joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d1b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1c0c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7425042365f661ae
mov qword [rsp + 0x36], rdx
movabs rdx, 0x20b9751a22c21420
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1ed420b9751a22c2
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb5726f77d4651ed2
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe12041002001512
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa150000050a020a
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0b050615090a15
mov qword [rsp + 0x26], rdx
movabs rdx, 0x902131106121902
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4d1ba8
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4d1bdc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4d1bff
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0x1a
jb 0x4d1b8e
jmp 0x4d1bf3
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.00449780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045cd80
mov eax, edi
mov ecx, 0x1a
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004d1b00

Function at 0x4d1c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1d2c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xc8be1b61f7650d6f
mov qword [rsp + 0x41], rdx
movabs rdx, 0x7396496f35442cc8
mov qword [rsp + 0x48], rdx
movabs rdx, 0x644474ab6f8aa19d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x308010c15080305
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7030308010c1508
mov qword [rsp + 0x21], rdx
movabs rdx, 0x150913010a13090a
mov qword [rsp + 0x29], rdx
movabs rdx, 0xc0f0f1010060607
mov qword [rsp + 0x31], rdx
movabs rdx, 0xd13090c05151311
mov qword [rsp + 0x39], rdx
xor eax, eax
jmp 0x4d1cc8
movzx r9d, byte [rsp + rsi + 0x41]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x62]
mov byte [rsp + rdi + 0x41], dl
mov byte [rsp + rsi + 0x41], r8b
add rax, 2
cmp rax, 0x22
jge 0x4d1cfc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x17
jae 0x4d1d1f
movzx r8d, byte [rsp + rdi + 0x41]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x62]
cmp rsi, 0x17
jb 0x4d1cae
jmp 0x4d1d13
xor eax, eax
lea rbx, [rsp + 0x41]
mov ecx, 0x17
call fcn.00449780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045cd80
mov eax, edi
mov ecx, 0x17
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004d1c20
Function at 0x4d7ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7dfd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xd570ae6fd56f7205
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc0bed4706973bfed
mov qword [rsp + 0x44], rdx
movabs rdx, 0x209a15b9c0bed470
mov qword [rsp + 0x48], rdx
movabs rdx, 0x306568b2b374457f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1718170c17110605
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9140f1718170c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe12150e101b0e0a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x515100309091815
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70d08150e070515
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4d7da0
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4d7dcd
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4d7df0
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4d7d7d
jmp 0x4d7de4
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.00449780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0045cd80
mov eax, edi
mov ecx, 0x1c
call fcn.0045cd80
nop
nop dword [rax]
call fcn.0045aaa0
jmp fcn.004d7ce0

Function at 0x4d7e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7eec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa86e536de6dc5e74
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xae7212a196a2a86e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90b0503070d0208
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80108090a05090b
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4d7e8f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x4d7ebc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d7edf
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d7e72
jmp 0x4d7ed3
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045cd80
mov eax, edi
mov ecx, 0xe
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004d7e20
Function at 0x4d9c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9d07
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc63369c1617430ee
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x6c712489
movabs rdx, 0x40107080900090a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8090108010708
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4d9ca8
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x4d9cd7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4d9cfa
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4d9c8b
jmp 0x4d9cee
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045cd80
mov eax, edi
mov ecx, 0xc
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004d9c40

Function at 0x4da0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da16c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2e395663757a6a23
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x666c5a2e
movabs rdx, 0xa0106060002010a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x508020801040a01
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4da105
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xb]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4da13c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4da15f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xb]
cmp rsi, 0xb
jb 0x4da0eb
jmp 0x4da153
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045cd80
mov eax, edi
mov ecx, 0xb
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004da0a0
Function at 0x4dc100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc1e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e626f5570667343
mov qword [rsp + 0x32], rdx
movabs rdx, 0x7364646f61526e62
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd020701070a0405
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0a0a010d020701
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6060a0d040d0404
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x4dc180
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xf]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4dc1b2
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4dc1d7
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xf]
cmp rsi, 0xe
jb 0x4dc162
jmp 0x4dc1cb
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
nop
call fcn.00449780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045cd80
mov eax, edi
mov ecx, 0xe
nop
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004dc100

