joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d42e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d43eb
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x746d4784476b6352
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6f8881986d56746d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x73986c6284676773
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe09060502011010
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc11090f0b090e09
mov qword [rsp + 0x22], rdx
movabs rdx, 0x140b040a0f130a0b
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4d4373
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0xe]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x4d43aa
movzx edx, byte [rsp + rax + 0x1c]
lea rsi, [rax + 1]
cmp rsi, 0x16
jae 0x4d43dd
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d43d1
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x4d4356
jmp 0x4d43c5
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457f40
mov eax, edi
mov ecx, 0x16
call fcn.00457f40
mov rax, rsi
mov ecx, 0x16
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004d42e0

Function at 0x4d4f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5013
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xdb79c0cb0ba652c
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x576f3704
movabs rdx, 0x506090505000402
mov qword [rsp + 0x28], rdx
movabs rdx, 0x602070608020309
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d4f8b
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5c]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d4fcd
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
nop word [rax + rax]
cmp rsi, 0x10
jae 0x4d5005
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4d4ff4
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5c]
cmp rsi, 0xc
jb 0x4d4f71
jmp 0x4d4fe8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457f40
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004d4f20
Function at 0x4d5dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5eb3
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6ecd30ea70de6524
mov qword [rsp + 0x19], rdx
movabs rdx, 0x65cfd36ecd30ea70
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x809020806050400
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x20508
xor eax, eax
jmp 0x4d5e2b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4d5e6d
movzx edx, byte [rsp + rax + 0x24]
lea rsi, [rax + 1]
nop word [rax + rax]
cmp rsi, 0xc
jae 0x4d5ea5
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d5e94
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3d]
cmp rsi, 0xb
jb 0x4d5e11
jmp 0x4d5e88
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00446000
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457f40
mov eax, edi
mov ecx, 0xb
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0xc
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004d5dc0

Function at 0x4e5580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e569f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x9b81c48fb7a6aed6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf9f0bfcabf6f9b81
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa93233a165ee5011
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50a06050a0f120e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100a0d0301120915
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe070c0b0a0a03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4070e0502101501
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e5620
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x4e565c
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x4e5691
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e5685
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5e]
cmp rsi, 0x16
jb 0x4e5605
jmp 0x4e5677
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x16
call fcn.00457f40
mov rax, rsi
mov ecx, 0x20
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004e5580
Function at 0x4e5e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5f13
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x62456a45445c5852
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x725a4b4b5962456a
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa010b0c0806040b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x507010208010a01
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e5e92
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4e5ece
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0xe
jae 0x4e5f05
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e5ef5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
cmp rsi, 0xd
jb 0x4e5e78
jmp 0x4e5ee9
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457f40
mov eax, edi
mov ecx, 0xd
nop dword [rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0xe
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004e5e20

Function at 0x4e8a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8b3f
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x5e916b75716d6174
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x69a57baa5e916b75
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x88bb6288754e206e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x108041201090303
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x710100a05030c0e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1100710100a0503
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc100c0406130501
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e8ac2
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1a
jge 0x4e8af9
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x4e8b31
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4e8b25
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x4e8aa5
jmp 0x4e8b14
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x14
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1a
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004e8a20
Function at 0x4ef900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef9ff
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x9d301609a233982c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xcf0f92b4319f969d
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0d0b010c050e01
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80c0b0d0b010c05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40b09030d070404
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ef984
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x4ef9bb
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x4ef9f1
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4ef9e5
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x4ef967
jmp 0x4ef9d6
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0xf
call fcn.00457f40
mov rax, rsi
mov ecx, 0x12
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004ef900

Function at 0x4f1ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2013
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xc14193c17475050b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2a26e2cd06636972
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1a6e2a26e2cd0663
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2b8069b55e641de4
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0d05051219150f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x13000f041815190c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11120713010b1219
mov qword [rsp + 0x48], rdx
movabs rdx, 0x111120d0b0416
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f1f8e
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x4f1fcd
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x20
jae 0x4f2005
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4f1ff4
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
cmp rsi, 0x1a
jb 0x4f1f74
jmp 0x4f1fe8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457f40
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x20
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004f1ee0
Function at 0x4f3000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f311f
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x432548747565224d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x38160f7446534325
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd6d4f4c18644738
mov qword [rsp + 0x26], rdx
movabs rdx, 0x81506130613130c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5070f120d0d0e0b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x150f05070f120d0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110c0001090e0c11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f30a2
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1a
jge 0x4f30d9
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x4f3111
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f3105
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x4f3085
jmp 0x4f30f4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x16
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1a
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004f3000

