joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b3de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b3ea6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xd26b20ed3e084557
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x2074
movabs rdx, 0x201040103070202
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x5090903
xor eax, eax
jmp 0x4b3e40
movzx r9d, byte [rsp + rsi + 0x26]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x26], dl
mov byte [rsp + rsi + 0x26], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4b3e72
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4b3e97
movzx r8d, byte [rsp + rdi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 0xa
jb 0x4b3e23
jmp 0x4b3e8b
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b3de0

Function at 0x4b6be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x4b6d75
push rbp
mov rbp, rsp
sub rsp, 0x98
movabs rdx, 0xe01e6e5c405e52ea
mov qword [rsp + 0x62], rdx
movabs rdx, 0x72465161eb20e01e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x4f1a250c42d3205f
mov qword [rsp + 0x70], rdx
movabs rdx, 0xa6ed5e56e6f30de
mov qword [rsp + 0x78], rdx
movabs rdx, 0x64655a726f05239c
mov qword [rsp + 0x80], rdx
movabs rdx, 0x218c72633e646420
mov qword [rsp + 0x88], rdx
movabs rdx, 0x117020e515fc5108
mov qword [rsp + 0x90], rdx
movabs rdx, 0x3111291b1e3210
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2e2c1e3200311129
mov qword [rsp + 0x22], rdx
movabs rdx, 0x713061416122e10
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x917131f0e33100c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x2f012e020c200a35
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xc1d000c1b1e30
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1a1a031223040b2d
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2d1c0c350b0a1e0a
mov qword [rsp + 0x52], rdx
movabs rdx, 0x628061b2e10151e
mov qword [rsp + 0x5a], rdx
xor eax, eax
jmp 0x4b6d14
movzx r9d, byte [rsp + rsi + 0x62]
sub r9d, edx
lea edx, [r9 + 0x6d]
mov byte [rsp + rdi + 0x62], dl
lea edx, [r8 + 0x6d]
mov byte [rsp + rsi + 0x62], dl
add rax, 2
cmp rax, 0x44
jge 0x4b6d42
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x36
jae 0x4b6d68
movzx r8d, byte [rsp + rdi + 0x62]
sub r8d, edx
cmp rsi, 0x36
jb 0x4b6cf7
nop
jmp 0x4b6d5c
xor eax, eax
lea rbx, [rsp + 0x62]
mov ecx, 0x36
call fcn.0044d280
add rsp, 0x98
pop rbp
ret
mov eax, esi
mov ecx, 0x36
call fcn.00462ca0
mov eax, edi
mov ecx, 0x36
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b6be0
Function at 0x4b6ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6f78
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6d1bfc673b401c4a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x203010206060605
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 5
xor eax, eax
jmp 0x4b6f18
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0x35]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0x35]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x4b6f48
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4b6f6b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4b6efb
jmp 0x4b6f5f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.004b6ec0

