joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d3720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d383d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x98c502923fea97e5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa5609d6489617499
mov qword [rsp + 0x26], rdx
movabs rdx, 0xcea3de69547ba560
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x29380269a0651728
mov qword [rsp + 0x34], rdx
movabs rdx, 0x61906051c150e00
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe14040b06190605
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140d05190307071b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x17101c0217050103
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1081c0f1c130f05
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4d37e0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4d380d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4d3830
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4d37bd
jmp 0x4d3824
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00451880
mov eax, edi
mov ecx, 0x1e
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004d3720

Function at 0x4d4c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4d27
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x1af90573a9b0153e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x950963cd61431464
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd6281526e7da9509
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8257173420d7ff29
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1b0e05021b170f1c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x170f0c1006111802
mov qword [rsp + 0x44], rdx
movabs rdx, 0xf19181c170f0c10
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9031601120e1d00
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc141c0209001d12
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1713121913151a07
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4d4cc9
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x7b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x7b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2c
jge 0x4d4cf7
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x4d4d1a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4d4cac
jmp 0x4d4d0e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00451880
mov eax, edi
mov ecx, 0x1e
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d4c00
Function at 0x4d5680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d577d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf0f5736557344129
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1a21347453350052
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65dab9aee3c2f23c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1316070e120d1102
mov qword [rsp + 0x34], rdx
movabs rdx, 0x161514090f100d0f
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x140e0916151409
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa06160816020e0a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d5720
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x51]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x51]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4d574d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d5770
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x4d56ff
jmp 0x4d5764
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004d5680

Function at 0x4d5c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d5dac
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x46cef9e276e650e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf8726e15aaed78f3
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe33d15cd98dcf872
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x296fed695165fc55
mov qword [rsp + 0x34], rdx
movabs rdx, 0x110d0800040d1704
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf140b0d190c0d12
mov qword [rsp + 0x44], rdx
movabs rdx, 0x51b11090f140b0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x70b150f0c161313
mov qword [rsp + 0x50], rdx
movabs rdx, 0x30d0a08110f0704
mov qword [rsp + 0x58], rdx
movabs rdx, 0x110c170a04170d10
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4d5d46
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x44]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4d5d7c
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1e
jae 0x4d5d9f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x44]
cmp rsi, 0x1e
jb 0x4d5d2c
jmp 0x4d5d93
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00451880
mov eax, edi
mov ecx, 0x1e
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d5c80
Function at 0x4d63e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d64db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x20034f2374f11047
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x641e10745320034f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x406d1954293a0021
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb040b0e06100b10
mov qword [rsp + 0x34], rdx
movabs rdx, 0x120b0400060e0a01
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd000504120b0400
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa1402140f0b010f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d6479
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 5]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4d64ab
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4d64ce
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 5]
cmp rsi, 0x15
jb 0x4d645f
jmp 0x4d64c2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004d63e0

Function at 0x4d6820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d691d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7875516b743d483e
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe5e6b7875516b74
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57777f7452557210
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0111120209050b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x11040d0806090e0a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x110f0f1211040d08
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd02070d10090000
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d68c0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x1e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x1e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4d68ed
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d6910
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4d689f
jmp 0x4d6904
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004d6820
Function at 0x4d7e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7f0c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xce2c2b61a921fd4a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3827f474ce2c2b61
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65fe135420fc303a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10c06090e070312
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe050b0b1107010c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd050a030c020612
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d7eaa
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x4d7edc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d7eff
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
cmp rsi, 0x14
jb 0x4d7e90
jmp 0x4d7ef3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d7e20

Function at 0x4d7f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d800a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xca3328cfdf36cf27
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa76e7d20ca3328cf
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656d69e4be64f5e0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb05080f090205
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc01030d0b0b000b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x302041007050603
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d7fad
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x4d7fda
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d7ffd
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4d7f90
jmp 0x4d7ff1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d7f20
Function at 0x4d8940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8a2c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe4e8e2306964c949
mov qword [rsp + 0x19], rdx
movabs rdx, 0x166e82e4e8e23069
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x65b1ce1d2064392a
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa110b04110f0c07
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x110b06070a110b04
mov qword [rsp + 0x30], rdx
movabs rdx, 0x804080505081001
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d89ca
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7d]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4d89fc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d8a1f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7d]
cmp rsi, 0x13
jb 0x4d89b0
jmp 0x4d8a13
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d8940
Function at 0x4dc5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc6bb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x56acff6553b7c70c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa96e076e56acff65
mov qword [rsp + 0x22], rdx
movabs rdx, 0x52ff698a20fc7253
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x813030610030807
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe00020b01070c13
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x3100113120b0e00
mov qword [rsp + 0x40], rdx
movabs rdx, 0x103090502070708
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4dc659
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3c]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4dc68b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4dc6ae
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3c]
cmp rsi, 0x14
jb 0x4dc63f
jmp 0x4dc6a2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004dc5c0

