joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4f5b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5c88
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x5e868fa33a794696
mov qword [rsp + 0x19], rdx
movabs rdx, 0x694400041f5e868f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1c1a191474636510
mov qword [rsp + 0x26], rdx
movabs rdx, 0x100070106020305
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x413050409070a14
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1208041305040907
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6030d0511090102
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f5c22
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x7d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x7d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1a
jge 0x4f5c4f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f5c7b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4f5c05
jmp 0x4f5c6f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453d80
mov eax, edi
mov ecx, 0x15
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004f5b80

Function at 0x4fad80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x4faebc
sub rsp, 0xa8
mov qword [rsp + 0xa0], rbp
lea rbp, [rsp + 0xa0]
movabs rdx, 0x6c52517255746e3e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9308542337206c52
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7a21ce3f1170523a
mov qword [rsp + 0x28], rdx
movabs rdx, 0xbc8a3c201f6f596f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x38714a726f64626d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4a63727f3301648c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0237964201f6f00
mov qword [rsp + 0x48], rdx
lea rdi, [rsp + 0x50]
lea rsi, str.4.__t_0
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045439a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4fae54
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x50
jge 0x4fae82
movzx edx, byte [rsp + rax + 0x50]
movzx esi, byte [rsp + rax + 0x51]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x36
jae 0x4faeaf
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x36
jb 0x4fae37
nop
jmp 0x4faea3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x36
call fcn.00441e20
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
mov eax, esi
mov ecx, 0x36
call fcn.00453d80
mov eax, edi
mov ecx, 0x36
call fcn.00453d80
nop
nop dword [rax]
call fcn.00451720
jmp fcn.004fad80
Function at 0x4fb1e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb2bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xd2e4adcda49bea99
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xcc6c62d2e4adcda4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x204070203060501
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2030a0200050204
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4fb252
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffbd
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4fb288
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4fb2af
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffbd
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x4fb238
jmp 0x4fb2a3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441e20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453d80
mov eax, edi
mov ecx, 0xb
call fcn.00453d80
nop
nop dword [rax]
call fcn.00451720
jmp fcn.004fb1e0

Function at 0x4fb340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb406
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xa49372958e9dda9c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x700040403020104
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x604
xor eax, eax
nop
jmp 0x4fb3a0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x22]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x22]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4fb3cd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4fb3f4
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 8
jb 0x4fb382
jmp 0x4fb3e8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441e20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00453d80
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004fb340
Function at 0x4fb7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb926
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x1c679fc290ab11f6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x661c679fc290ab11
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1c0da56ebb020c6f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf920305b74a00a0e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf2704b762065cec6
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc0e110a03051313
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x20b0f18150512
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1d0000020b0f1815
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e10071a0b18130c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x719010318070310
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe16200e000b0407
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x4fb8c0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x7d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x2a
jge 0x4fb8ed
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4fb914
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x21
jb 0x4fb8a2
jmp 0x4fb908
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x21
call fcn.00441e20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
call fcn.00453d80
mov eax, edi
mov ecx, 0x21
nop dword [rax + rax]
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004fb7e0

