joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b8880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b898c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x9763c6756f33f7aa
mov qword [rsp + 0x19], rdx
movabs rdx, 0x94a6e7b238976420
mov qword [rsp + 0x21], rdx
movabs rdx, 0x8c94a6e7b2389764
mov qword [rsp + 0x22], rdx
movabs rdx, 0xad1798a9ab766176
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x11110b0c0e170d01
mov qword [rsp + 0x32], rdx
movabs rdx, 0x21402020c000e18
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xf10140501180214
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1515000d0716140a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b8928
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5c]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4b895c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x19
jae 0x4b897f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5c]
cmp rsi, 0x19
jb 0x4b890e
jmp 0x4b8973
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x19
call fcn.0044c4e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004617c0
mov eax, edi
mov ecx, 0x19
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004b8880

Function at 0x4b9fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba09d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb277fc746ed2177c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb9c6b277fc746ed2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x643c466f14657233
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60700000a010005
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x8090a0d0d0d0d0d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x100f08090a0d0d0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10f1002050f070f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ba040
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x45]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x45]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4ba06d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4ba090
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x4ba01f
jmp 0x4ba084
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004617c0
mov eax, edi
mov ecx, 0x12
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.004b9fa0
Function at 0x4bf300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf3b2
push rbp
mov rbp, rsp
sub rsp, 0x28
movabs rdx, 0x6564286e6e606f74
mov qword [rsp + 0x20], rdx
movabs rdx, 0x502000301030002
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4bf351
movzx r9d, byte [rsp + rsi + 0x20]
sub r9d, edx
lea edx, [r9 + 5]
mov byte [rsp + rdi + 0x20], dl
lea edx, [r8 + 5]
mov byte [rsp + rsi + 0x20], dl
add rax, 2
cmp rax, 8
jge 0x4bf37e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4bf3a5
movzx r8d, byte [rsp + rdi + 0x20]
sub r8d, edx
cmp rsi, 8
jb 0x4bf334
jmp 0x4bf395
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.0044c4e0
add rsp, 0x28
pop rbp
ret
mov eax, esi
mov ecx, 8
nop dword [rax]
call fcn.004617c0
mov eax, edi
mov ecx, 8
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004bf300

Function at 0x4c0ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0c9d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x656389827320261e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6f6e74a3656c2065
mov qword [rsp + 0x24], rdx
movabs rdx, 0x5070608a709d6f6e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd161514140410
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1612110001101400
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1305151516121100
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1120b1200120516
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c0c40
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x15]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x15]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4c0c6d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c0c90
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x4c0c1f
jmp 0x4c0c84
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.0044c4e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.004617c0
mov eax, edi
mov ecx, 0x17
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.004c0ba0
Function at 0x4c0de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0eca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x34ce65313512cbc0
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x20d96f34ce653135
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6d616531350b20c4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb070602040b0102
mov qword [rsp + 0x32], rdx
movabs rdx, 0xf0b00010e0d0b07
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0b0d090b030e03
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c0e6d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4c0e9a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c0ebd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4c0e50
jmp 0x4c0eb1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004617c0
mov eax, edi
mov ecx, 0x13
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004c0de0

Function at 0x4c1000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c10ec
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xa564889e938afaa7
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x209cca90a1a56488
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9e8b9869c2994372
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0b0f0701080004
mov qword [rsp + 0x32], rdx
movabs rdx, 0x10120b0308120a0b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9020e0508131214
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c108a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x40]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4c10bc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c10df
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x40]
cmp rsi, 0x15
jb 0x4c1070
jmp 0x4c10d3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004617c0
mov eax, edi
mov ecx, 0x15
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004c1000
Function at 0x4c1100
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1238
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x72af221ad4632edc
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x20cdc972af221ad4
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc5e332696f651619
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4320036f6e199469
mov qword [rsp + 0x32], rdx
movabs rdx, 0x89e9742f656e6edb
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x51f220609140404
mov qword [rsp + 0x42], rdx
movabs rdx, 0x100108121a1a2118
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x4001b0902151001
mov qword [rsp + 0x50], rdx
movabs rdx, 0x306041b15111a0c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1803060a120d0d18
mov qword [rsp + 0x60], rdx
movabs rdx, 0xb0308141122120c
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x4c11d5
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x2e
jge 0x4c1208
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x4c122b
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
nop
cmp rsi, 0x23
jb 0x4c11bb
jmp 0x4c121f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x23
call fcn.0044c4e0
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x23
call fcn.004617c0
mov eax, edi
mov ecx, 0x23
call fcn.004617c0
nop
call fcn.0045f540
nop dword [rax]
jmp fcn.004c1100

Function at 0x4c3700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c37cc
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x90b96e656b6f7220
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf7acfc90b96e656b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x609070a0a000600
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x9070a08
xor eax, eax
jmp 0x4c3765
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x5f]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4c379c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4c37bf
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x5f]
cmp rsi, 0xb
jb 0x4c374b
jmp 0x4c37b3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044c4e0
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004617c0
mov eax, edi
mov ecx, 0xb
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004c3700
Function at 0x4c41c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c42dd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x61b81a40fd6d4244
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4d6cedf16572486c
mov qword [rsp + 0x25], rdx
movabs rdx, 0x380bf36a3c4d6ced
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1567072ffa0966ed
mov qword [rsp + 0x32], rdx
movabs rdx, 0x113061909120c06
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xd030c1405140113
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30d101501040f18
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd030f00171c171c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x171a0f1119061700
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c4280
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4c42ad
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4c42d0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4c425d
jmp 0x4c42c4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.0044c4e0
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.004617c0
mov eax, edi
mov ecx, 0x1d
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.004c41c0

