joyce8/EMBER2024-capa huggingface dataset:
Function at 0x507a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x507bac
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xeed7756ad6d96c81
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x3d63e80c598641d8
mov qword [rsp + 0x52], rdx
movabs rdx, 0x796e95ee53203d63
mov qword [rsp + 0x58], rdx
movabs rdx, 0x85e42054e5eb72e0
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb181d001b1500
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1d02120413040d18
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa161c151d021204
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc07191613061915
mov qword [rsp + 0x32], rdx
movabs rdx, 0x708191201190b19
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf00030b02120f0b
mov qword [rsp + 0x42], rdx
xor eax, eax
jmp 0x507b46
movzx r9d, byte [rsp + rsi + 0x4a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rdi + 0x4a], dl
mov byte [rsp + rsi + 0x4a], r8b
add rax, 2
cmp rax, 0x2c
jge 0x507b7c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1e
jae 0x507b9f
movzx r8d, byte [rsp + rdi + 0x4a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5f]
cmp rsi, 0x1e
jb 0x507b2c
jmp 0x507b93
xor eax, eax
lea rbx, [rsp + 0x4a]
mov ecx, 0x1e
call fcn.00444780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00456420
mov eax, edi
mov ecx, 0x1e
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00507a80

Function at 0x507bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x507cda
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xf86eab6f5fdebb9f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa584a6a6c055ce6c
mov qword [rsp + 0x46], rdx
movabs rdx, 0x3f6ea584a6a6c055
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa5ca97dc20c3d5bb
mov qword [rsp + 0x50], rdx
movabs rdx, 0x160913130203070a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x207121116091313
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x12020b09170f19
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0f05010a070d18
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x16030d130e00140d
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x507c77
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x62]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x24
jge 0x507ca9
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x507ccd
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x62]
cmp rsi, 0x1a
jb 0x507c5d
jmp 0x507cc1
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456420
mov eax, edi
mov ecx, 0x1a
call fcn.00456420
nop
call fcn.00454140
nop
jmp fcn.00507bc0
Function at 0x507e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x507f1d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8833e41fcccfca34
mov qword [rsp + 0x35], rdx
movabs rdx, 0x6498458833e41fcc
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6ded2820e77261
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5010f0209020d03
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1206100501030107
mov qword [rsp + 0x23], rdx
movabs rdx, 0xd0f120610050103
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1008000410090306
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x507ec0
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x507eed
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x507f10
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x507e9f
jmp 0x507f04
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456420
mov eax, edi
mov ecx, 0x13
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.00507e20

Function at 0x509640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50973b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74538c4b6964d801
mov qword [rsp + 0x35], rdx
movabs rdx, 0xc3cd7074538c4b69
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc7afcb9b8dce728e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0b0d001111000d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x10120a0901080a01
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa0a10120a090108
mov qword [rsp + 0x25], rdx
movabs rdx, 0x504010e12100009
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x5096d9
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x44]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x50970b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x50972e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x44]
cmp rsi, 0x13
jb 0x5096bf
jmp 0x509722
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456420
mov eax, edi
mov ecx, 0x13
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.00509640
Function at 0x50b540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50b62a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5422b1d9731775bc
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x656df85422b1d973
mov qword [rsp + 0x30], rdx
movabs rdx, 0xece8206534cd011c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x511000e0b0d000e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x20508120511000e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4060c08110c0e08
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x50b5cd
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x5b]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x14
jge 0x50b5fa
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x50b61d
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0x13
jb 0x50b5b0
jmp 0x50b611
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456420
mov eax, edi
mov ecx, 0x13
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0050b540

Function at 0x50bec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50bfbb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8c412068c4c7a5e7
mov qword [rsp + 0x38], rdx
movabs rdx, 0xac6e8c9c83206191
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf2ee8f8d206493b4
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1010170d16020007
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x215030d0f0c100b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3010d080215030d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x715111607151402
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x50bf59
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x45]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1c
jge 0x50bf8b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x50bfae
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x45]
cmp rsi, 0x18
jb 0x50bf3f
jmp 0x50bfa2
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456420
mov eax, edi
mov ecx, 0x18
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.0050bec0
Function at 0x50ed80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50ee7d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xdd202dfa7312f252
mov qword [rsp + 0x35], rdx
movabs rdx, 0x32ea0bdd202dfa73
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe3e29e65338c8eeb
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1211080c09071010
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x805090b04100d09
mov qword [rsp + 0x23], rdx
movabs rdx, 0x7020805090b0410
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1001090e05100a04
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x50ee20
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x50ee4d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x50ee70
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x50edff
jmp 0x50ee64
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456420
mov eax, edi
mov ecx, 0x13
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.0050ed80

Function at 0x50f760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50f84c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x17c4f32c106d6f54
mov qword [rsp + 0x35], rdx
movabs rdx, 0xc7ba6117c4f32c10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x931fcc8113647c61
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc120407090f0c09
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe090a0e03111011
mov qword [rsp + 0x25], rdx
movabs rdx, 0xf05040f0c0c0c06
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x50f7ea
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x18
jge 0x50f81c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x50f83f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x41]
cmp rsi, 0x13
jb 0x50f7d0
jmp 0x50f833
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456420
mov eax, edi
mov ecx, 0x13
call fcn.00456420
nop
call fcn.00454140
jmp fcn.0050f760
Function at 0x512260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51235b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5d6e5d1a13746730
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1738163653325d6e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x546d0b1d43642161
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3011308150d0b05
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa040f11120f11
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa07150a0501000a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc130f1212011305
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x5122f9
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x51232b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x51234e
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
cmp rsi, 0x16
jb 0x5122df
jmp 0x512342
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456420
mov eax, edi
mov ecx, 0x16
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.00512260

