joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ef8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef9dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6ea70d6e91226d9e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x966eb8746520866e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb4f0d4f40295a061
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x100020314110e13
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe050a080315120a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x111508150e050a08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100e06031011160c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ef980
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x25]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x25]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4ef9ad
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4ef9d0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x4ef95f
jmp 0x4ef9c4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004ef8e0

Function at 0x4f03c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f04bd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd90640a0509b24d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x644061fd00970d90
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x26d69ab0a649e15
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0a030f0806060c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x912020405121207
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1509091202040512
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60e0703010e0511
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f0460
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x7d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x7d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4f048d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f04b0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x4f043f
jmp 0x4f04a4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004f03c0
Function at 0x4f3080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f319d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2366756f51053a48
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x611e3c333141001c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4804611e3c333141
mov qword [rsp + 0x24], rdx
movabs rdx, 0x436d6971482e3561
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd140b190d080e07
mov qword [rsp + 0x34], rdx
movabs rdx, 0x13020c0d140b19
mov qword [rsp + 0x38], rdx
movabs rdx, 0x19100d110a000d01
mov qword [rsp + 0x40], rdx
movabs rdx, 0x15070c0213060907
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc1907030200160e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f3140
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4f316d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4f3190
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4f311d
jmp 0x4f3184
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004f3080
Function at 0x4f3640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f372c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x455321520a4c753e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x182afc455321520a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x334a69543d564736
mov qword [rsp + 0x24], rdx
movabs rdx, 0x70d0a0703051102
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb000304070d0a07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1209080e0d0c0404
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f36ca
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xe]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4f36fc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f371f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xe]
cmp rsi, 0x13
jb 0x4f36b0
jmp 0x4f3713
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f3640

Function at 0x4f3740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f382a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1fa76e6164f8c720
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x353993741fa76e61
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf91cedf620e07261
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1006000206060901
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa120e0712111006
mov qword [rsp + 0x38], rdx
movabs rdx, 0x601100b0b130907
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f37cd
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x4f37fa
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f381d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4f37b0
jmp 0x4f3811
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f3740
Function at 0x4f3da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f3e9b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe61cb15f0a74552
mov qword [rsp + 0x19], rdx
movabs rdx, 0x646e4274d60e61cb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x651c301a2064fd31
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8130e0703000805
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3051202050d13
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1203000305120205
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4030a0e04111100
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f3e39
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4f3e6b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f3e8e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x16]
cmp rsi, 0x15
jb 0x4f3e1f
jmp 0x4f3e82
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004f3da0

Function at 0x4f5620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f571d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6c73428f40266591
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6468a6748ec06b6c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x827a695499648e84
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6030f03060d1516
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30f0c0a150402
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf10090c07061212
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12160302120c0a16
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f56c0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4f56ed
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f5710
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4f569f
jmp 0x4f5704
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004f5620
Function at 0x4f5740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f585a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xffad300fef20eb0e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x93617405f79d6dbe
mov qword [rsp + 0x23], rdx
movabs rdx, 0x8393617405f79d6d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6550cef69ff74161
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1416120c0409170a
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc0b05041416120c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x41710100f1705
mov qword [rsp + 0x40], rdx
movabs rdx, 0x300060f14060b08
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1613010a1015070f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f57f7
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4b]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x4f5829
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f584d
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4b]
cmp rsi, 0x19
jb 0x4f57dd
jmp 0x4f5841
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.004f5740

Function at 0x4f5bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5cbb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x53d5e2c9617273ec
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x736194a853d5e2c9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x286de99037b75db6
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc110f1011050b00
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc08000a1311130d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6090c08000a1311
mov qword [rsp + 0x38], rdx
movabs rdx, 0x413130c0d000e10
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f5c59
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4f5c8b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f5cae
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6d]
cmp rsi, 0x14
jb 0x4f5c3f
jmp 0x4f5ca2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004f5bc0
Function at 0x4f75e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f76db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb80e280a6eb3b42a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6428c2b4b6b80e28
mov qword [rsp + 0x22], rdx
movabs rdx, 0x166a1711b3287261
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x511140b050b110a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10f110904000209
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x90f12060f14010f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x710130202081013
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f7679
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x35]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4f76ab
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f76ce
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x35]
cmp rsi, 0x15
jb 0x4f765f
jmp 0x4f76c2
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004f75e0

