joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c1c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1ceb
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xdb05faa3d3986547
mov qword [rsp + 0x18], rdx
movabs rdx, 0x57656d65c9af809e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8040b05030a0c06
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50b0c0206050b0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x309030b0a020702
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c1c84
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x18
jge 0x4c1cb7
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4c1cde
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4c1c67
jmp 0x4c1cd2
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453440
mov eax, edi
mov ecx, 0x10
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c1c00

Function at 0x4c26a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2796
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x13fe06781bf26547
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf82213fe06781bf2
mov qword [rsp + 0x20], rdx
movabs rdx, 0x53732df088265065
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc02070e0c0f0d0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20e061103050603
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc080708030c0903
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c2733
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x44]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x44]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x18
jge 0x4c2762
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c2789
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4c2716
nop
jmp 0x4c277d
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x12
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00453440
mov eax, edi
mov ecx, 0x12
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004c26a0
Function at 0x4c3b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3bfc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x75a486747e786a47
mov qword [rsp + 0x19], rdx
movabs rdx, 0x747f667649a17575
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0b0703010e0607
mov qword [rsp + 0x28], rdx
movabs rdx, 0x502010d01030905
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c3b95
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 2]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 2]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4c3bc8
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c3bef
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xf
jb 0x4c3b78
jmp 0x4c3be3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xf
call fcn.00453440
mov eax, edi
mov ecx, 0xf
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004c3b20

Function at 0x4c3c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3cf2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x2631640126431d3b
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x3e6cf50b
movabs rdx, 0x303090b00010b04
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb07020208060303
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c3c8b
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x27]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4c3cbd
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4c3ce5
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x27]
cmp rsi, 0xc
jb 0x4c3c71
jmp 0x4c3cd8
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00453440
mov eax, edi
mov ecx, 0xc
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c3c20
Function at 0x4c4680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c4752
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x47261d65564e3e51
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x1639
movabs rdx, 0x807050809080100
mov qword [rsp + 0x22], rdx
movabs rdx, 0x909050200060807
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4c46ea
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x13]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4c471c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4c4745
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x13]
cmp rsi, 0xa
jb 0x4c46d0
jmp 0x4c4737
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop
call fcn.00453440
mov eax, edi
mov ecx, 0xa
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c4680

Function at 0x4c4760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c48a6
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x50b16169744ffc49
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x9150b16169744ffc
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf17454736b2d50e7
mov qword [rsp + 0x24], rdx
movabs rdx, 0xfd72d8df5c66cbee
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xbbea698d5cc99e62
mov qword [rsp + 0x34], rdx
movabs rdx, 0x62016090b021b07
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1b0c130d0820121c
mov qword [rsp + 0x44], rdx
movabs rdx, 0x8121a201b0c130d
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf101214061d0702
mov qword [rsp + 0x50], rdx
movabs rdx, 0x62002101b010d12
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1f130b181511141d
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x4c4840
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x2c
jge 0x4c486d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x21
jae 0x4c4894
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x21
jb 0x4c4822
jmp 0x4c4888
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x21
call fcn.004418e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x21
call fcn.00453440
mov eax, edi
mov ecx, 0x21
nop dword [rax + rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c4760
Function at 0x4c5a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5b3c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x339fc965a4bf8150
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x57c313afadc1339f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x8010b0c09060903
mov qword [rsp + 0x28], rdx
movabs rdx, 0x202050c0a0a0206
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c5ad5
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4c5b08
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c5b2f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x4c5ab8
jmp 0x4c5b23
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00453440
mov eax, edi
mov ecx, 0xe
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004c5a60

Function at 0x4c6060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6132
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xcdd57e2ddeafa953
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x65c51346
movabs rdx, 0x605070704060203
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90a010609060605
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c60cb
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4c60fd
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4c6125
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6b]
cmp rsi, 0xc
jb 0x4c60b1
jmp 0x4c6118
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00453440
mov eax, edi
mov ecx, 0xc
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c6060
Function at 0x4c6b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6c5c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xdcafedc9464ed653
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x65f169dcafedc946
mov qword [rsp + 0x22], rdx
movabs rdx, 0x107070201040106
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x704090509020107
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c6bf5
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4c6c28
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c6c4f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x4c6bd8
jmp 0x4c6c43
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453440
mov eax, edi
mov ecx, 0xb
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004c6b80

Function at 0x4c7260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c733c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4c6c61a6b7f96997
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6b3e7e4c6c61a6b7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x304040902040909
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8090403030304
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c72d2
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4c7308
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c732f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
nop dword [rax]
cmp rsi, 0xb
jb 0x4c72b8
jmp 0x4c7323
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453440
mov eax, edi
mov ecx, 0xb
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004c7260
Function at 0x4c7560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7668
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xc2abc59a7f9894f7
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x9aa377c2abc59a7f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x74cc8e8dd4a3996c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60501110e0e000f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6070a020f0d0408
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10906070a020f0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3100e0e060c0d01
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c7600
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x45]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4c7632
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c765b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x45]
cmp rsi, 0x13
jb 0x4c75e5
jmp 0x4c764f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453440
mov eax, edi
mov ecx, 0x13
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c7560