Function at 0x4fb940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x4fbaa6
sub rsp, 0xc0
mov qword [rsp + 0xb8], rbp
lea rbp, [rsp + 0xb8]
movabs rdx, 0x47a89de6246fe574
mov qword [rsp + 0x19], rdx
movabs rdx, 0xae7572576fbf0747
mov qword [rsp + 0x20], rdx
movabs rdx, 0x77cc6f20647eacdd
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6edc90b36d7461c6
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe4ab732061a67c6f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa67a0066de549bdd
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6e1e3d14f72d8b6
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5478cbfcf7abdf65
mov qword [rsp + 0x50], rdx
movabs rdx, 0xbf8c3735f534b431
mov qword [rsp + 0x58], rdx
movabs rdx, 0x203e0945122d163b
mov qword [rsp + 0x60], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x00555720]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045439a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4fba39
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x3c
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x58
jge 0x4fba6a
movzx edx, byte [rsp + rax + 0x60]
movzx esi, byte [rsp + rax + 0x61]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x4fba97
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x3c
add r8d, edx
cmp rsi, 0x47
jb 0x4fba1f
jmp 0x4fba8b
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x47
call fcn.00441e20
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
mov eax, esi
mov ecx, 0x47
call fcn.00453d80
mov eax, edi
mov ecx, 0x47
nop
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004fb940
Function at 0x4fbac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x4fbc26
sub rsp, 0xd0
mov qword [rsp + 0xc8], rbp
lea rbp, [rsp + 0xc8]
movabs rdx, 0xa44202dfc8b9c8e3
mov qword [rsp + 0x19], rdx
movabs rdx, 0x65bfda289892c8a4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6ce31dd8cb6e652b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5073985969e40672
mov qword [rsp + 0x30], rdx
movabs rdx, 0x869a810a9ffb139
mov qword [rsp + 0x38], rdx
movabs rdx, 0xdc91698f6048c6b5
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6b946faa9903d0a9
mov qword [rsp + 0x48], rdx
movabs rdx, 0xbfe757f65e208565
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8dab8837c3553054
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2a4513240d434442
mov qword [rsp + 0x60], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x00556c50]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045438c
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4fbbb9
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x60
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x68
jge 0x4fbbea
movzx edx, byte [rsp + rax + 0x60]
movzx esi, byte [rsp + rax + 0x61]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x4fbc17
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x60
add r8d, edx
cmp rsi, 0x47
jb 0x4fbb9f
jmp 0x4fbc0b
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x47
call fcn.00441e20
mov rbp, qword [rsp + 0xc8]
add rsp, 0xd0
ret
mov eax, esi
mov ecx, 0x47
call fcn.00453d80
mov eax, edi
mov ecx, 0x47
nop
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004fbac0
Function at 0x4fc460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc586
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xb320bba42084739e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xdb972090d7738f9c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x869b886b72a9a5d9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xca7d697489dc8b52
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1e0f0212081a1007
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1609021911171e0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5041507001e0e17
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10041f100b151008
mov qword [rsp + 0x50], rdx
movabs rdx, 0x18151a1b050c0000
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4fc520
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 1]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 1]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x26
jge 0x4fc54d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4fc574
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x20
jb 0x4fc503
jmp 0x4fc568
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x20
call fcn.00441e20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x20
call fcn.00453d80
mov eax, edi
mov ecx, 0x20
nop dword [rax + rax]
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004fc460

Function at 0x4fd6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fd7bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xe8744aaa76436454
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x9756fe8744aaa76
mov qword [rsp + 0x22], rdx
movabs rdx, 0x207050700000404
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x707000a0a0a0207
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4fd752
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffff85
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4fd788
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4fd7af
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffff85
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x4fd738
jmp 0x4fd7a3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441e20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453d80
mov eax, edi
mov ecx, 0xb
call fcn.00453d80
nop
nop dword [rax]
call fcn.00451720
jmp fcn.004fd6e0
Function at 0x4fd7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fd8b2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x64fb732ff809fe2f
mov qword [rsp + 0x19], rdx
movabs rdx, 0xff030664fb732ff8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2030a0809060101
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8060806
xor eax, eax
jmp 0x4fd84b
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x66
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4fd87c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4fd8a5
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x66
add r8d, edx
cmp rsi, 0xb
jb 0x4fd831
jmp 0x4fd897
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441e20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00453d80
mov eax, edi
mov ecx, 0xb
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004fd7e0
Function at 0x50a680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50a776
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x64695f615a6e695f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x39553e42f96f3e64
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1a65426c61266e62
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9140f100e0c0a08
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1100030516110d09
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100c0c11110b1005
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50a713
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x29]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x29]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x50a742
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x50a769
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x50a6f6
nop
jmp 0x50a75d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441e20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x17
call fcn.00453d80
mov eax, edi
mov ecx, 0x17
call fcn.00453d80
nop
call fcn.00451720
nop dword [rax + rax]
jmp fcn.0050a680

