joyce8/EMBER2024-capa huggingface dataset:
Function at 0x507300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x507408
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa73d22074a66be9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xfbc5611b01aead0a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb50e3e1003ce8b0e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1612121001020a07
mov qword [rsp + 0x36], rdx
movabs rdx, 0x130f161212100102
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa1309080e0e1501
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50d090b020a05
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140b0a08110a1308
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5073ab
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x75]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x75]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x22
jge 0x5073d8
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x5073fb
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x50738e
jmp 0x5073ef
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044c4e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004617c0
mov eax, edi
mov ecx, 0x17
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.00507300

Function at 0x508540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50865a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x58f0762d64c36c00
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1a5f4c25f96b101e
mov qword [rsp + 0x23], rdx
movabs rdx, 0x131a5f4c25f96b10
mov qword [rsp + 0x24], rdx
movabs rdx, 0x32f769e449696661
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x702171216161713
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb15100807021712
mov qword [rsp + 0x38], rdx
movabs rdx, 0x709180718000f14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13080c15180b0d0e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x81014060418070c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5085f7
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 2]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x508629
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x50864d
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 2]
cmp rsi, 0x19
jb 0x5085dd
jmp 0x508641
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044c4e0
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.004617c0
mov eax, edi
mov ecx, 0x19
call fcn.004617c0
nop
call fcn.0045f540
nop
jmp fcn.00508540
Function at 0x508680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50876a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4bc4f481756b987b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x646ea7747f4bc4f4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x906d81c3b5647261
mov qword [rsp + 0x28], rdx
movabs rdx, 0x14040b000a121006
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1007110808010b08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x612120805080107
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50870d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 6]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x50873a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x50875d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x5086f0
jmp 0x508751
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004617c0
mov eax, edi
mov ecx, 0x15
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.00508680

Function at 0x508780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50889a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x334942650e0f6b44
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc32e2721c8ea75d7
mov qword [rsp + 0x20], rdx
movabs rdx, 0x646ec32e2721c8ea
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65244b4a0dad324e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1612080307030603
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc16031517051612
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc020600130b030f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x180e030c13141802
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe140d0d0d130e0a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x508837
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xd]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x26
jge 0x508869
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x50888d
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xd]
cmp rsi, 0x1a
jb 0x50881d
jmp 0x508881
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044c4e0
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004617c0
mov eax, edi
mov ecx, 0x1a
call fcn.004617c0
nop
call fcn.0045f540
nop
jmp fcn.00508780
Function at 0x509540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50965a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x72c6454306203dcf
mov qword [rsp + 0x18], rdx
movabs rdx, 0x69370f20b30cd31d
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa4aa69370f20b30c
mov qword [rsp + 0x22], rdx
movabs rdx, 0xda5d2054ddddfd01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x18170b1719100a01
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0114080e0f1817
mov qword [rsp + 0x38], rdx
movabs rdx, 0x13120d11180405
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1501091318081909
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1903081019170806
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5095f7
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x26
jge 0x509629
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x50964d
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 0x1a
jb 0x5095dd
jmp 0x509641
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044c4e0
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004617c0
mov eax, edi
mov ecx, 0x1a
call fcn.004617c0
nop
call fcn.0045f540
nop
jmp fcn.00509540

Function at 0x50a6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50a79d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb60f5a6c6525876a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6e1553f7fbb60f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xeaeb90ff4f01f61
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10007080d0a1002
mov qword [rsp + 0x32], rdx
movabs rdx, 0x613090d100d1202
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf14051505140613
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0b121101001006
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x50a740
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x7d]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x7d]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x50a76d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x50a790
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x50a71f
jmp 0x50a784
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.0044c4e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004617c0
mov eax, edi
mov ecx, 0x16
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.0050a6a0
Function at 0x50ba80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50bb6c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6ecf06dd3e45d046
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xde6ecf06dd3e45d0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x536d69cd201e8de5
mov qword [rsp + 0x26], rdx
movabs rdx, 0x105080810010604
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90a010508081001
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10d090d010b0103
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50bb0a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x50bb3c
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50bb5f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
cmp rsi, 0x11
jb 0x50baf0
jmp 0x50bb53
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004617c0
mov eax, edi
mov ecx, 0x11
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.0050ba80

Function at 0x50c3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50c48c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x51011e694c737543
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf61b51011e694c73
mov qword [rsp + 0x20], rdx
movabs rdx, 0x49e6656ee53bf265
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10070d0708101105
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50306100c00090d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0d0808100b0608
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50c42a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 1]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x50c45c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x50c47f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 1]
cmp rsi, 0x12
jb 0x50c410
jmp 0x50c473
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004617c0
mov eax, edi
mov ecx, 0x12
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.0050c3a0
Function at 0x50d1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50d2c8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x887b73836f886f86
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xab89717a7fa66c69
mov qword [rsp + 0x26], rdx
movabs rdx, 0x648cab89717a7fa6
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8989625865645761
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd15060d0c170613
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb030c150a0c1807
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7040e0203051616
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1019000a0a15100f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x50d26b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0xc]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x50d298
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x50d2bb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x50d24e
jmp 0x50d2af
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0044c4e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004617c0
mov eax, edi
mov ecx, 0x1a
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.0050d1c0

