joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b9d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9e3c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x39295c405d665012
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6e6f39295c405d66
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x643d4c7555687255
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc06041007020507
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc010d050a000c06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2030f040d040110
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b9dd0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b9e08
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b9e2f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
nop word [rax + rax]
cmp rsi, 0x12
jb 0x4b9db6
jmp 0x4b9e23
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f500
mov eax, edi
mov ecx, 0x12
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.004b9d40

Function at 0x4b9e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9f68
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x5b7463546eb9b063
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9a651393169c0a0e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x729865842093b6ee
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x212110201020408
mov qword [rsp + 0x32], rdx
movabs rdx, 0x707080d0a0c0b16
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x70a01090a160707
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100f0d0b0c02140c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b9f00
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x4b9f32
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4b9f5b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4b]
cmp rsi, 0x18
jb 0x4b9ee5
jmp 0x4b9f4f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f500
mov eax, edi
mov ecx, 0x18
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004b9e60
Function at 0x4bbb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbc52
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x20fad4bb96866f91
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x7f426fb1
movabs rdx, 0xa060b0802050a04
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30b030b0a0002
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bbbee
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x14]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x14]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4bbc1b
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4bbc45
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4bbbd1
jmp 0x4bbc36
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.0045f500
mov eax, edi
mov ecx, 0xc
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004bbb80

Function at 0x4bbc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbd48
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x1d0d76fda20a73a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x74af6f680e11d820
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70a0b0e0e0b010e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x901070e070e010a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90703050a060a00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bbce1
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x18
jge 0x4bbd13
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4bbd3b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7f]
cmp rsi, 0x10
jb 0x4bbcc7
jmp 0x4bbd2f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f500
mov eax, edi
mov ecx, 0x10
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004bbc60
Function at 0x4bd2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd3a8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x7a3b7ba994706ea1
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xbb747a3b7ba99470
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9b8a7f868a20ab88
mov qword [rsp + 0x26], rdx
movabs rdx, 0x11110b0707030b0b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x411070d06050f00
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe090411070d0605
mov qword [rsp + 0x38], rdx
movabs rdx, 0x11100d0b0e0d0f0a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bd342
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1a
jge 0x4bd36f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4bd39b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x4bd325
jmp 0x4bd38f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop dword [rax + rax]
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f500
mov eax, edi
mov ecx, 0x12
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004bd2a0
Function at 0x4bde20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bdf16
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xadb46ef776ae4241
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x74b0c36cadb46ef7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656cac662065ab79
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x703010d000d1106
mov qword [rsp + 0x32], rdx
movabs rdx, 0x2040d0107020703
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1090a0300040802
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bdeb3
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x34]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x34]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x4bdee2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4bdf09
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4bde96
nop
jmp 0x4bdefd
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f500
mov eax, edi
mov ecx, 0x14
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.004bde20

Function at 0x4bea80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4beb5c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x20b7b86cc0b9d4a7
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xafc7b9654120b7b8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x60206080b0a0201
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2030c05000c0602
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4beaf2
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4beb28
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4beb4f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
nop dword [rax]
cmp rsi, 0xd
jb 0x4bead8
jmp 0x4beb43
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.0045f500
mov eax, edi
mov ecx, 0xd
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.004bea80
Function at 0x4c0980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0a88
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xf7efcdd6d77f696c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5bd6526f20f765c8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65dbc647727466d3
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x16080d1606070f0f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x408050a03101405
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x120f050e020f0408
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa1215080e15080e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c0a20
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x4c0a52
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4c0a7b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0x18
jb 0x4c0a05
jmp 0x4c0a6f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f500
mov eax, edi
mov ecx, 0x18
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004c0980
Function at 0x4c2240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2348
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x66f4726f3cf2580d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x197775dd10ef66f4
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe37afa6168e561f7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x14130c0803000902
mov qword [rsp + 0x32], rdx
movabs rdx, 0x700060902070c10
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x60813020e090700
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0a0e0d0a011015
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c22e0
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x65]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x4c2312
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4c233b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x65]
cmp rsi, 0x16
jb 0x4c22c5
jmp 0x4c232f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f500
mov eax, edi
mov ecx, 0x16
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004c2240
Function at 0x4c2ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2cb2
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xdcd866331c2516f6
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2520632be51f14f0
mov qword [rsp + 0x21], rdx
movabs rdx, 0x472520632be51f14
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf792e3616c40e4ef
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x180a0706170c010e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x708090c0a11160f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa0612020b000708
mov qword [rsp + 0x40], rdx
movabs rdx, 0x41000070303130b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c2c51
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1e
jge 0x4c2c7e
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4c2ca5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x19
jb 0x4c2c34
jmp 0x4c2c99
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045f500
mov eax, edi
mov ecx, 0x19
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004c2ba0

