joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e2c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e2d0c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xc658014cfb5c1e6e
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x656dccd00dc70036
mov qword [rsp + 0x45], rdx
movabs rdx, 0xa02764656dccd00d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x79c86925201f2e12
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1102041a0119080c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1a1a14120a110115
mov qword [rsp + 0x25], rdx
movabs rdx, 0x4030a0503070a15
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x1a0917130d0b0814
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x4e2ca8
movzx r9d, byte [rsp + rsi + 0x3d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x3d], dl
mov byte [rsp + rsi + 0x3d], r8b
add rax, 2
cmp rax, 0x20
jge 0x4e2cdc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1b
jae 0x4e2cff
movzx r8d, byte [rsp + rdi + 0x3d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0x1b
jb 0x4e2c8e
jmp 0x4e2cf3
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.004564a0
mov eax, edi
mov ecx, 0x1b
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.004e2c00

Function at 0x4e3560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e365d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc48daa617265bf6f
mov qword [rsp + 0x39], rdx
movabs rdx, 0xc0b81eb96ec430c4
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa66574f408e7bf63
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1311160608061106
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc13130c1605110e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x7100c13130c1605
mov qword [rsp + 0x29], rdx
movabs rdx, 0xd0f0b0101121009
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4e3600
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4e362d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e3650
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4e35df
jmp 0x4e3644
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004564a0
mov eax, edi
mov ecx, 0x17
call fcn.004564a0
nop
nop dword [rax]
call fcn.004541c0
jmp fcn.004e3560
Function at 0x4e67e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e68a6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1700fe659f6f72c1
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x1c110917
movabs rdx, 0x308070500050a09
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x8060800
xor eax, eax
jmp 0x4e6840
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x51]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4e6872
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4e6897
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x51]
cmp rsi, 0xb
jb 0x4e6824
jmp 0x4e688b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004564a0
mov eax, edi
mov ecx, 0xb
nop
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.004e67e0

Function at 0x4e68c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e69bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4bad2d22436f3fca
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x73ff3a0f31c54bad
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6c1002726f14a575
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa150c0607030113
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x150406090b0a0b00
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50b0b0c0f0a0a04
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa140a080f100101
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4e6959
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x23]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4e698b
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e69ae
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x23]
cmp rsi, 0x16
jb 0x4e693f
jmp 0x4e69a2
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004564a0
mov eax, edi
mov ecx, 0x16
call fcn.004564a0
nop
nop dword [rax + rax]
call fcn.004541c0
jmp fcn.004e68c0
Function at 0x4e73c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e74a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x697d8ac7656adc88
mov qword [rsp + 0x30], rdx
movabs rdx, 0xbd8488398f723173
mov qword [rsp + 0x38], rdx
movabs rdx, 0x405010104040b0f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd040501010404
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc09090601060b0e
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4e7440
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4e7472
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4e7497
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2e]
cmp rsi, 0x10
jb 0x4e7422
jmp 0x4e748b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004564a0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.004e73c0

Function at 0x4e99c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9ada
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa096de65d4a56f73
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xfc6ebc82c051b60d
mov qword [rsp + 0x47], rdx
movabs rdx, 0x73fc6ebc82c051b6
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa7bbbaf1bb937075
mov qword [rsp + 0x50], rdx
movabs rdx, 0x17150d180f0e0808
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe160b1417150d18
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe17170809140216
mov qword [rsp + 0x27], rdx
movabs rdx, 0x20b030703050a06
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x718130c08141305
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4e9a77
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x24
jge 0x4e9aa9
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4e9acd
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 0x19
jb 0x4e9a5d
jmp 0x4e9ac1
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.004564a0
mov eax, edi
mov ecx, 0x19
call fcn.004564a0
nop
call fcn.004541c0
nop
jmp fcn.004e99c0
Function at 0x4e9b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9bcc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x20823867a50c6c69
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x15893300
movabs rdx, 0x2090a0502030b0b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x50a0802060a020a
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4e9b65
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x56]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4e9b9c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4e9bbf
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x56]
cmp rsi, 0xc
jb 0x4e9b4b
jmp 0x4e9bb3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004564a0
mov eax, edi
mov ecx, 0xc
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.004e9b00

Function at 0x4ebae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ebbbd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x48661a12494d6560
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x79611f5512654866
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa020c000a0b0503
mov qword [rsp + 0x18], rdx
movabs rdx, 0x4090a020c000a0b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x306030703070205
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x4ebb60
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4ebb8d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ebbb0
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4ebb42
jmp 0x4ebba4
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004564a0
mov eax, edi
mov ecx, 0xe
call fcn.004564a0
nop
nop dword [rax]
call fcn.004541c0
jmp fcn.004ebae0
Function at 0x4ec3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec4ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8aa0759c20bd6f6e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x83828a64c2f0728e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x737703803c9151c6
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe14130d02100415
mov qword [rsp + 0x18], rdx
movabs rdx, 0x206101110041207
mov qword [rsp + 0x20], rdx
movabs rdx, 0x80a110f0b080a0b
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4ec44a
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3e]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x4ec47c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4ec49f
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3e]
cmp rsi, 0x18
jb 0x4ec430
jmp 0x4ec493
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004564a0
mov eax, edi
mov ecx, 0x18
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.004ec3c0

