joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d1c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1ce8
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x706c6c61abeaed47
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe6256dc34e687485
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf07010f01070c04
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x202020e0c010f07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20e070803030103
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d1c81
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x56]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x4d1cb3
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d1cdb
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x56]
cmp rsi, 0x10
jb 0x4d1c67
jmp 0x4d1ccf
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00444360
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456a60
mov eax, edi
mov ecx, 0x10
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004d1c00

Function at 0x4d2620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d26fc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x746661485374b841
mov qword [rsp + 0x19], rdx
movabs rdx, 0x97b9cdfd4970be74
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe040604080c0e00
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10d060d010b0e04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d2692
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5e]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d26c8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d26ef
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5e]
nop dword [rax]
cmp rsi, 0xf
jb 0x4d2678
jmp 0x4d26e3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00444360
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456a60
mov eax, edi
mov ecx, 0xf
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.004d2620
Function at 0x4d2fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3092
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7a5a93a15b7d6868
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x76aa8c96
movabs rdx, 0x20a0a0807060b01
mov qword [rsp + 0x28], rdx
movabs rdx, 0x804050903000804
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d302e
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4d305b
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4d3085
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4d3011
jmp 0x4d3076
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00444360
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00456a60
mov eax, edi
mov ecx, 0xc
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004d2fc0

Function at 0x4d35a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d36d2
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x690bff7949691149
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x85690bff79496911
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x72d6ee63100df465
mov qword [rsp + 0x26], rdx
movabs rdx, 0x69977407221b1d8b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x74d713121674751b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x17110a0403140312
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xf0a17110a040314
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1f1d1d190503081d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130b06111205171f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x151c051e010c140e
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4d366f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x22
jge 0x4d369c
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4d36c5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x21
jb 0x4d3652
jmp 0x4d36b7
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x21
call fcn.00444360
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x21
nop
call fcn.00456a60
mov eax, edi
mov ecx, 0x21
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004d35a0
Function at 0x4d5020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5128
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xe7bac10e44e14cda
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2dc7746ee7bac10e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57c9d650b21d65f0
mov qword [rsp + 0x26], rdx
movabs rdx, 0x712061006120e05
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4010a0b0a1107
mov qword [rsp + 0x36], rdx
movabs rdx, 0x3000004010a0b0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2060f0a0500100c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d50c2
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x53]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x53]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1a
jge 0x4d50ef
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d511b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x4d50a5
jmp 0x4d510f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456a60
mov eax, edi
mov ecx, 0x14
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004d5020

Function at 0x4d72a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7368
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2ed71265cc357219
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x65
movabs rdx, 0x306000705020502
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x700
xor eax, eax
jmp 0x4d7300
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x4d7332
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d735b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 9
jb 0x4d72e6
jmp 0x4d734f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00444360
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00456a60
mov eax, edi
mov ecx, 9
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004d72a0
Function at 0x4d84a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d85a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x89977386c46c9395
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7b94a4aa89568997
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9f8c65626d75be8f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30d0f0a15060a0b
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd04070a00050e0c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x704060d0d04070a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3060b0914151501
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d8540
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4d8572
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d859b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0x16
jb 0x4d8525
jmp 0x4d858f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
nop
call fcn.00444360
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456a60
mov eax, edi
mov ecx, 0x16
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004d84a0

Function at 0x4d97e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d98bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x461c03652dc55357
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x773c72461c03652d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50a060202060a0a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3020503090a050a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d9852
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x26]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4d9888
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d98af
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x26]
nop dword [rax]
cmp rsi, 0xb
jb 0x4d9838
jmp 0x4d98a3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00444360
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456a60
mov eax, edi
mov ecx, 0xb
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.004d97e0
Function at 0x4d98e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d99a8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x47e0efbdee585357
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x7075
movabs rdx, 0x405070307060204
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x306
xor eax, eax
jmp 0x4d9942
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
cmp rax, 0xa
jge 0x4d9974
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4d999b
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0xa
jb 0x4d9928
jmp 0x4d998f
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00444360
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00456a60
mov eax, edi
mov ecx, 0xa
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004d98e0
Function at 0x4dec20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4decfc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2920e1653ed66146
mov qword [rsp + 0x19], rdx
movabs rdx, 0x9d2f28ec6c25eb29
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd0e0d02030b0e02
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30c0905070d080e
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4dec92
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4decc8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4decef
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
nop dword [rax]
cmp rsi, 0xf
jb 0x4dec78
jmp 0x4dece3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00444360
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456a60
mov eax, edi
mov ecx, 0xf
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.004dec20

