joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49de40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49df04
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd38b61e1656cbb66
mov qword [rsp + 0x35], rdx
movabs rdx, 0x6450aad38b61e165
mov qword [rsp + 0x38], rdx
movabs rdx, 0x64e538d097c89fb5
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf040f1006010b0e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd11100f04090d07
mov qword [rsp + 0x25], rdx
movabs rdx, 0xe090f0c060d0807
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x49dee7
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x35]
sub r8d, edx
add r8d, 0xffffffe7
movzx r9d, byte [rsp + rdi + 0x35]
mov byte [rsp + rdi + 0x35], r8b
sub r9d, edx
lea edx, [r9 - 0x19]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x18
jl 0x49deb0
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.0049de40

Function at 0x4a8180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8245
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xbeb95647c4bd46c7
mov qword [rsp + 0x36], rdx
movabs rdx, 0x18bbbeb95647c4bd
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0e9b6b92ec1c4c8
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa0405090f101010
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x70f0e010c000b03
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60a02080e091105
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4a8228
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5a]
movzx r9d, byte [rsp + rdi + 0x36]
mov byte [rsp + rdi + 0x36], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5a]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x18
jl 0x4a81f0
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004a8180

Function at 0x4a9040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9104
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1f65c8652a31d6be
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6461ba456c851f65
mov qword [rsp + 0x38], rdx
movabs rdx, 0x65e3757825e62079
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3050b0007020206
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x708050211050305
mov qword [rsp + 0x22], rdx
movabs rdx, 0x140601100a101212
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4a90e7
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x32]
sub r8d, edx
add r8d, 0xffffffb6
movzx r9d, byte [rsp + rdi + 0x32]
mov byte [rsp + rdi + 0x32], r8b
sub r9d, edx
lea edx, [r9 - 0x4a]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jl 0x4a90b0
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004a9040
Function at 0x4aa560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa624
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x878069920da09e62
mov qword [rsp + 0x35], rdx
movabs rdx, 0x916420878069920d
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc24a74a696dbf194
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12020f0a06071103
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd11110c0a0a1202
mov qword [rsp + 0x25], rdx
movabs rdx, 0x11110b0c02040e01
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4aa607
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x35]
sub r8d, edx
add r8d, 0xffffffe8
movzx r9d, byte [rsp + rdi + 0x35]
mov byte [rsp + rdi + 0x35], r8b
sub r9d, edx
lea edx, [r9 - 0x18]
mov byte [rsp + rsi + 0x35], dl
add rax, 2
cmp rax, 0x16
jl 0x4aa5d0
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004aa560

Function at 0x4ac3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac465
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x770dbf6e66e7163
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf2888265ee20786f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x72656470d57962d9
mov qword [rsp + 0x40], rdx
movabs rdx, 0x715050906070609
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb03090f0401030e
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd130b100407150f
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4ac448
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6a]
movzx r9d, byte [rsp + rdi + 0x30]
mov byte [rsp + rdi + 0x30], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6a]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
cmp rax, 0x18
jl 0x4ac410
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x18
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004ac3a0

Function at 0x4ac880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac962
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x656d81756c616c67
mov qword [rsp + 0x37], rdx
movabs rdx, 0x7f6f6c8a617c6420
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6b7f6f6c8a617c64
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7059636d61795a20
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1418020c15031805
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x501021400031217
mov qword [rsp + 0x25], rdx
movabs rdx, 0xa05050102140003
mov qword [rsp + 0x27], rdx
movabs rdx, 0x14130601020f1617
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4ac945
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x37]
sub r8d, edx
add r8d, 0x15
movzx r9d, byte [rsp + rdi + 0x37]
mov byte [rsp + rdi + 0x37], r8b
sub r9d, edx
lea edx, [r9 + 0x15]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1a
jl 0x4ac90e
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.004419a0
add rsp, 0x50
pop rbp
ret
call fcn.004506a0
jmp fcn.004ac880
Function at 0x4ade80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4adf2b
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x65087511ea20116e
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa20cbdac0e6f16ad
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10603040f09060c
mov qword [rsp + 0x18], rdx
movabs rdx, 0x90b09040d0e080d
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4adf0a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x56]
movzx r9d, byte [rsp + rdi + 0x28]
mov byte [rsp + rdi + 0x28], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x56]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jl 0x4aded2
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
nop dword [rax]
call fcn.004419a0
add rsp, 0x38
pop rbp
ret
call fcn.004506a0
jmp fcn.004ade80

