joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c2e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2f4c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x42413c492074496d
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xdc733942
movabs rdx, 0x307060608050101
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa0a04070a0a0307
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4c2ee5
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1c]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4c2f1c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4c2f3f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1c]
cmp rsi, 0xb
jb 0x4c2ecb
jmp 0x4c2f33
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.004669c0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046c880
mov eax, edi
mov ecx, 0xb
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.004c2e80
Function at 0x4c5340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c542c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2efa74cb6c1565c0
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb05a2efa74cb6c15
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa8656955becf60ef
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb110c0a08111006
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0d0d020d050b04
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2000610091100
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4c53ca
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6d]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c53fc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c541f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6d]
cmp rsi, 0x12
jb 0x4c53b0
jmp 0x4c5413
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.004669c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0046c880
mov eax, edi
mov ecx, 0x12
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.004c5340

Function at 0x4c5c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5d3d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb36be961a66ecf59
mov qword [rsp + 0x31], rdx
movabs rdx, 0xbbe9a9b1d75620b3
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30b000a010e07
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7070c060c0e0003
mov qword [rsp + 0x21], rdx
movabs rdx, 0x70d0d0c030c050b
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4c5ce0
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 - 0x61]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 - 0x61]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x4c5d0d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c5d30
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x4c5cc2
jmp 0x4c5d24
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.004669c0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0046c880
mov eax, edi
mov ecx, 0xf
call fcn.0046c880
nop
nop dword [rax]
call fcn.0046a5a0
jmp fcn.004c5c60
Function at 0x4c5d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x4c5edb
push rbp
mov rbp, rsp
sub rsp, 0xb0
movabs rdx, 0x3a59148b7152c135
mov qword [rsp + 0x72], rdx
movabs rdx, 0x2bee656c80cd723f
mov qword [rsp + 0x7a], rdx
movabs rdx, 0x2c002e61af2e2bee
mov qword [rsp + 0x80], rdx
movabs rdx, 0x7216740b69e13c98
mov qword [rsp + 0x88], rdx
movabs rdx, 0x6320e6b14c6e0e07
mov qword [rsp + 0x90], rdx
movabs rdx, 0x6e76a90f6a38762e
mov qword [rsp + 0x98], rdx
movabs rdx, 0x5c1cba96e3e1bb0d
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x3d119ddd69163b0d
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x2a0b280002292e08
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2f2c361e1a063717
mov qword [rsp + 0x20], rdx
lea rdi, [rsp + 0x22]
lea rsi, [0x005f32e2]
nop word [rax + rax]
nop word [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0046ce9a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4c5e71
movzx r9d, byte [rsp + rsi + 0x72]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x13]
mov byte [rsp + rdi + 0x72], dl
mov byte [rsp + rsi + 0x72], r8b
add rax, 2
cmp rax, 0x5a
jge 0x4c5ea8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3e
jae 0x4c5ece
movzx r8d, byte [rsp + rdi + 0x72]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x13]
nop dword [rax + rax]
cmp rsi, 0x3e
jb 0x4c5e57
jmp 0x4c5ec2
xor eax, eax
lea rbx, [rsp + 0x72]
mov ecx, 0x3e
call fcn.004669c0
add rsp, 0xb0
pop rbp
ret
mov eax, esi
mov ecx, 0x3e
call fcn.0046c880
mov eax, edi
mov ecx, 0x3e
call fcn.0046c880
nop
nop dword [rax + rax]
call fcn.0046a5a0
jmp fcn.004c5d60

