joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4ba320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba40c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xfa20786c0af38f54
mov qword [rsp + 0x34], rdx
movabs rdx, 0x64df938efa20786c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xfbe969fe206487f8
mov qword [rsp + 0x40], rdx
movabs rdx, 0x113120913080d13
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x40c041213020113
mov qword [rsp + 0x24], rdx
movabs rdx, 0x12100c0305030a07
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4ba3aa
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x16
jge 0x4ba3dc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4ba3ff
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
cmp rsi, 0x14
jb 0x4ba390
jmp 0x4ba3f3
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00440dc0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451500
mov eax, edi
mov ecx, 0x14
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004ba320

Function at 0x4bd360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd45b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1105220ec2ea202e
mov qword [rsp + 0x39], rdx
movabs rdx, 0xd4e16174e220cc11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x166d07d620b47218
mov qword [rsp + 0x48], rdx
movabs rdx, 0x13160208070a000d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x4110307030e0801
mov qword [rsp + 0x27], rdx
movabs rdx, 0xe1404110307030e
mov qword [rsp + 0x29], rdx
movabs rdx, 0x60016040f020505
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4bd3f9
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x33]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4bd42b
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4bd44e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x33]
cmp rsi, 0x17
jb 0x4bd3df
jmp 0x4bd442
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00440dc0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451500
mov eax, edi
mov ecx, 0x17
call fcn.00451500
nop
nop dword [rax + rax]
call fcn.0044f280
jmp fcn.004bd360
Function at 0x4be020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be10c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1ec0d4d64175384d
mov qword [rsp + 0x31], rdx
movabs rdx, 0x646e6145d620731e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xdac9699a20cf1f61
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1307130b07010416
mov qword [rsp + 0x19], rdx
movabs rdx, 0x605050106011003
mov qword [rsp + 0x21], rdx
movabs rdx, 0x30a11051015150b
mov qword [rsp + 0x29], rdx
xor eax, eax
jmp 0x4be0aa
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7d]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
cmp rax, 0x18
jge 0x4be0dc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4be0ff
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7d]
cmp rsi, 0x17
jb 0x4be090
jmp 0x4be0f3
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.00440dc0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451500
mov eax, edi
mov ecx, 0x17
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004be020

Function at 0x4c9300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c93ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x10690d85b375650f
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc0c061a410690d85
mov qword [rsp + 0x38], rdx
movabs rdx, 0x740373fe66ec0cf4
mov qword [rsp + 0x40], rdx
movabs rdx, 0x300070b0b020b02
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x120302100c000208
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7050e1204120d0a
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4c938a
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c93bc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c93df
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
cmp rsi, 0x14
jb 0x4c9370
jmp 0x4c93d3
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00440dc0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451500
mov eax, edi
mov ecx, 0x14
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004c9300
Function at 0x4cc680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc77d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xdfad5c31e07263a0
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe360d915dfad5c31
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd6d1dd2ea6c2cee6
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0e0511080e1306
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1307120000040d0f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb11031207041307
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x90a0d030c070a0d
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4cc720
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 - 0x51]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 - 0x51]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4cc74d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4cc770
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4cc6ff
jmp 0x4cc764
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x14
call fcn.00440dc0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451500
mov eax, edi
mov ecx, 0x14
call fcn.00451500
nop
nop dword [rax]
call fcn.0044f280
jmp fcn.004cc680

Function at 0x4cddc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cde8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x888de37265d3ff86
mov qword [rsp + 0x29], rdx
movabs rdx, 0x668a078203740488
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2000d060508050b
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd0a0c0601020607
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x4cde2f
movzx r9d, byte [rsp + rsi + 0x29]
sub r9d, edx
lea edx, [r9 + 0x7e]
mov byte [rsp + rdi + 0x29], dl
lea edx, [r8 + 0x7e]
mov byte [rsp + rsi + 0x29], dl
add rax, 2
cmp rax, 0x10
jge 0x4cde5c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4cde7f
movzx r8d, byte [rsp + rdi + 0x29]
sub r8d, edx
cmp rsi, 0xf
jb 0x4cde12
jmp 0x4cde73
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
call fcn.00440dc0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451500
mov eax, edi
mov ecx, 0xf
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004cddc0
Function at 0x4cebe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cecca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5154543376655051
mov qword [rsp + 0x36], rdx
movabs rdx, 0x5a1b515454337665
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7361744a1d535a62
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0b0d0806090504
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb0810060b070a01
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70703100e050b0b
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4cec6d
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 + 0x26]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 + 0x26]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x18
jge 0x4cec9a
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4cecbd
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x4cec50
jmp 0x4cecb1
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00440dc0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451500
mov eax, edi
mov ecx, 0x12
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004cebe0

