joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b18e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b19e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x12656761b96320cb
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x691bb08b4c126567
mov qword [rsp + 0x22], rdx
movabs rdx, 0x641188ae73b92270
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe0d110300031003
mov qword [rsp + 0x32], rdx
movabs rdx, 0x91201001310100a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x80b03070e0b0912
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70f09120b070707
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b1980
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x43]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x4b19b2
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b19db
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x43]
cmp rsi, 0x15
jb 0x4b1965
jmp 0x4b19cf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453440
mov eax, edi
mov ecx, 0x15
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b18e0

Function at 0x4b2480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b2588
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6e6f697453fce0b1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x16dcee0996eebbd
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6499b06e090eb66c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb15121303120d0f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x150302150c0109
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa0800150302150c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1301091612110d03
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b2520
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x60]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4b2552
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4b257b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x60]
cmp rsi, 0x18
jb 0x4b2505
jmp 0x4b256f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00453440
mov eax, edi
mov ecx, 0x18
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b2480
Function at 0x4b45a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4672
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x69532748266e2440
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x5d03
movabs rdx, 0x10100030508
mov qword [rsp + 0x22], rdx
movabs rdx, 0x406060809010000
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4b460d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4b463a
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4b4665
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4b45f0
jmp 0x4b4655
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00453440
mov eax, edi
mov ecx, 0xa
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b45a0

Function at 0x4b5860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5968
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x61ed3e43056d1972
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1551bf72b93f61ed
mov qword [rsp + 0x22], rdx
movabs rdx, 0x642f340b331af2ed
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x801010f0512090b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x304090f0d0c0b0f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x60e0c0f04080304
mov qword [rsp + 0x40], rdx
movabs rdx, 0x131309100c051411
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b5900
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x17]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1e
jge 0x4b5932
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4b595b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x17]
cmp rsi, 0x16
jb 0x4b58e5
jmp 0x4b594f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00453440
mov eax, edi
mov ecx, 0x16
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b5860
Function at 0x4b5d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4b5ec7
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
movabs rdx, 0x375ef7214b06eb3
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xc4ef7984f8cb6574
mov qword [rsp + 0x27], rdx
movabs rdx, 0xa8b9dec4ef7984f8
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x3e6ea43bb4b693bc
mov qword [rsp + 0x32], rdx
movabs rdx, 0x724ceb58e3644ba4
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x646574729b2edfc6
mov qword [rsp + 0x42], rdx
movabs rdx, 0x3261217260c1525
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x171c14190a031a1e
mov qword [rsp + 0x52], rdx
movabs rdx, 0x1c03050a020e171c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2314051c1c0b0e0c
mov qword [rsp + 0x60], rdx
movabs rdx, 0xc070a16210c2418
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1a0e00070f261f24
mov qword [rsp + 0x70], rdx
movabs rdx, 0x1023031f201a020c
mov qword [rsp + 0x78], rdx
movabs rdx, 0x131f1111211b1524
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x4b5e60
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x12]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x12]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x3e
jge 0x4b5e8d
movzx edx, byte [rsp + rax + 0x4a]
movzx esi, byte [rsp + rax + 0x4b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2b
jae 0x4b5eba
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x2b
jb 0x4b5e3f
jmp 0x4b5eae
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x2b
call fcn.004418e0
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov eax, esi
mov ecx, 0x2b
call fcn.00453440
mov eax, edi
mov ecx, 0x2b
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b5d40
Function at 0x4b7840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b7928
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd615242d2d297d74
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x257126b50f65d615
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1090d0705020204
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3060b0601090d07
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc04010a06020b07
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b78c1
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x14
jge 0x4b78f3
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4b791b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6b]
cmp rsi, 0xe
jb 0x4b78a7
jmp 0x4b790f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xe
call fcn.00453440
mov eax, edi
mov ecx, 0xe
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b7840

Function at 0x4b9360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b942b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x64f8017061e95bef
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x6c3a
movabs rdx, 0x806050800020201
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x605
xor eax, eax
jmp 0x4b93c5
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x78]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x78]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xa
jge 0x4b93f7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xa
jae 0x4b941e
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4b93a8
jmp 0x4b9412
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00453440
mov eax, edi
mov ecx, 0xa
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b9360
Function at 0x4b9620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b96f2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x32116cfb6e4bf73e
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6c513ef2
movabs rdx, 0x90108060601
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x806020a08040000
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b968e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x33]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x33]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4b96bb
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4b96e5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4b9671
jmp 0x4b96d6
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00453440
mov eax, edi
mov ecx, 0xc
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b9620

