joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c1f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c207d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xd66f9b6f74737270
mov qword [rsp + 0x18], rdx
movabs rdx, 0x20254d989bc681c3
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd7786fd620254d98
mov qword [rsp + 0x24], rdx
movabs rdx, 0x85cd8595975f9961
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb020e0816171a0c
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa1a151b0b020e08
mov qword [rsp + 0x38], rdx
movabs rdx, 0x180e121b160c0907
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd091a0210020d13
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a191805160d0902
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c2020
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 5]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 5]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4c204d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4c2070
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4c1ffd
jmp 0x4c2064
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1c
call fcn.00445b60
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457ea0
mov eax, edi
mov ecx, 0x1c
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004c1f60

Function at 0x4c21a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c22bd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x9baca3d3bb02bae8
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x98b38bea6d9e979e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf0575a6799869ab
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc56c62616c69a776
mov qword [rsp + 0x34], rdx
movabs rdx, 0x9010d12031417
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x171f090f0009010d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0a051910061004
mov qword [rsp + 0x48], rdx
movabs rdx, 0x816140217120c08
mov qword [rsp + 0x50], rdx
movabs rdx, 0x508140d0e020f07
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c2260
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x16]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x16]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4c228d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4c22b0
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x20
jb 0x4c223d
jmp 0x4c22a4
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.00445b60
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00457ea0
mov eax, edi
mov ecx, 0x20
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004c21a0
Function at 0x4c2ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2f67
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xc86bc36feccb736b
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd66c77c86bc36fec
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x305050008030008
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x20a0708
xor eax, eax
jmp 0x4c2f08
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4c2f37
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4c2f5a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4c2eeb
jmp 0x4c2f4e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457ea0
mov eax, edi
mov ecx, 0xb
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004c2ea0

Function at 0x4c3580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3647
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8d4d81876c658048
mov qword [rsp + 0x19], rdx
movabs rdx, 0x947d648d4d81876c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7090901040a04
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5060501
xor eax, eax
jmp 0x4c35e8
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4c3617
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4c363a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4c35cb
jmp 0x4c362e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457ea0
mov eax, edi
mov ecx, 0xb
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004c3580
Function at 0x4c65e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c66fd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x69bc7fcee3e5bfbe
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc003f1f7654379ae
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7068ced7f837db7d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x79aed56cf650e969
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf0f000110171710
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x8040f0f00011017
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4061012151e1700
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b0d14100519111d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x190c130e03020617
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c66a0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4c66cd
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4c66f0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x20
jb 0x4c667d
jmp 0x4c66e4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x20
call fcn.00445b60
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00457ea0
mov eax, edi
mov ecx, 0x20
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004c65e0

Function at 0x4c6720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6806
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa4cf6d53c4730b50
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x905fc61a0c70bd6f
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd060d00060c0904
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30b000309030d06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70f06030b010101
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c67a0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x69]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4c67d2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4c67f7
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x69]
cmp rsi, 0x10
jb 0x4c6782
jmp 0x4c67eb
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457ea0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004c6720
Function at 0x4c6820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c68ec
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x7972e1d95137d733
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xbfa7
movabs rdx, 0x100040208050805
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20800090100
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4c6884
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x34]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4c68bc
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4c68df
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x34]
cmp rsi, 0xa
jb 0x4c686a
jmp 0x4c68d3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457ea0
mov eax, edi
mov ecx, 0xa
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004c6820

Function at 0x4c7660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7746
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x61e8dc744922e543
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3f65bfb7dddb5261
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1080c06010d0e03
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60b020502020108
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb090a0105010e03
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c76e0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4c7712
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c7737
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x78]
cmp rsi, 0xf
jb 0x4c76c2
jmp 0x4c772b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457ea0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004c7660
Function at 0x4c7760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c785b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6f490aaa61b8f02f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbf16701841436f49
mov qword [rsp + 0x20], rdx
movabs rdx, 0x13613b7ed6f0ac3
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe140f090a120d12
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0d140415021504
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5040115151100
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4150c130a09020d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c77f9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4c782b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4c784e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1e]
cmp rsi, 0x16
jb 0x4c77df
jmp 0x4c7842
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457ea0
mov eax, edi
mov ecx, 0x16
call fcn.00457ea0
nop
nop dword [rax + rax]
call fcn.00455c20
jmp fcn.004c7760

Function at 0x4c8640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c871d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x49ff4e63412a5c3a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x52563c5c626f4349
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0c070003050206
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1070e050d0c0700
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0a0d050002
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c86c0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4c86ed
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c8710
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xf
jb 0x4c86a2
jmp 0x4c8704
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457ea0
mov eax, edi
mov ecx, 0xf
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004c8640
Function at 0x4c8740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8812
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xbf071150f6c078bb
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xbeeea1bf071150f6
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7050009030a0206
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80a0207080705
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c87ac
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x55]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4c87de
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c8805
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x55]
cmp rsi, 0xb
jb 0x4c8792
jmp 0x4c87f5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00457ea0
mov eax, edi
mov ecx, 0xb
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004c8740

