joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5014e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5015db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x838570945f895c50
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7b5f867460206975
mov qword [rsp + 0x40], rdx
movabs rdx, 0x548b8854204f7047
mov qword [rsp + 0x48], rdx
movabs rdx, 0x71515170716040d
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc06050210090911
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50d120b0308050f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x511021111010e15
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x501579
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x29]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x20
jge 0x5015ab
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x5015ce
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x29]
cmp rsi, 0x18
jb 0x50155f
jmp 0x5015c2
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00444ae0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456860
mov eax, edi
mov ecx, 0x18
call fcn.00456860
nop
nop dword [rax + rax]
call fcn.00454580
jmp fcn.005014e0

Function at 0x507960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x507a4a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xfb6e05290567614d
mov qword [rsp + 0x33], rdx
movabs rdx, 0xd906123c6fb6e05
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65da67c8206472bb
mov qword [rsp + 0x40], rdx
movabs rdx, 0x404070d120d0814
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc080c0b12111204
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc14091203051309
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x5079ed
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x18
jge 0x507a1a
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x507a3d
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x5079d0
jmp 0x507a31
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456860
mov eax, edi
mov ecx, 0x15
call fcn.00456860
nop
call fcn.00454580
jmp fcn.00507960
Function at 0x50a140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50a22a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd87d6d7170255c54
mov qword [rsp + 0x34], rdx
movabs rdx, 0x7d6e6e83d87d6d71
mov qword [rsp + 0x38], rdx
movabs rdx, 0x786dae5420846695
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70106020d0e0807
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80d050409010701
mov qword [rsp + 0x24], rdx
movabs rdx, 0x130c130d13110b02
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x50a1cd
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x16
jge 0x50a1fa
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x50a21d
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x50a1b0
jmp 0x50a211
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456860
mov eax, edi
mov ecx, 0x14
call fcn.00456860
nop
call fcn.00454580
jmp fcn.0050a140

Function at 0x50a660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50a74a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3f4bd64deadaac49
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe46e3f4bd64deada
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf36d4754cf0a728e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0d02010f050609
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc0704020a0d0201
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x31104070902050c
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x50a6ed
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 - 0x61]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 - 0x61]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x14
jge 0x50a71a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x50a73d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x50a6d0
jmp 0x50a731
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00444ae0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456860
mov eax, edi
mov ecx, 0x12
call fcn.00456860
nop
call fcn.00454580
jmp fcn.0050a660
Function at 0x50aea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50af8a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x453252f2f2b3320
mov qword [rsp + 0x35], rdx
movabs rdx, 0x6434610453252f2f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xfdb56a9a203a2607
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40b0b101104020c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x50409030f040b07
mov qword [rsp + 0x25], rdx
movabs rdx, 0x100b0d010f001201
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x50af2d
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x55]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x55]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x18
jge 0x50af5a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x50af7d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x50af10
jmp 0x50af71
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456860
mov eax, edi
mov ecx, 0x13
call fcn.00456860
nop
call fcn.00454580
jmp fcn.0050aea0

Function at 0x50b0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50b1dd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xbdaa729974a5b0fc
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xfb139220b32b7501
mov qword [rsp + 0x46], rdx
movabs rdx, 0xfde2fb139220b32b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e0499c8c09ef4f0
mov qword [rsp + 0x50], rdx
movabs rdx, 0x180111021301100b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x404171418011102
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe1608000f0b0a08
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1908020a000d1200
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7080b0115021606
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x50b180
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 - 0x2a]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x50b1ad
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x50b1d0
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x50b15d
jmp 0x50b1c4
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00444ae0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456860
mov eax, edi
mov ecx, 0x1a
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.0050b0c0
Function at 0x50c800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50c90c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb3747354b8b3f987
mov qword [rsp + 0x36], rdx
movabs rdx, 0x64e1dea56169e261
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa66564e1dea56169
mov qword [rsp + 0x40], rdx
movabs rdx, 0xebb2ab02fe6477a9
mov qword [rsp + 0x48], rdx
movabs rdx, 0x150d19150d030104
mov qword [rsp + 0x18], rdx
movabs rdx, 0x709100216111301
mov qword [rsp + 0x20], rdx
movabs rdx, 0x712120e19040709
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0f000318131117
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x50c8a8
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1e
jge 0x50c8dc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x50c8ff
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 0x1a
jb 0x50c88e
jmp 0x50c8f3
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.00444ae0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456860
mov eax, edi
mov ecx, 0x1a
call fcn.00456860
nop
call fcn.00454580
jmp fcn.0050c800

