joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a5680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a578c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x25847287828da68c
mov qword [rsp + 0x18], rdx
movabs rdx, 0x767e6e207978911e
mov qword [rsp + 0x20], rdx
movabs rdx, 0x7669767e6e207978
mov qword [rsp + 0x22], rdx
movabs rdx, 0x656c767090936573
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x90314150a040100
mov qword [rsp + 0x32], rdx
movabs rdx, 0x100a0f1112061609
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x11170e000202100a
mov qword [rsp + 0x40], rdx
movabs rdx, 0x1104011308070810
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4a5728
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x2c]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4a575c
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4a577f
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x2c]
cmp rsi, 0x1a
jb 0x4a570e
jmp 0x4a5773
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x1a
call fcn.00441400
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451920
mov eax, edi
mov ecx, 0x1a
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004a5680

Function at 0x4a6180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a62ac
push rbp
mov rbp, rsp
sub rsp, 0x60
movabs rdx, 0x2065b2f66873f79b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x6f492d6f7b207369
mov qword [rsp + 0x21], rdx
movabs rdx, 0x767a4b886e6f492d
mov qword [rsp + 0x26], rdx
movabs rdx, 0x6b886f748fc279a8
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x517050104051816
mov qword [rsp + 0x36], rdx
movabs rdx, 0x15150e0e19010501
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x150d15150e0e1901
mov qword [rsp + 0x40], rdx
movabs rdx, 0x121b12170b041300
mov qword [rsp + 0x48], rdx
movabs rdx, 0x1300171102161113
mov qword [rsp + 0x50], rdx
movabs rdx, 0x170606181419141b
mov qword [rsp + 0x58], rdx
xor eax, eax
jmp 0x4a6246
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x2a
jge 0x4a627c
movzx edx, byte [rsp + rax + 0x36]
movzx esi, byte [rsp + rax + 0x37]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0x1d
jae 0x4a629f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x1d
jb 0x4a622c
jmp 0x4a6293
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x1d
call fcn.00441400
add rsp, 0x60
pop rbp
ret
mov eax, esi
mov ecx, 0x1d
call fcn.00451920
mov eax, edi
mov ecx, 0x1d
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004a6180
Function at 0x4a63c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a64bd
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6ca263ab74b5aa12
mov qword [rsp + 0x18], rdx
movabs rdx, 0x61c9746f6e176ca2
mov qword [rsp + 0x1e], rdx
movabs rdx, 0xb798b8aca0d71da4
mov qword [rsp + 0x26], rdx
movabs rdx, 0x130e10060f110200
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1402080c06121411
mov qword [rsp + 0x36], rdx
movabs rdx, 0x14041402080c0612
mov qword [rsp + 0x38], rdx
movabs rdx, 0x800080c08000115
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4a6460
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x1f]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x1f]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
nop dword [rax]
cmp rax, 0x1a
jge 0x4a648d
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4a64b0
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0x16
jb 0x4a643f
jmp 0x4a64a4
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.00441400
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451920
mov eax, edi
mov ecx, 0x16
call fcn.00451920
nop
nop dword [rax]
call fcn.0044f6a0
jmp fcn.004a63c0

Function at 0x4a8620
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a872c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x7434e145656d876e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x776571714f6e75d2
