joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5062e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5063db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x20f98769ac613700
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xfe461ace520f987
mov qword [rsp + 0x40], rdx
movabs rdx, 0x810196abc66472ea
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb11000d08010d0d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd090d0c06081314
mov qword [rsp + 0x25], rdx
movabs rdx, 0x810080113140d09
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x508030611121411
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x506379
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x5063ab
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x5063ce
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0x15
jb 0x50635f
jmp 0x5063c2
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00447260
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045a040
mov eax, edi
mov ecx, 0x15
call fcn.0045a040
nop
nop dword [rax + rax]
call fcn.00457d60
jmp fcn.005062e0

Function at 0x506400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50650c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6f676e4e9a202957
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6eacbc92a5e7696c
mov qword [rsp + 0x47], rdx
movabs rdx, 0x656eacbc92a5e769
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8f9dc79290648feb
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa11011112161101
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x181116010e0d040b
mov qword [rsp + 0x27], rdx
movabs rdx, 0x41515040e0c1617
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x410140410031812
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x5064a8
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x45]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x20
jge 0x5064dc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x5064ff
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x45]
cmp rsi, 0x19
jb 0x50648e
jmp 0x5064f3
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00447260
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045a040
mov eax, edi
mov ecx, 0x19
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.00506400
Function at 0x508660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50875b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1666806c6a30555f
mov qword [rsp + 0x35], rdx
movabs rdx, 0x6c6e691666806c6a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x596d728a525d6c66
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71005020d080c0f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x30b030a10000608
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1210030b030a1000
mov qword [rsp + 0x25], rdx
movabs rdx, 0x112000e0e060d10
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x5086f9
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1b]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x50872b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x50874e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1b]
cmp rsi, 0x13
jb 0x5086df
jmp 0x508742
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00447260
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045a040
mov eax, edi
mov ecx, 0x13
call fcn.0045a040
nop
nop dword [rax + rax]
call fcn.00457d60
jmp fcn.00508660

Function at 0x50bb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50bbec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x206b45e3efc95bda
mov qword [rsp + 0x33], rdx
movabs rdx, 0x5c6ed6f0b5206b45
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe4cbca94c8d3e5c7
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80100120903080c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x80d0e0408051414
mov qword [rsp + 0x23], rdx
movabs rdx, 0x213020c10110f0a
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x50bb8a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x79]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x50bbbc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x50bbdf
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x79]
cmp rsi, 0x15
jb 0x50bb70
jmp 0x50bbd3
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00447260
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045a040
mov eax, edi
mov ecx, 0x15
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.0050bb00
Function at 0x50c100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50c1fb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7a08e5cd72d63341
mov qword [rsp + 0x34], rdx
movabs rdx, 0x13b7b7747a08e5cd
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6501695422d972bd
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10e0f1207090701
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x602120e05021206
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4020602120e0502
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc0c0f120a04040b
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x50c199
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x74]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1a
jge 0x50c1cb
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x50c1ee
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x74]
cmp rsi, 0x14
jb 0x50c17f
jmp 0x50c1e2
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00447260
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045a040
mov eax, edi
mov ecx, 0x14
call fcn.0045a040
nop
nop dword [rax + rax]
call fcn.00457d60
jmp fcn.0050c100

