joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4cdc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdd66
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x26706572dcf86552
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x172a45790fca7326
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0a0e060d070803
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90a0e0a0e060d07
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd080a020302030d
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4cdd00
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4cdd32
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4cdd57
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0xf
jb 0x4cdce2
jmp 0x4cdd4b
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004cdc80

Function at 0x4ce3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce48a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x47ea985355b6653a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5547ea985355b665
mov qword [rsp + 0x20], rdx
movabs rdx, 0xaf216e533574dce0
mov qword [rsp + 0x28], rdx
movabs rdx, 0x200050f000c1007
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30c07050f0c0904
mov qword [rsp + 0x38], rdx
movabs rdx, 0x910050a0c060a0d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ce42d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x4ce45a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4ce47d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4ce410
jmp 0x4ce471
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ce3a0
Function at 0x4ce4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce586
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc2ab74d1f56703cd
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb7ff459bb56cc2ab
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7090904060d0c00
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x307070607090904
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa000a0603070301
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ce520
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x61]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4ce552
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ce577
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x61]
cmp rsi, 0xe
jb 0x4ce502
jmp 0x4ce56b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ce4a0

Function at 0x4cfc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cfd0a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e697a3a30717c74
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x836c64716e697a3a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8639806d7e6e8164
mov qword [rsp + 0x38], rdx
movabs rdx, 0x130b111209030109
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1205050f130b1112
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x509110d0803020b
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4cfcad
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 0xd]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 0xd]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x14
jge 0x4cfcda
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4cfcfd
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4cfc90
jmp 0x4cfcf1
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004cfc20
Function at 0x4d3960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3a5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x63c80e2b412fbe86
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1c64612318116163
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc903c40d48ad54bf
mov qword [rsp + 0x28], rdx
movabs rdx, 0x211000d16121011
mov qword [rsp + 0x30], rdx
movabs rdx, 0x151109060001110f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x130f160b0e051413
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130a120d0b000410
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d3a00
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x73]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x73]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4d3a2d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4d3a50
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4d39df
jmp 0x4d3a44
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004d3960
Function at 0x4d7cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7ddd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x392a6a2eda7e61e2
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd5c75365657de7d6
mov qword [rsp + 0x20], rdx
movabs rdx, 0x646fd5c75365657d
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf56d9f78aae636e7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4140407100c0e08
mov qword [rsp + 0x32], rdx
movabs rdx, 0x312160700190414
mov qword [rsp + 0x38], rdx
movabs rdx, 0x210060606060a17
mov qword [rsp + 0x40], rdx
movabs rdx, 0x130013050f0f090a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1317090c10071505
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d7d80
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4d7dad
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4d7dd0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4d7d5d
jmp 0x4d7dc4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004d7cc0

Function at 0x4d9380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9488
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1425cfce16cb1d4e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x61ccbfad646e6191
mov qword [rsp + 0x22], rdx
movabs rdx, 0x646e61ccbfad646e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xbc6d5154203272df
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x191405050d040601
mov qword [rsp + 0x34], rdx
movabs rdx, 0x80d07030e121906
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x7030802080d0703
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2010c05170c0d0c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d942b
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x45]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x45]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1c
jge 0x4d9458
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4d947b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4d940e
jmp 0x4d946f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d9380
Function at 0x4d95c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d96aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x808b807171853bac
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7c7061808b807171
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8f6d698596777952
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30a010f020c0200
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc000e0f000c1207
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50d0f040b0d0906
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d964d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 2]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 2]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4d967a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d969d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4d9630
jmp 0x4d9691
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d95c0

Function at 0x4da7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da8a8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x736e9ef7c0d73d53
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc7c0d2faac200673
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd4e8d5548bc18ec4
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x110f010812070a05
mov qword [rsp + 0x36], rdx
movabs rdx, 0x100c110f01081207
mov qword [rsp + 0x38], rdx
movabs rdx, 0x103010e0d080d0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x15070d040c070415
mov qword [rsp + 0x48], rdx
movabs rdx, 0x140c020d0716070d
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4da84b
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x22
jge 0x4da878
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4da89b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4da82e
jmp 0x4da88f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004da7a0
Function at 0x4db120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4db23d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6f9b6d6f41b37557
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x815433537775705d
mov qword [rsp + 0x23], rdx
movabs rdx, 0x6481543353777570
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7e2889544727766a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0e0d0114170305
mov qword [rsp + 0x34], rdx
movabs rdx, 0x80917130a0e0d01
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1206140516020d17
mov qword [rsp + 0x40], rdx
movabs rdx, 0x80d120f160f0d0b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110305020e180114
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4db1e0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4db20d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4db230
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4db1bd
jmp 0x4db224
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004db120

