joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ea7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea8ad
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xaea5752f6c7075eb
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa16c80f46148a6ae
mov qword [rsp + 0x20], rdx
movabs rdx, 0x508070b040b0c00
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc04040707080e06
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ea835
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x30]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x30]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4ea86c
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x4ea89f
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4ea893
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4ea818
jmp 0x4ea887
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00443880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456360
mov eax, edi
mov ecx, 0xf
call fcn.00456360
mov rax, rsi
mov ecx, 0x10
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004ea7c0

Function at 0x4eada0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eaec9
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x1b0bf78f04e93346
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xdb6aa16e6168cdfe
mov qword [rsp + 0x25], rdx
movabs rdx, 0x300900db6aa16e61
mov qword [rsp + 0x28], rdx
movabs rdx, 0xee6f69e9a6096979
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1a061317121a0202
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe15160e05080611
mov qword [rsp + 0x40], rdx
movabs rdx, 0x160f0d030f040401
mov qword [rsp + 0x48], rdx
movabs rdx, 0x30107170917100f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4eae51
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x20
jge 0x4eae88
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x4eaebb
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4eaeaf
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4eae34
jmp 0x4eaea3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.00443880
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00456360
mov eax, edi
mov ecx, 0x1b
call fcn.00456360
mov rax, rsi
mov ecx, 0x20
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004eada0
Function at 0x4eb480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb5b3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6f7254464e656958
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x66615330326f6a1a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x755266615330326f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x483e1e69714e6e6e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x14030c1713070f09
mov qword [rsp + 0x38], rdx
movabs rdx, 0x502151915100f17
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90d0c140e021503
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd140d08000b0918
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4eb52e
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x11]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x4eb56d
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x20
jae 0x4eb5a5
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4eb594
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x11]
cmp rsi, 0x1a
jb 0x4eb514
jmp 0x4eb588
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.00443880
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456360
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.00456360
mov rax, rsi
mov ecx, 0x20
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004eb480

Function at 0x4ee3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee4b3
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov dword [rsp + 0x1a], 0x46fb1d47
mov word [rsp + 0x1e], 0x1a0e
movabs rdx, 0x104050303020404
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4ee437
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 8
jge 0x4ee46e
movzx edx, byte [rsp + rax + 0x20]
lea rsi, [rax + 1]
cmp rsi, 8
jae 0x4ee4a5
movzx esi, byte [rsp + rax + 0x21]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 6
jae 0x4ee495
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 6
jb 0x4ee41a
jmp 0x4ee489
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 6
call fcn.00443880
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 6
call fcn.00456360
mov eax, edi
mov ecx, 6
nop dword [rax]
call fcn.00456360
mov rax, rsi
mov ecx, 8
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004ee3e0
Function at 0x4ee760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee85f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xc39e6d8fa96ac9ff
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x579baf6996649ec3
mov qword [rsp + 0x26], rdx
movabs rdx, 0x203030701000404
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70a020303070100
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8000d06080c0d01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ee7e4
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x20]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x20]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x4ee81b
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x4ee851
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4ee845
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x4ee7c7
jmp 0x4ee836
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.00443880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00456360
mov eax, edi
mov ecx, 0xf
call fcn.00456360
mov rax, rsi
mov ecx, 0x12
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004ee760

Function at 0x4eec40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eed3f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7b3684e8d0e5bdf1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xba64ff06656c7b36
mov qword [rsp + 0x24], rdx
movabs rdx, 0x604050006020307
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70a0d0606040500
mov qword [rsp + 0x30], rdx
movabs rdx, 0x505010b02070b02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4eecc4
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x4eecfb
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x4eed31
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4eed25
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4eeca7
jmp 0x4eed16
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00443880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00456360
mov eax, edi
mov ecx, 0xe
call fcn.00456360
mov rax, rsi
mov ecx, 0x14
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004eec40
Function at 0x4f4400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f44ff
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x5b6c7074538aae88
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x579cb9828a76905b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70c0809050501
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20900070c080905
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa060c0b0a080c0d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f4484
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x4f44bb
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x4f44f1
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4f44e5
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x4f4467
jmp 0x4f44d6
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.00443880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00456360
mov eax, edi
mov ecx, 0xf
call fcn.00456360
mov rax, rsi
mov ecx, 0x12
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004f4400

