joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a5e60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5f4c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x1873780263cc65b9
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xae65f22118737802
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf3656b9bb3c97275
mov qword [rsp + 0x28], rdx
movabs rdx, 0x30b050b0c020303
mov qword [rsp + 0x30], rdx
movabs rdx, 0x702070e0f080700
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50b091305100408
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a5eea
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x44]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a5f1c
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4a5f3f
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x44]
cmp rsi, 0x14
jb 0x4a5ed0
jmp 0x4a5f33
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x14
call fcn.00441b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.004521e0
mov eax, edi
mov ecx, 0x14
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004a5e60

Function at 0x4a6260
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a6346
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xfc338f9a06ee4e6c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6574862e84fc33
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd0205010a070504
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x80805050d020501
mov qword [rsp + 0x30], rdx
movabs rdx, 0x407080909040403
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4a62e0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x61]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4a6312
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4a6337
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x61]
cmp rsi, 0xe
jb 0x4a62c2
jmp 0x4a632b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.004521e0
mov eax, edi
mov ecx, 0xe
nop
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004a6260
Function at 0x4a7b60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7c4a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc78b996974287544
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6100c78b99697428
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x64b9b470e00696fb
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80a0b0a020506
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x60a07100f080008
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf10100d050c070b
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a7bed
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x7b]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x7b]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x4a7c1a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a7c3d
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x4a7bd0
jmp 0x4a7c31
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004521e0
mov eax, edi
mov ecx, 0x12
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004a7b60

Function at 0x4a7e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7f7d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7093836f7797778d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x729775bc2da27093
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8d7a82953c75a68f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x20606140c070f10
mov qword [rsp + 0x32], rdx
movabs rdx, 0x1120a1107090213
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe14110111060112
mov qword [rsp + 0x40], rdx
movabs rdx, 0x900150608061005
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a7f20
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0xb]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0xb]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4a7f4d
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a7f70
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x16
jb 0x4a7eff
jmp 0x4a7f64
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004521e0
mov eax, edi
mov ecx, 0x16
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004a7e80
Function at 0x4aac00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aacfb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6f46f9c5e15a54a6
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf56172bac36f46f9
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65544cc9dc65d8ec
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xe1305000d0b1308
mov qword [rsp + 0x32], rdx
movabs rdx, 0x20306010c08120e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x31006010c060203
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9120e0d060d1104
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4aac99
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x71]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4aaccb
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4aacee
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x71]
cmp rsi, 0x15
jb 0x4aac7f
jmp 0x4aace2
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441b80
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.004521e0
mov eax, edi
mov ecx, 0x15
call fcn.004521e0
nop
nop dword [rax + rax]
call fcn.0044ff60
jmp fcn.004aac00

Function at 0x4ab840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab95d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x676f8b2065839174
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1985b87f696e8e5f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x6e641985b87f696e
mov qword [rsp + 0x26], rdx
movabs rdx, 0x686b8977a3479a20
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x10190f0008001800
mov qword [rsp + 0x36], rdx
movabs rdx, 0x70f10190f000800
mov qword [rsp + 0x38], rdx
movabs rdx, 0x170d00130e150800
mov qword [rsp + 0x40], rdx
movabs rdx, 0x17090e140f011400
mov qword [rsp + 0x48], rdx
movabs rdx, 0x905000f1714020c
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4ab900
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x16]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x16]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x4ab92d
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4ab950
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4ab8dd
jmp 0x4ab944
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x1a
call fcn.00441b80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.004521e0
mov eax, edi
mov ecx, 0x1a
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004ab840
Function at 0x4ab980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aba9d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x8ba631134ce0f1f
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x75d726e61a136564
mov qword [rsp + 0x23], rdx
movabs rdx, 0x1975d726e61a1365
mov qword [rsp + 0x24], rdx
movabs rdx, 0xbded28c4bc646126
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd1015180700020f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x10a0a010d101518
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0b060a01070414
mov qword [rsp + 0x40], rdx
movabs rdx, 0x20e0c1111010406
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15160f0318180317
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4aba40
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x6f]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x6f]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4aba6d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4aba90
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4aba1d
jmp 0x4aba84
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441b80
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.004521e0
mov eax, edi
mov ecx, 0x19
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004ab980

