joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b12a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b13bd
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x63e50c7413c381db
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf9ec65b42a0aeeee
mov qword [rsp + 0x25], rdx
movabs rdx, 0x69727b0d21f9ec65
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x74736c4c6556f6eb
mov qword [rsp + 0x32], rdx
movabs rdx, 0x702111a17000e15
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1017010611120702
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf081a160b110010
mov qword [rsp + 0x48], rdx
movabs rdx, 0x70a031611160c17
mov qword [rsp + 0x50], rdx
movabs rdx, 0x17020c050609020a
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4b1360
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x6f]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x6f]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x26
jge 0x4b138d
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4b13b0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4b133d
jmp 0x4b13a4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x1d
call fcn.00440c20
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00450f00
mov eax, edi
mov ecx, 0x1d
call fcn.00450f00
nop
nop dword [rax]
call fcn.0044ec80
jmp fcn.004b12a0

Function at 0x4b13e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b14c6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2449a813b582a30c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1916b0af6eb34324
mov qword [rsp + 0x24], rdx
movabs rdx, 0x20b04030c010707
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5020d0e020b0403
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb010c02040904
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b1460
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4b1492
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b14b7
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4b]
cmp rsi, 0xf
jb 0x4b1442
jmp 0x4b14ab
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xf
nop
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00450f00
mov eax, edi
mov ecx, 0xf
nop
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b13e0
Function at 0x4b16a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b176c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x968a72abf6a29845
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x88bcfd968a72abf6
mov qword [rsp + 0x22], rdx
movabs rdx, 0x607090203080309
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x201040a03020607
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b170f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x20]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x20]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4b173c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b175f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b16f2
jmp 0x4b1753
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00450f00
mov eax, edi
mov ecx, 0xb
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b16a0

Function at 0x4b1ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1bb2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xc6fbf87d64880446
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x57d0f1698cc6fbf8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x408060208060a05
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x807040b01060408
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b1b4c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x65]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b1b7e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4b1ba5
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x65]
cmp rsi, 0xd
jb 0x4b1b32
jmp 0x4b1b95
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xd
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00450f00
mov eax, edi
mov ecx, 0xd
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b1ae0
Function at 0x4b1bc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1c9d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x186946231f171e4c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xd213b66123e4365
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb0705020b070d0f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x9040b0705020b07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30001090d0a0d0e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b1c40
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x3a]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x3a]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4b1c6d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b1c90
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b1c22
jmp 0x4b1c84
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00450f00
mov eax, edi
mov ecx, 0x10
call fcn.00450f00
nop
nop dword [rax]
call fcn.0044ec80
jmp fcn.004b1bc0

Function at 0x4b22c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b238c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe6626c4cf5c76a66
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xfc7261e6626c4cf5
mov qword [rsp + 0x22], rdx
movabs rdx, 0x5070a0105010a05
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x103000200010507
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b232f
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x75]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x75]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4b235c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b237f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b2312
jmp 0x4b2373
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00450f00
mov eax, edi
mov ecx, 0xb
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b22c0
Function at 0x4b37a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b389d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6b7ea79a7d976594
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x686f6b7ea79a7d97
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7b9f6563b97253a3
mov qword [rsp + 0x26], rdx
movabs rdx, 0xb00070309000a11
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb030303110d0511
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6090b030303110d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x410110205070105
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b3840
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 5]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 5]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4b386d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b3890
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x4b381f
jmp 0x4b3884
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.00440c20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00450f00
mov eax, edi
mov ecx, 0x12
call fcn.00450f00
nop
nop dword [rax]
call fcn.0044ec80
jmp fcn.004b37a0

Function at 0x4b4f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b502c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x9f7288747766afa0
mov qword [rsp + 0x19], rdx
movabs rdx, 0xacb8796e49709c9f
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc030d0d0e03070d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x501020000010807
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b4fcf
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x11]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x11]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4b4ffc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b501f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4b4fb2
jmp 0x4b5013
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00450f00
mov eax, edi
mov ecx, 0xf
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b4f60
Function at 0x4b5420
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b54e7
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x500e4e6558745645
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x2b447453
movabs rdx, 0x1080b0005050106
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x8000000030a0108
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b5488
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 + 0x21]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
cmp rax, 0xe
jge 0x4b54b7
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xc
jae 0x4b54da
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0xc
jb 0x4b546b
jmp 0x4b54ce
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00450f00
mov eax, edi
mov ecx, 0xc
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b5420

Function at 0x4b5ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5ba6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0xafec0b0fbec26f4c
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x67
movabs rdx, 0x407050202080203
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x5060304
xor eax, eax
nop
jmp 0x4b5b40
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x4d]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4b5b72
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4b5b97
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x4d]
cmp rsi, 9
jb 0x4b5b22
jmp 0x4b5b8b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.00440c20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00450f00
mov eax, edi
mov ecx, 9
nop
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b5ae0

