joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e0820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e090c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf80af463a50d8f53
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x6e2000f80af463a5
mov qword [rsp + 0x30], rdx
movabs rdx, 0x79faf8ea0a98956f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30d03000e0e0c02
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1000806030d0300
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf00070310051102
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4e08aa
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x14
jge 0x4e08dc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e08ff
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
cmp rsi, 0x13
jb 0x4e0890
jmp 0x4e08f3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00460fc0
mov eax, edi
mov ecx, 0x13
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004e0820

Function at 0x4e0c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e0d2c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8cb1818c8c61abb0
mov qword [rsp + 0x33], rdx
movabs rdx, 0x63468b8bbb8cb181
mov qword [rsp + 0x38], rdx
movabs rdx, 0x658b626188848a6f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40f080010131006
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x10a00010300090b
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf10080e050a0700
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4e0cca
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x4e0cfc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e0d1f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0x15
jb 0x4e0cb0
jmp 0x4e0d13
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00460fc0
mov eax, edi
mov ecx, 0x15
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004e0c40
Function at 0x4e4460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e455d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd422cef746f4270
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xee3741d65110d42
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3c49010c44707096
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe070a120e0c0509
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4110e12080c0508
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd06131504110e12
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa05011514061511
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4e4500
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4e452d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e4550
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4e44df
jmp 0x4e4544
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.0045b720
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00460fc0
mov eax, edi
mov ecx, 0x16
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.004e4460

Function at 0x4e4580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e469a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x61a8fae76555eeff
mov qword [rsp + 0x43], rdx
movabs rdx, 0xea7f59ecc5f58460
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x2037756a13ea7f59
mov qword [rsp + 0x50], rdx
movabs rdx, 0x68b88af4f520ed6f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x41b190b1b101c1a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x609040e00080d11
mov qword [rsp + 0x23], rdx
movabs rdx, 0x161c1a0f060c0a18
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x40f01050d021c0f
mov qword [rsp + 0x33], rdx
movabs rdx, 0x110d001c0d131900
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x4e4637
movzx r9d, byte [rsp + rsi + 0x43]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x43], dl
mov byte [rsp + rsi + 0x43], r8b
add rax, 2
cmp rax, 0x28
jge 0x4e4669
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4e468d
movzx r8d, byte [rsp + rdi + 0x43]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
cmp rsi, 0x1d
jb 0x4e461d
jmp 0x4e4681
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.0045b720
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1d
call fcn.00460fc0
nop
call fcn.0045ece0
nop
jmp fcn.004e4580
Function at 0x4e64c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e65cc
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6920747c6b63a48a
mov qword [rsp + 0x37], rdx
movabs rdx, 0x346d786f5c657079
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xf346d786f5c6570
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6465747568587e66
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140e11070100150d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe1104040f0f0004
mov qword [rsp + 0x25], rdx
movabs rdx, 0x130b0e1104040f0f
mov qword [rsp + 0x27], rdx
movabs rdx, 0x13070c000b101112
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4e6568
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1e]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4e659c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4e65bf
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1e]
cmp rsi, 0x19
jb 0x4e654e
jmp 0x4e65b3
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.0045b720
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00460fc0
mov eax, edi
mov ecx, 0x19
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004e64c0

Function at 0x4e82e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e840c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x25f8616d506f98ed
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x13d25f8616d506f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65636e0222653e10
mov qword [rsp + 0x48], rdx
movabs rdx, 0x43e06e4c6320ccb7
mov qword [rsp + 0x50], rdx
movabs rdx, 0x431ced3570054a39
mov qword [rsp + 0x58], rdx
movabs rdx, 0x121f19010d1b2100
mov qword [rsp + 0x18], rdx
movabs rdx, 0x161a19200903121f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb2012211e0e1c13
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1b201f0308060a08
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1b201c130818071e
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4e83a6
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x26
jge 0x4e83dc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x4e83ff
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0x22
jb 0x4e838c
jmp 0x4e83f3
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x22
call fcn.0045b720
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00460fc0
mov eax, edi
mov ecx, 0x22
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004e82e0
Function at 0x4e86a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e87bd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6c156394746f72e9
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x156865765cfee7dc
mov qword [rsp + 0x44], rdx
movabs rdx, 0x207432f215686576
mov qword [rsp + 0x48], rdx
movabs rdx, 0xcc252f63488a7461
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb0e16171b171b0f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x80b170a0b0e1617
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe101b0919000604
mov qword [rsp + 0x24], rdx
movabs rdx, 0x170a16110b101106
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x191a0e0e09191b0b
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4e8760
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 + 0x68]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 + 0x68]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4e878d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4e87b0
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4e873d
jmp 0x4e87a4
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.0045b720
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1c
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.004e86a0

Function at 0x4e8d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8e1d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x3224615e43576464
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x3e640c69734f4036
mov qword [rsp + 0x47], rdx
movabs rdx, 0x443e640c69734f40
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6b09696c48357925
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf040f0807060314
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7130f040f080706
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x17061107110d0a09
mov qword [rsp + 0x27], rdx
movabs rdx, 0x120c061405111110
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1004100f02000a01
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4e8dc0
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 + 0x30]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 + 0x30]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4e8ded
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4e8e10
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4e8d9d
jmp 0x4e8e04
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.0045b720
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00460fc0
mov eax, edi
mov ecx, 0x19
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.004e8d00
Function at 0x4e8e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8f12
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x652d6e95ff2c789b
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x77f3750920652d6e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x302040002060909
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3040c030b000604
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4e8eac
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4e8ede
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e8f05
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0xd
jb 0x4e8e92
jmp 0x4e8ef5
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00460fc0
mov eax, edi
mov ecx, 0xd
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004e8e40

