joyce8/EMBER2024-capa huggingface dataset:
Function at 0x50c720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50c7ec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb8044f742bdbf13
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x1e0cf544
movabs rdx, 0x10b0b0600040102
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1020b090a07010b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x50c785
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x50c7bc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x50c7df
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 0xc
jb 0x50c76b
jmp 0x50c7d3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
mov eax, edi
mov ecx, 0xc
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0050c720

Function at 0x50db80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50dc3d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x343a46680642215a
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x20
movabs rdx, 0x201000301070506
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x105
xor eax, eax
nop
jmp 0x50dbe0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x21]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x50dc0d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x50dc30
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x50dbc2
jmp 0x50dc24
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00460ec0
mov eax, edi
mov ecx, 9
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.0050db80
Function at 0x50e520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50e60c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3758845e55826e30
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6f3758845e55826e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x58be45dc82ab8039
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd020f020c01020d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0d0806080b050a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0a030106060405
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50e5aa
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x50e5dc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50e5ff
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0x11
jb 0x50e590
jmp 0x50e5f3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00460ec0
mov eax, edi
mov ecx, 0x11
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0050e520

Function at 0x50e960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50ea4a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2536193733433130
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3025361937334331
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3429656451336161
mov qword [rsp + 0x22], rdx
movabs rdx, 0x100b020709090405
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5081002070f100b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0804100c080409
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50e9ed
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x50ea1a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50ea3d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x50e9d0
jmp 0x50ea31
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00460ec0
mov eax, edi
mov ecx, 0x11
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0050e960
Function at 0x50f000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50f0ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x377435113394e9fd
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb3377435113394e9
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf1030195ca0634df
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90d0a0d09040201
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90109060a080d0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0e0c000b0d100f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50f08a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x50f0bc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50f0df
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 0x11
jb 0x50f070
jmp 0x50f0d3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00460ec0
mov eax, edi
mov ecx, 0x11
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0050f000

Function at 0x50f560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50f66c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x676e69dbfd121e65
mov qword [rsp + 0x19], rdx
movabs rdx, 0xadfc9e0ba265aa2f
mov qword [rsp + 0x21], rdx
movabs rdx, 0x2cb064696c73c4ad
mov qword [rsp + 0x28], rdx
movabs rdx, 0x55a725953a5074ae
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1716170b15110f1b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf111d100b010319
mov qword [rsp + 0x40], rdx
movabs rdx, 0x203030d0c091610
mov qword [rsp + 0x48], rdx
movabs rdx, 0x101b0c150c0e040e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x50f608
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x20
jge 0x50f63c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x50f65f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 0x1f
jb 0x50f5ee
jmp 0x50f653
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1f
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0050f560
Function at 0x513060
Capabilities:
Hash data using fnv

Disassembly:
test byte [rax], al
mov rcx, rbx
and ebx, 0x7f
shl rbx, 5
lea rdx, [rax + rbx]
xor eax, eax
jmp 0x513077
inc rax
cmp rax, 4
jge 0x51308f
lea rbx, [rdx + rax*8]
mov rbx, qword [rbx]
cmp rbx, rcx
jne 0x513074
mov eax, 1
ret
xor eax, eax
movabs rbx, 0xcbf29ce484222325
jmp 0x5130a0
inc rax
cmp rax, 4
jge 0x5130ae
mov rsi, qword [rdx + rax*8]
xor edi, edi
jmp 0x5130d7
and ebx, 3
lea rdx, [rdx + rbx*8]
xchg qword [rdx], rcx
xor eax, eax
ret
movzx r8d, sil
xor rbx, r8
inc rdi
shr rsi, 8
movabs r8, 0x100000001b3
imul rbx, r8
cmp rdi, 8
jl 0x5130bb
jmp 0x51309d

Function at 0x514260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51434a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2075696b61586e69
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6960626b4c69615e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x693a107c206c6d73
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0d020211081504
mov qword [rsp + 0x18], rdx
movabs rdx, 0x121106170613140a
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0d0a020e060f04
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x5142ed
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
cmp rax, 0x18
jge 0x51431a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x51433d
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x18
jb 0x5142d0
jmp 0x514331
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00460ec0
mov eax, edi
mov ecx, 0x18
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00514260

