joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b8d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8e6a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd3f17234b103079f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6ed3f17234b10307
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb79fb1e00972ff38
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90104090a0f0007
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10040d020d030e04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4040c070e010a06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b8e0d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x7b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x7b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x4b8e3a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b8e5d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4b8df0
jmp 0x4b8e51
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004521e0
mov eax, edi
mov ecx, 0x11
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004b8d80

Function at 0x4b9e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9eec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x67656c3a0a264524
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x747467656c3a0a26
mov qword [rsp + 0x30], rdx
movabs rdx, 0x57734537752b6564
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30c0e0b02070403
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa0a030c0e0b0207
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x700040b0f010704
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4b9e8a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x4b9ebc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b9edf
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
cmp rsi, 0x12
jb 0x4b9e70
jmp 0x4b9ed3
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004521e0
mov eax, edi
mov ecx, 0x12
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004b9e00
Function at 0x4bb360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb42c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3b142b5754743947
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x31473061
movabs rdx, 0x405050901070a0b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90a0a0106010405
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bb3c5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xf]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4bb3fc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4bb41f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xf]
cmp rsi, 0xc
jb 0x4bb3ab
jmp 0x4bb413
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004521e0
mov eax, edi
mov ecx, 0xc
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004bb360

Function at 0x4bb960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bba2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4f777180938d9b89
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6cca93b4974f7771
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3040c0905000802
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0c0a01010b0304
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bb9cf
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x4bb9fc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4bba1f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x4bb9b2
jmp 0x4bba13
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00441b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.004521e0
mov eax, edi
mov ecx, 0xd
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004bb960

Function at 0x4bba40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbb0c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x96a37250d4cf849a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x99730d96a37250d4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3060a0200070807
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x10a06
xor eax, eax
jmp 0x4bbaa5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x40]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4bbadc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4bbaff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x40]
cmp rsi, 0xb
jb 0x4bba8b
jmp 0x4bbaf3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004521e0
mov eax, edi
mov ecx, 0xb
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004bba40
Function at 0x4bda20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bdb06
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x747d6e717eafab86
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa273756893727b7b
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc090b0b0400020b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80f030803010c09
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2060f0d0b020d08
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4bdaa0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x23]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4bdad2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4bdaf7
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x23]
cmp rsi, 0x10
jb 0x4bda82
jmp 0x4bdaeb
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004521e0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004bda20

Function at 0x4be320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be40c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf18fd462c2c6157
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3af3050f18fd462c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x74a228233e04659f
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb1106050f100809
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50606070d0b0e03
mov qword [rsp + 0x38], rdx
movabs rdx, 0x902080d110d0a0b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4be3aa
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4be3dc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4be3ff
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 0x13
jb 0x4be390
jmp 0x4be3f3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004521e0
mov eax, edi
mov ecx, 0x13
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004be320
Function at 0x4be420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be4dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x460f46450c694229
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x4f
movabs rdx, 0x801000006070307
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x704
xor eax, eax
nop
jmp 0x4be480
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4be4ad
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4be4d0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4be462
jmp 0x4be4c4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004521e0
mov eax, edi
mov ecx, 9
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004be420

Function at 0x4bf7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf8ca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xeb04756efaf108de
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xfeeb04756efaf108
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x93a79cad636f110d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10030101080e0d06
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf09010710030101
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20709080a060003
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bf86d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4bf89a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4bf8bd
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4bf850
jmp 0x4bf8b1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004521e0
mov eax, edi
mov ecx, 0x11
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004bf7e0
Function at 0x4c0120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c01fd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6fdedb6a5e74685a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x636d75daf3626fde
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3040d0a0b050d00
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60103040d0a0b05
mov qword [rsp + 0x28], rdx
movabs rdx, 0x306050009050904
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4c01a0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4c01cd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c01f0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4c0182
jmp 0x4c01e4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.00441b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004521e0
mov eax, edi
mov ecx, 0xe
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004c0120

