joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4bd1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd2ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xeb7bef676ef77ab5
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2eeb7bef676ef77a
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe16279746bf568de
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90709000b080106
mov qword [rsp + 0x30], rdx
movabs rdx, 0x202010f0705000a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6010b000c0b100a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bd24a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6a]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x4bd27c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4bd29f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6a]
cmp rsi, 0x11
jb 0x4bd230
jmp 0x4bd293
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004bd1c0

Function at 0x4bdcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bdd8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe6ba20b25bb1fbf5
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6eaead64207369e6
mov qword [rsp + 0x20], rdx
movabs rdx, 0x203070305070c00
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60c0504010d0101
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bdd2f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x33]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x33]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4bdd5c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4bdd7f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4bdd12
jmp 0x4bdd73
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004bdcc0
Function at 0x4be540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be5f8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xbb64b952ffaefdae
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x203050007010401
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2050704
xor eax, eax
jmp 0x4be596
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x4be5c8
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4be5eb
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 8
jb 0x4be57c
jmp 0x4be5df
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00461020
mov eax, edi
mov ecx, 8
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.004be540

Function at 0x4becc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4beda6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x20689968e1e26f5a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd9f169e153682068
mov qword [rsp + 0x24], rdx
movabs rdx, 0x403080a0a02030a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2090c040403080a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd08030a0a000502
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4bed40
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4bed72
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4bed97
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 0xe
jb 0x4bed22
jmp 0x4bed8b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004becc0
Function at 0x4c1180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c126c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x10d7201fdb6f7a62
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x202d2f3c2f10d720
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe32a72b37571312d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe060b0a0d011406
mov qword [rsp + 0x30], rdx
movabs rdx, 0x140d040313130908
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1104041106040714
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c120a
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x31]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c123c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c125f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x31]
cmp rsi, 0x15
jb 0x4c11f0
jmp 0x4c1253
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c1180

Function at 0x4c4400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c451d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xa8638ccd65d575d1
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x746c714c9c8dc4ea
mov qword [rsp + 0x25], rdx
movabs rdx, 0xbf7475fb64746c71
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x65c8fdeb5a3366de
mov qword [rsp + 0x32], rdx
movabs rdx, 0x817071408050d1a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa100c1017050817
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4181709181b02
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2191a150b080b14
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc1119180915170d
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c44c0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x47]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4c44ed
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4c4510
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4c449d
jmp 0x4c4504
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461020
mov eax, edi
mov ecx, 0x1d
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004c4400
Function at 0x4c4540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c463b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x619c9574a96d65bc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xab8dd8727caa619c
mov qword [rsp + 0x24], rdx
movabs rdx, 0xcd9b676ee10a97b6
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0d111500000d08
mov qword [rsp + 0x34], rdx
movabs rdx, 0x811140c0b101010
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x15100f050811140c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb1109150611030b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c45d9
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4c460b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4c462e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
cmp rsi, 0x16
jb 0x4c45bf
jmp 0x4c4622
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004c4540

Function at 0x4c4fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c50ac
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x5853743c20106455
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x305e6f64674a7046
mov qword [rsp + 0x27], rdx
movabs rdx, 0x73305e6f64674a70
mov qword [rsp + 0x28], rdx
movabs rdx, 0x67045e4577761c48
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb03160c00181413
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe03080f180f1501
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110407010f170f04
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa180a1202060701
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c5048
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x20
jge 0x4c507c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4c509f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
cmp rsi, 0x19
jb 0x4c502e
jmp 0x4c5093
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c4fa0
Function at 0x4c54c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c55ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5e4e2065f8a756c1
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xafc6b00fef5e4e20
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656c64fbe1a82065
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x110a030a010f0703
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc030c0f0002110a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf00020108100b09
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c554a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4c557c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c559f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4a]
cmp rsi, 0x15
jb 0x4c5530
jmp 0x4c5593
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c54c0

