joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49f500
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49f5d2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xdaf54f74eef19a60
mov qword [rsp + 0x1c], rdx
mov dword [rsp + 0x24], 0x7265e953
movabs rdx, 0x9070a0a08060600
mov qword [rsp + 0x28], rdx
movabs rdx, 0x6010a0a01050302
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x49f56b
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x78]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x10
jge 0x49f59d
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x49f5c5
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x78]
cmp rsi, 0xc
jb 0x49f551
jmp 0x49f5b8
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0xc
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00453440
mov eax, edi
mov ecx, 0xc
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.0049f500

Function at 0x4a3b40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a3c3c
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x7209fbb9e861aa74
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6ff2b661657209fb
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9ff6ec746bb5adb6
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x105120e06041301
mov qword [rsp + 0x32], rdx
movabs rdx, 0x114051003140105
mov qword [rsp + 0x38], rdx
movabs rdx, 0xa0f0f0b0d0e0404
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a3bd0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x5b]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4a3c08
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a3c2f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x5b]
nop word [rax + rax]
cmp rsi, 0x15
jb 0x4a3bb6
jmp 0x4a3c23
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453440
mov eax, edi
mov ecx, 0x15
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004a3b40
Function at 0x4a4580
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a464b
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x74e3dce158ea65d9
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x5de6
movabs rdx, 0x504080603080900
mov qword [rsp + 0x1c], rdx
mov word [rsp + 0x24], 0x200
xor eax, eax
jmp 0x4a45e5
movzx r9d, byte [rsp + rsi + 0x26]
sub r9d, edx
lea edx, [r9 - 0x6c]
mov byte [rsp + rdi + 0x26], dl
lea edx, [r8 - 0x6c]
mov byte [rsp + rsi + 0x26], dl
add rax, 2
cmp rax, 0xa
jge 0x4a4617
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xa
jae 0x4a463e
movzx r8d, byte [rsp + rdi + 0x26]
sub r8d, edx
cmp rsi, 0xa
jb 0x4a45c8
jmp 0x4a4632
xor eax, eax
lea rbx, [rsp + 0x26]
mov ecx, 0xa
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
call fcn.00453440
mov eax, edi
mov ecx, 0xa
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004a4580

Function at 0x4a51e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov qword [rsp + 0x38], 0
movabs rax, 0x8b31aa154652048a
mov qword [rsp + 0x18], rax
movabs rax, 0x9432b9ce0285cec
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf], 0
mov qword [rsp + 0x10], 0
movzx eax, byte [rsp + 0x19]
movzx ecx, byte [rsp + 0x18]
add eax, ecx
movzx ecx, byte [rsp + 0x23]
movzx edx, byte [rsp + 0x27]
movzx ebx, byte [rsp + 0x1f]
movzx esi, byte [rsp + 0x1c]
movzx edi, byte [rsp + 0x25]
movzx r8d, byte [rsp + 0x1b]
movzx r9d, byte [rsp + 0x22]
movzx r10d, byte [rsp + 0x24]
movzx r11d, byte [rsp + 0x1e]
movzx r12d, byte [rsp + 0x26]
movzx r13d, byte [rsp + 0x1d]
mov byte [rsp + 6], r13b
movzx r15d, byte [rsp + 0x21]
movzx r13d, byte [rsp + 0x20]
mov byte [rsp + 5], r13b
movzx r13d, byte [rsp + 0x1a]
mov byte [rsp + 0xf], al
xor ecx, edx
mov byte [rsp + 0x10], cl
sub ebx, esi
mov byte [rsp + 0x11], bl
sub edi, r8d
mov byte [rsp + 0x12], dil
sub r9d, r10d
mov byte [rsp + 0x13], r9b
lea eax, [r12 + r11]
mov byte [rsp + 0x14], al
movzx eax, byte [rsp + 6]
add eax, r15d
mov byte [rsp + 0x15], al
movzx eax, byte [rsp + 5]
add eax, r13d
mov byte [rsp + 0x16], al
mov qword [rsp + 7], 0
xor eax, eax
jmp 0x4a52e5
movzx ecx, byte [rsp + rax + 0xf]
mov byte [rsp + rax + 7], cl
inc rax
cmp rax, 8
jl 0x4a52d9
mov rax, qword [rsp + 7]
mov qword [rsp + 0x38], rax
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
Function at 0x4a8320
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8452
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x5fbb617782859b73
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x209e65a88b927fb6
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9bd1a69995966f80
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x7f91d392928a6e84
mov qword [rsp + 0x34], rdx
movabs rdx, 0x100e030b0b161803
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x6061d0701101e03
mov qword [rsp + 0x44], rdx
movabs rdx, 0x61a0b0906061d07
mov qword [rsp + 0x48], rdx
movabs rdx, 0x151f021006131d08
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1f14131a07071e0c
mov qword [rsp + 0x58], rdx
movabs rdx, 0x171d1b0a1c1e0712
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4a83ef
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 8]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 8]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x2c
jge 0x4a841c
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x20
jae 0x4a8445
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x20
jb 0x4a83d2
jmp 0x4a8437
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x20
call fcn.004418e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x20
nop
call fcn.00453440
mov eax, edi
mov ecx, 0x20
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004a8320

