joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e3ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e3fcc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x75a4b16655796e7f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd0e79a74532a419d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x659a73a4b49add5f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0d03130f101105
mov qword [rsp + 0x36], rdx
movabs rdx, 0x11140d0d03130f10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x705080706100e08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1502070f06031616
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10003100a131210
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4e3f68
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4e3f9c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4e3fbf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3f]
cmp rsi, 0x18
jb 0x4e3f4e
jmp 0x4e3fb3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00441980
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00452300
mov eax, edi
mov ecx, 0x18
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004e3ec0

Function at 0x4e3fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e40fa
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x68747216873e2e45
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6170691a822b4162
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5d324e746a586170
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x655e4f5882643a61
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0a141415040a19
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x30a0b0303030e0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x15111b131c151308
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc10040508170c02
mov qword [rsp + 0x50], rdx
movabs rdx, 0x81c14101005131a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4e4097
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1e]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x26
jge 0x4e40c9
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4e40ed
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1e]
cmp rsi, 0x1e
jb 0x4e407d
jmp 0x4e40e1
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.00441980
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00452300
mov eax, edi
mov ecx, 0x1e
call fcn.00452300
nop
call fcn.00450080
nop
jmp fcn.004e3fe0
Function at 0x4e53c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e54bd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2061cc5741e34e2c
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc507af59242061cc
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe2c26fe1206472d8
mov qword [rsp + 0x26], rdx
movabs rdx, 0x130c0a120d080a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb04040011050113
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4020b0404001105
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd00090013140d12
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e5460
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x5a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x5a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4e548d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e54b0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4e543f
jmp 0x4e54a4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00441980
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00452300
mov eax, edi
mov ecx, 0x15
call fcn.00452300
nop
nop dword [rax]
call fcn.00450080
jmp fcn.004e53c0

Function at 0x4e5bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e5caa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x8ca32061698c6fa7
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x952c718ca3206169
mov qword [rsp + 0x22], rdx
movabs rdx, 0x658c87725e646271
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90e0e0601010b08
mov qword [rsp + 0x32], rdx
movabs rdx, 0x80b0a0f1109090e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0910020c070c00
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e5c4d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4e5c7a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4e5c9d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4e5c30
jmp 0x4e5c91
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441980
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00452300
mov eax, edi
mov ecx, 0x13
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004e5bc0
Function at 0x4e6d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e6e5b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xff29bd4b610f7312
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3ed584eff29bd4b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65ae3354202dbe20
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x6040c020e0d0605
mov qword [rsp + 0x32], rdx
movabs rdx, 0x612040408110909
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x7090a0004090612
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0b120406110608
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e6df9
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x40]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4e6e2b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4e6e4e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x40]
cmp rsi, 0x14
jb 0x4e6ddf
jmp 0x4e6e42
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441980
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00452300
mov eax, edi
mov ecx, 0x14
call fcn.00452300
nop
nop dword [rax + rax]
call fcn.00450080
jmp fcn.004e6d60

Function at 0x4e7aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7b9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xcdf261e295c9d0dc
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb2383ca6decdf261
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb18069c6c264ddbe
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0e0a050c000108
mov qword [rsp + 0x32], rdx
movabs rdx, 0x30314020314000d
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x410071306040303
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110903020b03050d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e7b39
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4e7b6b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e7b8e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7a]
cmp rsi, 0x15
jb 0x4e7b1f
jmp 0x4e7b82
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441980
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00452300
mov eax, edi
mov ecx, 0x15
call fcn.00452300
nop
nop dword [rax + rax]
call fcn.00450080
jmp fcn.004e7aa0
Function at 0x4e7bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7cec
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x9374f5615820bcbd
mov qword [rsp + 0x19], rdx
movabs rdx, 0x85a522b05793641b
mov qword [rsp + 0x21], rdx
movabs rdx, 0x6a6eb5745385a522
mov qword [rsp + 0x26], rdx
movabs rdx, 0x422a15420a5d1b5
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x14170e001b09160f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x121a1a040100140b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1703121a1a040100
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa141b15150c0708
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe041c1517120d0c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x140500080316121a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4e7c86
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x36]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4e7cbc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1d
jae 0x4e7cdf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x36]
cmp rsi, 0x1d
jb 0x4e7c6c
jmp 0x4e7cd3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.00441980
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00452300
mov eax, edi
mov ecx, 0x1d
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004e7bc0

Function at 0x4e7d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7dea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x30647f20766a754f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x647e30647f20766a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5f52658969647261
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf03100810050711
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1106100806060d01
mov qword [rsp + 0x38], rdx
movabs rdx, 0x100e0f02060d0202
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e7d8d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x18]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x18]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x4e7dba
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4e7ddd
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4e7d70
jmp 0x4e7dd1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00441980
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00452300
mov eax, edi
mov ecx, 0x12
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004e7d00
Function at 0x4e7e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e7f0c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6fff2a157425d1ba
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf361221d20612dd8
mov qword [rsp + 0x21], rdx
movabs rdx, 0xe6f361221d20612d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9d160db3a5156492
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x17021205081513
mov qword [rsp + 0x32], rdx
movabs rdx, 0x20c1704090d0d01
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x11160c180013020c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf130c1614130610
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e7ea8
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x39]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4e7edc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4e7eff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x39]
cmp rsi, 0x19
jb 0x4e7e8e
jmp 0x4e7ef3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.00441980
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00452300
mov eax, edi
mov ecx, 0x19
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004e7e00

