joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4dce00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dcedc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xa3ae48a98d649286
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x93cf61a3ae48a98d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x104060a03050904
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0900010a070104
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4dce72
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffd0
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4dcea8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4dcecf
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffd0
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x4dce58
jmp 0x4dcec3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.004dce00
Function at 0x4de440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de553
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x574254c16e6e6fa5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x384bb365e5b55b0e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x72f39095972862ef
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6080f0809081204
mov qword [rsp + 0x36], rdx
movabs rdx, 0x160006080f080908
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1007090b00040e08
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0b0a081305070f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60e0d0d00151409
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4de4ee
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffa2
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4de51f
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4de546
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffa2
add r8d, edx
cmp rsi, 0x18
jb 0x4de4d4
jmp 0x4de53a
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461e80
mov eax, edi
mov ecx, 0x18
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004de440
Function at 0x4df9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dfac8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xb6b769b06ec3bcc8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6d09b6b769b06ec3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x64b676cfbeb708d2
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20a060808100e0a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1080d090a0c0900
mov qword [rsp + 0x36], rdx
movabs rdx, 0x40e01080d090a0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb080e09000a070e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4dfa60
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x42
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4dfa91
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4dfabb
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x42
add r8d, edx
cmp rsi, 0x12
jb 0x4dfa45
jmp 0x4dfaaf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461e80
mov eax, edi
mov ecx, 0x12
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004df9c0

Function at 0x4dfea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dff88
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x29373e6c61056e3a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7414366d2ed958b6
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20a0e050d060209
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5020a08020a0e05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x708070a0009050b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4dff21
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x21
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x14
jge 0x4dff52
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4dff7b
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x21
add r8d, edx
cmp rsi, 0x10
jb 0x4dff07
jmp 0x4dff6f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461e80
mov eax, edi
mov ecx, 0x10
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004dfea0
Function at 0x4e10c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e11c8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x1b732d53202743c9
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6e4328361b732d53
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2d140e5576533620
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0a110500090212
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe12091308050709
mov qword [rsp + 0x36], rdx
movabs rdx, 0x8020e1209130805
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1105100004130901
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e1162
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1a
jge 0x4e118f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4e11bb
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x4e1145
jmp 0x4e11af
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461e80
mov eax, edi
mov ecx, 0x14
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004e10c0
Function at 0x4e3420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e3528
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x657d64723b6e6566
mov qword [rsp + 0x18], rdx
movabs rdx, 0x90731e65746f657b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x56676e6620204358
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe0e030e13040f0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd080c0a060c0607
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10c0e0b110f0c0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x141000050f080a17
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e34c0
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0xffffffe7
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x4e34f1
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4e351b
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0xffffffe7
add r8d, edx
cmp rsi, 0x18
jb 0x4e34a5
jmp 0x4e350f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461e80
mov eax, edi
mov ecx, 0x18
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004e3420
Function at 0x4e6620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6746
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x4d41634869644654
mov qword [rsp + 0x18], rdx
movabs rdx, 0x455a6e394b61d120
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4a43455a6e394b61
mov qword [rsp + 0x22], rdx
movabs rdx, 0x35274f516cfa4776
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x17040f0f06091918
mov qword [rsp + 0x32], rdx
movabs rdx, 0x60b141301111704
mov qword [rsp + 0x38], rdx
movabs rdx, 0x19031310130c0716
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3091018000a190b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x190310190e070205
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e66e0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x33]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x33]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x26
jge 0x4e670d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4e6734
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4e66c3
jmp 0x4e6728
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461e80
mov eax, edi
mov ecx, 0x1a
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004e6620

Function at 0x4e6aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6b96
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x626b748091907c26
mov qword [rsp + 0x32], rdx
movabs rdx, 0x746a70647b6c626b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x868c797582752065
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10c010600070004
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x15030b0a1109010c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x604140210121307
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4e6b33
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x4e6b62
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e6b89
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x4e6b16
nop
jmp 0x4e6b7d
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461e80
mov eax, edi
mov ecx, 0x16
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.004e6aa0
Function at 0x4e7840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7948
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xc75ff1bfe29865c7
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8f98a2c75ff1bfe2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcfb7a97274a220f7
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0311040305040b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6060b0008071002
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb1206060b000807
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0004110b090805
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e78e0
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffb3
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4e7911
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e793b
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffb3
add r8d, edx
cmp rsi, 0x13
jb 0x4e78c5
jmp 0x4e792f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461e80
mov eax, edi
mov ecx, 0x13
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004e7840