Function at 0x50c220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50c31d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5866235c6e657179
mov qword [rsp + 0x39], rdx
movabs rdx, 0x69874384517d6658
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65764b54236b5261
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa0c091208141410
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x30b150107141205
mov qword [rsp + 0x25], rdx
movabs rdx, 0x4061103030b1501
mov qword [rsp + 0x29], rdx
movabs rdx, 0x101114000d110e06
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x50c2c0
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x50c2ed
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x50c310
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x50c29f
jmp 0x50c304
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00447260
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045a040
mov eax, edi
mov ecx, 0x17
call fcn.0045a040
nop
nop dword [rax]
call fcn.00457d60
jmp fcn.0050c220
Function at 0x50c7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50c8cc
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x721b251f41082ea6
mov qword [rsp + 0x36], rdx
movabs rdx, 0x611ab72061696ce6
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x646e611ab7206169
mov qword [rsp + 0x40], rdx
movabs rdx, 0x87ebc1c97fdbae15
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd0d08060e170016
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1800060e190e1304
mov qword [rsp + 0x24], rdx
movabs rdx, 0x14151800060e190e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6050412160d0214
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x50c868
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x50c89c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x50c8bf
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0x1a
jb 0x50c84e
jmp 0x50c8b3
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.00447260
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045a040
mov eax, edi
mov ecx, 0x1a
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.0050c7c0
Function at 0x50daa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50db9d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7f54516c5d696f6e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x646e054461547f54
mov qword [rsp + 0x40], rdx
movabs rdx, 0x606d693220765364
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1208150e030f120b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x90a08080b000605
mov qword [rsp + 0x22], rdx
movabs rdx, 0x13010f0206020f01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa070202100b060f
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x50db40
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x50db6d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x50db90
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x50db1f
jmp 0x50db84
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00447260
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045a040
mov eax, edi
mov ecx, 0x16
call fcn.0045a040
nop
nop dword [rax]
call fcn.00457d60
jmp fcn.0050daa0

Function at 0x50ef80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50f07d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc0a0e4afce20fd45
mov qword [rsp + 0x39], rdx
movabs rdx, 0xf707c0ccc00114c0
mov qword [rsp + 0x40], rdx
movabs rdx, 0x104c039430646ddb
mov qword [rsp + 0x48], rdx
movabs rdx, 0x14150804070a1315
mov qword [rsp + 0x19], rdx
movabs rdx, 0x80d0c0907100113
mov qword [rsp + 0x21], rdx
movabs rdx, 0xe030703160a0f01
mov qword [rsp + 0x29], rdx
movabs rdx, 0x512071206070b07
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x50f020
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x71]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x71]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x50f04d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x50f070
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x50efff
jmp 0x50f064
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00447260
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045a040
mov eax, edi
mov ecx, 0x17
call fcn.0045a040
nop
nop dword [rax]
call fcn.00457d60
jmp fcn.0050ef80
Function at 0x510660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51075b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x515d4d5528725537
mov qword [rsp + 0x33], rdx
movabs rdx, 0x4e4665075f515d4d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4e5706541e624410
mov qword [rsp + 0x40], rdx
movabs rdx, 0x910120405120f0a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x906070d0c030b00
mov qword [rsp + 0x21], rdx
movabs rdx, 0x6130906070d0c03
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc140514010e0b08
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x5106f9
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 6]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x1a
jge 0x51072b
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x51074e
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 6]
cmp rsi, 0x15
jb 0x5106df
jmp 0x510742
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00447260
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045a040
mov eax, edi
mov ecx, 0x15
call fcn.0045a040
nop
nop dword [rax + rax]
call fcn.00457d60
jmp fcn.00510660

Function at 0x510780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51087b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x61146703d8ac720e
mov qword [rsp + 0x39], rdx
movabs rdx, 0x64cc0afef17e6461
mov qword [rsp + 0x40], rdx
movabs rdx, 0x25f721bf16e0f625
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf0616140301130b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc101500090d0212
mov qword [rsp + 0x25], rdx
movabs rdx, 0x10b0c030c101500
mov qword [rsp + 0x29], rdx
movabs rdx, 0x110a0c0412030d09
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x510819
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1c
jge 0x51084b
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x51086e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0x17
jb 0x5107ff
jmp 0x510862
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00447260
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045a040
mov eax, edi
mov ecx, 0x17
call fcn.0045a040
nop
nop dword [rax + rax]
call fcn.00457d60
jmp fcn.00510780
Function at 0x5108a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51098a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x79e0898e72758090
mov qword [rsp + 0x31], rdx
movabs rdx, 0xb76ea17453a49d79
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9892bf7c206495f2
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100805160706010e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x150c07130f150800
mov qword [rsp + 0x21], rdx
movabs rdx, 0x13040709010c1401
mov qword [rsp + 0x29], rdx
xor eax, eax
jmp 0x51092d
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
cmp rax, 0x18
jge 0x51095a
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x51097d
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0x17
jb 0x510910
jmp 0x510971
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.00447260
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045a040
mov eax, edi
mov ecx, 0x17
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.005108a0

