joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b4620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b470a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1465042070d673ce
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8a64d3b069146504
mov qword [rsp + 0x20], rdx
movabs rdx, 0xebaa6ce5a7676980
mov qword [rsp + 0x28], rdx
movabs rdx, 0x205130011070d00
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa0c100703140d11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9030c0a0d050c02
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b46ad
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x1e]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x1e]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x4b46da
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b46fd
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4b4690
jmp 0x4b46f1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004b4620

Function at 0x4b4940
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4a0c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x2d0f0a6d72f506fb
mov qword [rsp + 0x19], rdx
movabs rdx, 0x31366f2d0f0a6d72
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x2060907000a0205
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x20a0102
xor eax, eax
jmp 0x4b49a5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x24]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4b49dc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4b49ff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x24]
cmp rsi, 0xb
jb 0x4b498b
jmp 0x4b49f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044bb20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00461020
mov eax, edi
mov ecx, 0xb
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004b4940
Function at 0x4b7640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b772c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6f69c9909165a06f
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb6786f69c9909165
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x37bd6c9ed69961c7
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc0d030e040a1009
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x100401100c050c0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1010100c08111109
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b76ca
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3d]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b76fc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b771f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3d]
cmp rsi, 0x12
jb 0x4b76b0
jmp 0x4b7713
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004b7640

Function at 0x4b8500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8608
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x686372b4d2e3f85d
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x63f456cf61e3f520
mov qword [rsp + 0x27], rdx
movabs rdx, 0x8d63f456cf61e3f5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x767264e67174ec8b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x307000a13090c0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20c0e121209140e
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0a170e15180e0d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x304041110030115
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b85ab
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x4b85d8
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4b85fb
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4b858e
jmp 0x4b85ef
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004b8500
Function at 0x4b9b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9c2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6fbea63c5e6c9b66
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x65dfa4d96c346fbe
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40304080a0c0b01
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb06080b05030a0c
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b9bcf
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4b9bfc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4b9c1f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4b9bb2
jmp 0x4b9c13
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00461020
mov eax, edi
mov ecx, 0xe
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004b9b60

Function at 0x4ba0c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4ba232
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x6452016c6b7ff869
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x466452016c6b7ff8
mov qword [rsp + 0x20], rdx
movabs rdx, 0x856d352258383b6d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3275ec555674565f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6f4c7a5d7962694b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6f396b514577257c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x72363d6661534f69
mov qword [rsp + 0x48], rdx
movabs rdx, 0x260c1d2928082211
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1e090210222f212d
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe1f0a0e08060314
mov qword [rsp + 0x60], rdx
movabs rdx, 0x260619212a0d2605
mov qword [rsp + 0x68], rdx
movabs rdx, 0x82f2e030b24250e
mov qword [rsp + 0x70], rdx
movabs rdx, 0x182807062626112a
mov qword [rsp + 0x78], rdx
movabs rdx, 0x1215242b12012716
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x4ba1cd
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2d]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x38
jge 0x4ba1ff
movzx edx, byte [rsp + rax + 0x50]
movzx esi, byte [rsp + rax + 0x51]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x4ba225
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2d]
cmp rsi, 0x31
jb 0x4ba1b3
jmp 0x4ba219
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x31
call fcn.0044bb20
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x31
call fcn.00461020
mov eax, edi
mov ecx, 0x31
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004ba0c0
Function at 0x4bdf60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be068
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x657892d4866e3ea1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb7b2799b9fa56562
mov qword [rsp + 0x26], rdx
movabs rdx, 0x659992e599966655
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x140f040406001003
mov qword [rsp + 0x36], rdx
movabs rdx, 0x120a140f04040600
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0e07140f010b0d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc0614121605030b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1515030d04030113
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4be00b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 4]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 4]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x4be038
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4be05b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4bdfee
jmp 0x4be04f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004bdf60

Function at 0x4bf540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf63b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x866b728f9e74afe9
mov qword [rsp + 0x18], rdx
movabs rdx, 0x72c89fa0a38e866b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x65b59c9a68bb5f12
mov qword [rsp + 0x26], rdx
movabs rdx, 0x120004100e0c0a0f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe140b0c01031312
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe040e140b0c0103
mov qword [rsp + 0x38], rdx
movabs rdx, 0x7080d13090b0108
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bf5d9
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x44]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4bf60b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4bf62e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x44]
cmp rsi, 0x16
jb 0x4bf5bf
jmp 0x4bf622
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00461020
mov eax, edi
mov ecx, 0x16
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004bf540
Function at 0x4c0a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0b6c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x72c74b91a19086ac
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xab72c74b91a19086
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa98e7240c6b890cc
mov qword [rsp + 0x28], rdx
movabs rdx, 0x100b0b09030a0c06
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90405010c1002
mov qword [rsp + 0x38], rdx
movabs rdx, 0x90f060f0d0b0f08
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c0b0a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x38]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c0b3c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c0b5f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x38]
cmp rsi, 0x11
jb 0x4c0af0
jmp 0x4c0b53
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00461020
mov eax, edi
mov ecx, 0x11
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c0a80

