joyce8/EMBER2024-capa huggingface dataset:
Function at 0x501fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5020b2
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6fbedbf157a82e0f
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa417ae538299fdb9
mov qword [rsp + 0x21], rdx
movabs rdx, 0x64a417ae538299fd
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8c201f91726a0a2
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5030b170911040a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x18090d0012181517
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf0816000f021809
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40e0f1306021405
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x502051
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x7e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x7e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x50207e
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5020a5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x502034
jmp 0x502099
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457420
mov eax, edi
mov ecx, 0x19
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00501fa0

Function at 0x502d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x502e08
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x206e61641437aaaa
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1ae95d7488206e61
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xbe9d69d2c3d7a3a9
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3110f13100a1414
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb0c110813010d02
mov qword [rsp + 0x36], rdx
movabs rdx, 0x3080b0c11081301
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0e000a0d0c0b00
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x502da0
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffa7
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x502dd1
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x502dfb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffa7
add r8d, edx
cmp rsi, 0x15
jb 0x502d85
jmp 0x502def
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457420
mov eax, edi
mov ecx, 0x15
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00502d00
Function at 0x504120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x504228
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x28ca3d888a7231d4
mov qword [rsp + 0x19], rdx
movabs rdx, 0xced2d128ca3d888a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xef37b62c7e64cb26
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30e061210000911
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa080f070b090c03
mov qword [rsp + 0x34], rdx
movabs rdx, 0x10605060a080f07
mov qword [rsp + 0x38], rdx
movabs rdx, 0x709060c090f040f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5041c0
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffff83
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x5041f1
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x50421b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffff83
add r8d, edx
cmp rsi, 0x13
jb 0x5041a5
jmp 0x50420f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457420
mov eax, edi
mov ecx, 0x13
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00504120

Function at 0x504e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x504ef6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xa6b056d46e015da8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf86ea6b056d46e01
mov qword [rsp + 0x20], rdx
movabs rdx, 0x65fa690120c8f411
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb040109061005
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0b040c100e0106
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90c020a010a0c07
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x504e90
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0x44
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x504ec2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x504ee9
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0x44
add r8d, edx
cmp rsi, 0x12
jb 0x504e76
nop
jmp 0x504edd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457420
mov eax, edi
mov ecx, 0x12
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.00504e00
Function at 0x5052c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5053d2
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x9be38cbcef8d6cb0
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6faa74ae208f6197
mov qword [rsp + 0x25], rdx
movabs rdx, 0x986faa74ae208f61
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf16d69c0fd6493a1
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x502030407100304
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1200150618141514
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x311120015061814
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0c140f15060e08
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x505371
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x50539e
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x5053c5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x505354
jmp 0x5053b9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457420
mov eax, edi
mov ecx, 0x19
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005052c0
Function at 0x506bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x506ce6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xac9557c1c87f2e45
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1dcbc420d5d980c6
mov qword [rsp + 0x24], rdx
movabs rdx, 0x69f01dcbc420d5d9
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb239db787dde7261
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2110f0702101611
mov qword [rsp + 0x36], rdx
movabs rdx, 0x161002110f070210
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3061007190d0811
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa1409020218040b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160e151508170516
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x506c80
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x3f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x3f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x22
jge 0x506cad
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x506cd4
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1a
jb 0x506c63
jmp 0x506cc8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.004446e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457420
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00506bc0

Function at 0x506d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x506e12
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x746e1c96cbb75541
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd9614346208861c3
mov qword [rsp + 0x25], rdx
movabs rdx, 0x41d9614346208861
mov qword [rsp + 0x26], rdx
movabs rdx, 0xbc6d94c320645261
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4040d1005030316
mov qword [rsp + 0x36], rdx
movabs rdx, 0x51802151208180c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x315051802151208
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10080f0d1012030a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x506db1
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x506dde
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x506e05
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x506d94
jmp 0x506df9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457420
mov eax, edi
mov ecx, 0x19
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00506d00
Function at 0x508da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508e96
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x65c86853c6454c46
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6465c86853c6454c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb5b0c178e26472a0
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3050707090d0e0f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10100f0303050707
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc070c090c07060f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x508e33
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x46]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x46]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x508e62
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x508e89
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x508e16
nop
jmp 0x508e7d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457420
mov eax, edi
mov ecx, 0x11
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.00508da0

