joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d64a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d659d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7d679667866547
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x69aaee6c84f30c10
mov qword [rsp + 0x22], rdx
movabs rdx, 0x576c72fe77f3f19b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x130b0a111611060b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x100804140e120512
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x90710090b0d1008
mov qword [rsp + 0x40], rdx
movabs rdx, 0x302081214060302
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d6540
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x6f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x6f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4d656d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d6590
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x4d651f
jmp 0x4d6584
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004d64a0

Function at 0x4d65c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6692
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5373a416523482e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xaa6f3bd24905373a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5060905020c0701
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6000206010a0506
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d662c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x24]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4d665e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d6685
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x24]
cmp rsi, 0xd
jb 0x4d6612
jmp 0x4d6675
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d65c0
Function at 0x4d7dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7e87
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6ff3535f6a74f7f3
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xe879
movabs rdx, 0x109050406030504
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6000803000109
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4d7e27
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x75]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x75]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4d7e57
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4d7e7a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4d7e0a
jmp 0x4d7e6e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d7dc0

Function at 0x4d7ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7f67
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3b2f40f0c87465d0
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x7406
movabs rdx, 0x703080803000406
mov qword [rsp + 0x22], rdx
movabs rdx, 0x605000507080703
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4d7f07
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4d7f37
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4d7f5a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4d7eea
jmp 0x4d7f4e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d7ea0
Function at 0x4da5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da686
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa63db5906fbc9681
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa6067e466547a63d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd01070705050c01
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa020a0d0d010707
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60001040b050a08
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4da620
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4da652
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4da677
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0xe
jb 0x4da602
jmp 0x4da66b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004da5a0

Function at 0x4e6980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6a46
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x61e37365a18d6557
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x21
movabs rdx, 0x306060308030808
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x602
xor eax, eax
nop
jmp 0x4e69e0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4e6a12
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4e6a37
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 9
jb 0x4e69c2
jmp 0x4e6a2b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004e6980
Function at 0x4e7d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7e3a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2bc8c7f56531ad74
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xadc0bd8360c58fb7
mov qword [rsp + 0x23], rdx
movabs rdx, 0xbfbbccadc0bd8360
mov qword [rsp + 0x26], rdx
movabs rdx, 0x106d61c1596ee16f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60a110f0c05071a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1310060a110f0c05
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1012010d04090b10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x141a070814020b0e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x14091a0217120d16
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e7dd7
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x22
jge 0x4e7e09
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4e7e2d
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0x1b
jb 0x4e7dbd
jmp 0x4e7e21
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1b
call fcn.0044bb20
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00461020
mov eax, edi
mov ecx, 0x1b
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.004e7d20
Function at 0x4ebc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ebd7b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa357737d85205371
mov qword [rsp + 0x18], rdx
movabs rdx, 0x46725da753a46e95
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9a676987698e7276
mov qword [rsp + 0x28], rdx
movabs rdx, 0x17040c0a07000814
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0714031410040f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe160e1304120a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x121206140a0c0d10
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ebd19
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x31]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x20
jge 0x4ebd4b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4ebd6e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x31]
cmp rsi, 0x18
jb 0x4ebcff
jmp 0x4ebd62
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004ebc80

Function at 0x4ec6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec7bd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x9a6d2074718d7653
mov qword [rsp + 0x18], rdx
movabs rdx, 0x61ac84c447848c65
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc16961ac84c44784
mov qword [rsp + 0x22], rdx
movabs rdx, 0xcfc246948c59a47d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1213191007181406
mov qword [rsp + 0x32], rdx
movabs rdx, 0x916031312071213
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc170b1513161216
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa020e1713131007
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7181717010d1118
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ec760
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 9]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 9]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4ec78d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4ec7b0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4ec73d
jmp 0x4ec7a4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004ec6a0
Function at 0x4eec60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eed4a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf82063bbfa040dbe
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa79afd74f82063bb
mov qword [rsp + 0x20], rdx
movabs rdx, 0xaa6dfd199ef58eaf
mov qword [rsp + 0x28], rdx
movabs rdx, 0x213090a100d0b07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100011070e0c0f04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x91002040e010303
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4eeced
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x4eed1a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4eed3d
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4eecd0
jmp 0x4eed31
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004eec60

