joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c5020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c511d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd7bf6103e946dd52
mov qword [rsp + 0x19], rdx
movabs rdx, 0x465461f253d7bf61
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4b6d2ad9dcc9e3cc
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd06031203040b14
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x140b12070f110c03
mov qword [rsp + 0x36], rdx
movabs rdx, 0x902140b12070f11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7020e0301090410
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c50c0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x4d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x4d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4c50ed
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c5110
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4c509f
jmp 0x4c5104
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00463f80
mov eax, edi
mov ecx, 0x15
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.004c5020

Function at 0x4c5440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c553b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x7fcc1e1f120b152d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1bc7fcc1e1f120b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3320656ed32e70ca
mov qword [rsp + 0x26], rdx
movabs rdx, 0x207060a0d0c0508
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb0a010b01050500
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4020b0a010b0105
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6010c09010b0304
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c54d9
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4c550b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c552e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0x12
jb 0x4c54bf
jmp 0x4c5522
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.0044e180
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00463f80
mov eax, edi
mov ecx, 0x12
call fcn.00463f80
nop
nop dword [rax + rax]
call fcn.00461d00
jmp fcn.004c5440
Function at 0x4c5560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c565d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x70c06fa2046fdc53
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x970161b89e70c06f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x866d320d70c472cb
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30d01020d020b12
mov qword [rsp + 0x32], rdx
movabs rdx, 0x14020b020c0c1108
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x906020907101402
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0608040603120d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c5600
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4c562d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c5650
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4c55df
jmp 0x4c5644
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00463f80
mov eax, edi
mov ecx, 0x15
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.004c5560

Function at 0x4c5a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5b9d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xa26c527274a9de99
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6e61fa976f075c89
mov qword [rsp + 0x24], rdx
movabs rdx, 0xbc4f6174fba76e61
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x65a9d46e969f43b1
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd08100518140918
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1805080514070d08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50c1b1917071c01
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11000c15071a1602
mov qword [rsp + 0x50], rdx
movabs rdx, 0x171a1c000a001619
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c5b40
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x19]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x19]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4c5b6d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4c5b90
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4c5b1d
jmp 0x4c5b84
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1e
call fcn.0044e180
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00463f80
mov eax, edi
mov ecx, 0x1e
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.004c5a80
Function at 0x4c5f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c607d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xeff2cf686aef55e0
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc8736433617cdc49
mov qword [rsp + 0x23], rdx
movabs rdx, 0xd8edfa36f3c87364
mov qword [rsp + 0x28], rdx
movabs rdx, 0xfac7ba295541d5a3
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1b1619110a0f1317
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5010c131114001a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16100c1016131718
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1c06071505091307
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1712191015021203
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c6020
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x28
jge 0x4c604d
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4c6070
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4c5ffd
jmp 0x4c6064
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.0044e180
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00463f80
mov eax, edi
mov ecx, 0x1d
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.004c5f60

Function at 0x4c60a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c618a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf37479a20e6a78a8
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x646ef37479a20e6a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x65a169cb8664c977
mov qword [rsp + 0x24], rdx
movabs rdx, 0x705100304070e0a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x10040b07051003
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0a00010e0d0704
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c612d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x21]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x21]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4c615a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c617d
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4c6110
jmp 0x4c6171
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00463f80
mov eax, edi
mov ecx, 0x12
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004c60a0
Function at 0x4c61a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c62bd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x896927867781796d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x80a2472869627d50
mov qword [rsp + 0x27], rdx
movabs rdx, 0x6b709f745e80a247
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2a6d745461646c8e
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1c070a16130c1a0a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x181314181c070a16
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe1213010d00041c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x91c12051212050f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x101015020e030605
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c6260
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x17]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x17]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4c628d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4c62b0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4c623d
jmp 0x4c62a4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.0044e180
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00463f80
mov eax, edi
mov ecx, 0x1d
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.004c61a0