Function at 0x4b3800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b38c5
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x47d172aebfc88f6e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x726ebb20ca3c47d1
mov qword [rsp + 0x38], rdx
movabs rdx, 0xcb6cce61686ecfda
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1512120b01070e08
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xb150f0e09011003
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6020413150b0313
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4b38a8
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
movzx r9d, byte [rsp + rdi + 0x32]
mov byte [rsp + rdi + 0x32], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x18
jl 0x4b3870
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004b3800

Function at 0x4b42a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4364
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6b550d480a6f5c66
mov qword [rsp + 0x37], rdx
movabs rdx, 0x456b550d480a6f5c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x726f726b40295561
mov qword [rsp + 0x40], rdx
movabs rdx, 0x50604030c080b05
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x308010e0a0c0c06
mov qword [rsp + 0x27], rdx
movabs rdx, 0xc05080e02070d
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4b4347
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x37]
sub r8d, edx
add r8d, 0x21
movzx r9d, byte [rsp + rdi + 0x37]
mov byte [rsp + rdi + 0x37], r8b
sub r9d, edx
lea edx, [r9 + 0x21]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x18
jl 0x4b4310
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004b42a0
Function at 0x4b46a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4774
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xbcc4b7630b4aac6e
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd5b3bcc4b7630b4a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf962136caf01c3
mov qword [rsp + 0x40], rdx
movabs rdx, 0x810050e0306090a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1110b06020a0204
mov qword [rsp + 0x24], rdx
movabs rdx, 0x50601110b06020a
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10c01040803070a
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4b4757
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x65]
movzx r9d, byte [rsp + rdi + 0x36]
mov byte [rsp + rdi + 0x36], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x65]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x1a
jl 0x4b471f
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004b46a0

Function at 0x4b4780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4854
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x73a728f6191f22d6
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x6ed78562d873a728
mov qword [rsp + 0x40], rdx
movabs rdx, 0x790dd52076e47320
mov qword [rsp + 0x48], rdx
movabs rdx, 0x12040f05140b060f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x60a1100010b0b12
mov qword [rsp + 0x27], rdx
movabs rdx, 0x13110613060a1100
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x503010212140801
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4b4837
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2f]
movzx r9d, byte [rsp + rdi + 0x3b]
mov byte [rsp + rdi + 0x3b], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2f]
mov byte [rsp + rsi + 0x3b], dl
add rax, 2
cmp rax, 0x1c
jl 0x4b47ff
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x15
call fcn.004419a0
add rsp, 0x50
pop rbp
ret
call fcn.004506a0
jmp fcn.004b4780
Function at 0x4b4e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4f43
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x77eff465f8e8796e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x8864d08d7be36596
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x7be58864d08d7be3
mov qword [rsp + 0x40], rdx
movabs rdx, 0x651a797417648bd5
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb110f030c070b11
mov qword [rsp + 0x18], rdx
movabs rdx, 0xa11180505111007
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50a010a15080a11
mov qword [rsp + 0x26], rdx
movabs rdx, 0x603130d0208120c
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4b4f26
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5d]
movzx r9d, byte [rsp + rdi + 0x36]
mov byte [rsp + rdi + 0x36], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5d]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x1e
jl 0x4b4eee
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.004419a0
add rsp, 0x50
pop rbp
ret
call fcn.004506a0
jmp fcn.004b4e60

