joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4eeac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eebcc
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4167606f595a2ef1
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6e53257d53617318
mov qword [rsp + 0x21], rdx
movabs rdx, 0x416e53257d536173
mov qword [rsp + 0x22], rdx
movabs rdx, 0x655869113f6d1434
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8090c0d0b110500
mov qword [rsp + 0x32], rdx
movabs rdx, 0x13050c0e1317120c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x14140902100e1305
mov qword [rsp + 0x40], rdx
movabs rdx, 0x141507100b130312
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4eeb68
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4eeb9c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4eebbf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
cmp rsi, 0x19
jb 0x4eeb4e
jmp 0x4eebb3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004eeac0

Function at 0x4f0ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0bca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6c53206bae94826d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8592c96c53206bae
mov qword [rsp + 0x22], rdx
movabs rdx, 0x769269aa20649e61
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf00040712110202
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc02120803090f00
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120907000a020103
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f0b6d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 4]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 4]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4f0b9a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f0bbd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4f0b50
jmp 0x4f0bb1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f0ae0
Function at 0x4f0ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0faa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x592069651e6f6178
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5f72645359206965
mov qword [rsp + 0x30], rdx
movabs rdx, 0x706d7d64755a6961
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf030809020d0e07
mov qword [rsp + 0x18], rdx
movabs rdx, 0x13020a110f030809
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x11000b0910070308
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4f0f4d
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x14]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x14]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x14
jge 0x4f0f7a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f0f9d
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4f0f30
jmp 0x4f0f91
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f0ec0

Function at 0x4f10e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f11cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6174317b5a1d5249
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e6e6174317b5a1d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x536b4e753f6e7182
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0a1003040e0e0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11100203010e090c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0305100510110f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f116a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x17]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x4f119c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4f11bf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x17]
cmp rsi, 0x12
jb 0x4f1150
jmp 0x4f11b3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f10e0
Function at 0x4f1ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1fdb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xae6bbc0c0c6b0759
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb56e3a922dae6bbc
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd88469cea1797220
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x111405090a110510
mov qword [rsp + 0x32], rdx
movabs rdx, 0x905011108041305
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa100f0a0c090905
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1409131314070d03
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f1f79
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x31]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4f1fab
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f1fce
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x31]
cmp rsi, 0x15
jb 0x4f1f5f
jmp 0x4f1fc2
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004f1ee0

Function at 0x4f2920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2a1d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x63eac6533d1fcacd
mov qword [rsp + 0x19], rdx
movabs rdx, 0xdcd761741d32de63
mov qword [rsp + 0x20], rdx
movabs rdx, 0xcddf6954f5db7215
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80f001106160e12
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10a040a15150d0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf111102060f05
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0a0e1603150901
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f29c0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x60]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x60]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4f29ed
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f2a10
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4f299f
jmp 0x4f2a04
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004f2920
Function at 0x4f2b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2c88
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x9087739fb29e2e45
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x34a881ae61986c84
mov qword [rsp + 0x22], rdx
movabs rdx, 0x645e34a881ae6198
mov qword [rsp + 0x24], rdx
movabs rdx, 0x867a99b233647486
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0d0d020310100d
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa0415150c0f1812
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x80a17070a041515
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1013190d060f1316
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f2c2b
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1c
jge 0x4f2c58
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4f2c7b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4f2c0e
jmp 0x4f2c6f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f2b80

Function at 0x4f3000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f311d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x8c40031ab2737541
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb5e32e577e4bd072
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6495d574b5e32e57
mov qword [rsp + 0x28], rdx
movabs rdx, 0xee6d8ac4d3c2a874
mov qword [rsp + 0x30], rdx
movabs rdx, 0x14140b190e09110f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x603120905090b04
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0b0e1b11160607
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf11180b0e0a1b18
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1512191b0a051917
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4f30c0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4f30ed
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4f3110
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4f309d
jmp 0x4f3104
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004f3000
Function at 0x4fdc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fdcf8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3233311414721161
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xddd56486
movabs rdx, 0xa0a020a08080404
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa0a0a0a020a0808
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2050808020b0103
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4fdc97
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x5c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x5c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x4fdcc8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4fdceb
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x4fdc7a
jmp 0x4fdcdf
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.004fdc20

Function at 0x5002a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x500366
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xfc6c8046cc63d32c
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x23ab
movabs rdx, 0x901050700080005
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1030805
xor eax, eax
jmp 0x500300
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x69]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x500332
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x500357
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x69]
cmp rsi, 0xa
jb 0x5002e3
jmp 0x50034b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005002a0
Function at 0x501840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50193d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6ea565a527651d1c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6d806f16bc196ea5
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd597fd6cfeec4c2e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0e0f0e0c061114
mov qword [rsp + 0x32], rdx
movabs rdx, 0x40c0f11060108
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x110c1309110004
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150c13101510030a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5018e0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x50190d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x501930
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x5018bf
jmp 0x501924
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.00501840

