joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b4a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4b68
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x9ff3281f2195ffea
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd9f32b0f343c6e9f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x534a74b66f702775
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1310000c07030207
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc0a02100e0d0202
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x103040405020c0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe160b0e09060315
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b4b02
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1e
jge 0x4b4b2f
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4b4b5b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x17
jb 0x4b4ae5
jmp 0x4b4b4f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.00441880
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.004533e0
mov eax, edi
mov ecx, 0x17
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004b4a60

Function at 0x4b54e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5606
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6cf92c2a442ee632
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2c456c0b95166628
mov qword [rsp + 0x21], rdx
movabs rdx, 0xf3ece525e02c456c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3ebc20da1d4e7075
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x111a0f190b1b0412
mov qword [rsp + 0x36], rdx
movabs rdx, 0xb0a111a0f190b1b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b08100213060c14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60c05020113001c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4040314170e1803
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b55a0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x60]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x60]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x22
jge 0x4b55cd
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4b55f4
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4b5583
jmp 0x4b55e8
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.00441880
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.004533e0
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004b54e0
Function at 0x4b6000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6152
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x72867289e861a669
mov qword [rsp + 0x19], rdx
movabs rdx, 0x921e4e4c20644980
mov qword [rsp + 0x21], rdx
movabs rdx, 0x71a365921e4e4c20
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8945737b6c336163
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4d206562203d5d71
mov qword [rsp + 0x34], rdx
movabs rdx, 0x8e5e765261557365
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x11082902281b0f01
mov qword [rsp + 0x44], rdx
movabs rdx, 0x9272a2927191a0f
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x208251c09272a29
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2908120e0d171b02
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a1d27031d070604
mov qword [rsp + 0x60], rdx
movabs rdx, 0x220c172707292a15
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4b60ea
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x32]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4b611c
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2b
jae 0x4b6145
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x32]
cmp rsi, 0x2b
jb 0x4b60d0
jmp 0x4b6137
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2b
call fcn.00441880
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x2b
nop
call fcn.004533e0
mov eax, edi
mov ecx, 0x2b
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004b6000
Function at 0x4ba0e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba1bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf43278847580d273
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x596c64f432788475
mov qword [rsp + 0x22], rdx
movabs rdx, 0x504020a0201050a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1070104050a0504
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ba155
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x7d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4ba188
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ba1af
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x4ba138
jmp 0x4ba1a3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.004533e0
mov eax, edi
mov ecx, 0xb
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.004ba0e0

Function at 0x4ba5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba6a8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x634948655d645643
mov qword [rsp + 0x18], rdx
movabs rdx, 0x41011c464e626349
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57525a63672f5d72
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60a0b1314120d10
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10010f08130c0809
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd0310010f08130c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3020f0607051305
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ba640
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 7]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4ba672
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ba69b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 7]
cmp rsi, 0x16
jb 0x4ba625
jmp 0x4ba68f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
nop
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.004533e0
mov eax, edi
mov ecx, 0x16
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004ba5a0
Function at 0x4bafe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb0dc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x2ad7c274701decd4
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3561532ad7c27470
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3492b874a942434d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8020d110712070b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa060a0d0e000201
mov qword [rsp + 0x38], rdx
movabs rdx, 0x70d080511110b10
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bb070
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4bb0a8
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4bb0cf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7e]
nop word [rax + rax]
cmp rsi, 0x13
jb 0x4bb056
jmp 0x4bb0c3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.004533e0
mov eax, edi
mov ecx, 0x13
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.004bafe0

Function at 0x4bc2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc3c8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x6d616739535b4343
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6070664074546843
mov qword [rsp + 0x23], rdx
movabs rdx, 0x4474516070664074
mov qword [rsp + 0x26], rdx
movabs rdx, 0x52673c44376e5b4c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x140119050f191812
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf0a140119050f19
mov qword [rsp + 0x38], rdx
movabs rdx, 0x130f04010e0c1801
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0a031202090613
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1701031a0a101601
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4bc360
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x22
jge 0x4bc392
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4bc3bb
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0x1b
jb 0x4bc343
jmp 0x4bc3af
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1b
nop
call fcn.00441880
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1b
call fcn.004533e0
mov eax, edi
mov ecx, 0x1b
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004bc2a0
Function at 0x4bd380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd4a8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x253065a6f9ef652f
mov qword [rsp + 0x18], rdx
movabs rdx, 0xfe69bc35e3f07919
mov qword [rsp + 0x20], rdx
movabs rdx, 0x223d332ec161cc69
mov qword [rsp + 0x28], rdx
movabs rdx, 0x22f22a6cfb33f9dc
mov qword [rsp + 0x30], rdx
movabs rdx, 0x61e1f041b031b1d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x130d171a1116140f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1f0d1513020718
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa0b0019020c061b
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d08070b1413160a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4bd440
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x15]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x4bd472
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4bd49b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x15]
cmp rsi, 0x20
jb 0x4bd423
jmp 0x4bd48f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
nop
call fcn.00441880
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x20
call fcn.004533e0
mov eax, edi
mov ecx, 0x20
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004bd380