Function at 0x4ef6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef7dd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x45a2b4b3bdfaea19
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xae612b5375746651
mov qword [rsp + 0x25], rdx
movabs rdx, 0x13ae612b53757466
mov qword [rsp + 0x26], rdx
movabs rdx, 0x68ddb69dadc972d0
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x206160413081015
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1418020616041308
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110609010f0f1300
mov qword [rsp + 0x40], rdx
movabs rdx, 0x91700090b060800
mov qword [rsp + 0x48], rdx
movabs rdx, 0x313010315050d15
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ef780
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4ef7ad
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4ef7d0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x4ef75d
jmp 0x4ef7c4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004ef6c0
Function at 0x4efba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4efc9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd97c614c20047267
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1a46174482061d9
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7600ce648e5cef92
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x13120e0f130a0d02
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1006130716111602
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe02100613071611
mov qword [rsp + 0x40], rdx
movabs rdx, 0x111414000a161510
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4efc39
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4efc6b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4efc8e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
cmp rsi, 0x17
jb 0x4efc1f
jmp 0x4efc82
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004efba0

Function at 0x4effc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f00aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xba64e0f1116ef5fb
mov qword [rsp + 0x30], rdx
movabs rdx, 0xfdf46174eeff99f7
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf896af54090b728e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb050f100e080417
mov qword [rsp + 0x18], rdx
movabs rdx, 0x130900120f01120e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x316070a16161315
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4f004d
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
cmp rax, 0x18
jge 0x4f007a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f009d
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x18
jb 0x4f0030
jmp 0x4f0091
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004effc0
Function at 0x4f00c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f01bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x146e61f782af7218
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb3f261f653146e61
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf2d2bede93e3e561
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70900130c0c1000
mov qword [rsp + 0x34], rdx
movabs rdx, 0x140e0c120c091012
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x703040b140e0c12
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3110f0f0f130702
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f0159
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4f018b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f01ae
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0x15
jb 0x4f013f
jmp 0x4f01a2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004f00c0

Function at 0x4f1740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f183d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xbf30e6e8f3246107
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd21c1dcc53bf30e6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3f23b53d2064c72d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40b0c070d120003
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x91109090a050c0d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x140e091109090a05
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa02130c1314060b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f17e0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x5d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x5d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4f180d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f1830
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4f17bf
jmp 0x4f1824
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004f1740
Function at 0x4f1860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f194a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xff520b226b556d3d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6400ff520b226b55
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x656dfb463df9562b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4080a0007050f07
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0c0f0f04080a00
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60f080f070e0b02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f18ed
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4f191a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4f193d
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4f18d0
jmp 0x4f1931
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f1860

Function at 0x4f2a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2b2a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x726f57315a6e7f53
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5d6e7174536f5a72
mov qword [rsp + 0x20], rdx
movabs rdx, 0x556d2873655f726e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5130914030e1611
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8080f0f01161214
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf1612041411140c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f2acd
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x4f2afa
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f2b1d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4f2ab0
jmp 0x4f2b11
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f2a40
Function at 0x4f5880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f598c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1d6e746d5e3a3a4e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x315b4253206c1672
mov qword [rsp + 0x23], rdx
movabs rdx, 0x39315b4253206c16
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6581264b20437761
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x504070707121712
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd04010e120e0903
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x204130e0d04010e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1100f1503031600
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f5928
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xf]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4f595c
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4f597f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xf]
cmp rsi, 0x19
jb 0x4f590e
jmp 0x4f5973
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f5880

Function at 0x4f7340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f742c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x56864b5356676679
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6156864b53566766
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x537e822220646c61
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3020a060e0f1001
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0303020a060e0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100705000a0a0608
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f73ca
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x18]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x4f73fc
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4f741f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x18]
cmp rsi, 0x11
jb 0x4f73b0
jmp 0x4f7413
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f7340