joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49b7e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b8fd
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x65be21ce0ec94fad
mov qword [rsp + 0x1d], rdx
movabs rdx, 0xb86d2eb7876564e4
mov qword [rsp + 0x25], rdx
movabs rdx, 0xbfb86d2eb7876564
mov qword [rsp + 0x26], rdx
movabs rdx, 0xd830642745076120
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd14150501150300
mov qword [rsp + 0x36], rdx
movabs rdx, 0x100b0d1415050115
mov qword [rsp + 0x38], rdx
movabs rdx, 0x2180506080e1013
mov qword [rsp + 0x40], rdx
movabs rdx, 0x17100f0c0414170e
mov qword [rsp + 0x48], rdx
movabs rdx, 0xe0e01150d130010
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x49b8a0
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x3b]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x3b]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x22
jge 0x49b8cd
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x49b8f0
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x49b87d
jmp 0x49b8e4
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00440c20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00450f00
mov eax, edi
mov ecx, 0x19
call fcn.00450f00
nop
nop dword [rax]
call fcn.0044ec80
jmp fcn.0049b7e0

Function at 0x49d380
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d488
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xda69ead5dde7c6d3
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x6644e7a46fdf2099
mov qword [rsp + 0x25], rdx
movabs rdx, 0x3f6644e7a46fdf20
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf073d872e55acd70
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x121601040313000e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x214100c10160007
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xa0f0214100c1016
mov qword [rsp + 0x40], rdx
movabs rdx, 0xd0805030a181616
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x49d42b
movzx r9d, byte [rsp + rsi + 0x1d]
sub r9d, edx
lea edx, [r9 - 0x5c]
mov byte [rsp + rdi + 0x1d], dl
lea edx, [r8 - 0x5c]
mov byte [rsp + rsi + 0x1d], dl
add rax, 2
cmp rax, 0x1a
jge 0x49d458
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x49d47b
movzx r8d, byte [rsp + rdi + 0x1d]
sub r8d, edx
cmp rsi, 0x19
jb 0x49d40e
jmp 0x49d46f
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x19
call fcn.00440c20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00450f00
mov eax, edi
mov ecx, 0x19
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.0049d380
Function at 0x49d7a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49d86c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x2013690dc9766e69
mov qword [rsp + 0x28], rdx
movabs rdx, 0x370e3b392e3c0161
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0a0406090c0403
mov qword [rsp + 0x18], rdx
movabs rdx, 0x40f0d060c030e0f
mov qword [rsp + 0x20], rdx
xor eax, eax
jmp 0x49d80f
movzx r9d, byte [rsp + rsi + 0x28]
sub r9d, edx
lea edx, [r9 + 0x40]
mov byte [rsp + rdi + 0x28], dl
lea edx, [r8 + 0x40]
mov byte [rsp + rsi + 0x28], dl
add rax, 2
cmp rax, 0x10
jge 0x49d83c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x49d85f
movzx r8d, byte [rsp + rdi + 0x28]
sub r8d, edx
cmp rsi, 0x10
jb 0x49d7f2
jmp 0x49d853
xor eax, eax
lea rbx, [rsp + 0x28]
mov ecx, 0x10
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00450f00
mov eax, edi
mov ecx, 0x10
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.0049d7a0
Function at 0x49f4c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49f60c
push rbp
mov rbp, rsp
sub rsp, 0x70
movabs rdx, 0x6e307a7365021c61
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x20439a456e307a73
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x65a1fec8865c1b63
mov qword [rsp + 0x26], rdx
movabs rdx, 0xeb0fe2b6839171f
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xb2dfab72a6fd2320
mov qword [rsp + 0x36], rdx
movabs rdx, 0x15210e22110a2202
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x100815210e22110a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x161a22061e1a1e05
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1f01061f0a181615
mov qword [rsp + 0x50], rdx
movabs rdx, 0xd14121414081e19
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1d05230905060f1e
mov qword [rsp + 0x60], rdx
movabs rdx, 0x91e23191b02160d
mov qword [rsp + 0x68], rdx
xor eax, eax
jmp 0x49f5a4
movzx r9d, byte [rsp + rsi + 0x1a]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x10]
mov byte [rsp + rdi + 0x1a], dl
mov byte [rsp + rsi + 0x1a], r8b
add rax, 2
cmp rax, 0x32
jge 0x49f5dc
movzx edx, byte [rsp + rax + 0x3e]
movzx esi, byte [rsp + rax + 0x3f]
mov edi, edx
xor edx, esi
add edx, eax
nop word [rax + rax]
cmp rdi, 0x24
jae 0x49f5ff
movzx r8d, byte [rsp + rdi + 0x1a]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x10]
cmp rsi, 0x24
jb 0x49f58a
jmp 0x49f5f3
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x24
call fcn.00440c20
add rsp, 0x70
pop rbp
ret
mov eax, esi
mov ecx, 0x24
call fcn.00450f00
mov eax, edi
mov ecx, 0x24
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.0049f4c0

