joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a6c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6d6a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x22afe1ed7429dfee
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd82922afe1ed7429
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x316530396df87474
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2110c0000090106
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x704050802110c00
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0006090901070f
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a6d0d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x54]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x54]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4a6d3a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a6d5d
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4a6cf0
jmp 0x4a6d51
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a6c80

Function at 0x4a6d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6e6a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x826195b165946989
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x20a6826195b16594
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x676eaa7c965aad5f
mov qword [rsp + 0x24], rdx
movabs rdx, 0xe080a0b0a02040b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70f0c0e080a0b
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc05020d040f0a0e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a6e0d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0xb]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0xb]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4a6e3a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a6e5d
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4a6df0
jmp 0x4a6e51
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a6d80
Function at 0x4a7ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7fe7
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xe86eba6dd86f1e74
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3de5c2fe8f2f6fa2
mov qword [rsp + 0x21], rdx
movabs rdx, 0x9a341a19263de5c2
mov qword [rsp + 0x26], rdx
movabs rdx, 0x32653009a053ce51
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1201141605030b19
mov qword [rsp + 0x36], rdx
movabs rdx, 0x171110170c101517
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd0d171110170c10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1011140a180e0811
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf1018131815160e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1908051c1a0e0713
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4a7f89
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x6e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x6e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x2a
jge 0x4a7fb7
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x4a7fda
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4a7f6c
jmp 0x4a7fce
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.00441380
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00451880
mov eax, edi
mov ecx, 0x1d
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a7ec0

Function at 0x4a8240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a835a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x2a661d0c3c426f55
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20ef2c61537a3f3f
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1b20ef2c61537a3f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x49396236bd68615b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5020e1417180a08
mov qword [rsp + 0x34], rdx
movabs rdx, 0x914180a05020e14
mov qword [rsp + 0x38], rdx
movabs rdx, 0x180e0b071514100d
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140303181113100b
mov qword [rsp + 0x48], rdx
movabs rdx, 0x170d1405000a1704
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a82f7
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0xa]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x24
jge 0x4a8329
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4a834d
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0xa]
cmp rsi, 0x19
jb 0x4a82dd
jmp 0x4a8341
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.004a8240
Function at 0x4a94e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a95dd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6152e1fce9db5b71
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x6961136f06df6152
mov qword [rsp + 0x20], rdx
movabs rdx, 0xabddebe660fe0465
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd00050711080912
mov qword [rsp + 0x30], rdx
movabs rdx, 0x803071406030114
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1300120d0f150b02
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20d041014050602
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a9580
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x5f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x5f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4a95ad
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a95d0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4a955f
jmp 0x4a95c4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004a94e0

Function at 0x4a9920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9a2c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x714e715b6874617f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6717256f6e8a5c75
mov qword [rsp + 0x23], rdx
movabs rdx, 0x6b7c635e0f671725
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6b7255777f856e20
mov qword [rsp + 0x30], rdx
movabs rdx, 0x17070608060a1813
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1208110e0d000a0a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x181414051202070f
mov qword [rsp + 0x48], rdx
movabs rdx, 0x9021007000e1a04
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a99c8
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x22]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x20
jge 0x4a99fc
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1d
jae 0x4a9a1f
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x22]
cmp rsi, 0x1d
jb 0x4a99ae
jmp 0x4a9a13
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1d
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00451880
mov eax, edi
mov ecx, 0x1d
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a9920
Function at 0x4aa620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa70c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x9c4a7dee69916564
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4a786f9c4a7dee69
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6d9b87c37457c17b
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf070b11060a0d0c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0d0d040f070b11
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0d0702050b1009
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4aa6aa
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x38]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4aa6dc
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4aa6ff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x38]
cmp rsi, 0x13
jb 0x4aa690
jmp 0x4aa6f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004aa620

Function at 0x4ab620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab70c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc1c1be6cbb617473
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6365789f74c1c1be
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5a6c006172eecf72
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa0e0e0412140a0a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x91205040a0f0a0e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa140306070e090d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ab6aa
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x64]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4ab6dc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4ab6ff
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x64]
cmp rsi, 0x15
jb 0x4ab690
jmp 0x4ab6f3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ab620
Function at 0x4ac880
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac97d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6f7683688165909a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7020832b6e9a6e6f
mov qword [rsp + 0x20], rdx
movabs rdx, 0x92a49874a26d707f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1206040c12150005
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc0f090f14101004
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb090305060c0c10
mov qword [rsp + 0x40], rdx
movabs rdx, 0x16000c0116151603
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ac920
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0xd]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0xd]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4ac94d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4ac970
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x17
jb 0x4ac8ff
jmp 0x4ac964
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004ac880

