joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4f8660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f8727
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x905250706193648a
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x8e5bcfaa
movabs rdx, 0x8060b090002020b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70a05060b070806
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f86c8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4f86f7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4f871a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4f86ab
jmp 0x4f870e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00452300
mov eax, edi
mov ecx, 0xc
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004f8660

Function at 0x4f9520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9606
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x516144693c267552
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x58396e65e41f5842
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0a0307070b0e0e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5080f0a0307070b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20f0903070f03
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4f95a0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4f95d2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4f95f7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
cmp rsi, 0x10
jb 0x4f9582
jmp 0x4f95eb
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.00441980
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00452300
mov eax, edi
mov ecx, 0x10
nop
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004f9520
Function at 0x4f9620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f971d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x723370380d6f374d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x48f1153269723370
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4765116c4b143567
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf0a0b120c04030e
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa0a0e0109060b0f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x914030e12030a0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10e090e01100e00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f96c0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4f96ed
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f9710
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4f969f
jmp 0x4f9704
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441980
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00452300
mov eax, edi
mov ecx, 0x15
call fcn.00452300
nop
nop dword [rax]
call fcn.00450080
jmp fcn.004f9620

Function at 0x4f98a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f999d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xdda3276f5474650d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe46efadda3276f54
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcaedc11ac702d6dc
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0c0e0d110a1212
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x120b0f0f08100600
mov qword [rsp + 0x36], rdx
movabs rdx, 0x8120b0f0f0810
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd050c100d070a11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f9940
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4f996d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f9990
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x4f991f
jmp 0x4f9984
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.00441980
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00452300
mov eax, edi
mov ecx, 0x13
call fcn.00452300
nop
nop dword [rax]
call fcn.00450080
jmp fcn.004f98a0
Function at 0x4f99c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9aaa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x75f750f5101708fe
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6e75f750f5101708
mov qword [rsp + 0x20], rdx
movabs rdx, 0x54332a6e341632e2
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb040c01040b06
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0e100201010901
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb050109000a030e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f9a4d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x3d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x3d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x4f9a7a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4f9a9d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4f9a30
jmp 0x4f9a91
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441980
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00452300
mov eax, edi
mov ecx, 0x11
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004f99c0

Function at 0x4f9ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9fa7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf8896e8243e47d47
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x5a4d15ee
movabs rdx, 0xb0a090406090102
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70208090a0b0607
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f9f48
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4f9f77
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4f9f9a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4f9f2b
jmp 0x4f9f8e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00452300
mov eax, edi
mov ecx, 0xc
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004f9ee0
Function at 0x4fa6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fa7cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9675c86fcbabb547
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xbe659675c86fcbab
mov qword [rsp + 0x20], rdx
movabs rdx, 0x25816dddab656c77
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7100d020a050d11
mov qword [rsp + 0x30], rdx
movabs rdx, 0x307071005090103
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe100903100e0907
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fa76a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x4fa79c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4fa7bf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
cmp rsi, 0x12
jb 0x4fa750
jmp 0x4fa7b3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00441980
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00452300
mov eax, edi
mov ecx, 0x12
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004fa6e0

Function at 0x4faac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fab8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc03305377564e54d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1105153e1ac03305
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa070c0805070701
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70b090401040a07
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4fab2f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x45]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x45]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x4fab5c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4fab7f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x4fab12
jmp 0x4fab73
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00452300
mov eax, edi
mov ecx, 0xd
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004faac0
Function at 0x4fb0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb1c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd3747f69c86cbf07
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x646e6e7775b98ab7
mov qword [rsp + 0x24], rdx
movabs rdx, 0x700010a0a030808
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa080a070700010a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90d0b03000d0805
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4fb160
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4fb192
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4fb1b7
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 0x10
jb 0x4fb142
jmp 0x4fb1ab
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.00441980
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00452300
mov eax, edi
mov ecx, 0x10
nop
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004fb0e0

Function at 0x4fbc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fbcfb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x47721c0955746530
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe5e4c1ac647721c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x737075a72405061d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8090011110b050e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc040b10050c0d0e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4110c040b10050c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb090d0f04000d0b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fbc99
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x44]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4fbccb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4fbcee
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x44]
cmp rsi, 0x15
jb 0x4fbc7f
jmp 0x4fbce2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00441980
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00452300
mov eax, edi
mov ecx, 0x15
call fcn.00452300
nop
nop dword [rax + rax]
call fcn.00450080
jmp fcn.004fbc00
Function at 0x4fc000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc0fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e6b5f8469764062
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5a8c696d775e6e6b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6b636f56832d3265
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd050908010f0312
mov qword [rsp + 0x30], rdx
movabs rdx, 0x601090010120b12
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0a1112110c1108
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12050a0004050205
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fc0a0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4fc0cd
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4fc0f0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4fc07f
jmp 0x4fc0e4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441980
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00452300
mov eax, edi
mov ecx, 0x16
call fcn.00452300
nop
nop dword [rax]
call fcn.00450080
jmp fcn.004fc000

