joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a3260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a331d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x94c692dfdb95469
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0x53
movabs rdx, 0x405010504010708
mov qword [rsp + 0x1b], rdx
mov dword [rsp + 0x23], 0x1020307
xor eax, eax
nop
jmp 0x4a32c0
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 + 0x74]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 + 0x74]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4a32ed
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4a3310
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4a32a2
jmp 0x4a3304
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456420
mov eax, edi
mov ecx, 9
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004a3260

Function at 0x4a4c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x4a4dd5
push rbp
mov rbp, rsp
sub rsp, 0x98
movabs rdx, 0xf1ec376501666565
mov qword [rsp + 0x5d], rdx
movabs rdx, 0xa96365b629cf65f1
mov qword [rsp + 0x65], rdx
movabs rdx, 0xc6902ea96365b629
mov qword [rsp + 0x68], rdx
movabs rdx, 0x765c17cf4f82f6c
mov qword [rsp + 0x70], rdx
movabs rdx, 0x8d3e1ec62076d7ef
mov qword [rsp + 0x78], rdx
movabs rdx, 0xdc5764fd6c867609
mov qword [rsp + 0x80], rdx
movabs rdx, 0xdf61ea68e1787477
mov qword [rsp + 0x88], rdx
movabs rdx, 0x9d6574f3a8dbf520
mov qword [rsp + 0x90], rdx
movabs rdx, 0x141a050f1d2b1129
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xf341432221a0b0b
mov qword [rsp + 0x27], rdx
movabs rdx, 0x2d21083611200f34
mov qword [rsp + 0x2d], rdx
movabs rdx, 0x151a181c092a35
mov qword [rsp + 0x35], rdx
movabs rdx, 0x1b3a2d0b121f0c17
mov qword [rsp + 0x3d], rdx
movabs rdx, 0x272b1d3216302e
mov qword [rsp + 0x45], rdx
movabs rdx, 0x15370a0a25061807
mov qword [rsp + 0x4d], rdx
movabs rdx, 0x327061c11160c23
mov qword [rsp + 0x55], rdx
xor eax, eax
jmp 0x4a4d74
movzx r9d, byte [rsp + rsi + 0x5d]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x5d], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x5d], dl
add rax, 2
cmp rax, 0x3e
jge 0x4a4da2
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3b
jae 0x4a4dc8
movzx r8d, byte [rsp + rdi + 0x5d]
sub r8d, edx
cmp rsi, 0x3b
jb 0x4a4d57
nop
jmp 0x4a4dbc
xor eax, eax
lea rbx, [rsp + 0x5d]
mov ecx, 0x3b
call fcn.00444780
add rsp, 0x98
pop rbp
ret
mov eax, esi
mov ecx, 0x3b
call fcn.00456420
mov eax, edi
mov ecx, 0x3b
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004a4c40
Function at 0x4a7d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7dec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x556e1a6f216d796b
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x63556e1a6f216d79
mov qword [rsp + 0x30], rdx
movabs rdx, 0x5b60706c76656e71
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5000d03030a0c03
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf01010507100500
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7000908080e0102
mov qword [rsp + 0x27], rdx
xor eax, eax
jmp 0x4a7d8a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x10]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4a7dbc
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a7ddf
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x10]
cmp rsi, 0x11
jb 0x4a7d70
jmp 0x4a7dd3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00456420
mov eax, edi
mov ecx, 0x11
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004a7d00

Function at 0x4aa0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa1ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1c2cb91413766e1c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x74c71c191c2cb914
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3407b61065b3201e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc03050913110608
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x41000100a030013
mov qword [rsp + 0x24], rdx
movabs rdx, 0x70a030904120e07
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4aa14a
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3d]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x18
jge 0x4aa17c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4aa19f
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3d]
cmp rsi, 0x14
jb 0x4aa130
jmp 0x4aa193
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456420
mov eax, edi
mov ecx, 0x14
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004aa0c0
Function at 0x4ac260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac36c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6461889320b38069
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x8285487e69967760
mov qword [rsp + 0x43], rdx
movabs rdx, 0x986c633cba828548
mov qword [rsp + 0x48], rdx
movabs rdx, 0x33702f8188aa8d9e
mov qword [rsp + 0x50], rdx
movabs rdx, 0xa040808160c1015
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xd01020d1714150e
mov qword [rsp + 0x23], rdx
movabs rdx, 0x141911020e1a1811
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1c02170f0f040501
mov qword [rsp + 0x33], rdx
xor eax, eax
jmp 0x4ac308
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x20
jge 0x4ac33c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x4ac35f
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x1d
jb 0x4ac2ee
jmp 0x4ac353
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00456420
mov eax, edi
mov ecx, 0x1d
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004ac260

