joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e0040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e0148
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x7484a6bb69a56e89
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x949a857484a6bb69
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x748f8be67dd68a85
mov qword [rsp + 0x26], rdx
movabs rdx, 0x110c050d0b050b0f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x504100809100a02
mov qword [rsp + 0x36], rdx
movabs rdx, 0x60b050410080910
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120a0e0f00040d05
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e00e0
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffc0
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4e0111
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e013b
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffc0
add r8d, edx
cmp rsi, 0x13
jb 0x4e00c5
jmp 0x4e012f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop dword [rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453d80
mov eax, edi
mov ecx, 0x13
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004e0040

Function at 0x4e0860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e0968
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x546e666362612641
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x645c216d1a546e66
mov qword [rsp + 0x22], rdx
movabs rdx, 0x67466472666a7284
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50913090810010b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x5110208020b0407
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x70a14120d130511
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20f140502130a12
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e0902
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1e
jge 0x4e092f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e095b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4e08e5
jmp 0x4e094f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453d80
mov eax, edi
mov ecx, 0x15
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004e0860
Function at 0x4e3880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e3976
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7453a8ff35b46843
mov qword [rsp + 0x19], rdx
movabs rdx, 0x646e1f7453a8ff35
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb0a8c3542674b3bc
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc04100d1211030d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30e04050c04100d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc030c080e100b02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e3913
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x4e3942
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e3969
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4e38f6
nop
jmp 0x4e395d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00441e20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453d80
mov eax, edi
mov ecx, 0x13
call fcn.00453d80
nop
call fcn.00451720
nop dword [rax + rax]
jmp fcn.004e3880

Function at 0x4e4d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e4e36
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x3c5320fd736d1c54
mov qword [rsp + 0x19], rdx
movabs rdx, 0x644d613c5320fd73
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x564ece4ca945321c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x911010b0e100e01
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0e0b0c0911010b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1120d0c070f0407
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e4dd3
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x4e4e02
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e4e29
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4e4db6
nop
jmp 0x4e4e1d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00441e20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453d80
mov eax, edi
mov ecx, 0x13
call fcn.00453d80
nop
call fcn.00451720
nop dword [rax + rax]
jmp fcn.004e4d40
Function at 0x4e4e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e4f72
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xaac07269a9616d45
mov qword [rsp + 0x18], rdx
movabs rdx, 0x61af9eae9f01a8a5
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf76e61af9eae9f01
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa218fcc45a6472c0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe17070a0b061116
mov qword [rsp + 0x32], rdx
movabs rdx, 0x91603110d0b0819
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1203011503150916
mov qword [rsp + 0x40], rdx
movabs rdx, 0x112040c0e070718
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e4f11
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x27]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x27]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1e
jge 0x4e4f3e
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4e4f65
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4e4ef4
jmp 0x4e4f59
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00441e20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00453d80
mov eax, edi
mov ecx, 0x1a
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004e4e60

Function at 0x4e57a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e58c6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x9ce301203ec8b234
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x333875696ce5225b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x76e425b33387569
mov qword [rsp + 0x26], rdx
movabs rdx, 0x651969cb2026721b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10901071a0f0218
mov qword [rsp + 0x36], rdx
movabs rdx, 0x50d010901071a0f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x141316060e0502
mov qword [rsp + 0x40], rdx
movabs rdx, 0x703110d02161809
mov qword [rsp + 0x48], rdx
movabs rdx, 0x81009000516090a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e5860
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x51]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x51]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x22
jge 0x4e588d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4e58b4
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4e5843
jmp 0x4e58a8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.00441e20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00453d80
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004e57a0
Function at 0x4e5fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e60a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x697974a176768496
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6e62619673196979
mov qword [rsp + 0x24], rdx
movabs rdx, 0x657d69541964727a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10909040a0714
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa010a01140d0304
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x811070e0a010a01
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa020c0705060d00
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e6040
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffdc
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4e6071
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e609b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffdc
add r8d, edx
cmp rsi, 0x16
jb 0x4e6025
jmp 0x4e608f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
nop dword [rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00453d80
mov eax, edi
mov ecx, 0x16
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004e5fa0
Function at 0x4e6c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6d76
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x766f715c7a747058
mov qword [rsp + 0x19], rdx
movabs rdx, 0x64525e7471747e76
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5a6d303f20613c33
mov qword [rsp + 0x28], rdx
movabs rdx, 0x160c0d110803090f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50d04110110070d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x14000a130506010a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e6d10
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffe7
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x4e6d42
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e6d69
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffe7
add r8d, edx
cmp rsi, 0x17
jb 0x4e6cf6
nop
jmp 0x4e6d5d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441e20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x17
call fcn.00453d80
mov eax, edi
mov ecx, 0x17
call fcn.00453d80
nop
call fcn.00451720
nop dword [rax + rax]
jmp fcn.004e6c80

