joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ef500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef5fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4064fb6c196ebe14
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb67fab1dbb200b62
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65a869f82e64ad61
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x130e080907080111
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd0d0f0907050c14
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc00030b0d0d0f09
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe080b071614050c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ef5a0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4ef5cd
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4ef5f0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x4ef57f
jmp 0x4ef5e4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004ef500

Function at 0x4efa00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4efb08
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x36676e1b311e4b05
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4f6174400f2fd24c
mov qword [rsp + 0x21], rdx
movabs rdx, 0xfb4f6174400f2fd2
mov qword [rsp + 0x22], rdx
movabs rdx, 0xfd6da44820152761
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3180b020709160b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1610021004030003
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x150a1215160f1610
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70b18081301150c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4efaab
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x43]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x43]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x4efad8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4efafb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x4efa8e
jmp 0x4efaef
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004efa00
Function at 0x4f02e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f03ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe6c5e9e4734275d0
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4258e1e6c5e9e473
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x318920986e6f96d0
mov qword [rsp + 0x24], rdx
movabs rdx, 0x805040a0b0c0a09
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90000070805040a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf09061102110f11
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f036d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x4f039a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f03bd
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4f0350
jmp 0x4f03b1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f02e0

Function at 0x4f03e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f04dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e3f2c73fd06f04b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1d6ec074374c6e3f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65fd60541141eb36
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9030214100d030f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x20e14000605010e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x8100b0f020e1400
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1108020e1308130f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f0480
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4f04ad
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f04d0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x16
jb 0x4f045f
jmp 0x4f04c4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004f03e0
Function at 0x4f1a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1b6a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5420614fd6262228
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4b6d695420614fd6
mov qword [rsp + 0x22], rdx
movabs rdx, 0x31203b28245a20
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x120e0a030d0e0e12
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd04020e020a120e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12010f000f000a0e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f1b0d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x35]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x35]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4f1b3a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f1b5d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4f1af0
jmp 0x4f1b51
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f1a80

Function at 0x4f27c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f28aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xca4720ce736de91c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x64b50aca4720ce73
mov qword [rsp + 0x20], rdx
movabs rdx, 0xda4e4b54e2e6728d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb010706090b08
mov qword [rsp + 0x30], rdx
movabs rdx, 0x812110d08080b10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90b070e1009040d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f284d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x51]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4f287a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f289d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4f2830
jmp 0x4f2891
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f27c0
Function at 0x4f2f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f307d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2ac13074b78761aa
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x84de6179392ac130
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf104554d1bccfb6
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf0e03060e131408
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc0d000812090907
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x10020d100c0d0008
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50b140902140505
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f3020
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x43]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x43]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4f304d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f3070
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x4f2fff
jmp 0x4f3064
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004f2f80

Function at 0x4f3520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f361b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x406532202970193e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x13da39743b09459a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x416de68a20a67227
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9080f0705100815
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11417170b030715
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1200090007090007
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120d12010e0d000a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f35b9
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x18]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x20
jge 0x4f35eb
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f360e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x18]
cmp rsi, 0x18
jb 0x4f359f
jmp 0x4f3602
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004f3520
Function at 0x4f5760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f585b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb9d669eced74a527
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfdd61da5320b9d6
mov qword [rsp + 0x24], rdx
movabs rdx, 0x272c698820641a61
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4010d0d04121212
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa150306140c070d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x412000d0a150306
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3000f1401121506
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f57f9
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x20]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4f582b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f584e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x20]
cmp rsi, 0x16
jb 0x4f57df
jmp 0x4f5842
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004f5760

Function at 0x4f5e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5f0a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x99c1c15320715e68
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6499c1c15320715e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2cc69f26664f5cc
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd000c0709020f01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa1006000d000d00
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9070f060d050205
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f5ead
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x4f5eda
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4f5efd
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x4f5e90
jmp 0x4f5ef1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f5e20
Function at 0x4f5f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f601b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x53a3c36579ae8937
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xdf6eaf7453a3c365
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6a6d1d6e835f5085
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90c01060506010b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60f0e130c050c02
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf03060f0e130c05
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc13100d0f110006
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f5fb9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4f5feb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f600e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2f]
cmp rsi, 0x14
jb 0x4f5f9f
jmp 0x4f6002
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004f5f20

