joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b3360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b344d
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xe469f92b657664ee
mov qword [rsp + 0x19], rdx
movabs rdx, 0x846fe572e62034e4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x508040c0e0a0e0e
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4080a00070e0007
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b33d5
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x53]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x53]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4b340c
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x4b343f
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b3433
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4b33b8
jmp 0x4b3427
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.00457f40
mov eax, edi
mov ecx, 0xf
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004b3360

Function at 0x4b3460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b35b8
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x63537349582c4701
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6e20791e671b614e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x577070306220741d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x205d62202d384272
mov qword [rsp + 0x32], rdx
movabs rdx, 0x7061383951105770
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xa231b2524190122
mov qword [rsp + 0x42], rdx
movabs rdx, 0x21230c2118271b14
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x24100801022123
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7242503081e0b26
mov qword [rsp + 0x58], rdx
movabs rdx, 0x3230c1303040617
mov qword [rsp + 0x60], rdx
movabs rdx, 0x19082708191a021e
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x4b3540
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x4b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x4b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop
cmp rax, 0x2e
jge 0x4b3577
movzx edx, byte [rsp + rax + 0x42]
lea rsi, [rax + 1]
cmp rsi, 0x2e
jae 0x4b35aa
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x4b359e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x28
jb 0x4b3522
jmp 0x4b3592
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x28
call fcn.00446000
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x28
call fcn.00457f40
mov eax, edi
mov ecx, 0x28
call fcn.00457f40
mov rax, rsi
mov ecx, 0x2e
call fcn.00457f40
nop
call fcn.00455860
nop dword [rax]
jmp fcn.004b3460
Function at 0x4b3a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b3b53
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x656cf8130e532315
mov qword [rsp + 0x19], rdx
movabs rdx, 0x374843656cf8130e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7201327056725c44
mov qword [rsp + 0x24], rdx
movabs rdx, 0x409040003110c0e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x108090004090400
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa11050810090b02
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b3ad0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xb]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4b3b0d
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
nop
cmp rsi, 0x14
jae 0x4b3b45
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b3b34
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xb]
cmp rsi, 0x13
jb 0x4b3ab6
jmp 0x4b3b28
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457f40
mov eax, edi
mov ecx, 0x13
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x14
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004b3a40

Function at 0x4b4a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4b0b
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6f460ffd2e3b70ed
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd56f460ffd2e3b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6656c4541216159
mov qword [rsp + 0x28], rdx
movabs rdx, 0x900041109090404
mov qword [rsp + 0x30], rdx
movabs rdx, 0x609040406080302
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa050e060c0d050c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b4a93
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x40]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x40]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x4b4aca
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x18
jae 0x4b4afd
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b4af1
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4b4a76
jmp 0x4b4ae5
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457f40
mov eax, edi
mov ecx, 0x12
call fcn.00457f40
mov rax, rsi
mov ecx, 0x18
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004b4a00
Function at 0x4b5320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5469
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x2672ff29e0b82e9f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x200918730f5c6326
mov qword [rsp + 0x22], rdx
movabs rdx, 0x24453f016e028f9b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8c2bf8a4d8b79a6f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1c1d0e1b0b10050a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x11e081f1d0d1a1a
mov qword [rsp + 0x42], rdx
movabs rdx, 0x80011000219011e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x190e0217110b0511
mov qword [rsp + 0x50], rdx
movabs rdx, 0x160b140805121707
mov qword [rsp + 0x58], rdx
movabs rdx, 0x40e051115000308
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4b53ef
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x71]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x71]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x2e
jge 0x4b5428
movzx edx, byte [rsp + rax + 0x3a]
lea rsi, [rax + 1]
nop
cmp rsi, 0x2e
jae 0x4b545b
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4b544f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x20
jb 0x4b53d2
jmp 0x4b5443
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x20
call fcn.00446000
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
call fcn.00457f40
mov eax, edi
mov ecx, 0x20
call fcn.00457f40
mov rax, rsi
mov ecx, 0x2e
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004b5320
Function at 0x4ba700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba7ff
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x796e61f6948b6f3a
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd39791036c22796e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x30d000a0c040b03
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa08030d000a0c04
mov qword [rsp + 0x28], rdx
movabs rdx, 0x302040b030a0203
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ba784
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x12
jge 0x4ba7bb
movzx edx, byte [rsp + rax + 0x26]
lea rsi, [rax + 1]
cmp rsi, 0x12
jae 0x4ba7f1
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ba7e5
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4ba767
jmp 0x4ba7d6
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0xe
call fcn.00457f40
mov rax, rsi
mov ecx, 0x12
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004ba700