Function at 0x4e9900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e99ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3c744e3e58e17215
mov qword [rsp + 0x18], rdx
movabs rdx, 0x64453c744e3e58e1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x60469244b0e2f3c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x4100b0500000d11
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70208100c0a0410
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0a0d070e0d1003
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e998d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x4e99ba
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4e99dd
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x4e9970
jmp 0x4e99d1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00441980
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00452300
mov eax, edi
mov ecx, 0x12
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004e9900
Function at 0x4ea240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ea35d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x58647c871b6b7756
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6e7a868b708a6c7f
mov qword [rsp + 0x23], rdx
movabs rdx, 0x646e7a868b708a6c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x847b617e612c7772
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x13030b0516040c17
mov qword [rsp + 0x34], rdx
movabs rdx, 0xd15010113030b05
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70c041114130406
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1504170a0204160b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1081218030b0e09
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ea300
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x18]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x18]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4ea32d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4ea350
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4ea2dd
jmp 0x4ea344
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441980
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00452300
mov eax, edi
mov ecx, 0x19
call fcn.00452300
nop
nop dword [rax]
call fcn.00450080
jmp fcn.004ea240

Function at 0x4eaa60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eab5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x3c5156202770fa3b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x12256135532019f2
mov qword [rsp + 0x24], rdx
movabs rdx, 0x32394d2e205d3c08
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0816010f010e10
mov qword [rsp + 0x34], rdx
movabs rdx, 0x120c140c100f070e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x3100009120c140c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100b150607111711
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4eab00
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x43]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x43]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4eab2d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4eab50
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x4eaadf
jmp 0x4eab44
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00441980
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00452300
mov eax, edi
mov ecx, 0x18
call fcn.00452300
nop
nop dword [rax]
call fcn.00450080
jmp fcn.004eaa60
Function at 0x4eb1c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb2cc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xc5749fa641209ef6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x99b75320ba5dedf5
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70a499b75320ba5d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4c6d3857a9519561
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1519090e0b041917
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf17080a1507080a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa010f0e000a0510
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11416151100130e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4eb268
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x56]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x20
jge 0x4eb29c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4eb2bf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x56]
cmp rsi, 0x1a
jb 0x4eb24e
jmp 0x4eb2b3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.00441980
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00452300
mov eax, edi
mov ecx, 0x1a
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004eb1c0

Function at 0x4ecf80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed07b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xe6bc7fa6a9168eb4
mov qword [rsp + 0x19], rdx
movabs rdx, 0x495cf8aed72013e6
mov qword [rsp + 0x20], rdx
movabs rdx, 0x656d9e9d8d64724c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x13080105080e0801
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20d06070e0b1413
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0600140a00120f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30a040b0306040d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ed019
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x59]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x20
jge 0x4ed04b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4ed06e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x59]
cmp rsi, 0x17
jb 0x4ecfff
jmp 0x4ed062
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441980
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00452300
mov eax, edi
mov ecx, 0x17
call fcn.00452300
nop
nop dword [rax + rax]
call fcn.00450080
jmp fcn.004ecf80
Function at 0x4ed4a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed58c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x5ecce1e8d119675b
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd75ecce1e8d11967
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb9f169e2206465f4
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70d050907000408
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0f06010701070d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3030302070f0010
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ed52a
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x70]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x4ed55c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4ed57f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x70]
cmp rsi, 0x11
jb 0x4ed510
jmp 0x4ed573
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441980
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00452300
mov eax, edi
mov ecx, 0x11
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004ed4a0

Function at 0x4efb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4efbfb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x901b0ddd619a6148
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x63abee74539e901b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x94e2de8445f38698
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe1508130d13050b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0f080f0c041405
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1108100f0c05060c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70d02050d0f120b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4efb99
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4efbcb
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4efbee
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 0x16
jb 0x4efb7f
jmp 0x4efbe2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441980
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00452300
mov eax, edi
mov ecx, 0x16
call fcn.00452300
nop
nop dword [rax + rax]
call fcn.00450080
jmp fcn.004efb00
Function at 0x4f29a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f2a72
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x75c9d6842e33242c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x302ecf2ecf036275
mov qword [rsp + 0x20], rdx
movabs rdx, 0x109090108040705
mov qword [rsp + 0x28], rdx
movabs rdx, 0x605040901080c0a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4f2a0c
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4f2a3e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4f2a65
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x54]
cmp rsi, 0xf
jb 0x4f29f2
jmp 0x4f2a55
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00452300
mov eax, edi
mov ecx, 0xf
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004f29a0

Function at 0x4f7700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f77ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x41d9480170301773
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3409f041d9480170
mov qword [rsp + 0x22], rdx
movabs rdx, 0x79726ff2fa1a7242
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60d08050e04040d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x70606010605060d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0b0a020d0a0f09
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4f778a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4f77bc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4f77df
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1a]
cmp rsi, 0x13
jb 0x4f7770
jmp 0x4f77d3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441980
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00452300
mov eax, edi
mov ecx, 0x13
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004f7700