joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4bb540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4bb6b2
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0xed8d4827f9a626e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x92aac3cd9420cecd
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd89dd46ef3219239
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9fbab8618d92d569
mov qword [rsp + 0x36], rdx
movabs rdx, 0x3436746cc5c96bae
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x2131066f507469d2
mov qword [rsp + 0x46], rdx
movabs rdx, 0x110c0e04190f1003
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x122d1a1f1b1a2802
mov qword [rsp + 0x56], rdx
movabs rdx, 0xf20122d1a1f1b1a
mov qword [rsp + 0x58], rdx
movabs rdx, 0x4070515171b0b06
mov qword [rsp + 0x60], rdx
movabs rdx, 0x112f1a2d01211108
mov qword [rsp + 0x68], rdx
movabs rdx, 0x5120d2d021e0213
mov qword [rsp + 0x70], rdx
movabs rdx, 0x220901231504110b
mov qword [rsp + 0x78], rdx
movabs rdx, 0xd231d151617081b
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x4bb650
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 6]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 6]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x3a
jge 0x4bb67d
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x4bb6a5
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x30
jb 0x4bb633
jmp 0x4bb697
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x30
call fcn.00443420
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x30
nop
call fcn.00454ec0
mov eax, edi
mov ecx, 0x30
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004bb540

Function at 0x4bb960
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bba46
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x83744f78715d9630
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x464a444242414fa6
mov qword [rsp + 0x22], rdx
movabs rdx, 0x101040607040803
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4070403020e0101
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80907050c0c0c01
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4bb9e0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4bba12
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4bba37
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2c]
cmp rsi, 0x10
jb 0x4bb9c2
jmp 0x4bba2b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00454ec0
mov eax, edi
mov ecx, 0x10
nop
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004bb960
Function at 0x4bba60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4bbbbd
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
movabs rdx, 0x1eb853cd07f82b20
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x11c67656c6ce324
mov qword [rsp + 0x26], rdx
movabs rdx, 0xfcde6e6577f42820
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa1d546baef3e6fdc
mov qword [rsp + 0x36], rdx
movabs rdx, 0x7461df5a4674616d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x652e155374f63fc1
mov qword [rsp + 0x46], rdx
movabs rdx, 0x30f25071c2a0f05
mov qword [rsp + 0x4e], rdx
movabs rdx, 0x1609030f25071c2a
mov qword [rsp + 0x50], rdx
movabs rdx, 0x2813291f061f1b0e
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1291e0828171106
mov qword [rsp + 0x60], rdx
movabs rdx, 0x181304182d2a1317
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1a0003042e0e0916
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2071c122d1a1324
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4bbb60
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x77]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x77]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop dword [rax + rax]
cmp rax, 0x32
jge 0x4bbb8d
movzx edx, byte [rsp + rax + 0x4e]
movzx esi, byte [rsp + rax + 0x4f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x30
jae 0x4bbbb0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x30
jb 0x4bbb3e
jmp 0x4bbba4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x30
call fcn.00443420
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov eax, esi
mov ecx, 0x30
call fcn.00454ec0
mov eax, edi
mov ecx, 0x30
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004bba60

Function at 0x4be900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be9d8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x42945f35cdaf3538
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0xa06147d1
movabs rdx, 0x600010401070409
mov qword [rsp + 0x26], rdx
movabs rdx, 0x803060001040107
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7070b0902060b00
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4be974
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x72]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x12
jge 0x4be9a8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4be9cb
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x72]
nop
cmp rsi, 0xc
jb 0x4be95a
jmp 0x4be9bf
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00454ec0
mov eax, edi
mov ecx, 0xc
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.004be900
Function at 0x4beec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bef78
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x383f654e6c616944
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x207050106040407
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x406
xor eax, eax
jmp 0x4bef18
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x18]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x18]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xa
jge 0x4bef48
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4bef6b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4beefb
jmp 0x4bef5f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00454ec0
mov eax, edi
mov ecx, 8
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.004beec0

Function at 0x4befa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf08c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x2f61fa4c7079c6a5
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6569485f2f61fa4c
mov qword [rsp + 0x22], rdx
movabs rdx, 0x733531425c016f72
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe000f04100504
mov qword [rsp + 0x32], rdx
movabs rdx, 0x111111011207000e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x101000110e110f11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bf02a
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1c]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x16
jge 0x4bf05c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4bf07f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1c]
cmp rsi, 0x14
jb 0x4bf010
jmp 0x4bf073
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00454ec0
mov eax, edi
mov ecx, 0x14
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004befa0

Function at 0x4bf860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf918
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69f72e2361070847
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x206020606050204
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x101
xor eax, eax
jmp 0x4bf8b5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x65]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x4bf8e8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4bf90b
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x65]
nop
cmp rsi, 8
jb 0x4bf89b
jmp 0x4bf8ff
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00454ec0
mov eax, edi
mov ecx, 8
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.004bf860
Function at 0x4bfd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bfdf8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x61e99cdaf5adf148
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x602030402010603
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x503
xor eax, eax
jmp 0x4bfd95
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x4bfdc8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4bfdeb
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
nop
cmp rsi, 8
jb 0x4bfd7b
jmp 0x4bfddf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00454ec0
mov eax, edi
mov ecx, 8
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.004bfd40