Function at 0x4e7960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7a68
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xb7ca090d63cf8906
mov qword [rsp + 0x18], rdx
movabs rdx, 0x706dd113b86fbbc2
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6659e686f6db7d2
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0709130c141715
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0c010809150500
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1108151410110404
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5000604020b110d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e7a02
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x20
jge 0x4e7a2f
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4e7a5b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x18
jb 0x4e79e5
jmp 0x4e7a4f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
nop dword [rax + rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461e80
mov eax, edi
mov ecx, 0x18
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004e7960
Function at 0x4eb860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb968
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x296ed4e638ddd130
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xca69833f79296ed4
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc83174827979d6d0
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x305040009090d14
mov qword [rsp + 0x34], rdx
movabs rdx, 0x205130e010c0e0a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x4110e0f0205130e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5091311110e1307
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4eb900
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffff84
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4eb931
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4eb95b
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffff84
add r8d, edx
cmp rsi, 0x15
jb 0x4eb8e5
jmp 0x4eb94f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461e80
mov eax, edi
mov ecx, 0x15
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004eb860

Function at 0x4eb980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ebad2
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x730405b66e6e580e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe77408ff0264b6c0
mov qword [rsp + 0x23], rdx
movabs rdx, 0x6727a2172e77408
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf37fae136f65122d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xeef323696f2bb7b8
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf414b46417994073
mov qword [rsp + 0x40], rdx
movabs rdx, 0x72a001c1f152314
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b0c002c1d110c26
mov qword [rsp + 0x50], rdx
movabs rdx, 0x27221b041e0d0811
mov qword [rsp + 0x58], rdx
movabs rdx, 0x707012216191724
mov qword [rsp + 0x60], rdx
movabs rdx, 0x282b0609050d1224
mov qword [rsp + 0x68], rdx
movabs rdx, 0xc222a0f0b1a242c
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4eba6a
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x37
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x30
jge 0x4eba9b
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4ebac5
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x37
add r8d, edx
cmp rsi, 0x2d
jb 0x4eba50
jmp 0x4ebab6
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x2d
call fcn.0044ba20
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x2d
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0x2d
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004eb980
Function at 0x4ebae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ebbf2
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x459940eae9f19a7a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x96b76f3620517079
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa696b76f36205170
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd7bf7472af707093
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x514031018110607
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2110104140e0a0f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc0c0002110104
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0e0e0017011110
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ebb91
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x4ebbbe
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4ebbe5
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4ebb74
jmp 0x4ebbd9
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004ebae0

Function at 0x4ec340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec436
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x464e9d398a618d9b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5f69667068464e9d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6540648d87538f84
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90c0c1305100f08
mov qword [rsp + 0x30], rdx
movabs rdx, 0x505030e0d0103
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe041305100d0111
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ec3d3
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x4ec402
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ec429
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4ec3b6
nop
jmp 0x4ec41d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461e80
mov eax, edi
mov ecx, 0x15
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.004ec340
Function at 0x4ecb20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ecc46
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0xc597d76f426fd0b6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xda2b5f76d82062a4
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20cc6f6eda2b5f76
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9e13dc020addcdbc
mov qword [rsp + 0x32], rdx
movabs rdx, 0x17061417080d0014
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1b18120a1b091706
mov qword [rsp + 0x40], rdx
movabs rdx, 0x512070e171a0b15
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160307191a011b17
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1814010f06161609
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ecbe0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x26
jge 0x4ecc0d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4ecc34
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4ecbc3
jmp 0x4ecc28
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.0044ba20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461e80
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004ecb20

Function at 0x4ecc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ecd3c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4770521d53787773
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x736c557375204770
mov qword [rsp + 0x20], rdx
movabs rdx, 0x606040302000101
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc040c05070c040b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4eccd2
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xfffffff8
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ecd08
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ecd2f
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xfffffff8
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xe
jb 0x4eccb8
jmp 0x4ecd23
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461e80
mov eax, edi
mov ecx, 0xe
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.004ecc60
Function at 0x4ecd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ece92
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xc6eb7233b4e72072
mov qword [rsp + 0x18], rdx
movabs rdx, 0x4102f33816adf12f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc9299515266ccc37
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3413183101e4151c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x17020e0a15010312
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb020f1e0b031d12
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100d1a1914110e06
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b09101010131e13
mov qword [rsp + 0x50], rdx
movabs rdx, 0x40c1619181c0719
mov qword [rsp + 0x58], rdx
movabs rdx, 0x90e08011b17161f
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4ece2f
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x6b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x6b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x30
jge 0x4ece5c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4ece85
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x20
jb 0x4ece12
jmp 0x4ece77
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.0044ba20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0x20
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004ecd60