Function at 0x4e6da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6ea8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xda6f72719cc1bebd
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7ba69d78536922da
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe2110ec2699a72d3
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7040e150e080214
mov qword [rsp + 0x34], rdx
movabs rdx, 0x8000e0f09121307
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd020e08000e0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb01110c13031316
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e6e40
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffff92
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4e6e71
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e6e9b
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffff92
add r8d, edx
cmp rsi, 0x17
jb 0x4e6e25
jmp 0x4e6e8f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop dword [rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00453d80
mov eax, edi
mov ecx, 0x17
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004e6da0
Function at 0x4e79c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7ab6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6e48bc5365457746
mov qword [rsp + 0x19], rdx
movabs rdx, 0x896e48bc53654577
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6580717b20bc78a7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1060b090506080f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe090b0a03010106
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30d0d050b030d0e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e7a50
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffdd
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x4e7a82
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4e7aa9
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffdd
add r8d, edx
cmp rsi, 0x11
jb 0x4e7a36
nop
jmp 0x4e7a9d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441e20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00453d80
mov eax, edi
mov ecx, 0x11
call fcn.00453d80
nop
call fcn.00451720
nop dword [rax + rax]
jmp fcn.004e79c0

Function at 0x4e80e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e81e8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x966e61c046aef4a2
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf56e61bfc2966e61
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa3ca99a020741261
mov qword [rsp + 0x26], rdx
movabs rdx, 0x11140f0e0c020308
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0e080e04130109
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4080f0e080e0413
mov qword [rsp + 0x38], rdx
movabs rdx, 0x902140704121300
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e8180
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffa6
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4e81b1
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e81db
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffa6
add r8d, edx
cmp rsi, 0x15
jb 0x4e8165
jmp 0x4e81cf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453d80
mov eax, edi
mov ecx, 0x15
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004e80e0
Function at 0x4e9520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9632
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x331d61687461680e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2010ff6e61286149
mov qword [rsp + 0x23], rdx
movabs rdx, 0x153a1532532010ff
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd80269ff204fc01d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x719120e0d0a1206
mov qword [rsp + 0x38], rdx
movabs rdx, 0x14111615131b1c15
mov qword [rsp + 0x40], rdx
movabs rdx, 0x17061c0a15120000
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9131613111c1213
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e95d1
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x45]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x45]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x20
jge 0x4e95fe
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4e9625
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4e95b4
jmp 0x4e9619
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00441e20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00453d80
mov eax, edi
mov ecx, 0x1d
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004e9520

