joyce8/EMBER2024-capa huggingface dataset:
Function at 0x50af40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50b03d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2880a6002f070335
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1ff435f12880a600
mov qword [rsp + 0x40], rdx
movabs rdx, 0x656d2c54209abacd
mov qword [rsp + 0x48], rdx
movabs rdx, 0x91105080e050c11
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x40706010d0b0e0b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1050b08070407
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2090a0605030002
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x50afe0
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 + 0x52]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 + 0x52]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x50b00d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x50b030
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x14
jb 0x50afbf
jmp 0x50b024
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456620
mov eax, edi
mov ecx, 0x14
call fcn.00456620
nop
nop dword [rax]
call fcn.00454340
jmp fcn.0050af40

Function at 0x50b060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50b15b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xfbe8f5622b65f59b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1c6ef4a9a8e96e06
mov qword [rsp + 0x40], rdx
movabs rdx, 0x69fc0f542064daf5
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb0d10050f0c0600
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf07170a030d1503
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1080f07170a030d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd1106161601150a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x50b0f9
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1a
jge 0x50b12b
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x50b14e
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
cmp rsi, 0x18
jb 0x50b0df
jmp 0x50b142
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456620
mov eax, edi
mov ecx, 0x18
call fcn.00456620
nop
nop dword [rax + rax]
call fcn.00454340
jmp fcn.0050b060
Function at 0x50f3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50f4bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe6134fbf344b5c9
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x64f23efa3d0d0e61
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6519691f2edb028a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x12110c0312000e09
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf04050109080207
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50905081003020f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40403140b0c0b0a
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x50f459
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1d]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x20
jge 0x50f48b
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x50f4ae
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1d]
cmp rsi, 0x16
jb 0x50f43f
jmp 0x50f4a2
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456620
mov eax, edi
mov ecx, 0x16
call fcn.00456620
nop
nop dword [rax + rax]
call fcn.00454340
jmp fcn.0050f3c0

Function at 0x50fb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50fc5a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x72ae6e6631322527
mov qword [rsp + 0x43], rdx
movabs rdx, 0x20dcd3a08220cbc8
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x16ec9e72120dcd3
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc4c26920206472dd
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1500090c1b060808
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd0c1c080c0b1b08
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1906030c0d021102
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x41b0b080014121b
mov qword [rsp + 0x33], rdx
movabs rdx, 0x10100e011b100109
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x50fbf7
movzx r9d, byte [rsp + rsi + 0x43]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + rdi + 0x43], dl
mov byte [rsp + rsi + 0x43], r8b
add rax, 2
cmp rax, 0x28
jge 0x50fc29
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x50fc4d
movzx r8d, byte [rsp + rdi + 0x43]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1f]
cmp rsi, 0x1d
jb 0x50fbdd
jmp 0x50fc41
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.00444780
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00456620
mov eax, edi
mov ecx, 0x1d
call fcn.00456620
nop
call fcn.00454340
nop
jmp fcn.0050fb40
Function at 0x512140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51223d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x47200937ed73ee2e
mov qword [rsp + 0x35], rdx
movabs rdx, 0xcf1cf447200937ed
mov qword [rsp + 0x38], rdx
movabs rdx, 0x41b20656ed32020
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa11040d12090103
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x81111080412030a
mov qword [rsp + 0x23], rdx
movabs rdx, 0x501081111080412
mov qword [rsp + 0x25], rdx
movabs rdx, 0x10c09000807000c
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x5121e0
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x45]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x45]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x51220d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x512230
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x5121bf
jmp 0x512224
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456620
mov eax, edi
mov ecx, 0x13
call fcn.00456620
nop
nop dword [rax]
call fcn.00454340
jmp fcn.00512140

