joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a1b80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a1c52
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0x53d37dcf20646134
mov qword [rsp + 0x19], rdx
movabs rdx, 0x24da1353d37dcf20
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x400060a050900
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x80a00
xor eax, eax
jmp 0x4a1beb
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x3d
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4a1c1c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4a1c45
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x3d
add r8d, edx
cmp rsi, 0xb
jb 0x4a1bd1
jmp 0x4a1c37
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 0xb
nop
call fcn.00457420
mov eax, edi
mov ecx, 0xb
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004a1b80

Function at 0x4a1f40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a2028
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x517550e61dda2ee5
mov qword [rsp + 0x19], rdx
movabs rdx, 0xe113a820fd517550
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb07050b03040204
mov qword [rsp + 0x26], rdx
movabs rdx, 0x50c0b07050b0304
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa040303000b0008
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4a1fc1
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0x7d
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x12
jge 0x4a1ff2
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4a201b
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0x7d
add r8d, edx
cmp rsi, 0xd
jb 0x4a1fa7
jmp 0x4a200f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xd
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xd
call fcn.00457420
mov eax, edi
mov ecx, 0xd
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004a1f40
Function at 0x4a2de0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a2ed6
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x200b171f006b083d
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x23200b171f006b08
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa6e690a19115dbe
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10b1003090a0c09
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x5040908010b1003
mov qword [rsp + 0x30], rdx
movabs rdx, 0xd0a0a0c0608000c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a2e70
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x4d
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x14
jge 0x4a2ea2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a2ec9
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x4d
add r8d, edx
cmp rsi, 0x11
jb 0x4a2e56
nop
jmp 0x4a2ebd
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457420
mov eax, edi
mov ecx, 0x11
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.004a2de0
Function at 0x4a4f20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a5016
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x2e98628a6c66a19b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7061562e98628a6c
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x8686696c53897d7b
mov qword [rsp + 0x24], rdx
movabs rdx, 0x60d050601001211
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x120c0c05060d0506
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0a0101041205
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a4fb0
movzx r9d, byte [rsp + rsi + 0x19]
add r9d, 0xffffffda
add edx, r9d
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x14
jge 0x4a4fe2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a5009
movzx r8d, byte [rsp + rdi + 0x19]
add r8d, 0xffffffda
add r8d, edx
cmp rsi, 0x13
jb 0x4a4f96
nop
jmp 0x4a4ffd
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457420
mov eax, edi
mov ecx, 0x13
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.004a4f20
Function at 0x4a7220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7328
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
movabs rdx, 0x2e744604fbfd6502
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2ef8b4a861562e74
mov qword [rsp + 0x20], rdx
movabs rdx, 0x749936b1b5fc8cb7
mov qword [rsp + 0x28], rdx
movabs rdx, 0x120f040e0e130c05
mov qword [rsp + 0x30], rdx
movabs rdx, 0x1103041214100c10
mov qword [rsp + 0x38], rdx
movabs rdx, 0xe110c0a100e0211
mov qword [rsp + 0x40], rdx
movabs rdx, 0x40014110b050400
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a72c2
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x29]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x29]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x20
jge 0x4a72ef
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a731b
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x16
jb 0x4a72a5
jmp 0x4a730f
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x16
nop dword [rax + rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov eax, esi
mov ecx, 0x16
call fcn.00457420
mov eax, edi
mov ecx, 0x16
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004a7220

