joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4f6f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f709a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x68b272a674dc8da4
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xed9d65e9b172c020
mov qword [rsp + 0x44], rdx
movabs rdx, 0x39846f85ed9d65e9
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9c857f63a77a748a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x40c0f04021b0e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x130f0f0700040c0f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x14060117170c0b09
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1a0c0b0114120910
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1a191607091b0517
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4f7037
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x24
jge 0x4f7069
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4f708d
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
cmp rsi, 0x1c
jb 0x4f701d
jmp 0x4f7081
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.00467060
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0046d060
mov eax, edi
mov ecx, 0x1c
call fcn.0046d060
nop
call fcn.0046ad80
nop
jmp fcn.004f6f80

Function at 0x4f7340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7426
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc367a06161b7786d
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x336c75a74ac367a0
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5070c0203030805
mov qword [rsp + 0x19], rdx
movabs rdx, 0x80005070c020303
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x709090203000003
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x4f73c0
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4f73f2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4f7417
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0xd
jb 0x4f73a2
jmp 0x4f740b
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
nop
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.0046d060
mov eax, edi
mov ecx, 0xd
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004f7340
Function at 0x4f8960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f8a3d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x15996c7f05abb5ff
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11b9c86574f710f1
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0100040203
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa070d0100000e01
mov qword [rsp + 0x20], rdx
movabs rdx, 0x90e08030f010609
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4f89e0
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x70]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x70]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4f8a0d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4f8a30
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x4f89c2
jmp 0x4f8a24
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0046d060
mov eax, edi
mov ecx, 0x10
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.004f8960

Function at 0x4fae20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4faf1d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6ef8cf7354726588
mov qword [rsp + 0x35], rdx
movabs rdx, 0x130cfc6ef8cf7354
mov qword [rsp + 0x38], rdx
movabs rdx, 0x17d169d1ab018e6f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90611121202120c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5080f0c060c04
mov qword [rsp + 0x23], rdx
movabs rdx, 0x50c0005080f0c06
mov qword [rsp + 0x25], rdx
movabs rdx, 0x120a0e12040d120e
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4faec0
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x75]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x75]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4faeed
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4faf10
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4fae9f
jmp 0x4faf04
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0046d060
mov eax, edi
mov ecx, 0x13
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.004fae20
Function at 0x4faf40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb02a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x956a88a0f8a66f04
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1fb8956a88a0f8a6
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa865c4614e9bc775
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11090b08000b0f03
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x606110c0b0f0507
mov qword [rsp + 0x26], rdx
movabs rdx, 0x308030b0c0402
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4fafcd
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x18
jge 0x4faffa
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4fb01d
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x4fafb0
jmp 0x4fb011
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046d060
mov eax, edi
mov ecx, 0x12
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004faf40

Function at 0x4fc300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc3dd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x736fe9ae74f2a66c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb772d4897d65736f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa020109020501
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb01000a02010902
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd0901040d0b0a0b
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x4fc380
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4fc3ad
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4fc3d0
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4fc362
jmp 0x4fc3c4
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0046d060
mov eax, edi
mov ecx, 0xe
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.004fc300
Function at 0x4fd7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fd8bd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x61463e633837ec30
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x44e44969526d3946
mov qword [rsp + 0x46], rdx
movabs rdx, 0x746744e44969526d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x524d59f6404d6465
mov qword [rsp + 0x50], rdx
movabs rdx, 0x518140915001615
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x300010305181409
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd080d0615180e06
mov qword [rsp + 0x26], rdx
movabs rdx, 0x180a0b0709190518
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x402100917140f13
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4fd860
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4fd88d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4fd8b0
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4fd83d
jmp 0x4fd8a4
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00467060
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0046d060
mov eax, edi
mov ecx, 0x1a
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.004fd7a0

Function at 0x4fdbe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fdcfd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x69728b3a7472734d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6d6ba25c6585865f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8d6b8365a7615869
mov qword [rsp + 0x50], rdx
movabs rdx, 0x98639f6c80508669
mov qword [rsp + 0x58], rdx
movabs rdx, 0x501171600040e0c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1917050117160004
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf171609130d0f0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x13150d1b080c1b1f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x151101050a0c011d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4fdca0
movzx r9d, byte [rsp + rsi + 0x40]
sub r9d, edx
lea edx, [r9 + 0xf]
mov byte [rsp + rdi + 0x40], dl
lea edx, [r8 + 0xf]
mov byte [rsp + rsi + 0x40], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4fdccd
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4fdcf0
movzx r8d, byte [rsp + rdi + 0x40]
sub r8d, edx
cmp rsi, 0x20
jb 0x4fdc7d
jmp 0x4fdce4
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x20
call fcn.00467060
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.0046d060
mov eax, edi
mov ecx, 0x20
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.004fdbe0
Function at 0x4fdd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fddf2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe78d6d084ea3f6e6
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1705650961b6f999
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe010f0907000f0a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x40c060c0c080c02
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4fdd8c
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x4fddbe
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4fdde5
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x54]
cmp rsi, 0x10
jb 0x4fdd72
jmp 0x4fddd5
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.0046d060
mov eax, edi
mov ecx, 0x10
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004fdd20

