joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4fd6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fd7bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e61a52084946a57
mov qword [rsp + 0x39], rdx
movabs rdx, 0x8178508d6320946e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x67759b982064727b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10a08080b161608
mov qword [rsp + 0x19], rdx
movabs rdx, 0x30f02130b0a0b14
mov qword [rsp + 0x21], rdx
movabs rdx, 0x150a050d0e05020f
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1613130e160f050c
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4fd760
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x13]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x13]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4fd78d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4fd7b0
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4fd73f
jmp 0x4fd7a4
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456420
mov eax, edi
mov ecx, 0x17
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004fd6c0

Function at 0x4ff5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ff69b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x206ea3ac0a98aee0
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xc0b728c9cc206ea3
mov qword [rsp + 0x40], rdx
movabs rdx, 0xbab50aac20f3a661
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc110c020903090a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x91212080b080511
mov qword [rsp + 0x25], rdx
movabs rdx, 0x13000e0809130912
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x4010513040f1414
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4ff639
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6b]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4ff66b
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ff68e
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6b]
cmp rsi, 0x15
jb 0x4ff61f
jmp 0x4ff682
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456420
mov eax, edi
mov ecx, 0x15
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.004ff5a0
Function at 0x500200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50031a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7cf25f6c744fec9d
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6e6158dc0202f772
mov qword [rsp + 0x47], rdx
movabs rdx, 0xcf6e6158dc0202f7
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd6bde8b21909fbef
mov qword [rsp + 0x50], rdx
movabs rdx, 0x16040d0b04071312
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x20916040d0b0407
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x500001407101111
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1180a0607060017
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xb1815060c091406
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x5002b7
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x22
jge 0x5002e9
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x50030d
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0x19
jb 0x50029d
jmp 0x500301
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456420
mov eax, edi
mov ecx, 0x19
call fcn.00456420
nop
call fcn.00454140
nop
jmp fcn.00500200

Function at 0x500d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x500e4a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x745820cde4e3e443
mov qword [rsp + 0x35], rdx
movabs rdx, 0xe56e37745820cde4
mov qword [rsp + 0x38], rdx
movabs rdx, 0xfe6d69d520e269d0
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120c0b0803060304
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x40a010a0b0f120c
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa030202040d0612
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x500ded
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jge 0x500e1a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x500e3d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x500dd0
jmp 0x500e31
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456420
mov eax, edi
mov ecx, 0x13
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00500d60
Function at 0x505100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50521a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x73755d8105cda903
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xacb26169a7f41b74
mov qword [rsp + 0x44], rdx
movabs rdx, 0xf1a361b9acb26169
mov qword [rsp + 0x48], rdx
movabs rdx, 0x655812549f64e010
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1403120e14040f12
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe10050e1403120e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1912090b101a020b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x150f0a1305170219
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10020510040501
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x5051b7
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x24
jge 0x5051e9
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x50520d
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
cmp rsi, 0x1c
jb 0x50519d
jmp 0x505201
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00456420
mov eax, edi
mov ecx, 0x1c
call fcn.00456420
nop
call fcn.00454140
nop
jmp fcn.00505100

Function at 0x5060e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5061dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1856e6108172954
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x649a61e51ad20185
mov qword [rsp + 0x40], rdx
movabs rdx, 0x51d6699e3509d619
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140f10090a14150c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa03080803120614
mov qword [rsp + 0x24], rdx
movabs rdx, 0x140715080e0c0a03
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe1102010707140a
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x506180
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 + 0x67]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 + 0x67]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x5061ad
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5061d0
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x50615f
jmp 0x5061c4
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456420
mov eax, edi
mov ecx, 0x16
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.005060e0
Function at 0x508840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50892c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x323874533424e42a
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xdf323874533424e4
mov qword [rsp + 0x30], rdx
movabs rdx, 0x65483eed41354300
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc09030d0103080d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x60b00000c09030d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe070f0a07080d02
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x5088ca
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x15]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x14
jge 0x5088fc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50891f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x15]
cmp rsi, 0x11
jb 0x5088b0
jmp 0x508913
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456420
mov eax, edi
mov ecx, 0x11
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00508840

Function at 0x508c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508d2c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x201d61e8732b7552
mov qword [rsp + 0x33], rdx
movabs rdx, 0x282e367453201d61
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf2e8335ff83a7b36
mov qword [rsp + 0x40], rdx
movabs rdx, 0x411130c0a0d120b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe11020f14100411
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1406040c04110411
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x508cca
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x508cfc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x508d1f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
cmp rsi, 0x15
jb 0x508cb0
jmp 0x508d13
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456420
mov eax, edi
mov ecx, 0x15
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00508c40
Function at 0x508d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508e3d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x92e1b2edef63c52
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x64d2ffd353092e1b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf7374754203ae835
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40b0d0b0d120906
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x21304140d0a0605
mov qword [rsp + 0x27], rdx
movabs rdx, 0x113130302130414
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x140d0e01040f070e
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x508de0
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 + 0x55]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 + 0x55]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x508e0d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x508e30
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x508dbf
jmp 0x508e24
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456420
mov eax, edi
mov ecx, 0x15
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.00508d40

