joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4bd2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd372
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0xa6b4ab89baa2fa41
mov qword [rsp + 0x20], rdx
movabs rdx, 0x604030507020201
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4bd311
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x4bd33e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4bd365
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x4bd2f4
jmp 0x4bd355
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00441380
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004bd2c0

Function at 0x4be7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be89d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x62d1c76fb1aa65d1
mov qword [rsp + 0x19], rdx
movabs rdx, 0x659b93867962d1c7
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x203030002050006
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb06020303000205
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90a000b02030505
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4be840
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x12]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x12]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4be86d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4be890
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4be822
jmp 0x4be884
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004be7c0

Function at 0x4bf2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf398
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa2fa10ff0b75a40d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x503060404010707
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x700
xor eax, eax
jmp 0x4bf338
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x70]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x70]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4bf368
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4bf38b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4bf31b
jmp 0x4bf37f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004bf2e0
Function at 0x4c0d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0e52
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7598c95fc3723120
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc93bdc20db727598
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd060c090c04010b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9030d0904040b05
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c0dec
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4c0e1e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c0e45
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0xe
jb 0x4c0dd2
jmp 0x4c0e35
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004c0d80

Function at 0x4cdde0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cde98
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf261645c78fc767f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x100040102070307
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x104
xor eax, eax
jmp 0x4cde38
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4cde68
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4cde8b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4cde1b
jmp 0x4cde7f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004cdde0
Function at 0x4d1b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1c47
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x1f575f68432063a0
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x63807266696c7948
mov qword [rsp + 0x27], rdx
movabs rdx, 0x8a6e68ab4f206b63
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x155b6088638a2a90
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc1018121b17081b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1e1a1a1d1c000107
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1e181e1a1a1d1c00
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0c040514191909
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8130a12141c180c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x16080b0614091b0b
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4d1be9
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x1d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x2a
jge 0x4d1c17
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x4d1c3a
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1f
jb 0x4d1bcc
jmp 0x4d1c2e
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1f
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00451880
mov eax, edi
mov ecx, 0x1f
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d1b20

Function at 0x4d1c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1d5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x50694e61fb20c8ea
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6470e5f9e1e6d450
mov qword [rsp + 0x24], rdx
movabs rdx, 0x26d9b54a46472df
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf050f0d120d1608
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb050c0714120904
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc0f0a0b050c07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x103090b16030908
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d1d00
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x6b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4d1d2d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4d1d50
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x4d1cdf
jmp 0x4d1d44
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004d1c60
Function at 0x4d2d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2dfb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xe261276f61725a66
mov qword [rsp + 0x18], rdx
movabs rdx, 0x592861745368e261
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8169416e3b54723b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x140405081501110e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x712150d05011300
mov qword [rsp + 0x36], rdx
movabs rdx, 0x120e0712150d0501
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe1100120110120c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d2d99
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x18]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4d2dcb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d2dee
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x18]
cmp rsi, 0x16
jb 0x4d2d7f
jmp 0x4d2de2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004d2d00

Function at 0x4d3140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d323d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5d69475455675a5d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x64427b7440204e5d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4d26695420587261
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x15150416080a0503
mov qword [rsp + 0x34], rdx
movabs rdx, 0x31601070d040711
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x160c070003160107
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1607040a15010015
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d31e0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4d320d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4d3230
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x4d31bf
jmp 0x4d3224
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004d3140
Function at 0x4d3980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3a7d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xaf806175fb14dd9e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x401691d7ebaf8061
mov qword [rsp + 0x22], rdx
movabs rdx, 0x659c6902209b729c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x130d0801040a0a06
mov qword [rsp + 0x32], rdx
movabs rdx, 0x9000a1308090c11
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x711030f13110900
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9020306130b0d11
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d3a20
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4d3a4d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4d3a70
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4d39ff
jmp 0x4d3a64
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004d3980

