joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c2200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c22e6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x65c2af1d6c866977
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6920c06f721665c2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x306040204080302
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20b030604020408
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd050304050d0b02
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4c2280
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4c22b2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c22d7
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
cmp rsi, 0xe
jb 0x4c2262
jmp 0x4c22cb
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004c2200

Function at 0x4cda60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdb3d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x36656c60623d623a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x664e654b5d36656c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0b030004080703
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa010c0b03000408
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80103020b0b0003
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4cdae0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x16]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x16]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4cdb0d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4cdb30
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4cdac2
jmp 0x4cdb24
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004cda60
Function at 0x4cdb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdc32
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x29626cd244673533
mov qword [rsp + 0x19], rdx
movabs rdx, 0x28e475332b562a29
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1080b06080401
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7000b070e0a0d0a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cdbcc
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4cdbfe
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4cdc25
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0xf
jb 0x4cdbb2
jmp 0x4cdc15
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xf
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004cdb60

Function at 0x4cdfe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce0ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd7d874edee6465db
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x57c9b0d343e6d7d8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6020b0b0709030c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4080007060a0609
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ce04f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x67]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x67]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4ce07c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ce09f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4ce032
jmp 0x4ce093
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004cdfe0
Function at 0x4d3de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3eca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74eaf8eff6feeff2
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf4e4ef74eaf8eff6
mov qword [rsp + 0x22], rdx
movabs rdx, 0xaeac695498ee72dd
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5110c0103010e12
mov qword [rsp + 0x32], rdx
movabs rdx, 0x211090d0c120511
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb02060408010a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d3e6d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x72]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x72]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4d3e9a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d3ebd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4d3e50
jmp 0x4d3eb1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d3de0

Function at 0x4d3fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d40dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e817484a063a4a6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xab9eb2745381eb6e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x658ffae4cc647261
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90e001304080401
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1206140d14040613
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x803080c1206140d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x604090c00150004
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d4080
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4d40ad
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4d40d0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x4d405f
jmp 0x4d40c4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004d3fe0
Function at 0x4d6520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d660a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc56928653bc96fd4
mov qword [rsp + 0x30], rdx
movabs rdx, 0x646e61749ecdc5e8
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc5f2c918ce64db2c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1405020903070910
mov qword [rsp + 0x18], rdx
movabs rdx, 0x50014160b050715
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1700131511080a14
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4d65ad
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x4b]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
cmp rax, 0x18
jge 0x4d65da
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d65fd
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x18
jb 0x4d6590
jmp 0x4d65f1
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d6520

Function at 0x4d6e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6f8c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x5d20ff05a86e9b1b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe9f66ca6281d2c2c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x64aa1174e9f66ca6
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc31d5e820642106
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1b0c151904001a00
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x80a0b0907110111
mov qword [rsp + 0x42], rdx
movabs rdx, 0x110e12151b05080a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf18141515031404
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d6f28
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4d6f5c
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x4d6f7f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0x1c
jb 0x4d6f0e
jmp 0x4d6f73
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451880
mov eax, edi
mov ecx, 0x1c
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d6e80
Function at 0x4dadc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4daecc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8674a46543a1a78f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6e7a8b8d413b9489
mov qword [rsp + 0x23], rdx
movabs rdx, 0x646e4874486e7a8b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7f857b27b164828a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x701021a000e071c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe101810081a160d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0907150f121505
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe1b0a0f19021b0e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4dae68
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x20
jge 0x4dae9c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x4daebf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0x1d
jb 0x4dae4e
jmp 0x4daeb3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00451880
mov eax, edi
mov ecx, 0x1d
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004dadc0

Function at 0x4db720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4db80c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe72d64db761bab9
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xcc01b00530e72d6
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf76d705420f8721f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x912040509000412
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd010c0503040912
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa090b070f140d04
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4db7aa
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x42]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4db7dc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4db7ff
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x42]
cmp rsi, 0x15
jb 0x4db790
jmp 0x4db7f3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004db720
Function at 0x4db920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dba1d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x18bab0a968f76153
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe3454db6600518ba
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x65cece2220b872f8
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc120b0410050d0c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7020c130809040d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x70e07020c130809
mov qword [rsp + 0x38], rdx
movabs rdx, 0x214060d09070a04
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4db9c0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4db9ed
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4dba10
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x4db99f
jmp 0x4dba04
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004db920

