joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4be600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be6dd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6d01cc954911c03
mov qword [rsp + 0x18], rdx
movabs rdx, 0x38666e2674fa06d0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x300020603030a04
mov qword [rsp + 0x26], rdx
movabs rdx, 0x602030002060303
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd02010500070a08
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4be680
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x5b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x5b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4be6ad
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4be6d0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4be662
jmp 0x4be6c4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004be600

Function at 0x4c01a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c027d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4c0a401268045367
mov qword [rsp + 0x19], rdx
movabs rdx, 0x946506e794c0a40
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20a0c0205040404
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc06020a0c020504
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa070b0b0b0c0106
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4c0220
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4c024d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4c0270
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4c0202
jmp 0x4c0264
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004c01a0
Function at 0x4ce300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce3cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x775b6c62696a7852
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8f7183756c775b6c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x906010b0b040208
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0b01030307030c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ce36f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 5]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 5]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x4ce39c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4ce3bf
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4ce352
jmp 0x4ce3b3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ce300

Function at 0x4d0180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0238
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xbe2fc58f652f2a44
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x501020601010104
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2070406
xor eax, eax
jmp 0x4d01d6
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6a]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x4d0208
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4d022b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6a]
cmp rsi, 8
jb 0x4d01bc
jmp 0x4d021f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451880
mov eax, edi
mov ecx, 8
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004d0180
Function at 0x4d6b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6c88
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1d183aac7320f753
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x592aa97485206e72
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa2b0285ad6472a0
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x610151605040314
mov qword [rsp + 0x34], rdx
movabs rdx, 0x140f0b0606101516
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6151403040d040d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5070e1505171017
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10313060f140313
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d6c2b
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x72]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x72]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x24
jge 0x4d6c58
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d6c7b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x4d6c0e
jmp 0x4d6c6f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004d6b80

Function at 0x4d7260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d735d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6e696c6bf865dd47
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7b6e61858820536e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70f25cec20ed72fa
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb1611040e14130e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x130116070801060e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x7060314140a1301
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0f111606150e07
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d7300
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4d732d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4d7350
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x17
jb 0x4d72df
jmp 0x4d7344
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004d7260
Function at 0x4d8f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8ffb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xdbdaa2d69b679b82
mov qword [rsp + 0x18], rdx
movabs rdx, 0x646e618d1220fd65
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa76d0ba797cbb061
mov qword [rsp + 0x28], rdx
movabs rdx, 0x41207150b150914
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1715001414070b06
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc11040603010912
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90b070c12130505
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d8f99
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x20
jge 0x4d8fcb
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d8fee
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4e]
cmp rsi, 0x18
jb 0x4d8f7f
jmp 0x4d8fe2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004d8f00

Function at 0x4dab80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dac8c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xfb64fd9fe3a18166
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8203eb5320f1d9f8
mov qword [rsp + 0x27], rdx
movabs rdx, 0x6d8203eb5320f1d9
mov qword [rsp + 0x28], rdx
movabs rdx, 0x78d369e62064ebd7
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20f150908180402
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa120800100e060e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe030d0506020104
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1708110204070210
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4dac28
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x20
jge 0x4dac5c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4dac7f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5b]
cmp rsi, 0x19
jb 0x4dac0e
jmp 0x4dac73
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004dab80
Function at 0x4dbe60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dbf5b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8a46fb73d7bb6136
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x69e6616408208a46
mov qword [rsp + 0x20], rdx
movabs rdx, 0x656daa4a20b172c9
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe0d07030a03060a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50512050300070e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x31207100c090206
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13020e0c00050912
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4dbef9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4dbf2b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4dbf4e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0x16
jb 0x4dbedf
jmp 0x4dbf42
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004dbe60

Function at 0x4dc8e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc9db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x207214476edeb931
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb791d02dac207214
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb58da2b79412acd0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x109050011120900
mov qword [rsp + 0x32], rdx
movabs rdx, 0x514020d0f0e0c01
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa02080b000e0514
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0d000504101302
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4dc979
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x53]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4dc9ab
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4dc9ce
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x53]
cmp rsi, 0x15
jb 0x4dc95f
jmp 0x4dc9c2
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004dc8e0
Function at 0x4dd300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dd3fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7200514d846e501d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x64c0e82e293b6572
mov qword [rsp + 0x20], rdx
movabs rdx, 0x65b6dfe7d53a72ea
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb03090611040d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0b0c1501150514
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1030a000b0a140f
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0b060013031211
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4dd3a0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4dd3cd
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4dd3f0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4dd37f
jmp 0x4dd3e4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004dd300

