joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4fb300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb412
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xc28f65439453fe7b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x81e8f9ee524bac93
mov qword [rsp + 0x21], rdx
movabs rdx, 0x6481e8f9ee524bac
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa30196546c64729d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x16141706080b0a0a
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd1100070a0e060c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x30918010d170d11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1601080c0907070f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fb3b1
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x4fb3de
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4fb405
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x4fb394
jmp 0x4fb3f9
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f500
mov eax, edi
mov ecx, 0x19
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004fb300

Function at 0x4fb420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb528
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x61d3c174451595be
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x196ee83bd82061d3
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65a834c1a2aed7c3
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1001110a13110d
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb05110d12140402
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x40e030d05110b05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9060f0a0602130d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fb4c2
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x44]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x44]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1e
jge 0x4fb4ef
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4fb51b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4fb4a5
jmp 0x4fb50f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f500
mov eax, edi
mov ecx, 0x16
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004fb420
Function at 0x4fb540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb648
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x773449216440524c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x243361743b203c77
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2a42592320450f0f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x51606021306080d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x110a0a0f040e0115
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe04110a0a0f040e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16011111140f1004
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fb5e2
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1a
jge 0x4fb60f
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4fb63b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4fb5c5
jmp 0x4fb62f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f500
mov eax, edi
mov ecx, 0x17
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004fb540

Function at 0x4fda60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fdb68
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xd6bfa3ffa5596f52
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1b492f74a8d6bfa3
mov qword [rsp + 0x24], rdx
movabs rdx, 0xad6df7aebcb27261
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb070b0c0f14120f
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb040c100b0a0702
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x11003050b040c10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4110b061108080c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fdb02
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x2c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x2c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1c
jge 0x4fdb2f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4fdb5b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x4fdae5
jmp 0x4fdb4f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f500
mov eax, edi
mov ecx, 0x15
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004fda60
Function at 0x4fe180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fe288
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xe0e7fef1d86c6f71
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x64dc61cdf2c95ee0
mov qword [rsp + 0x22], rdx
movabs rdx, 0xca6ddfbb2064ac61
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa1309040a0414
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1406060714141005
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x308100908081406
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd1614100a0b0d05
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fe220
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x4fe252
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4fe27b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6d]
cmp rsi, 0x17
jb 0x4fe205
jmp 0x4fe26f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f500
mov eax, edi
mov ecx, 0x17
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004fe180

Function at 0x4fe2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fe3c8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xec88fbf2a1fea0e2
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x58a4d1147275ee
mov qword [rsp + 0x22], rdx
movabs rdx, 0x64f661ac12c50058
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf10a693afd134aea
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30b1c18081a1203
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1417190c11121401
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1008191416050512
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11070f0f070e0206
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1402041d1d0d07
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4fe360
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x4fe392
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4fe3bb
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 0x1e
jb 0x4fe343
jmp 0x4fe3af
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045f500
mov eax, edi
mov ecx, 0x1e
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004fe2a0
Function at 0x505ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x505fd6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xf341062050693973
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x640d3cf341062050
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4c555f4c6360ff32
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1090701120d0c08
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb11030f01010109
mov qword [rsp + 0x38], rdx
movabs rdx, 0x905090610110810
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x505f73
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x3a]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x3a]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x505fa2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x505fc9
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x505f56
nop
jmp 0x505fbd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f500
mov eax, edi
mov ecx, 0x13
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.00505ee0
Function at 0x508ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508bbc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x657272d1b37479ab
mov qword [rsp + 0x28], rdx
movabs rdx, 0x898f657268bb7498
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0103000304
mov qword [rsp + 0x18], rdx
movabs rdx, 0x401030e08080f0e
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x508b52
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x34]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x508b88
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x508baf
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x34]
nop dword [rax]
cmp rsi, 0x10
jb 0x508b38
jmp 0x508ba3
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f500
mov eax, edi
mov ecx, 0x10
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.00508ae0

Function at 0x5093a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50948b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x149ca9714c646f4d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x579873af0846149c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30a05090605090c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60a030a05090605
mov qword [rsp + 0x28], rdx
movabs rdx, 0x606060407030304
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x509424
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x71]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x71]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x12
jge 0x509457
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x50947e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x509407
jmp 0x509472
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f500
mov eax, edi
mov ecx, 0xe
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005093a0
Function at 0x50ab00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50ac08
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x57947ed2b89b8e47
mov qword [rsp + 0x19], rdx
movabs rdx, 0x69a68dc06c57947e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8d6772a277818588
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70b111009110307
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70a140f040a0b13
mov qword [rsp + 0x36], rdx
movabs rdx, 0x705070a140f040a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5010e090d060210
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50aba2
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1a
jge 0x50abcf
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x50abfb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x50ab85
jmp 0x50abef
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f500
mov eax, edi
mov ecx, 0x15
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0050ab00