Function at 0x4ecd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ece2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xdfc9636b7377d56d
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x813864df
movabs rdx, 0x701010a040a0a04
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x609040709090701
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4ecdc5
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4ecdfc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4ece1f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
cmp rsi, 0xb
jb 0x4ecdab
jmp 0x4ece13
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004564a0
mov eax, edi
mov ecx, 0xb
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.004ecd60
Function at 0x4eee20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eef1d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe35ffcac70dbcc43
mov qword [rsp + 0x35], rdx
movabs rdx, 0xcbcf78e35ffcac70
mov qword [rsp + 0x38], rdx
movabs rdx, 0xda09d6e477f543eb
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1010a0e04011008
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2090e0607010908
mov qword [rsp + 0x21], rdx
movabs rdx, 0x100d120502090e06
mov qword [rsp + 0x25], rdx
movabs rdx, 0x110a060b06040f0e
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4eeec0
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x61]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x61]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4eeeed
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4eef10
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4eee9f
jmp 0x4eef04
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004564a0
mov eax, edi
mov ecx, 0x13
call fcn.004564a0
nop
nop dword [rax]
call fcn.004541c0
jmp fcn.004eee20

Function at 0x4f1e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1ecc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x252a03f01f1465d9
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xc6096f1b20252a03
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90602020508020c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x703040b00040906
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4f1e6f
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 + 0x5f]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 + 0x5f]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0xe
jge 0x4f1e9c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4f1ebf
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4f1e52
jmp 0x4f1eb3
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.004564a0
mov eax, edi
mov ecx, 0xd
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.004f1e00
Function at 0x4f27c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f289d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xfd70610d6a23a619
mov qword [rsp + 0x31], rdx
movabs rdx, 0xa0f1010fb9250afd
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0a03080c0407
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x10e000a0a03080c
mov qword [rsp + 0x21], rdx
movabs rdx, 0x902000e0d03010b
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4f2840
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 + 0x6a]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 + 0x6a]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4f286d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4f2890
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x4f2822
jmp 0x4f2884
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004564a0
mov eax, edi
mov ecx, 0xf
call fcn.004564a0
nop
nop dword [rax]
call fcn.004541c0
jmp fcn.004f27c0

Function at 0x4f2fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f3086
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6f8c86d563950343
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xce21
movabs rdx, 0x102020604080805
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x9060506
xor eax, eax
jmp 0x4f3020
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x62]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4f3052
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4f3077
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x62]
cmp rsi, 0xa
jb 0x4f3003
jmp 0x4f306b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004564a0
mov eax, edi
mov ecx, 0xa
nop
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.004f2fc0

Function at 0x4f4580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4646
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3c50285e6158385a
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x654e
movabs rdx, 0x108080000070504
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x4000208
xor eax, eax
jmp 0x4f45e0
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4f4612
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4f4637
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
cmp rsi, 0xa
jb 0x4f45c3
jmp 0x4f462b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004564a0
mov eax, edi
mov ecx, 0xa
nop
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.004f4580
Function at 0x4f4660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f472c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xadd965ac6165f5ba
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x57fab189639badd9
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70a040b0b0c0104
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x8000707070806
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4f46cf
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jge 0x4f46fc
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4f471f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4f46b2
jmp 0x4f4713
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004564a0
mov eax, edi
mov ecx, 0xe
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.004f4660

Function at 0x4f5960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5a3d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7372ec9c1da26919
mov qword [rsp + 0x32], rdx
movabs rdx, 0x11111a6946197372
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd030203030c0803
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb08020c0d030203
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5020c0b0c0504
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x4f59e0
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0x67]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0x67]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4f5a0d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4f5a30
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0xe
jb 0x4f59c2
jmp 0x4f5a24
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004564a0
mov eax, edi
mov ecx, 0xe
call fcn.004564a0
nop
nop dword [rax]
call fcn.004541c0
jmp fcn.004f5960
Function at 0x4f6120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f61f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x496662616d7b8168
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x78848d637b734966
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10a0c0d090c0a0b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7060b02050a05
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4f618c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x18]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4f61be
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4f61e5
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x18]
cmp rsi, 0xe
jb 0x4f6172
jmp 0x4f61d5
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.004564a0
mov eax, edi
mov ecx, 0xe
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.004f6120

Function at 0x4f6b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6bc7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x435931665f651746
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x79546143
movabs rdx, 0x307040905090107
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x306010503030307
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4f6b68
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x1d]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x4f6b97
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4f6bba
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4f6b4b
jmp 0x4f6bae
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004564a0
mov eax, edi
mov ecx, 0xb
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.004f6b00
Function at 0x4f8d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f8e88
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x65135e295c254c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6974466d195ff76e
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xff256974466d195f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x656c646e61077942
mov qword [rsp + 0x48], rdx
movabs rdx, 0x700090500111014
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd050b05010d1409
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb0410020d050b05
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa05020a0d040300
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4f8e2b
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 + 0x35]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 + 0x35]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x1c
jge 0x4f8e58
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4f8e7b
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4f8e0e
jmp 0x4f8e6f
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004564a0
mov eax, edi
mov ecx, 0x1a
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.004f8d80

Function at 0x4fa720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fa80c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7874739e87746511
mov qword [rsp + 0x31], rdx
movabs rdx, 0x73c0dbafd854aa78
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65b0691193899a94
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30f110d13130011
mov qword [rsp + 0x19], rdx
movabs rdx, 0x110c0a0b13100c13
mov qword [rsp + 0x21], rdx
movabs rdx, 0x4080b120d07150b
mov qword [rsp + 0x29], rdx
xor eax, eax
jmp 0x4fa7aa
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x53]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
cmp rax, 0x18
jge 0x4fa7dc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4fa7ff
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x53]
cmp rsi, 0x17
jb 0x4fa790
jmp 0x4fa7f3
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004564a0
mov eax, edi
mov ecx, 0x17
call fcn.004564a0
nop
call fcn.004541c0
jmp fcn.004fa720