joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d94c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d95c8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6572b6b94374b70e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf744e7256572b6b9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1ac37221bf2b95f7
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0010090c00080c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd00040813100c05
mov qword [rsp + 0x36], rdx
movabs rdx, 0x50f0d0004081310
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11209100f100e01
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d9562
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x33]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x33]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1a
jge 0x4d958f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d95bb
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x4d9545
jmp 0x4d95af
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x14
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004d94c0

Function at 0x4d95e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d96d6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x277224bb43426535
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4277224bb434265
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x172f596341363c0e
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb09090000040f08
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20f0b0909000004
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa070e100c050510
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d9673
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x46]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x4d96a2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4d96c9
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x4d9656
nop
jmp 0x4d96bd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.004d95e0
Function at 0x4dab20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dac06
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x27e373e4e774e239
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x3a5f2224
movabs rdx, 0xa01040800060906
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7040a0104080006
mov qword [rsp + 0x28], rdx
movabs rdx, 0x301010b06030406
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4daba0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4dabcd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4dabf4
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xc
jb 0x4dab82
jmp 0x4dabe8
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004dab20

Function at 0x4dbb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dbc88
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x595d482e5a00504a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x48403b4255546459
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6559165465676946
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc00030e040a1411
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb14151415020608
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x7070e040b141514
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc050b010d110a01
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4dbc20
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 6]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4dbc52
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4dbc7b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 6]
cmp rsi, 0x17
jb 0x4dbc05
jmp 0x4dbc6f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x17
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004dbb80
Function at 0x4dbca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dbd72
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x5c723f5454236835
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x45685d61
movabs rdx, 0x40b0b040b00020b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x102090607050409
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4dbd0e
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x1d]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4dbd3b
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4dbd65
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4dbcf1
jmp 0x4dbd56
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xc
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004dbca0
Function at 0x4defa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df072
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xac6594c3f7b5a8fa
mov qword [rsp + 0x19], rdx
movabs rdx, 0x659cc0ac6594c3f7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x900050701030104
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9010208
xor eax, eax
jmp 0x4df00e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x3a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x3a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4df03b
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4df065
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4deff1
jmp 0x4df056
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004defa0
Function at 0x4e0460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e054b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x23d34365c0cb0a57
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6fc76c302923d343
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0b010b03070c0b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb080c0b010b0307
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb08030609030102
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e04e4
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x4c]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x4e0517
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x4e053e
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4e04c7
jmp 0x4e0532
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xd
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004e0460

Function at 0x4e0a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e0b48
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x751d69b641bf819a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9ee5b446c3b0a49e
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf01060e02020d04
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe0a0b09090f0f01
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe06080a0900060b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e0ae1
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x4e0b13
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4e0b3b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4d]
cmp rsi, 0x10
jb 0x4e0ac7
jmp 0x4e0b2f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004e0a60
Function at 0x4e2520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e25fc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x8976a68b57685d57
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x85836a8976a68b57
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2030a0904050107
mov qword [rsp + 0x28], rdx
movabs rdx, 0x101080405010404
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e2592
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4e25c8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4e25ef
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1d]
nop dword [rax]
cmp rsi, 0xb
jb 0x4e2578
jmp 0x4e25e3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004e2520

Function at 0x4e3660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e372b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x5d6b666f73505276
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x6470
movabs rdx, 0x705020207020701
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x90109
xor eax, eax
jmp 0x4e36c6
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4e36f7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4e371e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4e36a9
jmp 0x4e3712
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xa
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004e3660

Function at 0x4e39a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e3a5c
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0xfd776f644d48164e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x201010200030702
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4e39f4
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4e3a28
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4e3a4f
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
nop
cmp rsi, 8
jb 0x4e39da
jmp 0x4e3a43
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044a200
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004e39a0
Function at 0x4e5ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5de8
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x7420f66c62c3bab9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x312256a4206f7420
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb095fa656e651c5a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x721d9234cb657473
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa1267943a1a5675c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1b1a1521251e0c0d
mov qword [rsp + 0x44], rdx
movabs rdx, 0x22010b1b1f150f24
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x1c191f0c22010b1b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10241301020f150f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x130e191b1005200c
mov qword [rsp + 0x60], rdx
movabs rdx, 0xa14190d10010015
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x4e5d80
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2c
jge 0x4e5db2
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x26
jae 0x4e5ddb
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x26
jb 0x4e5d62
jmp 0x4e5dcf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x26
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x26
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x26
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004e5ca0

Function at 0x4e5e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5eeb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xa020187e6cce5fa9
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x20030ac223b917a0
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa090501000d0c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8080b0c000a0905
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0d080200070904
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e5e84
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x45]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x45]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x14
jge 0x4e5eb7
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x4e5ede
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x4e5e67
jmp 0x4e5ed2
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xf
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004e5e00
Function at 0x4e61a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e627c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x652069bec3c0bbba
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xfc1cf6f72c36520
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd0d0d0b03010d0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80c050b080402
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e6212
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4e6248
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4e626f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5e]
nop dword [rax]
cmp rsi, 0xe
jb 0x4e61f8
jmp 0x4e6263
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044a200
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xe
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004e61a0

Function at 0x4f0240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f0368
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xd6dce1dae7cbf475
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7b0f79c2abb20c65
mov qword [rsp + 0x25], rdx
movabs rdx, 0x787b0f79c2abb20c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x652abec7d065d0b5
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc06050f0f03170c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x5100c06050f0f03
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7040c1405021403
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa110211100b0116
mov qword [rsp + 0x48], rdx
movabs rdx, 0x171516120e170916
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f0300
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x4f0332
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4f035b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x19
jb 0x4f02e3
jmp 0x4f034f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x19
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f0240
Function at 0x4f19a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1a68
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x5d7071658a64656d
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x7c
movabs rdx, 0x808070006000308
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x305
xor eax, eax
jmp 0x4f1a00
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x11]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x4f1a32
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4f1a5b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x11]
cmp rsi, 9
jb 0x4f19e6
jmp 0x4f1a4f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f19a0

Function at 0x4f1a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1b48
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x226127b920256854
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x203030702020503
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x405
xor eax, eax
nop
jmp 0x4f1ae0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4f1b12
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4f1b3b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5e]
cmp rsi, 8
jb 0x4f1ac2
jmp 0x4f1b2f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f1a80

Function at 0x4f1b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f1c28
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xb22a64c1dddc6126
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x706060304000206
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 6
xor eax, eax
nop
jmp 0x4f1bc0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4f1bf2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4f1c1b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 8
jb 0x4f1ba2
jmp 0x4f1c0f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.0045f5c0
mov eax, edi
mov ecx, 8
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f1b60
Function at 0x4f23a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f248b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x1662563a2644535e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1c1d52345b5f2664
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1000b03050a020a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0e01000b03050a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0d00010f090507
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4f2424
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x16]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x16]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x4f2457
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4f247e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4f2407
jmp 0x4f2472
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004f23a0

Function at 0x4f2e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2ef6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6e45697561645153
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x641d656e45697561
mov qword [rsp + 0x20], rdx
movabs rdx, 0x635f7f5420646367
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0711070b120801
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd04070609050c05
mov qword [rsp + 0x38], rdx
movabs rdx, 0x607040c0d040610
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f2e93
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4f2ec2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f2ee9
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4f2e76
nop
jmp 0x4f2edd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x13
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.004f2e00