joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d5660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d575d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x72f065c89665aeb4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x665c2c6fdaa72f0
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70c403be1c126f9a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1090903080d060e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1309001411090b13
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1208100109121309
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100103040e0b070a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d5700
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x2f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x2f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4d572d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d5750
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4d56df
jmp 0x4d5744
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00454ec0
mov eax, edi
mov ecx, 0x16
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004d5660

Function at 0x4d6280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6388
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2ba34665d2b8253e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3531b8c97327656d
mov qword [rsp + 0x23], rdx
movabs rdx, 0x2ca533b6603531b8
mov qword [rsp + 0x28], rdx
movabs rdx, 0x85d073667015ab65
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc1413100106121c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x18110f17020e170e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170d031c00171603
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b1b061c071b030c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d632b
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x39]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x39]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x20
jge 0x4d6358
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4d637b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4d630e
jmp 0x4d636f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00443420
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1d
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004d6280
Function at 0x4d82e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d83bd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x20f28ff06e767df0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x836bfbf2e36720f2
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb020400000c0802
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x106090d0b020400
mov qword [rsp + 0x30], rdx
movabs rdx, 0x609080a05090a02
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d8360
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x73]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x73]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4d838d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d83b0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d8342
jmp 0x4d83a4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00454ec0
mov eax, edi
mov ecx, 0xe
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004d82e0
Function at 0x4d9520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d95e7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x72e7fb2cf32a652e
mov qword [rsp + 0x19], rdx
movabs rdx, 0xdfe86772e7fb2cf3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa09040006030a03
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2030305
xor eax, eax
jmp 0x4d9588
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x49]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x49]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4d95b7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4d95da
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4d956b
jmp 0x4d95ce
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00454ec0
mov eax, edi
mov ecx, 0xb
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004d9520
Function at 0x4dad60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dae4c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x37374dff6c414672
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x432a37374dff6c41
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x170c31102e3f7535
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20510110504070e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80a090c02051011
mov qword [rsp + 0x30], rdx
movabs rdx, 0x601110f02100a0a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4dadea
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x15]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x4dae1c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4dae3f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x15]
cmp rsi, 0x12
jb 0x4dadd0
jmp 0x4dae33
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00454ec0
mov eax, edi
mov ecx, 0x12
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004dad60

Function at 0x4dae60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4daf4a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7f6391986c9eac7a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x85987f6391986c9e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xab707b8671657545
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70a110904020107
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9000f050608070a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa04080d06020e01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4daeed
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 4]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 4]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x4daf1a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4daf3d
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x4daed0
jmp 0x4daf31
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00454ec0
mov eax, edi
mov ecx, 0x12
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004dae60
Function at 0x4daf60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4db0bd
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x36dace556ce514de
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xbdcfca8d746e69d1
mov qword [rsp + 0x25], rdx
movabs rdx, 0x237281ce6cbdcfca
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc7a36eb0203a7230
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf5aeb9b2c664c311
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb06befad6932a9bb
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1210f221c260702
mov qword [rsp + 0x4a], rdx
movabs rdx, 0xc021d1b20120121
mov qword [rsp + 0x50], rdx
movabs rdx, 0x52a232527020425
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2705150c2929071c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x72c2b08141e2b19
mov qword [rsp + 0x68], rdx
movabs rdx, 0x60e23211924001b
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1e0c080e1105020d
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4db060
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x27]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x27]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0x36
jge 0x4db08d
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4db0b0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x2d
jb 0x4db03e
jmp 0x4db0a4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x2d
call fcn.00443420
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00454ec0
mov eax, edi
mov ecx, 0x2d
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004daf60
Function at 0x4dcc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dccfd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5f5c19196c666572
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4e516556466a625f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6434644a3e6b3418
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x101310080815050a
mov qword [rsp + 0x36], rdx
movabs rdx, 0x70f12040a080b11
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x60a070f12040a08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90d120914020411
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4dcca0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x2c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x2c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4dcccd
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4dccf0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4dcc7f
jmp 0x4dcce4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00454ec0
mov eax, edi
mov ecx, 0x17
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004dcc00

