joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d8a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8b3d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4100d0104060303
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x711070700120d00
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc071107070012
mov qword [rsp + 0x25], rdx
movabs rdx, 0x70d0d01060f0c0b
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x3ed20db1c68bffe
mov qword [rsp + 0x35], rdx
movabs rdx, 0x646e6103ed20db1c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xcb102e2320e1113e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d8ae0
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x4d]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x4d]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4d8b0d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d8b30
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4d8abf
jmp 0x4d8b24
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004d8a40

Function at 0x4d9c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9d4c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xc0102110d0d150d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x801121213010805
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc1c0f0e08011212
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1d1902101b0a1500
mov qword [rsp + 0x31], rdx
movabs rdx, 0xd111e1a05120017
mov qword [rsp + 0x39], rdx
movabs rdx, 0x17161b1403090001
mov qword [rsp + 0x41], rdx
movabs rdx, 0x206ca3727d8daa80
mov qword [rsp + 0x49], rdx
movabs rdx, 0x938bb1bb7a797f7f
mov qword [rsp + 0x51], rdx
movabs rdx, 0x7179588596a37f93
mov qword [rsp + 0x58], rdx
movabs rdx, 0x378182757c8a7283
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4d9ce6
movzx r9d, byte [rsp + rsi + 0x49]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x49], dl
mov byte [rsp + rsi + 0x49], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4d9d1c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1f
jae 0x4d9d3f
movzx r8d, byte [rsp + rdi + 0x49]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
cmp rsi, 0x1f
jb 0x4d9ccc
jmp 0x4d9d33
xor eax, eax
lea rbx, [rsp + 0x49]
mov ecx, 0x1f
call fcn.0044d280
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1f
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004d9c20
Function at 0x4db720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4db83a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1705080c09020a19
mov qword [rsp + 0x18], rdx
movabs rdx, 0x903060c0d061705
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0f140f04131316
mov qword [rsp + 0x26], rdx
movabs rdx, 0x611011818071618
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80c0e090b120110
mov qword [rsp + 0x36], rdx
movabs rdx, 0x747586809fb56f53
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x6c7ec25a5d8791b4
mov qword [rsp + 0x46], rdx
movabs rdx, 0x52676c7ec25a5d87
mov qword [rsp + 0x48], rdx
movabs rdx, 0x94653da420989a61
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4db7d7
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x26
jge 0x4db809
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4db82d
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x1a
jb 0x4db7bd
jmp 0x4db821
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0044d280
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1a
call fcn.00462ca0
nop
call fcn.004609c0
nop
jmp fcn.004db720

Function at 0x4dc5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc6e8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1002050f160e1202
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2180e1416090601
mov qword [rsp + 0x26], rdx
movabs rdx, 0x19171019040f140f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20a18080d111412
mov qword [rsp + 0x36], rdx
movabs rdx, 0x64401c4a662a494e
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x4f3c662064694965
mov qword [rsp + 0x46], rdx
movabs rdx, 0x553c4f3c66206469
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5754552720667202
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4dc68b
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 0x34]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 0x34]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
cmp rax, 0x20
jge 0x4dc6b8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4dc6db
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4dc66e
jmp 0x4dc6cf
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1a
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004dc5e0
Function at 0x4dda60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ddb6c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x201070d03180e10
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x13050005121306
mov qword [rsp + 0x23], rdx
movabs rdx, 0x4110c0900130500
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1505170d01041607
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x87697e6775a28873
mov qword [rsp + 0x37], rdx
movabs rdx, 0x6e73908b20746b61
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x706e73908b20746b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x746f4d6820309881
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ddb08
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4ddb3c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4ddb5f
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
cmp rsi, 0x19
jb 0x4ddaee
jmp 0x4ddb53
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00462ca0
mov eax, edi
mov ecx, 0x19
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004dda60

