joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c4540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c462c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x41e9e83c7233efef
mov qword [rsp + 0x36], rdx
movabs rdx, 0x37e241e9e83c7233
mov qword [rsp + 0x38], rdx
movabs rdx, 0x29b36c2921b12d28
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc02051006110700
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x20a0e0b05090104
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80911100a070d04
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4c45ca
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c45fc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c461f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0x12
jb 0x4c45b0
jmp 0x4c4613
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456860
mov eax, edi
mov ecx, 0x12
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004c4540

Function at 0x4c4640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c4748
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2081206efede1663
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x6f9cae73e76df26e
mov qword [rsp + 0x45], rdx
movabs rdx, 0xfe74756f9cae73e7
mov qword [rsp + 0x48], rdx
movabs rdx, 0x7767f0be720566de
mov qword [rsp + 0x50], rdx
movabs rdx, 0x51a0e0c01181206
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb0c171309060618
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1a18031203130502
mov qword [rsp + 0x2d], rdx
movabs rdx, 0xe0d18150518150b
mov qword [rsp + 0x35], rdx
xor eax, eax
jmp 0x4c46eb
movzx r9d, byte [rsp + rsi + 0x3d]
sub r9d, edx
lea edx, [r9 - 0x6d]
mov byte [rsp + rdi + 0x3d], dl
lea edx, [r8 - 0x6d]
mov byte [rsp + rsi + 0x3d], dl
add rax, 2
cmp rax, 0x20
jge 0x4c4718
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4c473b
movzx r8d, byte [rsp + rdi + 0x3d]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4c46ce
jmp 0x4c472f
xor eax, eax
lea rbx, [rsp + 0x3d]
mov ecx, 0x1b
call fcn.00444ae0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00456860
mov eax, edi
mov ecx, 0x1b
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004c4640
Function at 0x4c48a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c498a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6c676361646e6363
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6e6d6c676361646e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2f65636460637573
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80f0d03040f0e0c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x401110a080f0d03
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb0f04070307060c
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4c492d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x14]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x14]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x14
jge 0x4c495a
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c497d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4c4910
jmp 0x4c4971
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00444ae0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456860
mov eax, edi
mov ecx, 0x12
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004c48a0

Function at 0x4c5f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c603e
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x72ef4c615f38554e
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x29735172
movabs rdx, 0x80105000a030602
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x2060203
xor eax, eax
jmp 0x4c5fe1
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 + 0x1f]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4c600e
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c6031
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4c5fc4
jmp 0x4c6025
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456860
mov eax, edi
mov ecx, 0xb
call fcn.00456860
nop
nop
call fcn.00454580
jmp fcn.004c5f80
Function at 0x4c79e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7add
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6d90e69f7570e1ce
mov qword [rsp + 0x36], rdx
movabs rdx, 0xab266d90e69f7570
mov qword [rsp + 0x38], rdx
movabs rdx, 0x726fe4dfb2353b37
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa08000b00040c09
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa050a000a0d0007
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8010a050a000a0d
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0f09000e060c06
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4c7a80
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 - 0x54]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4c7aad
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c7ad0
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x4c7a5f
jmp 0x4c7ac4
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456860
mov eax, edi
mov ecx, 0x12
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.004c79e0

Function at 0x4c7b00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7c47
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x2389f0a6f5615574
mov qword [rsp + 0x51], rdx
movabs rdx, 0x9789f7f9f2937423
mov qword [rsp + 0x58], rdx
movabs rdx, 0x61d22f37f60b26f2
mov qword [rsp + 0x60], rdx
movabs rdx, 0x6320d564f62ce4f4
mov qword [rsp + 0x68], rdx
movabs rdx, 0xf411fa9365ea6ef4
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2401011915102304
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd09240101191510
mov qword [rsp + 0x21], rdx
movabs rdx, 0x180a0b151524140b
mov qword [rsp + 0x29], rdx
movabs rdx, 0xb250e1a13051207
mov qword [rsp + 0x31], rdx
movabs rdx, 0x1f17181f05121c24
mov qword [rsp + 0x39], rdx
movabs rdx, 0x423192306032621
mov qword [rsp + 0x41], rdx
movabs rdx, 0x240d0c0f1a031105
mov qword [rsp + 0x49], rdx
xor eax, eax
jmp 0x4c7be7
movzx r9d, byte [rsp + rsi + 0x51]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x51], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x51], dl
add rax, 2
cmp rax, 0x32
jge 0x4c7c17
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x27
jae 0x4c7c3a
movzx r8d, byte [rsp + rdi + 0x51]
sub r8d, edx
cmp rsi, 0x27
jb 0x4c7bca
jmp 0x4c7c2e
xor eax, eax
lea rbx, [rsp + 0x51]
mov ecx, 0x27
call fcn.00444ae0
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x27
call fcn.00456860
mov eax, edi
mov ecx, 0x27
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004c7b00
Function at 0x4c9020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c910c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x263bd4082a476532
mov qword [rsp + 0x34], rdx
movabs rdx, 0x6e5e5335263bd408
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2f31216f76bb5120
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11040d0a07031205
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1207050009020609
mov qword [rsp + 0x24], rdx
movabs rdx, 0x130311080504130e
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4c90aa
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c90dc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c90ff
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 9]
cmp rsi, 0x14
jb 0x4c9090
jmp 0x4c90f3
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444ae0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456860
mov eax, edi
mov ecx, 0x14
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004c9020