Function at 0x4cf440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf4fe
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9cb5fdf4636f6050
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x67baad9c
movabs rdx, 0x609080504070801
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x7080508
xor eax, eax
jmp 0x4cf4a1
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4cf4ce
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4cf4f1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4cf484
jmp 0x4cf4e5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00440dc0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451500
mov eax, edi
mov ecx, 0xb
call fcn.00451500
nop
nop
call fcn.0044f280
jmp fcn.004cf440
Function at 0x4d1f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1fcc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa1089ff7de64544d
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x57c7ff6586a1089f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30801040a010a0a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa030503070a0b06
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4d1f6f
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x7f]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x7f]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0x10
jge 0x4d1f9c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d1fbf
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4d1f52
jmp 0x4d1fb3
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00440dc0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451500
mov eax, edi
mov ecx, 0xd
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004d1f00

Function at 0x4d80a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8152
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x6c74636f7bffed75
mov qword [rsp + 0x20], rdx
movabs rdx, 0x200010003010003
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4d80f1
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x4d811e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4d8145
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x4d80d4
jmp 0x4d8135
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00440dc0
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00451500
mov eax, edi
mov ecx, 8
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004d80a0

Function at 0x4dc080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc132
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0xb761b4b3658f8741
mov qword [rsp + 0x20], rdx
movabs rdx, 0x105040507020705
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4dc0ce
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x28]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4dc102
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4dc125
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x28]
cmp rsi, 8
jb 0x4dc0b4
nop
jmp 0x4dc119
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00440dc0
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451500
mov eax, edi
mov ecx, 8
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004dc080
Function at 0x4dcfc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dd072
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x865acb5ffa26843
mov qword [rsp + 0x20], rdx
movabs rdx, 0x703070407050302
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4dd011
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 + 0x67]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 + 0x67]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x4dd03e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4dd065
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x4dcff4
jmp 0x4dd055
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00440dc0
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.00451500
mov eax, edi
mov ecx, 8
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004dcfc0

Function at 0x4ddc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ddd38
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x96051fa50ae67512
mov qword [rsp + 0x28], rdx
movabs rdx, 0x307030400020505
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x603
xor eax, eax
jmp 0x4ddcd5
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5a]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x4ddd08
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4ddd2b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5a]
nop
cmp rsi, 8
jb 0x4ddcbb
jmp 0x4ddd1f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00440dc0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451500
mov eax, edi
mov ecx, 8
call fcn.00451500
nop
call fcn.0044f280
nop dword [rax]
jmp fcn.004ddc80

Function at 0x4de0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de192
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x569a56f7e00740b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x303050002070503
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4de12e
movzx r9d, byte [rsp + rsi + 0x20]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5c]
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4de162
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4de185
movzx r8d, byte [rsp + rdi + 0x20]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5c]
cmp rsi, 8
jb 0x4de114
nop
jmp 0x4de179
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.00440dc0
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451500
mov eax, edi
mov ecx, 8
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004de0e0
Function at 0x4e2000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e20cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xcdcb5fe5a3cf85d9
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xdad5bedcd8cdcb5f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9020b0401060103
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x80c0007060a0307
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4e206f
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0x10
jge 0x4e209c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e20bf
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4e2052
jmp 0x4e20b3
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00440dc0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451500
mov eax, edi
mov ecx, 0xd
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004e2000

