joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ffd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ffe0c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6fd774e8b4b964ba
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb1efb3a76b6fd774
mov qword [rsp + 0x22], rdx
movabs rdx, 0x732e91b4f8be9369
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x609020c0a100b09
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe110a0311130609
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100009120f0e0400
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ffdaa
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x59]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4ffddc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ffdff
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x59]
cmp rsi, 0x15
jb 0x4ffd90
jmp 0x4ffdf3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ffd20

Function at 0x500300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5003ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1b5d3c7561546f60
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x504b495a5c1b5d3c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5765286c61505044
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8070f0a0b030d06
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa020500090d0807
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3030c0e0f12080f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50038a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 1]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x5003bc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5003df
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 1]
cmp rsi, 0x15
jb 0x500370
jmp 0x5003d3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00500300
Function at 0x5006c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5007aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd6461c277573c21a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x20d6461c277573c2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x362d306e2e171a4b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x50f0109050503
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80a00050f010905
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb090c04070c0f00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50074d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x50077a
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50079d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x500730
jmp 0x500791
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005006c0

Function at 0x5007c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5008bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x567061253c4a2617
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfa73725d56706125
mov qword [rsp + 0x22], rdx
movabs rdx, 0x350de7704c276446
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1200030210100f08
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb12030411070713
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe0b120207080b12
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2010c0803010800
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x500859
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 1]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x50088b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5008ae
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 1]
cmp rsi, 0x14
jb 0x50083f
jmp 0x5008a2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.005007c0
Function at 0x506660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50674c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6320f66f71a7656a
mov qword [rsp + 0x18], rdx
movabs rdx, 0xeb036320f66f71a7
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x656ce165f664112b
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd0005050a080a0b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x302010b090e0d00
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0b0d0801080209
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5066ea
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x50671c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x50673f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6c]
cmp rsi, 0x12
jb 0x5066d0
jmp 0x506733
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00506660

Function at 0x506b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x506be7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6ca06f83998e848e
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x3b74627f
movabs rdx, 0xa08010102010003
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40004060b030a08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x506b88
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x506bb7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x506bda
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x506b6b
jmp 0x506bce
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00506b20
Function at 0x50c4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x48]
cmp r12, qword [r14 + 0x10]
jbe 0x50c620
push rbp
mov rbp, rsp
sub rsp, 0xc0
movabs rdx, 0xc3fc1543a3b9dbc9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf4750a6e6f6320c3
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2b706820741113be
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb6303cc445130a37
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6e695b2c7e1e6ecc
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x296c6966e4376c67
mov qword [rsp + 0x46], rdx
movabs rdx, 0xbba122364b723610
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x30d6f3c701203a32
mov qword [rsp + 0x56], rdx
movabs rdx, 0x29e27235f53430aa
mov qword [rsp + 0x5e], rdx
movabs rdx, 0x3f141e3c061f3003
mov qword [rsp + 0x66], rdx
movabs rdx, 0x19022f0f301b2114
mov qword [rsp + 0x6e], rdx
lea rdi, [rsp + 0x70]
lea rsi, [0x0074a562]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0046165a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x50c5c0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x5a
jge 0x50c5ed
movzx edx, byte [rsp + rax + 0x66]
movzx esi, byte [rsp + rax + 0x67]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x50c613
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x47
jb 0x50c5a2
jmp 0x50c607
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x47
call fcn.0044bb20
add rsp, 0xc0
pop rbp
ret
mov eax, esi
mov ecx, 0x47
call fcn.00461020
mov eax, edi
mov ecx, 0x47
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0050c4c0
Function at 0x50daa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50dbbd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xd31e3c023b12f5c5
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1b851c3165239f6c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc1ee0a6b721ef5ff
mov qword [rsp + 0x28], rdx
movabs rdx, 0xec13b5ffc7f66e6e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10d0200151b0a17
mov qword [rsp + 0x38], rdx
movabs rdx, 0x16090f0a071c0e07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1c0c061602121d1e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x90e10051e04101f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a031e07110d1f04
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x50db60
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x50db8d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x50dbb0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x20
jb 0x50db3d
jmp 0x50dba4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00461020
mov eax, edi
mov ecx, 0x20
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0050daa0

