joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d4360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d444c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb8b70e614874b853
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc20d4920b8b70e61
mov qword [rsp + 0x22], rdx
movabs rdx, 0xadf8fb32610972b1
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x13060810050b0808
mov qword [rsp + 0x32], rdx
movabs rdx, 0x11080e0a01121306
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa080c0b0e071101
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d43ea
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x4d441c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d443f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
cmp rsi, 0x14
jb 0x4d43d0
jmp 0x4d4433
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d4360

Function at 0x4d4460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4546
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7357f1f68ae55054
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7373e6636febd560
mov qword [rsp + 0x26], rdx
movabs rdx, 0x504080107020203
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd03050408010702
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9080a020609010d
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d44e0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x71]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4d4512
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4d4537
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x71]
cmp rsi, 0x10
jb 0x4d44c2
jmp 0x4d452b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d4460
Function at 0x4d5180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5252
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb0551e523adb257
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe65996f060b0551
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0205020303010a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x405060a08070c01
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d51ec
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4d521e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d5245
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4f]
cmp rsi, 0xd
jb 0x4d51d2
jmp 0x4d5235
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d5180

Function at 0x4d78a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7966
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x54b78bfdb3e4ade4
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xa4
movabs rdx, 0x308020506060800
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5010401
xor eax, eax
nop
jmp 0x4d7900
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x55]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4d7932
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d7957
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x55]
cmp rsi, 9
jb 0x4d78e2
jmp 0x4d794b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d78a0

Function at 0x4d7980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7a47
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7472cb7433f653d9
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x701d
movabs rdx, 0x5030508080205
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5020300080005
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4d79e7
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x33]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x33]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4d7a17
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4d7a3a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4d79ca
jmp 0x4d7a2e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d7980
Function at 0x4d7e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7f32
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6274316f687434f8
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xfcfa6128c9627431
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc0c01000c080b05
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x101090c05080c0c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d7ecc
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4d7efe
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d7f25
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2e]
cmp rsi, 0xd
jb 0x4d7eb2
jmp 0x4d7f15
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d7e60

Function at 0x4e5b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5bd8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3d33a917d53d0d6b
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xc60e052e
movabs rdx, 0x9050703050b0204
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0a09050703050b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x401040409010301
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e5b74
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x12
jge 0x4e5ba8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4e5bcb
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
nop
cmp rsi, 0xc
jb 0x4e5b5a
jmp 0x4e5bbf
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.004e5b00
Function at 0x4e5c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5ccc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xffdb651bc067d922
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5704b8c5d34b1dff
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0703080d04000d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc060d0b010a03
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e5c6f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x4c]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4e5c9c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4e5cbf
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4e5c52
jmp 0x4e5cb3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004e5c00

Function at 0x4e5fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6092
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x56e28ba094b97252
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa5658983ad56e28b
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa08040502030602
mov qword [rsp + 0x28], rdx
movabs rdx, 0x403060a0109010c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e602c
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4e605e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e6085
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0xd
jb 0x4e6012
jmp 0x4e6075
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004e5fc0

Function at 0x4e6ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6d98
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x33b8c6e7e9df65ad
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x206000005050607
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3040704
xor eax, eax
jmp 0x4e6d39
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0xc
jge 0x4e6d68
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4e6d8b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
nop
cmp rsi, 8
jb 0x4e6d1c
jmp 0x4e6d7f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.004e6ce0
Function at 0x4e8880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e897b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc9d258e5f5444f55
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x47d963d041e3c9d2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x651ba7e85964d2fe
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20311130214110b
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb0c14120901050d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x60d010907000b0c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa080e0a0f070504
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e8919
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x73]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4e894b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e896e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x73]
cmp rsi, 0x16
jb 0x4e88ff
jmp 0x4e8962
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004e8880

Function at 0x4e89a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8a8c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x93b969627d6dc795
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa97281845393b969
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7b7f8f778a647aa3
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60003030a0a0c0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd11031012090701
mov qword [rsp + 0x38], rdx
movabs rdx, 0x130e0b140a000a07
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e8a2a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x40]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4e8a5c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e8a7f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x40]
cmp rsi, 0x15
jb 0x4e8a10
jmp 0x4e8a73
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004e89a0
Function at 0x4e8aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8b9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5d6169745c5d6177
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x596e75687c5d5d61
mov qword [rsp + 0x22], rdx
movabs rdx, 0x68531a6e3164596b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0d0e000d12020e
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe01111109031308
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x315020a0f030e01
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0a07141412130a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e8b39
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4e8b6b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e8b8e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
cmp rsi, 0x16
jb 0x4e8b1f
jmp 0x4e8b82
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004e8aa0
Function at 0x4ea260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea387
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x670c5c6e1b6e7ba6
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x545e436b806e7240
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa4725e97c9537a54
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x657579548065d361
mov qword [rsp + 0x32], rdx
movabs rdx, 0x40511031907140e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa030d0d030f0607
mov qword [rsp + 0x42], rdx
movabs rdx, 0x111a0600100e0a03
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb16001006110115
mov qword [rsp + 0x50], rdx
movabs rdx, 0x11080b110b180c05
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc130d081d1c0c12
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4ea329
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x1d]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x2e
jge 0x4ea357
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x4ea37a
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1f
jb 0x4ea30c
jmp 0x4ea36e
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1f
call fcn.0044bb20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00461020
mov eax, edi
mov ecx, 0x1f
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ea260

Function at 0x4eb360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb44c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x76727466979f8e50
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x646ef65ea3767274
mov qword [rsp + 0x20], rdx
movabs rdx, 0x656ddff0e40bfda3
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2030d1001070611
mov qword [rsp + 0x30], rdx
movabs rdx, 0x120a03090f0e0a05
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1103080108070207
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4eb3ea
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4eb41c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4eb43f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
cmp rsi, 0x15
jb 0x4eb3d0
jmp 0x4eb433
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004eb360
Function at 0x4ec740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec867
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xcd6b6564471e6143
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x53207004656c356e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x64498c5853207004
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4939632f20793856
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7021803150d180c
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd0c031803090d1a
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x2020d0c03180309
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1a0c19100b161412
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50206090b110209
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa0a0b151108181b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ec809
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x30]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x30]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x2a
jge 0x4ec837
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x4ec85a
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4ec7ec
jmp 0x4ec84e
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ec740

Function at 0x4ed480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed56a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb31420d67d6ba2bf
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x799c95b31420d67d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x80c9a654209393bb
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0a070d0704010c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc08120d11040612
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa04100d09030300
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ed50d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x11]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x11]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4ed53a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4ed55d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4ed4f0
jmp 0x4ed551
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ed480
Function at 0x4ee2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee3bd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe649cf6939f82e41
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf9393ce649cf6939
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60523b54212e7210
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0b020e050a0705
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb1006070a090308
mov qword [rsp + 0x36], rdx
movabs rdx, 0x8110b1006070a09
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0b060d02120201
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ee360
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4ee38d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4ee3b0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x4ee33f
jmp 0x4ee3a4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004ee2c0

Function at 0x4ee660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee768
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x69b6622b54ba7ace
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa43074c6cacfb66b
mov qword [rsp + 0x27], rdx
movabs rdx, 0x7a43074c6cacfb6
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65e969addd77d7b8
mov qword [rsp + 0x30], rdx
movabs rdx, 0x15001715130e0301
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc11060910020e0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2020a040f121403
mov qword [rsp + 0x48], rdx
movabs rdx, 0x151401140b03130a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ee70b
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x3a]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x3a]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x4ee738
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4ee75b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4ee6ee
jmp 0x4ee74f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ee660