joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4bbdc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbebd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x74472f4b47485f52
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6f32736481347447
mov qword [rsp + 0x20], rdx
movabs rdx, 0x73495d6268575185
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2010f050108040c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe010a13140e1010
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0611010a0a0104
mov qword [rsp + 0x40], rdx
movabs rdx, 0x509010108111409
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bbe60
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x26]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x26]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4bbe8d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4bbeb0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4bbe3f
jmp 0x4bbea4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004518a0
mov eax, edi
mov ecx, 0x16
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004bbdc0

Function at 0x4bcb20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bcbd8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x32d139c649414345
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x700050706000405
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x701
xor eax, eax
jmp 0x4bcb78
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4bcba8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4bcbcb
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4bcb5b
jmp 0x4bcbbf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004518a0
mov eax, edi
mov ecx, 8
call fcn.004518a0
nop
call fcn.0044f620
nop dword [rax]
jmp fcn.004bcb20
Function at 0x4bd980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bda46
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf56bd8b2730865a7
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xa4b0
movabs rdx, 0x808040902040704
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9000509
xor eax, eax
jmp 0x4bd9e0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4bda12
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4bda37
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 0xa
jb 0x4bd9c3
jmp 0x4bda2b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004518a0
mov eax, edi
mov ecx, 0xa
nop
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004bd980

Function at 0x4bf280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf366
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x69581670616e726e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x231f666066726958
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa000c07040b0c07
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0605010a000c07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5000c0c0c010409
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4bf300
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xf]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4bf332
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4bf357
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xf]
cmp rsi, 0xe
jb 0x4bf2e2
jmp 0x4bf34b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004518a0
mov eax, edi
mov ecx, 0xe
nop
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004bf280
Function at 0x4cace0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cadbd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x506c653a4842675b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x57785b7965603050
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40709040800010c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x402040709040800
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8060c0400040309
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4cad60
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4cad8d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4cadb0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x4cad42
jmp 0x4cada4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004518a0
mov eax, edi
mov ecx, 0xf
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004cace0

Function at 0x4caec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4caf8c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x554d6c5857676d52
mov qword [rsp + 0x19], rdx
movabs rdx, 0x57655d6c314d5b55
mov qword [rsp + 0x20], rdx
movabs rdx, 0x306010c0a040908
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0c0007090304
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4caf2f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4caf5c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4caf7f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4caf12
jmp 0x4caf73
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004518a0
mov eax, edi
mov ecx, 0xf
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004caec0

Function at 0x4cc680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc73d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb5b2a804f393afea
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xc3
movabs rdx, 0x405070202000403
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1060803
xor eax, eax
nop
jmp 0x4cc6e0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4cc70d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4cc730
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4cc6c2
jmp 0x4cc724
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.004518a0
mov eax, edi
mov ecx, 9
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004cc680
Function at 0x4cccc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ccdbd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e697e70ae87a774
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x99a061766e697e70
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x728c624b38b87fc0
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10020e0c0e030401
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x40b0b0e0d0a0502
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc12040b0b0e0d0a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc040b0e0f0d030b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ccd60
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 2]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4ccd8d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4ccdb0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x14
jb 0x4ccd3f
jmp 0x4ccda4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004518a0
mov eax, edi
mov ecx, 0x14
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004cccc0

Function at 0x4cd0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd186
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x615c203a082855fd
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x205d394448ef4664
mov qword [rsp + 0x24], rdx
movabs rdx, 0x900010603000c0a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x20c0f0f09000106
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20a0b0a030c02
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4cd120
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 2]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4cd152
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4cd177
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 2]
cmp rsi, 0x10
jb 0x4cd102
jmp 0x4cd16b
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004518a0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004cd0a0
Function at 0x4d23e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d24dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x21ad755273cd61d6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x510561b9530221ad
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6537bdecd0bad5a1
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc07070307080604
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa140208020f0a06
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1300140710100d14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110e120c11140d0a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d2480
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x44]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x44]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4d24ad
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d24d0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4d245f
jmp 0x4d24c4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004518a0
mov eax, edi
mov ecx, 0x16
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004d23e0

Function at 0x4d2d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2e5a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x201609f474e4d636
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x64347ede6261d72e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x200e3b0f08226434
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf6363ac78653128
mov qword [rsp + 0x34], rdx
movabs rdx, 0x131a1a140b17011c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x6021106131a1a14
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc060104081c1706
mov qword [rsp + 0x48], rdx
movabs rdx, 0x90e00050c120d12
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc0610141d040e01
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4d2df7
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x24
jge 0x4d2e29
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4d2e4d
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1f]
cmp rsi, 0x1e
jb 0x4d2ddd
jmp 0x4d2e41
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.00441380
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.004518a0
mov eax, edi
mov ecx, 0x1e
call fcn.004518a0
nop
call fcn.0044f620
nop
jmp fcn.004d2d40
Function at 0x4d4460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d454a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x51b1997461629a92
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x83b651b199746162
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa4c0b754a884963d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90f080c0704100b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10c09060b110a0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90a000c05010404
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d44ed
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x4d451a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4d453d
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4d44d0
jmp 0x4d4531
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004518a0
mov eax, edi
mov ecx, 0x12
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004d4460

