joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4bc5a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc6a8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x1804003f2b663256
mov qword [rsp + 0x19], rdx
movabs rdx, 0x653ff56156180400
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2a2f5e0554df442e
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf05060b04110a07
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x50b0f040103130e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x140b050b0f040103
mov qword [rsp + 0x38], rdx
movabs rdx, 0x120f14000a100b0b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bc642
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x46]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x46]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x1a
jge 0x4bc66f
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4bc69b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4bc625
jmp 0x4bc68f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457d20
mov eax, edi
mov ecx, 0x15
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004bc5a0

Function at 0x4bca00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bcb16
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x1c32186517696554
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2d4f2e655b57610f
mov qword [rsp + 0x21], rdx
movabs rdx, 0x4e72652d4f2e655b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x4f610d3a6077ef6c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1a0a161708180206
mov qword [rsp + 0x34], rdx
movabs rdx, 0x3070314180208
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x18050f0b00030703
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1818000b05021214
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bcaae
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 7]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4bcae2
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4bcb09
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 7]
cmp rsi, 0x1b
jb 0x4bca94
nop
jmp 0x4bcafd
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1b
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00457d20
mov eax, edi
mov ecx, 0x1b
call fcn.00457d20
nop
call fcn.004556c0
nop dword [rax + rax]
jmp fcn.004bca00
Function at 0x4bd880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4bda06
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0xe1365abf11f242d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x957300b2c81f61cc
mov qword [rsp + 0x20], rdx
movabs rdx, 0x318b957300b2c81f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3bb7aa159d2feb4e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1dea0ede107561b8
mov qword [rsp + 0x32], rdx
movabs rdx, 0xfb943704cb1f0718
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x2703030f281a1912
mov qword [rsp + 0x42], rdx
movabs rdx, 0x2081a142810240b
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x110a11130c230208
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd0311290e261715
mov qword [rsp + 0x58], rdx
movabs rdx, 0x20000f0f18180423
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1e26281806011f02
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1d1625212423071e
mov qword [rsp + 0x70], rdx
movabs rdx, 0xd07201722272915
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4bd996
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1f]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x3e
jge 0x4bd9c8
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2a
jae 0x4bd9f5
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1f]
cmp rsi, 0x2a
jb 0x4bd97c
jmp 0x4bd9e9
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x2a
call fcn.00444d40
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2a
call fcn.00457d20
mov eax, edi
mov ecx, 0x2a
nop dword [rax]
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004bd880

Function at 0x4bda20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bdb52
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0xbfc490e82018e4f0
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8dcb1bded57965e4
mov qword [rsp + 0x26], rdx
movabs rdx, 0x667e362064658dcb
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xfff59c4e206c726f
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf0708080b061405
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1b031802180c0218
mov qword [rsp + 0x44], rdx
movabs rdx, 0xe1c18001b031802
mov qword [rsp + 0x48], rdx
movabs rdx, 0x703010504131c00
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd0c0e1d13011805
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf03060e0f140f0d
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4bdaef
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x6b]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x6b]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x2c
jge 0x4bdb1c
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4bdb45
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4bdad2
jmp 0x4bdb37
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1e
call fcn.00444d40
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x1e
nop
call fcn.00457d20
mov eax, edi
mov ecx, 0x1e
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004bda20
Function at 0x4bdb60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bdcb2
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x6a3f6574bd13454d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x41da4ff12010415b
mov qword [rsp + 0x22], rdx
movabs rdx, 0xded2e783f421354
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x622f6574452ca368
mov qword [rsp + 0x32], rdx
movabs rdx, 0x3b6fc861b57e2458
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x702122308011919
mov qword [rsp + 0x42], rdx
movabs rdx, 0x1b0c0e1a12250702
mov qword [rsp + 0x48], rdx
movabs rdx, 0x13121f1b0911270f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1a2514211a191715
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1312171020210325
mov qword [rsp + 0x60], rdx
movabs rdx, 0x90d0e060d0a1922
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1216251e1e192007
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4bdc4a
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 5]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x36
jge 0x4bdc7c
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x4bdca5
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 5]
cmp rsi, 0x28
jb 0x4bdc30
jmp 0x4bdc97
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x28
call fcn.00444d40
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x28
nop
call fcn.00457d20
mov eax, edi
mov ecx, 0x28
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004bdb60
Function at 0x4bdcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x4bde92
sub rsp, 0xb0
mov qword [rsp + 0xa8], rbp
lea rbp, [rsp + 0xa8]
movabs rdx, 0x4adc4fd7fb87f82a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2807356c31dc6377
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6665ec202807356c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x32e76af374619a6c
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd3033dff254e65ac
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x4e381d26373e2065
mov qword [rsp + 0x42], rdx
movabs rdx, 0xdf1c0f2d6e3c6d01
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x5368001656207942
mov qword [rsp + 0x52], rdx
movabs rdx, 0x1a340806052e2a19
mov qword [rsp + 0x5a], rdx
movabs rdx, 0x2c183b200b232208
mov qword [rsp + 0x62], rdx
movabs rdx, 0x2e2d2e243a0d2c18
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1c151b31323a0b26
mov qword [rsp + 0x70], rdx
movabs rdx, 0x21b01052a043902
mov qword [rsp + 0x78], rdx
movabs rdx, 0x2a16381f0438003a
mov qword [rsp + 0x80], rdx
movabs rdx, 0x260f1c2a2239232b
mov qword [rsp + 0x88], rdx
movabs rdx, 0x33071e1c0d11290a
mov qword [rsp + 0x90], rdx
movabs rdx, 0x340315220d113b0e
mov qword [rsp + 0x98], rdx
movabs rdx, 0x2a05283905332721
mov qword [rsp + 0xa0], rdx
xor eax, eax
jmp 0x4bde21
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x15]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x4e
jge 0x4bde53
movzx edx, byte [rsp + rax + 0x5a]
movzx esi, byte [rsp + rax + 0x5b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x3c
jae 0x4bde85
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x15]
cmp rsi, 0x3c
jb 0x4bde07
jmp 0x4bde75
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x3c
nop
call fcn.00444d40
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
mov eax, esi
mov ecx, 0x3c
nop dword [rax]
call fcn.00457d20
mov eax, edi
mov ecx, 0x3c
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004bdcc0
Function at 0x4c13a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c14e8
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x8f7b636576665cc6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7b6e966b568f7b63
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6f8c76fe7466a731
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb6a46eaa8b6e597d
mov qword [rsp + 0x32], rdx
movabs rdx, 0x65632d6c7342526e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1001306221e1c19
mov qword [rsp + 0x42], rdx
movabs rdx, 0xd16131f0e090a1b
mov qword [rsp + 0x4a], rdx
movabs rdx, 0xb15190a011b0d16
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc090c1b071f1122
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a03121806181f
mov qword [rsp + 0x60], rdx
movabs rdx, 0x220d0f121e1f0312
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x4c1480
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2e
jge 0x4c14b2
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4c14db
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0x25
jb 0x4c1462
jmp 0x4c14cf
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x25
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x25
call fcn.00457d20
mov eax, edi
mov ecx, 0x25
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004c13a0