Function at 0x4de680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4de78c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf6f184126d61030e
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf76182ba7872de74
mov qword [rsp + 0x21], rdx
movabs rdx, 0x28f76182ba7872de
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65f3c8f820d97288
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0b0a1010050007
mov qword [rsp + 0x32], rdx
movabs rdx, 0x40f010d05041111
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x91006170715040f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13151101160c0301
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4de728
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x59]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4de75c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4de77f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x59]
cmp rsi, 0x19
jb 0x4de70e
jmp 0x4de773
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004de680
Function at 0x4e1c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1d0a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x20dcae72e26ce342
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8b9a61165820dcae
mov qword [rsp + 0x20], rdx
movabs rdx, 0xaa4bcc5498e1c3a6
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd09030108091013
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc14080c0f0b140d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe120b0103050506
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4e1cad
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x28]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x28]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x4e1cda
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e1cfd
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4e1c90
jmp 0x4e1cf1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004e1c20

Function at 0x4e1d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1e1d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xbb6d246973207590
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5afaac253bb6d24
mov qword [rsp + 0x24], rdx
movabs rdx, 0x47086954d6c78416
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb0d100e020f1302
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa050a0007060205
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc140b090a050a00
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0c0c0202140513
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e1dc0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x42]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x42]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4e1ded
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e1e10
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x15
jb 0x4e1d9f
jmp 0x4e1e04
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004e1d20
Function at 0x4e2960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e2a7d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x1f8333367420b588
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2ddac7336f90448f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x64b961da53e22dda
mov qword [rsp + 0x28], rdx
movabs rdx, 0x986da7c821d472e9
mov qword [rsp + 0x30], rdx
movabs rdx, 0x619021a160f0016
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc12041b0408011a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x507000016041809
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe1b050614080a10
mov qword [rsp + 0x50], rdx
movabs rdx, 0x16120d0d0f18071d
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4e2a20
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4e2a4d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4e2a70
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4e29fd
jmp 0x4e2a64
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00451880
mov eax, edi
mov ecx, 0x1e
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004e2960

Function at 0x4e2ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e2ca8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7e66659c838b65d3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xce6143532097b8a1
mov qword [rsp + 0x23], rdx
movabs rdx, 0x64ce6143532097b8
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8f894590d7907261
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa140d0f070300
mov qword [rsp + 0x34], rdx
movabs rdx, 0x609060016030700
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x16180d0606090600
mov qword [rsp + 0x40], rdx
movabs rdx, 0x208181504171306
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4e2c4b
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 6]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x4e2c78
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4e2c9b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4e2c2e
jmp 0x4e2c8f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004e2ba0
Function at 0x4ed840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ed918
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2d06cd22ad8d268
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x96cbe63b
movabs rdx, 0x40400060304010a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x706040400060304
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60709020b0b080b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ed8b7
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x4ed8e8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4ed90b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x4ed89a
jmp 0x4ed8ff
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
nop dword [rax]
jmp fcn.004ed840

Function at 0x4ee0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ee1a6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6f9aa083908b8852
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x68958453
movabs rdx, 0x1010304020a0605
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x909060b
xor eax, eax
jmp 0x4ee140
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x29]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4ee172
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4ee197
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x29]
cmp rsi, 0xc
jb 0x4ee124
jmp 0x4ee18b
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ee0e0
Function at 0x4f82e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4f840c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x9c3a7470a4b55d75
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb1979c3a7470a4b5
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6585a1b9a2a7877c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8b308e897465a09d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2063c46a83725fd1
mov qword [rsp + 0x34], rdx
movabs rdx, 0x91f0c031a1b0112
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd070910091f0c03
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2020813160b1308
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b1902101d0f0f0e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x51e180a171f2006
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4f83a6
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x42]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x24
jge 0x4f83dc
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x4f83ff
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x42]
cmp rsi, 0x22
jb 0x4f838c
jmp 0x4f83f3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x22
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00451880
mov eax, edi
mov ecx, 0x22
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004f82e0