joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4f1380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f147d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xeb086fe586003a2f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x74636e86783deb08
mov qword [rsp + 0x20], rdx
movabs rdx, 0x29bdcfd8456e2e69
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1060a0f03001306
mov qword [rsp + 0x30], rdx
movabs rdx, 0x14090901030a080f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x150a0a1202060004
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20f03070f0f0109
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f1420
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x7f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x7f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4f144d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f1470
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4f13ff
jmp 0x4f1464
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004f1380

Function at 0x4f5760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5898
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x704760b765d3da66
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x515e51704760b765
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x914ce36e5e7365d0
mov qword [rsp + 0x26], rdx
movabs rdx, 0x45b3da6f92cae486
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc26e69b864e3c264
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1c0e0e140916081f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1f16081f19220516
mov qword [rsp + 0x46], rdx
movabs rdx, 0x130e1f16081f1922
mov qword [rsp + 0x48], rdx
movabs rdx, 0x141606131d1c0a01
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1310011511011a12
mov qword [rsp + 0x58], rdx
movabs rdx, 0x12150b021d041814
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4f5835
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4f5868
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x4f588b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6d]
nop
cmp rsi, 0x23
jb 0x4f581b
jmp 0x4f587f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x23
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00451880
mov eax, edi
mov ecx, 0x23
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004f5760
Function at 0x4f8f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9047
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x68fa63e665eaed75
mov qword [rsp + 0x19], rdx
movabs rdx, 0x657aed68fa63e665
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x108080904070604
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4040207
xor eax, eax
jmp 0x4f8fe8
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4f9017
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4f903a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4f8fcb
jmp 0x4f902e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f8f80

Function at 0x4f9680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f97b8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xee8b81149aee61b3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa8ee8b81149aee61
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9075130aecf811ac
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3386fefc11a91370
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x65e7030420fd11eb
mov qword [rsp + 0x34], rdx
movabs rdx, 0x91209170210081f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc0903071f0b1819
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1305060e0c090307
mov qword [rsp + 0x48], rdx
movabs rdx, 0x151315061e0e1813
mov qword [rsp + 0x50], rdx
movabs rdx, 0x161b041a000b0d1d
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc0205140a000219
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4f9758
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x2c
jge 0x4f9788
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4f97ab
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x21
jb 0x4f973b
jmp 0x4f979f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00451880
mov eax, edi
mov ecx, 0x21
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004f9680
Function at 0x4f97e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f98ec
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xdff185f86f63f369
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7b62f6f1ed1a657b
mov qword [rsp + 0x25], rdx
movabs rdx, 0x7e7b62f6f1ed1a65
mov qword [rsp + 0x26], rdx
movabs rdx, 0x78d9d19c4dee662e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf08050e100e0f0a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x13070a10040e0c15
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x61613070a10040e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf170d08010b0f06
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f9888
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4f98bc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4f98df
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 0x19
jb 0x4f986e
jmp 0x4f98d3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f97e0

Function at 0x4fb180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb247
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa2c9932f916559ca
mov qword [rsp + 0x19], rdx
movabs rdx, 0x74a6faa2c9932f91
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1080900080906
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5070301
xor eax, eax
jmp 0x4fb1e8
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4fb217
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4fb23a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4fb1cb
jmp 0x4fb22e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004fb180
Function at 0x4fb4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x4fb63b
push rbp
mov rbp, rsp
sub rsp, 0x98
movabs rdx, 0x8eb8d569c2bee3c1
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf673757fa68b6c8e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7b6972a42083c103
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xab206e4c9bfee165
mov qword [rsp + 0x36], rdx
movabs rdx, 0xda3ad26f8cd5c269
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x6cbf90815d386481
mov qword [rsp + 0x46], rdx
movabs rdx, 0x4456ab8f509f91bf
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x224310a2c13012f
mov qword [rsp + 0x56], rdx
movabs rdx, 0x20060224310a2c13
mov qword [rsp + 0x58], rdx
movabs rdx, 0x272e292b1819022b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x10272d2a030505
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2d210f0e31222b26
mov qword [rsp + 0x70], rdx
movabs rdx, 0x72b2a1a0e1e2a05
mov qword [rsp + 0x78], rdx
movabs rdx, 0x292b1126162d3034
mov qword [rsp + 0x80], rdx
movabs rdx, 0x3518092b2f0d0b25
mov qword [rsp + 0x88], rdx
movabs rdx, 0x2c33211e05350f1b
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x4fb5d1
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x42
jge 0x4fb608
movzx edx, byte [rsp + rax + 0x56]
movzx esi, byte [rsp + rax + 0x57]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x37
jae 0x4fb62e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7a]
nop dword [rax + rax]
cmp rsi, 0x37
jb 0x4fb5b7
jmp 0x4fb622
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x37
call fcn.00441380
add rsp, 0x98
pop rbp
ret
mov eax, esi
mov ecx, 0x37
call fcn.00451880
mov eax, edi
mov ecx, 0x37
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004fb4a0
Function at 0x508000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5080ec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd33635cb890131d4
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x38d33635cb890131
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5808450afeb70b39
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4000c0700000307
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x30304000c070000
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0d0a000b0a020c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50808a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x5080bc
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5080df
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2a]
cmp rsi, 0x11
jb 0x508070
jmp 0x5080d3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00508000

