joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4bbac0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbba6
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xdd4523e30d74a1ec
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x6cf7e32c
movabs rdx, 0x405010904060303
mov qword [rsp + 0x26], rdx
movabs rdx, 0x700040501090406
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10809070a0805
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4bbb40
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4bbb6d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4bbb94
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xc
jb 0x4bbb22
jmp 0x4bbb88
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00441e20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00453d80
mov eax, edi
mov ecx, 0xc
nop dword [rax + rax]
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004bbac0

Function at 0x4bc140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc21c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6b6c6e6563716425
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6c6c6d6b6c6e6563
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80106060301
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x203070006020000
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bc1b2
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xfffffff9
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4bc1e8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4bc20f
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xfffffff9
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x4bc198
jmp 0x4bc203
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441e20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453d80
mov eax, edi
mov ecx, 0xb
call fcn.00453d80
nop
nop dword [rax]
call fcn.00451720
jmp fcn.004bc140
Function at 0x4bd100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd1f6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x35f12832be616f4c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6335f12832be616f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xfb64082aebebc923
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd03060e020b0a02
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5070c0b0a040d03
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9020b0e040b0d10
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bd190
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x2d
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x4bd1c2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4bd1e9
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x2d
add r8d, edx
cmp rsi, 0x11
jb 0x4bd176
nop
jmp 0x4bd1dd
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441e20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00453d80
mov eax, edi
mov ecx, 0x11
call fcn.00453d80
nop
call fcn.00451720
nop dword [rax + rax]
jmp fcn.004bd100

Function at 0x4bd220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd30b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6381f050f0af373d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6ea56be354a9b265
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10a0c0a0a060600
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0e010a0c0a0a06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9020903020a0205
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bd2a4
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x2c]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x2c]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x4bd2d7
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4bd2fe
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4bd287
jmp 0x4bd2f2
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00441e20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453d80
mov eax, edi
mov ecx, 0x10
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004bd220
Function at 0x4bd420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd4fc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xab917b98898fee9c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x94787d799aab917b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x705080204080104
mov qword [rsp + 0x28], rdx
movabs rdx, 0x5030c0a00050c06
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bd492
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffc8
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4bd4c8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4bd4ef
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffc8
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xd
jb 0x4bd478
jmp 0x4bd4e3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441e20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00453d80
mov eax, edi
mov ecx, 0xd
call fcn.00453d80
nop
nop dword [rax]
call fcn.00451720
jmp fcn.004bd420
Function at 0x4bf6a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf7a8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xfae1700c74186543
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xfe73d453fae1700c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57e8be1b2f1e0d69
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0c0b11110f0f07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2100404110b060e
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe0b02100404110b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe120c0f090c0d11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bf740
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x37
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4bf771
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4bf79b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x37
add r8d, edx
cmp rsi, 0x14
jb 0x4bf725
jmp 0x4bf78f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
nop dword [rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00453d80
mov eax, edi
mov ecx, 0x14
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004bf6a0

Function at 0x4bf7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf8f2
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x6908cc597408d1ca
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe8007d0965e97966
mov qword [rsp + 0x24], rdx
movabs rdx, 0x336843e9085a01ec
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xea63f6e9f6a8f1fc
mov qword [rsp + 0x34], rdx
movabs rdx, 0x13191711191a0a04
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1d0a0f141d0e1811
mov qword [rsp + 0x44], rdx
movabs rdx, 0xa0506021d0a0f14
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10c1d041a000c0d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x181f1b13101c1312
mov qword [rsp + 0x58], rdx
movabs rdx, 0x4121d1b0c0c1b
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4bf88c
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x56
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4bf8bd
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4bf8e5
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x56
add r8d, edx
cmp rsi, 0x20
jb 0x4bf872
jmp 0x4bf8d8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.00441e20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
nop
call fcn.00453d80
mov eax, edi
mov ecx, 0x20
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004bf7c0
Function at 0x4c0000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c00c8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xaf844564c074bd47
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x9bc4
movabs rdx, 0x601070109080301
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4030309
xor eax, eax
jmp 0x4c0063
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffffd4
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x4c0094
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4c00bb
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffffd4
add r8d, edx
cmp rsi, 0xa
jb 0x4c0049
jmp 0x4c00af
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00441e20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00453d80
mov eax, edi
mov ecx, 0xa
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004c0000

Function at 0x4c0500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c05dc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6f348c0bbbf6cc4
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xad1a0906f348c0bb
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa0402030906080a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x607070709000a04
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c0575
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x47]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x47]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4c05a8
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c05cf
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x4c0558
jmp 0x4c05c3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441e20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453d80
mov eax, edi
mov ecx, 0xb
call fcn.00453d80
nop
nop dword [rax]
call fcn.00451720
jmp fcn.004c0500
Function at 0x4c0700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c07f6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x6925cb0f61c01915
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x656c6925cb0f61c0
mov qword [rsp + 0x30], rdx
movabs rdx, 0x57534c352e32610b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0e06050a000206
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x50c0d0e06050a00
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10604040604100f
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4c0793
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0x44]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0x44]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x12
jge 0x4c07c2
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c07e9
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4c0776
nop
jmp 0x4c07dd
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00441e20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00453d80
mov eax, edi
mov ecx, 0x12
call fcn.00453d80
nop
call fcn.00451720
nop dword [rax + rax]
jmp fcn.004c0700

