joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c3d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3e7b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x936f7233dba22e4c
mov qword [rsp + 0x39], rdx
movabs rdx, 0x6446940e53dfdf93
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4e0985494727261
mov qword [rsp + 0x48], rdx
movabs rdx, 0x141616040c0b1408
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3041509120d1503
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc0c140711030304
mov qword [rsp + 0x29], rdx
movabs rdx, 0xc070009020b150c
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4c3e19
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4c3e4b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c3e6e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4f]
cmp rsi, 0x17
jb 0x4c3dff
jmp 0x4c3e62
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.004451c0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457340
mov eax, edi
mov ecx, 0x17
call fcn.00457340
nop
nop dword [rax + rax]
call fcn.00455060
jmp fcn.004c3d80

Function at 0x4c3ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3fba
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xee6c0372ee5e3343
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x53522551361a2145
mov qword [rsp + 0x44], rdx
movabs rdx, 0x6424351653522551
mov qword [rsp + 0x48], rdx
movabs rdx, 0x473a183eebfd3338
mov qword [rsp + 0x50], rdx
movabs rdx, 0x20a0105170d070d
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe0d0207020a0105
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x191901100c030716
mov qword [rsp + 0x24], rdx
movabs rdx, 0x501150b021a0c02
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x91118121419101b
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4c3f57
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x24
jge 0x4c3f89
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4c3fad
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
cmp rsi, 0x1c
jb 0x4c3f3d
jmp 0x4c3fa1
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.004451c0
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457340
mov eax, edi
mov ecx, 0x1c
call fcn.00457340
nop
call fcn.00455060
nop
jmp fcn.004c3ea0
Function at 0x4c6c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6d4c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9b5b582a506dd1e9
mov qword [rsp + 0x35], rdx
movabs rdx, 0xce6e359b5b582a50
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc51cde54b99ed061
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10030e07050d0603
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x41207000d08110c
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc120d0600000a01
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4c6cea
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c6d1c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c6d3f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x78]
cmp rsi, 0x13
jb 0x4c6cd0
jmp 0x4c6d33
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.004451c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457340
mov eax, edi
mov ecx, 0x13
call fcn.00457340
nop
call fcn.00455060
jmp fcn.004c6c60

Function at 0x4c7fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c80db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x203eb8983a8d404e
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x64dc4f83d3203eb8
mov qword [rsp + 0x40], rdx
movabs rdx, 0xbfc225541929c271
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4030a12030a0602
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x100d030f01090a08
mov qword [rsp + 0x25], rdx
movabs rdx, 0x313090b1306100d
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xe020e0105140d0f
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4c8079
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7c]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4c80ab
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c80ce
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7c]
cmp rsi, 0x15
jb 0x4c805f
jmp 0x4c80c2
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.004451c0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457340
mov eax, edi
mov ecx, 0x15
call fcn.00457340
nop
nop dword [rax + rax]
call fcn.00455060
jmp fcn.004c7fe0
Function at 0x4d2fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d309d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe04bfb30bb27220
mov qword [rsp + 0x32], rdx
movabs rdx, 0x78be74cd79270e04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x608030806080205
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7010c0406080308
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa01010007080707
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x4d3040
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x42]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x42]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4d306d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d3090
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d3022
jmp 0x4d3084
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
call fcn.004451c0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457340
mov eax, edi
mov ecx, 0xe
call fcn.00457340
nop
nop dword [rax]
call fcn.00455060
jmp fcn.004d2fc0

Function at 0x4d33e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d349d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x32301f3431341432
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x3b
movabs rdx, 0x601010601050101
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x806
xor eax, eax
nop
jmp 0x4d3440
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4d346d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d3490
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4d3422
jmp 0x4d3484
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.004451c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00457340
mov eax, edi
mov ecx, 9
call fcn.00457340
nop
nop dword [rax]
call fcn.00455060
jmp fcn.004d33e0
Function at 0x4d5440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d552c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe3032352e0f1837
mov qword [rsp + 0x35], rdx
movabs rdx, 0x372e3f0e3032352e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3532203c32f42932
mov qword [rsp + 0x40], rdx
movabs rdx, 0x508080a030c0102
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x11007100f0f0508
mov qword [rsp + 0x25], rdx
movabs rdx, 0x3100203100d090b
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4d54ca
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xc]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x16
jge 0x4d54fc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d551f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xc]
cmp rsi, 0x13
jb 0x4d54b0
jmp 0x4d5513
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.004451c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457340
mov eax, edi
mov ecx, 0x13
call fcn.00457340
nop
call fcn.00455060
jmp fcn.004d5440