Function at 0x4d3aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3bcc
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x766cd0dc94070443
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6101a9aa0f1a7210
mov qword [rsp + 0x25], rdx
movabs rdx, 0x56e42ff53b77061
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x656928fa19641bfe
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1c1c10170a1d1718
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1601170e14071d10
mov qword [rsp + 0x44], rdx
movabs rdx, 0x111410071601170e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a020d0e02180a08
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb031d0e1b04080c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x508130b14100802
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4d3b66
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4d3b9c
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1f
jae 0x4d3bbf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
cmp rsi, 0x1f
jb 0x4d3b4c
jmp 0x4d3bb3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1f
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00451880
mov eax, edi
mov ecx, 0x1f
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d3aa0
Function at 0x4d52e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d53ec
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x69c820746e697e53
mov qword [rsp + 0x18], rdx
movabs rdx, 0x7c58f2005170512
mov qword [rsp + 0x20], rdx
movabs rdx, 0x640e07c58f200517
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb36ddc5415b7092c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa120d0f19120e0f
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0a15010619100f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x140b0b060d080e0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x19100917130b1715
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d5388
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4d53bc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4d53df
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2c]
cmp rsi, 0x1a
jb 0x4d536e
jmp 0x4d53d3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d52e0

Function at 0x4d7a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7aec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa87c6b87ac727980
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7d7794a87c6b87ac
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8ba3763e72647261
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1108080711040312
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1212080006060a11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5000e0f09100409
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d7a8a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x33]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4d7abc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d7adf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x33]
cmp rsi, 0x13
jb 0x4d7a70
jmp 0x4d7ad3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d7a00
Function at 0x4d7e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7eea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x946ea8d3527ffe4b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x108ee6c092946ea8
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb1b6695420907261
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x407030b0a0c08
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80f130b13010004
mov qword [rsp + 0x38], rdx
movabs rdx, 0x140900020f050414
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d7e8d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x2a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x4d7eba
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4d7edd
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4d7e70
jmp 0x4d7ed1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d7e00

Function at 0x4ddbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ddcbd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xdedd1cd63b738c5e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x645adb42d5d2dedd
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1d9bf4acdba7243
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe15120b13090503
mov qword [rsp + 0x30], rdx
movabs rdx, 0x140601110308030e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10001012050a0415
mov qword [rsp + 0x40], rdx
movabs rdx, 0x507100b08000b0c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ddc60
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4ddc8d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ddcb0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4ddc3f
jmp 0x4ddca4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004ddbc0
Function at 0x4ddce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dddcc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x771b1c2014296f4c
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd2786ed53206577
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1b73d82420265f24
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6110313150d100b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0f0d160b14140c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20b0e1610100514
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ddd6a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2c]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x4ddd9c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4dddbf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2c]
cmp rsi, 0x17
jb 0x4ddd50
jmp 0x4dddb3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ddce0

Function at 0x4e2400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e24fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x92b465ba7180ac8f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6590619153a48f92
mov qword [rsp + 0x26], rdx
movabs rdx, 0xbf99c554207872b9
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe020d14040e0f04
mov qword [rsp + 0x36], rdx
movabs rdx, 0x80b16060b010b0b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x11080b16060b01
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4090d060f151607
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e24a0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0xa]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0xa]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4e24cd
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4e24f0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4e247f
jmp 0x4e24e4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004e2400
Function at 0x4e4840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e490c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1482b86e2e334dcb
mov qword [rsp + 0x19], rdx
movabs rdx, 0x300e017331314d14
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40d05040c0d070b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x400060b0b0c0b00
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4e48af
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x3b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x3b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4e48dc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4e48ff
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4e4892
jmp 0x4e48f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004e4840

Function at 0x4eb120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb1f8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x97c0638a5c53df61
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x6c89ac0c
movabs rdx, 0x901070204040809
mov qword [rsp + 0x26], rdx
movabs rdx, 0x906090107020404
mov qword [rsp + 0x28], rdx
movabs rdx, 0x508010806030a09
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4eb197
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x18]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x4eb1c8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4eb1eb
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x4eb17a
jmp 0x4eb1df
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004eb120

Function at 0x4ec500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec5be
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6d5069726a664d60
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x66607753
movabs rdx, 0x7050902070a0a03
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x6060100
xor eax, eax
jmp 0x4ec561
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 + 0xe]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x4ec58e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4ec5b1
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x4ec544
jmp 0x4ec5a5
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
nop
call fcn.0044f600
jmp fcn.004ec500