joyce8/EMBER2024-capa huggingface dataset:
Function at 0x502c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x502d36
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xbcee380228372215
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1761c5706f2775a8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6442261926201761
mov qword [rsp + 0x28], rdx
movabs rdx, 0xfb6d69252e3e3055
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1402190616140407
mov qword [rsp + 0x38], rdx
movabs rdx, 0x19040f0817180008
mov qword [rsp + 0x40], rdx
movabs rdx, 0x21a030d1301050a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a031211001a111d
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x502cce
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x502d02
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x502d29
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0x1e
jb 0x502cb4
nop
jmp 0x502d1d
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1e
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.00502c20
Function at 0x50aa80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50ab88
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x3be278611a6e9d73
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6e923837e2e3223b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6e72b8ced0d97020
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10d0c0613080903
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10a12060a070b0a
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa0d010a12060a07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60c09140a0a1113
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x50ab20
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x50ab52
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x50ab7b
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x17
jb 0x50ab05
jmp 0x50ab6f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0050aa80

Function at 0x50b6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0xba60cf6a1a60f2dd
mov qword [rsp + 0x20], rdx
movabs rdx, 0x302030107000407
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x50b713
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x50b748
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x50b787
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x79]
nop word [rax + rax]
cmp rbx, 8
jb 0x50b6f9
jmp 0x50b77b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x50b761
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x50b755
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3
Function at 0x50b7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xebb798e35fa5138a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x601070606050503
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2050507
xor eax, eax
nop
jmp 0x50b800
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 - 0x43]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi - 0x43]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x50b82b
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x50b86a
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
cmp rbx, 8
jb 0x50b7e2
jmp 0x50b85e
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x50b844
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x50b838
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x50c100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50c1c8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6cebafab6d61a4f6
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xee
movabs rdx, 0x305060100060804
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 4
xor eax, eax
jmp 0x50c160
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x50c192
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x50c1bb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
cmp rsi, 9
jb 0x50c146
jmp 0x50c1af
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0050c100
Function at 0x50d0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50d19c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x14274cd7387433f6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2645fe14274cd738
mov qword [rsp + 0x20], rdx
movabs rdx, 0x291d1574612e3c0d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x100d1008090b0901
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc05070505040007
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa11070012090603
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50d130
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x18]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x50d168
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x50d18f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x18]
nop word [rax + rax]
cmp rsi, 0x13
jb 0x50d116
jmp 0x50d183
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x13
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0050d0a0

Function at 0x50d5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50d6dc
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xc470b16fef74e4aa
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa2b9c470b16fef74
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0b545b9a365c2c7
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3010a070c011109
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd0b03010a070c01
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3010c00050e0810
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x50d670
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x50d6a8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x50d6cf
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
nop word [rax + rax]
cmp rsi, 0x12
jb 0x50d656
jmp 0x50d6c3
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0050d5e0
Function at 0x50d700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50d7d2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6fd16e8b43a071df
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x8e43a8a5
movabs rdx, 0x90409060b020809
mov qword [rsp + 0x28], rdx
movabs rdx, 0x804090409000b01
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x50d76e
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xf]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xf]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x50d79b
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x50d7c5
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x50d751
jmp 0x50d7b6
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0050d700

Function at 0x50d7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50d8c8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x929d7275ba74b318
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb561b685a76dd6a9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70d000609000806
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0f0a030b09070d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa06070c0b070a01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50d861
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x50d893
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x50d8bb
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3d]
cmp rsi, 0x10
jb 0x50d847
jmp 0x50d8af
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0050d7e0
Function at 0x513360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x513432
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6c55cb312f32524d
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x65533761
movabs rdx, 0x3030a0900020a05
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa030906010304
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x5133ce
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x5133fb
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x513425
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x5133b1
jmp 0x513416
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00513360
Function at 0x51abc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51acf2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xdcc787b3d3b42875
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xccf8efc1f25c6fb0
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6f63076b726f7dbd
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x66bf697a8624aefd
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1b1a03110f101c1f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe15050307011b1a
mov qword [rsp + 0x44], rdx
movabs rdx, 0x611071e0e150503
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe18150b1a0d0d1f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b0c0d070a150c1c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x40e1f0708190205
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x51ac8c
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x2c
jge 0x51acbe
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x51ace5
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x20
jb 0x51ac72
jmp 0x51acd9
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.0044a200
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x20
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0051abc0