Function at 0x50e9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50eafa
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x206a67705c7a8243
mov qword [rsp + 0x44], rdx
movabs rdx, 0x532059636f63756a
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x81917aa753205963
mov qword [rsp + 0x50], rdx
movabs rdx, 0x683d746f485e632b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1012081713040814
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x161a0218190c1012
mov qword [rsp + 0x24], rdx
movabs rdx, 0x50a121104011b18
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x816061503191211
mov qword [rsp + 0x34], rdx
movabs rdx, 0x16110d1a060a0c03
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x50ea97
movzx r9d, byte [rsp + rsi + 0x44]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x25]
mov byte [rsp + rdi + 0x44], dl
mov byte [rsp + rsi + 0x44], r8b
add rax, 2
cmp rax, 0x26
jge 0x50eac9
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x50eaed
movzx r8d, byte [rsp + rdi + 0x44]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x25]
cmp rsi, 0x1c
jb 0x50ea7d
jmp 0x50eae1
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x1c
call fcn.00444ae0
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00456860
mov eax, edi
mov ecx, 0x1c
call fcn.00456860
nop
call fcn.00454580
nop
jmp fcn.0050e9e0
Function at 0x50fa80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50fb6a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd083ae0203126df
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xec0d083ae0203126
mov qword [rsp + 0x30], rdx
movabs rdx, 0x652e691eec645161
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc08010d00060704
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5070c08010d0006
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x80f040a050206
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x50fb0d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x12
jge 0x50fb3a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50fb5d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x50faf0
jmp 0x50fb51
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00444ae0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456860
mov eax, edi
mov ecx, 0x11
call fcn.00456860
nop
call fcn.00454580
jmp fcn.0050fa80

Function at 0x5100e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5101cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x48fb63391d6d6f17
mov qword [rsp + 0x33], rdx
movabs rdx, 0x6419e436e348fb63
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8704355325cf3e61
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30704140b071311
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe0409120a100906
mov qword [rsp + 0x23], rdx
movabs rdx, 0x7081100070e110f
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x51016a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x18]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x51019c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5101bf
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x18]
cmp rsi, 0x15
jb 0x510150
jmp 0x5101b3
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456860
mov eax, edi
mov ecx, 0x15
call fcn.00456860
nop
call fcn.00454580
jmp fcn.005100e0
Function at 0x5101e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5102dd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4544610cff062152
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6d174544610cff06
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6315ff1868112065
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100203100c040e07
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc0703080c08060f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1110c0703080c08
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd02040208080402
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x510280
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x5102ad
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5102d0
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x51025f
jmp 0x5102c4
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456860
mov eax, edi
mov ecx, 0x12
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.005101e0

Function at 0x5117e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5118e8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x726193c8c6a66530
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6e61b95150646eb8
mov qword [rsp + 0x47], rdx
movabs rdx, 0x896e61b95150646e
mov qword [rsp + 0x48], rdx
movabs rdx, 0xae8b69bcc3b8b761
mov qword [rsp + 0x50], rdx
movabs rdx, 0x17080404020c0207
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb02140b18130300
mov qword [rsp + 0x27], rdx
movabs rdx, 0x100405131712180d
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1018001517070015
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x51188b
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
cmp rax, 0x20
jge 0x5118b8
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5118db
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x51186e
jmp 0x5118cf
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00444ae0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456860
mov eax, edi
mov ecx, 0x19
call fcn.00456860
nop
call fcn.00454580
jmp fcn.005117e0
Function at 0x514b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x514c5a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x652dc3cd666ddbc2
mov qword [rsp + 0x41], rdx
movabs rdx, 0xcdc8c4c8c27429bd
mov qword [rsp + 0x49], rdx
movabs rdx, 0xe5c7dbbbd07aa0cd
mov qword [rsp + 0x50], rdx
movabs rdx, 0xdd8769cb311f72b2
mov qword [rsp + 0x58], rdx
movabs rdx, 0x91d10091e160f1a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x12060e11091d1009
mov qword [rsp + 0x21], rdx
movabs rdx, 0x120001040c151d14
mov qword [rsp + 0x29], rdx
movabs rdx, 0xb19100502101708
mov qword [rsp + 0x31], rdx
movabs rdx, 0x13050b0b050d0f1b
mov qword [rsp + 0x39], rdx
xor eax, eax
jmp 0x514bf7
movzx r9d, byte [rsp + rsi + 0x41]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7f]
mov byte [rsp + rdi + 0x41], dl
mov byte [rsp + rsi + 0x41], r8b
add rax, 2
cmp rax, 0x24
jge 0x514c29
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x514c4d
movzx r8d, byte [rsp + rdi + 0x41]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7f]
cmp rsi, 0x1f
jb 0x514bdd
jmp 0x514c41
xor eax, eax
lea rbx, [rsp + 0x41]
mov ecx, 0x1f
call fcn.00444ae0
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00456860
mov eax, edi
mov ecx, 0x1f
call fcn.00456860
nop
call fcn.00454580
nop
jmp fcn.00514b40