Function at 0x4a7740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7836
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x7a445c5d6f6d6572
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x65755e61567a445c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7665247769822a6c
mov qword [rsp + 0x28], rdx
movabs rdx, 0x1411070303040f07
mov qword [rsp + 0x30], rdx
movabs rdx, 0x14140a0402121207
mov qword [rsp + 0x38], rdx
movabs rdx, 0x5020e0d1114060d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a77d0
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0xffffffed
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a7802
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4a7829
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0xffffffed
add r8d, edx
cmp rsi, 0x15
jb 0x4a77b6
nop
jmp 0x4a781d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457420
mov eax, edi
mov ecx, 0x15
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.004a7740
Function at 0x4a8600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8752
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0x5872f77bb570efb1
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1ce63f074e165af
mov qword [rsp + 0x27], rdx
movabs rdx, 0xc901ce63f074e165
mov qword [rsp + 0x28], rdx
movabs rdx, 0x4febde0bc1ed1465
mov qword [rsp + 0x30], rdx
movabs rdx, 0x20f56574e0fd6168
mov qword [rsp + 0x38], rdx
movabs rdx, 0x8b95f061f2757413
mov qword [rsp + 0x40], rdx
movabs rdx, 0x82323080c281407
mov qword [rsp + 0x48], rdx
movabs rdx, 0x270517180708000e
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1c12100017140a1f
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1c17041701102315
mov qword [rsp + 0x60], rdx
movabs rdx, 0xe082624051b2117
mov qword [rsp + 0x68], rdx
movabs rdx, 0x150c1308040f1603
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4a86ed
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 - 0x58]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 - 0x58]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x30
jge 0x4a871a
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x29
jae 0x4a8745
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x29
jb 0x4a86d0
jmp 0x4a8735
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x29
call fcn.004446e0
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x29
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0x29
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004a8600

Function at 0x4a8d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8e33
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movabs rdx, 0x846262744c70223e
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x5f492b63763f6f68
mov qword [rsp + 0x22], rdx
movabs rdx, 0x7741452b646b5f49
mov qword [rsp + 0x28], rdx
movabs rdx, 0x344c653d2b65726f
mov qword [rsp + 0x30], rdx
movabs rdx, 0xf070d1419120a07
mov qword [rsp + 0x38], rdx
movabs rdx, 0x1a0006090b0f0805
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd13080e1010151c
mov qword [rsp + 0x48], rdx
movabs rdx, 0x107150e14031d0e
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a8dce
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0xffffffe8
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x20
jge 0x4a8dff
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1e
jae 0x4a8e26
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0xffffffe8
add r8d, edx
cmp rsi, 0x1e
jb 0x4a8db4
jmp 0x4a8e1a
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1e
call fcn.004446e0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov eax, esi
mov ecx, 0x1e
call fcn.00457420
mov eax, edi
mov ecx, 0x1e
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004a8d20
Function at 0x4a9920
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9a16
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x3dc5b4656c666572
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xf8c0563dc5b4656c
mov qword [rsp + 0x20], rdx
movabs rdx, 0x6cba41aede82936e
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0511100609060b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x110c0d100f090709
mov qword [rsp + 0x38], rdx
movabs rdx, 0xc0f07110e070505
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a99b0
movzx r9d, byte [rsp + rsi + 0x1d]
add r9d, 0xffffffa3
add edx, r9d
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x18
jge 0x4a99e2
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4a9a09
movzx r8d, byte [rsp + rdi + 0x1d]
add r8d, 0xffffffa3
add r8d, edx
cmp rsi, 0x13
jb 0x4a9996
nop
jmp 0x4a99fd
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x13
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x13
call fcn.00457420
mov eax, edi
mov ecx, 0x13
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.004a9920

