joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4faf00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4faffd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x20ccea72f33a657a
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe2f5d06d6120ccea
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x65e86cdd206dc261
mov qword [rsp + 0x26], rdx
movabs rdx, 0x912130c0806110a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf020f1313080e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x90e000f020f1313
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120305020b06130f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fafa0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x61]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x61]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4fafcd
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4faff0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4faf7f
jmp 0x4fafe4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457ea0
mov eax, edi
mov ecx, 0x15
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004faf00

Function at 0x4fdf60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x4fe09b
push rbp
mov rbp, rsp
sub rsp, 0xa0
movabs rdx, 0x3b502457187a4bf9
mov qword [rsp + 0x19], rdx
movabs rdx, 0x302a82f7413c5c3b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x796e69572d92591b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4176324ed66ad9ea
mov qword [rsp + 0x30], rdx
movabs rdx, 0x704f3750657272f8
mov qword [rsp + 0x38], rdx
movabs rdx, 0x22543b106f69c872
mov qword [rsp + 0x40], rdx
movabs rdx, 0x266542345ad65119
mov qword [rsp + 0x48], rdx
lea rdi, [rsp + 0x50]
lea rsi, [0x005ae0d0]
nop word [rax + rax]
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004584fa
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4fe031
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x50
jge 0x4fe068
movzx edx, byte [rsp + rax + 0x50]
movzx esi, byte [rsp + rax + 0x51]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x37
jae 0x4fe08e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
nop dword [rax + rax]
cmp rsi, 0x37
jb 0x4fe017
jmp 0x4fe082
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x37
call fcn.00445b60
add rsp, 0xa0
pop rbp
ret
mov eax, esi
mov ecx, 0x37
call fcn.00457ea0
mov eax, edi
mov ecx, 0x37
call fcn.00457ea0
nop
nop dword [rax + rax]
call fcn.00455c20
jmp fcn.004fdf60
Function at 0x4fe8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fea27
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0xced5202e8bcbbbe9
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x19d28df07344ced5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x320e6774edd5cf4c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf12cf8cd76763ca7
mov qword [rsp + 0x30], rdx
movabs rdx, 0xcf24cd05206f74db
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1a14140d08070403
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1e0b021006151901
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d00220f23030c06
mov qword [rsp + 0x50], rdx
movabs rdx, 0x130f010319191a17
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a251803160d0319
mov qword [rsp + 0x60], rdx
movabs rdx, 0x131718110613030f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x241c1b0a1a250701
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4fe9c7
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x4a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x4a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x38
jge 0x4fe9f7
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x26
jae 0x4fea1a
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x26
jb 0x4fe9aa
jmp 0x4fea0e
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x26
call fcn.00445b60
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.00457ea0
mov eax, edi
mov ecx, 0x26
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004fe8e0

Function at 0x4ff020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ff0e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x60116b3f65574f25
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x4dfd
movabs rdx, 0x804010104070409
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4090106
xor eax, eax
jmp 0x4ff080
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 1]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4ff0b2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4ff0d7
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 1]
cmp rsi, 0xa
jb 0x4ff063
jmp 0x4ff0cb
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
nop
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457ea0
mov eax, edi
mov ecx, 0xa
nop
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004ff020
Function at 0x4ff100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ff1b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x28d7b26e6f89cbd6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x505020606050201
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 1
xor eax, eax
jmp 0x4ff158
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4ff188
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4ff1ab
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4ff13b
jmp 0x4ff19f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00457ea0
mov eax, edi
mov ecx, 8
call fcn.00457ea0
nop
call fcn.00455c20
nop dword [rax]
jmp fcn.004ff100

