joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ed200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed2c8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x8e72694c72628178
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x105040000060607
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x705
xor eax, eax
nop
jmp 0x4ed260
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4ed292
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4ed2bb
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
cmp rsi, 8
jb 0x4ed242
jmp 0x4ed2af
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f500
mov eax, edi
mov ecx, 8
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004ed200

Function at 0x4ed440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed4fc
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0x4d23475265632626
mov qword [rsp + 0x20], rdx
movabs rdx, 0x506040706010600
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4ed497
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 + 0x27]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 + 0x27]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x4ed4c8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4ed4ef
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4ed47a
jmp 0x4ed4e3
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044a140
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.0045f500
mov eax, edi
mov ecx, 8
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.004ed440
Function at 0x4eea00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eeb16
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xf99c9668d98cb053
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x9995b15520fb6186
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf29995b15520fb61
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65916954a48644b4
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10a17061011060c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x70703010d140d02
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe17011107070301
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0f120513080707
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4eeaae
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x53]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4eeae2
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4eeb09
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x53]
cmp rsi, 0x19
jb 0x4eea94
nop
jmp 0x4eeafd
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f500
mov eax, edi
mov ecx, 0x19
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.004eea00

Function at 0x4eeb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eec48
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xc7532745d21dc253
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x64d561c7532745d2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcec569c3d007970a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0c1104120f010f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x110502070c0f0b0d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x101110502070c0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3090e0905030402
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4eebe2
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x68]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x68]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x4eec0f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4eec3b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x4eebc5
jmp 0x4eec2f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f500
mov eax, edi
mov ecx, 0x13
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004eeb40
Function at 0x4f0ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1006
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x4d174797d2754d10
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7261cc2761195320
mov qword [rsp + 0x23], rdx
movabs rdx, 0x203d6d394a256372
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4ef3633fbd315a2a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1b05191d1d04011a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa1e00060d0a1b05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1513031911171103
mov qword [rsp + 0x48], rdx
movabs rdx, 0x407030d030c0601
mov qword [rsp + 0x50], rdx
movabs rdx, 0x71012071106180c
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4f0fa0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x46]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x26
jge 0x4f0fcd
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4f0ff4
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1f
jb 0x4f0f83
jmp 0x4f0fe8
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1f
call fcn.0044a140
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1f
call fcn.0045f500
mov eax, edi
mov ecx, 0x1f
nop dword [rax + rax]
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004f0ee0

Function at 0x4f2860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2988
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x2bd120b7c069cad5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb131f4c8e1327299
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd82eb131f4c8e132
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4dd9412c203b5845
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x120c0b180d041913
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd01120c0b180d04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x19110c080a100316
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7000a1001061714
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1703000f14130e14
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f2920
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x4f2952
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4f297b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0x1a
jb 0x4f2903
jmp 0x4f296f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f500
mov eax, edi
mov ecx, 0x1a
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004f2860
Function at 0x4f2ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2bc8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x2d06196509c88045
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf7891c74fd2d0619
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7033f00597a872b7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2100702130d030a
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc050b0d100f0c13
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x80c1211010c0c05
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd010506020b1401
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f2b60
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4f]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x4f2b92
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f2bbb
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4f]
cmp rsi, 0x15
jb 0x4f2b45
jmp 0x4f2baf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f500
mov eax, edi
mov ecx, 0x15
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004f2ac0

Function at 0x4f2be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2cdc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x405320695504612d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6235694053206955
mov qword [rsp + 0x20], rdx
movabs rdx, 0x63332b54430b582f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x11120c08020b090b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa1210000e0b0a09
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3100b070203020d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f2c70
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 1]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4f2ca8
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f2ccf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 1]
nop word [rax + rax]
cmp rsi, 0x13
jb 0x4f2c56
jmp 0x4f2cc3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f500
mov eax, edi
mov ecx, 0x13
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.004f2be0
Function at 0x4f4a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4b76
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x5320d069b6f1b5bd
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xcfe3cbc45320d069
mov qword [rsp + 0x20], rdx
movabs rdx, 0xdb17cad320a8a5a2
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10010e0c110b0e12
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3050d02030e12
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1309120a0905080e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f4b13
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x4a]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x4a]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x4f4b42
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f4b69
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4f4af6
nop
jmp 0x4f4b5d
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f500
mov eax, edi
mov ecx, 0x14
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.004f4a80