Function at 0x4a0280
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a03a7
push rbp
mov rbp, rsp
sub rsp, 0x68
movabs rdx, 0x50d8c87025ca782e
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x20f1d3df14a5c067
mov qword [rsp + 0x23], rdx
movabs rdx, 0x2a9082b412c11420
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x64d621b1acb6726f
mov qword [rsp + 0x32], rdx
movabs rdx, 0x121907190e0a0913
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x41514101b1a0b16
mov qword [rsp + 0x42], rdx
movabs rdx, 0x121c080c14120415
mov qword [rsp + 0x48], rdx
movabs rdx, 0x411051d0b1c1911
mov qword [rsp + 0x50], rdx
movabs rdx, 0x612040111080a03
mov qword [rsp + 0x58], rdx
movabs rdx, 0xd0a0102160b1016
mov qword [rsp + 0x60], rdx
xor eax, eax
jmp 0x4a0349
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x31]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x31]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x2e
jge 0x4a0377
movzx edx, byte [rsp + rax + 0x3a]
movzx esi, byte [rsp + rax + 0x3b]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1f
jae 0x4a039a
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0x1f
jb 0x4a032c
jmp 0x4a038e
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0x1f
call fcn.00440c20
add rsp, 0x68
pop rbp
ret
mov eax, esi
mov ecx, 0x1f
call fcn.00450f00
mov eax, edi
mov ecx, 0x1f
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004a0280
Function at 0x4a1300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a13ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xeb6fa09797bfb6ee
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x9f20eb6fa09797bf
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x64d17470b76574cb
mov qword [rsp + 0x24], rdx
movabs rdx, 0x10310040d00070d
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd020701031004
mov qword [rsp + 0x30], rdx
movabs rdx, 0x4070009090a0305
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4a138d
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x1a]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x1a]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x14
jge 0x4a13ba
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x12
jae 0x4a13dd
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x12
jb 0x4a1370
jmp 0x4a13d1
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x12
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x12
call fcn.00450f00
mov eax, edi
mov ecx, 0x12
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004a1300

Function at 0x4a1840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a1926
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xdf6bf617db74d0e3
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x6e77346450a5e1df
mov qword [rsp + 0x22], rdx
movabs rdx, 0xa03090c050a0007
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x503010c03080a03
mov qword [rsp + 0x30], rdx
movabs rdx, 0x40c000108040103
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4a18c0
movzx r9d, byte [rsp + rsi + 0x1b]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x36]
mov byte [rsp + rdi + 0x1b], dl
mov byte [rsp + rsi + 0x1b], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x16
jge 0x4a18f2
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4a1917
movzx r8d, byte [rsp + rdi + 0x1b]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x36]
cmp rsi, 0xf
jb 0x4a18a2
jmp 0x4a190b
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xf
nop
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00450f00
mov eax, edi
mov ecx, 0xf
nop
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004a1840
Function at 0x4a26e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a27e8
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0xaa0a2b53f120432c
mov qword [rsp + 0x1a], rdx
movabs rdx, 0xaab32174d87543df
mov qword [rsp + 0x22], rdx
movabs rdx, 0x6134aab32174d875
mov qword [rsp + 0x24], rdx
movabs rdx, 0x655a62d56c69ddc0
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xd00050d09130910
mov qword [rsp + 0x34], rdx
movabs rdx, 0x18061216070b0f05
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd0b010318061216
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1061810080d0e03
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a278b
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 - 0x4f]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 - 0x4f]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
cmp rax, 0x1c
jge 0x4a27b8
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4a27db
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4a276e
jmp 0x4a27cf
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00440c20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00450f00
mov eax, edi
mov ecx, 0x1a
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004a26e0