Function at 0x50dd80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50de9d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xd31e3c023b12f5c5
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1b851c3165239f6c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc1ee0a6b721ef5ff
mov qword [rsp + 0x28], rdx
movabs rdx, 0xec13b5ffc7f66e6e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10d0200151b0a17
mov qword [rsp + 0x38], rdx
movabs rdx, 0x16090f0a071c0e07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1c0c061602121d1e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x90e10051e04101f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a031e07110d1f04
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x50de40
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x50de6d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x50de90
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x20
jb 0x50de1d
jmp 0x50de84
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00461020
mov eax, edi
mov ecx, 0x20
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0050dd80
Function at 0x50df20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50dfe7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x10b654c4b5100a69
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xb674610d
movabs rdx, 0x5010608050b0603
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3020704020b0501
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x50df88
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x50dfb7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x50dfda
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x50df6b
jmp 0x50dfce
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0050df20

Function at 0x5113a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5114bd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x50b5a2b7374617c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x736efd61f1001417
mov qword [rsp + 0x21], rdx
movabs rdx, 0x98e968746e701f73
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe3b67461f4ee98f9
mov qword [rsp + 0x30], rdx
movabs rdx, 0x505120319001e19
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1a0d1610061e0912
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71d1204041e0b00
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1615171506031e17
mov qword [rsp + 0x50], rdx
movabs rdx, 0x190a191804051608
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x511460
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x51148d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x5114b0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1f
jb 0x51143d
jmp 0x5114a4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00461020
mov eax, edi
mov ecx, 0x1f
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005113a0
Function at 0x51e120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51e1dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3ae85c1c74ec255c
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xee
movabs rdx, 0x202080105020004
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4060800
xor eax, eax
nop
jmp 0x51e180
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x74]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x74]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x51e1ad
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x51e1d0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x51e162
jmp 0x51e1c4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0051e120

Function at 0x51f800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51f8ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x375794911893d39b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x38375794911893d3
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd2b36596e740b8ff
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc100f0f06030b0f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2040a0a0d060c10
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50f0109050503
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x51f88d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x51f8ba
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x51f8dd
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x51f870
jmp 0x51f8d1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0051f800
Function at 0x51f900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51f9ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa936354f33ee31ec
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb4a936354f33ee31
mov qword [rsp + 0x20], rdx
movabs rdx, 0x464645dca799b1a9
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70b0b090c04070c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa080d02100a0a08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8090c080009000b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x51f98a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x51f9bc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x51f9df
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
cmp rsi, 0x11
jb 0x51f970
jmp 0x51f9d3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0051f900

Function at 0x51fa00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51faea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xbd28d8cb8f323120
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x38bd28d8cb8f3231
mov qword [rsp + 0x20], rdx
movabs rdx, 0x786694a3f91be17c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0a0405040e000a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0a090a0b0e0309
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa040c06030c070c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x51fa8d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x51faba
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x51fadd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x51fa70
jmp 0x51fad1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0051fa00
Function at 0x51fb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51fc27
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x151a1b18d4146d66
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe427296b1dca6f6e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x27b6cee039faade4
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6e31d792b5e5e1e3
mov qword [rsp + 0x36], rdx
movabs rdx, 0x61a041415040519
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc030c10180f1b0f
mov qword [rsp + 0x46], rdx
movabs rdx, 0x20e0c030c10180f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7110a0f10061304
mov qword [rsp + 0x50], rdx
movabs rdx, 0x12060d0b1c18171b
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf1105051d1b1007
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x51fbc9
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x2a
jge 0x51fbf7
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x51fc1a
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1f
jb 0x51fbac
jmp 0x51fc0e
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1f
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00461020
mov eax, edi
mov ecx, 0x1f
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0051fb00

Function at 0x51fec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51ffbd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x63203a23d6612466
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xce0a239f63203a23
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3565b54d4e7720f7
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0310040b0a030f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0c0813040f0f08
mov qword [rsp + 0x36], rdx
movabs rdx, 0x110f0f0c0813040f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc090101040a0c0f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x51ff60
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x51ff8d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x51ffb0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x51ff3f
jmp 0x51ffa4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.0051fec0
Function at 0x521100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52122c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6e0107435009636c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3f6e010743500963
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3569597852235073
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6921166163475d2c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf532785520f37331
mov qword [rsp + 0x34], rdx
movabs rdx, 0x60b020a1f021e16
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x51d0b01060b020a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14141e010c0e0c11
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b06030210021301
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa08060e1720190a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5211c6
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 8]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x5211fc
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x21
jae 0x52121f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 8]
cmp rsi, 0x21
jb 0x5211ac
jmp 0x521213
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00461020
mov eax, edi
mov ecx, 0x21
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00521100

Function at 0x524380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x524447
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x10b46712a916064c
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xb16169ee
movabs rdx, 0x5010608050b0603
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3020704020b0501
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5243e8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x524417
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x52443a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x5243cb
jmp 0x52442e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00524380