joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b8c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8d26
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2cea616820297f03
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb73d2e6970f82a2c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0e07020d0e01
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90c000c0e07020d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x8080c0606010607
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b8cc0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4b8cf2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b8d17
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2b]
cmp rsi, 0xf
jb 0x4b8ca2
jmp 0x4b8d0b
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.00440c40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00450f20
mov eax, edi
mov ecx, 0xf
nop
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004b8c40

Function at 0x4b8e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8f48
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x21f412f3b72a1034
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6355458fb6ca1b6e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x64657a5a40052bd8
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x100a0c1007010305
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb060002100a0c10
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc11040b0a0c0d10
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0d13110a090605
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc03040a0e141207
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b8eeb
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x4c]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x4c]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x24
jge 0x4b8f18
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4b8f3b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x4b8ece
jmp 0x4b8f2f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00440c40
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00450f20
mov eax, edi
mov ecx, 0x18
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004b8e40
Function at 0x4bbbe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbd07
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x796e611120dbc121
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe7796e611120dbc1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3d2073e9654bec6c
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0c4942e8e73e738
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x73efb2b7c02056bd
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1115150401161d1e
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1111515040116
mov qword [rsp + 0x40], rdx
movabs rdx, 0x19171a1714081c18
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4021f000210120b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1219150d0a010a17
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4bbca9
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x46]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x46]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x22
jge 0x4bbcd7
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x21
jae 0x4bbcfa
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x21
jb 0x4bbc8c
jmp 0x4bbcee
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x21
call fcn.00440c40
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00450f20
mov eax, edi
mov ecx, 0x21
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004bbbe0

Function at 0x4c0ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0dcc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2170717863657888
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xab21707178636578
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6084787294276f6f
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0e0a1008000c08
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb07090606000f0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90a090507040e08
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c0d6a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c0d9c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c0dbf
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1b]
cmp rsi, 0x11
jb 0x4c0d50
jmp 0x4c0db3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00440c40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00450f20
mov eax, edi
mov ecx, 0x11
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004c0ce0
Function at 0x4c4da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c4e9d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6f7f8cb92961747f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x979977209c6f7f8c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9290b091c99e736f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x503130f130b0a0e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x13120c1014031304
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1113120c101403
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8130b1206060b0c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c4e40
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 3]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 3]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4c4e6d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c4e90
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4c4e1f
jmp 0x4c4e84
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00440c40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00450f20
mov eax, edi
mov ecx, 0x15
call fcn.00450f20
nop
nop dword [rax]
call fcn.0044eca0
jmp fcn.004c4da0

Function at 0x4c4ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c4fda
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6d207465717f6279
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6e5e89745f907c71
mov qword [rsp + 0x20], rdx
movabs rdx, 0x246e208e71736e5e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8c9282697f772d6e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x121b1c1d02190d00
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1a0a121b1c1d0219
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb07111b180a191a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe1c08090302011b
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb07180d0e0a1015
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c4f77
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x23]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x22
jge 0x4c4fa9
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4c4fcd
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x23]
cmp rsi, 0x1e
jb 0x4c4f5d
jmp 0x4c4fc1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
call fcn.00440c40
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00450f20
mov eax, edi
mov ecx, 0x1e
call fcn.00450f20
nop
call fcn.0044eca0
nop
jmp fcn.004c4ec0
Function at 0x4c6c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6d5a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xb6d32b1f74c17270
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x9412af166de42b10
mov qword [rsp + 0x25], rdx
movabs rdx, 0xbb250e6f2a9412af
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1b24abde60e3b075
mov qword [rsp + 0x32], rdx
movabs rdx, 0x120a090c0f0a0613
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1b1b10171819120a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1012180e160d0405
mov qword [rsp + 0x48], rdx
movabs rdx, 0x70914130d1a1c16
mov qword [rsp + 0x50], rdx
movabs rdx, 0x130713190208090d
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c6cf7
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x35]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x26
jge 0x4c6d29
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4c6d4d
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x35]
cmp rsi, 0x1d
jb 0x4c6cdd
jmp 0x4c6d41
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.00440c40
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00450f20
mov eax, edi
mov ecx, 0x1d
call fcn.00450f20
nop
call fcn.0044eca0
nop
jmp fcn.004c6c40

Function at 0x4c7180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7252
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8895867f74a67270
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x41909e72a4938895
mov qword [rsp + 0x20], rdx
movabs rdx, 0x60c070b0c090d08
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40c050905070702
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c71ec
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x26]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4c721e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c7245
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x26]
cmp rsi, 0xe
jb 0x4c71d2
jmp 0x4c7235
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00440c40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00450f20
mov eax, edi
mov ecx, 0xe
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004c7180
Function at 0x4c7f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7fdd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6f3c3fee6f54e416
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x726fbdf0659a4c2f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x901010d07050005
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10205090901010d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc040100090a060a
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c7f80
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4c7fad
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4c7fd0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x4c7f62
jmp 0x4c7fc4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00440c40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00450f20
mov eax, edi
mov ecx, 0x10
call fcn.00450f20
nop
nop dword [rax]
call fcn.0044eca0
jmp fcn.004c7f00

