joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d0840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0926
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4cd3050fdc04024c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3a13284908654cd3
mov qword [rsp + 0x24], rdx
movabs rdx, 0x307070600040405
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd02020703070706
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30c09070b050107
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d08c0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4d08f2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d0917
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 0xe
jb 0x4d08a2
jmp 0x4d090b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d0840

Function at 0x4d1460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d154c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x81c4657355e965ba
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8085656cbc666f8a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x64968d7a746387a2
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170000060b110b02
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf14070702150711
mov qword [rsp + 0x20], rdx
movabs rdx, 0x160e060816171610
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4d14ea
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
cmp rax, 0x18
jge 0x4d151c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d153f
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0x18
jb 0x4d14d0
jmp 0x4d1533
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d1460
Function at 0x4d1aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1b8a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5e5f8e5545735372
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x725e5f8e55457353
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x85797774637c68ab
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20b0b0504060a06
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x60910020b0b05
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa020d0e100f070a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d1b2d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0xb]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0xb]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4d1b5a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4d1b7d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4d1b10
jmp 0x4d1b71
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d1aa0

Function at 0x4d1ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1c58
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6c74d67086e85357
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x203020504020302
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x302
xor eax, eax
jmp 0x4d1bf5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x70]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x4d1c28
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4d1c4b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x70]
nop
cmp rsi, 8
jb 0x4d1bdb
jmp 0x4d1c3f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.004d1ba0
Function at 0x4d2460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d253d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x96a897898274657f
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe7c38d8e8396a897
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb0c060c060c070b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8090b0c060c060c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb05040a00030007
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4d24e0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4d250d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d2530
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4d24c2
jmp 0x4d2524
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004d2460

Function at 0x4d2560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d262c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc66bc06f731bc40d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x652269c66bc06f73
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x107080101050902
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x50701
xor eax, eax
jmp 0x4d25c5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4d25fc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4d261f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
cmp rsi, 0xb
jb 0x4d25ab
jmp 0x4d2613
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d2560
Function at 0x4e0280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e039d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x4a161e6e64f74d50
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x27242701423f5c4a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1227242701423f5c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5f45674a47723c61
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc050c0c02100206
mov qword [rsp + 0x36], rdx
movabs rdx, 0x14120c050c0c0210
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1715000f0c070a0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110e0d111101060e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1809080302090e08
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e0340
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x3b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x3b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4e036d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4e0390
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x4e031d
jmp 0x4e0384
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004e0280

Function at 0x4e1240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e133d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e6960d462c66902
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe8df61a46e6960d4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb4c2376dfd6eb29c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80a08000b02040a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x12040f120f0f0c0b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x110d12040f120f0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3050a0a0d050213
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e12e0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4e130d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4e1330
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x4e12bf
jmp 0x4e1324
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004e1240
Function at 0x4e1360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e145b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xff6c3c49bfe1f662
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x374833ff6c3c49bf
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x64b0e4692f20f6d7
mov qword [rsp + 0x26], rdx
movabs rdx, 0x50a041010030204
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe0104090b010703
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc110e0104090b01
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe080b100c090711
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e13f9
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x15]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4e142b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e144e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x15]
cmp rsi, 0x13
jb 0x4e13df
jmp 0x4e1442
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004e1360

Function at 0x4e1de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1edd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xbe0c11956fb8b749
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x686e617453be0c11
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65c3492a4164b8c9
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x12100e050c0c1000
mov qword [rsp + 0x34], rdx
movabs rdx, 0x40e130c131005
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd02060500040e13
mov qword [rsp + 0x40], rdx
movabs rdx, 0x105070612041104
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e1e80
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4e1ead
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e1ed0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x4e1e5f
jmp 0x4e1ec4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004e1de0
Function at 0x4e5020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e510a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xee0de7746ab06f87
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x540d61bdf505ee0d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x650e69f4116d77dd
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10090e0d0f101000
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe00000605120003
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc140802070e110a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e50ad
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x18
jge 0x4e50da
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e50fd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4e5090
jmp 0x4e50f1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004e5020

