joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e3aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e3bba
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xc51ca4496c121c8c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf915661165c561c9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x72697447f9156611
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf5df89f92b7a706
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1a0805170a100113
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4151a0805170a10
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc160a1b060e0715
mov qword [rsp + 0x40], rdx
movabs rdx, 0x107020218070f14
mov qword [rsp + 0x48], rdx
movabs rdx, 0x51904171b080500
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e3b57
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x22
jge 0x4e3b89
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4e3bad
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
cmp rsi, 0x1c
jb 0x4e3b3d
jmp 0x4e3ba1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.00441380
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451880
mov eax, edi
mov ecx, 0x1c
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.004e3aa0

Function at 0x4e9dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9eaa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd5af1b2070ec6bb9
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6420f2d5af1b2070
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7906dd28e568c1b7
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf0607020d0e100d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x110508020c100206
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70b00050c110d02
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e9e4d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x2c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x2c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4e9e7a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e9e9d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4e9e30
jmp 0x4e9e91
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004e9dc0
Function at 0x4e9ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9fec
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x7597c7944fb06b73
mov qword [rsp + 0x19], rdx
movabs rdx, 0x727597c7944fb06b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xff9f8d6e692592bc
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9f7007abd793cfa6
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x498eb57720656874
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1406042015101316
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x141302020b131406
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1e060b1212121415
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1816180911060f03
mov qword [rsp + 0x50], rdx
movabs rdx, 0x71e0e0a1f06050e
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4e9f86
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x26
jge 0x4e9fbc
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x21
jae 0x4e9fdf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 0x21
jb 0x4e9f6c
jmp 0x4e9fd3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x21
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00451880
mov eax, edi
mov ecx, 0x21
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004e9ec0

Function at 0x4ea400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], 0
movabs rax, 0x8595d87515657bfb
mov qword [rsp + 0x18], rax
movabs rax, 0x6ae50366d289bfa7
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x22]
movzx ecx, byte [rsp + 0x18]
add eax, ecx
movzx ecx, byte [rsp + 0x1c]
movzx edx, byte [rsp + 0x23]
xor ecx, edx
movzx edx, byte [rsp + 0x20]
movzx ebx, byte [rsp + 0x24]
add edx, ebx
movzx ebx, byte [rsp + 0x25]
movzx esi, byte [rsp + 0x1b]
sub ebx, esi
movzx esi, byte [rsp + 0x1f]
movzx edi, byte [rsp + 0x21]
add esi, edi
movzx edi, byte [rsp + 0x1a]
movzx r8d, byte [rsp + 0x27]
add edi, r8d
movzx r8d, byte [rsp + 0x19]
movzx r9d, byte [rsp + 0x26]
add r8d, r9d
movzx r9d, byte [rsp + 0x1e]
movzx r10d, byte [rsp + 0x1d]
mov byte [rsp + 0xf], al
mov byte [rsp + 0x10], cl
mov byte [rsp + 0x11], dl
mov byte [rsp + 0x12], bl
mov byte [rsp + 0x13], sil
mov byte [rsp + 0x14], dil
mov byte [rsp + 0x15], r8b
lea eax, [r10 + r9]
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x4ea4e6
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x4ea4da
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
add rsp, 0x28
pop rbp
ret
Function at 0x4eaaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eab66
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc3bcc3ca1d72653a
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6c32642e
movabs rdx, 0x30a0005040003
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x6000307
xor eax, eax
jmp 0x4eab00
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x61]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4eab32
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4eab57
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x61]
cmp rsi, 0xc
jb 0x4eaae4
jmp 0x4eab4b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004eaaa0

Function at 0x4eade0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eaea6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9b9b2eff01a30670
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 8
movabs rdx, 0x108070103060402
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x403
xor eax, eax
nop
jmp 0x4eae40
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4eae72
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4eae97
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
cmp rsi, 9
jb 0x4eae22
jmp 0x4eae8b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004eade0
Function at 0x4ebd00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ebdfd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74f761e1417465e7
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x482e72dc74f761e1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xec471de05f648d72
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf100a0a11120a0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb120e08100c040a
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd0f0b120e08100c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120006101308110d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ebda0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x58]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x58]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4ebdcd
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4ebdf0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x4ebd7f
jmp 0x4ebde4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004ebd00

Function at 0x4ec060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec14c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x498c6d6faf74d86e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd474498c6d6faf74
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57d145f0fb61eb72
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd060d0e06030e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70e0100000d060d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90b100e0e030d01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ec0ea
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x4ec11c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4ec13f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 0x12
jb 0x4ec0d0
jmp 0x4ec133
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ec060
Function at 0x4ec160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec22c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6f73f20c07f6012d
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x35ddf1dc
movabs rdx, 0x90102090b05080a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80b040a030209
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ec1c5
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ec1fc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4ec21f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0xc
jb 0x4ec1ab
jmp 0x4ec213
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ec160