Function at 0x4bab80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bacb8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x8449d77a83b92d6e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6aaf736145a1709e
mov qword [rsp + 0x21], rdx
movabs rdx, 0x617a7393726aaf73
mov qword [rsp + 0x26], rdx
movabs rdx, 0x658762616c989b2e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x208040f02010d09
mov qword [rsp + 0x36], rdx
movabs rdx, 0x4070208040f0201
mov qword [rsp + 0x38], rdx
movabs rdx, 0x170e040a13150a05
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11011b171617030e
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb02151105160415
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4bac40
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 4]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 4]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x22
jge 0x4bac77
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
cmp rsi, 0x22
jae 0x4bacaa
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4bac9e
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4bac23
jmp 0x4bac92
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00457f40
mov eax, edi
mov ecx, 0x1d
call fcn.00457f40
mov rax, rsi
mov ecx, 0x22
call fcn.00457f40
nop
call fcn.00455860
nop dword [rax]
jmp fcn.004bab80
Function at 0x4bc0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc1df
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x529e5cb8256a6fa2
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa6dadd74b2c6f11a
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc5eea6dadd74b2c6
mov qword [rsp + 0x24], rdx
movabs rdx, 0x655862ac6cdeab07
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb140609110d080d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x50309130b140609
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10020f04130e0003
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1607050a0e120e
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130b060905061802
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4bc160
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x4bc19c
movzx edx, byte [rsp + rax + 0x34]
lea rsi, [rax + 1]
cmp rsi, 0x24
jae 0x4bc1d1
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4bc1c5
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0x1a
jb 0x4bc143
jmp 0x4bc1b7
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00446000
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x1a
call fcn.00457f40
mov rax, rsi
mov ecx, 0x24
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004bc0a0
Function at 0x4bd700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd81f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xbcd5617073b80a0e
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa520ae5d656c76bc
mov qword [rsp + 0x26], rdx
movabs rdx, 0x17d3a7c2d4647608
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1008070f0e0b0c01
mov qword [rsp + 0x36], rdx
movabs rdx, 0x102000f120c1416
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xe000102000f120c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x15070f140e0613
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bd7a2
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x1a
jge 0x4bd7d9
movzx edx, byte [rsp + rax + 0x36]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x4bd811
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4bd805
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4bd785
jmp 0x4bd7f4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.00446000
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x17
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1a
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004bd700

Function at 0x4bf100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf20b
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x6f6e3265e86133cd
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x63f97220746f6e32
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6f95392bb665764c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x140d0b0300131411
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5011403121011
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50b101412140003
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bf193
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x4c]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x4c]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x4bf1ca
movzx edx, byte [rsp + rax + 0x30]
lea rsi, [rax + 1]
cmp rsi, 0x18
jae 0x4bf1fd
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4bf1f1
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4bf176
jmp 0x4bf1e5
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457f40
mov eax, edi
mov ecx, 0x15
call fcn.00457f40
mov rax, rsi
mov ecx, 0x18
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004bf100
Function at 0x4c1ea0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1fe9
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xf4f7fe40636f3470
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1936916ef1059654
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf711718a65791936
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x61658e636f062013
mov qword [rsp + 0x34], rdx
movabs rdx, 0x10e070b12131506
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x409140a05120e01
mov qword [rsp + 0x44], rdx
movabs rdx, 0x31d080d0409140a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x809181112041b11
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1b0401161d0f160d
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1b130f04181b0f03
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4c1f6f
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x75]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x75]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2c
jge 0x4c1fa8
movzx edx, byte [rsp + rax + 0x3c]
lea rsi, [rax + 1]
nop
cmp rsi, 0x2c
jae 0x4c1fdb
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4c1fcf
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4c1f52
jmp 0x4c1fc3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.00446000
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00457f40
mov eax, edi
mov ecx, 0x1e
call fcn.00457f40
mov rax, rsi
mov ecx, 0x2c
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004c1ea0