Function at 0x4acf00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad01d
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x3755c846461e7560
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xce6c0d554446446c
mov qword [rsp + 0x27], rdx
movabs rdx, 0x6374465af9ce6c0d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xf267f1467220015f
mov qword [rsp + 0x34], rdx
movabs rdx, 0x101a0702030d0516
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x1c0a0f05101a0702
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140a0f1509051a16
mov qword [rsp + 0x48], rdx
movabs rdx, 0x11001200030b191a
mov qword [rsp + 0x50], rdx
movabs rdx, 0xc0b04060c191607
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4acfc0
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x3f]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x3f]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4acfed
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4ad010
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4acf9d
jmp 0x4ad004
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.00441b80
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.004521e0
mov eax, edi
mov ecx, 0x1d
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004acf00
Function at 0x4ad040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad13b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xbb7d759b9fea9972
mov qword [rsp + 0x18], rdx
movabs rdx, 0x916281e16482bb7d
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6438738c616883ae
mov qword [rsp + 0x26], rdx
movabs rdx, 0x708040e0402070a
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xc08140603011204
mov qword [rsp + 0x36], rdx
movabs rdx, 0xa0d0c0814060301
mov qword [rsp + 0x38], rdx
movabs rdx, 0x50813010f0b080e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ad0d9
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x36]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4ad10b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ad12e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x36]
cmp rsi, 0x16
jb 0x4ad0bf
jmp 0x4ad122
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.00441b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.004521e0
mov eax, edi
mov ecx, 0x16
call fcn.004521e0
nop
nop dword [rax + rax]
call fcn.0044ff60
jmp fcn.004ad040

Function at 0x4ad160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad246
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x9fe0cdd799a1a6ca
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9754ad6dd572dddd
mov qword [rsp + 0x22], rdx
movabs rdx, 0x701080b09060f02
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x4030206050d0701
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0b000b0308090e
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ad1e0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4ad212
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4ad237
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 0x10
jb 0x4ad1c2
jmp 0x4ad22b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x10
nop
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004521e0
mov eax, edi
mov ecx, 0x10
nop
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004ad160
Function at 0x4b00a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b01ba
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x20cf69544233545b
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6564ff59e8332f63
mov qword [rsp + 0x25], rdx
movabs rdx, 0x5d6564ff59e8332f
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc16efb8e61396369
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x16100d0c14001310
mov qword [rsp + 0x36], rdx
movabs rdx, 0x30416100d0c1400
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa14160912141401
mov qword [rsp + 0x40], rdx
movabs rdx, 0x150d0b0200000a14
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4180306160b1309
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b0157
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6f]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x22
jge 0x4b0189
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4b01ad
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6f]
cmp rsi, 0x19
jb 0x4b013d
jmp 0x4b01a1
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00441b80
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x19
call fcn.004521e0
mov eax, edi
mov ecx, 0x19
call fcn.004521e0
nop
call fcn.0044ff60
nop
jmp fcn.004b00a0

Function at 0x4b0640
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b070c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x5f328985893f9d63
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x936c935f32898589
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50a01070a070505
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x80204030207050a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b06af
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 4]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 4]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4b06dc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b06ff
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b0692
jmp 0x4b06f3
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004521e0
mov eax, edi
mov ecx, 0xb
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004b0640
Function at 0x4b16a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1772
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7113665fa3f4e4c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x126c4007113665fa
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa07020501000808
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x7030a0a07060a07
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b170c
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x24]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b173e
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4b1765
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x24]
cmp rsi, 0xb
jb 0x4b16f2
jmp 0x4b1755
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.004521e0
mov eax, edi
mov ecx, 0xb
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004b16a0