Function at 0x4dbcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dbdac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x743d2e612c094e33
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x56ae61743d2e612c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2bbb69542064ba61
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0c06120c110005
mov qword [rsp + 0x32], rdx
movabs rdx, 0x303020511020a0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x51109110a050103
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4dbd4a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4dbd7c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4dbd9f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0x13
jb 0x4dbd30
jmp 0x4dbd93
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004dbcc0
Function at 0x4dca20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dcb0a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x78668654bd6b6f7f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x80706178668654bd
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65c8565420648561
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50406100a0703
mov qword [rsp + 0x32], rdx
movabs rdx, 0x5110c0a07050005
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110c0004050c0a09
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4dcaad
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 5]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 5]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4dcada
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4dcafd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4dca90
jmp 0x4dcaf1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004dca20

Function at 0x4dd3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dd4cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x206b736a707d6146
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x576e617853206b73
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7b6d7f67b87f926e
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe100212100c0009
mov qword [rsp + 0x30], rdx
movabs rdx, 0x140d09030c0f0910
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd04110e09140f0d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4dd46a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x28]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4dd49c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4dd4bf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x28]
cmp rsi, 0x15
jb 0x4dd450
jmp 0x4dd4b3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004dd3e0
Function at 0x4de220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de32c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc7bcb963cf732841
mov qword [rsp + 0x34], rdx
movabs rdx, 0x70202ea1dd6c1772
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x646ebddf70202ea1
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65ed695423d7d05f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x409101a14141717
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb01160709010401
mov qword [rsp + 0x20], rdx
movabs rdx, 0x31014150b011607
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc040f1706091105
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4de2c8
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x80]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4de2fc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x4de31f
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x80]
cmp rsi, 0x1c
jb 0x4de2ae
jmp 0x4de313
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x1c
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451880
mov eax, edi
mov ecx, 0x1c
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004de220

Function at 0x4de660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de75d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7cef696c7874769d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb0a573b68e917cef
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7c9048ba209792b3
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x813010b0b0d060c
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe1412030c010606
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x9070f0a14140e14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150f0603100601
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4de700
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4de72d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4de750
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4de6df
jmp 0x4de744
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004de660
Function at 0x4dec80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ded9d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x666c61747496cd9b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x335c4b97496c909e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9e988c74335c4b97
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x82b6a954b1de7297
mov qword [rsp + 0x32], rdx
movabs rdx, 0x2020219040c0404
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x11a161912080202
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe080d08170b070f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb01190904130214
mov qword [rsp + 0x50], rdx
movabs rdx, 0x91a000a1b1b1112
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ded40
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4ded6d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4ded90
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4ded1d
jmp 0x4ded84
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451880
mov eax, edi
mov ecx, 0x1c
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004dec80

Function at 0x4df0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df19d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7b2079f281f4260b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x57385887b2079f2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x230afd5420fef461
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8120a0911010413
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9040b1103070a02
mov qword [rsp + 0x36], rdx
movabs rdx, 0x30e09040b110307
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90712000b0d0209
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4df140
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x76]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4df16d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4df190
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x4df11f
jmp 0x4df184
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004df0a0
Function at 0x4e0ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e0bdb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa469a5fbaf58999f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x69dc96ba4920cda4
mov qword [rsp + 0x24], rdx
movabs rdx, 0x658a6954da64af2f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x100300040e0f000a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1202080b0e050d12
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb000f011202080b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5040105070d150c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e0b79
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x56]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4e0bab
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e0bce
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x56]
cmp rsi, 0x17
jb 0x4e0b5f
jmp 0x4e0bc2
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004e0ae0

Function at 0x4e1e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1f1d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd4562a472a726141
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3417653ef31dfed4
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf56d405407e4541e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7050f0a0e0d1112
mov qword [rsp + 0x30], rdx
movabs rdx, 0x309000f0b050016
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc100a11030e0b16
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4060908040f1614
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e1ec0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x3f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4e1eed
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e1f10
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4e1e9f
jmp 0x4e1f04
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004e1e20