joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a35a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x48]
cmp r12, qword [r14 + 0x10]
jbe 0x4a3715
push rbp
mov rbp, rsp
sub rsp, 0xc0
movabs rdx, 0x1f7463fb6cb58a85
mov qword [rsp + 0x7c], rdx
movabs rdx, 0x53f2f1201f7463fb
mov qword [rsp + 0x80], rdx
movabs rdx, 0x385561b2163640e
mov qword [rsp + 0x88], rdx
movabs rdx, 0x66d4d9d4de774446
mov qword [rsp + 0x90], rdx
movabs rdx, 0xdf28fed4695f7265
mov qword [rsp + 0x98], rdx
movabs rdx, 0xaac96ec825ae6f20
mov qword [rsp + 0xa0], rdx
movabs rdx, 0x6e3f64e7e6922b6e
mov qword [rsp + 0xa8], rdx
movabs rdx, 0xbb965d2aeaf744d
mov qword [rsp + 0xb0], rdx
movabs rdx, 0x92be2d06f76f383b
mov qword [rsp + 0xb8], rdx
movabs rdx, 0x3d321723101e280a
mov qword [rsp + 0x1a], rdx
lea rdi, [rsp + 0x1c]
lea rsi, [0x005a13c2]
nop word [rax + rax]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00456c2c
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4a36b4
movzx r9d, byte [rsp + rsi + 0x7c]
sub r9d, edx
lea edx, [r9 - 0x21]
mov byte [rsp + rdi + 0x7c], dl
lea edx, [r8 - 0x21]
mov byte [rsp + rsi + 0x7c], dl
add rax, 2
cmp rax, 0x62
jge 0x4a36e2
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x44
jae 0x4a3708
movzx r8d, byte [rsp + rdi + 0x7c]
sub r8d, edx
cmp rsi, 0x44
jb 0x4a3697
nop
jmp 0x4a36fc
xor eax, eax
lea rbx, [rsp + 0x7c]
mov ecx, 0x44
call fcn.00444780
add rsp, 0xc0
pop rbp
ret
mov eax, esi
mov ecx, 0x44
call fcn.00456620
mov eax, edi
mov ecx, 0x44
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004a35a0

Function at 0x4a4a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4b4c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x3a7c636b6c666592
mov qword [rsp + 0x4b], rdx
movabs rdx, 0xaf9172ecdd91699d
mov qword [rsp + 0x53], rdx
movabs rdx, 0x925c65a0b5af9172
mov qword [rsp + 0x58], rdx
movabs rdx, 0x9f8ea398a87ec0b1
mov qword [rsp + 0x60], rdx
movabs rdx, 0x684143b72064e50f
mov qword [rsp + 0x68], rdx
movabs rdx, 0x56a164a069246477
mov qword [rsp + 0x70], rdx
movabs rdx, 0xc1a22081e1a1c0f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x182718152117180b
mov qword [rsp + 0x23], rdx
movabs rdx, 0x23172b291a2b1710
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x270411161b001c14
mov qword [rsp + 0x33], rdx
movabs rdx, 0x61e1a191e22250b
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x2c1314110a0e271d
mov qword [rsp + 0x43], rdx
xor eax, eax
jmp 0x4a4ae4
movzx r9d, byte [rsp + rsi + 0x4b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x51]
mov byte [rsp + rdi + 0x4b], dl
mov byte [rsp + rsi + 0x4b], r8b
add rax, 2
cmp rax, 0x30
jge 0x4a4b1c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x2d
jae 0x4a4b3f
movzx r8d, byte [rsp + rdi + 0x4b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x51]
cmp rsi, 0x2d
jb 0x4a4aca
jmp 0x4a4b33
xor eax, eax
lea rbx, [rsp + 0x4b]
mov ecx, 0x2d
call fcn.00444780
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00456620
mov eax, edi
mov ecx, 0x2d
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004a4a00
Function at 0x4a50e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a51ec
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2e076665d1f665e1
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5f747d65006c61db
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6c525f70fbd24329
mov qword [rsp + 0x50], rdx
movabs rdx, 0xb00160b0e120616
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x17160b00160b0e12
mov qword [rsp + 0x20], rdx
movabs rdx, 0x50b1015050d1502
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2051317150d020f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x806080203161210
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a5188
movzx r9d, byte [rsp + rsi + 0x40]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x40], dl
mov byte [rsp + rsi + 0x40], r8b
add rax, 2
cmp rax, 0x22
jge 0x4a51bc
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4a51df
movzx r8d, byte [rsp + rdi + 0x40]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 0x18
jb 0x4a516e
jmp 0x4a51d3
xor eax, eax
lea rbx, [rsp + 0x40]
mov ecx, 0x18
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00456620
mov eax, edi
mov ecx, 0x18
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004a50e0

