joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d7b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7c3b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6fb3c10f6972f456
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x564f6fb3c10f6972
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa9af23b9126c391c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0d01050f0b040a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf1009040b110804
mov qword [rsp + 0x36], rdx
movabs rdx, 0x60e0f1009040b11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50a040404040910
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d7bd9
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x68]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4d7c0b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4d7c2e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x68]
cmp rsi, 0x12
jb 0x4d7bbf
jmp 0x4d7c22
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460ec0
mov eax, edi
mov ecx, 0x12
call fcn.00460ec0
nop
nop dword [rax + rax]
call fcn.0045ec40
jmp fcn.004d7b40
Function at 0x4e5960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5a5b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2970c8e6d8d87235
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9e27ccd55564d34b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1eb6736666873f6b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf120f030b0f0e03
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf090717110d120d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40c16090d080704
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1705020200020d0c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e59f9
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x20
jge 0x4e5a2b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4e5a4e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7c]
cmp rsi, 0x18
jb 0x4e59df
jmp 0x4e5a42
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00460ec0
mov eax, edi
mov ecx, 0x18
call fcn.00460ec0
nop
nop dword [rax + rax]
call fcn.0045ec40
jmp fcn.004e5960

Function at 0x4e5d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5e67
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x410403c80f7434ea
mov qword [rsp + 0x18], rdx
movabs rdx, 0xea484935410403c8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x659af8e2122064d3
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe46f64f4bc42ec71
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x582e696c61d4744d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x111012150b180f1b
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x11011e1511101215
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf1210170c0b000c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x230a06181c100803
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6000400001205
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa22120f1b0f1222
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf140f1510232317
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4e5e07
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x52]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x52]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x34
jge 0x4e5e37
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x24
jae 0x4e5e5a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x24
jb 0x4e5dea
jmp 0x4e5e4e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x24
call fcn.0044b900
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00460ec0
mov eax, edi
mov ecx, 0x24
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004e5d20
Function at 0x4e7240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4e73a7
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0xec1c108407e08b45
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa271e0ec6044420
mov qword [rsp + 0x21], rdx
movabs rdx, 0x8172b820380a271e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x61766e69d5692e6f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3c743d6d3d8d2141
mov qword [rsp + 0x36], rdx
movabs rdx, 0x2af9646e69dbf26f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1f0a0a1412012718
mov qword [rsp + 0x46], rdx
movabs rdx, 0x200d2410040f0b1e
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x260e200d2410040f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x22122b1e182b050c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x180a2c1d27070102
mov qword [rsp + 0x60], rdx
movabs rdx, 0x106162c2209060f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1f1f261e001d0e09
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2b170a1403200a2c
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4e734a
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x70]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x70]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x3a
jge 0x4e7377
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4e739a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x2d
jb 0x4e732d
jmp 0x4e738e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2d
call fcn.0044b900
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00460ec0
mov eax, edi
mov ecx, 0x2d
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004e7240

Function at 0x4e7600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e76ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf2ede47559cec4ea
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf15d72d698f2ede4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x95d3e074656d20d3
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2000d1414010314
mov qword [rsp + 0x30], rdx
movabs rdx, 0x813080006050b0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90c121207070d0d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e768a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4e76bc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e76df
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 0x15
jb 0x4e7670
jmp 0x4e76d3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460ec0
mov eax, edi
mov ecx, 0x15
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004e7600
Function at 0x4f01a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f02d8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xcf286d9f8966cc5e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6563946156cf286d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6f203d8477579a3b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xbe87498d6f6e8566
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6c63486c3d43658c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe191d0a0401191c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe22000f070f031b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4001a0b1b05241f
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb100e1a1f060011
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a2410160f191220
mov qword [rsp + 0x60], rdx
movabs rdx, 0xd0d011c191a1220
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4f0275
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x30
jge 0x4f02a8
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4f02cb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
nop
cmp rsi, 0x25
jb 0x4f025b
jmp 0x4f02bf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x25
call fcn.0044b900
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00460ec0
mov eax, edi
mov ecx, 0x25
call fcn.00460ec0
nop
call fcn.0045ec40
nop dword [rax]
jmp fcn.004f01a0

Function at 0x4f0300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0438
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x2ead7265cc480dc7
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x16bc2966562ead72
mov qword [rsp + 0x20], rdx
movabs rdx, 0x21205ca72f5b422e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x79dabebb6f6ef466
mov qword [rsp + 0x30], rdx
movabs rdx, 0x57baaf004a202847
mov qword [rsp + 0x38], rdx
movabs rdx, 0x121d01141a21090f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x201b031b16241d0f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x142302231120101e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x140c0c0a00091211
mov qword [rsp + 0x58], rdx
movabs rdx, 0x100b05162401011b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x50a191e06221a03
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4f03d5
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x77]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x30
jge 0x4f0408
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4f042b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x77]
nop
cmp rsi, 0x25
jb 0x4f03bb
jmp 0x4f041f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x25
call fcn.0044b900
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00460ec0
mov eax, edi
mov ecx, 0x25
call fcn.00460ec0
nop
call fcn.0045ec40
nop dword [rax]
jmp fcn.004f0300
Function at 0x4f3bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f3c86
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb433257061181b61
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6cdabadb
movabs rdx, 0x901020507080a01
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x8010109
xor eax, eax
jmp 0x4f3c20
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4f3c52
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4f3c77
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 0xc
jb 0x4f3c04
jmp 0x4f3c6b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
mov eax, edi
mov ecx, 0xc
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004f3bc0

