joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4dc120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc21b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6317cda7616c7404
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x64c8c7740b306317
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd5b1c5d120641061
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf1514041404130c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x130c08150b131405
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x15091412130c0815
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90014060f040908
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4dc1b9
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2c]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4dc1eb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4dc20e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2c]
cmp rsi, 0x16
jb 0x4dc19f
jmp 0x4dc202
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004521e0
mov eax, edi
mov ecx, 0x16
call fcn.004521e0
nop
nop dword [rax + rax]
call fcn.0044ff60
jmp fcn.004dc120

Function at 0x4dc240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc33d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x651a61785f62756c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3c3d651a61785f62
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x876d5e7a68647290
mov qword [rsp + 0x26], rdx
movabs rdx, 0x406080e090f0509
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa0d010800000500
mov qword [rsp + 0x36], rdx
movabs rdx, 0x11010a0d01080000
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60d070e03050e06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4dc2e0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0xe]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4dc30d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4dc330
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x4dc2bf
jmp 0x4dc324
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.00441b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004521e0
mov eax, edi
mov ecx, 0x12
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004dc240
Function at 0x4dd540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dd64c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7406b06fa1205334
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6e61846bebace4b9
mov qword [rsp + 0x21], rdx
movabs rdx, 0x296e61846bebace4
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb9b9693decae7261
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc14150d00060910
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb10100c170d0918
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1705031817150b10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80a130500100610
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4dd5e8
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x69]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4dd61c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4dd63f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x69]
cmp rsi, 0x19
jb 0x4dd5ce
jmp 0x4dd633
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004521e0
mov eax, edi
mov ecx, 0x19
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004dd540

Function at 0x4de440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de54c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf16e752415299401
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1774b9356496c3d0
mov qword [rsp + 0x22], rdx
movabs rdx, 0x64f31774b9356496
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf06d69541bc92520
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1901140a10090c07
mov qword [rsp + 0x34], rdx
movabs rdx, 0x81209041301140c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x3100d08120904
mov qword [rsp + 0x40], rdx
movabs rdx, 0x191503020a120f10
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4de4e8
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x24]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4de51c
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4de53f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x24]
cmp rsi, 0x1a
jb 0x4de4ce
jmp 0x4de533
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004521e0
mov eax, edi
mov ecx, 0x1a
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004de440
Function at 0x4e0e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e0efd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd4cdba7331ad6de0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x64decc36c374d4cd
mov qword [rsp + 0x22], rdx
movabs rdx, 0xaf57695420f2dbe9
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x314080a020b0506
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc0a140e0b090a0a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe070c100f030c0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1508080107091000
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e0ea0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4e0ecd
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4e0ef0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4e0e7f
jmp 0x4e0ee4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004521e0
mov eax, edi
mov ecx, 0x16
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004e0e00

Function at 0x4e0f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e101b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8f3208b0d3ce1ee
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xebf9db08f3208b0d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfb65eaf26f0d7261
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90d010f0207040e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x11120a0308000903
mov qword [rsp + 0x36], rdx
movabs rdx, 0x90e11120a030800
mov qword [rsp + 0x38], rdx
movabs rdx, 0x101204060a12070e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e0fb9
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x61]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4e0feb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e100e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x61]
cmp rsi, 0x13
jb 0x4e0f9f
jmp 0x4e1002
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.00441b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004521e0
mov eax, edi
mov ecx, 0x13
call fcn.004521e0
nop
nop dword [rax + rax]
call fcn.0044ff60
jmp fcn.004e0f20
Function at 0x4e1040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e113b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x73487968a471c8a0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x87be7c7453ba8269
mov qword [rsp + 0x24], rdx
movabs rdx, 0x657ea3619ab6a1e5
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5061306020a1011
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf16151103010912
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x3090e0f161511
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1400050a0d150902
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e10d9
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x41]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4e110b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4e112e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x41]
cmp rsi, 0x18
jb 0x4e10bf
jmp 0x4e1122
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004521e0
mov eax, edi
mov ecx, 0x18
call fcn.004521e0
nop
nop dword [rax + rax]
call fcn.0044ff60
jmp fcn.004e1040

Function at 0x4e1160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e125d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4ddb612ad63e30e7
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe7d5e8c7534ddb61
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd18ed9e32050d1eb
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc131307120f0904
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2120902130d0b0e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x901120d02120902
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3110a0614140900
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e1200
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4e122d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e1250
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x4e11df
jmp 0x4e1244
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004521e0
mov eax, edi
mov ecx, 0x15
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004e1160
Function at 0x4e1aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1b9d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x64ace4e69e0b2934
mov qword [rsp + 0x19], rdx
movabs rdx, 0xdb340b2f2d20c864
mov qword [rsp + 0x20], rdx
movabs rdx, 0xed4752de32647241
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb061204030b160a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0b000205010808
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80a06130e080c01
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0d150e0f061401
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e1b40
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4e1b6d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e1b90
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4e1b1f
jmp 0x4e1b84
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004521e0
mov eax, edi
mov ecx, 0x17
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004e1aa0

