joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4df0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df192
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x3ddd08681a2f6f4e
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x20224a0b416e6169
mov qword [rsp + 0x43], rdx
movabs rdx, 0x644402cb5320224a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x653f1f54203d561a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x11060b020c11030a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x71111060b020c11
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x717111b0c071205
mov qword [rsp + 0x23], rdx
movabs rdx, 0xb1a07150e07170b
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xc120713020d1611
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4df175
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 3]
movzx r9d, byte [rsp + rdi + 0x3b]
mov byte [rsp + rdi + 0x3b], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 3]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
cmp rax, 0x22
jl 0x4df13d
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.004419a0
add rsp, 0x58
pop rbp
ret
call fcn.004506a0
jmp fcn.004df0a0

Function at 0x4df1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df274
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x53186ceb2c727358
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x5462593c53186ceb
mov qword [rsp + 0x40], rdx
movabs rdx, 0x52563b35646272dc
mov qword [rsp + 0x48], rdx
movabs rdx, 0x310041111131106
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10081111090a0c0f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30012080b041008
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf1113060f130e0a
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4df257
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
movzx r9d, byte [rsp + rdi + 0x3c]
mov byte [rsp + rdi + 0x3c], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
cmp rax, 0x1e
jl 0x4df21f
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x14
call fcn.004419a0
add rsp, 0x50
pop rbp
ret
call fcn.004506a0
jmp fcn.004df1a0
Function at 0x4dfe20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dff02
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6033616843d36f4e
mov qword [rsp + 0x37], rdx
movabs rdx, 0x42615f5c20da745d
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6442615f5c20da74
mov qword [rsp + 0x40], rdx
movabs rdx, 0x615932544c3b723a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2060616170f0a06
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x708170d13060a03
mov qword [rsp + 0x23], rdx
movabs rdx, 0x110d13140708170d
mov qword [rsp + 0x27], rdx
movabs rdx, 0x91817090c0d0516
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4dfee5
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x37]
sub r8d, edx
add r8d, 0x2f
movzx r9d, byte [rsp + rdi + 0x37]
mov byte [rsp + rdi + 0x37], r8b
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1c
jl 0x4dfeae
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.004419a0
add rsp, 0x50
pop rbp
ret
call fcn.004506a0
jmp fcn.004dfe20

Function at 0x4e02e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e03b3
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf1153620132d1d41
mov qword [rsp + 0x36], rdx
movabs rdx, 0x280cf1153620132d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x17014d56144e7245
mov qword [rsp + 0x40], rdx
movabs rdx, 0x709110111090d10
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe110f0602050603
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8090e110f060205
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80c030a05091005
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4e0396
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x36]
sub r8d, edx
add r8d, 0x3c
movzx r9d, byte [rsp + rdi + 0x36]
mov byte [rsp + rdi + 0x36], r8b
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x1a
jl 0x4e035f
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004e02e0
Function at 0x4e3460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e3542
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x72eccbef41bdec89
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc6d9c742dd69bb61
mov qword [rsp + 0x46], rdx
movabs rdx, 0x64aac6d9c742dd69
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8bdcd3c62064da06
mov qword [rsp + 0x50], rdx
movabs rdx, 0x190c19020c000212
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe04160d10040f09
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0e060e1710050b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x19131318011718
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4e3525
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x3e]
sub r8d, edx
add r8d, 0xffffffb4
movzx r9d, byte [rsp + rdi + 0x3e]
mov byte [rsp + rdi + 0x3e], r8b
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
cmp rax, 0x20
jl 0x4e34ee
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.004419a0
add rsp, 0x58
pop rbp
ret
call fcn.004506a0
jmp fcn.004e3460

