joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ed300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed3f6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xa5278b67469b10a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x64a21b0a5278b674
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656dcaa678539af9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9100c090b090c06
mov qword [rsp + 0x32], rdx
movabs rdx, 0x40d0801070d0910
mov qword [rsp + 0x38], rdx
movabs rdx, 0x107000f0e050700
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ed393
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4ed3c2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4ed3e9
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4ed376
nop
jmp 0x4ed3dd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f380
mov eax, edi
mov ecx, 0x13
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.004ed300
Function at 0x4efa80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4efb88
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x20665603f81245af
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x59f2990104206656
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65aa095b20887261
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2050300000c1103
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6000f040a0c0913
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x9090c0802000600
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40b03060b1212
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4efb20
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x4a
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x4efb51
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4efb7b
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x4a
add r8d, edx
cmp rsi, 0x15
jb 0x4efb05
jmp 0x4efb6f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f380
mov eax, edi
mov ecx, 0x15
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004efa80

Function at 0x4efba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4efcb3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x2c2c230facc06916
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb5eb1a1d6fbf7361
mov qword [rsp + 0x27], rdx
movabs rdx, 0xab5eb1a1d6fbf73
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb4b969a8d1641c96
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70a0d120000170c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2150f0514031406
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14031802030b1510
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc050e0702040511
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4efc4e
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x35
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x20
jge 0x4efc7f
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4efca6
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x35
add r8d, edx
cmp rsi, 0x19
jb 0x4efc34
jmp 0x4efc9a
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f380
mov eax, edi
mov ecx, 0x19
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004efba0
Function at 0x4effc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f00e6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xf81be4f190cd3b7c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa26118d620edda6b
mov qword [rsp + 0x23], rdx
movabs rdx, 0x64a26118d620edda
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1a9aaf3b064a1b1
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50c0906090d180f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x10c0203050c0906
mov qword [rsp + 0x38], rdx
movabs rdx, 0x911070516120404
mov qword [rsp + 0x40], rdx
movabs rdx, 0x306030a030c1115
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140f04050d1711
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f0080
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x26]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x26]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x24
jge 0x4f00ad
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f00d4
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4f0063
jmp 0x4f00c8
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f380
mov eax, edi
mov ecx, 0x19
nop dword [rax + rax]
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004effc0

Function at 0x4f0100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0208
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xf26e5a4c6955722f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x64d2dbe25195dcf2
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65d0d1544e5f7298
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9120000110c0a03
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc070a050815070d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc0a03020c070a05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140b090f03000b02
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f01a0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x6a
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4f01d1
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f01fb
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x6a
add r8d, edx
cmp rsi, 0x17
jb 0x4f0185
jmp 0x4f01ef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f380
mov eax, edi
mov ecx, 0x17
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004f0100
Function at 0x4f0220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0328
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x20b061617bd97241
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xcacce226d520b061
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4cf269da97ce7248
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4090404060a1009
mov qword [rsp + 0x34], rdx
movabs rdx, 0x20b0a0d04081114
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf130f0a020b0a0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf110c0d11131003
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f02c0
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x7e
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4f02f1
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f031b
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x7e
add r8d, edx
cmp rsi, 0x15
jb 0x4f02a5
jmp 0x4f030f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f380
mov eax, edi
mov ecx, 0x15
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004f0220
Function at 0x4f1c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1d68
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x91726f7a94ac57b9
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x86cead9625b76191
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf4f5a3db7a649a61
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x40c070a020d130e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x20016090b09150b
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x30e010902001609
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10140c1201010701
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f1d00
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffffb1
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4f1d31
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f1d5b
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffffb1
add r8d, edx
cmp rsi, 0x17
jb 0x4f1ce5
jmp 0x4f1d4f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f380
mov eax, edi
mov ecx, 0x17
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004f1c60

Function at 0x4f1d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1e88
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xc203edb26e617923
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa59bb70f1dc203ed
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656de2544daa8d97
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9080612090f090a
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0b0c0d050a00
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x90a0a10040a000e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70912090a04060d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f1e22
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x4f1e4f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f1e7b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4f1e05
jmp 0x4f1e6f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f380
mov eax, edi
mov ecx, 0x15
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004f1d80
Function at 0x4f1fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f20a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x9e20b0a32e613b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1c1ed6293522009e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656d3e5420f834e1
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30b0406100a0004
mov qword [rsp + 0x32], rdx
movabs rdx, 0x3040d0b0606130a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x60d0e0809070304
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3020c0f05090c00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f2042
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1e
jge 0x4f206f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f209b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4f2025
jmp 0x4f208f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f380
mov eax, edi
mov ecx, 0x16
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004f1fa0