Function at 0x4a5200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a52c7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2e9d8465aebb828d
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x8b78532e
movabs rdx, 0x60209090203000a
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x105020602030602
mov qword [rsp + 0x25], rdx
xor eax, eax
jmp 0x4a5268
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 - 0xf]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 - 0xf]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x4a5297
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4a52ba
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4a524b
jmp 0x4a52ae
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00456620
mov eax, edi
mov ecx, 0xb
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004a5200
Function at 0x4a52e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x4a5435
push rbp
mov rbp, rsp
sub rsp, 0xb0
movabs rdx, 0x3a73639994106548
mov qword [rsp + 0x72], rdx
movabs rdx, 0xb6d3a76c982f675c
mov qword [rsp + 0x7a], rdx
movabs rdx, 0x650a57ec922eb6d3
mov qword [rsp + 0x80], rdx
movabs rdx, 0xf089b69d143b502e
mov qword [rsp + 0x88], rdx
movabs rdx, 0x9020ed6194e46fb0
mov qword [rsp + 0x90], rdx
movabs rdx, 0xa3e5640596615609
mov qword [rsp + 0x98], rdx
movabs rdx, 0x709dd268b67fc16f
mov qword [rsp + 0xa0], rdx
movabs rdx, 0xa0b7f24869367011
mov qword [rsp + 0xa8], rdx
movabs rdx, 0x19092f200d23381d
mov qword [rsp + 0x1a], rdx
lea rdi, [rsp + 0x22]
lea rsi, [0x005a0c40]
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00456c3a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4a53d4
movzx r9d, byte [rsp + rsi + 0x72]
sub r9d, edx
lea edx, [r9 + 0x16]
mov byte [rsp + rdi + 0x72], dl
lea edx, [r8 + 0x16]
mov byte [rsp + rsi + 0x72], dl
add rax, 2
cmp rax, 0x58
jge 0x4a5402
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3e
jae 0x4a5428
movzx r8d, byte [rsp + rdi + 0x72]
sub r8d, edx
cmp rsi, 0x3e
jb 0x4a53b7
nop
jmp 0x4a541c
xor eax, eax
lea rbx, [rsp + 0x72]
mov ecx, 0x3e
call fcn.00444780
add rsp, 0xb0
pop rbp
ret
mov eax, esi
mov ecx, 0x3e
call fcn.00456620
mov eax, edi
mov ecx, 0x3e
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004a52e0

