joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4afdc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4afe92
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7113665fa3f4e4c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x126c4007113665fa
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa07020501000808
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7030a0a07060a07
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4afe2c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x24]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4afe5e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4afe85
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x24]
cmp rsi, 0xb
jb 0x4afe12
jmp 0x4afe75
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004afdc0

Function at 0x4b1200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b12ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2f13423227a66f25
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb0df2f13423227a6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1b653361ee2c1075
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd0d040908020d09
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x11000c0f00080d0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50b020d060b0307
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b128d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x4b12ba
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b12dd
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x4b1270
jmp 0x4b12d1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b1200
Function at 0x4b4000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b40d2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4937613a53016547
mov qword [rsp + 0x19], rdx
movabs rdx, 0x45ef4b4973725449
mov qword [rsp + 0x20], rdx
movabs rdx, 0x202070607040c08
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe03070703020d0e
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b406c
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b409e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b40c5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x16]
cmp rsi, 0xf
jb 0x4b4052
jmp 0x4b40b5
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xf
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b4000

Function at 0x4b40e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b41ac
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5a3e45666d664666
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x7950
movabs rdx, 0x602010801000706
mov qword [rsp + 0x22], rdx
movabs rdx, 0x101070303020602
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4b4144
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 2]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b417c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4b419f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 2]
cmp rsi, 0xa
jb 0x4b412a
jmp 0x4b4193
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b40e0
Function at 0x4b4400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b44dd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8fd19811faab81d2
mov qword [rsp + 0x18], rdx
movabs rdx, 0xfca092fe73f01781
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3010d0b080b010b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40e0c05070c0006
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9040f0a0c0b020c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b4480
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4b44ad
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b44d0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b4462
jmp 0x4b44c4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b4400

Function at 0x4b47c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4887
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69635f747165727c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7a6b5369635f7471
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3070507060a050a
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8000909
xor eax, eax
jmp 0x4b4828
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 2]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 2]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4b4857
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4b487a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b480b
jmp 0x4b486e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b47c0
Function at 0x4b51a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b528a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x880cb7890959f8fd
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd3fd6d880cb78909
mov qword [rsp + 0x22], rdx
movabs rdx, 0x576b9369f663da9d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70b021000040a0e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x70709020c00070b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10050103060b0510
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b522d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x7d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x7d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4b525a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b527d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b5210
jmp 0x4b5271
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b51a0

Function at 0x4b6f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b703d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x75705f3e1b4c5e47
mov qword [rsp + 0x18], rdx
movabs rdx, 0x185b4c694e5c3c24
mov qword [rsp + 0x20], rdx
movabs rdx, 0x90d01080f04080f
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe0d02030404010f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10c0c0a050e0302
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b6fe0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4b700d
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b7030
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b6fc2
jmp 0x4b7024
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b6f60
Function at 0x4b74a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b758a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xd3f17234b103079f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6ed3f17234b10307
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb79fb1e00972ff38
mov qword [rsp + 0x28], rdx
movabs rdx, 0x90104090a0f0007
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10040d020d030e04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x4040c070e010a06
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b752d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x7b]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x7b]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x18
jge 0x4b755a
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b757d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x11
jb 0x4b7510
jmp 0x4b7571
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b74a0

Function at 0x4b8520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b860c
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x67656c3a0a264524
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x747467656c3a0a26
mov qword [rsp + 0x30], rdx
movabs rdx, 0x57734537752b6564
mov qword [rsp + 0x38], rdx
movabs rdx, 0x30c0e0b02070403
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa0a030c0e0b0207
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x700040b0f010704
mov qword [rsp + 0x26], rdx
xor eax, eax
jmp 0x4b85aa
movzx r9d, byte [rsp + rsi + 0x2e]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x2e], dl
mov byte [rsp + rsi + 0x2e], r8b
add rax, 2
cmp rax, 0x12
jge 0x4b85dc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b85ff
movzx r8d, byte [rsp + rdi + 0x2e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
cmp rsi, 0x12
jb 0x4b8590
jmp 0x4b85f3
xor eax, eax
lea rbx, [rsp + 0x2e]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b8520
Function at 0x4b9a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9b4c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x3b142b5754743947
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x31473061
movabs rdx, 0x405050901070a0b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90a0a0106010405
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b9ae5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xf]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b9b1c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4b9b3f
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xf]
cmp rsi, 0xc
jb 0x4b9acb
jmp 0x4b9b33
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b9a80

