joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4acc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4acd8c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x205b69c469636197
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x89cd61676eb6b653
mov qword [rsp + 0x42], rdx
movabs rdx, 0x9cad1269e18689cd
mov qword [rsp + 0x48], rdx
movabs rdx, 0x956ff6699ff0f7c8
mov qword [rsp + 0x50], rdx
movabs rdx, 0x13171715170e111b
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x160c0e1304091817
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf110e140c17160c
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10081d06001b0a19
mov qword [rsp + 0x32], rdx
xor eax, eax
jmp 0x4acd28
movzx r9d, byte [rsp + rsi + 0x3a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x67]
mov byte [rsp + rdi + 0x3a], dl
mov byte [rsp + rsi + 0x3a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4acd5c
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1e
jae 0x4acd7f
movzx r8d, byte [rsp + rdi + 0x3a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x67]
cmp rsi, 0x1e
jb 0x4acd0e
jmp 0x4acd73
xor eax, eax
lea rbx, [rsp + 0x3a]
mov ecx, 0x1e
call fcn.0043d2e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1e
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x1e
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.004acc80

Function at 0x4aeb80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aec7b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x65ec618367a70242
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x64cea26eca8d6897
mov qword [rsp + 0x24], rdx
movabs rdx, 0x846db3ed20b2c9ac
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x150a020e14010d06
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1110170d14041202
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xb02010a1110170d
mov qword [rsp + 0x40], rdx
movabs rdx, 0xa04171002080c04
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4aec19
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4aec4b
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4aec6e
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 0x18
jb 0x4aebff
jmp 0x4aec62
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.0043d2e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x18
call fcn.0044c1c0
nop
nop dword [rax + rax]
call fcn.00449f60
jmp fcn.004aeb80
Function at 0x4af340
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af45d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xf6cfb7fb4d203946
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1c0e375320613ff5
mov qword [rsp + 0x25], rdx
movabs rdx, 0x411c0e375320613f
mov qword [rsp + 0x26], rdx
movabs rdx, 0x552f70220644ecc
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x507060d1115160d
mov qword [rsp + 0x36], rdx
movabs rdx, 0x120d0507060d1115
mov qword [rsp + 0x38], rdx
movabs rdx, 0x18150e11070e0f11
mov qword [rsp + 0x40], rdx
movabs rdx, 0x504180908170815
mov qword [rsp + 0x48], rdx
movabs rdx, 0x5150111071012
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4af400
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x4d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x4d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4af42d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4af450
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x4af3dd
jmp 0x4af444
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.0043d2e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x19
call fcn.0044c1c0
nop
nop dword [rax]
call fcn.00449f60
jmp fcn.004af340

Function at 0x4afa80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4afb7d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x76ce6f74868ee395
mov qword [rsp + 0x19], rdx
movabs rdx, 0xbe6d7d76ce6f7486
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xee31d5c484d8e78e
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf0005030a070e0b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb100d0306030800
mov qword [rsp + 0x34], rdx
movabs rdx, 0x4120b0a0b100d03
mov qword [rsp + 0x38], rdx
movabs rdx, 0x207030404010c07
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4afb20
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4afb4d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4afb70
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4afaff
jmp 0x4afb64
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0043d2e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x13
call fcn.0044c1c0
nop
nop dword [rax]
call fcn.00449f60
jmp fcn.004afa80
Function at 0x4b1200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b12fd
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x640e3d6c917a10d5
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x646ee308f1106564
mov qword [rsp + 0x26], rdx
movabs rdx, 0x446d914796645961
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x312140b080c1603
mov qword [rsp + 0x36], rdx
movabs rdx, 0xc0a1016130b0000
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x16090c0a1016130b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1060b0103060305
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b12a0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x7c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x7c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4b12cd
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4b12f0
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4b127f
jmp 0x4b12e4
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0043d2e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x17
call fcn.0044c1c0
nop
nop dword [rax]
call fcn.00449f60
jmp fcn.004b1200

