joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4dc880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc96c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd4c673470791c14
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x327269750d4c6734
mov qword [rsp + 0x30], rdx
movabs rdx, 0x583b4b25e961594b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0e071100100504
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd0d06120f0e0711
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x11130e110c010b10
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4dc90a
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x14
jge 0x4dc93c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4dc95f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
cmp rsi, 0x14
jb 0x4dc8f0
jmp 0x4dc953
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.00444ae0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456860
mov eax, edi
mov ecx, 0x14
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004dc880

Function at 0x4dccc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dcdbb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e65b96fb6b5b347
mov qword [rsp + 0x35], rdx
movabs rdx, 0xffad976e65b96fb6
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6e6fc39ca01480a4
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8050a030a030b0d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa0b05080c100f02
mov qword [rsp + 0x23], rdx
movabs rdx, 0xf0e0a0b05080c10
mov qword [rsp + 0x25], rdx
movabs rdx, 0xc090a0c0109090c
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4dcd59
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3d]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4dcd8b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4dcdae
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3d]
cmp rsi, 0x13
jb 0x4dcd3f
jmp 0x4dcda2
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456860
mov eax, edi
mov ecx, 0x13
call fcn.00456860
nop
nop dword [rax + rax]
call fcn.00454580
jmp fcn.004dccc0
Function at 0x4ddb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ddbe6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4b2d65e8aa6782b6
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x9f784509a74b2d65
mov qword [rsp + 0x30], rdx
movabs rdx, 0x304030906060604
mov qword [rsp + 0x19], rdx
movabs rdx, 0x40c030403090606
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x108000c08000301
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x4ddb80
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4ddbb2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4ddbd7
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
cmp rsi, 0xd
jb 0x4ddb62
jmp 0x4ddbcb
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
nop
call fcn.00444ae0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00456860
mov eax, edi
mov ecx, 0xd
nop
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004ddb00

Function at 0x4de300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de41d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x612f72d152d1e37b
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x667b03fb4e9824d9
mov qword [rsp + 0x44], rdx
movabs rdx, 0xe061b1ee667b03fb
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3f5d17459840066
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa090a090b031104
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb1302090a090a09
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8011401100e0a06
mov qword [rsp + 0x24], rdx
movabs rdx, 0x217000a10031a0c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x190a1b0d1502160a
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4de3c0
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 - 0x59]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 - 0x59]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4de3ed
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4de410
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4de39d
jmp 0x4de404
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.00444ae0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00456860
mov eax, edi
mov ecx, 0x1c
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.004de300
Function at 0x4de440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de53d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf865725a8c726a62
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb51b836974726543
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd069617d436574b0
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf0100010d000714
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd04030403001410
mov qword [rsp + 0x24], rdx
movabs rdx, 0x703070e0d040304
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40f0707170e0d17
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4de4e0
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4de50d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4de530
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x4de4bf
jmp 0x4de524
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00444ae0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456860
mov eax, edi
mov ecx, 0x18
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.004de440

Function at 0x4de560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de66c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc52772d0cad565d3
mov qword [rsp + 0x36], rdx
movabs rdx, 0x63c1d01ccfd54c43
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x746163c1d01ccfd5
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb19e5f18106fbd65
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170d1800060c160d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x150d020a04060903
mov qword [rsp + 0x24], rdx
movabs rdx, 0x150c150d020a0406
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd190b130b03070e
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4de608
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4de63c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4de65f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
cmp rsi, 0x1a
jb 0x4de5ee
jmp 0x4de653
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.00444ae0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456860
mov eax, edi
mov ecx, 0x1a
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004de560
Function at 0x4e1800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e18c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x816b656f50718360
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x82656c81
movabs rdx, 0x60302000400000a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7010701000603
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4e1868
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x4e1897
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4e18ba
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4e184b
jmp 0x4e18ae
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444ae0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456860
mov eax, edi
mov ecx, 0xb
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004e1800

Function at 0x4e4560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e4626
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe86febf6c77e6924
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x65
movabs rdx, 0x504070007030400
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x5030204
xor eax, eax
nop
jmp 0x4e45c0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4e45f2
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4e4617
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 9
jb 0x4e45a2
jmp 0x4e460b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456860
mov eax, edi
mov ecx, 9
nop
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004e4560

Function at 0x4e59c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5aa6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf699ab17a9aa6547
mov qword [rsp + 0x31], rdx
movabs rdx, 0x765186914f38cf6
mov qword [rsp + 0x38], rdx
movabs rdx, 0x302080a050c0604
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe04020c0302080a
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa0a030305030709
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4e5a40
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4e5a72
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4e5a97
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x54]
cmp rsi, 0xf
jb 0x4e5a22
jmp 0x4e5a8b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00444ae0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456860
mov eax, edi
mov ecx, 0xf
nop
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004e59c0
Function at 0x4e5ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5ba6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4353624043016547
mov qword [rsp + 0x30], rdx
movabs rdx, 0x665392c58426518
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20f020807050b0d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x506020f02080705
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40a0b020408040c
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4e5b40
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xf]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4e5b72
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4e5b97
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xf]
cmp rsi, 0x10
jb 0x4e5b22
jmp 0x4e5b8b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00444ae0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456860
mov eax, edi
mov ecx, 0x10
nop
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004e5ac0

