joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e0c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e0d87
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x4f7222573870295a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x103e7c204a1e654e
mov qword [rsp + 0x21], rdx
movabs rdx, 0x45103e7c204a1e65
mov qword [rsp + 0x22], rdx
movabs rdx, 0x78656f6e306b5a1b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4a6439060a3368c4
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1c6f506153651569
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf2620010a03140e
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1e0d1c0704242204
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x191b241603261e0d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b131a20120b0311
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1010241e01280503
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1b24001a0120161d
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4e0d27
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x2e
jge 0x4e0d57
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x29
jae 0x4e0d7a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x29
jb 0x4e0d0a
jmp 0x4e0d6e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x29
call fcn.00443420
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.00454ec0
mov eax, edi
mov ecx, 0x29
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004e0c40

Function at 0x4e1720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e181b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9508dd656c06656d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6652e29508dd656c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd4694e7349171896
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb05121208050507
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x8020d0500000900
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa0708020d050000
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6120c0000090007
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e17b9
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4e17eb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e180e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0x13
jb 0x4e179f
jmp 0x4e1802
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00454ec0
mov eax, edi
mov ecx, 0x13
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.004e1720
Function at 0x4e1c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1d28
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8790092b766d1573
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xbd202c9465fdde00
mov qword [rsp + 0x23], rdx
movabs rdx, 0x20bd202c9465fdde
mov qword [rsp + 0x24], rdx
movabs rdx, 0xfe650e2e0274053c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5180c090c140307
mov qword [rsp + 0x34], rdx
movabs rdx, 0x607090a04060309
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x50a160b0607090a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120a080f04160114
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e1ccb
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x4e1cf8
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4e1d1b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4e1cae
jmp 0x4e1d0f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00454ec0
mov eax, edi
mov ecx, 0x19
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004e1c20

Function at 0x4e20c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e2186
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x18b3f5350cc72069
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x3a
movabs rdx, 0x706030502030408
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x703
xor eax, eax
nop
jmp 0x4e2120
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4e2152
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4e2177
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 9
jb 0x4e2102
jmp 0x4e216b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00454ec0
mov eax, edi
mov ecx, 9
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004e20c0
Function at 0x4e29a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e2a8c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2ee7b965ef660472
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xba61282ee7b965ef
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb0a66f6cea43c2c7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50c110c06030e0a
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc05010e080d050c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1010d0e050b1208
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e2a2a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4e2a5c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e2a7f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x13
jb 0x4e2a10
jmp 0x4e2a73
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00454ec0
mov eax, edi
mov ecx, 0x13
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004e29a0

Function at 0x4e33e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e3507
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x87a260656c66653c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2075176f6d87a260
mov qword [rsp + 0x20], rdx
movabs rdx, 0xed2080946957592e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x793b2d2d6d6e705c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6564526c596a6545
mov qword [rsp + 0x38], rdx
movabs rdx, 0x72212050e190018
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1d151b14070a1123
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc1020201411181b
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf09231b051b1508
mov qword [rsp + 0x58], rdx
movabs rdx, 0x220010161f182206
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4e34a9
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x2e]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x2e]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x28
jge 0x4e34d7
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x25
jae 0x4e34fa
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x25
jb 0x4e348c
jmp 0x4e34ee
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x25
call fcn.00443420
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00454ec0
mov eax, edi
mov ecx, 0x25
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004e33e0
Function at 0x4e3d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4e3e8c
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0xa563d307e3448d63
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2d797dfb9206c84
mov qword [rsp + 0x25], rdx
movabs rdx, 0xe202d797dfb9206c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8b73f1d96ead09db
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x74495959a8f80284
mov qword [rsp + 0x36], rdx
movabs rdx, 0x65753761b0e572d8
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1f0b040b0b0f2308
mov qword [rsp + 0x46], rdx
movabs rdx, 0x121c0c171d1a0326
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xb1b121c0c171d1a
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd0b1b020c1f210f
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb0d1116111e1101
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1b0d1e0e19051004
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe17172315181321
mov qword [rsp + 0x70], rdx
movabs rdx, 0x171c1f03021a2407
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4e3e27
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x3a
jge 0x4e3e5c
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x29
jae 0x4e3e7f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
cmp rsi, 0x29
jb 0x4e3e0d
jmp 0x4e3e73
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x29
call fcn.00443420
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x29
call fcn.00454ec0
mov eax, edi
mov ecx, 0x29
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004e3d20

Function at 0x4e5200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e52ec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xfe6e79f66efd3609
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf2fe6e79f66efd36
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x643f6982f57d8776
mov qword [rsp + 0x24], rdx
movabs rdx, 0x501020a0d0f0009
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10b02040501020a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0007050c0d0801
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e528a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x4e52bc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4e52df
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0x11
jb 0x4e5270
jmp 0x4e52d3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00454ec0
mov eax, edi
mov ecx, 0x11
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004e5200
Function at 0x4e7ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7bf8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x2cf80620c23e8473
mov qword [rsp + 0x19], rdx
movabs rdx, 0x12cf80620c23e84
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3827f315691f0479
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa670220cf320170d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x116c0aafe2f8ddd3
mov qword [rsp + 0x32], rdx
movabs rdx, 0x20081c101b011516
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x141b0d201b16161e
mov qword [rsp + 0x42], rdx
movabs rdx, 0x70e110d151a141b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x506060215181d0e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a03181c121d1e0a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x190f15051a0e110b
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4e7b98
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x2e
jge 0x4e7bc8
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4e7beb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x21
jb 0x4e7b7b
jmp 0x4e7bdf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x21
call fcn.00443420
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00454ec0
mov eax, edi
mov ecx, 0x21
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.004e7ac0

