joyce8/EMBER2024-capa huggingface dataset:
Function at 0x50fa20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50fb1d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x65a40efc5721aabc
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6df1617453b05df2
mov qword [rsp + 0x40], rdx
movabs rdx, 0x656d0556209ab2eb
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9010902080a050a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe0a01040a151001
mov qword [rsp + 0x24], rdx
movabs rdx, 0x111114060e0a0104
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0f011200080600
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x50fac0
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x50faed
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x50fb10
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x50fa9f
jmp 0x50fb04
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004564a0
mov eax, edi
mov ecx, 0x18
call fcn.004564a0
nop
nop dword [rax]
call fcn.004541c0
jmp fcn.0050fa20

Function at 0x50fb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50fc2c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa8aa6985f04a61c2
mov qword [rsp + 0x33], rdx
movabs rdx, 0xa9db8974baa8aa69
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65a07e5420647285
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa130b0c00040803
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd0607020a0c080a
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa020d0d0b120403
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x50fbca
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x50fbfc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x50fc1f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
cmp rsi, 0x15
jb 0x50fbb0
jmp 0x50fc13
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004564a0
mov eax, edi
mov ecx, 0x15
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.0050fb40
Function at 0x514140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51425a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x405dcd3c0d2a65ed
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x111e0d104c0b296a
mov qword [rsp + 0x46], rdx
movabs rdx, 0x640d111e0d104c0b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x554d150220235861
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe16171309020d07
mov qword [rsp + 0x18], rdx
movabs rdx, 0x100506040b0f0e16
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x609060e0e081819
mov qword [rsp + 0x26], rdx
movabs rdx, 0x130510160803140b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa1608020209000c
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x5141f7
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x26
jge 0x514229
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x51424d
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 9]
cmp rsi, 0x1a
jb 0x5141dd
jmp 0x514241
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004564a0
mov eax, edi
mov ecx, 0x1a
call fcn.004564a0
nop
call fcn.004541c0
nop
jmp fcn.00514140

Function at 0x514be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x514ccc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb1619914172049d1
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1939b933f7b16199
mov qword [rsp + 0x38], rdx
movabs rdx, 0xbe6d06a8f064726a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71100120b090314
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1081107110d1204
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa101008030c050c
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x514c6a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x37]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x514c9c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x514cbf
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x37]
cmp rsi, 0x15
jb 0x514c50
jmp 0x514cb3
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004564a0
mov eax, edi
mov ecx, 0x15
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.00514be0
Function at 0x514fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5150ba
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x48203d562c19c9d0
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6e302e534b415461
mov qword [rsp + 0x47], rdx
movabs rdx, 0x326e302e534b4154
mov qword [rsp + 0x48], rdx
movabs rdx, 0x652b54545f64722a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x311171610170711
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1014000203111716
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x16000e0902091701
mov qword [rsp + 0x27], rdx
movabs rdx, 0xb0a0a17070d0911
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x16050e14040d090a
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x515057
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 9]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x24
jge 0x515089
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5150ad
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 9]
cmp rsi, 0x19
jb 0x51503d
jmp 0x5150a1
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.004564a0
mov eax, edi
mov ecx, 0x19
call fcn.004564a0
nop
call fcn.004541c0
nop
jmp fcn.00514fa0

Function at 0x5150e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5151cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf453ed6193161d22
mov qword [rsp + 0x35], rdx
movabs rdx, 0x64257af453ed6193
mov qword [rsp + 0x38], rdx
movabs rdx, 0x650211542808722d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb09030701080507
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb110e0702100b09
mov qword [rsp + 0x25], rdx
movabs rdx, 0xd01000d111105
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x51516a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x16
jge 0x51519c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5151bf
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x39]
cmp rsi, 0x13
jb 0x515150
jmp 0x5151b3
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004564a0
mov eax, edi
mov ecx, 0x13
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.005150e0
Function at 0x516060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51615b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc6f0d76c676ee24c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe36efce953204d73
mov qword [rsp + 0x40], rdx
movabs rdx, 0x93e75276aa64e261
mov qword [rsp + 0x48], rdx
movabs rdx, 0x915141714140611
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x14070d0c00071501
mov qword [rsp + 0x26], rdx
movabs rdx, 0x71314070d0c0007
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5161607090f1617
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5160f9
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1a
jge 0x51612b
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x51614e
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
cmp rsi, 0x18
jb 0x5160df
jmp 0x516142
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004564a0
mov eax, edi
mov ecx, 0x18
call fcn.004564a0
nop
nop dword [rax + rax]
call fcn.004541c0
jmp fcn.00516060

