joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4add60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ade2c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x201ba70ca31b97c4
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x6e09a14b
movabs rdx, 0x908040009050206
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa03090509010903
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4addc5
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x54]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x4addfc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4ade1f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x54]
cmp rsi, 0xc
jb 0x4addab
jmp 0x4ade13
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00452300
mov eax, edi
mov ecx, 0xc
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004add60

Function at 0x4ae5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ae6fd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xd3013161de1b7005
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xedfb47fe6f52526e
mov qword [rsp + 0x25], rdx
movabs rdx, 0x58edfb47fe6f5252
mov qword [rsp + 0x26], rdx
movabs rdx, 0x42736509131d5850
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6151800050f0c02
mov qword [rsp + 0x36], rdx
movabs rdx, 0x181406151800050f
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa11070203150618
mov qword [rsp + 0x40], rdx
movabs rdx, 0x180c0d150d050913
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1002031209100e10
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ae6a0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x49]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x49]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4ae6cd
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4ae6f0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x4ae67d
jmp 0x4ae6e4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00441980
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00452300
mov eax, edi
mov ecx, 0x19
call fcn.00452300
nop
nop dword [rax]
call fcn.00450080
jmp fcn.004ae5e0
Function at 0x4afd80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4afe5d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xb333a6c3652af56c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x64a07448b4a6b333
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1050a070c05020c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x902080801050a07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x509020402070409
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4afe00
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x36]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x36]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4afe2d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4afe50
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xe
jb 0x4afde2
jmp 0x4afe44
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
call fcn.00441980
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00452300
mov eax, edi
mov ecx, 0xe
call fcn.00452300
nop
nop dword [rax]
call fcn.00450080
jmp fcn.004afd80

Function at 0x4b1180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b128c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x65476e2078705f6c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x4202556220036562
mov qword [rsp + 0x26], rdx
movabs rdx, 0x693c4c614146526f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc0102130d03160e
mov qword [rsp + 0x36], rdx
movabs rdx, 0xe020c0102130d03
mov qword [rsp + 0x38], rdx
movabs rdx, 0x20f170612120703
mov qword [rsp + 0x40], rdx
movabs rdx, 0x120a0e110f171716
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc0a021516070301
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b1228
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x13]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x22
jge 0x4b125c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x18
jae 0x4b127f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x13]
cmp rsi, 0x18
jb 0x4b120e
jmp 0x4b1273
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00441980
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00452300
mov eax, edi
mov ecx, 0x18
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004b1180
Function at 0x4b1580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b166c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x796ee1da246f8525
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x70a53d796ee1da24
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3bd9009b35f82b65
mov qword [rsp + 0x28], rdx
movabs rdx, 0x101208080d110108
mov qword [rsp + 0x30], rdx
movabs rdx, 0x305000f0e091211
mov qword [rsp + 0x38], rdx
movabs rdx, 0x403000c0e030008
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b160a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4b163c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b165f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 0x13
jb 0x4b15f0
jmp 0x4b1653
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441980
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00452300
mov eax, edi
mov ecx, 0x13
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004b1580

Function at 0x4b1680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1766
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x13bfbac40ad4c0c6
mov qword [rsp + 0x18], rdx
movabs rdx, 0x726b1a690d0d13bf
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb00010b010d0201
mov qword [rsp + 0x26], rdx
movabs rdx, 0x70b0b00010b010d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x902040306080503
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4b1700
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x47]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4b1732
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4b1757
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x47]
cmp rsi, 0xe
jb 0x4b16e2
jmp 0x4b174b
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
nop
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00452300
mov eax, edi
mov ecx, 0xe
nop
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004b1680
Function at 0x4b8320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b843a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x8a6f916f896fe3bd
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x77c046696d93d6ba
mov qword [rsp + 0x25], rdx
movabs rdx, 0xab20096f6e77c046
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5765987cb682a775
mov qword [rsp + 0x32], rdx
movabs rdx, 0x90012121a00011a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x8141208000e0900
mov qword [rsp + 0x40], rdx
movabs rdx, 0x14031a0a0716181c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x160a07171700080d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x191c0f18121c0305
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4b83d7
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x41]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x26
jge 0x4b8409
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4b842d
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x41]
cmp rsi, 0x1d
jb 0x4b83bd
jmp 0x4b8421
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.00441980
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00452300
mov eax, edi
mov ecx, 0x1d
call fcn.00452300
nop
call fcn.00450080
nop
jmp fcn.004b8320

Function at 0x4b85c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b868c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xdd6ff16f63c33233
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x72eb72316532dd6f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc000307050c0c07
mov qword [rsp + 0x28], rdx
movabs rdx, 0x107080a070a020a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b862f
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x10
jge 0x4b865c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4b867f
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4b8612
jmp 0x4b8673
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xe
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00452300
mov eax, edi
mov ecx, 0xe
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004b85c0
Function at 0x4b8dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8ea6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x69b20d0007f3626f
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x71f56f01ba72b6a5
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf09050203090802
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4050e020b0b0f09
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40806050502060c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b8e40
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5d]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4b8e72
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b8e97
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5d]
cmp rsi, 0x10
jb 0x4b8e22
jmp 0x4b8e8b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00441980
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00452300
mov eax, edi
mov ecx, 0x10
nop
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004b8dc0