Function at 0x4cb8a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4cb9fd
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x16cc2f162b041761
mov qword [rsp + 0x51], rdx
movabs rdx, 0x693f3a6f743aca6e
mov qword [rsp + 0x59], rdx
movabs rdx, 0x74e92c69786b9869
mov qword [rsp + 0x60], rdx
movabs rdx, 0x203f6e4154206f3b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x4cbdaad70defd673
mov qword [rsp + 0x70], rdx
movabs rdx, 0xe75969782372b722
mov qword [rsp + 0x78], rdx
movabs rdx, 0x50e24062b071210
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x230903282d06050e
mov qword [rsp + 0x21], rdx
movabs rdx, 0x2304012720282a05
mov qword [rsp + 0x29], rdx
movabs rdx, 0x72522151024020e
mov qword [rsp + 0x31], rdx
movabs rdx, 0x28171d2621140607
mov qword [rsp + 0x39], rdx
movabs rdx, 0x2071409241b0322
mov qword [rsp + 0x41], rdx
movabs rdx, 0x221a0a202a152e0d
mov qword [rsp + 0x49], rdx
xor eax, eax
jmp 0x4cb9a0
movzx r9d, byte [rsp + rsi + 0x51]
sub r9d, edx
lea edx, [r9 - 0x76]
mov byte [rsp + rdi + 0x51], dl
lea edx, [r8 - 0x76]
mov byte [rsp + rsi + 0x51], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0x36
jge 0x4cb9cd
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x4cb9f0
movzx r8d, byte [rsp + rdi + 0x51]
sub r8d, edx
cmp rsi, 0x2f
jb 0x4cb97e
jmp 0x4cb9e4
xor eax, eax
lea rbx, [rsp + 0x51]
mov ecx, 0x2f
call fcn.00444ae0
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2f
call fcn.00456860
mov eax, edi
mov ecx, 0x2f
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.004cb8a0
Function at 0x4cc6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc7cc
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xda6db301dfd6db77
mov qword [rsp + 0x2f], rdx
movabs rdx, 0xc6da6db301dfd6db
mov qword [rsp + 0x30], rdx
movabs rdx, 0x657079563cd28d23
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0c050c070b0c04
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa0c0d0c050c070b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x80409040103020d
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4cc76a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7b]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x4cc79c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4cc7bf
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7b]
cmp rsi, 0x11
jb 0x4cc750
jmp 0x4cc7b3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00444ae0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456860
mov eax, edi
mov ecx, 0x11
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004cc6e0

Function at 0x4ceec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cefdd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2604495312204234
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x4641c524632637fb
mov qword [rsp + 0x46], rdx
movabs rdx, 0x541d4641c5246326
mov qword [rsp + 0x48], rdx
movabs rdx, 0x65524f615f1c0b76
mov qword [rsp + 0x50], rdx
movabs rdx, 0x110c11010d1709
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x141400110c11010d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x80f0608150a0f01
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1707131510130811
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x31018140f0e0f17
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4cef80
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4cefad
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4cefd0
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4cef5d
jmp 0x4cefc4
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00444ae0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456860
mov eax, edi
mov ecx, 0x1a
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.004ceec0
Function at 0x4cf100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cf1dd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x59687a5873e56faa
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf463697694e15968
mov qword [rsp + 0x38], rdx
movabs rdx, 0x905040808070409
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x707040009050408
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7090409000d0802
mov qword [rsp + 0x2a], rdx
xor eax, eax
nop
jmp 0x4cf180
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 - 0x6b]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 - 0x6b]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4cf1ad
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4cf1d0
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0xe
jb 0x4cf162
jmp 0x4cf1c4
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0xe
call fcn.00444ae0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00456860
mov eax, edi
mov ecx, 0xe
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.004cf100

Function at 0x4cff40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d003b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x616a7b76776c7047
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x6663637d8368616a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5f5e7e8b506d2062
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9051312110a0013
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe140a1101111100
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1511000803040612
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc150014020d1114
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4cffd9
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x21]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4d000b
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d002e
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x21]
cmp rsi, 0x16
jb 0x4cffbf
jmp 0x4d0022
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444ae0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456860
mov eax, edi
mov ecx, 0x16
call fcn.00456860
nop
nop dword [rax + rax]
call fcn.00454580
jmp fcn.004cff40
Function at 0x4d0720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d081b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5ccc63d11f6f72bf
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x61ab74fb6e035ccc
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6e6cb7616c2069b2
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa10070410151313
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf00060c0c100e00
mov qword [rsp + 0x24], rdx
movabs rdx, 0x60a101300030f00
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80710070704030e
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4d07b9
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4d07eb
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d080e
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0x16
jb 0x4d079f
jmp 0x4d0802
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x16
call fcn.00444ae0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00456860
mov eax, edi
mov ecx, 0x16
call fcn.00456860
nop
nop dword [rax + rax]
call fcn.00454580
jmp fcn.004d0720

