joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4db220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4db2fd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6520c146196ebe33
mov qword [rsp + 0x18], rdx
movabs rdx, 0x230a1ae650726520
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa040a0b05000b01
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0a040a0b0500
mov qword [rsp + 0x28], rdx
movabs rdx, 0x904010b03000b03
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4db2a0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x3d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x3d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4db2cd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4db2f0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4db282
jmp 0x4db2e4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044c4e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004617c0
mov eax, edi
mov ecx, 0xe
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.004db220

Function at 0x4e5e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5ebe
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6970613c637e7673
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x726c646f
movabs rdx, 0x8030002030b01
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x804030b
xor eax, eax
jmp 0x4e5e61
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x4e5e8e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4e5eb1
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x4e5e44
jmp 0x4e5ea5
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0044c4e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004617c0
mov eax, edi
mov ecx, 0xc
call fcn.004617c0
nop
nop
call fcn.0045f540
jmp fcn.004e5e00

Function at 0x4e6660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e672c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd1bf32339b325f92
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xccd9
movabs rdx, 0x707030006010308
mov qword [rsp + 0x22], rdx
movabs rdx, 0x909010709090707
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4e66c4
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4e66fc
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4e671f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0xa
jb 0x4e66aa
jmp 0x4e6713
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044c4e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004617c0
mov eax, edi
mov ecx, 0xa
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004e6660
Function at 0x4eac40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ead07
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x466b632227e23657
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x3a5b
movabs rdx, 0x709090104010201
mov qword [rsp + 0x22], rdx
movabs rdx, 0x807030202040709
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4eaca7
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4eacd7
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4eacfa
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4eac8a
jmp 0x4eacee
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044c4e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004617c0
mov eax, edi
mov ecx, 0xa
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004eac40

Function at 0x4f14e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f15a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfd33120e615606aa
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xab6964fc
movabs rdx, 0x40b000a08010201
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4040a050007040b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f1548
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x73]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x73]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4f1577
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4f159a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4f152b
jmp 0x4f158e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044c4e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004617c0
mov eax, edi
mov ecx, 0xc
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004f14e0
Function at 0x4f1d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1e4a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4d641e6f01cfa692
mov qword [rsp + 0x19], rdx
movabs rdx, 0x64d641e6f01cfa6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x779a6e6966075381
mov qword [rsp + 0x22], rdx
movabs rdx, 0x100b10030f0900
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf0f0b0c08010010
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc10020b0105050b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f1ded
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x4f1e1a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4f1e3d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x4f1dd0
jmp 0x4f1e31
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004617c0
mov eax, edi
mov ecx, 0x11
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004f1d60

Function at 0x4f3e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f3efd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xfe64b6346e0e6557
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xda
movabs rdx, 0x704020504080804
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2020802
xor eax, eax
nop
jmp 0x4f3ea0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x70]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x70]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4f3ecd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4f3ef0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4f3e82
jmp 0x4f3ee4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044c4e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004617c0
mov eax, edi
mov ecx, 9
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.004f3e40
Function at 0x4fbda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fbe9b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa153458b8deb759d
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc96061a153458b8d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xbfa86996998ae161
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9070a120905090e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x121211040f07020f
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf0c0d0312121104
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa070f110f0f0400
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fbe39
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x47]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4fbe6b
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4fbe8e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x47]
cmp rsi, 0x13
jb 0x4fbe1f
jmp 0x4fbe82
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004617c0
mov eax, edi
mov ecx, 0x13
call fcn.004617c0
nop
nop dword [rax + rax]
call fcn.0045f540
jmp fcn.004fbda0

Function at 0x4fbec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fbfdd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xb7dc031ec3e5d057
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x63a2721c32c76c61
mov qword [rsp + 0x23], rdx
movabs rdx, 0xdebf7cf9cfb56163
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x656d6954b84b7912
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1505021819190e1a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x60a180116131505
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70416160c121911
mov qword [rsp + 0x48], rdx
movabs rdx, 0x141115170b150b17
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3120a1317070a1a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4fbf80
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x3b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x3b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4fbfad
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4fbfd0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1f
jb 0x4fbf5d
jmp 0x4fbfc4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1f
call fcn.0044c4e0
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.004617c0
mov eax, edi
mov ecx, 0x1f
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.004fbec0
Function at 0x4fc6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc7db
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x359706869f95d6f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x646b311b4b035970
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3c6d69544156585c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8140101140a050b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0a020009141002
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe040d0a02000914
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140010070d010f06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fc779
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x10]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4fc7ab
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4fc7ce
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x10]
cmp rsi, 0x15
jb 0x4fc75f
jmp 0x4fc7c2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004617c0
mov eax, edi
mov ecx, 0x15
call fcn.004617c0
nop
nop dword [rax + rax]
call fcn.0045f540
jmp fcn.004fc6e0

