joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4f99c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9adf
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xf3f612f5645fcec
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5e3861745013e673
mov qword [rsp + 0x24], rdx
movabs rdx, 0x653a544712597246
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0e14040e090a00
mov qword [rsp + 0x34], rdx
movabs rdx, 0x131310160a01120e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x113031513131016
mov qword [rsp + 0x40], rdx
movabs rdx, 0x201060b0f121307
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f9a62
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x39]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x39]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1c
jge 0x4f9a99
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x4f9ad1
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f9ac5
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x4f9a45
jmp 0x4f9ab4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x18
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1c
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004f99c0

Function at 0x4f9b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9c1f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xa9a5ebac62c472fb
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa8a52dff3aa9a5eb
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65c7690120659b8f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb08110d0a040209
mov qword [rsp + 0x32], rdx
movabs rdx, 0x70f060d00020b04
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x60204130e070f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe060c0b050e0605
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f9ba0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x4f9bdc
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
cmp rsi, 0x1e
jae 0x4f9c11
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f9c05
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5b]
cmp rsi, 0x15
jb 0x4f9b85
jmp 0x4f9bf7
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x15
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1e
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004f9b00
Function at 0x4f9d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9eb3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6fe793ae4d79e129
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x826174ab73e50c6c
mov qword [rsp + 0x27], rdx
movabs rdx, 0xe5826174ab73e50c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe96d69ade9e2db65
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5090f02000000
mov qword [rsp + 0x38], rdx
movabs rdx, 0x130a150205111806
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0b04020009150b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x414051012150111
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f9e2e
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x20
jge 0x4f9e6d
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x20
jae 0x4f9ea5
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f9e94
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0x19
jb 0x4f9e14
jmp 0x4f9e88
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457f40
mov eax, edi
mov ecx, 0x19
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x20
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004f9d80
Function at 0x4fb3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb4bf
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6134554e1460544f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4f6e6134554e1460
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x614e6965724e5c7f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1101090110110c06
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc060e040c10030b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x2030c060e040c10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40a0b0d100a0e05
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fb442
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1a
jge 0x4fb479
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x4fb4b1
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4fb4a5
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x4fb425
jmp 0x4fb494
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x12
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1a
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004fb3a0

Function at 0x4fc0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc1f3
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xaf53b26156726f52
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3b96faaf53b26156
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd6a89c5463fa72a4
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30a030008050d11
mov qword [rsp + 0x30], rdx
movabs rdx, 0x300050a0b101107
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3091209050e0000
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fc170
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x60]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4fc1ad
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
nop
cmp rsi, 0x18
jae 0x4fc1e5
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4fc1d4
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x60]
cmp rsi, 0x13
jb 0x4fc156
jmp 0x4fc1c8
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457f40
mov eax, edi
mov ecx, 0x13
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x18
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004fc0e0
Function at 0x4fccc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fcddf
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x7403573d79481254
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3b3b147403573d79
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x656d5d4276626d26
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10080410090b0201
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa050e1002090d12
mov qword [rsp + 0x36], rdx
movabs rdx, 0x60f0a050e100209
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20d09080f050c10
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fcd62
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x4fcd99
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x4fcdd1
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4fcdc5
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x4fcd45
jmp 0x4fcdb4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x13
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1a
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004fccc0
Function at 0x4fe3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fe4f3
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x10d2de4a1b12d745
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6174c420b09cd4d6
mov qword [rsp + 0x20], rdx
movabs rdx, 0xedd26174c420b09c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80e6e8e65aefa2d6
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1307141404181208
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1315061816070517
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x219111310091315
mov qword [rsp + 0x40], rdx
movabs rdx, 0x190d0b160b030a01
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fe46e
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x71]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4fe4ad
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x1e
jae 0x4fe4e5
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4fe4d4
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x71]
cmp rsi, 0x1a
jb 0x4fe454
jmp 0x4fe4c8
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457f40
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1e
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004fe3c0
Function at 0x4fe920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fea3f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xa95a6eb19683818c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb26ed16d5377a95a
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb36da65470a78b9c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x615000d0301010b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0e040015081002
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60211070b070613
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0a0a1300051108
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fe9c0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x39]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x4fe9fc
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x4fea31
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4fea25
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x39]
cmp rsi, 0x16
jb 0x4fe9a5
jmp 0x4fea17
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x16
call fcn.00457f40
mov rax, rsi
mov ecx, 0x20
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004fe920