Function at 0x512c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x512d5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x593154799a724b57
mov qword [rsp + 0x39], rdx
movabs rdx, 0x476e618225806359
mov qword [rsp + 0x40], rdx
movabs rdx, 0x266469766c651a72
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0a011105071305
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x121003110e011602
mov qword [rsp + 0x23], rdx
movabs rdx, 0x8081615070f1210
mov qword [rsp + 0x29], rdx
movabs rdx, 0x4050b110609050f
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x512d00
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x16]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x16]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x512d2d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x512d50
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x512cdf
jmp 0x512d44
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456420
mov eax, edi
mov ecx, 0x17
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.00512c60
Function at 0x5142e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5143ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xdda80953d8b74c46
mov qword [rsp + 0x37], rdx
movabs rdx, 0x64dda80953d8b74c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3d35692967c7f10d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50d0609090a090b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x707090c0f100602
mov qword [rsp + 0x27], rdx
movabs rdx, 0x70c020609070203
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x51436d
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x18
jge 0x51439a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5143bd
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x11
jb 0x514350
jmp 0x5143b1
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456420
mov eax, edi
mov ecx, 0x11
call fcn.00456420
nop
call fcn.00454140
jmp fcn.005142e0

Function at 0x514ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x514f9d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x77658d6e807e8eed
mov qword [rsp + 0x33], rdx
movabs rdx, 0x646f44925377658d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc96d533c6e667e7c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1070a0f0a001211
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb0f12070b03090d
mov qword [rsp + 0x21], rdx
movabs rdx, 0x10000b0f12070b03
mov qword [rsp + 0x23], rdx
movabs rdx, 0xb14140b050e020d
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x514f40
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 + 4]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 + 4]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x514f6d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x514f90
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x514f1f
jmp 0x514f84
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456420
mov eax, edi
mov ecx, 0x15
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.00514ea0
Function at 0x515660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x515768
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xfe61365f6118654e
mov qword [rsp + 0x37], rdx
movabs rdx, 0x6210746a7a643566
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x576210746a7a6435
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4b6d5e5468644b4c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x18110f1009071204
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x30912020e020705
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1816030912020e02
mov qword [rsp + 0x27], rdx
movabs rdx, 0xc07080f120b0e14
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x51570b
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1a
jge 0x515738
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x51575b
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x5156ee
jmp 0x51574f
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456420
mov eax, edi
mov ecx, 0x19
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00515660

Function at 0x520120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5201dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc8b78369cc1bb3c4
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x6c
movabs rdx, 0x505060600070201
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x301
xor eax, eax
nop
jmp 0x520180
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x5201ad
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x5201d0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x520162
jmp 0x5201c4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456420
mov eax, edi
mov ecx, 9
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.00520120
Function at 0x520840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52092c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f54744648c784d6
mov qword [rsp + 0x33], rdx
movabs rdx, 0x4650cf33d96f5474
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7365676576e47642
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0c011003030d04
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3080401090d0f0c
mov qword [rsp + 0x23], rdx
movabs rdx, 0x40d020f0a0210
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x5208ca
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7b]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x5208fc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x52091f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7b]
cmp rsi, 0x15
jb 0x5208b0
jmp 0x520913
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456420
mov eax, edi
mov ecx, 0x15
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00520840

Function at 0x521da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x521e72
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x17668f5f66570de
mov qword [rsp + 0x29], rdx
movabs rdx, 0xfa65dfcb5464d101
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80e0e04000607
mov qword [rsp + 0x19], rdx
movabs rdx, 0x80c070b0b040303
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x521e0c
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x70]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x521e3e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x521e65
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x70]
cmp rsi, 0xf
jb 0x521df2
jmp 0x521e55
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00456420
mov eax, edi
mov ecx, 0xf
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00521da0
Function at 0x521e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x521f6c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7217b579c6d575c1
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2dda7217b579c6d5
mov qword [rsp + 0x30], rdx
movabs rdx, 0x73ad7451c6332963
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0600100e000d02
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x603090b0c060010
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc100b0905050808
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x521f0a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x14
jge 0x521f3c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x521f5f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
cmp rsi, 0x12
jb 0x521ef0
jmp 0x521f53
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456420
mov eax, edi
mov ecx, 0x12
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00521e80

Function at 0x522bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x522c87
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xdfa902749f40e398
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x1b746e18
movabs rdx, 0x70b010600070203
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x50208010305070b
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x522c28
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x6d]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x6d]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jge 0x522c57
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x522c7a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x522c0b
jmp 0x522c6e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456420
mov eax, edi
mov ecx, 0xc
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00522bc0
Function at 0x523240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52331d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x272a0ccab74ecb2
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3cb1657268be8539
mov qword [rsp + 0x38], rdx
movabs rdx, 0x107040f09000708
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30f0107040f0900
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70e08010804050a
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x5232c0
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x33]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x33]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x5232ed
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x523310
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x5232a2
jmp 0x523304
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456420
mov eax, edi
mov ecx, 0x10
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.00523240

Function at 0x5267a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5268ba
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xbe806cac4674bada
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x997423c650dc929a
mov qword [rsp + 0x46], rdx
movabs rdx, 0x6e89997423c650dc
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8cd909a7a7c479b3
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd1217120815070b
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1200180c16040d12
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa0a0010070d0614
mov qword [rsp + 0x26], rdx
movabs rdx, 0x906180a180d0f01
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x190c0f100912120c
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x526857
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x58]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x26
jge 0x526889
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5268ad
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x58]
cmp rsi, 0x1a
jb 0x52683d
jmp 0x5268a1
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456420
mov eax, edi
mov ecx, 0x1a
call fcn.00456420
nop
call fcn.00454140
nop
jmp fcn.005267a0