joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4bb980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bba38
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x78e7c1c56505e8ba
mov qword [rsp + 0x28], rdx
movabs rdx, 0x504060202060100
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0
xor eax, eax
jmp 0x4bb9d5
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x58]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x4bba08
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4bba2b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x58]
nop
cmp rsi, 8
jb 0x4bb9bb
jmp 0x4bba1f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00448840
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045b700
mov eax, edi
mov ecx, 8
call fcn.0045b700
nop
call fcn.00459420
nop dword [rax]
jmp fcn.004bb980

Function at 0x4bbd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbe0c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x99898c86a48c7795
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x5b6c9091
movabs rdx, 0x908030607080100
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x706080b04050208
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4bbda5
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4bbddc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4bbdff
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0xc
jb 0x4bbd8b
jmp 0x4bbdf3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00448840
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045b700
mov eax, edi
mov ecx, 0xc
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004bbd40

Function at 0x4bbe20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbefd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x15426be9512e655c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x68dcd9cb72dc5bbb
mov qword [rsp + 0x38], rdx
movabs rdx, 0x703070702080308
mov qword [rsp + 0x18], rdx
movabs rdx, 0xc000d09050f0707
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf04050d0c080a0e
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4bbea0
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4bbecd
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4bbef0
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x4bbe82
jmp 0x4bbee4
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.00448840
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045b700
mov eax, edi
mov ecx, 0x10
call fcn.0045b700
nop
nop dword [rax]
call fcn.00459420
jmp fcn.004bbe20
Function at 0x4be9a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bea66
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5464676572596b57
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x7c
movabs rdx, 0x102030502010803
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x8050303
xor eax, eax
nop
jmp 0x4bea00
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x13]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4bea32
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4bea57
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x13]
cmp rsi, 9
jb 0x4be9e2
jmp 0x4bea4b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00448840
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.0045b700
mov eax, edi
mov ecx, 9
nop
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004be9a0

Function at 0x4bf7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf8a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6e8e80ed71f565f8
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xf9062e6e
movabs rdx, 0x602000500030408
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x90204090a000602
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4bf848
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x4bf877
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4bf89a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4bf82b
jmp 0x4bf88e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00448840
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.0045b700
mov eax, edi
mov ecx, 0xb
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004bf7e0
Function at 0x4c26e0
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c27aa
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0
call fcn.004031a0
xorps xmm15, xmm15
mov r14, qword [0x006a9c80]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
jne 0x4c278f
mov rcx, qword [rsp + 0x60]
lea rdx, [rcx + 1]
mov qword [rsp + 0x40], rdx
lea rax, [0x0054bca0]
xor ebx, ebx
mov rcx, rdx
call fcn.00445360
mov rbx, qword [rsp + 0x60]
mov rcx, rax
xor edi, edi
mov rsi, qword [rsp + 0x40]
mov rax, qword [rsp + 0x58]
nop dword [rax]
call fcn.004c34a0
inc rbx
cmp rcx, rbx
jae 0x4c277e
mov edi, 1
lea rsi, [0x0054bca0]
call fcn.00445440
mov word [rax + rbx*2 - 2], 0
xor edi, edi
xor esi, esi
add rsp, 0x48
pop rbp
ret
xor eax, eax
xor ebx, ebx
mov rcx, rbx
lea rdi, [0x005928c8]
lea rsi, [0x00592500]
add rsp, 0x48
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00459420
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.004c26e0

Function at 0x4c6d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6e3d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x95a1a83597906184
mov qword [rsp + 0x31], rdx
movabs rdx, 0x7a3a95877e20a295
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60d0c070e040a03
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x80d0c0a060d0c07
mov qword [rsp + 0x21], rdx
movabs rdx, 0xb0d02000207050b
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4c6de0
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 - 9]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 - 9]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4c6e0d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c6e30
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x4c6dc2
jmp 0x4c6e24
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.00448840
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.0045b700
mov eax, edi
mov ecx, 0xf
call fcn.0045b700
nop
nop dword [rax]
call fcn.00459420
jmp fcn.004c6d60
Function at 0x4c6e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6f2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x707a7d5e756e6967
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2320285f7272707a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc000a03090c000c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x50a0407060b0404
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4c6ecf
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 + 0xf]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 + 0xf]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0x10
jge 0x4c6efc
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c6f1f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4c6eb2
jmp 0x4c6f13
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00448840
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.0045b700
mov eax, edi
mov ecx, 0xe
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004c6e60

Function at 0x4c8740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c880c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x320f6d586ed00ba4
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x197ab02
movabs rdx, 0x500050104010509
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80906020b05050a
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4c87a5
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4c87dc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4c87ff
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
cmp rsi, 0xc
jb 0x4c878b
jmp 0x4c87f3
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00448840
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.0045b700
mov eax, edi
mov ecx, 0xc
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004c8740