Function at 0x5169a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x516a66
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1f995ba65a5d72a
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xf2
movabs rdx, 0x607080504020401
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8040100
xor eax, eax
nop
jmp 0x516a00
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x516a32
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x516a57
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 9
jb 0x5169e2
jmp 0x516a4b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00460ec0
mov eax, edi
mov ecx, 9
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005169a0
Function at 0x5177e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5178ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x192c531f2a354352
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x28736553
movabs rdx, 0x20306040b04070b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2030b0804070203
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x517845
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x13]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x51787c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x51789f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x13]
cmp rsi, 0xc
jb 0x51782b
jmp 0x517893
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
mov eax, edi
mov ecx, 0xc
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005177e0

Function at 0x517f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x5180a7
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x3bae2569b965ef70
mov qword [rsp + 0x19], rdx
movabs rdx, 0x20e62ecc9c63738a
mov qword [rsp + 0x21], rdx
movabs rdx, 0xe1b13baf8720e62e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1a7420ba73203aea
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x63cf739c68a26e25
mov qword [rsp + 0x36], rdx
movabs rdx, 0x12ee94fdca306d89
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe08210113140b2b
mov qword [rsp + 0x46], rdx
movabs rdx, 0xd2710282c192a16
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x1c230d2710282c19
mov qword [rsp + 0x50], rdx
movabs rdx, 0x251f1d051d162309
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2a15120207280611
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1d280228251a0c13
mov qword [rsp + 0x68], rdx
movabs rdx, 0xd2703051a0b2521
mov qword [rsp + 0x70], rdx
movabs rdx, 0x71419081629191d
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x51804a
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x17]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x17]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x3a
jge 0x518077
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x51809a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x2d
jb 0x51802d
jmp 0x51808e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2d
call fcn.0044b900
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00460ec0
mov eax, edi
mov ecx, 0x2d
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00517f40
Function at 0x5180c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51820c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x63d366a8cb30c323
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x34cda3afd6ba63d3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2072a8a8200d1161
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6ed9ccb0328a6350
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9de39d68ac93dfcb
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1e1000031f24170d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2317021b170f220c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x20061c2021082416
mov qword [rsp + 0x50], rdx
movabs rdx, 0x201b25180d010901
mov qword [rsp + 0x58], rdx
movabs rdx, 0x12041e2224011e20
mov qword [rsp + 0x60], rdx
movabs rdx, 0xa1f1f01031a0d03
mov qword [rsp + 0x68], rdx
movabs rdx, 0x20182119130b001a
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x5181a4
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x38
jge 0x5181dc
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x26
jae 0x5181ff
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
cmp rsi, 0x26
jb 0x51818a
jmp 0x5181f3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x26
call fcn.0044b900
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.00460ec0
mov eax, edi
mov ecx, 0x26
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.005180c0

