joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4d0e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0f88
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xe573ec176fd7656b
mov qword [rsp + 0x3d], rdx
movabs rdx, 0xa481e4da5c176508
mov qword [rsp + 0x45], rdx
movabs rdx, 0x79f820a481e4da5c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe6e86995291573e8
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb0211040a0c0f13
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2170e0205160d05
mov qword [rsp + 0x25], rdx
movabs rdx, 0x11160b0c0b0b030c
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x815021607051a19
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x4d0f2b
movzx r9d, byte [rsp + rsi + 0x3d]
sub r9d, edx
lea edx, [r9 - 0x68]
mov byte [rsp + rdi + 0x3d], dl
lea edx, [r8 - 0x68]
mov byte [rsp + rsi + 0x3d], dl
add rax, 2
cmp rax, 0x20
jge 0x4d0f58
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4d0f7b
movzx r8d, byte [rsp + rdi + 0x3d]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4d0f0e
jmp 0x4d0f6f
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00456420
mov eax, edi
mov ecx, 0x1b
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d0e80

Function at 0x4d0fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d109b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x20076168ccafc06b
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x730c206220076168
mov qword [rsp + 0x40], rdx
movabs rdx, 0xfcd1af9a8657020
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb0b0a110d110902
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20a120913121009
mov qword [rsp + 0x26], rdx
movabs rdx, 0x13030b010603020a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x111101010f0d100f
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4d1039
movzx r9d, byte [rsp + rsi + 0x3c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x3c], dl
mov byte [rsp + rsi + 0x3c], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4d106b
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d108e
movzx r8d, byte [rsp + rdi + 0x3c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0x14
jb 0x4d101f
jmp 0x4d1082
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456420
mov eax, edi
mov ecx, 0x14
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.004d0fa0
Function at 0x4d1620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d172c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa3a99c8826e52d6c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b6e79732074c532
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb3c37aca6e24c2cd
mov qword [rsp + 0x50], rdx
movabs rdx, 0x204031205080704
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf03090802040312
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1708031010140501
mov qword [rsp + 0x28], rdx
movabs rdx, 0x304040717160902
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1606121102051604
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d16c8
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x24
jge 0x4d16fc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4d171f
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0x18
jb 0x4d16ae
jmp 0x4d1713
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456420
mov eax, edi
mov ecx, 0x18
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d1620

Function at 0x4d19c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1a8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3f2ef9e93c2cfcaf
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x74658265723f2ef9
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30a0200050a000a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x70407020106030a
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4d1a2f
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 + 0x46]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0xe
jge 0x4d1a5c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d1a7f
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4d1a12
jmp 0x4d1a73
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00456420
mov eax, edi
mov ecx, 0xd
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d19c0
Function at 0x4d22a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d23cc
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x635931206289332e
mov qword [rsp + 0x49], rdx
movabs rdx, 0x702786756e6f6261
mov qword [rsp + 0x51], rdx
movabs rdx, 0x6d2082756c596170
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7b6574706166b76d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x17011e0d02120d18
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x50f0f1e16140c17
mov qword [rsp + 0x27], rdx
movabs rdx, 0x112050f0f1e1614
mov qword [rsp + 0x29], rdx
movabs rdx, 0x21a060805080e1b
mov qword [rsp + 0x31], rdx
movabs rdx, 0x12061a0209061608
mov qword [rsp + 0x39], rdx
movabs rdx, 0x111b190503141119
mov qword [rsp + 0x41], rdx
xor eax, eax
jmp 0x4d2366
movzx r9d, byte [rsp + rsi + 0x49]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x29]
mov byte [rsp + rdi + 0x49], dl
mov byte [rsp + rsi + 0x49], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4d239c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1f
jae 0x4d23bf
movzx r8d, byte [rsp + rdi + 0x49]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x29]
cmp rsi, 0x1f
jb 0x4d234c
jmp 0x4d23b3
xor eax, eax
lea rbx, [rsp + 0x49]
mov ecx, 0x1f
call fcn.00444780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00456420
mov eax, edi
mov ecx, 0x1f
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d22a0