Function at 0x4b9be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9cbc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x15766eb177a35d01
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb76c1315766eb177
mov qword [rsp + 0x20], rdx
movabs rdx, 0x80a010807000201
mov qword [rsp + 0x28], rdx
movabs rdx, 0x307020701000a04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b9c52
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b9c88
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b9caf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5b]
nop dword [rax]
cmp rsi, 0xb
jb 0x4b9c38
jmp 0x4b9ca3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453440
mov eax, edi
mov ecx, 0xb
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004b9be0
Function at 0x4ba960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4baa56
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6ce952a070a67243
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa161136ce952a070
mov qword [rsp + 0x22], rdx
movabs rdx, 0xb1ca65916e570dc8
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x110d0a0b0d0c1108
mov qword [rsp + 0x32], rdx
movabs rdx, 0x20a02110b06110d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80f0d120204020b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ba9f3
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x11]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x11]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4baa22
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4baa49
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4ba9d6
nop
jmp 0x4baa3d
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453440
mov eax, edi
mov ecx, 0x13
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004ba960

Function at 0x4bb4e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb5cb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xfaddc6e76e65c723
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa9c86b9aacc4b4f9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80f060707040008
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9070b07000c080f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe050a010509040f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bb564
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x37]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x37]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x16
jge 0x4bb597
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4bb5be
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x4bb547
jmp 0x4bb5b2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453440
mov eax, edi
mov ecx, 0x10
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004bb4e0
Function at 0x4bb5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb6b2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xc573a1b443fc65b3
mov qword [rsp + 0x19], rdx
movabs rdx, 0x79934bc573a1b443
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x900070702000207
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4050905
xor eax, eax
jmp 0x4bb64b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x50]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4bb67d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4bb6a5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x50]
cmp rsi, 0xb
jb 0x4bb631
jmp 0x4bb698
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00453440
mov eax, edi
mov ecx, 0xb
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004bb5e0

Function at 0x4bc100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc226
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x35e20cb13fa46521
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x663c4b7230c165ee
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3f374869663c4b72
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x31e565796e6ffa12
mov qword [rsp + 0x32], rdx
movabs rdx, 0x20406040b180d06
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe1b0a140b040204
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13030b120d08151a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x211070504061405
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd1a001506141a0d
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4bc1c0
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x26
jge 0x4bc1ed
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4bc214
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4bc1a3
jmp 0x4bc208
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1c
call fcn.004418e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00453440
mov eax, edi
mov ecx, 0x1c
nop dword [rax + rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004bc100
Function at 0x4bc240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc356
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xed400d27743e6543
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x632507597472f424
mov qword [rsp + 0x25], rdx
movabs rdx, 0x2f0a586325075974
mov qword [rsp + 0x28], rdx
movabs rdx, 0x65724111f92a4973
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc05170d1012070c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x21804080c0d0e16
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60c1516080e1709
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1605101016110d17
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4bc2ee
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 9]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x20
jge 0x4bc322
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4bc349
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 9]
cmp rsi, 0x1b
jb 0x4bc2d4
nop
jmp 0x4bc33d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1b
call fcn.004418e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00453440
mov eax, edi
mov ecx, 0x1b
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004bc240

Function at 0x4bd720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd80b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x37632c3c25743847
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6fe32129221b6537
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd010507090c0d03
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa040b0a0a030d01
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa060807090d0c0a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bd7a4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x30]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x30]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x16
jge 0x4bd7d7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x4bd7fe
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x4bd787
jmp 0x4bd7f2
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00453440
mov eax, edi
mov ecx, 0xf
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004bd720
Function at 0x4bf820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf8fc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6996578857709f92
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x84656f6996578857
mov qword [rsp + 0x20], rdx
movabs rdx, 0x605060402040102
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa08040402030003
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bf895
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 8]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 8]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x4bf8c8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4bf8ef
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x4bf878
jmp 0x4bf8e3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453440
mov eax, edi
mov ecx, 0xb
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004bf820
Function at 0x4c0140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0228
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x74610ae96cc1f8e7
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x57b4d234ae486574
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc0d01050b0e050e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0a02010c0d0105
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50d0d0e0d040d00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c01c1
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x57]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x4c01f3
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c021b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x57]
cmp rsi, 0xf
jb 0x4c01a7
jmp 0x4c020f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00453440
mov eax, edi
mov ecx, 0xf
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c0140

Function at 0x4c13e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c14f6
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x1d7662f765657246
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x744f2cfa3ff7401d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5445fc3832584a27
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc130b15050a0414
mov qword [rsp + 0x36], rdx
movabs rdx, 0x14090c130b15050a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0b130712051409
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40f141610050415
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1309081115110d0c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c148e
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x22
jge 0x4c14c2
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c14e9
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0x17
jb 0x4c1474
nop
jmp 0x4c14dd
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.004418e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x17
call fcn.00453440
mov eax, edi
mov ecx, 0x17
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004c13e0