Function at 0x4eb080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb15c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x252e0d6e458565d9
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2bbece6c61252e0d
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc0507070207060a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7060007060b0c05
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4eb0f2
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4eb128
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4eb14f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
nop dword [rax]
cmp rsi, 0xd
jb 0x4eb0d8
jmp 0x4eb143
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00444360
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00456a60
mov eax, edi
mov ecx, 0xd
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.004eb080
Function at 0x4ebb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ebc88
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x52ed657437c33e33
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc9e5f3430e6f52ed
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3823f06ddb7473a0
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10b0a0115110d0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe030d0006130d0b
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc020e030d000613
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60209010c150314
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ebc20
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4ebc52
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ebc7b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0x16
jb 0x4ebc05
jmp 0x4ebc6f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456a60
mov eax, edi
mov ecx, 0x16
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004ebb80

Function at 0x4edc40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4edcfc
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0xe426d41e17196544
mov qword [rsp + 0x20], rdx
movabs rdx, 0x507040607050302
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4edc97
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 + 0x4d]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 + 0x4d]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x4edcc8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4edcef
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4edc7a
jmp 0x4edce3
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00444360
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.00456a60
mov eax, edi
mov ecx, 8
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.004edc40
Function at 0x4f5ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5fb6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x2a625ec7555d2850
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6470602a625ec755
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x656d516456640461
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10601030e0c0304
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x605070501060103
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8020f0909100003
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f5f53
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x4f5f82
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f5fa9
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4f5f36
nop
jmp 0x4f5f9d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00444360
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456a60
mov eax, edi
mov ecx, 0x13
call fcn.00456a60
nop
call fcn.00454400
nop dword [rax + rax]
jmp fcn.004f5ec0

Function at 0x4f8480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f8576
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x206c00b2976ec0ee
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xadfde26f53206c00
mov qword [rsp + 0x22], rdx
movabs rdx, 0x226d11dd15070819
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10040e09030c0011
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf0b0c05120d1004
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100e0a1001101403
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f8513
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x77]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x4f8542
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f8569
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4f84f6
nop
jmp 0x4f855d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456a60
mov eax, edi
mov ecx, 0x15
call fcn.00456a60
nop
call fcn.00454400
nop dword [rax + rax]
jmp fcn.004f8480
Function at 0x4f8b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f8c56
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xfc0c61c40f081816
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa6f55374f3a4fc0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65f61a1620649b61
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0613040b0c0d09
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x808140012070f06
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6091301080c0302
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4f8bf3
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0x75]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0x75]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x4f8c22
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f8c49
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x4f8bd6
nop
jmp 0x4f8c3d
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456a60
mov eax, edi
mov ecx, 0x16
call fcn.00456a60
nop
call fcn.00454400
nop dword [rax + rax]
jmp fcn.004f8b60

Function at 0x4f8da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f8eb2
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x819320737fda7554
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x807b63818443208c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x698a61745378807b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7b6df7d4208672b1
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1a1d1a0208101514
mov qword [rsp + 0x38], rdx
movabs rdx, 0x31b0b16021d150f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0e100610181a1b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6101d020b071d03
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f8e51
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 6]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 6]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x20
jge 0x4f8e7e
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4f8ea5
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4f8e34
jmp 0x4f8e99
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.00444360
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00456a60
mov eax, edi
mov ecx, 0x1e
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004f8da0
Function at 0x4fe3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fe4b6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x69cbd651b0cce76
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc16e14c6069cbd65
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd40cc5a920641f61
mov qword [rsp + 0x28], rdx
movabs rdx, 0x120d1303091102
mov qword [rsp + 0x30], rdx
movabs rdx, 0x112060b080b0706
mov qword [rsp + 0x38], rdx
movabs rdx, 0x503010911130010
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fe453
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x4fe482
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4fe4a9
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4fe436
nop
jmp 0x4fe49d
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456a60
mov eax, edi
mov ecx, 0x14
call fcn.00456a60
nop
call fcn.00454400
nop dword [rax + rax]
jmp fcn.004fe3c0

Function at 0x4ff9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ffaa8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xe8fb5c6161ed6153
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9bcb6174dec6e8fb
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe534b04871df087d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x11130c120f0f1003
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100c120807060e07
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x8030205100c1208
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2090d0815131402
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ffa40
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4ffa72
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ffa9b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0x16
jb 0x4ffa25
jmp 0x4ffa8f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
nop
call fcn.00444360
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456a60
mov eax, edi
mov ecx, 0x16
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004ff9a0