mov qword [rsp + 0x3e], rdx
movabs rdx, 0xb088776571714f6e
mov qword [rsp + 0x40], rdx
movabs rdx, 0x85726f7774958420
mov qword [rsp + 0x48], rdx
movabs rdx, 0x51008040b130505
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1901011113040f14
mov qword [rsp + 0x24], rdx
movabs rdx, 0x1013190101111304
mov qword [rsp + 0x26], rdx
movabs rdx, 0xf06100d01131901
mov qword [rsp + 0x2e], rdx
xor eax, eax
jmp 0x4a86c8
movzx r9d, byte [rsp + rsi + 0x36]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x35]
mov byte [rsp + rdi + 0x36], dl
mov byte [rsp + rsi + 0x36], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4a86fc
movzx edx, byte [rsp + rax + 0x1c]
movzx esi, byte [rsp + rax + 0x1d]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1a
jae 0x4a871f
movzx r8d, byte [rsp + rdi + 0x36]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x35]
cmp rsi, 0x1a
jb 0x4a86ae
jmp 0x4a8713
xor eax, eax
lea rbx, [rsp + 0x36]
mov ecx, 0x1a
call fcn.00441400
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451920
mov eax, edi
mov ecx, 0x1a
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004a8620
Function at 0x4a90a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a9167
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x4cce95a113047716
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x6465
movabs rdx, 0x304040006020507
mov qword [rsp + 0x22], rdx
movabs rdx, 0x602030404060304
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4a9107
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 - 0x2a]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 - 0x2a]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4a9137
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4a915a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4a90ea
jmp 0x4a914e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441400
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451920
mov eax, edi
mov ecx, 0xa
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004a90a0
Function at 0x4aa800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aa8fb
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x8ab75ba3be96bb9f
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x94b79993b4648ab7
mov qword [rsp + 0x22], rdx
movabs rdx, 0x64a0676e618f8620
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x30006140b090a01
mov qword [rsp + 0x32], rdx
movabs rdx, 0x50f0b140014020c
mov qword [rsp + 0x3a], rdx
movabs rdx, 0x20d10100d04050f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x140a07000d0a060f
mov qword [rsp + 0x48], rdx
xor eax, eax
jmp 0x4aa899
movzx r9d, byte [rsp + rsi + 0x1c]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x39]
mov byte [rsp + rdi + 0x1c], dl
mov byte [rsp + rsi + 0x1c], r8b
add rax, 2
cmp rax, 0x1e
jge 0x4aa8cb
movzx edx, byte [rsp + rax + 0x32]
movzx esi, byte [rsp + rax + 0x33]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4aa8ee
movzx r8d, byte [rsp + rdi + 0x1c]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x39]
cmp rsi, 0x16
jb 0x4aa87f
jmp 0x4aa8e2
xor eax, eax
lea rbx, [rsp + 0x1c]
mov ecx, 0x16
call fcn.00441400
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451920
mov eax, edi
mov ecx, 0x16
call fcn.00451920
nop
nop dword [rax + rax]
call fcn.0044f6a0
jmp fcn.004aa800

Function at 0x4aac00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aacdd
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0xe0afb7e36fea6572
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x72c8e77265c899c3
mov qword [rsp + 0x26], rdx
movabs rdx, 0x507070d070e080e
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x5050507070d070e
mov qword [rsp + 0x30], rdx
movabs rdx, 0xa09050606080402
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4aac80
movzx r9d, byte [rsp + rsi + 0x1e]
sub r9d, edx
lea edx, [r9 - 0x66]
mov byte [rsp + rdi + 0x1e], dl
lea edx, [r8 - 0x66]