Function at 0x4ad3e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad4cc
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6567ce20b36c78b2
mov qword [rsp + 0x35], rdx
movabs rdx, 0x6e11736567ce20b3
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa4b0c6b36574c6c4
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb0c110505060d01
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x10f010309010b0c
mov qword [rsp + 0x25], rdx
movabs rdx, 0x120c091110090f
mov qword [rsp + 0x2d], rdx
xor eax, eax
jmp 0x4ad46a
movzx r9d, byte [rsp + rsi + 0x35]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x35], dl
mov byte [rsp + rsi + 0x35], r8b
add rax, 2
cmp rax, 0x16
jge 0x4ad49c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4ad4bf
movzx r8d, byte [rsp + rdi + 0x35]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
cmp rsi, 0x13
jb 0x4ad450
jmp 0x4ad4b3
xor eax, eax
lea rbx, [rsp + 0x35]
mov ecx, 0x13
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00456420
mov eax, edi
mov ecx, 0x13
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004ad3e0
Function at 0x4b7ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b7d67
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9c206e91bc9d72ec
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0xf0beed9c
movabs rdx, 0x9000a0003040804
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x400020709030a04
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4b7d08
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0x1c]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0x1c]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0x10
jge 0x4b7d37
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4b7d5a
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b7ceb
jmp 0x4b7d4e
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456420
mov eax, edi
mov ecx, 0xb
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004b7ca0

Function at 0x4bad00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bae1d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x726c6d205b6c6647
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x671c617459517224
mov qword [rsp + 0x44], rdx
movabs rdx, 0x62207269671c6174
mov qword [rsp + 0x48], rdx
movabs rdx, 0x657476746b6a3581
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7190e110a0d0d15
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa0007190e110a0d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x60b0115000b030a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1711140e16110515
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1915080f00030d06
mov qword [rsp + 0x34], rdx
xor eax, eax
jmp 0x4badc0
movzx r9d, byte [rsp + rsi + 0x3c]
sub r9d, edx
lea edx, [r9 + 0x21]
mov byte [rsp + rdi + 0x3c], dl
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x3c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4baded
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4bae10
movzx r8d, byte [rsp + rdi + 0x3c]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4bad9d
jmp 0x4bae04
xor eax, eax
lea rbx, [rsp + 0x3c]
mov ecx, 0x1c
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00456420
mov eax, edi
mov ecx, 0x1c
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004bad00
Function at 0x4bb500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb5c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xaf77cc6c6f146ec1
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0xcc2dbec6
movabs rdx, 0x805050a00090307
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb0b060707020707
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4bb568
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 - 0x4a]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 - 0x4a]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0x10
jge 0x4bb597
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4bb5ba
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4bb54b
jmp 0x4bb5ae
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456420
mov eax, edi
mov ecx, 0xc
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004bb500

Function at 0x4bb5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb6db
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5e365e6620635861
mov qword [rsp + 0x34], rdx
movabs rdx, 0x616953295e365e66
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5b5854562366616a
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd020b1110111202
mov qword [rsp + 0x18], rdx
movabs rdx, 0x50c05000d0f080f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf101306050c0500
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf070109000b1307
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4bb679
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x12]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4bb6ab
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4bb6ce
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x12]
cmp rsi, 0x14
jb 0x4bb65f
jmp 0x4bb6c2
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456420
mov eax, edi
mov ecx, 0x14
call fcn.00456420
nop
nop dword [rax + rax]
call fcn.00454140
jmp fcn.004bb5e0
Function at 0x4bd480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd588
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7461636957827164
mov qword [rsp + 0x34], rdx
movabs rdx, 0x526864787c6e8e69
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x8073786c52686478
mov qword [rsp + 0x40], rdx
movabs rdx, 0x64503927757d6572
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf0e1a1a05031902
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1610180f1902110b
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb0f13091610180f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x131905011002180c
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4bd52b
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x19]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x19]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x1c
jge 0x4bd558
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4bd57b
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4bd50e
jmp 0x4bd56f
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x1c
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00456420
mov eax, edi
mov ecx, 0x1c
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004bd480

