joyce8/EMBER2024-capa huggingface dataset:
Function at 0x506280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50637d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x283961b4200db320
mov qword [rsp + 0x19], rdx
movabs rdx, 0xba3c6159e50cfc28
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2b4233a2e9647215
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7011413130b07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90a00120f040f0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9130f0d140d0200
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1616150808120d06
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x506320
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x50634d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x506370
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x5062ff
jmp 0x506364
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00440c40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00450f20
mov eax, edi
mov ecx, 0x17
call fcn.00450f20
nop
nop dword [rax]
call fcn.0044eca0
jmp fcn.00506280

Function at 0x506c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x506d4c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x467da6f1e102e57
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x79b806f920abc06c
mov qword [rsp + 0x23], rdx
movabs rdx, 0x2d79b806f920abc0
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc4fad06720c27261
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7160d17150c0210
mov qword [rsp + 0x34], rdx
movabs rdx, 0x5130918050d0310
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x20f0c1305130918
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa1613100c150e17
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x506ce8
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x506d1c
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x506d3f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
cmp rsi, 0x19
jb 0x506cce
jmp 0x506d33
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00440c40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00450f20
mov eax, edi
mov ecx, 0x19
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.00506c40
Function at 0x5087e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5088dd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa5814e588e677376
mov qword [rsp + 0x19], rdx
movabs rdx, 0x766e748153a5814e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xdc6d70a1b9987276
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1207040012140100
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0d0a0c10070a0f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1120c0d0a0c1007
mov qword [rsp + 0x38], rdx
movabs rdx, 0x306051007120911
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x508880
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x5088ad
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5088d0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x50885f
jmp 0x5088c4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00440c40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00450f20
mov eax, edi
mov ecx, 0x15
call fcn.00450f20
nop
nop dword [rax]
call fcn.0044eca0
jmp fcn.005087e0

Function at 0x50aa60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50ab5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x75e1589cb6a28bd0
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6440f0744126d675
mov qword [rsp + 0x20], rdx
movabs rdx, 0x65386954d4eedfd6
mov qword [rsp + 0x28], rdx
movabs rdx, 0x12010d0605150704
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7030f0d090502
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8010f0a1106100c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf08150a0d1503
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x50ab00
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x52]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x50ab2d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x50ab50
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x50aadf
jmp 0x50ab44
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00440c40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00450f20
mov eax, edi
mov ecx, 0x17
call fcn.00450f20
nop
nop dword [rax]
call fcn.0044eca0
jmp fcn.0050aa60
Function at 0x50da40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50db5a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x733f412b0831fc12
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x55ee3bf96c4b72b5
mov qword [rsp + 0x24], rdx
movabs rdx, 0x386e033b55ee3bf9
mov qword [rsp + 0x28], rdx
movabs rdx, 0x654e2318493c5761
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0316001a111a15
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30d190c1511081a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0f100a04181610
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170e171a06161613
mov qword [rsp + 0x50], rdx
movabs rdx, 0x202040102190800
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x50daf7
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x28
jge 0x50db29
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x50db4d
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0x1c
jb 0x50dadd
jmp 0x50db41
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.00440c40
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00450f20
mov eax, edi
mov ecx, 0x1c
call fcn.00450f20
nop
call fcn.0044eca0
nop
jmp fcn.0050da40

Function at 0x50fb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50fbea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xbd61e6bd0c51c973
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8ebd61e6bd0c51c9
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xabb2c054206472d0
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0f050304100802
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50507080e0f0503
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90707010300010f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50fb8d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x42]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x42]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x50fbba
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50fbdd
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x50fb70
jmp 0x50fbd1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00440c40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00450f20
mov eax, edi
mov ecx, 0x11
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.0050fb00
Function at 0x514740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51482c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x770f6da117770401
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd66e8e74f020770f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b6d695420647204
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5150b0701030406
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd000500070e0515
mov qword [rsp + 0x22], rdx
movabs rdx, 0x609060401090b15
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x5147ca
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x16
jge 0x5147fc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x51481f
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
cmp rsi, 0x16
jb 0x5147b0
jmp 0x514813
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00440c40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00450f20
mov eax, edi
mov ecx, 0x16
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.00514740

Function at 0x514ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x514c8c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xdaa26514250587bd
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd86e89745320ccda
mov qword [rsp + 0x20], rdx
movabs rdx, 0x65bb222a201e7261
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe080307080c0111
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1306110411130114
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1511010001020e07
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x514c2a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x71]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x514c5c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x514c7f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x71]
cmp rsi, 0x17
jb 0x514c10
jmp 0x514c73
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00440c40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00450f20
mov eax, edi
mov ecx, 0x17
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.00514ba0
Function at 0x51ade0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51aedd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x659e78d2746e9873
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6e698d3bc0dea765
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd2a8659b8f619420
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa08041610131012
mov qword [rsp + 0x36], rdx
movabs rdx, 0x40910120c0b1501
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x904040910120c0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1608090a01060104
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x51ae80
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0xa]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0xa]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x51aead
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x51aed0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x51ae5f
jmp 0x51aec4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00440c40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00450f20
mov eax, edi
mov ecx, 0x17
call fcn.00450f20
nop
nop dword [rax]
call fcn.0044eca0
jmp fcn.0051ade0