Function at 0x4c6260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c635d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd8b670be178fd0b8
mov qword [rsp + 0x39], rdx
movabs rdx, 0x30c799756cc956d8
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1243c47465436d75
mov qword [rsp + 0x48], rdx
movabs rdx, 0x90c0e03070416
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x110406070d020506
mov qword [rsp + 0x27], rdx
movabs rdx, 0x307110406070d02
mov qword [rsp + 0x29], rdx
movabs rdx, 0x4140c010e140c15
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4c6300
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x48]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x48]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4c632d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c6350
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4c62df
jmp 0x4c6344
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.004669c0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0046c880
mov eax, edi
mov ecx, 0x17
call fcn.0046c880
nop
nop dword [rax]
call fcn.0046a5a0
jmp fcn.004c6260
Function at 0x4c9ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x4c9c7b
push rbp
mov rbp, rsp
sub rsp, 0xa8
movabs rdx, 0x37e8634a4066653d
mov qword [rsp + 0x6c], rdx
movabs rdx, 0x6a35161d457b33f9
mov qword [rsp + 0x74], rdx
movabs rdx, 0x495666206a35161d
mov qword [rsp + 0x78], rdx
movabs rdx, 0x3c58565b746d426c
mov qword [rsp + 0x80], rdx
movabs rdx, 0x6f20e6bb4c7e6560
mov qword [rsp + 0x88], rdx
movabs rdx, 0xf32720774724200f
mov qword [rsp + 0x90], rdx
movabs rdx, 0x7272648c305b5820
mov qword [rsp + 0x98], rdx
movabs rdx, 0x50856c336220654e
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x7240e382a210b0d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x372a152b380e0608
mov qword [rsp + 0x26], rdx
movabs rdx, 0x815352e0424372a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1a1b150a0013090c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6062f3b2b270e31
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1a201e2a0e1c3112
mov qword [rsp + 0x44], rdx
movabs rdx, 0x903183a180b263a
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x1b352d20060a280e
mov qword [rsp + 0x54], rdx
movabs rdx, 0x930160f2e150a11
mov qword [rsp + 0x5c], rdx
movabs rdx, 0x3b0d341e26041a26
mov qword [rsp + 0x64], rdx
xor eax, eax
jmp 0x4c9c18
movzx r9d, byte [rsp + rsi + 0x6c]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x6c], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x6c], dl
add rax, 2
cmp rax, 0x4e
jge 0x4c9c48
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3c
jae 0x4c9c6e
movzx r8d, byte [rsp + rdi + 0x6c]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x3c
jb 0x4c9bfb
jmp 0x4c9c62
xor eax, eax
lea rbx, [rsp + 0x6c]
mov ecx, 0x3c
call fcn.004669c0
add rsp, 0xa8
pop rbp
ret
mov eax, esi
mov ecx, 0x3c
call fcn.0046c880
mov eax, edi
mov ecx, 0x3c
call fcn.0046c880
nop
nop dword [rax + rax]
call fcn.0046a5a0
jmp fcn.004c9ac0
Function at 0x4cd080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd1b8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xcf7ecb56556665db
mov qword [rsp + 0x43], rdx
movabs rdx, 0xcdaee19158cf7ecb
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe4d25165c89a42eb
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe862bae1aa6e20e9
mov qword [rsp + 0x58], rdx
movabs rdx, 0x65637eba73ea0389
mov qword [rsp + 0x60], rdx
movabs rdx, 0x9131e2103140d18
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1c1212171915221a
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1f0f1c1212171915
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa00080c17210417
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x101e0b0c071d061f
mov qword [rsp + 0x33], rdx
movabs rdx, 0x142105061014050c
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x4cd155
movzx r9d, byte [rsp + rsi + 0x43]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rdi + 0x43], dl
mov byte [rsp + rsi + 0x43], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4cd188
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4cd1ab
movzx r8d, byte [rsp + rdi + 0x43]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6f]
nop
cmp rsi, 0x25
jb 0x4cd13b
jmp 0x4cd19f
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x25
call fcn.004669c0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.0046c880
mov eax, edi
mov ecx, 0x25
call fcn.0046c880
nop
call fcn.0046a5a0
nop dword [rax]
jmp fcn.004cd080

Function at 0x4cd340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4cd4b2
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0xc4988fd36c66cb72
mov qword [rsp + 0x59], rdx
movabs rdx, 0x7930de650a814a02
mov qword [rsp + 0x61], rdx
movabs rdx, 0x9d06d0bdfb657479
mov qword [rsp + 0x68], rdx
movabs rdx, 0xf46544646461e986
mov qword [rsp + 0x70], rdx
movabs rdx, 0x7962c41160bc9d8b
mov qword [rsp + 0x78], rdx
movabs rdx, 0x8efe1e9761e9ff97
mov qword [rsp + 0x80], rdx
movabs rdx, 0x241e092221082816
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2328040e091c042c
mov qword [rsp + 0x25], rdx
movabs rdx, 0x232d132e2328040e
mov qword [rsp + 0x29], rdx
movabs rdx, 0x22122b2909172312
mov qword [rsp + 0x31], rdx
movabs rdx, 0x2204090b22180d06
mov qword [rsp + 0x39], rdx
movabs rdx, 0x211c201f14152312
mov qword [rsp + 0x41], rdx
movabs rdx, 0xb18241307050a24
mov qword [rsp + 0x49], rdx
movabs rdx, 0x928041627142801
mov qword [rsp + 0x51], rdx
xor eax, eax
jmp 0x4cd44d
movzx r9d, byte [rsp + rsi + 0x59]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rdi + 0x59], dl
mov byte [rsp + rsi + 0x59], r8b
add rax, 2
cmp rax, 0x3c
jge 0x4cd47f
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x4cd4a5
movzx r8d, byte [rsp + rdi + 0x59]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6f]
cmp rsi, 0x2f
jb 0x4cd433
jmp 0x4cd499
xor eax, eax
lea rbx, [rsp + 0x59]
mov ecx, 0x2f
call fcn.004669c0
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.0046c880
mov eax, edi
mov ecx, 0x2f
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.004cd340
Function at 0x4ce4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce586
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x90372fb00085309
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x657a6909
movabs rdx, 0x20000010704
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x3000602
xor eax, eax
jmp 0x4ce520
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x55]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4ce552
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ce577
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x55]
cmp rsi, 0xb
jb 0x4ce504
jmp 0x4ce56b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0046c880
mov eax, edi
mov ecx, 0xb
nop
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.004ce4c0