Function at 0x5046a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50478c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa4209b6f2096730e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6f3da4209b6f2096
mov qword [rsp + 0x30], rdx
movabs rdx, 0xaab00a66b9a26573
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf050c0710000d05
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8110f050c071000
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc07110d0c020008
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x50472a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4c]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x50475c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x50477f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4c]
cmp rsi, 0x12
jb 0x504710
jmp 0x504773
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005046a0
Function at 0x509520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50966c
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x116156db70742343
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6f6472b2f8116156
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x166e6b22f85dfdb2
mov qword [rsp + 0x26], rdx
movabs rdx, 0x722917606e6b2077
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x206543f63f32462b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x100b0108161c1900
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x307100b0108161c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x171b11091a1b0e1b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1f090b22051d0f1a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x14042001011c0d1f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e19211f22040905
mov qword [rsp + 0x60], rdx
movabs rdx, 0x30e211c1121141f
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x509604
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x10]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x32
jge 0x50963c
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x25
jae 0x50965f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x10]
cmp rsi, 0x25
jb 0x5095ea
jmp 0x509653
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x25
call fcn.0044bb20
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00461020
mov eax, edi
mov ecx, 0x25
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00509520
Function at 0x50d540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50d606
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa874b3044565640c
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x6ad2
movabs rdx, 0x305050309070008
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3090704
xor eax, eax
jmp 0x50d5a0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x50d5d2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x50d5f7
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
cmp rsi, 0xa
jb 0x50d583
jmp 0x50d5eb
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0050d540

Function at 0x51aaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51ab67
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2e57a39bb628212a
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x484841c7
movabs rdx, 0x709050b050000
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x805030300040007
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51ab08
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x51ab37
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x51ab5a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x51aaeb
jmp 0x51ab4e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0051aaa0

Function at 0x51ace0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51ada6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x417154d6e57221e8
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xae
movabs rdx, 0x2080403080408
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x206
xor eax, eax
nop
jmp 0x51ad40
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x55]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x51ad72
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x51ad97
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x55]
cmp rsi, 9
jb 0x51ad22
jmp 0x51ad8b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0051ace0
Function at 0x51c2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51c38c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd636e234c4bd0fdd
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe5d636e234c4bd0f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf6171c8f940ce939
mov qword [rsp + 0x26], rdx
movabs rdx, 0x502010e0c0e0308
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0f0502010e0c0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7100b050f0a08
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x51c32a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x43]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x51c35c
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x51c37f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x43]
cmp rsi, 0x11
jb 0x51c310
jmp 0x51c373
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.0051c2a0
Function at 0x51d540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51d63b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6320e87312fc0266
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6585f6856320e873
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x467b74938313e664
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0e0a040d120103
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x30d13130f010208
mov qword [rsp + 0x36], rdx
movabs rdx, 0x109030d13130f01
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0205130f040d10
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x51d5d9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x51d60b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x51d62e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5e]
cmp rsi, 0x14
jb 0x51d5bf
jmp 0x51d622
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.0051d540
Function at 0x5228e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5229e8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xf07520def768eed7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb0ff857f72efe376
mov qword [rsp + 0x24], rdx
movabs rdx, 0xbc089b6ef069ee60
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20600100d0d0617
mov qword [rsp + 0x34], rdx
movabs rdx, 0x130c0f0402060010
mov qword [rsp + 0x38], rdx
movabs rdx, 0x16101010160f0902
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13110b0715010e00
mov qword [rsp + 0x48], rdx
movabs rdx, 0x703060a0f0a1701
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x52298b
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x24
jge 0x5229b8
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5229db
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x52296e
jmp 0x5229cf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.005228e0
Function at 0x52c200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52c31a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x4d376720395d0037
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1f1dfe5f645e65e1
mov qword [rsp + 0x27], rdx
movabs rdx, 0xe520676e691f1dfe
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x533c204450533661
mov qword [rsp + 0x34], rdx
movabs rdx, 0x61c140d17000202
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x20a0e00061c140d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b01001916030506
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc0d0d0d1c0f1817
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7031914161c0308
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x52c2b7
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 7]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x24
jge 0x52c2e9
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x52c30d
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 7]
cmp rsi, 0x1d
jb 0x52c29d
jmp 0x52c301
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.0044bb20
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461020
mov eax, edi
mov ecx, 0x1d
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.0052c200