mov byte [rsp + rsi + 0x1e], dl
add rax, 2
nop
cmp rax, 0x12
jge 0x4aacad
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x10
jae 0x4aacd0
movzx r8d, byte [rsp + rdi + 0x1e]
sub r8d, edx
cmp rsi, 0x10
jb 0x4aac62
jmp 0x4aacc4
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0x10
call fcn.00441400
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x10
call fcn.00451920
mov eax, edi
mov ecx, 0x10
call fcn.00451920
nop
nop dword [rax]
call fcn.0044f6a0
jmp fcn.004aac00
Function at 0x4aad00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aadfb
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x6cb76f14c1119d9a
mov qword [rsp + 0x19], rdx
movabs rdx, 0x21003f20436cb76f
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x6d0ff573790339c5
mov qword [rsp + 0x26], rdx
movabs rdx, 0x8130a020c0c0403
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x130f0e001313020f
mov qword [rsp + 0x36], rdx
movabs rdx, 0x10e130f0e001313
mov qword [rsp + 0x38], rdx
movabs rdx, 0x60e040d0400120b
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4aad99
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x49]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4aadcb
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x15
jae 0x4aadee
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x49]
cmp rsi, 0x15
jb 0x4aad7f
jmp 0x4aade2
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x15
call fcn.00441400
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x15
call fcn.00451920
mov eax, edi
mov ecx, 0x15
call fcn.00451920
nop
nop dword [rax + rax]
call fcn.0044f6a0
jmp fcn.004aad00

Function at 0x4aae20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4aaf78
push rbp
mov rbp, rsp
sub rsp, 0x78
movabs rdx, 0x2488f1db6e6ea58b
mov qword [rsp + 0x19], rdx
movabs rdx, 0x8b888c7b82646e59
mov qword [rsp + 0x21], rdx
movabs rdx, 0x617cb577718b888c
mov qword [rsp + 0x26], rdx
movabs rdx, 0x972071bbbe747390
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x20fd98699342846e
mov qword [rsp + 0x36], rdx
movabs rdx, 0x6ebd896434a77189
mov qword [rsp + 0x3e], rdx
movabs rdx, 0x1a15250e20262806
mov qword [rsp + 0x46], rdx
movabs rdx, 0x7111a15250e2026
mov qword [rsp + 0x48], rdx
movabs rdx, 0x272b08081a0b0d20
mov qword [rsp + 0x50], rdx
movabs rdx, 0x50c1e19260f1826
mov qword [rsp + 0x58], rdx
movabs rdx, 0x1317150c2a1c10
mov qword [rsp + 0x60], rdx
movabs rdx, 0x1f0b1e2b191a0410
mov qword [rsp + 0x68], rdx
movabs rdx, 0x2a10220127122312
mov qword [rsp + 0x70], rdx
xor eax, eax
jmp 0x4aaf16
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 + 0x1a]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 + 0x1a]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x32
jge 0x4aaf48
movzx edx, byte [rsp + rax + 0x46]
movzx esi, byte [rsp + rax + 0x47]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x2d
jae 0x4aaf6b
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
nop dword [rax + rax]
cmp rsi, 0x2d
jb 0x4aaef9
jmp 0x4aaf5f
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x2d
call fcn.00441400
add rsp, 0x78
pop rbp
ret
mov eax, esi
mov ecx, 0x2d
call fcn.00451920
mov eax, edi
mov ecx, 0x2d
call fcn.00451920
nop
call fcn.0044f6a0
nop dword [rax]
jmp fcn.004aae20
Function at 0x4adda0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ade9b
push rbp
mov rbp, rsp
sub rsp, 0x48
movabs rdx, 0x53ceb765aac60f43
mov qword [rsp + 0x18], rdx
movabs rdx, 0x72a4c07a9eab53ce
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7a649bf8676ea191
mov qword [rsp + 0x26], rdx
movabs rdx, 0xe0c0c01130b0506
mov qword [rsp + 0x2e], rdx
movabs rdx, 0x1305020e080d0d12
mov qword [rsp + 0x36], rdx
movabs rdx, 0x8091305020e080d
mov qword [rsp + 0x38], rdx
movabs rdx, 0x110a0f0e15090303
mov qword [rsp + 0x40], rdx
xor eax, eax
jmp 0x4ade39
movzx r9d, byte [rsp + rsi + 0x18]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x46]
