joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c02e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c03e8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6d343bad3e6e3437
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2074754f015dcd44
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1f0d7fb84cf739e3
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1509150b04150a11
mov qword [rsp + 0x36], rdx
movabs rdx, 0x151509150b0415
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1411111010110116
mov qword [rsp + 0x40], rdx
movabs rdx, 0x601041117080c13
mov qword [rsp + 0x48], rdx
movabs rdx, 0x800050311111112
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c038b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x4c03b8
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4c03db
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4c036e
jmp 0x4c03cf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c02e0

Function at 0x4c0ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0bac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5e6e6b5a62655874
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x595f6f590c205e6e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc02070b0a070401
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2030d0502090c02
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4c0b4f
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0x1a]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x4c0b7c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c0b9f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4c0b32
jmp 0x4c0b93
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c0ae0
Function at 0x4c1240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c135a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x80079e45fa0cacf4
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6f68f326e1e0b920
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa52673ad076f68f3
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x416c05616c96f767
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc011c1c0b0c0715
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1513050c17110c01
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60a07161a141c03
mov qword [rsp + 0x48], rdx
movabs rdx, 0x30c0d1a06031610
mov qword [rsp + 0x50], rdx
movabs rdx, 0x110c0c0117000209
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c12f7
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x26
jge 0x4c1329
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4c134d
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0x1d
jb 0x4c12dd
jmp 0x4c1341
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.0044bb20
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461020
mov eax, edi
mov ecx, 0x1d
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.004c1240

Function at 0x4c1380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1466
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb4c7250040717da
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6e4ecd36fe37690b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x40200060a00030a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1030a0a0d0c0402
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30d040b070d0901
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c1400
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x18]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4c1432
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c1457
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x18]
cmp rsi, 0xf
jb 0x4c13e2
jmp 0x4c144b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c1380
Function at 0x4c2460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2568
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x931d7978431d4c6e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x76869281a88b7279
mov qword [rsp + 0x26], rdx
movabs rdx, 0x612076869281a88b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9bcd0c615f978494
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1208150402060708
mov qword [rsp + 0x38], rdx
movabs rdx, 0x817130108180105
mov qword [rsp + 0x40], rdx
movabs rdx, 0x170e140c0c080e0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf0d190a0f140b0f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c250b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 9]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 9]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x4c2538
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4c255b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4c24ee
jmp 0x4c254f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00461020
mov eax, edi
mov ecx, 0x1a
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c2460

Function at 0x4c32c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c33ec
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x5651fe50c6361fe
mov qword [rsp + 0x19], rdx
movabs rdx, 0x63e746f3e20ba18
mov qword [rsp + 0x21], rdx
movabs rdx, 0xe5493d2a2f063e74
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4172ddf7ede44071
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x15150b1c19071208
mov qword [rsp + 0x36], rdx
movabs rdx, 0x150f15090f15120f
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1500150f15090f15
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1312191610040303
mov qword [rsp + 0x48], rdx
movabs rdx, 0x18150f00090e0717
mov qword [rsp + 0x50], rdx
movabs rdx, 0x51003031114151a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c3386
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x12]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4c33bc
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1d
jae 0x4c33df
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x12]
cmp rsi, 0x1d
jb 0x4c336c
jmp 0x4c33d3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461020
mov eax, edi
mov ecx, 0x1d
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c32c0
Function at 0x4c3400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c34fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x206512b40408a0dd
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe20c616f20206512
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc0b036ca8fc1cca
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80d0a08080c000a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100e0d140f0b01
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe08131000100e0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40b020205001203
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c3499
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x43]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4c34cb
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c34ee
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x43]
cmp rsi, 0x15
jb 0x4c347f
jmp 0x4c34e2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004c3400

Function at 0x4c55e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c56ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1de51d2872ed2125
mov qword [rsp + 0x19], rdx
movabs rdx, 0x73208b6f9a20231d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x642a2b72ea0eda75
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1200070a0c051111
mov qword [rsp + 0x30], rdx
movabs rdx, 0x207080102100514
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10041502141506
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c566d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x62]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x62]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x18
jge 0x4c569a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c56bd
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4c5650
jmp 0x4c56b1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00461020
mov eax, edi
mov ecx, 0x17
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c55e0
Function at 0x4c6800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c691d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6c54f229746f6601
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xada367bb8d72f020
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6fa4a029b9f2ada3
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xadca9f6356ce10a7
mov qword [rsp + 0x34], rdx
movabs rdx, 0x181c0b0b1c100413
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x5131000181c0b0b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60e1b1419171816
mov qword [rsp + 0x48], rdx
movabs rdx, 0x113051d0f090c11
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf101c1c0f121c19
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c68c0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4c68ed
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4c6910
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4c689d
jmp 0x4c6904
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461020
mov eax, edi
mov ecx, 0x1e
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004c6800