Function at 0x506fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5070a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x748863276cbdaed1
mov qword [rsp + 0x18], rdx
movabs rdx, 0x78fabff3bf135465
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe04000c090a020d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb040b0a0b01010c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0e00060e0e0a09
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x507040
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5e]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x18
jge 0x507072
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x507097
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5e]
cmp rsi, 0x10
jb 0x507022
jmp 0x50708b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457ea0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00506fc0
Function at 0x507860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50794a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x63926d7888436f68
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6e63926d7888436f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x557c4b6e6391886f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4000e060c090f0f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf02000b04000e06
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa030007100e0e01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x5078ed
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x50791a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50793d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x5078d0
jmp 0x507931
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457ea0
mov eax, edi
mov ecx, 0x11
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00507860

Function at 0x507e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x507f4c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4dd3af6f43746508
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9de64dd3af6f4374
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb6784565afe2e9c5
mov qword [rsp + 0x22], rdx
movabs rdx, 0x60c050800110809
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8050a0b0707060c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x708050d080d110d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x507eea
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x507f1c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x507f3f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x12
jb 0x507ed0
jmp 0x507f33
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457ea0
mov eax, edi
mov ecx, 0x12
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00507e60
Function at 0x508160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508268
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xdbc92269de746547
mov qword [rsp + 0x19], rdx
movabs rdx, 0x651e613c14740b32
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1651e613c14740b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3c65b8356efb41e5
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x309100615071316
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1309111615100618
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x15080b0812091309
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12160c130e0c1005
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x50820b
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x508238
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x50825b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x5081ee
jmp 0x50824f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457ea0
mov eax, edi
mov ecx, 0x19
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00508160

Function at 0x508280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50835d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6d7850656a746963
mov qword [rsp + 0x19], rdx
movabs rdx, 0x69325d446a6d7850
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa0901090a0103
mov qword [rsp + 0x26], rdx
movabs rdx, 0x801000a0901090a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80c0a0302060507
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x508300
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0xc]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x50832d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x508350
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x5082e2
jmp 0x508344
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457ea0
mov eax, edi
mov ecx, 0xd
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.00508280
Function at 0x508da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508e8a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9f6bb5a900c874be
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb5956e75207b9f6b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x13be740845526faf
mov qword [rsp + 0x40], rdx
movabs rdx, 0x215040e09081005
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1214020c030215
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70000050d0c0d08
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x508e2d
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x508e5a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x508e7d
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x508e10
jmp 0x508e71
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457ea0
mov eax, edi
mov ecx, 0x16
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00508da0

