joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ed400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed50c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7595668593738366
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x706c608747438898
mov qword [rsp + 0x46], rdx
movabs rdx, 0x696f706c60874743
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6f75846174536e8a
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf12170406031901
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80412050f0f090c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x100f0b1105040110
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60101091100120d
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4ed4a8
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x28]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x20
jge 0x4ed4dc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4ed4ff
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x28]
cmp rsi, 0x1a
jb 0x4ed48e
jmp 0x4ed4f3
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00449780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045cd80
mov eax, edi
mov ecx, 0x1a
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004ed400

Function at 0x4ef700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef7e6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe6f5caeb75c8e153
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6e5774cb696fe6f5
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa070305070c0d06
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6060a070305070c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x10a04050a050205
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x4ef780
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4ef7b2
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ef7d7
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x72]
cmp rsi, 0xe
jb 0x4ef762
jmp 0x4ef7cb
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045cd80
mov eax, edi
mov ecx, 0xe
nop
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004ef700
Function at 0x4efae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4efbb2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x746a6e616d55545a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x74735a636f405049
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2060f0f06040102
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd0201060a020800
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4efb4c
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x4efb7e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4efba5
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0x10
jb 0x4efb32
jmp 0x4efb95
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.0045cd80
mov eax, edi
mov ecx, 0x10
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004efae0

Function at 0x4f0160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0268
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf05065741e03c7bd
mov qword [rsp + 0x37], rdx
movabs rdx, 0xc2fd651cafbec7e2
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xd3c2fd651cafbec7
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2756e26269cb74c9
mov qword [rsp + 0x48], rdx
movabs rdx, 0x180a0e0911010711
mov qword [rsp + 0x19], rdx
movabs rdx, 0x17080f0c0b130e0b
mov qword [rsp + 0x21], rdx
movabs rdx, 0x816010a02031708
mov qword [rsp + 0x27], rdx
movabs rdx, 0xa130f0203001009
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4f020b
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x41]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x41]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1e
jge 0x4f0238
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f025b
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x4f01ee
jmp 0x4f024f
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00449780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045cd80
mov eax, edi
mov ecx, 0x19
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004f0160
Function at 0x4f0a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0af2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6e184365fc0d7284
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1d28c36f736e1843
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc03060200020c0b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x20b0c00060a0c03
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4f0a8c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x68]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0xe
jge 0x4f0abe
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4f0ae5
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x68]
cmp rsi, 0xd
jb 0x4f0a72
jmp 0x4f0ad5
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.0045cd80
mov eax, edi
mov ecx, 0xd
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004f0a20

Function at 0x4f3f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f3fcc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa36feef0bafeb13e
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x7465fda3
movabs rdx, 0x201050308010004
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x103000703040201
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4f3f65
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4f3f9c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4f3fbf
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 0xb
jb 0x4f3f4b
jmp 0x4f3fb3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045cd80
mov eax, edi
mov ecx, 0xb
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004f3f00
Function at 0x4f7de0
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7eaa
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0
call fcn.004038a0
xorps xmm15, xmm15
mov r14, qword [0x00721c80]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
jne 0x4f7e8f
mov rcx, qword [rsp + 0x60]
lea rdx, [rcx + 1]
mov qword [rsp + 0x40], rdx
lea rax, [0x00597a60]
xor ebx, ebx
mov rcx, rdx
call fcn.004462a0
mov rbx, qword [rsp + 0x60]
mov rcx, rax
xor edi, edi
mov rsi, qword [rsp + 0x40]
mov rax, qword [rsp + 0x58]
nop dword [rax]
call fcn.004f8d00
inc rbx
cmp rcx, rbx
jae 0x4f7e7e
mov edi, 1
lea rsi, [0x00597a60]
call fcn.00446380
mov word [rax + rbx*2 - 2], 0
xor edi, edi
xor esi, esi
add rsp, 0x48
pop rbp
ret
xor eax, eax
xor ebx, ebx
mov rcx, rbx
lea rdi, [0x005ecd18]
lea rsi, [0x005ec8a0]
add rsp, 0x48
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.0045aaa0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.004f7de0