Function at 0x4e3060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e315b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x835b5a8e777e6154
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x64707f91835b5a8e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5e5f5e2b8f409487
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4020e03090c080d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x12090e11070d0610
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x30606090f091209
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0705130709020a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e30f9
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x25]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4e312b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4e314e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x25]
cmp rsi, 0x14
jb 0x4e30df
jmp 0x4e3142
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004521e0
mov eax, edi
mov ecx, 0x14
call fcn.004521e0
nop
nop dword [rax + rax]
call fcn.0044ff60
jmp fcn.004e3060
Function at 0x4e4c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e4d5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5965355065436343
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x75840105e206564
mov qword [rsp + 0x26], rdx
movabs rdx, 0x660e5b5420472440
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb050b110c0f100e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4160f0d0e021204
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc0c04160f0d0e02
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150117070c0c0e10
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e4d00
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4e4d2d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4e4d50
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4e4cdf
jmp 0x4e4d44
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004521e0
mov eax, edi
mov ecx, 0x18
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004e4c60

Function at 0x4e6520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e663d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x74d76145034155eb
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x30612af1df6e7246
mov qword [rsp + 0x23], rdx
movabs rdx, 0xca30612af1df6e72
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3b6da7dad14407c8
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc03130d180f1802
mov qword [rsp + 0x34], rdx
movabs rdx, 0x161308110c03130d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100b111216061302
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10030d08140c030b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x311021518000d06
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e65e0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4e660d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4e6630
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4e65bd
jmp 0x4e6624
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441b80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004521e0
mov eax, edi
mov ecx, 0x19
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004e6520
Function at 0x4e6fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e70e8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x206ca672b9da65fa
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc175a0966fa8db45
mov qword [rsp + 0x26], rdx
movabs rdx, 0xae6eb4a9c175a096
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x656d04546a6472a3
mov qword [rsp + 0x32], rdx
movabs rdx, 0x20f0019030c0f0a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x13170a100f19190d
mov qword [rsp + 0x42], rdx
movabs rdx, 0x140d13170e0f1317
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50c111919001109
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e708b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x11]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x11]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x4e70b8
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4e70db
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4e706e
jmp 0x4e70cf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.00441b80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.004521e0
mov eax, edi
mov ecx, 0x1c
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004e6fe0

Function at 0x4e7100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e71fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb423c2d5f5012ee5
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x646eea1e534165b4
mov qword [rsp + 0x24], rdx
movabs rdx, 0x16e0fdd8201e1b61
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x15090c050c030710
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb060c1110160213
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x151514000b060c11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1502140205140904
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e71a0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x6c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x6c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4e71cd
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e71f0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x4e717f
jmp 0x4e71e4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004521e0
mov eax, edi
mov ecx, 0x17
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004e7100
Function at 0x4e86c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e87bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x22722e6f3a0a4d50
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3f5c616355204422
mov qword [rsp + 0x26], rdx
movabs rdx, 0x656d6e136b647261
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x140b020813080703
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa020e010a050e03
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x20e0a020e010a05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12080d031300030d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e8760
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4e878d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e87b0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4e873f
jmp 0x4e87a4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004521e0
mov eax, edi
mov ecx, 0x17
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004e86c0

Function at 0x4e9880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e996c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6174bc37d8ed2c46
mov qword [rsp + 0x18], rdx
movabs rdx, 0x64346174bc37d8ed
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa4cc2c5426644461
mov qword [rsp + 0x22], rdx
movabs rdx, 0x308050d0b031008
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2040b0d11080308
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80d030b110b0f01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e990a
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x4e993c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4e995f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 0x12
jb 0x4e98f0
jmp 0x4e9953
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004521e0
mov eax, edi
mov ecx, 0x12
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004e9880
Function at 0x4e9fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea08a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8a6b706fadaff2eb
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x90c9ad74a18a6b70
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd2c6690c486672d2
mov qword [rsp + 0x28], rdx
movabs rdx, 0x510080c0a0f0007
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30a05070a110102
mov qword [rsp + 0x38], rdx
movabs rdx, 0x211070f130d0b14
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ea02d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x4ea05a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ea07d
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4ea010
jmp 0x4ea071
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00441b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004521e0
mov eax, edi
mov ecx, 0x15
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004e9fa0
Function at 0x4ed240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed326
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x525e5a5f51335e5c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6979007031534d52
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd03000501060c06
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10b09030d030005
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0708040b04070e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ed2c0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4ed2f2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4ed317
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 0xf
jb 0x4ed2a2
jmp 0x4ed30b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004521e0
mov eax, edi
mov ecx, 0xf
nop
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004ed240

Function at 0x4ee020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee0dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf63a30b4a1bf3075
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x30
movabs rdx, 0x707070407040002
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 3
xor eax, eax
nop
jmp 0x4ee080
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4ee0ad
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4ee0d0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4ee062
jmp 0x4ee0c4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004521e0
mov eax, edi
mov ecx, 9
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004ee020