joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a62a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a63a8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xff65b2a57571bcf9
mov qword [rsp + 0x36], rdx
movabs rdx, 0x746ff920d465d8a4
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa320746ff920d465
mov qword [rsp + 0x40], rdx
movabs rdx, 0xe0daebad6c9bad76
mov qword [rsp + 0x48], rdx
movabs rdx, 0x51817070b090d19
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd08050d13040501
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb170d08050d1304
mov qword [rsp + 0x26], rdx
movabs rdx, 0x907161900191411
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4a634b
movzx r9d, byte [rsp + rsi + 0x36]
sub r9d, edx
lea edx, [r9 - 0x23]
mov byte [rsp + rdi + 0x36], dl
lea edx, [r8 - 0x23]
mov byte [rsp + rsi + 0x36], dl
add rax, 2
cmp rax, 0x1a
jge 0x4a6378
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4a639b
movzx r8d, byte [rsp + rdi + 0x36]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4a632e
jmp 0x4a638f
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451880
mov eax, edi
mov ecx, 0x1a
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004a62a0

Function at 0x4a7c60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7d5d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xf8aac80d5b0f7566
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x5f7fd827419b811
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1651fa8196dc66c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc11030e0d070c03
mov qword [rsp + 0x34], rdx
movabs rdx, 0x91314040f06090e
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x4020f1309131404
mov qword [rsp + 0x40], rdx
movabs rdx, 0x17170805110a150e
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a7d00
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x7d]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x7d]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4a7d2d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4a7d50
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x18
jb 0x4a7cdf
jmp 0x4a7d44
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004a7c60
Function at 0x4a8520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a861d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x806e776d7d67507c
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x639d8ca993806e77
mov qword [rsp + 0x22], rdx
movabs rdx, 0x65807f6188779f6f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x10081301030e0a0a
mov qword [rsp + 0x32], rdx
movabs rdx, 0x50b0a0e060f030a
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x130904040700050b
mov qword [rsp + 0x40], rdx
movabs rdx, 0x512131002120e03
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a85c0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 + 0xa]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 + 0xa]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1e
jge 0x4a85ed
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a8610
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x15
jb 0x4a859f
jmp 0x4a8604
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451880
mov eax, edi
mov ecx, 0x15
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004a8520

Function at 0x4a9c80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9d7d
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x76974c8c384276f
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x1dc4c9146eca6e07
mov qword [rsp + 0x24], rdx
movabs rdx, 0x86657424696cdec3
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4111113070b0b11
mov qword [rsp + 0x34], rdx
movabs rdx, 0x107010203160e09
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x9030b0f01070102
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40d07100c020e09
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a9d20
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x40]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x40]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4a9d4d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x17
jae 0x4a9d70
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x17
jb 0x4a9cff
jmp 0x4a9d64
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x17
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x17
call fcn.00451880
mov eax, edi
mov ecx, 0x17
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004a9c80
Function at 0x4ac180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac288
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x5109386543636f39
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x5a5f6ff6203d5c43
mov qword [rsp + 0x23], rdx
movabs rdx, 0x465a5f6ff6203d5c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x3c656f5b45707075
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc15050014091807
mov qword [rsp + 0x34], rdx
movabs rdx, 0xf0505100a0a0615
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x70308090f050510
mov qword [rsp + 0x40], rdx
movabs rdx, 0x9000f15160f0e07
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ac22b
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x32]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x32]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x1c
jge 0x4ac258
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4ac27b
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x19
jb 0x4ac20e
jmp 0x4ac26f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x19
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00451880
mov eax, edi
mov ecx, 0x19
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ac180

Function at 0x4af180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af246
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x5c878f846c648b8d
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0x6c
movabs rdx, 0x506040400010607
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x600
xor eax, eax
nop
jmp 0x4af1e0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x1c]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4af212
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4af237
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x1c]
cmp rsi, 9
jb 0x4af1c2
jmp 0x4af22b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00451880
mov eax, edi
mov ecx, 9
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004af180
Function at 0x4afcc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4afdbb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x179e17659ab6c243
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x74ed6f025c2e179e
mov qword [rsp + 0x22], rdx
movabs rdx, 0x572a69539e6e69a0
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x309010e11140c11
mov qword [rsp + 0x32], rdx
movabs rdx, 0x14060a110502030e
mov qword [rsp + 0x3a], rdx
movabs rdx, 0xe05080601141406
mov qword [rsp + 0x40], rdx
movabs rdx, 0x70a11070c090607
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4afd59
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x46]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4afd8b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4afdae
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x46]
cmp rsi, 0x16
jb 0x4afd3f
jmp 0x4afda2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004afcc0