Function at 0x4c9660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9732
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x61567426dfd8c146
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd4c4bf657bd36156
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30d090308020d04
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10c0d0b0001030d
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4c96cc
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x78]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0xe
jge 0x4c96fe
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c9725
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x78]
cmp rsi, 0xe
jb 0x4c96b2
jmp 0x4c9715
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00448840
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.0045b700
mov eax, edi
mov ecx, 0xe
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004c9660
Function at 0x4ca2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca398
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x790dff7a726293e0
mov qword [rsp + 0x28], rdx
movabs rdx, 0x105000405060005
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x104
xor eax, eax
jmp 0x4ca335
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xa
jge 0x4ca368
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4ca38b
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
nop
cmp rsi, 8
jb 0x4ca31b
jmp 0x4ca37f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00448840
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045b700
mov eax, edi
mov ecx, 8
call fcn.0045b700
nop
call fcn.00459420
nop dword [rax]
jmp fcn.004ca2e0

Function at 0x4ca920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca9d8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x72ba10bb656d91bd
mov qword [rsp + 0x28], rdx
movabs rdx, 0x506060405000205
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x40401
xor eax, eax
jmp 0x4ca976
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4c]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0xc
jge 0x4ca9a8
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4ca9cb
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4c]
cmp rsi, 8
jb 0x4ca95c
jmp 0x4ca9bf
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.00448840
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.0045b700
mov eax, edi
mov ecx, 8
call fcn.0045b700
nop
call fcn.00459420
nop dword [rax]
jmp fcn.004ca920
Function at 0x4ccfe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd0fa
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x99f31c4ddbefa91b
mov qword [rsp + 0x41], rdx
movabs rdx, 0x2069304628204661
mov qword [rsp + 0x49], rdx
movabs rdx, 0x486e4bf32c556120
mov qword [rsp + 0x50], rdx
movabs rdx, 0x65121a54223e2f61
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6111d000c160506
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xb1a0012031c0611
mov qword [rsp + 0x21], rdx
movabs rdx, 0x141c050709040018
mov qword [rsp + 0x29], rdx
movabs rdx, 0x211071107011d05
mov qword [rsp + 0x31], rdx
movabs rdx, 0x140f1a13021d190d
mov qword [rsp + 0x39], rdx
xor eax, eax
jmp 0x4cd097
movzx r9d, byte [rsp + rsi + 0x41]
lea edx, [r9 + rdx]
lea edx, [rdx + 2]
mov byte [rsp + rdi + 0x41], dl
mov byte [rsp + rsi + 0x41], r8b
add rax, 2
cmp rax, 0x26
jge 0x4cd0c9
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1f
jae 0x4cd0ed
movzx r8d, byte [rsp + rdi + 0x41]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 2]
cmp rsi, 0x1f
jb 0x4cd07d
jmp 0x4cd0e1
xor eax, eax
lea rbx, [rsp + 0x41]
mov ecx, 0x1f
call fcn.00448840
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1f
call fcn.0045b700
mov eax, edi
mov ecx, 0x1f
call fcn.0045b700
nop
call fcn.00459420
nop
jmp fcn.004ccfe0

Function at 0x4cd5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd6ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x4ec934f37912b945
mov qword [rsp + 0x35], rdx
movabs rdx, 0x3e6e314ec934f379
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6543593f20647233
mov qword [rsp + 0x40], rdx
movabs rdx, 0x710020106020b11
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa0604050f020710
mov qword [rsp + 0x25], rdx
movabs rdx, 0x8061101110f08
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4cd66d
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x38]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x38]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jge 0x4cd69a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4cd6bd
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4cd650
jmp 0x4cd6b1
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00448840
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045b700
mov eax, edi
mov ecx, 0x13
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004cd5e0
Function at 0x4ce6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce79d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x66d499910920db21
mov qword [rsp + 0x38], rdx
movabs rdx, 0x336e08747f20bcd9
mov qword [rsp + 0x40], rdx
movabs rdx, 0xaf6d69ab12f072d7
mov qword [rsp + 0x48], rdx
movabs rdx, 0x30408050b00170f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x120b13100f011206
mov qword [rsp + 0x20], rdx
movabs rdx, 0x313100504130d12
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6120f0909170514
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ce740
movzx r9d, byte [rsp + rsi + 0x38]
sub r9d, edx
lea edx, [r9 - 0x1f]
mov byte [rsp + rdi + 0x38], dl
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x38], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4ce76d
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4ce790
movzx r8d, byte [rsp + rdi + 0x38]
sub r8d, edx
cmp rsi, 0x18
jb 0x4ce71f
jmp 0x4ce784
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.00448840
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.0045b700
mov eax, edi
mov ecx, 0x18
call fcn.0045b700
nop
nop dword [rax]
call fcn.00459420
jmp fcn.004ce6a0

