joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4da100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da1c7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd1d8e2bbc0ea5339
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x6675
movabs rdx, 0x700030409020303
mov qword [rsp + 0x22], rdx
movabs rdx, 0x702060604050700
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4da167
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4da197
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4da1ba
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4da14a
jmp 0x4da1ae
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044c140
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461b40
mov eax, edi
mov ecx, 0xa
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004da100

Function at 0x4da1e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da2ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x503c4e4770587271
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x67503c4e47705872
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x42595c686c5c6355
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1002080f0b090506
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0b080d1002080f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4030105000e0c06
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4da26d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4da29a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4da2bd
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4da250
jmp 0x4da2b1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461b40
mov eax, edi
mov ecx, 0x11
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004da1e0
Function at 0x4dd180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dd252
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xaf686465a9a84dad
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb33fb5b866206faf
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1060e060e0d030b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x200020b060b0c07
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4dd1ec
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4dd21e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4dd245
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 0xf
jb 0x4dd1d2
jmp 0x4dd235
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00461b40
mov eax, edi
mov ecx, 0xf
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004dd180

Function at 0x4dd260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dd33d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x75648bbf843070fd
mov qword [rsp + 0x18], rdx
movabs rdx, 0x8df53898fe727564
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2050302020d0b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90c000205030202
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4050a040d0d0b03
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4dd2e0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x7d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x7d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4dd30d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4dd330
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4dd2c2
jmp 0x4dd324
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461b40
mov eax, edi
mov ecx, 0xe
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.004dd260
Function at 0x4dd360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dd43d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa07294717d6e7833
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x238a7f806572a072
mov qword [rsp + 0x24], rdx
movabs rdx, 0x507040106070309
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9030c0005070401
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70a060a0b0b0a09
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4dd3e0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4dd40d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4dd430
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4dd3c2
jmp 0x4dd424
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461b40
mov eax, edi
mov ecx, 0xe
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.004dd360

Function at 0x4e7fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e80ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x74656c121e3e1d3c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2023404b0f74656c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80b0c04020a0b08
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4010c000301080b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e804f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x4e807c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e809f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x4e8032
jmp 0x4e8093
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044c140
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461b40
mov eax, edi
mov ecx, 0xd
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004e7fe0
Function at 0x4ec4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec5db
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xaf3ce51a9572fd14
mov qword [rsp + 0x18], rdx
movabs rdx, 0x646e96810720af3c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf80a09e8208a7261
mov qword [rsp + 0x26], rdx
movabs rdx, 0x14101006130a030b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4150407010b000b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x61304150407010b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1403011214150905
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ec579
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x50]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4ec5ab
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ec5ce
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x50]
cmp rsi, 0x16
jb 0x4ec55f
jmp 0x4ec5c2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461b40
mov eax, edi
mov ecx, 0x16
call fcn.00461b40
nop
nop dword [rax + rax]
call fcn.0045f8c0
jmp fcn.004ec4e0

Function at 0x4ed8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed9a8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x206cbf72b7c16543
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc9692b1095a6cdbc
mov qword [rsp + 0x21], rdx
movabs rdx, 0x64b22ad913206ec9
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9caeb6b7209a7261
mov qword [rsp + 0x30], rdx
movabs rdx, 0x121d021b021d0c1b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0a1b1e1505120b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140f1d0d0d141908
mov qword [rsp + 0x48], rdx
movabs rdx, 0x13030312090b1e1c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ed94b
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x37]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x37]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x4ed978
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4ed99b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1f
jb 0x4ed92e
jmp 0x4ed98f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
call fcn.0044c140
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00461b40
mov eax, edi
mov ecx, 0x1f
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004ed8a0
Function at 0x4edde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4edefd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x43f342403ff67554
mov qword [rsp + 0x18], rdx
movabs rdx, 0x73e61a4561ee20dc
mov qword [rsp + 0x20], rdx
movabs rdx, 0x640d6136d82c73e6
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe48ae5d3e122b2d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1806171b1d0a0a0e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x12031806171b1d0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1404101819170818
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40c050e0e110210
mov qword [rsp + 0x48], rdx
movabs rdx, 0x71a1c08060d1616
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4edea0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4edecd
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4edef0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4ede7d
jmp 0x4edee4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
call fcn.0044c140
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461b40
mov eax, edi
mov ecx, 0x1e
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.004edde0
Function at 0x4ef820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef92c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x69180b749fab61a3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4f76532065fcb465
mov qword [rsp + 0x26], rdx
movabs rdx, 0x649b4f76532065fc
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9f81b9f1f3de722f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x14021209050e160a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0f151206061718
mov qword [rsp + 0x40], rdx
movabs rdx, 0x101603000017060e
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa03090312190206
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ef8c8
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x4ef8fc
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4ef91f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 0x1a
jb 0x4ef8ae
jmp 0x4ef913
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0044c140
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461b40
mov eax, edi
mov ecx, 0x1a
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004ef820

