joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b80c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x4b8292
push rbp
mov rbp, rsp
sub rsp, 0xa8
movabs rdx, 0x613d0a656cf8b014
mov qword [rsp + 0x64], rdx
movabs rdx, 0x662fd019613d0a65
mov qword [rsp + 0x68], rdx
movabs rdx, 0x126156402c63b6c6
mov qword [rsp + 0x70], rdx
movabs rdx, 0x18ea733b555d6575
mov qword [rsp + 0x78], rdx
movabs rdx, 0x4365904769285913
mov qword [rsp + 0x80], rdx
movabs rdx, 0x699edd1dc96e6f20
mov qword [rsp + 0x88], rdx
movabs rdx, 0x368164040737546e
mov qword [rsp + 0x90], rdx
movabs rdx, 0x706165e66e69b0b5
mov qword [rsp + 0x98], rdx
movabs rdx, 0xfabffa73692bb134
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x41081d18092a2d3d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf210a2f1b280713
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9080f210a2f1b28
mov qword [rsp + 0x24], rdx
movabs rdx, 0x102d430a0f271006
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3e29300520230843
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2400c1e34131632
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x2d2e33381a163c38
mov qword [rsp + 0x44], rdx
movabs rdx, 0xd003e3838383542
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x130f1e001c1a0f01
mov qword [rsp + 0x54], rdx
movabs rdx, 0x332a433202342e3e
mov qword [rsp + 0x5c], rdx
xor eax, eax
jmp 0x4b8224
movzx r9d, byte [rsp + rsi + 0x64]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x64], dl
mov byte [rsp + rsi + 0x64], r8b
add rax, 2
cmp rax, 0x4a
jge 0x4b825c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x44
jae 0x4b8285
movzx r8d, byte [rsp + rdi + 0x64]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
cmp rsi, 0x44
jb 0x4b820a
jmp 0x4b8276
xor eax, eax
lea rbx, [rsp + 0x64]
mov ecx, 0x44
call fcn.0045b080
add rsp, 0xa8
pop rbp
ret
mov eax, esi
mov ecx, 0x44
nop dword [rax]
call fcn.004607e0
mov eax, edi
mov ecx, 0x44
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004b80c0
Function at 0x4beea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4befa8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa58158ea49d761d8
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x6c6cfd72b3affc4b
mov qword [rsp + 0x42], rdx
movabs rdx, 0x2c6573e6575d6c6c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa7865e620657fca
mov qword [rsp + 0x50], rdx
movabs rdx, 0x170d160000101615
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x17120c1a0205110c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x120a060402131104
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20d041d06090b07
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4bef4b
movzx r9d, byte [rsp + rsi + 0x3a]
sub r9d, edx
lea edx, [r9 - 0x61]
mov byte [rsp + rdi + 0x3a], dl
lea edx, [r8 - 0x61]
mov byte [rsp + rsi + 0x3a], dl
add rax, 2
cmp rax, 0x20
jge 0x4bef78
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4bef9b
movzx r8d, byte [rsp + rdi + 0x3a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4bef2e
jmp 0x4bef8f
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.0045b080
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.004607e0
mov eax, edi
mov ecx, 0x1e
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004beea0

Function at 0x4c0760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c084a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2e90635671669381
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x7e2e906356716693
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9487922e99756c82
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe04100c03000108
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4100f0301060e04
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x60803090c0f010c
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4c07ed
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 + 6]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 + 6]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x16
jge 0x4c081a
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c083d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4c07d0
jmp 0x4c0831
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004607e0
mov eax, edi
mov ecx, 0x11
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004c0760
Function at 0x4c0fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c10da
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2e74419b44dcdb72
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd21f28e8dac46156
mov qword [rsp + 0x46], rdx
movabs rdx, 0x496ed21f28e8dac4
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1bd6f4f8dd253bf4
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1401171604040305
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x418140117160404
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4160e1213151702
mov qword [rsp + 0x26], rdx
movabs rdx, 0x141905180b170d0f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0d180d1317130a
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4c1077
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x25]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4c10a9
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4c10cd
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x25]
cmp rsi, 0x1a
jb 0x4c105d
jmp 0x4c10c1
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0045b080
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004607e0
mov eax, edi
mov ecx, 0x1a
call fcn.004607e0
nop
call fcn.0045e500
nop
jmp fcn.004c0fc0

