joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e4160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e425d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8471208a63c8982f
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x7174639263847120
mov qword [rsp + 0x40], rdx
movabs rdx, 0x97949cd382866571
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf1107060b08010d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf1307040c000410
mov qword [rsp + 0x27], rdx
movabs rdx, 0xd12020d0f130704
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x206091410121013
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4e4200
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4e422d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e4250
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4e41df
jmp 0x4e4244
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.0044d560
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462f80
mov eax, edi
mov ecx, 0x15
call fcn.00462f80
nop
nop dword [rax]
call fcn.00460ca0
jmp fcn.004e4160

Function at 0x4e4d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e4e9d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xea58c2df60e6ba13
mov qword [rsp + 0x45], rdx
movabs rdx, 0x657cb4462091994e
mov qword [rsp + 0x4d], rdx
movabs rdx, 0xd5780f657cb44620
mov qword [rsp + 0x50], rdx
movabs rdx, 0xcb620365d265d279
mov qword [rsp + 0x58], rdx
movabs rdx, 0x141a0016020c0d02
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7140a1219030c02
mov qword [rsp + 0x25], rdx
movabs rdx, 0x701050903171017
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x1919040d0d001211
mov qword [rsp + 0x35], rdx
movabs rdx, 0x121000180e121611
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x4e4e40
movzx r9d, byte [rsp + rsi + 0x45]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x45], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x45], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4e4e6d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4e4e90
movzx r8d, byte [rsp + rdi + 0x45]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4e4e1d
jmp 0x4e4e84
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x1b
call fcn.0044d560
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00462f80
mov eax, edi
mov ecx, 0x1b
call fcn.00462f80
nop
nop dword [rax]
call fcn.00460ca0
jmp fcn.004e4d80
Function at 0x4e8be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8cfd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x614f4b72503f6449
mov qword [rsp + 0x43], rdx
movabs rdx, 0x31a75733072204b
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x20743f6f3c031a75
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3046b3d63534c46
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb0b0315190f1b00
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x170210000b0b0315
mov qword [rsp + 0x23], rdx
movabs rdx, 0x6161c1008051912
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x170e1c0b1c121a01
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1c0318080f03000e
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x4e8ca0
movzx r9d, byte [rsp + rsi + 0x43]
sub r9d, edx
lea edx, [r9 + 0x39]
mov byte [rsp + rdi + 0x43], dl
lea edx, [r8 + 0x39]
mov byte [rsp + rsi + 0x43], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4e8ccd
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4e8cf0
movzx r8d, byte [rsp + rdi + 0x43]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4e8c7d
jmp 0x4e8ce4
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.0044d560
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00462f80
mov eax, edi
mov ecx, 0x1d
call fcn.00462f80
nop
nop dword [rax]
call fcn.00460ca0
jmp fcn.004e8be0

Function at 0x4ec040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec112
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xcf17b87223832d74
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x6465e2cdd2cf17b8
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70109090a090208
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa01060803020508
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4ec0ac
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ec0de
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4ec105
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
cmp rsi, 0xd
jb 0x4ec092
jmp 0x4ec0f5
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.0044d560
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00462f80
mov eax, edi
mov ecx, 0xd
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004ec040
Function at 0x4ec120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec21b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x69d026c4cd63d221
mov qword [rsp + 0x34], rdx
movabs rdx, 0x742914c269d026c4
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7475ba20f1966d13
mov qword [rsp + 0x40], rdx
movabs rdx, 0x41105080f0e0c00
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf0e010102060e0a
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0303010f0e0101
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc08000e0908060e
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4ec1b9
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4ec1eb
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4ec20e
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
cmp rsi, 0x14
jb 0x4ec19f
jmp 0x4ec202
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0044d560
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00462f80
mov eax, edi
mov ecx, 0x14
call fcn.00462f80
nop
nop dword [rax + rax]
call fcn.00460ca0
jmp fcn.004ec120

