joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b00a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b019b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb9d913cbb8661cc3
mov qword [rsp + 0x35], rdx
movabs rdx, 0x6c2529b9d913cbb8
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6dbbc179c5d46592
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1203040304010308
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1000031105090503
mov qword [rsp + 0x23], rdx
movabs rdx, 0x605100003110509
mov qword [rsp + 0x25], rdx
movabs rdx, 0xe0b05070d050712
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4b0139
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6d]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4b016b
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b018e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6d]
cmp rsi, 0x13
jb 0x4b011f
jmp 0x4b0182
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0045af60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004605c0
mov eax, edi
mov ecx, 0x13
call fcn.004605c0
nop
nop dword [rax + rax]
call fcn.0045e2e0
jmp fcn.004b00a0

Function at 0x4b6be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6cdd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x34e2203d20653013
mov qword [rsp + 0x34], rdx
movabs rdx, 0x39d8617634e2203d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x390bf060d4122dbc
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10100f0a0c03120d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x100e110d00100f0a
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd001306100e110d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x100103011304070b
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4b6c80
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x55]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x55]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4b6cad
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4b6cd0
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4b6c5f
jmp 0x4b6cc4
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0045af60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004605c0
mov eax, edi
mov ecx, 0x14
call fcn.004605c0
nop
nop dword [rax]
call fcn.0045e2e0
jmp fcn.004b6be0
Function at 0x4b9560
Capabilities:
Hash data using fnv

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9cb4
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [rsp + 0x20], rax
movabs rcx, 0xcbf29ce484222325
jmp 0x4b958d
lea rax, [rdx + 0x10]
dec rbx
mov rcx, rsi
test rbx, rbx
jle 0x4b9811
mov rdx, rax
mov rsi, qword [rax]
nop dword [rax]
test rsi, rsi
je 0x4b983d
mov edi, dword [rsi + 0x10]
shr edi, 1
mov r8, qword [rax + 8]
and edi, 0x3f
lea rax, [0x005aa6a0]
jmp qword [rax + rdi*8]
mov rax, rcx
add rsp, 0x10
pop rbp
ret
nop dword [rax]
call fcn.004b9ec0
call fcn.00455700
mov rbx, rax
lea rax, [0x00557a80]
call fcn.00459620
inc rax
nop dword [rax]
cmp rax, r8
jge 0x4b986e
mov r9, qword [rsi + rax*8]
xor r10d, r10d
jmp 0x4b98a3
lea rdi, [0x00557b00]
mov rsi, rcx
movabs rcx, 0x100000001b3
jmp 0x4b9583
movzx r11d, r9b
xor rcx, r11
inc r10
shr r9, 8
movabs r11, 0x100000001b3
imul rcx, r11
cmp r10, 8
jl 0x4b9887
jmp 0x4b9859
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.0045e2e0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.004b9560

Function at 0x4b9e40
Capabilities:
Hash data using fnv

Disassembly:
test byte [rax], al
mov rcx, rbx
and ebx, 0x7f
shl rbx, 5
lea rdx, [rax + rbx]
xor eax, eax
jmp 0x4b9e57
inc rax
cmp rax, 4
jge 0x4b9e6f
lea rbx, [rdx + rax*8]
mov rbx, qword [rbx]
cmp rbx, rcx
jne 0x4b9e54
mov eax, 1
ret
xor eax, eax
movabs rbx, 0xcbf29ce484222325
jmp 0x4b9e80
inc rax
cmp rax, 4
jge 0x4b9e8e
mov rsi, qword [rdx + rax*8]
xor edi, edi
jmp 0x4b9eb7
and ebx, 3
lea rdx, [rdx + rbx*8]
xchg qword [rdx], rcx
xor eax, eax
ret
movzx r8d, sil
xor rbx, r8
inc rdi
shr rsi, 8
movabs r8, 0x100000001b3
imul rbx, r8
cmp rdi, 8
jl 0x4b9e9b
jmp 0x4b9e7d