Function at 0x4c0f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c104a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa6b93c28b209793
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xcb200a6b93c28b20
mov qword [rsp + 0x30], rdx
movabs rdx, 0x656cb96184879676
mov qword [rsp + 0x38], rdx
movabs rdx, 0x400090f07070d0c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x30b0400090f0707
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf01000109050700
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4c0fed
movzx r9d, byte [rsp + rsi + 0x2e]
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rdi + 0x2e], dl
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x2e], dl
add rax, 2
cmp rax, 0x12
jge 0x4c101a
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c103d
movzx r8d, byte [rsp + rdi + 0x2e]
sub r8d, edx
cmp rsi, 0x12
jb 0x4c0fd0
jmp 0x4c1031
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00461020
mov eax, edi
mov ecx, 0x12
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c0f60
Function at 0x4c1060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c115d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x46613120406e426c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x422f0c07e7466131
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf5f7722521ec3620
mov qword [rsp + 0x26], rdx
movabs rdx, 0x13100a0b10090b0f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xe09051410110808
mov qword [rsp + 0x36], rdx
movabs rdx, 0x7140e0905141011
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf1003010c0b050c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c1100
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4c112d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c1150
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x15
jb 0x4c10df
jmp 0x4c1144
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax]
call fcn.0045eda0
jmp fcn.004c1060

Function at 0x4c1560
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c167a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x36ef6e39fc060f62
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xcac774e850d2318a
mov qword [rsp + 0x27], rdx
movabs rdx, 0xf668f42073cac774
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x6b976f77ead46ee9
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1208030914121006
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xc06180b12080309
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b15180312120008
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170f120718040102
mov qword [rsp + 0x50], rdx
movabs rdx, 0xe01020a12040818
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c1617
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x69]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x24
jge 0x4c1649
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4c166d
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x69]
cmp rsi, 0x1d
jb 0x4c15fd
jmp 0x4c1661
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.0044bb20
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461020
mov eax, edi
mov ecx, 0x1d
call fcn.00461020
nop
call fcn.0045eda0
nop
jmp fcn.004c1560
Function at 0x4c16a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c179b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x440d1fdf9052e70
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2220c5356e0440d1
mov qword [rsp + 0x24], rdx
movabs rdx, 0xfd6511b26143f86e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4070a1412091411
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe02090f06050a05
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x30a140c0e02090f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30a010211040e0c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c1739
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1a]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4c176b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c178e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1a]
cmp rsi, 0x15
jb 0x4c171f
jmp 0x4c1782
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00461020
mov eax, edi
mov ecx, 0x15
call fcn.00461020
nop
nop dword [rax + rax]
call fcn.0045eda0
jmp fcn.004c16a0

Function at 0x4c1aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c1ba8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x73b6568a7eaf75aa
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x9d8b5db88f658066
mov qword [rsp + 0x26], rdx
movabs rdx, 0x53657e7fb8858d82
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x30f071502130015
mov qword [rsp + 0x36], rdx
movabs rdx, 0x80b030f07150213
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1412080711020417
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe040d030c091014
mov qword [rsp + 0x48], rdx
movabs rdx, 0x603110513090506
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c1b4b
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 6]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 6]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x22
jge 0x4c1b78
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4c1b9b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x18
jb 0x4c1b2e
jmp 0x4c1b8f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00461020
mov eax, edi
mov ecx, 0x18
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c1aa0
Function at 0x4c2b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c2c4c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x458720e2aa74926e
mov qword [rsp + 0x19], rdx
movabs rdx, 0xde6d9eac20444906
mov qword [rsp + 0x21], rdx
movabs rdx, 0x8c8b00de6d9eac20
mov qword [rsp + 0x24], rdx
movabs rdx, 0xa4db69667c4b7079
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4030f010f151108
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1003010c110f1a15
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xf120d191003010c
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0c030c160a060c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c2be8
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x56]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4c2c1c
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1b
jae 0x4c2c3f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x56]
cmp rsi, 0x1b
jb 0x4c2bce
jmp 0x4c2c33
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1b
call fcn.0044bb20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00461020
mov eax, edi
mov ecx, 0x1b
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c2b40
Function at 0x4c3580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3688
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x687a635d6d6a635c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7c58137969768978
mov qword [rsp + 0x27], rdx
movabs rdx, 0x187c581379697689
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7873777297692320
mov qword [rsp + 0x30], rdx
movabs rdx, 0x415091300011002
mov qword [rsp + 0x38], rdx
movabs rdx, 0x13140f180e0d1207
mov qword [rsp + 0x40], rdx
movabs rdx, 0x30c161215130c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x106000814031516
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4c362b
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x1a]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x4c3658
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4c367b
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4c360e
jmp 0x4c366f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.0044bb20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00461020
mov eax, edi
mov ecx, 0x19
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c3580

Function at 0x4c4580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c46a7
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xab4a03e44b3e536e
mov qword [rsp + 0x19], rdx
movabs rdx, 0xac3a1d77367220c5
mov qword [rsp + 0x21], rdx
movabs rdx, 0x207475ab20ac3a1d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x3c21284503586625
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd1c0c041511070c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1b020c0b0f080705
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x19051b020c0b0f08
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1180315021a0e19
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4070708170f0301
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1010406020e031c
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c4649
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x50]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x50]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x2a
jge 0x4c4677
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x4c469a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4c462c
jmp 0x4c468e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.0044bb20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00461020
mov eax, edi
mov ecx, 0x1d
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c4580
Function at 0x4c49a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c4a86
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x44c9c174e5fc173d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc86faf72df342d2c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x606000d0b0f0702
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x901060808050606
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf0700060b070a03
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c4a20
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x24]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4c4a52
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4c4a77
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x24]
cmp rsi, 0x10
jb 0x4c4a02
jmp 0x4c4a6b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.0044bb20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00461020
mov eax, edi
mov ecx, 0x10
nop
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c49a0

Function at 0x4c55e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c56a7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x61f36268535d9f69
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xf365fa64
movabs rdx, 0x205070502030408
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9060b0804030701
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c5648
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x71]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x71]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4c5677
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4c569a
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4c562b
jmp 0x4c568e
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.0044bb20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00461020
mov eax, edi
mov ecx, 0xc
call fcn.00461020
nop
call fcn.0045eda0
jmp fcn.004c55e0