joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4da9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dab0c
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x7214df3432db72ca
mov qword [rsp + 0x4d], rdx
movabs rdx, 0x4720747214df3432
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1db2f5bd25e78fc1
mov qword [rsp + 0x58], rdx
movabs rdx, 0x63d08da5e994bbd7
mov qword [rsp + 0x60], rdx
movabs rdx, 0x6465d86c653f3197
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1715200214140320
mov qword [rsp + 0x19], rdx
movabs rdx, 0x16181d0417152002
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd0e041c101b140c
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc170a04050d0610
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x414130c131f0405
mov qword [rsp + 0x35], rdx
movabs rdx, 0x1b191d16110f100c
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x41d1f0b06121f
mov qword [rsp + 0x45], rdx
xor eax, eax
jmp 0x4daaa4
movzx r9d, byte [rsp + rsi + 0x4d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x73]
mov byte [rsp + rdi + 0x4d], dl
mov byte [rsp + rsi + 0x4d], r8b
add rax, 2
cmp rax, 0x34
jge 0x4daadc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x23
jae 0x4daaff
movzx r8d, byte [rsp + rdi + 0x4d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x73]
cmp rsi, 0x23
jb 0x4daa8a
jmp 0x4daaf3
xor eax, eax
lea rbx, [rsp + 0x4d]
mov ecx, 0x23
call fcn.0045af60
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.004605c0
mov eax, edi
mov ecx, 0x23
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004da9c0

Function at 0x4de6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de7bd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6c0f632365ba7070
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xbd6f7207b60d6c0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x203060d0a090608
mov qword [rsp + 0x18], rdx
movabs rdx, 0x8010203060d0a09
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x209040909020907
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x4de760
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x3f]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x3f]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4de78d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4de7b0
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4de742
jmp 0x4de7a4
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0045af60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004605c0
mov eax, edi
mov ecx, 0xe
call fcn.004605c0
nop
nop dword [rax]
call fcn.0045e2e0
jmp fcn.004de6e0
Function at 0x4df3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df4da
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6163694b656d9ae4
mov qword [rsp + 0x43], rdx
movabs rdx, 0x74c0a898e6a1a819
mov qword [rsp + 0x4b], rdx
movabs rdx, 0xc970c46faf74c0a8
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6592af11f9a8698a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x130b1a091610191a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd000008130b1a09
mov qword [rsp + 0x23], rdx
movabs rdx, 0x131217170c121817
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1080b1704140e14
mov qword [rsp + 0x33], rdx
movabs rdx, 0x913151b0d0a0e0c
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x4df477
movzx r9d, byte [rsp + rsi + 0x43]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x43], dl
mov byte [rsp + rsi + 0x43], r8b
add rax, 2
cmp rax, 0x24
jge 0x4df4a9
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4df4cd
movzx r8d, byte [rsp + rdi + 0x43]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 0x1d
jb 0x4df45d
jmp 0x4df4c1
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.0045af60
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.004605c0
mov eax, edi
mov ecx, 0x1d
call fcn.004605c0
nop
call fcn.0045e2e0
nop
jmp fcn.004df3c0

Function at 0x4e0a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e0acc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x77e96eeb77f09afc
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xfdfefd727677e96e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x602030801070804
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa00010c0803040b
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4e0a6f
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0x10
jge 0x4e0a9c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e0abf
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4e0a52
jmp 0x4e0ab3
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.0045af60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.004605c0
mov eax, edi
mov ecx, 0xd
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004e0a00
Function at 0x4e1680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e177b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x34f8e46308e8c035
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc673442a196e0721
mov qword [rsp + 0x40], rdx
movabs rdx, 0x67aba21061651a63
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15091515000d0609
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf0c0309160c0103
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc02110803050f0c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30c070106020b14
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e1719
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x20]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4e174b
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4e176e
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x20]
cmp rsi, 0x18
jb 0x4e16ff
jmp 0x4e1762
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.0045af60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004605c0
mov eax, edi
mov ecx, 0x18
call fcn.004605c0
nop
nop dword [rax + rax]
call fcn.0045e2e0
jmp fcn.004e1680