Function at 0x4d37a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d38a8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x580500455826086e
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xc6819e7a7bddc34
mov qword [rsp + 0x43], rdx
movabs rdx, 0x61201a27e20c6819
mov qword [rsp + 0x48], rdx
movabs rdx, 0x656cc089d489611b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x10d11090b0b0a01
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc180c17191a0b0b
mov qword [rsp + 0x25], rdx
movabs rdx, 0x21a08100f0c0c18
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x506111215171819
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4d384b
movzx r9d, byte [rsp + rsi + 0x3b]
sub r9d, edx
lea edx, [r9 + 0x68]
mov byte [rsp + rdi + 0x3b], dl
lea edx, [r8 + 0x68]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
cmp rax, 0x1e
jge 0x4d3878
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4d389b
movzx r8d, byte [rsp + rdi + 0x3b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4d382e
jmp 0x4d388f
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00456420
mov eax, edi
mov ecx, 0x1d
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004d37a0
Function at 0x4da560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da6ac
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x6f3ec9a9ace1bf04
mov qword [rsp + 0x53], rdx
movabs rdx, 0x45406c206f6f3ec9
mov qword [rsp + 0x58], rdx
movabs rdx, 0x641472edc2086567
mov qword [rsp + 0x60], rdx
movabs rdx, 0xcefe1f161da7a665
mov qword [rsp + 0x68], rdx
movabs rdx, 0x8693da7420ec7480
mov qword [rsp + 0x70], rdx
movabs rdx, 0x61a230003170119
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1817111c061a2300
mov qword [rsp + 0x23], rdx
movabs rdx, 0x2313111a1c13100f
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x131305240c23040c
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1d040b1b180b2411
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x111b191916161d00
mov qword [rsp + 0x43], rdx
movabs rdx, 0x22041f0203161805
mov qword [rsp + 0x4b], rdx
xor eax, eax
jmp 0x4da644
movzx r9d, byte [rsp + rsi + 0x53]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x33]
mov byte [rsp + rdi + 0x53], dl
mov byte [rsp + rsi + 0x53], r8b
add rax, 2
cmp rax, 0x34
jge 0x4da67c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x25
jae 0x4da69f
movzx r8d, byte [rsp + rdi + 0x53]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x33]
cmp rsi, 0x25
jb 0x4da62a
jmp 0x4da693
xor eax, eax
lea rbx, [rsp + 0x53]
mov ecx, 0x25
call fcn.00444780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00456420
mov eax, edi
mov ecx, 0x25
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004da560

Function at 0x4df080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4df1ac
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xb76e61ff0a316b74
mov qword [rsp + 0x46], rdx
movabs rdx, 0x7289b76e61ff0a31
mov qword [rsp + 0x48], rdx
movabs rdx, 0xac136ecde5f16665
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6f8cd06128201d73
mov qword [rsp + 0x58], rdx
movabs rdx, 0xfb63972dee73b17b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x130d0818170e0e1d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1a1e172108011518
mov qword [rsp + 0x26], rdx
movabs rdx, 0x210c031e1a110e1d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1f04071b1b021108
mov qword [rsp + 0x36], rdx
movabs rdx, 0x102041a07151011
mov qword [rsp + 0x3e], rdx
xor eax, eax
jmp 0x4df146
movzx r9d, byte [rsp + rsi + 0x46]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x31]
mov byte [rsp + rdi + 0x46], dl
mov byte [rsp + rsi + 0x46], r8b
add rax, 2
cmp rax, 0x28
jge 0x4df17c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x4df19f
movzx r8d, byte [rsp + rdi + 0x46]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x31]
cmp rsi, 0x22
jb 0x4df12c
jmp 0x4df193
xor eax, eax
lea rbx, [rsp + 0x46]
mov ecx, 0x22
call fcn.00444780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00456420
mov eax, edi
mov ecx, 0x22
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004df080
Function at 0x4e06e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e07ec
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x342ad77320da6f08
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd18cc985a7a4b4fb
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6980cdcf33697711
mov qword [rsp + 0x50], rdx
movabs rdx, 0x15060714070e170f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf1515060714070e
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd0c001408160502
mov qword [rsp + 0x28], rdx
movabs rdx, 0x140a080e02130210
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb15150e15021609
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4e0788
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x22
jge 0x4e07bc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4e07df
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0x18
jb 0x4e076e
jmp 0x4e07d3
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456420
mov eax, edi
mov ecx, 0x18
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004e06e0