Function at 0x4e9dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9ee6
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x87ad276bacfd643
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x223b6982b263bd50
mov qword [rsp + 0x27], rdx
movabs rdx, 0x9ea5be8753223b69
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe06d695620647285
mov qword [rsp + 0x34], rdx
movabs rdx, 0x31c13020c041506
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x5121109031c1302
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71903010b11131c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3190e1c030e0f0e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1119031201140205
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4e9e80
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 6]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x24
jge 0x4e9ead
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4e9ed4
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4e9e63
jmp 0x4e9ec8
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.00441e20
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00453d80
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004e9dc0
Function at 0x4ea3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea4d6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x8586946f6669964e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6873618353858694
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6535ac8920646b7a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1109050112111307
mov qword [rsp + 0x32], rdx
movabs rdx, 0x12010c1209061109
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50b020d11010e13
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ea470
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffffd7
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4ea4a2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ea4c9
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffffd7
add r8d, edx
cmp rsi, 0x15
jb 0x4ea456
nop
jmp 0x4ea4bd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441e20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453d80
mov eax, edi
mov ecx, 0x15
call fcn.00453d80
nop
call fcn.00451720
nop dword [rax + rax]
jmp fcn.004ea3e0
Function at 0x4f1520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0x9041b3f353c5f1b4
mov qword [rsp + 0x18], rax
movabs rax, 0x17225df610853b22
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x1a]
movzx ecx, byte [rsp + 0x1e]
xor eax, ecx
movzx ecx, byte [rsp + 0x26]
movzx edx, byte [rsp + 0x22]
movzx ebx, byte [rsp + 0x24]
movzx esi, byte [rsp + 0x27]
movzx edi, byte [rsp + 0x1d]
movzx r8d, byte [rsp + 0x21]
movzx r9d, byte [rsp + 0x18]
movzx r10d, byte [rsp + 0x1f]
movzx r11d, byte [rsp + 0x19]
movzx r12d, byte [rsp + 0x20]
movzx r13d, byte [rsp + 0x1b]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x1c]
movzx r13d, byte [rsp + 0x25]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x23]
mov byte [rsp + 0xf], al
lea eax, [rdx + rcx]
mov byte [rsp + 0x10], al
lea eax, [rsi + rbx]
mov byte [rsp + 0x11], al
lea eax, [r8 + rdi]
mov byte [rsp + 0x12], al
lea eax, [r10 + r9]
mov byte [rsp + 0x13], al
sub r11d, r12d
mov byte [rsp + 0x14], r11b
movzx eax, byte [rsp + 6]
sub eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
add eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x4f1627
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x4f161b
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret

Function at 0x4f1be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1cb2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x32c4feae990e65cf
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xfb6c6450
movabs rdx, 0x50b000602040406
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30802080803050b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f1c4b
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0x5a
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4f1c7c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4f1ca5
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0x5a
add r8d, edx
cmp rsi, 0xc
jb 0x4f1c31
jmp 0x4f1c97
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441e20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00453d80
mov eax, edi
mov ecx, 0xc
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004f1be0
Function at 0x4f1cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1d8b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x9e98b01d705f73a2
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x6c
movabs rdx, 0x607060000040602
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5070500
xor eax, eax
jmp 0x4f1d24
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x33]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x33]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x4f1d57
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x4f1d7e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4f1d07
jmp 0x4f1d72
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00441e20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00453d80
mov eax, edi
mov ecx, 9
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004f1cc0

Function at 0x4f2020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f20fc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7498962ef6e775f5
mov qword [rsp + 0x28], rdx
movabs rdx, 0xaa826e656bbf54a9
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0f04080506000e
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe0f080303020308
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4f2095
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x30]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x30]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x4f20c8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4f20ef
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0x10
jb 0x4f2078
jmp 0x4f20e3
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00441e20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453d80
mov eax, edi
mov ecx, 0x10
call fcn.00453d80
nop
nop dword [rax]
call fcn.00451720
jmp fcn.004f2020
Function at 0x4f31a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f32a8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x741361c041cc3847
mov qword [rsp + 0x18], rdx
movabs rdx, 0x873a3e1741361c0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd1127373d3d2bf64
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80b0d0806021204
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80906020e131201
mov qword [rsp + 0x34], rdx
movabs rdx, 0x102091208090602
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf061208040b0806
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f3240
movzx r9d, byte [rsp + rsi + 0x18]
add r9d, 0x7a
add edx, r9d
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4f3271
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f329b
movzx r8d, byte [rsp + rdi + 0x18]
add r8d, 0x7a
add r8d, edx
cmp rsi, 0x14
jb 0x4f3225
jmp 0x4f328f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop dword [rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00453d80
mov eax, edi
mov ecx, 0x14
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004f31a0