Function at 0x4b7f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b7fec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xfc09a0212874652b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x4d4569fc09a02128
mov qword [rsp + 0x20], rdx
movabs rdx, 0x700070506070707
mov qword [rsp + 0x28], rdx
movabs rdx, 0x909040a03040003
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b7f8f
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0x36]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0x36]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x10
jge 0x4b7fbc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b7fdf
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b7f72
jmp 0x4b7fd3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00450f00
mov eax, edi
mov ecx, 0xb
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004b7f20
Function at 0x4b9ca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9d9b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xaf017442108e74e8
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xa8690db06556af01
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb27268626dc44eb8
mov qword [rsp + 0x28], rdx
movabs rdx, 0x60500030e1303
mov qword [rsp + 0x30], rdx
movabs rdx, 0x60b1503040b0b10
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd0e0a0d07030204
mov qword [rsp + 0x40], rdx
movabs rdx, 0x4060203030a050a
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b9d39
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x45]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4b9d6b
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4b9d8e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x45]
cmp rsi, 0x16
jb 0x4b9d1f
jmp 0x4b9d82
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
call fcn.00440c20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00450f00
mov eax, edi
mov ecx, 0x16
call fcn.00450f00
nop
nop dword [rax + rax]
call fcn.0044ec80
jmp fcn.004b9ca0

Function at 0x4babe0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bac9d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x8561646c438b688a
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0x81ac
movabs rdx, 0x209050108090107
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7020009
xor eax, eax
jmp 0x4bac40
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 9]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 9]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0xc
jge 0x4bac6d
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4bac90
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0xa
jb 0x4bac23
jmp 0x4bac84
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
call fcn.00440c20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00450f00
mov eax, edi
mov ecx, 0xa
call fcn.00450f00
nop
nop dword [rax]
call fcn.0044ec80
jmp fcn.004babe0
Function at 0x4bbc20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbcf2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1b17736f0dbdc6b9
mov qword [rsp + 0x1b], rdx
movabs rdx, 0xc8cb1fbc791b1773
mov qword [rsp + 0x20], rdx
movabs rdx, 0x20c0301060907
mov qword [rsp + 0x28], rdx
movabs rdx, 0x20a070003060a0b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bbc8c
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x45]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4bbcbe
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4bbce5
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x45]
cmp rsi, 0xd
jb 0x4bbc72
jmp 0x4bbcd5
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00450f00
mov eax, edi
mov ecx, 0xd
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004bbc20

Function at 0x4bbd00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbde6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x6f716f81878980bb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x8782718879c76f71
mov qword [rsp + 0x24], rdx
movabs rdx, 0x408040a0c000008
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd0c02040408040a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6010b00030d0303
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4bbd80
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x25]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4bbdb2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4bbdd7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x25]
cmp rsi, 0xe
jb 0x4bbd62
jmp 0x4bbdcb
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00450f00
mov eax, edi
mov ecx, 0xe
nop
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004bbd00
Function at 0x4bd7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd892
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x70ef77d16c69ae21
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe4646125f5e96f70
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7090409050b0106
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb0a0907050e0007
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4bd82c
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4bd85e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4bd885
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
cmp rsi, 0xf
jb 0x4bd812
jmp 0x4bd875
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.00450f00
mov eax, edi
mov ecx, 0xf
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004bd7c0

Function at 0x4c8200
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c82d8
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7f84958f9ec41f56
mov qword [rsp + 0x1a], rdx
mov dword [rsp + 0x22], 0x6c6c8688
movabs rdx, 0x809070706000801
mov qword [rsp + 0x26], rdx
movabs rdx, 0x807080907070600
mov qword [rsp + 0x28], rdx
movabs rdx, 0x205020204030905
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4c8277
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x1b]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x1b]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x12
jge 0x4c82a8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4c82cb
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
nop dword [rax]
cmp rsi, 0xc
jb 0x4c825a
jmp 0x4c82bf
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xc
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00450f00
mov eax, edi
mov ecx, 0xc
call fcn.00450f00
nop
call fcn.0044ec80
nop dword [rax]
jmp fcn.004c8200

Function at 0x4c9760
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c981d
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x978d739294b77d57
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x9e
movabs rdx, 0x701070207040803
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x6030401
xor eax, eax
nop
jmp 0x4c97c0
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop
cmp rax, 0xc
jge 0x4c97ed
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4c9810
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 9
jb 0x4c97a2
jmp 0x4c9804
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
call fcn.00440c20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00450f00
mov eax, edi
mov ecx, 9
call fcn.00450f00
nop
nop dword [rax]
call fcn.0044ec80
jmp fcn.004c9760
Function at 0x4c9ec0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c9fac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1d69223a6587dd74
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xb80a61131d69223a
mov qword [rsp + 0x20], rdx
movabs rdx, 0xcd6562a21e240caa
mov qword [rsp + 0x28], rdx
movabs rdx, 0xf0b0b1302010e05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x501071007020208
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0710130c070d01
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4c9f4a
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x41]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4c9f7c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4c9f9f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x41]
cmp rsi, 0x14
jb 0x4c9f30
jmp 0x4c9f93
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00440c20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00450f00
mov eax, edi
mov ecx, 0x14
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004c9ec0

Function at 0x4c9fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ca0aa
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc46c393adfdf4f40
mov qword [rsp + 0x19], rdx
movabs rdx, 0x153965c46c393adf
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3e6c10696620184d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x2100c07070a0a03
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xb07120002100c07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40110030a090205
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ca04d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x3e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x3e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x4ca07a
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4ca09d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4ca030
jmp 0x4ca091
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00450f00
mov eax, edi
mov ecx, 0x13
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004c9fc0