joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b6900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6a2c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x134c7d565c0b08f
mov qword [rsp + 0x19], rdx
movabs rdx, 0xcf61be906854ad1a
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1ff01cd2dfcf61be
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1e6d694cd1747662
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4140c0916131608
mov qword [rsp + 0x36], rdx
movabs rdx, 0x130c11071b07001b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1808130c11071b07
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd1312130f1c0509
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6100118100c0610
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf040c021b050c00
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4b69c6
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4b69fc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1d
jae 0x4b6a1f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x1d
jb 0x4b69ac
jmp 0x4b6a13
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00451880
mov eax, edi
mov ecx, 0x1d
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b6900

Function at 0x4b6a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6b12
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa2a7e7de6976657f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6c8272d794e7e4a2
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7040d080409050b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd090006050a060b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b6aac
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x48]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b6ade
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b6b05
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x48]
cmp rsi, 0xf
jb 0x4b6a92
jmp 0x4b6af5
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xf
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b6a40
Function at 0x4b7c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b7d52
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7fc6e473303160a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6512162e453e07fc
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70b000b02090c03
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9040b08010a0604
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b7cec
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x22]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b7d1e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4b7d45
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x22]
cmp rsi, 0xe
jb 0x4b7cd2
jmp 0x4b7d35
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b7c80

Function at 0x4b9000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b90d2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x544dd4407fd0cec
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6574790544dd4407
mov qword [rsp + 0x22], rdx
movabs rdx, 0x306070903040406
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x102030500070306
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b906c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b909e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b90c5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
cmp rsi, 0xb
jb 0x4b9052
jmp 0x4b90b5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b9000
Function at 0x4b9440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9526
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4c2de05c46c45eeb
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5733efe358edf161
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0a01000409050d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd07000e09060a0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0c070200090b00
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b94c0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4b94f2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b9517
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0x10
jb 0x4b94a2
jmp 0x4b950b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b9440

Function at 0x4b9540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b961d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf9015c0cf7006547
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x92e16d87f99a7e61
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3030f0705030c0a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4090f0e03030f07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x407020c0e0b0a06
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b95c0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4b95ed
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b9610
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b95a2
jmp 0x4b9604
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b9540
Function at 0x4b9f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba02c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74444a68373e2347
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4974444a68373e23
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x57653d2f312c3058
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50d0e0803060d06
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0c01020e0e050d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9020c0b0a090106
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b9fca
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b9ffc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4ba01f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 9]
cmp rsi, 0x11
jb 0x4b9fb0
jmp 0x4ba013
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b9f40

Function at 0x4bd460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd55d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xcb1e74a9b4e9fab3
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xaa9ea7c169cb1e74
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6eae6974d32bf6d9
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc1007130d0b090f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x13030b0e06020e09
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb06000f13030b0e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x902010402010a0c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bd500
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x27]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x27]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4bd52d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4bd550
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x4bd4df
jmp 0x4bd544
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004bd460
Function at 0x4be160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be227
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x497264a04174e1e3
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x48ba83f9
movabs rdx, 0xb0804010908010b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x104000004080a04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4be1c8
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x70]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x70]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4be1f7
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4be21a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4be1ab
jmp 0x4be20e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004be160

Function at 0x4bfdc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bfe72
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x6eb2fab6b1a5bdb3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6040205000301
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4bfe0e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4bfe42
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4bfe65
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
cmp rsi, 8
jb 0x4bfdf4
nop
jmp 0x4bfe59
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00441380
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004bfdc0

Function at 0x4c1400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c14cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb164a5e86f9ff5af
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb365b9b06500b164
mov qword [rsp + 0x20], rdx
movabs rdx, 0x80a08050b070402
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd0c000b05020001
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c146f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4c149c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c14bf
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4c1452
jmp 0x4c14b3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004c1400
Function at 0x4cc8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc9a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x32736bcbbbc1b161
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xda061b2e
movabs rdx, 0x6090b090305030a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1020209040b0103
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cc948
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x46]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x46]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4cc977
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4cc99a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4cc92b
jmp 0x4cc98e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004cc8e0

Function at 0x4ccec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ccfa6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x74766c65ff77e7f6
mov qword [rsp + 0x19], rdx
movabs rdx, 0x88cb64eff574766c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc080c030906060a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80c0c080c030906
mov qword [rsp + 0x28], rdx
movabs rdx, 0x800010a0b030002
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4ccf40
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x65]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4ccf72
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4ccf97
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x65]
cmp rsi, 0xd
jb 0x4ccf22
jmp 0x4ccf8b
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ccec0
Function at 0x4cd460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd546
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5e3c416543583b6d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5f785765696c5e3c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x60b0b09090b050d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1010109060b0b09
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9000d0307020005
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4cd4e0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4cd512
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4cd537
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
cmp rsi, 0xe
jb 0x4cd4c2
jmp 0x4cd52b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004cd460

Function at 0x4ce620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce6d8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa2a66473437568b9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x307070603060306
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x300
xor eax, eax
jmp 0x4ce678
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4ce6a8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4ce6cb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4ce65b
jmp 0x4ce6bf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004ce620

Function at 0x4ce700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce7b2
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x35dfe1cd72af6548
mov qword [rsp + 0x20], rdx
movabs rdx, 0x405060200020607
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4ce751
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x4ce77e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4ce7a5
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x4ce734
jmp 0x4ce795
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00441380
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ce700
Function at 0x4cee40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ceef8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xed0d106d17771713
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x506070002000103
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x707
xor eax, eax
jmp 0x4cee95
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4c]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x4ceec8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4ceeeb
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4c]
nop
cmp rsi, 8
jb 0x4cee7b
jmp 0x4ceedf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004cee40

Function at 0x4d3100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d31fd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x209d76b1a7886ca5
mov qword [rsp + 0x19], rdx
movabs rdx, 0x996e8c97b1209d76
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x809ccda520c887f5
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc12030a04141314
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x609020d0805110e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x2140609020d0805
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0f00140c050a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d31a0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4d31cd
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4d31f0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4d317f
jmp 0x4d31e4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004d3100
Function at 0x4d3220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d331d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1efe753e20283402
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4eff394353201efe
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5f58255420645356
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0406010c0c0006
mov qword [rsp + 0x32], rdx
movabs rdx, 0x2030f070f0e13
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x15020d0f0c150002
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4020a0a03140a0e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d32c0
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4d32ed
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d3310
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4d329f
jmp 0x4d3304
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004d3220

Function at 0x4d3600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3708
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x66d063c58a8d9598
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x64a4bec8d5206369
mov qword [rsp + 0x26], rdx
movabs rdx, 0xbaee691dc7077284
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x13140c161700120c
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc0d13140c161700
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1616060c04020410
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0d130b0c0e1010
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1130b0114120300
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d36ab
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x4d36d8
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d36fb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4d368e
jmp 0x4d36ef
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d3600