Function at 0x50aac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50ab8b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe3246fd29441cde0
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xc9
movabs rdx, 0x6020800060703
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4010803
xor eax, eax
jmp 0x50ab24
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x50ab57
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x50ab7e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x50ab07
jmp 0x50ab72
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00441e20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00453d80
mov eax, edi
mov ecx, 9
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.0050aac0
Function at 0x50aba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50ac96
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x59361c2d33fec341
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9859361c2d33fec3
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd002c7fd06621239
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2040104080d040e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7100c010f0d0204
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0a0a050a070f00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50ac33
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x50ac62
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50ac89
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x50ac16
nop
jmp 0x50ac7d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441e20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00453d80
mov eax, edi
mov ecx, 0x11
call fcn.00453d80
nop
call fcn.00451720
nop dword [rax + rax]
jmp fcn.0050aba0

Function at 0x50b060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50b156
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xed3635ec39323f30
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x11ed3635ec39323f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x700652707ef0b39
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10070b0108040d07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10810070b010804
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50c0f01070d0a03
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50b0f0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x15
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x50b122
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50b149
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x15
add r8d, edx
cmp rsi, 0x11
jb 0x50b0d6
nop
jmp 0x50b13d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00441e20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00453d80
mov eax, edi
mov ecx, 0x11
call fcn.00453d80
nop
call fcn.00451720
nop dword [rax + rax]
jmp fcn.0050b060
Function at 0x512420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x512533
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x205a696c61545d67
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7d43715e0a6f6f32
mov qword [rsp + 0x27], rdx
movabs rdx, 0x870047d43715e0a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6b25545f73256167
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb0f08170117120c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x140e101a11020d10
mov qword [rsp + 0x42], rdx
movabs rdx, 0xd0106110200140e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x18010f01140c1102
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x5124ce
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffe5
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1e
jge 0x5124ff
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x512526
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffe5
add r8d, edx
cmp rsi, 0x1b
jb 0x5124b4
jmp 0x51251a
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1b
call fcn.00441e20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00453d80
mov eax, edi
mov ecx, 0x1b
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.00512420
Function at 0x512fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5130b6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x2af52c9fea0ce034
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf7632af52c9fea0c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x292c735f206174dc
mov qword [rsp + 0x24], rdx
movabs rdx, 0x110090002000406
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe00110601100900
mov qword [rsp + 0x30], rdx
movabs rdx, 0x110d000d0a070305
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x513050
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x29
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x513082
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x5130a9
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x29
add r8d, edx
cmp rsi, 0x12
jb 0x513036
nop
jmp 0x51309d
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00441e20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00453d80
mov eax, edi
mov ecx, 0x12
call fcn.00453d80
nop
call fcn.00451720
nop dword [rax + rax]
jmp fcn.00512fc0

Function at 0x5144e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x514612
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x3037214c3044402c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x412f342f4b484341
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4c3337363a13653a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x304e453e7c2a3143
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb05130e0d12021a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x60f0c1f0e000d0e
mov qword [rsp + 0x44], rdx
movabs rdx, 0xa05061a060f0c1f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a1b0117041c1b05
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b191e0512101317
mov qword [rsp + 0x58], rdx
movabs rdx, 0x190a0d111213191e
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x5145af
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x2c
jge 0x5145dc
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x514605
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x20
jb 0x514592
jmp 0x5145f7
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.00441e20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
nop
call fcn.00453d80
mov eax, edi
mov ecx, 0x20
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.005144e0
Function at 0x516bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x516c9c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x45cc39d72fd3e176
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x41d5dc45cc39d72f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80103050a090305
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x609020407060801
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x516c35
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x5e]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x5e]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x516c68
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x516c8f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x516c18
jmp 0x516c83
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441e20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453d80
mov eax, edi
mov ecx, 0xb
call fcn.00453d80
nop
nop dword [rax]
call fcn.00451720
jmp fcn.00516bc0