joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ed2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed39c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x65676e4368634ad1
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4ecc5797b365676e
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc010809040b0c0a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb000a0c0b090c01
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ed332
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffff84
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4ed368
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4ed38f
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffff84
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xd
jb 0x4ed318
jmp 0x4ed383
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461e80
mov eax, edi
mov ecx, 0xd
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.004ed2c0

Function at 0x4edfa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee0a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xfeef724d76526f43
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x74f5f4f3f144feef
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8764e102ec696966
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc10100702040e0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60b0a02130c0802
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe11150715110704
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1209020402040715
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ee042
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x20
jge 0x4ee06f
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ee09b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4ee025
jmp 0x4ee08f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461e80
mov eax, edi
mov ecx, 0x16
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004edfa0
Function at 0x4f0100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f01dc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2c0575fc4567e3f6
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe20c13790d2c0575
mov qword [rsp + 0x20], rdx
movabs rdx, 0x404070c0a0b070b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0a0a0b06080100
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f0175
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x4f01a8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4f01cf
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xd
jb 0x4f0158
jmp 0x4f01c3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461e80
mov eax, edi
mov ecx, 0xd
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.004f0100

Function at 0x4f0200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f02e8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x421965ec42226552
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd2782e510e421965
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7040402020c090c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30907040402020c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa08030206070707
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f0281
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x25
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x4f02b2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4f02db
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x25
add r8d, edx
cmp rsi, 0xd
jb 0x4f0267
jmp 0x4f02cf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461e80
mov eax, edi
mov ecx, 0xd
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004f0200
Function at 0x4f0760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0856
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6565dec5eb72f56b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc16953697472ea6d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6e69d8b66f95c661
mov qword [rsp + 0x40], rdx
movabs rdx, 0x409120313041212
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf140801110804
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50f01150d04010d
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4f07f0
movzx r9d, byte [rsp + rsi + 0x30]
add r9d, 0x65
add edx, r9d
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x4f0822
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4f0849
movzx r8d, byte [rsp + rdi + 0x30]
add r8d, 0x65
add r8d, edx
cmp rsi, 0x18
jb 0x4f07d6
nop
jmp 0x4f083d
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461e80
mov eax, edi
mov ecx, 0x18
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.004f0760

Function at 0x4f0880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0992
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x63b46c82f4c49bcd
mov qword [rsp + 0x36], rdx
movabs rdx, 0x63696669a8baac9b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd66163696669a8ba
mov qword [rsp + 0x40], rdx
movabs rdx, 0x746878818f6f4390
mov qword [rsp + 0x48], rdx
movabs rdx, 0x17080504071216
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x102031802060911
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1517010203180206
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa18180b0b030906
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4f0931
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x1a
jge 0x4f095e
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4f0985
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4f0914
jmp 0x4f0979
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461e80
mov eax, edi
mov ecx, 0x1a
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004f0880
Function at 0x4f0d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0e4b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf16570e074da6a4d
mov qword [rsp + 0x19], rdx
movabs rdx, 0xfb72643c6df16570
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa070c040801010a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1090a070c040801
mov qword [rsp + 0x28], rdx
movabs rdx, 0x401080208040001
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f0de4
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x6f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x6f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x4f0e17
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x4f0e3e
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4f0dc7
jmp 0x4f0e32
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461e80
mov eax, edi
mov ecx, 0xd
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004f0d60

Function at 0x4f1f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1fd2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x1aa3ae656381cfd6
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x78d2
movabs rdx, 0x6060607000201
mov qword [rsp + 0x22], rdx
movabs rdx, 0x808010800050006
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4f1f6d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x5e]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x5e]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4f1f9a
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4f1fc5
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4f1f50
jmp 0x4f1fb5
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xa
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004f1f00
Function at 0x4f2fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f309c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xa9f0a39b92eb7243
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9cc8afbd63aca9f0
mov qword [rsp + 0x30], rdx
movabs rdx, 0x502060307080a0b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x50d04030c050502
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4f3032
movzx r9d, byte [rsp + rsi + 0x2a]
add r9d, 0xffffffb5
add edx, r9d
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x4f3068
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4f308f
movzx r8d, byte [rsp + rdi + 0x2a]
add r8d, 0xffffffb5
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xe
jb 0x4f3018
jmp 0x4f3083
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461e80
mov eax, edi
mov ecx, 0xe
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.004f2fc0