Function at 0x4f5880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f59b8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xfeaca079958f7fb3
mov qword [rsp + 0x18], rdx
movabs rdx, 0x7394a2647066686e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x98a87394a2647066
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb0c372a774e26572
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x51005080919070b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10108060b010510
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6141105060d0106
mov qword [rsp + 0x40], rdx
movabs rdx, 0x180d0a0e06020a00
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa03080d16020a09
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f5940
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x26
jge 0x4f5977
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
cmp rsi, 0x26
jae 0x4f59aa
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4f599e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4f5923
jmp 0x4f5992
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00443880
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456360
mov eax, edi
mov ecx, 0x1a
call fcn.00456360
mov rax, rsi
mov ecx, 0x26
call fcn.00456360
nop
call fcn.00453c40
nop dword [rax]
jmp fcn.004f5880
Function at 0x4f61e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6309
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x30b9aa731d2408cf
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd97226726501ce72
mov qword [rsp + 0x25], rdx
movabs rdx, 0xb449a2d972267265
mov qword [rsp + 0x28], rdx
movabs rdx, 0x71653561759d8e61
mov qword [rsp + 0x30], rdx
movabs rdx, 0x912051515101a03
mov qword [rsp + 0x38], rdx
movabs rdx, 0x610030f12090a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14000618020d000e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x714001415100112
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f6291
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x20
jge 0x4f62c8
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x4f62fb
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4f62ef
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4f6274
jmp 0x4f62e3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.00443880
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00456360
mov eax, edi
mov ecx, 0x1b
call fcn.00456360
mov rax, rsi
mov ecx, 0x20
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004f61e0

Function at 0x4f6b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6c7f
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xa2756c98755565b6
mov qword [rsp + 0x19], rdx
movabs rdx, 0x65a2756c98755565
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5972888c6554604e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8b7f926166586c52
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x817443696f759186
mov qword [rsp + 0x32], rdx
movabs rdx, 0x413190e04001816
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1803150d1a2020
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1b001b040d070018
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb041a170d0b0216
mov qword [rsp + 0x50], rdx
movabs rdx, 0x100319170718101b
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd02141e030a11
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x4f6c00
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x32]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2e
jge 0x4f6c3c
movzx edx, byte [rsp + rax + 0x3a]
lea rsi, [rax + 1]
cmp rsi, 0x2e
jae 0x4f6c71
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4f6c65
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x32]
cmp rsi, 0x21
jb 0x4f6be2
jmp 0x4f6c57
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x21
call fcn.00443880
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
nop
call fcn.00456360
mov eax, edi
mov ecx, 0x21
call fcn.00456360
mov rax, rsi
mov ecx, 0x2e
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004f6b20
Function at 0x4f7020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7158
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xf075a1965674d1a8
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6d61a5a0b1615065
mov qword [rsp + 0x20], rdx
movabs rdx, 0x96c35672fc461b65
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2ab1a0117ef1f2c1
mov qword [rsp + 0x30], rdx
movabs rdx, 0x161e1f110c130d11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7071d050d1b181e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16171100181c070c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a000401001a181e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b071e0b190b0c04
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4f70e0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x28
jge 0x4f7117
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
cmp rsi, 0x28
jae 0x4f714a
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4f713e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x20
jb 0x4f70c3
jmp 0x4f7132
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.00443880
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x20
call fcn.00456360
mov eax, edi
mov ecx, 0x20
call fcn.00456360
mov rax, rsi
mov ecx, 0x28
call fcn.00456360
nop
call fcn.00453c40
nop dword [rax]
jmp fcn.004f7020