Function at 0x508d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508e6a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x58363f7851857f3f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3858363f7851857f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x783a653b454a6181
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70c0009030f0d0c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2000c0d0005070c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd000f01050c040b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x508e0d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x508e3a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x508e5d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x508df0
jmp 0x508e51
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00508d80
Function at 0x50dc40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50dd06
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xebc832958965b675
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x790
movabs rdx, 0x908060309080406
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9070601
xor eax, eax
jmp 0x50dca0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x69]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x50dcd2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x50dcf7
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x69]
cmp rsi, 0xa
jb 0x50dc83
jmp 0x50dceb
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0050dc40

Function at 0x50dd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50ddf2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xed012569578c6544
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xed636f7250bded01
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50607070d050606
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2070d0208080506
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x50dd8c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x50ddbe
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x50dde5
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4e]
cmp rsi, 0xe
jb 0x50dd72
jmp 0x50ddd5
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0050dd20

Function at 0x50ea20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50eaf2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf6a3956173bb65ad
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x57a889f6a3956173
mov qword [rsp + 0x22], rdx
movabs rdx, 0x602000007020200
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x505090908060602
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x50ea8c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x50eabe
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x50eae5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0xb
jb 0x50ea72
jmp 0x50ead5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0050ea20
Function at 0x50eb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50ebbd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6761866d6477eb8d
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x81af
movabs rdx, 0x508080509020501
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4000500
xor eax, eax
jmp 0x50eb60
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x13]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x13]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x50eb8d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x50ebb0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x50eb43
jmp 0x50eba4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.0050eb00

Function at 0x5107c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51089d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x390f473c4319655b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc518446e3a57653f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf02070d0f0e0406
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe0f0f02070d0f0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5040f0008080b0b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x510840
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x39]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x39]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x51086d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x510890
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x510822
jmp 0x510884
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.005107c0
Function at 0x5108c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5109aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe1b2729fa1746547
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa53adee1b2729fa1
mov qword [rsp + 0x22], rdx
movabs rdx, 0xefbbf873e1a1eb83
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90a12030810040c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x410100a070e090a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110d0e07030b0608
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x51094d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x28]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x28]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x51097a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x51099d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x510930
jmp 0x510991
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.005108c0

Function at 0x511c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x511d2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8b858e659e4a426b
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6c6c9d79
movabs rdx, 0x801040503070906
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x705040902060801
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x511cc5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x23]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x511cfc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x511d1f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x23]
cmp rsi, 0xc
jb 0x511cab
jmp 0x511d13
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00511c60
Function at 0x511d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x511dfd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc085936c6c64a74d
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6c
movabs rdx, 0x500060705010705
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x101
xor eax, eax
nop
jmp 0x511da0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x14]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x511dcd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x511df0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x511d82
jmp 0x511de4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.00511d40

Function at 0x511e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x511eec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc36c6111eff96956
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xa8356cf9
movabs rdx, 0x4030b0408020704
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb030408020a0403
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x511e85
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x511ebc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x511edf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 0xc
jb 0x511e6b
jmp 0x511ed3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00511e20
Function at 0x512ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x512e0c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xd5c8a093b26d8696
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6ea27faa5fd5c8a0
mov qword [rsp + 0x22], rdx
movabs rdx, 0x74bc6ca1876fb793
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9b94819c9d8e6465
mov qword [rsp + 0x32], rdx
movabs rdx, 0x679a6c733b218f73
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x110b02031c062017
mov qword [rsp + 0x42], rdx
movabs rdx, 0x907230d1805110b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11a0021100e1300
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b1c0919041e0110
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f24100d2408200a
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x512da6
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x52]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x26
jge 0x512ddc
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x512dff
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x52]
cmp rsi, 0x25
jb 0x512d8c
jmp 0x512df3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x25
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00451880
mov eax, edi
mov ecx, 0x25
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00512ce0