Function at 0x4e3e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e3f34
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x77d66420d072ea4c
mov qword [rsp + 0x39], rdx
movabs rdx, 0xcb566142dc20e077
mov qword [rsp + 0x40], rdx
movabs rdx, 0xee50cbf1e164af01
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb1014140e05100d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x13101516080f010d
mov qword [rsp + 0x27], rdx
movabs rdx, 0x31613101516080f
mov qword [rsp + 0x29], rdx
movabs rdx, 0xa010e0608121214
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4e3f17
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x70]
movzx r9d, byte [rsp + rdi + 0x39]
mov byte [rsp + rdi + 0x39], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x70]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
cmp rax, 0x1a
jl 0x4e3edf
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.004419a0
add rsp, 0x50
pop rbp
ret
call fcn.004506a0
jmp fcn.004e3e60
Function at 0x4e4b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e4c53
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa28beeb6459d0699
mov qword [rsp + 0x39], rdx
movabs rdx, 0x8c9a6cd187207da2
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6592d8daf9649b8f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x510100814000a13
mov qword [rsp + 0x19], rdx
movabs rdx, 0x100150002050b07
mov qword [rsp + 0x21], rdx
movabs rdx, 0x4100c12060a0f0e
mov qword [rsp + 0x29], rdx
movabs rdx, 0x20c0d000002070c
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4e4c36
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x39]
sub r8d, edx
add r8d, 0xffffffe6
movzx r9d, byte [rsp + rdi + 0x39]
mov byte [rsp + rdi + 0x39], r8b
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
cmp rax, 0x20
jl 0x4e4bff
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.004419a0
add rsp, 0x50
pop rbp
ret
call fcn.004506a0
jmp fcn.004e4b80

Function at 0x4e5980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5a45
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x91203eb36b727b82
mov qword [rsp + 0x34], rdx
movabs rdx, 0x646e617d91203eb3
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6f76a79092647d61
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100f120700110510
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x708121008010804
mov qword [rsp + 0x24], rdx
movabs rdx, 0x813100800010d01
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4e5a28
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2c]
movzx r9d, byte [rsp + rdi + 0x34]
mov byte [rsp + rdi + 0x34], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x18
jl 0x4e59f0
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004e5980

Function at 0x4e6820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e68e5
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x20651e6e9565af52
mov qword [rsp + 0x33], rdx
movabs rdx, 0xc26ef5745320651e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65a67da4008bd461
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc1110120c0f0205
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5120a010a050c11
mov qword [rsp + 0x23], rdx
movabs rdx, 0x3130e1311030202
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4e68c8
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
movzx r9d, byte [rsp + rdi + 0x33]
mov byte [rsp + rdi + 0x33], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x16
jl 0x4e6890
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004e6820
Function at 0x4e6f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7034
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x960767b267855456
mov qword [rsp + 0x39], rdx
movabs rdx, 0xb08295825389de96
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc3cb88bfb7c15a61
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1116041106041108
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1513080e0d111210
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1509140201151513
mov qword [rsp + 0x29], rdx
movabs rdx, 0xc0b070410130815
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4e7017
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x44]
movzx r9d, byte [rsp + rdi + 0x39]
mov byte [rsp + rdi + 0x39], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x44]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
cmp rax, 0x1e
jl 0x4e6fdf
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.004419a0
add rsp, 0x50
pop rbp
ret
call fcn.004506a0
jmp fcn.004e6f60
Function at 0x4e98c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e99a2
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x81d0266f666c3d3c
mov qword [rsp + 0x39], rdx
movabs rdx, 0xd530d86d3ad52041
mov qword [rsp + 0x41], rdx
movabs rdx, 0x666e69d1536e6fd5
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6e394774cb6dc631
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5170e1217050117
mov qword [rsp + 0x19], rdx
movabs rdx, 0x813170e121d0118
mov qword [rsp + 0x21], rdx
movabs rdx, 0x120b070e1c0a0013
mov qword [rsp + 0x29], rdx
movabs rdx, 0x17130d061a120f0a
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4e9985
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x39]
sub r8d, edx
add r8d, 0xffffffbc
movzx r9d, byte [rsp + rdi + 0x39]
mov byte [rsp + rdi + 0x39], r8b
sub r9d, edx
lea edx, [r9 - 0x44]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
cmp rax, 0x20
jl 0x4e994e
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x1f
call fcn.004419a0
add rsp, 0x58
pop rbp
ret
call fcn.004506a0
jmp fcn.004e98c0