Function at 0x50e160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50e27d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x63bdada1ed9dbeae
mov qword [rsp + 0x18], rdx
movabs rdx, 0x619ad499cad63b69
mov qword [rsp + 0x20], rdx
movabs rdx, 0x85b5619ad499cad6
mov qword [rsp + 0x22], rdx
movabs rdx, 0xdaa9a93b7a64a784
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1511131809040a04
mov qword [rsp + 0x32], rdx
movabs rdx, 0x16150b1812101511
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd19090a03061709
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3020e01180d1806
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1900050e13120c0a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x50e220
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x50e24d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x50e270
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x50e1fd
jmp 0x50e264
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044c4e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004617c0
mov eax, edi
mov ecx, 0x1a
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.0050e160
Function at 0x50e5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50e707
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xe121bc6fb5c80ccc
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd06c65c4a4745a64
mov qword [rsp + 0x27], rdx
movabs rdx, 0xd722450ac4a506d0
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2d7769d2d26dc774
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10b111110141809
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x61e03090c150517
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1013061e03090c15
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb0f1d13180f090e
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc1b0702050312
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1206101a02161e14
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x50e6a9
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x33]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x33]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x2a
jge 0x50e6d7
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x50e6fa
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1f
jb 0x50e68c
jmp 0x50e6ee
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1f
call fcn.0044c4e0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.004617c0
mov eax, edi
mov ecx, 0x1f
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.0050e5e0

Function at 0x511120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x511267
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xaf37e22d7ca06468
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x70eb30af37e22d7c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8186c33430e189c7
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7639fd0c393913fb
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x18a63a32afa2ff89
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1d1e1f09101c0c01
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1011d1e1f09101c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6181a1707140b00
mov qword [rsp + 0x48], rdx
movabs rdx, 0x101a061d070a141e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x221f180d13031b00
mov qword [rsp + 0x58], rdx
movabs rdx, 0x18101c0d1a090905
mov qword [rsp + 0x60], rdx
movabs rdx, 0x5210a0312111f02
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x511207
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x32
jge 0x511237
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x23
jae 0x51125a
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x23
jb 0x5111ea
jmp 0x51124e
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x23
call fcn.0044c4e0
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.004617c0
mov eax, edi
mov ecx, 0x23
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.00511120
Function at 0x5169a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x516a9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xbbbc7861746e7923
mov qword [rsp + 0x19], rdx
movabs rdx, 0x89f235d8db7faebb
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe0726c21da838d69
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6110c0d1016120f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0b130d09060016
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0c0d0914160e0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x900120708161216
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x516a39
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x20
jge 0x516a6b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x516a8e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
cmp rsi, 0x17
jb 0x516a1f
jmp 0x516a82
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044c4e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004617c0
mov eax, edi
mov ecx, 0x17
call fcn.004617c0
nop
nop dword [rax + rax]
call fcn.0045f540
jmp fcn.005169a0

Function at 0x517060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51715d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x69686797e77f6b73
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xde200f69686797e7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1270fd66f6648b69
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20a050304111104
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x208080d0c030c0f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4040208080d0c03
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf12100a080e0d10
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x517100
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x69]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x69]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x51712d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x517150
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x5170df
jmp 0x517144
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004617c0
mov eax, edi
mov ecx, 0x13
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.00517060
Function at 0x51bbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51bcec
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x207a1724e2d1ca30
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x9207a1724e2d1ca
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3fcfec6eeace866f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6696e01274726fc5
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6570db5cb6e4e81b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x171c1b0a10031c08
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1160016171c1b0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x208190b0c0e1a1d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b0f0b150f041e1a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x302060b110f0511
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x51bc86
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x79]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x51bcbc
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x21
jae 0x51bcdf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x79]
cmp rsi, 0x21
jb 0x51bc6c
jmp 0x51bcd3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
call fcn.0044c4e0
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.004617c0
mov eax, edi
mov ecx, 0x21
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.0051bbc0

Function at 0x51bd00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51be08
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2b0a4f6ec90f0869
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x196f70f2f8373144
mov qword [rsp + 0x25], rdx
movabs rdx, 0x31196f70f2f83731
mov qword [rsp + 0x26], rdx
movabs rdx, 0x781674754dc3662e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70106130b0c0307
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc02080f0a0b1708
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc060c02080f0a0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x107080509091310
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x51bdab
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x48]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x48]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x51bdd8
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x51bdfb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x51bd8e
jmp 0x51bdef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044c4e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004617c0
mov eax, edi
mov ecx, 0x19
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.0051bd00
Function at 0x51d900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51da08
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x9320986f3dc0f78a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xbf6e2064658b6fad
mov qword [rsp + 0x40], rdx
movabs rdx, 0x87a6986b99909274
mov qword [rsp + 0x48], rdx
movabs rdx, 0x826fb574a965c76e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d02170117190012
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1f1d020f16161d08
mov qword [rsp + 0x20], rdx
movabs rdx, 0x716030311111702
mov qword [rsp + 0x28], rdx
movabs rdx, 0x151b1b0a13020105
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51d9ab
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 - 9]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 - 9]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
cmp rax, 0x20
jge 0x51d9d8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x51d9fb
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x20
jb 0x51d98e
jmp 0x51d9ef
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x20
call fcn.0044c4e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.004617c0
mov eax, edi
mov ecx, 0x20
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.0051d900

Function at 0x51dd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51de48
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x9320986f3dc0f78a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xbf6e2064658b6fad
mov qword [rsp + 0x40], rdx
movabs rdx, 0x87a6986b99909274
mov qword [rsp + 0x48], rdx
movabs rdx, 0x826fb574a965c76e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d02170117190012
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1f1d020f16161d08
mov qword [rsp + 0x20], rdx
movabs rdx, 0x716030311111702
mov qword [rsp + 0x28], rdx
movabs rdx, 0x151b1b0a13020105
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51ddeb
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 - 9]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 - 9]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
cmp rax, 0x20
jge 0x51de18
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x51de3b
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x20
jb 0x51ddce
jmp 0x51de2f
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x20
call fcn.0044c4e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.004617c0
mov eax, edi
mov ecx, 0x20
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.0051dd40