joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a3a00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a3afc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x7484e2237865d975
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xe2cecb29fb7484e2
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70c0b51d9465d26c
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa060111050e0610
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90b09090c090c04
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1301040a0c120812
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a3a90
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x7a]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a3ac8
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a3aef
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x7a]
nop word [rax + rax]
cmp rsi, 0x15
jb 0x4a3a76
jmp 0x4a3ae3
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x15
call fcn.0045f5c0
nop
nop dword [rax]
call fcn.0045cf60
jmp fcn.004a3a00
Function at 0x4a49c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x4a4b36
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
movabs rdx, 0x9540c6dee129cc3e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x614672af1af42d89
mov qword [rsp + 0x23], rdx
movabs rdx, 0xc6174b206c614672
mov qword [rsp + 0x28], rdx
movabs rdx, 0x28116e258e39e46f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xe6a565ca09644b05
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe665646dae2a6412
mov qword [rsp + 0x40], rdx
movabs rdx, 0x291400121e0e082c
mov qword [rsp + 0x48], rdx
movabs rdx, 0xb24211829142418
mov qword [rsp + 0x50], rdx
movabs rdx, 0x60b0b1d19040221
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1190a251b290a17
mov qword [rsp + 0x60], rdx
movabs rdx, 0x280305200c090703
mov qword [rsp + 0x68], rdx
movabs rdx, 0x190323281c132c08
mov qword [rsp + 0x70], rdx
movabs rdx, 0x2816070927250802
mov qword [rsp + 0x78], rdx
xor eax, eax
jmp 0x4a4ac7
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x11]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x38
jge 0x4a4afc
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x2d
jae 0x4a4b29
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x11]
cmp rsi, 0x2d
jb 0x4a4aad
jmp 0x4a4b1d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x2d
call fcn.0044a200
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov eax, esi
mov ecx, 0x2d
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x2d
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.004a49c0

Function at 0x4a4b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a4c2b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xc6c5a9a989fae72
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xdb
movabs rdx, 0x106060705030508
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2010404
xor eax, eax
jmp 0x4a4bc4
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x4a4bf7
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x4a4c1e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4a4ba7
jmp 0x4a4c12
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004a4b60
Function at 0x4a7860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x4a7a07
sub rsp, 0xa0
mov qword [rsp + 0x98], rbp
lea rbp, [rsp + 0x98]
movabs rdx, 0x26dbf120f9f5f109
mov qword [rsp + 0x19], rdx
movabs rdx, 0x84490b216e672026
mov qword [rsp + 0x20], rdx
movabs rdx, 0x49003772390ec2f8
mov qword [rsp + 0x28], rdx
movabs rdx, 0x53d2610d34e6c03a
mov qword [rsp + 0x30], rdx
movabs rdx, 0xc806e6d1d31f63af
mov qword [rsp + 0x38], rdx
movabs rdx, 0x74656a8540616d20
mov qword [rsp + 0x40], rdx
movabs rdx, 0x3753241f562f3060
mov qword [rsp + 0x48], rdx
movabs rdx, 0x211d09030621310e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x3240b2622250105
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc36021504231f15
mov qword [rsp + 0x60], rdx
movabs rdx, 0x41a2b182a102a
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1a030b0719302a30
mov qword [rsp + 0x70], rdx
movabs rdx, 0x3612032534330334
mov qword [rsp + 0x78], rdx
movabs rdx, 0xf1e1e3030311b20
mov qword [rsp + 0x80], rdx
movabs rdx, 0x72121110d160135
mov qword [rsp + 0x88], rdx
movabs rdx, 0x2a2f1e2f2a14152c
mov qword [rsp + 0x90], rdx
xor eax, eax
jmp 0x4a79a0
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x7e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x7e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x48
jge 0x4a79cd
movzx edx, byte [rsp + rax + 0x50]
movzx esi, byte [rsp + rax + 0x51]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x37
jae 0x4a79fa
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x37
jb 0x4a7983
jmp 0x4a79ee
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x37
call fcn.0044a200
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov eax, esi
mov ecx, 0x37
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x37
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004a7860

Function at 0x4a8d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8dc9
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xd7afa76ecd4b2e74
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x201c
movabs rdx, 0x706050505080807
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5030506
xor eax, eax
jmp 0x4a8d63
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0xc
jge 0x4a8d95
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4a8dbc
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0xa
jb 0x4a8d49
jmp 0x4a8db0
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xa
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004a8d00
Function at 0x4af060
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af192
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x74987c768e765049
mov qword [rsp + 0x18], rdx
movabs rdx, 0x2e6c616366a1496e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x496562209c6b2e6c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x7e92728d7ba07278
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x41618071d0a1a15
mov qword [rsp + 0x36], rdx
movabs rdx, 0x1605181009031506
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1d06160518100903
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1b1100011a1a071c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15060f0b09080202
mov qword [rsp + 0x50], rdx
movabs rdx, 0x191b070108181b0f
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4af12f
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x14]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x14]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x2a
jge 0x4af15c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4af185
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x1e
jb 0x4af112
jmp 0x4af177
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1e
call fcn.0044a200
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1e
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x1e
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004af060
Function at 0x4b1620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1728
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xc5e35f65eb1f5fee
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xdb61f0c5e35f65eb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x78f3e253e32eaf75
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa0a0f0c07110b
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6030a110201070c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x81006030a110201
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe0c070105070211
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b16c2
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x64]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x64]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1a
jge 0x4b16ef
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b171b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b16a5
jmp 0x4b170f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x13
nop dword [rax + rax]
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x13
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004b1620
Function at 0x4b3be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b3cab
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xa86ed392db66dcde
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x20
movabs rdx, 0x607050100070404
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x1050305
xor eax, eax
jmp 0x4b3c44
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x2d]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x2d]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x4b3c77
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x4b3c9e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4b3c27
jmp 0x4b3c92
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004b3be0