Function at 0x519620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51971d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x52572e557411626a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7267a0726e796452
mov qword [rsp + 0x20], rdx
movabs rdx, 0x675b6f6c18097272
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4051211060d0115
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf051502070407
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb110b09110c0310
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0906080c0e0b08
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5196c0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x5196ed
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x519710
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x51969f
jmp 0x519704
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00460ec0
mov eax, edi
mov ecx, 0x17
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.00519620
Function at 0x51b380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51b4c7
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x65d9e0c5726168c9
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x686ec92f74660a11
mov qword [rsp + 0x23], rdx
movabs rdx, 0x326378cf20686ec9
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9be7cb85c57397af
mov qword [rsp + 0x30], rdx
movabs rdx, 0xfed965bef563babd
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe8f5f1322820f061
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1f080f09161f210a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5252c0615160623
mov qword [rsp + 0x50], rdx
movabs rdx, 0x18141d2b201c1a00
mov qword [rsp + 0x58], rdx
movabs rdx, 0x201e1f2c0f0a0d0c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x18192a0408240d0a
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1b0f2605210d1115
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x51b467
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x30
jge 0x51b497
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2d
jae 0x51b4ba
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x2d
jb 0x51b44a
jmp 0x51b4ae
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x2d
call fcn.0044b900
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00460ec0
mov eax, edi
mov ecx, 0x2d
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.0051b380
Function at 0x51dfc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x38
movups xmmword [rsp + 0x48], xmm15
movabs rdx, 0x5000af0000afae00
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xffac56a9
movabs rdx, 0x901020507080a01
mov qword [rsp + 0x10], rdx
mov dword [rsp + 0x18], 0x8010109
xor eax, eax
nop
jmp 0x51e020
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x51e04f
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 0xc
jae 0x51e087
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x46]
cmp rbx, 0xc
jb 0x51e002
jmp 0x51e07b
movups xmmword [rsp + 0x28], xmm15
xor eax, eax
jmp 0x51e065
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x28], cl
inc rax
cmp rax, 0xc
jl 0x51e059
movups xmm0, xmmword [rsp + 0x28]
movups xmmword [rsp + 0x48], xmm0
add rsp, 0x38
pop rbp
ret
mov eax, ebx
mov ecx, 0xc
call fcn.00460ec0
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
nop
int3

Function at 0x520ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x520f86
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3761655946565162
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x74
movabs rdx, 0x105050703020307
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x402
xor eax, eax
nop
jmp 0x520f20
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 8]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x520f52
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x520f77
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 8]
cmp rsi, 9
jb 0x520f02
jmp 0x520f6b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00460ec0
mov eax, edi
mov ecx, 9
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.00520ec0
Function at 0x521ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x521f7d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2095a1d773c169ab
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x41b6572c7a16120
mov qword [rsp + 0x26], rdx
movabs rdx, 0x509060a0e050202
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40d0509060a0e05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20906060904000d
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x521f20
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x21]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x21]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x521f4d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x521f70
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x521f02
jmp 0x521f64
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460ec0
mov eax, edi
mov ecx, 0xf
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.00521ea0

Function at 0x524e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x524f5d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb622fa9be615854
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6f700ca6060b622f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7061e17420b199cf
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9010e0a00080003
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x704090f12070f00
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe0e0704090f1207
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120d0f0e0e0f030e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x524f00
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x26]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x26]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x524f2d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x524f50
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x524edf
jmp 0x524f44
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460ec0
mov eax, edi
mov ecx, 0x15
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.00524e60
Function at 0x526680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xf3097f6f43f5e8f9
mov qword [rsp + 0x18], rax
movabs rax, 0x6fa5ee0fe833eda
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1e]
movzx ecx, byte [rsp + 0x22]
add eax, ecx
movzx ecx, byte [rsp + 0x1b]
movzx edx, byte [rsp + 0x1d]
add ecx, edx
movzx edx, byte [rsp + 0x26]
movzx ebx, byte [rsp + 0x27]
add edx, ebx
movzx ebx, byte [rsp + 0x23]
movzx esi, byte [rsp + 0x21]
xor ebx, esi
movzx esi, byte [rsp + 0x1c]
movzx edi, byte [rsp + 0x24]
add esi, edi
movzx edi, byte [rsp + 0x19]
movzx r8d, byte [rsp + 0x20]
add edi, r8d
movzx r8d, byte [rsp + 0x1f]
movzx r9d, byte [rsp + 0x25]
sub r8d, r9d
movzx r9d, byte [rsp + 0x1a]
movzx r10d, byte [rsp + 0x18]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x526766
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x52675a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x526be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x5b66ebce20bf3bdd
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x704000506060306
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x707
xor eax, eax
jmp 0x526c34
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x526c68
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x526ca5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x46]
nop dword [rax + rax]
cmp rbx, 8
jb 0x526c1a
jmp 0x526c97
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x526c81
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x526c75
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00460ec0
mov eax, esi
mov ecx, 8
call fcn.00460ec0
nop
int3