Function at 0x4ffce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ffe1f
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xabcbd7e1e6edb649
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6e61cc53959fa472
mov qword [rsp + 0x25], rdx
movabs rdx, 0x8b6e61cc53959fa4
mov qword [rsp + 0x26], rdx
movabs rdx, 0x65c0a6d64513c361
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x141315000a070115
mov qword [rsp + 0x36], rdx
movabs rdx, 0x202141315000a07
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1214131509120403
mov qword [rsp + 0x40], rdx
movabs rdx, 0x160007120b0b0a00
mov qword [rsp + 0x48], rdx
movabs rdx, 0x717050d12061014
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ffda0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x77]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x4ffddc
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
cmp rsi, 0x22
jae 0x4ffe11
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4ffe05
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x77]
cmp rsi, 0x19
jb 0x4ffd83
jmp 0x4ffdf7
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x19
call fcn.00457f40
mov rax, rsi
mov ecx, 0x22
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004ffce0
Function at 0x5008c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5009df
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x4072672e4545f30f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4dfef61353350840
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6fa3054396472c7
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90d0f1504040100
mov qword [rsp + 0x34], rdx
movabs rdx, 0x316080014141512
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb0f030003160800
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70f020e0b010c09
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x500962
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x43]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x43]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1c
jge 0x500999
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x1c
jae 0x5009d1
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5009c5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x500945
jmp 0x5009b4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x17
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1c
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.005008c0

Function at 0x500fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5010bf
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x30532019d8f0ca40
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x26496130532019d8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3a6d454aeed8431a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x301120c0a12030e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb030d040d03020e
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd020b030d040d03
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb00100f0309070f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x501042
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x44]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x44]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x501079
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x5010b1
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5010a5
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x501025
jmp 0x501094
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x13
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1a
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.00500fa0
Function at 0x501fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5020d8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x2044f693396e2343
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x20635e6669786103
mov qword [rsp + 0x25], rdx
movabs rdx, 0x646e7b405320635e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x65d3d75446e14f69
mov qword [rsp + 0x32], rdx
movabs rdx, 0x308061604031812
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1117041617030308
mov qword [rsp + 0x40], rdx
movabs rdx, 0x217171101010a1b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a02051b01081a15
mov qword [rsp + 0x50], rdx
movabs rdx, 0x120612050d170d0d
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x502060
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x51]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x26
jge 0x502097
movzx edx, byte [rsp + rax + 0x3a]
lea rsi, [rax + 1]
cmp rsi, 0x26
jae 0x5020ca
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x5020be
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x502043
jmp 0x5020b2
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.00446000
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00457f40
mov eax, edi
mov ecx, 0x1d
call fcn.00457f40
mov rax, rsi
mov ecx, 0x26
call fcn.00457f40
nop
call fcn.00455860
nop dword [rax]
jmp fcn.00501fa0
Function at 0x502920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x502a5f
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xc6a472eb675fee49
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5c61f6dd6974d1e8
mov qword [rsp + 0x23], rdx
movabs rdx, 0x666e71d4eb3de05c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x84d6e9393f6dda6f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x60e1b0201100f03
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x18081c110014060e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0f1d1200041403
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b1b1c070c061a13
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d090902021e1304
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5029e0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x26
jge 0x502a1c
movzx edx, byte [rsp + rax + 0x3a]
lea rsi, [rax + 1]
cmp rsi, 0x26
jae 0x502a51
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x502a45
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
cmp rsi, 0x1f
jb 0x5029c3
jmp 0x502a37
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1f
call fcn.00446000
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1f
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x1f
call fcn.00457f40
mov rax, rsi
mov ecx, 0x26
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.00502920

Function at 0x50ce00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50cf0b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x75466dc8f6737953
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc575466dc8f67379
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf333c0935469e56b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0e0a0803040910
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9080c0e0a080304
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd090c0808040a03
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50ce93
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x50ceca
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x50cefd
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50cef1
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x50ce76
jmp 0x50cee5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457f40
mov eax, edi
mov ecx, 0x11
call fcn.00457f40
mov rax, rsi
mov ecx, 0x12
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0050ce00
Function at 0x50d060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50d153
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xdd73c86f97b5ad77
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xa6ae756c
movabs rdx, 0xb0b020a0107050b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1010309000a0b0b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x50d0cb
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x50d10d
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
nop word [rax + rax]
cmp rsi, 0xe
jae 0x50d145
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x50d134
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 0xc
jb 0x50d0b1
jmp 0x50d128
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457f40
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.0050d060

Function at 0x50dae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50dbbf
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xb5d49146cb63e696
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xdd45
movabs rdx, 0x7030303000503
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1090603
xor eax, eax
jmp 0x50db46
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x50db7d
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x50dbb1
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x50dba5
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x50db29
jmp 0x50db98
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0xa
call fcn.00457f40
mov rax, rsi
mov ecx, 0xc
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.0050dae0