Function at 0x519c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x519d1d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x19b9ac270d6901b8
mov qword [rsp + 0x35], rdx
movabs rdx, 0x1b2a7319b9ac270d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7b8670742b65726b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1204000b06050a01
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3060e1011050410
mov qword [rsp + 0x23], rdx
movabs rdx, 0xb0103060e101105
mov qword [rsp + 0x25], rdx
movabs rdx, 0x509000704000b07
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x519cc0
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x6e]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x6e]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x519ced
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x519d10
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x519c9f
jmp 0x519d04
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456860
mov eax, edi
mov ecx, 0x13
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.00519c20
Function at 0x51dae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51db9d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x89642169702410c9
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x27
movabs rdx, 0x2010008050205
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x705
xor eax, eax
nop
jmp 0x51db40
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x51]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x51db6d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x51db90
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x51db22
jmp 0x51db84
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456860
mov eax, edi
mov ecx, 9
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.0051dae0

Function at 0x520020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52010a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x89c616412b66547
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf01de1c089c6164
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb86511c365027064
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6070d100a0e0d10
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6060702110d0607
mov qword [rsp + 0x24], rdx
movabs rdx, 0x603090b08071307
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x5200ad
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x77]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x16
jge 0x5200da
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x5200fd
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x520090
jmp 0x5200f1
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456860
mov eax, edi
mov ecx, 0x14
call fcn.00456860
nop
call fcn.00454580
jmp fcn.00520020
Function at 0x523000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x523138
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xfd0395df997e06c
mov qword [rsp + 0x4f], rdx
movabs rdx, 0x650fd0395df997e0
mov qword [rsp + 0x50], rdx
movabs rdx, 0x51761acac3b2ddf7
mov qword [rsp + 0x58], rdx
movabs rdx, 0xcce44d657dbebb6f
mov qword [rsp + 0x60], rdx
movabs rdx, 0x5774f20d8350747a
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe140a0d01060f04
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf121d18040d0007
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1e0007051e0010
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x512131417000c04
mov qword [rsp + 0x37], rdx
movabs rdx, 0xd1c180b0c0e0209
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x70203070c071900
mov qword [rsp + 0x47], rdx
xor eax, eax
jmp 0x5230d5
movzx r9d, byte [rsp + rsi + 0x4f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x74]
mov byte [rsp + rdi + 0x4f], dl
mov byte [rsp + rsi + 0x4f], r8b
add rax, 2
cmp rax, 0x30
jge 0x523108
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x52312b
movzx r8d, byte [rsp + rdi + 0x4f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x74]
nop
cmp rsi, 0x21
jb 0x5230bb
jmp 0x52311f
xor eax, eax
lea rbx, [rsp + 0x4f]
mov ecx, 0x21
call fcn.00444ae0
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00456860
mov eax, edi
mov ecx, 0x21
call fcn.00456860
nop
call fcn.00454580
nop dword [rax]
jmp fcn.00523000

Function at 0x52a8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52a992
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7b68636199cec1e6
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x913a656cdf7b6863
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30c03080c030800
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc0701080302030c
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x52a92c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x72]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0xe
jge 0x52a95e
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x52a985
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x72]
cmp rsi, 0xd
jb 0x52a912
jmp 0x52a975
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00444ae0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00456860
mov eax, edi
mov ecx, 0xd
call fcn.00456860
nop
call fcn.00454580
jmp fcn.0052a8c0