joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c1860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x4c19d5
push rbp
mov rbp, rsp
sub rsp, 0xb8
movabs rdx, 0x18de464544431a37
mov qword [rsp + 0x78], rdx
movabs rdx, 0xde4f2eff4c034a1f
mov qword [rsp + 0x80], rdx
movabs rdx, 0xf6f6ae3b40a252e5
mov qword [rsp + 0x88], rdx
movabs rdx, 0x34254d73f81f5a59
mov qword [rsp + 0x90], rdx
movabs rdx, 0x106da46b38dbeb95
mov qword [rsp + 0x98], rdx
movabs rdx, 0xc420c400180a0b8d
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x46d564d1502f5640
mov qword [rsp + 0xa8], rdx
movabs rdx, 0xe0c1e14de01f22cf
mov qword [rsp + 0xb0], rdx
movabs rdx, 0x625073e3b012730
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x20280a17272d361d
mov qword [rsp + 0x22], rdx
lea rdi, [rsp + 0x28]
lea rsi, [0x005a20c6]
nop word [rax + rax]
nop word [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00456a3a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4c1974
movzx r9d, byte [rsp + rsi + 0x78]
sub r9d, edx
lea edx, [r9 + 0x7e]
mov byte [rsp + rdi + 0x78], dl
lea edx, [r8 + 0x7e]
mov byte [rsp + rsi + 0x78], dl
add rax, 2
cmp rax, 0x5e
jge 0x4c19a2
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x40
jae 0x4c19c8
movzx r8d, byte [rsp + rdi + 0x78]
sub r8d, edx
cmp rsi, 0x40
jb 0x4c1957
nop
jmp 0x4c19bc
xor eax, eax
lea rbx, [rsp + 0x78]
mov ecx, 0x40
call fcn.00444780
add rsp, 0xb8
pop rbp
ret
mov eax, esi
mov ecx, 0x40
call fcn.00456420
mov eax, edi
mov ecx, 0x40
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004c1860

Function at 0x4c6c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6d4c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8693758aa3048e80
mov qword [rsp + 0x37], rdx
movabs rdx, 0x6c8693758aa3048e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5b65857cae64206e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x704010603040302
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd0c0702080e0707
mov qword [rsp + 0x27], rdx
movabs rdx, 0x100e00050501010d
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4c6cea
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x26]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c6d1c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c6d3f
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x26]
cmp rsi, 0x11
jb 0x4c6cd0
jmp 0x4c6d33
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456420
mov eax, edi
mov ecx, 0x11
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004c6c60
Function at 0x4d0940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0a06
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x667572727c6d786d
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x63
movabs rdx, 0x80102010203
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x10007
xor eax, eax
nop
jmp 0x4d09a0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 9]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4d09d2
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d09f7
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 9]
cmp rsi, 9
jb 0x4d0982
jmp 0x4d09eb
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456420
mov eax, edi
mov ecx, 9
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d0940

Function at 0x4d0a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0b0a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x980dfc67eb6c7687
mov qword [rsp + 0x35], rdx
movabs rdx, 0xf1aafe980dfc67eb
mov qword [rsp + 0x38], rdx
movabs rdx, 0x46f69f901759074
mov qword [rsp + 0x40], rdx
movabs rdx, 0x907060307010812
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc000c08080301
mov qword [rsp + 0x25], rdx
movabs rdx, 0x10f0a0e030f0508
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4d0aad
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x76]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x18
jge 0x4d0ada
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d0afd
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4d0a90
jmp 0x4d0af1
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456420
mov eax, edi
mov ecx, 0x13
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d0a20
Function at 0x4d2340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d243d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x2e1904fc2eebe616
mov qword [rsp + 0x39], rdx
movabs rdx, 0x102c0fe4e8d5142e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe633f40b2f04f1f4
mov qword [rsp + 0x48], rdx
movabs rdx, 0x14020b1616021309
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2130a0105040810
mov qword [rsp + 0x21], rdx
movabs rdx, 0xf0a080c06110e01
mov qword [rsp + 0x29], rdx
movabs rdx, 0x2060d120e11000a
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4d23e0
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 + 0x3d]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 + 0x3d]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4d240d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4d2430
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4d23bf
jmp 0x4d2424
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456420
mov eax, edi
mov ecx, 0x17
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004d2340