Function at 0x4a69c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6b0c
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x8b72656d4970084d
mov qword [rsp + 0x46], rdx
movabs rdx, 0x63be65751266df
mov qword [rsp + 0x4e], rdx
movabs rdx, 0xc76c0063be657512
mov qword [rsp + 0x50], rdx
movabs rdx, 0x7865201e6f2dffba
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2005437414cf8ae5
mov qword [rsp + 0x60], rdx
movabs rdx, 0x729e31e53e080a08
mov qword [rsp + 0x68], rdx
movabs rdx, 0x22271b08221c141a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x20010a231f0d070d
mov qword [rsp + 0x22], rdx
movabs rdx, 0x1b11251320010a23
mov qword [rsp + 0x26], rdx
movabs rdx, 0x1d04121f28071613
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x80f07160916171d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x26240d26260f1b1f
mov qword [rsp + 0x3e], rdx
xor eax, eax
jmp 0x4a6aa4
movzx r9d, byte [rsp + rsi + 0x46]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x2d]
mov byte [rsp + rdi + 0x46], dl
mov byte [rsp + rsi + 0x46], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4a6adc
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x2a
jae 0x4a6aff
movzx r8d, byte [rsp + rdi + 0x46]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x2d]
cmp rsi, 0x2a
jb 0x4a6a8a
jmp 0x4a6af3
xor eax, eax
lea rbx, [rsp + 0x46]
mov ecx, 0x2a
call fcn.00444780
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x2a
call fcn.00456620
mov eax, edi
mov ecx, 0x2a
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004a69c0
Function at 0x4ade60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4adf8c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xbf663227166e6af
mov qword [rsp + 0x43], rdx
movabs rdx, 0x650c6c61220bf663
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9ef7365747908fe
mov qword [rsp + 0x50], rdx
movabs rdx, 0x5262e211ef6e4b05
mov qword [rsp + 0x58], rdx
movabs rdx, 0x7961edd561209c57
mov qword [rsp + 0x60], rdx
movabs rdx, 0x30b180d221e2204
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x22160e071e0b1606
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1e0416151e001c1d
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1040d21160b0318
mov qword [rsp + 0x33], rdx
movabs rdx, 0x19041a130e001408
mov qword [rsp + 0x3b], rdx
xor eax, eax
jmp 0x4adf26
movzx r9d, byte [rsp + rsi + 0x43]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x11]
mov byte [rsp + rdi + 0x43], dl
mov byte [rsp + rsi + 0x43], r8b
add rax, 2
cmp rax, 0x28
jge 0x4adf5c
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x25
jae 0x4adf7f
movzx r8d, byte [rsp + rdi + 0x43]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x11]
cmp rsi, 0x25
jb 0x4adf0c
jmp 0x4adf73
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x25
call fcn.00444780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00456620
mov eax, edi
mov ecx, 0x25
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004ade60

Function at 0x4afbc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4afccc
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x699567819c707520
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xb47365b46c7f6187
mov qword [rsp + 0x46], rdx
movabs rdx, 0xb37fb47365b46c7f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x80a3af6176bc8faa
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1217070f18120f14
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3110412060c1714
mov qword [rsp + 0x26], rdx
movabs rdx, 0x21119081813060f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x190b020a10190a03
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4afc68
movzx r9d, byte [rsp + rsi + 0x3e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x37]
mov byte [rsp + rdi + 0x3e], dl
mov byte [rsp + rsi + 0x3e], r8b
add rax, 2
cmp rax, 0x20
jge 0x4afc9c
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4afcbf
movzx r8d, byte [rsp + rdi + 0x3e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x37]
cmp rsi, 0x1a
jb 0x4afc4e
jmp 0x4afcb3
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456620
mov eax, edi
mov ecx, 0x1a
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004afbc0
Function at 0x4b44e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b45ca
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6ea1203ae0656533
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe12d21356ea1203a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2a186e2a38aab726
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf12090b060a0e0a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x306060a0d0a0f12
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf08000610130c09
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4b456d
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x16
jge 0x4b459a
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4b45bd
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4b4550
jmp 0x4b45b1
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00456620
mov eax, edi
mov ecx, 0x14
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004b44e0

