joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b6700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b67c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5f4e5728ee766e3d
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x345b4e43
movabs rdx, 0x405090308050b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x40a060007080004
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b6768
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4b6797
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4b67ba
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4b674b
jmp 0x4b67ae
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004610a0
mov eax, edi
mov ecx, 0xc
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004b6700

Function at 0x4b78c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b79c8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x656315e836df65f9
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1e162821e7a71d20
mov qword [rsp + 0x27], rdx
movabs rdx, 0x301e162821e7a71d
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd823edbe6f762513
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1611050b12041202
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0e001015180d04
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1517110d0f090a18
mov qword [rsp + 0x48], rdx
movabs rdx, 0x181203050a101118
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b796b
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x4b7998
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4b79bb
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4b794e
jmp 0x4b79af
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.0044bb80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004610a0
mov eax, edi
mov ecx, 0x19
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004b78c0
Function at 0x4b8f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b904c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x20b5a5da7445b99b
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x6eac9585
movabs rdx, 0x602000502040100
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9090a0906020008
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b8fe5
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b901c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4b903f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
cmp rsi, 0xc
jb 0x4b8fcb
jmp 0x4b9033
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.004610a0
mov eax, edi
mov ecx, 0xc
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004b8f80

Function at 0x4b9060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9146
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6574756f222427d1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2ecc91271f2c222d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1090a0a0c0c0d0f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0801090a0a0c0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0e03020f030300
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b90e0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3f]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4b9112
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b9137
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3f]
cmp rsi, 0x10
jb 0x4b90c2
jmp 0x4b912b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004610a0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004b9060
Function at 0x4ba780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba888
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8373427720fe65bb
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xee20741f65fa652c
mov qword [rsp + 0x27], rdx
movabs rdx, 0x36622eee20741f65
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe91269df7265f240
mov qword [rsp + 0x32], rdx
movabs rdx, 0xe0c08000c170702
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x80519121a101214
mov qword [rsp + 0x42], rdx
movabs rdx, 0x5131202120f0805
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1213170e0a07020e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ba82b
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1e
jge 0x4ba858
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4ba87b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4ba80e
jmp 0x4ba86f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1b
call fcn.0044bb80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.004610a0
mov eax, edi
mov ecx, 0x1b
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004ba780
Function at 0x4bd020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd10a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x65c1900790567263
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6465c19007905672
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x659e95a8a56deeca
mov qword [rsp + 0x24], rdx
movabs rdx, 0x605040a09040600
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf0e03040605040a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30d00000c020903
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bd0ad
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4bd0da
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4bd0fd
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4bd090
jmp 0x4bd0f1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.004610a0
mov eax, edi
mov ecx, 0x11
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004bd020

Function at 0x4bd120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd20a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1f6e61cfc4cd6f89
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd66f201f6e61cfc4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd3656c1bd3b47ad7
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe070d120a0f0d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x3000e03000e070d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40b0c0d00020300
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bd1ad
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x49]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x49]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x4bd1da
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4bd1fd
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4bd190
jmp 0x4bd1f1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004610a0
mov eax, edi
mov ecx, 0x13
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004bd120
Function at 0x4be660
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be787
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x9b476177658791ac
mov qword [rsp + 0x19], rdx
movabs rdx, 0x748e724d38706bdc
mov qword [rsp + 0x21], rdx
movabs rdx, 0xad86738b6c748e72
mov qword [rsp + 0x26], rdx
movabs rdx, 0x87887473e87a528c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x71502030d11000d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x180e0f060d11060b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xc04180e0f060d11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x171b0f140f08130e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1403150104130f1c
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb030d16090d0704
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4be729
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0xf]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0xf]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x2a
jge 0x4be757
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x4be77a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4be70c
jmp 0x4be76e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.0044bb80
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.004610a0
mov eax, edi
mov ecx, 0x1d
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004be660

Function at 0x4be9e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4beae8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6543a075a0206f8e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc677babf707b897c
mov qword [rsp + 0x25], rdx
movabs rdx, 0x61c677babf707b89
mov qword [rsp + 0x26], rdx
movabs rdx, 0xba6c62859d934d8d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe03030c180a030c
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf12110d140a0808
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x130f12110d140a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc12151411050609
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bea8b
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 2]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x4beab8
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4beadb
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x4bea6e
jmp 0x4beacf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004610a0
mov eax, edi
mov ecx, 0x19
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004be9e0
Function at 0x4bf3c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf4cc
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xaa65dba5efc50fdb
mov qword [rsp + 0x18], rdx
movabs rdx, 0x63b6c820b3616bcd
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb51863b6c820b361
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65009aad6ca569af
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1801080a17100005
mov qword [rsp + 0x32], rdx
movabs rdx, 0x111100f08130d02
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xb180e120f030111
mov qword [rsp + 0x40], rdx
movabs rdx, 0x31714070416130f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bf468
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4bf49c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4bf4bf
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0x1a
jb 0x4bf44e
jmp 0x4bf4b3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004610a0
mov eax, edi
mov ecx, 0x1a
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004bf3c0

