joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c09e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0ac6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6d7379aafe00656b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7065ed69aa84656d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3040e090905070a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x50903040e090905
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2020a040c0b0b04
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c0a60
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x69]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4c0a92
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c0ab7
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x69]
cmp rsi, 0xf
jb 0x4c0a42
jmp 0x4c0aab
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c09e0

Function at 0x4c0ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0bec
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x82028177b763486b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6465ca5265a8aa8c
mov qword [rsp + 0x25], rdx
movabs rdx, 0xdbcd8d6465ca5265
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7d3f8884a865907e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc031108060d120a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1001051a19070d0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x808091309020a17
mov qword [rsp + 0x48], rdx
movabs rdx, 0x2180c02160c1406
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c0b88
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x47]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x20
jge 0x4c0bbc
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1b
jae 0x4c0bdf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x47]
cmp rsi, 0x1b
jb 0x4c0b6e
jmp 0x4c0bd3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00461020
mov eax, edi
mov ecx, 0x1b
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c0ae0
Function at 0x4c2f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c303b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6d38f28f7d456965
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9606750f450b178f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb4136e0dc12066a4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10061402160e0b13
mov qword [rsp + 0x32], rdx
movabs rdx, 0x31410130c000906
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf0c04170a030314
mov qword [rsp + 0x40], rdx
movabs rdx, 0x101417050c130814
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c2fd9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4c300b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4c302e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
cmp rsi, 0x18
jb 0x4c2fbf
jmp 0x4c3022
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004c2f40

Function at 0x4c35a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c368a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x65f820676ebe7277
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x65f820676ebe72
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcab344fa09bb75fb
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60f08020d020e0f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf09060f08020d02
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf081006080c0b02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c362d
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x39]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x39]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x4c365a
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c367d
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x4c3610
jmp 0x4c3671
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c35a0
Function at 0x4c4160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c423d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb7eddea977ec276e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xeb5ba7e6b264aeb7
mov qword [rsp + 0x24], rdx
movabs rdx, 0x40c08020b01050c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9070a0d040c0802
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe080106060b060e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c41e0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x2c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x2c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4c420d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c4230
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x4c41c2
jmp 0x4c4224
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00461020
mov eax, edi
mov ecx, 0xf
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004c4160

Function at 0x4c68c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c69aa
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd2877e93747daa87
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6120eca77320d287
mov qword [rsp + 0x20], rdx
movabs rdx, 0xab6c62966c69618c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1507060b09051501
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe010707150e0602
mov qword [rsp + 0x38], rdx
movabs rdx, 0x402040a00120a02
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c694d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 2]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x18
jge 0x4c697a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4c699d
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4c6930
jmp 0x4c6991
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c68c0
Function at 0x4ca5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca6e8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6c5c636f74846478
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5c0e61466d726f20
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656220794c795c0e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x615c6b716f73208b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe021c060c02110f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1d001d1115060f0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1209120c010d1401
mov qword [rsp + 0x48], rdx
movabs rdx, 0x20e16091a0d0b01
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ca68b
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x27]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x27]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x20
jge 0x4ca6b8
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4ca6db
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4ca66e
jmp 0x4ca6cf
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00461020
mov eax, edi
mov ecx, 0x1e
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ca5e0

Function at 0x4cabc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cacbb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4bff6538683f65e5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x735d185e6c644bff
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1f6367fd4df432fd
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x306030012140a09
mov qword [rsp + 0x34], rdx
movabs rdx, 0x30c0c0410030b14
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x110b1511030c0c04
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2070e06140c100f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4cac59
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4cac8b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4cacae
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
cmp rsi, 0x16
jb 0x4cac3f
jmp 0x4caca2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004cabc0
Function at 0x4cb600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cb758
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0xc3c7bb906e6ebd9c
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf20b65cfab64d365
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa7c49476f5f20b65
mov qword [rsp + 0x26], rdx
movabs rdx, 0x65db75047961f06e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf09aa0692c70c73b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6ed6cd64e664b9f9
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x2223000405200e19
mov qword [rsp + 0x46], rdx
movabs rdx, 0x1214222300040520
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe2a1d011016101a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x713061828112817
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc1a262724270d0b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x25182b011b05101e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x250f28161909111b
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4cb6f6
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x25]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x25]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x32
jge 0x4cb728
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4cb74b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop dword [rax + rax]
cmp rsi, 0x2d
jb 0x4cb6d9
jmp 0x4cb73f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2d
call fcn.0044bb20
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00461020
mov eax, edi
mov ecx, 0x2d
call fcn.00461020
nop
call fcn.0045eda0
nop dword [rax]
jmp fcn.004cb600