Function at 0x4c1500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1646
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x2eaa833282887272
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8c5b6c91732eaa83
mov qword [rsp + 0x24], rdx
movabs rdx, 0x787773667479aa85
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa5786573f4808ac6
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa5abb6a773202974
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x80c020c170b0e23
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1304190c0e110317
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x92421081304190c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1417091b1e05161e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1a0e2218030d2302
mov qword [rsp + 0x60], rdx
movabs rdx, 0x61c112201081115
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x4c15e0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x13]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x13]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop
cmp rax, 0x2c
jge 0x4c160d
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4c1634
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x25
jb 0x4c15c2
jmp 0x4c1628
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x25
call fcn.00444d40
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x25
call fcn.00457d20
mov eax, edi
mov ecx, 0x25
nop dword [rax + rax]
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004c1500
Function at 0x4c29a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2a6b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x75f07165f851f634
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xf5
movabs rdx, 0x502010007050603
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5070801
xor eax, eax
jmp 0x4c2a04
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x7f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x7f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x4c2a37
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x4c2a5e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4c29e7
jmp 0x4c2a52
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00457d20
mov eax, edi
mov ecx, 9
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004c29a0
Function at 0x4c3500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3652
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x117ffc0dff8565ca
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x8b7f69c120117ffc
mov qword [rsp + 0x22], rdx
movabs rdx, 0xac672f8066665eca
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf7aec74b74f372f2
mov qword [rsp + 0x32], rdx
movabs rdx, 0x776570185ae6f969
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1a1904070000240c
mov qword [rsp + 0x42], rdx
movabs rdx, 0x61b13050e1a1a19
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11240e15060b0b10
mov qword [rsp + 0x50], rdx
movabs rdx, 0x24090b14021a031c
mov qword [rsp + 0x58], rdx
movabs rdx, 0xb2105201a0c0424
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1f1e121e131e041b
mov qword [rsp + 0x68], rdx
movabs rdx, 0x171710050d071b15
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4c35ed
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x36
jge 0x4c361a
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4c3645
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x25
jb 0x4c35d0
jmp 0x4c3635
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x25
call fcn.00444d40
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x25
nop dword [rax]
call fcn.00457d20
mov eax, edi
mov ecx, 0x25
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004c3500