Function at 0x4b1320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b140c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x351e2f6d6e5adc4d
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x113e61ddd6351e2f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x651483542064c016
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xd080208090b1212
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1070d02120c0d08
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc02020e130b0605
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b13aa
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x32]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b13dc
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b13ff
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x32]
cmp rsi, 0x15
jb 0x4b1390
jmp 0x4b13f3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0043d2e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x15
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.004b1320
Function at 0x4b1cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1dbb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xce9f69dfb58984ab
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x97acc54bce9f69df
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8b17698120648c61
mov qword [rsp + 0x26], rdx
movabs rdx, 0x9070b0b120b0a03
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x130b060813001304
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1302130b06081300
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1010090d0001070a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b1d59
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x45]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4b1d8b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4b1dae
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x45]
cmp rsi, 0x14
jb 0x4b1d3f
jmp 0x4b1da2
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x14
call fcn.0043d2e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x14
call fcn.0044c1c0
nop
nop dword [rax + rax]
call fcn.00449f60
jmp fcn.004b1cc0

Function at 0x4b36a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b379d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1b77acf1fae6d947
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xff076103f0fd681b
mov qword [rsp + 0x26], rdx
movabs rdx, 0x76d0af16abdf161
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x512061301020e10
mov qword [rsp + 0x36], rdx
movabs rdx, 0x160514110705140b
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1411160514110705
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd160304130a0911
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b3740
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x6f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x6f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4b376d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4b3790
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x17
jb 0x4b371f
jmp 0x4b3784
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x17
call fcn.0043d2e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x17
call fcn.0044c1c0
nop
nop dword [rax]
call fcn.00449f60
jmp fcn.004b36a0
Function at 0x4b4260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b437a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x42d68e43d8b8750f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x617f84fc96c1c0b
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd55f61bb0617f84f
mov qword [rsp + 0x28], rdx
movabs rdx, 0x9af5fb024aec9861
mov qword [rsp + 0x30], rdx
movabs rdx, 0x180c16001313170b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x215061302100206
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1a05130f120e1b0f
mov qword [rsp + 0x48], rdx
movabs rdx, 0xf0e120d08090b0e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x18030d19021a1907
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4b4317
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3b]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x28
jge 0x4b4349
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1c
jae 0x4b436d
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3b]
cmp rsi, 0x1c
jb 0x4b42fd
jmp 0x4b4361
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1c
call fcn.0043d2e0
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x1c
call fcn.0044c1c0
nop
call fcn.00449f60
nop
jmp fcn.004b4260

Function at 0x4b4740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4848
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x324034ec89c82e2b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf2745320192b6ce9
mov qword [rsp + 0x26], rdx
movabs rdx, 0x2c46f2745320192b
mov qword [rsp + 0x28], rdx
movabs rdx, 0xd1756994756406d7
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20312130f191502
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1603130718050a04
mov qword [rsp + 0x40], rdx
movabs rdx, 0x11000f0b11080302
mov qword [rsp + 0x48], rdx
movabs rdx, 0x190a100603150503
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b47eb
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x60]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x60]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0x20
jge 0x4b4818
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4b483b
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4b47ce
jmp 0x4b482f
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x1a
call fcn.0043d2e0
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x1a
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.004b4740
Function at 0x4b53a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b548c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e0d1f0ec042ba71
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x646e0d1f0ec042ba
mov qword [rsp + 0x20], rdx
movabs rdx, 0xfb87f75411e07272
mov qword [rsp + 0x28], rdx
movabs rdx, 0x50f0b0f06000101
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0c030300060904
mov qword [rsp + 0x38], rdx
movabs rdx, 0x40303060e100001
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b542a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x3e]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x18
jge 0x4b545c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b547f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x3e]
cmp rsi, 0x11
jb 0x4b5410
jmp 0x4b5473
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.0043d2e0
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x11
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.004b53a0

