joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e9ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9ffd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x202f6168eb626573
mov qword [rsp + 0x45], rdx
movabs rdx, 0x6574b0b8b915e8
mov qword [rsp + 0x4d], rdx
movabs rdx, 0x35da20006574b0b8
mov qword [rsp + 0x50], rdx
movabs rdx, 0x65a969a32a657335
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1213030c06130300
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x812041917040802
mov qword [rsp + 0x25], rdx
movabs rdx, 0x6091313040b020b
mov qword [rsp + 0x2d], rdx
movabs rdx, 0xa02120217020f09
mov qword [rsp + 0x35], rdx
movabs rdx, 0x110a04160a110202
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x4e9fa0
movzx r9d, byte [rsp + rsi + 0x45]
sub r9d, edx
lea edx, [r9 - 0x7d]
mov byte [rsp + rdi + 0x45], dl
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x45], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4e9fcd
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4e9ff0
movzx r8d, byte [rsp + rdi + 0x45]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4e9f7d
jmp 0x4e9fe4
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x1b
call fcn.0045b080
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.004607e0
mov eax, edi
mov ecx, 0x1b
call fcn.004607e0
nop
nop dword [rax]
call fcn.0045e500
jmp fcn.004e9ee0

Function at 0x4ea020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea11b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x202caa680779250f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xef266542202caa68
mov qword [rsp + 0x40], rdx
movabs rdx, 0x37ef35a81321b352
mov qword [rsp + 0x48], rdx
movabs rdx, 0x80c0d05030510
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb03061306120f11
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa100c100e110b03
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x505010c080b0e01
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4ea0b9
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4ea0eb
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4ea10e
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0x14
jb 0x4ea09f
jmp 0x4ea102
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x14
call fcn.0045b080
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004607e0
mov eax, edi
mov ecx, 0x14
call fcn.004607e0
nop
nop dword [rax + rax]
call fcn.0045e500
jmp fcn.004ea020
Function at 0x4ec080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4ec1f2
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x69b09ca56b747473
mov qword [rsp + 0x59], rdx
movabs rdx, 0xc0a620a19a788a9e
mov qword [rsp + 0x61], rdx
movabs rdx, 0x9d206ed320e69fc0
mov qword [rsp + 0x68], rdx
movabs rdx, 0x20416e90979a8de8
mov qword [rsp + 0x70], rdx
movabs rdx, 0x9513645e3b9768e8
mov qword [rsp + 0x78], rdx
movabs rdx, 0xc665b5a722a762a5
mov qword [rsp + 0x80], rdx
movabs rdx, 0x220c2a211f110f00
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x262303000b270a0c
mov qword [rsp + 0x27], rdx
movabs rdx, 0xa26262303000b27
mov qword [rsp + 0x29], rdx
movabs rdx, 0x2121232317182c11
mov qword [rsp + 0x31], rdx
movabs rdx, 0x82a0510091b2a26
mov qword [rsp + 0x39], rdx
movabs rdx, 0x3162e181f1a191d
mov qword [rsp + 0x41], rdx
movabs rdx, 0x2c13250a061a212c
mov qword [rsp + 0x49], rdx
movabs rdx, 0x2b290525040e230a
mov qword [rsp + 0x51], rdx
xor eax, eax
jmp 0x4ec190
movzx r9d, byte [rsp + rsi + 0x59]
sub r9d, edx
lea edx, [r9 + 5]
mov byte [rsp + rdi + 0x59], dl
lea edx, [r8 + 5]
mov byte [rsp + rsi + 0x59], dl
add rax, 2
cmp rax, 0x3a
jge 0x4ec1bd
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x4ec1e5
movzx r8d, byte [rsp + rdi + 0x59]
sub r8d, edx
cmp rsi, 0x2f
jb 0x4ec173
jmp 0x4ec1d7
xor eax, eax
lea rbx, [rsp + 0x59]
mov ecx, 0x2f
call fcn.0045b080
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
nop
call fcn.004607e0
mov eax, edi
mov ecx, 0x2f
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004ec080

