joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4fbfc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc0bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xed280d081b20c421
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x776e617453c6e3ed
mov qword [rsp + 0x26], rdx
movabs rdx, 0x17e9b92c20ee0e61
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40015000e161409
mov qword [rsp + 0x36], rdx
movabs rdx, 0x403080309160701
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1310040308030916
mov qword [rsp + 0x40], rdx
movabs rdx, 0x514071106061103
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fc059
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x33]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4fc08b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4fc0ae
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x33]
cmp rsi, 0x17
jb 0x4fc03f
jmp 0x4fc0a2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457ea0
mov eax, edi
mov ecx, 0x17
call fcn.00457ea0
nop
nop dword [rax + rax]
call fcn.00455c20
jmp fcn.004fbfc0

Function at 0x4fd680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fd76a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf676fb0afb204fe
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xacab61f1530f676f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xbb6d8da21694a7b6
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20412110b0e000f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd030d090f140f01
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0c070610010710
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fd70d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x4fd73a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4fd75d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4fd6f0
jmp 0x4fd751
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457ea0
mov eax, edi
mov ecx, 0x15
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004fd680
Function at 0x4ff3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ff49b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe10bca19c63b6fcf
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x316ede2d53e10bca
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1234e3b420312d41
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x41112020a030004
mov qword [rsp + 0x32], rdx
movabs rdx, 0x70a13090d040d02
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa03000503070a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd140e0506110c0f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ff439
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4ff46b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ff48e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1a]
cmp rsi, 0x15
jb 0x4ff41f
jmp 0x4ff482
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457ea0
mov eax, edi
mov ecx, 0x15
call fcn.00457ea0
nop
nop dword [rax + rax]
call fcn.00455c20
jmp fcn.004ff3a0

Function at 0x500ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x500c67
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0x45524185b5af4fb8
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9e6f7263c512bc45
mov qword [rsp + 0x20], rdx
movabs rdx, 0x64ca69900294c38c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9524a3a8d48b778f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd014baab65b7729c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x69545cb16f6983b5
mov qword [rsp + 0x40], rdx
movabs rdx, 0xbd656e5295e8026d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c1d361a26123332
mov qword [rsp + 0x50], rdx
movabs rdx, 0x301a2b11281b0903
mov qword [rsp + 0x58], rdx
movabs rdx, 0x261a1f2502080236
mov qword [rsp + 0x60], rdx
movabs rdx, 0x32090e192624191f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1d0e312b13111e0a
mov qword [rsp + 0x70], rdx
movabs rdx, 0x15271c2733262110
mov qword [rsp + 0x78], rdx
movabs rdx, 0x17120f02000f1e04
mov qword [rsp + 0x80], rdx
movabs rdx, 0x32b230909031a1c
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x500c02
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x40
jge 0x500c2f
movzx edx, byte [rsp + rax + 0x50]
movzx esi, byte [rsp + rax + 0x51]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x37
jae 0x500c5a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x37
jb 0x500be5
jmp 0x500c4e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x37
nop dword [rax + rax]
call fcn.00445b60
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x37
call fcn.00457ea0
mov eax, edi
mov ecx, 0x37
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00500ae0
Function at 0x500fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5010cc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6f66cfca6f36d222
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xcf2ab72070ce2f6f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7977dd730d6763d0
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc100c121008080c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x2150c100c121008
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8010f090c091415
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40f020a0a020d0e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10010f0e0a0a0504
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x501068
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x22
jge 0x50109c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x17
jae 0x5010bf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0x17
jb 0x50104e
jmp 0x5010b3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00445b60
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457ea0
mov eax, edi
mov ecx, 0x17
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00500fc0
Function at 0x508ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508f6c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x63544afe615a0860
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6c424f0f
movabs rdx, 0x9050a060407010a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x807000201010905
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x508f05
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 8]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x508f3c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x508f5f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 8]
cmp rsi, 0xc
jb 0x508eeb
jmp 0x508f53
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457ea0
mov eax, edi
mov ecx, 0xc
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00508ea0

Function at 0x509200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5092bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xadf9df33f632f53e
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6ce3
movabs rdx, 0x608010000080705
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x301
xor eax, eax
jmp 0x509260
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x50928d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5092b0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x509242
jmp 0x5092a4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457ea0
mov eax, edi
mov ecx, 0xa
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.00509200

Function at 0x5092e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5093bd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6f8863968c7087ab
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x81848a746bacbf8a
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa0c07090f080f03
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7060a000a0c0709
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe060a04060d010c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x509360
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 9]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 9]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x50938d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x5093b0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x509342
jmp 0x5093a4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457ea0
mov eax, edi
mov ecx, 0x10
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.005092e0
Function at 0x509de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x509edd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74f256fef7ecc57e
mov qword [rsp + 0x18], rdx
movabs rdx, 0xfd87ed6574f256fe
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xcfcc506ec079264
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0b0e10090b1103
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x130a09000509010b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x5020d01130a0900
mov qword [rsp + 0x38], rdx
movabs rdx, 0x406090113120f0d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x509e80
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x509ead
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x509ed0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x509e5f
jmp 0x509ec4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457ea0
mov eax, edi
mov ecx, 0x14
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.00509de0

