joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ea900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eaa08
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x53cfc5654ab9d940
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa41b45e041c453cf
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe064442c67bfe19c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1505031513010e13
mov qword [rsp + 0x34], rdx
movabs rdx, 0x60f0b0c06090a01
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb000c02060f0b0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0b0d0e1008120d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ea9a0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7c]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4ea9d2
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ea9fb
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7c]
cmp rsi, 0x16
jb 0x4ea985
jmp 0x4ea9ef
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457d20
mov eax, edi
mov ecx, 0x16
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004ea900

Function at 0x4eb040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb13c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x7141078e702b3543
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x652844007141078e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8e742b452d33c029
mov qword [rsp + 0x28], rdx
movabs rdx, 0x101108090d010413
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1305091009040206
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa050e0f090a0c01
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4eb0d0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2c]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4eb108
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4eb12f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2c]
nop word [rax + rax]
cmp rsi, 0x14
jb 0x4eb0b6
jmp 0x4eb123
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457d20
mov eax, edi
mov ecx, 0x14
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.004eb040
Function at 0x4eb7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb8b6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x93656b6dce746532
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc86eaf93656b6dce
mov qword [rsp + 0x20], rdx
movabs rdx, 0xcc3e8b4b61e7d3da
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf040f0a12100f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd1203040b100704
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30d08000d110f0c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4eb853
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x4c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4eb882
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4eb8a9
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4eb836
nop
jmp 0x4eb89d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457d20
mov eax, edi
mov ecx, 0x13
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.004eb7c0

Function at 0x4ebba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ebc88
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x936fbd7ea0e785b4
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb765a08754828793
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf03080d0c070005
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30000030f03020f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf04010a0f080905
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ebc21
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x31]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x18
jge 0x4ebc53
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4ebc7b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x31]
cmp rsi, 0x10
jb 0x4ebc07
jmp 0x4ebc6f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457d20
mov eax, edi
mov ecx, 0x10
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004ebba0
Function at 0x4ecc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ecd88
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x7b6f65477c6d7f43
mov qword [rsp + 0x19], rdx
movabs rdx, 0x637257696b72877b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x54a85f5673717463
mov qword [rsp + 0x28], rdx
movabs rdx, 0x141609010311090f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70d0f12150c020a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x130707080d061411
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11401090c141512
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ecd22
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x4ecd4f
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4ecd7b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4ecd05
jmp 0x4ecd6f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457d20
mov eax, edi
mov ecx, 0x17
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004ecc80

Function at 0x4edcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eddb6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x59dee065b6d2e8e8
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe959dee065b6d2e8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xedc9edc2b873594c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5101007030d0f02
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe10000c05101007
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2010a0e0a020608
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4edd53
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4edd82
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4edda9
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4edd36
nop
jmp 0x4edd9d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457d20
mov eax, edi
mov ecx, 0x11
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.004edcc0
Function at 0x4edde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4edec8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xc624c4291dc3b193
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6fa4bcc11fa01fc6
mov qword [rsp + 0x22], rdx
movabs rdx, 0x701090301000608
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd0b050502040701
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7020c0809060a02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ede61
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x16
jge 0x4ede93
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4edebb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6d]
cmp rsi, 0xf
jb 0x4ede47
jmp 0x4edeaf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457d20
mov eax, edi
mov ecx, 0xf
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004edde0

Function at 0x4ef720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef848
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x7250657465757644
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x649c60aa68547c7e
mov qword [rsp + 0x25], rdx
movabs rdx, 0x8587798d41649c60
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6e73768a684f7d6f
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd0c0e0816021a13
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x191c1111080d0d0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1317180112141608
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1917010818110901
mov qword [rsp + 0x50], rdx
movabs rdx, 0x130c171814150c13
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ef7e0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x27]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x26
jge 0x4ef812
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4ef83b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x27]
cmp rsi, 0x1d
jb 0x4ef7c3
jmp 0x4ef82f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00457d20
mov eax, edi
mov ecx, 0x1d
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004ef720
Function at 0x4efc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4efd3c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x20ee2e46646ee726
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb4d06c2e1ff820ee
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70c09010d010800
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x50a0d07060d070c
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4efcd5
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x4efd08
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4efd2f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x4efcb8
jmp 0x4efd23
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457d20
mov eax, edi
mov ecx, 0xe
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.004efc60