Function at 0x4c2de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2e9d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd47ac51c89b8a68b
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xcb
movabs rdx, 0x106050404040002
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x8070503
xor eax, eax
nop
jmp 0x4c2e40
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4c2e6d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4c2e90
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4c2e22
jmp 0x4c2e84
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0045b080
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004607e0
mov eax, edi
mov ecx, 9
call fcn.004607e0
nop
nop dword [rax]
call fcn.0045e500
jmp fcn.004c2de0
Function at 0x4c4260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c438c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x45eda7656c9db98f
mov qword [rsp + 0x43], rdx
movabs rdx, 0xd6e17cc75c45eda7
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6f79736571dcd8f0
mov qword [rsp + 0x50], rdx
movabs rdx, 0x68912d6e7fe82c66
mov qword [rsp + 0x58], rdx
movabs rdx, 0x65cca26c5d2053f7
mov qword [rsp + 0x60], rdx
movabs rdx, 0x7221d1b05130a08
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1c0e200e101d0d01
mov qword [rsp + 0x23], rdx
movabs rdx, 0x220902221e180b17
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xa0e050f00161e1d
mov qword [rsp + 0x33], rdx
movabs rdx, 0x6060c1800230908
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x4c4326
movzx r9d, byte [rsp + rsi + 0x43]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x61]
mov byte [rsp + rdi + 0x43], dl
mov byte [rsp + rsi + 0x43], r8b
add rax, 2
cmp rax, 0x28
jge 0x4c435c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x4c437f
movzx r8d, byte [rsp + rdi + 0x43]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x61]
cmp rsi, 0x25
jb 0x4c430c
jmp 0x4c4373
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x25
call fcn.0045b080
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.004607e0
mov eax, edi
mov ecx, 0x25
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004c4260

Function at 0x4c4ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c4bcc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf22e53ce6c1de4df
mov qword [rsp + 0x35], rdx
movabs rdx, 0xd1a6e7f22e53ce6c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x730374bc422ece75
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1010f070f021109
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x60506110200080a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x611040c06000900
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4c4b6a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c4b9c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c4bbf
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0x13
jb 0x4c4b50
jmp 0x4c4bb3
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0045b080
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004607e0
mov eax, edi
mov ecx, 0x13
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004c4ae0
Function at 0x4c9860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x4c9a1b
push rbp
mov rbp, rsp
sub rsp, 0xa8
movabs rdx, 0xda8fca45f6f82541
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe44f34e27cd719f1
mov qword [rsp + 0x70], rdx
movabs rdx, 0xae575655549f0cf8
mov qword [rsp + 0x78], rdx
movabs rdx, 0x66f916630e575ad5
mov qword [rsp + 0x80], rdx
movabs rdx, 0xa46d162b106928f1
mov qword [rsp + 0x88], rdx
movabs rdx, 0x242dd82172c3706f
mov qword [rsp + 0x90], rdx
movabs rdx, 0x33bef4577acacc97
mov qword [rsp + 0x98], rdx
movabs rdx, 0xa43bae38000f3534
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x2734351705313f06
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb12070a3f0c300b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30230b12070a3f0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3a2a02200b3d023b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2e1b2c183235340f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3124362c202c1e11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12233410080b0d25
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a2e060327272d21
mov qword [rsp + 0x50], rdx
movabs rdx, 0x27060f2f21093a09
mov qword [rsp + 0x58], rdx
movabs rdx, 0x3d2c3601053e1d0c
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4c99b8
movzx r9d, byte [rsp + rsi + 0x68]
sub r9d, edx
lea edx, [r9 - 0x76]
mov byte [rsp + rdi + 0x68], dl
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x68], dl
add rax, 2
cmp rax, 0x4a
jge 0x4c99e8
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x40
jae 0x4c9a0e
movzx r8d, byte [rsp + rdi + 0x68]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x40
jb 0x4c999b
jmp 0x4c9a02
xor eax, eax
lea rbx, [rsp + 0x68]
mov ecx, 0x40
call fcn.0045b080
add rsp, 0xa8
pop rbp
ret
mov eax, esi
mov ecx, 0x40
call fcn.004607e0
mov eax, edi
mov ecx, 0x40
call fcn.004607e0
nop
nop dword [rax + rax]
call fcn.0045e500
jmp fcn.004c9860
Function at 0x4cade0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4caf18
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x506c61a6656ca798
mov qword [rsp + 0x46], rdx
movabs rdx, 0x6141506c61a6656c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x746164ed926bb4e3
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2a0f5d20be578075
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd4d41079ea20df75
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1f0c190713151f1f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x170b200818001b00
mov qword [rsp + 0x22], rdx
movabs rdx, 0x190e1b20170b2008
mov qword [rsp + 0x26], rdx
movabs rdx, 0x21000a150e04141d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1f1f180b20171f12
mov qword [rsp + 0x36], rdx
movabs rdx, 0x70d0c011d042020
mov qword [rsp + 0x3e], rdx
xor eax, eax
jmp 0x4caeb5
movzx r9d, byte [rsp + rsi + 0x46]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5a]
mov byte [rsp + rdi + 0x46], dl
mov byte [rsp + rsi + 0x46], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4caee8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x4caf0b
movzx r8d, byte [rsp + rdi + 0x46]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5a]
nop
cmp rsi, 0x22
jb 0x4cae9b
jmp 0x4caeff
xor eax, eax
lea rbx, [rsp + 0x46]
mov ecx, 0x22
call fcn.0045b080
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.004607e0
mov eax, edi
mov ecx, 0x22
call fcn.004607e0
nop
call fcn.0045e500
nop dword [rax]
jmp fcn.004cade0

