joyce8/EMBER2024-capa huggingface dataset:
Function at 0x500480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x500588
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x2f2061656b586171
mov qword [rsp + 0x18], rdx
movabs rdx, 0x595786742f206165
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6158627120705369
mov qword [rsp + 0x24], rdx
movabs rdx, 0x11070e030e09110b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1311000d0c0c070a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x121011011311000d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70c020c0a051302
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x500520
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x18]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x500552
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x50057b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x18]
cmp rsi, 0x14
jb 0x500505
jmp 0x50056f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456a60
mov eax, edi
mov ecx, 0x14
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.00500480

Function at 0x5005a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x500696
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6955f42074736660
mov qword [rsp + 0x19], rdx
movabs rdx, 0x64d3e4cd53e76169
mov qword [rsp + 0x20], rdx
movabs rdx, 0x656de3c220e16bc2
mov qword [rsp + 0x28], rdx
movabs rdx, 0x605110c060f100b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60105131005140f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd090d01060b000d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x500633
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x5f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x5f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x500662
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x500689
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x500616
nop
jmp 0x50067d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456a60
mov eax, edi
mov ecx, 0x17
call fcn.00456a60
nop
call fcn.00454400
nop dword [rax + rax]
jmp fcn.005005a0
Function at 0x500d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x500e72
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x43d05b6964dff556
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xdde1ea51207b11d7
mov qword [rsp + 0x27], rdx
movabs rdx, 0x64dde1ea51207b11
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65ce59548d6c72e0
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe13171107060714
mov qword [rsp + 0x38], rdx
movabs rdx, 0x160a0c060911080f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x111416050a020d05
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60e0d0916010117
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x500e11
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x5a]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x5a]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x500e3e
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x500e65
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x500df4
jmp 0x500e59
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.00444360
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456a60
mov eax, edi
mov ecx, 0x19
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.00500d60

Function at 0x5019c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x501ae8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x72df92b96fd1073a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x610ba3206169fd09
mov qword [rsp + 0x20], rdx
movabs rdx, 0x641c610ba3206169
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7fa901c6156472c9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe1506170e191202
mov qword [rsp + 0x32], rdx
movabs rdx, 0x910101201050e15
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe10191215021606
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1818001718080409
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1705171703020d10
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x501a80
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x26
jge 0x501ab2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x501adb
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
cmp rsi, 0x1a
jb 0x501a63
jmp 0x501acf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
nop
call fcn.00444360
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456a60
mov eax, edi
mov ecx, 0x1a
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.005019c0
Function at 0x504a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x504b88
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x1df5cb1e5f3a8b24
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x84bf1df5cb1e5f3a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xac2065db6fc4d1c3
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1107070301060e02
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90b050e0e04010e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x404090b050e0e04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80a0c11030c0003
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x504b20
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x74]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x504b52
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x504b7b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x74]
cmp rsi, 0x12
jb 0x504b05
jmp 0x504b6f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456a60
mov eax, edi
mov ecx, 0x12
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.00504a80

Function at 0x505b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x505c7c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x74415f61546d6541
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x51576074415f6154
mov qword [rsp + 0x20], rdx
movabs rdx, 0x396d6916204e4361
mov qword [rsp + 0x28], rdx
movabs rdx, 0x41201010d04050f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8080a0304080a08
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0c0006090a0505
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x505c10
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 8]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x505c48
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x505c6f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 8]
nop word [rax + rax]
cmp rsi, 0x13
jb 0x505bf6
jmp 0x505c63
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456a60
mov eax, edi
mov ecx, 0x13
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.00505b80
Function at 0x505fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5060e8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x9490c8a6ae6190d2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7b9b64b461947390
mov qword [rsp + 0x27], rdx
movabs rdx, 0x646ea770487b9b64
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd6b3727f20c7722d
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf10001a0a121215
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa111c060f10001a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b0c040e17051a03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x501070a06111b0c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a03171119010806
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x506080
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4d]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x5060b2
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x5060db
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4d]
cmp rsi, 0x1d
jb 0x506063
jmp 0x5060cf
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
nop
call fcn.00444360
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00456a60
mov eax, edi
mov ecx, 0x1d
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.00505fc0
Function at 0x506c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x506d88
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6c24a320656eafbe
mov qword [rsp + 0x18], rdx
movabs rdx, 0x23aa4b2024c76e3c
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc00523aa4b2024c7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x235469afa4de7260
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe000b070a150f01
mov qword [rsp + 0x32], rdx
movabs rdx, 0x812060b11120e00
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120a1106180f0f16
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa06190f050f0d0a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe05140010060f0e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x506d20
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x26
jge 0x506d52
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x506d7b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0x1a
jb 0x506d03
jmp 0x506d6f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
nop
call fcn.00444360
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456a60
mov eax, edi
mov ecx, 0x1a
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.00506c60
Function at 0x508c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x508dda
sub rsp, 0xa8
mov qword [rsp + 0xa0], rbp
lea rbp, [rsp + 0xa0]
movabs rdx, 0x4501245754b03b68
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x67222863f34dc345
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf1fcde844ae3138d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4312a5ab2073196f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x118174cdf077e0fd
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x69ad761e6f208d72
mov qword [rsp + 0x46], rdx
movabs rdx, 0xde0440135adf6564
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x2911250810050d34
mov qword [rsp + 0x56], rdx
movabs rdx, 0x201f2c1f1d012d05
mov qword [rsp + 0x5e], rdx
movabs rdx, 0x1528201f2c1f1d01
mov qword [rsp + 0x60], rdx
movabs rdx, 0xd1f12001c1b0a10
mov qword [rsp + 0x68], rdx
movabs rdx, 0x131d022b16220c1d
mov qword [rsp + 0x70], rdx
movabs rdx, 0x22c0e1f01312115
mov qword [rsp + 0x78], rdx
movabs rdx, 0x8153308000f342f
mov qword [rsp + 0x80], rdx
movabs rdx, 0xe2c111f18233436
mov qword [rsp + 0x88], rdx
movabs rdx, 0x35001d260210120d
mov qword [rsp + 0x90], rdx
movabs rdx, 0x1f2b14021506182f
mov qword [rsp + 0x98], rdx
xor eax, eax
jmp 0x508d72
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x4a
jge 0x508d9f
movzx edx, byte [rsp + rax + 0x56]
movzx esi, byte [rsp + rax + 0x57]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x37
jae 0x508dcd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x37
jb 0x508d55
jmp 0x508dc1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x37
call fcn.00444360
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
nop
ret
mov eax, esi
mov ecx, 0x37
call fcn.00456a60
mov eax, edi
mov ecx, 0x37
call fcn.00456a60
nop
call fcn.00454400
nop
jmp fcn.00508c20
Function at 0x5110c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xb5c3c2f4f9e5c08a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x705040705010305
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x307
xor eax, eax
nop
jmp 0x511120
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x51114f
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x51118e
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x27]
cmp rbx, 8
jb 0x511102
jmp 0x511182
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x511168
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x51115c
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00456a60
mov eax, esi
mov ecx, 8
call fcn.00456a60
nop
int3