Function at 0x4fc320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc3f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x742022ef6cda2c72
mov qword [rsp + 0x29], rdx
movabs rdx, 0xaf0925db6c286f74
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50c01040d0e000d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x102020b020e0d09
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x4fc38c
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x4fc3be
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4fc3e5
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0xf
jb 0x4fc372
jmp 0x4fc3d5
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.0045cd80
mov eax, edi
mov ecx, 0xf
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004fc320
Function at 0x4fda40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fdb4c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x74136570b4d518e2
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x761974656b20c40b
mov qword [rsp + 0x47], rdx
movabs rdx, 0xdd761974656b20c4
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11cf9274cd9d172e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1106181209140d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x100216101113170e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x20d16031114170d
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1012020201160811
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4fdae8
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x20
jge 0x4fdb1c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4fdb3f
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0x19
jb 0x4fdace
jmp 0x4fdb33
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00449780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045cd80
mov eax, edi
mov ecx, 0x19
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004fda40

Function at 0x4fe5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fe6c6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc8bcd065de3fee68
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x57d794b043c8bcd0
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa05010b00010701
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5030a05010b0001
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6020008000309
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x4fe660
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x80]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4fe692
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4fe6b7
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x80]
cmp rsi, 0xd
jb 0x4fe642
jmp 0x4fe6ab
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
nop
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045cd80
mov eax, edi
mov ecx, 0xd
nop
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004fe5e0
Function at 0x4fe6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fe7ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x75655f654476796c
mov qword [rsp + 0x29], rdx
movabs rdx, 0x826575616d756775
mov qword [rsp + 0x30], rdx
movabs rdx, 0x905020b0b08070a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x70e0b010a000a07
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x4fe74f
movzx r9d, byte [rsp + rsi + 0x29]
sub r9d, edx
lea edx, [r9 + 9]
mov byte [rsp + rdi + 0x29], dl
lea edx, [r8 + 9]
mov byte [rsp + rsi + 0x29], dl
add rax, 2
cmp rax, 0x10
jge 0x4fe77c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4fe79f
movzx r8d, byte [rsp + rdi + 0x29]
sub r8d, edx
cmp rsi, 0xf
jb 0x4fe732
jmp 0x4fe793
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045cd80
mov eax, edi
mov ecx, 0xf
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004fe6e0

Function at 0x5029e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x502acc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7453cb6ec9642a53
mov qword [rsp + 0x35], rdx
movabs rdx, 0xd46e427453cb6ec9
mov qword [rsp + 0x38], rdx
movabs rdx, 0x56d3cfd75e0a26fc
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0c010c030c0d03
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x811110d0e03120f
mov qword [rsp + 0x25], rdx
movabs rdx, 0xf0503110a100f0b
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x502a6a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x69]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x18
jge 0x502a9c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x502abf
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x69]
cmp rsi, 0x13
jb 0x502a50
jmp 0x502ab3
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00449780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045cd80
mov eax, edi
mov ecx, 0x13
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.005029e0
Function at 0x503040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50313d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6a53666c206f6f59
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x2b7b5e5253206a53
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6573807a84786254
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110d0b000f120a10
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x140412000e0e0405
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1305121014041200
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7010a0c0d010406
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x5030e0
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x50310d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x503130
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x5030bf
jmp 0x503124
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00449780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045cd80
mov eax, edi
mov ecx, 0x16
call fcn.0045cd80
nop
nop dword [rax]
call fcn.0045aaa0
jmp fcn.00503040

Function at 0x503420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50351d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x12ba1a6f69c7514a
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xd01efebe1112ba1a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb76dc9df20cb72e9
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8040a00140d010d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5120b051408090a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x4140a060a070512
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xb110c0201000f09
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x5034c0
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 - 0x3b]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 - 0x3b]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x5034ed
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x503510
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x50349f
jmp 0x503504
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00449780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045cd80
mov eax, edi
mov ecx, 0x15
call fcn.0045cd80
nop
nop dword [rax]
call fcn.0045aaa0
jmp fcn.00503420
Function at 0x504dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x504eaa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xac69eca9b2aa7241
mov qword [rsp + 0x31], rdx
movabs rdx, 0x486ebca953a6a5ac
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65b3b12fa56453fc
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0e0e1312101505
mov qword [rsp + 0x19], rdx
movabs rdx, 0x403080e0e130702
mov qword [rsp + 0x21], rdx
movabs rdx, 0x90214150c0b0f09
mov qword [rsp + 0x29], rdx
xor eax, eax
jmp 0x504e4d
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 - 0x2f]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 - 0x2f]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
cmp rax, 0x18
jge 0x504e7a
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x504e9d
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0x17
jb 0x504e30
jmp 0x504e91
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.00449780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045cd80
mov eax, edi
mov ecx, 0x17
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00504dc0