Function at 0x4ad480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad59a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x6c3c266f7490b588
mov qword [rsp + 0x18], rdx
movabs rdx, 0xbb206b6eda72f2c3
mov qword [rsp + 0x20], rdx
movabs rdx, 0x9566e1652e79bb20
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2fcd6bc46f733b71
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20b0d0d0d0d050b
mov qword [rsp + 0x36], rdx
movabs rdx, 0x206020b0d0d0d0d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x150b15171c000909
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11a16081d1c1311
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf131d060f1c0215
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ad537
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7b]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x22
jge 0x4ad569
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4ad58d
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7b]
cmp rsi, 0x1e
jb 0x4ad51d
jmp 0x4ad581
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
call fcn.00441380
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00451880
mov eax, edi
mov ecx, 0x1e
call fcn.00451880
nop
call fcn.0044f600
nop
jmp fcn.004ad480
Function at 0x4ad700
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad7fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xff2012fc4cf8041c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x73921bd2c71cff20
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6490af0f0568a920
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30f011407040400
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1211021201020c0c
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf0713130a110c05
mov qword [rsp + 0x40], rdx
movabs rdx, 0xb03110807130907
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ad7a0
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x7a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x7a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4ad7cd
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ad7f0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4ad77f
jmp 0x4ad7e4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004ad700

Function at 0x4ae980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aea88
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x744a744a6b545904
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20146f4a1e034af5
mov qword [rsp + 0x23], rdx
movabs rdx, 0x3f20146f4a1e034a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x644a3d725d704775
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x17040908060e0216
mov qword [rsp + 0x34], rdx
movabs rdx, 0x90b100212010c12
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x6000906090b1002
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140402140b0a090c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4aea2b
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x34]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x34]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x4aea58
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4aea7b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4aea0e
jmp 0x4aea6f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ae980
Function at 0x4aeaa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aeb6c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x8b6c7f55a68d9b85
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x6b819a86
movabs rdx, 0x802090509010307
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7000a0104000802
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4aeb05
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4aeb3c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4aeb5f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 0xc
jb 0x4aeaeb
jmp 0x4aeb53
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004aeaa0
Function at 0x4b10e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b11b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9e9acb6570c0db35
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6c4b649e9acb6570
mov qword [rsp + 0x20], rdx
movabs rdx, 0x204010901020100
mov qword [rsp + 0x28], rdx
movabs rdx, 0x509060704010209
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b114c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b117e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b11a5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0xb
jb 0x4b1132
jmp 0x4b1195
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b10e0

Function at 0x4b1de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1eac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3139336cd6c33373
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xcb6c983139336cd6
mov qword [rsp + 0x20], rdx
movabs rdx, 0x101070706080a03
mov qword [rsp + 0x28], rdx
movabs rdx, 0x8070108010a0202
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b1e4f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x56]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x56]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x4b1e7c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b1e9f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b1e32
jmp 0x4b1e93
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b1de0
Function at 0x4b38c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b39a6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x79f06534a70c7b52
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x57d00e2c75252610
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe04010e06040a0c
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9040e04010e0604
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd02010108080302
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b3940
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3a]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4b3972
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b3997
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3a]
cmp rsi, 0x10
jb 0x4b3922
jmp 0x4b398b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b38c0

Function at 0x4b3aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b3bac
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xad6572867b7173a3
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5e7a749b8a48658e
mov qword [rsp + 0x24], rdx
movabs rdx, 0x85616f695e7a749b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6a8465476e6f5665
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa151a021a0c0f00
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40a13030e0f0e07
mov qword [rsp + 0x40], rdx
movabs rdx, 0x103180a010b0808
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1311031b11020f1a
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b3b48
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2a]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x20
jge 0x4b3b7c
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x4b3b9f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2a]
cmp rsi, 0x1c
jb 0x4b3b2e
jmp 0x4b3b93
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.00441380
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451880
mov eax, edi
mov ecx, 0x1c
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b3aa0
Function at 0x4b4de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4f0c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x23056556d1be852f
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb26974ccffc36f14
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc26f43b6d7321ec2
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb5333debd1026e19
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90b1c1e02161f1a
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb1112101c00080b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3071d1201181603
mov qword [rsp + 0x48], rdx
movabs rdx, 0x120b121106180213
mov qword [rsp + 0x50], rdx
movabs rdx, 0x130a1c101a101d1b
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf181703060c0114
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4b4ea6
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x72]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x30
jge 0x4b4edc
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x4b4eff
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x72]
cmp rsi, 0x20
jb 0x4b4e8c
jmp 0x4b4ef3
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x20
call fcn.00441380
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00451880
mov eax, edi
mov ecx, 0x20
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b4de0

Function at 0x4b5bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5c92
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x99b09e81ba6fa0dd
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd39ccf99b09e81ba
mov qword [rsp + 0x22], rdx
movabs rdx, 0x60006030708010a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x504090701060600
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b5c2c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b5c5e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b5c85
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 0xb
jb 0x4b5c12
jmp 0x4b5c75
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b5bc0