Function at 0x4f0440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0512
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe70ab6f40e65c3b1
mov qword [rsp + 0x19], rdx
movabs rdx, 0x797261e70ab6f40e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x100050507010003
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4060406
xor eax, eax
jmp 0x4f04ae
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x49]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x49]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4f04db
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4f0505
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4f0491
jmp 0x4f04f6
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00457d20
mov eax, edi
mov ecx, 0xb
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004f0440
Function at 0x4f55e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f56d6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xe1df054121360f24
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xfc446ffd63e1df05
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5773650c6e2df5cd
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7000c0e030f060f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x110e0001050d0700
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5040c0b0e020904
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f5673
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x4f56a2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f56c9
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4f5656
nop
jmp 0x4f56bd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457d20
mov eax, edi
mov ecx, 0x15
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.004f55e0

Function at 0x4f67a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6888
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xb6b690814687a1e1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x92e092b369b3b6b6
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2010c0207040002
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10a060502010c02
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0d0b080c040501
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f6821
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x36]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x14
jge 0x4f6853
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4f687b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x36]
cmp rsi, 0xe
jb 0x4f6807
jmp 0x4f686f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457d20
mov eax, edi
mov ecx, 0xe
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004f67a0
Function at 0x4f8000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f80d2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x70506f73626f706f
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x656c7746
movabs rdx, 0x101070009050607
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x505070603020101
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f806e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4f809b
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4f80c5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4f8051
jmp 0x4f80b6
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00457d20
mov eax, edi
mov ecx, 0xc
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004f8000

Function at 0x4f80e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f81dc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x9b4a949be17e650d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6680df068b9b4a94
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9e6ff802f69c7205
mov qword [rsp + 0x28], rdx
movabs rdx, 0x120b12080b05020f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf030a14040007
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100511140d090402
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f8170
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4f81a8
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f81cf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
nop word [rax + rax]
cmp rsi, 0x15
jb 0x4f8156
jmp 0x4f81c3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457d20
mov eax, edi
mov ecx, 0x15
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.004f80e0
Function at 0x4f8f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f903c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x1a6d0a6e1941f668
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xfa1a6d0a6e1941f6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57736ccff3ae74bd
mov qword [rsp + 0x26], rdx
movabs rdx, 0x103070d00030b0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9000103070d0003
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb050008010c0b09
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f8fd0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x4f9008
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4f902f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x4f8fb6
jmp 0x4f9023
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457d20
mov eax, edi
mov ecx, 0x11
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.004f8f40

Function at 0x4f9060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f911c
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0xfdd2636f0b41d8b5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x600000607030103
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4f90b4
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4f90e8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4f910f
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
nop
cmp rsi, 8
jb 0x4f909a
jmp 0x4f9103
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00444d40
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.00457d20
mov eax, edi
mov ecx, 8
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.004f9060
Function at 0x4f9140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9208
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x58646ebbcd415390
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x96
movabs rdx, 0x408000300030007
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x800
xor eax, eax
jmp 0x4f91a0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x43]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x4f91d2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4f91fb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x43]
cmp rsi, 9
jb 0x4f9186
jmp 0x4f91ef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00457d20
mov eax, edi
mov ecx, 9
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004f9140

Function at 0x4f9a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9b5c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x736d455371716567
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x65634f607962736d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x706030207030204
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30a0c0a030b050c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f9af2
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4f9b28
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4f9b4f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
nop dword [rax]
cmp rsi, 0xe
jb 0x4f9ad8
jmp 0x4f9b43
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457d20
mov eax, edi
mov ecx, 0xe
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.004f9a80
Function at 0x4f9b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9c5c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xe8d46d65fbf0de67
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xfd6361f167e8d46d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5090607070b0805
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30c010103080208
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f9bf5
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x4f9c28
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4f9c4f
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xd
jb 0x4f9bd8
jmp 0x4f9c43
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457d20
mov eax, edi
mov ecx, 0xd
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.004f9b80

Function at 0x4fcf80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fd05c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x65d87c9841835577
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x23749f80727265d8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30c030103060b04
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20b0a050a04010b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4fcff2
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x28]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4fd028
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4fd04f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x28]
nop dword [rax]
cmp rsi, 0xe
jb 0x4fcfd8
jmp 0x4fd043
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457d20
mov eax, edi
mov ecx, 0xe
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.004fcf80