Function at 0x4c4300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c43ea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6141ec742a316572
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x73531f7220646141
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1c0f42e9fb0301b6
mov qword [rsp + 0x28], rdx
movabs rdx, 0x15141512030f0b09
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc12020503130e05
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1510100602150611
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c438d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x47]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x47]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x18
jge 0x4c43ba
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4c43dd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4c4370
jmp 0x4c43d1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004617c0
mov eax, edi
mov ecx, 0x16
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004c4300
Function at 0x4c4400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c44dd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x61d88ca7656a96c1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xbb89cd6dc6722073
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf0504070d000f00
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb0e0f0504070d00
mov qword [rsp + 0x30], rdx
movabs rdx, 0x7010e0007040604
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c4480
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x17]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x17]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4c44ad
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4c44d0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4c4462
jmp 0x4c44c4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004617c0
mov eax, edi
mov ecx, 0x10
call fcn.004617c0
nop
nop dword [rax]
call fcn.0045f540
jmp fcn.004c4400

Function at 0x4c4e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4c4ff2
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x7363746f7be42a17
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6f051b5c2a645f81
mov qword [rsp + 0x23], rdx
movabs rdx, 0x62541d6b5f6f051b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x51598f8acf70735d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x79076e691470346e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6e56284b67384752
mov qword [rsp + 0x40], rdx
movabs rdx, 0x250d081924001e1a
mov qword [rsp + 0x48], rdx
movabs rdx, 0x3021c0f280b11
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2923121a20061826
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1c27122925001808
mov qword [rsp + 0x60], rdx
movabs rdx, 0x230f0d0f092b1000
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1a0b1d192610151e
mov qword [rsp + 0x70], rdx
movabs rdx, 0x130324121b0e0c02
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2901102a27241214
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x4c4f8d
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x40
jge 0x4c4fbf
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4c4fe5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2c]
cmp rsi, 0x2d
jb 0x4c4f73
jmp 0x4c4fd9
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x2d
call fcn.0044c4e0
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.004617c0
mov eax, edi
mov ecx, 0x2d
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004c4e80
Function at 0x4c66c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c67e7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x6588ce7587876585
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6f72ae3b6dd474b4
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9ab5758ba26c69a2
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x4d6cbeb192699ad7
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1919161c0f0a1f10
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1c031f020c14191b
mov qword [rsp + 0x46], rdx
movabs rdx, 0xa0f1c031f020c14
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6021d0510080d18
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1319190a130d0003
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1017181b051d1610
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4c6789
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 7]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 7]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2a
jge 0x4c67b7
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x4c67da
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x20
jb 0x4c676c
jmp 0x4c67ce
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x20
call fcn.0044c4e0
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.004617c0
mov eax, edi
mov ecx, 0x20
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004c66c0

Function at 0x4c8a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8b4c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x72a7ef5d6123391e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x70d633a72a7ef5d
mov qword [rsp + 0x20], rdx
movabs rdx, 0x1b722338ec394173
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60b00000b040e05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x211060e040b0110
mov qword [rsp + 0x38], rdx
movabs rdx, 0x804040f0e08130a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c8aea
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c8b1c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c8b3f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 0x14
jb 0x4c8ad0
jmp 0x4c8b33
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004617c0
mov eax, edi
mov ecx, 0x14
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004c8a60
Function at 0x4c8c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8d46
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x99658785988c9494
mov qword [rsp + 0x18], rdx
movabs rdx, 0x696f8f6b798e9965
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb02070801000401
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5030b0207080100
mov qword [rsp + 0x28], rdx
movabs rdx, 0x705090b0d070a08
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4c8ce0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x25]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4c8d12
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c8d37
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x25]
cmp rsi, 0xe
jb 0x4c8cc2
jmp 0x4c8d2b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.0044c4e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004617c0
mov eax, edi
mov ecx, 0xe
nop
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004c8c60

Function at 0x4c8d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8e5b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6c26201070f64043
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1445656c26201070
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x170817745c63674f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x40c020d0c0e0a10
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x9060b110a0d060c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x90d010509060b11
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0c120c100b0501
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c8df9
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 3]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4c8e2b
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c8e4e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 3]
cmp rsi, 0x13
jb 0x4c8ddf
jmp 0x4c8e42
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004617c0
mov eax, edi
mov ecx, 0x13
call fcn.004617c0
nop
nop dword [rax + rax]
call fcn.0045f540
jmp fcn.004c8d60
Function at 0x4c8f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c904c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x35bfe22c322cb83c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x666e4935bfe22c32
mov qword [rsp + 0x20], rdx
movabs rdx, 0xfca869a6e56de86f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4110112000c110f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20105070f0e060e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1200060e0f040703
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c8fea
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x28]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c901c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4c903f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x28]
cmp rsi, 0x13
jb 0x4c8fd0
jmp 0x4c9033
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.0044c4e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004617c0
mov eax, edi
mov ecx, 0x13
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004c8f60

Function at 0x4ca040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca126
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb27c65a551898cb5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57c0934bb7669780
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7090b0b0006000e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0b07090b0b0006
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0908010e040102
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ca0c0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x32]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4ca0f2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4ca117
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x32]
cmp rsi, 0x10
jb 0x4ca0a2
jmp 0x4ca10b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.0044c4e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004617c0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004617c0
nop
call fcn.0045f540
jmp fcn.004ca040