Function at 0x4ee460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee568
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xf66f149201a513d
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x694c206e655f4354
mov qword [rsp + 0x43], rdx
movabs rdx, 0x69733e6d4e694c20
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5b5262735c4d156e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x121c00080e090402
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1a1705041b101c0a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1810071308041a17
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x13161a1101050a06
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4ee50b
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 + 0x2c]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 + 0x2c]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
cmp rax, 0x1e
jge 0x4ee538
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4ee55b
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4ee4ee
jmp 0x4ee54f
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.0045b080
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.004607e0
mov eax, edi
mov ecx, 0x1d
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004ee460
Function at 0x4eebc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eecaa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x88978561839d7e83
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x6f88978561839d7e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3b8d6e906c69614e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3100210080e0601
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x10903100210080e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd07010606050f
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4eec4d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x12
jge 0x4eec7a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4eec9d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4eec30
jmp 0x4eec91
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004607e0
mov eax, edi
mov ecx, 0x11
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004eebc0

Function at 0x4f0ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0bdb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x732064656671756a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x63127362698b5a74
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5773630658567b74
mov qword [rsp + 0x48], rdx
movabs rdx, 0x20910161109020a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3140f0c0004050b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1013130a120314
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf170e0311040c13
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f0b79
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4f0bab
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f0bce
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
cmp rsi, 0x18
jb 0x4f0b5f
jmp 0x4f0bc2
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.0045b080
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004607e0
mov eax, edi
mov ecx, 0x18
call fcn.004607e0
nop
nop dword [rax + rax]
call fcn.0045e500
jmp fcn.004f0ae0
Function at 0x4f1540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f163b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc1c3e63fa7284a7
mov qword [rsp + 0x35], rdx
movabs rdx, 0xc85430c1c3e63fa
mov qword [rsp + 0x38], rdx
movabs rdx, 0x79fd720d0ffe747d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60e07080a0f0e05
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x100b060b0e0d0907
mov qword [rsp + 0x23], rdx
movabs rdx, 0x10b100b060b0e0d
mov qword [rsp + 0x25], rdx
movabs rdx, 0x10110603070b0d00
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4f15d9
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5a]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4f160b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f162e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5a]
cmp rsi, 0x13
jb 0x4f15bf
jmp 0x4f1622
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0045b080
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004607e0
mov eax, edi
mov ecx, 0x13
call fcn.004607e0
nop
nop dword [rax + rax]
call fcn.0045e500
jmp fcn.004f1540

Function at 0x4f2c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2d9a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x20bc637529f60546
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xba8921f53f342c64
mov qword [rsp + 0x47], rdx
movabs rdx, 0x2aba8921f53f342c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x36edf8460c6461dd
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb0601020e100e14
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x140e160b0b060102
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x100170c0e110f0e
mov qword [rsp + 0x27], rdx
movabs rdx, 0xa17181515140d
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xb03160f020d0c09
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4f2d37
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x24
jge 0x4f2d69
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f2d8d
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x16]
cmp rsi, 0x19
jb 0x4f2d1d
jmp 0x4f2d81
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.0045b080
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.004607e0
mov eax, edi
mov ecx, 0x19
call fcn.004607e0
nop
call fcn.0045e500
nop
jmp fcn.004f2c80
Function at 0x4f2dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2ebb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xde6137e5e2e0701d
mov qword [rsp + 0x39], rdx
movabs rdx, 0xee205161cb4fd2de
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc7d3f8fa6f70d8d4
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1507141310090006
mov qword [rsp + 0x19], rdx
movabs rdx, 0x100f0c070a050b05
mov qword [rsp + 0x21], rdx
movabs rdx, 0xe0e0c0305060906
mov qword [rsp + 0x29], rdx
movabs rdx, 0x20b1608060407
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4f2e59
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x20
jge 0x4f2e8b
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f2eae
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6f]
cmp rsi, 0x17
jb 0x4f2e3f
jmp 0x4f2ea2
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0045b080
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004607e0
mov eax, edi
mov ecx, 0x17
call fcn.004607e0
nop
nop dword [rax + rax]
call fcn.0045e500
jmp fcn.004f2dc0

