joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e6320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6436
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xdd61a19b6e61f571
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6ef37498ecea806b
mov qword [rsp + 0x23], rdx
movabs rdx, 0x646ef37498ecea80
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe86df2cf20f27a8b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x51804090e0c0111
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1100120e0a130012
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x71801091100120e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70b04160015150c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e63ce
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x57]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4e6402
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4e6429
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x57]
cmp rsi, 0x19
jb 0x4e63b4
nop
jmp 0x4e641d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.004418e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00453440
mov eax, edi
mov ecx, 0x19
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004e6320

Function at 0x4e6460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6568
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x9ee8e324446972cd
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf7d4403a538e0f9e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x416d1beb2064f23f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x130713090d070600
mov qword [rsp + 0x34], rdx
movabs rdx, 0x140f0e050804050d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1003050d140f0e05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x160f0b0c0b070600
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e6502
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x53]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x53]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1c
jge 0x4e652f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e655b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x4e64e5
jmp 0x4e654f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.004418e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00453440
mov eax, edi
mov ecx, 0x17
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004e6460
Function at 0x4e78e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e79dc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x5320bc654010341c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1e0461745320bc65
mov qword [rsp + 0x20], rdx
movabs rdx, 0x375b69542e642f03
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0c120a050a0b02
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1312130a0b00020c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1305010b030d0f12
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e7970
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x12]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4e79a8
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4e79cf
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x12]
nop word [rax + rax]
cmp rsi, 0x14
jb 0x4e7956
jmp 0x4e79c3
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00453440
mov eax, edi
mov ecx, 0x14
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004e78e0
Function at 0x4e8b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8c36
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x121520512d62031b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3a611a3e49393047
mov qword [rsp + 0x23], rdx
movabs rdx, 0x643a611a3e493930
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1a3b694a200b7261
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb18180613070d02
mov qword [rsp + 0x34], rdx
movabs rdx, 0x215130b0b07000a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x8040b010215130b
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0c170f06030906
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e8bce
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4e8c02
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4e8c29
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
cmp rsi, 0x19
jb 0x4e8bb4
nop
jmp 0x4e8c1d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.004418e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00453440
mov eax, edi
mov ecx, 0x19
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004e8b20
Function at 0x4eb440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb536
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x5320a47f44857a79
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x648493865320a47f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7f7b5d8c8084a361
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50010050d10120e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x802090004130500
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10020a0f11000a03
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4eb4d3
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 5]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 5]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x4eb502
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4eb529
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4eb4b6
nop
jmp 0x4eb51d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00453440
mov eax, edi
mov ecx, 0x14
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004eb440

Function at 0x4ec900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eca28
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x6a424f43b3b3a67c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6b7c869720826a72
mov qword [rsp + 0x24], rdx
movabs rdx, 0xad6e605b6b7c8697
mov qword [rsp + 0x28], rdx
movabs rdx, 0x656574352090a761
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3130e030a0c0201
mov qword [rsp + 0x38], rdx
movabs rdx, 0x151506030d05180e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71b1a0016151802
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11180119070f0101
mov qword [rsp + 0x50], rdx
movabs rdx, 0x101a0013071b1009
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ec9c0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x33]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x4ec9f2
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4eca1b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x33]
cmp rsi, 0x1c
jb 0x4ec9a3
jmp 0x4eca0f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00453440
mov eax, edi
mov ecx, 0x1c
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004ec900
Function at 0x4ecd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ece56
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x777c4877b47220c5
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xeb9261f909087677
mov qword [rsp + 0x26], rdx
movabs rdx, 0x46d6954e4134951
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x111100d000a160a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x16080111100d000a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12100809030a0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb100a06110e1106
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf16040f0b090f0f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ecdee
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x22
jge 0x4ece22
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4ece49
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 0x17
jb 0x4ecdd4
nop
jmp 0x4ece3d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.004418e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x17
call fcn.00453440
mov eax, edi
mov ecx, 0x17
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004ecd40

Function at 0x4ed560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed668
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x61423c40c17473cd
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x464a5d1653204e61
mov qword [rsp + 0x22], rdx
movabs rdx, 0x41f92d5452644941
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb1404080815
mov qword [rsp + 0x32], rdx
movabs rdx, 0x160f0d0b00140b03
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd12060e120f160f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc10160c140405
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ed602
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1e
jge 0x4ed62f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4ed65b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x17
jb 0x4ed5e5
jmp 0x4ed64f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.004418e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00453440
mov eax, edi
mov ecx, 0x17
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004ed560
Function at 0x4ed7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed896
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6e1b2af34e553d04
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x216e1b2af34e553d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x656d2e5441267225
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40b0c00060c0109
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x801040b0c00060c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x104030b0e020005
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ed833
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x2c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x2c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x4ed862
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4ed889
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x4ed816
nop
jmp 0x4ed87d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00453440
mov eax, edi
mov ecx, 0x11
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004ed7a0