Function at 0x4de240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de348
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x10913120d110d14
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x130b010913120d11
mov qword [rsp + 0x20], rdx
movabs rdx, 0x130f080f07170d0d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x160f090d02140c09
mov qword [rsp + 0x30], rdx
movabs rdx, 0x91217101313010e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd664616c6718cd42
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2224e5c6b820d94b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b2f69dddcac4924
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4de2eb
movzx r9d, byte [rsp + rsi + 0x40]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x40], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x40], dl
add rax, 2
cmp rax, 0x22
jge 0x4de318
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4de33b
movzx r8d, byte [rsp + rdi + 0x40]
sub r8d, edx
cmp rsi, 0x18
jb 0x4de2ce
jmp 0x4de32f
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00462ca0
mov eax, edi
mov ecx, 0x18
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004de240
Function at 0x4df860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df95b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa0a110f0b0f0602
mov qword [rsp + 0x19], rdx
movabs rdx, 0x60003070909070e
mov qword [rsp + 0x21], rdx
movabs rdx, 0x70a060003070909
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1208120d03111014
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x949661649a9b618d
mov qword [rsp + 0x33], rdx
movabs rdx, 0x64ac639d6a949661
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3d6d5f75829ba652
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4df8f9
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x33]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4df92b
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4df94e
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x33]
cmp rsi, 0x15
jb 0x4df8df
jmp 0x4df942
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462ca0
mov eax, edi
mov ecx, 0x15
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004df860

Function at 0x4dfcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dfdac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1100e000d080707
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x110503100a10030b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0c0b110703050b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x677434203773384b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6422677434203773
mov qword [rsp + 0x38], rdx
movabs rdx, 0x125f694670575023
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4dfd4a
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 9]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x18
jge 0x4dfd7c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4dfd9f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 9]
cmp rsi, 0x12
jb 0x4dfd30
jmp 0x4dfd93
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462ca0
mov eax, edi
mov ecx, 0x12
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004dfcc0
Function at 0x4e00e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e01cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x808120e080d1211
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2080a08080f120c
mov qword [rsp + 0x21], rdx
movabs rdx, 0x303040c131310
mov qword [rsp + 0x29], rdx
movabs rdx, 0x64726fefbab279c9
mov qword [rsp + 0x31], rdx
movabs rdx, 0x187e63742620d064
mov qword [rsp + 0x38], rdx
movabs rdx, 0x656d69c8ca13ef06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e016a
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x69]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
cmp rax, 0x18
jge 0x4e019c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e01bf
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x69]
cmp rsi, 0x17
jb 0x4e0150
jmp 0x4e01b3
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462ca0
mov eax, edi
mov ecx, 0x17
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004e00e0

Function at 0x4e01e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e02ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x800060c070f1001
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x61005090a050800
mov qword [rsp + 0x23], rdx
movabs rdx, 0x60d1001080b0402
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1c2026236e2fbdeb
mov qword [rsp + 0x33], rdx
movabs rdx, 0xd614fd25091c2026
mov qword [rsp + 0x38], rdx
movabs rdx, 0x656d6954b0d8723f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e026d
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 + 0x52]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 + 0x52]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x16
jge 0x4e029a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e02bd
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x4e0250
jmp 0x4e02b1
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462ca0
mov eax, edi
mov ecx, 0x15
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004e01e0
Function at 0x4e02e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e03dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6030c1215050902
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x140a080204110812
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1011120d140a0802
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20b0704080d1404
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb0a7abfea8926153
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb7aec2753c28b0a7
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb2d469c418677261
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e0380
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4e03ad
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e03d0
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4e035f
jmp 0x4e03c4
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00462ca0
mov eax, edi
mov ecx, 0x16
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004e02e0