Function at 0x4c7c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7d4c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa4efde20afc8b975
mov qword [rsp + 0x33], rdx
movabs rdx, 0x9998b2bec1a4efde
mov qword [rsp + 0x38], rdx
movabs rdx, 0x94834da7a867b973
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb11010902101105
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x30a0c1207100603
mov qword [rsp + 0x23], rdx
movabs rdx, 0x8140713140e0813
mov qword [rsp + 0x2b], rdx
xor eax, eax
jmp 0x4c7cea
movzx r9d, byte [rsp + rsi + 0x33]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x33], dl
mov byte [rsp + rsi + 0x33], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c7d1c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c7d3f
movzx r8d, byte [rsp + rdi + 0x33]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0x15
jb 0x4c7cd0
jmp 0x4c7d33
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0045af60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004605c0
mov eax, edi
mov ecx, 0x15
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004c7c60
Function at 0x4c8940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8a3d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x824fd1d42e714c31
mov qword [rsp + 0x39], rdx
movabs rdx, 0x313133aec32e7082
mov qword [rsp + 0x40], rdx
movabs rdx, 0x727aeca761da3107
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60805121412160f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2160b010b010802
mov qword [rsp + 0x21], rdx
movabs rdx, 0x10504120a020713
mov qword [rsp + 0x29], rdx
movabs rdx, 0x205071615120511
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4c89e0
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x2b]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x2b]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4c8a0d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c8a30
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4c89bf
jmp 0x4c8a24
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.0045af60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004605c0
mov eax, edi
mov ecx, 0x17
call fcn.004605c0
nop
nop dword [rax]
call fcn.0045e2e0
jmp fcn.004c8940

Function at 0x4ca240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca31d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xd869e1728612a815
mov qword [rsp + 0x31], rdx
movabs rdx, 0x3624f531309f65d8
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1020902030705
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc0a0a0200010209
mov qword [rsp + 0x21], rdx
movabs rdx, 0xb0d0e07050a000d
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4ca2c0
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 + 0x56]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 + 0x56]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4ca2ed
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4ca310
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x4ca2a2
jmp 0x4ca304
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.0045af60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004605c0
mov eax, edi
mov ecx, 0xf
call fcn.004605c0
nop
nop dword [rax]
call fcn.0045e2e0
jmp fcn.004ca240
Function at 0x4ca340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca478
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x76a775839b9ba861
mov qword [rsp + 0x48], rdx
movabs rdx, 0x96bea0b89d9465b3
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6f70706f732099aa
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2079623b246574fc
mov qword [rsp + 0x60], rdx
movabs rdx, 0x7c863388746f979d
mov qword [rsp + 0x68], rdx
movabs rdx, 0x180e1b0b181b1006
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd080c0e0218240f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10270a240d080c0e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x524072520040311
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1040e1c21262426
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9240b141004211c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ca415
movzx r9d, byte [rsp + rsi + 0x48]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4d]
mov byte [rsp + rdi + 0x48], dl
mov byte [rsp + rsi + 0x48], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4ca448
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x4ca46b
movzx r8d, byte [rsp + rdi + 0x48]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4d]
nop
cmp rsi, 0x28
jb 0x4ca3fb
jmp 0x4ca45f
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x28
call fcn.0045af60
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x28
call fcn.004605c0
mov eax, edi
mov ecx, 0x28
call fcn.004605c0
nop
call fcn.0045e2e0
nop dword [rax]
jmp fcn.004ca340