Function at 0x4df600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df6cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe680bb72746cfce4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf4c6f5745365e680
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb060d0702020005
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20b0c010c040b06
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4df66f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x73]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x4df69c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4df6bf
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4df652
jmp 0x4df6b3
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045cd80
mov eax, edi
mov ecx, 0xe
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004df600
Function at 0x4dfb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dfc6c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6503f1647ee083c7
mov qword [rsp + 0x36], rdx
movabs rdx, 0x636966eb7431fb05
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa361636966eb7431
mov qword [rsp + 0x40], rdx
movabs rdx, 0xdaebf58d8e6f43c2
mov qword [rsp + 0x48], rdx
movabs rdx, 0x161511150901170a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x412060318051908
mov qword [rsp + 0x20], rdx
movabs rdx, 0x11151915060c0412
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20917120817
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4dfc08
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x60]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4dfc3c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4dfc5f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x60]
cmp rsi, 0x1a
jb 0x4dfbee
jmp 0x4dfc53
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.00449780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045cd80
mov eax, edi
mov ecx, 0x1a
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004dfb60

Function at 0x4e0580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e0652
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xdcdce4c774d8de43
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xe5cc6fea65dcdce4
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0801010601070c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x50502010404090b
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4e05ec
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4e061e
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e0645
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0xd
jb 0x4e05d2
jmp 0x4e0635
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.0045cd80
mov eax, edi
mov ecx, 0xd
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004e0580
Function at 0x4e15a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1686
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4ade4eef41f1e5e8
mov qword [rsp + 0x31], rdx
movabs rdx, 0xe843ebea6667654a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100090d0501040a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe0202070100090d
mov qword [rsp + 0x21], rdx
movabs rdx, 0xc0d0b0904060c0e
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4e1620
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x76]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4e1652
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4e1677
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x76]
cmp rsi, 0xf
jb 0x4e1602
jmp 0x4e166b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00449780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045cd80
mov eax, edi
mov ecx, 0xf
nop
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004e15a0

Function at 0x4e2160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e2226
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6eb1b0ed9e6f6c0b
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xb5b1646e
movabs rdx, 0x5060400000a0603
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x6030609
xor eax, eax
jmp 0x4e21c0
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4e]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4e21f2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4e2217
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4e]
cmp rsi, 0xb
jb 0x4e21a4
jmp 0x4e220b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00449780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045cd80
mov eax, edi
mov ecx, 0xb
nop
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004e2160
Function at 0x4e24e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e25ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3ab65d2b8651d43
mov qword [rsp + 0x29], rdx
movabs rdx, 0x226b0869f4643403
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6010301070e0a0c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x40e080c06010401
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x4e254f
movzx r9d, byte [rsp + rsi + 0x29]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x29], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x29], dl
add rax, 2
cmp rax, 0x10
jge 0x4e257c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4e259f
movzx r8d, byte [rsp + rdi + 0x29]
sub r8d, edx
cmp rsi, 0xf
jb 0x4e2532
jmp 0x4e2593
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045cd80
mov eax, edi
mov ecx, 0xf
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004e24e0

Function at 0x4e5440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e550c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7372695ded6e695a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5765990c6d217372
mov qword [rsp + 0x30], rdx
movabs rdx, 0x903000400040008
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa04040304080a0b
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4e54af
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x69]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x69]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jge 0x4e54dc
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4e54ff
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4e5492
jmp 0x4e54f3
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045cd80
mov eax, edi
mov ecx, 0xe
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004e5440
Function at 0x4e79e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7adb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xba27b080a887f6a0
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf11a65986e6fba27
mov qword [rsp + 0x40], rdx
movabs rdx, 0x94aaaf6e69d5b8e6
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0c130a0d10070f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20e030406030a15
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20c14100201020e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd0d0c1404000405
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4e7a79
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4e7aab
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e7ace
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4e]
cmp rsi, 0x16
jb 0x4e7a5f
jmp 0x4e7ac2
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00449780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045cd80
mov eax, edi
mov ecx, 0x16
call fcn.0045cd80
nop
nop dword [rax + rax]
call fcn.0045aaa0
jmp fcn.004e79e0