Function at 0x4c0160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0247
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x74703c7263325a49
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x29616e453f74703c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x4b3e4a570f61505f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x105120c14081109
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1213050110110205
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1412010513141311
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c01e6
movzx r9d, byte [rsp + rsi + 0x1b]
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c0217
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x15
jae 0x4c023a
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, edx
cmp rsi, 0x15
jb 0x4c01d0
jmp 0x4c022e
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00454ec0
mov eax, edi
mov ecx, 0x15
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004c0160
Function at 0x4c0260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c035d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb3cebd24d2fcf93e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5f6c613a1869b3ce
mov qword [rsp + 0x20], rdx
movabs rdx, 0x40351ed9fd0a1834
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4060e1214070307
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30e130f05020e11
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50a040e01020010
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20f111500091301
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c0300
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4c032d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4c0350
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4c02df
jmp 0x4c0344
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00443420
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00454ec0
mov eax, edi
mov ecx, 0x16
call fcn.00454ec0
nop
nop dword [rax]
call fcn.00452c40
jmp fcn.004c0260

Function at 0x4c0400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c04b8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x74b9746b612cc603
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x705010602000705
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7050002
xor eax, eax
jmp 0x4c0456
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x63]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0xc
jge 0x4c0488
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4c04ab
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x63]
cmp rsi, 8
jb 0x4c043c
jmp 0x4c049f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 8
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00454ec0
mov eax, edi
mov ecx, 8
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.004c0400
Function at 0x4c1540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c160c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5f6d5b738343664d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x605d6e6f795f6d5b
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0501050c0b0802
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0c040b030b0402
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c15af
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0xe]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0xe]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x4c15dc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4c15ff
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4c1592
jmp 0x4c15f3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00454ec0
mov eax, edi
mov ecx, 0xd
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004c1540

Function at 0x4c3c20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3cd8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6150a490f8a2f13f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x300010005020003
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x400
xor eax, eax
jmp 0x4c3c75
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x4c]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x4c3ca8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4c3ccb
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x4c]
nop
cmp rsi, 8
jb 0x4c3c5b
jmp 0x4c3cbf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00443420
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00454ec0
mov eax, edi
mov ecx, 8
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.004c3c20

Function at 0x4c46c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c4798
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x41403420453930ec
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x157247d1
movabs rdx, 0x100040902080b06
mov qword [rsp + 0x26], rdx
movabs rdx, 0x901010004090208
mov qword [rsp + 0x28], rdx
movabs rdx, 0x909030705060302
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c4734
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x12
jge 0x4c4768
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4c478b
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1c]
nop
cmp rsi, 0xc
jb 0x4c471a
jmp 0x4c477f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00454ec0
mov eax, edi
mov ecx, 0xc
call fcn.00454ec0
nop
call fcn.00452c40
nop dword [rax]
jmp fcn.004c46c0
Function at 0x4c5380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5452
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x65a6d81bd74319c4
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1f6944c9aa5f4a65
mov qword [rsp + 0x20], rdx
movabs rdx, 0x408050b0c05010e
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa060e0301000804
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c53ec
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7c]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4c541e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c5445
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7c]
cmp rsi, 0xf
jb 0x4c53d2
jmp 0x4c5435
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00454ec0
mov eax, edi
mov ecx, 0xf
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004c5380

Function at 0x4c6240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c632c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5f640d6369af6f4c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x5035725206724f5f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x200e3047700c632c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x14020606160e0513
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa150a140a150b02
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd130f0e150e0d11
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c62ca
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 4]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c62fc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4c631f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 4]
cmp rsi, 0x17
jb 0x4c62b0
jmp 0x4c6313
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00454ec0
mov eax, edi
mov ecx, 0x17
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004c6240
Function at 0x4c6a60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c6b5b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x72a29509f79006fc
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6dfb6ff80772a295
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xced4ce7402fd5f7b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2041202130f0606
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1001080403120905
mov qword [rsp + 0x36], rdx
movabs rdx, 0x80b100108040312
mov qword [rsp + 0x38], rdx
movabs rdx, 0x9000a091406060d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c6af9
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x53]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4c6b2b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4c6b4e
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x53]
cmp rsi, 0x15
jb 0x4c6adf
jmp 0x4c6b42
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00443420
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00454ec0
mov eax, edi
mov ecx, 0x15
call fcn.00454ec0
nop
nop dword [rax + rax]
call fcn.00452c40
jmp fcn.004c6a60

Function at 0x4c8480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c856c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xfb6472d37fe96e87
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf3fb6472d37fe96e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6884610274ec9964
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80407050f0a0300
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0d080407050f0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb020007020c0a03
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c850a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x64]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x4c853c
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4c855f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x64]
cmp rsi, 0x11
jb 0x4c84f0
jmp 0x4c8553
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00443420
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00454ec0
mov eax, edi
mov ecx, 0x11
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004c8480
Function at 0x4c87c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c8892
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x700e3d0a743d6845
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x114b0e700e3d0a74
mov qword [rsp + 0x20], rdx
movabs rdx, 0x804080408040606
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90209060a090005
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c882c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xd]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4c885e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c8885
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xd]
cmp rsi, 0xb
jb 0x4c8812
jmp 0x4c8875
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00443420
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00454ec0
mov eax, edi
mov ecx, 0xb
call fcn.00454ec0
nop
call fcn.00452c40
jmp fcn.004c87c0