Function at 0x4f2720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2816
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x236107657027a5a7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20d2131323610765
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa11a695465181f23
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0c0900010d0001
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0908120a07020d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5070f1306130f13
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f27b0
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x34
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4f27e2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f2809
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x34
add r8d, edx
cmp rsi, 0x14
jb 0x4f2796
nop
jmp 0x4f27fd
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f380
mov eax, edi
mov ecx, 0x14
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.004f2720
Function at 0x4f2840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2936
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xb27341b574c26557
mov qword [rsp + 0x19], rdx
movabs rdx, 0x640cd990a02099b2
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9386405fba8375a2
mov qword [rsp + 0x28], rdx
movabs rdx, 0x204150a02131110
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf140d071412160c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd080b1313071602
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f28d3
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x4f2902
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f2929
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4f28b6
nop
jmp 0x4f291d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f380
mov eax, edi
mov ecx, 0x17
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.004f2840

Function at 0x4f3ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f3bc8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x132ccff572d58006
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x86e858f132ccff5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf2fafeee0b6472b7
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80f070000090413
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2000b010f0c0906
mov qword [rsp + 0x36], rdx
movabs rdx, 0x121102000b010f0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb02090605101302
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f3b60
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x5c
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4f3b91
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f3bbb
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x5c
add r8d, edx
cmp rsi, 0x14
jb 0x4f3b45
jmp 0x4f3baf
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
nop dword [rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f380
mov eax, edi
mov ecx, 0x14
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004f3ac0
Function at 0x4f3fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f40e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x1a692527652b2aea
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe43bd53222b5681a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf92fcf2911d4372e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf1415051109140e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x713090c1601100d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x2110713090c1601
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4020a0e00120b01
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f4082
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x5c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x5c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1a
jge 0x4f40af
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f40db
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4f4065
jmp 0x4f40cf
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f380
mov eax, edi
mov ecx, 0x17
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004f3fe0
Function at 0x4f45e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f46f2
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x72aa73bdf0802eb2
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbcb95348df046c61
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb96ebcb95348df04
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd69207b3c2c21161
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1304170c1618060e
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa0c110f0600170c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x20a03020a0c110f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1518140c1904140b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f4691
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1c
jge 0x4f46be
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4f46e5
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4f4674
jmp 0x4f46d9
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f380
mov eax, edi
mov ecx, 0x1a
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004f45e0

Function at 0x4f4700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4813
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x743d6543b7c55579
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb061d5c681ad8972
mov qword [rsp + 0x23], rdx
movabs rdx, 0x73b061d5c681ad89
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc46d7b16c56c9361
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1809150f160b0b13
mov qword [rsp + 0x34], rdx
movabs rdx, 0x180f130002160d06
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x14130d0f180f1300
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0c140d00121003
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f47ae
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffff86
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4f47df
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f4806
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffff86
add r8d, edx
cmp rsi, 0x19
jb 0x4f4794
jmp 0x4f47fa
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044a0a0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f380
mov eax, edi
mov ecx, 0x19
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004f4700
Function at 0x4f57c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f58b6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x65fa9194ecf761ff
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x646eca74fea265fa
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4088bdc20ac9d61
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0810130f141202
mov qword [rsp + 0x30], rdx
movabs rdx, 0x504051414020010
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb05061413150903
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f5850
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x4d
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x18
jge 0x4f5882
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f58a9
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x4d
add r8d, edx
cmp rsi, 0x16
jb 0x4f5836
nop
jmp 0x4f589d
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044a0a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f380
mov eax, edi
mov ecx, 0x16
call fcn.0045f380
nop
call fcn.0045cd20
nop dword [rax + rax]
jmp fcn.004f57c0

Function at 0x4f6000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f610c
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xc46c8533ac9b6591
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x53786f8f5cbc9945
mov qword [rsp + 0x26], rdx
movabs rdx, 0x936e61da53786f8f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x656d6954a5b89756
mov qword [rsp + 0x32], rdx
movabs rdx, 0x50d160303050417
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x7100c130d140a13
mov qword [rsp + 0x42], rdx
movabs rdx, 0x40b02150d0e0710
mov qword [rsp + 0x48], rdx
movabs rdx, 0x14040910030704
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f60ab
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
mov byte [rsp + rdi + 0x1e], r9b
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4f60d8
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4f60ff
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4f6094
jmp 0x4f60f3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.0044a0a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0045f380
mov eax, edi
mov ecx, 0x1c
call fcn.0045f380
nop
call fcn.0045cd20
jmp fcn.004f6000