Function at 0x4f52e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f53d6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x4ae0451fe5df6c41
mov qword [rsp + 0x19], rdx
movabs rdx, 0x648d614ae0451fe5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xeee20c54f564e1e7
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb100905020c0704
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x110b0b0b0b100905
mov qword [rsp + 0x30], rdx
movabs rdx, 0x41203090607110e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f5373
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x4f53a2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f53c9
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4f5356
nop
jmp 0x4f53bd
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f500
mov eax, edi
mov ecx, 0x13
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.004f52e0
Function at 0x4f6840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6968
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xa7f2ec5deca7f74e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa87473e6a6da24d9
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa44f616b8ca87473
mov qword [rsp + 0x28], rdx
movabs rdx, 0x656de695bf3c910e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa030c0105150b17
mov qword [rsp + 0x38], rdx
movabs rdx, 0x605160c18111a02
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa13011409080b03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1915150310090f08
mov qword [rsp + 0x50], rdx
movabs rdx, 0x100602070c0f0504
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4f6900
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x4f6932
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4f695b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5e]
cmp rsi, 0x1d
jb 0x4f68e3
jmp 0x4f694f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045f500
mov eax, edi
mov ecx, 0x1d
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004f6840
Function at 0x4f7820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7946
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x4a88cba4db202ec5
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x20c5698f41a6ea61
mov qword [rsp + 0x27], rdx
movabs rdx, 0x9258d2c45320c569
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x838f7aabceb69c61
mov qword [rsp + 0x34], rdx
movabs rdx, 0x14070718171a090c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1b03110514070718
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16111c1400031206
mov qword [rsp + 0x48], rdx
movabs rdx, 0x61b130a1a04090e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x509110319160c19
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4f78e0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x24
jge 0x4f790d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4f7934
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4f78c3
jmp 0x4f7928
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.0044a140
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045f500
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004f7820

Function at 0x4f7c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f7d36
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x5b635c0e53726f2e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x67615b53775a6572
mov qword [rsp + 0x21], rdx
movabs rdx, 0x7c67615b53775a65
mov qword [rsp + 0x22], rdx
movabs rdx, 0x74403b5720508372
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5000d180f161213
mov qword [rsp + 0x32], rdx
movabs rdx, 0x7130a1310111813
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x30b06170d0b0713
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40b12111206150f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f7cce
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4f7d02
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f7d29
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
cmp rsi, 0x19
jb 0x4f7cb4
nop
jmp 0x4f7d1d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f500
mov eax, edi
mov ecx, 0x19
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.004f7c20
Function at 0x4f8880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f8976
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xadc324cd65721a85
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x33ecd7adc324cd65
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb46d841a3b64e261
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60a05100f091009
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70104000e0610
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9080c080c12040f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f8913
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4f8942
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f8969
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4f88f6
nop
jmp 0x4f895d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f500
mov eax, edi
mov ecx, 0x13
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.004f8880

Function at 0x4f89a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f8aa8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xf533c5e72655219
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x64367c0f533c5e72
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6f78697f47645f5e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1209070e110c0901
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3110b0402090709
mov qword [rsp + 0x36], rdx
movabs rdx, 0x30103110b040209
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc030f0308110500
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f8a42
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x4f8a6f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f8a9b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x4f8a25
jmp 0x4f8a8f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f500
mov eax, edi
mov ecx, 0x13
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004f89a0
Function at 0x4f9b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9ca8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xe5136247612ad62d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6efc7453beca4083
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1f6efc7453beca40
mov qword [rsp + 0x24], rdx
movabs rdx, 0x162b42542015fcb0
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x130b01180612010b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x90e0107130b0118
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1808040118080102
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa17110608111300
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9171002080b1216
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f9c40
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x4f9c72
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f9c9b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0x19
jb 0x4f9c23
jmp 0x4f9c8f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f500
mov eax, edi
mov ecx, 0x19
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004f9b80

Function at 0x4fa740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fa848
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x463ae54637751d42
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x31ff61f6f54b463a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x352f694028312039
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1401070c0d120600
mov qword [rsp + 0x30], rdx
movabs rdx, 0x150e040112100305
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8070f0c05010911
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12060803060a0c14
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fa7e0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x4fa812
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4fa83b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
cmp rsi, 0x16
jb 0x4fa7c5
jmp 0x4fa82f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f500
mov eax, edi
mov ecx, 0x16
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004fa740