Function at 0x4a9de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9ebc
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x65512ba5e0a559f2
mov qword [rsp + 0x28], rdx
movabs rdx, 0x74a96f68de6fa720
mov qword [rsp + 0x30], rdx
movabs rdx, 0x10b02060903050e
mov qword [rsp + 0x18], rdx
movabs rdx, 0x9090e00000e0401
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x4a9e55
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x4a9e88
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4a9eaf
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
nop word [rax + rax]
cmp rsi, 0x10
jb 0x4a9e38
jmp 0x4a9ea3
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0x10
call fcn.00453440
mov eax, edi
mov ecx, 0x10
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004a9de0
Function at 0x4abba0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4abc8b
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xd4c9fa684d79656b
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x649972c47d7833d4
mov qword [rsp + 0x26], rdx
movabs rdx, 0x60d0a070a0a0308
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb0b060d0a070a0a
mov qword [rsp + 0x30], rdx
movabs rdx, 0x803070505080306
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4abc24
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x53]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x53]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x12
jge 0x4abc57
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xf
jae 0x4abc7e
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xf
jb 0x4abc07
jmp 0x4abc72
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xf
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0xf
call fcn.00453440
mov eax, edi
mov ecx, 0xf
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004abba0

Function at 0x4acda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ace8b
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xb500bbbacfabafb3
mov qword [rsp + 0x19], rdx
movabs rdx, 0xc0b8d3c172b500bb
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb0a010006060205
mov qword [rsp + 0x26], rdx
movabs rdx, 0x5050b0a01000606
mov qword [rsp + 0x28], rdx
movabs rdx, 0xb06030c01070904
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ace24
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x3e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x3e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x12
jge 0x4ace57
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0xd
jae 0x4ace7e
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xd
jb 0x4ace07
jmp 0x4ace72
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
call fcn.004418e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00453440
mov eax, edi
mov ecx, 0xd
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004acda0
Function at 0x4ad5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad728
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x34697308997b951d
mov qword [rsp + 0x18], rdx
movabs rdx, 0x6a70665e34697308
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x65601a75a6709663
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7e65677d919788a1
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4ca27b5f62699e89
mov qword [rsp + 0x34], rdx
movabs rdx, 0x17140d011b021d16
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x200a0422030f0718
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1041c19200a0422
mov qword [rsp + 0x48], rdx
movabs rdx, 0x10e12220f03221c
mov qword [rsp + 0x50], rdx
movabs rdx, 0x110b091817152121
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1b04191708230015
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x4ad6c0
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x36]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2c
jge 0x4ad6f2
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x24
jae 0x4ad71b
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x36]
cmp rsi, 0x24
jb 0x4ad6a2
jmp 0x4ad70f
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x24
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x24
call fcn.00453440
mov eax, edi
mov ecx, 0x24
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004ad5e0

Function at 0x4ae860
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ae95c
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x65c3e567e5d8e177
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xd065c3e567e5d8e1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xc8708c8bf26db88c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x90c0d020301050e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x909090c0d020301
mov qword [rsp + 0x30], rdx
movabs rdx, 0x80606090802100a
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4ae8f0
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x77]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x4ae928
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4ae94f
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x77]
nop word [rax + rax]
cmp rsi, 0x11
jb 0x4ae8d6
jmp 0x4ae943
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00453440
mov eax, edi
mov ecx, 0x11
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004ae860
Function at 0x4aef00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af008
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x229555e2db6cda99
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xd67a229555e2db6c
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xcc6538e56d72ced5
mov qword [rsp + 0x26], rdx
movabs rdx, 0x607000f05110c08
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xf0a0b0b0907070c
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6060f0a0b0b0907
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0301110e040a
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4aefa2
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x4e]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x4e]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x1a
jge 0x4aefcf
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4aeffb
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x12
jb 0x4aef85
jmp 0x4aefef
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x12
nop dword [rax + rax]
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x12
call fcn.00453440
mov eax, edi
mov ecx, 0x12
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004aef00

