joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4da000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da0fd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc5f73f703b746547
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc8de7467c5f73f70
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57794b267ebb65e7
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf1110040e0b0508
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf080408080b0304
mov qword [rsp + 0x36], rdx
movabs rdx, 0x80a0f080408080b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5110a0710060c0f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4da0a0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x5e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x5e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4da0cd
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4da0f0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x4da07f
jmp 0x4da0e4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.00440c40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00450f20
mov eax, edi
mov ecx, 0x14
call fcn.00450f20
nop
nop dword [rax]
call fcn.0044eca0
jmp fcn.004da000

Function at 0x4da9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4daa8a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x49275f2b47746147
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x513649275f2b4774
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7673504e2c762b65
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9080f0d03060b0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0e0c1107040e09
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe050f110e010406
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4daa2d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x4daa5a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4daa7d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4daa10
jmp 0x4daa71
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00440c40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00450f20
mov eax, edi
mov ecx, 0x12
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004da9a0
Function at 0x4e03e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e04b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4f735fcc7170effe
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x65526974664f735f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x600050b01060409
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4040b0105000300
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e044c
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4e047e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e04a5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6d]
cmp rsi, 0xd
jb 0x4e0432
jmp 0x4e0495
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00440c40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00450f20
mov eax, edi
mov ecx, 0xd
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004e03e0

Function at 0x4e0960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e0a7a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6b7f7827400e62d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x576c980d2d10ff65
mov qword [rsp + 0x20], rdx
movabs rdx, 0x691b576c980d2d10
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe2759e797403f28c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1601060f0c17100a
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd0b0500140c1601
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6070412140a020f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7051419120b140d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130a010413160907
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e0a17
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4a]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x26
jge 0x4e0a49
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4e0a6d
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4a]
cmp rsi, 0x1a
jb 0x4e09fd
jmp 0x4e0a61
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00440c40
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00450f20
mov eax, edi
mov ecx, 0x1a
call fcn.00450f20
nop
call fcn.0044eca0
nop
jmp fcn.004e0960
Function at 0x4e0f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e106c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf772844477610152
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x79710074d4f77284
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe6abfdf06edce3f4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10a120b050a1305
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa1103130f14010a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1110d0813070e12
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e100a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4e103c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e105f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0x15
jb 0x4e0ff0
jmp 0x4e1053
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00440c40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00450f20
mov eax, edi
mov ecx, 0x15
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004e0f80

Function at 0x4e1f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1fc6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8d4f646a456b6574
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x936f6984
movabs rdx, 0x2080b0a00040207
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb00080a000a0208
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e1f62
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
mov byte [rsp + rdi + 0x1e], r9b
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4e1f8f
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4e1fb7
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4e1f4b
jmp 0x4e1fab
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
nop dword [rax + rax]
call fcn.00440c40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00450f20
mov eax, edi
mov ecx, 0xc
nop
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004e1f00
Function at 0x4e2600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e26cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x357026c9cfb4c513
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1fdc69357026c9cf
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa00060005010a00
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30a010402090702
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e266f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x53]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x53]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x4e269c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4e26bf
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4e2652
jmp 0x4e26b3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00440c40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00450f20
mov eax, edi
mov ecx, 0xb
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004e2600

Function at 0x4e7480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7566
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x72fb696565e3eb46
mov qword [rsp + 0x19], rdx
movabs rdx, 0x576fbbd0db72fb69
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x501010501060509
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa04050101050106
mov qword [rsp + 0x28], rdx
movabs rdx, 0x802090a0a010205
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4e7500
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x70]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4e7532
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e7557
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x70]
cmp rsi, 0xd
jb 0x4e74e2
jmp 0x4e754b
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.00440c40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00450f20
mov eax, edi
mov ecx, 0xd
nop
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004e7480
Function at 0x4f6360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f642c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3233cb928f08476b
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xddcfd435
movabs rdx, 0xa080a02010a030b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x905090a0b050a04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f63c5
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4f63fc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4f641f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
cmp rsi, 0xc
jb 0x4f63ab
jmp 0x4f6413
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00440c40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00450f20
mov eax, edi
mov ecx, 0xc
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004f6360

Function at 0x4f6440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f650c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x74a665120c8eb2b5
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc4ae450f65fee274
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe0b0d0803090803
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60e010203040e
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f64af
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4f64dc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4f64ff
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4f6492
jmp 0x4f64f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00440c40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00450f20
mov eax, edi
mov ecx, 0xf
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004f6440

Function at 0x4f6800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f68cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb3adbd6544c0f8ed
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb4650d08a956ebb3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x80c0e0b01060100
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa05080c0e0702
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f686f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x3f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x3f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4f689c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4f68bf
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4f6852
jmp 0x4f68b3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00440c40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00450f20
mov eax, edi
mov ecx, 0xf
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004f6800
Function at 0x4f68e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f69ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4d6461a2d0600efc
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc64d6461a2d0600e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57fa6ef47274584e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4080d090d020a0d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x102030f04080d09
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90800000f04090d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f696d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4f699a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4f69bd
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4f6950
jmp 0x4f69b1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00440c40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00450f20
mov eax, edi
mov ecx, 0x11
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004f68e0