Function at 0x4c4f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5048
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6ee2c67463284e3b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x70fc3d20406fc520
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6165a228136d2636
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x510131706010915
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe01150001130901
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd0100100e0b0e01
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb11090002141713
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c4fe0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x18]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x4c5012
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4c503b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x18]
cmp rsi, 0x18
jb 0x4c4fc5
jmp 0x4c502f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
nop
call fcn.0044a140
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045f500
mov eax, edi
mov ecx, 0x18
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004c4f40
Function at 0x4c6b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6c12
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x246f6e6a776d61d9
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xdf65f4ee6935757a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8790df65f4ee6935
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa072dcb7d7da6e3f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70716140a140308
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110007120c071111
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf00000307071004
mov qword [rsp + 0x48], rdx
movabs rdx, 0x190f100d17150f0f
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c6bb1
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x4c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x4c6bde
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4c6c05
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4c6b94
jmp 0x4c6bf9
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0044a140
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0045f500
mov eax, edi
mov ecx, 0x1a
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004c6b00

Function at 0x4c78a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c79c6
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x6e663807b91cda3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20d583a9c26176b8
mov qword [rsp + 0x23], rdx
movabs rdx, 0x73a0956f8420d583
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6491909f26a6a2d5
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd040e1801030112
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60e02100e121017
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe080015091a1907
mov qword [rsp + 0x48], rdx
movabs rdx, 0x131a0012160c191b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x818001b180e0e0b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c7960
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x28
jge 0x4c798d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4c79b4
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4c7943
jmp 0x4c79a8
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.0044a140
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.0045f500
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004c78a0
Function at 0x4c9640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9712
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x5148616065fb3d2e
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x545a6557
movabs rdx, 0x8020402010a0400
mov qword [rsp + 0x28], rdx
movabs rdx, 0x704060a0808080b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c96ab
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 5]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4c96dd
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4c9705
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 5]
cmp rsi, 0xc
jb 0x4c9691
jmp 0x4c96f8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044a140
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.0045f500
mov eax, edi
mov ecx, 0xc
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004c9640

Function at 0x4c9920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9a16
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x4fd98aa398959037
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6c6966dd864fd98a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6554648a99687574
mov qword [rsp + 0x28], rdx
movabs rdx, 0x406021100051011
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1304080d09131010
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe07060401031313
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c99b3
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x4c99e2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c9a09
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4c9996
nop
jmp 0x4c99fd
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f500
mov eax, edi
mov ecx, 0x15
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.004c9920
Function at 0x4caa80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cab96
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xe06f7dd2766f7270
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf1e8657669ec9920
mov qword [rsp + 0x26], rdx
movabs rdx, 0x24ebfa6ef1e86576
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf2dc6639f5cce661
mov qword [rsp + 0x32], rdx
movabs rdx, 0x180e171b07130503
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x13090e0f0a150f09
mov qword [rsp + 0x42], rdx
movabs rdx, 0x71319050a121309
mov qword [rsp + 0x48], rdx
movabs rdx, 0x50309161112041a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4cab2e
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4cab62
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4cab89
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5f]
cmp rsi, 0x1c
jb 0x4cab14
nop
jmp 0x4cab7d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.0044a140
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0045f500
mov eax, edi
mov ecx, 0x1c
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.004caa80

Function at 0x4cae60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4caf92
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xc9dd14806fb465c2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x61726f70ca652b9b
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd76e75b7796dff72
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xbacc89ae6c00b5fd
mov qword [rsp + 0x36], rdx
movabs rdx, 0x12071e1709181818
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1d05080411080b11
mov qword [rsp + 0x46], rdx
movabs rdx, 0x51d1d0508041108
mov qword [rsp + 0x48], rdx
movabs rdx, 0x61d1a0618001811
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c00190b1f09141d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x61a02040207061f
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4caf2c
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4caf5e
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4caf85
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
cmp rsi, 0x20
jb 0x4caf12
jmp 0x4caf79
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x20
call fcn.0044a140
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
call fcn.0045f500
mov eax, edi
mov ecx, 0x20
call fcn.0045f500
nop
call fcn.0045cea0
jmp fcn.004cae60
Function at 0x4cd220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd31c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x2f55626543196f22
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x53ef335036452f55
mov qword [rsp + 0x20], rdx
movabs rdx, 0x573dee316f542b69
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb14130c05030c00
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6050c1209000900
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa08070f02070707
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cd2b0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xc]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x18
jge 0x4cd2e8
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4cd30f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xc]
nop word [rax + rax]
cmp rsi, 0x16
jb 0x4cd296
jmp 0x4cd303
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045f500
mov eax, edi
mov ecx, 0x16
call fcn.0045f500
nop
nop dword [rax]
call fcn.0045cea0
jmp fcn.004cd220

Function at 0x4cd660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd756
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xaddb41ebf17972df
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe4ed66d5addb41eb
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf64c786574ff5243
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x120b00070d081200
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa04060b1209120b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9130308120e0612
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4cd6f3
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x5f]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x5f]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x4cd722
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4cd749
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4cd6d6
nop
jmp 0x4cd73d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.0044a140
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f500
mov eax, edi
mov ecx, 0x14
call fcn.0045f500
nop
call fcn.0045cea0
nop dword [rax + rax]
jmp fcn.004cd660