Function at 0x4f7a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7b3f
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7226634cec1e0f6f
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xd2147e61
movabs rdx, 0x9060b0a05060303
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30a09060b0a0506
mov qword [rsp + 0x28], rdx
movabs rdx, 0x102010609000006
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4f7ac0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4f7afc
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x4f7b31
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4f7b25
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0xc
jb 0x4f7aa2
jmp 0x4f7b17
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00443880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00456360
mov eax, edi
mov ecx, 0xc
call fcn.00456360
mov rax, rsi
mov ecx, 0x12
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004f7a40
Function at 0x4f7b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7c49
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xbfbbb4dc9b736f9b
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x9d91a775
movabs rdx, 0x7090a020a050402
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90b0a0307000603
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f7bce
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4f7c08
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x10
jae 0x4f7c3b
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4f7c2f
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4f7bb1
jmp 0x4f7c23
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00443880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456360
mov eax, edi
mov ecx, 0xc
call fcn.00456360
mov rax, rsi
mov ecx, 0x10
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004f7b60

Function at 0x4f7ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7f9f
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xbc72186c8fe00ad8
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x12
movabs rdx, 0x503000102070703
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8020701
xor eax, eax
jmp 0x4f7f21
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x4f7f5d
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
cmp rsi, 0xc
jae 0x4f7f91
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4f7f85
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3d]
cmp rsi, 9
jb 0x4f7f07
jmp 0x4f7f78
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00443880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
nop
call fcn.00456360
mov eax, edi
mov ecx, 9
call fcn.00456360
mov rax, rsi
mov ecx, 0xc
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004f7ec0
Function at 0x4fa000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fa13f
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xfae1106d0acb0551
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3f9ebd038683f56c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6d003f9ebd038683
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb2eedceee2bd0669
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9040f0b010d1909
mov qword [rsp + 0x32], rdx
movabs rdx, 0x70c030e13010904
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1017130105060b03
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf18021512010112
mov qword [rsp + 0x48], rdx
movabs rdx, 0x914131601030a01
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4fa0c0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x26
jge 0x4fa0fc
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
cmp rsi, 0x26
jae 0x4fa131
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4fa125
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 0x1a
jb 0x4fa0a3
jmp 0x4fa117
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00443880
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
nop
call fcn.00456360
mov eax, edi
mov ecx, 0x1a
call fcn.00456360
mov rax, rsi
mov ecx, 0x26
call fcn.00456360
nop
nop
call fcn.00453c40
jmp fcn.004fa000

Function at 0x4fb380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb469
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2d3c655975434453
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xe9385248
movabs rdx, 0x9070108010a0b02
mov qword [rsp + 0x28], rdx
movabs rdx, 0x600000404020909
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4fb3ee
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4fb428
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x10
jae 0x4fb45b
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4fb44f
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4fb3d1
jmp 0x4fb443
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00443880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456360
mov eax, edi
mov ecx, 0xc
call fcn.00456360
mov rax, rsi
mov ecx, 0x10
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004fb380
Function at 0x4fc340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc429
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xea8972836d89b55f
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x98948cb3
movabs rdx, 0x60a030008010401
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40909010701020b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4fc3ae
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x13]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x13]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4fc3e8
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x10
jae 0x4fc41b
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4fc40f
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4fc391
jmp 0x4fc403
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00443880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456360
mov eax, edi
mov ecx, 0xc
call fcn.00456360
mov rax, rsi
mov ecx, 0x10
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004fc340

Function at 0x4fc860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc9b3
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x9d9e91a54686c353
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6d6f9d9e91a54686
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4edeac979b965e94
mov qword [rsp + 0x28], rdx
movabs rdx, 0x218f77697569b86f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4f768d7b4d6e8e69
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe01101920151e21
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa130c06061e1910
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40d07050c050a19
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe021f0d070f1b0a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e02041718170b07
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4fc92c
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x47]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x28
jge 0x4fc96d
movzx edx, byte [rsp + rax + 0x40]
lea rsi, [rax + 1]
nop dword [rax + rax]
cmp rsi, 0x28
jae 0x4fc9a5
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x4fc994
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x47]
cmp rsi, 0x22
jb 0x4fc912
jmp 0x4fc988
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x22
call fcn.00443880
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x22
call fcn.00456360
mov eax, edi
mov ecx, 0x22
nop dword [rax + rax]
call fcn.00456360
mov rax, rsi
mov ecx, 0x28
call fcn.00456360
nop
call fcn.00453c40
jmp fcn.004fc860