joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e06a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e07a8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x206ca672b9da65fa
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc175a0966fa8db45
mov qword [rsp + 0x26], rdx
movabs rdx, 0xae6eb4a9c175a096
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x656d04546a6472a3
mov qword [rsp + 0x32], rdx
movabs rdx, 0x20f0019030c0f0a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x13170a100f19190d
mov qword [rsp + 0x42], rdx
movabs rdx, 0x140d13170e0f1317
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50c111919001109
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e074b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x11]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x11]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x4e0778
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4e079b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4e072e
jmp 0x4e078f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451880
mov eax, edi
mov ecx, 0x1c
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004e06a0

Function at 0x4e07c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e08bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb423c2d5f5012ee5
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x646eea1e534165b4
mov qword [rsp + 0x24], rdx
movabs rdx, 0x16e0fdd8201e1b61
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x15090c050c030710
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb060c1110160213
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x151514000b060c11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1502140205140904
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e0860
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x6c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x6c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4e088d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e08b0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x4e083f
jmp 0x4e08a4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004e07c0
Function at 0x4e1d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1e7d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x22722e6f3a0a4d50
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3f5c616355204422
mov qword [rsp + 0x26], rdx
movabs rdx, 0x656d6e136b647261
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x140b020813080703
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa020e010a050e03
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x20e0a020e010a05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12080d031300030d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e1e20
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4e1e4d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e1e70
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4e1dff
jmp 0x4e1e64
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004e1d80

Function at 0x4e2f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e302c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6174bc37d8ed2c46
mov qword [rsp + 0x18], rdx
movabs rdx, 0x64346174bc37d8ed
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa4cc2c5426644461
mov qword [rsp + 0x22], rdx
movabs rdx, 0x308050d0b031008
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2040b0d11080308
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80d030b110b0f01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e2fca
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x4e2ffc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4e301f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 0x12
jb 0x4e2fb0
jmp 0x4e3013
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004e2f40
Function at 0x4e3660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e374a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8a6b706fadaff2eb
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x90c9ad74a18a6b70
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd2c6690c486672d2
mov qword [rsp + 0x28], rdx
movabs rdx, 0x510080c0a0f0007
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30a05070a110102
mov qword [rsp + 0x38], rdx
movabs rdx, 0x211070f130d0b14
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e36ed
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x4e371a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e373d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4e36d0
jmp 0x4e3731
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004e3660
Function at 0x4e6900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e69e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x525e5a5f51335e5c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6979007031534d52
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd03000501060c06
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10b09030d030005
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0708040b04070e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4e6980
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4e69b2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4e69d7
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 0xf
jb 0x4e6962
jmp 0x4e69cb
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004e6900

Function at 0x4eb760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb88c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xbf2ff2051868afb
mov qword [rsp + 0x19], rdx
movabs rdx, 0x920bf2ff2051868a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6120f2e6fb079adf
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20700a0186fbf0e6
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6b6c190972686874
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1d1e061c07150b13
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x50c120d02081d1e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8071416031c1b06
mov qword [rsp + 0x48], rdx
movabs rdx, 0x30e000a130a1e09
mov qword [rsp + 0x50], rdx
movabs rdx, 0x11c160609021108
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4eb826
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x26
jge 0x4eb85c
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x21
jae 0x4eb87f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
cmp rsi, 0x21
jb 0x4eb80c
jmp 0x4eb873
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x21
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00451880
mov eax, edi
mov ecx, 0x21
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004eb760
Function at 0x4ec7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec878
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf316514cea5465ad
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xdf9f64c0
movabs rdx, 0x6070002070b03
mov qword [rsp + 0x26], rdx
movabs rdx, 0x508000607000207
mov qword [rsp + 0x28], rdx
movabs rdx, 0x800060a06050408
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ec814
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x12
jge 0x4ec848
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4ec86b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7a]
nop
cmp rsi, 0xc
jb 0x4ec7fa
jmp 0x4ec85f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004ec7a0

Function at 0x4ec8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec96c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6402f6015fa440bc
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xde6c
movabs rdx, 0x606010006000404
mov qword [rsp + 0x22], rdx
movabs rdx, 0x209050509020606
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4ec904
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x32]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4ec93c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4ec95f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x32]
cmp rsi, 0xa
jb 0x4ec8ea
jmp 0x4ec953
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ec8a0
Function at 0x4ecc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eccfd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4c613e696a635141
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x78686e30716f5f65
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe090c01050c07
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x309020c000e090c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x101070b000109
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ecca0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x18]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x18]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4ecccd
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4eccf0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x4ecc82
jmp 0x4ecce4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004ecc20

Function at 0x4ee500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee608
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6cb8d32a6e7431a3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc6beb34e68bc3cc4
mov qword [rsp + 0x23], rdx
movabs rdx, 0xeec6beb34e68bc3c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x79dbcacad36112a8
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1104010609161118
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1203140512031504
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x3000f0e12031405
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6160a10080d1711
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ee5ab
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x48]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x48]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x4ee5d8
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4ee5fb
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4ee58e
jmp 0x4ee5ef
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ee500
Function at 0x4ef040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef11d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3243008375a26fa6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x14a422d495463243
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4050c0000020b09
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90a0a0604050c00
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90905000a0d0b02
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ef0c0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x73]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x73]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4ef0ed
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ef110
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4ef0a2
jmp 0x4ef104
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004ef040

