joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c1020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c113a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xd46d72e1cccd6127
mov qword [rsp + 0x41], rdx
movabs rdx, 0x3434d7de8c3f16c8
mov qword [rsp + 0x49], rdx
movabs rdx, 0x6649f22018edda34
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6ef4da7434977a6f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d1d150911141d19
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xf10150d1d091d1d
mov qword [rsp + 0x21], rdx
movabs rdx, 0x101c1a080a04000c
mov qword [rsp + 0x29], rdx
movabs rdx, 0x120c0e0b04030d03
mov qword [rsp + 0x31], rdx
movabs rdx, 0xb080c1809180207
mov qword [rsp + 0x39], rdx
xor eax, eax
jmp 0x4c10d7
movzx r9d, byte [rsp + rsi + 0x41]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x41], dl
mov byte [rsp + rsi + 0x41], r8b
add rax, 2
cmp rax, 0x26
jge 0x4c1109
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4c112d
movzx r8d, byte [rsp + rdi + 0x41]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0x1f
jb 0x4c10bd
jmp 0x4c1121
xor eax, eax
lea rbx, [rsp + 0x41]
mov ecx, 0x1f
call fcn.00444780
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00456440
mov eax, edi
mov ecx, 0x1f
call fcn.00456440
nop
call fcn.00454160
nop
jmp fcn.004c1020

Function at 0x4c7300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c742c
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6507b51d70256bb8
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x726507b51d70256b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x43bfc7dc69a37435
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd2aa02747fca866e
mov qword [rsp + 0x50], rdx
movabs rdx, 0xbdc1b0777751689b
mov qword [rsp + 0x58], rdx
movabs rdx, 0x60406100d021b0e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1c04060406100d02
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1312201914180920
mov qword [rsp + 0x27], rdx
movabs rdx, 0xe19160f020d1f
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x51706191e000b10
mov qword [rsp + 0x37], rdx
xor eax, eax
jmp 0x4c73c6
movzx r9d, byte [rsp + rsi + 0x3f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x3f], dl
mov byte [rsp + rsi + 0x3f], r8b
add rax, 2
cmp rax, 0x22
jge 0x4c73fc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x21
jae 0x4c741f
movzx r8d, byte [rsp + rdi + 0x3f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
cmp rsi, 0x21
jb 0x4c73ac
jmp 0x4c7413
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x21
call fcn.00444780
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00456440
mov eax, edi
mov ecx, 0x21
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004c7300
Function at 0x4c8a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8b1d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd545695561c735c8
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd5dbde6edc73d545
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10700000d0d0902
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb09010700000d0d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb0c0706040c060b
mov qword [rsp + 0x22], rdx
xor eax, eax
nop
jmp 0x4c8ac0
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4c8aed
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c8b10
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4c8aa2
jmp 0x4c8b04
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456440
mov eax, edi
mov ecx, 0xe
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.004c8a40

Function at 0x4c9680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c975d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x36b8e2ec3798e952
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf532ed59af7136b8
mov qword [rsp + 0x38], rdx
movabs rdx, 0x109090a02050200
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6010b000109090a
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa01040d05040805
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x4c9700
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0x57]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4c972d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c9750
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0xe
jb 0x4c96e2
jmp 0x4c9744
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456440
mov eax, edi
mov ecx, 0xe
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.004c9680
Function at 0x4c9780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9866
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3535373745413f34
mov qword [rsp + 0x31], rdx
movabs rdx, 0x40312f422f323835
mov qword [rsp + 0x38], rdx
movabs rdx, 0x206030101080b0e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x20d020603010108
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1010c0a0c030604
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4c9800
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x12]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4c9832
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c9857
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x12]
cmp rsi, 0xf
jb 0x4c97e2
jmp 0x4c984b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456440
mov eax, edi
mov ecx, 0xf
nop
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004c9780

Function at 0x4c9b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9c0a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x64a1ac3063e031d2
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xfb64a1ac3063e031
mov qword [rsp + 0x30], rdx
movabs rdx, 0xab90316a76303535
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30f1000030f0308
mov qword [rsp + 0x19], rdx
movabs rdx, 0x100305071005030f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd000d0c020c0d06
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4c9bad
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 0x1f]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x16
jge 0x4c9bda
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c9bfd
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4c9b90
jmp 0x4c9bf1
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456440
mov eax, edi
mov ecx, 0x11
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004c9b20
Function at 0x4cda60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cdb68
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x3838f53937331033
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x1ee937ee01dd2af6
mov qword [rsp + 0x45], rdx
movabs rdx, 0x311dd51ee937ee01
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe517e4f7e51d0500
mov qword [rsp + 0x50], rdx
movabs rdx, 0x101416170a0e1a13
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x10e0b08130f0818
mov qword [rsp + 0x27], rdx
movabs rdx, 0x150517190c17010e
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x18110a1916091415
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x4cdb0b
movzx r9d, byte [rsp + rsi + 0x3d]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x3d], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x3d], dl
add rax, 2
cmp rax, 0x1e
jge 0x4cdb38
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4cdb5b
movzx r8d, byte [rsp + rdi + 0x3d]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4cdaee
jmp 0x4cdb4f
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00456440
mov eax, edi
mov ecx, 0x1b
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004cda60