Function at 0x4ca920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4caa1b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x653c40ff3364f53d
mov qword [rsp + 0x35], rdx
movabs rdx, 0x42290a653c40ff33
mov qword [rsp + 0x38], rdx
movabs rdx, 0x72242b414d2d4373
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1000d03050c010f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe0a110a080f0c09
mov qword [rsp + 0x23], rdx
movabs rdx, 0xd050e0a110a080f
mov qword [rsp + 0x25], rdx
movabs rdx, 0x106100c0304010f
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4ca9b9
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4ca9eb
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4caa0e
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
cmp rsi, 0x13
jb 0x4ca99f
jmp 0x4caa02
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.0045af60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004605c0
mov eax, edi
mov ecx, 0x13
call fcn.004605c0
nop
nop dword [rax + rax]
call fcn.0045e2e0
jmp fcn.004ca920
Function at 0x4caa40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cab5a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x1744434fb7814066
mov qword [rsp + 0x44], rdx
movabs rdx, 0x527263e29b3a7263
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x62d6cdf9527263e2
mov qword [rsp + 0x50], rdx
movabs rdx, 0x654cda5073c5e3f2
mov qword [rsp + 0x58], rdx
movabs rdx, 0x14150b15110d030b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x50c1901070f1018
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf040403111a120a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7110d101419140d
mov qword [rsp + 0x34], rdx
movabs rdx, 0xc03120219160603
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x4caaf7
movzx r9d, byte [rsp + rsi + 0x44]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x44], dl
mov byte [rsp + rsi + 0x44], r8b
add rax, 2
cmp rax, 0x28
jge 0x4cab29
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4cab4d
movzx r8d, byte [rsp + rdi + 0x44]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
cmp rsi, 0x1c
jb 0x4caadd
jmp 0x4cab41
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x1c
call fcn.0045af60
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.004605c0
mov eax, edi
mov ecx, 0x1c
call fcn.004605c0
nop
call fcn.0045e2e0
nop
jmp fcn.004caa40

Function at 0x4cade0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4caefd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xc4c8676c84126e5c
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xbfa6038211d2215b
mov qword [rsp + 0x46], rdx
movabs rdx, 0x65dfbfa6038211d2
mov qword [rsp + 0x48], rdx
movabs rdx, 0x726f74ccd0726373
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb000208080d0e00
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5070b000b000208
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80e10000d0f090c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3160f00150c0309
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa08060505070809
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4caea0
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 - 0x3c]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 - 0x3c]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4caecd
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4caef0
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4cae7d
jmp 0x4caee4
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.0045af60
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004605c0
mov eax, edi
mov ecx, 0x1a
call fcn.004605c0
nop
nop dword [rax]
call fcn.0045e2e0
jmp fcn.004cade0
Function at 0x4caf20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cb01b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb5c46991918f26ea
mov qword [rsp + 0x34], rdx
movabs rdx, 0x91717656b5c46991
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0beb712f47473ca
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf06070006100107
mov qword [rsp + 0x18], rdx
movabs rdx, 0x611031012040807
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2130f0c06110310
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0f0604110906
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4cafb9
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4d]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4cafeb
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4cb00e
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4d]
cmp rsi, 0x14
jb 0x4caf9f
jmp 0x4cb002
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0045af60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004605c0
mov eax, edi
mov ecx, 0x14
call fcn.004605c0
nop
nop dword [rax + rax]
call fcn.0045e2e0
jmp fcn.004caf20

Function at 0x4cb160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cb24c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xaf1465eca2f36564
mov qword [rsp + 0x31], rdx
movabs rdx, 0x97eae260b9a572af
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9773e062205deac0
mov qword [rsp + 0x40], rdx
movabs rdx, 0x110f0c0f100e1106
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4160a0e0d070402
mov qword [rsp + 0x21], rdx
movabs rdx, 0x203070f090b1403
mov qword [rsp + 0x29], rdx
xor eax, eax
jmp 0x4cb1ea
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
cmp rax, 0x18
jge 0x4cb21c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4cb23f
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
cmp rsi, 0x17
jb 0x4cb1d0
jmp 0x4cb233
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.0045af60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004605c0
mov eax, edi
mov ecx, 0x17
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004cb160
Function at 0x4cedc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4cef32
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0xaf6efbc8d07981d
mov qword [rsp + 0x57], rdx
movabs rdx, 0xee0af6efbc8d0798
mov qword [rsp + 0x58], rdx
movabs rdx, 0x706de998007e20ee
mov qword [rsp + 0x60], rdx
movabs rdx, 0x6c757420f874c25e
mov qword [rsp + 0x68], rdx
movabs rdx, 0x6fc9657b796269fe
mov qword [rsp + 0x70], rdx
movabs rdx, 0x63635df24d772013
mov qword [rsp + 0x78], rdx
movabs rdx, 0x61657d6361fbc652
mov qword [rsp + 0x80], rdx
movabs rdx, 0x242b002b00032101
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x110d300e1d270c04
mov qword [rsp + 0x27], rdx
movabs rdx, 0x50c0e2619040d07
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x2250814020b2101
mov qword [rsp + 0x37], rdx
movabs rdx, 0x1611061d21092424
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x2e27211f29242a12
mov qword [rsp + 0x47], rdx
movabs rdx, 0x110e2b27110c2419
mov qword [rsp + 0x4f], rdx
xor eax, eax
jmp 0x4ceecd
movzx r9d, byte [rsp + rsi + 0x57]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x57], dl
mov byte [rsp + rsi + 0x57], r8b
add rax, 2
cmp rax, 0x38
jge 0x4ceeff
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x4cef25
movzx r8d, byte [rsp + rdi + 0x57]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
cmp rsi, 0x31
jb 0x4ceeb3
jmp 0x4cef19
xor eax, eax
lea rbx, [rsp + 0x57]
mov ecx, 0x31
call fcn.0045af60
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x31
call fcn.004605c0
mov eax, edi
mov ecx, 0x31
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004cedc0

