joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ecb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ecc1e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x32460a1e6149136e
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6c6cfc45
movabs rdx, 0x202090609090805
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x6010604
xor eax, eax
jmp 0x4ecbc1
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x4ecbee
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4ecc11
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x4ecba4
jmp 0x4ecc05
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
nop
call fcn.0044f600
jmp fcn.004ecb60

Function at 0x4ed160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed22c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x64dc327bba9ed4b4
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x5bec
movabs rdx, 0x106080803000404
mov qword [rsp + 0x22], rdx
movabs rdx, 0x906010803020106
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4ed1c4
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x48]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4ed1fc
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4ed21f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x48]
cmp rsi, 0xa
jb 0x4ed1aa
jmp 0x4ed213
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ed160
Function at 0x4ee5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee6ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xcf566dea077465f6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf774cf566dea0774
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57c5b7656d614ee7
mov qword [rsp + 0x24], rdx
movabs rdx, 0x101006070f0f040a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x907000f10100607
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1003060010060f00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ee66d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4ee69a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4ee6bd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4ee650
jmp 0x4ee6b1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ee5e0

Function at 0x4ef560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef668
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6df3d8e5567465e9
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x61e3724cc2e2491c
mov qword [rsp + 0x23], rdx
movabs rdx, 0xd86eb3d7c261e372
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5f653da335e34bd1
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1108161a1818140b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x19151c100c181a04
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1006121617051114
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa0e001118181511
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ef60b
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x53]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x53]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x20
jge 0x4ef638
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4ef65b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4ef5ee
jmp 0x4ef64f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00451880
mov eax, edi
mov ecx, 0x1d
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ef560
Function at 0x4ef8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef9ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x32336546d6b6b4db
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x392a73724d403233
mov qword [rsp + 0x30], rdx
movabs rdx, 0x409000d0804000c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x200010803040409
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4ef94f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x4ef97c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ef99f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4ef932
jmp 0x4ef993
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ef8e0

Function at 0x4f0b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0c3d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x75458d74728270a3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9489517269be7545
mov qword [rsp + 0x22], rdx
movabs rdx, 0x76848c724274988d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1405030c05020e05
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1407021213080008
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x130b0b0015051407
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1030f03120e130d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f0be0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0xf]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0xf]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4f0c0d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f0c30
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4f0bbf
jmp 0x4f0c24
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004f0b40
Function at 0x4f3ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f3be7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x707936ec27f59466
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2433aa707936ec27
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa67429d335ae651b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x974276f0df4752b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6534c41cf12b6557
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1021f0a0315180d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x32102100f0b1805
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d121605081d0920
mov qword [rsp + 0x50], rdx
movabs rdx, 0x201d1a1d13100b0b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1b0501200e1e0904
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4f3b89
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x61]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x28
jge 0x4f3bb7
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x23
jae 0x4f3bda
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x23
jb 0x4f3b6c
jmp 0x4f3bce
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x23
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00451880
mov eax, edi
mov ecx, 0x23
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f3ac0
Function at 0x4f68e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6a07
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x746396f3f009f7f8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xaa07746396f3f009
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa66e699eee9b1ba7
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf00e1e7014056ecc
mov qword [rsp + 0x30], rdx
movabs rdx, 0x203a720efafe7520
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4030e1e10030d19
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa1e0105011b110c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140911001d080a0e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c1c1e010e180c15
mov qword [rsp + 0x58], rdx
movabs rdx, 0x120a0e0a170b0214
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4f69a9
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x6e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x6e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x28
jge 0x4f69d7
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x22
jae 0x4f69fa
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x22
jb 0x4f698c
jmp 0x4f69ee
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x22
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00451880
mov eax, edi
mov ecx, 0x22
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f68e0

Function at 0x4f6a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6aec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4bbc63323b033237
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xed1d656c624bbc63
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7000c0c01030206
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb02020206040b04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f6a8f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x4f6abc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4f6adf
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4f6a72
jmp 0x4f6ad3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f6a20
Function at 0x4f6b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6bd2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc9f3a69ac1cc8d75
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x65a162c9f3a69ac1
mov qword [rsp + 0x22], rdx
movabs rdx, 0x909060305070205
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x506010403050909
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f6b6c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4f6b9e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4f6bc5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
cmp rsi, 0xb
jb 0x4f6b52
jmp 0x4f6bb5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f6b00

