joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ea000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea0fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4756084d60144173
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x564e134b17475608
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6568256e615c4a46
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc0f12130b050d03
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x502080e060f0103
mov qword [rsp + 0x25], rdx
movabs rdx, 0x40a0f0c03060502
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xb0107130b090904
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4ea099
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 9]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4ea0cb
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ea0ee
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 9]
cmp rsi, 0x15
jb 0x4ea07f
jmp 0x4ea0e2
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456420
mov eax, edi
mov ecx, 0x15
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.004ea000

Function at 0x4ecbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ecc87
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xdcdf33e4b6da0dde
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xda3a07dc
movabs rdx, 0x902080809030a01
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x30708060a0204
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4ecc28
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x10
jge 0x4ecc57
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4ecc7a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4ecc0b
jmp 0x4ecc6e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456420
mov eax, edi
mov ecx, 0xb
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004ecbc0
Function at 0x4ee660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee71d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x782a66355f6e7335
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6c34
movabs rdx, 0x407060600070802
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x705
xor eax, eax
jmp 0x4ee6c0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4ee6ed
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4ee710
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4ee6a2
jmp 0x4ee704
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00456420
mov eax, edi
mov ecx, 0xa
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004ee660

Function at 0x4ef0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef1db
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf5e15aee7bd7f543
mov qword [rsp + 0x34], rdx
movabs rdx, 0x8d7a63fcf5e15aee
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd6727cef5d774173
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110501060a010b03
mov qword [rsp + 0x18], rdx
movabs rdx, 0x10040f06070e0708
mov qword [rsp + 0x20], rdx
movabs rdx, 0x105030b10040f06
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0711020513060f
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4ef179
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4ef1ab
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4ef1ce
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 0x14
jb 0x4ef15f
jmp 0x4ef1c2
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456420
mov eax, edi
mov ecx, 0x14
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.004ef0e0
Function at 0x4f0f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f100c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4b6edb70e66765cf
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xebbefdd7ab4b6edb
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90a00080805000c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x90b0a0c0a03090a
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4f0faf
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x37]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x37]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0xe
jge 0x4f0fdc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4f0fff
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4f0f92
jmp 0x4f0ff3
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00456420
mov eax, edi
mov ecx, 0xd
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004f0f40

Function at 0x4f20a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f21ac
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xcd65efe6ed726540
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xbfd1457248f96174
mov qword [rsp + 0x44], rdx
movabs rdx, 0xb52e6419bfd14572
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5049f5746ec443c0
mov qword [rsp + 0x50], rdx
movabs rdx, 0x160b1b0900110a1a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x191b0a0a0b121304
mov qword [rsp + 0x24], rdx
movabs rdx, 0x100712160d000305
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe090f14110b0007
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4f2148
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x20
jge 0x4f217c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x4f219f
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6f]
cmp rsi, 0x1c
jb 0x4f212e
jmp 0x4f2193
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00456420
mov eax, edi
mov ecx, 0x1c
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004f20a0
Function at 0x4f22e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f23db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x65a2724658728dc4
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6369662774ca10c7
mov qword [rsp + 0x40], rdx
movabs rdx, 0xafc824e54328f5a5
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa0c091112171103
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1616140917150600
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9100a0311121616
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1701080117110a08
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f2379
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6d]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4f23ab
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f23ce
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6d]
cmp rsi, 0x18
jb 0x4f235f
jmp 0x4f23c2
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456420
mov eax, edi
mov ecx, 0x18
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.004f22e0

Function at 0x4f2840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2912
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xaf65dc7e7486659c
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1bab6f05baaf65dc
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0008050809070b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x402000408050c00
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4f28ac
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0xe
jge 0x4f28de
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4f2905
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 0xd
jb 0x4f2892
jmp 0x4f28f5
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00456420
mov eax, edi
mov ecx, 0xd
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004f2840
Function at 0x4f3680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f375d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x43471c2351124b4f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5761653e61176d59
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2010405010a010c
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb0308060604020e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30c0c0501080100
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4f3700
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x26]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x26]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4f372d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4f3750
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x4f36e2
jmp 0x4f3744
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456420
mov eax, edi
mov ecx, 0x10
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004f3680