Function at 0x4b6fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b70ec
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x94420d2c37e04a3e
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x422759182094420d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x521f6b1c1b27671a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6f5eec5d84206e54
mov qword [rsp + 0x60], rdx
movabs rdx, 0x3d28412574206b16
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1a2424040b1d181b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1d0e1a2424040b1d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc22150f02191407
mov qword [rsp + 0x23], rdx
movabs rdx, 0x192115070f0d100a
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1423180b03210300
mov qword [rsp + 0x33], rdx
movabs rdx, 0x407231309060018
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x50106130a111105
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x4b7084
movzx r9d, byte [rsp + rsi + 0x4b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x10]
mov byte [rsp + rdi + 0x4b], dl
mov byte [rsp + rsi + 0x4b], r8b
add rax, 2
cmp rax, 0x32
jge 0x4b70bc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x25
jae 0x4b70df
movzx r8d, byte [rsp + rdi + 0x4b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x10]
cmp rsi, 0x25
jb 0x4b706a
jmp 0x4b70d3
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x25
call fcn.0044d280
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00462ca0
mov eax, edi
mov ecx, 0x25
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b6fa0
Function at 0x4b7100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x4b727b
push rbp
mov rbp, rsp
sub rsp, 0xb8
movabs rdx, 0x79882d9085cd5cde
mov qword [rsp + 0x71], rdx
movabs rdx, 0xd99e630f6fdddd79
mov qword [rsp + 0x78], rdx
movabs rdx, 0x652ccd204a6e6572
mov qword [rsp + 0x80], rdx
movabs rdx, 0xa67de26f1ed0ff82
mov qword [rsp + 0x88], rdx
movabs rdx, 0x7069733c6174dc34
mov qword [rsp + 0x90], rdx
movabs rdx, 0xb1a76927186590b8
mov qword [rsp + 0x98], rdx
movabs rdx, 0xd563957338726fd5
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x20c2616d281cb08b
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x29703735a13bacb3
mov qword [rsp + 0xb0], rdx
movabs rdx, 0x408093820391927
mov qword [rsp + 0x1f], rdx
lea rdi, [rsp + 0x21]
lea rsi, str.9_8_t_b
nop word [rax + rax]
nop word [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004632ba
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4b7211
movzx r9d, byte [rsp + rsi + 0x71]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x71], dl
mov byte [rsp + rsi + 0x71], r8b
add rax, 2
cmp rax, 0x52
jge 0x4b7248
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x4b726e
movzx r8d, byte [rsp + rdi + 0x71]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
nop dword [rax + rax]
cmp rsi, 0x47
jb 0x4b71f7
jmp 0x4b7262
xor eax, eax
lea rbx, [rsp + 0x71]
mov ecx, 0x47
call fcn.0044d280
add rsp, 0xb8
pop rbp
ret
mov eax, esi
mov ecx, 0x47
call fcn.00462ca0
mov eax, edi
mov ecx, 0x47
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004b7100
Function at 0x4b72a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x4b7427
push rbp
mov rbp, rsp
sub rsp, 0xc8
movabs rdx, 0xa54dd8b2386fadf2
mov qword [rsp + 0x81], rdx
movabs rdx, 0x726163cec26320a5
mov qword [rsp + 0x88], rdx
movabs rdx, 0x65706fb37420c469
mov qword [rsp + 0x90], rdx
movabs rdx, 0x2963d06f1d7461ff
mov qword [rsp + 0x98], rdx
movabs rdx, 0x4dacb23700e5041d
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x3c2d935a454fea05
mov qword [rsp + 0xa8], rdx
movabs rdx, 0xf8a19b730b9f78d7
mov qword [rsp + 0xb0], rdx
movabs rdx, 0x2033766d425ec68e
mov qword [rsp + 0xb8], rdx
movabs rdx, 0x29353739f3b36fd6
mov qword [rsp + 0xc0], rdx
movabs rdx, 0x41e1e36212e1020
mov qword [rsp + 0x19], rdx
lea rdi, [rsp + 0x21]
lea rsi, [0x00507430]
nop word [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004632ac
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4b73c0
movzx r9d, byte [rsp + rsi + 0x81]
sub r9d, edx
lea edx, [r9 - 0x6f]
mov byte [rsp + rdi + 0x81], dl
lea edx, [r8 - 0x6f]
mov byte [rsp + rsi + 0x81], dl
add rax, 2
nop dword [rax]
cmp rax, 0x68
jge 0x4b73f0
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x47
jae 0x4b741a
movzx r8d, byte [rsp + rdi + 0x81]
sub r8d, edx
cmp rsi, 0x47
jb 0x4b7397
jmp 0x4b740e
xor eax, eax
lea rbx, [rsp + 0x81]
mov ecx, 0x47
nop
call fcn.0044d280
add rsp, 0xc8
pop rbp
ret
mov eax, esi
mov ecx, 0x47
call fcn.00462ca0
mov eax, edi
mov ecx, 0x47
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b72a0

Function at 0x4b7e00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b7ec7
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xe88d922f76887a2f
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6e94
movabs rdx, 0x802070702010501
mov qword [rsp + 0x18], rdx
movabs rdx, 0x108020506010802
mov qword [rsp + 0x1e], rdx
xor eax, eax
jmp 0x4b7e67
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xe
jge 0x4b7e97
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4b7eba
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4b7e4a
jmp 0x4b7eae
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00462ca0
mov eax, edi
mov ecx, 0xa
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b7e00
Function at 0x4b9280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b93a7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xcad22b7d746ee073
mov qword [rsp + 0x44], rdx
movabs rdx, 0xddd7272cad22b7d
mov qword [rsp + 0x48], rdx
movabs rdx, 0xad69186e77deb915
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe06cc4d1fc63dfbb
mov qword [rsp + 0x58], rdx
movabs rdx, 0x8cd2626dfc6e0878
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1f230c13191f221d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1714071d05040405
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa171b0b110e0d05
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc0f011f1f151705
mov qword [rsp + 0x34], rdx
movabs rdx, 0xb220c061f111815
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x4b9349
movzx r9d, byte [rsp + rsi + 0x44]
sub r9d, edx
lea edx, [r9 + 0x7c]
mov byte [rsp + rdi + 0x44], dl
lea edx, [r8 + 0x7c]
mov byte [rsp + rsi + 0x44], dl
add rax, 2
cmp rax, 0x28
jge 0x4b9377
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x24
jae 0x4b939a
movzx r8d, byte [rsp + rdi + 0x44]
sub r8d, edx
cmp rsi, 0x24
jb 0x4b932c
jmp 0x4b938e
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x24
call fcn.0044d280
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00462ca0
mov eax, edi
mov ecx, 0x24
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b9280

