joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5034c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5035f8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xbe96b83ace665fa7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x35e4be96b83ace66
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb1668920646cc269
mov qword [rsp + 0x26], rdx
movabs rdx, 0x751131c2676ee132
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20aa5cda9049d768
mov qword [rsp + 0x36], rdx
movabs rdx, 0x70f050b1a11060b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1303131104161320
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1509130313110416
mov qword [rsp + 0x48], rdx
movabs rdx, 0x181b171b051f1512
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b111501091b081d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e1f160500151c1f
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x503598
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x41]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x41]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x2a
jge 0x5035c8
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x5035eb
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x22
jb 0x50357b
jmp 0x5035df
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x22
call fcn.0044e180
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00463f80
mov eax, edi
mov ecx, 0x22
call fcn.00463f80
nop
call fcn.00461d00
nop dword [rax]
jmp fcn.005034c0
Function at 0x507040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x507167
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x2e5b4d59845f885a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7d8420861c6c6156
mov qword [rsp + 0x24], rdx
movabs rdx, 0x621762205234436c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x74215a7e2a65466f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x11170b0611161b12
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x19031b1305051700
mov qword [rsp + 0x44], rdx
movabs rdx, 0xf1d040619031b13
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e130012110c0504
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d0404191c021e01
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe0c1b13020c0e11
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x507109
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x2c
jge 0x507137
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x50715a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x20
jb 0x5070ec
jmp 0x50714e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.0044e180
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00463f80
mov eax, edi
mov ecx, 0x20
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00507040

Function at 0x507e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x507f7a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x5b867351656e6569
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x61395a656c62797a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x498461395a656c62
mov qword [rsp + 0x26], rdx
movabs rdx, 0x65745d2367658069
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x512020810131718
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1805051202081013
mov qword [rsp + 0x38], rdx
movabs rdx, 0x606130a040b0909
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3100e0e0d0e150b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1518080507160013
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x507f17
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x22
jge 0x507f49
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x507f6d
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 0x1a
jb 0x507efd
jmp 0x507f61
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.0044e180
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00463f80
mov eax, edi
mov ecx, 0x1a
call fcn.00463f80
nop
call fcn.00461d00
nop
jmp fcn.00507e60
Function at 0x508a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508ae6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6596946e3e973e45
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6e
movabs rdx, 0x502010304050406
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 5
xor eax, eax
nop
jmp 0x508a80
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x508ab2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x508ad7
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 9
jb 0x508a62
jmp 0x508acb
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00463f80
mov eax, edi
mov ecx, 9
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00508a20

Function at 0x509f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x50a0db
push rbp
mov rbp, rsp
sub rsp, 0x98
movabs rdx, 0xd47471a7809c9172
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x906365b4c4657aaa
mov qword [rsp + 0x27], rdx
movabs rdx, 0x87c1f0906365b4c4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6da36c45969b930f
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb7206e61206e6fc5
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd3d064e0b19c76bc
mov qword [rsp + 0x42], rdx
movabs rdx, 0x70a47368f48dcd6f
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x7265cbb55bbb9c92
mov qword [rsp + 0x52], rdx
movabs rdx, 0x2e292d1237130f27
mov qword [rsp + 0x5a], rdx
movabs rdx, 0xf1135232a2c0434
mov qword [rsp + 0x62], rdx
movabs rdx, 0xf3102251b370f11
mov qword [rsp + 0x68], rdx
movabs rdx, 0x10100c0b2238332d
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2201163637150408
mov qword [rsp + 0x78], rdx
movabs rdx, 0xc3003252d070110
mov qword [rsp + 0x80], rdx
movabs rdx, 0x19140f38031b0530
mov qword [rsp + 0x88], rdx
movabs rdx, 0x38262d092927262d
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x50a071
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x3e
jge 0x50a0a8
movzx edx, byte [rsp + rax + 0x5a]
movzx esi, byte [rsp + rax + 0x5b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3b
jae 0x50a0ce
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6f]
nop dword [rax + rax]
cmp rsi, 0x3b
jb 0x50a057
jmp 0x50a0c2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x3b
call fcn.0044e180
add rsp, 0x98
pop rbp
ret
mov eax, esi
mov ecx, 0x3b
call fcn.00463f80
mov eax, edi
mov ecx, 0x3b
call fcn.00463f80
nop
nop dword [rax + rax]
call fcn.00461d00
jmp fcn.00509f40
Function at 0x50a440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50a52c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2ebac56574d01987
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3075821b562ebac5
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc81d6c1c6d6fc102
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30d0e110a01130c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0006091314030e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0502060c000105
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50a4ca
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x74]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x50a4fc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x50a51f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x74]
cmp rsi, 0x15
jb 0x50a4b0
jmp 0x50a513
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00463f80
mov eax, edi
mov ecx, 0x15
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0050a440
Function at 0x50b180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50b24c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe6d82fc220dc3b62
mov qword [rsp + 0x19], rdx
movabs rdx, 0x657a23e6d82fc220
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x802010601050504
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8010701
xor eax, eax
jmp 0x50b1e5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x31]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x50b21c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x50b23f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x31]
cmp rsi, 0xb
jb 0x50b1cb
jmp 0x50b233
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00463f80
mov eax, edi
mov ecx, 0xb
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0050b180