Function at 0x4eebe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eece8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xb073753b8f6cd842
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1fe429f029b07375
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3c6d69d3d464f137
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe04071407091412
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10070d080b0d0a03
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa0910070d080b0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4090a0c11090c01
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4eec80
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4eecb2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4eecdb
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0x15
jb 0x4eec65
jmp 0x4eeccf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453440
mov eax, edi
mov ecx, 0x15
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004eebe0
Function at 0x4eed00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eedf6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x553b746f5a734b49
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x115961645c553b74
mov qword [rsp + 0x22], rdx
movabs rdx, 0x46546c542069725b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x13140c070100060d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x409010b030f1314
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80d051200130100
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4eed93
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x4eedc2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4eede9
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4eed76
nop
jmp 0x4eeddd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453440
mov eax, edi
mov ecx, 0x15
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004eed00
Function at 0x4f16a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f17a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x206b1f550d396f15
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x640a492553206b1f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5d52650f20303838
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x140b05030b030211
mov qword [rsp + 0x32], rdx
movabs rdx, 0x302141302000f13
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x9080e00110a0302
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40a140a0512080d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f1742
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x4f176f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f179b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4f1725
jmp 0x4f178f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.004418e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453440
mov eax, edi
mov ecx, 0x15
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004f16a0

Function at 0x4f9980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9a88
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x4e73a36646697079
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x649e364e73a36646
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x797d6f879c658483
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0f0505030905
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x11070f0c09080f0e
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf0711070f0c0908
mov qword [rsp + 0x38], rdx
movabs rdx, 0x411080f0e110601
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f9a20
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x21]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4f9a52
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f9a7b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x21]
cmp rsi, 0x13
jb 0x4f9a05
jmp 0x4f9a6f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453440
mov eax, edi
mov ecx, 0x13
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004f9980
Function at 0x4fa380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rdx, 0x4a4dbf814fde19da
mov qword [rsp + 0x20], rdx
movabs rdx, 0x202040007010506
mov qword [rsp + 0x10], rdx
xor eax, eax
jmp 0x4fa3d3
movzx r8d, byte [rsp + rbx + 0x20]
lea edx, [r8 + rdx]
lea edx, [rdx + 1]
mov byte [rsp + rsi + 0x20], dl
mov byte [rsp + rbx + 0x20], dil
add rax, 2
cmp rax, 8
jge 0x4fa408
movzx edx, byte [rsp + rax + 0x10]
movzx ebx, byte [rsp + rax + 0x11]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x4fa447
movzx edi, byte [rsp + rsi + 0x20]
lea edi, [rdi + rdx]
lea edi, [rdi + 1]
nop word [rax + rax]
cmp rbx, 8
jb 0x4fa3b9
jmp 0x4fa43b
mov qword [rsp + 0x18], 0
xor eax, eax
jmp 0x4fa421
movzx ecx, byte [rsp + rax + 0x20]
mov byte [rsp + rax + 0x18], cl
inc rax
cmp rax, 8
jl 0x4fa415
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, ebx
mov ecx, 8
call fcn.00453440
mov eax, esi
mov ecx, 8
call fcn.00453440
nop
int3

Function at 0x4fb960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fba32
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x172e74df6576f5a4
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xb1b288d0
movabs rdx, 0xa0b0b0708090a04
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90000010a060106
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4fb9ce
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4fb9fb
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4fba25
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4fb9b1
jmp 0x4fba16
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00453440
mov eax, edi
mov ecx, 0xc
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004fb960
Function at 0x4fcaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fcbc6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6b9483b770ad657d
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb380a090aa6f666e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8f426ea7b380a090
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8645989664899748
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc04040b10041500
mov qword [rsp + 0x34], rdx
movabs rdx, 0x61b10050c04040b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1902160f06070c13
mov qword [rsp + 0x40], rdx
movabs rdx, 0x180b191b040e0503
mov qword [rsp + 0x48], rdx
movabs rdx, 0x707160d15000305
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4fcb60
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 9]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 9]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x24
jge 0x4fcb8d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4fcbb4
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4fcb43
jmp 0x4fcba8
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
call fcn.004418e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00453440
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004fcaa0

Function at 0x4fdda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fde72
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x10ebbdf747269bf
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x9d72edee
movabs rdx, 0xb00040b09070005
mov qword [rsp + 0x28], rdx
movabs rdx, 0x808080006060405
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4fde0b
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4fde3d
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4fde65
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x54]
cmp rsi, 0xc
jb 0x4fddf1
jmp 0x4fde58
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00453440
mov eax, edi
mov ecx, 0xc
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004fdda0
Function at 0x4fde80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fdf5c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x53720d6841440e32
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4e374b53720d6841
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9080a0a01010109
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x300070203050908
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4fdef2
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x12]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4fdf28
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4fdf4f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x12]
nop dword [rax]
cmp rsi, 0xb
jb 0x4fded8
jmp 0x4fdf43
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453440
mov eax, edi
mov ecx, 0xb
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004fde80

Function at 0x4fdf80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fe052
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x652ed1ce539ec7dc
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6c8744652ed1ce53
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x105050205090506
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2000104
xor eax, eax
jmp 0x4fdfee
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4fe01b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4fe045
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4fdfd1
jmp 0x4fe036
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00453440
mov eax, edi
mov ecx, 0xb
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004fdf80