joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e1860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1968
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x324e3447476c74c2
mov qword [rsp + 0x18], rdx
movabs rdx, 0x18ee3a057eee324e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x732941626d304e4b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0d1307040a0a0d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90b00080c0c0e0e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x140b090b00080c0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc000810050514
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e1900
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4e1932
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e195b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0x16
jb 0x4e18e5
jmp 0x4e194f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x16
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004e1860

Function at 0x4e1bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1cb6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x67724c9e6d733b5d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6e6967724c9e6d73
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x676f675f6c624c65
mov qword [rsp + 0x24], rdx
movabs rdx, 0x70102100e0c0611
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x50d110407010210
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb041011040d07
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e1c53
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x14]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x14]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4e1c82
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4e1ca9
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4e1c36
nop
jmp 0x4e1c9d
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.004e1bc0
Function at 0x4e2260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e2332
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x114be06cfb47f039
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xeb75
movabs rdx, 0x703060905090907
mov qword [rsp + 0x22], rdx
movabs rdx, 0x702000601070703
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4e22cd
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4e22fa
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4e2325
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4e22b0
jmp 0x4e2315
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xa
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004e2260

Function at 0x4e32c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e3388
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x186f6f646475161f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x701000603000006
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7030106
xor eax, eax
jmp 0x4e3320
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5e]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4e3352
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4e337b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5e]
cmp rsi, 8
jb 0x4e3302
jmp 0x4e336f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004e32c0
Function at 0x4e5c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5d1c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x74a1e39d6cec6798
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa364a16966a6f074
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0402090e05080e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90c06050e010005
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e5cb5
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4e5ce8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4e5d0f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xf
jb 0x4e5c98
jmp 0x4e5d03
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xf
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004e5c40

Function at 0x4e5d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5e28
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7f443e1461986977
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1718b95b723c7f44
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20d0d0a070a0a0b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70c040c020d0d0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4080602020d050a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e5dc1
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x14
jge 0x4e5df3
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4e5e1b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x16]
cmp rsi, 0xe
jb 0x4e5da7
jmp 0x4e5e0f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xe
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004e5d40
Function at 0x4f0860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0932
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x326b72696e726444
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x4a6c6480
movabs rdx, 0x10005060401050b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x106060806010100
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f08ce
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4f08fb
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4f0925
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4f08b1
jmp 0x4f0916
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f0860

Function at 0x4f0f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f103c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x2f2057304c503b52
mov qword [rsp + 0x19], rdx
movabs rdx, 0x552f2057304c503b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x134a666972740a49
mov qword [rsp + 0x22], rdx
movabs rdx, 0x701070e040e0a01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x205100607020701
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10060a050f01070e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f0fd0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 3]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x4f1008
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4f102f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 3]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x4f0fb6
jmp 0x4f1023
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004f0f40
Function at 0x4f1ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1da6
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x7961df93bac6a9e4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x200030102030504
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x204
xor eax, eax
nop
jmp 0x4f1d40
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4f1d6d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4f1d94
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 8
jb 0x4f1d22
jmp 0x4f1d88
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f1ce0

Function at 0x4f23e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f24d6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x745120744a1f2038
mov qword [rsp + 0x19], rdx
movabs rdx, 0x634161745120744a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x443c5e542041172e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20c0312110109
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3060b0d00020c03
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6090d060a100c02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f2473
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x2e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x2e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x4f24a2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f24c9
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4f2456
nop
jmp 0x4f24bd
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x13
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.004f23e0
Function at 0x4f2920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2a52
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xd2746e657dfb7d57
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb8693b66cfeec361
mov qword [rsp + 0x25], rdx
movabs rdx, 0x8aa8bf44b82000b8
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x71609254a0a57275
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa121202010d1509
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1d0d0f0d0b1d171e
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1a0709141d0d0f0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15161215091c0213
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd12161d10130903
mov qword [rsp + 0x58], rdx
movabs rdx, 0x190d19131a090a0d
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4f29ef
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x2c
jge 0x4f2a1c
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4f2a45
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1f
jb 0x4f29d2
jmp 0x4f2a37
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1f
call fcn.0044a200
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x1f
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1f
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f2920

Function at 0x4f2e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2f16
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6dee9de06f8795
mov qword [rsp + 0x32], rdx
movabs rdx, 0x618ccd745393006d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5faaa454a56472a7
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110d0b080b030807
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb1315030c04110d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10008040e14050e
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4f2eb3
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x1f]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x4f2ee2
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f2f09
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x4f2e96
nop
jmp 0x4f2efd
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x16
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.004f2e20
Function at 0x4f2f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f3048
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6e3569827d658a7a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6d8a617490766e35
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65888a5452905f9f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9090d0f0003090e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x411091310100c13
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x608041104110913
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13010e1404000310
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f2fe2
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0xb]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0xb]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1c
jge 0x4f300f
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4f303b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x16
jb 0x4f2fc5
jmp 0x4f302f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x16
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f2f40

Function at 0x4f3b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f3c16
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x3469b06e6567a47f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x646e702953959d34
mov qword [rsp + 0x20], rdx
movabs rdx, 0x98a288545fb47261
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7011407120509
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11151505090b0807
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb1516050c0c0714
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f3bb3
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x4f3be2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f3c09
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4f3b96
nop
jmp 0x4f3bfd
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.004f3b20
Function at 0x4f42c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f43c8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xb2757317cfaa41f2
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2b6edf025303be72
mov qword [rsp + 0x24], rdx
movabs rdx, 0x651469309a2bc561
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x11171209040f0f06
mov qword [rsp + 0x34], rdx
movabs rdx, 0x14121609130c17
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x13020300141216
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7130d0304090a11
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f4360
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x40]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4f4392
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f43bb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x40]
cmp rsi, 0x18
jb 0x4f4345
jmp 0x4f43af
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x18
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f42c0

Function at 0x4f43e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f44e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xbf6cd02c386e8e43
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf46ea1c753bf6cd0
mov qword [rsp + 0x22], rdx
movabs rdx, 0x32fcf33be7a34327
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30e0d0a13111414
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe14111104070701
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa05040712040e14
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc130903100f0d09
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f4482
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x4c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x4f44af
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4f44db
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4f4465
jmp 0x4f44cf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x15
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f43e0
Function at 0x4f4500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4628
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x8169aaecf4756f97
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1f61556dff74f293
mov qword [rsp + 0x21], rdx
movabs rdx, 0x20b360c763eb641f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x806f43690146fc72
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1e17120708001e0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc1314131c1a151c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x19180b04120c0314
mov qword [rsp + 0x48], rdx
movabs rdx, 0x803090d1705130f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x71115181e0912
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4f45c0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x4f45f2
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4f461b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 0x1f
jb 0x4f45a3
jmp 0x4f460f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1f
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1f
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1f
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f4500

Function at 0x4f4e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4f36
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xb4a5d535653fb0fe
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4db76103f9c064b4
mov qword [rsp + 0x26], rdx
movabs rdx, 0x653e52b4211c49e1
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10140d13060b010e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x71510140d13060b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa090a0f15020d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0f150e13000b13
mov qword [rsp + 0x48], rdx
movabs rdx, 0x211120506150b04
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f4ece
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x22
jge 0x4f4f02
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f4f29
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x16]
cmp rsi, 0x17
jb 0x4f4eb4
nop
jmp 0x4f4f1d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.004f4e20