Function at 0x4d4860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d4987
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x6e693c4be21b49ff
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5c33642fee264f20
mov qword [rsp + 0x25], rdx
movabs rdx, 0x20596d44e81c535c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x241d644e78657b72
mov qword [rsp + 0x34], rdx
movabs rdx, 0x30b0c1b1d131211
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x11e0b09020503
mov qword [rsp + 0x44], rdx
movabs rdx, 0xf13010500011e0b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c0f05150b04090e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b001d031d050a17
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1010051d1804071b
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4d4929
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x3b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x3b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x2c
jge 0x4d4957
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x4d497a
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1f
jb 0x4d490c
jmp 0x4d496e
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1f
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.004518a0
mov eax, edi
mov ecx, 0x1f
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004d4860
Function at 0x4d57c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d58cc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x739575c196a0b381
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7d856fae208f7b5b
mov qword [rsp + 0x27], rdx
movabs rdx, 0x7f7d856fae208f7b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa07789b271644e83
mov qword [rsp + 0x30], rdx
movabs rdx, 0x160f0a1802121506
mov qword [rsp + 0x38], rdx
movabs rdx, 0x911160e0c140c16
mov qword [rsp + 0x40], rdx
movabs rdx, 0x307060e0403010e
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf1508170a100d
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d5868
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x40]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x20
jge 0x4d589c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4d58bf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x40]
cmp rsi, 0x19
jb 0x4d584e
jmp 0x4d58b3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004518a0
mov eax, edi
mov ecx, 0x19
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004d57c0

Function at 0x4d99a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9a8a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x642040696a37755f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x706e3a642040696a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3131206353f75a50
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50e0b020e000d
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0308080b050005
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf070a020f080309
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d9a2d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x1d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x1d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4d9a5a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d9a7d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4d9a10
jmp 0x4d9a71
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004518a0
mov eax, edi
mov ecx, 0x13
call fcn.004518a0
nop
call fcn.0044f620
jmp fcn.004d99a0
Function at 0x4db5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4db69b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6eece1fb68f172d5
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x67e0618b53396eec
mov qword [rsp + 0x20], rdx
movabs rdx, 0x554ce69a5fe97261
mov qword [rsp + 0x28], rdx
movabs rdx, 0x402150114080606
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1314140d05100812
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110a11061114010c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd000d0d14150c14
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4db639
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x64]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4db66b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4db68e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x64]
cmp rsi, 0x16
jb 0x4db61f
jmp 0x4db682
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004518a0
mov eax, edi
mov ecx, 0x16
call fcn.004518a0
nop
nop dword [rax + rax]
call fcn.0044f620
jmp fcn.004db5a0

Function at 0x4dba80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dbb7d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x97917071676e8c3e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x818562cc53806597
mov qword [rsp + 0x26], rdx
movabs rdx, 0x536d8f8ad3647d61
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6090b1413120c0e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x12100b0c13041207
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x120012100b0c1304
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16090904010d0114
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4dbb20
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 4]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 4]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4dbb4d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4dbb70
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4dbaff
jmp 0x4dbb64
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004518a0
mov eax, edi
mov ecx, 0x17
call fcn.004518a0
nop
nop dword [rax]
call fcn.0044f620
jmp fcn.004dba80
Function at 0x4dc520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dc61b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xbb1ee62aae61c317
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf21dbb1ee62aae61
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x18e327b41d2e2c16
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa10050a0e0f0703
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x30a090b0f040000
mov qword [rsp + 0x36], rdx
movabs rdx, 0x70d030a090b0f04
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa080b110b010c06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4dc5b9
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2a]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4dc5eb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4dc60e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2a]
cmp rsi, 0x12
jb 0x4dc59f
jmp 0x4dc602
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004518a0
mov eax, edi
mov ecx, 0x12
call fcn.004518a0
nop
nop dword [rax + rax]
call fcn.0044f620
jmp fcn.004dc520

Function at 0x4ddea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ddf9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd581ed36fd352e31
mov qword [rsp + 0x19], rdx
movabs rdx, 0x64ee444253dae7d5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3f6d1e54d2647c3f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x707120804160d10
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0c05090f010b08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1000030203060d10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x614020600050607
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ddf39
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1b]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x20
jge 0x4ddf6b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4ddf8e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1b]
cmp rsi, 0x17
jb 0x4ddf1f
jmp 0x4ddf82
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004518a0
mov eax, edi
mov ecx, 0x17
call fcn.004518a0
nop
nop dword [rax + rax]
call fcn.0044f620
jmp fcn.004ddea0