joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4b4be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x4b4d67
push rbp
mov rbp, rsp
sub rsp, 0x88
movabs rdx, 0x2724091d09030312
mov qword [rsp + 0x19], rdx
movabs rdx, 0x2a12011309082909
mov qword [rsp + 0x21], rdx
movabs rdx, 0x11021c2d00092a12
mov qword [rsp + 0x27], rdx
movabs rdx, 0x181c1e2625072122
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x1503181d24042f1f
mov qword [rsp + 0x37], rdx
movabs rdx, 0x709250814252b26
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x18050e1b05052d02
mov qword [rsp + 0x47], rdx
movabs rdx, 0x82f110110062c
mov qword [rsp + 0x4f], rdx
movabs rdx, 0x463b5f637e3a9041
mov qword [rsp + 0x57], rdx
movabs rdx, 0xb5463b5f637e3a90
mov qword [rsp + 0x58], rdx
movabs rdx, 0x5f6d55636e69204e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x93756d61237dde53
mov qword [rsp + 0x68], rdx
movabs rdx, 0x6f1a619c4a626974
mov qword [rsp + 0x70], rdx
movabs rdx, 0x63974d7251779341
mov qword [rsp + 0x78], rdx
movabs rdx, 0x720c74983e6c5988
mov qword [rsp + 0x80], rdx
xor eax, eax
jmp 0x4b4d00
movzx r9d, byte [rsp + rsi + 0x57]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x3a]
mov byte [rsp + rdi + 0x57], dl
mov byte [rsp + rsi + 0x57], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x3e
jge 0x4b4d32
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x31
jae 0x4b4d5a
movzx r8d, byte [rsp + rdi + 0x57]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x3a]
cmp rsi, 0x31
jb 0x4b4ce2
jmp 0x4b4d4e
xor eax, eax
lea rbx, [rsp + 0x57]
mov ecx, 0x31
nop
call fcn.0044d280
add rsp, 0x88
pop rbp
ret
mov eax, esi
mov ecx, 0x31
call fcn.00462ca0
mov eax, edi
mov ecx, 0x31
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b4be0

Function at 0x4b5c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5d66
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x20606040b0a0e05
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x90a020606040b0a
mov qword [rsp + 0x21], rdx
movabs rdx, 0xc090d06080e0403
mov qword [rsp + 0x29], rdx
movabs rdx, 0x209fdeff22d8656b
mov qword [rsp + 0x31], rdx
movabs rdx, 0x21252eb031301d20
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b5d00
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x35]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4b5d32
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4b5d57
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x35]
cmp rsi, 0xf
jb 0x4b5ce2
jmp 0x4b5d4b
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0xf
nop
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00462ca0
mov eax, edi
mov ecx, 0xf
nop
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b5c80
Function at 0x4b6e20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6f6c
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x612040b1e091211
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x60e2103081e0612
mov qword [rsp + 0x23], rdx
movabs rdx, 0x613210f1b141b01
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x1b120a041104111f
mov qword [rsp + 0x33], rdx
movabs rdx, 0x1f0d091c1e1a1d24
mov qword [rsp + 0x3b], rdx
movabs rdx, 0xc0f24141c091a19
mov qword [rsp + 0x43], rdx
movabs rdx, 0xa24070d07051e1a
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x95e05860bf6eac63
mov qword [rsp + 0x53], rdx
movabs rdx, 0x8cd89ae7ef95e058
mov qword [rsp + 0x58], rdx
movabs rdx, 0xc74a183b6176cd8f
mov qword [rsp + 0x60], rdx
movabs rdx, 0x528cc2b47262696c
mov qword [rsp + 0x68], rdx
movabs rdx, 0x606c749565ead115
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4b6f04
movzx r9d, byte [rsp + rsi + 0x53]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x53]
mov byte [rsp + rdi + 0x53], dl
mov byte [rsp + rsi + 0x53], r8b
add rax, 2
cmp rax, 0x36
jge 0x4b6f3c
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x25
jae 0x4b6f5f
movzx r8d, byte [rsp + rdi + 0x53]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x53]
cmp rsi, 0x25
jb 0x4b6eea
jmp 0x4b6f53
xor eax, eax
lea rbx, [rsp + 0x53]
mov ecx, 0x25
call fcn.0044d280
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x25
call fcn.00462ca0
mov eax, edi
mov ecx, 0x25
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b6e20