Function at 0x4d9940
Capabilities:
Hash data using fnv

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da094
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [rsp + 0x20], rax
movabs rcx, 0xcbf29ce484222325
jmp 0x4d996d
lea rax, [rdx + 0x10]
dec rbx
mov rcx, rsi
test rbx, rbx
jle 0x4d9bf1
mov rdx, rax
mov rsi, qword [rax]
nop dword [rax]
test rsi, rsi
je 0x4d9c1d
mov edi, dword [rsi + 0x10]
shr edi, 1
mov r8, qword [rax + 8]
and edi, 0x3f
lea rax, [0x005f6ba0]
jmp qword [rax + rdi*8]
mov rax, rcx
add rsp, 0x10
pop rbp
ret
nop dword [rax]
call fcn.004da2a0
call fcn.00460e00
mov rbx, rax
lea rax, [0x00585fe0]
call fcn.00464d20
inc rax
nop dword [rax]
cmp rax, r8
jge 0x4d9c4e
mov r9, qword [rsi + rax*8]
xor r10d, r10d
jmp 0x4d9c83
lea rdi, [0x00586060]
mov rsi, rcx
movabs rcx, 0x100000001b3
jmp 0x4d9963
movzx r11d, r9b
xor rcx, r11
inc r10
shr r9, 8
movabs r11, 0x100000001b3
imul rcx, r11
cmp r10, 8
jl 0x4d9c67
jmp 0x4d9c39
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.0046a5a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.004d9940

Function at 0x4da220
Capabilities:
Hash data using fnv

Disassembly:
test byte [rax], al
mov rcx, rbx
and ebx, 0x7f
shl rbx, 5
lea rdx, [rax + rbx]
xor eax, eax
jmp 0x4da237
inc rax
cmp rax, 4
jge 0x4da24f
lea rbx, [rdx + rax*8]
mov rbx, qword [rbx]
cmp rbx, rcx
jne 0x4da234
mov eax, 1
ret
xor eax, eax
movabs rbx, 0xcbf29ce484222325
jmp 0x4da260
inc rax
cmp rax, 4
jge 0x4da26e
mov rsi, qword [rdx + rax*8]
xor edi, edi
jmp 0x4da297
and ebx, 3
lea rdx, [rdx + rbx*8]
xchg qword [rdx], rcx
xor eax, eax
ret
movzx r8d, sil
xor rbx, r8
inc rdi
shr rsi, 8
movabs r8, 0x100000001b3
imul rbx, r8
cmp rdi, 8
jl 0x4da27b
jmp 0x4da25d
Function at 0x4dafa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4db0d8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xa7be69bbaa7653e9
mov qword [rsp + 0x44], rdx
movabs rdx, 0xa36c8170a7be69bb
mov qword [rsp + 0x48], rdx
movabs rdx, 0xdb6e791566b77265
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8e61b22b28cd780b
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe13a29d319891c74
mov qword [rsp + 0x60], rdx
movabs rdx, 0x16231d101e1f040e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1b1009011d14061e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x200a01191b100901
mov qword [rsp + 0x24], rdx
movabs rdx, 0x16201d0b09002313
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x310200410231b19
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe07000a0f0f1b09
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x4db075
movzx r9d, byte [rsp + rsi + 0x44]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6c]
mov byte [rsp + rdi + 0x44], dl
mov byte [rsp + rsi + 0x44], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4db0a8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x4db0cb
movzx r8d, byte [rsp + rdi + 0x44]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6c]
nop
cmp rsi, 0x24
jb 0x4db05b
jmp 0x4db0bf
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x24
call fcn.004669c0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.0046c880
mov eax, edi
mov ecx, 0x24
call fcn.0046c880
nop
call fcn.0046a5a0
nop dword [rax]
jmp fcn.004dafa0

