joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c1c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4c1dd2
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x736d6f876ef4786e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x650566546f646328
mov qword [rsp + 0x23], rdx
movabs rdx, 0x2f72d12083650566
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7452692ee570737a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1467555325ec9150
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2f055162f7726573
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2901261f1e100814
mov qword [rsp + 0x48], rdx
movabs rdx, 0x415062220051b26
mov qword [rsp + 0x50], rdx
movabs rdx, 0x19210518041c150b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x20b2c1d2b1b1228
mov qword [rsp + 0x60], rdx
movabs rdx, 0x9000c2a29232721
mov qword [rsp + 0x68], rdx
movabs rdx, 0xc051f1f27121406
mov qword [rsp + 0x70], rdx
movabs rdx, 0x270c0b24081d0e27
mov qword [rsp + 0x78], rdx
movabs rdx, 0x27181d2b1a1a280b
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x4c1d6d
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x40
jge 0x4c1d9f
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4c1dc5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2f]
cmp rsi, 0x2d
jb 0x4c1d53
jmp 0x4c1db9
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x2d
call fcn.00445b60
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00457ea0
mov eax, edi
mov ecx, 0x2d
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004c1c60

Function at 0x4c3e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3f27
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4982449570839d63
mov qword [rsp + 0x19], rdx
movabs rdx, 0x48aa644982449570
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x909020104090a06
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7050402
xor eax, eax
jmp 0x4c3ec8
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0xa]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0xa]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4c3ef7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4c3f1a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4c3eab
jmp 0x4c3f0e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457ea0
mov eax, edi
mov ecx, 0xb
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004c3e60
Function at 0x4c5360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c545b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x71264174c8e772ba
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x65b3a9c971264174
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x78749989bab9a81a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1300110e0806020f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa08030f0c020c0c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x20d0a08030f0c02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9130f110a091006
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c53f9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4c542b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c544e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4e]
cmp rsi, 0x14
jb 0x4c53df
jmp 0x4c5442
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457ea0
mov eax, edi
mov ecx, 0x14
call fcn.00457ea0
nop
nop dword [rax + rax]
call fcn.00455c20
jmp fcn.004c5360

Function at 0x4c6580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6652
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x33956f9fc6d686a9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa6a6a033956f9fc6
mov qword [rsp + 0x22], rdx
movabs rdx, 0x103090406000700
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60a010802080103
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c65ec
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4b]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4c661e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c6645
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4b]
cmp rsi, 0xb
jb 0x4c65d2
jmp 0x4c6635
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00457ea0
mov eax, edi
mov ecx, 0xb
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004c6580
Function at 0x4c8920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c89f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6ec164d6c8276c8c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xbda0c96ec164d6c8
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa06030402050500
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x509020800090a06
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c898c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4c89be
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c89e5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0xb
jb 0x4c8972
jmp 0x4c89d5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00457ea0
mov eax, edi
mov ecx, 0xb
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004c8920

Function at 0x4c8b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8bec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6987667d72655977
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5b7c6987667d7265
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x57596e686b73614d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc04060108040e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x103080d000c0406
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5080d000e011009
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c8b8a
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x19]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x4c8bbc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c8bdf
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x19]
cmp rsi, 0x12
jb 0x4c8b70
jmp 0x4c8bd3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457ea0
mov eax, edi
mov ecx, 0x12
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004c8b00
Function at 0x4c8c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8ccc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x616262606f657243
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7e6b6c616262606f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6070a0405070706
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa06070509030607
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c8c6f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4c8c9c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c8cbf
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4c8c52
jmp 0x4c8cb3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457ea0
mov eax, edi
mov ecx, 0xb
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004c8c00

Function at 0x4c8ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8dac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2e17e1ec6f65729d
mov qword [rsp + 0x19], rdx
movabs rdx, 0x57086e1c4c64e02e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50603060b070708
mov qword [rsp + 0x28], rdx
movabs rdx, 0x500000404000d06
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c8d4f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x53]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x53]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4c8d7c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c8d9f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4c8d32
jmp 0x4c8d93
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457ea0
mov eax, edi
mov ecx, 0xf
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004c8ce0

Function at 0x4ca120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca1f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x638ce0827c699bbb
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x88b28e638ce0827c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x903040801000105
mov qword [rsp + 0x28], rdx
movabs rdx, 0x103040409000a06
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ca18c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ca1be
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ca1e5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
cmp rsi, 0xb
jb 0x4ca172
jmp 0x4ca1d5
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00457ea0
mov eax, edi
mov ecx, 0xb
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004ca120
Function at 0x4cc7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc8cc
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7661c369968f9381
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8a82b94eab9e6192
mov qword [rsp + 0x23], rdx
movabs rdx, 0x7c8a82b94eab9e61
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc2656c648d9c4884
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa1418050518020d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x50b180e02140708
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf001810050b180e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x203111300000105
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4cc868
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4cc89c
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4cc8bf
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3d]
cmp rsi, 0x19
jb 0x4cc84e
jmp 0x4cc8b3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457ea0
mov eax, edi
mov ecx, 0x19
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004cc7c0