mov byte [rsp + rdi + 0x18], dl
mov byte [rsp + rsi + 0x18], r8b
add rax, 2
cmp rax, 0x1a
jge 0x4ade6b
movzx edx, byte [rsp + rax + 0x2e]
movzx esi, byte [rsp + rax + 0x2f]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x16
jae 0x4ade8e
movzx r8d, byte [rsp + rdi + 0x18]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x46]
cmp rsi, 0x16
jb 0x4ade1f
jmp 0x4ade82
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0x16
call fcn.00441400
add rsp, 0x48
pop rbp
ret
mov eax, esi
mov ecx, 0x16
call fcn.00451920
mov eax, edi
mov ecx, 0x16
call fcn.00451920
nop
nop dword [rax + rax]
call fcn.0044f6a0
jmp fcn.004adda0

Function at 0x4ae540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4ae626
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x767f5674706b7b5a
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x7273793a614b767f
mov qword [rsp + 0x24], rdx
movabs rdx, 0xb0a0a0108000706
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x1020c0c0b0a0a01
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50b020b0c010b0d
mov qword [rsp + 0x38], rdx
xor eax, eax
nop
jmp 0x4ae5c0
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x12]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
nop dword [rax]
cmp rax, 0x14
jge 0x4ae5f2
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xe
jae 0x4ae617
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x12]
cmp rsi, 0xe
jb 0x4ae5a2
jmp 0x4ae60b
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 0xe
nop
call fcn.00441400
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0xe
call fcn.00451920
mov eax, edi
mov ecx, 0xe
nop
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004ae540
Function at 0x4af080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af16a
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x4111db75faf6064c
mov qword [rsp + 0x19], rdx
movabs rdx, 0xf64111db75faf606
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2d6493f8fafdddf8
mov qword [rsp + 0x22], rdx
movabs rdx, 0x8070c0b0d050c01
mov qword [rsp + 0x2a], rdx
movabs rdx, 0x302091010080807
mov qword [rsp + 0x30], rdx
movabs rdx, 0xb0e0a060e0e0b08
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4af10d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x7e]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x7e]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x16
jge 0x4af13a
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x11
jae 0x4af15d
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x11
jb 0x4af0f0
jmp 0x4af151
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x11
call fcn.00441400
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x11
call fcn.00451920
mov eax, edi
mov ecx, 0x11
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004af080

Function at 0x4af360
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4af42c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0xde736f6cd3674f2f
mov qword [rsp + 0x1f], rdx
movabs rdx, 0xddac02de736f6cd3
mov qword [rsp + 0x22], rdx
movabs rdx, 0x80a000309000a07
mov qword [rsp + 0x2a], rdx
movabs rdx, 0xa010a070300080a
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4af3cf
movzx r9d, byte [rsp + rsi + 0x1f]
sub r9d, edx
lea edx, [r9 + 0x41]
mov byte [rsp + rdi + 0x1f], dl
lea edx, [r8 + 0x41]
mov byte [rsp + rsi + 0x1f], dl
add rax, 2
cmp rax, 0xe
jge 0x4af3fc
movzx edx, byte [rsp + rax + 0x2a]
movzx esi, byte [rsp + rax + 0x2b]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xb
jae 0x4af41f
movzx r8d, byte [rsp + rdi + 0x1f]
sub r8d, edx
cmp rsi, 0xb
jb 0x4af3b2
jmp 0x4af413
xor eax, eax
lea rbx, [rsp + 0x1f]
mov ecx, 0xb
call fcn.00441400
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451920
mov eax, edi
mov ecx, 0xb
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004af360
Function at 0x4b0040
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b014c
