joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d29e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2ab2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x63727d5b606d6565
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x616d6163727d5b60
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50a020504020505
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7050403050a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d2a4c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4d2a7e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d2aa5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
cmp rsi, 0xb
jb 0x4d2a32
jmp 0x4d2a95
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00457ea0
mov eax, edi
mov ecx, 0xb
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004d29e0

Function at 0x4d2ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2b9d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xbbc1af72c58ca6a4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb8040f6c7962bbc1
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0b020b05050100
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0b0b0c0b0b020b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2070b0703060d0c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d2b40
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4d2b6d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d2b90
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d2b22
jmp 0x4d2b84
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457ea0
mov eax, edi
mov ecx, 0xe
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004d2ac0
Function at 0x4e33a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e348c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x36643e234c090d00
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5536643e234c090d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbcf2284c7255ea49
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1050f0f0b0b0d0d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf050a0e0f100105
mov qword [rsp + 0x30], rdx
movabs rdx, 0x504070e02050400
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e342a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x4e345c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4e347f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1d]
cmp rsi, 0x11
jb 0x4e3410
jmp 0x4e3473
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457ea0
mov eax, edi
mov ecx, 0x11
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004e33a0

Function at 0x4e34a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e357d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd67c816553cfe4e4
mov qword [rsp + 0x18], rdx
movabs rdx, 0x8586f265ffffd67c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd08090508080002
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc080d0809050808
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0109080106070b
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4e3520
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4e354d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4e3570
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4e3502
jmp 0x4e3564
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457ea0
mov eax, edi
mov ecx, 0xe
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004e34a0
Function at 0x4e5420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e54dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x762bffaaa9d65f6
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 9
movabs rdx, 0x30505080403
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x20007
xor eax, eax
nop
jmp 0x4e5480
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4e54ad
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4e54d0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4e5462
jmp 0x4e54c4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00457ea0
mov eax, edi
mov ecx, 9
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004e5420

Function at 0x4e5500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e55b2
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0xf6508b8a876194e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x505010704070503
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4e5551
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x4e557e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4e55a5
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x4e5534
jmp 0x4e5595
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00445b60
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00457ea0
mov eax, edi
mov ecx, 8
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004e5500

Function at 0x4eca40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ecb3d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xad8a63ad869afe4d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xab6e42c296ad8a63
mov qword [rsp + 0x24], rdx
movabs rdx, 0xbda29d54c785ee86
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3030a070d100d0e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x130c10091201140d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd0a1012130c1009
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf08021002060406
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ecae0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x11]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x11]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4ecb0d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ecb30
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x4ecabf
jmp 0x4ecb24
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457ea0
mov eax, edi
mov ecx, 0x15
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004eca40
Function at 0x4ed7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed8ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1f5872416568422b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5d6c40741661611f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x13f6954496c7250
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0d120a0c111502
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20307040904110f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60e000116090402
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ed84a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x12]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x4ed87c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4ed89f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x12]
cmp rsi, 0x17
jb 0x4ed830
jmp 0x4ed893
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457ea0
mov eax, edi
mov ecx, 0x17
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004ed7c0

Function at 0x4ee720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee82c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xb87e74a382786f7d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x648461a8912059b8
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa9b9a8d6d38b8261
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x407131607120207
mov qword [rsp + 0x36], rdx
movabs rdx, 0x315040713160712
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40b160403020214
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7101107060d1004
mov qword [rsp + 0x48], rdx
movabs rdx, 0x215000d0b0a0813
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ee7c8
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x22
jge 0x4ee7fc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x17
jae 0x4ee81f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0x17
jb 0x4ee7ae
jmp 0x4ee813
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00445b60
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457ea0
mov eax, edi
mov ecx, 0x17
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004ee720
Function at 0x4eeda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eee9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xaa7263c7b0d2bdde
mov qword [rsp + 0x18], rdx
movabs rdx, 0x646e7ac089f346cb
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7f91d7bc0264dd26
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20604150b090b06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1310160107141111
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100004020a0d1317
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100d0309100b080c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4eee39
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x73]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x20
jge 0x4eee6b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4eee8e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x73]
cmp rsi, 0x18
jb 0x4eee1f
jmp 0x4eee82
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457ea0
mov eax, edi
mov ecx, 0x18
call fcn.00457ea0
nop
nop dword [rax + rax]
call fcn.00455c20
jmp fcn.004eeda0