Function at 0x4f6c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6d06
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9e90880412696efd
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xe565
movabs rdx, 0x4050603000700
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4050906
xor eax, eax
jmp 0x4f6ca0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4f6cd2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4f6cf7
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0xa
jb 0x4f6c83
jmp 0x4f6ceb
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f6c40

Function at 0x4f70e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7192
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x6c25e41930dd7316
mov qword [rsp + 0x20], rdx
movabs rdx, 0x603050402000205
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4f7131
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 + 0x4f]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 + 0x4f]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x4f715e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4f7185
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x4f7114
jmp 0x4f7175
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00441380
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f70e0
Function at 0x4f8d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f8e12
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x21d3cacc21be1469
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xbfba8521d3cacc21
mov qword [rsp + 0x22], rdx
movabs rdx, 0x108040609070a05
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8020a090a030108
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f8dac
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x65]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4f8dde
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4f8e05
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x65]
cmp rsi, 0xb
jb 0x4f8d92
jmp 0x4f8df5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f8d40

Function at 0x505ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x505be7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x65202e5574234917
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7253207265202e55
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5069606e3f632c44
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65f8704159672838
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4968536dee39200c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1e181f151a0c2316
mov qword [rsp + 0x40], rdx
movabs rdx, 0x421091c0f0d1f05
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9111e221c160009
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf00171f141f0102
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e0f040a01041311
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x505b89
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x40]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x40]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x28
jge 0x505bb7
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x24
jae 0x505bda
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x24
jb 0x505b6c
jmp 0x505bce
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x24
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00451880
mov eax, edi
mov ecx, 0x24
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00505ac0
Function at 0x506620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5066dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe4b549bcfa90fffe
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xc0
movabs rdx, 0x203040008070006
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3000107
xor eax, eax
nop
jmp 0x506680
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x5066ad
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x5066d0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x506662
jmp 0x5066c4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00506620

Function at 0x506dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x506eaa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf6fc35440319f930
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x38f6fc35440319f9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x415c1935363a1745
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf100a0410100d0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x603070b06010e09
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60702010b070f10
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x506e4d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x506e7a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x506e9d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x506e30
jmp 0x506e91
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00506dc0
Function at 0x506ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x506faa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x9736b66b746d9d6f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa09736b66b746d9d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd9b1ed6a6362619b
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe090d0107050510
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf0809030e090d01
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2080307070504
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x506f4d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x506f7a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x506f9d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x506f30
jmp 0x506f91
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00506ec0

Function at 0x506fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5070ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x160a352714f73132
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1f160a352714f731
mov qword [rsp + 0x20], rdx
movabs rdx, 0x90565f53f362b43
mov qword [rsp + 0x28], rdx
movabs rdx, 0x806040c0b0802
mov qword [rsp + 0x30], rdx
movabs rdx, 0x810000d0a0c0f0b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0c090b04070300
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50704a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x50707c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50709f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 9]
cmp rsi, 0x11
jb 0x507030
jmp 0x507093
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00506fc0
Function at 0x507f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508058
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x67d96995a4637865
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8b689967d96995a4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xbac364c6a4da9a9d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8b36c58c74679778
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x673596b48ea7da19
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb120f1c0617120d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe031b2011061f0d
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1d0f0e031b201106
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e061f181c010c04
mov qword [rsp + 0x50], rdx
movabs rdx, 0x130f1f170c080a1a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x210c190d201c141b
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x507ff5
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x2a
jge 0x508028
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x50804b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
nop
cmp rsi, 0x23
jb 0x507fdb
jmp 0x50803f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x23
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00451880
mov eax, edi
mov ecx, 0x23
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00507f20

Function at 0x50b3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50b4bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd188778065d847a5
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x83a3765c47d18877
mov qword [rsp + 0x22], rdx
movabs rdx, 0x958e5672a9c37e83
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2020c0a05081007
mov qword [rsp + 0x32], rdx
movabs rdx, 0x2060102040b0e0a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x409070d10070206
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140013120113120f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x50b460
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x50b48d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x50b4b0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x50b43f
jmp 0x50b4a4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0050b3c0