joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c0d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0e26
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x2eb7a7d76cc26514
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc39f2e65752487b6
mov qword [rsp + 0x23], rdx
movabs rdx, 0x2ac39f2e65752487
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc5611ab09d4de84d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1214060813060e04
mov qword [rsp + 0x34], rdx
movabs rdx, 0x140e140512140608
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe1508170610170e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1815161509101000
mov qword [rsp + 0x48], rdx
movabs rdx, 0x60f02060a0610
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c0dc0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x30]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x30]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x24
jge 0x4c0ded
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4c0e14
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4c0da3
jmp 0x4c0e08
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004c0d00

Function at 0x4c0e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0f66
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xe2f7ef926c66f272
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x9caee26575146156
mov qword [rsp + 0x25], rdx
movabs rdx, 0x749caee265751461
mov qword [rsp + 0x26], rdx
movabs rdx, 0x478306e9aa3ef4d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe180a1304160f14
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4040e180a130416
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6060e0607140712
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12170d1704121305
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe13050501131414
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c0f00
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x22
jge 0x4c0f2d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4c0f54
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x4c0ee3
jmp 0x4c0f48
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044ba20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461e80
mov eax, edi
mov ecx, 0x19
nop dword [rax + rax]
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004c0e40
Function at 0x4c0f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4c10f2
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0xf54c76e8d8866572
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe721bf63558702e5
mov qword [rsp + 0x26], rdx
movabs rdx, 0x69676e65e721bf63
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xedee2074596f4fa1
mov qword [rsp + 0x32], rdx
movabs rdx, 0xbae56567c3c24420
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x6e654c89d658912c
mov qword [rsp + 0x42], rdx
movabs rdx, 0x2804260d24231513
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x260b1e1d0f252804
mov qword [rsp + 0x50], rdx
movabs rdx, 0x4281f1f26051708
mov qword [rsp + 0x58], rdx
movabs rdx, 0x306261b27252302
mov qword [rsp + 0x60], rdx
movabs rdx, 0x222808140e0a0b0f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x92327130a25071a
mov qword [rsp + 0x70], rdx
movabs rdx, 0x30b041e0d0a0b07
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4c108a
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x43]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x43]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x36
jge 0x4c10b7
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x4c10e5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x2c
jb 0x4c106d
jmp 0x4c10d8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x2c
call fcn.0044ba20
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2c
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0x2c
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004c0f80
Function at 0x4c3580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x40]
cmp r12, qword [r14 + 0x10]
jbe 0x4c3772
sub rsp, 0xc0
mov qword [rsp + 0xb8], rbp
lea rbp, [rsp + 0xb8]
movabs rdx, 0x2e6665f41e34231d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xfe466347fc8e65e2
mov qword [rsp + 0x25], rdx
movabs rdx, 0x10202865acfe4663
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xbcf3d203e61136e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x688c05726f7421d4
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa5730ee20e207461
mov qword [rsp + 0x42], rdx
movabs rdx, 0x6d6d0668c774ce6e
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x318e8739201f3f26
mov qword [rsp + 0x52], rdx
movabs rdx, 0x93dd20652c8f0163
mov qword [rsp + 0x5a], rdx
movabs rdx, 0xc25f961364c0aea
mov qword [rsp + 0x62], rdx
movabs rdx, 0xa2a4c4502431008
mov qword [rsp + 0x6a], rdx
movabs rdx, 0x333e42013a4a4812
mov qword [rsp + 0x72], rdx
movabs rdx, 0x1b30032e1c0b333e
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1d351e3a14292246
mov qword [rsp + 0x80], rdx
movabs rdx, 0x104637294c343902
mov qword [rsp + 0x88], rdx
movabs rdx, 0x2a161b142c223b43
mov qword [rsp + 0x90], rdx
movabs rdx, 0x3040f0028082c4b
mov qword [rsp + 0x98], rdx
movabs rdx, 0x6404336320c223e
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x3f454a373e1a0618
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x100e104744232a3c
mov qword [rsp + 0xb0], rdx
xor eax, eax
jmp 0x4c3708
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x70]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x70]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x4e
jge 0x4c3737
movzx edx, byte [rsp + rax + 0x6a]
movzx esi, byte [rsp + rax + 0x6b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x4d
jae 0x4c3765
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x4d
jb 0x4c36eb
jmp 0x4c3758
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x4d
call fcn.0044ba20
mov rbp, qword [rsp + 0xb8]
add rsp, 0xc0
ret
mov eax, esi
mov ecx, 0x4d
nop
call fcn.00461e80
mov eax, edi
mov ecx, 0x4d
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004c3580
Function at 0x4c5200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4c5375
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x7a93b374749539f0
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa7a9b060ae558a54
mov qword [rsp + 0x24], rdx
movabs rdx, 0x78b0209fc3ee1065
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0eefdeedd25a1ba
mov qword [rsp + 0x34], rdx
movabs rdx, 0xca77196172659aca
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1a1e1d1c1e180109
mov qword [rsp + 0x44], rdx
movabs rdx, 0x251206121b120719
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x207062025120612
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa0b1e2008211912
mov qword [rsp + 0x58], rdx
movabs rdx, 0x25210b0a1f031f00
mov qword [rsp + 0x60], rdx
movabs rdx, 0x13020d1a110d0726
mov qword [rsp + 0x68], rdx
movabs rdx, 0xe16120c01252614
mov qword [rsp + 0x70], rdx
movabs rdx, 0xf140b0a25270509