Function at 0x4ede60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4edf43
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x9bef77fa0d69f973
mov qword [rsp + 0x41], rdx
movabs rdx, 0xb267207ffbdc6b9b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf3e865e774d90e0f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x13040816050f0b03
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd0e13040816050f
mov qword [rsp + 0x21], rdx
movabs rdx, 0x109010a0902020d
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1603110e10091502
mov qword [rsp + 0x31], rdx
movabs rdx, 0x70f150d0609060e
mov qword [rsp + 0x39], rdx
xor eax, eax
jmp 0x4edf26
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x41]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
movzx r9d, byte [rsp + rdi + 0x41]
mov byte [rsp + rdi + 0x41], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rsi + 0x41], dl
add rax, 2
cmp rax, 0x22
jl 0x4edeee
xor eax, eax
lea rbx, [rsp + 0x41]
mov ecx, 0x17
call fcn.004419a0
add rsp, 0x58
pop rbp
ret
call fcn.004506a0
jmp fcn.004ede60

Function at 0x4f0a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x20
mov qword [rsp + 0x30], 0
movabs rax, 0x6d048b4478aa1efb
mov qword [rsp + 0x18], rax
movabs rax, 0x202050000060503
mov qword [rsp + 6], rax
mov word [rsp + 0xe], 0x100
xor eax, eax
jmp 0x4f0a6d
movzx ecx, byte [rsp + rax + 6]
movzx edx, byte [rsp + rax + 7]
mov ebx, ecx
xor ecx, edx
movzx esi, byte [rsp + rdx + 0x18]
movzx edi, byte [rsp + rbx + 0x18]
add ecx, eax
lea esi, [rsi + rcx]
lea esi, [rsi + 0x5d]
mov byte [rsp + rbx + 0x18], sil
lea ecx, [rdi + rcx]
lea ecx, [rcx + 0x5d]
mov byte [rsp + rdx + 0x18], cl
add rax, 2
cmp rax, 0xa
jl 0x4f0a3a
mov qword [rsp + 0x10], 0
xor eax, eax
nop
jmp 0x4f0a8e
movzx ecx, byte [rsp + rax + 0x18]
mov byte [rsp + rax + 0x10], cl
inc rax
cmp rax, 8
jl 0x4f0a82
mov rax, qword [rsp + 0x10]
mov qword [rsp + 0x30], rax
add rsp, 0x20
pop rbp
ret
Function at 0x4f0fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1073
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x72e6cc1c79db632a
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc128cc2872e6cc1c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6c6cc24573afa62b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50d0e0208060205
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4091108020c0b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x90a000409110802
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc100a08110a0508
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4f1056
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x34]
sub r8d, edx
add r8d, 0x58
movzx r9d, byte [rsp + rdi + 0x34]
mov byte [rsp + rdi + 0x34], r8b
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x1a
jl 0x4f101f
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004f0fa0

Function at 0x4f1b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1c25
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f1444542d124546
mov qword [rsp + 0x33], rdx
movabs rdx, 0x72336e446b6f1444
mov qword [rsp + 0x38], rdx
movabs rdx, 0x733a512211653469
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40f0b020210030f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x402130211000512
mov qword [rsp + 0x23], rdx
movabs rdx, 0x100e09010b0b0610
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4f1c08
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 4]
movzx r9d, byte [rsp + rdi + 0x33]
mov byte [rsp + rdi + 0x33], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 4]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x18
jl 0x4f1bd0
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004f1b60

Function at 0x4f3420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f34c1
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x766465416165373d
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x552e4725
movabs rdx, 0x80b000a04020106
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9020a0b0b0a080b
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4f34a3
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 7]
movzx r9d, byte [rsp + rdi + 0x2c]
mov byte [rsp + rdi + 0x2c], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 7]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jl 0x4f346b
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.004419a0
add rsp, 0x38
pop rbp
nop
ret
call fcn.004506a0
jmp fcn.004f3420
Function at 0x4f3ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f3fc2
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2c3df0b746909747
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xd28a0e0d24749b50
mov qword [rsp + 0x47], rdx
movabs rdx, 0xcfd28a0e0d24749b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5723480d02612103
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1404160d060e0607
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x90c150710100c02
mov qword [rsp + 0x27], rdx
movabs rdx, 0xc05140b0c0d010c
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1206120f0e171511
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4f3fa5
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x3f]
sub r8d, edx
add r8d, 0x7d
movzx r9d, byte [rsp + rdi + 0x3f]
mov byte [rsp + rdi + 0x3f], r8b
sub r9d, edx
lea edx, [r9 + 0x7d]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
cmp rax, 0x20
jl 0x4f3f6e
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.004419a0
add rsp, 0x58
pop rbp
ret
call fcn.004506a0
jmp fcn.004f3ee0