Function at 0x4d6da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4d6efd
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0xee20cf7d7e6eee35
mov qword [rsp + 0x53], rdx
movabs rdx, 0x651a96f5f0e2101f
mov qword [rsp + 0x5b], rdx
movabs rdx, 0xfe0c9e20c7651a96
mov qword [rsp + 0x60], rdx
movabs rdx, 0x652074d6f97010ed
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe6746e254fe6850f
mov qword [rsp + 0x70], rdx
movabs rdx, 0x15fc6eb64c910673
mov qword [rsp + 0x78], rdx
movabs rdx, 0x26120a0005072007
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x30d0a0019082612
mov qword [rsp + 0x23], rdx
movabs rdx, 0xb1d2b1e2c162b03
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xb291f0c0b282427
mov qword [rsp + 0x33], rdx
movabs rdx, 0xa26010410292a2b
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x1309210e282b151e
mov qword [rsp + 0x43], rdx
movabs rdx, 0x290d18180114190d
mov qword [rsp + 0x4b], rdx
xor eax, eax
jmp 0x4d6ea0
movzx r9d, byte [rsp + rsi + 0x53]
sub r9d, edx
lea edx, [r9 - 0x58]
mov byte [rsp + rdi + 0x53], dl
lea edx, [r8 - 0x58]
mov byte [rsp + rsi + 0x53], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0x36
jge 0x4d6ecd
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4d6ef0
movzx r8d, byte [rsp + rdi + 0x53]
sub r8d, edx
cmp rsi, 0x2d
jb 0x4d6e7e
jmp 0x4d6ee4
xor eax, eax
lea rbx, [rsp + 0x53]
mov ecx, 0x2d
call fcn.00444ae0
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00456860
mov eax, edi
mov ecx, 0x2d
call fcn.00456860
nop
nop dword [rax]
call fcn.00454580
jmp fcn.004d6da0
Function at 0x4d8380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d844c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xecf36fe6736d2674
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xf3ec7284e1ecf36f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60407010903080b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x90c030705070604
mov qword [rsp + 0x23], rdx
xor eax, eax
jmp 0x4d83ef
movzx r9d, byte [rsp + rsi + 0x2b]
sub r9d, edx
lea edx, [r9 - 0x79]
mov byte [rsp + rdi + 0x2b], dl
lea edx, [r8 - 0x79]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0xe
jge 0x4d841c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4d843f
movzx r8d, byte [rsp + rdi + 0x2b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4d83d2
jmp 0x4d8433
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.00444ae0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00456860
mov eax, edi
mov ecx, 0xd
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004d8380

Function at 0x4d8e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d8f6c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x729374ef6854b2d8
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa1a665b4a3b8e65e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x676e6974d2fdbac5
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1112110301140a0d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa12111211030114
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1300100a12000401
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe0c0a120111040f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60b080009080f02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4d8f08
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5b]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x22
jge 0x4d8f3c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4d8f5f
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5b]
cmp rsi, 0x18
jb 0x4d8eee
jmp 0x4d8f53
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.00444ae0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456860
mov eax, edi
mov ecx, 0x18
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004d8e60
Function at 0x4da720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da7e6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x98c33c302fdc913
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x6c9c0309
movabs rdx, 0x801020006010309
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x3030407
xor eax, eax
jmp 0x4da780
movzx r9d, byte [rsp + rsi + 0x25]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x60]
mov byte [rsp + rdi + 0x25], dl
mov byte [rsp + rsi + 0x25], r8b
add rax, 2
nop
cmp rax, 0xc
jge 0x4da7b2
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4da7d7
movzx r8d, byte [rsp + rdi + 0x25]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x60]
cmp rsi, 0xb
jb 0x4da764
jmp 0x4da7cb
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
nop
call fcn.00444ae0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456860
mov eax, edi
mov ecx, 0xb
nop
call fcn.00456860
nop
call fcn.00454580
jmp fcn.004da720

Function at 0x4da800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4da8d8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x69e3dee6ea50709b
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x4adc4bca
movabs rdx, 0x9020403060a0a08
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x50209020403060a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x800080b08080906
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4da874
movzx r9d, byte [rsp + rsi + 0x2c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x2c], dl
mov byte [rsp + rsi + 0x2c], r8b
add rax, 2
cmp rax, 0x12
jge 0x4da8a8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4da8cb
movzx r8d, byte [rsp + rdi + 0x2c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
nop
cmp rsi, 0xc
jb 0x4da85a
jmp 0x4da8bf
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444ae0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456860
mov eax, edi
mov ecx, 0xc
call fcn.00456860
nop
call fcn.00454580
nop dword [rax]
jmp fcn.004da800