Function at 0x4ecdc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ececc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xfaeaed637504f85f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6dd5f485eab12007
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7f23ea6ef7ef5d63
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1500171613000c12
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb12080615001716
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0f051702170b11
mov qword [rsp + 0x28], rdx
movabs rdx, 0x205150b00110d08
mov qword [rsp + 0x30], rdx
movabs rdx, 0x130d0e110a160107
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ece68
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x24
jge 0x4ece9c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4ecebf
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0x18
jb 0x4ece4e
jmp 0x4eceb3
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.0044d560
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00462f80
mov eax, edi
mov ecx, 0x18
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004ecdc0
Function at 0x4ecee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ecffd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6c44c1bfe0d8d170
mov qword [rsp + 0x44], rdx
movabs rdx, 0x207165de97219c34
mov qword [rsp + 0x4c], rdx
movabs rdx, 0xe048d333207165de
mov qword [rsp + 0x50], rdx
movabs rdx, 0x420e68d9e974745c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x405080609080a10
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x12081014180a1b01
mov qword [rsp + 0x24], rdx
movabs rdx, 0x110e130b051a030c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x180e170908050201
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100e0e18181a0611
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x4ecfa0
movzx r9d, byte [rsp + rsi + 0x44]
sub r9d, edx
lea edx, [r9 - 0x4b]
mov byte [rsp + rdi + 0x44], dl
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x44], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4ecfcd
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4ecff0
movzx r8d, byte [rsp + rdi + 0x44]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4ecf7d
jmp 0x4ecfe4
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x1c
call fcn.0044d560
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00462f80
mov eax, edi
mov ecx, 0x1c
call fcn.00462f80
nop
nop dword [rax]
call fcn.00460ca0
jmp fcn.004ecee0

Function at 0x4edde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4edea7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x324469d72e76ca9a
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x3901cf39
movabs rdx, 0x603090a0a030b04
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1040300080603
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4ede48
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jge 0x4ede77
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4ede9a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4ede2b
jmp 0x4ede8e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d560
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462f80
mov eax, edi
mov ecx, 0xc
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004edde0
Function at 0x4ef6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef7a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb7f1eb6572e673a6
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xb5ddb6b7
movabs rdx, 0xa09020609090502
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x200090708050a09
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4ef748
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x33]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x33]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x4ef777
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4ef79a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4ef72b
jmp 0x4ef78e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0044d560
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462f80
mov eax, edi
mov ecx, 0xb
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004ef6e0

Function at 0x4f1240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f132a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xfc653e8021746567
mov qword [rsp + 0x35], rdx
movabs rdx, 0x16e0efc653e8021
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3ce8fe986106726f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1212120504000a10
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x704030411081212
mov qword [rsp + 0x25], rdx
movabs rdx, 0x12000f120d070005
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4f12cd
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jge 0x4f12fa
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f131d
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4f12b0
jmp 0x4f1311
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d560
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462f80
mov eax, edi
mov ecx, 0x13
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004f1240
Function at 0x4f50e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f51a7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb6b565f251eb1e44
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x8f02
movabs rdx, 0x402090902020401
mov qword [rsp + 0x18], rdx
movabs rdx, 0x106070202080402
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x4f5147
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x4f5177
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4f519a
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4f512a
jmp 0x4f518e
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044d560
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462f80
mov eax, edi
mov ecx, 0xa
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004f50e0

Function at 0x4f6060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f614c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf846eeed1d65e743
mov qword [rsp + 0x36], rdx
movabs rdx, 0x3d6cf846eeed1d65
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5e67ac566870504d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5051109010e1103
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb010f0d0d0b0704
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1103030d0911030f
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4f60ea
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x71]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x18
jge 0x4f611c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4f613f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x71]
cmp rsi, 0x12
jb 0x4f60d0
jmp 0x4f6133
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0044d560
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462f80
mov eax, edi
mov ecx, 0x12
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004f6060
Function at 0x4f7a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7b67
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x31c6cbb265049344
mov qword [rsp + 0x43], rdx
movabs rdx, 0x7fc2659c685f8fd4
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x3e817474a37fc265
mov qword [rsp + 0x50], rdx
movabs rdx, 0xcfd8d8a60c747562
mov qword [rsp + 0x58], rdx
movabs rdx, 0x202100a19090808
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc13131006110f02
mov qword [rsp + 0x21], rdx
movabs rdx, 0x18180c1313100611
mov qword [rsp + 0x23], rdx
movabs rdx, 0x518070e06080f04
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x81308041c010114
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1b0e081a141b021b
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x4f7b09
movzx r9d, byte [rsp + rsi + 0x43]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x43], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x43], dl
add rax, 2
cmp rax, 0x2a
jge 0x4f7b37
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x4f7b5a
movzx r8d, byte [rsp + rdi + 0x43]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4f7aec
jmp 0x4f7b4e
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.0044d560
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00462f80
mov eax, edi
mov ecx, 0x1d
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004f7a40