Function at 0x4d03a0
Capabilities:
Hash data using fnv

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0af4
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [rsp + 0x20], rax
movabs rcx, 0xcbf29ce484222325
jmp 0x4d03cd
lea rax, [rdx + 0x10]
dec rbx
mov rcx, rsi
test rbx, rbx
jle 0x4d0651
mov rdx, rax
mov rsi, qword [rax]
nop dword [rax]
test rsi, rsi
je 0x4d067d
mov edi, dword [rsi + 0x10]
shr edi, 1
mov r8, qword [rax + 8]
and edi, 0x3f
lea rax, [0x005e11c0]
jmp qword [rax + rdi*8]
mov rax, rcx
add rsp, 0x10
pop rbp
ret
nop dword [rax]
call fcn.004d0d00
call fcn.004557c0
mov rbx, rax
lea rax, [0x00573040]
call fcn.004596e0
inc rax
nop dword [rax]
cmp rax, r8
jge 0x4d06ae
mov r9, qword [rsi + rax*8]
xor r10d, r10d
jmp 0x4d06e3
lea rdi, [0x005730c0]
mov rsi, rcx
movabs rcx, 0x100000001b3
jmp 0x4d03c3
movzx r11d, r9b
xor rcx, r11
inc r10
shr r9, 8
movabs r11, 0x100000001b3
imul rcx, r11
cmp r10, 8
jl 0x4d06c7
jmp 0x4d0699
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.0045e500
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.004d03a0
Function at 0x4d0c80
Capabilities:
Hash data using fnv

Disassembly:
test byte [rax], al
mov rcx, rbx
and ebx, 0x7f
shl rbx, 5
lea rdx, [rax + rbx]
xor eax, eax
jmp 0x4d0c97
inc rax
cmp rax, 4
jge 0x4d0caf
lea rbx, [rdx + rax*8]
mov rbx, qword [rbx]
cmp rbx, rcx
jne 0x4d0c94
mov eax, 1
ret
xor eax, eax
movabs rbx, 0xcbf29ce484222325
jmp 0x4d0cc0
inc rax
cmp rax, 4
jge 0x4d0cce
mov rsi, qword [rdx + rax*8]
xor edi, edi
jmp 0x4d0cf7
and ebx, 3
lea rdx, [rdx + rbx*8]
xchg qword [rdx], rcx
xor eax, eax
ret
movzx r8d, sil
xor rbx, r8
inc rdi
shr rsi, 8
movabs r8, 0x100000001b3
imul rbx, r8
cmp rdi, 8
jl 0x4d0cdb
jmp 0x4d0cbd

