joyce8/EMBER2024-capa huggingface dataset:
Function at 0x500520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x5006a7
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0x9342e73650ec462
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x203a72d166db0934
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc254c1e7991a65fc
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc46411c8c77574e6
mov qword [rsp + 0x32], rdx
movabs rdx, 0x65762274c0bfd213
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x662002b801ddf88c
mov qword [rsp + 0x42], rdx
movabs rdx, 0x4deee74ec3c66f72
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2b291e2133281206
mov qword [rsp + 0x52], rdx
movabs rdx, 0x192114101b141f08
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x350e320831161921
mov qword [rsp + 0x60], rdx
movabs rdx, 0x11b072306310e34
mov qword [rsp + 0x68], rdx
movabs rdx, 0x27320a1a08271330
mov qword [rsp + 0x70], rdx
movabs rdx, 0x32141507230e1d02
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1026071d27351208
mov qword [rsp + 0x80], rdx
movabs rdx, 0x1121202a34112126
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x500640
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x3e
jge 0x500672
movzx edx, byte [rsp + rax + 0x52]
movzx esi, byte [rsp + rax + 0x53]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x36
jae 0x50069a
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
cmp rsi, 0x36
jb 0x500625
jmp 0x50068e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x36
nop
call fcn.00443420
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x36
call fcn.00454ec0
mov eax, edi
mov ecx, 0x36
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00500520
Function at 0x5039a0
Capabilities:
Hash data using fnv

Disassembly:
test byte [rax], al
mov rcx, rbx
and ebx, 0x7f
shl rbx, 5
lea rdx, [rax + rbx]
xor eax, eax
jmp 0x5039b7
inc rax
cmp rax, 4
jge 0x5039cf
lea rbx, [rdx + rax*8]
mov rbx, qword [rbx]
cmp rbx, rcx
jne 0x5039b4
mov eax, 1
ret
xor eax, eax
movabs rbx, 0xcbf29ce484222325
jmp 0x5039e0
inc rax
cmp rax, 4
jge 0x5039ee
mov rsi, qword [rdx + rax*8]
xor edi, edi
jmp 0x503a17
and ebx, 3
lea rdx, [rdx + rbx*8]
xchg qword [rdx], rcx
xor eax, eax
ret
movzx r8d, sil
xor rbx, r8
inc rdi
shr rsi, 8
movabs r8, 0x100000001b3
imul rbx, r8
cmp rdi, 8
jl 0x5039fb
jmp 0x5039dd

Function at 0x503b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x503c7b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc0d7026861aff869
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1ef072ecea74e6e6
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20eb3651746e5f73
mov qword [rsp + 0x28], rdx
movabs rdx, 0x111060f0904060c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x109021615080714
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8040b0e14080104
mov qword [rsp + 0x40], rdx
movabs rdx, 0x706010f01050c07
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x503c19
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x20
jge 0x503c4b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x503c6e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
cmp rsi, 0x18
jb 0x503bff
jmp 0x503c62
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00454ec0
mov eax, edi
mov ecx, 0x18
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.00503b80
Function at 0x504ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x504c2c
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x20799b5c60886e69
mov qword [rsp + 0x18], rdx
movabs rdx, 0x11bd61f820799b5c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x67b5790a34a71d08
mov qword [rsp + 0x24], rdx
movabs rdx, 0x666134ae0acc1b61
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2059005a207235b3
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd0f221605201506
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe04021c0d0f2216
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc1203201c042113
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50f1d100e04180f
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc1018161c201519
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc1c0a0f0b021c10
mov qword [rsp + 0x60], rdx
movabs rdx, 0x80415200e211017
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x504bc4
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x36]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x34
jge 0x504bfc
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x24
jae 0x504c1f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x36]
cmp rsi, 0x24
jb 0x504baa
jmp 0x504c13
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x24
call fcn.00443420
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00454ec0
mov eax, edi
mov ecx, 0x24
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00504ae0

