joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d5c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5cc7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6066636f6c5b6167
mov qword [rsp + 0x19], rdx
movabs rdx, 0x65736e6066636f6c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x309010107070802
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1060901
xor eax, eax
jmp 0x4d5c68
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x10]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x10]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4d5c97
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4d5cba
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4d5c4b
jmp 0x4d5cae
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044bb80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004610a0
mov eax, edi
mov ecx, 0xb
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004d5c00

Function at 0x4e3ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e3dbd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb26d28d8b9a36552
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb965c5a632b26d28
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0902030809070c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc030c0902030809
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40207080a050a04
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4e3d60
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x68]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x68]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4e3d8d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e3db0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4e3d42
jmp 0x4e3da4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.004610a0
mov eax, edi
mov ecx, 0xd
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.004e3ce0

Function at 0x4e4ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e4f92
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x556562ca6576c879
mov qword [rsp + 0x20], rdx
movabs rdx, 0x700000704010700
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4e4f2e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x62]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4e4f62
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4e4f85
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x62]
cmp rsi, 8
jb 0x4e4f14
nop
jmp 0x4e4f79
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044bb80
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004610a0
mov eax, edi
mov ecx, 8
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004e4ee0
Function at 0x4e5f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e607b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2f121e1e6f031eb6
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1dc5ff746f2f121e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xbb1469bcad7db461
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc040f0501070108
mov qword [rsp + 0x34], rdx
movabs rdx, 0x613000a140e0b10
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb050b080613000a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0b0a0507110214
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e6019
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4e604b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e606e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0x15
jb 0x4e5fff
jmp 0x4e6062
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004610a0
mov eax, edi
mov ecx, 0x15
call fcn.004610a0
nop
nop dword [rax + rax]
call fcn.0045ee20
jmp fcn.004e5f80

Function at 0x4e60a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e61bd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xcad020cdaa1d6f70
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x610f591a61d1d3c1
mov qword [rsp + 0x22], rdx
movabs rdx, 0x64c7610f591a61d1
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf26d9d5420444497
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd020d0d130c1912
mov qword [rsp + 0x34], rdx
movabs rdx, 0x80e00120d020d0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x131706060410030d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120c130c07140202
mov qword [rsp + 0x48], rdx
movabs rdx, 0x907080a1907060c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e6160
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4e618d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4e61b0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4e613d
jmp 0x4e61a4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.0044bb80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004610a0
mov eax, edi
mov ecx, 0x1a
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.004e60a0
Function at 0x4e6560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e665b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe3422a6341624172
mov qword [rsp + 0x19], rdx
movabs rdx, 0x65702674f85404e3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5349715b702a457d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2080a1216120d0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x141005000711040e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x151100010709150c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1202110609151413
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e65f9
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x11]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x20
jge 0x4e662b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e664e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x11]
cmp rsi, 0x17
jb 0x4e65df
jmp 0x4e6642
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004610a0
mov eax, edi
mov ecx, 0x17
call fcn.004610a0
nop
nop dword [rax + rax]
call fcn.0045ee20
jmp fcn.004e6560

Function at 0x4e6f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e705b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x90f811a675d19ca8
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa56e0c7499a990f8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x650ec35490647261
mov qword [rsp + 0x26], rdx
movabs rdx, 0x14110213060d1105
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd010b0111051404
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4080d010b011105
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50d130701000209
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e6ff9
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4e702b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e704e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 0x16
jb 0x4e6fdf
jmp 0x4e7042
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004610a0
mov eax, edi
mov ecx, 0x16
call fcn.004610a0
nop
nop dword [rax + rax]
call fcn.0045ee20
jmp fcn.004e6f60
Function at 0x4e7440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e753b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc9cc746eb5900454
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb218b166f5c473c9
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7dc89f5420d672d6
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0715060d111116
mov qword [rsp + 0x36], rdx
movabs rdx, 0x90b0a140902110d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1609090b0a140902
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30e140c160b010b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e74d9
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4e750b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e752e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0x17
jb 0x4e74bf
jmp 0x4e7522
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004610a0
mov eax, edi
mov ecx, 0x17
call fcn.004610a0
nop
nop dword [rax + rax]
call fcn.0045ee20
jmp fcn.004e7440

Function at 0x4e7840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e793d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc553206df268a4b6
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x643164c553206df2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1731690f2021ad1b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80c0b12090f0101
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0c04010d070f07
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10f0c04010d07
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110d080f03000101
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e78e0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x67]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x67]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4e790d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e7930
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x4e78bf
jmp 0x4e7924
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004610a0
mov eax, edi
mov ecx, 0x13
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.004e7840
Function at 0x4e83e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e84ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x65369696d2f8044e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x646e0ffc87f56e72
mov qword [rsp + 0x38], rdx
movabs rdx, 0x656d6954c72a720e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1004060504050000
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc0d0a000513040b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x130312050401020b
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4e846d
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
cmp rax, 0x18
jge 0x4e849a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4e84bd
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x18
jb 0x4e8450
jmp 0x4e84b1
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004610a0
mov eax, edi
mov ecx, 0x18
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004e83e0

