joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c7680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c776c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7448203e70614951
mov qword [rsp + 0x35], rdx
movabs rdx, 0x1f6e527448203e70
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4e373e521e64325a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0e110c08120600
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x20c0c11100a0a0e
mov qword [rsp + 0x25], rdx
movabs rdx, 0x40f0a0b010f1006
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4c770a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 9]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x16
jge 0x4c773c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c775f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 9]
cmp rsi, 0x13
jb 0x4c76f0
jmp 0x4c7753
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.004415e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451e00
mov eax, edi
mov ecx, 0x13
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.004c7680

Function at 0x4c7aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7b8c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xac6df7757d688b53
mov qword [rsp + 0x35], rdx
movabs rdx, 0xbb9661ac6df7757d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65657a54a4647271
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6050e0a02070705
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x70e090901020605
mov qword [rsp + 0x25], rdx
movabs rdx, 0x110b1004030a0505
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4c7b2a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x32]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x16
jge 0x4c7b5c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c7b7f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x32]
cmp rsi, 0x13
jb 0x4c7b10
jmp 0x4c7b73
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.004415e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451e00
mov eax, edi
mov ecx, 0x13
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.004c7aa0
Function at 0x4d2dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2ec8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x45fae83d46644107
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xdf1aa8fc0c747335
mov qword [rsp + 0x47], rdx
movabs rdx, 0x64df1aa8fc0c7473
mov qword [rsp + 0x48], rdx
movabs rdx, 0x413d697e1264720e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x50b00000d181505
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf040b1511180117
mov qword [rsp + 0x27], rdx
movabs rdx, 0x611040606141803
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x8050c060b150e08
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4d2e6b
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
cmp rax, 0x20
jge 0x4d2e98
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4d2ebb
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4d2e4e
jmp 0x4d2eaf
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.004415e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451e00
mov eax, edi
mov ecx, 0x19
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.004d2dc0

Function at 0x4d4100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d41fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8261df2293d11b57
mov qword [rsp + 0x39], rdx
movabs rdx, 0xb978be74531bc182
mov qword [rsp + 0x40], rdx
movabs rdx, 0x656d6905200f79f9
mov qword [rsp + 0x48], rdx
movabs rdx, 0x30205050e10100c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x11080c09050f070c
mov qword [rsp + 0x25], rdx
movabs rdx, 0x10d110311080c09
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1313010902041007
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4d4199
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x35]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4d41cb
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4d41ee
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x35]
cmp rsi, 0x17
jb 0x4d417f
jmp 0x4d41e2
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.004415e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451e00
mov eax, edi
mov ecx, 0x17
call fcn.00451e00
nop
nop dword [rax + rax]
call fcn.0044fb80
jmp fcn.004d4100
Function at 0x4d6c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6d1d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4f14472f797a3d84
mov qword [rsp + 0x39], rdx
movabs rdx, 0x176e61dc0f30344f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65c0466909272b34
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb09000e06131300
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6130a0e06121215
mov qword [rsp + 0x23], rdx
movabs rdx, 0x140e1110110a0613
mov qword [rsp + 0x29], rdx
movabs rdx, 0x1507040a080f0105
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4d6cc0
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x4c]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x4c]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4d6ced
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4d6d10
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4d6c9f
jmp 0x4d6d04
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.004415e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451e00
mov eax, edi
mov ecx, 0x17
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.004d6c20

Function at 0x4d7660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d775b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb2537cb8e5726f9f
mov qword [rsp + 0x35], rdx
movabs rdx, 0x646e8fb2537cb8e5
mov qword [rsp + 0x38], rdx
movabs rdx, 0x659cb1439fb5b991
mov qword [rsp + 0x40], rdx
movabs rdx, 0x704100f0c0c1107
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1107080d0f05030b
mov qword [rsp + 0x21], rdx
movabs rdx, 0x500080b1107080d
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc08040510050e10
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4d76f9
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4d772b
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d774e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0x13
jb 0x4d76df
jmp 0x4d7742
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.004415e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451e00
mov eax, edi
mov ecx, 0x13
call fcn.00451e00
nop
nop dword [rax + rax]
call fcn.0044fb80
jmp fcn.004d7660
Function at 0x4d8560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d864c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x72206965647b6c54
mov qword [rsp + 0x34], rdx
movabs rdx, 0x86786f7a72206965
mov qword [rsp + 0x38], rdx
movabs rdx, 0x696d64382064744a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1101130307070b08
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd0a130302081101
mov qword [rsp + 0x24], rdx
movabs rdx, 0x70c100c09030c0c
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4d85ea
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x16
jge 0x4d861c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d863f
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
cmp rsi, 0x14
jb 0x4d85d0
jmp 0x4d8633
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.004415e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451e00
mov eax, edi
mov ecx, 0x14
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.004d8560