Function at 0x4b6f80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b708c
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x1b000306140a0d00
mov qword [rsp + 0x19], rdx
movabs rdx, 0x111c0e070c0c1c02
mov qword [rsp + 0x21], rdx
movabs rdx, 0x11812170c040c11
mov qword [rsp + 0x29], rdx
movabs rdx, 0xf14070313110809
mov qword [rsp + 0x31], rdx
movabs rdx, 0x5b3e73085ea0455e
mov qword [rsp + 0x39], rdx
movabs rdx, 0x3d3146286ecb5d52
mov qword [rsp + 0x41], rdx
movabs rdx, 0x63205114585b613d
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6465450f75723f58
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b7028
movzx r9d, byte [rsp + rsi + 0x39]
lea edx, [r9 + rdx]
lea edx, [rdx - 2]
mov byte [rsp + rdi + 0x39], dl
mov byte [rsp + rsi + 0x39], r8b
add rax, 2
cmp rax, 0x20
jge 0x4b705c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x4b707f
movzx r8d, byte [rsp + rdi + 0x39]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 2]
cmp rsi, 0x1f
jb 0x4b700e
jmp 0x4b7073
xor eax, eax
lea rbx, [rsp + 0x39]
mov ecx, 0x1f
call fcn.0044d280
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1f
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b6f80
Function at 0x4b74c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b75e7
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x120414181b12071a
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xa07120414181b12
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x81c161e1e0f1620
mov qword [rsp + 0x27], rdx
movabs rdx, 0xc1f0e0d0f141c09
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x20120d0205071d18
mov qword [rsp + 0x37], rdx
movabs rdx, 0xda6ef19520f36f74
mov qword [rsp + 0x3f], rdx
movabs rdx, 0x6bda6ef19520f36f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6f4969e6f07648ed
mov qword [rsp + 0x48], rdx
movabs rdx, 0x136f666d4c738566
mov qword [rsp + 0x50], rdx
movabs rdx, 0x78ea79e59e484b69
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4b7589
movzx r9d, byte [rsp + rsi + 0x3f]
sub r9d, edx
lea edx, [r9 - 0x5a]
mov byte [rsp + rdi + 0x3f], dl
lea edx, [r8 - 0x5a]
mov byte [rsp + rsi + 0x3f], dl
add rax, 2
cmp rax, 0x22
jge 0x4b75b7
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x21
jae 0x4b75da
movzx r8d, byte [rsp + rdi + 0x3f]
sub r8d, edx
cmp rsi, 0x21
jb 0x4b756c
jmp 0x4b75ce
xor eax, eax
lea rbx, [rsp + 0x3f]
mov ecx, 0x21
call fcn.0044d280
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x21
call fcn.00462ca0
mov eax, edi
mov ecx, 0x21
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b74c0

Function at 0x4b7600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b76ec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xc090a0c030b0404
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xc0f0c090a0c030b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x3040e0e0010090f
mov qword [rsp + 0x27], rdx
movabs rdx, 0x656d20e9ac6f7292
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x64656d20e9ac6f72
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa45eb474b4d8261e
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b768a
movzx r9d, byte [rsp + rsi + 0x2f]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x49]
mov byte [rsp + rdi + 0x2f], dl
mov byte [rsp + rsi + 0x2f], r8b
add rax, 2
cmp rax, 0x12
jge 0x4b76bc
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b76df
movzx r8d, byte [rsp + rdi + 0x2f]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x49]
cmp rsi, 0x11
jb 0x4b7670
jmp 0x4b76d3
xor eax, eax
lea rbx, [rsp + 0x2f]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b7600
Function at 0x4b7d00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b7dcc
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xe03090806070d04
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1030f060c09080b
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6717676c7573776d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6e705e72736f1868
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b7d6f
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0xc]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0xc]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x4b7d9c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b7dbf
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b7d52
jmp 0x4b7db3
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00462ca0
mov eax, edi
mov ecx, 0x10
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b7d00