Function at 0x4d08a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d09d8
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x81f9f8c835653137
mov qword [rsp + 0x47], rdx
movabs rdx, 0xbc81f9f8c8356531
mov qword [rsp + 0x48], rdx
movabs rdx, 0x66c3657231d6369a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7da99f4624d63835
mov qword [rsp + 0x58], rdx
movabs rdx, 0x951c6fc03735377b
mov qword [rsp + 0x60], rdx
movabs rdx, 0x6202015020e0a08
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x201f151e10140408
mov qword [rsp + 0x23], rdx
movabs rdx, 0x190b1d1d201f151e
mov qword [rsp + 0x27], rdx
movabs rdx, 0x100a0f0d17201813
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x9160d070d04051e
mov qword [rsp + 0x37], rdx
movabs rdx, 0xa06191d1e051808
mov qword [rsp + 0x3f], rdx
xor eax, eax
jmp 0x4d0978
movzx r9d, byte [rsp + rsi + 0x47]
sub r9d, edx
lea edx, [r9 - 0x27]
mov byte [rsp + rdi + 0x47], dl
lea edx, [r8 - 0x27]
mov byte [rsp + rsi + 0x47], dl
add rax, 2
cmp rax, 0x2c
jge 0x4d09a8
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4d09cb
movzx r8d, byte [rsp + rdi + 0x47]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x21
jb 0x4d095b
jmp 0x4d09bf
xor eax, eax
lea rbx, [rsp + 0x47]
mov ecx, 0x21
call fcn.00444780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00456440
mov eax, edi
mov ecx, 0x21
call fcn.00456440
nop
call fcn.00454160
nop dword [rax]
jmp fcn.004d08a0
Function at 0x4d0a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0b2c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x31341d0614100938
mov qword [rsp + 0x45], rdx
movabs rdx, 0x12fa0831341d0614
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3311f2f4fe16c5f7
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf3331705f628f933
mov qword [rsp + 0x58], rdx
movabs rdx, 0x8dd73635cef40cf9
mov qword [rsp + 0x60], rdx
movabs rdx, 0x415031a0c041e15
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc03011d220e0415
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1051518020d0b21
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x1b040a0b0818111c
mov qword [rsp + 0x35], rdx
movabs rdx, 0x1017100e160f0914
mov qword [rsp + 0x3d], rdx
xor eax, eax
jmp 0x4d0ac6
movzx r9d, byte [rsp + rsi + 0x45]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x45], dl
mov byte [rsp + rsi + 0x45], r8b
add rax, 2
cmp rax, 0x26
jge 0x4d0afc
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x23
jae 0x4d0b1f
movzx r8d, byte [rsp + rdi + 0x45]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
cmp rsi, 0x23
jb 0x4d0aac
jmp 0x4d0b13
xor eax, eax
lea rbx, [rsp + 0x45]
mov ecx, 0x23
call fcn.00444780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00456440
mov eax, edi
mov ecx, 0x23
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004d0a00

Function at 0x4d0ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d102c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0xb3b332f395aa9876
mov qword [rsp + 0x52], rdx
movabs rdx, 0x313592ad1832b3b3
mov qword [rsp + 0x58], rdx
movabs rdx, 0xed8bf7fd5fe0b07b
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf9303821c3313395
mov qword [rsp + 0x68], rdx
movabs rdx, 0x8a32ce33fbf7a950
mov qword [rsp + 0x70], rdx
movabs rdx, 0xa0710041310021d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x201e0f0609120a07
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20211a2304112319
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x404031204131f1e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1502191619030420
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x100e000000230102
mov qword [rsp + 0x42], rdx
movabs rdx, 0x111421250b091613
mov qword [rsp + 0x4a], rdx
xor eax, eax
jmp 0x4d0fc4
movzx r9d, byte [rsp + rsi + 0x52]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x70]
mov byte [rsp + rdi + 0x52], dl
mov byte [rsp + rsi + 0x52], r8b
add rax, 2
cmp rax, 0x36
jge 0x4d0ffc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x26
jae 0x4d101f
movzx r8d, byte [rsp + rdi + 0x52]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x70]
cmp rsi, 0x26
jb 0x4d0faa
jmp 0x4d1013
xor eax, eax
lea rbx, [rsp + 0x52]
mov ecx, 0x26
call fcn.00444780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x26
call fcn.00456440
mov eax, edi
mov ecx, 0x26
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004d0ee0
Function at 0x4dd7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dd8a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2f4730472f2c3f34
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2f45443044323738
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60f040c09010b0f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7040007020a060f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0502030702060a
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4dd840
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x10]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4dd872
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4dd897
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x10]
cmp rsi, 0x10
jb 0x4dd822
jmp 0x4dd88b
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456440
mov eax, edi
mov ecx, 0x10
nop
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004dd7c0