Function at 0x506800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5068b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd32f026865d3d154
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x607010406040205
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x101
xor eax, eax
jmp 0x506855
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x506888
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x5068ab
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
nop
cmp rsi, 8
jb 0x50683b
jmp 0x50689f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00454ec0
mov eax, edi
mov ecx, 8
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.00506800
Function at 0x507b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x507be6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x426f6d5b64497121
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x676a41385d74565c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80d0501070904
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc00080200080d05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20b0f0e0408
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x507b80
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 7]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x507bb2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x507bd7
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 7]
cmp rsi, 0x10
jb 0x507b62
jmp 0x507bcb
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00454ec0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00507b00

Function at 0x508540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50860c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe4515242644a4752
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x642d32f6
movabs rdx, 0x602040a06090a07
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x701070804010602
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5085a5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x11]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x5085dc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x5085ff
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x11]
cmp rsi, 0xc
jb 0x50858b
jmp 0x5085f3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00454ec0
mov eax, edi
mov ecx, 0xc
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00508540
Function at 0x509b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x509c06
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x14c469bc6129d069
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x28cc748bc821ce14
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0d010902090e0b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe080b0d01090209
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6040a0908020907
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x509ba0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6a]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x509bd2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x509bf7
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6a]
cmp rsi, 0xf
jb 0x509b82
jmp 0x509beb
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00454ec0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00509b20
Function at 0x50c5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50c658
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x73686a74645e4a51
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x705000600070307
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1000205
xor eax, eax
jmp 0x50c5f6
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x50c628
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x50c64b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
cmp rsi, 8
jb 0x50c5dc
jmp 0x50c63f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00454ec0
mov eax, edi
mov ecx, 8
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.0050c5a0

Function at 0x50c760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50c826
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x136fcc60c764bf41
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xf61
movabs rdx, 0x503050401090307
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x301
xor eax, eax
jmp 0x50c7c0
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x50c7f2
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x50c817
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0xa
jb 0x50c7a2
jmp 0x50c80b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00454ec0
mov eax, edi
mov ecx, 0xa
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0050c760
Function at 0x50e440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x48
movups xmmword [rsp + 0x58], xmm15
movabs rdx, 0x2709ab00000a00
mov qword [rsp + 0x26], rdx
movabs rdx, 0x900888d008a8888
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60f090406040a05
mov qword [rsp + 0x36], rdx
movabs rdx, 0x109060f09040604
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9010a060d080f0c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50e4b7
movzx r8d, byte [rsp + rbx + 0x26]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rsi + 0x26], dl
mov byte [rsp + rbx + 0x26], dil
add rax, 2
cmp rax, 0x12
jge 0x50e4e8
movzx edx, byte [rsp + rax + 0x36]
movzx ebx, byte [rsp + rax + 0x37]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 0x10
jae 0x50e525
movzx edi, byte [rsp + rsi + 0x26]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x67]
nop
cmp rbx, 0x10
jb 0x50e49d
jmp 0x50e516
movups xmmword [rsp + 0x16], xmm15
xor eax, eax
jmp 0x50e500
movzx ecx, byte [rsp + rax + 0x26]
mov byte [rsp + rax + 0x16], cl
inc rax
nop
cmp rax, 0x10
jl 0x50e4f2
movups xmm0, xmmword [rsp + 0x16]
movups xmmword [rsp + 0x58], xmm0
add rsp, 0x48
pop rbp
ret
mov eax, ebx
mov ecx, 0x10
nop dword [rax]
call fcn.00454ec0
mov eax, esi
mov ecx, 0x10
call fcn.00454ec0
nop
int3

Function at 0x514c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x514d6c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x776c6d66656d6c7d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x167a79776c6d6665
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6e6f696a63737474
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf03080703090c00
mov qword [rsp + 0x32], rdx
movabs rdx, 0x40d0f05080d0f03
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0705090d020f07
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x514d0a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x17]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x514d3c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x514d5f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x17]
cmp rsi, 0x13
jb 0x514cf0
jmp 0x514d53
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00454ec0
mov eax, edi
mov ecx, 0x13
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00514c80
Function at 0x515700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5157ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xdeb1798b99ca9773
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9344deb1798b99ca
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x74c375948a989483
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd041003060e0705
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80c0a0e0d041003
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb030109020b0503
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x51578d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x16]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x16]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x5157ba
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5157dd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x515770
jmp 0x5157d1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00454ec0
mov eax, edi
mov ecx, 0x12
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.00515700