Function at 0x51af00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51afd2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xd64acf6c4b763d53
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xf23b6170
movabs rdx, 0x7060b0503000003
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5070701070a0706
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51af6b
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x51af9d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x51afc5
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0xc
jb 0x51af51
jmp 0x51afb8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0051af00
Function at 0x51e5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51e69c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xb729c765726f0443
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1d1523b729c76572
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8030a0108090903
mov qword [rsp + 0x28], rdx
movabs rdx, 0x709010106070a05
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51e635
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x4b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x51e668
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x51e68f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x51e618
jmp 0x51e683
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0051e5c0

Function at 0x528f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5290b2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xb9afc9617419b4be
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x34cf1572b9afc961
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20b8c527d5d47381
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x25d5a7c0b4cbd367
mov qword [rsp + 0x32], rdx
movabs rdx, 0x7254626dc2c3fa17
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1b0b160a0a131a05
mov qword [rsp + 0x42], rdx
movabs rdx, 0xe1f1d0c0f021b0b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1207111b0b101e00
mov qword [rsp + 0x50], rdx
movabs rdx, 0x18010c221c15090b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x191506120f19170b
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x52904c
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7c]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x26
jge 0x52907e
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x5290a5
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7c]
cmp rsi, 0x24
jb 0x529032
jmp 0x529099
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x24
call fcn.0044a200
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x24
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x24
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00528f80
Function at 0x529700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5297d2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x875cb8884e7121ca
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x7757
movabs rdx, 0x505020809060600
mov qword [rsp + 0x22], rdx
movabs rdx, 0x609040507070505
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x52976a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3d]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x52979c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x5297c5
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3d]
cmp rsi, 0xa
jb 0x529750
jmp 0x5297b7
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xa
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00529700

Function at 0x529d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x529e28
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xc2866c61b0c368b3
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x12656c2c8972aac2
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3eaacef9cbac2e24
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6000f020d081113
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa0a02140307010e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x11150a120a0a0214
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120e0b0b01010e0b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x529dc2
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1c
jge 0x529def
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x529e1b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x529da5
jmp 0x529e0f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00529d20
Function at 0x52a780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52a87c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x385135854c6e4174
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3b385135854c6e41
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x787765648a4f3739
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0f0306000c0604
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf0200030b0f0306
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa030807000a0801
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x52a810
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x52a848
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x52a86f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x52a7f6
jmp 0x52a863
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0052a780

Function at 0x52ab40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52ac3c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x16294d2b33401c30
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3816294d2b33401c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe9360f4b370414fb
mov qword [rsp + 0x28], rdx
movabs rdx, 0x604100e0a05100b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0b0b0c05050f09
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20f0c0907010e10
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x52abd0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x52ac08
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x52ac2f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x52abb6
jmp 0x52ac23
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0052ab40
Function at 0x52b220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52b316
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x32362c3267731960
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2132362c32677319
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1530652c63626130
mov qword [rsp + 0x26], rdx
movabs rdx, 0x802070910020801
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd080207091002
mov qword [rsp + 0x30], rdx
movabs rdx, 0x504030f0f040f08
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x52b2b3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x52b2e2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x52b309
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x52b296
nop
jmp 0x52b2fd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.0052b220

Function at 0x52b340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52b43c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xa1fb767233ece077
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6ba1fb767233ece0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x58a745447c644139
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8000f0200010106
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x40b050708000f02
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5020f0c0f0f0602
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x52b3d0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x52b408
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x52b42f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x52b3b6
jmp 0x52b423
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.0052b340