Function at 0x4cfb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cfc6a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x68392f747544f960
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x705168392f747544
mov qword [rsp + 0x30], rdx
movabs rdx, 0x726f55545c405365
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10e06060b0f0c02
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x708020d010e0606
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20a060001070e0c
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4cfc0d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x25]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x25]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x14
jge 0x4cfc3a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4cfc5d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4cfbf0
jmp 0x4cfc51
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0045af60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004605c0
mov eax, edi
mov ecx, 0x12
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004cfb80
Function at 0x4d0bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d0cac
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb23a6e509c508d69
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x74917f65b23a6e50
mov qword [rsp + 0x30], rdx
movabs rdx, 0x65d3699aa0719784
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc030d0704021001
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9120a0e0c030d07
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x60a0d090f0a0909
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4d0c4a
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x38]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x14
jge 0x4d0c7c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4d0c9f
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x38]
cmp rsi, 0x14
jb 0x4d0c30
jmp 0x4d0c93
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0x14
call fcn.0045af60
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004605c0
mov eax, edi
mov ecx, 0x14
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004d0bc0

Function at 0x4d3ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3ddb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x54759120878fd2b4
mov qword [rsp + 0x38], rdx
movabs rdx, 0x209f9e72b187c9ae
mov qword [rsp + 0x40], rdx
movabs rdx, 0x65677361724c66b3
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb12000812070809
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x802010210030e0d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7120a0308020102
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9070c150a080705
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d3d79
movzx r9d, byte [rsp + rsi + 0x38]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x38], dl
mov byte [rsp + rsi + 0x38], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4d3dab
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d3dce
movzx r8d, byte [rsp + rdi + 0x38]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x18
jb 0x4d3d5f
jmp 0x4d3dc2
xor eax, eax
lea rbx, [rsp + 0x38]
mov ecx, 0x18
call fcn.0045af60
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.004605c0
mov eax, edi
mov ecx, 0x18
call fcn.004605c0
nop
nop dword [rax + rax]
call fcn.0045e2e0
jmp fcn.004d3ce0
Function at 0x4d6b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d6bb8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x65d7c8cdaa5f6fd9
mov qword [rsp + 0x28], rdx
movabs rdx, 0x604000502050305
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 2
xor eax, eax
jmp 0x4d6b58
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x61]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x61]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x4d6b88
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4d6bab
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4d6b3b
jmp 0x4d6b9f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0045af60
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.004605c0
mov eax, edi
mov ecx, 8
call fcn.004605c0
nop
call fcn.0045e2e0
nop dword [rax]
jmp fcn.004d6b00

Function at 0x4d9a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9b6a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf5164e6f744a1046
mov qword [rsp + 0x32], rdx
movabs rdx, 0x613e3c426e1bf516
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2e4d343556fc6109
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0e08100801060b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1500070c02140c0e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x110113120a050b00
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4d9b0d
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 0x40]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 0x40]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x4d9b3a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d9b5d
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x4d9af0
jmp 0x4d9b51
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.0045af60
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004605c0
mov eax, edi
mov ecx, 0x16
call fcn.004605c0
nop
call fcn.0045e2e0
jmp fcn.004d9a80