Function at 0x4e2ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e2b92
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x65a79961a99c7865
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xd3cc9cdcd165a799
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2080209090b0c06
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x602050b030a0208
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4e2b2c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x45]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0xe
jge 0x4e2b5e
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e2b85
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x45]
cmp rsi, 0xd
jb 0x4e2b12
jmp 0x4e2b75
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.0045af60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.004605c0
mov eax, edi
mov ecx, 0xd
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004e2ac0
Function at 0x4e2ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e2cac
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x709c799220b66f1a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30149964acd272fa
mov qword [rsp + 0x48], rdx
movabs rdx, 0x73d13f64b869c4b2
mov qword [rsp + 0x50], rdx
movabs rdx, 0x800080f0015080e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5160800080f0015
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1316040b020a0411
mov qword [rsp + 0x28], rdx
movabs rdx, 0x130515080e061315
mov qword [rsp + 0x30], rdx
movabs rdx, 0x815020b0d1110
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e2c48
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x56]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x22
jge 0x4e2c7c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4e2c9f
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x56]
cmp rsi, 0x18
jb 0x4e2c2e
jmp 0x4e2c93
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.0045af60
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004605c0
mov eax, edi
mov ecx, 0x18
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004e2ba0

Function at 0x4e3340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e33fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x123a34f815086e47
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x376c
movabs rdx, 0x705030902070604
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x9000202
xor eax, eax
jmp 0x4e33a0
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x4e33cd
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4e33f0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4e3383
jmp 0x4e33e4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0045af60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004605c0
mov eax, edi
mov ecx, 0xa
call fcn.004605c0
nop
nop dword [rax]
call fcn.0045e2e0
jmp fcn.004e3340
Function at 0x4e5880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e597d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7e917c7494837692
mov qword [rsp + 0x35], rdx
movabs rdx, 0x7376a17e917c7494
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7478849a576f5365
mov qword [rsp + 0x40], rdx
movabs rdx, 0x802100101030903
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3030209000c070f
mov qword [rsp + 0x21], rdx
movabs rdx, 0x901050803030209
mov qword [rsp + 0x25], rdx
movabs rdx, 0x2060c0e05050702
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4e5920
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 6]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 6]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4e594d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e5970
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4e58ff
jmp 0x4e5964
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0045af60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004605c0
mov eax, edi
mov ecx, 0x13
call fcn.004605c0
nop
nop dword [rax]
call fcn.0045e2e0
jmp fcn.004e5880

Function at 0x4e5ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5fa6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x63d47a509ca306d5
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6e65a8cda40aa665
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0c01090006010a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20a0a0a0b0c0109
mov qword [rsp + 0x20], rdx
movabs rdx, 0x90603050b090d
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4e5f40
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4e5f72
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4e5f97
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 0x10
jb 0x4e5f22
jmp 0x4e5f8b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.0045af60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004605c0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004e5ec0
Function at 0x4e6240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6326
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa17272799d95c652
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9878839b86949a9b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0704030f0a0102
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20d0c0704030f0a
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc050d0f0b090508
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4e62c0
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x33]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4e62f2
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4e6317
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x33]
cmp rsi, 0x10
jb 0x4e62a2
jmp 0x4e630b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.0045af60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004605c0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004e6240

Function at 0x4e7980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7a6a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe502f90c5223282d
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xe1e502f90c522328
mov qword [rsp + 0x30], rdx
movabs rdx, 0x65f2da46e23def4c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50a0c0a0102080e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x60c0f0c0c07050a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x40b0c08080e0a
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4e7a0d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 + 0x50]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 + 0x50]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x16
jge 0x4e7a3a
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4e7a5d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4e79f0
jmp 0x4e7a51
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0045af60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004605c0
mov eax, edi
mov ecx, 0x11
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004e7980
Function at 0x4ea3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea4aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7989d074617f69bc
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x6f776d7989d07461
mov qword [rsp + 0x30], rdx
movabs rdx, 0x576bc2a48263786c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10000e0606090605
mov qword [rsp + 0x19], rdx
movabs rdx, 0x90c010610000e06
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc010f1001000502
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4ea44d
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x14
jge 0x4ea47a
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4ea49d
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4ea430
jmp 0x4ea491
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0x13
call fcn.0045af60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004605c0
mov eax, edi
mov ecx, 0x13
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004ea3c0