Function at 0x4e87e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e88ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x17383569db74a225
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe6b417383569db74
mov qword [rsp + 0x30], rdx
movabs rdx, 0xaa09657428fc69fa
mov qword [rsp + 0x38], rdx
movabs rdx, 0x301010107110900
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa051000070c0301
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc010c050d060805
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4e886d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x16
jge 0x4e889a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4e88bd
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4e8850
jmp 0x4e88b1
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00449780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045cd80
mov eax, edi
mov ecx, 0x12
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004e87e0
Function at 0x4ea960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eaa3d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x77606b6f7d745347
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6772756974597760
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4050a0606010a0a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd0b0c0504050a06
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70809060a080803
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x4ea9e0
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0xe]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4eaa0d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4eaa30
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0xe
jb 0x4ea9c2
jmp 0x4eaa24
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
call fcn.00449780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045cd80
mov eax, edi
mov ecx, 0xe
call fcn.0045cd80
nop
nop dword [rax]
call fcn.0045aaa0
jmp fcn.004ea960

Function at 0x4ec000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec0d8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x49ba64ca2524b8c4
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x156c6422
movabs rdx, 0x107000301020b00
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x208010700030102
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x608040201000108
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4ec074
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6a]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x12
jge 0x4ec0a8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4ec0cb
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6a]
nop
cmp rsi, 0xc
jb 0x4ec05a
jmp 0x4ec0bf
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00449780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045cd80
mov eax, edi
mov ecx, 0xc
call fcn.0045cd80
nop
call fcn.0045aaa0
nop dword [rax]
jmp fcn.004ec000
Function at 0x4ec740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec82a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf1fe6d69432926e5
mov qword [rsp + 0x32], rdx
movabs rdx, 0x664549546e6ff1fe
mov qword [rsp + 0x38], rdx
movabs rdx, 0x66f69745821346f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x15010207100f060f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf011000010203
mov qword [rsp + 0x22], rdx
movabs rdx, 0x15031000110a0c03
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4ec7cd
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0x3a]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0x3a]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x18
jge 0x4ec7fa
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ec81d
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x4ec7b0
jmp 0x4ec811
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00449780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045cd80
mov eax, edi
mov ecx, 0x16
call fcn.0045cd80
nop
call fcn.0045aaa0
jmp fcn.004ec740

Function at 0x4ecbe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ecd18
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x69ee61eb0cae86ff
mov qword [rsp + 0x47], rdx
movabs rdx, 0x5369ee61eb0cae86
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7297d90417726075
mov qword [rsp + 0x50], rdx
movabs rdx, 0x69c5197460f4d612
mov qword [rsp + 0x58], rdx
movabs rdx, 0xeba6960f65747510
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc0814141720090a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x140e0f020a1f0104
mov qword [rsp + 0x23], rdx
movabs rdx, 0x617060d140e0f02
mov qword [rsp + 0x27], rdx
movabs rdx, 0x4191d06031e0c00
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x12131d1720091208
mov qword [rsp + 0x37], rdx
movabs rdx, 0x30a160f11020820
mov qword [rsp + 0x3f], rdx
xor eax, eax
jmp 0x4eccb8
movzx r9d, byte [rsp + rsi + 0x47]
sub r9d, edx
lea edx, [r9 - 0x70]
mov byte [rsp + rdi + 0x47], dl
lea edx, [r8 - 0x70]
mov byte [rsp + rsi + 0x47], dl
add rax, 2
cmp rax, 0x2c
jge 0x4ecce8
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4ecd0b
movzx r8d, byte [rsp + rdi + 0x47]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x21
jb 0x4ecc9b
jmp 0x4eccff
xor eax, eax
lea rbx, [rsp + 0x47]
mov ecx, 0x21
call fcn.00449780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.0045cd80
mov eax, edi
mov ecx, 0x21
call fcn.0045cd80
nop
call fcn.0045aaa0
nop dword [rax]
jmp fcn.004ecbe0