Function at 0x51b040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51b13b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x23cd582d50575052
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x64200823cd582d50
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x47460cdb633f7242
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6011004080f10
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1203050711080f05
mov qword [rsp + 0x36], rdx
movabs rdx, 0x2120305071108
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50d010d020b0201
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x51b0d9
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xa]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1a
jge 0x51b10b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x51b12e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xa]
cmp rsi, 0x13
jb 0x51b0bf
jmp 0x51b122
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.00440c40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00450f20
mov eax, edi
mov ecx, 0x13
call fcn.00450f20
nop
nop dword [rax + rax]
call fcn.0044eca0
jmp fcn.0051b040
Function at 0x51c720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x22c37b33791f53bc
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x503020004040204
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2000503
xor eax, eax
jmp 0x51c775
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x51c7a8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x51c7e5
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x22]
nop dword [rax]
cmp rbx, 8
jb 0x51c75b
jmp 0x51c7d7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x51c7c1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x51c7b5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00450f20
mov eax, esi
mov ecx, 8
call fcn.00450f20
nop
int3

Function at 0x51dd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51de06
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x741cfccf6c0dd5c7
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x19c9221016f68ccb
mov qword [rsp + 0x22], rdx
movabs rdx, 0x40b04010e050b09
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x801040a0a00040b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6020f010d0d050c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x51dda0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x51ddd2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x51ddf7
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3c]
cmp rsi, 0x10
jb 0x51dd82
jmp 0x51ddeb
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00440c40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00450f20
mov eax, edi
mov ecx, 0x10
nop
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.0051dd20
Function at 0x51f5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51f68a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5b486b6f546c4e5f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x566e495b486b6f54
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6e7c6c64619c726d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x600100d07010f0a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x100a010d0600100d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x110a070206070b0f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x51f62d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x51f65a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x51f67d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x51f610
jmp 0x51f671
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00440c40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00450f20
mov eax, edi
mov ecx, 0x13
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.0051f5a0

Function at 0x51fd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51fe5b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x80704964f2745047
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3ee71f880704964
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe2b5e4e4ce723ad7
mov qword [rsp + 0x26], rdx
movabs rdx, 0x708100a13050f03
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x8090b1211010a0b
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd1108090b121101
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11080c1308080808
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x51fdf9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x51fe2b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x51fe4e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0x14
jb 0x51fddf
jmp 0x51fe42
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.00440c40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00450f20
mov eax, edi
mov ecx, 0x14
call fcn.00450f20
nop
nop dword [rax + rax]
call fcn.0044eca0
jmp fcn.0051fd60
Function at 0x520880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x520966
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x257240430bba65b5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2ccd65d668a8946e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x504030f0f030709
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa000504030f0f03
mov qword [rsp + 0x30], rdx
movabs rdx, 0x405020e0c090709
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x520900
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x73]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x520932
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x520957
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x73]
cmp rsi, 0x10
jb 0x5208e2
jmp 0x52094b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.00440c40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00450f20
mov eax, edi
mov ecx, 0x10
nop
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.00520880

Function at 0x5223c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52248c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x324f566875648170
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x377478654e324f56
mov qword [rsp + 0x22], rdx
movabs rdx, 0x60402050205050c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60504000a010604
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x52242f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x52245c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x52247f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x522412
jmp 0x522473
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00440c40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00450f20
mov eax, edi
mov ecx, 0xd
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.005223c0
Function at 0x5228a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x522986
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x75430c69483b592c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3d113eb753fa2309
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd020b0c01010508
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60b060e080a0d02
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80f0503090603
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x522920
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x19]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x522952
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x522977
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x19]
cmp rsi, 0x10
jb 0x522902
jmp 0x52296b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00440c40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00450f20
mov eax, edi
mov ecx, 0x10
nop
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.005228a0

Function at 0x52a520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52a5d8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xdd3bb767d2d8d375
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x505020106050605
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x307
xor eax, eax
jmp 0x52a575
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x71]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x52a5a8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x52a5cb
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x71]
nop
cmp rsi, 8
jb 0x52a55b
jmp 0x52a5bf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00440c40
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00450f20
mov eax, edi
mov ecx, 8
call fcn.00450f20
nop
call fcn.0044eca0
nop dword [rax]
jmp fcn.0052a520
Function at 0x52b7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52b8a8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x73e0c1f76fafa22e
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf56fc42074ba6574
mov qword [rsp + 0x21], rdx
movabs rdx, 0xdf56fc42074ba65
mov qword [rsp + 0x22], rdx
movabs rdx, 0x598bbba9b0c9cb2e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x14181504060d0d00
mov qword [rsp + 0x32], rdx
movabs rdx, 0x100a0d0f0014170d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x51600010f16100a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa13061502010d12
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x52b84b
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x26]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x26]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x52b878
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x52b89b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x52b82e
jmp 0x52b88f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.00440c40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00450f20
mov eax, edi
mov ecx, 0x19
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.0052b7a0

Function at 0x52c240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52c35d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x474155f320f6f90d
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe9fd3af2652c2726
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe143203972357747
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6e6f3374f7654020
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2171201000a0804
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0c09020c0a170f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b0d18141d06100e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x812070a0c161917
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1006120914081905
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x52c300
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x55]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x55]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x52c32d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x52c350
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x20
jb 0x52c2dd
jmp 0x52c344
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.00440c40
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00450f20
mov eax, edi
mov ecx, 0x20
call fcn.00450f20
nop
nop dword [rax]
call fcn.0044eca0
jmp fcn.0052c240