Function at 0x4e0400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e04ec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x120e0f0102000c05
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf11090f120e0f01
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa0c070e10010802
mov qword [rsp + 0x25], rdx
movabs rdx, 0x6453fd6165a40801
mov qword [rsp + 0x2d], rdx
movabs rdx, 0xb7f1b96453fd6165
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf389adf2a0647461
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e048a
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x14
jge 0x4e04bc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e04df
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0x13
jb 0x4e0470
jmp 0x4e04d3
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462ca0
mov eax, edi
mov ecx, 0x13
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004e0400
Function at 0x4e1280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e137b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x414060415000b0e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10100a0815080715
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1412110110100a08
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9040b010909040c
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa39e6985726f2a91
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x6464863c7e68a39e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5a90697f73807292
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e1319
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4e134b
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e136e
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 0x16
jb 0x4e12ff
jmp 0x4e1362
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00462ca0
mov eax, edi
mov ecx, 0x16
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004e1280

Function at 0x4e1e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1f7b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x100004130e060314
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2030b1212130202
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1506150412130203
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x15121202000f0103
mov qword [rsp + 0x32], rdx
movabs rdx, 0x736073315f4d5457
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x646e457453207360
mov qword [rsp + 0x40], rdx
movabs rdx, 0x47162b4a2047251b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e1f19
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 9]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4e1f4b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e1f6e
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 9]
cmp rsi, 0x16
jb 0x4e1eff
jmp 0x4e1f62
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00462ca0
mov eax, edi
mov ecx, 0x16
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004e1e80
Function at 0x4e5f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e605d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x120a0f09140b1111
mov qword [rsp + 0x19], rdx
movabs rdx, 0x81306040d0a0608
mov qword [rsp + 0x21], rdx
movabs rdx, 0x150c0a02030a080b
mov qword [rsp + 0x29], rdx
movabs rdx, 0x140114150d11160a
mov qword [rsp + 0x31], rdx
movabs rdx, 0x6171657087938b4d
mov qword [rsp + 0x39], rdx
movabs rdx, 0x647bad892d5a7761
mov qword [rsp + 0x40], rdx
movabs rdx, 0x767f858e96827219
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e6000
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4e602d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e6050
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4e5fdf
jmp 0x4e6044
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462ca0
mov eax, edi
mov ecx, 0x17
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004e5f60

Function at 0x4e6080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e618c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x190e131516131804
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6061010190a0309
mov qword [rsp + 0x26], rdx
movabs rdx, 0x41001050015130d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10030c05081101
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6328ce262973d4ce
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x61d9191e631d8dfe
mov qword [rsp + 0x46], rdx
movabs rdx, 0x129461d9191e631d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2c62695cc5642261
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e6128
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x20
jge 0x4e615c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4e617f
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0x1a
jb 0x4e610e
jmp 0x4e6173
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1a
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004e6080
Function at 0x4eb760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb88c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x14070b070d141412
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x140b0b1b04190f06
mov qword [rsp + 0x27], rdx
movabs rdx, 0x10d15020e181512
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x10181b061213030a
mov qword [rsp + 0x37], rdx
movabs rdx, 0x1d06111303120c1b
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x35e865262c222573
mov qword [rsp + 0x47], rdx
movabs rdx, 0x7235e865262c2225
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd373c5e3079dc279
mov qword [rsp + 0x50], rdx
movabs rdx, 0x18706fa1acd4b3d3
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6b6c610e20dc68d2
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4eb826
movzx r9d, byte [rsp + rsi + 0x47]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x47], dl
mov byte [rsp + rsi + 0x47], r8b
add rax, 2
cmp rax, 0x28
jge 0x4eb85c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x21
jae 0x4eb87f
movzx r8d, byte [rsp + rdi + 0x47]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0x21
jb 0x4eb80c
jmp 0x4eb873
xor eax, eax
lea rbx, [rsp + 0x47]
mov ecx, 0x21
call fcn.0044d280
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00462ca0
mov eax, edi
mov ecx, 0x21
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004eb760

Function at 0x4ee300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee3c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb05080509070803
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x70502070b0008
mov qword [rsp + 0x24], rdx
movabs rdx, 0x63333570676b642d
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x7b6c705b
xor eax, eax
jmp 0x4ee368
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x4ee397
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4ee3ba
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4ee34b
jmp 0x4ee3ae
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004ee300