Function at 0x4c93c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x4c951c
sub rsp, 0xb8
mov qword [rsp + 0xb0], rbp
lea rbp, [rsp + 0xb0]
movabs rdx, 0x48aaabcab5a28341
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xffd5e339454b8b07
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8557bd55bf5337d6
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x668464769ab03839
mov qword [rsp + 0x32], rdx
movabs rdx, 0x6e9ad483bb92be1f
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x76f119887fa23b90
mov qword [rsp + 0x42], rdx
movabs rdx, 0x333216cedd79867b
mov qword [rsp + 0x4a], rdx
movabs rdx, 0x142bd57bfc0f9e19
mov qword [rsp + 0x52], rdx
movabs rdx, 0x62b2d3921012d39
mov qword [rsp + 0x5a], rdx
lea rdi, [rsp + 0x60]
lea rsi, [0x0076271a]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045835a
mov rbp, qword [rbp]
xor eax, eax
jmp 0x4c94b4
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 5]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 5]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x56
jge 0x4c94e2
movzx edx, byte [rsp + rax + 0x5a]
movzx esi, byte [rsp + rax + 0x5b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x40
jae 0x4c950f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x40
jb 0x4c9497
nop
jmp 0x4c9503
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x40
call fcn.00444d40
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
mov eax, esi
mov ecx, 0x40
call fcn.00457d20
mov eax, edi
mov ecx, 0x40
call fcn.00457d20
nop
nop dword [rax]
call fcn.004556c0
jmp fcn.004c93c0
Function at 0x4c9540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x4c96fa
sub rsp, 0xa8
mov qword [rsp + 0xa0], rbp
lea rbp, [rsp + 0xa0]
movabs rdx, 0xb18461c0fcf42a6
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9d4f3dd04cd2f6d5
mov qword [rsp + 0x20], rdx
movabs rdx, 0x2f0a43550df4b3f8
mov qword [rsp + 0x28], rdx
movabs rdx, 0xbe22f1e10665ef2e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xfdfbda1c6a693bec
mov qword [rsp + 0x38], rdx
movabs rdx, 0x146b74f6727139da
mov qword [rsp + 0x40], rdx
movabs rdx, 0x33fd31077a790a2c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5f2d393019363320
mov qword [rsp + 0x50], rdx
movabs rdx, 0x121c34020c0a0720
mov qword [rsp + 0x58], rdx
movabs rdx, 0x112c0818242e00
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1d0f3409253b1a1d
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1d161f0615281019
mov qword [rsp + 0x70], rdx
movabs rdx, 0x29161a303831311a
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1b3b2e3c26392f0d
mov qword [rsp + 0x80], rdx
movabs rdx, 0x3400130415273638
mov qword [rsp + 0x88], rdx
movabs rdx, 0x380f2c0d153b1221
mov qword [rsp + 0x90], rdx
movabs rdx, 0x3061e1711380227
mov qword [rsp + 0x98], rdx
xor eax, eax
jmp 0x4c9692
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x7d]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x7d]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x48
jge 0x4c96bf
movzx edx, byte [rsp + rax + 0x58]
movzx esi, byte [rsp + rax + 0x59]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x40
jae 0x4c96ed
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x40
jb 0x4c9675
jmp 0x4c96e1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x40
call fcn.00444d40
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
nop
ret
mov eax, esi
mov ecx, 0x40
call fcn.00457d20
mov eax, edi
mov ecx, 0x40
call fcn.00457d20
nop
call fcn.004556c0
nop
jmp fcn.004c9540
Function at 0x4d3460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3528
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x54e9e4f0657466ec
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xe3
movabs rdx, 0x404000807080501
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6050105
xor eax, eax
jmp 0x4d34c1
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7c]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x4d34f3
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4d351b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7c]
cmp rsi, 9
jb 0x4d34a7
jmp 0x4d350f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00457d20
mov eax, edi
mov ecx, 9
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004d3460

Function at 0x4d3820
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3928
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xa4f92fd2bab5ab95
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x8e1e8e619ca4f92f
mov qword [rsp + 0x24], rdx
movabs rdx, 0xc6c0ce92c074b541
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7020301040b0604
mov qword [rsp + 0x34], rdx
movabs rdx, 0x111104111208140e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa140d1011110411
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0d060c08000613
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d38c0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4d38f2
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4d391b
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4e]
cmp rsi, 0x15
jb 0x4d38a5
jmp 0x4d390f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457d20
mov eax, edi
mov ecx, 0x15
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004d3820
Function at 0x4d3a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d3b28
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xe3bed4d6a7d4dc34
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xca20da3469c041d6
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6e3f3bcb70faec78
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xa0f03120600160d
mov qword [rsp + 0x34], rdx
movabs rdx, 0x502010d15120c02
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x90912140502010d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x308071504061109
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d3ac2
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x50]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x50]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1c
jge 0x4d3aef
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4d3b1b
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x4d3aa5
jmp 0x4d3b0f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x18
call fcn.00457d20
mov eax, edi
mov ecx, 0x18
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004d3a20

Function at 0x4d58a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4d59a8
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x9ca8429cce36728a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x209a73e16c7d9ca8
mov qword [rsp + 0x20], rdx
movabs rdx, 0xca2caf6c8fa2fe20
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1105080211060013
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30c000a14000e10
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc10150a000f1010
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa070a00040f0c15
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4d5942
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 8]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 8]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x20
jge 0x4d596f
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4d599b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4d5925
jmp 0x4d598f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.00444d40
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457d20
mov eax, edi
mov ecx, 0x16
call fcn.00457d20
nop
call fcn.004556c0
jmp fcn.004d58a0