Function at 0x4d5660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d574c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5541664c325d3844
mov qword [rsp + 0x33], rdx
movabs rdx, 0x3044502934554166
mov qword [rsp + 0x38], rdx
movabs rdx, 0x35395b3328373539
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50b0a0206121205
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x91313040a000704
mov qword [rsp + 0x23], rdx
movabs rdx, 0x100b0606050b0513
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4d56ea
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x26]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x4d571c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4d573f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x26]
cmp rsi, 0x15
jb 0x4d56d0
jmp 0x4d5733
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.004451c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457340
mov eax, edi
mov ecx, 0x15
call fcn.00457340
nop
call fcn.00455060
jmp fcn.004d5660
Function at 0x4d6400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d64fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x33636f9300c1509
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd063536e9160539
mov qword [rsp + 0x40], rdx
movabs rdx, 0x353236ff2421b037
mov qword [rsp + 0x48], rdx
movabs rdx, 0x14090e0b14090a11
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf12070f130e020a
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf1302000f12070f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2140d1301000400
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d64a0
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4d64cd
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d64f0
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x4d647f
jmp 0x4d64e4
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.004451c0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457340
mov eax, edi
mov ecx, 0x18
call fcn.00457340
nop
nop dword [rax]
call fcn.00455060
jmp fcn.004d6400

Function at 0x4d6ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6fc8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1a2a393110241814
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x331d1836080505f4
mov qword [rsp + 0x46], rdx
movabs rdx, 0x38f1331d18360805
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf271d1419361230
mov qword [rsp + 0x50], rdx
movabs rdx, 0x100a15071619170b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3081502180a08
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0e090d170f1013
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf060817010a010a
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4d6f6b
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
cmp rax, 0x20
jge 0x4d6f98
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4d6fbb
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4d6f4e
jmp 0x4d6faf
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.004451c0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457340
mov eax, edi
mov ecx, 0x1a
call fcn.00457340
nop
call fcn.00455060
jmp fcn.004d6ec0
Function at 0x4d7de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7efa
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x8b2696a93814aca7
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1175a06145afa02b
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x38a8a69a1175a061
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb6a9a2c037302681
mov qword [rsp + 0x58], rdx
movabs rdx, 0x5081b1801150b1b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa050e1a09140508
mov qword [rsp + 0x24], rdx
movabs rdx, 0x90f0208190c0602
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x104020f1a090d00
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1007060910191112
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x4d7e97
movzx r9d, byte [rsp + rsi + 0x44]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rdi + 0x44], dl
mov byte [rsp + rsi + 0x44], r8b
add rax, 2
cmp rax, 0x26
jge 0x4d7ec9
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4d7eed
movzx r8d, byte [rsp + rdi + 0x44]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
cmp rsi, 0x1c
jb 0x4d7e7d
jmp 0x4d7ee1
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x1c
call fcn.004451c0
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457340
mov eax, edi
mov ecx, 0x1c
call fcn.00457340
nop
call fcn.00455060
nop
jmp fcn.004d7de0

Function at 0x4da8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4daa18
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x3161656163597a56
mov qword [rsp + 0x45], rdx
movabs rdx, 0x308e393161656163
mov qword [rsp + 0x48], rdx
movabs rdx, 0x33a5d89b6e77a830
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3433335f30877a62
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf97536be40443765
mov qword [rsp + 0x60], rdx
movabs rdx, 0x101e1d05220d0f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd1f0c1721101b05
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1b030d1f0c172110
mov qword [rsp + 0x25], rdx
movabs rdx, 0x2110e0d090613
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x415170902042115
mov qword [rsp + 0x35], rdx
movabs rdx, 0xd040114030e0f1f
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x4da9b8
movzx r9d, byte [rsp + rsi + 0x45]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x45], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x45], dl
add rax, 2
cmp rax, 0x2a
jge 0x4da9e8
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x4daa0b
movzx r8d, byte [rsp + rdi + 0x45]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x23
jb 0x4da99b
jmp 0x4da9ff
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x23
call fcn.004451c0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00457340
mov eax, edi
mov ecx, 0x23
call fcn.00457340
nop
call fcn.00455060
nop dword [rax]
jmp fcn.004da8e0
Function at 0x4e8220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e82d8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x65986594958d9e42
mov qword [rsp + 0x28], rdx
movabs rdx, 0x603040202040103
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x103
xor eax, eax
jmp 0x4e8275
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x64]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x4e82a8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4e82cb
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x64]
nop
cmp rsi, 8
jb 0x4e825b
jmp 0x4e82bf
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.004451c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00457340
mov eax, edi
mov ecx, 8
call fcn.00457340
nop
call fcn.00455060
nop dword [rax]
jmp fcn.004e8220