Function at 0x4fd3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fd4bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1069636150e660f5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x646eae74df203ca0
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe4e4f2f4c1641bc8
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1014071400111509
mov qword [rsp + 0x34], rdx
movabs rdx, 0x8170d1615131402
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd0b001308170d16
mov qword [rsp + 0x40], rdx
movabs rdx, 0x907110813010d14
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fd459
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x68]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4fd48b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4fd4ae
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x68]
cmp rsi, 0x18
jb 0x4fd43f
jmp 0x4fd4a2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.0044c4e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004617c0
mov eax, edi
mov ecx, 0x18
call fcn.004617c0
nop
nop dword [rax + rax]
call fcn.0045f540
jmp fcn.004fd3c0
Function at 0x500880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50096c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x100e205cd069be1a
mov qword [rsp + 0x19], rdx
movabs rdx, 0xfd6ec2100e205cd0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc10f692721200901
mov qword [rsp + 0x24], rdx
movabs rdx, 0x12071203000b0e08
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1104011112071203
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe110a060c0f030d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50090a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3a]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x50093c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x50095f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3a]
cmp rsi, 0x13
jb 0x5008f0
jmp 0x500953
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004617c0
mov eax, edi
mov ecx, 0x13
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.00500880

Function at 0x503a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x503afb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x203e6121626f7267
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x383c7f5408203e61
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4452693d47646e36
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2000d04080a0614
mov qword [rsp + 0x32], rdx
movabs rdx, 0x111308090d110b00
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x4130e0e10131113
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60d14130c140a10
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x503a99
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x503acb
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x503aee
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
cmp rsi, 0x15
jb 0x503a7f
jmp 0x503ae2
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044c4e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004617c0
mov eax, edi
mov ecx, 0x15
call fcn.004617c0
nop
nop dword [rax + rax]
call fcn.0045f540
jmp fcn.00503a00
Function at 0x503b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x503c0a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6eb64220feb1ca87
mov qword [rsp + 0x19], rdx
movabs rdx, 0x256e61690e501c6e
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb56d1c54c7641efb
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2141601100b090b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x12160801030e10
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0f0a0612090014
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x503bad
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x73]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x73]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x503bda
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x503bfd
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x503b90
jmp 0x503bf1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004617c0
mov eax, edi
mov ecx, 0x17
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.00503b20

Function at 0x5040a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50418a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x766f5559b66f7378
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x646e8fb1766f5559
mov qword [rsp + 0x20], rdx
movabs rdx, 0x934e9f3b7464e387
mov qword [rsp + 0x28], rdx
movabs rdx, 0x61007040c110702
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf090d0c080c0500
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd130c13120f0f03
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50412d
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x50415a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x50417d
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x504110
jmp 0x504171
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004617c0
mov eax, edi
mov ecx, 0x14
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.005040a0
Function at 0x504600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5046ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xcfc75c5556ea8ce2
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd9f0d0cfc75c5556
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6f120bd6e6f48a9
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf1103000c070104
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8040601020507
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12090b060409070a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50468d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x5046ba
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x5046dd
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x504670
jmp 0x5046d1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004617c0
mov eax, edi
mov ecx, 0x13
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.00504600

Function at 0x5062e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5063ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x53dae820d06172be
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x64b053dae820d061
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd2a2d254ef4a72f7
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3070c0c0008100d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc08111103070c0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa060f0506030c03
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50636d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x50639a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5063bd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x506350
jmp 0x5063b1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004617c0
mov eax, edi
mov ecx, 0x12
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.005062e0
Function at 0x5063e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5064dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb2f78e0be66b617d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x64f2e39d5304b2f7
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4481697e083d72fe
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa1115051014040b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x12000c06030b1408
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1200080712000c06
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10030e1511050e07
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x506480
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x73]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x5064ad
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x5064d0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x16
jb 0x50645f
jmp 0x5064c4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.0044c4e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004617c0
mov eax, edi
mov ecx, 0x16
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.005063e0

Function at 0x506e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x506f4c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe6d9fc69ba3575a7
mov qword [rsp + 0x19], rdx
movabs rdx, 0xfe6da7e6d9fc69ba
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe083e5d597757fea
mov qword [rsp + 0x24], rdx
movabs rdx, 0x100e0c0b030d0311
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x812020a100e0c0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf070b0a00060305
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x506eea
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x65]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x506f1c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x506f3f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x65]
cmp rsi, 0x13
jb 0x506ed0
jmp 0x506f33
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004617c0
mov eax, edi
mov ecx, 0x13
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.00506e60