Function at 0x4d9760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d987d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x89c7da6ebe83aa45
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x6174eba16797aa9d
mov qword [rsp + 0x46], rdx
movabs rdx, 0xc3b86174eba16797
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9952b9abd68bcda3
mov qword [rsp + 0x50], rdx
movabs rdx, 0x11070a090d161912
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9041319060d1107
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x814160210141712
mov qword [rsp + 0x26], rdx
movabs rdx, 0x151805020203070a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1901120d0218090c
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4d9820
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 - 9]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 - 9]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4d984d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4d9870
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4d97fd
jmp 0x4d9864
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.004415e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451e00
mov eax, edi
mov ecx, 0x1a
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.004d9760
Function at 0x4dc400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc4fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xdbd10961723b37ef
mov qword [rsp + 0x39], rdx
movabs rdx, 0x44bd3e1b53206edb
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13cc2e5433647261
mov qword [rsp + 0x48], rdx
movabs rdx, 0x12150d010016060d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x160006120b0c140e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x205160006120b0c
mov qword [rsp + 0x29], rdx
movabs rdx, 0x10e0c0206020607
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4dc4a0
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x47]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x47]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4dc4cd
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4dc4f0
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4dc47f
jmp 0x4dc4e4
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.004415e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451e00
mov eax, edi
mov ecx, 0x17
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.004dc400

Function at 0x4dc960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dca5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x70c77275e4ed7442
mov qword [rsp + 0x39], rdx
movabs rdx, 0x96e61740b64ac70
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc16dc10cb4997261
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140a0a1300021206
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x303130809030209
mov qword [rsp + 0x27], rdx
movabs rdx, 0x112030313080903
mov qword [rsp + 0x29], rdx
movabs rdx, 0x90a1616160e1100
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4dca00
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4dca2d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4dca50
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4dc9df
jmp 0x4dca44
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.004415e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451e00
mov eax, edi
mov ecx, 0x17
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.004dc960
Function at 0x4de560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de65d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x200a61697302c0f0
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x6402458e47200a61
mov qword [rsp + 0x40], rdx
movabs rdx, 0xdd6d691e20334331
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110d09140b09060f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8020e09090b0100
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1101000008020e09
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xb0a00080e0f110d
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4de600
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 + 0x44]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 + 0x44]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4de62d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4de650
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4de5df
jmp 0x4de644
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.004415e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451e00
mov eax, edi
mov ecx, 0x15
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.004de560

Function at 0x4de680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de76c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x206563bca96d811b
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1cd8611ad9206563
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb007695482b5c0b4
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd140b0b00090901
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1010130f08090d14
mov qword [rsp + 0x23], rdx
movabs rdx, 0x3000e04010f0c04
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4de70a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x4de73c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4de75f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0x15
jb 0x4de6f0
jmp 0x4de753
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.004415e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451e00
mov eax, edi
mov ecx, 0x15
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.004de680
Function at 0x4df320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df42c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6b61925a20e76670
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6e61956aac6499b9
mov qword [rsp + 0x47], rdx
movabs rdx, 0x856e61956aac6499
mov qword [rsp + 0x48], rdx
movabs rdx, 0x657c69ad9c688388
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc15140105120100
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1111090d080b0d02
mov qword [rsp + 0x27], rdx
movabs rdx, 0x10171201070c090c
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x809051301000b00
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4df3c8
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x20
jge 0x4df3fc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4df41f
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x19
jb 0x4df3ae
jmp 0x4df413
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x19
call fcn.004415e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451e00
mov eax, edi
mov ecx, 0x19
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.004df320