Function at 0x4c28c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2998
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5a314e4177984763
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x3f6a4167
movabs rdx, 0x303050503070600
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x902030305050307
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa070b010809090a
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4c2937
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 6]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x12
jge 0x4c2968
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4c298b
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x4c291a
jmp 0x4c297f
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.004c28c0
Function at 0x4c2aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2b66
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x694e715356496f28
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xd8
movabs rdx, 0x701080305080303
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x107
xor eax, eax
nop
jmp 0x4c2b00
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x62]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4c2b32
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4c2b57
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x62]
cmp rsi, 9
jb 0x4c2ae2
jmp 0x4c2b4b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004c2aa0

Function at 0x4c2b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2c7b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x44146061766e693c
mov qword [rsp + 0x39], rdx
movabs rdx, 0x2c4a475d65722644
mov qword [rsp + 0x40], rdx
movabs rdx, 0x596575696564657a
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe07050f110d100e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1207061213160613
mov qword [rsp + 0x21], rdx
movabs rdx, 0x8160d0c1311070d
mov qword [rsp + 0x29], rdx
movabs rdx, 0xb0d110e130f0d13
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4c2c19
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1c]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x20
jge 0x4c2c4b
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c2c6e
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1c]
cmp rsi, 0x17
jb 0x4c2bff
jmp 0x4c2c62
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462ca0
mov eax, edi
mov ecx, 0x17
call fcn.00462ca0
nop
nop dword [rax + rax]
call fcn.004609c0
jmp fcn.004c2b80
Function at 0x4c2ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2d5d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x3a66536860164520
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x5b
movabs rdx, 0x305030105030802
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x605
xor eax, eax
nop
jmp 0x4c2d00
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x14]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x14]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4c2d2d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4c2d50
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4c2ce2
jmp 0x4c2d44
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004c2ca0

Function at 0x4c2d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2e6a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2d03534bd0b316e
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xce02d03534bd0b31
mov qword [rsp + 0x30], rdx
movabs rdx, 0x646665d963dccc39
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0300100b000806
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x100a0a0300100b00
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa0a020d0000070b
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4c2e0d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x12
jge 0x4c2e3a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c2e5d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4c2df0
jmp 0x4c2e51
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004c2d80
Function at 0x4c2e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2f6c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x37c28ee49032e82e
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x8b37c28ee49032e8
mov qword [rsp + 0x30], rdx
movabs rdx, 0x587ed4ec7fd44199
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3030d0405010008
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8040d09040e0303
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf05060f040c0b04
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4c2f0a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4c2f3c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c2f5f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 0x11
jb 0x4c2ef0
jmp 0x4c2f53
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004c2e80

Function at 0x4c3180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c326a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c369b34336b3124
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x386c369b34336b31
mov qword [rsp + 0x30], rdx
movabs rdx, 0xaa66a664d41961cc
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe000b0e0505100c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe000e000b0e0505
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x91002020b000705
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4c320d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 0x2b]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 0x2b]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x12
jge 0x4c323a
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c325d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4c31f0
jmp 0x4c3251
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004c3180
Function at 0x4c3280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c336c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x10361a0a310f31ea
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x3810361a0a310f31
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7847ea1263db0f39
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0500070a0e0a04
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf0e0d0500070a0e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd030702040a0b0d
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4c330a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x15]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x4c333c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c335f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x15]
cmp rsi, 0x11
jb 0x4c32f0
jmp 0x4c3353
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004c3280

Function at 0x4c3480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c356a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x70ebab679bb0faa2
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x8370ebab679bb0fa
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7880df647f6c6139
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1040400030b0e00
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x704050601040400
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf05020c07080606
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4c350d
movzx r9d, byte [rsp + rsi + 0x2f]
sub r9d, edx
lea edx, [r9 - 0x2f]
mov byte [rsp + rdi + 0x2f], dl
lea edx, [r8 - 0x2f]
mov byte [rsp + rsi + 0x2f], dl
add rax, 2
cmp rax, 0x14
jge 0x4c353a
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c355d
movzx r8d, byte [rsp + rdi + 0x2f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4c34f0
jmp 0x4c3551
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004c3480
Function at 0x4c3680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c376c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xdad903340a0cd3d1
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xfadad903340a0cd3
mov qword [rsp + 0x30], rdx
movabs rdx, 0x58f7f6d0f2f741d5
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5090d0702060109
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x801000e05090d07
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe0d070b0c02030f
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4c370a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x24]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x14
jge 0x4c373c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c375f
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x24]
cmp rsi, 0x11
jb 0x4c36f0
jmp 0x4c3753
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004c3680

Function at 0x4c3980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3a47
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb5bebd6eae326e70
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x6c6c7735
movabs rdx, 0x309040007030b0a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x506060507070101
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4c39e8
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x35]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x35]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x4c3a17
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4c3a3a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4c39cb
jmp 0x4c3a2e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00462ca0
mov eax, edi
mov ecx, 0xc
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004c3980