Function at 0x4eb3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb47d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7394a3799595bb8d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd9afa09046747394
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2060104040c0d04
mov qword [rsp + 0x18], rdx
movabs rdx, 0x30c02060104040c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb050a0a02040001
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x4eb420
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x19]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x19]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4eb44d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4eb470
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4eb402
jmp 0x4eb464
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0045af60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004605c0
mov eax, edi
mov ecx, 0xe
call fcn.004605c0
nop
nop dword [rax]
call fcn.0045e2e0
jmp fcn.004eb3a0
Function at 0x4ee6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee7cc
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5b619079898696df
mov qword [rsp + 0x37], rdx
movabs rdx, 0xd3f39f4efa74bd50
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xc4d3f39f4efa74bd
mov qword [rsp + 0x40], rdx
movabs rdx, 0x57656cb7619c4879
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd0f13150915150b
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20d0400010b0e00
mov qword [rsp + 0x23], rdx
movabs rdx, 0x7101403020d0400
mov qword [rsp + 0x27], rdx
movabs rdx, 0x5040e070e090e07
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4ee768
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4ee79c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4ee7bf
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 0x19
jb 0x4ee74e
jmp 0x4ee7b3
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.0045af60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004605c0
mov eax, edi
mov ecx, 0x19
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004ee6c0

Function at 0x4ee7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee89e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x115c5d1f5840655f
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x344b7272
movabs rdx, 0xb00030a0702040a
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x5060702
xor eax, eax
jmp 0x4ee841
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 0x24]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 0x24]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x4ee86e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4ee891
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x4ee824
jmp 0x4ee885
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.0045af60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004605c0
mov eax, edi
mov ecx, 0xc
call fcn.004605c0
nop
nop
call fcn.0045e2e0
jmp fcn.004ee7e0
Function at 0x4eeec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eefcc
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x65cec275d47465d7
mov qword [rsp + 0x37], rdx
movabs rdx, 0xd8652570c96fa322
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x69d8652570c96fa3
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8f6be8974930e6f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170b06151206030d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6130918051508
mov qword [rsp + 0x25], rdx
movabs rdx, 0xb000613091805
mov qword [rsp + 0x27], rdx
movabs rdx, 0x503161505080f0f
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4eef68
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4eef9c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4eefbf
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0x19
jb 0x4eef4e
jmp 0x4eefb3
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.0045af60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004605c0
mov eax, edi
mov ecx, 0x19
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004eeec0

Function at 0x4eefe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef0cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x14720168a3746588
mov qword [rsp + 0x37], rdx
movabs rdx, 0xbd14720168a37465
mov qword [rsp + 0x38], rdx
movabs rdx, 0x57ab1404ac083086
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3090c080a030309
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb05070e0f0f0a07
mov qword [rsp + 0x27], rdx
movabs rdx, 0x9080f0d09000e0c
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4ef06a
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4b]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x18
jge 0x4ef09c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4ef0bf
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4b]
cmp rsi, 0x11
jb 0x4ef050
jmp 0x4ef0b3
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.0045af60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004605c0
mov eax, edi
mov ecx, 0x11
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004eefe0
Function at 0x4f0520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f05dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xeae369eb83cdd378
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xde
movabs rdx, 0x20404030706
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x8080100
xor eax, eax
nop
jmp 0x4f0580
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x7d]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4f05ad
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4f05d0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4f0562
jmp 0x4f05c4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0045af60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004605c0
mov eax, edi
mov ecx, 9
call fcn.004605c0
nop
nop dword [rax]
call fcn.0045e2e0
jmp fcn.004f0520

Function at 0x4f33c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f34a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe661d9008573fbf3
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6ef8650b6f8450f5
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc020a010c04030e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc0407080c020a01
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0e0e0f05000201
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4f3440
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4f3472
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4f3497
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0x10
jb 0x4f3422
jmp 0x4f348b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.0045af60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004605c0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004f33c0