Function at 0x4bee80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bef46
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x581a1972656b6e69
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xc
movabs rdx, 0x505020606070207
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x608
xor eax, eax
nop
jmp 0x4beee0
movzx r9d, byte [rsp + rsi + 0x27]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x27], dl
mov byte [rsp + rsi + 0x27], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4bef12
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4bef37
movzx r8d, byte [rsp + rdi + 0x27]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
cmp rsi, 9
jb 0x4beec2
jmp 0x4bef2b
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
nop
call fcn.00444780
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00456620
mov eax, edi
mov ecx, 9
nop
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004bee80
Function at 0x4c0480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c057d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1da96e02a631882e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x69211da96e02a631
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3b6c33c57e20356f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60001070e01030d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xf030f0e03080d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb08000f030f0e03
mov qword [rsp + 0x26], rdx
movabs rdx, 0x40211070e0f0e04
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4c0520
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 + 0x52]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 + 0x52]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4c054d
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c0570
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x12
jb 0x4c04ff
jmp 0x4c0564
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x12
call fcn.00444780
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456620
mov eax, edi
mov ecx, 0x12
call fcn.00456620
nop
nop dword [rax]
call fcn.00454340
jmp fcn.004c0480

Function at 0x4c3260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c333d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xf6978cf708fc0361
mov qword [rsp + 0x31], rdx
movabs rdx, 0x33a72f728af60ef6
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc030e05090d0407
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x603060a0c030e05
mov qword [rsp + 0x21], rdx
movabs rdx, 0xa010e0806020805
mov qword [rsp + 0x29], rdx
xor eax, eax
nop
jmp 0x4c32e0
movzx r9d, byte [rsp + rsi + 0x31]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x31], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x31], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4c330d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c3330
movzx r8d, byte [rsp + rdi + 0x31]
sub r8d, edx
cmp rsi, 0xf
jb 0x4c32c2
jmp 0x4c3324
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00456620
mov eax, edi
mov ecx, 0xf
call fcn.00456620
nop
nop dword [rax]
call fcn.00454340
jmp fcn.004c3260
Function at 0x4c4680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c479d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x73536423206ce366
mov qword [rsp + 0x44], rdx
movabs rdx, 0x2f72dd531a23724d
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x5b15655e2f72dd53
mov qword [rsp + 0x50], rdx
movabs rdx, 0x653a547401342d61
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb16100c15080d0b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb06041704030b16
mov qword [rsp + 0x24], rdx
movabs rdx, 0x131a121212010f12
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x30112040d08080a
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa011117060d1913
mov qword [rsp + 0x3c], rdx
xor eax, eax
jmp 0x4c4740
movzx r9d, byte [rsp + rsi + 0x44]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x44], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x44], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4c476d
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4c4790
movzx r8d, byte [rsp + rdi + 0x44]
sub r8d, edx
cmp rsi, 0x1c
jb 0x4c471d
jmp 0x4c4784
xor eax, eax
lea rbx, [rsp + 0x44]
mov ecx, 0x1c
call fcn.00444780
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00456620
mov eax, edi
mov ecx, 0x1c
call fcn.00456620
nop
nop dword [rax]
call fcn.00454340
jmp fcn.004c4680