Function at 0x4f3140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f327f
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x206e31be1e732f46
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2f0a61eff63b5653
mov qword [rsp + 0x22], rdx
movabs rdx, 0x420d052a4bc12f0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x492c9769782d242b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x400171513000412
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1d141118100b1313
mov qword [rsp + 0x40], rdx
movabs rdx, 0x111c0a091b0a090e
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb12050a160c0003
mov qword [rsp + 0x50], rdx
movabs rdx, 0x40f15090112000b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4f3200
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 5]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x4f323c
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
cmp rsi, 0x28
jae 0x4f3271
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4f3265
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 5]
cmp rsi, 0x1e
jb 0x4f31e3
jmp 0x4f3257
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.00446000
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x1e
call fcn.00457f40
mov rax, rsi
mov ecx, 0x28
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004f3140
Function at 0x4f56c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f57f3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6a57593e47805455
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6a5a5b400c205d2c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6545474b6964673c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc110803010d0208
mov qword [rsp + 0x36], rdx
movabs rdx, 0x16070c110803010d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3080f0e0b0f1305
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1007131510110f0b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd1106091404130e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f576e
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x16]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4f57ad
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x22
jae 0x4f57e5
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f57d4
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x16]
cmp rsi, 0x18
jb 0x4f5754
jmp 0x4f57c8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457f40
mov eax, edi
mov ecx, 0x18
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x22
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004f56c0

Function at 0x4f6100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6233
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6750737b67827b60
mov qword [rsp + 0x18], rdx
movabs rdx, 0x52617c79349e2769
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6b6e52617c79349e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6f1b70546f887261
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70d020a0817140d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x151902041403190b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x818180e010a1519
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1117050e090c0f00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f61ae
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4f61ed
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x1e
jae 0x4f6225
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4f6214
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0x1a
jb 0x4f6194
jmp 0x4f6208
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457f40
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1e
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004f6100
Function at 0x4f6780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f689f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6e617b3d610a8dfd
mov qword [rsp + 0x18], rdx
movabs rdx, 0x13ee612a0b4210eb
mov qword [rsp + 0x20], rdx
movabs rdx, 0xbbd62a5420646316
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0c01051102080e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x170c01010a0c0a04
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe160c090405100f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe15000b0b160b02
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f6822
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x7d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x7d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x20
jge 0x4f6859
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x20
jae 0x4f6891
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f6885
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x18
jb 0x4f6805
jmp 0x4f6874
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x18
call fcn.00457f40
mov rax, rsi
mov ecx, 0x20
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004f6780

Function at 0x4f6ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6fdf
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x9b6db09b696361bc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xec6ef972e98541b4
mov qword [rsp + 0x26], rdx
movabs rdx, 0xdbfc69adae44721a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x517140d0b0a070f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10070a1200160414
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x50010070a120016
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70c131708060a06
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f6f62
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x2f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x2f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1a
jge 0x4f6f99
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x4f6fd1
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f6fc5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4f6f45
jmp 0x4f6fb4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x18
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1a
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004f6ec0
Function at 0x4f79c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7af3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xe7638e515d1d4350
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x24726140f8384837
mov qword [rsp + 0x22], rdx
movabs rdx, 0x202844214a202472
mov qword [rsp + 0x28], rdx
movabs rdx, 0x25424643261d4d28
mov qword [rsp + 0x30], rdx
movabs rdx, 0x902040b03030f1b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8121d180c011405
mov qword [rsp + 0x40], rdx
movabs rdx, 0x181b1a09131c0504
mov qword [rsp + 0x48], rdx
movabs rdx, 0x71d11191d14050a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f7a6e
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xa]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4f7aad
movzx edx, byte [rsp + rax + 0x38]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x20
jae 0x4f7ae5
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4f7ad4
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xa]
cmp rsi, 0x1e
jb 0x4f7a54
jmp 0x4f7ac8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00457f40
mov eax, edi
mov ecx, 0x1e
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x20
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004f79c0

Function at 0x4f7f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f801f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x3a4451d5bfd4d14a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xdbd1dfe83a4451d5
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb16d69d55c82b661
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3100d03060e070f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4050e0213050d07
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb0a041001090405
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80807130f0d040f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f7fa2
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x58]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x58]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x4f7fd9
movzx edx, byte [rsp + rax + 0x32]
lea rsi, [rax + 1]
cmp rsi, 0x1e
jae 0x4f8011
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f8005
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4f7f85
jmp 0x4f7ff4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x14
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1e
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004f7f00