Function at 0x511d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x511e28
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x3c5474b9753bf3f6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xbb2d65053c5474
mov qword [rsp + 0x22], rdx
movabs rdx, 0x73653c0b6cd3d27a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe0d000c010b0f04
mov qword [rsp + 0x32], rdx
movabs rdx, 0x120104110e020812
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc0a11040a0f1201
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12070d07120b0b02
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x511dc2
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x51]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x51]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x511def
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x511e1b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x511da5
jmp 0x511e0f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.00444360
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456a60
mov eax, edi
mov ecx, 0x15
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.00511d20
Function at 0x511e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x511f2b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x514438301c473226
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x664e655265346151
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd030b0401020906
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x607050b000d0d03
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9040d0509020d0b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x511ec4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x16
jge 0x511ef7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x511f1e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x511ea7
jmp 0x511f12
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.00444360
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456a60
mov eax, edi
mov ecx, 0xf
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.00511e40

Function at 0x512220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x512316
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xfcb5078f09e97982
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6efcb5078f09e979
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf433b1e2aa69f263
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3100a07050d0710
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20d071007040c05
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe04000d06021000
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5122b3
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x2c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x2c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x5122e2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x512309
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x512296
nop
jmp 0x5122fd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456a60
mov eax, edi
mov ecx, 0x11
call fcn.00456a60
nop
call fcn.00454400
nop dword [rax + rax]
jmp fcn.00512220
Function at 0x512620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5126f2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6a7cd2a643748a92
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xab439e8f
movabs rdx, 0xb0805080b040601
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70b0409040b08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51268e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x5126bb
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5126e5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x512671
jmp 0x5126d6
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00444360
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00456a60
mov eax, edi
mov ecx, 0xc
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.00512620

Function at 0x512700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5127fc
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xcf75fdc4f074da47
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x46cdcf75fdc4f074
mov qword [rsp + 0x30], rdx
movabs rdx, 0xbcbac641ca656cd1
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11050a0807010e08
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x110311050a080701
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf041011110d0d07
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x512790
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x72]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x5127c8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5127ef
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x72]
nop word [rax + rax]
cmp rsi, 0x12
jb 0x512776
jmp 0x5127e3
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00444360
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456a60
mov eax, edi
mov ecx, 0x12
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.00512700
Function at 0x5141e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5142dc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xfe45f4aa02a4b143
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6d972472800ffe45
mov qword [rsp + 0x20], rdx
movabs rdx, 0xada26f6ce39a9dae
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb15150809110703
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1009140c02071502
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4010e0b05040f03
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x514270
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x58]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x18
jge 0x5142a8
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5142cf
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x58]
nop word [rax + rax]
cmp rsi, 0x16
jb 0x514256
jmp 0x5142c3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456a60
mov eax, edi
mov ecx, 0x16
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.005141e0

Function at 0x516f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x517008
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x222012fda5ec73e3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xdb6c222012fda5ec
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x226c676620f365bd
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7110a050f110505
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9030204070505
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc0c000903020407
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc00050904070902
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x516fa0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x516fd2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x516ffb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0x12
jb 0x516f85
jmp 0x516fef
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456a60
mov eax, edi
mov ecx, 0x12
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.00516f00
Function at 0x51b9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51babc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x1a9e242522723128
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe9d1241a9e242522
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa000907060906
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10003050408000a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51ba55
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x51]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x51]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x51ba88
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x51baaf
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x51ba38
jmp 0x51baa3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00444360
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456a60
mov eax, edi
mov ecx, 0xb
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.0051b9e0