Function at 0x513a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x513b2c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc51773b7d1e62959
mov qword [rsp + 0x33], rdx
movabs rdx, 0x646e372410c51773
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd16d695419272fd4
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30e06140a090e02
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x10070e0d0210030e
mov qword [rsp + 0x23], rdx
movabs rdx, 0x6060f0e08010104
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x513aca
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x513afc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x513b1f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0x15
jb 0x513ab0
jmp 0x513b13
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456620
mov eax, edi
mov ecx, 0x15
call fcn.00456620
nop
call fcn.00454340
jmp fcn.00513a40
Function at 0x516240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x516348
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x72747d75b8c692ab
mov qword [rsp + 0x36], rdx
movabs rdx, 0xaa74f7f7b769daff
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x64c0aa74f7f7b769
mov qword [rsp + 0x40], rdx
movabs rdx, 0x946d70b7f3640d05
mov qword [rsp + 0x48], rdx
movabs rdx, 0x31915130c17010d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1712000b0f16090b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x810010001001712
mov qword [rsp + 0x26], rdx
movabs rdx, 0x902051500101317
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x5162eb
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 - 0x33]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 - 0x33]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x1e
jge 0x516318
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x51633b
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x1a
jb 0x5162ce
jmp 0x51632f
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456620
mov eax, edi
mov ecx, 0x1a
call fcn.00456620
nop
call fcn.00454340
jmp fcn.00516240

Function at 0x516360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51647a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x656e65c020b1c8d7
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x38ade6b1e12761da
mov qword [rsp + 0x47], rdx
movabs rdx, 0x8938ade6b1e12761
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4d6d27cbfa53a9c6
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa15181018130016
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1180a1518101813
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1515071300000d0f
mov qword [rsp + 0x27], rdx
movabs rdx, 0xc02110d0401080b
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xe120e13110b0b14
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x516417
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7c]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x22
jge 0x516449
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x51646d
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7c]
cmp rsi, 0x19
jb 0x5163fd
jmp 0x516461
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456620
mov eax, edi
mov ecx, 0x19
call fcn.00456620
nop
call fcn.00454340
nop
jmp fcn.00516360
Function at 0x5167e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5168dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd3080f616fcb6154
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x64402e432588d308
mov qword [rsp + 0x40], rdx
movabs rdx, 0x631eb8220640725
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8070f0b0612080c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x507130314020306
mov qword [rsp + 0x22], rdx
movabs rdx, 0x60e0c09060c0c0f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30f0a05140a0315
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x516880
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 + 0x62]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 + 0x62]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x5168ad
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5168d0
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x51685f
jmp 0x5168c4
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456620
mov eax, edi
mov ecx, 0x16
call fcn.00456620
nop
nop dword [rax]
call fcn.00454340
jmp fcn.005167e0

Function at 0x5175a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51768a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x656ed37c65c81f44
mov qword [rsp + 0x32], rdx
movabs rdx, 0xdb34614185b8656e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xad85c1ba41db7261
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1512040808010912
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2051315110a1512
mov qword [rsp + 0x22], rdx
movabs rdx, 0x14110a0c0c0c100d
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x51762d
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x4c]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x51765a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x51767d
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x517610
jmp 0x517671
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456620
mov eax, edi
mov ecx, 0x16
call fcn.00456620
nop
call fcn.00454340
jmp fcn.005175a0
Function at 0x517ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x517fba
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x206cfb72b9486643
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf3809382bf72bd05
mov qword [rsp + 0x44], rdx
movabs rdx, 0x640610e8f3809382
mov qword [rsp + 0x48], rdx
movabs rdx, 0x658e69665e9cd661
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1120e0917150203
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1508091a01120e09
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1602020d03081a11
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf0f0c180b0e1109
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc18120810050902
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x517f57
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x24
jge 0x517f89
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x517fad
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 0x1c
jb 0x517f3d
jmp 0x517fa1
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00456620
mov eax, edi
mov ecx, 0x1c
call fcn.00456620
nop
call fcn.00454340
nop
jmp fcn.00517ea0