Function at 0x4a9a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9b36
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0xef7417652b2f6572
mov qword [rsp + 0x19], rdx
movabs rdx, 0x4cef7417652b2f65
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x745b0b3a59e86cea
mov qword [rsp + 0x22], rdx
movabs rdx, 0x709090b030e0e07
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x5080e0205050709
mov qword [rsp + 0x30], rdx
movabs rdx, 0x90c0b0f0b0d030c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a9ad3
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x30]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x30]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x4a9b02
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4a9b29
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x4a9ab6
nop
jmp 0x4a9b1d
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457420
mov eax, edi
mov ecx, 0x11
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.004a9a40
Function at 0x4ac300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac448
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
movabs rdx, 0x5e74632a6c544154
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x65560061345e7463
mov qword [rsp + 0x24], rdx
movabs rdx, 0x44320164746c422b
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x4a62422d0c1b204c
mov qword [rsp + 0x34], rdx
movabs rdx, 0xe62025163320614b
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x120411131e002414
mov qword [rsp + 0x44], rdx
movabs rdx, 0x50b150712231c08
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x17071514050b1507
mov qword [rsp + 0x50], rdx
movabs rdx, 0x12113181c020f0b
mov qword [rsp + 0x58], rdx
movabs rdx, 0xa0801200a0d2211
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1904121d0d04151a
mov qword [rsp + 0x68], rdx
xor eax, eax
nop
jmp 0x4ac3e0
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xfffffff1
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x2c
jge 0x4ac411
movzx edx, byte [rsp + rax + 0x44]
movzx esi, byte [rsp + rax + 0x45]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x25
jae 0x4ac43b
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xfffffff1
add r8d, edx
cmp rsi, 0x25
jb 0x4ac3c2
jmp 0x4ac42f
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x25
nop dword [rax]
call fcn.004446e0
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov eax, esi
mov ecx, 0x25
call fcn.00457420
mov eax, edi
mov ecx, 0x25
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004ac300
Function at 0x4ad5e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad6a8
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movabs rdx, 0xeba480f2eabf8372
mov qword [rsp + 0x1b], rdx
mov byte [rsp + 0x23], 0x7e
movabs rdx, 0x101050406080108
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x2070304
xor eax, eax
jmp 0x4ad641
movzx r9d, byte [rsp + rsi + 0x1b]
add r9d, 0x6c
add edx, r9d
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
cmp rax, 0xc
jge 0x4ad672
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4ad69b
movzx r8d, byte [rsp + rdi + 0x1b]
add r8d, 0x6c
add r8d, edx
cmp rsi, 9
jb 0x4ad627
jmp 0x4ad68f
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 9
nop
call fcn.004446e0
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov eax, esi
mov ecx, 9
call fcn.00457420
mov eax, edi
mov ecx, 9
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004ad5e0

Function at 0x4ad6c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ad812
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0xc9206703d671a08a
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x7462489b6541cea1
mov qword [rsp + 0x24], rdx
movabs rdx, 0xf16e337e7462489b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x2067d9e4a402f412
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa4720770cfd1d2a0
mov qword [rsp + 0x38], rdx
movabs rdx, 0x646c4dc3660d6409
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1f1e0a09171f2300
mov qword [rsp + 0x48], rdx
movabs rdx, 0xd18291607032808
mov qword [rsp + 0x50], rdx
movabs rdx, 0x19111102181d1808
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1c0c2114091e1301
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1904260224101910
mov qword [rsp + 0x68], rdx
movabs rdx, 0x1323281c16150016
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4ad7ad
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 - 0x52]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 - 0x52]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
cmp rax, 0x30
jge 0x4ad7da
movzx edx, byte [rsp + rax + 0x48]
movzx esi, byte [rsp + rax + 0x49]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2c
jae 0x4ad805
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x2c
jb 0x4ad790
jmp 0x4ad7f5
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x2c
call fcn.004446e0
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x2c
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0x2c
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004ad6c0
Function at 0x4b1000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b10d2
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0x4a4c4a7415545b73
mov qword [rsp + 0x1e], rdx
mov dword [rsp + 0x26], 0x5b4b4850
movabs rdx, 0x60908080a030305
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x102030b08070609
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b106b
movzx r9d, byte [rsp + rsi + 0x1e]
add r9d, 5
add edx, r9d
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xe
jge 0x4b109c
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xc
jae 0x4b10c5
movzx r8d, byte [rsp + rdi + 0x1e]
add r8d, 5
add r8d, edx
cmp rsi, 0xc
jb 0x4b1051
jmp 0x4b10b7
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xc
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xc
nop
call fcn.00457420
mov eax, edi
mov ecx, 0xc
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004b1000
Function at 0x4b9e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b9f76
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
movabs rdx, 0x669be24b95bd7375
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20d365c969669be2
mov qword [rsp + 0x20], rdx
movabs rdx, 0xf0e7dbded9d345e4
mov qword [rsp + 0x28], rdx
movabs rdx, 0xe0f0d110313090b
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40f040d0f051210
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60404040214040d
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4b9f13
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x63]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x63]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x18
jge 0x4b9f42
movzx edx, byte [rsp + rax + 0x30]
movzx esi, byte [rsp + rax + 0x31]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4b9f69
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x15
jb 0x4b9ef6
nop
jmp 0x4b9f5d
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x15
call fcn.004446e0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, esi
mov ecx, 0x15
call fcn.00457420
mov eax, edi
mov ecx, 0x15
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.004b9e80