Function at 0x4c9240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9326
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x656974764a6a5679
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5774614b456e6569
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9000406000b0800
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2060c0909000406
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2020c010a010306
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c92c0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xe]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4c92f2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c9317
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xe]
cmp rsi, 0xe
jb 0x4c92a2
jmp 0x4c930b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.00445b60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457ea0
mov eax, edi
mov ecx, 0xe
nop
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004c9240
Function at 0x4c9340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c943b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc3adf94565656d28
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x74d265b5a80272c3
mov qword [rsp + 0x26], rdx
movabs rdx, 0x57c412f90d72bcc8
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x12010d0b06001407
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6151005130d1309
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xf0906151005130d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa12100713011213
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c93d9
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6f]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4c940b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c942e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6f]
cmp rsi, 0x17
jb 0x4c93bf
jmp 0x4c9422
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00445b60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457ea0
mov eax, edi
mov ecx, 0x17
call fcn.00457ea0
nop
nop dword [rax + rax]
call fcn.00455c20
jmp fcn.004c9340
Function at 0x4cdd20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cde3a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x58ea759b60736ff4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x526c056d6fd4f8f2
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1977526c056d6fd4
mov qword [rsp + 0x26], rdx
movabs rdx, 0xefdac6cf7e0bf0ef
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x910030d03041411
mov qword [rsp + 0x36], rdx
movabs rdx, 0x150910030d0304
mov qword [rsp + 0x38], rdx
movabs rdx, 0x18060f07190c0015
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1114001709080a04
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf16071413191112
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4cddd7
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x22
jge 0x4cde09
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4cde2d
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
cmp rsi, 0x1a
jb 0x4cddbd
jmp 0x4cde21
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.00445b60
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457ea0
mov eax, edi
mov ecx, 0x1a
call fcn.00457ea0
nop
call fcn.00455c20
nop
jmp fcn.004cdd20

Function at 0x4cde60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdf32
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5bdd574d2a6f1b35
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5774733c5c46325b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1070304060b030b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50607000b0a000b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cdecc
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xb]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4cdefe
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4cdf25
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xb]
cmp rsi, 0xf
jb 0x4cdeb2
jmp 0x4cdf15
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00457ea0
mov eax, edi
mov ecx, 0xf
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004cde60
Function at 0x4cf120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf1f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xaca69fd387746582
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x95d1919e699daca6
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3000007040c0506
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80a0c0b0d040300
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4cf18c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3d]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x4cf1be
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4cf1e5
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3d]
cmp rsi, 0xe
jb 0x4cf172
jmp 0x4cf1d5
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00457ea0
mov eax, edi
mov ecx, 0xe
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004cf120

Function at 0x4cf200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf2cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x54f941f94e743753
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2f346954f941f94e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x906060401050604
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9050a0304060906
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cf26f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4cf29c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4cf2bf
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4cf252
jmp 0x4cf2b3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457ea0
mov eax, edi
mov ecx, 0xb
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004cf200

Function at 0x4d0260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0318
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x78c5e4acb7a43441
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x102050101060601
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x403
xor eax, eax
jmp 0x4d02b8
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4d02e8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4d030b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4d029b
jmp 0x4d02ff
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00457ea0
mov eax, edi
mov ecx, 8
call fcn.00457ea0
nop
call fcn.00455c20
nop dword [rax]
jmp fcn.004d0260
Function at 0x4d1a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1b2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7564533865558046
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x7371667455756453
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4040c0902010108
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50b08050c010907
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d1acf
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0xf]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0xf]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x4d1afc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d1b1f
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4d1ab2
jmp 0x4d1b13
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457ea0
mov eax, edi
mov ecx, 0xd
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004d1a60

Function at 0x4d2740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d27fd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf33e61fe0c413657
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xb244
movabs rdx, 0x601080709060104
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1080103
xor eax, eax
jmp 0x4d27a0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x43]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x43]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4d27cd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4d27f0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4d2783
jmp 0x4d27e4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00445b60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00457ea0
mov eax, edi
mov ecx, 0xa
call fcn.00457ea0
nop
nop dword [rax]
call fcn.00455c20
jmp fcn.004d2740

Function at 0x4d2820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d28f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x556f1a1f236f2428
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe465d1556f1a1f23
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa030a01080307
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40103030005000a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d288c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3c]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4d28be
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d28e5
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3c]
cmp rsi, 0xb
jb 0x4d2872
jmp 0x4d28d5
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00445b60
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00457ea0
mov eax, edi
mov ecx, 0xb
call fcn.00457ea0
nop
call fcn.00455c20
jmp fcn.004d2820