joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d4ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4fbb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x93616c6c89677c68
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8e1b7d7452903d5b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x88805e544d727c44
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x171607030a090f00
mov qword [rsp + 0x36], rdx
movabs rdx, 0x701080003030011
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe0d070108000303
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130d100b0f121215
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d4f59
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4d4f8b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d4fae
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 0x18
jb 0x4d4f3f
jmp 0x4d4fa2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00441400
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451920
mov eax, edi
mov ecx, 0x18
call fcn.00451920
nop
nop dword [rax + rax]
call fcn.0044f6a0
jmp fcn.004d4ec0

Function at 0x4d57e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d58ec
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x20b36963746efb43
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6174ee0e0969f941
mov qword [rsp + 0x22], rdx
movabs rdx, 0xbfb66174ee0e0969
mov qword [rsp + 0x24], rdx
movabs rdx, 0xad6dbfaed3e8720e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x505191117060612
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd0c0514090b010c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x150410140d0c0514
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb050416110c0901
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d5888
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4d58bc
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4d58df
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0x1a
jb 0x4d586e
jmp 0x4d58d3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00441400
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451920
mov eax, edi
mov ecx, 0x1a
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004d57e0
Function at 0x4d67e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d68fa
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xbb2065f757640c8a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x131e5c53a974abc8
mov qword [rsp + 0x25], rdx
movabs rdx, 0xf6131e5c53a974ab
mov qword [rsp + 0x26], rdx
movabs rdx, 0x32ae60bdc380a3ba
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf080e0718151203
mov qword [rsp + 0x36], rdx
movabs rdx, 0x3030f080e071815
mov qword [rsp + 0x38], rdx
movabs rdx, 0x121410150407160b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1307030917110d14
mov qword [rsp + 0x48], rdx
movabs rdx, 0x908100015000115
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d6897
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x67]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x22
jge 0x4d68c9
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4d68ed
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x67]
cmp rsi, 0x19
jb 0x4d687d
jmp 0x4d68e1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00441400
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451920
mov eax, edi
mov ecx, 0x19
call fcn.00451920
nop
call fcn.0044f6a0
nop
jmp fcn.004d67e0

Function at 0x4d7660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d775d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe79ebe6c00080b42
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa6b1cfd653a2bc4f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9f6d6954f35aaea3
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x607060f0c0f0a08
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1206131217101307
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x307110112061312
mov qword [rsp + 0x40], rdx
movabs rdx, 0x709050e02090d11
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d7700
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4d772d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d7750
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x4d76df
jmp 0x4d7744
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00441400
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451920
mov eax, edi
mov ecx, 0x18
call fcn.00451920
nop
nop dword [rax]
call fcn.0044f6a0
jmp fcn.004d7660
Function at 0x4d7d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7e08
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x996e7acfe45d5f
mov qword [rsp + 0x19], rdx
movabs rdx, 0xee617453b161dad5
mov qword [rsp + 0x21], rdx
movabs rdx, 0x64ee617453b161da
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65d1695420374cbc
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1309030408070b07
mov qword [rsp + 0x32], rdx
movabs rdx, 0x170f090f120311
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x20f0b0113060017
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110b020806170813
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d7dab
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x4d7dd8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4d7dfb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x4d7d8e
jmp 0x4d7def
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.00441400
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451920
mov eax, edi
mov ecx, 0x19
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004d7d00

Function at 0x4db7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4db8bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6ef23fecddfd6547
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4cb961cf53ff6ef2
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6df21954b407e6e5
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30a0a0d15110511
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80f04130805130f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x40e0a060a0f080f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110c14021405100f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4db860
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x60]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x60]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4db88d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4db8b0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4db83f
jmp 0x4db8a4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00441400
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451920
mov eax, edi
mov ecx, 0x16
call fcn.00451920
nop
nop dword [rax]
call fcn.0044f6a0
jmp fcn.004db7c0
Function at 0x4dbc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dbd4c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x743020bb1ec96f22
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd06e11743020bb1e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf181694d2064b161
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa020f0811020306
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x12080c000a020f08
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6080c03120f040a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4dbcea
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x71]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4dbd1c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4dbd3f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x71]
cmp rsi, 0x13
jb 0x4dbcd0
jmp 0x4dbd33
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00441400
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451920
mov eax, edi
mov ecx, 0x13
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004dbc60

Function at 0x4dc840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc93d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4c0eb9f5a7059f0
mov qword [rsp + 0x18], rdx
movabs rdx, 0x64f1613f0e20ec64
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6521fd54f9e072bb
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10100e1200121301
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1505030405051605
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5120010160b0009
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10716060701010c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4dc8e0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x27]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x27]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4dc90d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4dc930
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x18
jb 0x4dc8bf
jmp 0x4dc924
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.00441400
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451920
mov eax, edi
mov ecx, 0x18
call fcn.00451920
nop
nop dword [rax]
call fcn.0044f6a0
jmp fcn.004dc840
Function at 0x4ddc40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ddd5d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x729a73758ddb9857
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x61b7619e6569da93
mov qword [rsp + 0x22], rdx
movabs rdx, 0x904f61b7619e6569
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8f42e1c28364a8b6
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x160c111010170618
mov qword [rsp + 0x34], rdx
movabs rdx, 0x3160917160c1110
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1310061308191215
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd151302160c0902
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11091317010b100e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ddd00
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0xf]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0xf]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4ddd2d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4ddd50
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4ddcdd
jmp 0x4ddd44
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00441400
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451920
mov eax, edi
mov ecx, 0x1a
call fcn.00451920
nop
nop dword [rax]
call fcn.0044f6a0
jmp fcn.004ddc40