Function at 0x4f7e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7edd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7e9163526c8998b5
mov qword [rsp + 0x31], rdx
movabs rdx, 0x896c8bc57e888e7e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x108010b0e0c0400
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa0c09040108010b
mov qword [rsp + 0x21], rdx
movabs rdx, 0x6070802090b0b0e
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4f7e80
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 - 0xa]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 - 0xa]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4f7ead
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4f7ed0
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x4f7e62
jmp 0x4f7ec4
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.0044d560
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00462f80
mov eax, edi
mov ecx, 0xf
call fcn.00462f80
nop
nop dword [rax]
call fcn.00460ca0
jmp fcn.004f7e00
Function at 0x4f8d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f8e1d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2a691d327329591b
mov qword [rsp + 0x31], rdx
movabs rdx, 0x5c5b692466293d2a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x108050700000b09
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe02010805070000
mov qword [rsp + 0x21], rdx
movabs rdx, 0xd010e0507070b04
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4f8dc0
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 + 0x2d]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 + 0x2d]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4f8ded
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4f8e10
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x4f8da2
jmp 0x4f8e04
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.0044d560
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00462f80
mov eax, edi
mov ecx, 0xf
call fcn.00462f80
nop
nop dword [rax]
call fcn.00460ca0
jmp fcn.004f8d40

Function at 0x4f8e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f8f3b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb1763a17f7097299
mov qword [rsp + 0x39], rdx
movabs rdx, 0xf6e0f6deb98a9b1
mov qword [rsp + 0x40], rdx
movabs rdx, 0x57bdfb6e0aef74f7
mov qword [rsp + 0x48], rdx
movabs rdx, 0x512080e150e0304
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x140a0e120a000c07
mov qword [rsp + 0x27], rdx
movabs rdx, 0xc0c140a0e120a00
mov qword [rsp + 0x29], rdx
movabs rdx, 0x20e110f0e090c11
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4f8ed9
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4f8f0b
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f8f2e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
cmp rsi, 0x17
jb 0x4f8ebf
jmp 0x4f8f22
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0044d560
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462f80
mov eax, edi
mov ecx, 0x17
call fcn.00462f80
nop
nop dword [rax + rax]
call fcn.00460ca0
jmp fcn.004f8e40
Function at 0x4fae40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4faf3d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4118d069b4cff67d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2be9e3744118d069
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb6b609bbd474f9ab
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0f0105130c0a09
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1012060d0f0d0905
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0f0a1012060d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1030d02110b0b11
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4faee0
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 - 0x33]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 - 0x33]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4faf0d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4faf30
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4faebf
jmp 0x4faf24
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0044d560
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00462f80
mov eax, edi
mov ecx, 0x14
call fcn.00462f80
nop
nop dword [rax]
call fcn.00460ca0
jmp fcn.004fae40

Function at 0x4faf60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb04a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3d36f6db01396534
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe1cf3d36f6db0139
mov qword [rsp + 0x30], rdx
movabs rdx, 0x573a3274f12d1272
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc05060d10020509
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x70307080c05060d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9060f06000b0f04
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4fafed
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x14
jge 0x4fb01a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4fb03d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4fafd0
jmp 0x4fb031
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0044d560
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462f80
mov eax, edi
mov ecx, 0x12
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004faf60
Function at 0x4fb840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb95a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8985706e46747977
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x947c63a37e7e6eb7
mov qword [rsp + 0x47], rdx
movabs rdx, 0x42947c63a37e7e6e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6d9b9f64e3c9b869
mov qword [rsp + 0x50], rdx
movabs rdx, 0x161417120c0b0f11
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x170a161417120c0b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1606000416130008
mov qword [rsp + 0x27], rdx
movabs rdx, 0x180d120f05131709
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xe050b010707060b
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4fb8f7
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x39]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x22
jge 0x4fb929
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4fb94d
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x39]
cmp rsi, 0x19
jb 0x4fb8dd
jmp 0x4fb941
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.0044d560
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00462f80
mov eax, edi
mov ecx, 0x19
call fcn.00462f80
nop
call fcn.00460ca0
nop
jmp fcn.004fb840

Function at 0x4fc180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc25d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7f2122325008f035
mov qword [rsp + 0x31], rdx
movabs rdx, 0x318bf5695473fb7f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70601050d08040e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x60800020c050706
mov qword [rsp + 0x21], rdx
movabs rdx, 0x5060d0806060808
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4fc200
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x4fc22d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4fc250
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x4fc1e2
jmp 0x4fc244
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.0044d560
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00462f80
mov eax, edi
mov ecx, 0xf
call fcn.00462f80
nop
nop dword [rax]
call fcn.00460ca0
jmp fcn.004fc180