Function at 0x4f7da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7e66
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd9626d65f60e739f
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x72
movabs rdx, 0x107030003000100
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x20107
xor eax, eax
nop
jmp 0x4f7e00
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4f7e32
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4f7e57
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x39]
cmp rsi, 9
jb 0x4f7de2
jmp 0x4f7e4b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00440c40
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00450f20
mov eax, edi
mov ecx, 9
nop
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004f7da0

Function at 0x4f7e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7f38
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc3c537d330c2d14e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x104060703060205
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x202
xor eax, eax
jmp 0x4f7ed8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4f7f08
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4f7f2b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4f7ebb
jmp 0x4f7f1f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00440c40
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00450f20
mov eax, edi
mov ecx, 8
call fcn.00450f20
nop
call fcn.0044eca0
nop dword [rax]
jmp fcn.004f7e80
Function at 0x4fc280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc36c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3927ca163f332754
mov qword [rsp + 0x19], rdx
movabs rdx, 0x64392f7464e1e739
mov qword [rsp + 0x20], rdx
movabs rdx, 0x173c69541eeaed21
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa040111070d0803
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40c031615061510
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12050c0f0c090201
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fc30a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x4fc33c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4fc35f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0x17
jb 0x4fc2f0
jmp 0x4fc353
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00440c40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00450f20
mov eax, edi
mov ecx, 0x17
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004fc280

Function at 0x4ff960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ffa87
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x4541ab3128e475cd
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2f77c34616c21864
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6440d6e2c3c92f77
mov qword [rsp + 0x26], rdx
movabs rdx, 0x75a680b12064d3ce
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1d0f11030c10051b
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe09090b04131414
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1c0f0e09090b0413
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b1007001c110f10
mov qword [rsp + 0x48], rdx
movabs rdx, 0x171412021a0a0d0b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x171013160d101d00
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ffa29
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x42]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x42]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x2a
jge 0x4ffa57
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x4ffa7a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4ffa0c
jmp 0x4ffa6e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
call fcn.00440c40
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00450f20
mov eax, edi
mov ecx, 0x1e
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004ff960
Function at 0x4ffaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ffbbd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xf3ed6184920865ca
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xdb6163698e85aa41
mov qword [rsp + 0x23], rdx
movabs rdx, 0xb96e619da3db6163
mov qword [rsp + 0x28], rdx
movabs rdx, 0x656d294f7595ac9f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60a150b140f0f17
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90407140f170a18
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf19060010040214
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a11140f0f1a0302
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1116140609180f0a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ffb60
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4ffb8d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4ffbb0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4ffb3d
jmp 0x4ffba4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00440c40
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00450f20
mov eax, edi
mov ecx, 0x1d
call fcn.00450f20
nop
nop dword [rax]
call fcn.0044eca0
jmp fcn.004ffaa0

Function at 0x5010e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50120c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x6e84487404116fa2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x9661210a228a8420
mov qword [rsp + 0x27], rdx
movabs rdx, 0x9ff816da0de65d96
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x59b663693165655c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x3100c1405020f16
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1109160d0a0b1a0a
mov qword [rsp + 0x46], rdx
movabs rdx, 0x3171109160d0a0b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1d16150c180c1602
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1e111511121a0611
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb13110018030f02
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x5011a6
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x2a
jge 0x5011dc
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1f
jae 0x5011ff
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
cmp rsi, 0x1f
jb 0x50118c
jmp 0x5011f3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1f
call fcn.00440c40
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00450f20
mov eax, edi
mov ecx, 0x1f
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.005010e0
Function at 0x504d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x504e47
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xcffa692ebf4b613b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf81640f76e394653
mov qword [rsp + 0x26], rdx
movabs rdx, 0x35070712362cf816
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x34bb386942105328
mov qword [rsp + 0x34], rdx
movabs rdx, 0x7120318060f0314
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1b151b1c13071909
mov qword [rsp + 0x44], rdx
movabs rdx, 0x10041d121b151b1c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110d110f140c060a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x170417030e040c10
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7140f120700020f
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x504de9
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2c
jge 0x504e17
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x504e3a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1e
jb 0x504dcc
jmp 0x504e2e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.00440c40
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00450f20
mov eax, edi
mov ecx, 0x1e
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.00504d20

Function at 0x505be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x505cca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xbc91b5894f7fb741
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x64399abc91b5894f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9a6d967372bc7261
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9050e0d03010605
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe01060407120e03
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30208121004060f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x505c6d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x505c9a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x505cbd
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x505c50
jmp 0x505cb1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00440c40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00450f20
mov eax, edi
mov ecx, 0x13
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.00505be0