joyce8/EMBER2024-capa huggingface dataset:
Function at 0x50dfc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50e0a8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x95070f73c267e38a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe0fcede5654b6595
mov qword [rsp + 0x24], rdx
movabs rdx, 0x100070605070c0e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0c050401000706
mov qword [rsp + 0x30], rdx
movabs rdx, 0x506030d010b030c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50e041
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x68
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x50e072
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x50e09b
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x68
add r8d, edx
cmp rsi, 0xf
jb 0x50e027
jmp 0x50e08f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461e80
mov eax, edi
mov ecx, 0xf
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0050dfc0

Function at 0x50e2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50e39c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x531c242d38676552
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x44f63c6cc5531c24
mov qword [rsp + 0x22], rdx
movabs rdx, 0x306040c05070308
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa070a0b07060306
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x50e332
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x1e
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x50e368
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x50e38f
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x1e
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xd
jb 0x50e318
jmp 0x50e383
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461e80
mov eax, edi
mov ecx, 0xd
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.0050e2c0
Function at 0x5112c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51137c
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0x79c991ae72898446
mov qword [rsp + 0x20], rdx
movabs rdx, 0x102010506050504
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x511317
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x511348
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x51136f
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x5112fa
jmp 0x511363
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044ba20
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.00461e80
mov eax, edi
mov ecx, 8
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.005112c0

Function at 0x5113a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x511468
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x8162eef489866553
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x7f
movabs rdx, 0x804020802030704
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2030405
xor eax, eax
jmp 0x511401
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x6e
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x511432
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x51145b
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x6e
add r8d, edx
cmp rsi, 9
jb 0x5113e7
jmp 0x51144f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005113a0

Function at 0x518800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5188eb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xc662200f65336974
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf45de82d30f8ee0e
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0a040f0f0a0207
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2040f0a040f0f0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80f09040904040d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x518884
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x33]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x33]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x5188b7
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x5188de
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x518867
jmp 0x5188d2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461e80
mov eax, edi
mov ecx, 0x10
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00518800
Function at 0x51fd00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51fe08
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x79612e67343034dc
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe4d20c369b937961
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x65d56954fe64c041
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa0d0e020c110d0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x814110803011109
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf0c081411080301
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb00050a0a0c1100
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x51fda0
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x21
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x51fdd1
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x51fdfb
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x21
add r8d, edx
cmp rsi, 0x16
jb 0x51fd85
jmp 0x51fdef
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461e80
mov eax, edi
mov ecx, 0x16
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.0051fd00

Function at 0x520160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x520272
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xdd3ef213a620d2dc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x64040774ddffc1b2
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3ef869f8204326ed
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3000a090d100407
mov qword [rsp + 0x36], rdx
movabs rdx, 0x111603000a090d10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1400040e0d080105
mov qword [rsp + 0x40], rdx
movabs rdx, 0x500100d14030b0a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1704100106120911
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x520211
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x52023e
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x520265
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x5201f4
jmp 0x520259
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461e80
mov eax, edi
mov ecx, 0x18
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00520160
Function at 0x521da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x521ea8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xd1698bcaab75a5d2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x64a7a6745320d169
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd987c9c744e97218
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe040c1401151004
mov qword [rsp + 0x34], rdx
movabs rdx, 0x12130c1107111304
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x70b130012130c11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x51003040b040113
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x521e40
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffaa
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x521e71
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x521e9b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffaa
add r8d, edx
cmp rsi, 0x16
jb 0x521e25
jmp 0x521e8f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461e80
mov eax, edi
mov ecx, 0x16
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00521da0

Function at 0x521ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x521fb6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x21d7ec6e2b65eb47
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2b6e2f7453ba6421
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1ad3e5203dd47161
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1516060903100911
mov qword [rsp + 0x30], rdx
movabs rdx, 0x140c1405110c1603
mov qword [rsp + 0x38], rdx
movabs rdx, 0x51301121613070e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x521f53
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x5c]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x5c]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x521f82
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x521fa9
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x521f36
nop
jmp 0x521f9d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461e80
mov eax, edi
mov ecx, 0x17
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.00521ec0
Function at 0x521fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x522106
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xc7e46198aca7ad49
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6c616ba49bd27c54
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc396617a016c616b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65a8ac54dc9c17ba
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf00160c0d111013
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60b0c0a0d070107
mov qword [rsp + 0x40], rdx
movabs rdx, 0x17131b0c021a0818
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb14110a04011010
mov qword [rsp + 0x50], rdx
movabs rdx, 0x80915150a151703
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5220a0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x14]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x28
jge 0x5220cd
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x5220f4
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x522083
jmp 0x5220e8
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.0044ba20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461e80
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00521fe0

