joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4f6900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6a12
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x4053612159274947
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1d3861646e03304d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20656d5e21471d38
mov qword [rsp + 0x28], rdx
movabs rdx, 0x296f4d695e4e4d61
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe03191212041b07
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2001419100f0809
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3011b18060a160f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1611070603021209
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f69b1
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x2c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x2c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x20
jge 0x4f69de
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4f6a05
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4f6994
jmp 0x4f69f9
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1e
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f6900

Function at 0x4f6a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6b48
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x2750b0740fdf6153
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe2f2cb16659472cb
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1b22e2f2cb166594
mov qword [rsp + 0x24], rdx
movabs rdx, 0xfccdf6d202207204
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x160e1812170a140d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x12150308160e1812
mov qword [rsp + 0x38], rdx
movabs rdx, 0x181403050f111905
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80a160e10071819
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11110205170c1218
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f6ae0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x4f6b12
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4f6b3b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1a]
cmp rsi, 0x1a
jb 0x4f6ac3
jmp 0x4f6b2f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1a
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f6a20
Function at 0x4f7b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7c88
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x476369896963d5b2
mov qword [rsp + 0x18], rdx
movabs rdx, 0x14b468bb414dd53
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd323073d16640661
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc00070f070b1417
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe071604040e0c0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf13010b0f0709
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150f0014110d160a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f7c20
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x4f7c52
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f7c7b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
cmp rsi, 0x18
jb 0x4f7c05
jmp 0x4f7c6f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x18
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f7b80

Function at 0x4f8aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f8ba8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xa54561c8c5657ae0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x64c08416c5826ee3
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9a7369541dbb7284
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc170a1300060d10
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd17080c160b1003
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x31704120d17080c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80e0a120a0b0007
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f8b40
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7f]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4f8b72
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f8b9b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7f]
cmp rsi, 0x18
jb 0x4f8b25
jmp 0x4f8b8f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x18
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f8aa0
Function at 0x4f92c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f93e8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x45f8036cf2676908
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6ea5dbf7178a9099
mov qword [rsp + 0x23], rdx
movabs rdx, 0x7d6ea5dbf7178a90
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7c6d6931ff6408de
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9030315080e0011
mov qword [rsp + 0x34], rdx
movabs rdx, 0x902000909030315
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0905121006120a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x180318140200140d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8060c0e02140308
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f9380
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x48]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x4f93b2
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f93db
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x48]
cmp rsi, 0x19
jb 0x4f9363
jmp 0x4f93cf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x19
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f92c0

Function at 0x4f9400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9526
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xd261ef73d2d5ea54
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xfd04d0c2204d61ec
mov qword [rsp + 0x25], rdx
movabs rdx, 0x64fd04d0c2204d61
mov qword [rsp + 0x26], rdx
movabs rdx, 0x54fee16cd5f047f6
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0018020a0e1202
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa140c0018020a0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x207130e15031205
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0c081105161618
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc0d0301170f0c0e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f94c0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x22
jge 0x4f94ed
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f9514
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x4f94a3
jmp 0x4f9508
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x19
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f9400
Function at 0x4fb8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb9bc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6e4b7455ec616147
mov qword [rsp + 0x32], rdx
movabs rdx, 0x646e3200534d6e4b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x156d2f5417b77261
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa000a1110060813
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3040a0208030a00
mov qword [rsp + 0x22], rdx
movabs rdx, 0x150b060015080615
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4fb950
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx + 1]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x16
jge 0x4fb988
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4fb9af
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 1]
nop word [rax + rax]
cmp rsi, 0x16
jb 0x4fb936
jmp 0x4fb9a3
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x16
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004fb8c0

Function at 0x4fd880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fd992
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x5f2b525a53f75954
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4d6e56740e6c525f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x550a19515721563d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x140008110e020a14
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1603140008110e02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10090f060a080f00
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8040a1301051215
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0906070c040a0f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4fd931
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x22
jge 0x4fd95e
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4fd985
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4fd914
jmp 0x4fd979
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004fd880
Function at 0x4fdc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fdd88
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x2a8032b84369a0b0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb96edf742a8032b8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5de147c020db723a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1311070b06060b01
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6030c0510131311
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x61104000e030603
mov qword [rsp + 0x40], rdx
movabs rdx, 0x905120704120b0c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fdd22
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x4e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x4e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x4fdd4f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4fdd7b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4fdd05
jmp 0x4fdd6f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x14
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004fdc80

