joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4f7d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7e3d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2ee4297439e308d4
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x236e07e92f2ee429
mov qword [rsp + 0x22], rdx
movabs rdx, 0x376da7bb200172de
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2090d0702110712
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd0f0c0a11000606
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x5010811060d0d0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc09051414080203
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f7de0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x50]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x50]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4f7e0d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f7e30
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4f7dbf
jmp 0x4f7e24
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004f7d40

Function at 0x4f86c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f87bd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74c814026fa56353
mov qword [rsp + 0x19], rdx
movabs rdx, 0x56590b74c814026f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xfd3a69fdcd33c290
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1206010b02041112
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x601050c0d0f0904
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa0f0f0a0601050c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120b080a0e0b040a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f8760
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x73]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x73]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4f878d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f87b0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4f873f
jmp 0x4f87a4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004f86c0
Function at 0x4fa080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fa187
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x583cf53856184c3a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x611f532073644c68
mov qword [rsp + 0x22], rdx
movabs rdx, 0x586e611f53207364
mov qword [rsp + 0x24], rdx
movabs rdx, 0x34f691d51284341
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0812020e091516
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1207111805000709
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x703190412071118
mov qword [rsp + 0x40], rdx
movabs rdx, 0x602000414061301
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fa124
movzx r9d, byte [rsp + rsi + 0x1a]
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4fa157
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x1a
jae 0x4fa17a
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, edx
cmp rsi, 0x1a
jb 0x4fa10e
jmp 0x4fa16e
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004fa080

Function at 0x4fa4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fa5a8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x63cd9620ca02bea5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xafa6c78263d1c810
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd6a3afa6c78263d1
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc564d254ca671274
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10f00051801120c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1210120815020510
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1209081703131415
mov qword [rsp + 0x48], rdx
movabs rdx, 0x603110a0d0e190f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4fa54b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x4fa578
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4fa59b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4fa52e
jmp 0x4fa58f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004fa4a0
Function at 0x500b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x500c4c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x32336989d40d648e
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xa2a3e82e
movabs rdx, 0x90303090b09020b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30300040a04000b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x500be5
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x500c1c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x500c3f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0xc
jb 0x500bcb
jmp 0x500c33
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00500b80

Function at 0x500ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x500f87
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x325f60656e57ec62
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x60644f12
movabs rdx, 0x902050b08080901
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60a00020a0902
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x500f28
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x500f57
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x500f7a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x500f0b
jmp 0x500f6e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00500ec0
Function at 0x5019e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x501abd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3d6f7372dd70e1f4
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd84f6565ba74e53d
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0b0a0e0b0d0307
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x30b0e0b0a0e0b0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd000d0108010803
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x501a60
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x6b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x501a8d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x501ab0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x501a42
jmp 0x501aa4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.005019e0

Function at 0x502240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50232c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x25466d725a8404bd
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8225466d725a8404
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xbabdc7bfa187c963
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa03020e04071008
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc000a070a03020e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0d0704010a0f0b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5022ca
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x5022fc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50231f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
cmp rsi, 0x11
jb 0x5022b0
jmp 0x502313
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00502240
Function at 0x503320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50340c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c755f6f4dfb644f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x644e6c755f6f4dfb
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3f406d44162e3969
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1010505050c000d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9050902100e0101
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0b110800080508
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5033aa
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x5033dc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5033ff
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0x12
jb 0x503390
jmp 0x5033f3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00503320

Function at 0x504dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x504e92
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x65eecd682714f7de
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x9ebf1865eecd6827
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3050a0306090600
mov qword [rsp + 0x28], rdx
movabs rdx, 0x502080103030006
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x504e2c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x504e5e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x504e85
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0xb
jb 0x504e12
jmp 0x504e75
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00504dc0
Function at 0x505880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50597d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf0ea0172e974e367
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x92ccb6506f0ea01
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2bd123c321180672
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x131401110001080c
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa03010f11131007
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa100e030a03010f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140611120b051106
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x505920
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x67]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x67]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x50594d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x505970
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x5058ff
jmp 0x505964
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00505880