Function at 0x4c6ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6bdb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1670411e3b746f48
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2ecc2feb07e7316f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x43e46f643607fa35
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90e050013070e07
mov qword [rsp + 0x34], rdx
movabs rdx, 0x10120a0311170b09
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x16100d0c10120a03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90f1713040f040b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c6b79
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x24]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4c6bab
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4c6bce
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x24]
cmp rsi, 0x18
jb 0x4c6b5f
jmp 0x4c6bc2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004c6ae0
Function at 0x4c80a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c816c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa105040b72a17375
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa9365a105040b72
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x607080602050609
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5040a06
xor eax, eax
jmp 0x4c8105
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4c813c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4c815f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0xb
jb 0x4c80eb
jmp 0x4c8153
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c80a0

Function at 0x4c8800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c88ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x72508c8b9d977292
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8c82628a72508c8b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5756657071748373
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5120012030a1010
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb04090f0f020512
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80e0d0203090a0e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c888d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x4c88ba
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c88dd
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4c8870
jmp 0x4c88d1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c8800
Function at 0x4ca580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca69d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xdaca6441a9726543
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xda638adcf7b4f3d3
mov qword [rsp + 0x26], rdx
movabs rdx, 0x87ede76e9c43b1e7
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x65a0a4ba539ce374
mov qword [rsp + 0x36], rdx
movabs rdx, 0x190d16070a0f1508
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1a13190d16070a0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110d081d0c0f1010
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1707161509091e0f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c06030a0b031009
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ca640
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4ca66d
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4ca690
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x20
jb 0x4ca61d
jmp 0x4ca684
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x20
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00461020
mov eax, edi
mov ecx, 0x20
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004ca580

Function at 0x4ca9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4caaba
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x3c654c2105eec421
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf12b742c54431c74
mov qword [rsp + 0x24], rdx
movabs rdx, 0x46546321f12b742c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3958374446315365
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1a02120c1b0f1507
mov qword [rsp + 0x38], rdx
movabs rdx, 0x91818011a010316
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe050b1b1a1b1003
mov qword [rsp + 0x48], rdx
movabs rdx, 0x17030f1a13051a0b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1516121800040b19
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4caa57
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x28
jge 0x4caa89
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4caaad
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
cmp rsi, 0x1c
jb 0x4caa3d
jmp 0x4caaa1
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.004ca9a0
Function at 0x4ccdc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cce9d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x697756966186897a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8987726c9f787b8a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x40e0100090b0a0c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10f0e08040e0100
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2090001020506
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4cce40
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 3]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 3]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4cce6d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4cce90
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x4cce22
jmp 0x4cce84
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004ccdc0

Function at 0x4ccec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ccf9d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb5cb65cd1d94a821
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xbf6bb62d4c77e6b5
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe0300020c090608
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70e0c0b0e030002
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20b02010601040c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ccf40
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x4b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4ccf6d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4ccf90
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x4ccf22
jmp 0x4ccf84
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004ccec0
Function at 0x4cd800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd8ec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7953db74d2d47229
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd3d1da7953db74d2
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xc79bc70e4cdd69ba
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2110f0f050d0b00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80f030902110f0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x100a10080b120a02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4cd88a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4cd8bc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4cd8df
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x13
jb 0x4cd870
jmp 0x4cd8d3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461020
mov eax, edi
mov ecx, 0x13
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004cd800

Function at 0x4ce700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce7cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x38db3efc64f94313
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe265ea693d38db3e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20c0a05060004
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80a000c08050107
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ce76f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x3f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x4ce79c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4ce7bf
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4ce752
jmp 0x4ce7b3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ce700
Function at 0x4ce7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce8bd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8b698a087c75d046
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xbc8ead468a4f958b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5040501070a0c0e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80805040501070a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0d0c040c030503
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ce860
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x16]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x16]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4ce88d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4ce8b0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x4ce842
jmp 0x4ce8a4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004ce7e0

Function at 0x4d5460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d552c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x544f72616374643d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x656d69544f726163
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6040005050104
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4030103
xor eax, eax
jmp 0x4d54c5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 8]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4d54fc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4d551f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 8]
cmp rsi, 0xb
jb 0x4d54ab
jmp 0x4d5513
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004d5460