joyce8/EMBER2024-capa huggingface dataset:
Function at 0x51a480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x49de3b86d1dfff1e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x502070202070500
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x51a4cf
movzx r8d, byte [rsp + rbx + 0x20]
sub r8d, edx
lea edx, [r8 + 0x52]
mov byte [rsp + rsi + 0x20], dl
lea edx, [rdi + 0x52]
mov byte [rsp + rbx + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x51a4fa
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x51a535
movzx edi, byte [rsp + rsi + 0x20]
sub edi, edx
cmp rbx, 8
jb 0x51a4b3
jmp 0x51a529
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x51a513
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x51a507
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00454ec0
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
nop
int3

Function at 0x51b460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x9b581ff8db9217b
mov qword [rsp + 0x18], rax
movabs rax, 0x4f254eddd691f948
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x1a]
add eax, ecx
movzx ecx, byte [rsp + 0x1b]
movzx edx, byte [rsp + 0x18]
add ecx, edx
movzx edx, byte [rsp + 0x1d]
movzx ebx, byte [rsp + 0x22]
xor edx, ebx
movzx ebx, byte [rsp + 0x25]
movzx esi, byte [rsp + 0x19]
sub ebx, esi
movzx esi, byte [rsp + 0x1f]
movzx edi, byte [rsp + 0x21]
sub esi, edi
movzx edi, byte [rsp + 0x24]
movzx r8d, byte [rsp + 0x1c]
add edi, r8d
movzx r8d, byte [rsp + 0x1e]
movzx r9d, byte [rsp + 0x20]
add r8d, r9d
movzx r9d, byte [rsp + 0x27]
movzx r10d, byte [rsp + 0x26]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x51b546
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x51b53a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x51bcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x67b0da8b7ce7ab69
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x101050500050000
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x303
xor eax, eax
jmp 0x51bd16
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x29]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x51bd42
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x51bd85
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x51bcfa
nop
jmp 0x51bd76
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x51bd60
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x51bd4f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3

Function at 0x51c200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xb3fd97f3c1b03691
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x701050101060403
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x407
xor eax, eax
jmp 0x51c254
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x51c288
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x51c2c5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x6e]
nop dword [rax + rax]
cmp rbx, 8
jb 0x51c23a
jmp 0x51c2b7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x51c2a1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x51c295
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x51c2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x411b0565448ae281
mov qword [rsp + 0x20], rdx
movabs rdx, 0x507070603050502
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x51c32d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x10]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x51c35c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x51c397
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x10]
cmp rbx, 8
jb 0x51c313
jmp 0x51c38b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x51c375
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x51c369
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00454ec0
mov eax, esi
mov ecx, 8
nop
call fcn.00454ec0
nop
int3

Function at 0x51c3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xbadc7238dee3e340
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6010604070707
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x307
xor eax, eax
jmp 0x51c414
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x51c448
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x51c485
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x53]
nop dword [rax + rax]
cmp rbx, 8
jb 0x51c3fa
jmp 0x51c477
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x51c461
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x51c455
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x51ce80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x81e9b3c8c52ee757
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7060701000403
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x605
xor eax, eax
jmp 0x51ced6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x10]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x51cf02
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x51cf45
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x51ceba
nop
jmp 0x51cf36
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x51cf20
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x51cf0f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3

Function at 0x51cf60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x277d6257dcfdce58
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x502000302050204
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x303
xor eax, eax
jmp 0x51cfb6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x31]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x51cfe2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x51d025
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x51cf9a
nop
jmp 0x51d016
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x51d000
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x51cfef
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x51e3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x4d5637329e655579
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x705000301070305
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x106
xor eax, eax
jmp 0x51e434
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x37]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x51e468
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x51e4a5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x37]
nop dword [rax + rax]
cmp rbx, 8
jb 0x51e41a
jmp 0x51e497
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x51e481
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x51e475
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3

Function at 0x51e4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x6685e62c9e9aaeaa
mov qword [rsp + 0x20], rdx
movabs rdx, 0x605020504020203
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x51e50d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x51e53c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x51e577
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x38]
cmp rbx, 8
jb 0x51e4f3
jmp 0x51e56b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x51e555
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x51e549
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00454ec0
mov eax, esi
mov ecx, 8
nop
call fcn.00454ec0
nop
int3
Function at 0x51e780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x97115275ebdf2595
mov qword [rsp + 0x18], rax
movabs rax, 0xee4a71648f990825
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x27]
movzx ecx, byte [rsp + 0x25]
xor eax, ecx
movzx ecx, byte [rsp + 0x23]
movzx edx, byte [rsp + 0x1f]
add ecx, edx
movzx edx, byte [rsp + 0x21]
movzx ebx, byte [rsp + 0x1d]
sub edx, ebx
movzx ebx, byte [rsp + 0x1c]
movzx esi, byte [rsp + 0x22]
add ebx, esi
movzx esi, byte [rsp + 0x18]
movzx edi, byte [rsp + 0x1e]
sub esi, edi
movzx edi, byte [rsp + 0x26]
movzx r8d, byte [rsp + 0x19]
add edi, r8d
movzx r8d, byte [rsp + 0x1a]
movzx r9d, byte [rsp + 0x20]
sub r8d, r9d
movzx r9d, byte [rsp + 0x1b]
movzx r10d, byte [rsp + 0x24]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x51e866
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x51e85a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x51fe80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x3e8526d2bf43d6ac
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x403010506030307
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6040403
xor eax, eax
jmp 0x51fed7
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x66]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x51ff08
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x51ff45
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x51febb
jmp 0x51ff37
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x51ff21
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x51ff15
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x5204c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x33390dfae6645984
mov qword [rsp + 0x20], rdx
movabs rdx, 0x101070605010706
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x52050d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x67]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x52053c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x520577
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x67]
cmp rbx, 8
jb 0x5204f3
jmp 0x52056b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x520555
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x520549
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00454ec0
mov eax, esi
mov ecx, 8
nop
call fcn.00454ec0
nop
int3