Function at 0x4b8780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b881d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69e6207259e1deea
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x5565
movabs rdx, 0x103010009010902
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x1030206
xor eax, eax
jmp 0x4b8800
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x26]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7c]
movzx r9d, byte [rsp + rdi + 0x26]
mov byte [rsp + rdi + 0x26], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7c]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0xc
jl 0x4b87c3
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.004419a0
add rsp, 0x30
pop rbp
ret
nop dword [rax]
call fcn.004506a0
jmp fcn.004b8780
Function at 0x4b8840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8932
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6c9e07fddb6fa8be
mov qword [rsp + 0x43], rdx
movabs rdx, 0xb4c56cbf8fb74498
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x3d20269e6eb4c56c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x64f5f0726f704804
mov qword [rsp + 0x58], rdx
movabs rdx, 0x150c040f010a090a
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x160803050c120e12
mov qword [rsp + 0x23], rdx
movabs rdx, 0xe030e1b0e030f1a
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x14120f14050b1103
mov qword [rsp + 0x33], rdx
movabs rdx, 0x15061a0e1a010006
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x4b8915
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x43]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x54]
movzx r9d, byte [rsp + rdi + 0x43]
mov byte [rsp + rdi + 0x43], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x54]
mov byte [rsp + rsi + 0x43], dl
add rax, 2
cmp rax, 0x28
jl 0x4b88dd
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.004419a0
add rsp, 0x60
pop rbp
ret
call fcn.004506a0
jmp fcn.004b8840

Function at 0x4b8fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b90d2
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x239b0fbc1503a270
mov qword [rsp + 0x42], rdx
movabs rdx, 0xad91f36efebffb20
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x6f87b065f8b6ad91
mov qword [rsp + 0x50], rdx
movabs rdx, 0x13656bb26fb12272
mov qword [rsp + 0x58], rdx
movabs rdx, 0x60a181810061a1d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xe130417060a1818
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1d1405020f130306
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x107010710040b11
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd181811071d1009
mov qword [rsp + 0x3a], rdx
xor eax, eax
jmp 0x4b90b5
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x42]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
movzx r9d, byte [rsp + rdi + 0x42]
mov byte [rsp + rdi + 0x42], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rsi + 0x42], dl
add rax, 2
cmp rax, 0x24
jl 0x4b907d
xor eax, eax
lea rbx, [rsp + 0x42]
mov ecx, 0x1e
call fcn.004419a0
add rsp, 0x60
pop rbp
ret
call fcn.004506a0
jmp fcn.004b8fe0
Function at 0x4bbda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbe73
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc4d6cdb0ecb5e0d3
mov qword [rsp + 0x36], rdx
movabs rdx, 0xcfd1c4d6cdb0ecb5
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9be5cf726520901c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40a0f0811040502
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x10070401110a09
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb07001007040111
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6030310010b0b05
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4bbe56
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x36]
sub r8d, edx
add r8d, 0xffffffac
movzx r9d, byte [rsp + rdi + 0x36]
mov byte [rsp + rdi + 0x36], r8b
sub r9d, edx
lea edx, [r9 - 0x54]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x1a
jl 0x4bbe1f
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004bbda0

Function at 0x4bf3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf4b4
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x527e4c65845c6f72
mov qword [rsp + 0x32], rdx
movabs rdx, 0x527265695874527e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x574e64726f587570
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1409030506030214
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd0702100e0f1312
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2130d0702100e0f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x30b0512120c09
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4bf497
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x17]
movzx r9d, byte [rsp + rdi + 0x32]
mov byte [rsp + rdi + 0x32], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x17]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x1a
jl 0x4bf45f
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.004419a0
add rsp, 0x48
pop rbp
ret
call fcn.004506a0
jmp fcn.004bf3e0

Function at 0x4bfb20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bfbbd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8a676e99938db29d
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6cca5368
movabs rdx, 0x10303020a020b00
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0xb030407
xor eax, eax
jmp 0x4bfba0
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x24]
sub r8d, edx
add r8d, 0xffffffe6
movzx r9d, byte [rsp + rdi + 0x24]
mov byte [rsp + rdi + 0x24], r8b
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0xc
jl 0x4bfb64
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.004419a0
add rsp, 0x30
pop rbp
ret
nop dword [rax]
call fcn.004506a0
jmp fcn.004bfb20
Function at 0x4bfee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bffa5
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x82418e756b6f887b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x8b8e82418e756b6f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x57656d74926c716d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10900050b050d0c
mov qword [rsp + 0x18], rdx
movabs rdx, 0x90108090a070109
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xa0b0d020e05020d
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4bff88
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1f]
movzx r9d, byte [rsp + rdi + 0x2e]
mov byte [rsp + rdi + 0x2e], r8b
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1f]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x16
jl 0x4bff50
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.004419a0
add rsp, 0x40
pop rbp
ret
call fcn.004506a0
jmp fcn.004bfee0