Function at 0x4c7a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7b36
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xa0e1d1630b74656e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd9d4bb74a0e1d163
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7372eeea7f6ba4b5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3000f0b070c090a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0900110a0f0506
mov qword [rsp + 0x38], rdx
movabs rdx, 0x51110110700060d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c7ad3
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x24]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x24]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x18
jge 0x4c7b02
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c7b29
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x14
jb 0x4c7ab6
nop
jmp 0x4c7b1d
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00453440
mov eax, edi
mov ecx, 0x14
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004c7a40
Function at 0x4c8520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8616
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x8478848c47827471
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6f5aa27e77568478
mov qword [rsp + 0x38], rdx
movabs rdx, 0x737289b26d754e84
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120a130b000c0a0e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x131106090a09120a
mov qword [rsp + 0x22], rdx
movabs rdx, 0x507061204110e02
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4c85b3
movzx r9d, byte [rsp + rsi + 0x32]
sub r9d, edx
lea edx, [r9 + 6]
mov byte [rsp + rdi + 0x32], dl
lea edx, [r8 + 6]
mov byte [rsp + rsi + 0x32], dl
add rax, 2
cmp rax, 0x16
jge 0x4c85e2
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4c8609
movzx r8d, byte [rsp + rdi + 0x32]
sub r8d, edx
cmp rsi, 0x16
jb 0x4c8596
nop
jmp 0x4c85fd
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x16
call fcn.00453440
mov eax, edi
mov ecx, 0x16
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004c8520

Function at 0x4c9000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c90d2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xdd7264de94fe47aa
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xbca466b4
movabs rdx, 0x801020100040201
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0b030000070801
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c906e
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4c909b
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4c90c5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4c9051
jmp 0x4c90b6
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop dword [rax]
call fcn.00453440
mov eax, edi
mov ecx, 0xc
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c9000
Function at 0x4c94a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c957c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x5b587e4a49735364
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6d6f725b587e4a49
mov qword [rsp + 0x22], rdx
movabs rdx, 0x703070002020200
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x605040206030703
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c9515
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4c9548
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c956f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xb
jb 0x4c94f8
jmp 0x4c9563
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00453440
mov eax, edi
mov ecx, 0xb
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004c94a0

Function at 0x4c95a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9672
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xd41a9c6b53222d18
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x7075
movabs rdx, 0x705020607040605
mov qword [rsp + 0x22], rdx
movabs rdx, 0x104050007040705
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4c960d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x58]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x58]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4c963a
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4c9665
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4c95f0
jmp 0x4c9655
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00453440
mov eax, edi
mov ecx, 0xa
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004c95a0
Function at 0x4c9da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9e7c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x627672c793c099d7
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x91898ce884627672
mov qword [rsp + 0x20], rdx
movabs rdx, 0x90a0c0b0a000402
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40308020901080a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c9e15
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x19]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x19]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x4c9e48
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4c9e6f
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xd
jb 0x4c9df8
jmp 0x4c9e63
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00453440
mov eax, edi
mov ecx, 0xd
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004c9da0
Function at 0x4d8500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d85cb
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x2b25c0656e72e46b
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6ccc85f1
movabs rdx, 0x706090805050701
mov qword [rsp + 0x18], rdx
mov dword [rsp + 0x20], 0xa010907
xor eax, eax
jmp 0x4d8567
movzx r9d, byte [rsp + rsi + 0x24]
sub r9d, edx
lea edx, [r9 - 0x52]
mov byte [rsp + rdi + 0x24], dl
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x24], dl
add rax, 2
cmp rax, 0xc
jge 0x4d8597
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xc
jae 0x4d85be
movzx r8d, byte [rsp + rdi + 0x24]
sub r8d, edx
cmp rsi, 0xc
jb 0x4d854a
jmp 0x4d85b2
xor eax, eax
lea rbx, [rsp + 0x24]
mov ecx, 0xc
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xc
call fcn.00453440
mov eax, edi
mov ecx, 0xc
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004d8500

Function at 0x4d9d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9e48
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x79f7057314b368a3
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x600020305000603
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 6
xor eax, eax
nop
jmp 0x4d9de0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4d9e12
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4d9e3b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 8
jb 0x4d9dc2
jmp 0x4d9e2f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 8
call fcn.00453440
mov eax, edi
mov ecx, 8
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004d9d80

Function at 0x4d9e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d9f2b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x9c2d357c1f1f1c1d
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x72
movabs rdx, 0x100010304030107
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3050602
xor eax, eax
jmp 0x4d9ec4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x4f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x4f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x4d9ef7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x4d9f1e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4d9ea7
jmp 0x4d9f12
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00453440
mov eax, edi
mov ecx, 9
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004d9e60