push rbp
mov rbp, rsp
sub rsp, 0x50
movabs rdx, 0x616c63434b722643
mov qword [rsp + 0x34], rdx
movabs rdx, 0x66373c5f65433a74
mov qword [rsp + 0x3c], rdx
movabs rdx, 0x14306a2d66373c5f
mov qword [rsp + 0x40], rdx
movabs rdx, 0x5147655b616f5365
mov qword [rsp + 0x48], rdx
movabs rdx, 0x91b12110501060c
mov qword [rsp + 0x18], rdx
movabs rdx, 0xd12050d13121817
mov qword [rsp + 0x20], rdx
movabs rdx, 0xd0e11150d12050d
mov qword [rsp + 0x24], rdx
movabs rdx, 0xd1b1a03050e1b10
mov qword [rsp + 0x2c], rdx
xor eax, eax
jmp 0x4b00e8
movzx r9d, byte [rsp + rsi + 0x34]
lea edx, [r9 + rdx]
lea edx, [rdx - 4]
mov byte [rsp + rdi + 0x34], dl
mov byte [rsp + rsi + 0x34], r8b
add rax, 2
cmp rax, 0x1c
jge 0x4b011c
movzx edx, byte [rsp + rax + 0x18]
movzx esi, byte [rsp + rax + 0x19]
mov edi, edx
xor edx, esi
add edx, eax
nop
cmp rdi, 0x1c
jae 0x4b013f
movzx r8d, byte [rsp + rdi + 0x34]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 4]
cmp rsi, 0x1c
jb 0x4b00ce
jmp 0x4b0133
xor eax, eax
lea rbx, [rsp + 0x34]
mov ecx, 0x1c
call fcn.00441400
add rsp, 0x50
pop rbp
ret
mov eax, esi
mov ecx, 0x1c
call fcn.00451920
mov eax, edi
mov ecx, 0x1c
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004b0040

Function at 0x4b0540
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b065d
push rbp
mov rbp, rsp
sub rsp, 0x58
movabs rdx, 0x3335eca674113f43
mov qword [rsp + 0x1a], rdx
movabs rdx, 0x2c4632fd04fd2f50
mov qword [rsp + 0x22], rdx
movabs rdx, 0x3bfb2c4632fd04fd
mov qword [rsp + 0x24], rdx
movabs rdx, 0x9b174235fe6f4065
mov qword [rsp + 0x2c], rdx
movabs rdx, 0xc05110e0c19040c
mov qword [rsp + 0x34], rdx
movabs rdx, 0x615060a0c05110e
mov qword [rsp + 0x38], rdx
movabs rdx, 0xb01060c13021817
mov qword [rsp + 0x40], rdx
movabs rdx, 0xf0f011010050d07
mov qword [rsp + 0x48], rdx
movabs rdx, 0x508171617091917
mov qword [rsp + 0x50], rdx
xor eax, eax
jmp 0x4b0600
movzx r9d, byte [rsp + rsi + 0x1a]
sub r9d, edx
lea edx, [r9 + 0x51]
mov byte [rsp + rdi + 0x1a], dl
lea edx, [r8 + 0x51]
mov byte [rsp + rsi + 0x1a], dl
add rax, 2
nop word [rax + rax]
cmp rax, 0x24
jge 0x4b062d
movzx edx, byte [rsp + rax + 0x34]
movzx esi, byte [rsp + rax + 0x35]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x1a
jae 0x4b0650
movzx r8d, byte [rsp + rdi + 0x1a]
sub r8d, edx
cmp rsi, 0x1a
jb 0x4b05dd
jmp 0x4b0644
xor eax, eax
lea rbx, [rsp + 0x1a]
mov ecx, 0x1a
call fcn.00441400
add rsp, 0x58
pop rbp
ret
mov eax, esi
mov ecx, 0x1a
call fcn.00451920
mov eax, edi
mov ecx, 0x1a
call fcn.00451920
nop
nop dword [rax]
call fcn.0044f6a0
jmp fcn.004b0540
Function at 0x4b0680
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b074c
push rbp
mov rbp, rsp
sub rsp, 0x38
movabs rdx, 0x6eb0c9cb4be44cda
mov qword [rsp + 0x1b], rdx
movabs rdx, 0x658f6fa1e66eb0c9
mov qword [rsp + 0x20], rdx
movabs rdx, 0x30004010903000b
mov qword [rsp + 0x28], rdx
movabs rdx, 0x403050800060209
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x4b06ef
movzx r9d, byte [rsp + rsi + 0x1b]
sub r9d, edx
lea edx, [r9 - 0x5d]
mov byte [rsp + rdi + 0x1b], dl
lea edx, [r8 - 0x5d]
mov byte [rsp + rsi + 0x1b], dl
add rax, 2
cmp rax, 0x10
jge 0x4b071c
movzx edx, byte [rsp + rax + 0x28]
movzx esi, byte [rsp + rax + 0x29]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0xd
jae 0x4b073f
movzx r8d, byte [rsp + rdi + 0x1b]
sub r8d, edx
cmp rsi, 0xd
jb 0x4b06d2
jmp 0x4b0733
xor eax, eax
lea rbx, [rsp + 0x1b]
mov ecx, 0xd
call fcn.00441400
add rsp, 0x38
pop rbp
ret
mov eax, esi
mov ecx, 0xd
call fcn.00451920
mov eax, edi
mov ecx, 0xd
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004b0680

Function at 0x4b1520
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b15d8
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6fe7f683d187cff1
mov qword [rsp + 0x1e], rdx
movabs rdx, 0x502030004040204
mov qword [rsp + 0x26], rdx
mov word [rsp + 0x2e], 0x601
xor eax, eax