Function at 0x4c6600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c66fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb373a51dfd72dc4d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa55a05745372d2b3
mov qword [rsp + 0x26], rdx
movabs rdx, 0x106d695440b5fdfd
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x12110f03050f0e0d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x7091011160d0e16
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x90707091011160d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0c100410010408
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c66a0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4c66cd
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c66f0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4c667f
jmp 0x4c66e4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00463f80
mov eax, edi
mov ecx, 0x17
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.004c6600
Function at 0x4c8020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8147
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x76873ba3d4c6e45
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa0449d62ec6db8ee
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9f076720a0449d62
mov qword [rsp + 0x26], rdx
movabs rdx, 0xaf2065f86f9f597a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x3150b15080c0f09
mov qword [rsp + 0x36], rdx
movabs rdx, 0x20e1316081b0f0d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x711020e1316081b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11080e121b15160c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x40e110b09151818
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b1412110b181102
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c80e9
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x21]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x21]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x2a
jge 0x4c8117
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x4c813a
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4c80cc
jmp 0x4c812e
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.0044e180
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00463f80
mov eax, edi
mov ecx, 0x1c
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004c8020

Function at 0x4c8160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c825b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x92b0d40e6f6e2022
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20dd04cebe917592
mov qword [rsp + 0x22], rdx
movabs rdx, 0x11c4743cb9268225
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x100c1311090d0907
mov qword [rsp + 0x32], rdx
movabs rdx, 0x130d0c0b0b07120a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x10060f051604130d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x405111604150f0b
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c81f9
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x75]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4c822b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c824e
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x75]
cmp rsi, 0x17
jb 0x4c81df
jmp 0x4c8242
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x17
call fcn.0044e180
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00463f80
mov eax, edi
mov ecx, 0x17
call fcn.00463f80
nop
nop dword [rax + rax]
call fcn.00461d00
jmp fcn.004c8160
Function at 0x4c8280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8366
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2c0ebb046ec0bcfc
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8aed0deea531ad2c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x30501050e0402
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60b0c0108060003
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa000a000d050e04
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c8300
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4c8332
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c8357
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0xf
jb 0x4c82e2
jmp 0x4c834b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00463f80
mov eax, edi
mov ecx, 0xf
nop
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004c8280