Function at 0x4f1980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1a6c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3b0c6e246472b74a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb5be610f3b0c6e24
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656d69b3c264ec61
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x100f0f040707070d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10070b08040d100f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x801100401010a06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f1a0a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x48]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x4f1a3c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f1a5f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x48]
cmp rsi, 0x14
jb 0x4f19f0
jmp 0x4f1a53
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461b40
mov eax, edi
mov ecx, 0x14
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004f1980
Function at 0x4f2ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2fac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x202861f64f3ce441
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x4f2c3c7426202861
mov qword [rsp + 0x20], rdx
movabs rdx, 0x126d061032643514
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4030b141110040b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1140d0b0e0d0611
mov qword [rsp + 0x38], rdx
movabs rdx, 0x14080e0c120e020a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f2f4a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xd]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4f2f7c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f2f9f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xd]
cmp rsi, 0x15
jb 0x4f2f30
jmp 0x4f2f93
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461b40
mov eax, edi
mov ecx, 0x15
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004f2ec0

Function at 0x4f5620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f570c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd5da61886e88794d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe3de0974d8d5da61
mov qword [rsp + 0x20], rdx
movabs rdx, 0xbf6d90b72042d5fc
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd12120f0f0d0208
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0e080f140d060b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x704110f08080a11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f56aa
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4f56dc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f56ff
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7f]
cmp rsi, 0x15
jb 0x4f5690
jmp 0x4f56f3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461b40
mov eax, edi
mov ecx, 0x15
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004f5620
Function at 0x4f5c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5d5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7291709f316e9b53
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x646e871c76707772
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7c8469828b647297
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x116090b0c0a040a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6150c1312030c08
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xf0406150c131203
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa06160303081504
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f5d00
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4f5d2d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f5d50
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4f5cdf
jmp 0x4f5d44
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461b40
mov eax, edi
mov ecx, 0x17
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.004f5c60

Function at 0x4f5fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f60dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x59173b65090a5c54
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5f6e567459173b65
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656d4254e964483f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5090d0f0f030d06
mov qword [rsp + 0x32], rdx
movabs rdx, 0x90f0d0b0c020111
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x60106030702090f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0b0c0b0b070601
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f6080
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4f60ad
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f60d0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4f605f
jmp 0x4f60c4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461b40
mov eax, edi
mov ecx, 0x14
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.004f5fe0
Function at 0x4f6a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6b6c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x9253a4aab26b6fa5
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3bbb989253a4aab2
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x65e569e22abc7261
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf040d0e090d040a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x40308000f040d0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3051105070f0d05
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f6b0a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4f6b3c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f6b5f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 0x13
jb 0x4f6af0
jmp 0x4f6b53
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044c140
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461b40
mov eax, edi
mov ecx, 0x13
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.004f6a80

Function at 0x4f7b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7bfd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc2a81bb62d9d3743
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc217a405bda465d4
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc5bca909200a7198
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc040e16030a0602
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf10141015120411
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa0e050d16070f10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x17080117150d0b0e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f7ba0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4f7bcd
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f7bf0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x4f7b7f
jmp 0x4f7be4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.0044c140
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461b40
mov eax, edi
mov ecx, 0x18
call fcn.00461b40
nop
nop dword [rax]
call fcn.0045f8c0
jmp fcn.004f7b00
Function at 0x4fb100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb1fb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2e4460687b724c50
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf724c465b2e4460
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e61695466630848
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10d1406130e0304
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb05090f0d140b0f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x80f0b05090f0d14
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10a0c000c071310
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fb199
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4fb1cb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4fb1ee
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
cmp rsi, 0x15
jb 0x4fb17f
jmp 0x4fb1e2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461b40
mov eax, edi
mov ecx, 0x15
call fcn.00461b40
nop
nop dword [rax + rax]
call fcn.0045f8c0
jmp fcn.004fb100

Function at 0x502b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x502c6c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2d68c520700c32dd
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2f20c32d68c52070
mov qword [rsp + 0x20], rdx
movabs rdx, 0x79941174d079c28a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x110d01001011100b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x807000e0c110210
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb1005020c08020a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x502c0a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x502c3c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x502c5f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
cmp rsi, 0x13
jb 0x502bf0
jmp 0x502c53
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044c140
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461b40
mov eax, edi
mov ecx, 0x13
call fcn.00461b40
nop
call fcn.0045f8c0
jmp fcn.00502b80