Function at 0x4e0460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e057a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x13c491a65536940
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd933532a83642ada
mov qword [rsp + 0x46], rdx
movabs rdx, 0x6453d933532a8364
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1417f6542009721a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x4170210180b1807
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x40804170210180b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x140018070f171200
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70e0e190c070800
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc04060909170b08
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4e0517
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx + 5]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4e0549
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4e056d
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 5]
cmp rsi, 0x1a
jb 0x4e04fd
jmp 0x4e0561
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.004415e0
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451e00
mov eax, edi
mov ecx, 0x1a
call fcn.00451e00
nop
call fcn.0044fb80
nop
jmp fcn.004e0460
Function at 0x4e05a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e069d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x616f65755d1e6d4d
mov qword [rsp + 0x39], rdx
movabs rdx, 0x64667059537e7161
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7e88651e77887268
mov qword [rsp + 0x48], rdx
movabs rdx, 0x150c0b0f08121309
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x8140f0302120c14
mov qword [rsp + 0x25], rdx
movabs rdx, 0x6020d1308140f03
mov qword [rsp + 0x29], rdx
movabs rdx, 0x11060b01160b0201
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4e0640
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x1c]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x1c]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4e066d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e0690
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4e061f
jmp 0x4e0684
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.004415e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451e00
mov eax, edi
mov ecx, 0x17
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.004e05a0

Function at 0x4e06c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e07bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x9a367e6f667294da
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x86d961746d9a367e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xddf869542098a961
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50c1306000f070b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x108070e13010614
mov qword [rsp + 0x25], rdx
movabs rdx, 0xb0b07060b0f0108
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xb0007010e140800
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4e0760
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4e078d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e07b0
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4e073f
jmp 0x4e07a4
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.004415e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451e00
mov eax, edi
mov ecx, 0x15
call fcn.00451e00
nop
nop dword [rax]
call fcn.0044fb80
jmp fcn.004e06c0
Function at 0x4e6900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6a38
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xb4f949ded3b19c94
mov qword [rsp + 0x47], rdx
movabs rdx, 0x72b4f949ded3b19c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa407a9b86968a979
mov qword [rsp + 0x50], rdx
movabs rdx, 0x20adb774e35648dd
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6ba6615a1fd7a1c7
mov qword [rsp + 0x60], rdx
movabs rdx, 0x51c17040d0d040a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x610140306050412
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1919110e130f0610
mov qword [rsp + 0x27], rdx
movabs rdx, 0xe1a1b05190a1313
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x7141d13191b0001
mov qword [rsp + 0x37], rdx
movabs rdx, 0x101f0d0216030505
mov qword [rsp + 0x3f], rdx
xor eax, eax
jmp 0x4e69d8
movzx r9d, byte [rsp + rsi + 0x47]
sub r9d, edx
lea edx, [r9 - 0xa]
mov byte [rsp + rdi + 0x47], dl
lea edx, [r8 - 0xa]
mov byte [rsp + rsi + 0x47], dl
add rax, 2
cmp rax, 0x2e
jge 0x4e6a08
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4e6a2b
movzx r8d, byte [rsp + rdi + 0x47]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x21
jb 0x4e69bb
jmp 0x4e6a1f
xor eax, eax
lea rbx, [rsp + 0x47]
mov ecx, 0x21
call fcn.004415e0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00451e00
mov eax, edi
mov ecx, 0x21
call fcn.00451e00
nop
call fcn.0044fb80
nop dword [rax]
jmp fcn.004e6900

Function at 0x4ea080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea147
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x32f9b1514d74c18e
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x9f8a64a0
movabs rdx, 0xa010608030a05
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb04040304060301
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4ea0e8
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x12]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x12]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x4ea117
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4ea13a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4ea0cb
jmp 0x4ea12e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.004415e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451e00
mov eax, edi
mov ecx, 0xc
call fcn.00451e00
nop
call fcn.0044fb80
jmp fcn.004ea080