Function at 0x4b8160
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b827a
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0xf0811011200051c
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x511030f00050e06
mov qword [rsp + 0x23], rdx
movabs rdx, 0x171b1208121c1300
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x61c140c0803170a
mov qword [rsp + 0x33], rdx
movabs rdx, 0xa02000e050c1105
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x58cc0c4527076b4d
mov qword [rsp + 0x43], rdx
movabs rdx, 0xd8bd70fd6d047346
mov qword [rsp + 0x4b], rdx
movabs rdx, 0x8fb3cd2b72d8bd70
mov qword [rsp + 0x50], rdx
movabs rdx, 0x450b62616c1a6176
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4b8217
movzx r9d, byte [rsp + rsi + 0x43]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x30]
mov byte [rsp + rdi + 0x43], dl
mov byte [rsp + rsi + 0x43], r8b
add rax, 2
cmp rax, 0x28
jge 0x4b8249
movzx edx, byte [rsp + rax + 0x1b]
movzx esi, byte [rsp + rax + 0x1c]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4b826d
movzx r8d, byte [rsp + rdi + 0x43]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x30]
cmp rsi, 0x1d
jb 0x4b81fd
jmp 0x4b8261
xor eax, eax
lea rbx, [rsp + 0x43]
mov ecx, 0x1d
call fcn.0044d280
add rsp, 0x60
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1d
call fcn.00462ca0
nop
call fcn.004609c0
nop
jmp fcn.004b8160
Function at 0x4b91c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b92ac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xb030f0500101006
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xb09101006050d07
mov qword [rsp + 0x27], rdx
movabs rdx, 0xb000302060c0f0e
mov qword [rsp + 0x2f], rdx
movabs rdx, 0x4fa43120213d7832
mov qword [rsp + 0x37], rdx
movabs rdx, 0x6d4fa43120213d78
mov qword [rsp + 0x38], rdx
movabs rdx, 0x21fb4d4f42207412
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b924a
movzx r9d, byte [rsp + rsi + 0x37]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x11]
mov byte [rsp + rdi + 0x37], dl
mov byte [rsp + rsi + 0x37], r8b
add rax, 2
cmp rax, 0x18
jge 0x4b927c
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4b929f
movzx r8d, byte [rsp + rdi + 0x37]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x11]
cmp rsi, 0x11
jb 0x4b9230
jmp 0x4b9293
xor eax, eax
lea rbx, [rsp + 0x37]
mov ecx, 0x11
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00462ca0
mov eax, edi
mov ecx, 0x11
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004b91c0

Function at 0x4bc460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bc54c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x50d13030a0b0215
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1515030913120605
mov qword [rsp + 0x21], rdx
movabs rdx, 0x1020c0406070305
mov qword [rsp + 0x29], rdx
movabs rdx, 0xabfb67adfaeaa16f
mov qword [rsp + 0x31], rdx
movabs rdx, 0x73429ac0c1f26eab
mov qword [rsp + 0x38], rdx
movabs rdx, 0x64ea74a0bc707075
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bc4ea
movzx r9d, byte [rsp + rsi + 0x31]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x55]
mov byte [rsp + rdi + 0x31], dl
mov byte [rsp + rsi + 0x31], r8b
add rax, 2
cmp rax, 0x18
jge 0x4bc51c
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4bc53f
movzx r8d, byte [rsp + rdi + 0x31]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x55]
cmp rsi, 0x17
jb 0x4bc4d0
jmp 0x4bc533
xor eax, eax
lea rbx, [rsp + 0x31]
mov ecx, 0x17
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00462ca0
mov eax, edi
mov ecx, 0x17
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004bc460
Function at 0x4bcf00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd01a
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x50b0c18000e000d
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf0b050b0c18000e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x1804000c0a13071c
mov qword [rsp + 0x23], rdx
movabs rdx, 0xe0e101400041601
mov qword [rsp + 0x2b], rdx
movabs rdx, 0xf1c080619130e08
mov qword [rsp + 0x33], rdx
movabs rdx, 0xd6fb264a746f4e66
mov qword [rsp + 0x3b], rdx
movabs rdx, 0x684d112956356660
mov qword [rsp + 0x43], rdx
movabs rdx, 0x5b43746f60684d11
mov qword [rsp + 0x48], rdx
movabs rdx, 0x4e6574013a705075
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4bcfb7
movzx r9d, byte [rsp + rsi + 0x3b]
lea edx, [r9 + rdx]
lea edx, [rdx - 7]
mov byte [rsp + rdi + 0x3b], dl
mov byte [rsp + rsi + 0x3b], r8b
add rax, 2
cmp rax, 0x22
jge 0x4bcfe9
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4bd00d
movzx r8d, byte [rsp + rdi + 0x3b]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 7]
cmp rsi, 0x1d
jb 0x4bcf9d
jmp 0x4bd001
xor eax, eax
lea rbx, [rsp + 0x3b]
mov ecx, 0x1d
call fcn.0044d280
add rsp, 0x58
pop rbp
nop
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1d
call fcn.00462ca0
nop
call fcn.004609c0
nop
jmp fcn.004bcf00