Function at 0x4c0820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c08f2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x69ce65c46165a4c6
mov qword [rsp + 0x19], rdx
movabs rdx, 0x577ed369ce65c461
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x906080804080600
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4000104
xor eax, eax
jmp 0x4c088e
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4c08bb
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c08e5
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4c0871
jmp 0x4c08d6
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441e20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00453d80
mov eax, edi
mov ecx, 0xb
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004c0820
Function at 0x4c0fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1092
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x372165bf102a93fa
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x6570
movabs rdx, 0x704070101040603
mov qword [rsp + 0x22], rdx
movabs rdx, 0x707020200070704
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4c102d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x45]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x45]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4c105a
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4c1085
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4c1010
jmp 0x4c1075
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441e20
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00453d80
mov eax, edi
mov ecx, 0xa
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004c0fc0

Function at 0x4c14a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c15a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xc154a974b4859d43
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x323359110368c4a8
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc66f08731ef86e01
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10010201080d0b13
mov qword [rsp + 0x36], rdx
movabs rdx, 0x812150110120c03
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x510081215011012
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3130709170b1201
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c1542
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x1a
jge 0x4c156f
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4c159b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4c1525
jmp 0x4c158f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
nop dword [rax + rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00453d80
mov eax, edi
mov ecx, 0x18
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004c14a0
Function at 0x4c3380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c346b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x752df33a1e7465d4
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xff2d81c4e436554
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50f000e0d0f0005
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf060d05050c050f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0a040f08060003
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c3404
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x3a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x3a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x16
jge 0x4c3437
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4c345e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x4c33e7
jmp 0x4c3452
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.00441e20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453d80
mov eax, edi
mov ecx, 0x10
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004c3380
Function at 0x4c50c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c51d2
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6575c03af574cbec
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8b656cf4176f4307
mov qword [rsp + 0x27], rdx
movabs rdx, 0xb68b656cf4176f43
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7375e761f9312a6f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc10010f0b05140c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1601001012080016
mov qword [rsp + 0x40], rdx
movabs rdx, 0x161304121414140c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf0f0f0b0b000f03
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c5171
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x5e]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x5e]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x4c519e
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4c51c5
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4c5154
jmp 0x4c51b9
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.00441e20
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00453d80
mov eax, edi
mov ecx, 0x19
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004c50c0

Function at 0x4c5ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6028
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x6f3f467274652b49
mov qword [rsp + 0x19], rdx
movabs rdx, 0x606f3f467274652b
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x69474a634272616a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6972a16455866077
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5853484c5c745765
mov qword [rsp + 0x32], rdx
movabs rdx, 0x16131005110e1102
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x14191a08131a0401
mov qword [rsp + 0x42], rdx
movabs rdx, 0x15070a1109101419
mov qword [rsp + 0x48], rdx
movabs rdx, 0x41f090f121c2001
mov qword [rsp + 0x50], rdx
movabs rdx, 0xf1317161e0a1a11
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc19141f090e060a
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x4c5fc0
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffdf
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2e
jge 0x4c5ff1
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4c601b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffdf
add r8d, edx
cmp rsi, 0x21
jb 0x4c5fa2
jmp 0x4c600f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x21
nop dword [rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
call fcn.00453d80
mov eax, edi
mov ecx, 0x21
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004c5ee0
Function at 0x4c7b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7ca8
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x2c6524da2afd0053
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x3c2b2c6524da2afd
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x286e6f300258e517
mov qword [rsp + 0x24], rdx
movabs rdx, 0x744a03016669226f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xfd2bcc399b6e6fb7
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1d021718160a1317
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xe21081a0308020c
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1f1316080e21081a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x13010b1e05200416
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d040e091813040c
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd111e0116070a1f
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x4c7c40
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 6
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2c
jge 0x4c7c71
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x22
jae 0x4c7c9b
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 6
add r8d, edx
cmp rsi, 0x22
jb 0x4c7c22
jmp 0x4c7c8f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x22
nop dword [rax]
call fcn.00441e20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x22
call fcn.00453d80
mov eax, edi
mov ecx, 0x22
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004c7b60
Function at 0x4c8fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c90bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x8b6f94e47469d457
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x91f17cc4738b6f94
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9010b070904040b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0c0b0504070905
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c9052
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffc7
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4c9088
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4c90af
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffc7
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xd
jb 0x4c9038
jmp 0x4c90a3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441e20
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00453d80
mov eax, edi
mov ecx, 0xd
call fcn.00453d80
nop
nop dword [rax]
call fcn.00451720
jmp fcn.004c8fe0

Function at 0x4c92c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c93ab
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x8149694565416561
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7465728166746641
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0c030a00060800
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc060f0c030a0006
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70b060402030b0f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c9344
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0xd]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0xd]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x12
jge 0x4c9377
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4c939e
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4c9327
jmp 0x4c9392
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00441e20
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453d80
mov eax, edi
mov ecx, 0x10
call fcn.00453d80
nop
call fcn.00451720
jmp fcn.004c92c0