Function at 0x4f2fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f30bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb9c8646f6e3b9283
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x2c8fa46f6e8ab9c8
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6486927e6f95c975
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10070f0703120703
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x614100c05051200
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0c071400140614
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd01020813000d0b
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4f3060
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 + 9]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 + 9]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4f308d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f30b0
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4f303f
jmp 0x4f30a4
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.0045b080
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004607e0
mov eax, edi
mov ecx, 0x16
call fcn.004607e0
nop
nop dword [rax]
call fcn.0045e500
jmp fcn.004f2fc0
Function at 0x4f7a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7b5a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7f866bac8a776e95
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x96022d73b191909b
mov qword [rsp + 0x47], rdx
movabs rdx, 0xa596022d73b19190
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7e6aa16d20256376
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1800040a0a0e1009
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb081800040a0a0e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x906161515080408
mov qword [rsp + 0x27], rdx
movabs rdx, 0x603020a020f1815
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1113160517061307
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4f7af7
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x33]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x22
jge 0x4f7b29
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f7b4d
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x33]
cmp rsi, 0x19
jb 0x4f7add
jmp 0x4f7b41
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.0045b080
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.004607e0
mov eax, edi
mov ecx, 0x19
call fcn.004607e0
nop
call fcn.0045e500
nop
jmp fcn.004f7a40

Function at 0x4f8a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f8add
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5059697f74746b53
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6d68728e745c3b5f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90109010e05080a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x10806090f040e09
mov qword [rsp + 0x20], rdx
movabs rdx, 0x80f09080c090309
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4f8a80
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4f8aad
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4f8ad0
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x4f8a62
jmp 0x4f8ac4
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004607e0
mov eax, edi
mov ecx, 0x10
call fcn.004607e0
nop
nop dword [rax]
call fcn.0045e500
jmp fcn.004f8a00
Function at 0x4f98c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f99bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x787413cd76bec911
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x13536f2755697874
mov qword [rsp + 0x40], rdx
movabs rdx, 0x610b69f367a80f72
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd100f0709150104
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x150404151214040a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9020d040d141504
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x502010904000f02
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4f9959
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4f998b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f99ae
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0x16
jb 0x4f993f
jmp 0x4f99a2
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.0045b080
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004607e0
mov eax, edi
mov ecx, 0x16
call fcn.004607e0
nop
nop dword [rax + rax]
call fcn.0045e500
jmp fcn.004f98c0

Function at 0x4fbd00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fbdcc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6b4c65664f7f6552
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x45715768656b4c65
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7070a0c0704090b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2020706020b0707
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4fbd6f
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0xe
jge 0x4fbd9c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4fbdbf
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4fbd52
jmp 0x4fbdb3
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.0045b080
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.004607e0
mov eax, edi
mov ecx, 0xd
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004fbd00
Function at 0x4fbde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fbec6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x72724d756e5d4972
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5967658d55766e5f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0c070e0c070008
mov qword [rsp + 0x18], rdx
movabs rdx, 0x30b0108050b070e
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa020e0a0f0c0f0c
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4fbe60
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x18
jge 0x4fbe92
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4fbeb7
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0x10
jb 0x4fbe42
jmp 0x4fbeab
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004607e0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004fbde0

Function at 0x4fbee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fbfc6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x9372a08108fdfa0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x57e104f0d46c2056
mov qword [rsp + 0x38], rdx
movabs rdx, 0x205090109070909
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30e020509010907
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0d0c0202040700
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4fbf60
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4fbf92
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4fbfb7
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
cmp rsi, 0x10
jb 0x4fbf42
jmp 0x4fbfab
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004607e0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004fbee0
Function at 0x4fbfe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc0fa
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x437e9d93748fb743
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc9b28aca69747265
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd1657468a87865ba
mov qword [rsp + 0x50], rdx
movabs rdx, 0x56b96f74919c549a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x41b1e170c1b0e0f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe01041b1e170c1b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x18100c1b0502041e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x171a040c0e0d1813
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1718121f0f141306
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4fc097
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3e]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x22
jge 0x4fc0c9
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4fc0ed
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3e]
cmp rsi, 0x20
jb 0x4fc07d
jmp 0x4fc0e1
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x20
call fcn.0045b080
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x20
call fcn.004607e0
mov eax, edi
mov ecx, 0x20
call fcn.004607e0
nop
call fcn.0045e500
nop
jmp fcn.004fbfe0

Function at 0x4fd9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fda8c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6b83804f7475a583
mov qword [rsp + 0x34], rdx
movabs rdx, 0x747379536b83804f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8571756f74796265
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1130607100001
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5120e07060e0001
mov qword [rsp + 0x24], rdx
movabs rdx, 0x100d071313121102
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4fda2a
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x16
jge 0x4fda5c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4fda7f
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0x14
jb 0x4fda10
jmp 0x4fda73
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0045b080
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004607e0
mov eax, edi
mov ecx, 0x14
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004fd9a0