Function at 0x4fc480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc57d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd1866f818f8d77d1
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7ea973979fd1866f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8bb7726f7462677b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10d070102030e02
mov qword [rsp + 0x34], rdx
movabs rdx, 0x604040c0c080e14
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x130d06000604040c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0f060f0b0f0902
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fc520
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 4]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 4]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4fc54d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4fc570
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x4fc4ff
jmp 0x4fc564
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.00441980
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00452300
mov eax, edi
mov ecx, 0x15
call fcn.00452300
nop
nop dword [rax]
call fcn.00450080
jmp fcn.004fc480
Function at 0x4fef80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ff04c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8f6cdd3520a3dd6e
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x65abfa61
movabs rdx, 0x50407090101020a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x107070704010405
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4fefe5
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ff01c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4ff03f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
cmp rsi, 0xc
jb 0x4fefcb
jmp 0x4ff033
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00452300
mov eax, edi
mov ecx, 0xc
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004fef80
Function at 0x5032c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x50347b
push rbp
mov rbp, rsp
sub rsp, 0xa8
movabs rdx, 0x8fcedb05fa6d0674
mov qword [rsp + 0x19], rdx
movabs rdx, 0xabe0636e6f07208f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5e820df747dd172
mov qword [rsp + 0x28], rdx
movabs rdx, 0xee34f76f84ba6172
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6e69a9ca09d3dc52
mov qword [rsp + 0x38], rdx
movabs rdx, 0x496c01b5201a6c22
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4a0d8eb7ddf8cd7c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xef78616d288b0565
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5035373538b33031
mov qword [rsp + 0x58], rdx
movabs rdx, 0x24034638071e0e23
mov qword [rsp + 0x60], rdx
movabs rdx, 0x34321a0120351011
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1622201e33020605
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2f2b1f01211e312c
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1a01191c29103919
mov qword [rsp + 0x80], rdx
movabs rdx, 0x40b14332b154103
mov qword [rsp + 0x88], rdx
movabs rdx, 0x230427022b1a1330
mov qword [rsp + 0x90], rdx
movabs rdx, 0x301d0930210d3e03
mov qword [rsp + 0x98], rdx
movabs rdx, 0x360e152e012f1441
mov qword [rsp + 0xa0], rdx
xor eax, eax
jmp 0x503418
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x5a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x5a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x48
jge 0x503448
movzx edx, byte [rsp + rax + 0x60]
movzx esi, byte [rsp + rax + 0x61]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x50346e
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x47
jb 0x5033fb
jmp 0x503462
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x47
call fcn.00441980
add rsp, 0xa8
pop rbp
ret
mov eax, esi
mov ecx, 0x47
call fcn.00452300
mov eax, edi
mov ecx, 0x47
call fcn.00452300
nop
nop dword [rax + rax]
call fcn.00450080
jmp fcn.005032c0

Function at 0x505100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5051c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x484a456c615e4e54
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x180f6130
movabs rdx, 0x101060508000b08
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2020a000b00070a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x505168
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x26]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x26]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x505197
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x5051ba
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x50514b
jmp 0x5051ae
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00452300
mov eax, edi
mov ecx, 0xc
call fcn.00452300
nop
call fcn.00450080
jmp fcn.00505100
Function at 0x507ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x507e27
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x7459655d3f653b75
mov qword [rsp + 0x19], rdx
movabs rdx, 0x35796c31637e6465
mov qword [rsp + 0x21], rdx
movabs rdx, 0x35796c31637e64
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6978645920686c6f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x723e4b202948192d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x74886b6c4b076e75
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x10310150e252106
mov qword [rsp + 0x42], rdx
movabs rdx, 0x23251f1a26061a0f
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x10270a2514162325
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1906021a04131a04
mov qword [rsp + 0x58], rdx
movabs rdx, 0x26141423241b1e1e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x6120c1a0e030f1b
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x507dc7
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x2e
jge 0x507df7
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x29
jae 0x507e1a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x29
jb 0x507daa
jmp 0x507e0e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x29
call fcn.00441980
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.00452300
mov eax, edi
mov ecx, 0x29
call fcn.00452300
nop
call fcn.00450080
jmp fcn.00507ce0

Function at 0x5137e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5138b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x73a0ea9242bfb285
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x29655d73a0ea9242
mov qword [rsp + 0x22], rdx
movabs rdx, 0x401040600050902
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x408090708000401
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51384c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x48]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x51387e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x5138a5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x48]
cmp rsi, 0xb
jb 0x513832
jmp 0x513895
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00452300
mov eax, edi
mov ecx, 0xb
call fcn.00452300
nop
call fcn.00450080
jmp fcn.005137e0
Function at 0x514b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x514c0a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa16435a7d78b3130
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x38a16435a7d78b31
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa07d8bb480816139
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3020e0307060707
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60f0e030c0b0304
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6040f030d100702
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x514bad
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x514bda
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x514bfd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x514b90
jmp 0x514bf1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441980
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00452300
mov eax, edi
mov ecx, 0x11
call fcn.00452300
nop
call fcn.00450080
jmp fcn.00514b20

Function at 0x514c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x514d0c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x93feee00d3113
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3000093feee00d31
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf3660b2f44040fa8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3000c0c00040e05
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0902060b050300
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80d10070a0d0007
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x514caa
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x514cdc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x514cff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0x11
jb 0x514c90
jmp 0x514cf3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441980
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00452300
mov eax, edi
mov ecx, 0x11
call fcn.00452300
nop
call fcn.00450080
jmp fcn.00514c20