Function at 0x4dd8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dd9aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xff53c21d6e0a6843
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x646e67ff53c21d6e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x92fbe5544c1b2761
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x100d121107021210
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd080805050e100d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0405050c080c11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4dd94d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x71]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x71]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4dd97a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4dd99d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4dd930
jmp 0x4dd991
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004dd8c0
Function at 0x4dddc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ddeac
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x53c1696513692a54
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x64ce617453c16965
mov qword [rsp + 0x30], rdx
movabs rdx, 0xbec3d4662081c81a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x313011310120c0a
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe06111103130113
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa130d12120d0d0e
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4dde4a
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x73]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x14
jge 0x4dde7c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4dde9f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x73]
cmp rsi, 0x14
jb 0x4dde30
jmp 0x4dde93
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004dddc0

Function at 0x4ddec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ddfbd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xaa1e41f2cf73ded2
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xfe70610ad62056aa
mov qword [rsp + 0x24], rdx
movabs rdx, 0x89f2a96991f3726c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x701070813030d11
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf15000a060f0811
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x61614040f15000a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110611120b150e03
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ddf60
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x69]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x69]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4ddf8d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4ddfb0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x4ddf3f
jmp 0x4ddfa4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004ddec0
Function at 0x4de5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de6cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7efe200a7a6dbc54
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x99de087efe200a7a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5ee616fa20649161
mov qword [rsp + 0x28], rdx
movabs rdx, 0x70801070810080a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80c0f040c0c0304
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9110c0709120601
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4de66a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4de69c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4de6bf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5a]
cmp rsi, 0x13
jb 0x4de650
jmp 0x4de6b3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004de5e0

Function at 0x4e1d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1e2c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x3e8c8f5c746e6543
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8b207b9050618184
mov qword [rsp + 0x24], rdx
movabs rdx, 0x646e61748b207b90
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8f7c807d71643c50
mov qword [rsp + 0x30], rdx
movabs rdx, 0x18081b0f0c070c0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x170c18140d090d05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8151a190a1b060f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x90f0b1418041804
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e1dc8
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x20
jge 0x4e1dfc
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x4e1e1f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 0x1c
jb 0x4e1dae
jmp 0x4e1e13
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451880
mov eax, edi
mov ecx, 0x1c
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004e1d20
Function at 0x4e2400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e251a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8972a3b4a06cd4b0
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x809cc38b20cc61bf
mov qword [rsp + 0x25], rdx
movabs rdx, 0x89809cc38b20cc61
mov qword [rsp + 0x26], rdx
movabs rdx, 0x656d7d9020c59a83
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa030c0113070d08
mov qword [rsp + 0x36], rdx
movabs rdx, 0x15110a030c011307
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0e060010040508
mov qword [rsp + 0x40], rdx
movabs rdx, 0x71003060a0c1210
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf060a0810160a10
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e24b7
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x22
jge 0x4e24e9
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4e250d
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3b]
cmp rsi, 0x19
jb 0x4e249d
jmp 0x4e2501
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.004e2400
Function at 0x4ed400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed4ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6968e3de70dbdb57
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xbceb916968e3de70
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6bfae897e465e169
mov qword [rsp + 0x28], rdx
movabs rdx, 0x804120e040a1005
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa120c11010c0001
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11120e080f09020a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ed48d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x5f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x5f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4ed4ba
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4ed4dd
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4ed470
jmp 0x4ed4d1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ed400

Function at 0x4eecc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eed8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2cb226e139e11649
mov qword [rsp + 0x19], rdx
movabs rdx, 0x336c6530372a2e2c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x407050e04020806
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0208020309010b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4eed2f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x4f]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x4f]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4eed5c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4eed7f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4eed12
jmp 0x4eed73
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004eecc0
Function at 0x4ef260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ef32c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xcf7eafa665a265dd
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x92909753
movabs rdx, 0x507000705070402
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6060b050a090507
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ef2c5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x36]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4ef2fc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4ef31f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x36]
cmp rsi, 0xc
jb 0x4ef2ab
jmp 0x4ef313
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ef260

Function at 0x4f07e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f08ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc6a6692a2b353a47
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf217687433c6a669
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5070b0c05070806
mov qword [rsp + 0x28], rdx
movabs rdx, 0x201020504030408
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f084f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x4f087c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4f089f
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4f0832
jmp 0x4f0893
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f07e0