Function at 0x4c0860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0916
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5580e702456fd455
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xf7787e796f5580e7
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60a020508070807
mov qword [rsp + 0x19], rdx
movabs rdx, 0xa04060a02050807
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc01010a00010605
mov qword [rsp + 0x23], rdx
xor eax, eax
nop
jmp 0x4c08f9
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2b]
sub r8d, edx
add r8d, 0xffffff8b
movzx r9d, byte [rsp + rdi + 0x2b]
mov byte [rsp + rdi + 0x2b], r8b
sub r9d, edx
lea edx, [r9 - 0x75]
mov byte [rsp + rsi + 0x2b], dl
add rax, 2
cmp rax, 0x12
jl 0x4c08c2
xor eax, eax
lea rbx, [rsp + 0x2b]
mov ecx, 0xd
call fcn.004419a0
add rsp, 0x38
pop rbp
ret
call fcn.004506a0
nop dword [rax + rax]
jmp fcn.004c0860

Function at 0x4c0b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0c3d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xca724e750712083f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9ec14ed6f102d52
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30f0a000908010c
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe030f0f030d0701
mov qword [rsp + 0x20], rdx
movabs rdx, 0x300010c020705
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4c0c20
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x30]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x19]
movzx r9d, byte [rsp + rdi + 0x30]
mov byte [rsp + rdi + 0x30], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x19]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x18
jl 0x4c0be2
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.004419a0
add rsp, 0x40
pop rbp
ret
nop dword [rax]
call fcn.004506a0
jmp fcn.004c0b80
Function at 0x4c2b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2c2b
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5c70dfe5ea743b47
mov qword [rsp + 0x29], rdx
movabs rdx, 0x6953dd4958724a5c
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd010d0a0107030e
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc05080c07030a04
mov qword [rsp + 0x21], rdx
xor eax, eax
jmp 0x4c2c0a
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x29]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x78]
movzx r9d, byte [rsp + rdi + 0x29]
mov byte [rsp + rdi + 0x29], r8b
lea edx, [r9 + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + rsi + 0x29], dl
add rax, 2
cmp rax, 0x10
jl 0x4c2bd2
xor eax, eax
lea rbx, [rsp + 0x29]
mov ecx, 0xf
nop dword [rax]
call fcn.004419a0
add rsp, 0x38
pop rbp
ret
call fcn.004506a0
jmp fcn.004c2b80

Function at 0x4c2fe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c306f
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6f185d17556e611a
mov qword [rsp + 0x28], rdx
movabs rdx, 0x400040303030500
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x406
xor eax, eax
jmp 0x4c3052
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x28]
sub r8d, edx
add r8d, 0x57
movzx r9d, byte [rsp + rdi + 0x28]
mov byte [rsp + rdi + 0x28], r8b
sub r9d, edx
lea edx, [r9 + 0x57]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jl 0x4c301b
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.004419a0
add rsp, 0x30
pop rbp
ret
call fcn.004506a0
jmp fcn.004c2fe0

Function at 0x4c3a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3adf
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc20307b7386572af
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xe365afc2
movabs rdx, 0x8000a0a05000803
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa00000604070800
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4c3ac2
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
movzx r8d, byte [rsp + rsi + 0x2d]
sub r8d, edx
add r8d, 0xffffffbd
movzx r9d, byte [rsp + rdi + 0x2d]
mov byte [rsp + rdi + 0x2d], r8b
sub r9d, edx
lea edx, [r9 - 0x43]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jl 0x4c3a8b
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.004419a0
add rsp, 0x38
pop rbp
ret
nop
call fcn.004506a0
jmp fcn.004c3a40