Function at 0x4cc7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc8db
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x694d2f656e29d63d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x4d203d23694d2f65
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x4175232028a5f41c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10e0f0d08020908
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0e0c0801130b06
mov qword [rsp + 0x34], rdx
movabs rdx, 0x130f0e0e0e0c08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11050d080f09000e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cc879
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x12]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4cc8ab
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4cc8ce
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x12]
cmp rsi, 0x14
jb 0x4cc85f
jmp 0x4cc8c2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004cc7e0
Function at 0x4ccd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cce4c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x9e54ea18185c7451
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x424c3a6565e76265
mov qword [rsp + 0x26], rdx
movabs rdx, 0x626e2ef2403d4130
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90e14060a141117
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd05090e14060a14
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50415070306090a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1715070003020310
mov qword [rsp + 0x48], rdx
movabs rdx, 0x61209170d0f1305
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ccde8
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 4]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4cce1c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4cce3f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 4]
cmp rsi, 0x18
jb 0x4ccdce
jmp 0x4cce33
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ccd40

Function at 0x4cd1a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd272
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x65766961866b7e65
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6c726a6d20657669
mov qword [rsp + 0x22], rdx
movabs rdx, 0x205060a0b010306
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb0c010b09050205
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cd20c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x13]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4cd23e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4cd265
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x13]
cmp rsi, 0xd
jb 0x4cd1f2
jmp 0x4cd255
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00461020
mov eax, edi
mov ecx, 0xd
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004cd1a0
Function at 0x4cd580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd64c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xa517270b5016408
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x4b6c722e
movabs rdx, 0x70b03090605050b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x306050005050209
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cd5e5
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x50]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4cd61c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4cd63f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x50]
cmp rsi, 0xc
jb 0x4cd5cb
jmp 0x4cd633
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004cd580

Function at 0x4cda00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdac6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69388070888384ac
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7596647a
movabs rdx, 0x20a00000a050b
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0x6080301
xor eax, eax
jmp 0x4cda60
movzx r9d, byte [rsp + rsi + 0x24]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x24], dl
mov byte [rsp + rsi + 0x24], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4cda92
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4cdab7
movzx r8d, byte [rsp + rdi + 0x24]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 0xc
jb 0x4cda44
jmp 0x4cdaab
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004cda00

Function at 0x4cde20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdee6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xa2b4dba2a2f0a46e
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x9c
movabs rdx, 0x705070202020106
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4030807
xor eax, eax
nop
jmp 0x4cde80
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x47]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4cdeb2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4cded7
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x47]
cmp rsi, 9
jb 0x4cde62
jmp 0x4cdecb
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00461020
mov eax, edi
mov ecx, 9
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004cde20
Function at 0x4ce3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce46c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2f2ed233663247e5
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x6cde
movabs rdx, 0x703010001030107
mov qword [rsp + 0x22], rdx
movabs rdx, 0x705080708010703
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4ce404
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4ce43c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4ce45f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7c]
cmp rsi, 0xa
jb 0x4ce3ea
jmp 0x4ce453
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00461020
mov eax, edi
mov ecx, 0xa
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ce3a0

Function at 0x4cebe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ceccc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x71e741cc70249e43
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7772068a71e741cc
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf674d2e67b038043
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x13100e0202010201
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd090b0f09081310
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6110f09040b0413
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cec6a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x66]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x4cec9c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4cecbf
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x66]
cmp rsi, 0x14
jb 0x4cec50
jmp 0x4cecb3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00461020
mov eax, edi
mov ecx, 0x14
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004cebe0
Function at 0x4cf500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf5fb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74d3705e1ed39b13
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6f3874d3705e1ed3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5782041e230bea75
mov qword [rsp + 0x26], rdx
movabs rdx, 0x607020000100208
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80b00040b060f0d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x302080b00040b06
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70400040c0e0401
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cf599
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x40]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4cf5cb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4cf5ee
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x40]
cmp rsi, 0x12
jb 0x4cf57f
jmp 0x4cf5e2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004cf500

Function at 0x4cf620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf70c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x26e30d156be1eae9
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xfb26e30d156be1ea
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57250c2f74337532
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6080f07010d0e00
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90b06080f07010d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4080e0e050d0208
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4cf6aa
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x32]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x4cf6dc
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4cf6ff
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x32]
cmp rsi, 0x11
jb 0x4cf690
jmp 0x4cf6f3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004cf620