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4c5307
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x72
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x3c
jge 0x4c533b
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x28
jae 0x4c5368
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x72
add r8d, edx
cmp rsi, 0x28
jb 0x4c52ed
jmp 0x4c535c
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x28
call fcn.0044ba20
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x28
call fcn.00461e80
mov eax, edi
mov ecx, 0x28
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004c5200
Function at 0x4c6ac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6bb6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x86ce633b6cf8b1ff
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x5686ce633b6cf8b1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x74f07ce865146c61
mov qword [rsp + 0x26], rdx
movabs rdx, 0x4000e070b000f02
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0104000e070b00
mov qword [rsp + 0x30], rdx
movabs rdx, 0x700040406040e06
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c6b50
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0x69
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x4c6b82
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c6ba9
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0x69
add r8d, edx
cmp rsi, 0x11
jb 0x4c6b36
nop
jmp 0x4c6b9d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461e80
mov eax, edi
mov ecx, 0x11
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.004c6ac0
Function at 0x4c7c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7d76
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x8f740705fa060472
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6d0a28f740705fa
mov qword [rsp + 0x22], rdx
movabs rdx, 0x716caa69465393f7
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1205100d020b030c
mov qword [rsp + 0x32], rdx
movabs rdx, 0x403080710011205
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8080d05010a0907
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c7d13
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x7a]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x7a]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4c7d42
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c7d69
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4c7cf6
nop
jmp 0x4c7d5d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461e80
mov eax, edi
mov ecx, 0x13
call fcn.00461e80
nop
call fcn.0045f820
nop dword [rax + rax]
jmp fcn.004c7c80
Function at 0x4c90e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c91e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x7de5f065e9666524
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xe9fbfe7bec7de5f0
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb1dd98e3ff6f432e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb09101200101308
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1105140706121207
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x312140011051407
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14100a0b030c120b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c9180
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0x5e
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4c91b1
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c91db
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0x5e
add r8d, edx
cmp rsi, 0x15
jb 0x4c9165
jmp 0x4c91cf
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461e80
mov eax, edi
mov ecx, 0x15
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004c90e0
Function at 0x4c9fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4ca167
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0xc974df656c660ae9
mov qword [rsp + 0x19], rdx
movabs rdx, 0x79f4b1acda9fc394
mov qword [rsp + 0x21], rdx
movabs rdx, 0x2066f78073c27479
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7604996464617775
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6bc0008158bab0be
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb7932f05a22089a0
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1e0b262e1e0e0e05
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1322091320281100
mov qword [rsp + 0x50], rdx
movabs rdx, 0x262d0b282b2b0814
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1c0a0d2e2a201808
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2b1e23202705012b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1d072d2c0c27240e
mov qword [rsp + 0x70], rdx
movabs rdx, 0x72827112d1f2500
mov qword [rsp + 0x78], rdx
movabs rdx, 0x181f01211d0e0e11
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x4ca100
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x40
jge 0x4ca12d
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2f
jae 0x4ca15a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x2f
jb 0x4ca0df
jmp 0x4ca14e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2f
call fcn.0044ba20
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x2f
call fcn.00461e80
mov eax, edi
mov ecx, 0x2f
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004c9fe0
Function at 0x4cac00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cacc8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x3a415222c366f73b
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x32
movabs rdx, 0x303030404010506
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1000804
xor eax, eax
jmp 0x4cac61
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x1f
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x4cac92
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4cacbb
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x1f
add r8d, edx
cmp rsi, 9
jb 0x4cac47
jmp 0x4cacaf
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004cac00
Function at 0x4cc480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc568
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xfb116d652dbd6857
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x670c69bdbdfec3b2
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa060b06000b0e09
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc070a060b06000b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc06020801090b0b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4cc501
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 0xffffffa4
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x12
jge 0x4cc532
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4cc55b
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 0xffffffa4
add r8d, edx
cmp rsi, 0x10
jb 0x4cc4e7
jmp 0x4cc54f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044ba20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461e80
mov eax, edi
mov ecx, 0x10
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004cc480

Function at 0x4cc580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cc65c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf1545e6648616543