Function at 0x4de140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de25d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x2672651749fc1132
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x172379b32079f8d8
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb117370d78b71723
mov qword [rsp + 0x28], rdx
movabs rdx, 0x744da41ba5fef3c8
mov qword [rsp + 0x30], rdx
movabs rdx, 0x41500081b090413
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd120c0208170c19
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11091c0718101c11
mov qword [rsp + 0x48], rdx
movabs rdx, 0x113180f16191517
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe041a0914010112
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4de200
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x7f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x7f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4de22d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4de250
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4de1dd
jmp 0x4de244
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.00443420
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00454ec0
mov eax, edi
mov ecx, 0x1e
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004de140
Function at 0x4de280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de3b8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x6b3d65741e70615b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x756c796620f84a25
mov qword [rsp + 0x26], rdx
movabs rdx, 0x786520546fca1639
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1800657473292348
mov qword [rsp + 0x36], rdx
movabs rdx, 0x7223746172790a69
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x12101f0a1a1e1212
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1414080306090321
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x1226141408030609
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa192214210c1a18
mov qword [rsp + 0x58], rdx
movabs rdx, 0x11110c030a110d21
mov qword [rsp + 0x60], rdx
movabs rdx, 0x10070a0f221900
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4de358
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2a
jge 0x4de388
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x4de3ab
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x28
jb 0x4de33b
jmp 0x4de39f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x28
call fcn.00443420
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.00454ec0
mov eax, edi
mov ecx, 0x28
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.004de280

Function at 0x4deea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4def8a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x868e4ba56c666542
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa2868e4ba56c6665
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x758b6b8065646c61
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf06060f10100604
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7000f06060f1010
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd050e0b06040e08
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4def2d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x4def5a
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4def7d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x4def10
jmp 0x4def71
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00454ec0
mov eax, edi
mov ecx, 0x11
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004deea0
Function at 0x4defa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df0d8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x3a7409561f3d3072
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc23a7409561f3d30
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1147206c61fc3e55
mov qword [rsp + 0x24], rdx
movabs rdx, 0x733c753a541b5857
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6c91c3b7259416f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1d0120080b04170d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1004181305112015
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1f11091510041813
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1f1411091e0b120d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10f1409041d101b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a0a0b1d1102031a
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4df075
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x12]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4df0a8
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4df0cb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x12]
nop
cmp rsi, 0x21
jb 0x4df05b
jmp 0x4df0bf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
call fcn.00443420
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00454ec0
mov eax, edi
mov ecx, 0x21
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.004defa0
Function at 0x4dfae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dfba6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe14c26d4f8e32099
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x22
movabs rdx, 0x302050808000507
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x403
xor eax, eax
nop
jmp 0x4dfb40
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4dfb72
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4dfb97
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3d]
cmp rsi, 9
jb 0x4dfb22
jmp 0x4dfb8b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00454ec0
mov eax, edi
mov ecx, 9
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004dfae0

Function at 0x4dfe80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dff6c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9974a8dc6c9f981e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa302569974a8dc6c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x64359877b62ea075
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9001111110f0009
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40a0e0f11050411
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100107090c02000e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4dff0a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4dff3c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4dff5f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5a]
cmp rsi, 0x13
jb 0x4dfef0
jmp 0x4dff53
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00454ec0
mov eax, edi
mov ecx, 0x13
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004dfe80
Function at 0x4e07e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e08db
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2e7463659cdcdb72
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1b0b961b42e7463
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc1c96c516db6e020
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0d0803080c0d06
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd14010e060f130d
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa0b0d14010e060f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10f110d0201140e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e0879
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x55]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4e08ab
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e08ce
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x55]
cmp rsi, 0x15
jb 0x4e085f
jmp 0x4e08c2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00454ec0
mov eax, edi
mov ecx, 0x15
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.004e07e0
Function at 0x4e1de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1eac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x276772616102a212
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb9bdce2767726161
mov qword [rsp + 0x22], rdx
movabs rdx, 0x10a000a03020107
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30a08090203010a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e1e4f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x49]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x49]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4e1e7c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4e1e9f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4e1e32
jmp 0x4e1e93
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00454ec0
mov eax, edi
mov ecx, 0xb
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004e1de0

Function at 0x4e5e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5f0c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x69353229cf693a7d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3420e369353229cf
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x22721e7463657269
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10120106080a0512
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1203120a10120106
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3040005060801
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e5eaa
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x71]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4e5edc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e5eff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x71]
cmp rsi, 0x13
jb 0x4e5e90
jmp 0x4e5ef3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00454ec0
mov eax, edi
mov ecx, 0x13
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004e5e20
Function at 0x4e7580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7646
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6cfe511670454270
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x2a
movabs rdx, 0x106060804050606
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x208
xor eax, eax
nop
jmp 0x4e75e0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x15]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4e7612
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4e7637
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x15]
cmp rsi, 9
jb 0x4e75c2
jmp 0x4e762b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00454ec0
mov eax, edi
mov ecx, 9
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004e7580

Function at 0x4e8160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e822c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6f8d740965d09c9e
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xe1f59c53
movabs rdx, 0xa0a09010402000b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2000a0406060a02
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e81c5
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x43]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4e81fc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4e821f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x43]
cmp rsi, 0xc
jb 0x4e81ab
jmp 0x4e8213
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00454ec0
mov eax, edi
mov ecx, 0xc
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004e8160