Function at 0x4ef140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef212
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x606c694616a76fd9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc03590606c694616
mov qword [rsp + 0x22], rdx
movabs rdx, 0x203070a00090802
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2000a0203030203
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ef1ac
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6c]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4ef1de
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ef205
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6c]
cmp rsi, 0xb
jb 0x4ef192
jmp 0x4ef1f5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ef140
Function at 0x4f5ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5f8c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd51bc36165146e75
mov qword [rsp + 0x19], rdx
movabs rdx, 0xbcc920d51bc36165
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9080a0209050706
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2050606
xor eax, eax
jmp 0x4f5f25
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x45]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4f5f5c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4f5f7f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x45]
cmp rsi, 0xb
jb 0x4f5f0b
jmp 0x4f5f73
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f5ec0

Function at 0x4f6940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f69f8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1a4c026fafb71713
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x203020306070206
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5050001
xor eax, eax
jmp 0x4f6996
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x57]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x4f69c8
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4f69eb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x57]
cmp rsi, 8
jb 0x4f697c
jmp 0x4f69df
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004f6940

Function at 0x4f99a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9a67
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6b64697a6186641d
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x727d6170
movabs rdx, 0xb0101010007
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x400040a02040000
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f9a08
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4f9a37
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4f9a5a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4f99eb
jmp 0x4f9a4e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f99a0
Function at 0x4fbc40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fbd8c
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x7463657078264b75
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2c6c391563394365
mov qword [rsp + 0x23], rdx
movabs rdx, 0x742c6c3915633943
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb17845fae5031e74
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3abdef2029b14474
mov qword [rsp + 0x34], rdx
movabs rdx, 0x9ab7653847e18b7d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa14110a23241b23
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1e1e181a140d2228
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x9010c211e1e181a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x120c011f221a0912
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f0f0d0225202222
mov qword [rsp + 0x60], rdx
movabs rdx, 0x270f130c15281e01
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4fbd24
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x17]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4fbd5c
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x29
jae 0x4fbd7f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x17]
cmp rsi, 0x29
jb 0x4fbd0a
jmp 0x4fbd73
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x29
call fcn.00441380
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.00451880
mov eax, edi
mov ecx, 0x29
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004fbc40

Function at 0x4ffe60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x4fff6a
push rbp
mov rbp, rsp
sub rsp, 0x90
movzx edx, byte [rax + 0x4c]
mov byte [rax + 0x4c], cl
nop
movabs rsi, 0x479a104f553d1815
mov qword [rsp + 0x57], rsi
movabs rsi, 0xe4479a104f553d18
mov qword [rsp + 0x58], rsi
movabs rsi, 0x5652f1bb898f27e3
mov qword [rsp + 0x60], rsi
movabs rsi, 0x70ac257b660f2925
mov qword [rsp + 0x46], rsi
movabs rsi, 0xdc70ac257b660f29
mov qword [rsp + 0x47], rsi
movabs rsi, 0x2e3494dfeaed46da
mov qword [rsp + 0x4f], rsi
xor ecx, ecx
nop
jmp 0x4ffef6
movzx esi, byte [rsp + rcx + 0x57]
movzx edi, byte [rsp + rcx + 0x46]
xor edi, esi
mov byte [rsp + rcx + 0x46], dil
inc rcx
cmp rcx, 0x11
jl 0x4ffee2
mov qword [rsp + 0xa0], rax
mov byte [rsp + 0x37], dl
mov qword [rsp + 0x38], rbx
lea rdx, [rax + 0x40]
mov qword [rsp + 0x88], rdx
lea rbx, [rsp + 0x46]
mov ecx, 0x11
lea rax, [rsp + 0x68]
call fcn.00441380
mov ecx, 0x10
xor edi, edi
mov esi, 0x76
mov r8, rax
mov r9, rbx
mov rax, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x38]
call fcn.004fd720
movzx edx, byte [rsp + 0x37]
mov rsi, qword [rsp + 0xa0]
mov byte [rsi + 0x4c], dl
add rsp, 0x90
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x18], cl
call fcn.0044f600
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
movzx ecx, byte [rsp + 0x18]
jmp fcn.004ffe60
Function at 0x506b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x506c4c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x22203b50fa6e5235
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x38633e1646525435
mov qword [rsp + 0x23], rdx
movabs rdx, 0x44523f4b6e38633e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6ece2246b66f2d20
mov qword [rsp + 0x30], rdx
movabs rdx, 0x181316111b140818
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40d090109030f14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120019110a08050f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa010c0a1a070b05
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x506be8
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x20
jge 0x506c1c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x506c3f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
cmp rsi, 0x1d
jb 0x506bce
jmp 0x506c33
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00451880
mov eax, edi
mov ecx, 0x1d
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.00506b40

Function at 0x5081a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50828c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f36d8349726771c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xff6f36d834972677
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7815a26463916198
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80501000f050002
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0e0205070e0009
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3090b0e0b00020e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x50822a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x50825c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50827f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
cmp rsi, 0x11
jb 0x508210
jmp 0x508273
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.005081a0