joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b0ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b0c07
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x96968acc3e62c4c8
mov qword [rsp + 0x46], rdx
movabs rdx, 0xedff96968acc3e62
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8f90a9c56c6c5569
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc9ba74739bae5fd7
mov qword [rsp + 0x58], rdx
movabs rdx, 0x20b9df6874201e63
mov qword [rsp + 0x60], rdx
movabs rdx, 0x5040e1310120215
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x11e20030d071309
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1b1f080b05060811
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x118110313141b10
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf19201f0b0f1800
mov qword [rsp + 0x3e], rdx
xor eax, eax
jmp 0x4b0ba9
movzx r9d, byte [rsp + rsi + 0x46]
sub r9d, edx
lea edx, [r9 - 0x1e]
mov byte [rsp + rdi + 0x46], dl
lea edx, [r8 - 0x1e]
mov byte [rsp + rsi + 0x46], dl
add rax, 2
cmp rax, 0x28
jge 0x4b0bd7
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x22
jae 0x4b0bfa
movzx r8d, byte [rsp + rdi + 0x46]
sub r8d, edx
cmp rsi, 0x22
jb 0x4b0b8c
jmp 0x4b0bee
xor eax, eax
lea rbx, [rsp + 0x46]
mov ecx, 0x22
call fcn.0044d560
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00462f80
mov eax, edi
mov ecx, 0x22
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004b0ae0

Function at 0x4b17e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b18cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2074eb2f8666fb27
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0562074eb2f8666
mov qword [rsp + 0x30], rdx
movabs rdx, 0xde2b6955f965a8c5
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40b11030104090d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd041000040b1103
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x70503110a090a11
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4b186a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2f]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x14
jge 0x4b189c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b18bf
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2f]
cmp rsi, 0x12
jb 0x4b1850
jmp 0x4b18b3
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0044d560
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462f80
mov eax, edi
mov ecx, 0x12
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004b17e0
Function at 0x4b18e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b19ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x24740e656c0d0c72
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb57724740e656c0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x401b2c548465c5be
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70b0a0d0a08090d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x105070b0a0d0a08
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80210100f110907
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4b196d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x63]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x63]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x12
jge 0x4b199a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b19bd
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4b1950
jmp 0x4b19b1
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0044d560
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00462f80
mov eax, edi
mov ecx, 0x12
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004b18e0

Function at 0x4b9bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9cac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1105ca656ccf64c1
mov qword [rsp + 0x35], rdx
movabs rdx, 0xad11f41105ca656c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe6199f646cc65b8
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10000120907050b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf09000206090d08
mov qword [rsp + 0x25], rdx
movabs rdx, 0xd080a0210090700
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4b9c4a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x18
jge 0x4b9c7c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b9c9f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 0x13
jb 0x4b9c30
jmp 0x4b9c93
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d560
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462f80
mov eax, edi
mov ecx, 0x13
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004b9bc0
Function at 0x4bd720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd7de
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4a67634320395132
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x6519494a
movabs rdx, 0x207010809050409
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x40400
xor eax, eax
jmp 0x4bd781
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4bd7ae
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4bd7d1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4bd764
jmp 0x4bd7c5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.0044d560
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462f80
mov eax, edi
mov ecx, 0xb
call fcn.00462f80
nop
nop
call fcn.00460ca0
jmp fcn.004bd720

Function at 0x4c12a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1366
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc377b8c5a46f1003
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xab1269c3
movabs rdx, 0x4050a0009030705
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x70901
xor eax, eax
jmp 0x4c1300
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4c1332
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c1357
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x54]
cmp rsi, 0xb
jb 0x4c12e4
jmp 0x4c134b
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.0044d560
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462f80
mov eax, edi
mov ecx, 0xb
nop
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004c12a0
Function at 0x4c1380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c146c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1904462a3d766e48
mov qword [rsp + 0x34], rdx
movabs rdx, 0x74f934771904462a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc66c12ef65722c29
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110d0d0406100909
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5070909130c05
mov qword [rsp + 0x24], rdx
movabs rdx, 0x31006030a0d0904
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4c140a
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xe]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c143c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c145f
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xe]
cmp rsi, 0x14
jb 0x4c13f0
jmp 0x4c1453
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0044d560
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00462f80
mov eax, edi
mov ecx, 0x14
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004c1380