Function at 0x4c9040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9187
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x2daf0a04ef09d0db
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xfb06082daf0a04ef
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3530911c83c335a7
mov qword [rsp + 0x26], rdx
movabs rdx, 0xec8139effe173909
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x2c081137cf56e807
mov qword [rsp + 0x36], rdx
movabs rdx, 0x210917040b0e1719
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x106210917040b0e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x10001e1c1d221a0a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x20011603100d0003
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b131b0b100e2005
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1c0f20030620221d
mov qword [rsp + 0x60], rdx
movabs rdx, 0x151002040a170e08
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4c9127
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x32
jge 0x4c9157
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x23
jae 0x4c917a
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x23
jb 0x4c910a
jmp 0x4c916e
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x23
call fcn.0044e180
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.00463f80
mov eax, edi
mov ecx, 0x23
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004c9040
Function at 0x4c9500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c95bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xb53a303070903092
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x9e
movabs rdx, 0x207070000070003
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x802
xor eax, eax
nop
jmp 0x4c9560
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4c958d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4c95b0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4c9542
jmp 0x4c95a4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00463f80
mov eax, edi
mov ecx, 9
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.004c9500
Function at 0x4ceee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x68]
cmp r12, qword [r14 + 0x10]
jbe 0x4cf12c
push rbp
mov rbp, rsp
sub rsp, 0xe0
movups xmmword [rsp + 0xf0], xmm15
movups xmmword [rsp + 0x100], xmm15
movups xmmword [rsp + 0x110], xmm15
movups xmmword [rsp + 0x120], xmm15
movabs rdx, 0x368264945a7c11ac
mov qword [rsp + 0x56], rdx
movabs rdx, 0x6f7785263286993d
mov qword [rsp + 0x5e], rdx
movabs rdx, 0x3133ac8d9a743b38
mov qword [rsp + 0x66], rdx
movabs rdx, 0x455b57066e212717
mov qword [rsp + 0x6e], rdx
movabs rdx, 0x1034294065a5377f
mov qword [rsp + 0x76], rdx
movabs rdx, 0x2e17203404d32354
mov qword [rsp + 0x7e], rdx
movabs rdx, 0x841fbd495bc31a82
mov qword [rsp + 0x86], rdx
movabs rdx, 0x66d314f091387a1
mov qword [rsp + 0x8e], rdx
movabs rdx, 0x151f3c03151c3311
mov qword [rsp + 0x96], rdx
movabs rdx, 0x10d1f2a2f3d220f
mov qword [rsp + 0x9e], rdx
movabs rdx, 0x3905010d1f2a2f3d
mov qword [rsp + 0xa0], rdx
movabs rdx, 0xf04183710242b24
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x3e07201306281f17
mov qword [rsp + 0xb0], rdx
movabs rdx, 0x37172409100a1026
mov qword [rsp + 0xb8], rdx
movabs rdx, 0x1d00010d323e3435
mov qword [rsp + 0xc0], rdx
movabs rdx, 0x60f0e3e23072a30
mov qword [rsp + 0xc8], rdx
movabs rdx, 0x20a14381d1e2309
mov qword [rsp + 0xd0], rdx
movabs rdx, 0x3401320f1c121b17
mov qword [rsp + 0xd8], rdx
xor eax, eax
jmp 0x4cf070
movzx r8d, byte [rsp + rbx + 0x56]
sub r8d, edx
lea edx, [r8 - 0xa]
mov byte [rsp + rsi + 0x56], dl
lea edx, [rdi - 0xa]
mov byte [rsp + rbx + 0x56], dl
add rax, 2
cmp rax, 0x4a
jge 0x4cf0a8
movzx edx, byte [rsp + rax + 0x96]
movzx ebx, byte [rsp + rax + 0x97]
mov esi, edx
xor edx, ebx
add edx, eax
cmp rsi, 0x40
jae 0x4cf11f
movzx edi, byte [rsp + rsi + 0x56]
sub edi, edx
nop dword [rax]
cmp rbx, 0x40
jb 0x4cf054
jmp 0x4cf113
movups xmmword [rsp + 0x16], xmm15
movups xmmword [rsp + 0x26], xmm15
movups xmmword [rsp + 0x36], xmm15
movups xmmword [rsp + 0x46], xmm15
xor eax, eax
jmp 0x4cf0d0
movzx ecx, byte [rsp + rax + 0x56]
mov byte [rsp + rax + 0x16], cl
inc rax
cmp rax, 0x40
jl 0x4cf0c4
movups xmm0, xmmword [rsp + 0x16]
movups xmmword [rsp + 0xf0], xmm0
movups xmm0, xmmword [rsp + 0x26]
movups xmmword [rsp + 0x100], xmm0
movups xmm0, xmmword [rsp + 0x36]
movups xmmword [rsp + 0x110], xmm0
movups xmm0, xmmword [rsp + 0x46]
movups xmmword [rsp + 0x120], xmm0
add rsp, 0xe0
pop rbp
ret
mov eax, ebx
mov ecx, 0x40
call fcn.00463f80
mov eax, esi
mov ecx, 0x40
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004ceee0
Function at 0x4d2e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d2efd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x79c974c1c1347272
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x85
movabs rdx, 0x106040601030005
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7070804
xor eax, eax
nop
jmp 0x4d2ea0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4d2ecd
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d2ef0
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4d2e82
jmp 0x4d2ee4
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044e180
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00463f80
mov eax, edi
mov ecx, 9
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.004d2e40

Function at 0x4d3680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d374c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x72b3b7b8393236ea
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xf2f4ebea
movabs rdx, 0xa0b0a0506070b04
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9070809060a0b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4d36e5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x32]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4d371c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4d373f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x32]
cmp rsi, 0xc
jb 0x4d36cb
jmp 0x4d3733
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.0044e180
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00463f80
mov eax, edi
mov ecx, 0xc
call fcn.00463f80
nop
call fcn.00461d00
jmp fcn.004d3680

Function at 0x4d3c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3d3d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3502f733f0f33733
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xeeea9de330e4b835
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20e0b0b090c000e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x90d020e0b0b090c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x806020503030208
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4d3ce0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4d3d0d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4d3d30
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x4d3cc2
jmp 0x4d3d24
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.0044e180
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00463f80
mov eax, edi
mov ecx, 0xf
call fcn.00463f80
nop
nop dword [rax]
call fcn.00461d00
jmp fcn.004d3c60