joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c31e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c32e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6fb5719385528c6f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x96887477c3206e6f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa26568a7d9ad8f9b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1304060e0a06120e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x13060a010f040411
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0d0b1113030211
mov qword [rsp + 0x40], rdx
movabs rdx, 0x414120512101612
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c3280
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop
cmp rax, 0x20
jge 0x4c32b2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c32db
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x17
jb 0x4c3265
jmp 0x4c32cf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop
call fcn.00444360
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456a60
mov eax, edi
mov ecx, 0x17
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004c31e0

Function at 0x4c4740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c4848
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6c6fe1645151d2ec
mov qword [rsp + 0x18], rdx
movabs rdx, 0x4420746fe9ef6c6f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xfd0809725feeeb08
mov qword [rsp + 0x26], rdx
movabs rdx, 0x140d140402030d02
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1002010508041108
mov qword [rsp + 0x36], rdx
movabs rdx, 0x904100201050804
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe1309000f15040f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c47e2
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x5f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x5f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1a
jge 0x4c480f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4c483b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x4c47c5
jmp 0x4c482f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456a60
mov eax, edi
mov ecx, 0x16
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004c4740
Function at 0x4c52c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c539c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x49cd65801fe26572
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1cd0c817d6204f2f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb060d0d030f040b
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd040c0b020d0b0e
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4c5335
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0x61]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0x61]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x4c5368
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4c538f
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0x10
jb 0x4c5318
jmp 0x4c5383
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00444360
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456a60
mov eax, edi
mov ecx, 0x10
call fcn.00456a60
nop
nop dword [rax]
call fcn.00454400
jmp fcn.004c52c0
Function at 0x4c61e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c62b2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x205ceb65e46c675e
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xed656f73
movabs rdx, 0x40b090006000409
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x50301050606040b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c624e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4c627b
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4c62a5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4c6231
jmp 0x4c6296
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00444360
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00456a60
mov eax, edi
mov ecx, 0xc
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004c61e0

Function at 0x4c6660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6756
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x3f59b656c0d7473
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x8c81f202403f59b
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe9252d6e171ddf65
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe050f0a060c0714
mov qword [rsp + 0x32], rdx
movabs rdx, 0x808080b10100e05
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2071213140c0e0e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c66f3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x52]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x52]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x16
jge 0x4c6722
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c6749
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4c66d6
nop
jmp 0x4c673d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00456a60
mov eax, edi
mov ecx, 0x15
call fcn.00456a60
nop
call fcn.00454400
nop dword [rax + rax]
jmp fcn.004c6660
Function at 0x4c7800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c78e8
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x7906076d1d18f18c
mov qword [rsp + 0x18], rdx
movabs rdx, 0x73341273f3a97906
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x60c0302030509
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10b00060c030203
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60c020606010308
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c7881
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x62]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x12
jge 0x4c78b3
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c78db
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x62]
cmp rsi, 0xe
jb 0x4c7867
jmp 0x4c78cf
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.00444360
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456a60
mov eax, edi
mov ecx, 0xe
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004c7800
Function at 0x4c8760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8832
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2e3233c338791b36
mov qword [rsp + 0x19], rdx
movabs rdx, 0x156c1a2e3233c338
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80a080108040a
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4010300
xor eax, eax
jmp 0x4c87cb
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x20]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4c87fd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c8825
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x20]
cmp rsi, 0xb
jb 0x4c87b1
jmp 0x4c8818
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00444360
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00456a60
mov eax, edi
mov ecx, 0xb
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004c8760

Function at 0x4c8c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8d12
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x20ec6cfa6e36edbb
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xea1e64f1
movabs rdx, 0xa0404060b020002
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1070808020b0a04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c8cab
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x33]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4c8cdd
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4c8d05
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x33]
cmp rsi, 0xc
jb 0x4c8c91
jmp 0x4c8cf8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00444360
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00456a60
mov eax, edi
mov ecx, 0xc
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004c8c40
Function at 0x4c9140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9208
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x6c64425d42641f5b
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6c
movabs rdx, 0x105040003030305
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x108
xor eax, eax
jmp 0x4c91a3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x4c91d0
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4c91fb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4c9186
jmp 0x4c91ef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.00444360
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00456a60
mov eax, edi
mov ecx, 9
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004c9140

Function at 0x4c97c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c98b2
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x7350a97b6ba47243
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x94a88a777350a97b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x989b65ac55c1417a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x100b0313100e0c08
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe04050708030a04
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0b0712020b090e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c984d
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
mov byte [rsp + rdi + 0x1c], r9b
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c987a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c98a5
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4c9836
jmp 0x4c9895
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
nop dword [rax]
call fcn.00456a60
mov eax, edi
mov ecx, 0x14
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004c97c0
Function at 0x4ca440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca536
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6354cf758a6f6f70
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa88c6354cf758a6f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x5ef180866ea97c72
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0e0f0b0f0c1111
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd060603091008
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb080b0303080305
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ca4d3
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 7]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 7]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x4ca502
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4ca529
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4ca4b6
nop
jmp 0x4ca51d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00444360
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456a60
mov eax, edi
mov ecx, 0x12
call fcn.00456a60
nop
call fcn.00454400
nop dword [rax + rax]
jmp fcn.004ca440