Function at 0x509a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x509afb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa6d5659fc9d0d6b1
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe60bcfd5e5a6d565
mov qword [rsp + 0x24], rdx
movabs rdx, 0x147c936f72cb35c0
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x14020b130c090e01
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2010b01080007
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd0103130002010b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120a0b0a0f040206
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x509a99
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x509acb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x509aee
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x15
jb 0x509a7f
jmp 0x509ae2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457ea0
mov eax, edi
mov ecx, 0x15
call fcn.00457ea0
nop
nop dword [rax + rax]
call fcn.00455c20
jmp fcn.00509a00
Function at 0x511ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x511bf8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x5d24ac6900cc7734
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2d5d24ac6900cc77
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7024c421e620c2ae
mov qword [rsp + 0x28], rdx
movabs rdx, 0x66b8dec7992e0feb
mov qword [rsp + 0x30], rdx
movabs rdx, 0x65c42a28c77be069
mov qword [rsp + 0x38], rdx
movabs rdx, 0x13120d0f1e0903
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0d1a1109141603
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1309091d0c08071b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x602160f1701141d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a1c0802051b1f0a
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc1d000e051e1215
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x511b95
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x79]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x30
jge 0x511bc8
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x511beb
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x79]
nop
cmp rsi, 0x21
jb 0x511b7b
jmp 0x511bdf
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x21
call fcn.00445b60
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00457ea0
mov eax, edi
mov ecx, 0x21
call fcn.00457ea0
nop
call fcn.00455c20
nop dword [rax]
jmp fcn.00511ac0
Function at 0x512c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x512e32
push rbp
mov rbp, rsp
sub rsp, 0xb0
movabs rdx, 0xf338cfb474a1dc74
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x729d89d2d4e720f3
mov qword [rsp + 0x26], rdx
movabs rdx, 0xaf681920b9998023
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa61e9388f57496de
mov qword [rsp + 0x36], rdx
movabs rdx, 0x7b69732061977a6f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa66ca066acc4b88b
mov qword [rsp + 0x46], rdx
movabs rdx, 0x7b639f4e20722120
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xb478a023282074e0
mov qword [rsp + 0x56], rdx
movabs rdx, 0x297805356e6d6131
mov qword [rsp + 0x5e], rdx
movabs rdx, 0x2c1220111d073701
mov qword [rsp + 0x66], rdx
movabs rdx, 0x3416341a293e0a07
mov qword [rsp + 0x6e], rdx
movabs rdx, 0x33283416341a293e
mov qword [rsp + 0x70], rdx
movabs rdx, 0xb17091e09211145
mov qword [rsp + 0x78], rdx
movabs rdx, 0x162c1c3c05042c17
mov qword [rsp + 0x80], rdx
movabs rdx, 0x202a150128362e3b
mov qword [rsp + 0x88], rdx
movabs rdx, 0xc10103706421440
mov qword [rsp + 0x90], rdx
movabs rdx, 0x3300d1d020b0141
mov qword [rsp + 0x98], rdx
movabs rdx, 0x42640363e0f2128
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x2e40181b03442728
mov qword [rsp + 0xa8], rdx
xor eax, eax
jmp 0x512dc7
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x4a
jge 0x512dfc
movzx edx, byte [rsp + rax + 0x66]
movzx esi, byte [rsp + rax + 0x67]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x47
jae 0x512e25
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
cmp rsi, 0x47
jb 0x512dad
jmp 0x512e16
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x47
call fcn.00445b60
add rsp, 0xb0
pop rbp
ret
mov eax, esi
mov ecx, 0x47
nop dword [rax]
call fcn.00457ea0
mov eax, edi
mov ecx, 0x47
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.00512c60
Function at 0x51b840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51b90c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x906163d2c8889cbd
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6c6c856088b06590
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30e0e000202090b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10b0e070b040a0c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51b8af
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x16]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x16]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x51b8dc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x51b8ff
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x51b892
jmp 0x51b8f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457ea0
mov eax, edi
mov ecx, 0xf
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0051b840

Function at 0x51bb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51bbea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x53276f460af5be1a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x96e1a53276f460a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8e630c14b1e12817
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf010e0a01010612
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80b0a0010100f01
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc03020c0603030d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x51bb8d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x61]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x51bbba
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x51bbdd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x51bb70
jmp 0x51bbd1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457ea0
mov eax, edi
mov ecx, 0x13
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.0051bb00
Function at 0x5292c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5293aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb8e435ce33328d30
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa9b8e435ce33328d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfac805a63cd8ed3
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0f080b1004090e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf040d0f080b1004
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40e0e0601080a07
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x52934d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x52937a
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x52939d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x529330
jmp 0x529391
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457ea0
mov eax, edi
mov ecx, 0x11
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.005292c0

Function at 0x52ec20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x52ed58
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x91016fbd0761a36c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7491016fbd0761a3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa82642caa94d5b73
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7c4278e6a35b41b6
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x92c39da6b5aac0e4
mov qword [rsp + 0x34], rdx
movabs rdx, 0x10f0318011a1c12
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1812181b06100b1e
mov qword [rsp + 0x44], rdx
movabs rdx, 0x11d1e011812181b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc1904200c070703
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d190c191d151111
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f071e11100d1b14
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x52ecf8
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x13]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x13]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x2c
jge 0x52ed28
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x52ed4b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x21
jb 0x52ecdb
jmp 0x52ed3f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
call fcn.00445b60
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00457ea0
mov eax, edi
mov ecx, 0x21
call fcn.00457ea0
nop
call fcn.00455c20
nop dword [rax]
jmp fcn.0052ec20