Function at 0x4f8360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f845d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x697358cc8b4c6504
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xebda61ffd420c369
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe4f8ff5c5f72d5e8
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1205030405000b13
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80a1103160f0b02
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x3140e0b1011080a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1505081513050d00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f8400
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4f842d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f8450
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x17
jb 0x4f83df
jmp 0x4f8444
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004f8360
Function at 0x4f87e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f88cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xaf37208b93bb8754
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x646e61af37208b93
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8e7eb3549d64887b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x12110c020b07100b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x40c0b110b031211
mov qword [rsp + 0x38], rdx
movabs rdx, 0x107120604060e06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f886a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4f889c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f88bf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
cmp rsi, 0x13
jb 0x4f8850
jmp 0x4f88b3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004f87e0

Function at 0x4fc300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc3ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc161219dc9454cbc
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb9c161219dc9454c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5cc0d3542022bbc9
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0009100a0f0510
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe070b0009100a0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x703080800040500
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4fc38d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x47]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x4fc3ba
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4fc3dd
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x4fc370
jmp 0x4fc3d1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004fc300
Function at 0x4fd460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fd55d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x165a74728e697569
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6752556c53595d16
mov qword [rsp + 0x26], rdx
movabs rdx, 0x636d698620646460
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1616080d0907160d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x40e1001060f0b02
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe07040e1001060f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x613000c0b130b03
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fd500
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x1a]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4fd52d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4fd550
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4fd4df
jmp 0x4fd544
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004fd460

Function at 0x4fdfc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fe0cc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x206961684e1b6875
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7a73565076637349
mov qword [rsp + 0x23], rdx
movabs rdx, 0x5c727809827a7356
mov qword [rsp + 0x28], rdx
movabs rdx, 0x656469865c417261
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc001b190b0f0a10
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0a140202180d10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1217131202101702
mov qword [rsp + 0x48], rdx
movabs rdx, 0x191003150c060f11
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4fe068
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x20
jge 0x4fe09c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x4fe0bf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
cmp rsi, 0x1d
jb 0x4fe04e
jmp 0x4fe0b3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461020
mov eax, edi
mov ecx, 0x1d
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004fdfc0
Function at 0x505da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x505e67
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd83396659172fe35
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x21216492
movabs rdx, 0x1030803000b0a0b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x705070b0b03010a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x505e08
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x505e37
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x505e5a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x505deb
jmp 0x505e4e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00505da0

Function at 0x508a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x508ae6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x52e26d65a774edf5
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf432062b1052e26d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30108070c01030c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x809030108070c01
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60c0a090906000a
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x508a80
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x508ab2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x508ad7
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 0xd
jb 0x508a62
jmp 0x508acb
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461020
mov eax, edi
mov ecx, 0xd
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00508a00
Function at 0x509440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50953b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x75646f774b7f615a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5c516e6061557564
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6572746e384b6669
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20004060c110001
mov qword [rsp + 0x34], rdx
movabs rdx, 0x115111000041103
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa060c0901151110
mov qword [rsp + 0x40], rdx
movabs rdx, 0x203150d080f0810
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x5094d9
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x13]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1c
jge 0x50950b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x50952e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x13]
cmp rsi, 0x16
jb 0x5094bf
jmp 0x509522
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.00509440

Function at 0x509560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x509646
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd37a7223c973c6bf
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x64c1c77715076c74
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8080b0a070207
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb06010404060008
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3070a0a0e01060d
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x5095e0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x509612
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x509637
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6c]
cmp rsi, 0x10
jb 0x5095c2
jmp 0x50962b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.00509560