Function at 0x4e8b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e8c7b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xabbc9269bbb983f5
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6074abbc9269bbb9
mov qword [rsp + 0x38], rdx
movabs rdx, 0x99c9c1747562dbb5
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20a061109030f10
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x303000b07090000
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1030303000b0709
mov qword [rsp + 0x26], rdx
movabs rdx, 0x50f0b11000a0110
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4e8c19
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4f]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4e8c4b
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4e8c6e
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4f]
cmp rsi, 0x12
jb 0x4e8bff
jmp 0x4e8c62
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456860
mov eax, edi
mov ecx, 0x12
call fcn.00456860
nop
nop dword [rax + rax]
call fcn.00454580
jmp fcn.004e8b80
Function at 0x4e96e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e97c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe7eb06e446d03911
mov qword [rsp + 0x30], rdx
movabs rdx, 0xbcf3d461e5dc74d5
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5060b0501020704
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x701080a0f010506
mov qword [rsp + 0x20], rdx
movabs rdx, 0x405080a000e040d
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4e9760
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x36]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4e9792
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4e97b7
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x36]
cmp rsi, 0x10
jb 0x4e9742
jmp 0x4e97ab
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00444ae0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456860
mov eax, edi
mov ecx, 0x10
nop
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004e96e0

Function at 0x4eb240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb318
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4470464c61525b47
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x6f4f2a35
movabs rdx, 0xa01080409050b02
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1080a0108040905
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x307080904090503
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4eb2b4
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x12
jge 0x4eb2e8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4eb30b
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
nop
cmp rsi, 0xc
jb 0x4eb29a
jmp 0x4eb2ff
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444ae0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456860
mov eax, edi
mov ecx, 0xc
call fcn.00456860
nop
call fcn.00454580
nop dword [rax]
jmp fcn.004eb240
Function at 0x4eb620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb6e7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xff120b6c6415c425
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x571920b6
movabs rdx, 0x1040506090a0404
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x402010100070802
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4eb688
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x4eb6b7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4eb6da
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4eb66b
jmp 0x4eb6ce
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444ae0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456860
mov eax, edi
mov ecx, 0xc
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004eb620

Function at 0x4ebd60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ebe68
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7d967510a7746f50
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xcd85706df6df64a6
mov qword [rsp + 0x46], rdx
movabs rdx, 0xd78fcd85706df6df
mov qword [rsp + 0x48], rdx
movabs rdx, 0x49b342bb9f53276f
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe190a130f0e0204
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x131508020b101011
mov qword [rsp + 0x26], rdx
movabs rdx, 0x30306060717070a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x16080e1610180716
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4ebe0b
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
cmp rax, 0x20
jge 0x4ebe38
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4ebe5b
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4ebdee
jmp 0x4ebe4f
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00444ae0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456860
mov eax, edi
mov ecx, 0x1a
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004ebd60
Function at 0x4ed3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed4a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x66d1d22245c7becb
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xbe6e2446
movabs rdx, 0x20a04020906010b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x506050009000502
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4ed448
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x4ed477
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4ed49a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4ed42b
jmp 0x4ed48e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444ae0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456860
mov eax, edi
mov ecx, 0xc
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004ed3e0

Function at 0x4ed4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed5ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x726176625e745f50
mov qword [rsp + 0x31], rdx
movabs rdx, 0x524e6e4a6d596b72
mov qword [rsp + 0x38], rdx
movabs rdx, 0x76686763673f7261
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1213061216150813
mov qword [rsp + 0x19], rdx
movabs rdx, 0x110e1409140d0003
mov qword [rsp + 0x21], rdx
movabs rdx, 0x8130401010b080b
mov qword [rsp + 0x29], rdx
xor eax, eax
jmp 0x4ed54a
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x16]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
cmp rax, 0x18
jge 0x4ed57c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4ed59f
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x16]
cmp rsi, 0x17
jb 0x4ed530
jmp 0x4ed593
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456860
mov eax, edi
mov ecx, 0x17
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004ed4c0
Function at 0x4ee040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee112
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1765c407ae2b65f0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd16f36e23581765
mov qword [rsp + 0x30], rdx
movabs rdx, 0x309050c08090202
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd0c090403000b07
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4ee0ac
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ee0de
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ee105
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
cmp rsi, 0xe
jb 0x4ee092
jmp 0x4ee0f5
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00444ae0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00456860
mov eax, edi
mov ecx, 0xe
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004ee040

Function at 0x4ee120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee1e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa5171ebc46c317a6
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x65c0bca5
movabs rdx, 0x506050604080201
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x9020700
xor eax, eax
jmp 0x4ee180
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x61]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4ee1b2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ee1d7
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x61]
cmp rsi, 0xb
jb 0x4ee164
jmp 0x4ee1cb
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456860
mov eax, edi
mov ecx, 0xb
nop
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004ee120
Function at 0x4ef140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef226
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6e9a43ddc70a72c3
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x9e3b926fd56e9a43
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc03040c0b020a00
mov qword [rsp + 0x19], rdx
movabs rdx, 0xb080c03040c0b02
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8060a0c0b0c0b02
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x4ef1c0
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x45]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4ef1f2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4ef217
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x45]
cmp rsi, 0xd
jb 0x4ef1a2
jmp 0x4ef20b
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
nop
call fcn.00444ae0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00456860
mov eax, edi
mov ecx, 0xd
nop
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004ef140

Function at 0x4ef5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef658
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2bac747042d9c7c5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x102070203000202
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x60700
xor eax, eax
jmp 0x4ef5f9
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x4ef628
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4ef64b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop
cmp rsi, 8
jb 0x4ef5dc
jmp 0x4ef63f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00456860
mov eax, edi
mov ecx, 8
call fcn.00456860
nop
call fcn.00454580
nop dword [rax]
jmp fcn.004ef5a0