Function at 0x5205a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x99e4e90c3eefb3a9
mov qword [rsp + 0x18], rax
movabs rax, 0xcbd7409ae599a000
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x1b]
sub eax, ecx
movzx ecx, byte [rsp + 0x19]
movzx edx, byte [rsp + 0x1f]
sub ecx, edx
movzx edx, byte [rsp + 0x18]
movzx ebx, byte [rsp + 0x21]
sub edx, ebx
movzx ebx, byte [rsp + 0x25]
movzx esi, byte [rsp + 0x26]
sub ebx, esi
movzx esi, byte [rsp + 0x20]
movzx edi, byte [rsp + 0x27]
xor esi, edi
movzx edi, byte [rsp + 0x1a]
movzx r8d, byte [rsp + 0x22]
sub edi, r8d
movzx r8d, byte [rsp + 0x24]
movzx r9d, byte [rsp + 0x1c]
add r8d, r9d
movzx r9d, byte [rsp + 0x1d]
movzx r10d, byte [rsp + 0x1e]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x520686
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x52067a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x521040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x71b4f157bafe2a94
mov qword [rsp + 0x18], rax
movabs rax, 0x27853f80c45142de
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1e]
movzx ecx, byte [rsp + 0x25]
xor eax, ecx
movzx ecx, byte [rsp + 0x20]
movzx edx, byte [rsp + 0x23]
sub ecx, edx
movzx edx, byte [rsp + 0x24]
movzx ebx, byte [rsp + 0x1a]
add edx, ebx
movzx ebx, byte [rsp + 0x1d]
movzx esi, byte [rsp + 0x26]
add ebx, esi
movzx esi, byte [rsp + 0x22]
movzx edi, byte [rsp + 0x1c]
sub esi, edi
movzx edi, byte [rsp + 0x1f]
movzx r8d, byte [rsp + 0x27]
add edi, r8d
movzx r8d, byte [rsp + 0x21]
movzx r9d, byte [rsp + 0x18]
add r8d, r9d
movzx r9d, byte [rsp + 0x1b]
movzx r10d, byte [rsp + 0x19]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x521126
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x52111a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x5212a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x3c578fac34c5f2bd
mov qword [rsp + 0x18], rax
movabs rax, 0xd30a92bcc2746f4f
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x19]
movzx ecx, byte [rsp + 0x1e]
sub eax, ecx
movzx ecx, byte [rsp + 0x26]
movzx edx, byte [rsp + 0x1a]
sub ecx, edx
movzx edx, byte [rsp + 0x23]
movzx ebx, byte [rsp + 0x1b]
xor edx, ebx
movzx ebx, byte [rsp + 0x1c]
movzx esi, byte [rsp + 0x1f]
sub ebx, esi
movzx esi, byte [rsp + 0x25]
movzx edi, byte [rsp + 0x21]
sub esi, edi
movzx edi, byte [rsp + 0x27]
movzx r8d, byte [rsp + 0x22]
sub edi, r8d
movzx r8d, byte [rsp + 0x18]
movzx r9d, byte [rsp + 0x24]
add r8d, r9d
movzx r9d, byte [rsp + 0x20]
movzx r10d, byte [rsp + 0x1d]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x521386
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x52137a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x521be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x6b44149359665586
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x306060103070507
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1070607
xor eax, eax
jmp 0x521c37
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x54]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x521c68
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x521ca5
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x521c1b
jmp 0x521c97
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x521c81
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x521c75
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3

Function at 0x522040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x427104b6af0f6efd
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x101040607040003
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x206
xor eax, eax
jmp 0x522094
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x5220c8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x522105
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x2c]
nop dword [rax + rax]
cmp rbx, 8
jb 0x52207a
jmp 0x5220f7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x5220e1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x5220d5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x522e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x32088d8d67b78283
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x104060401070003
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 2
xor eax, eax
jmp 0x522e76
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 6]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x522ea2
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x522ee5
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x522e5a
nop
jmp 0x522ed6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x522ec0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x522eaf
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3

Function at 0x523280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xae251f9c1d95ebf9
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4050206050202
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1060600
xor eax, eax
jmp 0x5232d7
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x2c]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x2c]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x523308
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x523345
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x5232bb
jmp 0x523337
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x523321
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x523315
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3