Function at 0x4e8020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], 0
movabs rdx, 0x550977494fe3738a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x607010406040205
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x101
xor eax, eax
jmp 0x4e8074
movzx r8d, byte [rsp + rbx + 0x1e]
lea edx, [r8 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
cmp rax, 0xa
jge 0x4e80a8
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x4e80e5
movzx edi, byte [rsp + rsi + 0x1e]
lea edi, [rdi + rdx]
lea edi, [rdi + 0x67]
nop dword [rax + rax]
cmp rbx, 8
jb 0x4e805a
jmp 0x4e80d7
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x4e80c1
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x4e80b5
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
add rsp, 0x30
pop rbp
ret
mov eax, ebx
mov ecx, 8
nop
call fcn.00454ec0
mov eax, esi
mov ecx, 8
call fcn.00454ec0
nop
int3
Function at 0x4e8520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e85dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x77ce596970c77370
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xe6
movabs rdx, 0x506070806020702
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x806
xor eax, eax
nop
jmp 0x4e8580
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4e85ad
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4e85d0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4e8562
jmp 0x4e85c4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00454ec0
mov eax, edi
mov ecx, 9
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004e8520

Function at 0x4e9520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e9606
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x65c568bcc0bea290
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd07f6b6fbd060c65
mov qword [rsp + 0x24], rdx
movabs rdx, 0x60d000d010e0001
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2080a0a060d000d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe03040200040409
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4e95a0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x71]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4e95d2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4e95f7
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x71]
cmp rsi, 0xf
jb 0x4e9582
jmp 0x4e95eb
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00454ec0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004e9520
Function at 0x4ea660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea746
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x9098857e7f949b7f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x649865875ede74f1
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20102030808030a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80506060c0e0201
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4070a0307050b00
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ea6e0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x30]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4ea712
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4ea737
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x30]
cmp rsi, 0x10
jb 0x4ea6c2
jmp 0x4ea72b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00454ec0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004ea660

Function at 0x4eb3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb49d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xcfdebe6c75aeadd6
mov qword [rsp + 0x18], rdx
movabs rdx, 0xdf0f73e73bcccfde
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa09090c0c010802
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc090a09090c0c01
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70d05000c0d0601
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4eb440
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x5e]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x5e]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4eb46d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4eb490
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4eb422
jmp 0x4eb484
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00454ec0
mov eax, edi
mov ecx, 0xe
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004eb3c0
Function at 0x4eb860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb95b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa62676501435d92c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x746fcbefc870a626
mov qword [rsp + 0x20], rdx
movabs rdx, 0x82ceb0b65166f69
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb1100050102120c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb15111202100404
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11070615140411
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13110a0a0a090603
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4eb8f9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3a]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4eb92b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4eb94e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3a]
cmp rsi, 0x16
jb 0x4eb8df
jmp 0x4eb942
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00454ec0
mov eax, edi
mov ecx, 0x16
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.004eb860
Function at 0x4f3f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x4f40b5
push rbp
mov rbp, rsp
sub rsp, 0xb8
movabs rdx, 0x1f0a25ccd88b3682
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x788c63a16f9a121f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x65e56f7b746e9371
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc10d9f626974610c
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf12fa30c3703456f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x656cba1bcb65a02e
mov qword [rsp + 0x46], rdx
movabs rdx, 0x9a26ff62e186f20
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xa978fad22825f744
mov qword [rsp + 0x56], rdx
movabs rdx, 0xce35c035e03a301b
mov qword [rsp + 0x5e], rdx
movabs rdx, 0x1021280b0b13333c
mov qword [rsp + 0x66], rdx
lea rdi, [rsp + 0x68]
lea rsi, [0x005e56d2]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004554fa
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4f4054
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x52
jge 0x4f4082
movzx edx, byte [rsp + rax + 0x66]
movzx esi, byte [rsp + rax + 0x67]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x4f40a8
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x47
jb 0x4f4037
nop
jmp 0x4f409c
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x47
call fcn.00443420
add rsp, 0xb8
pop rbp
ret
mov eax, esi
mov ecx, 0x47
call fcn.00454ec0
mov eax, edi
mov ecx, 0x47
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004f3f60

Function at 0x4f4480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f459a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x63f072deec3a2071
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xdac85d61e4cfd14a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20e67279dac85d61
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd647f473d9136953
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x16030d001a041601
mov qword [rsp + 0x36], rdx
movabs rdx, 0x91916030d001a04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1111120611100f14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1004170a10081910
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b0e010b0d0d000f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4f4537
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x22
jge 0x4f4569
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4f458d
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0x1c
jb 0x4f451d
jmp 0x4f4581
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.00443420
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1c
call fcn.00454ec0
nop
call fcn.00452c40
nop
jmp fcn.004f4480
Function at 0x4feec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fefaa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xee4847e2333231d2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe6ee4847e2333231
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7146626dfac0c3d4
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb08000c05061007
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd070506000a0b0b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0a0e040e0e0709
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4fef4d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x7f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x7f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x4fef7a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4fef9d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4fef30
jmp 0x4fef91
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00454ec0
mov eax, edi
mov ecx, 0x11
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004feec0

Function at 0x4ffbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ffcaa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb49dd989ae1ed730
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x38b49dd989ae1ed7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x786630dd63a6addb
mov qword [rsp + 0x26], rdx
movabs rdx, 0x709010b050a0406
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6020709010b050a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20d0e0d06030702
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ffc4d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x4ffc7a
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4ffc9d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x4ffc30
jmp 0x4ffc91
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00454ec0
mov eax, edi
mov ecx, 0x11
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004ffbc0