Function at 0x508ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508fb6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6e66b9c772547d09
mov qword [rsp + 0x19], rdx
movabs rdx, 0x36e66b9c772547d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x656d69dfad641161
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80d0c060d050301
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc030004000d080d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa050600040a0301
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x508f53
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x60]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x60]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x508f82
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x508fa9
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x508f36
nop
jmp 0x508f9d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457420
mov eax, edi
mov ecx, 0x11
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.00508ec0
Function at 0x5099c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x509ae6
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xb2b4fdd674b4651d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x663b658c6f72ddfa
mov qword [rsp + 0x22], rdx
movabs rdx, 0x649eeddfb422663b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65296954aaa3991f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf101c160e141304
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140f1c0600161213
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1617040604091408
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1713000c14050f02
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1118070614141d19
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x509a80
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x21]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x21]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x28
jge 0x509aad
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x509ad4
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x509a63
jmp 0x509ac8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.004446e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00457420
mov eax, edi
mov ecx, 0x1e
nop dword [rax + rax]
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005099c0

Function at 0x50a780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50a892
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x206dc468d74c68f3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2adb64d9e7617358
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf2f961ea532adb64
mov qword [rsp + 0x28], rdx
movabs rdx, 0xfddb4354776f7264
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa03151a13130205
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b0b08170e0f1c0e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe00131815170c14
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8050313111a1405
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x50a831
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x20
jge 0x50a85e
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x50a885
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x50a814
jmp 0x50a879
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.004446e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00457420
mov eax, edi
mov ecx, 0x1d
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0050a780
Function at 0x50b3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50b4a8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x4a532f3c1e3d5053
mov qword [rsp + 0x19], rdx
movabs rdx, 0xbfc37745c4a532f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3e3e694d200b2f5f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd140f06110e0c0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6000a1405060802
mov qword [rsp + 0x36], rdx
movabs rdx, 0x30106000a140506
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5001304070b0100
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50b440
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 4
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x50b471
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x50b49b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 4
add r8d, edx
cmp rsi, 0x15
jb 0x50b425
jmp 0x50b48f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457420
mov eax, edi
mov ecx, 0x15
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0050b3a0
Function at 0x50d4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50d5b2
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x20e973696ce82835
mov qword [rsp + 0x34], rdx
movabs rdx, 0x726f2320650b29ce
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x6de37420726f2320
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7d209ae00e2520b1
mov qword [rsp + 0x48], rdx
movabs rdx, 0x171b171914180812
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1209170112061b06
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10d0a0912091701
mov qword [rsp + 0x24], rdx
movabs rdx, 0x81418001b021616
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x50d551
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x1c
jge 0x50d57e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x50d5a5
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x1c
jb 0x50d534
jmp 0x50d599
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x1c
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457420
mov eax, edi
mov ecx, 0x1c
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0050d4a0

Function at 0x50d5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50d6c8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x8f018d00b605206f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5a66987d390bd8f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1aa6f273b09768f4
mov qword [rsp + 0x28], rdx
movabs rdx, 0x51209080a0d080a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9041616030e100b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x602150002071004
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14120b1108150f0a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x50d660
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x53
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x50d691
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x50d6bb
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x53
add r8d, edx
cmp rsi, 0x17
jb 0x50d645
jmp 0x50d6af
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457420
mov eax, edi
mov ecx, 0x17
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.0050d5c0
Function at 0x515aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x515bd2
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xcfbfd2070f96b27
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xcf0cfbfd2070f96b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x617167f1696876c3
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20700f067320f36e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x271da3b9faf2f574
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1b120d0d1c161608
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1c1c1b120d0d1c16
mov qword [rsp + 0x40], rdx
movabs rdx, 0x151a02051d0f0a20
mov qword [rsp + 0x48], rdx
movabs rdx, 0x202006071d00151e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1f15090f1e152000
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x515b6f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x7f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x7f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x22
jge 0x515b9c
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x515bc5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x21
jb 0x515b52
jmp 0x515bb7
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x21
call fcn.004446e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x21
nop
call fcn.00457420
mov eax, edi
mov ecx, 0x21
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00515aa0

Function at 0x516800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5168d2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x3233627019d76468
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xd84763d8
movabs rdx, 0x5050b0009030b0a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50b020308090505
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x51686e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x6b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x51689b
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x5168c5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x516851
jmp 0x5168b6
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0xc
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00516800
Function at 0x516e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x516f12
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2e76096580fc73ec
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6cf4852e76096580
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x809090305080903
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x20509
xor eax, eax
jmp 0x516eae
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x516edb
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x516f05
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x516e91
jmp 0x516ef6
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0xb
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.00516e40

Function at 0x5170a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51718b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x46a868a605fd96b7
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa89543ac54baba46
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20c070e0d040606
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc020e02020c070e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80b00010e090309
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x517124
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x14
jge 0x517157
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x51717e
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x517107
jmp 0x517172
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457420
mov eax, edi
mov ecx, 0xf
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.005170a0