Function at 0x4f3fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f40a4
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6c8186bb80696597
mov qword [rsp + 0x36], rdx
movabs rdx, 0xec656c8186bb8069
mov qword [rsp + 0x38], rdx
movabs rdx, 0x92a5f9ac8ea66cc2
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0503040f030e03
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2000d0a0a090511
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60d031002091004
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4f4087
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x36]
sub r8d, edx
add r8d, 0xffffffee
movzx r9d, byte [rsp + rdi + 0x36]
mov byte [rsp + rdi + 0x36], r8b
sub r9d, edx
lea edx, [r9 - 0x12]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x18
jl 0x4f4050
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004f3fe0

Function at 0x4f4900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f49b6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x321af1c57528f106
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x952a1172692d321a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0b05060d080c01
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2040d0b05060d08
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x60c0b0c00020008
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x4f4999
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2a]
sub r8d, edx
add r8d, 0x52
movzx r9d, byte [rsp + rdi + 0x2a]
mov byte [rsp + rdi + 0x2a], r8b
sub r9d, edx
lea edx, [r9 + 0x52]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x12
jl 0x4f4962
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.004419a0
add rsp, 0x38
pop rbp
ret
call fcn.004506a0
nop dword [rax + rax]
jmp fcn.004f4900
Function at 0x4f92a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4f93ee
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x6c616e7265746e65
mov qword [rsp + 0x52], rdx
movabs rdx, 0x8f6e50724f816c61
mov qword [rsp + 0x58], rdx
movabs rdx, 0x822f4075528f8a4d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x7337072047582071
mov qword [rsp + 0x68], rdx
movabs rdx, 0x647e74727c706a6f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x527e727985302720
mov qword [rsp + 0x78], rdx
movabs rdx, 0x63706b70778d4074
mov qword [rsp + 0x80], rdx
movabs rdx, 0x321e111b1c0b0914
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe09330f180b1913
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2a0c21121f351635
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc242f0e0019000f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80908290d2c280f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x11082f2a2d2f3127
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1b1510302127092c
mov qword [rsp + 0x4a], rdx
xor eax, eax
jmp 0x4f93ca
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x52]
sub r8d, edx
add r8d, 0x37
movzx r9d, byte [rsp + rdi + 0x52]
mov byte [rsp + rdi + 0x52], r8b
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rsi + 0x52], dl
add rax, 2
cmp rax, 0x38
jl 0x4f9393
xor eax, eax
lea rbx, [rsp + 0x52]
mov ecx, 0x36
nop dword [rax]
call fcn.004419a0
add rsp, 0x88
pop rbp
ret
call fcn.004506a0
jmp fcn.004f92a0

Function at 0x4f9400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f951e
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x980565dc78f36f63
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x9765980565dc78f3
mov qword [rsp + 0x50], rdx
movabs rdx, 0x4a6dc09807a13faf
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6c3a6f54cf486ed5
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb27066f12a2e818
mov qword [rsp + 0x68], rdx
movabs rdx, 0x111a1606070e1c0b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x161d111a1606070e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0421141c16041b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa18012116121b11
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa200d02010909
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1d1b0d1f14160f1c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd15060d01002012
mov qword [rsp + 0x46], rdx
xor eax, eax
jmp 0x4f9501
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x4e]
sub r8d, edx
add r8d, 0xffffffe7
movzx r9d, byte [rsp + rdi + 0x4e]
mov byte [rsp + rdi + 0x4e], r8b
sub r9d, edx
lea edx, [r9 - 0x19]
mov byte [rsp + rsi + 0x4e], dl
add rax, 2
cmp rax, 0x32
jl 0x4f94ca
xor eax, eax
lea rbx, [rsp + 0x4e]
mov ecx, 0x22
call fcn.004419a0
add rsp, 0x70
pop rbp
ret
nop
call fcn.004506a0
jmp fcn.004f9400