Function at 0x4cb7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cb8d2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xf212b833d994d943
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3963e16669e3c1b6
mov qword [rsp + 0x26], rdx
movabs rdx, 0xbd65744bcf584274
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x36355b4848d44374
mov qword [rsp + 0x36], rdx
movabs rdx, 0x12051d111e1f141b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1c031e0f060d1707
mov qword [rsp + 0x46], rdx
movabs rdx, 0xd051c031e0f060d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x211130119141f04
mov qword [rsp + 0x50], rdx
movabs rdx, 0x91f1d051b08030a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1e141d1a1e110f1d
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4cb86c
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4cb89e
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4cb8c5
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
cmp rsi, 0x20
jb 0x4cb852
jmp 0x4cb8b9
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x20
call fcn.00444360
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
call fcn.00456a60
mov eax, edi
mov ecx, 0x20
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004cb7a0
Function at 0x4cbf40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc052
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x2075c8f5747265db
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc5bb66697495c443
mov qword [rsp + 0x21], rdx
movabs rdx, 0x89183ac5bb666974
mov qword [rsp + 0x24], rdx
movabs rdx, 0x655f277445bf99c9
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x91519040e121109
mov qword [rsp + 0x34], rdx
movabs rdx, 0x19141416040a0e10
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1813071319141416
mov qword [rsp + 0x40], rdx
movabs rdx, 0x100500190f0a130e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4cbff1
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1c
jge 0x4cc01e
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4cc045
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4cbfd4
jmp 0x4cc039
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1b
call fcn.00444360
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00456a60
mov eax, edi
mov ecx, 0x1b
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004cbf40

Function at 0x4ccfa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd069
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x54b8ad755197aa92
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x7fd2
movabs rdx, 0x506070602080009
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1020205
xor eax, eax
jmp 0x4cd003
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x44]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x4cd035
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4cd05c
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x44]
cmp rsi, 0xa
jb 0x4ccfe9
jmp 0x4cd050
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00444360
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00456a60
mov eax, edi
mov ecx, 0xa
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004ccfa0
Function at 0x4ce640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce72b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x721de1bd76b87243
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcfb873081579721d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x509080804080a03
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc02040d05090808
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4090602060a0d0c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ce6c4
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x62]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x62]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x14
jge 0x4ce6f7
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xe
jae 0x4ce71e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4ce6a7
jmp 0x4ce712
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00444360
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456a60
mov eax, edi
mov ecx, 0xe
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004ce640

Function at 0x4cf300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf3eb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x4d1963c00f70f9b0
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb8b90bb19348b84d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60b010d030d070c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa060b010d030d
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe080d040b070c0d
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4cf384
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x4cf3b7
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x4cf3de
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x4cf367
jmp 0x4cf3d2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.00444360
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456a60
mov eax, edi
mov ecx, 0xf
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004cf300
Function at 0x4cf400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf4c8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x736b6cda646ef6d7
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x96
movabs rdx, 0x608000804060108
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x800
xor eax, eax
jmp 0x4cf463
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x4cf490
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4cf4bb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4cf446
jmp 0x4cf4af
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.00444360
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00456a60
mov eax, edi
mov ecx, 9
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004cf400

Function at 0x4cf780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf86b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7c06efaff9ff93d0
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9b03d30507fed465
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10e09000e030705
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc0f0206020d0105
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0a0c0e040b0b06
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4cf804
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x18
jge 0x4cf837
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4cf85e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4cf7e7
jmp 0x4cf852
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.00444360
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456a60
mov eax, edi
mov ecx, 0x10
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004cf780
Function at 0x4d18e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d19d6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x413a473215743e14
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4574413a47321574
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5715317436296941
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf100409010f0300
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6060d0c0f100409
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90d05050a010a0f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d1973
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x35]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x35]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4d19a2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4d19c9
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4d1956
nop
jmp 0x4d19bd
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00444360
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456a60
mov eax, edi
mov ecx, 0x12
call fcn.00456a60
nop
call fcn.00454400
nop dword [rax + rax]
jmp fcn.004d18e0

Function at 0x4d1b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d1bf2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x54ecf7ccefda6547
mov qword [rsp + 0x19], rdx
movabs rdx, 0x63f05d54ecf7ccef
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x9020a0505080403
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6050509
xor eax, eax
jmp 0x4d1b8b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x73]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4d1bbd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4d1be5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x73]
cmp rsi, 0xb
jb 0x4d1b71
jmp 0x4d1bd8
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00444360
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00456a60
mov eax, edi
mov ecx, 0xb
call fcn.00456a60
nop
call fcn.00454400
jmp fcn.004d1b20