Function at 0x516dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x516eda
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x57676e145bf16314
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x403d74444a61773e
mov qword [rsp + 0x47], rdx
movabs rdx, 0x33403d74444a6177
mov qword [rsp + 0x48], rdx
movabs rdx, 0x652469546a64666c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1411030903090f12
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1701141103090309
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x41402120f0f1407
mov qword [rsp + 0x27], rdx
movabs rdx, 0xc10020e07040f08
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xb1200020a0f0f0b
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x516e77
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x14]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x22
jge 0x516ea9
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x516ecd
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x14]
cmp rsi, 0x19
jb 0x516e5d
jmp 0x516ec1
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.004564a0
mov eax, edi
mov ecx, 0x19
call fcn.004564a0
nop
call fcn.004541c0
nop
jmp fcn.00516dc0
Function at 0x517300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5173fb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf4a6cfd0c100749
mov qword [rsp + 0x34], rdx
movabs rdx, 0x64260c740f4a6cfd
mov qword [rsp + 0x38], rdx
movabs rdx, 0x432323f401dc72e8
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf060a1006030e10
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x213090e11070f04
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc120213090e1107
mov qword [rsp + 0x24], rdx
movabs rdx, 0x11130a0901110e12
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x517399
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1a
jge 0x5173cb
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5173ee
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0x14
jb 0x51737f
jmp 0x5173e2
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004564a0
mov eax, edi
mov ecx, 0x14
call fcn.004564a0
nop
nop dword [rax + rax]
call fcn.004541c0
jmp fcn.00517300

Function at 0x51bae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51bbcc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4df6f5616767696c
mov qword [rsp + 0x31], rdx
movabs rdx, 0x696e51ea5320f24d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xcce369e920d572f2
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2110f0f00110c14
mov qword [rsp + 0x19], rdx
movabs rdx, 0x131405060b0e1611
mov qword [rsp + 0x21], rdx
movabs rdx, 0xc150b081115070c
mov qword [rsp + 0x29], rdx
xor eax, eax
jmp 0x51bb6a
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
cmp rax, 0x18
jge 0x51bb9c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x51bbbf
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
cmp rsi, 0x17
jb 0x51bb50
jmp 0x51bbb3
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004564a0
mov eax, edi
mov ecx, 0x17
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.0051bae0
Function at 0x51e240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51e35a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x20211a13c5b904ed
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x61745320bbc88d2c
mov qword [rsp + 0x46], rdx
movabs rdx, 0xe46e61745320bbc8
mov qword [rsp + 0x48], rdx
movabs rdx, 0xab669110ec8a36d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x60b0a1206111311
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x805070a060b0a12
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x14020001180a1609
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1214130416061603
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1518110711180a19
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x51e2f7
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x24
jge 0x51e329
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x51e34d
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0x1a
jb 0x51e2dd
jmp 0x51e341
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004564a0
mov eax, edi
mov ecx, 0x1a
call fcn.004564a0
nop
call fcn.004541c0
nop
jmp fcn.0051e240