Function at 0x4eeec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eefac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xcfcd87bc27271e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x64046174bbb76100
mov qword [rsp + 0x20], rdx
movabs rdx, 0xdf0e691a21c3720c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x71302060512110f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0a0f0f03000104
mov qword [rsp + 0x38], rdx
movabs rdx, 0x115020d16000901
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4eef4a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3a]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x4eef7c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4eef9f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3a]
cmp rsi, 0x17
jb 0x4eef30
jmp 0x4eef93
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457ea0
mov eax, edi
mov ecx, 0x17
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004eeec0
Function at 0x4f49e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4adb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa0aca0b18f73e294
mov qword [rsp + 0x19], rdx
movabs rdx, 0x149df8828c20c7a0
mov qword [rsp + 0x20], rdx
movabs rdx, 0x935ccfd620647206
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0c001306140c0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0e0f1615040e0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7011505010c1608
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0a00060d0c1603
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f4a79
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x20
jge 0x4f4aab
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f4ace
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0x17
jb 0x4f4a5f
jmp 0x4f4ac2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457ea0
mov eax, edi
mov ecx, 0x17
call fcn.00457ea0
nop
nop dword [rax + rax]
call fcn.00455c20
jmp fcn.004f49e0

Function at 0x4f4e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4f4c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x73013068e0f2f94e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x20741ce8feab0669
mov qword [rsp + 0x21], rdx
movabs rdx, 0x9ea46a94520741c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2470f7d2ee294361
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa01100d1b03130c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x190c130b1a0c1601
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc06190c130b1a0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1114161a1310051b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c0c121109060205
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6181a1706030a14
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4f4ee6
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xd]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4f4f1c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1d
jae 0x4f4f3f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xd]
cmp rsi, 0x1d
jb 0x4f4ecc
jmp 0x4f4f33
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.00445b60
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00457ea0
mov eax, edi
mov ecx, 0x1d
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004f4e20
Function at 0x4f57a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f588a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7465206b57685067
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8a69157465206b57
mov qword [rsp + 0x22], rdx
movabs rdx, 0x657863548e647278
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1011110a090b0e08
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb040a0008101011
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1009010006030802
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f582d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4f585a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f587d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4f5810
jmp 0x4f5871
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457ea0
mov eax, edi
mov ecx, 0x13
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004f57a0

Function at 0x4f67a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f689b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc26ab400e4b1f3af
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xacda61c26ab400e4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x934c69159da6fba6
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe060b040c010307
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9000102120d0b0c
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa0a09000102120d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11050705070f0012
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f6839
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x58]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4f686b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f688e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x58]
cmp rsi, 0x13
jb 0x4f681f
jmp 0x4f6882
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457ea0
mov eax, edi
mov ecx, 0x13
call fcn.00457ea0
nop
nop dword [rax + rax]
call fcn.00455c20
jmp fcn.004f67a0
Function at 0x4f68c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f69bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x726378d5669669cf
mov qword [rsp + 0x19], rdx
movabs rdx, 0x39f4e9d265ede572
mov qword [rsp + 0x20], rdx
movabs rdx, 0x826d0be320eafbe7
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa1106051303050b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb14061016060a00
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0804000d050e02
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2090f0913110f0e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f6960
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4f698d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f69b0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4f693f
jmp 0x4f69a4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457ea0
mov eax, edi
mov ecx, 0x17
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004f68c0

Function at 0x4f7260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f734a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x613735203ff0fef5
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x64f6613735203ff0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd6d3d322005fc17
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20c060105110c00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa00000b020c0601
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0e050f080f0603
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f72ed
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x46]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4f731a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4f733d
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4f72d0
jmp 0x4f7331
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457ea0
mov eax, edi
mov ecx, 0x12
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004f7260
Function at 0x4f8fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f90c8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x3e44490520165508
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6e1c3253de5c5e72
mov qword [rsp + 0x27], rdx
movabs rdx, 0xf16e1c3253de5c5e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65f8694501647251
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10050e0d11061403
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7150b0017050b00
mov qword [rsp + 0x40], rdx
movabs rdx, 0x214170704041417
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa050d0900040005
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f906b
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x4f9098
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f90bb
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4f904e
jmp 0x4f90af
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.00445b60
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457ea0
mov eax, edi
mov ecx, 0x19
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004f8fc0

Function at 0x4fae00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4faeea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e8b8024207d4d49
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x646e8b8024207d4d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x786d6989a29a8382
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4100c0406101009
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd02101000000a10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50b040d0b0b0902
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fae8d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x4faeba
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4faedd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4fae70
jmp 0x4faed1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457ea0
mov eax, edi
mov ecx, 0x11
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004fae00