joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e2e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e2f08
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6973414926136504
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6438baca47460569
mov qword [rsp + 0x22], rdx
movabs rdx, 0x650f699fef232508
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf110f0f0b040908
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd0c13040a030010
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x41215150e120d0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0d0d0410151302
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e2ea0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x4e2ed2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e2efb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1a]
cmp rsi, 0x17
jb 0x4e2e85
jmp 0x4e2eef
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
nop
call fcn.00441100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00452c00
mov eax, edi
mov ecx, 0x17
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004e2e00

Function at 0x4e4260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e4368
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x2a2233063406c68f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x646e613553202a22
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x576de50d34642b00
mov qword [rsp + 0x26], rdx
movabs rdx, 0x130001010e02070f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1104130406031200
mov qword [rsp + 0x36], rdx
movabs rdx, 0x113110413040603
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120502150a15130e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e4302
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x50]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x50]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1a
jge 0x4e432f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e435b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x4e42e5
jmp 0x4e434f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.00441100
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00452c00
mov eax, edi
mov ecx, 0x16
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004e4260
Function at 0x4e68a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e699c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xde6174f62039fc06
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x81de6174f62039fc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7fdb699348dbe461
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8040d041004020a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70008040d041004
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40b0c0a0a0c010f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e6930
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x4e6968
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4e698f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x4e6916
jmp 0x4e6983
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00441100
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00452c00
mov eax, edi
mov ecx, 0x11
call fcn.00452c00
nop
nop dword [rax]
call fcn.004505a0
jmp fcn.004e68a0

Function at 0x4e7e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7f68
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xfcd74331c27b714
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2d9ab7d97f16030f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd335fd1220d830ba
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd1610150311160a
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0b0d03000f0204
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x16000c0109060e0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13140a08070e010c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e7f00
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x4e7f32
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e7f5b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0x17
jb 0x4e7ee5
jmp 0x4e7f4f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
nop
call fcn.00441100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00452c00
mov eax, edi
mov ecx, 0x17
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004e7e60
Function at 0x4e8b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8c56
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd742e520698269f3
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe56ed742e5206982
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xfbbb69fbf5e50161
mov qword [rsp + 0x24], rdx
movabs rdx, 0x611020600100d02
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20c0906110206
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd020b0e0705060b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e8bf3
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x74]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x74]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4e8c22
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4e8c49
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4e8bd6
nop
jmp 0x4e8c3d
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00441100
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00452c00
mov eax, edi
mov ecx, 0x12
call fcn.00452c00
nop
call fcn.004505a0
nop dword [rax + rax]
jmp fcn.004e8b60
Function at 0x4ea0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea1d2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x65c272a1a78e618e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6d20758d69683164
mov qword [rsp + 0x25], rdx
movabs rdx, 0x9f6e8edf757e6f6d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x877469749a6d9823
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2181614120d0414
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1d180f16030a060f
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1e1b17131d180f16
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc04040c09171d11
mov qword [rsp + 0x50], rdx
movabs rdx, 0x91716021b1b0916
mov qword [rsp + 0x58], rdx
movabs rdx, 0x170a17090f14001a
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4ea16f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x2c
jge 0x4ea19c
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4ea1c5
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1f
jb 0x4ea152
jmp 0x4ea1b7
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1f
call fcn.00441100
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x1f
nop
call fcn.00452c00
mov eax, edi
mov ecx, 0x1f
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004ea0a0

Function at 0x4f07a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f086b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xcdbe20b985d1c67c
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xd3
movabs rdx, 0x801010004060503
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2080307
xor eax, eax
jmp 0x4f0804
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x51]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x4f0837
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x4f085e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4f07e7
jmp 0x4f0852
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00441100
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00452c00
mov eax, edi
mov ecx, 9
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004f07a0
Function at 0x4f18e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f19b2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2c340aed4e566526
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x66476553
movabs rdx, 0xa03070404050700
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x702020605020a03
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f194e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x2d]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x2d]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4f197b
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4f19a5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4f1931
jmp 0x4f1996
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441100
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00452c00
mov eax, edi
mov ecx, 0xc
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004f18e0

Function at 0x4f1d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1dfc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x9e325dd50e060698
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7f9e325dd50e0606
mov qword [rsp + 0x20], rdx
movabs rdx, 0x36339cf86f69a221
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa01080e060509
mov qword [rsp + 0x30], rdx
movabs rdx, 0x506090d0e090307
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0a040602030001
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f1d90
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x4f1dc8
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4f1def
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x4f1d76
jmp 0x4f1de3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441100
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x11
call fcn.00452c00
mov eax, edi
mov ecx, 0x11
call fcn.00452c00
nop
nop dword [rax]
call fcn.004505a0
jmp fcn.004f1d00
Function at 0x4f3380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f34a8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xedc8e569373fd453
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5e97616de8486636
mov qword [rsp + 0x24], rdx
movabs rdx, 0x896f5e97616de848
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa4f3c96eae4807c9
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1318120e1215070a
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb0f1318120e1215
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70307181112050b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x212170615120719
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe01150301081112
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f3440
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x4f3472
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4f349b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0x1a
jb 0x4f3423
jmp 0x4f348f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
nop
call fcn.00441100
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00452c00
mov eax, edi
mov ecx, 0x1a
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004f3380