Function at 0x4b8ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8f92
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x828265744a686577
mov qword [rsp + 0x28], rdx
movabs rdx, 0x72346f30658e7856
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe0e0a0c060807
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd03090308020203
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4b8f2c
movzx r9d, byte [rsp + rsi + 0x28]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1c]
mov byte [rsp + rdi + 0x28], dl
mov byte [rsp + rsi + 0x28], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b8f5e
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b8f85
movzx r8d, byte [rsp + rdi + 0x28]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1c]
cmp rsi, 0x10
jb 0x4b8f12
jmp 0x4b8f75
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
nop dword [rax]
call fcn.00452300
mov eax, edi
mov ecx, 0x10
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004b8ec0
Function at 0x4b8fa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b909b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6cfcbe2dad61a85c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xee05a2fbeb6cfcbe
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9a9974fb79a814b9
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x314030f0d0e0105
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe000c130a080b11
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xa060e0e0e000c13
mov qword [rsp + 0x40], rdx
movabs rdx, 0x503090601080f0c
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b9039
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4c]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4b906b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b908e
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4c]
cmp rsi, 0x15
jb 0x4b901f
jmp 0x4b9082
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
call fcn.00441980
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00452300
mov eax, edi
mov ecx, 0x15
call fcn.00452300
nop
nop dword [rax + rax]
call fcn.00450080
jmp fcn.004b8fa0
Function at 0x4bba20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbae7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x83336910da740ebc
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0xf18464fc
movabs rdx, 0xa070a0404030701
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0a01040b030800
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bba88
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x10
jge 0x4bbab7
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4bbada
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0xc
jb 0x4bba6b
jmp 0x4bbace
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00452300
mov eax, edi
mov ecx, 0xc
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004bba20

Function at 0x4bbd40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbe0c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc3bf5abb5636573
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xce30640c3bf5abb5
mov qword [rsp + 0x22], rdx
movabs rdx, 0x40605070304090a
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x509030906090406
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bbdaf
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x3f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4bbddc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4bbdff
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4bbd92
jmp 0x4bbdf3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00452300
mov eax, edi
mov ecx, 0xb
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004bbd40
Function at 0x4bc8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc9bd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xa0b2f4657c8a9c9a
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa296a19197d5a0b2
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7a8697f9aa49c94
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0309110c0e0f03
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0c08140c0e0c15
mov qword [rsp + 0x38], rdx
movabs rdx, 0x14000b0614050c0e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x12010c070b0210
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4bc960
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0xc]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0xc]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4bc98d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4bc9b0
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4bc93f
jmp 0x4bc9a4
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00441980
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00452300
mov eax, edi
mov ecx, 0x16
call fcn.00452300
nop
nop dword [rax]
call fcn.00450080
jmp fcn.004bc8c0

Function at 0x4bcb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bcbea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x71e4dd74e379637d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xee3b6eeb71e4dd74
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5774fdf73dd93443
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10d0009050a0d
mov qword [rsp + 0x32], rdx
movabs rdx, 0xd110f080e060001
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa000805030b1001
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bcb8d
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x16
jge 0x4bcbba
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4bcbdd
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x14
jb 0x4bcb70
jmp 0x4bcbd1
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x14
call fcn.00441980
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00452300
mov eax, edi
mov ecx, 0x14
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004bcb00
Function at 0x4bcee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bcfac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x26676ece4c2eef47
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xecc22af3
movabs rdx, 0x102020a070b0208
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x709020104070102
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bcf45
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4bcf7c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4bcf9f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0xc
jb 0x4bcf2b
jmp 0x4bcf93
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00452300
mov eax, edi
mov ecx, 0xc
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004bcee0

Function at 0x4bdba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bdc6c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4b6dc515ade72dc5
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xe2780a79654b6dc5
mov qword [rsp + 0x22], rdx
movabs rdx, 0x300040c02050305
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x2050a0301040300
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bdc0f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x4bdc3c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4bdc5f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x4bdbf2
jmp 0x4bdc53
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00441980
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00452300
mov eax, edi
mov ecx, 0xd
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004bdba0
Function at 0x4be200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be32c
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0xca646441068db275
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xdebfe0ceb3eac99b
mov qword [rsp + 0x24], rdx
movabs rdx, 0xbc587404b843b60e
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x65729eb3f16f62b8
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1d0716000e110a02
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x19030e020c170d0a
mov qword [rsp + 0x44], rdx
movabs rdx, 0xf14160b19030e02
mov qword [rsp + 0x48], rdx
movabs rdx, 0x14001000021b190e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1910081b0b0b0309
mov qword [rsp + 0x58], rdx
movabs rdx, 0xf021c130d010918
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4be2c6
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7b]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x2c
jge 0x4be2fc
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x20
jae 0x4be31f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7b]
cmp rsi, 0x20
jb 0x4be2ac
jmp 0x4be313
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.00441980
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x20
call fcn.00452300
mov eax, edi
mov ecx, 0x20
call fcn.00452300
nop
call fcn.00450080
jmp fcn.004be200

Function at 0x4bea00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4beb1d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x6d75311db7ab0443
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x63e9b1ecf2c51d23
mov qword [rsp + 0x27], rdx
movabs rdx, 0xf8dd3763e9b1ecf2
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x26211c7453d4490f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x40c040210020d18
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe090c10151a040c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x801041318191a12
mov qword [rsp + 0x48], rdx
movabs rdx, 0xa0b090508110305
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc090b19080b1a0a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4beac0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x5f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x5f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4beaed
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1b
jae 0x4beb10
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1b
jb 0x4bea9d
jmp 0x4beb04
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1b
call fcn.00441980
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00452300
mov eax, edi
mov ecx, 0x1b
call fcn.00452300
nop
nop dword [rax]
call fcn.00450080
jmp fcn.004bea00