Function at 0x4c27c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c289d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74ff29bff9828019
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xae003088bdd46f74
mov qword [rsp + 0x22], rdx
movabs rdx, 0x90e09000c010102
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10e0605060b090e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40e0a0d0a060203
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c2840
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x4c286d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c2890
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x4c2822
jmp 0x4c2884
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004521e0
mov eax, edi
mov ecx, 0xf
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004c27c0
Function at 0x4c28c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c298c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x750609bbafc0c2b1
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20af6920b7bb7506
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60003040909050c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20100090c080600
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4c292f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x41]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x41]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x4c295c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c297f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4c2912
jmp 0x4c2973
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00441b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004521e0
mov eax, edi
mov ecx, 0xe
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004c28c0

Function at 0x4cf100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf1dd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe9f48a1ddf67d852
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x579d94be0198ffe9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70609090a060b0d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5080c03050d0706
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40b010307090d08
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4cf180
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x4cf1ad
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4cf1d0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x4cf162
jmp 0x4cf1c4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004521e0
mov eax, edi
mov ecx, 0xf
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004cf100

Function at 0x4d1660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1726
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x535d73326e432d38
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x1d
movabs rdx, 0x104020006070608
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7040201
xor eax, eax
nop
jmp 0x4d16c0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xe]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4d16f2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d1717
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xe]
cmp rsi, 9
jb 0x4d16a2
jmp 0x4d170b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00441b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004521e0
mov eax, edi
mov ecx, 9
nop
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004d1660
Function at 0x4d1ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1d5d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x14f9bea6057065be
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x18
movabs rdx, 0x600050807030004
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x408
xor eax, eax
nop
jmp 0x4d1d00
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x66]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x66]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4d1d2d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d1d50
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4d1ce2
jmp 0x4d1d44
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004521e0
mov eax, edi
mov ecx, 9
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004d1ca0

Function at 0x4d23a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d248a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x569a20c37cc66974
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xaf8561c7569a20c3
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa69e62a9dc6ee865
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0c070403030f10
mov qword [rsp + 0x32], rdx
movabs rdx, 0x12060a020a0d0a0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa02080a130b0710
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d242d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x15]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x15]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x4d245a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d247d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4d2410
jmp 0x4d2471
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004521e0
mov eax, edi
mov ecx, 0x14
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004d23a0
Function at 0x4d9b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9bec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa8b520949762e751
mov qword [rsp + 0x19], rdx
movabs rdx, 0x646e61a8b5209497
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa4d8a09852c572a3
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10d0f110e0d0611
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6040701010d0f11
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb071012000e030d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d9b8a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4d9bbc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d9bdf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4d]
cmp rsi, 0x13
jb 0x4d9b70
jmp 0x4d9bd3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004521e0
mov eax, edi
mov ecx, 0x13
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004d9b00

Function at 0x4d9f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da05d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e83f674758ca806
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3d6e567fc9206e83
mov qword [rsp + 0x22], rdx
movabs rdx, 0x12e7758504e5d593
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1206021515061413
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf000b0d1505010a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe06110b14090f00
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa140d1110120106
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4da000
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x77]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x77]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4da02d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4da050
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4d9fdf
jmp 0x4da044
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004521e0
mov eax, edi
mov ecx, 0x16
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004d9f60
Function at 0x4dbb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dbc7d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xcbf043746bebe04d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xfc7a6153539bcbf0
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe746f0545ccf9b67
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60a0811150c1014
mov qword [rsp + 0x32], rdx
movabs rdx, 0x107080607050e03
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x130e01150a150107
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1015020d0f030f08
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4dbc20
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x5e]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x5e]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4dbc4d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4dbc70
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4dbbff
jmp 0x4dbc64
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004521e0
mov eax, edi
mov ecx, 0x16
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004dbb80

Function at 0x4dc000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc10c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x206532654f3f6543
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x536119786554593b
mov qword [rsp + 0x23], rdx
movabs rdx, 0x4d58647453536119
mov qword [rsp + 0x28], rdx
movabs rdx, 0x655664525c63014a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa060d1819090c0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x17150219131b091a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140c0805121b040b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x305131a05170f16
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4dc0a8
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x12]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x20
jge 0x4dc0dc
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x4dc0ff
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x12]
cmp rsi, 0x1d
jb 0x4dc08e
jmp 0x4dc0f3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00441b80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.004521e0
mov eax, edi
mov ecx, 0x1d
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004dc000