Function at 0x4b6120
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b620c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x3ca103152005ee83
mov qword [rsp + 0x19], rdx
movabs rdx, 0x643ca103152005ee
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x658d945820076feb
mov qword [rsp + 0x22], rdx
movabs rdx, 0x20e04070f06070d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20906010d01020e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40500050b0f050a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b61aa
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x52]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b61dc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b61ff
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x52]
cmp rsi, 0x11
jb 0x4b6190
jmp 0x4b61f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0043d2e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x11
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.004b6120
Function at 0x4b74c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b75aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1b53206142485e5a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x646e651b53206142
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x65405d4257ed7261
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30f070f0d020011
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xe030810030f070f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0107030e070702
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b754d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x24]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x24]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x4b757a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b759d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b7530
jmp 0x4b7591
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.0043d2e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x13
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.004b74c0

Function at 0x4b8980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8a7d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xb0c03f69a8c523c3
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x42d461dcc0a1b0c0
mov qword [rsp + 0x20], rdx
movabs rdx, 0x15c51e6d8e79af61
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60f03121008110d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x315140507010013
mov qword [rsp + 0x38], rdx
movabs rdx, 0x903000d140a0210
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2110c0700150202
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b8a20
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x3f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x3f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop dword [rax]
cmp rax, 0x20
jge 0x4b8a4d
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4b8a70
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4b89ff
jmp 0x4b8a64
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.0043d2e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x16
call fcn.0044c1c0
nop
nop dword [rax]
call fcn.00449f60
jmp fcn.004b8980
Function at 0x4b8da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b8e9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xd78910fecc1b13ca
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x649e617493d78910
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe6db3c6f15511d4
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x140707020d0b0206
mov qword [rsp + 0x32], rdx
movabs rdx, 0x11100d0703040e00
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x105061210071110
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5010f1003001108
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b8e39
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6e]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4b8e6b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b8e8e
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6e]
cmp rsi, 0x15
jb 0x4b8e1f
jmp 0x4b8e82
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.0043d2e0
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x15
call fcn.0044c1c0
nop
nop dword [rax + rax]
call fcn.00449f60
jmp fcn.004b8da0

Function at 0x4c0da0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0e8c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xa6706db09b9e6b47
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9696a6706db09b9e
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa79780e86d8c6d72
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10080e09110f0410
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x308010f10080e09
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc02090c07020b11
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4c0e2a
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x14
jge 0x4c0e5c
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c0e7f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3c]
cmp rsi, 0x12
jb 0x4c0e10
jmp 0x4c0e73
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.0043d2e0
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x12
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.004c0da0
Function at 0x4c1080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c11ac
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x446524b8341abd8d
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x950aa8fb721cfda8
mov qword [rsp + 0x22], rdx
movabs rdx, 0xbacdc76f950aa8fb
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd3d9bd6c97c4428f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf110514070f1a0c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x8160a120e09080d
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1b1608160a120e09
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd05020309140119
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1a0002050e120415
mov qword [rsp + 0x50], rdx
movabs rdx, 0x17130d0317070d04
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4c1146
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x7e]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4c117c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1c
jae 0x4c119f
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x7e]
cmp rsi, 0x1c
jb 0x4c112c
jmp 0x4c1193
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1c
call fcn.0043d2e0
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.0044c1c0
mov eax, edi
mov ecx, 0x1c
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.004c1080

Function at 0x4c1300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c13cc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x507c8d6954965c7f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xa78f758682507c8d
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0801020c040508
mov qword [rsp + 0x28], rdx
movabs rdx, 0x80904020b0106
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c136f
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 8]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 8]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x4c139c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4c13bf
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4c1352
jmp 0x4c13b3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.0043d2e0
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.0044c1c0
mov eax, edi
mov ecx, 0xd
call fcn.0044c1c0
nop
call fcn.00449f60
jmp fcn.004c1300