Function at 0x506620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50672c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x639c20a59d72a74d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xabcfbba461b32033
mov qword [rsp + 0x42], rdx
movabs rdx, 0x646ea7bdf9b4abcf
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2da8b38981a58401
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa1716121c11061a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x18071b0107101d10
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc12041c120e1c08
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x190004040d0f0313
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x5066c8
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x20
jge 0x5066fc
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x50671f
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
cmp rsi, 0x1e
jb 0x5066ae
jmp 0x506713
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.00449780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045cd80
mov eax, edi
mov ecx, 0x1e
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00506620
Function at 0x509660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x509787
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xeba99887495ec8e
mov qword [rsp + 0x4a], rdx
movabs rdx, 0xafe4a464570197ba
mov qword [rsp + 0x52], rdx
movabs rdx, 0x6a65b669a862afe4
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc3a563c9f86fb501
mov qword [rsp + 0x60], rdx
movabs rdx, 0x60e080b09160b0a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x170e00010405091a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x111a110a170e0001
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x21d161019060b0d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1c081d19060f0715
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x9131a18151915
mov qword [rsp + 0x42], rdx
xor eax, eax
jmp 0x509729
movzx r9d, byte [rsp + rsi + 0x4a]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x4a], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x4a], dl
add rax, 2
cmp rax, 0x2c
jge 0x509757
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x50977a
movzx r8d, byte [rsp + rdi + 0x4a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x50970c
jmp 0x50976e
xor eax, eax
lea rbx, [rsp + 0x4a]
mov ecx, 0x1e
call fcn.00449780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045cd80
mov eax, edi
mov ecx, 0x1e
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.00509660

Function at 0x50c860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50c947
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2f61483b16295253
mov qword [rsp + 0x33], rdx
movabs rdx, 0x61295074fd2f6148
mov qword [rsp + 0x38], rdx
movabs rdx, 0xfe6d2b5420617261
mov qword [rsp + 0x40], rdx
movabs rdx, 0x308020303120c0f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2140a0500000308
mov qword [rsp + 0x23], rdx
movabs rdx, 0x40b0112080703
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x50c8e6
movzx r9d, byte [rsp + rsi + 0x33]
add edx, r9d
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x50c917
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x15
jae 0x50c93a
movzx r8d, byte [rsp + rdi + 0x33]
add r8d, edx
cmp rsi, 0x15
jb 0x50c8d0
jmp 0x50c92e
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00449780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045cd80
mov eax, edi
mov ecx, 0x15
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0050c860
Function at 0x50d0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50d1cc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa26e651c75646931
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6e61cb53c3b92156
mov qword [rsp + 0x47], rdx
movabs rdx, 0xbd6e61cb53c3b921
mov qword [rsp + 0x48], rdx
movabs rdx, 0xdbee6d797bef0b0
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3151718060d18
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x309160d0b041200
mov qword [rsp + 0x27], rdx
movabs rdx, 0x131300070a031810
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x14080b091012110d
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x50d168
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x20
jge 0x50d19c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x50d1bf
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
cmp rsi, 0x19
jb 0x50d14e
jmp 0x50d1b3
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00449780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045cd80
mov eax, edi
mov ecx, 0x19
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0050d0c0

Function at 0x50dda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50deac
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x651eeb6c2096e142
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa6ef9609ba973a8
mov qword [rsp + 0x48], rdx
movabs rdx, 0x97db6d5ebc0af461
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1502090c13161509
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb171502090c1316
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2090c060f160308
mov qword [rsp + 0x28], rdx
movabs rdx, 0x17031202090a1409
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11409110b05150d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50de48
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x22
jge 0x50de7c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x50de9f
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0x18
jb 0x50de2e
jmp 0x50de93
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.00449780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045cd80
mov eax, edi
mov ecx, 0x18
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.0050dda0