Function at 0x4dfc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4dfcdd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xf08da8ce61cbac44
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x69d6
movabs rdx, 0x604020406070805
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x1020504
xor eax, eax
jmp 0x4dfc80
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xc
jge 0x4dfcad
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4dfcd0
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4dfc63
jmp 0x4dfcc4
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00456440
mov eax, edi
mov ecx, 0xa
call fcn.00456440
nop
nop dword [rax]
call fcn.00454160
jmp fcn.004dfc20

Function at 0x4e0100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e01b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb4619e877f9d9244
mov qword [rsp + 0x28], rdx
movabs rdx, 0x304040203050307
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x105
xor eax, eax
jmp 0x4e0158
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0xd]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0xd]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x4e0188
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4e01ab
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4e013b
jmp 0x4e019f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00456440
mov eax, edi
mov ecx, 8
call fcn.00456440
nop
call fcn.00454160
nop dword [rax]
jmp fcn.004e0100
Function at 0x4e01e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e02ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1d613e453d224645
mov qword [rsp + 0x34], rdx
movabs rdx, 0x4e1c485f1d613e45
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1e21332a4d1d4672
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0211130512050a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x30107050e05040f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1113130d11100b05
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4e026d
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x3a]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x3a]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x18
jge 0x4e029a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4e02bd
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4e0250
jmp 0x4e02b1
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456440
mov eax, edi
mov ecx, 0x14
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004e01e0

Function at 0x4e1c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e1cec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x62705d72637d8d7e
mov qword [rsp + 0x33], rdx
movabs rdx, 0x719966787462705d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x47766e6c6e617f5f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140a0b0b0e010112
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x120512020c0b0902
mov qword [rsp + 0x23], rdx
movabs rdx, 0xa00020008011007
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4e1c8a
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x21]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x4e1cbc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4e1cdf
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x21]
cmp rsi, 0x15
jb 0x4e1c70
jmp 0x4e1cd3
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456440
mov eax, edi
mov ecx, 0x15
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004e1c00
Function at 0x4e2be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e2c98
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69115ff8b1e4761a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x104010300030003
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x30602
xor eax, eax
jmp 0x4e2c39
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xc
jge 0x4e2c68
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4e2c8b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop
cmp rsi, 8
jb 0x4e2c1c
jmp 0x4e2c7f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00456440
mov eax, edi
mov ecx, 8
call fcn.00456440
nop
call fcn.00454160
nop dword [rax]
jmp fcn.004e2be0

Function at 0x4e3f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e400c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7e6a5b685e70614d
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x6979846f477e6a5b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x703060b03050a07
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa06030606040202
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4e3faf
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 + 0xb]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 + 0xb]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0x10
jge 0x4e3fdc
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e3fff
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4e3f92
jmp 0x4e3ff3
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00456440
mov eax, edi
mov ecx, 0xd
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004e3f40

Function at 0x4e4020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e40de
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xee6961dbdc6066eb
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x35e2ddee
movabs rdx, 0x902080003040a08
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x9070109
xor eax, eax
jmp 0x4e4081
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4e40ae
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4e40d1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4e4064
jmp 0x4e40c5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456440
mov eax, edi
mov ecx, 0xb
call fcn.00456440
nop
nop
call fcn.00454160
jmp fcn.004e4020
Function at 0x4e4320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e43f2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xea645f65526979ef
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xdcc76be9dfea645f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb00030c03020100
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x908070206020b00
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4e438c
movzx r9d, byte [rsp + rsi + 0x2b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x2b], dl
mov byte [rsp + rsi + 0x2b], r8b
add rax, 2
cmp rax, 0xe
jge 0x4e43be
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4e43e5
movzx r8d, byte [rsp + rdi + 0x2b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0xd
jb 0x4e4372
jmp 0x4e43d5
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00456440
mov eax, edi
mov ecx, 0xd
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004e4320

Function at 0x4e4400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4e44e6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x23e8aada6fdae4e4
mov qword [rsp + 0x30], rdx
movabs rdx, 0xdaa769738375bc9f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60500020e040907
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1020808090b0605
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0e0f0e07000502
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4e4480
movzx r9d, byte [rsp + rsi + 0x30]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4a]
mov byte [rsp + rdi + 0x30], dl
mov byte [rsp + rsi + 0x30], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4e44b2
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4e44d7
movzx r8d, byte [rsp + rdi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4a]
cmp rsi, 0x10
jb 0x4e4462
jmp 0x4e44cb
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
nop
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456440
mov eax, edi
mov ecx, 0x10
nop
call fcn.00456440
nop
call fcn.00454160
jmp fcn.004e4400