Function at 0x4a58e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a59e8
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0xb7683375732a31ec
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x6fe3650f2b76e864
mov qword [rsp + 0x27], rdx
movabs rdx, 0x726fe3650f2b76e8
mov qword [rsp + 0x28], rdx
movabs rdx, 0x3b7993e232640674
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70e17011207110e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb07150c120e09
mov qword [rsp + 0x40], rdx
movabs rdx, 0x2090e160b011601
mov qword [rsp + 0x48], rdx
movabs rdx, 0xc120c0b05141518
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4a598b
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x5c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x5c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x20
jge 0x4a59b8
movzx edx, byte [rsp + rax + 0x38]
movzx esi, byte [rsp + rax + 0x39]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x19
jae 0x4a59db
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x19
jb 0x4a596e
jmp 0x4a59cf
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x19
call fcn.00440c20
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x19
call fcn.00450f00
mov eax, edi
mov ecx, 0x19
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004a58e0
Function at 0x4a75c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a769d
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x42203101586a625d
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1b49386d057247df
mov qword [rsp + 0x24], rdx
movabs rdx, 0x30e0f0708090f06
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x905060d030e0f07
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb090d0004060506
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4a7640
movzx r9d, byte [rsp + rsi + 0x1c]
sub r9d, edx
lea edx, [r9 + 0x2f]
mov byte [rsp + rdi + 0x1c], dl
lea edx, [r8 + 0x2f]
mov byte [rsp + rsi + 0x1c], dl
add rax, 2
nop
cmp rax, 0x14
jge 0x4a766d
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4a7690
movzx r8d, byte [rsp + rdi + 0x1c]
sub r8d, edx
cmp rsi, 0x10
jb 0x4a7622
jmp 0x4a7684
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x10
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00450f00
mov eax, edi
mov ecx, 0x10
call fcn.00450f00
nop
nop dword [rax]
call fcn.0044ec80
jmp fcn.004a75c0

Function at 0x4a86e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a87ac
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xb72a9e757320ad6e
mov qword [rsp + 0x19], rdx
movabs rdx, 0x3d9df6a2f77270b7
mov qword [rsp + 0x20], rdx
movabs rdx, 0xa0e0c0b060a0d05
mov qword [rsp + 0x28], rdx
movabs rdx, 0x10b0e06060a070d
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4a874f
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x32]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x32]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4a877c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4a879f
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4a8732
jmp 0x4a8793
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00450f00
mov eax, edi
mov ecx, 0xf
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004a86e0
Function at 0x4ab6e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab7a6
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6cec2e6ce3e6ebf7
mov qword [rsp + 0x1d], rdx
mov byte [rsp + 0x25], 0xed
movabs rdx, 0x602080106080803
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 1
xor eax, eax
nop
jmp 0x4ab740
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x74]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
nop dword [rax]
cmp rax, 0xa
jge 0x4ab772
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 9
jae 0x4ab797
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x74]
cmp rsi, 9
jb 0x4ab722
jmp 0x4ab78b
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 9
nop
call fcn.00440c20
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 9
call fcn.00450f00
mov eax, edi
mov ecx, 9
nop
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004ab6e0

Function at 0x4ab7c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ab892
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x1759277735637158
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x206c711759277735
mov qword [rsp + 0x20], rdx
movabs rdx, 0x70a060804040308
mov qword [rsp + 0x28], rdx
movabs rdx, 0xa0105070a060100
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4ab82c
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx - 7]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x10
jge 0x4ab85e
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4ab885
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 7]
cmp rsi, 0xb
jb 0x4ab812
jmp 0x4ab875
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0xb
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
nop dword [rax]
call fcn.00450f00
mov eax, edi
mov ecx, 0xb
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004ab7c0
Function at 0x4ac220
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ac31b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x53ed5e4471606f05
mov qword [rsp + 0x18], rdx
movabs rdx, 0x53e3b9f4727453ed
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x2a2d58cdd4dce6da
mov qword [rsp + 0x26], rdx
movabs rdx, 0x20a140e00030b15
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xa11051504060013
mov qword [rsp + 0x36], rdx
movabs rdx, 0x15050a1105150406
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb0006100e120c0f
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ac2b9
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4ac2eb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ac30e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6c]
cmp rsi, 0x16
jb 0x4ac29f
jmp 0x4ac302
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.00440c20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00450f00
mov eax, edi
mov ecx, 0x16
call fcn.00450f00
nop
nop dword [rax + rax]
call fcn.0044ec80
jmp fcn.004ac220