Function at 0x4cc380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc46c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4aeddc675ee4e749
mov qword [rsp + 0x35], rdx
movabs rdx, 0x8de2df4aeddc675e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf2f1ce446275b7c9
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60f03011112000e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa07080102000c02
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa09000e050b1006
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4cc40a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x18
jge 0x4cc43c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4cc45f
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x78]
cmp rsi, 0x13
jb 0x4cc3f0
jmp 0x4cc453
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0044d560
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00462f80
mov eax, edi
mov ecx, 0x13
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004cc380
Function at 0x4cd0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd1ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2ee6407f670e504
mov qword [rsp + 0x33], rdx
movabs rdx, 0x206465a3f102ee64
mov qword [rsp + 0x38], rdx
movabs rdx, 0xbf20ebeaf45769e0
mov qword [rsp + 0x40], rdx
movabs rdx, 0x412030700040211
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf01141409040412
mov qword [rsp + 0x23], rdx
movabs rdx, 0x809060d11011012
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4cd14a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x16
jge 0x4cd17c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4cd19f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0x15
jb 0x4cd130
jmp 0x4cd193
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0044d560
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462f80
mov eax, edi
mov ecx, 0x15
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004cd0c0

Function at 0x4ceaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ceb9b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x744f94bcf4f0d561
mov qword [rsp + 0x32], rdx
movabs rdx, 0x20d6fc906cb2744f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x67e4a5e8aa6f9f5e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130b0f1403040c02
mov qword [rsp + 0x18], rdx
movabs rdx, 0xf0c0e0811061101
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4040f0c0e081106
mov qword [rsp + 0x22], rdx
movabs rdx, 0x2120a0512131212
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4ceb39
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4ceb6b
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ceb8e
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
cmp rsi, 0x16
jb 0x4ceb1f
jmp 0x4ceb82
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0044d560
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00462f80
mov eax, edi
mov ecx, 0x16
call fcn.00462f80
nop
nop dword [rax + rax]
call fcn.00460ca0
jmp fcn.004ceaa0
Function at 0x4d3d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3e4c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x3acee77774667a32
mov qword [rsp + 0x38], rdx
movabs rdx, 0x206465d5b6616340
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6979636539cd6f63
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2ad090626136ed4a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x619061f0c051819
mov qword [rsp + 0x18], rdx
movabs rdx, 0x701160007081a1d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x800161e121d1e13
mov qword [rsp + 0x28], rdx
movabs rdx, 0x120b1f0807080712
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d3de8
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7f]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x20
jge 0x4d3e1c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x4d3e3f
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7f]
cmp rsi, 0x20
jb 0x4d3dce
jmp 0x4d3e33
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x20
call fcn.0044d560
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00462f80
mov eax, edi
mov ecx, 0x20
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004d3d40

Function at 0x4d4120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d421b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd6e363d66e6ed0d4
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8eee8d65e1e26eb8
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1d30d1c66b793120
mov qword [rsp + 0x48], rdx
movabs rdx, 0x16001317080d0d16
mov qword [rsp + 0x18], rdx
movabs rdx, 0x130d15080e0b170d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x41100040615060d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x701171104140f0a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d41b9
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x20
jge 0x4d41eb
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d420e
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0x18
jb 0x4d419f
jmp 0x4d4202
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.0044d560
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00462f80
mov eax, edi
mov ecx, 0x18
call fcn.00462f80
nop
nop dword [rax + rax]
call fcn.00460ca0
jmp fcn.004d4120
Function at 0x4d5a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5b5d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xca5969be656d756e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe16d3e46d75ed8c5
mov qword [rsp + 0x48], rdx
movabs rdx, 0xda207475374c4b6e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x41e338a0383c2066
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1304130c0b171e1d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd0d1f091a1c1304
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1b0f12130c081c13
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6071a06091d0a0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x130f1e1a1c0d111e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d5b00
movzx r9d, byte [rsp + rsi + 0x40]
sub r9d, edx
lea edx, [r9 - 0x4a]
mov byte [rsp + rdi + 0x40], dl
lea edx, [r8 - 0x4a]
mov byte [rsp + rsi + 0x40], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4d5b2d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4d5b50
movzx r8d, byte [rsp + rdi + 0x40]
sub r8d, edx
cmp rsi, 0x20
jb 0x4d5add
jmp 0x4d5b44
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x20
call fcn.0044d560
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00462f80
mov eax, edi
mov ecx, 0x20
call fcn.00462f80
nop
nop dword [rax]
call fcn.00460ca0
jmp fcn.004d5a40