jmp 0x4b1575
movzx r9d, byte [rsp + rsi + 0x1e]
lea edx, [r9 + rdx]
lea edx, [rdx + 0x6b]
mov byte [rsp + rdi + 0x1e], dl
mov byte [rsp + rsi + 0x1e], r8b
add rax, 2
cmp rax, 0xa
jge 0x4b15a8
movzx edx, byte [rsp + rax + 0x26]
movzx esi, byte [rsp + rax + 0x27]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 8
jae 0x4b15cb
movzx r8d, byte [rsp + rdi + 0x1e]
lea r8d, [r8 + rdx]
lea r8d, [r8 + 0x6b]
nop
cmp rsi, 8
jb 0x4b155b
jmp 0x4b15bf
xor eax, eax
lea rbx, [rsp + 0x1e]
mov ecx, 8
call fcn.00441400
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 8
call fcn.00451920
mov eax, edi
mov ecx, 8
call fcn.00451920
nop
call fcn.0044f6a0
nop dword [rax]
jmp fcn.004b1520

Function at 0x4b1ce0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b1dac
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x17c823a761c9bf43
mov qword [rsp + 0x19], rdx
movabs rdx, 0x1b659a17c823a761
mov qword [rsp + 0x1c], rdx
movabs rdx, 0xa07060802020506
mov qword [rsp + 0x24], rdx
mov dword [rsp + 0x2c], 0x7010a04
xor eax, eax
jmp 0x4b1d45
movzx r9d, byte [rsp + rsi + 0x19]
lea edx, [r9 + rdx]
lea edx, [rdx - 0x66]
mov byte [rsp + rdi + 0x19], dl
mov byte [rsp + rsi + 0x19], r8b
add rax, 2
cmp rax, 0xc
jge 0x4b1d7c
movzx edx, byte [rsp + rax + 0x24]
movzx esi, byte [rsp + rax + 0x25]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax + rax]
cmp rdi, 0xb
jae 0x4b1d9f
movzx r8d, byte [rsp + rdi + 0x19]
lea r8d, [r8 + rdx]
lea r8d, [r8 - 0x66]
cmp rsi, 0xb
jb 0x4b1d2b
jmp 0x4b1d93
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0xb
call fcn.00441400
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xb
call fcn.00451920
mov eax, edi
mov ecx, 0xb
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004b1ce0
Function at 0x4b24a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b2567
push rbp
mov rbp, rsp
sub rsp, 0x30
movabs rdx, 0x6943493e612a58ec
mov qword [rsp + 0x18], rdx
mov word [rsp + 0x20], 0x4440
movabs rdx, 0x104050202000806
mov qword [rsp + 0x22], rdx
movabs rdx, 0x609000508010104
mov qword [rsp + 0x28], rdx
xor eax, eax
jmp 0x4b2507
movzx r9d, byte [rsp + rsi + 0x18]
sub r9d, edx
lea edx, [r9 + 0x27]
mov byte [rsp + rdi + 0x18], dl
lea edx, [r8 + 0x27]
mov byte [rsp + rsi + 0x18], dl
add rax, 2
cmp rax, 0xe
jge 0x4b2537
movzx edx, byte [rsp + rax + 0x22]
movzx esi, byte [rsp + rax + 0x23]
mov edi, edx
xor edx, esi
add edx, eax
nop dword [rax]
cmp rdi, 0xa
jae 0x4b255a
movzx r8d, byte [rsp + rdi + 0x18]
sub r8d, edx
cmp rsi, 0xa
jb 0x4b24ea
jmp 0x4b254e
xor eax, eax
lea rbx, [rsp + 0x18]
mov ecx, 0xa
call fcn.00441400
add rsp, 0x30
pop rbp
ret
mov eax, esi
mov ecx, 0xa
call fcn.00451920
mov eax, edi
mov ecx, 0xa
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004b24a0

Function at 0x4b2800
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b28ea
push rbp
mov rbp, rsp
sub rsp, 0x40
movabs rdx, 0x953b1746165720f
mov qword [rsp + 0x19], rdx
movabs rdx, 0x7ccc50953b17461
mov qword [rsp + 0x1c], rdx
movabs rdx, 0x1bc63eb54cce696c
mov qword [rsp + 0x24], rdx
movabs rdx, 0x12050a0f00100807
mov qword [rsp + 0x2c], rdx
movabs rdx, 0x110d091012050a0f
mov qword [rsp + 0x30], rdx
movabs rdx, 0x50c0f08000c0c00
mov qword [rsp + 0x38], rdx
xor eax, eax
jmp 0x4b288d
movzx r9d, byte [rsp + rsi + 0x19]
sub r9d, edx
lea edx, [r9 - 0x3d]
mov byte [rsp + rdi + 0x19], dl
lea edx, [r8 - 0x3d]
mov byte [rsp + rsi + 0x19], dl
add rax, 2
cmp rax, 0x14
jge 0x4b28ba
movzx edx, byte [rsp + rax + 0x2c]
movzx esi, byte [rsp + rax + 0x2d]
mov edi, edx
xor edx, esi
add edx, eax
cmp rdi, 0x13
jae 0x4b28dd
movzx r8d, byte [rsp + rdi + 0x19]
sub r8d, edx
cmp rsi, 0x13
jb 0x4b2870
jmp 0x4b28d1
xor eax, eax
lea rbx, [rsp + 0x19]
mov ecx, 0x13
call fcn.00441400
add rsp, 0x40
pop rbp
ret
mov eax, esi
mov ecx, 0x13
call fcn.00451920
mov eax, edi
mov ecx, 0x13
call fcn.00451920
nop
call fcn.0044f6a0
jmp fcn.004b2800