joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4bc5c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc6e8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x6cf05f20650806f7
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2133eeb8b40dd563
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe5b96e972133eeb8
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa574ec03d5c1648e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x171b17170f16020b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1b101410020a0e14
mov qword [rsp + 0x40], rdx
movabs rdx, 0x121618170614010e
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd19070b120f0c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1309120c12051019
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4bc680
movzx r9d, byte [rsp + rsi + 0x1c]
add r9d, 0x4d
add edx, r9d
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x4bc6b1
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4bc6db
movzx r8d, byte [rsp + rdi + 0x1c]
add r8d, 0x4d
add r8d, edx
cmp rsi, 0x1c
jb 0x4bc663
jmp 0x4bc6cf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00457420
mov eax, edi
mov ecx, 0x1c
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004bc5c0

Function at 0x4bcb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bcc13
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xe464f54a6176f0a9
mov qword [rsp + 0x36], rdx
movabs rdx, 0x2074737375945ad1
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xdeeb207473737594
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4be1ece460eeedc2
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15070c0916001004
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1108190918130105
mov qword [rsp + 0x24], rdx
movabs rdx, 0x916110819091813
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc1217141009070a
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4bcbae
movzx r9d, byte [rsp + rsi + 0x36]
add r9d, 0x6d
add edx, r9d
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4bcbdf
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4bcc06
movzx r8d, byte [rsp + rdi + 0x36]
add r8d, 0x6d
add r8d, edx
cmp rsi, 0x1a
jb 0x4bcb94
jmp 0x4bcbfa
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00457420
mov eax, edi
mov ecx, 0x1a
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004bcb00
Function at 0x4bd180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd288
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x9d6e6fff1e10bf43
mov qword [rsp + 0x18], rdx
movabs rdx, 0xfdfc03209d6e6fff
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x517b6d2551310044
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf120f0f02131307
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa12090b010d0a0c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x40704000a12090b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf03100e07041212
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bd222
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x77]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x1c
jge 0x4bd24f
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4bd27b
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x4bd205
jmp 0x4bd26f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop dword [rax + rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.00457420
mov eax, edi
mov ecx, 0x14
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004bd180

Function at 0x4bd2a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd3b3
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0xe9208c63dbb6a4ff
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xdc6f73c5cdccdee9
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9cba508fa06563b7
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x81609120a021200
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe07081609120a02
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20b13050f150e12
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb09140f09161503
mov qword [rsp + 0x48], rdx
movabs rdx, 0x702120f12010215
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4bd34e
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffffb2
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x22
jge 0x4bd37f
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4bd3a6
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffffb2
add r8d, edx
cmp rsi, 0x17
jb 0x4bd334
jmp 0x4bd39a
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.004446e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457420
mov eax, edi
mov ecx, 0x17
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004bd2a0
Function at 0x4bdf80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be076
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xe578ede4ee71e763
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xe0e1e578ede4ee71
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd9d3f60266577220
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10c060c10040f02
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x8050e0e010c060c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x110607090f030411
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4be010
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x6b
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x4be042
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4be069
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x6b
add r8d, edx
cmp rsi, 0x12
jb 0x4bdff6
nop
jmp 0x4be05d
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x12
call fcn.00457420
mov eax, edi
mov ecx, 0x12
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.004bdf80

Function at 0x4be0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be1b2
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x684e4e526e6e6f63
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7a65460172208d62
mov qword [rsp + 0x26], rdx
movabs rdx, 0x336d656d7e3e627d
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x7050c0607120804
mov qword [rsp + 0x36], rdx
movabs rdx, 0xf0607050c060712
mov qword [rsp + 0x38], rdx
movabs rdx, 0x160d0c0d0f101709
mov qword [rsp + 0x40], rdx
movabs rdx, 0x13090c0c0716080d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1206121713100414
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4be151
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x22]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x22]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x4be17e
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4be1a5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4be134
jmp 0x4be199
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.004446e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457420
mov eax, edi
mov ecx, 0x18
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004be0a0
Function at 0x4bf860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf93c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x6f7b71f4b4e27a97
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6562e2616cdd6f7b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x406020c05010103
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8020105040b03
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bf8d2
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x73
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x10
jge 0x4bf908
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4bf92f
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x73
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xe
jb 0x4bf8b8
jmp 0x4bf923
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457420
mov eax, edi
mov ecx, 0xe
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.004bf860

Function at 0x4bff40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c002b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x18cb152b83761d29
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd41d25dc8a2525ca
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf000f060308010e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x9040d0b08070f00
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa060c0a0d070305
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bffc4
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x60]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x60]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x16
jge 0x4bfff7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x10
jae 0x4c001e
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x10
jb 0x4bffa7
jmp 0x4c0012
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.00457420
mov eax, edi
mov ecx, 0x10
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004bff40
Function at 0x4c17e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c18bc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xb4717c8e3183376c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x646574798468b471
mov qword [rsp + 0x30], rdx
movabs rdx, 0x204030407030604
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3060a0905010204
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4c1855
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x4c1888
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c18af
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x4c1838
jmp 0x4c18a3
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457420
mov eax, edi
mov ecx, 0xe
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.004c17e0
Function at 0x4c43c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c4508
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0xbe6ba56f410565d9
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xac23f5be6ba56f41
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0d163e1afa9c810
mov qword [rsp + 0x28], rdx
movabs rdx, 0x74706fcf14bfb26e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd2bb7319de2034b0
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe151e1a0c171f1c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x7191c111602000b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x908220f081a0821
mov qword [rsp + 0x50], rdx
movabs rdx, 0x11081f031e082105
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1400141f120d0208
mov qword [rsp + 0x60], rdx
movabs rdx, 0xf151b0922020a16
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x4c44a0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffff84
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x30
jge 0x4c44d1
movzx edx, byte [rsp + rax + 0x40]
movzx esi, byte [rsp + rax + 0x41]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x4c44fb
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffff84
add r8d, edx
cmp rsi, 0x23
jb 0x4c4482
jmp 0x4c44ef
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x23
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x23
call fcn.00457420
mov eax, edi
mov ecx, 0x23
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004c43c0