Function at 0x517ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xddde2dcc5525a588
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x104020103010505
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x405
xor eax, eax
jmp 0x517ef4
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x517f28
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x517f65
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x28]
nop dword [rax + rax]
cmp rbx, 8
jb 0x517eda
jmp 0x517f57
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x517f41
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x517f35
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x518640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0xb91064592bb7a2bc
mov qword [rsp + 0x20], rdx
movabs rdx, 0x604020007050307
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x51868d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x17]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x5186bc
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5186f7
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x17]
cmp rbx, 8
jb 0x518673
jmp 0x5186eb
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5186d5
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x5186c9
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00454ec0
mov eax, esi
mov ecx, 8
nop
call fcn.00454ec0
nop
int3

Function at 0x518720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xa0b04614f145e71a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x100040703010606
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4020006
xor eax, eax
jmp 0x518777
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0xc]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x5187a8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5187e5
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x51875b
jmp 0x5187d7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x5187c1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x5187b5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x519240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x62385e1706526d39
mov qword [rsp + 0x18], rax
movabs rax, 0x714e0a517518a20f
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1f]
movzx ecx, byte [rsp + 0x24]
add eax, ecx
movzx ecx, byte [rsp + 0x23]
movzx edx, byte [rsp + 0x1c]
sub ecx, edx
movzx edx, byte [rsp + 0x20]
movzx ebx, byte [rsp + 0x21]
add edx, ebx
movzx ebx, byte [rsp + 0x1b]
movzx esi, byte [rsp + 0x18]
add ebx, esi
movzx esi, byte [rsp + 0x19]
movzx edi, byte [rsp + 0x1e]
xor esi, edi
movzx edi, byte [rsp + 0x22]
movzx r8d, byte [rsp + 0x27]
sub edi, r8d
movzx r8d, byte [rsp + 0x26]
movzx r9d, byte [rsp + 0x25]
add r8d, r9d
movzx r9d, byte [rsp + 0x1a]
movzx r10d, byte [rsp + 0x1d]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x519326
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x51931a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x51a200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x3b704588138ee209
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x406070705030405
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x200
xor eax, eax
jmp 0x51a256
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 3]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x51a282
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x51a2c5
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x51a23a
nop
jmp 0x51a2b6
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x51a2a0
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x51a28f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x51da00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x3f421cfba975c3bb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x204040107050705
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x506
xor eax, eax
jmp 0x51da54
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x51da88
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x51dac5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x5d]
nop dword [rax + rax]
cmp rbx, 8
jb 0x51da3a
jmp 0x51dab7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x51daa1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x51da95
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3

Function at 0x51dce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xbc4a73be9fa3278c
mov qword [rsp + 0x18], rax
movabs rax, 0x7754f243260d8031
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x27]
movzx ecx, byte [rsp + 0x20]
add eax, ecx
movzx ecx, byte [rsp + 0x26]
movzx edx, byte [rsp + 0x1a]
xor ecx, edx
movzx edx, byte [rsp + 0x19]
movzx ebx, byte [rsp + 0x24]
sub edx, ebx
movzx ebx, byte [rsp + 0x23]
movzx esi, byte [rsp + 0x1e]
add ebx, esi
movzx esi, byte [rsp + 0x1b]
movzx edi, byte [rsp + 0x1d]
add esi, edi
movzx edi, byte [rsp + 0x1c]
movzx r8d, byte [rsp + 0x18]
sub edi, r8d
movzx r8d, byte [rsp + 0x22]
movzx r9d, byte [rsp + 0x1f]
add r8d, r9d
movzx r9d, byte [rsp + 0x25]
movzx r10d, byte [rsp + 0x21]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x51ddc6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x51ddba
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret