joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4f3360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f348c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xbf2ff2051868afb
mov qword [rsp + 0x19], rdx
movabs rdx, 0x920bf2ff2051868a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6120f2e6fb079adf
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20700a0186fbf0e6
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6b6c190972686874
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1d1e061c07150b13
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x50c120d02081d1e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8071416031c1b06
mov qword [rsp + 0x48], rdx
movabs rdx, 0x30e000a130a1e09
mov qword [rsp + 0x50], rdx
movabs rdx, 0x11c160609021108
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4f3426
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x26
jge 0x4f345c
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x21
jae 0x4f347f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
cmp rsi, 0x21
jb 0x4f340c
jmp 0x4f3473
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x21
call fcn.00441b80
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.004521e0
mov eax, edi
mov ecx, 0x21
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004f3360

Function at 0x4f4480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4558
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf316514cea5465ad
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xdf9f64c0
movabs rdx, 0x6070002070b03
mov qword [rsp + 0x26], rdx
movabs rdx, 0x508000607000207
mov qword [rsp + 0x28], rdx
movabs rdx, 0x800060a06050408
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f44f4
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x12
jge 0x4f4528
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4f454b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7a]
nop
cmp rsi, 0xc
jb 0x4f44da
jmp 0x4f453f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00441b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004521e0
mov eax, edi
mov ecx, 0xc
call fcn.004521e0
nop
call fcn.0044ff60
nop dword [rax]
jmp fcn.004f4480
Function at 0x4f4580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f464c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6402f6015fa440bc
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xde6c
movabs rdx, 0x606010006000404
mov qword [rsp + 0x22], rdx
movabs rdx, 0x209050509020606
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4f45e4
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x32]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4f461c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4f463f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x32]
cmp rsi, 0xa
jb 0x4f45ca
jmp 0x4f4633
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004521e0
mov eax, edi
mov ecx, 0xa
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004f4580

Function at 0x4f4900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f49dd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4c613e696a635141
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x78686e30716f5f65
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe090c01050c07
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x309020c000e090c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x101070b000109
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4f4980
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x18]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x18]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4f49ad
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4f49d0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x4f4962
jmp 0x4f49c4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004521e0
mov eax, edi
mov ecx, 0x10
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004f4900
Function at 0x4f61e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f62e8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6cb8d32a6e7431a3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc6beb34e68bc3cc4
mov qword [rsp + 0x23], rdx
movabs rdx, 0xeec6beb34e68bc3c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x79dbcacad36112a8
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1104010609161118
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1203140512031504
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x3000f0e12031405
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6160a10080d1711
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f628b
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x48]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x48]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x4f62b8
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f62db
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4f626e
jmp 0x4f62cf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004521e0
mov eax, edi
mov ecx, 0x19
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004f61e0

Function at 0x4f6d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6dfd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3243008375a26fa6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x14a422d495463243
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4050c0000020b09
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90a0a0604050c00
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90905000a0d0b02
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4f6da0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x73]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x73]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4f6dcd
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4f6df0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4f6d82
jmp 0x4f6de4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004521e0
mov eax, edi
mov ecx, 0xe
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004f6d20
Function at 0x4f6e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6ef2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x606c694616a76fd9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc03590606c694616
mov qword [rsp + 0x22], rdx
movabs rdx, 0x203070a00090802
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2000a0203030203
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f6e8c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6c]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4f6ebe
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4f6ee5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6c]
cmp rsi, 0xb
jb 0x4f6e72
jmp 0x4f6ed5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.004521e0
mov eax, edi
mov ecx, 0xb
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004f6e20
Function at 0x4fe100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fe1cc
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd51bc36165146e75
mov qword [rsp + 0x19], rdx
movabs rdx, 0xbcc920d51bc36165
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9080a0209050706
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2050606
xor eax, eax
jmp 0x4fe165
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x45]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4fe19c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4fe1bf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x45]
cmp rsi, 0xb
jb 0x4fe14b
jmp 0x4fe1b3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004521e0
mov eax, edi
mov ecx, 0xb
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004fe100

Function at 0x4feb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fec38
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1a4c026fafb71713
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x203020306070206
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5050001
xor eax, eax
jmp 0x4febd6
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x57]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x4fec08
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4fec2b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x57]
cmp rsi, 8
jb 0x4febbc
jmp 0x4fec1f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004521e0
mov eax, edi
mov ecx, 8
call fcn.004521e0
nop
call fcn.0044ff60
nop dword [rax]
jmp fcn.004feb80

Function at 0x501be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x501ca7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6b64697a6186641d
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x727d6170
movabs rdx, 0xb0101010007
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x400040a02040000
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x501c48
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x501c77
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x501c9a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x501c2b
jmp 0x501c8e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004521e0
mov eax, edi
mov ecx, 0xc
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.00501be0
Function at 0x507de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x507f2c
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x7463657078264b75
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2c6c391563394365
mov qword [rsp + 0x23], rdx
movabs rdx, 0x742c6c3915633943
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb17845fae5031e74
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3abdef2029b14474
mov qword [rsp + 0x34], rdx
movabs rdx, 0x9ab7653847e18b7d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa14110a23241b23
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1e1e181a140d2228
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x9010c211e1e181a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x120c011f221a0912
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f0f0d0225202222
mov qword [rsp + 0x60], rdx
movabs rdx, 0x270f130c15281e01
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x507ec4
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x17]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x2c
jge 0x507efc
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x29
jae 0x507f1f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x17]
cmp rsi, 0x29
jb 0x507eaa
jmp 0x507f13
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x29
call fcn.00441b80
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.004521e0
mov eax, edi
mov ecx, 0x29
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.00507de0

Function at 0x5080a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508172
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6f8a3e8730907995
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x94916c697a6f8a3e
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb08030c060b0500
mov qword [rsp + 0x28], rdx
movabs rdx, 0x205040604020301
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x50810c
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x50813e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x508165
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1e]
cmp rsi, 0xd
jb 0x5080f2
jmp 0x508155
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.004521e0
mov eax, edi
mov ecx, 0xd
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.005080a0
Function at 0x508820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50893a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xebdbeb6a83d990fa
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x695178ce08eb6607
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc842a18f695178ce
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1345656c6438f4e4
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1b08110404100111
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0307150816150c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd05001316160201
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe140308050a0e08
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10060110080b1407
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5088d7
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x28
jge 0x508909
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x50892d
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0x1c
jb 0x5088bd
jmp 0x508921
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.00441b80
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.004521e0
mov eax, edi
mov ecx, 0x1c
call fcn.004521e0
nop
call fcn.0044ff60
nop
jmp fcn.00508820

Function at 0x50c8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x50c9aa
push rbp
mov rbp, rsp
sub rsp, 0x90
movzx edx, byte [rax + 0x4c]
mov byte [rax + 0x4c], cl
nop
movabs rsi, 0x479a104f553d1815
mov qword [rsp + 0x57], rsi
movabs rsi, 0xe4479a104f553d18
mov qword [rsp + 0x58], rsi
movabs rsi, 0x5652f1bb898f27e3
mov qword [rsp + 0x60], rsi
movabs rsi, 0x70ac257b660f2925
mov qword [rsp + 0x46], rsi
movabs rsi, 0xdc70ac257b660f29
mov qword [rsp + 0x47], rsi
movabs rsi, 0x2e3494dfeaed46da
mov qword [rsp + 0x4f], rsi
xor ecx, ecx
nop
jmp 0x50c936
movzx esi, byte [rsp + rcx + 0x57]
movzx edi, byte [rsp + rcx + 0x46]
xor edi, esi
mov byte [rsp + rcx + 0x46], dil
inc rcx
cmp rcx, 0x11
jl 0x50c922
mov qword [rsp + 0xa0], rax
mov byte [rsp + 0x37], dl
mov qword [rsp + 0x38], rbx
lea rdx, [rax + 0x40]
mov qword [rsp + 0x88], rdx
lea rbx, [rsp + 0x46]
mov ecx, 0x11
lea rax, [rsp + 0x68]
call fcn.00441b80
mov ecx, 0x10
xor edi, edi
mov esi, 0x76
mov r8, rax
mov r9, rbx
mov rax, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x38]
call fcn.0050a160
movzx edx, byte [rsp + 0x37]
mov rsi, qword [rsp + 0xa0]
mov byte [rsi + 0x4c], dl
add rsp, 0x90
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x18], cl
call fcn.0044ff60
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
movzx ecx, byte [rsp + 0x18]
jmp fcn.0050c8a0
Function at 0x513580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51368c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x22203b50fa6e5235
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x38633e1646525435
mov qword [rsp + 0x23], rdx
movabs rdx, 0x44523f4b6e38633e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6ece2246b66f2d20
mov qword [rsp + 0x30], rdx
movabs rdx, 0x181316111b140818
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40d090109030f14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120019110a08050f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa010c0a1a070b05
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x513628
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x20
jge 0x51365c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x51367f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
cmp rsi, 0x1d
jb 0x51360e
jmp 0x513673
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00441b80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.004521e0
mov eax, edi
mov ecx, 0x1d
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.00513580

Function at 0x514be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x514ccc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f36d8349726771c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xff6f36d834972677
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7815a26463916198
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80501000f050002
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0e0205070e0009
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3090b0e0b00020e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x514c6a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x514c9c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x514cbf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
cmp rsi, 0x11
jb 0x514c50
jmp 0x514cb3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004521e0
mov eax, edi
mov ecx, 0x11
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.00514be0
Function at 0x51dd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51dde7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3233726d8461766a
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6c6a792e
movabs rdx, 0xa020a0100020901
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x905030900040a02
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51dd88
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x51ddb7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x51ddda
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x51dd6b
jmp 0x51ddce
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004521e0
mov eax, edi
mov ecx, 0xc
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.0051dd20

Function at 0x51eaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51eb72
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x61f7e304a30d0347
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x57658f61f7e304a3
mov qword [rsp + 0x22], rdx
movabs rdx, 0x808050503050101
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x806040604020808
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51eb0c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x62]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x51eb3e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x51eb65
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x62]
cmp rsi, 0xb
jb 0x51eaf2
jmp 0x51eb55
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.004521e0
mov eax, edi
mov ecx, 0xb
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.0051eaa0
Function at 0x51eb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51ec5d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x683a745140585244
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x544d3b4e7355424d
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd06090c0e040103
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf060d06090c0e04
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0f0c0a01020c01
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x51ec00
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x51ec2d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x51ec50
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x51ebe2
jmp 0x51ec44
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004521e0
mov eax, edi
mov ecx, 0x10
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.0051eb80

Function at 0x51f6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51f78c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf3537997866565a9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6c88a1f353799786
mov qword [rsp + 0x22], rdx
movabs rdx, 0x904000007080807
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2000700030a0904
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51f72f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x51f75c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x51f77f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x51f712
jmp 0x51f773
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004521e0
mov eax, edi
mov ecx, 0xb
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.0051f6c0