joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d59c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5ab6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x1cf473654264fc2f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbd256537e2611cf4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1641eefff669fd58
mov qword [rsp + 0x28], rdx
movabs rdx, 0x314000613150107
mov qword [rsp + 0x30], rdx
movabs rdx, 0x71100150f0d090f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90a130e0c0c0f12
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d5a53
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x18
jge 0x4d5a82
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d5aa9
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4d5a36
nop
jmp 0x4d5a9d
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457d20
mov eax, edi
mov ecx, 0x16
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.004d59c0

Function at 0x4d5c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5d08
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd3172d181925bc61
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1fd5181f192065d3
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30d060105070702
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x203030d06010507
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40c0a060b0e0a05
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d5ca1
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x12
jge 0x4d5cd3
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d5cfb
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
cmp rsi, 0xf
jb 0x4d5c87
jmp 0x4d5cef
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457d20
mov eax, edi
mov ecx, 0xf
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004d5c20
Function at 0x4d6800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6916
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x9dd5d3619a657052
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4961a872916ac0a8
mov qword [rsp + 0x25], rdx
movabs rdx, 0x8ca169c2794961a8
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8a73da8d67e6ab77
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6191a13110f1a17
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x9190f0d080508
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1c0b000a16160009
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf1503071400170f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d68ae
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4d68e2
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4d6909
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 0x1d
jb 0x4d6894
nop
jmp 0x4d68fd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.00444d40
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00457d20
mov eax, edi
mov ecx, 0x1d
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.004d6800

Function at 0x4d6a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6b36
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6073695f6d816162
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1f7a6a6073695f6d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6a2272644e807473
mov qword [rsp + 0x28], rdx
movabs rdx, 0x120d11060e100f0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4070c030d080f03
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6090a0802100306
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d6ad3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4d6b02
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d6b29
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4d6ab6
nop
jmp 0x4d6b1d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457d20
mov eax, edi
mov ecx, 0x13
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.004d6a40
Function at 0x4d6ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6f92
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x84738a85c98e8e95
mov qword [rsp + 0x19], rdx
movabs rdx, 0x87854084738a85c9
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x204000703080105
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x90a0908
xor eax, eax
jmp 0x4d6f2b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4d6f5d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d6f85
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
cmp rsi, 0xb
jb 0x4d6f11
jmp 0x4d6f78
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00457d20
mov eax, edi
mov ecx, 0xb
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004d6ec0
Function at 0x4d7400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7508
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x3b6418323d03c61e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x757143513b641832
mov qword [rsp + 0x22], rdx
movabs rdx, 0x27bc4b60ca744834
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x209000109121307
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf11050f020304
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1008090c000d000f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x709010c09020111
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d74a2
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x4d74cf
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d74fb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4d7485
jmp 0x4d74ef
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457d20
mov eax, edi
mov ecx, 0x14
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004d7400

Function at 0x4da640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da73c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6c720d746e655880
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6b856c720d746e65
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6465778774657243
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf0e000505110811
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9000509060d0f0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11010a110e060700
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4da6d0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x18]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x4da708
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4da72f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x18]
nop word [rax + rax]
cmp rsi, 0x12
jb 0x4da6b6
jmp 0x4da723
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457d20
mov eax, edi
mov ecx, 0x12
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.004da640
Function at 0x4da760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4da8e6
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x19207b120d8f541c
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc919207b120d8f54
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x28df301f2969d172
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6c75cec3c3b6ecca
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2d20657479476915
mov qword [rsp + 0x32], rdx
movabs rdx, 0x12bbb3336977fe25
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x7265746328e4f335
mov qword [rsp + 0x42], rdx
movabs rdx, 0x13052c19121b0401
mov qword [rsp + 0x4a], rdx
movabs rdx, 0xf16110e2b0a1305
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2202a0f00262a26
mov qword [rsp + 0x58], rdx
movabs rdx, 0x720140d2715292a
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe28011003152903
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2b08160625210507
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2b2b13221b0d0c0f
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4da876
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x13]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x36
jge 0x4da8a8
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x4da8d5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x13]
cmp rsi, 0x31
jb 0x4da85c
jmp 0x4da8c9
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x31
call fcn.00444d40
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x31
call fcn.00457d20
mov eax, edi
mov ecx, 0x31
nop dword [rax]
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004da760

