joyce8/EMBER2024-capa huggingface dataset:
Function at 0x51e140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x2ee197d2724cecac
mov qword [rsp + 0x18], rax
movabs rax, 0x419add71376c3912
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x18]
movzx ecx, byte [rsp + 0x20]
xor eax, ecx
movzx ecx, byte [rsp + 0x24]
movzx edx, byte [rsp + 0x22]
add ecx, edx
movzx edx, byte [rsp + 0x19]
movzx ebx, byte [rsp + 0x1b]
sub edx, ebx
movzx ebx, byte [rsp + 0x21]
movzx esi, byte [rsp + 0x1d]
sub ebx, esi
movzx esi, byte [rsp + 0x25]
movzx edi, byte [rsp + 0x1c]
sub esi, edi
movzx edi, byte [rsp + 0x27]
movzx r8d, byte [rsp + 0x1e]
add edi, r8d
movzx r8d, byte [rsp + 0x1a]
movzx r9d, byte [rsp + 0x1f]
add r8d, r9d
movzx r9d, byte [rsp + 0x23]
movzx r10d, byte [rsp + 0x26]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x51e226
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x51e21a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x51e640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x9e6853d64c12fc0e
mov qword [rsp + 0x18], rax
movabs rax, 0x6288033f3395b153
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1f]
movzx ecx, byte [rsp + 0x18]
add eax, ecx
movzx ecx, byte [rsp + 0x22]
movzx edx, byte [rsp + 0x1b]
add ecx, edx
movzx edx, byte [rsp + 0x25]
movzx ebx, byte [rsp + 0x1e]
add edx, ebx
movzx ebx, byte [rsp + 0x1c]
movzx esi, byte [rsp + 0x26]
add ebx, esi
movzx esi, byte [rsp + 0x1a]
movzx edi, byte [rsp + 0x21]
add esi, edi
movzx edi, byte [rsp + 0x24]
movzx r8d, byte [rsp + 0x23]
add edi, r8d
movzx r8d, byte [rsp + 0x19]
movzx r9d, byte [rsp + 0x1d]
xor r8d, r9d
movzx r9d, byte [rsp + 0x20]
movzx r10d, byte [rsp + 0x27]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x51e726
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x51e71a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x51f500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x739fc7014a8c83b
mov qword [rsp + 0x18], rax
movabs rax, 0x72a93f1521467070
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x24]
movzx ecx, byte [rsp + 0x27]
sub eax, ecx
movzx ecx, byte [rsp + 0x1c]
movzx edx, byte [rsp + 0x1e]
add ecx, edx
movzx edx, byte [rsp + 0x20]
movzx ebx, byte [rsp + 0x1d]
add edx, ebx
movzx ebx, byte [rsp + 0x19]
movzx esi, byte [rsp + 0x22]
sub ebx, esi
movzx esi, byte [rsp + 0x1a]
movzx edi, byte [rsp + 0x23]
xor esi, edi
movzx edi, byte [rsp + 0x1f]
movzx r8d, byte [rsp + 0x26]
sub edi, r8d
movzx r8d, byte [rsp + 0x21]
movzx r9d, byte [rsp + 0x1b]
sub r8d, r9d
movzx r9d, byte [rsp + 0x25]
movzx r10d, byte [rsp + 0x18]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x51f5e6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x51f5da
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x51fe60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0xa4c49f6b00090f81
mov qword [rsp + 0x18], rax
movabs rax, 0x3b59100268c61ff9
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x26]
movzx ecx, byte [rsp + 0x22]
xor eax, ecx
movzx ecx, byte [rsp + 0x1c]
movzx edx, byte [rsp + 0x1b]
add ecx, edx
movzx edx, byte [rsp + 0x19]
movzx ebx, byte [rsp + 0x1e]
sub edx, ebx
movzx ebx, byte [rsp + 0x23]
movzx esi, byte [rsp + 0x21]
add ebx, esi
movzx esi, byte [rsp + 0x1f]
movzx edi, byte [rsp + 0x24]
sub esi, edi
movzx edi, byte [rsp + 0x1a]
movzx r8d, byte [rsp + 0x20]
sub edi, r8d
movzx r8d, byte [rsp + 0x18]
movzx r9d, byte [rsp + 0x27]
add r8d, r9d
movzx r9d, byte [rsp + 0x1d]
movzx r10d, byte [rsp + 0x25]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
sub r9d, r10d
mov byte [rsp + 0x16], r9b
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x51ff46
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x51ff3a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x520160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x2801979cae926a4
mov qword [rsp + 0x18], rax
movabs rax, 0x66a721fef3353333
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x26]
movzx ecx, byte [rsp + 0x1a]
sub eax, ecx
movzx ecx, byte [rsp + 0x18]
movzx edx, byte [rsp + 0x27]
add ecx, edx
movzx edx, byte [rsp + 0x19]
movzx ebx, byte [rsp + 0x24]
add edx, ebx
movzx ebx, byte [rsp + 0x1e]
movzx esi, byte [rsp + 0x1f]
xor ebx, esi
movzx esi, byte [rsp + 0x1b]
movzx edi, byte [rsp + 0x25]
add esi, edi
movzx edi, byte [rsp + 0x1c]
movzx r8d, byte [rsp + 0x22]
add edi, r8d
movzx r8d, byte [rsp + 0x20]
movzx r9d, byte [rsp + 0x1d]
sub r8d, r9d
movzx r9d, byte [rsp + 0x21]
movzx r10d, byte [rsp + 0x23]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x520246
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x52023a
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret

Function at 0x520920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rdx, 0x76aa66e5132dadd0
mov qword [rsp + 0x20], rdx
movabs rdx, 0x707030001050705
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x52096d
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x65]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x52099c
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5209d7
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x65]
cmp rbx, 8
jb 0x520953
jmp 0x5209cb
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x5209b5
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x5209a9
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
mov eax, ebx
mov ecx, 8
call fcn.00454ec0
mov eax, esi
mov ecx, 8
nop
call fcn.00454ec0
nop
int3
Function at 0x5222e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x55493b455998249b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x306050106040300
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x204
xor eax, eax
jmp 0x522334
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x522368
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x5223a5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x5c]
nop dword [rax + rax]
cmp rbx, 8
jb 0x52231a
jmp 0x522397
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x522381
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x522375
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3

Function at 0x5223c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x91532571d94fb0b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x704020602010600
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 4
xor eax, eax
jmp 0x522416
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x60]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x60]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x522442
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x522485
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x5223fa
nop
jmp 0x522476
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x522460
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x52244f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x522e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xec21dbb907a340f5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2050001070601
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x506
xor eax, eax
jmp 0x522ed6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x1c]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x522f02
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x522f45
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x522eba
nop
jmp 0x522f36
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x522f20
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x522f0f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3

Function at 0x523060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xbd35600b30b4a8fe
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x604070202040403
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x306
xor eax, eax
jmp 0x5230b5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x5230e8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x523125
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x4e]
nop dword [rax]
cmp rbx, 8
jb 0x52309b
jmp 0x523117
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x523101
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x5230f5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x5231c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x7b13a3f8083edf93
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x100000405050502
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x605
xor eax, eax
jmp 0x523214
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x55]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x523248
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x523285
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x55]
nop dword [rax + rax]
cmp rbx, 8
jb 0x5231fa
jmp 0x523277
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x523261
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x523255
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3

Function at 0x5234a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xe7896a399b73f9d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1070405000207
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3070601
xor eax, eax
jmp 0x5234f5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x57]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x523528
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x523565
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x57]
nop dword [rax]
cmp rbx, 8
jb 0x5234db
jmp 0x523557
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x523541
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x523535
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x523fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xa4da4332d8315f86
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x403070401060600
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x700
xor eax, eax
jmp 0x524016
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x51]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x51]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x524042
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x524085
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x523ffa
nop
jmp 0x524076
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x524060
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x52404f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3

Function at 0x5240a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xf072b21590afcd97
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x603030103050606
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x101
xor eax, eax
jmp 0x5240f6
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi - 0x23]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x524122
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x524165
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x5240da
nop
jmp 0x524156
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x524140
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
nop dword [rax + rax]
cmp rax, 8
jl 0x52412f
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop dword [rax]
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x5251a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x96243a426ed6561c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x500030303060503
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2000200
xor eax, eax
jmp 0x5251f5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx - 0x41]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x525228
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x525265
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi - 0x41]
nop dword [rax]
cmp rbx, 8
jb 0x5251db
jmp 0x525257
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x525241
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x525235
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3

Function at 0x525280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x67fc947abc840c6a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x403050102000604
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6070107
xor eax, eax
jmp 0x5252d5
movzx r8d, byte [rsp + rbx + 0x1c]
lea edx, [r8 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rsi + 0x1c], dl
mov byte [rsp + rbx + 0x1c], dil
add rax, 2
cmp rax, 0xc
jge 0x525308
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x525345
movzx edi, byte [rsp + rsi + 0x1c]
lea edi, [rdi + rdx]
lea edi, [rdi + 9]
nop dword [rax]
cmp rbx, 8
jb 0x5252bb
jmp 0x525337
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x525321
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x525315
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x5261c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52628c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd70fc566c9870fd
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xb594640c
movabs rdx, 0x20b0407080a0b02
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5000807000b020b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x526225
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x52625c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x52627f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
cmp rsi, 0xc
jb 0x52620b
jmp 0x526273
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00454ec0
mov eax, edi
mov ecx, 0xc
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.005261c0

Function at 0x52a0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52a1ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x73658d97e76f6cb2
mov qword [rsp + 0x18], rdx
movabs rdx, 0x699f73658d97e76f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xee6caf9e61917b61
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80f0c080f0e0403
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa031104000a080f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70c040c110e050b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x52a16d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x52a19a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x52a1bd
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x52a150
jmp 0x52a1b1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00454ec0
mov eax, edi
mov ecx, 0x12
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0052a0e0
Function at 0x52cac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52cb87
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe069f3e3f8b2650d
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xfe930e68
movabs rdx, 0x304030a0b03060b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa02020a05090007
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x52cb28
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x52cb57
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x52cb7a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x52cb0b
jmp 0x52cb6e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00454ec0
mov eax, edi
mov ecx, 0xc
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.0052cac0

Function at 0x52dac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52dbda
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x39096c7f5374fdde
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5221d65e199a669
mov qword [rsp + 0x25], rdx
movabs rdx, 0x74eee405221d65e1
mov qword [rsp + 0x28], rdx
movabs rdx, 0x15e33e756579aa6f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1a0a0e14171a070a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x14060d0a01091801
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0e1915000b041a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7191905170a100e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x111a010a1706090f
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x52db77
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x28
jge 0x52dba9
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x52dbcd
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
cmp rsi, 0x1b
jb 0x52db5d
jmp 0x52dbc1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.00443420
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1b
call fcn.00454ec0
nop
call fcn.00452c40
nop
jmp fcn.0052dac0