Function at 0x509e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x509f9a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x20363f1b7461b417
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x4f73c26e616cea72
mov qword [rsp + 0x43], rdx
movabs rdx, 0xf36e6174204f73c2
mov qword [rsp + 0x48], rdx
movabs rdx, 0x654988ea20377263
mov qword [rsp + 0x50], rdx
movabs rdx, 0x151a1410170506
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1b0000151a141017
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x50d101505140404
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1b011a000906000f
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xf0804171a061906
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x509f37
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x22
jge 0x509f69
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x509f8d
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x1d
jb 0x509f1d
jmp 0x509f81
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00456420
mov eax, edi
mov ecx, 0x1d
call fcn.00456420
nop
call fcn.00454140
nop
jmp fcn.00509e80
Function at 0x50a5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50a6bd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xd3a5615c74e35a25
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xd16488f96963e429
mov qword [rsp + 0x43], rdx
movabs rdx, 0xe557619772d16488
mov qword [rsp + 0x48], rdx
movabs rdx, 0xee6d726aebd1e0dd
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1708131515060600
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1c04170813151506
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe131c0901070f0d
mov qword [rsp + 0x23], rdx
movabs rdx, 0x19021a1013141811
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x15160c1a07170210
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x50a660
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x50a68d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x50a6b0
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x50a63d
jmp 0x50a6a4
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00456420
mov eax, edi
mov ecx, 0x1d
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.0050a5a0

Function at 0x513d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x513dfd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x698b8570af888e79
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6b696978698b8570
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa297642e6c8a9869
mov qword [rsp + 0x40], rdx
movabs rdx, 0x608031212020b0f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe12000709010813
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9020e1200070901
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9050e02090d0802
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x513da0
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0xc]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x513dcd
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x513df0
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x513d7f
jmp 0x513de4
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456420
mov eax, edi
mov ecx, 0x14
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.00513d00
Function at 0x513e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x513ee6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69d399996caca469
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8b6cdd9d
movabs rdx, 0x8060b0602010509
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0xb0b0504
xor eax, eax
jmp 0x513e80
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x41]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x513eb2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x513ed7
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x41]
cmp rsi, 0xc
jb 0x513e64
jmp 0x513ecb
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456420
mov eax, edi
mov ecx, 0xc
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00513e20

Function at 0x513f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x513fd8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x326f16826ec30c6b
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x25b6462e
movabs rdx, 0x602020b0406090b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x10a0602020b0406
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x40502020405090a
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x513f74
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x12
jge 0x513fa8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x513fcb
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
nop
cmp rsi, 0xc
jb 0x513f5a
jmp 0x513fbf
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456420
mov eax, edi
mov ecx, 0xc
call fcn.00456420
nop
call fcn.00454140
nop dword [rax]
jmp fcn.00513f00
Function at 0x514260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51432c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2e12315a3e3a73e3
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x176c642e
movabs rdx, 0xa04030206000504
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x402060302000600
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x5142c5
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x13]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x5142fc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x51431f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x13]
cmp rsi, 0xb
jb 0x5142ab
jmp 0x514313
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456420
mov eax, edi
mov ecx, 0xb
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00514260

Function at 0x5159e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x515ac6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa2931473942012a
mov qword [rsp + 0x31], rdx
movabs rdx, 0x6e2e2e6ffe2dda0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60401070000080a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x70d020106040107
mov qword [rsp + 0x21], rdx
movabs rdx, 0x30308090c050a08
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x515a60
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x23]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x515a92
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x515ab7
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x23]
cmp rsi, 0xf
jb 0x515a42
jmp 0x515aab
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456420
mov eax, edi
mov ecx, 0xf
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.005159e0
Function at 0x515ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x515bcc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xcbf153d2a95f5761
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xdb76cbf153d2a95f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xcdcc54bfe5536563
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1106090201060004
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3030f090e031106
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x710070e040d0903
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x515b6a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x16
jge 0x515b9c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x515bbf
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0x12
jb 0x515b50
jmp 0x515bb3
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456420
mov eax, edi
mov ecx, 0x12
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00515ae0

Function at 0x516060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51615d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8a6580bb99746553
mov qword [rsp + 0x35], rdx
movabs rdx, 0x4886658a6580bb99
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb98ca78f7c847f6f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12110f12080a0503
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5100e0f070e040e
mov qword [rsp + 0x23], rdx
movabs rdx, 0xe1205100e0f070e
mov qword [rsp + 0x25], rdx
movabs rdx, 0x3100c0d05090703
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x516100
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 5]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 5]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x51612d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x516150
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x5160df
jmp 0x516144
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456420
mov eax, edi
mov ecx, 0x13
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.00516060
Function at 0x516180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x516247
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6c73bea0b76fa450
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xa76e726c
movabs rdx, 0x40a050a05070507
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x50a0a030105040a
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x5161e8
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x75]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x75]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x516217
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x51623a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x5161cb
jmp 0x51622e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456420
mov eax, edi
mov ecx, 0xb
call fcn.00456420
nop
call fcn.00454140
jmp fcn.00516180

Function at 0x5170a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5171a8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x604c654724746570
mov qword [rsp + 0x37], rdx
movabs rdx, 0x6549804e23615450
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x476549804e236154
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71656c756e4c4879
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1505030415100b15
mov qword [rsp + 0x19], rdx
movabs rdx, 0x18090d17070a1213
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa00120604031809
mov qword [rsp + 0x27], rdx
movabs rdx, 0x9070b171507000e
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x51714b
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 + 0x22]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 + 0x22]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1e
jge 0x517178
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x51719b
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x51712e
jmp 0x51718f
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456420
mov eax, edi
mov ecx, 0x19
call fcn.00456420
nop
call fcn.00454140
jmp fcn.005170a0