Function at 0x4daf20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4db008
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x2028ca3461426e3e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x746e2a9ae9fca7f9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x802020502090c00
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50b050008060802
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd05020b0a020004
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4dafa1
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x23]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x4dafd3
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4daffb
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x23]
cmp rsi, 0x10
jb 0x4daf87
jmp 0x4dafef
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457d20
mov eax, edi
mov ecx, 0x10
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004daf20
Function at 0x4dc6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc7d6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x78c920d6651f39d6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb557e3c9d5e46fc6
mov qword [rsp + 0x26], rdx
movabs rdx, 0x209703c246d57268
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x15130d1714140d0f
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa0e15130d171414
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd170a0c04010c14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150216151306
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15120b0704080b02
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4dc76e
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4dc7a2
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4dc7c9
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x18
jb 0x4dc754
nop
jmp 0x4dc7bd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00444d40
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457d20
mov eax, edi
mov ecx, 0x18
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.004dc6c0
Function at 0x4df120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df21c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x2361be2065227dc4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0402361be206522
mov qword [rsp + 0x20], rdx
movabs rdx, 0x27696fc0d1162520
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc100c07080d110c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb020a11010d0a0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0501090c00020b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4df1b0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x73]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x18
jge 0x4df1e8
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4df20f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x73]
nop word [rax + rax]
cmp rsi, 0x12
jb 0x4df196
jmp 0x4df203
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457d20
mov eax, edi
mov ecx, 0x12
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.004df120
Function at 0x4e29e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e2ae8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x738666b39f9075b3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x72efd6d561a05144
mov qword [rsp + 0x24], rdx
movabs rdx, 0x73a99f9475c0d765
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8000d040e02
mov qword [rsp + 0x34], rdx
movabs rdx, 0x11160a040c030200
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x60e090311160a04
mov qword [rsp + 0x40], rdx
movabs rdx, 0x161402150e0e1512
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e2a80
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4e2ab2
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4e2adb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
cmp rsi, 0x18
jb 0x4e2a65
jmp 0x4e2acf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457d20
mov eax, edi
mov ecx, 0x18
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004e29e0

Function at 0x4e4780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e48a8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x30b37b709ca76ed3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6fc2209b7e786972
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe266afc9748f6fc2
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe29c9e59658ed072
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe1b121c0002131a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x617151b0e1b121c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3171c0c1d1b100b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x181b02061b06051d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7170e021c0c180a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4e4840
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x4e4872
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4e489b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 0x1e
jb 0x4e4823
jmp 0x4e488f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00457d20
mov eax, edi
mov ecx, 0x1e
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004e4780
Function at 0x4e5cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5dab
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x4b5b6c527426533c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6333725f5b204b5b
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc01090704010204
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x60901000c010907
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10500000a050d06
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e5d44
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x4e5d77
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x4e5d9e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4e5d27
jmp 0x4e5d92
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457d20
mov eax, edi
mov ecx, 0xe
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004e5cc0

Function at 0x4e76a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e778b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x54cf6375de875b47
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe1d75a55440cec54
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7000e010a0d060b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc070d0d02020700
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80e030600070900
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e7724
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x5f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x5f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x16
jge 0x4e7757
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x4e777e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x4e7707
jmp 0x4e7772
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.00444d40
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457d20
mov eax, edi
mov ecx, 0xf
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004e76a0
Function at 0x4e9680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9768
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2fd11fda23189116
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6c25312b142fd11f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x804090b0401060a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7010804090b0401
mov qword [rsp + 0x28], rdx
movabs rdx, 0x200030a050a0506
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e9701
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x4e9733
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e975b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
cmp rsi, 0xd
jb 0x4e96e7
jmp 0x4e974f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457d20
mov eax, edi
mov ecx, 0xd
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004e9680

Function at 0x4e9bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9c92
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xe2e849e249e06e6c
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x1750
movabs rdx, 0x902040708050007
mov qword [rsp + 0x22], rdx
movabs rdx, 0x206080503080902
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4e9c2a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4e9c5c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4e9c85
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0xa
jb 0x4e9c10
jmp 0x4e9c77
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.00457d20
mov eax, edi
mov ecx, 0xa
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004e9bc0
Function at 0x4e9ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9d72
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x8008b8b26e9cc16b
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x61866484
movabs rdx, 0x4050807060b0502
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa040b010404060a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e9d0e
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x3f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x3f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4e9d3b
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4e9d65
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4e9cf1
jmp 0x4e9d56
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00444d40
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00457d20
mov eax, edi
mov ecx, 0xc
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004e9ca0

Function at 0x4ea660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea732
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2ee8e9b6be656873
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1bc9162ee8e9b6be
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x90308040a090506
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4040605
xor eax, eax
jmp 0x4ea6cb
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x62]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4ea6fd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ea725
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x62]
cmp rsi, 0xb
jb 0x4ea6b1
jmp 0x4ea718
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00457d20
mov eax, edi
mov ecx, 0xb
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004ea660