Function at 0x4bda00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bdaeb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x74e68de841ea6562
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x59de5549d7dec574
mov qword [rsp + 0x26], rdx
movabs rdx, 0x800050a080c050c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc090800050a080c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6080d04040e0902
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bda84
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x4bdab7
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x4bdade
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x4bda67
jmp 0x4bdad2
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.00441880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.004533e0
mov eax, edi
mov ecx, 0xf
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004bda00
Function at 0x4be240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be32b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x69530e023237585a
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe779f02b4d2d65fd
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0f0d0802050a04
mov qword [rsp + 0x28], rdx
movabs rdx, 0x306020208060a02
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4010c06000d0b0b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4be2c4
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x37]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x37]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x18
jge 0x4be2f7
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4be31e
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4be2a7
jmp 0x4be312
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.00441880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.004533e0
mov eax, edi
mov ecx, 0x10
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004be240

Function at 0x4be600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be6dc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x56486536ad65e8c1
mov qword [rsp + 0x19], rdx
movabs rdx, 0xbcda6e69d8ce7256
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd03040900030e0e
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd07090a01040704
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4be675
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x65]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x65]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4be6a8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4be6cf
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xf
jb 0x4be658
jmp 0x4be6c3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.004533e0
mov eax, edi
mov ecx, 0xf
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.004be600
Function at 0x4bef80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf05c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xf8de651388257e44
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x5726dcf8de651388
mov qword [rsp + 0x22], rdx
movabs rdx, 0x608020404010308
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x308060702090608
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4beff5
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x59]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x59]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4bf028
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4bf04f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x4befd8
jmp 0x4bf043
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.004533e0
mov eax, edi
mov ecx, 0xb
call fcn.004533e0
nop
nop dword [rax]
call fcn.00450d80
jmp fcn.004bef80

Function at 0x4bf080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf1a8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x2c10a82eb9bd3744
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2e1a7572685463b2
mov qword [rsp + 0x23], rdx
movabs rdx, 0x6bc07474cf2e1a75
mov qword [rsp + 0x28], rdx
movabs rdx, 0x28c0bf26b6a6a9d0
mov qword [rsp + 0x30], rdx
movabs rdx, 0x41a0e1a0d0f071c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1719180114141a1c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1805101715131714
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1b16060704070f16
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2070d0803030605
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4bf140
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x76]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x4bf172
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4bf19b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x76]
cmp rsi, 0x1d
jb 0x4bf123
jmp 0x4bf18f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
nop
call fcn.00441880
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.004533e0
mov eax, edi
mov ecx, 0x1d
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004bf080
Function at 0x4bfba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bfc8b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x68c2651764c7e323
mov qword [rsp + 0x19], rdx
movabs rdx, 0x71cdccc4668c265
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10b070406060204
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb06010b07040606
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90c0404090a00
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bfc24
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x5d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x5d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x4bfc57
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x4bfc7e
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4bfc07
jmp 0x4bfc72
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00441880
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.004533e0
mov eax, edi
mov ecx, 0xd
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004bfba0

Function at 0x4c0240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0312
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x8b62e08f766572bb
mov qword [rsp + 0x19], rdx
movabs rdx, 0x79b29c8b62e08f76
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x209000208070509
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3040205
xor eax, eax
jmp 0x4c02ae
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x19]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x19]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4c02db
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c0305
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4c0291
jmp 0x4c02f6
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441880
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.004533e0
mov eax, edi
mov ecx, 0xb
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004c0240
Function at 0x4c0880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0976
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x2a72f19220742e47
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3911c02a72f19220
mov qword [rsp + 0x20], rdx
movabs rdx, 0xe65fff73651326ba
mov qword [rsp + 0x28], rdx
movabs rdx, 0x404120c0908080b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd11070b04110305
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40a0410010c1004
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c0913
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x60]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x60]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x18
jge 0x4c0942
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c0969
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x13
jb 0x4c08f6
nop
jmp 0x4c095d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.004533e0
mov eax, edi
mov ecx, 0x13
call fcn.004533e0
nop
call fcn.00450d80
nop dword [rax + rax]
jmp fcn.004c0880

Function at 0x4c10e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c11d6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x9ea7937895747347
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7b6b9ea793789574
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x518e6e774b727565
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10f0d0706071103
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1006080e010f0d07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11050910090d0b01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c1173
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 6]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 6]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4c11a2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c11c9
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4c1156
nop
jmp 0x4c11bd
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00441880
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.004533e0
mov eax, edi
mov ecx, 0x12
call fcn.004533e0
nop
call fcn.00450d80
nop dword [rax + rax]
jmp fcn.004c10e0
Function at 0x4c1200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1308
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xaa656c7699c6f875
mov qword [rsp + 0x18], rdx
movabs rdx, 0xaa63a6e8aa656c76
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xaa78d9c64f9a34b1
mov qword [rsp + 0x24], rdx
movabs rdx, 0x80d0b070b010f01
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7130e10090f0211
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe0c080c07130e10
mov qword [rsp + 0x38], rdx
movabs rdx, 0x403110a0007020d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c12a0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4c12d2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c12fb
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 0x14
jb 0x4c1285
jmp 0x4c12ef
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop
call fcn.00441880
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.004533e0
mov eax, edi
mov ecx, 0x14
call fcn.004533e0
nop
call fcn.00450d80
jmp fcn.004c1200