Function at 0x4d1ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1fdb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x20f59f6cee9d8769
mov qword [rsp + 0x38], rdx
movabs rdx, 0xffb909650c13f017
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9ef8fc61abb87973
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160105010a08130f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3160b0d1712020b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe1603160b0d1712
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60e030309051512
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d1f79
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4d1fab
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d1fce
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
cmp rsi, 0x18
jb 0x4d1f5f
jmp 0x4d1fc2
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.0045b080
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004607e0
mov eax, edi
mov ecx, 0x18
call fcn.004607e0
nop
nop dword [rax + rax]
call fcn.0045e500
jmp fcn.004d1ee0
Function at 0x4e5420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e553d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xa696e75726d0163
mov qword [rsp + 0x45], rdx
movabs rdx, 0x7265ac6ecbe5bacf
mov qword [rsp + 0x4d], rdx
movabs rdx, 0xc805697265ac6ecb
mov qword [rsp + 0x50], rdx
movabs rdx, 0x829f569c20b52e1e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x140917111a141718
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x11100d0915010a10
mov qword [rsp + 0x25], rdx
movabs rdx, 0x100a10070711191a
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x171519111303120b
mov qword [rsp + 0x35], rdx
movabs rdx, 0x810030d08030315
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x4e54e0
movzx r9d, byte [rsp + rsi + 0x45]
sub r9d, edx
lea edx, [r9 - 0x28]
mov byte [rsp + rdi + 0x45], dl
lea edx, [r8 - 0x28]
mov byte [rsp + rsi + 0x45], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4e550d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4e5530
movzx r8d, byte [rsp + rdi + 0x45]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4e54bd
jmp 0x4e5524
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x1b
call fcn.0045b080
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.004607e0
mov eax, edi
mov ecx, 0x1b
call fcn.004607e0
nop
nop dword [rax]
call fcn.0045e500
jmp fcn.004e5420

Function at 0x4e59e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5aca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1c3079f56e3b6f63
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xcad51c3079f56e3b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x643821f32ded72f0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7051006080a0910
mov qword [rsp + 0x18], rdx
movabs rdx, 0x4070e0f0c0f0705
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x70d06020f080d04
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4e5a6d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x4f]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x4f]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x16
jge 0x4e5a9a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4e5abd
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4e5a50
jmp 0x4e5ab1
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004607e0
mov eax, edi
mov ecx, 0x12
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004e59e0
Function at 0x4e74c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e758c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2dae35e7656c6966
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3bf2063b3f032dae
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa070c0b08040806
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x50c0d0b09060a07
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4e752f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x47]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x47]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x4e755c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4e757f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4e7512
jmp 0x4e7573
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0045b080
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004607e0
mov eax, edi
mov ecx, 0xe
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004e74c0

Function at 0x4e7860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e794c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x27662c4a1c653a35
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3c4127662c4a1c65
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2654e344d41ba20
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8030b0f040d0704
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf08051108030b0f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1090c050e0809
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4e78ea
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1c]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x14
jge 0x4e791c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4e793f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1c]
cmp rsi, 0x12
jb 0x4e78d0
jmp 0x4e7933
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0045b080
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004607e0
mov eax, edi
mov ecx, 0x12
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004e7860
Function at 0x4e7da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7eac
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6ffe74d238287037
mov qword [rsp + 0x37], rdx
movabs rdx, 0x4169f808345d473c
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xd54169f808345d47
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14332272cc520570
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd0c0d1409060a0b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x13120c040f181210
mov qword [rsp + 0x21], rdx
movabs rdx, 0x17000f0a13041312
mov qword [rsp + 0x27], rdx
movabs rdx, 0x41603080214040c
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4e7e48
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x11]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4e7e7c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4e7e9f
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x11]
cmp rsi, 0x19
jb 0x4e7e2e
jmp 0x4e7e93
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.0045b080
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004607e0
mov eax, edi
mov ecx, 0x19
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004e7da0

Function at 0x4e9b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9bcc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x725a69586e7f7369
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x265d6f5c074f725a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80504080c030908
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20d080a05060805
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4e9b6f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x15]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x15]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x4e9b9c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4e9bbf
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4e9b52
jmp 0x4e9bb3
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0045b080
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004607e0
mov eax, edi
mov ecx, 0xe
call fcn.004607e0
nop
call fcn.0045e500
jmp fcn.004e9b00