Function at 0x4acc00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4accea
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6e476b6f513f5747
mov qword [rsp + 0x1f], rdx
movabs rdx, 0x1e39c16e476b6f51
mov qword [rsp + 0x22], rdx
movabs rdx, 0xae4d5174526d3310
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x609090b0b12080b
mov qword [rsp + 0x32], rdx
movabs rdx, 0xc03120a060a0609
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110106100a06020e
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4acc8d
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x3c]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x3c]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0x16
jge 0x4accba
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4accdd
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0x13
jb 0x4acc70
jmp 0x4accd1
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0x13
call fcn.00440c20
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00450f00
mov eax, edi
mov ecx, 0x13
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004acc00
Function at 0x4acd00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4acdec
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x15411e756bdac8d7
mov qword [rsp + 0x1d], rdx
movabs rdx, 0x2215411e756bdac8
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xf42469f0576e039c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x80c01000f090208
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x800080c01000f09
mov qword [rsp + 0x30], rdx
movabs rdx, 0x70a0f100d000105
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4acd8a
movzx r9d, byte [rsp + rsi + 0x1d]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x43]
mov byte [rsp + rdi + 0x1d], dl
mov byte [rsp + rsi + 0x1d], r8b
add rax, 2
cmp rax, 0x12
jge 0x4acdbc
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4acddf
movzx r8d, byte [rsp + rdi + 0x1d]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x43]
cmp rsi, 0x11
jb 0x4acd70
jmp 0x4acdd3
xor eax, eax
lea rbx, [rsp + 0x1d]
mov ecx, 0x11
call fcn.00440c20
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00450f00
mov eax, edi
mov ecx, 0x11
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004acd00

Function at 0x4ae620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ae72c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x6d8e6e4579868475
mov qword [rsp + 0x19], rdx
movabs rdx, 0x82697b918c556571
mov qword [rsp + 0x21], rdx
movabs rdx, 0x70745b82697b918c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x656c6f748148496c
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1201060203160c0b
mov qword [rsp + 0x34], rdx
movabs rdx, 0x160a190c0f0d000a
mov qword [rsp + 0x3c], rdx
movabs rdx, 0xd151812160a190c
mov qword [rsp + 0x40], rdx
movabs rdx, 0x151913061016080d
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ae6c8
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x24]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4ae6fc
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1b
jae 0x4ae71f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x24]
cmp rsi, 0x1b
jb 0x4ae6ae
jmp 0x4ae713
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1b
call fcn.00440c20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1b
call fcn.00450f00
mov eax, edi
mov ecx, 0x1b
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004ae620
Function at 0x4ae740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ae83b
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x1aaed319a5a76543
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6369dabb7401ae4a
mov qword [rsp + 0x26], rdx
movabs rdx, 0xc069b968b503b0ba
mov qword [rsp + 0x2e], rdx
movabs rdx, 0xd0a100708020d05
mov qword [rsp + 0x36], rdx
movabs rdx, 0x12100c1104030a02
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x170312100c110403
mov qword [rsp + 0x40], rdx
movabs rdx, 0x609100d0a131502
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4ae7d9
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x70]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4ae80b
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x18
jae 0x4ae82e
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x70]
cmp rsi, 0x18
jb 0x4ae7bf
jmp 0x4ae822
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x18
call fcn.00440c20
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x18
call fcn.00450f00
mov eax, edi
mov ecx, 0x18
call fcn.00450f00
nop
nop dword [rax + rax]
call fcn.0044ec80
jmp fcn.004ae740

Function at 0x4af240
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af30c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x7467b8767574a190
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8466a1497372bc74
mov qword [rsp + 0x20], rdx
movabs rdx, 0xc0e03080c030503
mov qword [rsp + 0x28], rdx
movabs rdx, 0x104000601030401
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4af2af
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0xe]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0xe]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x10
jge 0x4af2dc
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xf
jae 0x4af2ff
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0xf
jb 0x4af292
jmp 0x4af2f3
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xf
call fcn.00440c20
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xf
call fcn.00450f00
mov eax, edi
mov ecx, 0xf
call fcn.00450f00
nop
call fcn.0044ec80
jmp fcn.004af240