Function at 0x4dd1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dd28c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8e53786ba4b26f54
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x96906b8e53786ba4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x31859aa9207cbbd4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1011110c0c0b020c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x12050d0f030a1011
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120809090d0a0207
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4dd22a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x34]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4dd25c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4dd27f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x34]
cmp rsi, 0x13
jb 0x4dd210
jmp 0x4dd273
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004dd1a0
Function at 0x4de640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de73b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4a696c6e23654616
mov qword [rsp + 0x19], rdx
movabs rdx, 0x57206f6f085b094a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5724442605351661
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0c090d050b0811
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1611080811010a12
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1500071414030c0e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13010a1308150810
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4de6d9
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 8]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x20
jge 0x4de70b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4de72e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 8]
cmp rsi, 0x17
jb 0x4de6bf
jmp 0x4de722
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004de640

Function at 0x4df580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df67b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xaddfc79864bfa201
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x26c3d3963420c3ad
mov qword [rsp + 0x24], rdx
movabs rdx, 0x656469b928647289
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x130e0f041500060b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1315150a0c060f05
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc0807001315150a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1050d0207131213
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4df619
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4df64b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4df66e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
cmp rsi, 0x17
jb 0x4df5ff
jmp 0x4df662
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004df580
Function at 0x4e07c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e08dd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x4db01920746e2b6d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x46becbde6f39bf45
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc38c617446becbde
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65e1d9df20de9e64
mov qword [rsp + 0x30], rdx
movabs rdx, 0x104121515000a00
mov qword [rsp + 0x38], rdx
movabs rdx, 0x18070f150a120506
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf140f0907141312
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd18151a01060a14
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe0f0f071916040c
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4e0880
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x44]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x44]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4e08ad
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4e08d0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4e085d
jmp 0x4e08c4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451880
mov eax, edi
mov ecx, 0x1c
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004e07c0

Function at 0x4e1d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1e3b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x202e064c464e3c52
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf16e611f53202e06
mov qword [rsp + 0x24], rdx
movabs rdx, 0x232042542af34c61
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x14090510040c1309
mov qword [rsp + 0x34], rdx
movabs rdx, 0x3020513100f0609
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc0e020203020513
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf09090901120409
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e1dd9
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 4]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4e1e0b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e1e2e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 4]
cmp rsi, 0x15
jb 0x4e1dbf
jmp 0x4e1e22
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004e1d40
Function at 0x4e6060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x4e61e7
push rbp
mov rbp, rsp
sub rsp, 0x90
movabs rdx, 0x95efca57c7b4e59a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x73ac8658954d3295
mov qword [rsp + 0x20], rdx
movabs rdx, 0x64c0e8575c8b83f5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x43c7a4fa2087f36f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3d6174c8e5f1ff82
mov qword [rsp + 0x38], rdx
movabs rdx, 0xcaa35cd66fd073ce
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7395a1928c05bde1
mov qword [rsp + 0x48], rdx
movabs rdx, 0x308232526292105
mov qword [rsp + 0x50], rdx
movabs rdx, 0x29232b27310b2f2f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x30d290614182220
mov qword [rsp + 0x60], rdx
movabs rdx, 0x22152d1f0b0f011b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x52f30300b02221d
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1935072f22342e29
mov qword [rsp + 0x78], rdx
movabs rdx, 0x18332000140a0111
mov qword [rsp + 0x80], rdx
movabs rdx, 0x29321b100c1c2b1d
mov qword [rsp + 0x88], rdx
xor eax, eax
jmp 0x4e6180
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7c]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x40
jge 0x4e61b2
movzx edx, byte [rsp + rax + 0x50]
movzx esi, byte [rsp + rax + 0x51]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x37
jae 0x4e61da
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7c]
cmp rsi, 0x37
jb 0x4e6165
jmp 0x4e61ce
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x37
nop
call fcn.00441380
add rsp, 0x90
pop rbp
ret
mov eax, esi
mov ecx, 0x37
call fcn.00451880
mov eax, edi
mov ecx, 0x37
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004e6060
Function at 0x4ec0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec1f8
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x65f265b270852bd6
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3665f265b270852b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x61ea280c4b205b15
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2ed6c274f22206f2
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6b6cedd3e6651a74
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90a1e040d021302
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130b0c0611081216
mov qword [rsp + 0x48], rdx
movabs rdx, 0x214120c0b180a0a
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa0f0a17170a1601
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d0f1e1c00130208
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1e1a0e0a0c0e0c00
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4ec195
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x15]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x30
jge 0x4ec1c8
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4ec1eb
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x15]
nop
cmp rsi, 0x21
jb 0x4ec17b
jmp 0x4ec1df
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x21
call fcn.00441380
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00451880
mov eax, edi
mov ecx, 0x21
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004ec0c0

Function at 0x4ec720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec7f8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe3129fb116dce461
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xce66ee5d
movabs rdx, 0xb0706050604030b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa010b0706050604
mov qword [rsp + 0x28], rdx
movabs rdx, 0x102050504090408
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ec797
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x4ec7c8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4ec7eb
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x4ec77a
jmp 0x4ec7df
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004ec720