Function at 0x4cf780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf87b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5c9e374fdcb6fa5
mov qword [rsp + 0x32], rdx
movabs rdx, 0x646dad744ec305c9
mov qword [rsp + 0x38], rdx
movabs rdx, 0x93c4b15420647461
mov qword [rsp + 0x40], rdx
movabs rdx, 0x906030614130c0f
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2020f08050b060c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70602020f08050b
mov qword [rsp + 0x22], rdx
movabs rdx, 0x14000c06150b1408
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4cf819
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4cf84b
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4cf86e
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
cmp rsi, 0x16
jb 0x4cf7ff
jmp 0x4cf862
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00448840
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0045b700
mov eax, edi
mov ecx, 0x16
call fcn.0045b700
nop
nop dword [rax + rax]
call fcn.00459420
jmp fcn.004cf780
Function at 0x4cf8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf98a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e846c6e65f47247
mov qword [rsp + 0x31], rdx
movabs rdx, 0xe98e61f41009096e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa9e9c054ee859be1
mov qword [rsp + 0x40], rdx
movabs rdx, 0x8100a0a11060a0e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x60e161214091511
mov qword [rsp + 0x21], rdx
movabs rdx, 0x6020b080d060a0f
mov qword [rsp + 0x29], rdx
xor eax, eax
jmp 0x4cf92d
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
cmp rax, 0x18
jge 0x4cf95a
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4cf97d
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0x17
jb 0x4cf910
jmp 0x4cf971
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.00448840
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0045b700
mov eax, edi
mov ecx, 0x17
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004cf8a0

Function at 0x4d1e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1f3d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x326cfc30195a5082
mov qword [rsp + 0x42], rdx
movabs rdx, 0x3e90263f6ea42c53
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x2057486939fb3e90
mov qword [rsp + 0x50], rdx
movabs rdx, 0x296f13e738344df3
mov qword [rsp + 0x58], rdx
movabs rdx, 0x70e001b0311051a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1a0a1b05070e001b
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd190f040d070d05
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7091a1802190c1b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x214130118071016
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x4d1ee0
movzx r9d, byte [rsp + rsi + 0x42]
sub r9d, edx
lea edx, [r9 + 0x4f]
mov byte [rsp + rdi + 0x42], dl
lea edx, [r8 + 0x4f]
mov byte [rsp + rsi + 0x42], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4d1f0d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4d1f30
movzx r8d, byte [rsp + rdi + 0x42]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4d1ebd
jmp 0x4d1f24
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x1e
call fcn.00448840
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0045b700
mov eax, edi
mov ecx, 0x1e
call fcn.0045b700
nop
nop dword [rax]
call fcn.00459420
jmp fcn.004d1e20
Function at 0x4d2c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2d6c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x4c6e7573ceefa9e4
mov qword [rsp + 0x37], rdx
movabs rdx, 0xf36174e320b0f2fa
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x64f36174e320b0f2
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd96d69d0206372d8
mov qword [rsp + 0x48], rdx
movabs rdx, 0x8090011150c0213
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf0a0102040a1503
mov qword [rsp + 0x25], rdx
movabs rdx, 0x13040f0a0102040a
mov qword [rsp + 0x27], rdx
movabs rdx, 0x1813031304030704
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4d2d08
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x68]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4d2d3c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4d2d5f
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x68]
cmp rsi, 0x19
jb 0x4d2cee
jmp 0x4d2d53
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00448840
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0045b700
mov eax, edi
mov ecx, 0x19
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004d2c60

Function at 0x4d52e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d53ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5a05084e3330754d
mov qword [rsp + 0x35], rdx
movabs rdx, 0x646e275a05084e33
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65476954082b341b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x803110d0b03000c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x203060211070803
mov qword [rsp + 0x25], rdx
movabs rdx, 0xb030d040807050e
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4d536d
movzx r9d, byte [rsp + rsi + 0x35]
sub r9d, edx
lea edx, [r9 + 0x31]
mov byte [rsp + rdi + 0x35], dl
lea edx, [r8 + 0x31]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jge 0x4d539a
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d53bd
movzx r8d, byte [rsp + rdi + 0x35]
sub r8d, edx
cmp rsi, 0x13
jb 0x4d5350
jmp 0x4d53b1
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00448840
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045b700
mov eax, edi
mov ecx, 0x13
call fcn.0045b700
nop
call fcn.00459420
jmp fcn.004d52e0