joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e9180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e92a7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x2302301e04726546
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3169ebf565434eba
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3533312a35fceafd
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6563b0be4450204a
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1017170813060d1c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x514141d19071912
mov qword [rsp + 0x24], rdx
movabs rdx, 0x11050f0c0514141d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x170f10161c1c0d0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x190511030415131b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x91f180911000919
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e9249
movzx r9d, byte [rsp + rsi + 0x48]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x48], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x48], dl
add rax, 2
cmp rax, 0x2c
jge 0x4e9277
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x4e929a
movzx r8d, byte [rsp + rdi + 0x48]
sub r8d, edx
cmp rsi, 0x20
jb 0x4e922c
jmp 0x4e928e
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x20
call fcn.00447380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x20
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004e9180

Function at 0x4e9ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9dca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x72a9116d52fc1cd3
mov qword [rsp + 0x37], rdx
movabs rdx, 0xa072a9116d52fc1c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1665fb460008044c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4060e0006040e01
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb06100008060e10
mov qword [rsp + 0x27], rdx
movabs rdx, 0x50c0a000a0b0208
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4e9d6d
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x18
jge 0x4e9d9a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4e9dbd
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x11
jb 0x4e9d50
jmp 0x4e9db1
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x11
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004e9ce0
Function at 0x4ec3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec467
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6946bf74979c9b7a
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x578bbe69
movabs rdx, 0x902030200050108
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x808090300090108
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4ec408
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x10
jge 0x4ec437
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4ec45a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4ec3eb
jmp 0x4ec44e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00447380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xb
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004ec3a0

Function at 0x4ec940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eca1d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa482efaeb8206587
mov qword [rsp + 0x31], rdx
movabs rdx, 0xdeef72a156ab43a4
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0504020b0e0e0a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x600050d0b050402
mov qword [rsp + 0x21], rdx
movabs rdx, 0x70507040b030a09
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4ec9c0
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4ec9ed
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4eca10
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x4ec9a2
jmp 0x4eca04
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.00447380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xf
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.004ec940
Function at 0x4edc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4edd08
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x227067f26565f2ca
mov qword [rsp + 0x41], rdx
movabs rdx, 0xb96eba858900c522
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5771c6d9690c7453
mov qword [rsp + 0x50], rdx
movabs rdx, 0x9070a11140e0106
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x150a09070a11140e
mov qword [rsp + 0x21], rdx
movabs rdx, 0xc0706050a04110b
mov qword [rsp + 0x29], rdx
movabs rdx, 0x911040608011511
mov qword [rsp + 0x31], rdx
movabs rdx, 0x409130b0a000815
mov qword [rsp + 0x39], rdx
xor eax, eax
jmp 0x4edcab
movzx r9d, byte [rsp + rsi + 0x41]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x41], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x41], dl
add rax, 2
cmp rax, 0x22
jge 0x4edcd8
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4edcfb
movzx r8d, byte [rsp + rdi + 0x41]
sub r8d, edx
cmp rsi, 0x17
jb 0x4edc8e
jmp 0x4edcef
xor eax, eax
lea rbx, [rsp + 0x41]
mov ecx, 0x17
call fcn.00447380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x17
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004edc00

Function at 0x4edd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eddde
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3c626950fbfc7250
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x791a0a3c
movabs rdx, 0x208030709040209
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x4020007
xor eax, eax
jmp 0x4edd81
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4eddae
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4eddd1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4edd64
jmp 0x4eddc5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xb
call fcn.0045a8c0
nop
nop
call fcn.004585e0
jmp fcn.004edd20
Function at 0x4ee8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee9ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf272ed65db426447
mov qword [rsp + 0x37], rdx
movabs rdx, 0xedf272ed65db4264
mov qword [rsp + 0x38], rdx
movabs rdx, 0x871b963e17250f5
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40105090402030e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x20c05010f08070c
mov qword [rsp + 0x27], rdx
movabs rdx, 0x410050405010802
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4ee96d
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x69]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x69]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x18
jge 0x4ee99a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4ee9bd
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x11
jb 0x4ee950
jmp 0x4ee9b1
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x11
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004ee8e0

Function at 0x4efc40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4efd5d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xfd09d9b5a7a6bd47
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa2e17df7729266af
mov qword [rsp + 0x46], rdx
movabs rdx, 0x68c2a2e17df77292
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0d7fd3661d27942
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc080a0717110116
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x110d0c080a071711
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x21401170a080106
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf03060401101103
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1905180e0e111804
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4efd00
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4efd2d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4efd50
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4efcdd
jmp 0x4efd44
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00447380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x1a
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.004efc40
Function at 0x4efd80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4efe88
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x24351e4009746547
mov qword [rsp + 0x37], rdx
movabs rdx, 0xf6332f1fa2266150
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x16f6332f1fa22661
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc665e9456efe4879
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf160d071018180b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x303100c13060a0b
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc0516000303100c
mov qword [rsp + 0x27], rdx
movabs rdx, 0xe0a0f0e15040606
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4efe2b
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1c
jge 0x4efe58
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4efe7b
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x4efe0e
jmp 0x4efe6f
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00447380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x19
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004efd80