Function at 0x50bb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50bc4c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x323304f87564213b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xea1a1640f1323304
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb08050a010c0407
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0c09050b000001
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x50bbef
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x3d]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x3d]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x50bc1c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x50bc3f
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x50bbd2
jmp 0x50bc33
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457ea0
mov eax, edi
mov ecx, 0xd
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0050bb80
Function at 0x50c5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50c6ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9b460b63a16c0801
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x10ee171c
movabs rdx, 0x105000a0900080b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3070a0a03070105
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x50c645
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x50c67c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x50c69f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
cmp rsi, 0xc
jb 0x50c62b
jmp 0x50c693
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457ea0
mov eax, edi
mov ecx, 0xc
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0050c5e0

Function at 0x50c6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50c786
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x51667a756d726956
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6372777f
movabs rdx, 0x407060305060808
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x90b0704
xor eax, eax
jmp 0x50c720
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x50c752
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x50c777
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
cmp rsi, 0xc
jb 0x50c704
jmp 0x50c76b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457ea0
mov eax, edi
mov ecx, 0xc
nop
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0050c6c0
Function at 0x514700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x514838
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x3f1b233a4a745455
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6f502165563f1b23
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6fe5556e5fd93a44
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4734746547203635
mov qword [rsp + 0x34], rdx
movabs rdx, 0x3bcc3cc37420f64d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x60f1623080a1e24
mov qword [rsp + 0x44], rdx
movabs rdx, 0x22151200040d0a21
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x16160a2422151200
mov qword [rsp + 0x50], rdx
movabs rdx, 0x61b1c05041d1012
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa0a0d180b010816
mov qword [rsp + 0x60], rdx
movabs rdx, 0x13080703071b1c16
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x5147d5
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x2c
jge 0x514808
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x51482b
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
nop
cmp rsi, 0x25
jb 0x5147bb
jmp 0x51481f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x25
call fcn.00445b60
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00457ea0
mov eax, edi
mov ecx, 0x25
call fcn.00457ea0
nop
call fcn.00455c20
nop dword [rax]
jmp fcn.00514700
Function at 0x51c4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51c5fd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x70806c6946746c63
mov qword [rsp + 0x18], rdx
movabs rdx, 0x582a1a6d56226385
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3b6f582a1a6d5622
mov qword [rsp + 0x22], rdx
movabs rdx, 0x246c73855777547f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x717150f19090d0e
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0a11000a0e0717
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1406090a010e0d0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170a0611120a0d0b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140f190108161307
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x51c5a0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x27]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x27]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x51c5cd
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x51c5f0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x51c57d
jmp 0x51c5e4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00445b60
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457ea0
mov eax, edi
mov ecx, 0x1a
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.0051c4e0

Function at 0x51cb20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51cbec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2c18694626442a46
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc2f2746742c1869
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0c030a0c030602
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa020201030c070c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51cb8f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x51cbbc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x51cbdf
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x51cb72
jmp 0x51cbd3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457ea0
mov eax, edi
mov ecx, 0xd
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0051cb20
Function at 0x51db00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51dbdd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74613ec86d1f1bb1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7316af64b6ba5065
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc0d0a000a050500
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40e0b0d0a000c0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0d05010e0b020a
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x51db80
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x51dbad
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x51dbd0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x51db62
jmp 0x51dbc4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457ea0
mov eax, edi
mov ecx, 0x10
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.0051db00

Function at 0x51ebe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51ec92
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x68b861eb6c19e6b4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x602000100060404
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x51ec31
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 + 0x65]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 + 0x65]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x51ec5e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x51ec85
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x51ec14
jmp 0x51ec75
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00445b60
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00457ea0
mov eax, edi
mov ecx, 8
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0051ebe0
Function at 0x52a560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52a626
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4517a5124441d6e8
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xa658
movabs rdx, 0x101010104060901
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9000509
xor eax, eax
jmp 0x52a5c0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x52a5f2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x52a617
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2e]
cmp rsi, 0xa
jb 0x52a5a3
jmp 0x52a60b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
nop
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457ea0
mov eax, edi
mov ecx, 0xa
nop
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0052a560

Function at 0x52bb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52bc2a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xdd36cda10d838453
mov qword [rsp + 0x19], rdx
movabs rdx, 0x38dd36cda10d8384
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xee66e16497b2a139
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20e010c030c0a05
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4020c03020e020e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc030b070300100e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x52bbcd
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x52bbfa
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x52bc1d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x52bbb0
jmp 0x52bc11
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457ea0
mov eax, edi
mov ecx, 0x11
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0052bb40