Function at 0x5081a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5082cc
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x919a746d65646966
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x71206a919a746d65
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6d743a2a20739385
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2074af7f9c7075b0
mov qword [rsp + 0x32], rdx
movabs rdx, 0x698169766496b165
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x2208071c1321131d
mov qword [rsp + 0x42], rdx
movabs rdx, 0x18160a1018062208
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa1206071d040b0c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x18130b1f1c021707
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf101b080f040204
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x508266
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x26
jge 0x50829c
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x23
jae 0x5082bf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x23
jb 0x50824c
jmp 0x5082b3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x23
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00461020
mov eax, edi
mov ecx, 0x23
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005081a0
Function at 0x50d920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x50da7b
push rbp
mov rbp, rsp
sub rsp, 0xc8
movabs rdx, 0x1b6b687bcaa9c394
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xaf75948fae3e091b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb1b87520c4e8fe6d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa4b50e5a69db2972
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6e69d2edff72bf6f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x16f77a66896b3dab
mov qword [rsp + 0x46], rdx
movabs rdx, 0x53669d04cd7d6f72
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x46786169aa98bb9e
mov qword [rsp + 0x56], rdx
movabs rdx, 0x296137353834d831
mov qword [rsp + 0x5e], rdx
movabs rdx, 0x733103323073424
mov qword [rsp + 0x66], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x00a31362]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0046164c
mov rbp, qword [rbp]
xor eax, eax
jmp 0x50da11
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x73]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x62
jge 0x50da48
movzx edx, byte [rsp + rax + 0x66]
movzx esi, byte [rsp + rax + 0x67]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x50da6e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x73]
nop dword [rax + rax]
cmp rsi, 0x47
jb 0x50d9f7
jmp 0x50da62
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x47
call fcn.0044bb20
add rsp, 0xc8
pop rbp
ret
mov eax, esi
mov ecx, 0x47
call fcn.00461020
mov eax, edi
mov ecx, 0x47
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.0050d920

Function at 0x51e0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51e1ac
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8f44f0e244a6032f
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x9179
movabs rdx, 0x800000100000205
mov qword [rsp + 0x22], rdx
movabs rdx, 0x702020401090800
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x51e144
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x51e17c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x51e19f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5f]
cmp rsi, 0xa
jb 0x51e12a
jmp 0x51e193
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0051e0e0
Function at 0x51f480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51f56c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8774ba6833327f88
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x388774ba6833327f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4f8f84794d62b439
mov qword [rsp + 0x26], rdx
movabs rdx, 0x410000d070a050e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7100410000d070a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x506050c010f0e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x51f50a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x51f53c
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x51f55f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x11
jb 0x51f4f0
jmp 0x51f553
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0051f480
Function at 0x526ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x526d9b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xaa697c6e777a6c7a
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa38b8734aa697c6e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80657a7d65d0879a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x903070d130d0e13
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb07040c0a10040b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100209040b07040c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb1008110d070508
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x526d39
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1c
jge 0x526d6b
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x526d8e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x14
jb 0x526d1f
jmp 0x526d82
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00526ca0

Function at 0x526f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x5270bd
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0xe34e1a43f13403e8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x746e1a6b5d1bd93e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6c5d577c746e1a6b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x68731a7211fe631f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2849466ff120585c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12116b4b27703d75
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0509211416022b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x272a03011d281900
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2108062512232714
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f241c04170b21
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2120b2401040701
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1004220a0c271029
mov qword [rsp + 0x70], rdx
movabs rdx, 0x3001102061b0a11
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x527060
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0x38
jge 0x52708d
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x5270b0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x2c
jb 0x52703e
jmp 0x5270a4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x2c
call fcn.0044bb20
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2c
call fcn.00461020
mov eax, edi
mov ecx, 0x2c
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00526f60
Function at 0x52ebe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x52ed52
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x454f74e96c69610e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc1ba3a2bb618d72
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3962c5c15fdec9b0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x756127ab4a9cbf91
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe7e4f35e6290201d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc91be89fb725cc01
mov qword [rsp + 0x42], rdx
movabs rdx, 0xe072c23091a130c
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2b1212180d04222c
mov qword [rsp + 0x52], rdx
movabs rdx, 0x2627070628002b12
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2a2420112a1f290b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2e252e1c120f1907
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2a0e092c2a0c1020
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1b200623141a2f1d
mov qword [rsp + 0x78], rdx
movabs rdx, 0x42d1d150b2a1724
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x52ecf0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x3e
jge 0x52ed1d
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x52ed45
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x30
jb 0x52ecd3
jmp 0x52ed37
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x30
call fcn.0044bb20
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x30
nop
call fcn.00461020
mov eax, edi
mov ecx, 0x30
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0052ebe0