Function at 0x4bfc60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bfd7d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8e8d73656d86d1d4
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6552a766f7e5e5f0
mov qword [rsp + 0x20], rdx
movabs rdx, 0x69e86552a766f7e5
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf4c85de5470265d4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x17000615000e1801
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6190112020a1700
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1910011000120d07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x219180819071016
mov qword [rsp + 0x48], rdx
movabs rdx, 0x819080e0709140b
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4bfd20
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4bfd4d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4bfd70
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4bfcfd
jmp 0x4bfd64
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.0044bb80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004610a0
mov eax, edi
mov ecx, 0x1a
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.004bfc60
Function at 0x4c1720
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c180a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5f5f536332175c64
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6220445f5f536332
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6a4d6b63656e5143
mov qword [rsp + 0x28], rdx
movabs rdx, 0x311010c050b0708
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf05070a0b101102
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12110302110d1206
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c17ad
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x29]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x29]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4c17da
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c17fd
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4c1790
jmp 0x4c17f1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004610a0
mov eax, edi
mov ecx, 0x13
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004c1720

Function at 0x4c2440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c255d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x685e6b414a5e2e19
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5d6e6665746a6953
mov qword [rsp + 0x24], rdx
movabs rdx, 0x535b205974635d6e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7169596927644b65
mov qword [rsp + 0x32], rdx
movabs rdx, 0x151b031c19190403
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x8021a171719151b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1c0712190f060e16
mov qword [rsp + 0x48], rdx
movabs rdx, 0x190a1406061d000d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x504170107000602
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c2500
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4c252d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4c2550
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4c24dd
jmp 0x4c2544
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.0044bb80
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.004610a0
mov eax, edi
mov ecx, 0x1e
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.004c2440
Function at 0x4c5240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5326
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x211c637534fe0c1a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x731339063f72c421
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10d06020b000207
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x108010d06020b00
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0d01020c00030b
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c52c0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1d]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4c52f2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c5317
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1d]
cmp rsi, 0xf
jb 0x4c52a2
jmp 0x4c530b
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
nop
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.004610a0
mov eax, edi
mov ecx, 0xf
nop
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004c5240

Function at 0x4c55c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c56ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x524e99a289617473
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x85a8a220bb524e99
mov qword [rsp + 0x22], rdx
movabs rdx, 0x889c66dc61688988
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x41204110d140b05
mov qword [rsp + 0x32], rdx
movabs rdx, 0xa110507080c0412
mov qword [rsp + 0x38], rdx
movabs rdx, 0x12110c03040e1313
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c564a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4c567c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c569f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3e]
cmp rsi, 0x15
jb 0x4c5630
jmp 0x4c5693
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044bb80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004610a0
mov eax, edi
mov ecx, 0x15
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004c55c0
Function at 0x4c77a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7872
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2e898226979f9993
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xaf6c812e89822697
mov qword [rsp + 0x20], rdx
movabs rdx, 0x60a080502030403
mov qword [rsp + 0x28], rdx
movabs rdx, 0x100010102010606
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c780c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2f]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4c783e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c7865
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2f]
cmp rsi, 0xb
jb 0x4c77f2
jmp 0x4c7855
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.004610a0
mov eax, edi
mov ecx, 0xb
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004c77a0

Function at 0x4c7e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7f1d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x3b2ab8f376d6ec0d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x742a23373b1f3b2a
mov qword [rsp + 0x20], rdx
movabs rdx, 0x525c694b476e4d37
mov qword [rsp + 0x28], rdx
movabs rdx, 0x150e06120a020504
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10a110904090401
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb00010c0f05000c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70c0f010c141408
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c7ec0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4c7eed
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4c7f10
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4c7e9f
jmp 0x4c7f04
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044bb80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004610a0
mov eax, edi
mov ecx, 0x16
call fcn.004610a0
nop
nop dword [rax]
call fcn.0045ee20
jmp fcn.004c7e20
Function at 0x4c85a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c868a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe7b439f5542a2847
mov qword [rsp + 0x19], rdx
movabs rdx, 0x273449e7b439f554
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3a6f2ff1946d2c6f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x412070c070e0f06
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe0c010a0412070c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x206101205090f05
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c862d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x51]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x51]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x4c865a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c867d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4c8610
jmp 0x4c8671
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044bb80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004610a0
mov eax, edi
mov ecx, 0x13
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004c85a0

Function at 0x4c8780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8852
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4b5c756e45edfb52
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x596ceb76534b5c75
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa020c02020c0802
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6060b01060b0109
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c87ec
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6e]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4c881e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4c8845
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6e]
cmp rsi, 0xd
jb 0x4c87d2
jmp 0x4c8835
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0044bb80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.004610a0
mov eax, edi
mov ecx, 0xd
call fcn.004610a0
nop
call fcn.0045ee20
jmp fcn.004c8780