Function at 0x4fe9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4feaa6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xfe47534549740e1d
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x7972
movabs rdx, 0x606070506040401
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 5
xor eax, eax
jmp 0x4fea40
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4fea72
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4fea97
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0xa
jb 0x4fea22
jmp 0x4fea8b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0046d060
mov eax, edi
mov ecx, 0xa
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004fe9e0

Function at 0x4fed00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fedc7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc17c98ab06a4da43
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x7ff2
movabs rdx, 0x102060605020305
mov qword [rsp + 0x18], rdx
movabs rdx, 0x709080902040102
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x4fed67
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x2f]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x2f]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x4fed97
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4fedba
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4fed4a
jmp 0x4fedae
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0046d060
mov eax, edi
mov ecx, 0xa
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004fed00
Function at 0x4feee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fefca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa0d76574893c36c6
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x89d6a0d76574893c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe067d1ae3270404d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20203020d090700
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd09060e01060202
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3080211090f090b
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4fef6d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x16
jge 0x4fef9a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4fefbd
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4fef50
jmp 0x4fefb1
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046d060
mov eax, edi
mov ecx, 0x12
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.004feee0

Function at 0x501740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x501806
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xbdc3e86571e769ea
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x65
movabs rdx, 0x7020206040302
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x506
xor eax, eax
nop
jmp 0x5017a0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7c]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x5017d2
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x5017f7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7c]
cmp rsi, 9
jb 0x501782
jmp 0x5017eb
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00467060
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0046d060
mov eax, edi
mov ecx, 9
nop
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00501740
Function at 0x501920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5019f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x74dcdf4e646e711c
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xda31ba691174dcdf
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc050b01060b010c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5000c080c0a0c05
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x50198c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0xe
jge 0x5019be
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x5019e5
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0xd
jb 0x501972
jmp 0x5019d5
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.0046d060
mov eax, edi
mov ecx, 0xd
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00501920

Function at 0x501a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x501add
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc2974600937cd796
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80bf65666675cdd2
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30e03080e09040e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x407030e03080e09
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20906040f000001
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x501a80
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x1f]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x501aad
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x501ad0
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x501a62
jmp 0x501ac4
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.00467060
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0046d060
mov eax, edi
mov ecx, 0x10
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.00501a00
Function at 0x501d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x501e52
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x494d743a41156f2b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x47f00d4b733d494d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0a0a020b0c0a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x80a0703040b020d
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x501dec
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x14]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0x10
jge 0x501e1e
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x501e45
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x14]
cmp rsi, 0xe
jb 0x501dd2
jmp 0x501e35
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.0046d060
mov eax, edi
mov ecx, 0xe
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.00501d80

Function at 0x5021a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x502267
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x90ecf84c6519d58a
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x25726190
movabs rdx, 0x60600070a020702
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x507010002050606
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x502208
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x7c]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x7c]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x502237
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x50225a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x5021eb
jmp 0x50224e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046d060
mov eax, edi
mov ecx, 0xb
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005021a0
Function at 0x503420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50351d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4e1c3d4545ce65f9
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x3cf41a6d2e3e4e1c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x57ed676e365ba02c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1409140c0f0f0611
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x110c0b0e08020002
mov qword [rsp + 0x24], rdx
movabs rdx, 0x91409110d0f110c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1007070d0504000d
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x5034c0
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x5034ed
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x503510
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x50349f
jmp 0x503504
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00467060
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0046d060
mov eax, edi
mov ecx, 0x16
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.00503420

Function at 0x5048c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5049bd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4ff340364d3efa4e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x74744ff340364d3e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x57693e4a755c12c2
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20104050a050f06
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x403030f070b0200
mov qword [rsp + 0x24], rdx
movabs rdx, 0x50a0403030f070b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10050c0e04040307
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x504960
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 + 0x30]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 + 0x30]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x50498d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5049b0
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x50493f
jmp 0x5049a4
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046d060
mov eax, edi
mov ecx, 0x12
call fcn.0046d060
nop
nop dword [rax]
call fcn.0046ad80
jmp fcn.005048c0
Function at 0x5057a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50586c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x457b73804c746873
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x807f9372
movabs rdx, 0x9090404060b090b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4010a00090a0909
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x505805
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x18]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x50583c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x50585f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x18]
cmp rsi, 0xc
jb 0x5057eb
jmp 0x505853
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00467060
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0046d060
mov eax, edi
mov ecx, 0xc
call fcn.0046d060
nop
call fcn.0046ad80
jmp fcn.005057a0

Function at 0x507180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50727b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb0e76d75dc749394
mov qword [rsp + 0x32], rdx
movabs rdx, 0xcfb7e5656d7db0e7
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9a6f69867d6d886f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80b150c06070c0d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x90f1207080308
mov qword [rsp + 0x20], rdx
movabs rdx, 0x80100090f120708
mov qword [rsp + 0x22], rdx
movabs rdx, 0x150d030611040c07
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x507219
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3d]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x1a
jge 0x50724b
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x50726e
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3d]
cmp rsi, 0x16
jb 0x5071ff
jmp 0x507262
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00467060
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0046d060
mov eax, edi
mov ecx, 0x16
call fcn.0046d060
nop
nop dword [rax + rax]
call fcn.0046ad80
jmp fcn.00507180