Function at 0x4f30c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f31c8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x15a1b6f461fdc194
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x93626d15a1b6f461
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa194ce6916da6993
mov qword [rsp + 0x26], rdx
movabs rdx, 0x501070d0207040e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6020b11100a0e04
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd1206020b11100a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10000a070d06050e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f3160
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffb2
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4f3191
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f31bb
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffb2
add r8d, edx
cmp rsi, 0x13
jb 0x4f3145
jmp 0x4f31af
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461e80
mov eax, edi
mov ecx, 0x13
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004f30c0
Function at 0x4f35e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f36bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xfa60904e9068904
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5765480fa60904e9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x503010103060508
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x407010003020503
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f3652
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x56
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4f3688
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4f36af
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x56
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x4f3638
jmp 0x4f36a3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.004f35e0

Function at 0x4f36e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f37f3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xd2170b1c11713044
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd12f0ff5682d63d6
mov qword [rsp + 0x23], rdx
movabs rdx, 0x691bc9002dd12f0f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x74a9074caf270162
mov qword [rsp + 0x30], rdx
movabs rdx, 0x120a040e010a0a02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x121013070f0a1a05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x18101b0a110d1317
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10a0810060c0316
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f378e
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x37
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x20
jge 0x4f37bf
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4f37e6
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x37
add r8d, edx
cmp rsi, 0x1d
jb 0x4f3774
jmp 0x4f37da
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461e80
mov eax, edi
mov ecx, 0x1d
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004f36e0
Function at 0x4f4ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f4db2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x7962a3a353657252
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7972617962a3a353
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x407050404050505
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x304
xor eax, eax
jmp 0x4f4d4b
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffea
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4f4d7c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4f4da5
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffea
add r8d, edx
cmp rsi, 0xb
jb 0x4f4d31
jmp 0x4f4d97
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004f4ce0

Function at 0x4f5380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5488
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xeb72ab3c4339e647
mov qword [rsp + 0x18], rdx
movabs rdx, 0x121ce6f2eb72ab3c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe7a3076f74e8c672
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe040a11050b1108
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x201120a08090705
mov qword [rsp + 0x34], rdx
movabs rdx, 0x70b0e010201120a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb11070d09071312
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f5420
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x7d
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4f5451
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f547b
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x7d
add r8d, edx
cmp rsi, 0x14
jb 0x4f5405
jmp 0x4f546f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461e80
mov eax, edi
mov ecx, 0x14
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004f5380
Function at 0x4f6ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6c72
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x40f0aa685774d977
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xf26fd372
movabs rdx, 0x30304010b060305
mov qword [rsp + 0x28], rdx
movabs rdx, 0x309030001050307
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f6c0e
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x6f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x6f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4f6c3b
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4f6c65
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4f6bf1
jmp 0x4f6c56
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0xc
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004f6ba0

Function at 0x4f6c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f6d6b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x5567370f4c1c3b37
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5719335052597461
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0d0a02000c0c04
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe0d0e0d0a02000c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0e0a0e05070b01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f6d04
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x27]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x27]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x4f6d37
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4f6d5e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4f6ce7
jmp 0x4f6d52
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461e80
mov eax, edi
mov ecx, 0x10
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004f6c80
Function at 0x4fbca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fbd88
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x9b7c72708e6365d1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80a5724672888169
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf08080002060a0e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa090f0808000206
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50f0f0702030f07
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4fbd21
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffd9
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x12
jge 0x4fbd52
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4fbd7b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffd9
add r8d, edx
cmp rsi, 0x10
jb 0x4fbd07
jmp 0x4fbd6f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461e80
mov eax, edi
mov ecx, 0x10
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004fbca0

Function at 0x4fc480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc56b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf482a73552d423f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x575a335e6d140f48
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x500020b02070108
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60a0500020b0207
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50a0102010b0c0c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4fc504
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x28]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x28]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x12
jge 0x4fc537
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x4fc55e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4fc4e7
jmp 0x4fc552
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461e80
mov eax, edi
mov ecx, 0xe
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004fc480
Function at 0x4fda00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fdac8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x54f6d265251b2557
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x1b
movabs rdx, 0x806020205050805
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3010608
xor eax, eax
jmp 0x4fda61
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x22
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x4fda92
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4fdabb
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x22
add r8d, edx
cmp rsi, 9
jb 0x4fda47
jmp 0x4fdaaf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004fda00

Function at 0x4fdc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fdd5c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x62cbbbb029c5651b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xbc6d226e7962cbbb
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20a0b020c030003
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x506020a04020a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4fdcf2
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffff9b
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4fdd28
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4fdd4f
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffff9b
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xd
jb 0x4fdcd8
jmp 0x4fdd43
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461e80
mov eax, edi
mov ecx, 0xd
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.004fdc80