Function at 0x51f6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51f7bd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xbd7311b1fc072441
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x1b6174a3266e201b
mov qword [rsp + 0x47], rdx
movabs rdx, 0x641b6174a3266e20
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e2ce9ac203a1d8c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1101180204070f15
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x50c110118020407
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x160708160f030b05
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1616171617010804
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x18130f0813091213
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x51f760
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 + 0x53]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 + 0x53]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x51f78d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x51f7b0
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x51f73d
jmp 0x51f7a4
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004564a0
mov eax, edi
mov ecx, 0x19
call fcn.004564a0
nop
nop dword [rax]
call fcn.004541c0
jmp fcn.0051f6a0
Function at 0x5206c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5207da
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2eea61337433e1ea
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x19aace46fdc2f45
mov qword [rsp + 0x44], rdx
movabs rdx, 0x406e1f21019aace4
mov qword [rsp + 0x48], rdx
movabs rdx, 0x651a6941f4d9ec84
mov qword [rsp + 0x50], rdx
movabs rdx, 0x16140e1514111309
mov qword [rsp + 0x18], rdx
movabs rdx, 0x11010c0c16140e15
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x40118100d140614
mov qword [rsp + 0x24], rdx
movabs rdx, 0x602000f0e151417
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x110c040f141a0a07
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x520777
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x24
jge 0x5207a9
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x5207cd
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0x1c
jb 0x52075d
jmp 0x5207c1
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.004564a0
mov eax, edi
mov ecx, 0x1c
call fcn.004564a0
nop
call fcn.004541c0
nop
jmp fcn.005206c0
Function at 0x52f1e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x7f154e53e4e5bd4f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x701060105040503
mov qword [rsp + 0x16], rdx
mov word [rsp + 0x1e], 1
xor eax, eax
jmp 0x52f234
movzx r8d, byte [rsp + rbx + 0x28]
lea edx, [r8 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rsi + 0x28], dl
mov byte [rsp + rbx + 0x28], dil
add rax, 2
cmp rax, 0xa
jge 0x52f268
movzx edx, byte [rsp + rax + 0x16]
movzx ebx, byte [rsp + rax + 0x17]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x52f2a5
movzx edi, byte [rsp + rsi + 0x28]
lea edi, [rdi + rdx]
lea edi, [rdi - 5]
nop dword [rax + rax]
cmp rbx, 8
jb 0x52f21a
jmp 0x52f297
mov qword [rsp + 0x20], 0
xor eax, eax
jmp 0x52f281
movzx ecx, byte [rsp + rax + 0x28]
mov byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 8
jl 0x52f275
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.004564a0
mov eax, esi
mov ecx, 8
call fcn.004564a0
nop
int3

Function at 0x52fe60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52ff27
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x65556465686b2460
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x6c726465
movabs rdx, 0x502010607010006
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x200050902030502
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x52fec8
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x12]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x12]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x52fef7
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x52ff1a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x52feab
jmp 0x52ff0e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004564a0
mov eax, edi
mov ecx, 0xb
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.0052fe60

Function at 0x530840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x53090c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xeef29276f6e5f74f
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x90d2f769
movabs rdx, 0x80405050201020b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x30607050a040908
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x5308a5
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x69]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x5308dc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x5308ff
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x69]
cmp rsi, 0xc
jb 0x53088b
jmp 0x5308f3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004564a0
mov eax, edi
mov ecx, 0xc
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.00530840
Function at 0x530920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x530a06
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6526681b1e1a3b32
mov qword [rsp + 0x31], rdx
movabs rdx, 0xfbed403a0b640165
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd000e010a060302
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x60c0d000e010a06
mov qword [rsp + 0x21], rdx
movabs rdx, 0x40201030b0801
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x5309a0
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x20]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x5309d2
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x5309f7
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x20]
cmp rsi, 0xf
jb 0x530982
jmp 0x5309eb
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004564a0
mov eax, edi
mov ecx, 0xf
nop
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.00530920

Function at 0x530ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x530f8a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e3a6b6f0b74ad0c
mov qword [rsp + 0x35], rdx
movabs rdx, 0xed19496e3a6b6f0b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x316df6283b6de126
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90e100a110e1001
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x90a03000f0c090e
mov qword [rsp + 0x25], rdx
movabs rdx, 0xb0a060f10100112
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x530f2d
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x55]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x55]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jge 0x530f5a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x530f7d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x530f10
jmp 0x530f71
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004564a0
mov eax, edi
mov ecx, 0x13
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.00530ea0
Function at 0x534000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5340d2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6233b46c75a07fb7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1f064729cbf6233
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8090d0b0d070b0d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x50b0c0b07010200
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x53406c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0x10
jge 0x53409e
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x5340c5
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0xe
jb 0x534052
jmp 0x5340b5
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.004564a0
mov eax, edi
mov ecx, 0xe
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.00534000

Function at 0x5340e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5341a6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xbd68698e89769a4d
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x799185bd
movabs rdx, 0x406030a07030109
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x30a0803
xor eax, eax
jmp 0x534140
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x534172
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x534197
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 0xb
jb 0x534124
jmp 0x53418b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004564a0
mov eax, edi
mov ecx, 0xb
nop
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.005340e0