Function at 0x4bdee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bdfbd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x7357bb6f1c666fba
mov qword [rsp + 0x30], rdx
movabs rdx, 0x11b76fc0206f74b8
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8070e0f0600020c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5020c08070e0f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc020c0e03050c03
mov qword [rsp + 0x28], rdx
xor eax, eax
nop
jmp 0x4bdf60
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4bdf8d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4bdfb0
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x4bdf42
jmp 0x4bdfa4
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00456420
mov eax, edi
mov ecx, 0x10
call fcn.00456420
nop
nop dword [rax]
call fcn.00454140
jmp fcn.004bdee0
Function at 0x4bf760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf898
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0xb6258573c3617258
mov qword [rsp + 0x49], rdx
movabs rdx, 0xc9d86a6e65f430b6
mov qword [rsp + 0x50], rdx
movabs rdx, 0x8edf2ff428746e2c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x63d279cd61998df5
mov qword [rsp + 0x60], rdx
movabs rdx, 0x6499bd8cb96ea2c6
mov qword [rsp + 0x68], rdx
movabs rdx, 0x140d1b0c000e0e0c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x324131d15180512
mov qword [rsp + 0x25], rdx
movabs rdx, 0x1f2006080324131d
mov qword [rsp + 0x29], rdx
movabs rdx, 0xf0622071b071925
mov qword [rsp + 0x31], rdx
movabs rdx, 0x1309221d0d06170e
mov qword [rsp + 0x39], rdx
movabs rdx, 0xe13050820172316
mov qword [rsp + 0x41], rdx
xor eax, eax
jmp 0x4bf835
movzx r9d, byte [rsp + rsi + 0x49]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7c]
mov byte [rsp + rdi + 0x49], dl
mov byte [rsp + rsi + 0x49], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4bf868
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x27
jae 0x4bf88b
movzx r8d, byte [rsp + rdi + 0x49]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7c]
nop
cmp rsi, 0x27
jb 0x4bf81b
jmp 0x4bf87f
xor eax, eax
lea rbx, [rsp + 0x49]
mov ecx, 0x27
call fcn.00444780
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x27
call fcn.00456420
mov eax, edi
mov ecx, 0x27
call fcn.00456420
nop
call fcn.00454140
nop dword [rax]
jmp fcn.004bf760

Function at 0x4bf8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf992
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xd1064031920075f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x110b6f9d690e0d10
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4080809000c0000
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd060d0a070c0103
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4bf92c
movzx r9d, byte [rsp + rsi + 0x2a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x50]
mov byte [rsp + rdi + 0x2a], dl
mov byte [rsp + rsi + 0x2a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4bf95e
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4bf985
movzx r8d, byte [rsp + rdi + 0x2a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x50]
cmp rsi, 0xe
jb 0x4bf912
jmp 0x4bf975
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
nop dword [rax]
call fcn.00456420
mov eax, edi
mov ecx, 0xe
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004bf8c0
Function at 0x4c1120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1258
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x6ec4739eb61a4952
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x2061b2746ec4739e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x65964f3e7272ab63
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc7df0fae49739119
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2bd12011f5ef58b6
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1200041f1f110119
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x231a04021517021a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1906201d22081222
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x314020d21111022
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1011061b201e181d
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1e1c1a0309012201
mov qword [rsp + 0x44], rdx
xor eax, eax
jmp 0x4c11f8
movzx r9d, byte [rsp + rsi + 0x4c]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x4c], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x4c], dl
add rax, 2
cmp rax, 0x30
jge 0x4c1228
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x4c124b
movzx r8d, byte [rsp + rdi + 0x4c]
sub r8d, edx
nop dword [rax]
cmp rsi, 0x24
jb 0x4c11db
jmp 0x4c123f
xor eax, eax
lea rbx, [rsp + 0x4c]
mov ecx, 0x24
call fcn.00444780
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00456420
mov eax, edi
mov ecx, 0x24
call fcn.00456420
nop
call fcn.00454140
nop dword [rax]
jmp fcn.004c1120

