joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d1b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1c58
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf95c10f9fa8cd080
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x570a8be2
movabs rdx, 0x904060606050702
mov qword [rsp + 0x26], rdx
movabs rdx, 0x100090406060605
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5030104060a0708
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d1bf7
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x4d1c28
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4d1c4b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x4d1bda
jmp 0x4d1c3f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457ea0
mov eax, edi
mov ecx, 0xc
call fcn.00457ea0
nop
call fcn.00455c20
nop dword [rax]
jmp fcn.004d1b80

Function at 0x4d30e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3198
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3845486474423e73
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x102070507020106
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x706
xor eax, eax
jmp 0x4d3135
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x4d3168
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4d318b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
nop
cmp rsi, 8
jb 0x4d311b
jmp 0x4d317f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00457ea0
mov eax, edi
mov ecx, 8
call fcn.00457ea0
nop
call fcn.00455c20
nop dword [rax]
jmp fcn.004d30e0
Function at 0x4d6de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x4d6f47
push rbp
mov rbp, rsp
sub rsp, 0xb8
movabs rdx, 0x734a446cd838108b
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2074734a446cd838
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x58bf529872e89a71
mov qword [rsp + 0x22], rdx
movabs rdx, 0x31ae73174365847c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x49208c6f72954a18
mov qword [rsp + 0x32], rdx
movabs rdx, 0x9f6947895477ad6e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x82ed458b806b5565
mov qword [rsp + 0x42], rdx
movabs rdx, 0x40a6738f419fa374
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x1a73aefa91a20fa1
mov qword [rsp + 0x52], rdx
movabs rdx, 0x3e30380b0c181c2c
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x2e18003c3f303a11
mov qword [rsp + 0x62], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x005b2646]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004584fa
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4d6ee0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x5e
jge 0x4d6f12
movzx edx, byte [rsp + rax + 0x5a]
movzx esi, byte [rsp + rax + 0x5b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x42
jae 0x4d6f3a
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5f]
cmp rsi, 0x42
jb 0x4d6ec2
jmp 0x4d6f2e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x42
nop
call fcn.00445b60
add rsp, 0xb8
pop rbp
ret
mov eax, esi
mov ecx, 0x42
call fcn.00457ea0
mov eax, edi
mov ecx, 0x42
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004d6de0

Function at 0x4e5e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5f32
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x7961d541c7ced1b3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x205050400000301
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4e5ed1
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x4e5efe
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4e5f25
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x4e5eb4
jmp 0x4e5f15
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00445b60
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00457ea0
mov eax, edi
mov ecx, 8
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004e5e80
Function at 0x4e6180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6238
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x79165d0ac019b346
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x203050401030505
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6060401
xor eax, eax
jmp 0x4e61d6
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x4e6208
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4e622b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 8
jb 0x4e61bc
jmp 0x4e621f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00457ea0
mov eax, edi
mov ecx, 8
call fcn.00457ea0
nop
call fcn.00455c20
nop dword [rax]
jmp fcn.004e6180

Function at 0x4edd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ede1d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x741bca95701bd7c5
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe681db741bca9570
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x656d7f54c21bdd21
mov qword [rsp + 0x24], rdx
movabs rdx, 0x900100a000b0904
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x110100405010202
mov qword [rsp + 0x34], rdx
movabs rdx, 0x608090e01101004
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50c0d060d0a0b09
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4eddc0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4edded
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4ede10
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4edd9f
jmp 0x4ede04
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457ea0
mov eax, edi
mov ecx, 0x13
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004edd20
Function at 0x4ede40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4edf5d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x66f6202755621de9
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x392a53121e636272
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6450392a53121e63
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65475f3a20544859
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x40f160c06000c
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb14100100040f16
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1018160e06141006
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1616100209100e17
mov qword [rsp + 0x48], rdx
movabs rdx, 0x903010e0f031312
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4edf00
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4edf2d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4edf50
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4ededd
jmp 0x4edf44
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00445b60
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457ea0
mov eax, edi
mov ecx, 0x1a
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004ede40

Function at 0x4eff40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f002c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1f26757a83dd6516
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf06e90741928191f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9111bc252d057228
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc150216000a0f03
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1616131409021512
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe13060708110f08
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4effca
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x31]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x4efffc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4f001f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x31]
cmp rsi, 0x17
jb 0x4effb0
jmp 0x4f0013
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457ea0
mov eax, edi
mov ecx, 0x17
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004eff40
Function at 0x4f1c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1d68
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x65aad7ee9a8c5304
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfc6c6c74fe9be7f3
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4d6d69f0b564bbb5
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x14040b0b0d090a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x8080014040b0b0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1406170f04170605
mov qword [rsp + 0x40], rdx
movabs rdx, 0x31004110d0b08
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130b0e0a02031710
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f1d0b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x2a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x4f1d38
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f1d5b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4f1cee
jmp 0x4f1d4f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00445b60
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457ea0
mov eax, edi
mov ecx, 0x18
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004f1c60