Function at 0x4d8a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8acc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xcfc124d12420d269
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x797296826383cfc1
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4030b050b050a04
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7070306010b0408
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4d8a6f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jge 0x4d8a9c
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d8abf
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d8a52
jmp 0x4d8ab3
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044d560
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00462f80
mov eax, edi
mov ecx, 0xe
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004d8a00
Function at 0x4da6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da7bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1d11ae00fb61a905
mov qword [rsp + 0x38], rdx
movabs rdx, 0x63d6c473b6748907
mov qword [rsp + 0x40], rdx
movabs rdx, 0xacaace69b5183b68
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1702160809030211
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x13060b1100170b05
mov qword [rsp + 0x22], rdx
movabs rdx, 0x40412020b151306
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60e070d03080103
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4da760
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4da78d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4da7b0
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x4da73f
jmp 0x4da7a4
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.0044d560
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00462f80
mov eax, edi
mov ecx, 0x18
call fcn.00462f80
nop
nop dword [rax]
call fcn.00460ca0
jmp fcn.004da6c0

Function at 0x4dbbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dbcf8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x434525b19336163
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x615e3d6578043452
mov qword [rsp + 0x50], rdx
movabs rdx, 0x11498f616165238a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x4b7915618362456c
mov qword [rsp + 0x60], rdx
movabs rdx, 0x4f832b480472ea83
mov qword [rsp + 0x68], rdx
movabs rdx, 0x141e2006210f060d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1a1c0a0e22201224
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1824220d02131a1c
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1307161c20041821
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1e1e120a031c231a
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x1107211d0b13050f
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x4dbc98
movzx r9d, byte [rsp + rsi + 0x4b]
sub r9d, edx
lea edx, [r9 + 0x46]
mov byte [rsp + rdi + 0x4b], dl
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x4b], dl
add rax, 2
cmp rax, 0x2e
jge 0x4dbcc8
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4dbceb
movzx r8d, byte [rsp + rdi + 0x4b]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x25
jb 0x4dbc7b
jmp 0x4dbcdf
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x25
call fcn.0044d560
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00462f80
mov eax, edi
mov ecx, 0x25
call fcn.00462f80
nop
call fcn.00460ca0
nop dword [rax]
jmp fcn.004dbbc0
Function at 0x4dcc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dccd2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6b5a610360686f62
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd6b6e5f61606b5a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60a090707040c00
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x90807070202030d
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4dcc6c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 3]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4dcc9e
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4dccc5
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 3]
cmp rsi, 0xe
jb 0x4dcc52
jmp 0x4dccb5
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044d560
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00462f80
mov eax, edi
mov ecx, 0xe
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004dcc00

Function at 0x4df340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df44c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf866fffa62207df8
mov qword [rsp + 0x37], rdx
movabs rdx, 0x20e77a577073f9ed
mov qword [rsp + 0x3f], rdx
movabs rdx, 0xaf20e77a577073f9
mov qword [rsp + 0x40], rdx
movabs rdx, 0x786c8d966ce0fc8b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x812091015011600
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc110d041107100e
mov qword [rsp + 0x21], rdx
movabs rdx, 0xe13041807080c11
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1040c1107150005
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4df3e8
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4df41c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4df43f
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x54]
cmp rsi, 0x19
jb 0x4df3ce
jmp 0x4df433
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.0044d560
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00462f80
mov eax, edi
mov ecx, 0x19
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004df340
Function at 0x4dfe80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dff66
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xbe10cabd2622d20c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x69b578a56564be10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3050a060b020101
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa050403050a06
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd0c070d0a0b0706
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x4dff00
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4dff32
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4dff57
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 0xe
jb 0x4dfee2
jmp 0x4dff4b
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
nop
call fcn.0044d560
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00462f80
mov eax, edi
mov ecx, 0xe
nop
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004dfe80

Function at 0x4dff80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e006a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x72136620363c2065
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x672136620363c20
mov qword [rsp + 0x30], rdx
movabs rdx, 0x47311ea41420353f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80d03060c01020e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa010a08080d0306
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1002010c030d090f
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4e000d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 + 0x42]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 + 0x42]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x14
jge 0x4e003a
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4e005d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4dfff0
jmp 0x4e0051
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d560
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462f80
mov eax, edi
mov ecx, 0x11
call fcn.00462f80
nop
call fcn.00460ca0
jmp fcn.004dff80