Function at 0x4de1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de2bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2d1e693465b63344
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3cd86153cde92d1e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65333754b630fbce
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60c0a02020e0201
mov qword [rsp + 0x32], rdx
movabs rdx, 0x100f090902101102
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x41307100811100f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0806060901140d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4de260
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x60]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x60]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4de28d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4de2b0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4de23f
jmp 0x4de2a4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00441400
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451920
mov eax, edi
mov ecx, 0x16
call fcn.00451920
nop
nop dword [rax]
call fcn.0044f6a0
jmp fcn.004de1c0
Function at 0x4de880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de99d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x554554562b674c2e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x375e657a25726005
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4c674e74375e657a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x48ff69205f647240
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80306010b001713
mov qword [rsp + 0x34], rdx
movabs rdx, 0x14140f1a08030601
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1118070f1b1b0405
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1a180e0e17030212
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130c0b0f0905110e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4de940
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4de96d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4de990
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4de91d
jmp 0x4de984
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
call fcn.00441400
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451920
mov eax, edi
mov ecx, 0x1c
call fcn.00451920
nop
nop dword [rax]
call fcn.0044f6a0
jmp fcn.004de880

Function at 0x4de9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4deaaa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3366897c6ba07689
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x866e61823366897c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6583ab78c8646b8f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0808020c120405
mov qword [rsp + 0x32], rdx
movabs rdx, 0x101101040d000b08
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb100f1006070810
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4dea4d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 2]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x4dea7a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4dea9d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4dea30
jmp 0x4dea91
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441400
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451920
mov eax, edi
mov ecx, 0x14
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004de9c0
Function at 0x4e1560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e167d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xe3736890eaf56145
mov qword [rsp + 0x19], rdx
movabs rdx, 0x96e2da926e495a65
mov qword [rsp + 0x21], rdx
movabs rdx, 0xf7e8ec96e2da926e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x36b7b54cfdddbcb
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x905180604161108
mov qword [rsp + 0x34], rdx
movabs rdx, 0x518191509051806
mov qword [rsp + 0x38], rdx
movabs rdx, 0x713040d03110c06
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10140d0f0c0a0c15
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa120e0c0915021a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e1620
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4e164d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4e1670
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4e15fd
jmp 0x4e1664
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1b
call fcn.00441400
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00451920
mov eax, edi
mov ecx, 0x1b
call fcn.00451920
nop
nop dword [rax]
call fcn.0044f6a0
jmp fcn.004e1560

Function at 0x4e19e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1add
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x95614b4e1b8a6181
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x40835f437d5c9561
mov qword [rsp + 0x20], rdx
movabs rdx, 0x61647a938964727f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x120e11000b0a0515
mov qword [rsp + 0x30], rdx
movabs rdx, 0x141300120e0b0803
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc02071413091215
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140b0d1104000c15
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e1a80
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x18]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x18]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4e1aad
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e1ad0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4e1a5f
jmp 0x4e1ac4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441400
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451920
mov eax, edi
mov ecx, 0x16
call fcn.00451920
nop
nop dword [rax]
call fcn.0044f6a0
jmp fcn.004e19e0
Function at 0x4e1dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1eac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x20cfe96ff9e976ef
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf1dae1f68620cfe9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656df2b5b964e661
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30c0502120611
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10e00010b090003
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8100a000a060009
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e1e4a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4e1e7c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e1e9f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
cmp rsi, 0x15
jb 0x4e1e30
jmp 0x4e1e93
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441400
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451920
mov eax, edi
mov ecx, 0x15
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004e1dc0

Function at 0x4e94e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e95ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x89806c9a777d8173
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x64208f89806c9a77
mov qword [rsp + 0x20], rdx
movabs rdx, 0x934874a1826572a3
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe0f050602020206
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30801050e031010
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11040b1203020f07
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e956d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4e959a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e95bd
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4e9550
jmp 0x4e95b1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441400
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451920
mov eax, edi
mov ecx, 0x13
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004e94e0
Function at 0x4e95e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9718
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xb0bd6508d52b7b73
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x27b0bd6508d52b7b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6b7967d92b1e7481
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4ed7ddf87ff9bc6e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6bd5c3ce20656874
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf0413161510151f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x101309080b120607
mov qword [rsp + 0x44], rdx
movabs rdx, 0x15081f0c10130908
mov qword [rsp + 0x48], rdx
movabs rdx, 0x315151e081d1e07
mov qword [rsp + 0x50], rdx
movabs rdx, 0x14181f02170d0f01
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f1e09141612041e
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4e96b8
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x2c
jge 0x4e96e8
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4e970b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x21
jb 0x4e969b
jmp 0x4e96ff
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
call fcn.00441400
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00451920
mov eax, edi
mov ecx, 0x21
call fcn.00451920
nop
call fcn.0044f6a0
nop dword [rax]
jmp fcn.004e95e0

Function at 0x4eb5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb69b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb5d50812066e2811
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6514697612b5d508
mov qword [rsp + 0x24], rdx
movabs rdx, 0x579b8033612565e2
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1112020f060d0b06
mov qword [rsp + 0x34], rdx
movabs rdx, 0x101050607130811
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb04000d01010506
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7000f0003130808
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4eb639
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4eb66b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4eb68e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x39]
cmp rsi, 0x15
jb 0x4eb61f
jmp 0x4eb682
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.00441400
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451920
mov eax, edi
mov ecx, 0x15
call fcn.00451920
nop
nop dword [rax + rax]
call fcn.0044f6a0
jmp fcn.004eb5a0