Function at 0x4bd040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bd107
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x60a080808010900
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xa030a050100060a
mov qword [rsp + 0x25], rdx
movabs rdx, 0x704343654f6f224e
mov qword [rsp + 0x2d], rdx
mov dword [rsp + 0x34], 0x72e2070
xor eax, eax
jmp 0x4bd0a8
movzx r9d, byte [rsp + rsi + 0x2d]
sub r9d, edx
lea edx, [r9 + 0x2b]
mov byte [rsp + rdi + 0x2d], dl
lea edx, [r8 + 0x2b]
mov byte [rsp + rsi + 0x2d], dl
add rax, 2
cmp rax, 0xe
jge 0x4bd0d7
movzx edx, byte [rsp + rax + 0x1f]
movzx esi, byte [rsp + rax + 0x20]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0xb
jae 0x4bd0fa
movzx r8d, byte [rsp + rdi + 0x2d]
sub r8d, edx
cmp rsi, 0xb
jb 0x4bd08b
jmp 0x4bd0ee
xor eax, eax
lea rbx, [rsp + 0x2d]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004bd040
Function at 0x4bf440
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bf53d
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xf040d0406121411
mov qword [rsp + 0x19], rdx
movabs rdx, 0x131206110e0c00
mov qword [rsp + 0x21], rdx
movabs rdx, 0x121300131206110e
mov qword [rsp + 0x23], rdx
movabs rdx, 0xb1107120700140d
mov qword [rsp + 0x2b], rdx
movabs rdx, 0x602820416c617452
mov qword [rsp + 0x33], rdx
movabs rdx, 0xff72662053602820
mov qword [rsp + 0x38], rdx
movabs rdx, 0xf24129396148682a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bf4e0
movzx r9d, byte [rsp + rsi + 0x33]
sub r9d, edx
lea edx, [r9 + 0x2e]
mov byte [rsp + rdi + 0x33], dl
lea edx, [r8 + 0x2e]
mov byte [rsp + rsi + 0x33], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4bf50d
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4bf530
movzx r8d, byte [rsp + rdi + 0x33]
sub r8d, edx
cmp rsi, 0x15
jb 0x4bf4bf
jmp 0x4bf524
xor eax, eax
lea rbx, [rsp + 0x33]
mov ecx, 0x15
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00462ca0
mov eax, edi
mov ecx, 0x15
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004bf440

Function at 0x4bfb40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bfc2a
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x3010b03000a0a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x1104030b10070003
mov qword [rsp + 0x24], rdx
movabs rdx, 0x813070f02110d10
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x2d746328c54d04e7
mov qword [rsp + 0x34], rdx
movabs rdx, 0x38db6e5e2d746328
mov qword [rsp + 0x38], rdx
movabs rdx, 0x597541133e650669
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4bfbcd
movzx r9d, byte [rsp + rsi + 0x34]
sub r9d, edx
lea edx, [r9 + 0x45]
mov byte [rsp + rdi + 0x34], dl
lea edx, [r8 + 0x45]
mov byte [rsp + rsi + 0x34], dl
add rax, 2
cmp rax, 0x16
jge 0x4bfbfa
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4bfc1d
movzx r8d, byte [rsp + rdi + 0x34]
sub r8d, edx
cmp rsi, 0x14
jb 0x4bfbb0
jmp 0x4bfc11
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x14
call fcn.0044d280
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00462ca0
mov eax, edi
mov ecx, 0x14
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004bfb40
Function at 0x4c2000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c20bd
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x305000808000406
mov qword [rsp + 0x1d], rdx
mov word [rsp + 0x25], 0x501
movabs rdx, 0x6ca9b3a1026475fa
mov qword [rsp + 0x27], rdx
mov byte [rsp + 0x2f], 0xf8
xor eax, eax
nop
jmp 0x4c2060
movzx r9d, byte [rsp + rsi + 0x27]
sub r9d, edx
lea edx, [r9 - 0x3b]
mov byte [rsp + rdi + 0x27], dl
lea edx, [r8 - 0x3b]
mov byte [rsp + rsi + 0x27], dl
add rax, 2
nop
cmp rax, 0xa
jge 0x4c208d
movzx edx, byte [rsp + rax + 0x1d]
movzx esi, byte [rsp + rax + 0x1e]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4c20b0
movzx r8d, byte [rsp + rdi + 0x27]
sub r8d, edx
cmp rsi, 9
jb 0x4c2042
jmp 0x4c20a4
xor eax, eax
lea rbx, [rsp + 0x27]
mov ecx, 9
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00462ca0
mov eax, edi
mov ecx, 9
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004c2000