Function at 0x4ea7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea898
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6ecea614c66f27bc
mov qword [rsp + 0x28], rdx
movabs rdx, 0x400040504060103
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x401
xor eax, eax
jmp 0x4ea835
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x4ea868
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4ea88b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
nop
cmp rsi, 8
jb 0x4ea81b
jmp 0x4ea87f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.004451c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00457340
mov eax, edi
mov ecx, 8
call fcn.00457340
nop
call fcn.00455060
nop dword [rax]
jmp fcn.004ea7e0

Function at 0x4edfc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee07e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x17076166d77165da
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xdd692017
movabs rdx, 0xa00030700030200
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x60802
xor eax, eax
jmp 0x4ee021
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4ee04e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ee071
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4ee004
jmp 0x4ee065
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.004451c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457340
mov eax, edi
mov ecx, 0xb
call fcn.00457340
nop
nop
call fcn.00455060
jmp fcn.004edfc0
Function at 0x4ee400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee4dd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa7a174b8de725e6e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9b76690f03abfc5f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10b0a0f03090300
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf0a040b0607010b
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0706070c040603
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4ee480
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x72]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x4ee4ad
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4ee4d0
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x4ee462
jmp 0x4ee4c4
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.004451c0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457340
mov eax, edi
mov ecx, 0x10
call fcn.00457340
nop
nop dword [rax]
call fcn.00455060
jmp fcn.004ee400

Function at 0x4f1620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f16e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1e635f6ec10e1450
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xe61
movabs rdx, 0x907090305030701
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x1030102
xor eax, eax
jmp 0x4f1680
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x60]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4f16b2
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4f16d7
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x60]
cmp rsi, 0xa
jb 0x4f1663
jmp 0x4f16cb
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.004451c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457340
mov eax, edi
mov ecx, 0xa
nop
call fcn.00457340
nop
call fcn.00455060
jmp fcn.004f1620
Function at 0x4f1700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f17e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4072090002611300
mov qword [rsp + 0x31], rdx
movabs rdx, 0xb1766163aa615040
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa040b0e0b0e0705
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1040a040b0e0b0e
mov qword [rsp + 0x21], rdx
movabs rdx, 0x30b00050b05
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4f1780
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4f17b2
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4f17d7
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x54]
cmp rsi, 0xf
jb 0x4f1762
jmp 0x4f17cb
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.004451c0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457340
mov eax, edi
mov ecx, 0xf
nop
call fcn.00457340
nop
call fcn.00455060
jmp fcn.004f1700

Function at 0x4f1800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f18c6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x477499366132043c
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xef
movabs rdx, 0x5000804070805
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x5020105
xor eax, eax
nop
jmp 0x4f1860
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x26]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4f1892
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4f18b7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x26]
cmp rsi, 9
jb 0x4f1842
jmp 0x4f18ab
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.004451c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00457340
mov eax, edi
mov ecx, 9
nop
call fcn.00457340
nop
call fcn.00455060
jmp fcn.004f1800

Function at 0x4f2980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2a32
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x614c513f62586132
mov qword [rsp + 0x20], rdx
movabs rdx, 0x604000400000205
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4f29d1
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 + 0x1d]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x4f29fe
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4f2a25
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x4f29b4
jmp 0x4f2a15
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.004451c0
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00457340
mov eax, edi
mov ecx, 8
call fcn.00457340
nop
call fcn.00455060
jmp fcn.004f2980