Function at 0x4c1280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c13c7
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0xd207864e56e6163
mov qword [rsp + 0x53], rdx
movabs rdx, 0x61cd1205b60d2078
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd7a565ecb7141894
mov qword [rsp + 0x60], rdx
movabs rdx, 0x23247261cbfce96c
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2fbfd4e78ad769ed
mov qword [rsp + 0x70], rdx
movabs rdx, 0x160e070d0f200918
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x14170f230a05160e
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1c05210a040e1122
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x81d220d10091821
mov qword [rsp + 0x33], rdx
movabs rdx, 0x240316080e231713
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xb1b140a1f050b16
mov qword [rsp + 0x43], rdx
movabs rdx, 0x1c0b2320030b1003
mov qword [rsp + 0x4b], rdx
xor eax, eax
jmp 0x4c1367
movzx r9d, byte [rsp + rsi + 0x53]
sub r9d, edx
lea edx, [r9 - 0x21]
mov byte [rsp + rdi + 0x53], dl
lea edx, [r8 - 0x21]
mov byte [rsp + rsi + 0x53], dl
add rax, 2
cmp rax, 0x36
jge 0x4c1397
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x4c13ba
movzx r8d, byte [rsp + rdi + 0x53]
sub r8d, edx
cmp rsi, 0x25
jb 0x4c134a
jmp 0x4c13ae
xor eax, eax
lea rbx, [rsp + 0x53]
mov ecx, 0x25
call fcn.00444780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00456420
mov eax, edi
mov ecx, 0x25
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004c1280
Function at 0x4c4060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c4187
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x75493f9a589fd5c1
mov qword [rsp + 0x43], rdx
movabs rdx, 0x6f5ab1f31a87b4af
mov qword [rsp + 0x4b], rdx
movabs rdx, 0xe01c73ab5d6f5ab1
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7767bb39b86961f1
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1110a0502141904
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1111040c081b020e
mov qword [rsp + 0x21], rdx
movabs rdx, 0x151111040c081b
mov qword [rsp + 0x23], rdx
movabs rdx, 0x10180d19100a0000
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x8071a0c0b040d04
mov qword [rsp + 0x33], rdx
movabs rdx, 0x9071c040a1c1c13
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x4c4129
movzx r9d, byte [rsp + rsi + 0x43]
sub r9d, edx
lea edx, [r9 - 0x26]
mov byte [rsp + rdi + 0x43], dl
lea edx, [r8 - 0x26]
mov byte [rsp + rsi + 0x43], dl
add rax, 2
cmp rax, 0x2a
jge 0x4c4157
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x4c417a
movzx r8d, byte [rsp + rdi + 0x43]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4c410c
jmp 0x4c416e
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.00444780
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00456420
mov eax, edi
mov ecx, 0x1d
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004c4060

Function at 0x4c5080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5188
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6566e16662c46fd8
mov qword [rsp + 0x37], rdx
movabs rdx, 0xdab5636187d8cc7a
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x9cdab5636187d8cc
mov qword [rsp + 0x40], rdx
movabs rdx, 0x43b76294ca4bd5d1
mov qword [rsp + 0x48], rdx
movabs rdx, 0x17181017130e0b02
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x9080511130f0204
mov qword [rsp + 0x23], rdx
movabs rdx, 0x215170409080511
mov qword [rsp + 0x27], rdx
movabs rdx, 0xe1214180a150f
mov qword [rsp + 0x2f], rdx
xor eax, eax
jmp 0x4c512b
movzx r9d, byte [rsp + rsi + 0x37]
sub r9d, edx
lea edx, [r9 - 0x4b]
mov byte [rsp + rdi + 0x37], dl
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x37], dl
add rax, 2
cmp rax, 0x1c
jge 0x4c5158
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4c517b
movzx r8d, byte [rsp + rdi + 0x37]
sub r8d, edx
cmp rsi, 0x19
jb 0x4c510e
jmp 0x4c516f
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x19
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00456420
mov eax, edi
mov ecx, 0x19
call fcn.00456420
nop
call fcn.00454140
jmp fcn.004c5080