Function at 0x4f4440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4507
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xfc09bc0a0a65fc0a
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf61088fc09bc0a0a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80a060007050808
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9030401
xor eax, eax
jmp 0x4f44a8
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4f44d7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4f44fa
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4f448b
jmp 0x4f44ee
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460ec0
mov eax, edi
mov ecx, 0xb
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004f4440

Function at 0x4f4520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f45e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5b3a4d155f324a48
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x13f1
movabs rdx, 0x801040607000509
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x401
xor eax, eax
jmp 0x4f4580
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x13]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4f45b2
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4f45d7
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x13]
cmp rsi, 0xa
jb 0x4f4562
jmp 0x4f45cb
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.0044b900
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00460ec0
mov eax, edi
mov ecx, 0xa
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004f4520
Function at 0x4f48a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4986
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e6fbbb418be99ef
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x666c66a58dbcaf6e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3040309030b090c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90b03040309030b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa080a000b010205
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4f4920
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5c]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4f4952
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4f4977
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5c]
cmp rsi, 0xf
jb 0x4f4902
jmp 0x4f496b
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00460ec0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004f48a0

Function at 0x4f4ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4db8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6f542774a0261dac
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x66766515
movabs rdx, 0x40002050a00020a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa00040002050a00
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0a080504010305
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f4d54
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x44]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x12
jge 0x4f4d88
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4f4dab
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x44]
nop
cmp rsi, 0xc
jb 0x4f4d3a
jmp 0x4f4d9f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
mov eax, edi
mov ecx, 0xc
call fcn.00460ec0
nop
call fcn.0045ec40
nop dword [rax]
jmp fcn.004f4ce0
Function at 0x4f5960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5a38
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6f736eb49483e9a4
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x50808b81
movabs rdx, 0xa01010102000403
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa080a0101010200
mov qword [rsp + 0x28], rdx
movabs rdx, 0x203020208090a00
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f59d4
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x12
jge 0x4f5a08
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4f5a2b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2c]
nop
cmp rsi, 0xc
jb 0x4f59ba
jmp 0x4f5a1f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00460ec0
mov eax, edi
mov ecx, 0xc
call fcn.00460ec0
nop
call fcn.0045ec40
nop dword [rax]
jmp fcn.004f5960

Function at 0x4f5a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5b7d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x4945251554335d54
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3d203b47386f661d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5e2d6e4a3d203b47
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf1035f1864244562
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1218121b0f080b06
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x3100018101a1218
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1416050f040c140e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x16190d0f1b131a0c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2130c010f1515
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4f5b20
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x3a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x3a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4f5b4d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4f5b70
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4f5afd
jmp 0x4f5b64
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.0044b900
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00460ec0
mov eax, edi
mov ecx, 0x1c
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004f5a60
Function at 0x4f5ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5ca8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6b6a6e697b6b5f84
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6558766b7374495b
mov qword [rsp + 0x21], rdx
movabs rdx, 0x686558766b737449
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4d4e51506e616883
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1009161803111517
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1606170e02080b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x11030c1112160016
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12010208070d020c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f5c4b
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x18]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x18]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x4f5c78
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f5c9b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x4f5c2e
jmp 0x4f5c8f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044b900
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00460ec0
mov eax, edi
mov ecx, 0x19
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004f5ba0

Function at 0x4f5cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5dbd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8e93f49dbc89657a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xdb058e93f49dbc89
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57a6e68dba658269
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6060e0b100f0d05
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40904040d080305
mov qword [rsp + 0x36], rdx
movabs rdx, 0x705040904040d08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10080402020d0003
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f5d60
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4f5d8d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4f5db0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x4f5d3f
jmp 0x4f5da4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.0044b900
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460ec0
mov eax, edi
mov ecx, 0x12
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004f5cc0
Function at 0x4f7500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f75cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7ea29f170e0b074e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x708987ea29f170e
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa080603070a0805
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x305020401090a08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f756f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x6d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x6d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4f759c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4f75bf
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4f7552
jmp 0x4f75b3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044b900
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00460ec0
mov eax, edi
mov ecx, 0xb
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004f7500

Function at 0x4fa980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4faa6c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x15a406ce2011c1c4
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1d0f15a406ce2011
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x656c0f660e64c273
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf0708050d020401
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x808080d01090f07
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb000b0d06000408
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4faa0a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x4faa3c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4faa5f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 0x12
jb 0x4fa9f0
jmp 0x4faa53
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044b900
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460ec0
mov eax, edi
mov ecx, 0x12
call fcn.00460ec0
nop
call fcn.0045ec40
jmp fcn.004fa980
Function at 0x4fede0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4feefd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2062831b6f553c4a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3e56142052624f48
mov qword [rsp + 0x23], rdx
movabs rdx, 0x583e56142052624f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x526374755d644332
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0f121109040a18
mov qword [rsp + 0x34], rdx
movabs rdx, 0x90001140d0f1211
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2080f0b17070012
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10170b0e12061702
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2110e0d080b1805
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4feea0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x2e]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x2e]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4feecd
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4feef0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4fee7d
jmp 0x4feee4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044b900
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00460ec0
mov eax, edi
mov ecx, 0x19
call fcn.00460ec0
nop
nop dword [rax]
call fcn.0045ec40
jmp fcn.004fede0