Function at 0x4b42a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4368
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x40744947f06619fc
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x20
movabs rdx, 0x407000103040800
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x500
xor eax, eax
jmp 0x4b4300
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x1c]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xa
jge 0x4b4332
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4b435b
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x1c]
cmp rsi, 9
jb 0x4b42e6
jmp 0x4b434f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004b42a0
Function at 0x4b6a20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6b28
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xe2d383bc45647838
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x7320c91bb4e2d383
mov qword [rsp + 0x24], rdx
movabs rdx, 0x26186f2961706d37
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1309111400060303
mov qword [rsp + 0x34], rdx
movabs rdx, 0x140c14010d0d070a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x30a0812140c1401
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1305040c0d061109
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b6ac0
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4b6af2
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b6b1b
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x15
jb 0x4b6aa5
jmp 0x4b6b0f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x15
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x15
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x15
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004b6a20

Function at 0x4b6b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6c28
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x2dcec86caa76badc
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xe3c9654757497261
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0a03010f000c0f
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7010b0a0b0a0301
mov qword [rsp + 0x30], rdx
movabs rdx, 0x601070e0e050503
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b6bc1
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x79]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x14
jge 0x4b6bf3
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b6c1b
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x79]
cmp rsi, 0x10
jb 0x4b6ba7
jmp 0x4b6c0f
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x10
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x10
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004b6b40
Function at 0x4b6c40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6d36
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x42e17369e772dc70
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3d42e17369e772dc
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2d234c7652e45d6
mov qword [rsp + 0x22], rdx
movabs rdx, 0xf070e0d0b0d0810
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x1100a0f100f0f07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6030a080d0f0901
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b6cd3
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x5b]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x5b]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x4b6d02
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b6d29
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x4b6cb6
nop
jmp 0x4b6d1d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.0044a200
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x11
call fcn.0045f5c0
nop
call fcn.0045cf60
nop dword [rax + rax]
jmp fcn.004b6c40

Function at 0x4b9460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9528
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x703e403537000742
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0xda
movabs rdx, 0x3050200010208
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4080506
xor eax, eax
jmp 0x4b94c1
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x29]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x4b94f3
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4b951b
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x29]
cmp rsi, 9
jb 0x4b94a7
jmp 0x4b950f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004b9460
Function at 0x4b9ba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9c6b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x492d2e49f83e5562
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x72
movabs rdx, 0x601070703030405
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x4010402
xor eax, eax
jmp 0x4b9c04
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x2a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x2a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0xc
jge 0x4b9c37
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 9
jae 0x4b9c5e
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4b9be7
jmp 0x4b9c52
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.0045f5c0
mov eax, edi
mov ecx, 9
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004b9ba0

Function at 0x4ba400
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba4d2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x703cd46525c7cb39
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6570cd703cd46525
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x603050108020100
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x3060303
xor eax, eax
jmp 0x4ba46b
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6a]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4ba49d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ba4c5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6a]
cmp rsi, 0xb
jb 0x4ba451
jmp 0x4ba4b8
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004ba400
Function at 0x4c0d80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c0e52
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x7f7e73207c848466
mov qword [rsp + 0x19], rdx
movabs rdx, 0x736d727f7e73207c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x309020801060807
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5010608
xor eax, eax
jmp 0x4c0deb
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x18]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4c0e1d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c0e45
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x18]
cmp rsi, 0xb
jb 0x4c0dd1
jmp 0x4c0e38
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.0044a200
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.0045f5c0
mov eax, edi
mov ecx, 0xb
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004c0d80

Function at 0x4c25e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c26e8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x48654c52754e67ee
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x94e648654c52754e
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x721867c8e6e47430
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20610051004000f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20a1001080501
mov qword [rsp + 0x36], rdx
movabs rdx, 0xd0700020a100108
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60d05040e10090c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c2680
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
nop
cmp rax, 0x1a
jge 0x4c26b2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4c26db
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0x12
jb 0x4c2665
jmp 0x4c26cf
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x12
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004c25e0
Function at 0x4c34a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c35a8
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0xcd5e3681e796506
mov qword [rsp + 0x18], rdx
movabs rdx, 0x481f65540cd5e368
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1f3a16dd766544f4
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1306101000050d11
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x506080b03130a12
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100713060506080b
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0d10120d00000c
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c3540
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0xb]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop
cmp rax, 0x1c
jge 0x4c3572
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c359b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0xb]
cmp rsi, 0x14
jb 0x4c3525
jmp 0x4c358f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
nop
call fcn.0044a200
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x14
call fcn.0045f5c0
mov eax, edi
mov ecx, 0x14
call fcn.0045f5c0
nop
call fcn.0045cf60
jmp fcn.004c34a0