Function at 0x4e6160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e624a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa763c6666992978d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x79969fc744a763c6
mov qword [rsp + 0x20], rdx
movabs rdx, 0x650f69c8d6649387
mov qword [rsp + 0x28], rdx
movabs rdx, 0x130a0d110708070b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0b0a10000c0109
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa100a020a050e01
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e61ed
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x13]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x13]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x4e621a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e623d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4e61d0
jmp 0x4e6231
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004e6160
Function at 0x4e82a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e839d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x922e14734129eb53
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x642302d744922e14
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65214d4356fa4427
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1070a06060f120e
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb10010509090d06
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x20513020b100105
mov qword [rsp + 0x40], rdx
movabs rdx, 0x909081109101306
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e8340
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4e836d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e8390
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x4e831f
jmp 0x4e8384
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004e82a0

Function at 0x4ea640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea74c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7274d5e91e208b13
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xeabf69298531ee61
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa26e611b1eeabf69
mov qword [rsp + 0x28], rdx
movabs rdx, 0x266d6954b4f2a9ce
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa16140c0918140b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3000e05150b1c04
mov qword [rsp + 0x40], rdx
movabs rdx, 0x105170b0a0f091c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x111c150e100c0515
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ea6e8
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x20
jge 0x4ea71c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x4ea73f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1f]
cmp rsi, 0x1d
jb 0x4ea6ce
jmp 0x4ea733
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461020
mov eax, edi
mov ecx, 0x1d
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ea640
Function at 0x4eb0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb1ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x37887e7c3a747241
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x986e37887e7c3a74
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb36d69a5aa6d6087
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0a0b0e0e0a0e11
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd07020a0d0a0b0e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6090403050c1102
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4eb16d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4eb19a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4eb1bd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4eb150
jmp 0x4eb1b1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004eb0e0

Function at 0x4eb720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb81d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74cbab6112e26843
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x64bb0274cbab6112
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa313fa542088406e
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc020b0605121008
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5090d0b0d0b0606
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc0205090d0b0d0b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0c120b020c0311
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4eb7c0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4eb7ed
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4eb810
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x4eb79f
jmp 0x4eb804
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004eb720
Function at 0x4ec520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec60c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x745320bfcf6dc654
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6498ba745320bfcf
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa784bac7ad777280
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8110e011012030f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10f090408110e01
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90e090d0b120311
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ec5aa
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4ec5dc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4ec5ff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 0x13
jb 0x4ec590
jmp 0x4ec5f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ec520

Function at 0x4ecc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ecd1d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4e6f732a630e8f5c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x64d861c018404e6f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4abce1c37f6472ad
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1100010407130409
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80902140c0c150e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x13090c12140a0809
mov qword [rsp + 0x40], rdx
movabs rdx, 0x608070109130e13
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4eccc0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x25]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x25]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4ecced
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ecd10
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4ecc9f
jmp 0x4ecd04
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004ecc20
Function at 0x4efce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4efdfa
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xe08861c34cd3f3d4
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2ddac910a7e27545
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3fecdd742ddac910
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4ec869ddc7648e61
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1318010b0201001b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x12001507060a1318
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1030d0e120d1111
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe00030f170a1a04
mov qword [rsp + 0x50], rdx
movabs rdx, 0x103170c0b180c0b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4efd97
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x76]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x26
jge 0x4efdc9
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4efded
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x76]
cmp rsi, 0x1c
jb 0x4efd7d
jmp 0x4efde1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.004efce0

Function at 0x4efe20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eff0a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xfe7579652cdf7554
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8f7e08a4fe757965
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb26d970a206472e7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90c110313060a06
mov qword [rsp + 0x32], rdx
movabs rdx, 0x7020c0c1108090c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa08100c11030b0a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4efead
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x4efeda
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4efefd
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4efe90
jmp 0x4efef1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004efe20