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x74483df1545e6648
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5080803000706
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x406090403080005
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cc5f5
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x1f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x1f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4cc628
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4cc64f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x4cc5d8
jmp 0x4cc643
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.0044ba20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461e80
mov eax, edi
mov ecx, 0xb
call fcn.00461e80
nop
nop dword [rax]
call fcn.0045f820
jmp fcn.004cc580
Function at 0x4cdc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cddb2
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x153a2a65616e5a62
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x3873746e696f8871
mov qword [rsp + 0x23], rdx
movabs rdx, 0x783873746e696f88
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3e84496f2760724e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4b676f7634786609
mov qword [rsp + 0x34], rdx
movabs rdx, 0x44656765744d7f20
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe14171f101d1805
mov qword [rsp + 0x44], rdx
movabs rdx, 0x9130124051b090f
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x1116222809130124
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1e1e20170108100a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x22110719131a1623
mov qword [rsp + 0x60], rdx
movabs rdx, 0x23241b1b0a041d19
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4cdd4a
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffd9
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4cdd7b
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x4cdda5
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffd9
add r8d, edx
cmp rsi, 0x29
jb 0x4cdd30
jmp 0x4cdd96
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x29
call fcn.0044ba20
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x29
nop dword [rax]
call fcn.00461e80
mov eax, edi
mov ecx, 0x29
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004cdc60
Function at 0x4d62e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d63e8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x72bc61adf46c0ea8
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6461a872bc61adf4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xfd4ab09b963195f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x12060e0e00030010
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc110110080b0f01
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe1003100c110110
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12030e0b08080804
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4d6382
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x77]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1c
jge 0x4d63af
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4d63db
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4d6365
jmp 0x4d63cf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
nop dword [rax + rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00461e80
mov eax, edi
mov ecx, 0x13
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004d62e0

Function at 0x4d9380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9448
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xf4e072f220eee3f0
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xe5
movabs rdx, 0x202060001020408
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x702
xor eax, eax
jmp 0x4d93e3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x74]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x74]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xa
jge 0x4d9410
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d943b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4d93c6
jmp 0x4d942f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop dword [rax]
call fcn.0044ba20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00461e80
mov eax, edi
mov ecx, 9
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004d9380
Function at 0x4dad20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x40], 0
movabs rdx, 0xdc0674cb4541e08c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x101010404020302
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x700
xor eax, eax
nop
jmp 0x4dad80
movzx r8d, byte [rsp + rbx + 0x1e]
add r8d, 0xffffffa3
add edx, r8d
mov byte [rsp + rsi + 0x1e], dl
mov byte [rsp + rbx + 0x1e], dil
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4dadae
movzx edx, byte [rsp + rax + 0x26]
movzx ebx, byte [rsp + rax + 0x27]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 8
jae 0x4daded
movzx edi, byte [rsp + rsi + 0x1e]
add edi, 0xffffffa3
add edi, edx
cmp rbx, 8
jb 0x4dad62
jmp 0x4dade1
mov qword [rsp + 0x16], 0
xor eax, eax
jmp 0x4dadc7
movzx ecx, byte [rsp + rax + 0x1e]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 8
jl 0x4dadbb
mov rax, qword [rsp + 0x16]
mov qword [rsp + 0x40], rax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, ebx
mov ecx, 8
call fcn.00461e80
mov eax, esi
mov ecx, 8
call fcn.00461e80
nop
int3

Function at 0x4dba40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4dbbb5
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x268543a4727c8186
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8891856c5f766d64
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6f69a4d672267437
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x209084203b65749a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x729e4a8474566768
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x150e021e211b1800
mov qword [rsp + 0x44], rdx
movabs rdx, 0x92004060e10140d
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x80d262609200406
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa150024080f0527
mov qword [rsp + 0x58], rdx
movabs rdx, 0x180d161d00011321
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2201212409201207
mov qword [rsp + 0x68], rdx
movabs rdx, 0x22502130d211e09
mov qword [rsp + 0x70], rdx
movabs rdx, 0x5142718040b1d04
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4dbb47
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0xffffffc1
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x3c
jge 0x4dbb7b
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x28
jae 0x4dbba8
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0xffffffc1
add r8d, edx
cmp rsi, 0x28
jb 0x4dbb2d
jmp 0x4dbb9c
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x28
call fcn.0044ba20
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x28
call fcn.00461e80
mov eax, edi
mov ecx, 0x28
call fcn.00461e80
nop
call fcn.0045f820
jmp fcn.004dba40