Function at 0x4d3040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d312c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd1e69d1fe272f771
mov qword [rsp + 0x37], rdx
movabs rdx, 0x50d1e69d1fe272f7
mov qword [rsp + 0x38], rdx
movabs rdx, 0x67f48179f2646676
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1008090d0e0d040e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf06050a0c000408
mov qword [rsp + 0x27], rdx
movabs rdx, 0xd0c10070e030501
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4d30ca
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x18
jge 0x4d30fc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4d311f
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0x11
jb 0x4d30b0
jmp 0x4d3113
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456420
mov eax, edi
mov ecx, 0x11
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d3040
Function at 0x4d4bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4cdd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x73b895206c6c2e66
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd0726fcdd269bec0
mov qword [rsp + 0x44], rdx
movabs rdx, 0x41f31dbad0726fcd
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6572c7ce81f82acb
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1603081003061203
mov qword [rsp + 0x18], rdx
movabs rdx, 0x10c0c1a16030810
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1090b1811171503
mov qword [rsp + 0x24], rdx
movabs rdx, 0x170315030c111305
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x141919130f0c050c
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4d4c80
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 - 0x3b]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 - 0x3b]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4d4cad
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4d4cd0
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4d4c5d
jmp 0x4d4cc4
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00456420
mov eax, edi
mov ecx, 0x1c
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004d4bc0

Function at 0x4d5280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d536a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf16ee8665e64f262
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6c285ff8f16ee866
mov qword [rsp + 0x38], rdx
movabs rdx, 0x74ab71041cf6ec65
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50a0e0f120d0e11
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1070f1003090f0f
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe03030105080909
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4d530d
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x18
jge 0x4d533a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d535d
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4d52f0
jmp 0x4d5351
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456420
mov eax, edi
mov ecx, 0x14
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d5280
Function at 0x4d7ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7c86
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6756787b6d1b6758
mov qword [rsp + 0x32], rdx
movabs rdx, 0x167b685d6c666756
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb010105010c0704
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60803020b010105
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8020d04000a0203
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x4d7c20
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xf]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4d7c52
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d7c77
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xf]
cmp rsi, 0xe
jb 0x4d7c02
jmp 0x4d7c6b
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456420
mov eax, edi
mov ecx, 0xe
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d7ba0

Function at 0x4d8920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8a0a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf88a86fd8bf80db5
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7093f88a86fd8bf8
mov qword [rsp + 0x30], rdx
movabs rdx, 0x72a2029365b77404
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf03050c0e070a10
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x206080f0f03050c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf010a07000c0402
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4d89ad
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 - 0x7b]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 - 0x7b]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x14
jge 0x4d89da
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4d89fd
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4d8990
jmp 0x4d89f1
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456420
mov eax, edi
mov ecx, 0x12
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d8920
Function at 0x4da5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da6c6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x203370d1c922c76c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd165d76cb8682033
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0d04020105020b
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd010b0d04020105
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x305020b0d010109
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x4da660
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4da692
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4da6b7
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x41]
cmp rsi, 0xe
jb 0x4da642
jmp 0x4da6ab
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
nop
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456420
mov eax, edi
mov ecx, 0xe
nop
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004da5e0

Function at 0x4ddac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ddbe7
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xc6b361f2a7da6f74
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xe5c6b361f2a7da6f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6f52736cfa7665b5
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6c69bf6da1737f66
mov qword [rsp + 0x50], rdx
movabs rdx, 0x73b323f651576ae9
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a1d0f1a141c041f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc031a1d0f1a141c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x140f191e1b1b0317
mov qword [rsp + 0x27], rdx
movabs rdx, 0x71d16061a091f1e
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1402120f0f191208
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4ddb89
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 - 0x2b]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 - 0x2b]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
cmp rax, 0x22
jge 0x4ddbb7
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x21
jae 0x4ddbda
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x21
jb 0x4ddb6c
jmp 0x4ddbce
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x21
call fcn.00444780
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00456420
mov eax, edi
mov ecx, 0x21
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004ddac0
Function at 0x4e39a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e3a8c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1920555048306532
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x200d061920555048
mov qword [rsp + 0x30], rdx
movabs rdx, 0x410431727422204e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd07050302050509
mov qword [rsp + 0x19], rdx
movabs rdx, 0x20807040d070503
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x212100002110d0b
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4e3a2a
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x13]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x14
jge 0x4e3a5c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e3a7f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x13]
cmp rsi, 0x13
jb 0x4e3a10
jmp 0x4e3a73
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456420
mov eax, edi
mov ecx, 0x13
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004e39a0