Function at 0x4cd620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd6e7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2f38a46af7746518
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x24292512
movabs rdx, 0x806070307040a05
mov qword [rsp + 0x28], rdx
movabs rdx, 0x703000a07090b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cd688
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4cd6b7
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4cd6da
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4cd66b
jmp 0x4cd6ce
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457ea0
mov eax, edi
mov ecx, 0xc
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004cd620
Function at 0x4cdb20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdc58
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x69d08df280691127
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3c69d08df2806911
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbdb29c188d72e565
mov qword [rsp + 0x22], rdx
movabs rdx, 0x83a1b1b4ab649b89
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xba86692f8fa67862
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1d1f152001101f00
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x14180e0a1b0f0d08
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1004120c150d1418
mov qword [rsp + 0x48], rdx
movabs rdx, 0x16150608011d1f06
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe1a031c05112016
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f1f041617061710
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4cdbf5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5c]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2e
jge 0x4cdc28
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4cdc4b
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5c]
nop
cmp rsi, 0x21
jb 0x4cdbdb
jmp 0x4cdc3f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x21
call fcn.00445b60
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00457ea0
mov eax, edi
mov ecx, 0x21
call fcn.00457ea0
nop
call fcn.00455c20
nop dword [rax]
jmp fcn.004cdb20

Function at 0x4cf2c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf3aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7d72665485746580
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x69915f787d726654
mov qword [rsp + 0x30], rdx
movabs rdx, 0x574f926f7463b57e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50708041203070f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x900040d05070804
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x81108040c0f080a
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4cf34d
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x14
jge 0x4cf37a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4cf39d
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4cf330
jmp 0x4cf391
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457ea0
mov eax, edi
mov ecx, 0x14
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004cf2c0
Function at 0x4cf3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf487
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x674f64264759651a
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x65216960
movabs rdx, 0xa03040003000a0a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80a000307020a03
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cf428
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x1a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4cf457
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4cf47a
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4cf40b
jmp 0x4cf46e
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457ea0
mov eax, edi
mov ecx, 0xc
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004cf3c0

Function at 0x4d0280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d039a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xafdaf174dad8dcc2
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x425d43729fd0632a
mov qword [rsp + 0x23], rdx
movabs rdx, 0xbf425d43729fd063
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5074a64669cc2974
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x18071502030a0b00
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe0d081618071502
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30f0705180b0d13
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe06060812010003
mov qword [rsp + 0x48], rdx
movabs rdx, 0x21603100b0f0118
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4d0337
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x4d0369
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4d038d
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6f]
cmp rsi, 0x19
jb 0x4d031d
jmp 0x4d0381
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00445b60
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457ea0
mov eax, edi
mov ecx, 0x19
call fcn.00457ea0
nop
call fcn.00455c20
nop
jmp fcn.004d0280
Function at 0x4d07c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d08a6
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x320432e8814722e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x141d6c01e8032043
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x200040300080809
mov qword [rsp + 0x26], rdx
movabs rdx, 0x406020004030008
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9090c07020c0b06
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4d0840
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4d0872
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d0897
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
cmp rsi, 0xd
jb 0x4d0822
jmp 0x4d088b
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457ea0
mov eax, edi
mov ecx, 0xd
nop
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004d07c0

Function at 0x4d08c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0986
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xaa6946859c6994df
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xe1
movabs rdx, 0x1000308030804
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3070104
xor eax, eax
nop
jmp 0x4d0920
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x44]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4d0952
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d0977
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x44]
cmp rsi, 9
jb 0x4d0902
jmp 0x4d096b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00457ea0
mov eax, edi
mov ecx, 9
nop
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004d08c0
Function at 0x4d17a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d189d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x43f546157625443
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2c3a043f54615762
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4e67433c27274f1d
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe050c0e0e0a0d07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20f111106060d11
mov qword [rsp + 0x36], rdx
movabs rdx, 0x100f020f11110606
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2030d0901010b08
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d1840
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4d186d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4d1890
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x4d181f
jmp 0x4d1884
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.00445b60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457ea0
mov eax, edi
mov ecx, 0x12
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004d17a0

Function at 0x4d18c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d19bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf9fc0f7355f86547
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7b44659d69660f5e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf204726ff9630913
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1608070807101309
mov qword [rsp + 0x34], rdx
movabs rdx, 0x71307050f090717
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x611020907130705
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13050f070c0f050c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d1960
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x6e]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x6e]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4d198d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d19b0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x4d193f
jmp 0x4d19a4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457ea0
mov eax, edi
mov ecx, 0x18
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004d18c0