Function at 0x512460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51255b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x22402269051e3d10
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd56e40fe334c2240
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1126145420157259
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2010803100e0d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe150b0613070513
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe05020209100e15
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x31415000a080213
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x5124f9
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 8]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x51252b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x51254e
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 8]
cmp rsi, 0x16
jb 0x5124df
jmp 0x512542
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00447260
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045a040
mov eax, edi
mov ecx, 0x16
call fcn.0045a040
nop
nop dword [rax + rax]
call fcn.00457d60
jmp fcn.00512460
Function at 0x5180c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5181aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x69274cf72a696b0d
mov qword [rsp + 0x35], rdx
movabs rdx, 0x3ef73969274cf72a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x51136f4cc84e0403
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd1108030b000e03
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa0c120806080d11
mov qword [rsp + 0x25], rdx
movabs rdx, 0xf050a0d04090b00
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x51814d
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x46]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jge 0x51817a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x51819d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x518130
jmp 0x518191
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00447260
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045a040
mov eax, edi
mov ecx, 0x13
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.005180c0

Function at 0x51b280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51b347
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8fb46170c3617013
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x17b96416
movabs rdx, 0x60b0b0806020a00
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8070b0b030a060b
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x51b2e8
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x46]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x46]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jge 0x51b317
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x51b33a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x51b2cb
jmp 0x51b32e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00447260
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045a040
mov eax, edi
mov ecx, 0xc
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.0051b280
Function at 0x51b360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51b42c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xecb4697061b16531
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x3338a5eb
movabs rdx, 0x6090a020706000b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa0a0a0608070609
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x51b3c5
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x51b3fc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x51b41f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0xc
jb 0x51b3ab
jmp 0x51b413
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00447260
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045a040
mov eax, edi
mov ecx, 0xc
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.0051b360

Function at 0x51b440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51b506
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf5b7c0bc70380470
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x6c
movabs rdx, 0x507020701050404
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x2050602
xor eax, eax
nop
jmp 0x51b4a0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x53]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x51b4d2
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x51b4f7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x53]
cmp rsi, 9
jb 0x51b482
jmp 0x51b4eb
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00447260
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0045a040
mov eax, edi
mov ecx, 9
nop
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.0051b440

Function at 0x51ce40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51cf18
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x76c3a0536e588f78
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x9a658269
movabs rdx, 0x10b010600020606
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x606010b01060002
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10109020509020b
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x51ceb7
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x12
jge 0x51cee8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x51cf0b
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x51ce9a
jmp 0x51ceff
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00447260
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045a040
mov eax, edi
mov ecx, 0xc
call fcn.0045a040
nop
call fcn.00457d60
nop dword [rax]
jmp fcn.0051ce40
Function at 0x51dcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51dd8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6f6d868151807747
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x50587b7a
movabs rdx, 0x8030a0a06090502
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x401040103080803
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x51dd25
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0xe
jge 0x51dd5c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x51dd7f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
cmp rsi, 0xc
jb 0x51dd0b
jmp 0x51dd73
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00447260
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045a040
mov eax, edi
mov ecx, 0xc
call fcn.0045a040
nop
call fcn.00457d60
jmp fcn.0051dcc0

Function at 0x51e880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x51e97b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x587547e95a07f347
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4665587547e95a07
mov qword [rsp + 0x38], rdx
movabs rdx, 0x57da6aeaefe65a64
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30a1005050f0702
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe0c04010b050d0a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7070e0c04010b05
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf030b050b070207
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x51e919
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x51e94b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x51e96e
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
cmp rsi, 0x12
jb 0x51e8ff
jmp 0x51e962
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00447260
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045a040
mov eax, edi
mov ecx, 0x12
call fcn.0045a040
nop
nop dword [rax + rax]
call fcn.00457d60
jmp fcn.0051e880