Function at 0x4ba3a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ba47c
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
movabs rdx, 0xc137bc35d8d8cdcc
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xced16fc137bc35d8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x206010a06060402
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x905000703090206
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ba412
movzx r9d, byte [rsp + rsi + 0x1f]
add r9d, 0xffffff8f
add edx, r9d
mov byte [rsp + rdi + 0x1f], dl
mov byte [rsp + rsi + 0x1f], r8b
add rax, 2
cmp rax, 0xe
jge 0x4ba448
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ba46f
movzx r8d, byte [rsp + rdi + 0x1f]
add r8d, 0xffffff8f
add r8d, edx
nop dword [rax + rax]
cmp rsi, 0xb
jb 0x4ba3f8
jmp 0x4ba463
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.004446e0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov eax, esi
mov ecx, 0xb
call fcn.00457420
mov eax, edi
mov ecx, 0xb
call fcn.00457420
nop
nop dword [rax]
call fcn.00454dc0
jmp fcn.004ba3a0
Function at 0x4bb620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bb716
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
movabs rdx, 0x464f686274656570
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6f464f6862746565
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x6465485d5348205d
mov qword [rsp + 0x24], rdx
movabs rdx, 0x7060d0c0e0c0b09
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x605050907060d0c
mov qword [rsp + 0x30], rdx
movabs rdx, 0x30d04070b05020c
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4bb6b3
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 + 0x1a]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x14
jge 0x4bb6e2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4bb709
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x11
jb 0x4bb696
nop
jmp 0x4bb6fd
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x11
call fcn.004446e0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov eax, esi
mov ecx, 0x11
call fcn.00457420
mov eax, edi
mov ecx, 0x11
call fcn.00457420
nop
call fcn.00454dc0
nop dword [rax + rax]
jmp fcn.004bb620

Function at 0x4bbca0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4bbdf2
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movabs rdx, 0xea733247e5dee45c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xd1c079bffb6dd766
mov qword [rsp + 0x22], rdx
movabs rdx, 0xe43b0b759cfa746f
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x208af42064a42175
mov qword [rsp + 0x32], rdx
movabs rdx, 0x4fd0ac6fc46fb5d2
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x1520120712160421
mov qword [rsp + 0x42], rdx
movabs rdx, 0x270516181e211520
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc19260f2309161d
mov qword [rsp + 0x50], rdx
movabs rdx, 0x1d1817050b010403
mov qword [rsp + 0x58], rdx
movabs rdx, 0x2112020219180002
mov qword [rsp + 0x60], rdx
movabs rdx, 0x2118011203272112
mov qword [rsp + 0x68], rdx
movabs rdx, 0xc200e011a211325
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4bbd8a
movzx r9d, byte [rsp + rsi + 0x1a]
add r9d, 0x63
add edx, r9d
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x36
jge 0x4bbdbb
movzx edx, byte [rsp + rax + 0x42]
movzx esi, byte [rsp + rax + 0x43]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x28
jae 0x4bbde5
movzx r8d, byte [rsp + rdi + 0x1a]
add r8d, 0x63
add r8d, edx
cmp rsi, 0x28
jb 0x4bbd70
jmp 0x4bbdd6
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x28
call fcn.004446e0
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, esi
mov ecx, 0x28
nop dword [rax]
call fcn.00457420
mov eax, edi
mov ecx, 0x28
call fcn.00457420
nop
call fcn.00454dc0
jmp fcn.004bbca0