Function at 0x4b2ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b2bca
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x2f13423227a66f25
mov qword [rsp + 0x18], rdx
movabs rdx, 0xb0df2f13423227a6
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x1b653361ee2c1075
mov qword [rsp + 0x22], rdx
movabs rdx, 0xd0d040908020d09
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x11000c0f00080d0d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50b020d060b0307
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b2b6d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x4e]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x4e]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x4b2b9a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b2bbd
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x4b2b50
jmp 0x4b2bb1
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.004521e0
mov eax, edi
mov ecx, 0x12
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004b2ae0
Function at 0x4b58e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b59b2
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x4937613a53016547
mov qword [rsp + 0x19], rdx
movabs rdx, 0x45ef4b4973725449
mov qword [rsp + 0x20], rdx
movabs rdx, 0x202070607040c08
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe03070703020d0e
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b594c
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x16]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b597e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b59a5
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x16]
cmp rsi, 0xf
jb 0x4b5932
jmp 0x4b5995
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00441b80
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
nop dword [rax]
call fcn.004521e0
mov eax, edi
mov ecx, 0xf
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004b58e0

Function at 0x4b59c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5a8c
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5a3e45666d664666
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x7950
movabs rdx, 0x602010801000706
mov qword [rsp + 0x22], rdx
movabs rdx, 0x101070303020602
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4b5a24
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 2]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b5a5c
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xa
jae 0x4b5a7f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 2]
cmp rsi, 0xa
jb 0x4b5a0a
jmp 0x4b5a73
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.004521e0
mov eax, edi
mov ecx, 0xa
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004b59c0
Function at 0x4b5ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5dbd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x8fd19811faab81d2
mov qword [rsp + 0x18], rdx
movabs rdx, 0xfca092fe73f01781
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3010d0b080b010b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x40e0c05070c0006
mov qword [rsp + 0x30], rdx
movabs rdx, 0x9040f0a0c0b020c
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b5d60
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x80]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x80]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4b5d8d
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b5db0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b5d42
jmp 0x4b5da4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004521e0
mov eax, edi
mov ecx, 0x10
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004b5ce0

Function at 0x4b60a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6167
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x69635f747165727c
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7a6b5369635f7471
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x3070507060a050a
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x8000909
xor eax, eax
jmp 0x4b6108
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 2]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 2]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0xc
jge 0x4b6137
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4b615a
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xb
jb 0x4b60eb
jmp 0x4b614e
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441b80
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.004521e0
mov eax, edi
mov ecx, 0xb
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004b60a0
Function at 0x4b6a80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6b6a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x880cb7890959f8fd
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xd3fd6d880cb78909
mov qword [rsp + 0x22], rdx
movabs rdx, 0x576b9369f663da9d
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x70b021000040a0e
mov qword [rsp + 0x32], rdx
movabs rdx, 0x70709020c00070b
mov qword [rsp + 0x38], rdx
movabs rdx, 0x10050103060b0510
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b6b0d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x7d]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x7d]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4b6b3a
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b6b5d
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b6af0
jmp 0x4b6b51
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441b80
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.004521e0
mov eax, edi
mov ecx, 0x13
call fcn.004521e0
nop
call fcn.0044ff60
jmp fcn.004b6a80

Function at 0x4b8840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b891d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x75705f3e1b4c5e47
mov qword [rsp + 0x18], rdx
movabs rdx, 0x185b4c694e5c3c24
mov qword [rsp + 0x20], rdx
movabs rdx, 0x90d01080f04080f
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe0d02030404010f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10c0c0a050e0302
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b88c0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x23]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x23]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop
cmp rax, 0x18
jge 0x4b88ed
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b8910
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b88a2
jmp 0x4b8904
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x10
call fcn.00441b80
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.004521e0
mov eax, edi
mov ecx, 0x10
call fcn.004521e0
nop
nop dword [rax]
call fcn.0044ff60
jmp fcn.004b8840