Function at 0x4f63e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f64cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6ece1d5310d9b8d1
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x746ece1d5310d9b8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x146d72f0bf2c72cf
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe0c01081001100b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc00050608020801
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100e000d09030805
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f646a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x35]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x4f649c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4f64bf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x35]
cmp rsi, 0x11
jb 0x4f6450
jmp 0x4f64b3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f63e0
Function at 0x4f7980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7a6c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa4bbb40472b26113
mov qword [rsp + 0x19], rdx
movabs rdx, 0x796657453b2a7a4
mov qword [rsp + 0x20], rdx
movabs rdx, 0xee6db0e62064afbe
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe00081613090913
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd04050e02050c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x71410050f080604
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f7a0a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x4f7a3c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f7a5f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
cmp rsi, 0x17
jb 0x4f79f0
jmp 0x4f7a53
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f7980

Function at 0x4f7d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7e5d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa40e615af122654e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x28613c4364483961
mov qword [rsp + 0x23], rdx
movabs rdx, 0xfd28613c43644839
mov qword [rsp + 0x24], rdx
movabs rdx, 0x655469a84f3a5438
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10030d0d070d0310
mov qword [rsp + 0x34], rdx
movabs rdx, 0x150a110a10030d0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x31003020c0f030a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd03140615090512
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1301020b01171513
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f7e00
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4f7e2d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f7e50
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4f7ddd
jmp 0x4f7e44
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004f7d40
Function at 0x4f8800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f88ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e5f4b80617b616b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa32d6f7453206e5f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x986d947c88647b6a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x110f060e150c150d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x604000515110006
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20d0c060c130b12
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f888d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0xe]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x18
jge 0x4f88ba
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f88dd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4f8870
jmp 0x4f88d1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f8800

Function at 0x4f9000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f90fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x826b6d7ab1326f91
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6482cea353826b6d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x656d90857485a2a6
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0a030d09070b04
mov qword [rsp + 0x34], rdx
movabs rdx, 0x90f0304100d1105
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x2040207090f0304
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120a0d00100d0e00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f90a0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4f90cd
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f90f0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x4f907f
jmp 0x4f90e4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004f9000
Function at 0x4fe380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fe47d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x65c078eddb237923
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf16920bc6f72da65
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6e02e5cf1dd6d7c0
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x311130e1308060f
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb04100011080212
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x4040b0410001108
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb13030014030b15
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fe420
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4fe44d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4fe470
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4fe3ff
jmp 0x4fe464
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004fe380

Function at 0x4ff320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0xbd888d11e79c70aa
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x105020005030207
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7040607
xor eax, eax
jmp 0x4ff377
movzx r8d, byte [rsp + rbx + 0x1c]
sub r8d, edx
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x1c], dl
lea edx, [rdi + 0x69]
mov byte [rsp + rbx + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x4ff3a8
movzx edx, byte [rsp + rax + 0x24]
movzx ebx, byte [rsp + rax + 0x25]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x4ff3e5
movzx edi, byte [rsp + rsi + 0x1c]
sub edi, edx
nop word [rax + rax]
cmp rbx, 8
jb 0x4ff35b
jmp 0x4ff3d7
mov qword [rsp + 0x14], 0
xor eax, eax
jmp 0x4ff3c1
movzx ecx, byte [rsp + rax + 0x1c]
mov byte [rsp + rax + 0x14], cl
inc rax
cmp rax, 8
jl 0x4ff3b5
mov rax, qword [rsp + 0x14]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00461020
mov eax, esi
mov ecx, 8
call fcn.00461020
nop
int3
Function at 0x4ff6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ff7a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xdfd3a4c5c7dc6461
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x206cdc23
movabs rdx, 0x9080706050b0408
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2030302070b0908
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ff748
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4ff777
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4ff79a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4ff72b
jmp 0x4ff78e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ff6e0

Function at 0x4ffb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ffc2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x18761a651ab302c0
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6c646418761a651a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x907050901020505
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x501030000050907
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ffbcf
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x68]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x68]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4ffbfc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ffc1f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4ffbb2
jmp 0x4ffc13
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ffb60