Function at 0x4e3c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e3cec
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6d72cd9f5f642994
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0xdced
movabs rdx, 0x109050109080801
mov qword [rsp + 0x18], rdx
movabs rdx, 0x500080801040109
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x4e3c84
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x40]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
cmp rax, 0xe
jge 0x4e3cbc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4e3cdf
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x40]
cmp rsi, 0xa
jb 0x4e3c6a
jmp 0x4e3cd3
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00440dc0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451500
mov eax, edi
mov ecx, 0xa
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004e3c20

Function at 0x4e4b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e4c3d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe8f8f7ea6d5eef50
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xe8
movabs rdx, 0x701080402070806
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x405
xor eax, eax
nop
jmp 0x4e4be0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x75]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x75]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4e4c0d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4e4c30
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4e4bc2
jmp 0x4e4c24
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00440dc0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451500
mov eax, edi
mov ecx, 9
call fcn.00451500
nop
nop dword [rax]
call fcn.0044f280
jmp fcn.004e4b80
Function at 0x4e6720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e67d8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xed776e61e3e5e4d6
mov qword [rsp + 0x28], rdx
movabs rdx, 0x100030700000201
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x10003
xor eax, eax
jmp 0x4e6779
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x7a]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x7a]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x4e67a8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4e67cb
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop
cmp rsi, 8
jb 0x4e675c
jmp 0x4e67bf
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00440dc0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451500
mov eax, edi
mov ecx, 8
call fcn.00451500
nop
call fcn.0044f280
nop dword [rax]
jmp fcn.004e6720

Function at 0x4e6800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e68b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6d61644c5f58664e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x501040000050000
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x4020000
xor eax, eax
jmp 0x4e6859
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0xc]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x4e6888
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4e68ab
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop
cmp rsi, 8
jb 0x4e683c
jmp 0x4e689f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00440dc0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451500
mov eax, edi
mov ecx, 8
call fcn.00451500
nop
call fcn.0044f280
nop dword [rax]
jmp fcn.004e6800

Function at 0x4ec520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ec5fd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6fc4148cd56f1840
mov qword [rsp + 0x32], rdx
movabs rdx, 0x2872cca02cdb6fc4
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5040b060d000901
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x803050105040b06
mov qword [rsp + 0x22], rdx
movabs rdx, 0x90004000a04010d
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x4ec5a0
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x52]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4ec5cd
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ec5f0
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0xe
jb 0x4ec582
jmp 0x4ec5e4
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
call fcn.00440dc0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451500
mov eax, edi
mov ecx, 0xe
call fcn.00451500
nop
nop dword [rax]
call fcn.0044f280
jmp fcn.004ec520
Function at 0x4ecca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ecd6c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x25d4c79cc6ca1d53
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x24c0b925
movabs rdx, 0x601090a06070103
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x809030205040506
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4ecd05
movzx r9d, byte [rsp + rsi + 0x2d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x2d], dl
mov byte [rsp + rsi + 0x2d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ecd3c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4ecd5f
movzx r8d, byte [rsp + rdi + 0x2d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 0xb
jb 0x4ecceb
jmp 0x4ecd53
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00440dc0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451500
mov eax, edi
mov ecx, 0xb
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004ecca0

Function at 0x4ed0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed18c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6e26e01a6921322d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x19da6e26e01a6921
mov qword [rsp + 0x30], rdx
movabs rdx, 0x96fd5d13831652d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90a0a070d0c050f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x20100090008090a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60f11040005040e
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4ed12a
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x31]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x16
jge 0x4ed15c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4ed17f
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x31]
cmp rsi, 0x12
jb 0x4ed110
jmp 0x4ed173
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00440dc0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451500
mov eax, edi
mov ecx, 0x12
call fcn.00451500
nop
call fcn.0044f280
jmp fcn.004ed0a0
Function at 0x4ed5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed67d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x988c8b729bd2af49
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xe4
movabs rdx, 0x603080101050205
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x5070701
xor eax, eax
nop
jmp 0x4ed620
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4ed64d
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4ed670
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4ed602
jmp 0x4ed664
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00440dc0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451500
mov eax, edi
mov ecx, 9
call fcn.00451500
nop
nop dword [rax]
call fcn.0044f280
jmp fcn.004ed5c0