Function at 0x4e0800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e08d8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xf8cd2b41b02c0f7
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x6c83a5c1
movabs rdx, 0x80a060602050307
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x401080a06060205
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9000007020503
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4e0874
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x12
jge 0x4e08a8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4e08cb
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
nop
cmp rsi, 0xc
jb 0x4e085a
jmp 0x4e08bf
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456420
mov eax, edi
mov ecx, 0xc
call fcn.00456420
nop
call fcn.00454140
nop dword [rax]
jmp fcn.004e0800
Function at 0x4e0900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e09be
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x32696e276a705f6e
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x776c3732
movabs rdx, 0x10004050806030a
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x3020507
xor eax, eax
jmp 0x4e0961
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 + 0xb]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 + 0xb]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4e098e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4e09b1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4e0944
jmp 0x4e09a5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456420
mov eax, edi
mov ecx, 0xb
call fcn.00456420
nop
nop
call fcn.00454140
jmp fcn.004e0900

Function at 0x4e28c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e29bb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7250653d55494a31
mov qword [rsp + 0x34], rdx
movabs rdx, 0x731e636f7250653d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2a5255344e1a4159
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa12030c00000410
mov qword [rsp + 0x18], rdx
movabs rdx, 0x10001010110e0213
mov qword [rsp + 0x20], rdx
movabs rdx, 0x120f041110001010
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc04100411010200
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4e2959
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xb]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4e298b
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4e29ae
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xb]
cmp rsi, 0x14
jb 0x4e293f
jmp 0x4e29a2
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456420
mov eax, edi
mov ecx, 0x14
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.004e28c0
Function at 0x4e3740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e380c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7467a2f04c748a33
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xb5692ede
movabs rdx, 0xb010009050b0b05
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x40b010900080900
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4e37a5
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x57]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4e37dc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4e37ff
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x57]
cmp rsi, 0xc
jb 0x4e378b
jmp 0x4e37f3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456420
mov eax, edi
mov ecx, 0xc
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004e3740

Function at 0x4e43e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e44b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4b6d753a655c7249
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x446d456c654b6d75
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb01020309020903
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3040c0006060901
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4e444c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4e447e
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e44a5
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
cmp rsi, 0xd
jb 0x4e4432
jmp 0x4e4495
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00456420
mov eax, edi
mov ecx, 0xd
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004e43e0
Function at 0x4e44c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e4592
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4b6e65702767ae52
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x21c5bde1654b6e65
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0b030303010c0b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x103090b0b0b0a0b
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4e452c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x75]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0xe
jge 0x4e455e
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e4585
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x75]
cmp rsi, 0xd
jb 0x4e4512
jmp 0x4e4575
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00456420
mov eax, edi
mov ecx, 0xd
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004e44c0

Function at 0x4e7720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e77dd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x743e454849496553
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x4ef4
movabs rdx, 0x902000604020809
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x200
xor eax, eax
jmp 0x4e7780
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4e77ad
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4e77d0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4e7762
jmp 0x4e77c4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00456420
mov eax, edi
mov ecx, 0xa
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004e7720

Function at 0x4eb460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4eb52c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb778d94e64d0be46
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xd04632493ab778d9
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2020b080a02010c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x50b090508070202
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4eb4cf
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x5a]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x5a]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0xe
jge 0x4eb4fc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4eb51f
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4eb4b2
jmp 0x4eb513
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00456420
mov eax, edi
mov ecx, 0xd
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004eb460
Function at 0x4ec1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec25e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xbbcba1be9fbbba35
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0xc87221bb
movabs rdx, 0x300050402010802
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0xa030607
xor eax, eax
jmp 0x4ec201
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4ec22e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ec251
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4ec1e4
jmp 0x4ec245
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456420
mov eax, edi
mov ecx, 0xb
call fcn.00456420
nop
nop
call fcn.00454140
jmp fcn.004ec1a0

Function at 0x4ecac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ecbbd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x65c2286771d58a47
mov qword [rsp + 0x34], rdx
movabs rdx, 0x95d13b6e65c22867
mov qword [rsp + 0x38], rdx
movabs rdx, 0xdd1c186f740a97c2
mov qword [rsp + 0x40], rdx
movabs rdx, 0x105060c04110403
mov qword [rsp + 0x18], rdx
movabs rdx, 0x50a0d1102120b03
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1109040e050a0d11
mov qword [rsp + 0x24], rdx
movabs rdx, 0x40a110102130b09
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4ecb60
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 - 0x42]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 - 0x42]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4ecb8d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4ecbb0
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4ecb3f
jmp 0x4ecba4
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456420
mov eax, edi
mov ecx, 0x14
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004ecac0