Function at 0x50d100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50d232
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xb2a820c0926c01bc
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc234feb2a820c092
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb74b78520d865af
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9ea9720970707519
mov qword [rsp + 0x30], rdx
movabs rdx, 0x65aea3c0bece7364
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd210b1f04081d13
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd09101e0110121c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x700060a1d0d1d17
mov qword [rsp + 0x50], rdx
movabs rdx, 0x200f040a031d0521
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a1f1a0f0f211c19
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x50d1cc
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x69]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x28
jge 0x50d1fe
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x50d225
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x69]
cmp rsi, 0x23
jb 0x50d1b2
jmp 0x50d219
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x23
call fcn.0044a140
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x23
call fcn.0045f500
mov eax, edi
mov ecx, 0x23
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0050d100
Function at 0x511740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x511888
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x737636899f725a75
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7639737636899f72
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1292698393758177
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6c6e8950745f6e83
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x546b8d8f81726575
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1e0e0417101f1701
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1a041d0b20050d03
mov qword [rsp + 0x44], rdx
movabs rdx, 0x21e050a1a041d0b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1216052109180807
mov qword [rsp + 0x50], rdx
movabs rdx, 0x12120703060d2021
mov qword [rsp + 0x58], rdx
movabs rdx, 0x320060705140a11
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x511820
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x31]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2c
jge 0x511852
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x51187b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x31]
cmp rsi, 0x22
jb 0x511802
jmp 0x51186f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x22
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x22
call fcn.0045f500
mov eax, edi
mov ecx, 0x22
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00511740
Function at 0x5177e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x517908
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x608072a9bba66181
mov qword [rsp + 0x19], rdx
movabs rdx, 0x73b04f3b74c8a786
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa47a8ac1afb49373
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9b6f9c619ee1708c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1c121a0613090c13
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140c041119020904
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70d1a100e1e0a10
mov qword [rsp + 0x48], rdx
movabs rdx, 0x816001703160216
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd151e0219060408
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5178a0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x5178d2
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x5178fb
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4f]
cmp rsi, 0x1f
jb 0x517883
jmp 0x5178ef
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1f
call fcn.0045f500
mov eax, edi
mov ecx, 0x1f
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.005177e0

Function at 0x517920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x517a92
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0xd1e60cc0f2ae6ec3
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf8d1ef06f620828f
mov qword [rsp + 0x27], rdx
movabs rdx, 0xe9f8d1ef06f62082
mov qword [rsp + 0x28], rdx
movabs rdx, 0x69f9937e73da8b0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xfb3d8f20ca30fe53
mov qword [rsp + 0x38], rdx
movabs rdx, 0x743f1d9138028853
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90e1e1c06131917
mov qword [rsp + 0x48], rdx
movabs rdx, 0x82011221017250f
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe2526041504210c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x212190503000c16
mov qword [rsp + 0x60], rdx
movabs rdx, 0x3050d0b04050d0e
mov qword [rsp + 0x68], rdx
movabs rdx, 0xc02071a0b1a2316
mov qword [rsp + 0x70], rdx
movabs rdx, 0x20152411271f050f
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x517a2a
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x38
jge 0x517a57
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x517a85
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x29
jb 0x517a0d
jmp 0x517a78
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x29
call fcn.0044a140
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x29
nop
call fcn.0045f500
mov eax, edi
mov ecx, 0x29
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00517920
Function at 0x517ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x517f7c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x926b4865eaadba5e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x656c64926b4865ea
mov qword [rsp + 0x20], rdx
movabs rdx, 0x300070101070706
mov qword [rsp + 0x28], rdx
movabs rdx, 0x602020606030306
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x517f12
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x50]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x517f48
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x517f6f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x50]
nop dword [rax]
cmp rsi, 0xb
jb 0x517ef8
jmp 0x517f63
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f500
mov eax, edi
mov ecx, 0xb
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.00517ea0
Function at 0x524700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5247c8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x68fa6ff67aacfc82
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x20
movabs rdx, 0x2000303070604
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3010702
xor eax, eax
jmp 0x524761
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x524793
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x5247bb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6c]
cmp rsi, 9
jb 0x524747
jmp 0x5247af
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f500
mov eax, edi
mov ecx, 9
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.00524700

Function at 0x52b3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52b492
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x17e76ed45514a30a
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x1ebe6e8a
movabs rdx, 0x702080a00060500
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6080a0b08040b01
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x52b42e
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x52b45b
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x52b485
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x52b411
jmp 0x52b476
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f500
mov eax, edi
mov ecx, 0xc
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0052b3c0
Function at 0x52b4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x52b626
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0xe72da172d6e6f6e
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb6f0cea1d51cdff1
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6ccb73f3b6f0cea1
mov qword [rsp + 0x24], rdx
movabs rdx, 0x27a828a16f4eefbc
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xcb20746fa5c24e03
mov qword [rsp + 0x34], rdx
movabs rdx, 0x11569d7297a9fd02
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb0504161a0d0c0d
mov qword [rsp + 0x44], rdx
movabs rdx, 0xa260f240d0e291c
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x15101b100a260f24
mov qword [rsp + 0x50], rdx
movabs rdx, 0x29101c0810160b25
mov qword [rsp + 0x58], rdx
movabs rdx, 0x181f191d09070715
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1c0f2a1516051e04
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1d1b1b2b0d23070b
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1b142615120c271e
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x52b5b9
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0xa]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0xa]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x3c
jge 0x52b5e8
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x52b615
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
nop
cmp rsi, 0x2c
jb 0x52b59c
jmp 0x52b609
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x2c
call fcn.0044a140
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2c
call fcn.0045f500
mov eax, edi
mov ecx, 0x2c
nop dword [rax]
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.0052b4a0