Function at 0x4af740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af886
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
movabs rdx, 0x535d8184773a6508
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7f7c64535d818477
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x904e638a6e746a70
mov qword [rsp + 0x24], rdx
movabs rdx, 0x93d16f6052633319
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x74a4736460677c9a
mov qword [rsp + 0x34], rdx
movabs rdx, 0x1f16120600071111
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x19121d131904060e
mov qword [rsp + 0x44], rdx
movabs rdx, 0x1e14160a19121d13
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd00061c0c0a171f
mov qword [rsp + 0x50], rdx
movabs rdx, 0x12041a090209211b
mov qword [rsp + 0x58], rdx
movabs rdx, 0xe120f1e120e0509
mov qword [rsp + 0x60], rdx
xor eax, eax
nop
jmp 0x4af820
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x21]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x21]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
nop
cmp rax, 0x2c
jge 0x4af84d
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x23
jae 0x4af874
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x23
jb 0x4af802
jmp 0x4af868
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x23
call fcn.004418e0
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov eax, esi
mov ecx, 0x23
call fcn.00453440
mov eax, edi
mov ecx, 0x23
nop dword [rax + rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004af740
Function at 0x4b1dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1ee8
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x2aa57f656da9bd6e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xc0c21f136f4a1fc5
mov qword [rsp + 0x22], rdx
movabs rdx, 0x50bbc0c21f136f4a
mov qword [rsp + 0x24], rdx
movabs rdx, 0x65707674094b659a
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc050e090d051714
mov qword [rsp + 0x34], rdx
movabs rdx, 0x80506060c050e09
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1215110710140e0f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x209060111120706
mov qword [rsp + 0x48], rdx
movabs rdx, 0x17100a1512070717
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b1e80
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x69]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x24
jge 0x4b1eb2
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4b1edb
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x69]
cmp rsi, 0x1a
jb 0x4b1e63
jmp 0x4b1ecf
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
nop
call fcn.004418e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00453440
mov eax, edi
mov ecx, 0x1a
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b1dc0

Function at 0x4b1f00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1ffc
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x20658fba80630fc4
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x7220826fb420658f
mov qword [rsp + 0x22], rdx
movabs rdx, 0x9f8d898261817b6e
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xf12040004010808
mov qword [rsp + 0x32], rdx
movabs rdx, 0x130c0e1114130f12
mov qword [rsp + 0x38], rdx
movabs rdx, 0x801030400040a05
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b1f90
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x38]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x16
jge 0x4b1fc8
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b1fef
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x38]
nop word [rax + rax]
cmp rsi, 0x15
jb 0x4b1f76
jmp 0x4b1fe3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x15
call fcn.004418e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00453440
mov eax, edi
mov ecx, 0x15
call fcn.00453440
nop
nop dword [rax]
call fcn.00450de0
jmp fcn.004b1f00
Function at 0x4b2020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b2128
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0xaf11266fcc667270
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xbcceb8d51920af11
mov qword [rsp + 0x20], rdx
movabs rdx, 0xb6dc061affd7ba6d
mov qword [rsp + 0x28], rdx
movabs rdx, 0x130b0f1205111507
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20c060c0d0b090e
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110a0e140c050d05
mov qword [rsp + 0x40], rdx
movabs rdx, 0xc060f05090c0310
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4b20c2
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x38]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x38]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x20
jge 0x4b20ef
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4b211b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4b20a5
jmp 0x4b210f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.004418e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00453440
mov eax, edi
mov ecx, 0x16
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b2020

Function at 0x4b3aa0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b3b96
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x806f7e546572693b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x92686f806f7e5465
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8e7582866574ad6f
mov qword [rsp + 0x24], rdx
movabs rdx, 0x8121005080c0f09
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1109110408121005
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90d0a070d000a12
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b3b33
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0xb]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0xb]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x4b3b62
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b3b89
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b3b16
nop
jmp 0x4b3b7d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.004418e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.00453440
mov eax, edi
mov ecx, 0x13
call fcn.00453440
nop
call fcn.00450de0
nop dword [rax + rax]
jmp fcn.004b3aa0
Function at 0x4b5be0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5cb2
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x878a8f3393a9986f
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0xb594
movabs rdx, 0x604070204050301
mov qword [rsp + 0x22], rdx
movabs rdx, 0x708030109030604
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4b5c4d
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x10]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x10]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4b5c7a
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xa
jae 0x4b5ca5
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4b5c30
jmp 0x4b5c95
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.004418e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xa
nop dword [rax]
call fcn.00453440
mov eax, edi
mov ecx, 0xa
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b5be0

Function at 0x4b5cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b5de6
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
movabs rdx, 0x909481706b6f7072
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x2099847e86776f20
mov qword [rsp + 0x27], rdx
movabs rdx, 0x7320749190209984
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x777f967c9470807c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x40307050e1b1c0c
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x160d150504030705
mov qword [rsp + 0x40], rdx
movabs rdx, 0x90c00011c0a0b1c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x15150618191a0509
mov qword [rsp + 0x50], rdx
movabs rdx, 0x111011101519071b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4b5d80
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x11]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x11]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x24
jge 0x4b5dad
movzx edx, byte [rsp + rax + 0x3c]
movzx esi, byte [rsp + rax + 0x3d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1d
jae 0x4b5dd4
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x1d
jb 0x4b5d63
jmp 0x4b5dc8
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x1d
call fcn.004418e0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00453440
mov eax, edi
mov ecx, 0x1d
nop dword [rax + rax]
call fcn.00453440
nop
call fcn.00450de0
jmp fcn.004b5cc0