Function at 0x4ec1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec2ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc8d640bd61657243
mov qword [rsp + 0x34], rdx
movabs rdx, 0x73e76341c8d640bd
mov qword [rsp + 0x38], rdx
movabs rdx, 0x57b26573f3444128
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8060f120a06120a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe0e040f0c0c0f12
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe040712060c0504
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4ec24a
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7f]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x18
jge 0x4ec27c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4ec29f
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7f]
cmp rsi, 0x14
jb 0x4ec230
jmp 0x4ec293
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00460fc0
mov eax, edi
mov ecx, 0x14
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004ec1c0
Function at 0x4ec2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec38c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6e1e4774b52ed2d1
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa6fbf79c01b6e1e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x102060b0b080a0b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1000d010b090803
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4ec32f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jge 0x4ec35c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ec37f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4ec312
jmp 0x4ec373
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460fc0
mov eax, edi
mov ecx, 0xe
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004ec2c0

Function at 0x4f0ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0c0c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x98729754a6efcbaa
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb4cfa5eb658f9160
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd09843658d611069
mov qword [rsp + 0x58], rdx
movabs rdx, 0x79abdf6ca7508d98
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2010a050404050c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8170e0c0d040405
mov qword [rsp + 0x24], rdx
movabs rdx, 0x171e1e0e08170e0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1e0d111d0f030718
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11908130c001605
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b1b090d091d1111
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f0ba6
movzx r9d, byte [rsp + rsi + 0x48]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x62]
mov byte [rsp + rdi + 0x48], dl
mov byte [rsp + rsi + 0x48], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4f0bdc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x4f0bff
movzx r8d, byte [rsp + rdi + 0x48]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x62]
cmp rsi, 0x20
jb 0x4f0b8c
jmp 0x4f0bf3
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x20
call fcn.0045b720
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00460fc0
mov eax, edi
mov ecx, 0x20
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004f0ae0
Function at 0x4f1c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1d1b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6146497466537160
mov qword [rsp + 0x36], rdx
movabs rdx, 0x7341614649746653
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5a635553703a5f4d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50001000f010710
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe0f08030c110901
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0f0e0f08030c11
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2090b0e030e1105
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4f1cb9
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x11]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4f1ceb
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4f1d0e
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x11]
cmp rsi, 0x12
jb 0x4f1c9f
jmp 0x4f1d02
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00460fc0
mov eax, edi
mov ecx, 0x12
call fcn.00460fc0
nop
nop dword [rax + rax]
call fcn.0045ece0
jmp fcn.004f1c20

Function at 0x4f3ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f3bdd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xfb5030d127eb1f44
mov qword [rsp + 0x43], rdx
movabs rdx, 0x64617672683d2910
mov qword [rsp + 0x4b], rdx
movabs rdx, 0xc17261742f646176
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf326f090b5752f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x140d120714180d14
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd0102040702140d
mov qword [rsp + 0x23], rdx
movabs rdx, 0x191c05081b1a171c
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x4170a1509031902
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1a1c051218101407
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x4f3b80
movzx r9d, byte [rsp + rsi + 0x43]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x43], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x43], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4f3bad
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4f3bd0
movzx r8d, byte [rsp + rdi + 0x43]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4f3b5d
jmp 0x4f3bc4
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.0045b720
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00460fc0
mov eax, edi
mov ecx, 0x1d
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.004f3ac0
Function at 0x4f4ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4bb2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x654d748d6772cb8e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc6be7f937389654d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10104040d0b0d0c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x10a0300010a0c08
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4f4b4c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4f4b7e
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4f4ba5
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0xe
jb 0x4f4b32
jmp 0x4f4b95
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00460fc0
mov eax, edi
mov ecx, 0xe
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004f4ae0

Function at 0x4f54e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f55bd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc3dd316fe4066524
mov qword [rsp + 0x30], rdx
movabs rdx, 0x35656d813b723938
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30c0806070f070c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf030c0806070f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc00080b03020905
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4f5560
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4f558d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4f55b0
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x4f5542
jmp 0x4f55a4
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.0045b720
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00460fc0
mov eax, edi
mov ecx, 0x10
call fcn.00460fc0
nop
nop dword [rax]
call fcn.0045ece0
jmp fcn.004f54e0
Function at 0x4f55e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f56c6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc373ccf6cd24df47
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x22a91bc0656cc373
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0a0b0b02010d07
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2040c0a0b0b0201
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x70502030b010405
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x4f5660
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x68]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4f5692
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4f56b7
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x68]
cmp rsi, 0xe
jb 0x4f5642
jmp 0x4f56ab
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop
call fcn.0045b720
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00460fc0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00460fc0
nop
call fcn.0045ece0
jmp fcn.004f55e0

Function at 0x4f63a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f649b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7965eadf546c6747
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb67be0747965eadf
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4a8645599168fcf4
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa020f100f0a1202
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe0d12130701050c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x12030e0d12130701
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb070912040f0d01
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4f6439
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4f646b
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f648e
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0x14
jb 0x4f641f
jmp 0x4f6482
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0045b720
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00460fc0
mov eax, edi
mov ecx, 0x14
call fcn.00460fc0
nop
nop dword [rax + rax]
call fcn.0045ece0
jmp fcn.004f63a0