Function at 0x4e84e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e85db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e6ce9c6836e5043
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6485bb62536e6ce9
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4acde7b89d6472e4
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa09070a14120910
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1070d03100b0513
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x70b130d01070d03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x413110a130d0112
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e8579
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x76]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4e85ab
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e85ce
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x76]
cmp rsi, 0x15
jb 0x4e855f
jmp 0x4e85c2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004610a0
mov eax, edi
mov ecx, 0x15
call fcn.004610a0
nop
nop dword [rax + rax]
call fcn.0045ee20
jmp fcn.004e84e0
Function at 0x4e8d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8e27
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x675e47376b727560
mov qword [rsp + 0x18], rdx
movabs rdx, 0x677852692230fe5a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x646e6e636b306778
mov qword [rsp + 0x26], rdx
movabs rdx, 0x396d200b2a5f416e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40d1b0510091b09
mov qword [rsp + 0x36], rdx
movabs rdx, 0x18171d000b1d1a09
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd1a18171d000b1d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71d1808121d0e13
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb06190516080f13
mov qword [rsp + 0x50], rdx
movabs rdx, 0x111b0a10161a0006
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4e8dc9
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x30]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x30]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x2a
jge 0x4e8df7
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x4e8e1a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4e8dac
jmp 0x4e8e0e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
call fcn.0044bb80
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.004610a0
mov eax, edi
mov ecx, 0x1e
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004e8d00

Function at 0x4eaba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eacba
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7453c10cee205355
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1b613232b2e86901
mov qword [rsp + 0x23], rdx
movabs rdx, 0x641b613232b2e869
mov qword [rsp + 0x24], rdx
movabs rdx, 0x163ee3dcfa093a00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5170303150f030f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1312111405170303
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60d0617110a0b03
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0c031212170b03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x308121104181614
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4eac57
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x4eac89
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4eacad
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1f]
cmp rsi, 0x19
jb 0x4eac3d
jmp 0x4eaca1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044bb80
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.004610a0
mov eax, edi
mov ecx, 0x19
call fcn.004610a0
nop
call fcn.0045ee20
nop
jmp fcn.004eaba0
Function at 0x4ed020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed13d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x5742556a5c4e555c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x645d2e4f20625461
mov qword [rsp + 0x23], rdx
movabs rdx, 0x64645d2e4f206254
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65356944206bee78
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x130e0d0c00120902
mov qword [rsp + 0x34], rdx
movabs rdx, 0x7170600130e0d0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1502091715031500
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50501020a090417
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe150f01030f0e11
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ed0e0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4ed10d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4ed130
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4ed0bd
jmp 0x4ed124
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044bb80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004610a0
mov eax, edi
mov ecx, 0x19
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.004ed020

Function at 0x4ed420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed528
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x60972473377f723c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6e0b74f9766c619c
mov qword [rsp + 0x21], rdx
movabs rdx, 0x646e0b74f9766c61
mov qword [rsp + 0x22], rdx
movabs rdx, 0x96d69e503b4f60c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20b140315000700
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1407140512120215
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc06020b0e131407
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1105070c0e180c08
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ed4cb
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x7a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x7a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x4ed4f8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4ed51b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x4ed4ae
jmp 0x4ed50f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004610a0
mov eax, edi
mov ecx, 0x19
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004ed420
Function at 0x4ee340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee45d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x3a3e3f49747254fe
mov qword [rsp + 0x19], rdx
movabs rdx, 0x206050304539625c
mov qword [rsp + 0x21], rdx
movabs rdx, 0x23315d422c206050
mov qword [rsp + 0x26], rdx
movabs rdx, 0x656d567e2064725b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x510040c0a0d07
mov qword [rsp + 0x36], rdx
movabs rdx, 0x613000510040c0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe120d001a0c0a10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x109111013150a14
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe19100804001000
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ee400
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x2d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x2d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4ee42d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4ee450
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4ee3dd
jmp 0x4ee444
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.0044bb80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.004610a0
mov eax, edi
mov ecx, 0x1d
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.004ee340

Function at 0x4ee580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee68c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x58586e3e69576651
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6e5d808420606172
mov qword [rsp + 0x23], rdx
movabs rdx, 0x646e5d8084206061
mov qword [rsp + 0x24], rdx
movabs rdx, 0x571c6954696c7061
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x60c03020c0d1218
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe12031500150713
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x80d0a020e120315
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13130a0214170400
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ee628
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4ee65c
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4ee67f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0x19
jb 0x4ee60e
jmp 0x4ee673
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004610a0
mov eax, edi
mov ecx, 0x19
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004ee580
Function at 0x4eed20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eee0c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x73552d4861296f40
mov qword [rsp + 0x30], rdx
movabs rdx, 0x32675f4c4a206169
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10cf532455647252
mov qword [rsp + 0x40], rdx
movabs rdx, 0x216020b030e1014
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1713051515020f06
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0d0b1015040000
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4eedaa
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 2]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x4eeddc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4eedff
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 2]
cmp rsi, 0x18
jb 0x4eed90
jmp 0x4eedf3
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004610a0
mov eax, edi
mov ecx, 0x18
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004eed20

Function at 0x4ef8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef9bd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3b97125618e36f13
mov qword [rsp + 0x19], rdx
movabs rdx, 0x77f9613b97125618
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa1adc9b020fa72a1
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf0a06021111070b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb09100512020f0f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x20204020b091005
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd00030902110a07
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ef960
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x78]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x78]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4ef98d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4ef9b0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4ef93f
jmp 0x4ef9a4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004610a0
mov eax, edi
mov ecx, 0x13
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.004ef8c0