Function at 0x4e7e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7f3e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x70ad9e5e6b6fb091
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x8e706970
movabs rdx, 0x404010105040601
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0xa000605
xor eax, eax
jmp 0x4e7ee1
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4e7f0e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4e7f31
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4e7ec4
jmp 0x4e7f25
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456420
mov eax, edi
mov ecx, 0xb
call fcn.00456420
nop
nop
call fcn.00454140
jmp fcn.004e7e80
Function at 0x4e8ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8be7
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x768f8887d9736f70
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x74a867866f969420
mov qword [rsp + 0x42], rdx
movabs rdx, 0x599670c9706174a8
mov qword [rsp + 0x48], rdx
movabs rdx, 0x836589c16f73a233
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a051b0c02071006
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1714030413120501
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1306141d16170404
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe150a0901060904
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4e8b85
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
mov byte [rsp + rdi + 0x3a], r9b
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4e8bb7
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0x1e
jae 0x4e8bda
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4e8b6e
jmp 0x4e8bce
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00456420
mov eax, edi
mov ecx, 0x1e
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004e8ae0

Function at 0x4e8c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8d1d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xb85f69b2c06d756e
mov qword [rsp + 0x43], rdx
movabs rdx, 0xc00ab4d0b4b747b5
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x2574756fbfc00ab4
mov qword [rsp + 0x50], rdx
movabs rdx, 0xabcd6e6fa01a6615
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1c18100409170904
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x15190d0a03091506
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf1b080e0c1c1709
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x60c04091506070b
mov qword [rsp + 0x33], rdx
movabs rdx, 0x306101c03141908
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x4e8cc0
movzx r9d, byte [rsp + rsi + 0x43]
sub r9d, edx
lea edx, [r9 - 0x2f]
mov byte [rsp + rdi + 0x43], dl
lea edx, [r8 - 0x2f]
mov byte [rsp + rsi + 0x43], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4e8ced
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4e8d10
movzx r8d, byte [rsp + rdi + 0x43]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4e8c9d
jmp 0x4e8d04
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.00444780
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00456420
mov eax, edi
mov ecx, 0x1d
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004e8c00
Function at 0x4e94a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e95f8
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x73d9fbef6eb487aa
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x65ef73af20649cf3
mov qword [rsp + 0x53], rdx
movabs rdx, 0x61bc74e17265ef73
mov qword [rsp + 0x58], rdx
movabs rdx, 0x65209672182c736e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x20836ee98ae46467
mov qword [rsp + 0x68], rdx
movabs rdx, 0xd0c56f3f8475b778
mov qword [rsp + 0x70], rdx
movabs rdx, 0xc001a0925132320
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc010c001a092513
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x29232c1317230e26
mov qword [rsp + 0x23], rdx
movabs rdx, 0x21f05042811
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1808052311230d02
mov qword [rsp + 0x33], rdx
movabs rdx, 0x29262806022c1718
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x2118042c082b111d
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x4e9596
movzx r9d, byte [rsp + rsi + 0x4b]
sub r9d, edx
lea edx, [r9 - 0x11]
mov byte [rsp + rdi + 0x4b], dl
lea edx, [r8 - 0x11]
mov byte [rsp + rsi + 0x4b], dl
add rax, 2
cmp rax, 0x32
jge 0x4e95c8
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4e95eb
movzx r8d, byte [rsp + rdi + 0x4b]
sub r8d, edx
nop dword [rax + rax]
cmp rsi, 0x2d
jb 0x4e9579
jmp 0x4e95df
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x2d
call fcn.00444780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00456420
mov eax, edi
mov ecx, 0x2d
call fcn.00456420
nop
call fcn.00454140
nop dword [rax]
jmp fcn.004e94a0

Function at 0x4e9f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9ff2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x80e14756f6d729f
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xc86f437c89080e14
mov qword [rsp + 0x30], rdx
movabs rdx, 0x907000a070c0605
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x707080a0a090a
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4e9f8c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4e9fbe
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e9fe5
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0xd
jb 0x4e9f72
jmp 0x4e9fd5
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00456420
mov eax, edi
mov ecx, 0xd
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004e9f20