Function at 0x50ed20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50ede7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa90f176572657373
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7d6cbea90f176572
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa0a050608000007
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0xa00070a
xor eax, eax
jmp 0x50ed88
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x50edb7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x50edda
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x50ed6b
jmp 0x50edce
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00463f80
mov eax, edi
mov ecx, 0xb
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0050ed20
Function at 0x50f760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50f85b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1ba7a52922d76f02
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa24807b48f1ba7a5
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf3b29d6c7f566567
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90c0504020c1209
mov qword [rsp + 0x32], rdx
movabs rdx, 0x13121003070c10
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x120a0b0612080013
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20b04000c140602
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x50f7f9
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x50f82b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x50f84e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
cmp rsi, 0x15
jb 0x50f7df
jmp 0x50f842
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00463f80
mov eax, edi
mov ecx, 0x15
call fcn.00463f80
nop
nop dword [rax + rax]
call fcn.00461d00
jmp fcn.0050f760

Function at 0x50f9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50fadd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7ec198a2a17b65f3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x66c4b37ec198a2a1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6ea08a94e48372a2
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8060800060e050d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70f0e0d11100706
mov qword [rsp + 0x36], rdx
movabs rdx, 0x900070f0e0d1110
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2080d03040b0010
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50fa80
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x50faad
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x50fad0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x50fa5f
jmp 0x50fac4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00463f80
mov eax, edi
mov ecx, 0x13
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.0050f9e0
Function at 0x50fd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50fe1b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf077217f1c0a6506
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9d6a8165f077217f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa550e57365726473
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2060305030b1302
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9030a09110c0712
mov qword [rsp + 0x36], rdx
movabs rdx, 0x110909030a09110c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70b040a00020b04
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50fdb9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x50fdeb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x50fe0e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0x14
jb 0x50fd9f
jmp 0x50fe02
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00463f80
mov eax, edi
mov ecx, 0x14
call fcn.00463f80
nop
nop dword [rax + rax]
call fcn.00461d00
jmp fcn.0050fd20

Function at 0x50fe40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50ff18
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x90d565eeafc17291
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xe6747088
movabs rdx, 0x9020604030b0b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40b000902060403
mov qword [rsp + 0x28], rdx
movabs rdx, 0x804060902070803
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x50feb4
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x12
jge 0x50fee8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x50ff0b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
nop
cmp rsi, 0xc
jb 0x50fe9a
jmp 0x50feff
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00463f80
mov eax, edi
mov ecx, 0xc
call fcn.00463f80
nop
call fcn.00461d00
nop dword [rax]
jmp fcn.0050fe40
Function at 0x510de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x510ec6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3205656c256471bc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfb8cedf669673205
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0a0d0c01010a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1080b0a000d0a0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa030006080d0001
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x510e60
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x32]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x510e92
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x510eb7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x32]
cmp rsi, 0xe
jb 0x510e42
jmp 0x510eab
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00463f80
mov eax, edi
mov ecx, 0xe
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00510de0

Function at 0x511160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51122c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe16cab0def76e4b7
mov qword [rsp + 0x19], rdx
movabs rdx, 0x57b101e16cab0def
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x905000508070909
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1040003
xor eax, eax
jmp 0x5111c5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x5111fc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x51121f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
cmp rsi, 0xb
jb 0x5111ab
jmp 0x511213
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00463f80
mov eax, edi
mov ecx, 0xb
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00511160
Function at 0x515b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x515c2a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xaa208394a1657f75
mov qword [rsp + 0x18], rdx
movabs rdx, 0x40a2aa208394a165
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xaaa2836690559db2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50b0c0d090c1101
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30a03070c05050b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100801040309070f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x515bcd
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0xa]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0xa]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x515bfa
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x515c1d
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x515bb0
jmp 0x515c11
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00463f80
mov eax, edi
mov ecx, 0x12
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.00515b40
Function at 0x51a720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51a847
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x20675808e0de6149
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2b20675808e0de61
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1f2b7337f2202046
mov qword [rsp + 0x28], rdx
movabs rdx, 0x660c642674de6f56
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4c70543447364c37
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1317031b08041b02
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc1c1d0810080d1b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a0a090315191300
mov qword [rsp + 0x50], rdx
movabs rdx, 0x20201e081e0f200d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a1a200d190d0511
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x51a7e9
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x4c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x4c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x28
jge 0x51a817
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x21
jae 0x51a83a
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x21
jb 0x51a7cc
jmp 0x51a82e
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x21
call fcn.0044e180
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00463f80
mov eax, edi
mov ecx, 0x21
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.0051a720

Function at 0x51a860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51a97a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x739da14c6f5f9f99
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7e6f9d7fadcd6575
mov qword [rsp + 0x23], rdx
movabs rdx, 0x7e7e6f9d7fadcd65
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8798748d958c91c3
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x110a00150d010b11
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1104120f110a0015
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1702140b05130406
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20f0b1017060614
mov qword [rsp + 0x48], rdx
movabs rdx, 0x13180c06180c1008
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x51a917
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x51a949
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x51a96d
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3d]
cmp rsi, 0x19
jb 0x51a8fd
jmp 0x51a961
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044e180
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00463f80
mov eax, edi
mov ecx, 0x19
call fcn.00463f80
nop
call fcn.00461d00
nop
jmp fcn.0051a860