Function at 0x4b14c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b159d
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xaff30bcfe1672ff8
mov qword [rsp + 0x19], rdx
movabs rdx, 0xd378169b65aff30b
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x5070400030609
mov qword [rsp + 0x26], rdx
movabs rdx, 0x604000507040003
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa07010406090c07
mov qword [rsp + 0x30], rdx
xor eax, eax
nop
jmp 0x4b1540
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x52]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x52]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4b156d
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4b1590
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4b1522
jmp 0x4b1584
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b14c0
Function at 0x4b1d60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1e5b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xc1c9bcc57472f6c1
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x639b6097ba72659f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x94eab56a439f74ac
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x160d0004171407
mov qword [rsp + 0x32], rdx
movabs rdx, 0xb160c07070c0115
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x406050c040b16
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1510120e08160c15
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b1df9
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x6c]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4b1e2b
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4b1e4e
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x6c]
cmp rsi, 0x18
jb 0x4b1ddf
jmp 0x4b1e42
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x18
call fcn.00441380
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00451880
mov eax, edi
mov ecx, 0x18
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004b1d60

Function at 0x4b3f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b3fe6
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x1802007428656643
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xef79200cc7261db6
mov qword [rsp + 0x26], rdx
movabs rdx, 0xa080909010d0b03
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x60f0a080909010d
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50a070c070d0303
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4b3f80
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x44]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x12
jge 0x4b3fb2
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b3fd7
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x44]
cmp rsi, 0x10
jb 0x4b3f62
jmp 0x4b3fcb
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
nop
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b3f00
Function at 0x4b4000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b40fb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5612387455242c43
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6547561238745524
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x3c19256943fe1326
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc0c0207100c0809
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf110b0307030610
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10a0f110b030703
mov qword [rsp + 0x38], rdx
movabs rdx, 0xd090c0110050301
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b4099
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 6]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4b40cb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b40ee
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 6]
cmp rsi, 0x12
jb 0x4b407f
jmp 0x4b40e2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004b4000

Function at 0x4b4860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b4926
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x9ac66598619077c3
mov qword [rsp + 0x1a], rdx
mov word [rsp + 0x22], 0xc58f
movabs rdx, 0x6040702080902
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x40601
xor eax, eax
jmp 0x4b48c0
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x36]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xc
jge 0x4b48f2
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4b4917
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x36]
cmp rsi, 0xa
jb 0x4b48a3
jmp 0x4b490b
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0xa
nop
call fcn.00441380
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451880
mov eax, edi
mov ecx, 0xa
nop
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b4860
Function at 0x4b5a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5b12
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x757887f56496da05
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x8777e869d9757887
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0c020005070207
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0701040808070b
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b5aac
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x63]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x10
jge 0x4b5ade
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4b5b05
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x63]
cmp rsi, 0xd
jb 0x4b5a92
jmp 0x4b5af5
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
nop dword [rax]
call fcn.00451880
mov eax, edi
mov ecx, 0xd
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b5a40

Function at 0x4b5b20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5bec
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb36946879b909ca5
mov qword [rsp + 0x28], rdx
movabs rdx, 0x7968e6666759565
mov qword [rsp + 0x30], rdx
movabs rdx, 0x409010e040d0f09
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3020f0002040207
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4b5b8f
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x17]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x17]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x4b5bbc
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4b5bdf
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
cmp rsi, 0x10
jb 0x4b5b72
jmp 0x4b5bd3
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451880
mov eax, edi
mov ecx, 0x10
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b5b20
Function at 0x4b6900
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b69fd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x9553b2754374cd14
mov qword [rsp + 0x18], rdx
movabs rdx, 0x3233126e9553b275
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xcf1e7406380eb725
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1107051307051001
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x70006000d120f09
mov qword [rsp + 0x34], rdx
movabs rdx, 0xa12070e07000600
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc05100b09000909
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b69a0
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x70]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x70]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1c
jge 0x4b69cd
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4b69f0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x14
jb 0x4b697f
jmp 0x4b69e4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
nop dword [rax]
call fcn.0044f600
jmp fcn.004b6900