Function at 0x4e8720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e881d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x727a617665e17ae0
mov qword [rsp + 0x35], rdx
movabs rdx, 0xe86ec9727a617665
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7b0f690863759ef9
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20606080a060808
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1010f080400070c
mov qword [rsp + 0x23], rdx
movabs rdx, 0x120a01010f080400
mov qword [rsp + 0x25], rdx
movabs rdx, 0xb010a110c00080a
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4e87c0
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 - 0x6b]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4e87ed
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e8810
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4e879f
jmp 0x4e8804
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.004669c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0046c880
mov eax, edi
mov ecx, 0x13
call fcn.0046c880
nop
nop dword [rax]
call fcn.0046a5a0
jmp fcn.004e8720
Function at 0x4e8840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e892a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x694c2f697961665e
mov qword [rsp + 0x33], rdx
movabs rdx, 0x6f727b8c6a694c2f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6c61727920745b72
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0407000e000600
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x60e0707010d0314
mov qword [rsp + 0x23], rdx
movabs rdx, 0x11090b040d080f07
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4e88cd
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 + 0x16]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 + 0x16]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
cmp rax, 0x18
jge 0x4e88fa
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e891d
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x4e88b0
jmp 0x4e8911
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.004669c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0046c880
mov eax, edi
mov ecx, 0x15
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.004e8840

Function at 0x4ea100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea1cc
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x1f256e83cf7e650e
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x1110
movabs rdx, 0x6070306020407
mov qword [rsp + 0x18], rdx
movabs rdx, 0x908030300070006
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x4ea164
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
cmp rax, 0xe
jge 0x4ea19c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4ea1bf
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
cmp rsi, 0xa
jb 0x4ea14a
jmp 0x4ea1b3
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.004669c0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.0046c880
mov eax, edi
mov ecx, 0xa
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.004ea100
Function at 0x4edca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4edd8c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x20e8696c61ff3169
mov qword [rsp + 0x34], rdx
movabs rdx, 0x7529273d20e8696c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x216440d1203b3555
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0610100d090209
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc0d010608110a06
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc130e090c100602
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4edd2a
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xf]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x18
jge 0x4edd5c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4edd7f
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xf]
cmp rsi, 0x14
jb 0x4edd10
jmp 0x4edd73
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.004669c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0046c880
mov eax, edi
mov ecx, 0x14
call fcn.0046c880
nop
call fcn.0046a5a0
jmp fcn.004edca0

Function at 0x4efea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eff9d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8afb635f9ba36f63
mov qword [rsp + 0x38], rdx
movabs rdx, 0x744983e3e64761e9
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7984069cff076220
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc040b081416140a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x70d15090e0c1706
mov qword [rsp + 0x20], rdx
movabs rdx, 0x607140d0d160213
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc131412150a1203
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4eff40
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 - 0x70]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 - 0x70]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4eff6d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4eff90
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x4eff1f
jmp 0x4eff84
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.004669c0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.0046c880
mov eax, edi
mov ecx, 0x18
call fcn.0046c880
nop
nop dword [rax]
call fcn.0046a5a0
jmp fcn.004efea0
Function at 0x4f52c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f53bb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6d616ecf0cfeb8c9
mov qword [rsp + 0x34], rdx
movabs rdx, 0xbe20641a6d616ecf
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1aa0ffa8f7a47004
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb00010e02080e08
mov qword [rsp + 0x18], rdx
movabs rdx, 0x50f11040f03040c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2081008050f1104
mov qword [rsp + 0x24], rdx
movabs rdx, 0x104120812030313
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4f5359
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4f538b
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4f53ae
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0x14
jb 0x4f533f
jmp 0x4f53a2
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.004669c0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0046c880
mov eax, edi
mov ecx, 0x14
call fcn.0046c880
nop
nop dword [rax + rax]
call fcn.0046a5a0
jmp fcn.004f52c0

Function at 0x4f59a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f5abd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xfb7c1d303c9116b
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xed650c3719b9c689
mov qword [rsp + 0x45], rdx
movabs rdx, 0x21c831ed650c3719
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc86369c8bdd31711
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1406030a110d1607
mov qword [rsp + 0x19], rdx
movabs rdx, 0x91a051a1406030a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4021a1417141704
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1315080b0d1a120c
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x100f0105130b040d
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x4f5a60
movzx r9d, byte [rsp + rsi + 0x3d]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x3d], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x3d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4f5a8d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4f5ab0
movzx r8d, byte [rsp + rdi + 0x3d]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4f5a3d
jmp 0x4f5aa4
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.004669c0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.0046c880
mov eax, edi
mov ecx, 0x1b
call fcn.0046c880
nop
nop dword [rax]
call fcn.0046a5a0
jmp fcn.004f59a0