Function at 0x4ec240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec35d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xfc6509fe7e74e2e7
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1af3f2a5f31ce7cd
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf8515f01af3f2a5
mov qword [rsp + 0x26], rdx
movabs rdx, 0x780282dc646e652e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb1205000b151909
mov qword [rsp + 0x36], rdx
movabs rdx, 0x14000b1205000b15
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11a040e00080a0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd03181413080c07
mov qword [rsp + 0x48], rdx
movabs rdx, 0x30d1007110f090b
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ec300
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4ec32d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4ec350
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4ec2dd
jmp 0x4ec344
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451880
mov eax, edi
mov ecx, 0x1c
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004ec240
Function at 0x4ecba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ecccc
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6d0e6c56b55bd2fd
mov qword [rsp + 0x19], rdx
movabs rdx, 0x61832c5c666ef065
mov qword [rsp + 0x21], rdx
movabs rdx, 0x42eb6f697e61832c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x67e5d3abd893d675
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe0606040c121904
mov qword [rsp + 0x36], rdx
movabs rdx, 0x161a0010130c1716
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1215161a0010130c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe1b150e01090918
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd0617020d1c1b12
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c03121701190002
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ecc66
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4ecc9c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1d
jae 0x4eccbf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
cmp rsi, 0x1d
jb 0x4ecc4c
jmp 0x4eccb3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00451880
mov eax, edi
mov ecx, 0x1d
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ecba0

Function at 0x4edf80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee047
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x51a16175829bceca
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x15a1e5a3
movabs rdx, 0x6020300080b0b01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30a0309010a0602
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4edfe8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x25]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x25]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4ee017
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4ee03a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4edfcb
jmp 0x4ee02e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004edf80
Function at 0x4f1bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1cf8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xa3a0a120c76c988f
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa87ea4a3a0a120c7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20aecfae2073929a
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd59f3fbc707075bf
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6582e1e6646165a6
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa13080f2008031f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1b00100b0b1a0b20
mov qword [rsp + 0x44], rdx
movabs rdx, 0x30705171b00100b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x111101190b060c20
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5212001201f2000
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6210a0118200918
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4f1c95
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4f1cc8
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x4f1ceb
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
nop
cmp rsi, 0x23
jb 0x4f1c7b
jmp 0x4f1cdf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x23
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00451880
mov eax, edi
mov ecx, 0x23
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004f1bc0
Function at 0x4f6ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6b92
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x656d69d89f6fc847
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x9fccdd656d69d89f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x900010a09010303
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0a080400090900
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f6b2c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4f6b5e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4f6b85
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7f]
cmp rsi, 0xb
jb 0x4f6b12
jmp 0x4f6b75
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f6ac0
Function at 0x4f79e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7b07
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x5e171a701a283df7
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3e6966614673d251
mov qword [rsp + 0x22], rdx
movabs rdx, 0x204c77473e696661
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5f2252ecff6ee313
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1a020f0515011209
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb00140203121406
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x19120b0014020312
mov qword [rsp + 0x40], rdx
movabs rdx, 0x171a08061b011817
mov qword [rsp + 0x48], rdx
movabs rdx, 0x180d1a07101a101b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x110e020d0f080810
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4f7aa9
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x2a
jge 0x4f7ad7
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x4f7afa
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4f7a8c
jmp 0x4f7aee
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451880
mov eax, edi
mov ecx, 0x1c
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f79e0
Function at 0x5049c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x504a86
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x41f1544657e0ded7
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x20
movabs rdx, 0x3020203020604
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x106
xor eax, eax
nop
jmp 0x504a20
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x65]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x504a52
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x504a77
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x65]
cmp rsi, 9
jb 0x504a02
jmp 0x504a6b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.005049c0

Function at 0x5064c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5065aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xaeaf35c3583231b5
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x89aeaf35c3583231
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc51ff41063c2614a
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe090f0f03090f09
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70710080e090f0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40b0904100d0006
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x50654d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x50657a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50659d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x506530
jmp 0x506591
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.005064c0
Function at 0x506fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x507118
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x676eaf64e3da5f9c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x65892f676eaf64e3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2f8a6464d9703a90
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc373466874986e65
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xae6eee9b944720c5
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1212001a18201f02
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x22192211010d0518
mov qword [rsp + 0x46], rdx
movabs rdx, 0x30122192211010d
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb120e05151b1820
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1115201b03150501
mov qword [rsp + 0x58], rdx
movabs rdx, 0x91f1e1e0b111d
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x5070b5
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x55]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x2a
jge 0x5070e8
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x50710b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x55]
nop
cmp rsi, 0x23
jb 0x50709b
jmp 0x5070ff
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x23
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00451880
mov eax, edi
mov ecx, 0x23
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.00506fe0

Function at 0x50ad80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50ae6a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb46da2b320f01462
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9252065b46da2b3
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0a16191db399645
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf05050d020c1010
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70401050113130e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc060c021213130b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50ae0d
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x50ae3a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x50ae5d
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x50adf0
jmp 0x50ae51
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.0050ad80