Function at 0x4c2680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c277f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x7fb7a69b3c6ac505
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x8d749d6d65806773
mov qword [rsp + 0x22], rdx
movabs rdx, 0x606010904000505
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x309010604060606
mov qword [rsp + 0x30], rdx
movabs rdx, 0x3070a0f0d010d01
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c2701
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x32]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x4c273d
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0x16
jae 0x4c2771
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4c2765
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x32]
cmp rsi, 0x10
jb 0x4c26e7
jmp 0x4c2758
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x10
call fcn.00457f40
mov rax, rsi
mov ecx, 0x16
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004c2680
Function at 0x4c3700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c37ff
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x20a40af3735a6fa9
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xff1aa76358197020
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6000209090a0409
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0d060c06000209
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0600050902060a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c3781
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4f]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x14
jge 0x4c37bd
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
cmp rsi, 0x14
jae 0x4c37f1
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c37e5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4f]
cmp rsi, 0xf
jb 0x4c3767
jmp 0x4c37d8
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0xf
call fcn.00457f40
mov rax, rsi
mov ecx, 0x14
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004c3700

Function at 0x4c3b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3c5f
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xd6c9fab0c444ffb6
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6970d6c9fab0c444
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x44cd4fa6caed6570
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0c110e0705020e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10c0f01110d0e00
mov qword [rsp + 0x36], rdx
movabs rdx, 0x20c010c0f01110d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30f100604050711
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c3be2
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x2e]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x2e]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1a
jge 0x4c3c19
movzx edx, byte [rsp + rax + 0x2e]
lea rsi, [rax + 1]
cmp rsi, 0x1a
jae 0x4c3c51
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c3c45
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x4c3bc5
jmp 0x4c3c34
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.00446000
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
nop dword [rax + rax]
call fcn.00457f40
mov eax, edi
mov ecx, 0x12
call fcn.00457f40
mov rax, rsi
mov ecx, 0x1a
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004c3b40
Function at 0x4c6820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6933
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xba655274700e728f
mov qword [rsp + 0x19], rdx
movabs rdx, 0xebf36dba65527470
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x747811db15dc4365
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf000f080d0a090a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa070f070f000f08
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80e09020000100f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c68b0
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x38]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4c68ed
movzx edx, byte [rsp + rax + 0x2c]
lea rsi, [rax + 1]
nop
cmp rsi, 0x14
jae 0x4c6925
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c6914
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x38]
cmp rsi, 0x13
jb 0x4c6896
jmp 0x4c6908
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457f40
mov eax, edi
mov ecx, 0x13
nop dword [rax + rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x14
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004c6820

Function at 0x4c6940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6a29
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x742c6e1717182147
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x64694e2b
movabs rdx, 0x608090304040103
mov qword [rsp + 0x28], rdx
movabs rdx, 0x202030202090903
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c69ae
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x50]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x50]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4c69e8
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
nop dword [rax]
cmp rsi, 0x10
jae 0x4c6a1b
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4c6a0f
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4c6991
jmp 0x4c6a03
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
call fcn.00457f40
mov eax, edi
mov ecx, 0xc
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004c6940
Function at 0x4c6e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6f73
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xc99165808b678eda
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xfe7845791ec99165
mov qword [rsp + 0x20], rdx
movabs rdx, 0x10108080c01080c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x403080600030708
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c6ef2
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4c6f2e
movzx edx, byte [rsp + rax + 0x28]
lea rsi, [rax + 1]
cmp rsi, 0x10
jae 0x4c6f65
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4c6f55
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 0xd
jb 0x4c6ed8
jmp 0x4c6f49
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00446000
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457f40
mov eax, edi
mov ecx, 0xd
nop dword [rax]
call fcn.00457f40
mov rax, rsi
mov ecx, 0x10
call fcn.00457f40
nop
call fcn.00455860
jmp fcn.004c6e80

Function at 0x4c6f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c707f
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x154852be0759654c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xf3b1e4b1e660737
mov qword [rsp + 0x22], rdx
movabs rdx, 0x506070207060609
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf0f030f050e0506
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb03080d000d0004
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c7001
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x17]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x16
jge 0x4c703d
movzx edx, byte [rsp + rax + 0x2a]
lea rsi, [rax + 1]
cmp rsi, 0x16
jae 0x4c7071
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4c7065
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x17]
cmp rsi, 0x10
jb 0x4c6fe7
jmp 0x4c7058
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.00446000
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
nop
call fcn.00457f40
mov eax, edi
mov ecx, 0x10
call fcn.00457f40
mov rax, rsi
mov ecx, 0x16
call fcn.00457f40
nop
nop
call fcn.00455860
jmp fcn.004c6f80