Function at 0x4c8400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c84fd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xadad769ed9618783
mov qword [rsp + 0x19], rdx
movabs rdx, 0x85a6ac895badad76
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xbf65caa87973208d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x904090804031405
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb12070d05030a00
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb0b12070d0503
mov qword [rsp + 0x38], rdx
movabs rdx, 0x61103010c0d1409
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c84a0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4c84cd
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c84f0
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4c847f
jmp 0x4c84e4
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00440c40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00450f20
mov eax, edi
mov ecx, 0x15
call fcn.00450f20
nop
nop dword [rax]
call fcn.0044eca0
jmp fcn.004c8400
Function at 0x4c98e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c99e8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x914b8a9295a36f73
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb38bbd36b299708d
mov qword [rsp + 0x23], rdx
movabs rdx, 0x8bb38bbd36b29970
mov qword [rsp + 0x24], rdx
movabs rdx, 0x92919fd88f70c075
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x151216120b0c0c06
mov qword [rsp + 0x34], rdx
movabs rdx, 0x40d14100a050312
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1817040e040d1410
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf160c1607030208
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c998b
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x4c99b8
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4c99db
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4c996e
jmp 0x4c99cf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00440c40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00450f20
mov eax, edi
mov ecx, 0x19
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004c98e0

Function at 0x4ca3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca486
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x67820fbfb6d69f8
mov qword [rsp + 0x19], rdx
movabs rdx, 0xfa05827f02067820
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc0b0b0a0c090406
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80c0b0b0a0c09
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30400030b040707
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4ca420
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4ca452
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4ca477
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0xd
jb 0x4ca402
jmp 0x4ca46b
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.00440c40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00450f20
mov eax, edi
mov ecx, 0xd
nop
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004ca3a0
Function at 0x4cfce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cfddb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x756a7565726e6172
mov qword [rsp + 0x18], rdx
movabs rdx, 0x795d4b69986c756a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6243746576a05769
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1100713060d1010
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x11081105030c090c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x140011081105030c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70f120906140b15
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cfd79
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4cfdab
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4cfdce
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0x16
jb 0x4cfd5f
jmp 0x4cfdc2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.00440c40
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00450f20
mov eax, edi
mov ecx, 0x16
call fcn.00450f20
nop
nop dword [rax + rax]
call fcn.0044eca0
jmp fcn.004cfce0

Function at 0x4d7b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d7c7b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6f2465746187edf8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb8b170a8790b6f24
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf4a46f506e8f6794
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0c0e1000000f0c
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe1001060d060614
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x140c020f11090e10
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0a08090f11150c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d7c19
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4d7c4b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d7c6e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
cmp rsi, 0x16
jb 0x4d7bff
jmp 0x4d7c62
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00440c40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00450f20
mov eax, edi
mov ecx, 0x16
call fcn.00450f20
nop
nop dword [rax + rax]
call fcn.0044eca0
jmp fcn.004d7b80
Function at 0x4d81e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d82db
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf3d657444013f43
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfe33706c652708ac
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1d1368733e45261d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf16020a0a101208
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa071216120a0311
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x3010a071216120a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70a06170f091213
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d8279
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4d82ab
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d82ce
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0x18
jb 0x4d825f
jmp 0x4d82c2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00440c40
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00450f20
mov eax, edi
mov ecx, 0x18
call fcn.00450f20
nop
nop dword [rax + rax]
call fcn.0044eca0
jmp fcn.004d81e0

Function at 0x4d8640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d871d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xda5128c4d3572eb3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb46cc25a61af65da
mov qword [rsp + 0x22], rdx
movabs rdx, 0x90405030e0301
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20b0c0c04060009
mov qword [rsp + 0x30], rdx
movabs rdx, 0x702040b070c0703
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d86c0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x4d86ed
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d8710
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x4d86a2
jmp 0x4d8704
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.00440c40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00450f20
mov eax, edi
mov ecx, 0xf
call fcn.00450f20
nop
nop dword [rax]
call fcn.0044eca0
jmp fcn.004d8640
Function at 0x4d8f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9066
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6245de40e4b96cdf
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x65bb6946c4dfed62
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7040708030a03
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4080d0400070407
mov qword [rsp + 0x30], rdx
movabs rdx, 0x209040508060406
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d9000
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x79]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4d9032
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d9057
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x79]
cmp rsi, 0xf
jb 0x4d8fe2
jmp 0x4d904b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.00440c40
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00450f20
mov eax, edi
mov ecx, 0xf
nop
call fcn.00450f20
nop
call fcn.0044eca0
jmp fcn.004d8f80

Function at 0x4d9f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9fdd
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x591c36575b74655f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x5a5a4f11534c591c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9080c0b0604070a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd0309080c0b0604
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa07030400050507
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4d9f80
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x20]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x20]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4d9fad
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4d9fd0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4d9f62
jmp 0x4d9fc4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.00440c40
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00450f20
mov eax, edi
mov ecx, 0xe
call fcn.00450f20
nop
nop dword [rax]
call fcn.0044eca0
jmp fcn.004d9f00