Function at 0x4f1d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1e7d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x65da7386b7e4cd53
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xde6eed569cdf6e24
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4b6d6980c75d7202
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x13170f0a0f100417
mov qword [rsp + 0x32], rdx
movabs rdx, 0x8120b0c1217130b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1202060d0b0c0812
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4140f170103140f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f1e20
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4f1e4d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f1e70
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x4f1dff
jmp 0x4f1e64
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457ea0
mov eax, edi
mov ecx, 0x18
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004f1d80
Function at 0x4f2560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f267d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7accc37439cde453
mov qword [rsp + 0x18], rdx
movabs rdx, 0x51ce866065cc4565
mov qword [rsp + 0x20], rdx
movabs rdx, 0x65ae51ce866065cc
mov qword [rsp + 0x22], rdx
movabs rdx, 0x276ddb543a491a5d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1519191306100d15
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe19020915151519
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0a070503020c14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170f13010c120d11
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd1714020e14030c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f2620
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x46]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x46]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4f264d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4f2670
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4f25fd
jmp 0x4f2664
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00445b60
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457ea0
mov eax, edi
mov ecx, 0x1a
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004f2560

Function at 0x4f4b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4c2c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6a69d1626e0bfeff
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6403df7425800a54
mov qword [rsp + 0x38], rdx
movabs rdx, 0x36d9b54ffbb0d1e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120e091505030a03
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9170b010e031308
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd0011100a130502
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4f4bca
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x4f4bfc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f4c1f
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
cmp rsi, 0x18
jb 0x4f4bb0
jmp 0x4f4c13
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457ea0
mov eax, edi
mov ecx, 0x18
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004f4b40
Function at 0x4f9ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9bcc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74c2e6a6df9b6ff5
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xdb6e6174c2e6a6df
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2b6d69542020de61
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd06040a0a000612
mov qword [rsp + 0x32], rdx
movabs rdx, 0x5050d0206020d06
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12050d030c030c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f9b6a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4f9b9c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f9bbf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 0x13
jb 0x4f9b50
jmp 0x4f9bb3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457ea0
mov eax, edi
mov ecx, 0x13
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004f9ae0

Function at 0x4fa320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fa428
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e691a120d2cc5b6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6186f10567ab7562
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3d6e6186f10567ab
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7d6d69b4c2e7d91a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x31205161116110e
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc0a000215190301
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe1416120c0a0002
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130d0c1304130a00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fa3cb
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x47]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1c
jge 0x4fa3f8
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4fa41b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4fa3ae
jmp 0x4fa40f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457ea0
mov eax, edi
mov ecx, 0x1a
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004fa320
Function at 0x4fa440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fa53d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe116e14559e259e5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x64fa447401f5e116
mov qword [rsp + 0x22], rdx
movabs rdx, 0x906de4f04d64d961
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1511040102130403
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf0b060804030002
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf00030508080f0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12150709050c0112
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fa4e0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4fa50d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4fa530
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4fa4bf
jmp 0x4fa524
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457ea0
mov eax, edi
mov ecx, 0x16
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004fa440

Function at 0x4fb980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fba7b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e877c988ba86932
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8278be746c206e87
mov qword [rsp + 0x24], rdx
movabs rdx, 0x656d69798469727a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30e00110402010b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x205070e04060105
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc0d10120205070e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0305090e050b00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4fba19
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x27]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4fba4b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4fba6e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x27]
cmp rsi, 0x16
jb 0x4fb9ff
jmp 0x4fba62
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457ea0
mov eax, edi
mov ecx, 0x16
call fcn.00457ea0
nop
nop dword [rax + rax]
call fcn.00455c20
jmp fcn.004fb980
Function at 0x4fbaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fbb8c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x61afb6617265f041
mov qword [rsp + 0x19], rdx
movabs rdx, 0x646eb49553206e61
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd1aafdf4b32e728f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1114120106151402
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5021402160b1312
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140f131211120c0b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fbb2a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x4fbb5c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4fbb7f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0x17
jb 0x4fbb10
jmp 0x4fbb73
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457ea0
mov eax, edi
mov ecx, 0x17
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004fbaa0

Function at 0x4fbe80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fbf9d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x19f2619e166e87a9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc920a0706fc7099f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf700f0e6c920a070
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x91292dd0f0c6e06
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf1016100f030916
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x103060d19010f10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x400061a18081919
mov qword [rsp + 0x48], rdx
movabs rdx, 0x117121b15011410
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1100070a18130415
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4fbf40
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4fbf6d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4fbf90
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4fbf1d
jmp 0x4fbf84
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.00445b60
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457ea0
mov eax, edi
mov ecx, 0x1c
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004fbe80