a75b31
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x261f2d11323a0132
mov qword [rsp + 0x62], rdx
movabs rdx, 0x4030446333b2909
mov qword [rsp + 0x6a], rdx
movabs rdx, 0x2f1c051936280403
mov qword [rsp + 0x70], rdx
movabs rdx, 0x244645191c092b08
mov qword [rsp + 0x78], rdx
movabs rdx, 0x131f3d31182e1f1c
mov qword [rsp + 0x80], rdx
movabs rdx, 0x36380a0c21042041
mov qword [rsp + 0x88], rdx
movabs rdx, 0x3d192940343b2116
mov qword [rsp + 0x90], rdx
movabs rdx, 0x262b142e2027292b
mov qword [rsp + 0x98], rdx
movabs rdx, 0x220b0e221c1f302c
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x2113250228094608
mov qword [rsp + 0xa8], rdx
xor eax, eax
jmp 0x5197b3
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 3]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x4e
jge 0x5197e8
movzx edx, byte [rsp + rax + 0x62]
movzx esi, byte [rsp + rax + 0x63]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x519815
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 3]
nop dword [rax]
cmp rsi, 0x47
jb 0x519799
jmp 0x519809
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x47
call fcn.0044a200
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov eax, esi
mov ecx, 0x47
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x47
nop dword [rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00519640

Function at 0x51dbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51dc9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xbab8dc50d2d75e21
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7373c5bab8dc50d2
mov qword [rsp + 0x20], rdx
movabs rdx, 0x506080206070007
mov qword [rsp + 0x28], rdx
movabs rdx, 0x701010705030302
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51dc35
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x64]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x64]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x51dc68
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x51dc8f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x51dc18
jmp 0x51dc83
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0051dbc0
Function at 0x529220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x529346
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x3dad04f0f56e03de
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6506cf8872907218
mov qword [rsp + 0x25], rdx
movabs rdx, 0x676e696ef26506cf
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x56776674f34ff9fa
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1c060c1b1a190d1c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x4000d080d0f1c06
mov qword [rsp + 0x40], rdx
movabs rdx, 0x181c071b10190d0c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15170105030e0a1a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x15061a161816161b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5292e0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x26
jge 0x52930d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x529334
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x5292c3
jmp 0x529328
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00529220

Function at 0x529360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x529432
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x52574454442e3525
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x60344f44
movabs rdx, 0x403040702010b03
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb09040b090a0403
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5293cb
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x12]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x5293fd
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x529425
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x12]
cmp rsi, 0xc
jb 0x5293b1
jmp 0x529418
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00529360
Function at 0x52afe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52b0d6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x9166a8df3332adae
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x9b9166a8df3332ad
mov qword [rsp + 0x20], rdx
movabs rdx, 0x927f6534705b616b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80c01090c060607
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0500090b000400
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10091008040f0405
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x52b073
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x52b0a2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x52b0c9
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x52b056
nop
jmp 0x52b0bd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.0052afe0

Function at 0x52c0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52c19c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6337a5b5e42f1afb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x657b6f6c6337a5b5
mov qword [rsp + 0x22], rdx
movabs rdx, 0x72d9382729f52064
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf00040003111002
mov qword [rsp + 0x32], rdx
movabs rdx, 0x110f050e0a060f00
mov qword [rsp + 0x38], rdx
movabs rdx, 0x401050e0112060e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x52c130
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x52c168
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x52c18f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
nop word [rax + rax]
cmp rsi, 0x14
jb 0x52c116
jmp 0x52c183
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x14
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0052c0a0