Function at 0x4c6940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6a6c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x61266972ef6d3e0e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x746cdcec41c92039
mov qword [rsp + 0x21], rdx
movabs rdx, 0x2009245bc0746cdc
mov qword [rsp + 0x26], rdx
movabs rdx, 0x34466e2964ae1811
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd1b061212160b1b
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb0c111518181316
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xb100b0c11151818
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6080a1b06161700
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1130b00171b0310
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1912110a1c0b11
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c6a06
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 4]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4c6a3c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1d
jae 0x4c6a5f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 4]
cmp rsi, 0x1d
jb 0x4c69ec
jmp 0x4c6a53
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461020
mov eax, edi
mov ecx, 0x1d
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c6940
Function at 0x4c7360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c74a7
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x7375a06ff4b0a232
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc9a4666120de9665
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa27274db01c9a466
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd7f4bdc3d47003df
mov qword [rsp + 0x32], rdx
movabs rdx, 0x20f7c1620070cfa6
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc7a79e64ae586873
mov qword [rsp + 0x42], rdx
movabs rdx, 0x211b0e2710282711
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x22b232a06002203
mov qword [rsp + 0x52], rdx
movabs rdx, 0x180928161503022b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2a1a09211d052803
mov qword [rsp + 0x60], rdx
movabs rdx, 0x221c231c1e20192c
mov qword [rsp + 0x68], rdx
movabs rdx, 0x220f01141a1e1e0a
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4c7447
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 2]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x2e
jge 0x4c7477
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2d
jae 0x4c749a
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x2d
jb 0x4c742a
jmp 0x4c748e
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x2d
call fcn.0044bb20
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00461020
mov eax, edi
mov ecx, 0x2d
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c7360

Function at 0x4c8400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c852c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x796e616de6bc1fc1
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x7620796e616de6bc
mov qword [rsp + 0x40], rdx
movabs rdx, 0xbcb46e65b631121d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8c6e6e2a16e8df0f
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa391056c730520d9
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d20011913191600
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x90c1d2001191319
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3131502160c120a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x11150b1c21140d16
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x151f15101a201d16
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4c84c6
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4c84fc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x22
jae 0x4c851f
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0x22
jb 0x4c84ac
jmp 0x4c8513
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x22
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x22
call fcn.00461020
mov eax, edi
mov ecx, 0x22
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c8400
Function at 0x4c87c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c88bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x72b974b3a1aaf073
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x20e49be1996e19de
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe26e991f61d0f263
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0e0c141212090e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x916170c080c1115
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd0c02010b080916
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6150e0214120403
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c8860
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x21]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x21]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4c888d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4c88b0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x18
jb 0x4c883f
jmp 0x4c88a4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004c87c0

Function at 0x4ca5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca67d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x612e43773966733d
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x6c76
movabs rdx, 0x207080707050800
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5030408
xor eax, eax
jmp 0x4ca620
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 9]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 9]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4ca64d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4ca670
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4ca603
jmp 0x4ca664
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004ca5c0
Function at 0x4cb100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cb1c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x746764654c737a63
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x6d858e77
movabs rdx, 0x20b0b0a02020a0a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50001080009
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cb168
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4cb197
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4cb1ba
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4cb14b
jmp 0x4cb1ae
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004cb100
Function at 0x4cc040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc148
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x7a41727474725566
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x828974727f678774
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7274636982897472
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x74596a496e744341
mov qword [rsp + 0x32], rdx
movabs rdx, 0x71b14000906010b
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1407180e121a0f19
mov qword [rsp + 0x42], rdx
movabs rdx, 0xa0e0909131b1407
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40919161806011a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4cc0eb
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x1a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1e
jge 0x4cc118
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4cc13b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4cc0ce
jmp 0x4cc12f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00461020
mov eax, edi
mov ecx, 0x1c
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004cc040

Function at 0x4cc160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc26c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xa4876e4574a86543
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8a6993699187ade1
mov qword [rsp + 0x27], rdx
movabs rdx, 0x6594618a69936991
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa79589ae53aa797b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x909071508091715
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1119151a0b09020d
mov qword [rsp + 0x42], rdx
movabs rdx, 0x140b0d0f15181119
mov qword [rsp + 0x48], rdx
movabs rdx, 0x110a060a08131307
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4cc208
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x38]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4cc23c
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1b
jae 0x4cc25f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x38]
cmp rsi, 0x1b
jb 0x4cc1ee
jmp 0x4cc253
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1b
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00461020
mov eax, edi
mov ecx, 0x1b
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004cc160