Function at 0x4c4bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c4cdd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x533a6960c5765069
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x203c8565ef4865c9
mov qword [rsp + 0x46], rdx
movabs rdx, 0x64203c8565ef48
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4add92a81572d273
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1904080315080e19
mov qword [rsp + 0x18], rdx
movabs rdx, 0x815071617161904
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x10616080d07030a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa1517060e181803
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1313110e190b0601
mov qword [rsp + 0x36], rdx
xor eax, eax
jmp 0x4c4c80
movzx r9d, byte [rsp + rsi + 0x3e]
sub r9d, edx
lea edx, [r9 - 0x4b]
mov byte [rsp + rdi + 0x3e], dl
lea edx, [r8 - 0x4b]
mov byte [rsp + rsi + 0x3e], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4c4cad
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4c4cd0
movzx r8d, byte [rsp + rdi + 0x3e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4c4c5d
jmp 0x4c4cc4
xor eax, eax
lea rbx, [rsp + 0x3e]
mov ecx, 0x1a
call fcn.00444780
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00456620
mov eax, edi
mov ecx, 0x1a
call fcn.00456620
nop
nop dword [rax]
call fcn.00454340
jmp fcn.004c4bc0
Function at 0x4c6ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6cc7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xf194e24565dc754f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9866a55c596120cf
mov qword [rsp + 0x50], rdx
movabs rdx, 0x920f37508637450
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf26961f86f082707
mov qword [rsp + 0x60], rdx
movabs rdx, 0x21000120d0c0408
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe06190f06121219
mov qword [rsp + 0x24], rdx
movabs rdx, 0x60b021a0e06190f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x406001c040c0e05
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc1f07080f150608
mov qword [rsp + 0x38], rdx
movabs rdx, 0x218130b0b02170d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c6c69
movzx r9d, byte [rsp + rsi + 0x48]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x48], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x48], dl
add rax, 2
cmp rax, 0x2c
jge 0x4c6c97
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x20
jae 0x4c6cba
movzx r8d, byte [rsp + rdi + 0x48]
sub r8d, edx
cmp rsi, 0x20
jb 0x4c6c4c
jmp 0x4c6cae
xor eax, eax
lea rbx, [rsp + 0x48]
mov ecx, 0x20
call fcn.00444780
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00456620
mov eax, edi
mov ecx, 0x20
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004c6ba0

Function at 0x4c6ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6dca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x63307a736a842e4d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x846963307a736a84
mov qword [rsp + 0x30], rdx
movabs rdx, 0x726f94706575636b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf030a03010f0300
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1000f020a000f03
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf0509060c0e0f
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4c6d6d
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x16
jge 0x4c6d9a
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c6dbd
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4c6d50
jmp 0x4c6db1
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00444780
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00456620
mov eax, edi
mov ecx, 0x12
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004c6ce0
Function at 0x4c7cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c7d87
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8f7369844c816f84
mov qword [rsp + 0x2c], rdx
mov dword [rsp + 0x34], 0x70757d30
movabs rdx, 0x808000a08070903
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2040b0802090808
mov qword [rsp + 0x24], rdx
xor eax, eax
jmp 0x4c7d28
movzx r9d, byte [rsp + rsi + 0x2c]
sub r9d, edx
lea edx, [r9 + 1]
mov byte [rsp + rdi + 0x2c], dl
lea edx, [r8 + 1]
mov byte [rsp + rsi + 0x2c], dl
add rax, 2
cmp rax, 0xe
jge 0x4c7d57
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4c7d7a
movzx r8d, byte [rsp + rdi + 0x2c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4c7d0b
jmp 0x4c7d6e
xor eax, eax
lea rbx, [rsp + 0x2c]
mov ecx, 0xc
call fcn.00444780
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00456620
mov eax, edi
mov ecx, 0xc
call fcn.00456620
nop
call fcn.00454340
jmp fcn.004c7cc0

Function at 0x4c9a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9b5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x52af409dbd74a1a8
mov qword [rsp + 0x39], rdx
movabs rdx, 0xb1e8b3ab6eac7452
mov qword [rsp + 0x40], rdx
movabs rdx, 0xee7ec403b3a56574
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb131207050d0104
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x50c0a120e061116
mov qword [rsp + 0x27], rdx
movabs rdx, 0x900050c0a120e06
mov qword [rsp + 0x29], rdx
movabs rdx, 0xa14150b03110b0d
mov qword [rsp + 0x31], rdx
xor eax, eax
jmp 0x4c9b00
movzx r9d, byte [rsp + rsi + 0x39]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rsp + rdi + 0x39], dl
lea edx, [r8 - 0x2a]
mov byte [rsp + rsi + 0x39], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4c9b2d
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c9b50
movzx r8d, byte [rsp + rdi + 0x39]
sub r8d, edx
cmp rsi, 0x17
jb 0x4c9adf
jmp 0x4c9b44
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x17
call fcn.00444780
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00456620
mov eax, edi
mov ecx, 0x17
call fcn.00456620
nop
nop dword [rax]
call fcn.00454340
jmp fcn.004c9a60