Function at 0x4c2740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c27fe
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x103040707080607
mov qword [rsp + 0x19], rdx
mov dword [rsp + 0x21], 0x40a0809
movabs rdx, 0x2da96eeb31653075
mov qword [rsp + 0x25], rdx
mov dword [rsp + 0x2c], 0x3323be2d
xor eax, eax
jmp 0x4c27a1
movzx r9d, byte [rsp + rsi + 0x25]
sub r9d, edx
lea edx, [r9 + 0x4a]
mov byte [rsp + rdi + 0x25], dl
lea edx, [r8 + 0x4a]
mov byte [rsp + rsi + 0x25], dl
add rax, 2
cmp rax, 0xc
jge 0x4c27ce
movzx edx, byte [rsp + rax + 0x19]
movzx esi, byte [rsp + rax + 0x1a]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4c27f1
movzx r8d, byte [rsp + rdi + 0x25]
sub r8d, edx
cmp rsi, 0xb
jb 0x4c2784
jmp 0x4c27e5
xor eax, eax
lea rbx, [rsp + 0x25]
mov ecx, 0xb
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00462ca0
mov eax, edi
mov ecx, 0xb
call fcn.00462ca0
nop
nop
call fcn.004609c0
jmp fcn.004c2740

Function at 0x4c3be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c3cbd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x20307060809070c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x7050e0a090d0203
mov qword [rsp + 0x20], rdx
movabs rdx, 0x3070d0d080f0502
mov qword [rsp + 0x28], rdx
movabs rdx, 0xaf4cf575ff166552
mov qword [rsp + 0x30], rdx
movabs rdx, 0xacb9ac0075c5ef23
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4c3c60
movzx r9d, byte [rsp + rsi + 0x30]
sub r9d, edx
lea edx, [r9 - 0x3f]
mov byte [rsp + rdi + 0x30], dl
lea edx, [r8 - 0x3f]
mov byte [rsp + rsi + 0x30], dl
add rax, 2
nop
cmp rax, 0x16
jge 0x4c3c8d
movzx edx, byte [rsp + rax + 0x1a]
movzx esi, byte [rsp + rax + 0x1b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4c3cb0
movzx r8d, byte [rsp + rdi + 0x30]
sub r8d, edx
cmp rsi, 0x10
jb 0x4c3c42
jmp 0x4c3ca4
xor eax, eax
lea rbx, [rsp + 0x30]
mov ecx, 0x10
call fcn.0044d280
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00462ca0
mov eax, edi
mov ecx, 0x10
call fcn.00462ca0
nop
nop dword [rax]
call fcn.004609c0
jmp fcn.004c3be0
Function at 0x4c4b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c4c4c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x202151312190b18
mov qword [rsp + 0x18], rdx
movabs rdx, 0x1915140b1311110b
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf0f150509191915
mov qword [rsp + 0x26], rdx
movabs rdx, 0x10010b0818081914
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x6565924674b27a43
mov qword [rsp + 0x36], rdx
movabs rdx, 0x95696669ee72b896
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xd67e95696669ee72
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9ed46574ea87f3fb
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4c4be8
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4c4c1c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4c4c3f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 0x1a
jb 0x4c4bce
jmp 0x4c4c33
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.0044d280
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00462ca0
mov eax, edi
mov ecx, 0x1a
call fcn.00462ca0
nop
call fcn.004609c0
jmp fcn.004c4b40

Function at 0x4c5ae0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4c5b98
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x706030404050407
mov qword [rsp + 0x1e], rdx
mov word [rsp + 0x26], 0x304
movabs rdx, 0x3edcb41f496e6143
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4c5b38
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0xa
jge 0x4c5b68
movzx edx, byte [rsp + rax + 0x1e]
movzx esi, byte [rsp + rax + 0x1f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4c5b8b
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop dword [rax]
cmp rsi, 8
jb 0x4c5b1b
jmp 0x4c5b7f
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 8
call fcn.0044d280
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00462ca0
mov eax, edi
mov ecx, 8
call fcn.00462ca0
nop
call fcn.004609c0
nop dword [rax]
jmp fcn.004c5ae0