Function at 0x4b6cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b6dac
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0xc6ed627586d9557c
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xec74f0c6ed627586
mov qword [rsp + 0x22], rdx
movabs rdx, 0x64e24f07e7fcef87
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x711060d03020f0b
mov qword [rsp + 0x32], rdx
movabs rdx, 0x2000210010e0711
mov qword [rsp + 0x38], rdx
movabs rdx, 0x80c0e0a0a050f02
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b6d4a
movzx r9d, byte [rsp + rsi + 0x1f]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x67]
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b6d7c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b6d9f
movzx r8d, byte [rsp + rdi + 0x1f]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x67]
cmp rsi, 0x13
jb 0x4b6d30
jmp 0x4b6d93
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451880
mov eax, edi
mov ecx, 0x13
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b6cc0
Function at 0x4b7380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b746a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x43ded949696cb547
mov qword [rsp + 0x18], rdx
movabs rdx, 0xe94c43ded949696c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x734b655fe3f7d8c3
mov qword [rsp + 0x22], rdx
movabs rdx, 0xc10020e10020d04
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x301080306060c10
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0908020b0a0505
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b740d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x62]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x62]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0x16
jge 0x4b743a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4b745d
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x12
jb 0x4b73f0
jmp 0x4b7451
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x12
call fcn.00441380
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00451880
mov eax, edi
mov ecx, 0x12
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b7380

Function at 0x4b7480
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b757b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x41a9dfe4e9be4747
mov qword [rsp + 0x18], rdx
movabs rdx, 0xee72617441a9dfe4
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x38d142af4574d6de
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0b12010f120c13
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x120d030904061310
mov qword [rsp + 0x34], rdx
movabs rdx, 0x2031311120d0309
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc110513100c0405
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b7519
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x75]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4b754b
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x14
jae 0x4b756e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x75]
cmp rsi, 0x14
jb 0x4b74ff
jmp 0x4b7562
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x14
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x14
call fcn.00451880
mov eax, edi
mov ecx, 0x14
call fcn.00451880
nop
nop dword [rax + rax]
call fcn.0044f600
jmp fcn.004b7480
Function at 0x4b9140
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b922c
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x5a4f4c9f54743d47
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4a30f7316e4d5a4f
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6e4a1e7461074afe
mov qword [rsp + 0x40], rdx
movabs rdx, 0x60404130a0d1405
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x80f100b130c0604
mov qword [rsp + 0x22], rdx
movabs rdx, 0x110010c0b0d0e0d
mov qword [rsp + 0x2a], rdx
xor eax, eax
jmp 0x4b91ca
movzx r9d, byte [rsp + rsi + 0x32]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x12]
mov byte [rsp + rdi + 0x32], dl
mov byte [rsp + rsi + 0x32], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b91fc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4b921f
movzx r8d, byte [rsp + rdi + 0x32]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x12]
cmp rsi, 0x16
jb 0x4b91b0
jmp 0x4b9213
xor eax, eax
lea rbx, [rsp + 0x32]
mov ecx, 0x16
call fcn.00441380
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451880
mov eax, edi
mov ecx, 0x16
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004b9140

Function at 0x4ba240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba30c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xffa56f9000b08d06
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0xf4796c6f
movabs rdx, 0x4030a0301020406
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xb02000607010403
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ba2a5
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x58]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4ba2dc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xc
jae 0x4ba2ff
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x58]
cmp rsi, 0xc
jb 0x4ba28b
jmp 0x4ba2f3
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.00441380
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xc
call fcn.00451880
mov eax, edi
mov ecx, 0xc
call fcn.00451880
nop
call fcn.0044f600
jmp fcn.004ba240