Function at 0x523180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x523293
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x451e2f234d2853e7
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4b049bf6ba2669fc
mov qword [rsp + 0x21], rdx
movabs rdx, 0x64b049bf6ba2669
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2fe54ed620647231
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x100e170816160b17
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0517100c0b0f07
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x180a000211040e05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6080215020c0c0d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x52322e
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x19
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x52325f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x523286
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x19
add r8d, edx
cmp rsi, 0x19
jb 0x523214
jmp 0x52327a
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00523180
Function at 0x523640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x523753
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x17dc0c1d61672080
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5eab2c740e200ebe
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf11462fa8358ffa5
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1507161504080806
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100b160b15071615
mov qword [rsp + 0x38], rdx
movabs rdx, 0x911061207010d11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130509000b06050f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9141701050b0b0e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5236ee
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x3a
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x24
jge 0x52371f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x523746
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x3a
add r8d, edx
cmp rsi, 0x18
jb 0x5236d4
jmp 0x52373a
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461e80
mov eax, edi
mov ecx, 0x18
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00523640

Function at 0x523760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x523868
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x717a1d4f654e6d54
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x706e617453204e0b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1a61693d3a257265
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf05100414141601
mov qword [rsp + 0x32], rdx
movabs rdx, 0x8000317030f0706
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x914091203070800
mov qword [rsp + 0x40], rdx
movabs rdx, 0x917001302101414
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x523800
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffffe9
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x523831
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x52385b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffffe9
add r8d, edx
cmp rsi, 0x18
jb 0x5237e5
jmp 0x52384f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461e80
mov eax, edi
mov ecx, 0x18
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00523760
Function at 0x525600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x525708
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x47530b618c22f753
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xcb8fcd47530b618c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xdf6daec59b64b150
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe07020a120e0105
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf070110050b0803
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa090f070110050b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb020209100c0307
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5256a2
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x5256cf
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5256fb
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x525685
jmp 0x5256ef
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop dword [rax + rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461e80
mov eax, edi
mov ecx, 0x13
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00525600

Function at 0x525fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x526096
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xb020116973c17565
mov qword [rsp + 0x19], rdx
movabs rdx, 0xcc769b020116973
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9bfb979fb3aa6dbb
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc110e0e050e0209
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x100b0a0c110e0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0b120e0d0c070f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x526030
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffa1
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x526062
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x526089
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffa1
add r8d, edx
cmp rsi, 0x13
jb 0x526016
nop
jmp 0x52607d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461e80
mov eax, edi
mov ecx, 0x13
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.00525fa0
Function at 0x5267a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5268b3
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x345520c37472231b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x40287427200b653c
mov qword [rsp + 0x21], rdx
movabs rdx, 0x940287427200b65
mov qword [rsp + 0x22], rdx
movabs rdx, 0x15084f5410f84d19
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa01000704061016
mov qword [rsp + 0x32], rdx
movabs rdx, 0x110c181406011617
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1171413070a110c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80f0e1617181212
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x52684e
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xf
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x52687f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5268a6
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xf
add r8d, edx
cmp rsi, 0x19
jb 0x526834
jmp 0x52689a
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.005267a0

Function at 0x5274c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5275b6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x53dd6965d0004d54
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6cebefea53dd6965
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656de154876454d7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8030b0f0b0f0211
mov qword [rsp + 0x32], rdx
movabs rdx, 0x611090d06010803
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0a0a080c09080f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x527550
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0x75
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x527582
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5275a9
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0x75
add r8d, edx
cmp rsi, 0x14
jb 0x527536
nop
jmp 0x52759d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461e80
mov eax, edi
mov ecx, 0x14
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.005274c0
Function at 0x527ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x527fd2
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x9fa56e6ed299858d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x82967f98b87292e8
mov qword [rsp + 0x25], rdx
movabs rdx, 0x6482967f98b87292
mov qword [rsp + 0x26], rdx
movabs rdx, 0x65f2615420648e8e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0506080c050c17
mov qword [rsp + 0x36], rdx
movabs rdx, 0x20f080e090d0712
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x30b020f080e090d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110600160b0103
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x527f71
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x527f9e
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x527fc5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x527f54
jmp 0x527fb9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00527ec0

Function at 0x527fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5280f3
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xc4d7353f64bf6ccc
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf16174f77fc56f74
mov qword [rsp + 0x21], rdx
movabs rdx, 0x64f16174f77fc56f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2dae2920f164da3f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x150217110717040f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x12060b0716181104
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa0a0c0a07141206
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1406120507150c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x52808e
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x24
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x5280bf
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5280e6
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x24
add r8d, edx
cmp rsi, 0x19
jb 0x528074
jmp 0x5280da
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.00527fe0