Function at 0x4f3e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f3f08
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xa425c642e1ead447
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf45cdcc8a425c642
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6fe8c3c9d2725d0f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa100607050f080c
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa08010f11030406
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf0107100d060a08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40b120609010208
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4f3ea2
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x57]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x57]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x4f3ecf
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f3efb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4f3e85
jmp 0x4f3eef
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.00441100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
call fcn.00452c00
mov eax, edi
mov ecx, 0x14
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004f3e00
Function at 0x4f4240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f430b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x656b374753104729
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x4f03
movabs rdx, 0x9020908090404
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x90501
xor eax, eax
jmp 0x4f42a6
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x28]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x28]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4f42d7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4f42fe
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4f4289
jmp 0x4f42f2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441100
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00452c00
mov eax, edi
mov ecx, 0xa
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004f4240

Function at 0x4f99a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f9a72
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xc5632c7078a82b3d
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xd5cb
movabs rdx, 0x9010001020708
mov qword [rsp + 0x22], rdx
movabs rdx, 0x202010105020009
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4f9a0a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4f9a3c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4f9a65
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6f]
cmp rsi, 0xa
jb 0x4f99f0
jmp 0x4f9a57
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441100
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.00452c00
mov eax, edi
mov ecx, 0xa
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004f99a0
Function at 0x4fa440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x4fa5a6
sub rsp, 0xb8
mov qword [rsp + 0xb0], rbp
lea rbp, [rsp + 0xb0]
movabs rdx, 0x793c23f7202a6f74
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf93f4a3dd963cc79
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf5446876742221db
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2073ca6f1b747fcc
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6ec4732029516e4d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc86c41f73a35a96a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6bd92d73de276f20
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1e780c6280203565
mov qword [rsp + 0x50], rdx
movabs rdx, 0x29df37191b34d931
mov qword [rsp + 0x58], rdx
lea rdi, [rsp + 0x60]
lea rsi, [0x0054f8b0]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045321a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4fa531
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x50
jge 0x4fa568
movzx edx, byte [rsp + rax + 0x60]
movzx esi, byte [rsp + rax + 0x61]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x4fa595
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
nop dword [rax + rax]
cmp rsi, 0x47
jb 0x4fa517
jmp 0x4fa589
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x47
call fcn.00441100
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov eax, esi
mov ecx, 0x47
call fcn.00452c00
mov eax, edi
mov ecx, 0x47
nop dword [rax]
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.004fa440

Function at 0x5064e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x506606
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x26f67a6174ed1573
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x26373f807a3b786
mov qword [rsp + 0x25], rdx
movabs rdx, 0x672769ed6e026373
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x340a68d6f20af7f2
mov qword [rsp + 0x32], rdx
movabs rdx, 0x131c1b081609150a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x18081a190211131c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16071b1605050c01
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf190c1c170b1805
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c07061306161b07
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x5065a0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x64]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x64]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x26
jge 0x5065cd
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x5065f4
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x506583
jmp 0x5065e8
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.00441100
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00452c00
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.00452c00
nop
call fcn.004505a0
jmp fcn.005064e0
Function at 0x506620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x506716
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xcf171061e913d1db
mov qword [rsp + 0x19], rdx
movabs rdx, 0xbadb6c66c87203cf
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf201756c61d4f974
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1003020a000d1110
mov qword [rsp + 0x30], rdx
movabs rdx, 0x150001020e060705
mov qword [rsp + 0x38], rdx
movabs rdx, 0x616050d16080202
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x5066b3
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x5066e2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x506709
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x506696
nop
jmp 0x5066fd
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441100
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x17
call fcn.00452c00
mov eax, edi
mov ecx, 0x17
call fcn.00452c00
nop
call fcn.004505a0
nop dword [rax + rax]
jmp fcn.00506620

Function at 0x506fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x507096
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x373635acb10d0930
mov qword [rsp + 0x19], rdx
movabs rdx, 0x38373635acb10d09
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x58b3739a1fa2eef0
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd040d09020a0e01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x104020e0a0c0d04
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0f0104010e030b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x507033
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x507062
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x507089
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x507016
nop
jmp 0x50707d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441100
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00452c00
mov eax, edi
mov ecx, 0x11
call fcn.00452c00
nop
call fcn.004505a0
nop dword [rax + rax]
jmp fcn.00506fa0
Function at 0x5073a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50749c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x3754354e646b3930
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x343754354e646b39
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x367465477776862b
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc0f10090b0d0604
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2040a020c0f1009
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1010b0308060410
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x507430
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1a]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x507468
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x50748f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1a]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x507416
jmp 0x507483
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00441100
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00452c00
mov eax, edi
mov ecx, 0x11
call fcn.00452c00
nop
nop dword [rax]
call fcn.004505a0
jmp fcn.005073a0

Function at 0x5074c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5075bc
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xaf7d7e71739c7418
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x86af7d7e71739c74
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x58a980446f424139
mov qword [rsp + 0x26], rdx
movabs rdx, 0x104080f07000506
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x70c0104080f0700
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30e08000e0c0802
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x507550
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x507588
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x5075af
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x507536
jmp 0x5075a3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00441100
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00452c00
mov eax, edi
mov ecx, 0x11
call fcn.00452c00
nop
nop dword [rax]
call fcn.004505a0
jmp fcn.005074c0