Function at 0x5182c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5183aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e1d4c342313f742
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x646e1d4c342313f7
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2b413154582a725f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60f0b100c0103
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe0000060f0b100c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x20c0e0f04040509
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x51834d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x12
jge 0x51837a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x51839d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x518330
jmp 0x518391
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456620
mov eax, edi
mov ecx, 0x11
call fcn.00456620
nop
call fcn.00454340
jmp fcn.005182c0
Function at 0x5187a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51889b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb8fe9c9f53ae81a0
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x6484978d3bb8fe9c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x889293946ec57261
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf071304000b0706
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1409081009120703
mov qword [rsp + 0x27], rdx
movabs rdx, 0x50a0f0214090810
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xa06120513110f01
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x518839
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x51886b
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x51888e
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
cmp rsi, 0x15
jb 0x51881f
jmp 0x518882
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456620
mov eax, edi
mov ecx, 0x15
call fcn.00456620
nop
nop dword [rax + rax]
call fcn.00454340
jmp fcn.005187a0

Function at 0x518fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5190aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x20e26f7cd1f9d8dd
mov qword [rsp + 0x33], rdx
movabs rdx, 0xcc6e0174f720e26f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6581da8abf646dd4
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1308000c11031011
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x40801030d0d1212
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa0608020e020e06
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x51904d
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 - 0x69]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 - 0x69]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x18
jge 0x51907a
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x51909d
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x519030
jmp 0x519091
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456620
mov eax, edi
mov ecx, 0x15
call fcn.00456620
nop
call fcn.00454340
jmp fcn.00518fc0
Function at 0x5191e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51930c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x66898d723a867b70
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x506e6f486f4e714f
mov qword [rsp + 0x52], rdx
movabs rdx, 0x1b6c6d6d537a506e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x5a27755469255e61
mov qword [rsp + 0x60], rdx
movabs rdx, 0x6020e00071c0509
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10120f0d03171b0c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x17170a1310120f0d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x31c0e1d1b050201
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10f0d0019181305
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1515081714121510
mov qword [rsp + 0x42], rdx
xor eax, eax
jmp 0x5192a6
movzx r9d, byte [rsp + rsi + 0x4a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x4a], dl
mov byte [rsp + rsi + 0x4a], r8b
add rax, 2
cmp rax, 0x2c
jge 0x5192dc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1e
jae 0x5192ff
movzx r8d, byte [rsp + rdi + 0x4a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0x1e
jb 0x51928c
jmp 0x5192f3
xor eax, eax
lea rbx, [rsp + 0x4a]
mov ecx, 0x1e
call fcn.00444780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00456620
mov eax, edi
mov ecx, 0x1e
call fcn.00456620
nop
call fcn.00454340
jmp fcn.005191e0

Function at 0x51b660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51b74a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x56612169ed4d4bd8
mov qword [rsp + 0x32], rdx
movabs rdx, 0x643961fe23425661
mov qword [rsp + 0x38], rdx
movabs rdx, 0x416d694a58420646
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10a1205110f000a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x90001011203010a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20710150c0e1208
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x51b6ed
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0x3a]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0x3a]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x51b71a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x51b73d
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x51b6d0
jmp 0x51b731
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456620
mov eax, edi
mov ecx, 0x16
call fcn.00456620
nop
call fcn.00454340
jmp fcn.0051b660
Function at 0x524500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5245c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa69dbe8188497a74
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x956c647a
movabs rdx, 0x806020706050001
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6080b0208040503
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x524568
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x524597
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x5245ba
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x52454b
jmp 0x5245ae
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456620
mov eax, edi
mov ecx, 0xc
call fcn.00456620
nop
call fcn.00454340
jmp fcn.00524500

Function at 0x5245e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5246b8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x312869bf61e5566e
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x45fb4dff
movabs rdx, 0x406040a08070101
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x70a0406040a0807
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x40a090b08070208
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x524654
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xf]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x12
jge 0x524688
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5246ab
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xf]
nop
cmp rsi, 0xc
jb 0x52463a
jmp 0x52469f
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456620
mov eax, edi
mov ecx, 0xc
call fcn.00456620
nop
call fcn.00454340
nop dword [rax]
jmp fcn.005245e0

Function at 0x5246e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5247a6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9e82efb70a3b270
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xe
movabs rdx, 0x808010206070601
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x1040402
xor eax, eax
nop
jmp 0x524740
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x524772
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x524797
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 9
jb 0x524722
jmp 0x52478b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456620
mov eax, edi
mov ecx, 9
nop
call fcn.00456620
nop
call fcn.00454340
jmp fcn.005246e0