Function at 0x4f5860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f596c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6fb2ed62ad65fb43
mov qword [rsp + 0x40], rdx
movabs rdx, 0xee33706cf8689e5c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x95d7d7372766eb8
mov qword [rsp + 0x50], rdx
movabs rdx, 0x912130401080812
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1712091213040108
mov qword [rsp + 0x20], rdx
movabs rdx, 0x11705161309150f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x120109090b120405
mov qword [rsp + 0x30], rdx
movabs rdx, 0x504060816031015
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f5908
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6f]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x22
jge 0x4f593c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4f595f
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6f]
cmp rsi, 0x18
jb 0x4f58ee
jmp 0x4f5953
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456420
mov eax, edi
mov ecx, 0x18
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004f5860
Function at 0x4f6740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6812
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x39402f63698f3b44
mov qword [rsp + 0x29], rdx
movabs rdx, 0x286f0037e5f74339
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6070902010c070a
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb0202010e050901
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x4f67ac
movzx r9d, byte [rsp + rsi + 0x29]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x29], dl
mov byte [rsp + rsi + 0x29], r8b
add rax, 2
cmp rax, 0x10
jge 0x4f67de
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4f6805
movzx r8d, byte [rsp + rdi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 0xf
jb 0x4f6792
jmp 0x4f67f5
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00456420
mov eax, edi
mov ecx, 0xf
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004f6740

Function at 0x4f6820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f68e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb1b7ad50b6a5788d
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xffaca9b1
movabs rdx, 0x802030607070a06
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x5090000
xor eax, eax
jmp 0x4f6880
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4f68b2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4f68d7
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
cmp rsi, 0xb
jb 0x4f6864
jmp 0x4f68cb
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456420
mov eax, edi
mov ecx, 0xb
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004f6820
Function at 0x4f7040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f711d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c8ef176e6858046
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5ef1e8e26675771c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2030209030f0304
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd0601020c0d0805
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20601090d0e0506
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4f70c0
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x77]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4f70ed
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4f7110
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x4f70a2
jmp 0x4f7104
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456420
mov eax, edi
mov ecx, 0x10
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004f7040

Function at 0x4f7140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f721d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6511596873753f34
mov qword [rsp + 0x31], rdx
movabs rdx, 0xf3fe3aef8413765
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0c0c0b010d0006
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb0b0a0c0c0b010d
mov qword [rsp + 0x21], rdx
movabs rdx, 0x5080c090e08080a
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4f71c0
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 + 0x3b]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 + 0x3b]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4f71ed
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4f7210
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x4f71a2
jmp 0x4f7204
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456420
mov eax, edi
mov ecx, 0xf
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004f7140
Function at 0x4f85c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f86ac
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6572047504a81285
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x50746e6572047504
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2ea6a4036551d817
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20b12110d001012
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd00010b020b1211
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x12050f0d030c0510
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4f864a
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4e]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x14
jge 0x4f867c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f869f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4e]
cmp rsi, 0x13
jb 0x4f8630
jmp 0x4f8693
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456420
mov eax, edi
mov ecx, 0x13
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004f85c0

Function at 0x4faa80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fab3e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa2a48a0ba874a4af
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xa7c079a2
movabs rdx, 0xa03010604010a09
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x50706
xor eax, eax
jmp 0x4faae1
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4fab0e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4fab31
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4faac4
jmp 0x4fab25
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456420
mov eax, edi
mov ecx, 0xb
call fcn.00456420
nop
nop
call fcn.00454140
jmp fcn.004faa80
Function at 0x4fae80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4faf66
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc0a9040faf14e247
mov qword [rsp + 0x30], rdx
movabs rdx, 0x57c3ff61b7ddbe61
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe09040207060905
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4020e0904020706
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3010a0b0d0b010a
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4faf00
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5c]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4faf32
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4faf57
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5c]
cmp rsi, 0x10
jb 0x4faee2
jmp 0x4faf4b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456420
mov eax, edi
mov ecx, 0x10
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004fae80

Function at 0x4fb200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb308
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4d75012a35746547
mov qword [rsp + 0x37], rdx
movabs rdx, 0xd1efff320493e61
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x390d1efff320493e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x73273e1f3a3f6e6f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0b0e080c14100d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x150310140b131005
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1304150310140b13
mov qword [rsp + 0x27], rdx
movabs rdx, 0x16070a04090f1703
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4fb2ab
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 + 0x50]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 + 0x50]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1a
jge 0x4fb2d8
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4fb2fb
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x4fb28e
jmp 0x4fb2ef
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456420
mov eax, edi
mov ecx, 0x19
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004fb200
Function at 0x4fb320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fb40c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1b296fc4ff4b6547
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x501b296fc4ff4b65
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1c652a124e9474b1
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100d04090702040b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x30b0409100d0409
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe04060b02020903
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4fb3aa
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x14
jge 0x4fb3dc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4fb3ff
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
cmp rsi, 0x11
jb 0x4fb390
jmp 0x4fb3f3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456420
mov eax, edi
mov ecx, 0x11
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004fb320

Function at 0x4fb9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fbaa7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc03eb5e253ddb2d2
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xc4dbf2e3
movabs rdx, 0x5070602080107
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4090b06070a0701
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4fba48
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x4fba77
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4fba9a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4fba2b
jmp 0x4fba8e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456420
mov eax, edi
mov ecx, 0xc
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004fb9e0