Function at 0x4ba080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba14c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4f777180938d9b89
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6cca93b4974f7771
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3040c0905000802
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xc0c0a01010b0304
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ba0ef
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x1d]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x1d]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0xe
jge 0x4ba11c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4ba13f
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xd
jb 0x4ba0d2
jmp 0x4ba133
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ba080

Function at 0x4ba160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba22c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x96a37250d4cf849a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x99730d96a37250d4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3060a0200070807
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x10a06
xor eax, eax
jmp 0x4ba1c5
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x40]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4ba1fc
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4ba21f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x40]
cmp rsi, 0xb
jb 0x4ba1ab
jmp 0x4ba213
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451880
mov eax, edi
mov ecx, 0xb
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ba160
Function at 0x4bc140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc226
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x747d6e717eafab86
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa273756893727b7b
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc090b0b0400020b
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80f030803010c09
mov qword [rsp + 0x30], rdx
movabs rdx, 0x2060f0d0b020d08
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4bc1c0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x23]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4bc1f2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4bc217
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x23]
cmp rsi, 0x10
jb 0x4bc1a2
jmp 0x4bc20b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004bc140

Function at 0x4bca40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bcb2c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf18fd462c2c6157
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x3af3050f18fd462c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x74a228233e04659f
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb1106050f100809
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50606070d0b0e03
mov qword [rsp + 0x38], rdx
movabs rdx, 0x902080d110d0a0b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bcaca
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x21]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4bcafc
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4bcb1f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x21]
cmp rsi, 0x13
jb 0x4bcab0
jmp 0x4bcb13
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004bca40
Function at 0x4bcb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bcbfd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x460f46450c694229
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x4f
movabs rdx, 0x801000006070307
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x704
xor eax, eax
nop
jmp 0x4bcba0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4bcbcd
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4bcbf0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 9
jb 0x4bcb82
jmp 0x4bcbe4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004bcb40

Function at 0x4bdf00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bdfea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xeb04756efaf108de
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xfeeb04756efaf108
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x93a79cad636f110d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10030101080e0d06
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf09010710030101
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20709080a060003
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bdf8d
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x76]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x76]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4bdfba
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4bdfdd
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4bdf70
jmp 0x4bdfd1
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451880
mov eax, edi
mov ecx, 0x11
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004bdf00
Function at 0x4be840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be91d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6fdedb6a5e74685a
mov qword [rsp + 0x18], rdx
movabs rdx, 0x636d75daf3626fde
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3040d0a0b050d00
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60103040d0a0b05
mov qword [rsp + 0x28], rdx
movabs rdx, 0x306050009050904
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4be8c0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x6a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x6a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4be8ed
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4be910
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xe
jb 0x4be8a2
jmp 0x4be904
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004be840

Function at 0x4c0760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c083d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x74ff29bff9828019
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xae003088bdd46f74
mov qword [rsp + 0x22], rdx
movabs rdx, 0x90e09000c010102
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10e0605060b090e
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40e0a0d0a060203
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c07e0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x4c080d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4c0830
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x4c07c2
jmp 0x4c0824
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004c0760
Function at 0x4c0860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c092c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x750609bbafc0c2b1
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20af6920b7bb7506
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60003040909050c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x20100090c080600
mov qword [rsp + 0x22], rdx
xor eax, eax
jmp 0x4c08cf
movzx r9d, byte [rsp + rsi + 0x2a]
sub r9d, edx
lea edx, [r9 - 0x41]
mov byte [rsp + rdi + 0x2a], dl
lea edx, [r8 - 0x41]
mov byte [rsp + rsi + 0x2a], dl
add rax, 2
cmp rax, 0xe
jge 0x4c08fc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4c091f
movzx r8d, byte [rsp + rdi + 0x2a]
sub r8d, edx
cmp rsi, 0xe
jb 0x4c08b2
jmp 0x4c0913
xor eax, eax
lea rbx, [rsp + 0x2a]
mov ecx, 0xe
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451880
mov eax, edi
mov ecx, 0xe
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004c0860

Function at 0x4cd0a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4cd17d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe9f48a1ddf67d852
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x579d94be0198ffe9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x70609090a060b0d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5080c03050d0706
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40b010307090d08
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4cd120
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x7f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x7f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x4cd14d
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4cd170
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xf
jb 0x4cd102
jmp 0x4cd164
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00451880
mov eax, edi
mov ecx, 0xf
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004cd0a0

Function at 0x4ce640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ce706
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x535d73326e432d38
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x1d
movabs rdx, 0x104020006070608
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7040201
xor eax, eax
nop
jmp 0x4ce6a0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xe]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4ce6d2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4ce6f7
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xe]
cmp rsi, 9
jb 0x4ce682
jmp 0x4ce6eb
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ce640