Function at 0x4c4d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c4e1c
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movabs rdx, 0xb5646f22f99e6f06
mov qword [rsp + 0x20], rdx
movabs rdx, 0x703020700040204
mov qword [rsp + 0x18], rdx
xor eax, eax
jmp 0x4c4db4
movzx r9d, byte [rsp + rsi + 0x20]
add r9d, 0x62
add edx, r9d
mov byte [rsp + rdi + 0x20], dl
mov byte [rsp + rsi + 0x20], r8b
add rax, 2
cmp rax, 8
jge 0x4c4de8
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4c4e0f
movzx r8d, byte [rsp + rdi + 0x20]
add r8d, 0x62
add r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4c4d9a
jmp 0x4c4e03
xor eax, eax
lea rbx, [rsp + 0x20]
mov ecx, 8
call fcn.004446e0
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov eax, esi
mov ecx, 8
call fcn.00457420
mov eax, edi
mov ecx, 8
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.004c4d60
Function at 0x4c4e40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c4f68
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x656666d55a31d5e6
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x2a55aa61d75aeace
mov qword [rsp + 0x23], rdx
movabs rdx, 0xb2a55aa61d75aea
mov qword [rsp + 0x24], rdx
movabs rdx, 0x656ce8156cd48c76
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80f100812151008
mov qword [rsp + 0x34], rdx
movabs rdx, 0x8150008080f1008
mov qword [rsp + 0x38], rdx
movabs rdx, 0x130e121000100d02
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0903130e0a100b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x130a041601120e15
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c4f00
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x5b
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x4c4f31
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4c4f5b
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x5b
add r8d, edx
cmp rsi, 0x19
jb 0x4c4ee3
jmp 0x4c4f4f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x19
call fcn.00457420
mov eax, edi
mov ecx, 0x19
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004c4e40
Function at 0x4c53e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c54d6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x5617744b5c20676e
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x75617744b5c2067
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4a6c43616c693d4c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3010a070609100e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x91003010a070609
mov qword [rsp + 0x30], rdx
movabs rdx, 0x807040610040103
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c5470
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xfffffffa
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x4c54a2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c54c9
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xfffffffa
add r8d, edx
cmp rsi, 0x11
jb 0x4c5456
nop
jmp 0x4c54bd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457420
mov eax, edi
mov ecx, 0x11
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.004c53e0

Function at 0x4c5740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5836
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x72f666ef63d1c665
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6d72f666ef63d1c6
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb06f97b26520ea1f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe09040a01090202
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10a0e09040a0109
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10020d0a0206040e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c57d3
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x12
jge 0x4c5802
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c5829
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x11
jb 0x4c57b6
nop
jmp 0x4c581d
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457420
mov eax, edi
mov ecx, 0x11
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.004c5740
Function at 0x4c5cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5dc8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x605e6868716e6f6e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6e6e652920605e68
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x722868717065736b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10603120b130310
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1200140604071106
mov qword [rsp + 0x36], rdx
movabs rdx, 0x13120014060407
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0b121109040600
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c5d62
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x18]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x18]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1a
jge 0x4c5d8f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c5dbb
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4c5d45
jmp 0x4c5daf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457420
mov eax, edi
mov ecx, 0x15
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004c5cc0
Function at 0x4c96e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c97e8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x6f0f65617be0cfdf
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd5c1d46f696c6d6f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xea6574f2a230708f
mov qword [rsp + 0x28], rdx
movabs rdx, 0xc130d130c051105
mov qword [rsp + 0x30], rdx
movabs rdx, 0x120d020e0e0c060c
mov qword [rsp + 0x38], rdx
movabs rdx, 0x3130f0901021600
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa110812130f0a08
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c9782
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x55]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x55]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x20
jge 0x4c97af
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c97db
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4c9765
jmp 0x4c97cf
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
nop dword [rax + rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x17
call fcn.00457420
mov eax, edi
mov ecx, 0x17
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004c96e0

Function at 0x4c9f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca0a8
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x6c71633dbb8bb0c4
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe39e6c98cd6166cc
mov qword [rsp + 0x23], rdx
movabs rdx, 0x73a4a895ade39e6c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa8bce35890b0ab84
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1c020f0b1b06001a
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1712061801001610
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb15030e0f1b190c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x120c110e0c130813
mov qword [rsp + 0x50], rdx
movabs rdx, 0x11021a1204080e15
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4ca040
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffb5
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x28
jge 0x4ca071
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4ca09b
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffb5
add r8d, edx
cmp rsi, 0x1d
jb 0x4ca023
jmp 0x4ca08f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00457420
mov eax, edi
mov ecx, 0x1d
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004c9f80
Function at 0x4cd780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd85c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x79c461bd20c0c774
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x4d666582baf379c4
mov qword [rsp + 0x20], rdx
movabs rdx, 0x902080d040a0a08
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10c060d0d0d080c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4cd7f5
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x3a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x3a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4cd828
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4cd84f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0xe
jb 0x4cd7d8
jmp 0x4cd843
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xe
call fcn.00457420
mov eax, edi
mov ecx, 0xe
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.004cd780