Function at 0x4fe0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fe1c8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x8d616567ee6fe6fa
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1fb617401fe8d61
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x13f89f15eba40230
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd1405010e031103
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x111003081111130f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x709111003081111
mov qword [rsp + 0x38], rdx
movabs rdx, 0x109000e0c12150f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fe162
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x75]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x75]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1a
jge 0x4fe18f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4fe1bb
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x4fe145
jmp 0x4fe1af
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x16
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004fe0c0
Function at 0x5004e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x500608
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xb71917c1dbb58eb7
mov qword [rsp + 0x18], rdx
movabs rdx, 0x617c87be61c26cd9
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd0bc617c87be61c2
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa96d696d79f2d0d7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x801130e060d1912
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd00110606130801
mov qword [rsp + 0x38], rdx
movabs rdx, 0x312120c03040c12
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16020a0812051402
mov qword [rsp + 0x48], rdx
movabs rdx, 0x713050a12100115
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5005a0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7d]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x26
jge 0x5005d2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x5005fb
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7d]
cmp rsi, 0x1a
jb 0x500583
jmp 0x5005ef
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1a
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005004e0
Function at 0x502f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x503088
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x366d1b694b737551
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x274c366d1b694b73
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7760572e5f6e203e
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0f00080a080707
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa0d09100c030805
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc000a0d09100c03
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc090a050608110f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x503022
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1a
jge 0x50304f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x50307b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x503005
jmp 0x50306f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00502f80

Function at 0x5039c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x503ac8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x9f37410e65bfb32
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1f0b61e104207309
mov qword [rsp + 0x24], rdx
movabs rdx, 0x656d695420640b61
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20a0e0e07000e0e
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb030a0b0601100e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x70700030b030a0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x300040d07000b07
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x503a62
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1c
jge 0x503a8f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x503abb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x503a45
jmp 0x503aaf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.005039c0
Function at 0x503ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x503bd6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xb5a420096f2fea53
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x123361b5a420096f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x652f3d30a4d972e0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe0d060a09071102
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb0e0a04010a0e0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90d010f0a10090d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x503b73
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x51]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x51]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x503ba2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x503bc9
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x503b56
nop
jmp 0x503bbd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x13
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.00503ae0
Function at 0x504a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x504b28
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xf096aec4696af946
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xebf0f096aec4696a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3ff01711200e94d8
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1006101106070a0b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1110509080f010f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x50e01110509080f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x411060f0f0c0b05
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x504ac2
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1a
jge 0x504aef
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x504b1b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x504aa5
jmp 0x504b0f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00504a20

Function at 0x504b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x504c66
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xf3fa08e3d9eda143
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2031f10cf1356150
mov qword [rsp + 0x27], rdx
movabs rdx, 0x646e84e7532031f1
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf56df13706f7d781
mov qword [rsp + 0x34], rdx
movabs rdx, 0x19020b1a06041615
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x11170d1c19020b1a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x104190a0e0a1204
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2190c16030c0e07
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5040416180a1219
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x504c00
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x73]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x24
jge 0x504c2d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x504c54
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1d
jb 0x504be3
jmp 0x504c48
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.00504b40
Function at 0x50c4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0x18afe319ad59a98a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x203050705060401
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x306
xor eax, eax
nop
jmp 0x50c520
movzx r8d, byte [rsp + rbx + 0x1e]
sub r8d, edx
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x1e], dl
lea edx, [rdi + 0x3f]
mov byte [rsp + rbx + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x50c54b
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x50c58a
movzx edi, byte [rsp + rsi + 0x1e]
sub edi, edx
cmp rbx, 8
jb 0x50c502
jmp 0x50c57e
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x50c564
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x50c558
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.0045f5c0
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
nop
int3

Function at 0x50c780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50c852
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x1a4657644c68705c
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x4c6c6555
movabs rdx, 0x302040006090009
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9020b0508070302
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x50c7eb
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 3]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x50c81d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x50c845
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 3]
cmp rsi, 0xc
jb 0x50c7d1
jmp 0x50c838
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.0050c780