Function at 0x4efea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eff7d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4e646c423b156562
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3a636d6f57634170
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0f0707020a0009
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb08030008040f00
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0a060c060e070b
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4eff20
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x1b]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x1b]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4eff4d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4eff70
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x4eff02
jmp 0x4eff64
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.00447380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x10
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.004efea0
Function at 0x4f0280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f039d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x65b165a972a5d2bd
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xee1bb4c629a3ec64
mov qword [rsp + 0x47], rdx
movabs rdx, 0xaeee1bb4c629a3ec
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0c17461643d0e97
mov qword [rsp + 0x50], rdx
movabs rdx, 0x14060201020c0903
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x20614060201020c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb0a10180e130204
mov qword [rsp + 0x27], rdx
movabs rdx, 0x12000f0a04170e0a
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xa0e0d1310030011
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4f0340
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 - 0x25]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 - 0x25]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4f036d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f0390
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4f031d
jmp 0x4f0384
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.00447380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x19
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.004f0280

Function at 0x4f04a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f055e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x224808c81929655c
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x656cdd12
movabs rdx, 0x305080904070400
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x70802
xor eax, eax
jmp 0x4f0501
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x4f052e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4f0551
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x4f04e4
jmp 0x4f0545
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xc
call fcn.0045a8c0
nop
nop
call fcn.004585e0
jmp fcn.004f04a0
Function at 0x4f07e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f08db
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5a9281698da66547
mov qword [rsp + 0x32], rdx
movabs rdx, 0x666ec9a273805a92
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6e6f6974bf7d919f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9030e020b110a0b
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6080a020b0b0f0b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x80506080a020b0b
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf0f061310020e02
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4f0879
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4f08ab
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f08ce
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2f]
cmp rsi, 0x16
jb 0x4f085f
jmp 0x4f08c2
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x16
call fcn.0045a8c0
nop
nop dword [rax + rax]
call fcn.004585e0
jmp fcn.004f07e0

Function at 0x4f18a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1966
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb2f972506ed1704f
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x9c3913b2
movabs rdx, 0x907060707060a09
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x7080702
xor eax, eax
jmp 0x4f1900
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x37]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4f1932
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4f1957
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x37]
cmp rsi, 0xb
jb 0x4f18e4
jmp 0x4f194b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00447380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xb
nop
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004f18a0
Function at 0x4f1980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1a9a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x780bd813f473f796
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1b14f465048f64f0
mov qword [rsp + 0x46], rdx
movabs rdx, 0x5941b14f465048f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xde1c74ef7408036f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x419130b07180e0f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8000419130b0718
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6101419050a1107
mov qword [rsp + 0x26], rdx
movabs rdx, 0x50610080c161101
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x18031614080d0313
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4f1a37
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x50]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4f1a69
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4f1a8d
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x50]
cmp rsi, 0x1a
jb 0x4f1a1d
jmp 0x4f1a81
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00447380
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x1a
call fcn.0045a8c0
nop
call fcn.004585e0
nop
jmp fcn.004f1980

Function at 0x4f6ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6fbd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x447250734e47441c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x341d2d6374554472
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb00030d0d010d0c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd0b01050b00030d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20307000d0a0c08
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x4f6f60
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0x21]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4f6f8d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4f6fb0
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0xe
jb 0x4f6f42
jmp 0x4f6fa4
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
call fcn.00447380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xe
call fcn.0045a8c0
nop
nop dword [rax]
call fcn.004585e0
jmp fcn.004f6ee0
Function at 0x4f6fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f70ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe8a1cf9e47af7452
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6f6e9f72ac56e8a1
mov qword [rsp + 0x38], rdx
movabs rdx, 0x73eaac9a6d87d1ae
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1012071410070f0c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6120504140c0705
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb02070e0b0c0913
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4f706d
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x18
jge 0x4f709a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f70bd
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x4f7050
jmp 0x4f70b1
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00447380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045a8c0
mov eax, edi
mov ecx, 0x16
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004f6fe0

Function at 0x4f70e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f71b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9ea065a59a748747
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x579245b86d619ea0
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc010c0607070704
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc0c0c0a0c030c01
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4f714c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2e]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x4f717e
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4f71a5
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2e]
cmp rsi, 0xe
jb 0x4f7132
jmp 0x4f7195
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00447380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.0045a8c0
mov eax, edi
mov ecx, 0xe
call fcn.0045a8c0
nop
call fcn.004585e0
jmp fcn.004f70e0