joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4fe460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fe527
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xca2503c6a5732927
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xd9fe
movabs rdx, 0x305070803040809
mov qword [rsp + 0x18], rdx
movabs rdx, 0x808010600040305
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x4fe4c7
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x5a]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x5a]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x4fe4f7
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4fe51a
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4fe4aa
jmp 0x4fe50e
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0045b080
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004607e0
mov eax, edi
mov ecx, 0xa
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004fe460

Function at 0x4ff900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ff9dd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa4a1ce748465b141
mov qword [rsp + 0x30], rdx
movabs rdx, 0xfdd2f6b4c16365b8
mov qword [rsp + 0x38], rdx
movabs rdx, 0x306000f0d0e010c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5070306000f0d0e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70e0b0d080d0f
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4ff980
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4ff9ad
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4ff9d0
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x4ff962
jmp 0x4ff9c4
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004607e0
mov eax, edi
mov ecx, 0x10
call fcn.004607e0
nop
nop dword [rax]
call fcn.0045e500
jmp fcn.004ff900

Function at 0x500100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5001c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x91468374ff4172b7
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x57f8b191
movabs rdx, 0x205020303090509
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x908000708030205
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x500168
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x500197
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x5001ba
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x50014b
jmp 0x5001ae
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0045b080
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004607e0
mov eax, edi
mov ecx, 0xb
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.00500100
Function at 0x500760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x500827
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8da30397df92d543
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6570
movabs rdx, 0x302020507070305
mov qword [rsp + 0x18], rdx
movabs rdx, 0x604040201060302
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x5007c7
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x5007f7
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x50081a
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x5007aa
jmp 0x50080e
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0045b080
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004607e0
mov eax, edi
mov ecx, 0xa
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.00500760

Function at 0x500840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x500918
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x45343a4961624558
mov qword [rsp + 0x32], rdx
movabs rdx, 0x5a46286d60574534
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10402010a090a0c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x607050901040201
mov qword [rsp + 0x22], rdx
movabs rdx, 0x108000b0d070902
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x5008b8
movzx r9d, byte [rsp + rsi + 0x32]
add edx, r9d
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x14
jge 0x5008e8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x50090b
movzx r8d, byte [rsp + rdi + 0x32]
add r8d, edx
nop dword [rax]
cmp rsi, 0xe
jb 0x5008a2
jmp 0x5008ff
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004607e0
mov eax, edi
mov ecx, 0xe
call fcn.004607e0
nop
call fcn.0045e500
nop dword [rax]
jmp fcn.00500840

Function at 0x500c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x500cfe
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xfb464dfc65466506
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x57656cfb
movabs rdx, 0x502070207040007
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x4040000
xor eax, eax
jmp 0x500ca1
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 + 0x2c]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 + 0x2c]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x500cce
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x500cf1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x500c84
jmp 0x500ce5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.0045b080
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004607e0
mov eax, edi
mov ecx, 0xb
call fcn.004607e0
nop
nop
call fcn.0045e500
jmp fcn.00500c40
Function at 0x500e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x500ede
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa6f5e5046547847
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x735d3d0a
movabs rdx, 0x90507000808
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x8020803
xor eax, eax
jmp 0x500e81
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x500eae
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x500ed1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x500e64
jmp 0x500ec5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.0045b080
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004607e0
mov eax, edi
mov ecx, 0xb
call fcn.004607e0
nop
nop
call fcn.0045e500
jmp fcn.00500e20

Function at 0x5040a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50418c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x43741a451e746547
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4e6f43741a451e74
mov qword [rsp + 0x30], rdx
movabs rdx, 0x734344654263505b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50303050f100f04
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x40e050303050f10
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0a050903050c0d
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x50412a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 1]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x50415c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x50417f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 1]
cmp rsi, 0x12
jb 0x504110
jmp 0x504173
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004607e0
mov eax, edi
mov ecx, 0x12
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.005040a0
Function at 0x504c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x504d4c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x49af6c2db8746547
mov qword [rsp + 0x36], rdx
movabs rdx, 0xec57ab3d72d5cde7
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xbf6fec57ab3d72d5
mov qword [rsp + 0x40], rdx
movabs rdx, 0x136cd0c861b67952
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc120c19080f1403
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x19170d0a0c0e060d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x60919170d0a0c0e
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0c110909040a16
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x504ce8
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x79]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x504d1c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x504d3f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x79]
cmp rsi, 0x1a
jb 0x504cce
jmp 0x504d33
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.0045b080
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004607e0
mov eax, edi
mov ecx, 0x1a
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.00504c40

Function at 0x508be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508cbd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x33731d656d6f723a
mov qword [rsp + 0x31], rdx
movabs rdx, 0x7674737269d09f33
mov qword [rsp + 0x38], rdx
movabs rdx, 0x505030500090e03
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe0e030905050305
mov qword [rsp + 0x21], rdx
movabs rdx, 0x9080e03050e05
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x508c60
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x508c8d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x508cb0
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x508c42
jmp 0x508ca4
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004607e0
mov eax, edi
mov ecx, 0xf
call fcn.004607e0
nop
nop dword [rax]
call fcn.0045e500
jmp fcn.00508be0
Function at 0x508ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508dc6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x335911144e0aa9f4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xda0ab465f6ff3359
mov qword [rsp + 0x30], rdx
movabs rdx, 0x402080d00090603
mov qword [rsp + 0x18], rdx
movabs rdx, 0x30b0402080d0009
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc06030106010b05
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x508d60
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4f]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x508d92
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x508db7
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4f]
cmp rsi, 0xe
jb 0x508d42
jmp 0x508dab
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop
call fcn.0045b080
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004607e0
mov eax, edi
mov ecx, 0xe
nop
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.00508ce0

Function at 0x5093e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x509498
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf9eaad1006090ba8
mov qword [rsp + 0x28], rdx
movabs rdx, 0x406000705010005
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x203
xor eax, eax
jmp 0x509438
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0x64]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0x64]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x509468
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x50948b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x50941b
jmp 0x50947f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0045b080
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004607e0
mov eax, edi
mov ecx, 8
call fcn.004607e0
nop
call fcn.0045e500
nop dword [rax]
jmp fcn.005093e0

Function at 0x50a780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50a84c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x54c9e131c8d956bf
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x4acf4354
movabs rdx, 0x304000a08010a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa06090105020402
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x50a7e5
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x50a81c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x50a83f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
cmp rsi, 0xb
jb 0x50a7cb
jmp 0x50a833
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0045b080
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004607e0
mov eax, edi
mov ecx, 0xb
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.0050a780
Function at 0x50dd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50de46
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4e72254656743a62
mov qword [rsp + 0x32], rdx
movabs rdx, 0x9fa46c34a614e72
mov qword [rsp + 0x38], rdx
movabs rdx, 0x509000404050c0a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc03010d05090004
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3000a030a0b01
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x50dde0
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x50de12
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x50de37
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 9]
cmp rsi, 0xe
jb 0x50ddc2
jmp 0x50de2b
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
nop
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004607e0
mov eax, edi
mov ecx, 0xe
nop
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.0050dd60

Function at 0x50eac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50ebac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x50721700f302f747
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0ec23e069f66f72
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5779e76f0863f193
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30511031002040d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x204150f030c010a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20c0802050e1313
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x50eb4a
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x50eb7c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x50eb9f
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
cmp rsi, 0x18
jb 0x50eb30
jmp 0x50eb93
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.0045b080
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004607e0
mov eax, edi
mov ecx, 0x18
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.0050eac0
Function at 0x510d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x510df8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc4c9c21b74146808
mov qword [rsp + 0x28], rdx
movabs rdx, 0x602050206060407
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 4
xor eax, eax
jmp 0x510d95
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x50]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x510dc8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x510deb
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x50]
nop
cmp rsi, 8
jb 0x510d7b
jmp 0x510ddf
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0045b080
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004607e0
mov eax, edi
mov ecx, 8
call fcn.004607e0
nop
call fcn.0045e500
nop dword [rax]
jmp fcn.00510d40

Function at 0x511b40
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x511c0a
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0
call fcn.00403180
xorps xmm15, xmm15
mov r14, qword [0x006c7ac0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
jne 0x511bef
mov rcx, qword [rsp + 0x60]
lea rdx, [rcx + 1]
mov qword [rsp + 0x40], rdx
lea rax, [0x00573140]
xor ebx, ebx
mov rcx, rdx
call fcn.0045a7e0
mov rbx, qword [rsp + 0x60]
mov rcx, rax
xor edi, edi
mov rsi, qword [rsp + 0x40]
mov rax, qword [rsp + 0x58]
nop dword [rax]
call fcn.00512640
inc rbx
cmp rcx, rbx
jae 0x511bde
mov edi, 1
lea rsi, [0x00573140]
call fcn.0045a8c0
mov word [rax + rbx*2 - 2], 0
xor edi, edi
xor esi, esi
add rsp, 0x48
pop rbp
ret
xor eax, eax
xor ebx, ebx
mov rcx, rbx
lea rdi, [0x005db968]
lea rsi, [0x005db4f8]
add rsp, 0x48
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.0045e500
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.00511b40

Function at 0x515180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51524c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x652bb1e361f069b6
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa53a72f27233652b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0c02060c000d0a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc0a0406080d0805
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x5151ef
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jge 0x51521c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x51523f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x5151d2
jmp 0x515233
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0045b080
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004607e0
mov eax, edi
mov ecx, 0xe
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.00515180
Function at 0x517b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x517c3d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb9e6f77353670f52
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf9ccba65e55db9e6
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6010d0905040408
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8060d0d06010d09
mov qword [rsp + 0x22], rdx
movabs rdx, 0x704050c06090b01
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x517be0
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x3f]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x3f]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x517c0d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x517c30
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0xe
jb 0x517bc2
jmp 0x517c24
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004607e0
mov eax, edi
mov ecx, 0xe
call fcn.004607e0
nop
nop dword [rax]
call fcn.0045e500
jmp fcn.00517b60

Function at 0x51b540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51b62a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc54651612953694d
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x356e61c546516129
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb44f454493f7213
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5030e0e1003070e
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa06120505030e0e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x12020d0010110b0d
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x51b5cd
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x34]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x34]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x14
jge 0x51b5fa
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x51b61d
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0x13
jb 0x51b5b0
jmp 0x51b611
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004607e0
mov eax, edi
mov ecx, 0x13
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.0051b540